diff --git a/.nojekyll b/.nojekyll
new file mode 100644
index 000000000..e69de29bb
diff --git a/phishing-filter-ag.txt b/phishing-filter-ag.txt
new file mode 100644
index 000000000..c1702883d
--- /dev/null
+++ b/phishing-filter-ag.txt
@@ -0,0 +1,462 @@
+! Title: Phishing URL Blocklist (AdGuard)
+! Updated: 2024-11-25T00:20:55Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||1111365dh.net$all
+||12931-coinbase.com$all
+||215323.com$all
+||260aesthetic.wixsite.com$all
+||3650947.cc$all
+||3659ll.net$all
+||83291-coinbase.com$all
+||94-103-188-123.plesk.page$all
+||9825057365.com$all
+||abctrvabc.com$all
+||access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com$all
+||acclimatizable.fun$all
+||account-update05.myvnc.com$all
+||accounts.google.auzen.us.kg$all
+||activebusiness-unlocker3.com$all
+||addwsrbh.green$all
+||ahnp.vercel.app$all
+||aldg.ldgknhk.lol$all
+||allegrolokalnie.pl-891241214.buzz$all
+||alturl.com/hpqhv$all
+||alutipcentra.pages.dev$all
+||ambil-pinjaman-daana-payleter.xforms.web.id$all
+||ambulatoriprivati.it$all
+||amev.ldgknhk.lol$all
+||antail-conv.com$all
+||apply-now-to-receive-badge.vercel.app$all
+||ardilu.com/descargar/kmsauto-net$all
+||artsea.pages.dev$all
+||atmailupdatewptnskmdinfomailacct.weebly.com$all
+||att-101072.weeblysite.com$all
+||att-1041page.weeblysite.com$all
+||att-105714.weeblysite.com$all
+||att-105819.square.site$all
+||att-inc-107097.weeblysite.com$all
+||att-login380.weeblysite.com$all
+||att-login522.weeblysite.com$all
+||att-service-102155.weeblysite.com$all
+||att-sign-in-105669.weeblysite.com$all
+||attcom-100762.weeblysite.com$all
+||attcom-106808.weeblysite.com$all
+||attmailservicenow.wixstudio.com$all
+||attmailservicenow.wixstudio.io$all
+||attmailsrvrdesk.weebly.com$all
+||attnewmaill.weebly.com$all
+||attyhhhhiiii225.weebly.com$all
+||atw-tau.vercel.app$all
+||authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com$all
+||authsyncs.pages.dev$all
+||autoreplyattmode.wixsite.com$all
+||avoid.hold-managert.com$all
+||azbin.ir$all
+||b45018.com$all
+||bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link$all
+||baiii-wong.cutvi.cfd$all
+||basvuru-online-yap.vercel.app$all
+||beionfidi.pages.dev$all
+||bet73nn.com$all
+||bet83039.com$all
+||bet83054.com$all
+||bfrescentremebermainsetreouytnoy.weebly.com$all
+||biggggggggggg.weebly.com$all
+||bitnode.pages.dev$all
+||bitvavobtc.com$all
+||blackhere11.serv00.net$all
+||blss24att.weebly.com$all
+||braucrarasuteu-2470.vercel.app$all
+||bt-102124.weeblysite.com$all
+||bt1business.weebly.com$all
+||btuan-dan2-resmi.top1.my.id$all
+||buildingdesignsusapdf.s3.us-east-005.backblazeb2.com$all
+||business-page-property-897432967.netlify.app$all
+||caipora.xyz$all
+||calm-pothos-3b24c9.netlify.app$all
+||carrefourarabiank15.pages.dev$all
+||caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com$all
+||catgirl-appverset-nya.pages.dev$all
+||catxtokens.pages.dev$all
+||chat.94-103-188-123.plesk.page$all
+||check154109.click$all
+||checkseven.vercel.app$all
+||ciente-a.org$all
+||cieplo.app$all
+||cj12143.tw1.ru$all
+||cj87335.tw1.ru$all
+||claimyourethrewards.pages.dev$all
+||clickbait.design$all
+||cnsa163.com$all
+||cock2-iota.vercel.app$all
+||cock3.vercel.app$all
+||cock7.vercel.app$all
+||contact-pro-8291-d01.firebaseapp.com$all
+||contact-pro-8291-d01.web.app$all
+||creosrl.com$all
+||curmmgdv.email$all
+||currently541.weebly.com$all
+||currently890.weebly.com$all
+||currentlyserver.weebly.com$all
+||dara3dccj.wixsite.com$all
+||db.service4db.com$all
+||de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev$all
+||debutcan.firebaseapp.com$all
+||debutcan.web.app$all
+||delivery.attempt.failure.ebbs.co.za$all
+||dev.stream.mornar.app$all
+||did.li/parcels$all
+||dnwqmh.click$all
+||dropsmartchain.pages.dev$all
+||dsjoting.group$all
+||dulb6c5p5.top$all
+||ebay-mallwholesale.com$all
+||ebt-lilac.vercel.app$all
+||echoredled.netlify.app$all
+||elbarco.percentadnp.info$all
+||eltritongourmet.com$all
+||email.mgb.modento.io$all
+||enjomugg.firebaseapp.com$all
+||enjomugg.web.app$all
+||error3456vhubhornbase.azurewebsites.net$all
+||example223.wixsite.com$all
+||eyeydhe.wixsite.com$all
+||eyttueiu.square.site$all
+||facebook-avip.click$all
+||fame.pink$all
+||fassehoizubra-7696.vercel.app$all
+||fastdropchain.pages.dev$all
+||fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io$all
+||fla-1001.square.site$all
+||flo4211.github.io$all
+||flow.page/servicesatttttmail$all
+||fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com$all
+||fnuttlie.wiki$all
+||fokeijonnekou.vercel.app$all
+||fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com$all
+||free-verified-badge-form0-service.vercel.app$all
+||free-verified-meta-badge-service.vercel.app$all
+||g06668706.wixsite.com$all
+||gccndbqg.vip$all
+||geriodememerkezi.online$all
+||get-checkmark-for-you.vercel.app$all
+||get-free-verified-badge-service-on.vercel.app$all
+||gitanag.broke-it.net$all
+||gruprocuroipra-6493.vercel.app$all
+||h5.b9en.com$all
+||h5.metacoint.com$all
+||hcghij.top$all
+||hdfcsky.com/sky/indian-stock/dashboard$all
+||hdfcsky.com/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!$all
+||hecregayatu-1014.vercel.app$all
+||hejmtxxt.guru$all
+||helenblunt6.wixsite.com$all
+||help.accountsupportcentre.com$all
+||here-apply-for-page-review.vercel.app$all
+||hgbk.ldgknhk.lol$all
+||hhideiie.wixsite.com$all
+||hitummoinneullei-5882.vercel.app$all
+||home-101067.weeblysite.com$all
+||home-103465.weeblysite.com$all
+||home-104341.weeblysite.com$all
+||home-105266.weeblysite.com$all
+||home-105929.weeblysite.com$all
+||homeattatthome.square.site$all
+||hpnefhqs.motorcycles$all
+||im25.net$all
+||info.supercitrus.ind.br$all
+||ins-business-home-center.com$all
+||instagaramgalochka.vercel.app$all
+||ipv6.43-135-137-110.cprapid.com$all
+||irmt0ken.win$all
+||is.gd/djgj07/$all
+||iujf7839iofvkbcu748.weebly.com$all
+||iwimwmiwi.click$all
+||jagej73796.wixsite.com$all
+||jfdjy.com$all
+||kalyani963.github.io$all
+||kexoigrufouddou-5902.vercel.app$all
+||kl1k-ds1ni.neupdile.my.id$all
+||kliind08.wixsite.com$all
+||kreelo098.weebly.com$all
+||kremlcup.com$all
+||kshitij12375.github.io$all
+||kucoinglobal1.com$all
+||kxbztydc.black$all
+||labanquepostale.jupiter-analytics.com$all
+||leddevotoze-3146.vercel.app$all
+||linnkdna-kget.wxxzsite.buzz$all
+||llahi.info$all
+||llahi.vip$all
+||loffaummuddote-4145.vercel.app$all
+||login-att-10221.square.site$all
+||login-form.world$all
+||login-online-outlook365.com$all
+||login-outlook-midstreamauth.com$all
+||login-screen-103134.weeblysite.com$all
+||loginaccount70.wixsite.com$all
+||loginaccount77.wixsite.com$all
+||luk6414.wixsite.com$all
+||luxlifemiamiblog.com$all
+||m.meta-accessibility.io.vn$all
+||madebybmr.fyi$all
+||maqpiexyz.click$all
+||mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev$all
+||mayfair313.wixsite.com$all
+||mdbrvlfy.black$all
+||mesageriepro33range1.weebly.com$all
+||metamsk-wallet-3.gitbook.io$all
+||metttaa-audddt-new-02.firebaseapp.com$all
+||metttaa-audddt-new-02.web.app$all
+||microsoft365-storage.github.io$all
+||mikepattyjm.wixsite.com$all
+||mobilemidasbuy.n3g.fun$all
+||monespacepro-client.3utilities.com$all
+||monetization-violation.github.io$all
+||moodengsol-net.pages.dev$all
+||mwsiekdnfjrdufs.weebly.com$all
+||mxmxnmx.mx.zya.me$all
+||national-au-b.com$all
+||national-au.net$all
+||nbaaiqjq.group$all
+||nexomyacwv.weebly.com$all
+||nft-time11.vercel.app$all
+||nichcheck.weeblysite.com$all
+||ns1.carrier-ast2-portal-apple.com$all
+||omadshf.ru$all
+||online-assist.live$all
+||online-promo-asb.org$all
+||openkimono.pro$all
+||opportunity-verified-status.vercel.app$all
+||ourtime.reconnect-dating.workers.dev$all
+||owouwuowo.click$all
+||p365kf.com$all
+||p4zv8crnrrha27so.94-103-188-123.plesk.page$all
+||page-center-manage.com$all
+||pavan-patil-22.github.io$all
+||pay.zing.vn/pubgm/$all
+||pecinternational.net$all
+||peesom.chat$all
+||pencairaanndannaa.my.id$all
+||petty.wiki$all
+||pimnhv.group$all
+||policies-business-page-service.com$all
+||pottatrebewe-2808.vercel.app$all
+||pqo.hrf.mybluehost.me$all
+||programming--service--panel-totlyy-free-for-you.vercel.app$all
+||promo1.spik.ru$all
+||protocolsecure.pages.dev$all
+||pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev$all
+||pub-1778406e4fec4394901793111c187dd9.r2.dev$all
+||pub-19b834342e7d465b9f00b3511325a081.r2.dev$all
+||pub-21dd4dc659614ceb93e45a6de4434502.r2.dev$all
+||pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev$all
+||pub-2fefe932a6974485b987c9ba851b5c40.r2.dev$all
+||pub-3a46d9914f494078a6d6237513e7a096.r2.dev$all
+||pub-442ed822851244a689b3472ea2c6a950.r2.dev$all
+||pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev$all
+||pub-682ad3b65d944376b919745aae3c56d4.r2.dev$all
+||pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev$all
+||pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev$all
+||pub-7f5cf36445d042168bfacd712e890dc0.r2.dev$all
+||pub-803839714a924882a7bcc2495a26860f.r2.dev$all
+||pub-8161de4a277e4ee8b532af34954224e1.r2.dev$all
+||pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev$all
+||pub-8376b5b2334844d193a525d8b8548fa5.r2.dev$all
+||pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev$all
+||pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev$all
+||pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev$all
+||pub-9163a97d70394cb499bdd232be6c2169.r2.dev$all
+||pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev$all
+||pub-98171471e0944ac3a5820ef719bf0640.r2.dev$all
+||pub-a263e0790935412eb10cacc55bbced18.r2.dev$all
+||pub-a291041b077742899b63a9982f04a56c.r2.dev$all
+||pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev$all
+||pub-b50adc5d699a4f08aec37102c2103da7.r2.dev$all
+||pub-c0a934c950e441db96b882789f53c9ea.r2.dev$all
+||pub-c2c250050109456396c933de259a4fea.r2.dev$all
+||pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev$all
+||pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev$all
+||pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev$all
+||pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev$all
+||pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev$all
+||pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev$all
+||pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev$all
+||pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev$all
+||pub-e42cb528b102447385e3145197916f51.r2.dev$all
+||pub-e4aff507450c478cbe3f77ad23d75035.r2.dev$all
+||pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev$all
+||pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev$all
+||pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev$all
+||pubgm.club$all
+||puffagroibrouwoi-8818.vercel.app$all
+||qasimk.com$all
+||qfjfvseq.info$all
+||quauwograssodda-3503.vercel.app$all
+||qysgyp.com$all
+||rajdipchatterjee.github.io$all
+||rb.gy/go4bnv/$all
+||rebrand.ly/18ab5a$all
+||rebrand.ly/4ff03b$all
+||rebrand.ly/8wtcv4z$all
+||rebrand.ly/96a02f$all
+||rebrand.ly/c0d1afz$all
+||rebrand.ly/d2f265$all
+||rebrand.ly/eacc63$all
+||rebrand.ly/f9decb$all
+||rebrand.ly/mzhpkzf$all
+||rebrand.ly/nbyh9vh$all
+||rebrand.ly/sa2uoq0$all
+||rebrand.ly/tcthi8d$all
+||rebrand.ly/tnab363c6$all
+||rebrand.ly/wx1eo7w$all
+||rechazaroanularaqui51.weebly.com$all
+||remote-fix.pages.dev$all
+||renggard.47-243-192-240.cprapid.com$all
+||resolvepanel.live$all
+||resolving--issue--with-us1.vercel.app$all
+||resqat.weebly.com$all
+||review-business-case.d2f7p3b7pucnle.amplifyapp.com$all
+||rlpqwefi.pink$all
+||rouloigeilleuja-9523.vercel.app$all
+||rulemec.pages.dev$all
+||rutinqqwin.shop$all
+||rwftfu.quest$all
+||s.team-pw.cc$all
+||sairanees.github.io$all
+||sanseipecas.com.br$all
+||sasklelo.weebly.com$all
+||sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com$all
+||sasktelcustomerwebly.weebly.com$all
+||sasktelnetwebmailservermaintainance.weebly.com$all
+||sasktelrectify.weebly.com$all
+||sasktelscrutinize.weebly.com$all
+||sasktelservicecentterwebly.weebly.com$all
+||sasktelsupportsystemwebly.weebly.com$all
+||sbcglobal30.wixsite.com$all
+||scan-vulnerability-guard-v3.pages.dev$all
+||scan-vulnerability-guard.pages.dev$all
+||scanner-metamask-v1.pages.dev$all
+||scanner-metamask-v2.pages.dev$all
+||scanner-metamask-v3.pages.dev$all
+||scanner-metamask.pages.dev$all
+||sec-sign-in.info$all
+||secure2-validitycheck.weebly.com$all
+||securecapitec.theprimepoint.online$all
+||securerpcfix.com$all
+||seeteressecalywoi.github.io$all
+||seivviice.weebly.com$all
+||server.0e7p.com$all
+||server.2rk3.com$all
+||server.8q3p.com$all
+||server.n6b8.com$all
+||server.v9vs.com$all
+||sevvviicess.weebly.com$all
+||shard.blue$all
+||shard.skin$all
+||shared-d7590.firebaseapp.com$all
+||shared-d7590.web.app$all
+||shaw-101329.weeblysite.com$all
+||shaw-101587.weeblysite.com$all
+||shaw-106427.weeblysite.com$all
+||shaw-107375.weeblysite.com$all
+||solutionwebsitedapp.firebaseapp.com$all
+||solutionwebsitedapp.web.app$all
+||solvetans.firebaseapp.com$all
+||solvetans.web.app$all
+||sondfrom.dexlog.my.id$all
+||soyokai.or.jp$all
+||srdate.club$all
+||ssy.hmb.mybluehostin.me$all
+||steam.poweredartsworkshop.com$all
+||steam.workshopsreview.com$all
+||steamcommmuty.com$all
+||steamcommuunity.ru$all
+||steamcomunutty.com$all
+||steamconmumity.com$all
+||stepsray.vercel.app$all
+||support-metahelpcenter-id100003498934.netlify.app$all
+||surl.li/tvybxr$all
+||sv5gardens655665.weeblysite.com$all
+||system-portalnu.duckdns.org$all
+||talwgam.njmolada.com$all
+||taste.baby$all
+||tele.zhngain.top$all
+||telegrambot-resolved.pages.dev$all
+||telegrazm.net$all
+||telstra-100408.weeblysite.com$all
+||telstra-100469.weeblysite.com$all
+||telstra-103234.weeblysite.com$all
+||tiktok-888.vip$all
+||tiltckshow.top$all
+||tinyurl.com/carrefour-926/$all
+||tnomwzrp.top$all
+||toeken.im$all
+||tonic.pink$all
+||tooma.cellinsurance.co.zw$all
+||tpdtepremu.xyz$all
+||trattujeilesso-3354.vercel.app$all
+||trbinace.com$all
+||treibrukeukonno-1395.vercel.app$all
+||tuesmad.firebaseapp.com$all
+||tuesmad.web.app$all
+||tyyyyyytyyy.weebly.com$all
+||tzcsjfto.chat$all
+||u.updatetrackgre.top$all
+||uc-whatstapp-web.com$all
+||udxcady.wixsite.com$all
+||uklifejv.cyou$all
+||updatemail12.wixsite.com$all
+||ups-trackdeliveryapps.chickenkiller.com$all
+||urlz.fr/t8vi$all
+||urlz.fr/t9ka$all
+||urlz.fr/talr$all
+||usbest.cyou$all
+||user-transaction-overview.vercel.app$all
+||usps.com-trackdck.top$all
+||usps.com-tracklnv.top$all
+||usps.com-trackmcl.top$all
+||usps.com-trackmec.top$all
+||usps.com-tracktpq.top$all
+||usps.com-trackvmd.top$all
+||uspsinfw.top$all
+||uwdtsczi.top$all
+||uwm-onedrive.com$all
+||vaishnavi1436.github.io$all
+||validatie-veiligauthenticatie.com$all
+||vbbu.ldgknhk.lol$all
+||verified-this-request-badge.vercel.app$all
+||vo4zzp.icu$all
+||vs41.github.io$all
+||walett-cont.gitbook.io$all
+||walletauthenticators.vercel.app$all
+||walletcomnecitt.gitbook.io$all
+||walletconnectdapps.online$all
+||watranfart-fdd6a8.ingress-bonde.ewp.live$all
+||waxed.wiki$all
+||webmaillshavv.weebly.com$all
+||weeeqweeattt.weebly.com$all
+||weigh.skin$all
+||weigh.wiki$all
+||wgqdqvtn.baby$all
+||wgqdqvtn.pink$all
+||whatsapp-rqr.com$all
+||wirelessvoicebtpaidmailinfoplay047.weebly.com$all
+||wscs1231.cyou$all
+||xn--metmasklogin-vcb.gitbook.io$all
+||xojautruffeuttu-4659.vercel.app$all
+||xraiz.info$all
+||xraiz.vip$all
+||xsuweamskeidjf.weebly.com$all
+||xya46.cc$all
+||yahoooooo-108560.weeblysite.com$all
+||yavanica123.github.io$all
+||yi5lq-syaaa-aaaag-acfsq-cai.icp0.io$all
+||you-can-receive-here.vercel.app$all
+||zeiitgeist.angelocachero.info$all
+||zenixoikitti-5809.vercel.app$all
+||zeznjx.shop$all
+||zwzcn.com$all
diff --git a/phishing-filter-ag.txt.br b/phishing-filter-ag.txt.br
new file mode 100644
index 000000000..e5ee91eb5
Binary files /dev/null and b/phishing-filter-ag.txt.br differ
diff --git a/phishing-filter-ag.txt.gz b/phishing-filter-ag.txt.gz
new file mode 100644
index 000000000..4abe23e9f
Binary files /dev/null and b/phishing-filter-ag.txt.gz differ
diff --git a/phishing-filter-agh.txt b/phishing-filter-agh.txt
new file mode 100644
index 000000000..7e2b062ee
--- /dev/null
+++ b/phishing-filter-agh.txt
@@ -0,0 +1,434 @@
+! Title: Phishing URL Blocklist (AdGuard Home)
+! Updated: 2024-11-25T00:20:55Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||1111365dh.net^
+||12931-coinbase.com^
+||215323.com^
+||260aesthetic.wixsite.com^
+||3650947.cc^
+||3659ll.net^
+||83291-coinbase.com^
+||94-103-188-123.plesk.page^
+||9825057365.com^
+||abctrvabc.com^
+||access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com^
+||acclimatizable.fun^
+||account-update05.myvnc.com^
+||accounts.google.auzen.us.kg^
+||activebusiness-unlocker3.com^
+||addwsrbh.green^
+||ahnp.vercel.app^
+||aldg.ldgknhk.lol^
+||allegrolokalnie.pl-891241214.buzz^
+||alutipcentra.pages.dev^
+||ambil-pinjaman-daana-payleter.xforms.web.id^
+||ambulatoriprivati.it^
+||amev.ldgknhk.lol^
+||antail-conv.com^
+||apply-now-to-receive-badge.vercel.app^
+||artsea.pages.dev^
+||atmailupdatewptnskmdinfomailacct.weebly.com^
+||att-101072.weeblysite.com^
+||att-1041page.weeblysite.com^
+||att-105714.weeblysite.com^
+||att-105819.square.site^
+||att-inc-107097.weeblysite.com^
+||att-login380.weeblysite.com^
+||att-login522.weeblysite.com^
+||att-service-102155.weeblysite.com^
+||att-sign-in-105669.weeblysite.com^
+||attcom-100762.weeblysite.com^
+||attcom-106808.weeblysite.com^
+||attmailservicenow.wixstudio.com^
+||attmailservicenow.wixstudio.io^
+||attmailsrvrdesk.weebly.com^
+||attnewmaill.weebly.com^
+||attyhhhhiiii225.weebly.com^
+||atw-tau.vercel.app^
+||authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com^
+||authsyncs.pages.dev^
+||autoreplyattmode.wixsite.com^
+||avoid.hold-managert.com^
+||azbin.ir^
+||b45018.com^
+||bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link^
+||baiii-wong.cutvi.cfd^
+||basvuru-online-yap.vercel.app^
+||beionfidi.pages.dev^
+||bet73nn.com^
+||bet83039.com^
+||bet83054.com^
+||bfrescentremebermainsetreouytnoy.weebly.com^
+||biggggggggggg.weebly.com^
+||bitnode.pages.dev^
+||bitvavobtc.com^
+||blackhere11.serv00.net^
+||blss24att.weebly.com^
+||braucrarasuteu-2470.vercel.app^
+||bt-102124.weeblysite.com^
+||bt1business.weebly.com^
+||btuan-dan2-resmi.top1.my.id^
+||buildingdesignsusapdf.s3.us-east-005.backblazeb2.com^
+||business-page-property-897432967.netlify.app^
+||caipora.xyz^
+||calm-pothos-3b24c9.netlify.app^
+||carrefourarabiank15.pages.dev^
+||caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com^
+||catgirl-appverset-nya.pages.dev^
+||catxtokens.pages.dev^
+||chat.94-103-188-123.plesk.page^
+||check154109.click^
+||checkseven.vercel.app^
+||ciente-a.org^
+||cieplo.app^
+||cj12143.tw1.ru^
+||cj87335.tw1.ru^
+||claimyourethrewards.pages.dev^
+||clickbait.design^
+||cnsa163.com^
+||cock2-iota.vercel.app^
+||cock3.vercel.app^
+||cock7.vercel.app^
+||contact-pro-8291-d01.firebaseapp.com^
+||contact-pro-8291-d01.web.app^
+||creosrl.com^
+||curmmgdv.email^
+||currently541.weebly.com^
+||currently890.weebly.com^
+||currentlyserver.weebly.com^
+||dara3dccj.wixsite.com^
+||db.service4db.com^
+||de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev^
+||debutcan.firebaseapp.com^
+||debutcan.web.app^
+||delivery.attempt.failure.ebbs.co.za^
+||dev.stream.mornar.app^
+||dnwqmh.click^
+||dropsmartchain.pages.dev^
+||dsjoting.group^
+||dulb6c5p5.top^
+||ebay-mallwholesale.com^
+||ebt-lilac.vercel.app^
+||echoredled.netlify.app^
+||elbarco.percentadnp.info^
+||eltritongourmet.com^
+||email.mgb.modento.io^
+||enjomugg.firebaseapp.com^
+||enjomugg.web.app^
+||error3456vhubhornbase.azurewebsites.net^
+||example223.wixsite.com^
+||eyeydhe.wixsite.com^
+||eyttueiu.square.site^
+||facebook-avip.click^
+||fame.pink^
+||fassehoizubra-7696.vercel.app^
+||fastdropchain.pages.dev^
+||fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io^
+||fla-1001.square.site^
+||flo4211.github.io^
+||fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com^
+||fnuttlie.wiki^
+||fokeijonnekou.vercel.app^
+||fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com^
+||free-verified-badge-form0-service.vercel.app^
+||free-verified-meta-badge-service.vercel.app^
+||g06668706.wixsite.com^
+||gccndbqg.vip^
+||geriodememerkezi.online^
+||get-checkmark-for-you.vercel.app^
+||get-free-verified-badge-service-on.vercel.app^
+||gitanag.broke-it.net^
+||gruprocuroipra-6493.vercel.app^
+||h5.b9en.com^
+||h5.metacoint.com^
+||hcghij.top^
+||hecregayatu-1014.vercel.app^
+||hejmtxxt.guru^
+||helenblunt6.wixsite.com^
+||help.accountsupportcentre.com^
+||here-apply-for-page-review.vercel.app^
+||hgbk.ldgknhk.lol^
+||hhideiie.wixsite.com^
+||hitummoinneullei-5882.vercel.app^
+||home-101067.weeblysite.com^
+||home-103465.weeblysite.com^
+||home-104341.weeblysite.com^
+||home-105266.weeblysite.com^
+||home-105929.weeblysite.com^
+||homeattatthome.square.site^
+||hpnefhqs.motorcycles^
+||im25.net^
+||info.supercitrus.ind.br^
+||ins-business-home-center.com^
+||instagaramgalochka.vercel.app^
+||ipv6.43-135-137-110.cprapid.com^
+||irmt0ken.win^
+||iujf7839iofvkbcu748.weebly.com^
+||iwimwmiwi.click^
+||jagej73796.wixsite.com^
+||jfdjy.com^
+||kalyani963.github.io^
+||kexoigrufouddou-5902.vercel.app^
+||kl1k-ds1ni.neupdile.my.id^
+||kliind08.wixsite.com^
+||kreelo098.weebly.com^
+||kremlcup.com^
+||kshitij12375.github.io^
+||kucoinglobal1.com^
+||kxbztydc.black^
+||labanquepostale.jupiter-analytics.com^
+||leddevotoze-3146.vercel.app^
+||linnkdna-kget.wxxzsite.buzz^
+||llahi.info^
+||llahi.vip^
+||loffaummuddote-4145.vercel.app^
+||login-att-10221.square.site^
+||login-form.world^
+||login-online-outlook365.com^
+||login-outlook-midstreamauth.com^
+||login-screen-103134.weeblysite.com^
+||loginaccount70.wixsite.com^
+||loginaccount77.wixsite.com^
+||luk6414.wixsite.com^
+||luxlifemiamiblog.com^
+||m.meta-accessibility.io.vn^
+||madebybmr.fyi^
+||maqpiexyz.click^
+||mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev^
+||mayfair313.wixsite.com^
+||mdbrvlfy.black^
+||mesageriepro33range1.weebly.com^
+||metamsk-wallet-3.gitbook.io^
+||metttaa-audddt-new-02.firebaseapp.com^
+||metttaa-audddt-new-02.web.app^
+||microsoft365-storage.github.io^
+||mikepattyjm.wixsite.com^
+||mobilemidasbuy.n3g.fun^
+||monespacepro-client.3utilities.com^
+||monetization-violation.github.io^
+||moodengsol-net.pages.dev^
+||mwsiekdnfjrdufs.weebly.com^
+||mxmxnmx.mx.zya.me^
+||national-au-b.com^
+||national-au.net^
+||nbaaiqjq.group^
+||nexomyacwv.weebly.com^
+||nft-time11.vercel.app^
+||nichcheck.weeblysite.com^
+||ns1.carrier-ast2-portal-apple.com^
+||omadshf.ru^
+||online-assist.live^
+||online-promo-asb.org^
+||openkimono.pro^
+||opportunity-verified-status.vercel.app^
+||ourtime.reconnect-dating.workers.dev^
+||owouwuowo.click^
+||p365kf.com^
+||p4zv8crnrrha27so.94-103-188-123.plesk.page^
+||page-center-manage.com^
+||pavan-patil-22.github.io^
+||pecinternational.net^
+||peesom.chat^
+||pencairaanndannaa.my.id^
+||petty.wiki^
+||pimnhv.group^
+||policies-business-page-service.com^
+||pottatrebewe-2808.vercel.app^
+||pqo.hrf.mybluehost.me^
+||programming--service--panel-totlyy-free-for-you.vercel.app^
+||promo1.spik.ru^
+||protocolsecure.pages.dev^
+||pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev^
+||pub-1778406e4fec4394901793111c187dd9.r2.dev^
+||pub-19b834342e7d465b9f00b3511325a081.r2.dev^
+||pub-21dd4dc659614ceb93e45a6de4434502.r2.dev^
+||pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev^
+||pub-2fefe932a6974485b987c9ba851b5c40.r2.dev^
+||pub-3a46d9914f494078a6d6237513e7a096.r2.dev^
+||pub-442ed822851244a689b3472ea2c6a950.r2.dev^
+||pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev^
+||pub-682ad3b65d944376b919745aae3c56d4.r2.dev^
+||pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev^
+||pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev^
+||pub-7f5cf36445d042168bfacd712e890dc0.r2.dev^
+||pub-803839714a924882a7bcc2495a26860f.r2.dev^
+||pub-8161de4a277e4ee8b532af34954224e1.r2.dev^
+||pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev^
+||pub-8376b5b2334844d193a525d8b8548fa5.r2.dev^
+||pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev^
+||pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev^
+||pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev^
+||pub-9163a97d70394cb499bdd232be6c2169.r2.dev^
+||pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev^
+||pub-98171471e0944ac3a5820ef719bf0640.r2.dev^
+||pub-a263e0790935412eb10cacc55bbced18.r2.dev^
+||pub-a291041b077742899b63a9982f04a56c.r2.dev^
+||pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev^
+||pub-b50adc5d699a4f08aec37102c2103da7.r2.dev^
+||pub-c0a934c950e441db96b882789f53c9ea.r2.dev^
+||pub-c2c250050109456396c933de259a4fea.r2.dev^
+||pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev^
+||pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev^
+||pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev^
+||pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev^
+||pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev^
+||pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev^
+||pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev^
+||pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev^
+||pub-e42cb528b102447385e3145197916f51.r2.dev^
+||pub-e4aff507450c478cbe3f77ad23d75035.r2.dev^
+||pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev^
+||pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev^
+||pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev^
+||pubgm.club^
+||puffagroibrouwoi-8818.vercel.app^
+||qasimk.com^
+||qfjfvseq.info^
+||quauwograssodda-3503.vercel.app^
+||qysgyp.com^
+||rajdipchatterjee.github.io^
+||rechazaroanularaqui51.weebly.com^
+||remote-fix.pages.dev^
+||renggard.47-243-192-240.cprapid.com^
+||resolvepanel.live^
+||resolving--issue--with-us1.vercel.app^
+||resqat.weebly.com^
+||review-business-case.d2f7p3b7pucnle.amplifyapp.com^
+||rlpqwefi.pink^
+||rouloigeilleuja-9523.vercel.app^
+||rulemec.pages.dev^
+||rutinqqwin.shop^
+||rwftfu.quest^
+||s.team-pw.cc^
+||sairanees.github.io^
+||sanseipecas.com.br^
+||sasklelo.weebly.com^
+||sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com^
+||sasktelcustomerwebly.weebly.com^
+||sasktelnetwebmailservermaintainance.weebly.com^
+||sasktelrectify.weebly.com^
+||sasktelscrutinize.weebly.com^
+||sasktelservicecentterwebly.weebly.com^
+||sasktelsupportsystemwebly.weebly.com^
+||sbcglobal30.wixsite.com^
+||scan-vulnerability-guard-v3.pages.dev^
+||scan-vulnerability-guard.pages.dev^
+||scanner-metamask-v1.pages.dev^
+||scanner-metamask-v2.pages.dev^
+||scanner-metamask-v3.pages.dev^
+||scanner-metamask.pages.dev^
+||sec-sign-in.info^
+||secure2-validitycheck.weebly.com^
+||securecapitec.theprimepoint.online^
+||securerpcfix.com^
+||seeteressecalywoi.github.io^
+||seivviice.weebly.com^
+||server.0e7p.com^
+||server.2rk3.com^
+||server.8q3p.com^
+||server.n6b8.com^
+||server.v9vs.com^
+||sevvviicess.weebly.com^
+||shard.blue^
+||shard.skin^
+||shared-d7590.firebaseapp.com^
+||shared-d7590.web.app^
+||shaw-101329.weeblysite.com^
+||shaw-101587.weeblysite.com^
+||shaw-106427.weeblysite.com^
+||shaw-107375.weeblysite.com^
+||solutionwebsitedapp.firebaseapp.com^
+||solutionwebsitedapp.web.app^
+||solvetans.firebaseapp.com^
+||solvetans.web.app^
+||sondfrom.dexlog.my.id^
+||soyokai.or.jp^
+||srdate.club^
+||ssy.hmb.mybluehostin.me^
+||steam.poweredartsworkshop.com^
+||steam.workshopsreview.com^
+||steamcommmuty.com^
+||steamcommuunity.ru^
+||steamcomunutty.com^
+||steamconmumity.com^
+||stepsray.vercel.app^
+||support-metahelpcenter-id100003498934.netlify.app^
+||sv5gardens655665.weeblysite.com^
+||system-portalnu.duckdns.org^
+||talwgam.njmolada.com^
+||taste.baby^
+||tele.zhngain.top^
+||telegrambot-resolved.pages.dev^
+||telegrazm.net^
+||telstra-100408.weeblysite.com^
+||telstra-100469.weeblysite.com^
+||telstra-103234.weeblysite.com^
+||tiktok-888.vip^
+||tiltckshow.top^
+||tnomwzrp.top^
+||toeken.im^
+||tonic.pink^
+||tooma.cellinsurance.co.zw^
+||tpdtepremu.xyz^
+||trattujeilesso-3354.vercel.app^
+||trbinace.com^
+||treibrukeukonno-1395.vercel.app^
+||tuesmad.firebaseapp.com^
+||tuesmad.web.app^
+||tyyyyyytyyy.weebly.com^
+||tzcsjfto.chat^
+||u.updatetrackgre.top^
+||uc-whatstapp-web.com^
+||udxcady.wixsite.com^
+||uklifejv.cyou^
+||updatemail12.wixsite.com^
+||ups-trackdeliveryapps.chickenkiller.com^
+||usbest.cyou^
+||user-transaction-overview.vercel.app^
+||usps.com-trackdck.top^
+||usps.com-tracklnv.top^
+||usps.com-trackmcl.top^
+||usps.com-trackmec.top^
+||usps.com-tracktpq.top^
+||usps.com-trackvmd.top^
+||uspsinfw.top^
+||uwdtsczi.top^
+||uwm-onedrive.com^
+||vaishnavi1436.github.io^
+||validatie-veiligauthenticatie.com^
+||vbbu.ldgknhk.lol^
+||verified-this-request-badge.vercel.app^
+||vo4zzp.icu^
+||vs41.github.io^
+||walett-cont.gitbook.io^
+||walletauthenticators.vercel.app^
+||walletcomnecitt.gitbook.io^
+||walletconnectdapps.online^
+||watranfart-fdd6a8.ingress-bonde.ewp.live^
+||waxed.wiki^
+||webmaillshavv.weebly.com^
+||weeeqweeattt.weebly.com^
+||weigh.skin^
+||weigh.wiki^
+||wgqdqvtn.baby^
+||wgqdqvtn.pink^
+||whatsapp-rqr.com^
+||wirelessvoicebtpaidmailinfoplay047.weebly.com^
+||wscs1231.cyou^
+||xn--metmasklogin-vcb.gitbook.io^
+||xojautruffeuttu-4659.vercel.app^
+||xraiz.info^
+||xraiz.vip^
+||xsuweamskeidjf.weebly.com^
+||xya46.cc^
+||yahoooooo-108560.weeblysite.com^
+||yavanica123.github.io^
+||yi5lq-syaaa-aaaag-acfsq-cai.icp0.io^
+||you-can-receive-here.vercel.app^
+||zeiitgeist.angelocachero.info^
+||zenixoikitti-5809.vercel.app^
+||zeznjx.shop^
+||zwzcn.com^
diff --git a/phishing-filter-agh.txt.br b/phishing-filter-agh.txt.br
new file mode 100644
index 000000000..773a53385
Binary files /dev/null and b/phishing-filter-agh.txt.br differ
diff --git a/phishing-filter-agh.txt.gz b/phishing-filter-agh.txt.gz
new file mode 100644
index 000000000..cd0276015
Binary files /dev/null and b/phishing-filter-agh.txt.gz differ
diff --git a/phishing-filter-bind.conf b/phishing-filter-bind.conf
new file mode 100644
index 000000000..2cf150dbb
--- /dev/null
+++ b/phishing-filter-bind.conf
@@ -0,0 +1,434 @@
+# Title: Phishing Domains BIND Blocklist
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+zone "1111365dh.net" { type master; notify no; file "null.zone.file"; };
+zone "12931-coinbase.com" { type master; notify no; file "null.zone.file"; };
+zone "215323.com" { type master; notify no; file "null.zone.file"; };
+zone "260aesthetic.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "3650947.cc" { type master; notify no; file "null.zone.file"; };
+zone "3659ll.net" { type master; notify no; file "null.zone.file"; };
+zone "83291-coinbase.com" { type master; notify no; file "null.zone.file"; };
+zone "94-103-188-123.plesk.page" { type master; notify no; file "null.zone.file"; };
+zone "9825057365.com" { type master; notify no; file "null.zone.file"; };
+zone "abctrvabc.com" { type master; notify no; file "null.zone.file"; };
+zone "access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com" { type master; notify no; file "null.zone.file"; };
+zone "acclimatizable.fun" { type master; notify no; file "null.zone.file"; };
+zone "account-update05.myvnc.com" { type master; notify no; file "null.zone.file"; };
+zone "accounts.google.auzen.us.kg" { type master; notify no; file "null.zone.file"; };
+zone "activebusiness-unlocker3.com" { type master; notify no; file "null.zone.file"; };
+zone "addwsrbh.green" { type master; notify no; file "null.zone.file"; };
+zone "ahnp.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "aldg.ldgknhk.lol" { type master; notify no; file "null.zone.file"; };
+zone "allegrolokalnie.pl-891241214.buzz" { type master; notify no; file "null.zone.file"; };
+zone "alutipcentra.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "ambil-pinjaman-daana-payleter.xforms.web.id" { type master; notify no; file "null.zone.file"; };
+zone "ambulatoriprivati.it" { type master; notify no; file "null.zone.file"; };
+zone "amev.ldgknhk.lol" { type master; notify no; file "null.zone.file"; };
+zone "antail-conv.com" { type master; notify no; file "null.zone.file"; };
+zone "apply-now-to-receive-badge.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "artsea.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "atmailupdatewptnskmdinfomailacct.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "att-101072.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-1041page.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-105714.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-105819.square.site" { type master; notify no; file "null.zone.file"; };
+zone "att-inc-107097.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-login380.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-login522.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-service-102155.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-sign-in-105669.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "attcom-100762.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "attcom-106808.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "attmailservicenow.wixstudio.com" { type master; notify no; file "null.zone.file"; };
+zone "attmailservicenow.wixstudio.io" { type master; notify no; file "null.zone.file"; };
+zone "attmailsrvrdesk.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attnewmaill.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attyhhhhiiii225.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "atw-tau.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com" { type master; notify no; file "null.zone.file"; };
+zone "authsyncs.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "autoreplyattmode.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "avoid.hold-managert.com" { type master; notify no; file "null.zone.file"; };
+zone "azbin.ir" { type master; notify no; file "null.zone.file"; };
+zone "b45018.com" { type master; notify no; file "null.zone.file"; };
+zone "bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "baiii-wong.cutvi.cfd" { type master; notify no; file "null.zone.file"; };
+zone "basvuru-online-yap.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "beionfidi.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "bet73nn.com" { type master; notify no; file "null.zone.file"; };
+zone "bet83039.com" { type master; notify no; file "null.zone.file"; };
+zone "bet83054.com" { type master; notify no; file "null.zone.file"; };
+zone "bfrescentremebermainsetreouytnoy.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "biggggggggggg.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "bitnode.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "bitvavobtc.com" { type master; notify no; file "null.zone.file"; };
+zone "blackhere11.serv00.net" { type master; notify no; file "null.zone.file"; };
+zone "blss24att.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "braucrarasuteu-2470.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "bt-102124.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "bt1business.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "btuan-dan2-resmi.top1.my.id" { type master; notify no; file "null.zone.file"; };
+zone "buildingdesignsusapdf.s3.us-east-005.backblazeb2.com" { type master; notify no; file "null.zone.file"; };
+zone "business-page-property-897432967.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "caipora.xyz" { type master; notify no; file "null.zone.file"; };
+zone "calm-pothos-3b24c9.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "carrefourarabiank15.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com" { type master; notify no; file "null.zone.file"; };
+zone "catgirl-appverset-nya.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "catxtokens.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "chat.94-103-188-123.plesk.page" { type master; notify no; file "null.zone.file"; };
+zone "check154109.click" { type master; notify no; file "null.zone.file"; };
+zone "checkseven.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "ciente-a.org" { type master; notify no; file "null.zone.file"; };
+zone "cieplo.app" { type master; notify no; file "null.zone.file"; };
+zone "cj12143.tw1.ru" { type master; notify no; file "null.zone.file"; };
+zone "cj87335.tw1.ru" { type master; notify no; file "null.zone.file"; };
+zone "claimyourethrewards.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "clickbait.design" { type master; notify no; file "null.zone.file"; };
+zone "cnsa163.com" { type master; notify no; file "null.zone.file"; };
+zone "cock2-iota.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "cock3.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "cock7.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "contact-pro-8291-d01.firebaseapp.com" { type master; notify no; file "null.zone.file"; };
+zone "contact-pro-8291-d01.web.app" { type master; notify no; file "null.zone.file"; };
+zone "creosrl.com" { type master; notify no; file "null.zone.file"; };
+zone "curmmgdv.email" { type master; notify no; file "null.zone.file"; };
+zone "currently541.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currently890.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyserver.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "dara3dccj.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "db.service4db.com" { type master; notify no; file "null.zone.file"; };
+zone "de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev" { type master; notify no; file "null.zone.file"; };
+zone "debutcan.firebaseapp.com" { type master; notify no; file "null.zone.file"; };
+zone "debutcan.web.app" { type master; notify no; file "null.zone.file"; };
+zone "delivery.attempt.failure.ebbs.co.za" { type master; notify no; file "null.zone.file"; };
+zone "dev.stream.mornar.app" { type master; notify no; file "null.zone.file"; };
+zone "dnwqmh.click" { type master; notify no; file "null.zone.file"; };
+zone "dropsmartchain.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "dsjoting.group" { type master; notify no; file "null.zone.file"; };
+zone "dulb6c5p5.top" { type master; notify no; file "null.zone.file"; };
+zone "ebay-mallwholesale.com" { type master; notify no; file "null.zone.file"; };
+zone "ebt-lilac.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "echoredled.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "elbarco.percentadnp.info" { type master; notify no; file "null.zone.file"; };
+zone "eltritongourmet.com" { type master; notify no; file "null.zone.file"; };
+zone "email.mgb.modento.io" { type master; notify no; file "null.zone.file"; };
+zone "enjomugg.firebaseapp.com" { type master; notify no; file "null.zone.file"; };
+zone "enjomugg.web.app" { type master; notify no; file "null.zone.file"; };
+zone "error3456vhubhornbase.azurewebsites.net" { type master; notify no; file "null.zone.file"; };
+zone "example223.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "eyeydhe.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "eyttueiu.square.site" { type master; notify no; file "null.zone.file"; };
+zone "facebook-avip.click" { type master; notify no; file "null.zone.file"; };
+zone "fame.pink" { type master; notify no; file "null.zone.file"; };
+zone "fassehoizubra-7696.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "fastdropchain.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io" { type master; notify no; file "null.zone.file"; };
+zone "fla-1001.square.site" { type master; notify no; file "null.zone.file"; };
+zone "flo4211.github.io" { type master; notify no; file "null.zone.file"; };
+zone "fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com" { type master; notify no; file "null.zone.file"; };
+zone "fnuttlie.wiki" { type master; notify no; file "null.zone.file"; };
+zone "fokeijonnekou.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "free-verified-badge-form0-service.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "free-verified-meta-badge-service.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "g06668706.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "gccndbqg.vip" { type master; notify no; file "null.zone.file"; };
+zone "geriodememerkezi.online" { type master; notify no; file "null.zone.file"; };
+zone "get-checkmark-for-you.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "get-free-verified-badge-service-on.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "gitanag.broke-it.net" { type master; notify no; file "null.zone.file"; };
+zone "gruprocuroipra-6493.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "h5.b9en.com" { type master; notify no; file "null.zone.file"; };
+zone "h5.metacoint.com" { type master; notify no; file "null.zone.file"; };
+zone "hcghij.top" { type master; notify no; file "null.zone.file"; };
+zone "hecregayatu-1014.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "hejmtxxt.guru" { type master; notify no; file "null.zone.file"; };
+zone "helenblunt6.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "help.accountsupportcentre.com" { type master; notify no; file "null.zone.file"; };
+zone "here-apply-for-page-review.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "hgbk.ldgknhk.lol" { type master; notify no; file "null.zone.file"; };
+zone "hhideiie.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "hitummoinneullei-5882.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "home-101067.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-103465.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-104341.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-105266.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-105929.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "homeattatthome.square.site" { type master; notify no; file "null.zone.file"; };
+zone "hpnefhqs.motorcycles" { type master; notify no; file "null.zone.file"; };
+zone "im25.net" { type master; notify no; file "null.zone.file"; };
+zone "info.supercitrus.ind.br" { type master; notify no; file "null.zone.file"; };
+zone "ins-business-home-center.com" { type master; notify no; file "null.zone.file"; };
+zone "instagaramgalochka.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "ipv6.43-135-137-110.cprapid.com" { type master; notify no; file "null.zone.file"; };
+zone "irmt0ken.win" { type master; notify no; file "null.zone.file"; };
+zone "iujf7839iofvkbcu748.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "iwimwmiwi.click" { type master; notify no; file "null.zone.file"; };
+zone "jagej73796.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "jfdjy.com" { type master; notify no; file "null.zone.file"; };
+zone "kalyani963.github.io" { type master; notify no; file "null.zone.file"; };
+zone "kexoigrufouddou-5902.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "kl1k-ds1ni.neupdile.my.id" { type master; notify no; file "null.zone.file"; };
+zone "kliind08.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "kreelo098.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "kremlcup.com" { type master; notify no; file "null.zone.file"; };
+zone "kshitij12375.github.io" { type master; notify no; file "null.zone.file"; };
+zone "kucoinglobal1.com" { type master; notify no; file "null.zone.file"; };
+zone "kxbztydc.black" { type master; notify no; file "null.zone.file"; };
+zone "labanquepostale.jupiter-analytics.com" { type master; notify no; file "null.zone.file"; };
+zone "leddevotoze-3146.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "linnkdna-kget.wxxzsite.buzz" { type master; notify no; file "null.zone.file"; };
+zone "llahi.info" { type master; notify no; file "null.zone.file"; };
+zone "llahi.vip" { type master; notify no; file "null.zone.file"; };
+zone "loffaummuddote-4145.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "login-att-10221.square.site" { type master; notify no; file "null.zone.file"; };
+zone "login-form.world" { type master; notify no; file "null.zone.file"; };
+zone "login-online-outlook365.com" { type master; notify no; file "null.zone.file"; };
+zone "login-outlook-midstreamauth.com" { type master; notify no; file "null.zone.file"; };
+zone "login-screen-103134.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "loginaccount70.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "loginaccount77.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "luk6414.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "luxlifemiamiblog.com" { type master; notify no; file "null.zone.file"; };
+zone "m.meta-accessibility.io.vn" { type master; notify no; file "null.zone.file"; };
+zone "madebybmr.fyi" { type master; notify no; file "null.zone.file"; };
+zone "maqpiexyz.click" { type master; notify no; file "null.zone.file"; };
+zone "mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "mayfair313.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "mdbrvlfy.black" { type master; notify no; file "null.zone.file"; };
+zone "mesageriepro33range1.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "metamsk-wallet-3.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "metttaa-audddt-new-02.firebaseapp.com" { type master; notify no; file "null.zone.file"; };
+zone "metttaa-audddt-new-02.web.app" { type master; notify no; file "null.zone.file"; };
+zone "microsoft365-storage.github.io" { type master; notify no; file "null.zone.file"; };
+zone "mikepattyjm.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "mobilemidasbuy.n3g.fun" { type master; notify no; file "null.zone.file"; };
+zone "monespacepro-client.3utilities.com" { type master; notify no; file "null.zone.file"; };
+zone "monetization-violation.github.io" { type master; notify no; file "null.zone.file"; };
+zone "moodengsol-net.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "mwsiekdnfjrdufs.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "mxmxnmx.mx.zya.me" { type master; notify no; file "null.zone.file"; };
+zone "national-au-b.com" { type master; notify no; file "null.zone.file"; };
+zone "national-au.net" { type master; notify no; file "null.zone.file"; };
+zone "nbaaiqjq.group" { type master; notify no; file "null.zone.file"; };
+zone "nexomyacwv.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "nft-time11.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "nichcheck.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "ns1.carrier-ast2-portal-apple.com" { type master; notify no; file "null.zone.file"; };
+zone "omadshf.ru" { type master; notify no; file "null.zone.file"; };
+zone "online-assist.live" { type master; notify no; file "null.zone.file"; };
+zone "online-promo-asb.org" { type master; notify no; file "null.zone.file"; };
+zone "openkimono.pro" { type master; notify no; file "null.zone.file"; };
+zone "opportunity-verified-status.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "ourtime.reconnect-dating.workers.dev" { type master; notify no; file "null.zone.file"; };
+zone "owouwuowo.click" { type master; notify no; file "null.zone.file"; };
+zone "p365kf.com" { type master; notify no; file "null.zone.file"; };
+zone "p4zv8crnrrha27so.94-103-188-123.plesk.page" { type master; notify no; file "null.zone.file"; };
+zone "page-center-manage.com" { type master; notify no; file "null.zone.file"; };
+zone "pavan-patil-22.github.io" { type master; notify no; file "null.zone.file"; };
+zone "pecinternational.net" { type master; notify no; file "null.zone.file"; };
+zone "peesom.chat" { type master; notify no; file "null.zone.file"; };
+zone "pencairaanndannaa.my.id" { type master; notify no; file "null.zone.file"; };
+zone "petty.wiki" { type master; notify no; file "null.zone.file"; };
+zone "pimnhv.group" { type master; notify no; file "null.zone.file"; };
+zone "policies-business-page-service.com" { type master; notify no; file "null.zone.file"; };
+zone "pottatrebewe-2808.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "pqo.hrf.mybluehost.me" { type master; notify no; file "null.zone.file"; };
+zone "programming--service--panel-totlyy-free-for-you.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "promo1.spik.ru" { type master; notify no; file "null.zone.file"; };
+zone "protocolsecure.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-1778406e4fec4394901793111c187dd9.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-19b834342e7d465b9f00b3511325a081.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-21dd4dc659614ceb93e45a6de4434502.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-2fefe932a6974485b987c9ba851b5c40.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-3a46d9914f494078a6d6237513e7a096.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-442ed822851244a689b3472ea2c6a950.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-682ad3b65d944376b919745aae3c56d4.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-7f5cf36445d042168bfacd712e890dc0.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-803839714a924882a7bcc2495a26860f.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-8161de4a277e4ee8b532af34954224e1.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-8376b5b2334844d193a525d8b8548fa5.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-9163a97d70394cb499bdd232be6c2169.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-98171471e0944ac3a5820ef719bf0640.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-a263e0790935412eb10cacc55bbced18.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-a291041b077742899b63a9982f04a56c.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-b50adc5d699a4f08aec37102c2103da7.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-c0a934c950e441db96b882789f53c9ea.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-c2c250050109456396c933de259a4fea.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-e42cb528b102447385e3145197916f51.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-e4aff507450c478cbe3f77ad23d75035.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pubgm.club" { type master; notify no; file "null.zone.file"; };
+zone "puffagroibrouwoi-8818.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "qasimk.com" { type master; notify no; file "null.zone.file"; };
+zone "qfjfvseq.info" { type master; notify no; file "null.zone.file"; };
+zone "quauwograssodda-3503.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "qysgyp.com" { type master; notify no; file "null.zone.file"; };
+zone "rajdipchatterjee.github.io" { type master; notify no; file "null.zone.file"; };
+zone "rechazaroanularaqui51.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "remote-fix.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "renggard.47-243-192-240.cprapid.com" { type master; notify no; file "null.zone.file"; };
+zone "resolvepanel.live" { type master; notify no; file "null.zone.file"; };
+zone "resolving--issue--with-us1.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "resqat.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "review-business-case.d2f7p3b7pucnle.amplifyapp.com" { type master; notify no; file "null.zone.file"; };
+zone "rlpqwefi.pink" { type master; notify no; file "null.zone.file"; };
+zone "rouloigeilleuja-9523.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "rulemec.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "rutinqqwin.shop" { type master; notify no; file "null.zone.file"; };
+zone "rwftfu.quest" { type master; notify no; file "null.zone.file"; };
+zone "s.team-pw.cc" { type master; notify no; file "null.zone.file"; };
+zone "sairanees.github.io" { type master; notify no; file "null.zone.file"; };
+zone "sanseipecas.com.br" { type master; notify no; file "null.zone.file"; };
+zone "sasklelo.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sasktelcustomerwebly.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sasktelnetwebmailservermaintainance.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sasktelrectify.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sasktelscrutinize.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sasktelservicecentterwebly.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sasktelsupportsystemwebly.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sbcglobal30.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "scan-vulnerability-guard-v3.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "scan-vulnerability-guard.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "scanner-metamask-v1.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "scanner-metamask-v2.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "scanner-metamask-v3.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "scanner-metamask.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "sec-sign-in.info" { type master; notify no; file "null.zone.file"; };
+zone "secure2-validitycheck.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "securecapitec.theprimepoint.online" { type master; notify no; file "null.zone.file"; };
+zone "securerpcfix.com" { type master; notify no; file "null.zone.file"; };
+zone "seeteressecalywoi.github.io" { type master; notify no; file "null.zone.file"; };
+zone "seivviice.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "server.0e7p.com" { type master; notify no; file "null.zone.file"; };
+zone "server.2rk3.com" { type master; notify no; file "null.zone.file"; };
+zone "server.8q3p.com" { type master; notify no; file "null.zone.file"; };
+zone "server.n6b8.com" { type master; notify no; file "null.zone.file"; };
+zone "server.v9vs.com" { type master; notify no; file "null.zone.file"; };
+zone "sevvviicess.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "shard.blue" { type master; notify no; file "null.zone.file"; };
+zone "shard.skin" { type master; notify no; file "null.zone.file"; };
+zone "shared-d7590.firebaseapp.com" { type master; notify no; file "null.zone.file"; };
+zone "shared-d7590.web.app" { type master; notify no; file "null.zone.file"; };
+zone "shaw-101329.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-101587.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-106427.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-107375.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "solutionwebsitedapp.firebaseapp.com" { type master; notify no; file "null.zone.file"; };
+zone "solutionwebsitedapp.web.app" { type master; notify no; file "null.zone.file"; };
+zone "solvetans.firebaseapp.com" { type master; notify no; file "null.zone.file"; };
+zone "solvetans.web.app" { type master; notify no; file "null.zone.file"; };
+zone "sondfrom.dexlog.my.id" { type master; notify no; file "null.zone.file"; };
+zone "soyokai.or.jp" { type master; notify no; file "null.zone.file"; };
+zone "srdate.club" { type master; notify no; file "null.zone.file"; };
+zone "ssy.hmb.mybluehostin.me" { type master; notify no; file "null.zone.file"; };
+zone "steam.poweredartsworkshop.com" { type master; notify no; file "null.zone.file"; };
+zone "steam.workshopsreview.com" { type master; notify no; file "null.zone.file"; };
+zone "steamcommmuty.com" { type master; notify no; file "null.zone.file"; };
+zone "steamcommuunity.ru" { type master; notify no; file "null.zone.file"; };
+zone "steamcomunutty.com" { type master; notify no; file "null.zone.file"; };
+zone "steamconmumity.com" { type master; notify no; file "null.zone.file"; };
+zone "stepsray.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "support-metahelpcenter-id100003498934.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "sv5gardens655665.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "system-portalnu.duckdns.org" { type master; notify no; file "null.zone.file"; };
+zone "talwgam.njmolada.com" { type master; notify no; file "null.zone.file"; };
+zone "taste.baby" { type master; notify no; file "null.zone.file"; };
+zone "tele.zhngain.top" { type master; notify no; file "null.zone.file"; };
+zone "telegrambot-resolved.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "telegrazm.net" { type master; notify no; file "null.zone.file"; };
+zone "telstra-100408.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-100469.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-103234.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "tiktok-888.vip" { type master; notify no; file "null.zone.file"; };
+zone "tiltckshow.top" { type master; notify no; file "null.zone.file"; };
+zone "tnomwzrp.top" { type master; notify no; file "null.zone.file"; };
+zone "toeken.im" { type master; notify no; file "null.zone.file"; };
+zone "tonic.pink" { type master; notify no; file "null.zone.file"; };
+zone "tooma.cellinsurance.co.zw" { type master; notify no; file "null.zone.file"; };
+zone "tpdtepremu.xyz" { type master; notify no; file "null.zone.file"; };
+zone "trattujeilesso-3354.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "trbinace.com" { type master; notify no; file "null.zone.file"; };
+zone "treibrukeukonno-1395.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "tuesmad.firebaseapp.com" { type master; notify no; file "null.zone.file"; };
+zone "tuesmad.web.app" { type master; notify no; file "null.zone.file"; };
+zone "tyyyyyytyyy.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "tzcsjfto.chat" { type master; notify no; file "null.zone.file"; };
+zone "u.updatetrackgre.top" { type master; notify no; file "null.zone.file"; };
+zone "uc-whatstapp-web.com" { type master; notify no; file "null.zone.file"; };
+zone "udxcady.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "uklifejv.cyou" { type master; notify no; file "null.zone.file"; };
+zone "updatemail12.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "ups-trackdeliveryapps.chickenkiller.com" { type master; notify no; file "null.zone.file"; };
+zone "usbest.cyou" { type master; notify no; file "null.zone.file"; };
+zone "user-transaction-overview.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackdck.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracklnv.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackmcl.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackmec.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracktpq.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackvmd.top" { type master; notify no; file "null.zone.file"; };
+zone "uspsinfw.top" { type master; notify no; file "null.zone.file"; };
+zone "uwdtsczi.top" { type master; notify no; file "null.zone.file"; };
+zone "uwm-onedrive.com" { type master; notify no; file "null.zone.file"; };
+zone "vaishnavi1436.github.io" { type master; notify no; file "null.zone.file"; };
+zone "validatie-veiligauthenticatie.com" { type master; notify no; file "null.zone.file"; };
+zone "vbbu.ldgknhk.lol" { type master; notify no; file "null.zone.file"; };
+zone "verified-this-request-badge.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "vo4zzp.icu" { type master; notify no; file "null.zone.file"; };
+zone "vs41.github.io" { type master; notify no; file "null.zone.file"; };
+zone "walett-cont.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "walletauthenticators.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "walletcomnecitt.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "walletconnectdapps.online" { type master; notify no; file "null.zone.file"; };
+zone "watranfart-fdd6a8.ingress-bonde.ewp.live" { type master; notify no; file "null.zone.file"; };
+zone "waxed.wiki" { type master; notify no; file "null.zone.file"; };
+zone "webmaillshavv.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "weeeqweeattt.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "weigh.skin" { type master; notify no; file "null.zone.file"; };
+zone "weigh.wiki" { type master; notify no; file "null.zone.file"; };
+zone "wgqdqvtn.baby" { type master; notify no; file "null.zone.file"; };
+zone "wgqdqvtn.pink" { type master; notify no; file "null.zone.file"; };
+zone "whatsapp-rqr.com" { type master; notify no; file "null.zone.file"; };
+zone "wirelessvoicebtpaidmailinfoplay047.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "wscs1231.cyou" { type master; notify no; file "null.zone.file"; };
+zone "xn--metmasklogin-vcb.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "xojautruffeuttu-4659.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "xraiz.info" { type master; notify no; file "null.zone.file"; };
+zone "xraiz.vip" { type master; notify no; file "null.zone.file"; };
+zone "xsuweamskeidjf.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "xya46.cc" { type master; notify no; file "null.zone.file"; };
+zone "yahoooooo-108560.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "yavanica123.github.io" { type master; notify no; file "null.zone.file"; };
+zone "yi5lq-syaaa-aaaag-acfsq-cai.icp0.io" { type master; notify no; file "null.zone.file"; };
+zone "you-can-receive-here.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "zeiitgeist.angelocachero.info" { type master; notify no; file "null.zone.file"; };
+zone "zenixoikitti-5809.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "zeznjx.shop" { type master; notify no; file "null.zone.file"; };
+zone "zwzcn.com" { type master; notify no; file "null.zone.file"; };
diff --git a/phishing-filter-bind.conf.br b/phishing-filter-bind.conf.br
new file mode 100644
index 000000000..6b0738359
Binary files /dev/null and b/phishing-filter-bind.conf.br differ
diff --git a/phishing-filter-bind.conf.gz b/phishing-filter-bind.conf.gz
new file mode 100644
index 000000000..18f933106
Binary files /dev/null and b/phishing-filter-bind.conf.gz differ
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt b/phishing-filter-dnscrypt-blocked-ips.txt
new file mode 100644
index 000000000..58ffda3f4
--- /dev/null
+++ b/phishing-filter-dnscrypt-blocked-ips.txt
@@ -0,0 +1,7 @@
+# Title: Phishing IPs Blocklist
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt.br b/phishing-filter-dnscrypt-blocked-ips.txt.br
new file mode 100644
index 000000000..4adc382e0
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-ips.txt.br differ
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt.gz b/phishing-filter-dnscrypt-blocked-ips.txt.gz
new file mode 100644
index 000000000..774732a68
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-ips.txt.gz differ
diff --git a/phishing-filter-dnscrypt-blocked-names.txt b/phishing-filter-dnscrypt-blocked-names.txt
new file mode 100644
index 000000000..0f2e38733
--- /dev/null
+++ b/phishing-filter-dnscrypt-blocked-names.txt
@@ -0,0 +1,434 @@
+# Title: Phishing Names Blocklist
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+1111365dh.net
+12931-coinbase.com
+215323.com
+260aesthetic.wixsite.com
+3650947.cc
+3659ll.net
+83291-coinbase.com
+94-103-188-123.plesk.page
+9825057365.com
+abctrvabc.com
+access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com
+acclimatizable.fun
+account-update05.myvnc.com
+accounts.google.auzen.us.kg
+activebusiness-unlocker3.com
+addwsrbh.green
+ahnp.vercel.app
+aldg.ldgknhk.lol
+allegrolokalnie.pl-891241214.buzz
+alutipcentra.pages.dev
+ambil-pinjaman-daana-payleter.xforms.web.id
+ambulatoriprivati.it
+amev.ldgknhk.lol
+antail-conv.com
+apply-now-to-receive-badge.vercel.app
+artsea.pages.dev
+atmailupdatewptnskmdinfomailacct.weebly.com
+att-101072.weeblysite.com
+att-1041page.weeblysite.com
+att-105714.weeblysite.com
+att-105819.square.site
+att-inc-107097.weeblysite.com
+att-login380.weeblysite.com
+att-login522.weeblysite.com
+att-service-102155.weeblysite.com
+att-sign-in-105669.weeblysite.com
+attcom-100762.weeblysite.com
+attcom-106808.weeblysite.com
+attmailservicenow.wixstudio.com
+attmailservicenow.wixstudio.io
+attmailsrvrdesk.weebly.com
+attnewmaill.weebly.com
+attyhhhhiiii225.weebly.com
+atw-tau.vercel.app
+authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com
+authsyncs.pages.dev
+autoreplyattmode.wixsite.com
+avoid.hold-managert.com
+azbin.ir
+b45018.com
+bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link
+baiii-wong.cutvi.cfd
+basvuru-online-yap.vercel.app
+beionfidi.pages.dev
+bet73nn.com
+bet83039.com
+bet83054.com
+bfrescentremebermainsetreouytnoy.weebly.com
+biggggggggggg.weebly.com
+bitnode.pages.dev
+bitvavobtc.com
+blackhere11.serv00.net
+blss24att.weebly.com
+braucrarasuteu-2470.vercel.app
+bt-102124.weeblysite.com
+bt1business.weebly.com
+btuan-dan2-resmi.top1.my.id
+buildingdesignsusapdf.s3.us-east-005.backblazeb2.com
+business-page-property-897432967.netlify.app
+caipora.xyz
+calm-pothos-3b24c9.netlify.app
+carrefourarabiank15.pages.dev
+caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com
+catgirl-appverset-nya.pages.dev
+catxtokens.pages.dev
+chat.94-103-188-123.plesk.page
+check154109.click
+checkseven.vercel.app
+ciente-a.org
+cieplo.app
+cj12143.tw1.ru
+cj87335.tw1.ru
+claimyourethrewards.pages.dev
+clickbait.design
+cnsa163.com
+cock2-iota.vercel.app
+cock3.vercel.app
+cock7.vercel.app
+contact-pro-8291-d01.firebaseapp.com
+contact-pro-8291-d01.web.app
+creosrl.com
+curmmgdv.email
+currently541.weebly.com
+currently890.weebly.com
+currentlyserver.weebly.com
+dara3dccj.wixsite.com
+db.service4db.com
+de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev
+debutcan.firebaseapp.com
+debutcan.web.app
+delivery.attempt.failure.ebbs.co.za
+dev.stream.mornar.app
+dnwqmh.click
+dropsmartchain.pages.dev
+dsjoting.group
+dulb6c5p5.top
+ebay-mallwholesale.com
+ebt-lilac.vercel.app
+echoredled.netlify.app
+elbarco.percentadnp.info
+eltritongourmet.com
+email.mgb.modento.io
+enjomugg.firebaseapp.com
+enjomugg.web.app
+error3456vhubhornbase.azurewebsites.net
+example223.wixsite.com
+eyeydhe.wixsite.com
+eyttueiu.square.site
+facebook-avip.click
+fame.pink
+fassehoizubra-7696.vercel.app
+fastdropchain.pages.dev
+fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io
+fla-1001.square.site
+flo4211.github.io
+fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com
+fnuttlie.wiki
+fokeijonnekou.vercel.app
+fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com
+free-verified-badge-form0-service.vercel.app
+free-verified-meta-badge-service.vercel.app
+g06668706.wixsite.com
+gccndbqg.vip
+geriodememerkezi.online
+get-checkmark-for-you.vercel.app
+get-free-verified-badge-service-on.vercel.app
+gitanag.broke-it.net
+gruprocuroipra-6493.vercel.app
+h5.b9en.com
+h5.metacoint.com
+hcghij.top
+hecregayatu-1014.vercel.app
+hejmtxxt.guru
+helenblunt6.wixsite.com
+help.accountsupportcentre.com
+here-apply-for-page-review.vercel.app
+hgbk.ldgknhk.lol
+hhideiie.wixsite.com
+hitummoinneullei-5882.vercel.app
+home-101067.weeblysite.com
+home-103465.weeblysite.com
+home-104341.weeblysite.com
+home-105266.weeblysite.com
+home-105929.weeblysite.com
+homeattatthome.square.site
+hpnefhqs.motorcycles
+im25.net
+info.supercitrus.ind.br
+ins-business-home-center.com
+instagaramgalochka.vercel.app
+ipv6.43-135-137-110.cprapid.com
+irmt0ken.win
+iujf7839iofvkbcu748.weebly.com
+iwimwmiwi.click
+jagej73796.wixsite.com
+jfdjy.com
+kalyani963.github.io
+kexoigrufouddou-5902.vercel.app
+kl1k-ds1ni.neupdile.my.id
+kliind08.wixsite.com
+kreelo098.weebly.com
+kremlcup.com
+kshitij12375.github.io
+kucoinglobal1.com
+kxbztydc.black
+labanquepostale.jupiter-analytics.com
+leddevotoze-3146.vercel.app
+linnkdna-kget.wxxzsite.buzz
+llahi.info
+llahi.vip
+loffaummuddote-4145.vercel.app
+login-att-10221.square.site
+login-form.world
+login-online-outlook365.com
+login-outlook-midstreamauth.com
+login-screen-103134.weeblysite.com
+loginaccount70.wixsite.com
+loginaccount77.wixsite.com
+luk6414.wixsite.com
+luxlifemiamiblog.com
+m.meta-accessibility.io.vn
+madebybmr.fyi
+maqpiexyz.click
+mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev
+mayfair313.wixsite.com
+mdbrvlfy.black
+mesageriepro33range1.weebly.com
+metamsk-wallet-3.gitbook.io
+metttaa-audddt-new-02.firebaseapp.com
+metttaa-audddt-new-02.web.app
+microsoft365-storage.github.io
+mikepattyjm.wixsite.com
+mobilemidasbuy.n3g.fun
+monespacepro-client.3utilities.com
+monetization-violation.github.io
+moodengsol-net.pages.dev
+mwsiekdnfjrdufs.weebly.com
+mxmxnmx.mx.zya.me
+national-au-b.com
+national-au.net
+nbaaiqjq.group
+nexomyacwv.weebly.com
+nft-time11.vercel.app
+nichcheck.weeblysite.com
+ns1.carrier-ast2-portal-apple.com
+omadshf.ru
+online-assist.live
+online-promo-asb.org
+openkimono.pro
+opportunity-verified-status.vercel.app
+ourtime.reconnect-dating.workers.dev
+owouwuowo.click
+p365kf.com
+p4zv8crnrrha27so.94-103-188-123.plesk.page
+page-center-manage.com
+pavan-patil-22.github.io
+pecinternational.net
+peesom.chat
+pencairaanndannaa.my.id
+petty.wiki
+pimnhv.group
+policies-business-page-service.com
+pottatrebewe-2808.vercel.app
+pqo.hrf.mybluehost.me
+programming--service--panel-totlyy-free-for-you.vercel.app
+promo1.spik.ru
+protocolsecure.pages.dev
+pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev
+pub-1778406e4fec4394901793111c187dd9.r2.dev
+pub-19b834342e7d465b9f00b3511325a081.r2.dev
+pub-21dd4dc659614ceb93e45a6de4434502.r2.dev
+pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev
+pub-2fefe932a6974485b987c9ba851b5c40.r2.dev
+pub-3a46d9914f494078a6d6237513e7a096.r2.dev
+pub-442ed822851244a689b3472ea2c6a950.r2.dev
+pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev
+pub-682ad3b65d944376b919745aae3c56d4.r2.dev
+pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev
+pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev
+pub-7f5cf36445d042168bfacd712e890dc0.r2.dev
+pub-803839714a924882a7bcc2495a26860f.r2.dev
+pub-8161de4a277e4ee8b532af34954224e1.r2.dev
+pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev
+pub-8376b5b2334844d193a525d8b8548fa5.r2.dev
+pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev
+pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev
+pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev
+pub-9163a97d70394cb499bdd232be6c2169.r2.dev
+pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev
+pub-98171471e0944ac3a5820ef719bf0640.r2.dev
+pub-a263e0790935412eb10cacc55bbced18.r2.dev
+pub-a291041b077742899b63a9982f04a56c.r2.dev
+pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev
+pub-b50adc5d699a4f08aec37102c2103da7.r2.dev
+pub-c0a934c950e441db96b882789f53c9ea.r2.dev
+pub-c2c250050109456396c933de259a4fea.r2.dev
+pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev
+pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev
+pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev
+pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev
+pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev
+pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev
+pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev
+pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev
+pub-e42cb528b102447385e3145197916f51.r2.dev
+pub-e4aff507450c478cbe3f77ad23d75035.r2.dev
+pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev
+pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev
+pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev
+pubgm.club
+puffagroibrouwoi-8818.vercel.app
+qasimk.com
+qfjfvseq.info
+quauwograssodda-3503.vercel.app
+qysgyp.com
+rajdipchatterjee.github.io
+rechazaroanularaqui51.weebly.com
+remote-fix.pages.dev
+renggard.47-243-192-240.cprapid.com
+resolvepanel.live
+resolving--issue--with-us1.vercel.app
+resqat.weebly.com
+review-business-case.d2f7p3b7pucnle.amplifyapp.com
+rlpqwefi.pink
+rouloigeilleuja-9523.vercel.app
+rulemec.pages.dev
+rutinqqwin.shop
+rwftfu.quest
+s.team-pw.cc
+sairanees.github.io
+sanseipecas.com.br
+sasklelo.weebly.com
+sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com
+sasktelcustomerwebly.weebly.com
+sasktelnetwebmailservermaintainance.weebly.com
+sasktelrectify.weebly.com
+sasktelscrutinize.weebly.com
+sasktelservicecentterwebly.weebly.com
+sasktelsupportsystemwebly.weebly.com
+sbcglobal30.wixsite.com
+scan-vulnerability-guard-v3.pages.dev
+scan-vulnerability-guard.pages.dev
+scanner-metamask-v1.pages.dev
+scanner-metamask-v2.pages.dev
+scanner-metamask-v3.pages.dev
+scanner-metamask.pages.dev
+sec-sign-in.info
+secure2-validitycheck.weebly.com
+securecapitec.theprimepoint.online
+securerpcfix.com
+seeteressecalywoi.github.io
+seivviice.weebly.com
+server.0e7p.com
+server.2rk3.com
+server.8q3p.com
+server.n6b8.com
+server.v9vs.com
+sevvviicess.weebly.com
+shard.blue
+shard.skin
+shared-d7590.firebaseapp.com
+shared-d7590.web.app
+shaw-101329.weeblysite.com
+shaw-101587.weeblysite.com
+shaw-106427.weeblysite.com
+shaw-107375.weeblysite.com
+solutionwebsitedapp.firebaseapp.com
+solutionwebsitedapp.web.app
+solvetans.firebaseapp.com
+solvetans.web.app
+sondfrom.dexlog.my.id
+soyokai.or.jp
+srdate.club
+ssy.hmb.mybluehostin.me
+steam.poweredartsworkshop.com
+steam.workshopsreview.com
+steamcommmuty.com
+steamcommuunity.ru
+steamcomunutty.com
+steamconmumity.com
+stepsray.vercel.app
+support-metahelpcenter-id100003498934.netlify.app
+sv5gardens655665.weeblysite.com
+system-portalnu.duckdns.org
+talwgam.njmolada.com
+taste.baby
+tele.zhngain.top
+telegrambot-resolved.pages.dev
+telegrazm.net
+telstra-100408.weeblysite.com
+telstra-100469.weeblysite.com
+telstra-103234.weeblysite.com
+tiktok-888.vip
+tiltckshow.top
+tnomwzrp.top
+toeken.im
+tonic.pink
+tooma.cellinsurance.co.zw
+tpdtepremu.xyz
+trattujeilesso-3354.vercel.app
+trbinace.com
+treibrukeukonno-1395.vercel.app
+tuesmad.firebaseapp.com
+tuesmad.web.app
+tyyyyyytyyy.weebly.com
+tzcsjfto.chat
+u.updatetrackgre.top
+uc-whatstapp-web.com
+udxcady.wixsite.com
+uklifejv.cyou
+updatemail12.wixsite.com
+ups-trackdeliveryapps.chickenkiller.com
+usbest.cyou
+user-transaction-overview.vercel.app
+usps.com-trackdck.top
+usps.com-tracklnv.top
+usps.com-trackmcl.top
+usps.com-trackmec.top
+usps.com-tracktpq.top
+usps.com-trackvmd.top
+uspsinfw.top
+uwdtsczi.top
+uwm-onedrive.com
+vaishnavi1436.github.io
+validatie-veiligauthenticatie.com
+vbbu.ldgknhk.lol
+verified-this-request-badge.vercel.app
+vo4zzp.icu
+vs41.github.io
+walett-cont.gitbook.io
+walletauthenticators.vercel.app
+walletcomnecitt.gitbook.io
+walletconnectdapps.online
+watranfart-fdd6a8.ingress-bonde.ewp.live
+waxed.wiki
+webmaillshavv.weebly.com
+weeeqweeattt.weebly.com
+weigh.skin
+weigh.wiki
+wgqdqvtn.baby
+wgqdqvtn.pink
+whatsapp-rqr.com
+wirelessvoicebtpaidmailinfoplay047.weebly.com
+wscs1231.cyou
+xn--metmasklogin-vcb.gitbook.io
+xojautruffeuttu-4659.vercel.app
+xraiz.info
+xraiz.vip
+xsuweamskeidjf.weebly.com
+xya46.cc
+yahoooooo-108560.weeblysite.com
+yavanica123.github.io
+yi5lq-syaaa-aaaag-acfsq-cai.icp0.io
+you-can-receive-here.vercel.app
+zeiitgeist.angelocachero.info
+zenixoikitti-5809.vercel.app
+zeznjx.shop
+zwzcn.com
diff --git a/phishing-filter-dnscrypt-blocked-names.txt.br b/phishing-filter-dnscrypt-blocked-names.txt.br
new file mode 100644
index 000000000..e0f7be29d
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-names.txt.br differ
diff --git a/phishing-filter-dnscrypt-blocked-names.txt.gz b/phishing-filter-dnscrypt-blocked-names.txt.gz
new file mode 100644
index 000000000..88afedd09
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-names.txt.gz differ
diff --git a/phishing-filter-dnsmasq.conf b/phishing-filter-dnsmasq.conf
new file mode 100644
index 000000000..62b2f94d9
--- /dev/null
+++ b/phishing-filter-dnsmasq.conf
@@ -0,0 +1,434 @@
+# Title: Phishing Domains dnsmasq Blocklist
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+address=/1111365dh.net/0.0.0.0
+address=/12931-coinbase.com/0.0.0.0
+address=/215323.com/0.0.0.0
+address=/260aesthetic.wixsite.com/0.0.0.0
+address=/3650947.cc/0.0.0.0
+address=/3659ll.net/0.0.0.0
+address=/83291-coinbase.com/0.0.0.0
+address=/94-103-188-123.plesk.page/0.0.0.0
+address=/9825057365.com/0.0.0.0
+address=/abctrvabc.com/0.0.0.0
+address=/access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com/0.0.0.0
+address=/acclimatizable.fun/0.0.0.0
+address=/account-update05.myvnc.com/0.0.0.0
+address=/accounts.google.auzen.us.kg/0.0.0.0
+address=/activebusiness-unlocker3.com/0.0.0.0
+address=/addwsrbh.green/0.0.0.0
+address=/ahnp.vercel.app/0.0.0.0
+address=/aldg.ldgknhk.lol/0.0.0.0
+address=/allegrolokalnie.pl-891241214.buzz/0.0.0.0
+address=/alutipcentra.pages.dev/0.0.0.0
+address=/ambil-pinjaman-daana-payleter.xforms.web.id/0.0.0.0
+address=/ambulatoriprivati.it/0.0.0.0
+address=/amev.ldgknhk.lol/0.0.0.0
+address=/antail-conv.com/0.0.0.0
+address=/apply-now-to-receive-badge.vercel.app/0.0.0.0
+address=/artsea.pages.dev/0.0.0.0
+address=/atmailupdatewptnskmdinfomailacct.weebly.com/0.0.0.0
+address=/att-101072.weeblysite.com/0.0.0.0
+address=/att-1041page.weeblysite.com/0.0.0.0
+address=/att-105714.weeblysite.com/0.0.0.0
+address=/att-105819.square.site/0.0.0.0
+address=/att-inc-107097.weeblysite.com/0.0.0.0
+address=/att-login380.weeblysite.com/0.0.0.0
+address=/att-login522.weeblysite.com/0.0.0.0
+address=/att-service-102155.weeblysite.com/0.0.0.0
+address=/att-sign-in-105669.weeblysite.com/0.0.0.0
+address=/attcom-100762.weeblysite.com/0.0.0.0
+address=/attcom-106808.weeblysite.com/0.0.0.0
+address=/attmailservicenow.wixstudio.com/0.0.0.0
+address=/attmailservicenow.wixstudio.io/0.0.0.0
+address=/attmailsrvrdesk.weebly.com/0.0.0.0
+address=/attnewmaill.weebly.com/0.0.0.0
+address=/attyhhhhiiii225.weebly.com/0.0.0.0
+address=/atw-tau.vercel.app/0.0.0.0
+address=/authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com/0.0.0.0
+address=/authsyncs.pages.dev/0.0.0.0
+address=/autoreplyattmode.wixsite.com/0.0.0.0
+address=/avoid.hold-managert.com/0.0.0.0
+address=/azbin.ir/0.0.0.0
+address=/b45018.com/0.0.0.0
+address=/bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link/0.0.0.0
+address=/baiii-wong.cutvi.cfd/0.0.0.0
+address=/basvuru-online-yap.vercel.app/0.0.0.0
+address=/beionfidi.pages.dev/0.0.0.0
+address=/bet73nn.com/0.0.0.0
+address=/bet83039.com/0.0.0.0
+address=/bet83054.com/0.0.0.0
+address=/bfrescentremebermainsetreouytnoy.weebly.com/0.0.0.0
+address=/biggggggggggg.weebly.com/0.0.0.0
+address=/bitnode.pages.dev/0.0.0.0
+address=/bitvavobtc.com/0.0.0.0
+address=/blackhere11.serv00.net/0.0.0.0
+address=/blss24att.weebly.com/0.0.0.0
+address=/braucrarasuteu-2470.vercel.app/0.0.0.0
+address=/bt-102124.weeblysite.com/0.0.0.0
+address=/bt1business.weebly.com/0.0.0.0
+address=/btuan-dan2-resmi.top1.my.id/0.0.0.0
+address=/buildingdesignsusapdf.s3.us-east-005.backblazeb2.com/0.0.0.0
+address=/business-page-property-897432967.netlify.app/0.0.0.0
+address=/caipora.xyz/0.0.0.0
+address=/calm-pothos-3b24c9.netlify.app/0.0.0.0
+address=/carrefourarabiank15.pages.dev/0.0.0.0
+address=/caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com/0.0.0.0
+address=/catgirl-appverset-nya.pages.dev/0.0.0.0
+address=/catxtokens.pages.dev/0.0.0.0
+address=/chat.94-103-188-123.plesk.page/0.0.0.0
+address=/check154109.click/0.0.0.0
+address=/checkseven.vercel.app/0.0.0.0
+address=/ciente-a.org/0.0.0.0
+address=/cieplo.app/0.0.0.0
+address=/cj12143.tw1.ru/0.0.0.0
+address=/cj87335.tw1.ru/0.0.0.0
+address=/claimyourethrewards.pages.dev/0.0.0.0
+address=/clickbait.design/0.0.0.0
+address=/cnsa163.com/0.0.0.0
+address=/cock2-iota.vercel.app/0.0.0.0
+address=/cock3.vercel.app/0.0.0.0
+address=/cock7.vercel.app/0.0.0.0
+address=/contact-pro-8291-d01.firebaseapp.com/0.0.0.0
+address=/contact-pro-8291-d01.web.app/0.0.0.0
+address=/creosrl.com/0.0.0.0
+address=/curmmgdv.email/0.0.0.0
+address=/currently541.weebly.com/0.0.0.0
+address=/currently890.weebly.com/0.0.0.0
+address=/currentlyserver.weebly.com/0.0.0.0
+address=/dara3dccj.wixsite.com/0.0.0.0
+address=/db.service4db.com/0.0.0.0
+address=/de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev/0.0.0.0
+address=/debutcan.firebaseapp.com/0.0.0.0
+address=/debutcan.web.app/0.0.0.0
+address=/delivery.attempt.failure.ebbs.co.za/0.0.0.0
+address=/dev.stream.mornar.app/0.0.0.0
+address=/dnwqmh.click/0.0.0.0
+address=/dropsmartchain.pages.dev/0.0.0.0
+address=/dsjoting.group/0.0.0.0
+address=/dulb6c5p5.top/0.0.0.0
+address=/ebay-mallwholesale.com/0.0.0.0
+address=/ebt-lilac.vercel.app/0.0.0.0
+address=/echoredled.netlify.app/0.0.0.0
+address=/elbarco.percentadnp.info/0.0.0.0
+address=/eltritongourmet.com/0.0.0.0
+address=/email.mgb.modento.io/0.0.0.0
+address=/enjomugg.firebaseapp.com/0.0.0.0
+address=/enjomugg.web.app/0.0.0.0
+address=/error3456vhubhornbase.azurewebsites.net/0.0.0.0
+address=/example223.wixsite.com/0.0.0.0
+address=/eyeydhe.wixsite.com/0.0.0.0
+address=/eyttueiu.square.site/0.0.0.0
+address=/facebook-avip.click/0.0.0.0
+address=/fame.pink/0.0.0.0
+address=/fassehoizubra-7696.vercel.app/0.0.0.0
+address=/fastdropchain.pages.dev/0.0.0.0
+address=/fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io/0.0.0.0
+address=/fla-1001.square.site/0.0.0.0
+address=/flo4211.github.io/0.0.0.0
+address=/fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com/0.0.0.0
+address=/fnuttlie.wiki/0.0.0.0
+address=/fokeijonnekou.vercel.app/0.0.0.0
+address=/fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com/0.0.0.0
+address=/free-verified-badge-form0-service.vercel.app/0.0.0.0
+address=/free-verified-meta-badge-service.vercel.app/0.0.0.0
+address=/g06668706.wixsite.com/0.0.0.0
+address=/gccndbqg.vip/0.0.0.0
+address=/geriodememerkezi.online/0.0.0.0
+address=/get-checkmark-for-you.vercel.app/0.0.0.0
+address=/get-free-verified-badge-service-on.vercel.app/0.0.0.0
+address=/gitanag.broke-it.net/0.0.0.0
+address=/gruprocuroipra-6493.vercel.app/0.0.0.0
+address=/h5.b9en.com/0.0.0.0
+address=/h5.metacoint.com/0.0.0.0
+address=/hcghij.top/0.0.0.0
+address=/hecregayatu-1014.vercel.app/0.0.0.0
+address=/hejmtxxt.guru/0.0.0.0
+address=/helenblunt6.wixsite.com/0.0.0.0
+address=/help.accountsupportcentre.com/0.0.0.0
+address=/here-apply-for-page-review.vercel.app/0.0.0.0
+address=/hgbk.ldgknhk.lol/0.0.0.0
+address=/hhideiie.wixsite.com/0.0.0.0
+address=/hitummoinneullei-5882.vercel.app/0.0.0.0
+address=/home-101067.weeblysite.com/0.0.0.0
+address=/home-103465.weeblysite.com/0.0.0.0
+address=/home-104341.weeblysite.com/0.0.0.0
+address=/home-105266.weeblysite.com/0.0.0.0
+address=/home-105929.weeblysite.com/0.0.0.0
+address=/homeattatthome.square.site/0.0.0.0
+address=/hpnefhqs.motorcycles/0.0.0.0
+address=/im25.net/0.0.0.0
+address=/info.supercitrus.ind.br/0.0.0.0
+address=/ins-business-home-center.com/0.0.0.0
+address=/instagaramgalochka.vercel.app/0.0.0.0
+address=/ipv6.43-135-137-110.cprapid.com/0.0.0.0
+address=/irmt0ken.win/0.0.0.0
+address=/iujf7839iofvkbcu748.weebly.com/0.0.0.0
+address=/iwimwmiwi.click/0.0.0.0
+address=/jagej73796.wixsite.com/0.0.0.0
+address=/jfdjy.com/0.0.0.0
+address=/kalyani963.github.io/0.0.0.0
+address=/kexoigrufouddou-5902.vercel.app/0.0.0.0
+address=/kl1k-ds1ni.neupdile.my.id/0.0.0.0
+address=/kliind08.wixsite.com/0.0.0.0
+address=/kreelo098.weebly.com/0.0.0.0
+address=/kremlcup.com/0.0.0.0
+address=/kshitij12375.github.io/0.0.0.0
+address=/kucoinglobal1.com/0.0.0.0
+address=/kxbztydc.black/0.0.0.0
+address=/labanquepostale.jupiter-analytics.com/0.0.0.0
+address=/leddevotoze-3146.vercel.app/0.0.0.0
+address=/linnkdna-kget.wxxzsite.buzz/0.0.0.0
+address=/llahi.info/0.0.0.0
+address=/llahi.vip/0.0.0.0
+address=/loffaummuddote-4145.vercel.app/0.0.0.0
+address=/login-att-10221.square.site/0.0.0.0
+address=/login-form.world/0.0.0.0
+address=/login-online-outlook365.com/0.0.0.0
+address=/login-outlook-midstreamauth.com/0.0.0.0
+address=/login-screen-103134.weeblysite.com/0.0.0.0
+address=/loginaccount70.wixsite.com/0.0.0.0
+address=/loginaccount77.wixsite.com/0.0.0.0
+address=/luk6414.wixsite.com/0.0.0.0
+address=/luxlifemiamiblog.com/0.0.0.0
+address=/m.meta-accessibility.io.vn/0.0.0.0
+address=/madebybmr.fyi/0.0.0.0
+address=/maqpiexyz.click/0.0.0.0
+address=/mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev/0.0.0.0
+address=/mayfair313.wixsite.com/0.0.0.0
+address=/mdbrvlfy.black/0.0.0.0
+address=/mesageriepro33range1.weebly.com/0.0.0.0
+address=/metamsk-wallet-3.gitbook.io/0.0.0.0
+address=/metttaa-audddt-new-02.firebaseapp.com/0.0.0.0
+address=/metttaa-audddt-new-02.web.app/0.0.0.0
+address=/microsoft365-storage.github.io/0.0.0.0
+address=/mikepattyjm.wixsite.com/0.0.0.0
+address=/mobilemidasbuy.n3g.fun/0.0.0.0
+address=/monespacepro-client.3utilities.com/0.0.0.0
+address=/monetization-violation.github.io/0.0.0.0
+address=/moodengsol-net.pages.dev/0.0.0.0
+address=/mwsiekdnfjrdufs.weebly.com/0.0.0.0
+address=/mxmxnmx.mx.zya.me/0.0.0.0
+address=/national-au-b.com/0.0.0.0
+address=/national-au.net/0.0.0.0
+address=/nbaaiqjq.group/0.0.0.0
+address=/nexomyacwv.weebly.com/0.0.0.0
+address=/nft-time11.vercel.app/0.0.0.0
+address=/nichcheck.weeblysite.com/0.0.0.0
+address=/ns1.carrier-ast2-portal-apple.com/0.0.0.0
+address=/omadshf.ru/0.0.0.0
+address=/online-assist.live/0.0.0.0
+address=/online-promo-asb.org/0.0.0.0
+address=/openkimono.pro/0.0.0.0
+address=/opportunity-verified-status.vercel.app/0.0.0.0
+address=/ourtime.reconnect-dating.workers.dev/0.0.0.0
+address=/owouwuowo.click/0.0.0.0
+address=/p365kf.com/0.0.0.0
+address=/p4zv8crnrrha27so.94-103-188-123.plesk.page/0.0.0.0
+address=/page-center-manage.com/0.0.0.0
+address=/pavan-patil-22.github.io/0.0.0.0
+address=/pecinternational.net/0.0.0.0
+address=/peesom.chat/0.0.0.0
+address=/pencairaanndannaa.my.id/0.0.0.0
+address=/petty.wiki/0.0.0.0
+address=/pimnhv.group/0.0.0.0
+address=/policies-business-page-service.com/0.0.0.0
+address=/pottatrebewe-2808.vercel.app/0.0.0.0
+address=/pqo.hrf.mybluehost.me/0.0.0.0
+address=/programming--service--panel-totlyy-free-for-you.vercel.app/0.0.0.0
+address=/promo1.spik.ru/0.0.0.0
+address=/protocolsecure.pages.dev/0.0.0.0
+address=/pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev/0.0.0.0
+address=/pub-1778406e4fec4394901793111c187dd9.r2.dev/0.0.0.0
+address=/pub-19b834342e7d465b9f00b3511325a081.r2.dev/0.0.0.0
+address=/pub-21dd4dc659614ceb93e45a6de4434502.r2.dev/0.0.0.0
+address=/pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev/0.0.0.0
+address=/pub-2fefe932a6974485b987c9ba851b5c40.r2.dev/0.0.0.0
+address=/pub-3a46d9914f494078a6d6237513e7a096.r2.dev/0.0.0.0
+address=/pub-442ed822851244a689b3472ea2c6a950.r2.dev/0.0.0.0
+address=/pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev/0.0.0.0
+address=/pub-682ad3b65d944376b919745aae3c56d4.r2.dev/0.0.0.0
+address=/pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev/0.0.0.0
+address=/pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev/0.0.0.0
+address=/pub-7f5cf36445d042168bfacd712e890dc0.r2.dev/0.0.0.0
+address=/pub-803839714a924882a7bcc2495a26860f.r2.dev/0.0.0.0
+address=/pub-8161de4a277e4ee8b532af34954224e1.r2.dev/0.0.0.0
+address=/pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev/0.0.0.0
+address=/pub-8376b5b2334844d193a525d8b8548fa5.r2.dev/0.0.0.0
+address=/pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev/0.0.0.0
+address=/pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev/0.0.0.0
+address=/pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev/0.0.0.0
+address=/pub-9163a97d70394cb499bdd232be6c2169.r2.dev/0.0.0.0
+address=/pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev/0.0.0.0
+address=/pub-98171471e0944ac3a5820ef719bf0640.r2.dev/0.0.0.0
+address=/pub-a263e0790935412eb10cacc55bbced18.r2.dev/0.0.0.0
+address=/pub-a291041b077742899b63a9982f04a56c.r2.dev/0.0.0.0
+address=/pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev/0.0.0.0
+address=/pub-b50adc5d699a4f08aec37102c2103da7.r2.dev/0.0.0.0
+address=/pub-c0a934c950e441db96b882789f53c9ea.r2.dev/0.0.0.0
+address=/pub-c2c250050109456396c933de259a4fea.r2.dev/0.0.0.0
+address=/pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev/0.0.0.0
+address=/pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev/0.0.0.0
+address=/pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev/0.0.0.0
+address=/pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev/0.0.0.0
+address=/pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev/0.0.0.0
+address=/pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev/0.0.0.0
+address=/pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev/0.0.0.0
+address=/pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev/0.0.0.0
+address=/pub-e42cb528b102447385e3145197916f51.r2.dev/0.0.0.0
+address=/pub-e4aff507450c478cbe3f77ad23d75035.r2.dev/0.0.0.0
+address=/pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev/0.0.0.0
+address=/pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev/0.0.0.0
+address=/pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev/0.0.0.0
+address=/pubgm.club/0.0.0.0
+address=/puffagroibrouwoi-8818.vercel.app/0.0.0.0
+address=/qasimk.com/0.0.0.0
+address=/qfjfvseq.info/0.0.0.0
+address=/quauwograssodda-3503.vercel.app/0.0.0.0
+address=/qysgyp.com/0.0.0.0
+address=/rajdipchatterjee.github.io/0.0.0.0
+address=/rechazaroanularaqui51.weebly.com/0.0.0.0
+address=/remote-fix.pages.dev/0.0.0.0
+address=/renggard.47-243-192-240.cprapid.com/0.0.0.0
+address=/resolvepanel.live/0.0.0.0
+address=/resolving--issue--with-us1.vercel.app/0.0.0.0
+address=/resqat.weebly.com/0.0.0.0
+address=/review-business-case.d2f7p3b7pucnle.amplifyapp.com/0.0.0.0
+address=/rlpqwefi.pink/0.0.0.0
+address=/rouloigeilleuja-9523.vercel.app/0.0.0.0
+address=/rulemec.pages.dev/0.0.0.0
+address=/rutinqqwin.shop/0.0.0.0
+address=/rwftfu.quest/0.0.0.0
+address=/s.team-pw.cc/0.0.0.0
+address=/sairanees.github.io/0.0.0.0
+address=/sanseipecas.com.br/0.0.0.0
+address=/sasklelo.weebly.com/0.0.0.0
+address=/sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com/0.0.0.0
+address=/sasktelcustomerwebly.weebly.com/0.0.0.0
+address=/sasktelnetwebmailservermaintainance.weebly.com/0.0.0.0
+address=/sasktelrectify.weebly.com/0.0.0.0
+address=/sasktelscrutinize.weebly.com/0.0.0.0
+address=/sasktelservicecentterwebly.weebly.com/0.0.0.0
+address=/sasktelsupportsystemwebly.weebly.com/0.0.0.0
+address=/sbcglobal30.wixsite.com/0.0.0.0
+address=/scan-vulnerability-guard-v3.pages.dev/0.0.0.0
+address=/scan-vulnerability-guard.pages.dev/0.0.0.0
+address=/scanner-metamask-v1.pages.dev/0.0.0.0
+address=/scanner-metamask-v2.pages.dev/0.0.0.0
+address=/scanner-metamask-v3.pages.dev/0.0.0.0
+address=/scanner-metamask.pages.dev/0.0.0.0
+address=/sec-sign-in.info/0.0.0.0
+address=/secure2-validitycheck.weebly.com/0.0.0.0
+address=/securecapitec.theprimepoint.online/0.0.0.0
+address=/securerpcfix.com/0.0.0.0
+address=/seeteressecalywoi.github.io/0.0.0.0
+address=/seivviice.weebly.com/0.0.0.0
+address=/server.0e7p.com/0.0.0.0
+address=/server.2rk3.com/0.0.0.0
+address=/server.8q3p.com/0.0.0.0
+address=/server.n6b8.com/0.0.0.0
+address=/server.v9vs.com/0.0.0.0
+address=/sevvviicess.weebly.com/0.0.0.0
+address=/shard.blue/0.0.0.0
+address=/shard.skin/0.0.0.0
+address=/shared-d7590.firebaseapp.com/0.0.0.0
+address=/shared-d7590.web.app/0.0.0.0
+address=/shaw-101329.weeblysite.com/0.0.0.0
+address=/shaw-101587.weeblysite.com/0.0.0.0
+address=/shaw-106427.weeblysite.com/0.0.0.0
+address=/shaw-107375.weeblysite.com/0.0.0.0
+address=/solutionwebsitedapp.firebaseapp.com/0.0.0.0
+address=/solutionwebsitedapp.web.app/0.0.0.0
+address=/solvetans.firebaseapp.com/0.0.0.0
+address=/solvetans.web.app/0.0.0.0
+address=/sondfrom.dexlog.my.id/0.0.0.0
+address=/soyokai.or.jp/0.0.0.0
+address=/srdate.club/0.0.0.0
+address=/ssy.hmb.mybluehostin.me/0.0.0.0
+address=/steam.poweredartsworkshop.com/0.0.0.0
+address=/steam.workshopsreview.com/0.0.0.0
+address=/steamcommmuty.com/0.0.0.0
+address=/steamcommuunity.ru/0.0.0.0
+address=/steamcomunutty.com/0.0.0.0
+address=/steamconmumity.com/0.0.0.0
+address=/stepsray.vercel.app/0.0.0.0
+address=/support-metahelpcenter-id100003498934.netlify.app/0.0.0.0
+address=/sv5gardens655665.weeblysite.com/0.0.0.0
+address=/system-portalnu.duckdns.org/0.0.0.0
+address=/talwgam.njmolada.com/0.0.0.0
+address=/taste.baby/0.0.0.0
+address=/tele.zhngain.top/0.0.0.0
+address=/telegrambot-resolved.pages.dev/0.0.0.0
+address=/telegrazm.net/0.0.0.0
+address=/telstra-100408.weeblysite.com/0.0.0.0
+address=/telstra-100469.weeblysite.com/0.0.0.0
+address=/telstra-103234.weeblysite.com/0.0.0.0
+address=/tiktok-888.vip/0.0.0.0
+address=/tiltckshow.top/0.0.0.0
+address=/tnomwzrp.top/0.0.0.0
+address=/toeken.im/0.0.0.0
+address=/tonic.pink/0.0.0.0
+address=/tooma.cellinsurance.co.zw/0.0.0.0
+address=/tpdtepremu.xyz/0.0.0.0
+address=/trattujeilesso-3354.vercel.app/0.0.0.0
+address=/trbinace.com/0.0.0.0
+address=/treibrukeukonno-1395.vercel.app/0.0.0.0
+address=/tuesmad.firebaseapp.com/0.0.0.0
+address=/tuesmad.web.app/0.0.0.0
+address=/tyyyyyytyyy.weebly.com/0.0.0.0
+address=/tzcsjfto.chat/0.0.0.0
+address=/u.updatetrackgre.top/0.0.0.0
+address=/uc-whatstapp-web.com/0.0.0.0
+address=/udxcady.wixsite.com/0.0.0.0
+address=/uklifejv.cyou/0.0.0.0
+address=/updatemail12.wixsite.com/0.0.0.0
+address=/ups-trackdeliveryapps.chickenkiller.com/0.0.0.0
+address=/usbest.cyou/0.0.0.0
+address=/user-transaction-overview.vercel.app/0.0.0.0
+address=/usps.com-trackdck.top/0.0.0.0
+address=/usps.com-tracklnv.top/0.0.0.0
+address=/usps.com-trackmcl.top/0.0.0.0
+address=/usps.com-trackmec.top/0.0.0.0
+address=/usps.com-tracktpq.top/0.0.0.0
+address=/usps.com-trackvmd.top/0.0.0.0
+address=/uspsinfw.top/0.0.0.0
+address=/uwdtsczi.top/0.0.0.0
+address=/uwm-onedrive.com/0.0.0.0
+address=/vaishnavi1436.github.io/0.0.0.0
+address=/validatie-veiligauthenticatie.com/0.0.0.0
+address=/vbbu.ldgknhk.lol/0.0.0.0
+address=/verified-this-request-badge.vercel.app/0.0.0.0
+address=/vo4zzp.icu/0.0.0.0
+address=/vs41.github.io/0.0.0.0
+address=/walett-cont.gitbook.io/0.0.0.0
+address=/walletauthenticators.vercel.app/0.0.0.0
+address=/walletcomnecitt.gitbook.io/0.0.0.0
+address=/walletconnectdapps.online/0.0.0.0
+address=/watranfart-fdd6a8.ingress-bonde.ewp.live/0.0.0.0
+address=/waxed.wiki/0.0.0.0
+address=/webmaillshavv.weebly.com/0.0.0.0
+address=/weeeqweeattt.weebly.com/0.0.0.0
+address=/weigh.skin/0.0.0.0
+address=/weigh.wiki/0.0.0.0
+address=/wgqdqvtn.baby/0.0.0.0
+address=/wgqdqvtn.pink/0.0.0.0
+address=/whatsapp-rqr.com/0.0.0.0
+address=/wirelessvoicebtpaidmailinfoplay047.weebly.com/0.0.0.0
+address=/wscs1231.cyou/0.0.0.0
+address=/xn--metmasklogin-vcb.gitbook.io/0.0.0.0
+address=/xojautruffeuttu-4659.vercel.app/0.0.0.0
+address=/xraiz.info/0.0.0.0
+address=/xraiz.vip/0.0.0.0
+address=/xsuweamskeidjf.weebly.com/0.0.0.0
+address=/xya46.cc/0.0.0.0
+address=/yahoooooo-108560.weeblysite.com/0.0.0.0
+address=/yavanica123.github.io/0.0.0.0
+address=/yi5lq-syaaa-aaaag-acfsq-cai.icp0.io/0.0.0.0
+address=/you-can-receive-here.vercel.app/0.0.0.0
+address=/zeiitgeist.angelocachero.info/0.0.0.0
+address=/zenixoikitti-5809.vercel.app/0.0.0.0
+address=/zeznjx.shop/0.0.0.0
+address=/zwzcn.com/0.0.0.0
diff --git a/phishing-filter-dnsmasq.conf.br b/phishing-filter-dnsmasq.conf.br
new file mode 100644
index 000000000..6a723e642
Binary files /dev/null and b/phishing-filter-dnsmasq.conf.br differ
diff --git a/phishing-filter-dnsmasq.conf.gz b/phishing-filter-dnsmasq.conf.gz
new file mode 100644
index 000000000..0c748f05f
Binary files /dev/null and b/phishing-filter-dnsmasq.conf.gz differ
diff --git a/phishing-filter-domains.txt b/phishing-filter-domains.txt
new file mode 100644
index 000000000..1bc7f77ce
--- /dev/null
+++ b/phishing-filter-domains.txt
@@ -0,0 +1,434 @@
+# Title: Phishing Domains Blocklist
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+1111365dh.net
+12931-coinbase.com
+215323.com
+260aesthetic.wixsite.com
+3650947.cc
+3659ll.net
+83291-coinbase.com
+94-103-188-123.plesk.page
+9825057365.com
+abctrvabc.com
+access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com
+acclimatizable.fun
+account-update05.myvnc.com
+accounts.google.auzen.us.kg
+activebusiness-unlocker3.com
+addwsrbh.green
+ahnp.vercel.app
+aldg.ldgknhk.lol
+allegrolokalnie.pl-891241214.buzz
+alutipcentra.pages.dev
+ambil-pinjaman-daana-payleter.xforms.web.id
+ambulatoriprivati.it
+amev.ldgknhk.lol
+antail-conv.com
+apply-now-to-receive-badge.vercel.app
+artsea.pages.dev
+atmailupdatewptnskmdinfomailacct.weebly.com
+att-101072.weeblysite.com
+att-1041page.weeblysite.com
+att-105714.weeblysite.com
+att-105819.square.site
+att-inc-107097.weeblysite.com
+att-login380.weeblysite.com
+att-login522.weeblysite.com
+att-service-102155.weeblysite.com
+att-sign-in-105669.weeblysite.com
+attcom-100762.weeblysite.com
+attcom-106808.weeblysite.com
+attmailservicenow.wixstudio.com
+attmailservicenow.wixstudio.io
+attmailsrvrdesk.weebly.com
+attnewmaill.weebly.com
+attyhhhhiiii225.weebly.com
+atw-tau.vercel.app
+authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com
+authsyncs.pages.dev
+autoreplyattmode.wixsite.com
+avoid.hold-managert.com
+azbin.ir
+b45018.com
+bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link
+baiii-wong.cutvi.cfd
+basvuru-online-yap.vercel.app
+beionfidi.pages.dev
+bet73nn.com
+bet83039.com
+bet83054.com
+bfrescentremebermainsetreouytnoy.weebly.com
+biggggggggggg.weebly.com
+bitnode.pages.dev
+bitvavobtc.com
+blackhere11.serv00.net
+blss24att.weebly.com
+braucrarasuteu-2470.vercel.app
+bt-102124.weeblysite.com
+bt1business.weebly.com
+btuan-dan2-resmi.top1.my.id
+buildingdesignsusapdf.s3.us-east-005.backblazeb2.com
+business-page-property-897432967.netlify.app
+caipora.xyz
+calm-pothos-3b24c9.netlify.app
+carrefourarabiank15.pages.dev
+caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com
+catgirl-appverset-nya.pages.dev
+catxtokens.pages.dev
+chat.94-103-188-123.plesk.page
+check154109.click
+checkseven.vercel.app
+ciente-a.org
+cieplo.app
+cj12143.tw1.ru
+cj87335.tw1.ru
+claimyourethrewards.pages.dev
+clickbait.design
+cnsa163.com
+cock2-iota.vercel.app
+cock3.vercel.app
+cock7.vercel.app
+contact-pro-8291-d01.firebaseapp.com
+contact-pro-8291-d01.web.app
+creosrl.com
+curmmgdv.email
+currently541.weebly.com
+currently890.weebly.com
+currentlyserver.weebly.com
+dara3dccj.wixsite.com
+db.service4db.com
+de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev
+debutcan.firebaseapp.com
+debutcan.web.app
+delivery.attempt.failure.ebbs.co.za
+dev.stream.mornar.app
+dnwqmh.click
+dropsmartchain.pages.dev
+dsjoting.group
+dulb6c5p5.top
+ebay-mallwholesale.com
+ebt-lilac.vercel.app
+echoredled.netlify.app
+elbarco.percentadnp.info
+eltritongourmet.com
+email.mgb.modento.io
+enjomugg.firebaseapp.com
+enjomugg.web.app
+error3456vhubhornbase.azurewebsites.net
+example223.wixsite.com
+eyeydhe.wixsite.com
+eyttueiu.square.site
+facebook-avip.click
+fame.pink
+fassehoizubra-7696.vercel.app
+fastdropchain.pages.dev
+fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io
+fla-1001.square.site
+flo4211.github.io
+fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com
+fnuttlie.wiki
+fokeijonnekou.vercel.app
+fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com
+free-verified-badge-form0-service.vercel.app
+free-verified-meta-badge-service.vercel.app
+g06668706.wixsite.com
+gccndbqg.vip
+geriodememerkezi.online
+get-checkmark-for-you.vercel.app
+get-free-verified-badge-service-on.vercel.app
+gitanag.broke-it.net
+gruprocuroipra-6493.vercel.app
+h5.b9en.com
+h5.metacoint.com
+hcghij.top
+hecregayatu-1014.vercel.app
+hejmtxxt.guru
+helenblunt6.wixsite.com
+help.accountsupportcentre.com
+here-apply-for-page-review.vercel.app
+hgbk.ldgknhk.lol
+hhideiie.wixsite.com
+hitummoinneullei-5882.vercel.app
+home-101067.weeblysite.com
+home-103465.weeblysite.com
+home-104341.weeblysite.com
+home-105266.weeblysite.com
+home-105929.weeblysite.com
+homeattatthome.square.site
+hpnefhqs.motorcycles
+im25.net
+info.supercitrus.ind.br
+ins-business-home-center.com
+instagaramgalochka.vercel.app
+ipv6.43-135-137-110.cprapid.com
+irmt0ken.win
+iujf7839iofvkbcu748.weebly.com
+iwimwmiwi.click
+jagej73796.wixsite.com
+jfdjy.com
+kalyani963.github.io
+kexoigrufouddou-5902.vercel.app
+kl1k-ds1ni.neupdile.my.id
+kliind08.wixsite.com
+kreelo098.weebly.com
+kremlcup.com
+kshitij12375.github.io
+kucoinglobal1.com
+kxbztydc.black
+labanquepostale.jupiter-analytics.com
+leddevotoze-3146.vercel.app
+linnkdna-kget.wxxzsite.buzz
+llahi.info
+llahi.vip
+loffaummuddote-4145.vercel.app
+login-att-10221.square.site
+login-form.world
+login-online-outlook365.com
+login-outlook-midstreamauth.com
+login-screen-103134.weeblysite.com
+loginaccount70.wixsite.com
+loginaccount77.wixsite.com
+luk6414.wixsite.com
+luxlifemiamiblog.com
+m.meta-accessibility.io.vn
+madebybmr.fyi
+maqpiexyz.click
+mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev
+mayfair313.wixsite.com
+mdbrvlfy.black
+mesageriepro33range1.weebly.com
+metamsk-wallet-3.gitbook.io
+metttaa-audddt-new-02.firebaseapp.com
+metttaa-audddt-new-02.web.app
+microsoft365-storage.github.io
+mikepattyjm.wixsite.com
+mobilemidasbuy.n3g.fun
+monespacepro-client.3utilities.com
+monetization-violation.github.io
+moodengsol-net.pages.dev
+mwsiekdnfjrdufs.weebly.com
+mxmxnmx.mx.zya.me
+national-au-b.com
+national-au.net
+nbaaiqjq.group
+nexomyacwv.weebly.com
+nft-time11.vercel.app
+nichcheck.weeblysite.com
+ns1.carrier-ast2-portal-apple.com
+omadshf.ru
+online-assist.live
+online-promo-asb.org
+openkimono.pro
+opportunity-verified-status.vercel.app
+ourtime.reconnect-dating.workers.dev
+owouwuowo.click
+p365kf.com
+p4zv8crnrrha27so.94-103-188-123.plesk.page
+page-center-manage.com
+pavan-patil-22.github.io
+pecinternational.net
+peesom.chat
+pencairaanndannaa.my.id
+petty.wiki
+pimnhv.group
+policies-business-page-service.com
+pottatrebewe-2808.vercel.app
+pqo.hrf.mybluehost.me
+programming--service--panel-totlyy-free-for-you.vercel.app
+promo1.spik.ru
+protocolsecure.pages.dev
+pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev
+pub-1778406e4fec4394901793111c187dd9.r2.dev
+pub-19b834342e7d465b9f00b3511325a081.r2.dev
+pub-21dd4dc659614ceb93e45a6de4434502.r2.dev
+pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev
+pub-2fefe932a6974485b987c9ba851b5c40.r2.dev
+pub-3a46d9914f494078a6d6237513e7a096.r2.dev
+pub-442ed822851244a689b3472ea2c6a950.r2.dev
+pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev
+pub-682ad3b65d944376b919745aae3c56d4.r2.dev
+pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev
+pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev
+pub-7f5cf36445d042168bfacd712e890dc0.r2.dev
+pub-803839714a924882a7bcc2495a26860f.r2.dev
+pub-8161de4a277e4ee8b532af34954224e1.r2.dev
+pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev
+pub-8376b5b2334844d193a525d8b8548fa5.r2.dev
+pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev
+pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev
+pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev
+pub-9163a97d70394cb499bdd232be6c2169.r2.dev
+pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev
+pub-98171471e0944ac3a5820ef719bf0640.r2.dev
+pub-a263e0790935412eb10cacc55bbced18.r2.dev
+pub-a291041b077742899b63a9982f04a56c.r2.dev
+pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev
+pub-b50adc5d699a4f08aec37102c2103da7.r2.dev
+pub-c0a934c950e441db96b882789f53c9ea.r2.dev
+pub-c2c250050109456396c933de259a4fea.r2.dev
+pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev
+pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev
+pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev
+pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev
+pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev
+pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev
+pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev
+pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev
+pub-e42cb528b102447385e3145197916f51.r2.dev
+pub-e4aff507450c478cbe3f77ad23d75035.r2.dev
+pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev
+pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev
+pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev
+pubgm.club
+puffagroibrouwoi-8818.vercel.app
+qasimk.com
+qfjfvseq.info
+quauwograssodda-3503.vercel.app
+qysgyp.com
+rajdipchatterjee.github.io
+rechazaroanularaqui51.weebly.com
+remote-fix.pages.dev
+renggard.47-243-192-240.cprapid.com
+resolvepanel.live
+resolving--issue--with-us1.vercel.app
+resqat.weebly.com
+review-business-case.d2f7p3b7pucnle.amplifyapp.com
+rlpqwefi.pink
+rouloigeilleuja-9523.vercel.app
+rulemec.pages.dev
+rutinqqwin.shop
+rwftfu.quest
+s.team-pw.cc
+sairanees.github.io
+sanseipecas.com.br
+sasklelo.weebly.com
+sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com
+sasktelcustomerwebly.weebly.com
+sasktelnetwebmailservermaintainance.weebly.com
+sasktelrectify.weebly.com
+sasktelscrutinize.weebly.com
+sasktelservicecentterwebly.weebly.com
+sasktelsupportsystemwebly.weebly.com
+sbcglobal30.wixsite.com
+scan-vulnerability-guard-v3.pages.dev
+scan-vulnerability-guard.pages.dev
+scanner-metamask-v1.pages.dev
+scanner-metamask-v2.pages.dev
+scanner-metamask-v3.pages.dev
+scanner-metamask.pages.dev
+sec-sign-in.info
+secure2-validitycheck.weebly.com
+securecapitec.theprimepoint.online
+securerpcfix.com
+seeteressecalywoi.github.io
+seivviice.weebly.com
+server.0e7p.com
+server.2rk3.com
+server.8q3p.com
+server.n6b8.com
+server.v9vs.com
+sevvviicess.weebly.com
+shard.blue
+shard.skin
+shared-d7590.firebaseapp.com
+shared-d7590.web.app
+shaw-101329.weeblysite.com
+shaw-101587.weeblysite.com
+shaw-106427.weeblysite.com
+shaw-107375.weeblysite.com
+solutionwebsitedapp.firebaseapp.com
+solutionwebsitedapp.web.app
+solvetans.firebaseapp.com
+solvetans.web.app
+sondfrom.dexlog.my.id
+soyokai.or.jp
+srdate.club
+ssy.hmb.mybluehostin.me
+steam.poweredartsworkshop.com
+steam.workshopsreview.com
+steamcommmuty.com
+steamcommuunity.ru
+steamcomunutty.com
+steamconmumity.com
+stepsray.vercel.app
+support-metahelpcenter-id100003498934.netlify.app
+sv5gardens655665.weeblysite.com
+system-portalnu.duckdns.org
+talwgam.njmolada.com
+taste.baby
+tele.zhngain.top
+telegrambot-resolved.pages.dev
+telegrazm.net
+telstra-100408.weeblysite.com
+telstra-100469.weeblysite.com
+telstra-103234.weeblysite.com
+tiktok-888.vip
+tiltckshow.top
+tnomwzrp.top
+toeken.im
+tonic.pink
+tooma.cellinsurance.co.zw
+tpdtepremu.xyz
+trattujeilesso-3354.vercel.app
+trbinace.com
+treibrukeukonno-1395.vercel.app
+tuesmad.firebaseapp.com
+tuesmad.web.app
+tyyyyyytyyy.weebly.com
+tzcsjfto.chat
+u.updatetrackgre.top
+uc-whatstapp-web.com
+udxcady.wixsite.com
+uklifejv.cyou
+updatemail12.wixsite.com
+ups-trackdeliveryapps.chickenkiller.com
+usbest.cyou
+user-transaction-overview.vercel.app
+usps.com-trackdck.top
+usps.com-tracklnv.top
+usps.com-trackmcl.top
+usps.com-trackmec.top
+usps.com-tracktpq.top
+usps.com-trackvmd.top
+uspsinfw.top
+uwdtsczi.top
+uwm-onedrive.com
+vaishnavi1436.github.io
+validatie-veiligauthenticatie.com
+vbbu.ldgknhk.lol
+verified-this-request-badge.vercel.app
+vo4zzp.icu
+vs41.github.io
+walett-cont.gitbook.io
+walletauthenticators.vercel.app
+walletcomnecitt.gitbook.io
+walletconnectdapps.online
+watranfart-fdd6a8.ingress-bonde.ewp.live
+waxed.wiki
+webmaillshavv.weebly.com
+weeeqweeattt.weebly.com
+weigh.skin
+weigh.wiki
+wgqdqvtn.baby
+wgqdqvtn.pink
+whatsapp-rqr.com
+wirelessvoicebtpaidmailinfoplay047.weebly.com
+wscs1231.cyou
+xn--metmasklogin-vcb.gitbook.io
+xojautruffeuttu-4659.vercel.app
+xraiz.info
+xraiz.vip
+xsuweamskeidjf.weebly.com
+xya46.cc
+yahoooooo-108560.weeblysite.com
+yavanica123.github.io
+yi5lq-syaaa-aaaag-acfsq-cai.icp0.io
+you-can-receive-here.vercel.app
+zeiitgeist.angelocachero.info
+zenixoikitti-5809.vercel.app
+zeznjx.shop
+zwzcn.com
diff --git a/phishing-filter-domains.txt.br b/phishing-filter-domains.txt.br
new file mode 100644
index 000000000..5e77b0d04
Binary files /dev/null and b/phishing-filter-domains.txt.br differ
diff --git a/phishing-filter-domains.txt.gz b/phishing-filter-domains.txt.gz
new file mode 100644
index 000000000..1c1223149
Binary files /dev/null and b/phishing-filter-domains.txt.gz differ
diff --git a/phishing-filter-hosts.txt b/phishing-filter-hosts.txt
new file mode 100644
index 000000000..5c24abebf
--- /dev/null
+++ b/phishing-filter-hosts.txt
@@ -0,0 +1,434 @@
+# Title: Phishing Hosts Blocklist
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+0.0.0.0 1111365dh.net
+0.0.0.0 12931-coinbase.com
+0.0.0.0 215323.com
+0.0.0.0 260aesthetic.wixsite.com
+0.0.0.0 3650947.cc
+0.0.0.0 3659ll.net
+0.0.0.0 83291-coinbase.com
+0.0.0.0 94-103-188-123.plesk.page
+0.0.0.0 9825057365.com
+0.0.0.0 abctrvabc.com
+0.0.0.0 access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com
+0.0.0.0 acclimatizable.fun
+0.0.0.0 account-update05.myvnc.com
+0.0.0.0 accounts.google.auzen.us.kg
+0.0.0.0 activebusiness-unlocker3.com
+0.0.0.0 addwsrbh.green
+0.0.0.0 ahnp.vercel.app
+0.0.0.0 aldg.ldgknhk.lol
+0.0.0.0 allegrolokalnie.pl-891241214.buzz
+0.0.0.0 alutipcentra.pages.dev
+0.0.0.0 ambil-pinjaman-daana-payleter.xforms.web.id
+0.0.0.0 ambulatoriprivati.it
+0.0.0.0 amev.ldgknhk.lol
+0.0.0.0 antail-conv.com
+0.0.0.0 apply-now-to-receive-badge.vercel.app
+0.0.0.0 artsea.pages.dev
+0.0.0.0 atmailupdatewptnskmdinfomailacct.weebly.com
+0.0.0.0 att-101072.weeblysite.com
+0.0.0.0 att-1041page.weeblysite.com
+0.0.0.0 att-105714.weeblysite.com
+0.0.0.0 att-105819.square.site
+0.0.0.0 att-inc-107097.weeblysite.com
+0.0.0.0 att-login380.weeblysite.com
+0.0.0.0 att-login522.weeblysite.com
+0.0.0.0 att-service-102155.weeblysite.com
+0.0.0.0 att-sign-in-105669.weeblysite.com
+0.0.0.0 attcom-100762.weeblysite.com
+0.0.0.0 attcom-106808.weeblysite.com
+0.0.0.0 attmailservicenow.wixstudio.com
+0.0.0.0 attmailservicenow.wixstudio.io
+0.0.0.0 attmailsrvrdesk.weebly.com
+0.0.0.0 attnewmaill.weebly.com
+0.0.0.0 attyhhhhiiii225.weebly.com
+0.0.0.0 atw-tau.vercel.app
+0.0.0.0 authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com
+0.0.0.0 authsyncs.pages.dev
+0.0.0.0 autoreplyattmode.wixsite.com
+0.0.0.0 avoid.hold-managert.com
+0.0.0.0 azbin.ir
+0.0.0.0 b45018.com
+0.0.0.0 bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link
+0.0.0.0 baiii-wong.cutvi.cfd
+0.0.0.0 basvuru-online-yap.vercel.app
+0.0.0.0 beionfidi.pages.dev
+0.0.0.0 bet73nn.com
+0.0.0.0 bet83039.com
+0.0.0.0 bet83054.com
+0.0.0.0 bfrescentremebermainsetreouytnoy.weebly.com
+0.0.0.0 biggggggggggg.weebly.com
+0.0.0.0 bitnode.pages.dev
+0.0.0.0 bitvavobtc.com
+0.0.0.0 blackhere11.serv00.net
+0.0.0.0 blss24att.weebly.com
+0.0.0.0 braucrarasuteu-2470.vercel.app
+0.0.0.0 bt-102124.weeblysite.com
+0.0.0.0 bt1business.weebly.com
+0.0.0.0 btuan-dan2-resmi.top1.my.id
+0.0.0.0 buildingdesignsusapdf.s3.us-east-005.backblazeb2.com
+0.0.0.0 business-page-property-897432967.netlify.app
+0.0.0.0 caipora.xyz
+0.0.0.0 calm-pothos-3b24c9.netlify.app
+0.0.0.0 carrefourarabiank15.pages.dev
+0.0.0.0 caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com
+0.0.0.0 catgirl-appverset-nya.pages.dev
+0.0.0.0 catxtokens.pages.dev
+0.0.0.0 chat.94-103-188-123.plesk.page
+0.0.0.0 check154109.click
+0.0.0.0 checkseven.vercel.app
+0.0.0.0 ciente-a.org
+0.0.0.0 cieplo.app
+0.0.0.0 cj12143.tw1.ru
+0.0.0.0 cj87335.tw1.ru
+0.0.0.0 claimyourethrewards.pages.dev
+0.0.0.0 clickbait.design
+0.0.0.0 cnsa163.com
+0.0.0.0 cock2-iota.vercel.app
+0.0.0.0 cock3.vercel.app
+0.0.0.0 cock7.vercel.app
+0.0.0.0 contact-pro-8291-d01.firebaseapp.com
+0.0.0.0 contact-pro-8291-d01.web.app
+0.0.0.0 creosrl.com
+0.0.0.0 curmmgdv.email
+0.0.0.0 currently541.weebly.com
+0.0.0.0 currently890.weebly.com
+0.0.0.0 currentlyserver.weebly.com
+0.0.0.0 dara3dccj.wixsite.com
+0.0.0.0 db.service4db.com
+0.0.0.0 de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev
+0.0.0.0 debutcan.firebaseapp.com
+0.0.0.0 debutcan.web.app
+0.0.0.0 delivery.attempt.failure.ebbs.co.za
+0.0.0.0 dev.stream.mornar.app
+0.0.0.0 dnwqmh.click
+0.0.0.0 dropsmartchain.pages.dev
+0.0.0.0 dsjoting.group
+0.0.0.0 dulb6c5p5.top
+0.0.0.0 ebay-mallwholesale.com
+0.0.0.0 ebt-lilac.vercel.app
+0.0.0.0 echoredled.netlify.app
+0.0.0.0 elbarco.percentadnp.info
+0.0.0.0 eltritongourmet.com
+0.0.0.0 email.mgb.modento.io
+0.0.0.0 enjomugg.firebaseapp.com
+0.0.0.0 enjomugg.web.app
+0.0.0.0 error3456vhubhornbase.azurewebsites.net
+0.0.0.0 example223.wixsite.com
+0.0.0.0 eyeydhe.wixsite.com
+0.0.0.0 eyttueiu.square.site
+0.0.0.0 facebook-avip.click
+0.0.0.0 fame.pink
+0.0.0.0 fassehoizubra-7696.vercel.app
+0.0.0.0 fastdropchain.pages.dev
+0.0.0.0 fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io
+0.0.0.0 fla-1001.square.site
+0.0.0.0 flo4211.github.io
+0.0.0.0 fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com
+0.0.0.0 fnuttlie.wiki
+0.0.0.0 fokeijonnekou.vercel.app
+0.0.0.0 fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com
+0.0.0.0 free-verified-badge-form0-service.vercel.app
+0.0.0.0 free-verified-meta-badge-service.vercel.app
+0.0.0.0 g06668706.wixsite.com
+0.0.0.0 gccndbqg.vip
+0.0.0.0 geriodememerkezi.online
+0.0.0.0 get-checkmark-for-you.vercel.app
+0.0.0.0 get-free-verified-badge-service-on.vercel.app
+0.0.0.0 gitanag.broke-it.net
+0.0.0.0 gruprocuroipra-6493.vercel.app
+0.0.0.0 h5.b9en.com
+0.0.0.0 h5.metacoint.com
+0.0.0.0 hcghij.top
+0.0.0.0 hecregayatu-1014.vercel.app
+0.0.0.0 hejmtxxt.guru
+0.0.0.0 helenblunt6.wixsite.com
+0.0.0.0 help.accountsupportcentre.com
+0.0.0.0 here-apply-for-page-review.vercel.app
+0.0.0.0 hgbk.ldgknhk.lol
+0.0.0.0 hhideiie.wixsite.com
+0.0.0.0 hitummoinneullei-5882.vercel.app
+0.0.0.0 home-101067.weeblysite.com
+0.0.0.0 home-103465.weeblysite.com
+0.0.0.0 home-104341.weeblysite.com
+0.0.0.0 home-105266.weeblysite.com
+0.0.0.0 home-105929.weeblysite.com
+0.0.0.0 homeattatthome.square.site
+0.0.0.0 hpnefhqs.motorcycles
+0.0.0.0 im25.net
+0.0.0.0 info.supercitrus.ind.br
+0.0.0.0 ins-business-home-center.com
+0.0.0.0 instagaramgalochka.vercel.app
+0.0.0.0 ipv6.43-135-137-110.cprapid.com
+0.0.0.0 irmt0ken.win
+0.0.0.0 iujf7839iofvkbcu748.weebly.com
+0.0.0.0 iwimwmiwi.click
+0.0.0.0 jagej73796.wixsite.com
+0.0.0.0 jfdjy.com
+0.0.0.0 kalyani963.github.io
+0.0.0.0 kexoigrufouddou-5902.vercel.app
+0.0.0.0 kl1k-ds1ni.neupdile.my.id
+0.0.0.0 kliind08.wixsite.com
+0.0.0.0 kreelo098.weebly.com
+0.0.0.0 kremlcup.com
+0.0.0.0 kshitij12375.github.io
+0.0.0.0 kucoinglobal1.com
+0.0.0.0 kxbztydc.black
+0.0.0.0 labanquepostale.jupiter-analytics.com
+0.0.0.0 leddevotoze-3146.vercel.app
+0.0.0.0 linnkdna-kget.wxxzsite.buzz
+0.0.0.0 llahi.info
+0.0.0.0 llahi.vip
+0.0.0.0 loffaummuddote-4145.vercel.app
+0.0.0.0 login-att-10221.square.site
+0.0.0.0 login-form.world
+0.0.0.0 login-online-outlook365.com
+0.0.0.0 login-outlook-midstreamauth.com
+0.0.0.0 login-screen-103134.weeblysite.com
+0.0.0.0 loginaccount70.wixsite.com
+0.0.0.0 loginaccount77.wixsite.com
+0.0.0.0 luk6414.wixsite.com
+0.0.0.0 luxlifemiamiblog.com
+0.0.0.0 m.meta-accessibility.io.vn
+0.0.0.0 madebybmr.fyi
+0.0.0.0 maqpiexyz.click
+0.0.0.0 mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev
+0.0.0.0 mayfair313.wixsite.com
+0.0.0.0 mdbrvlfy.black
+0.0.0.0 mesageriepro33range1.weebly.com
+0.0.0.0 metamsk-wallet-3.gitbook.io
+0.0.0.0 metttaa-audddt-new-02.firebaseapp.com
+0.0.0.0 metttaa-audddt-new-02.web.app
+0.0.0.0 microsoft365-storage.github.io
+0.0.0.0 mikepattyjm.wixsite.com
+0.0.0.0 mobilemidasbuy.n3g.fun
+0.0.0.0 monespacepro-client.3utilities.com
+0.0.0.0 monetization-violation.github.io
+0.0.0.0 moodengsol-net.pages.dev
+0.0.0.0 mwsiekdnfjrdufs.weebly.com
+0.0.0.0 mxmxnmx.mx.zya.me
+0.0.0.0 national-au-b.com
+0.0.0.0 national-au.net
+0.0.0.0 nbaaiqjq.group
+0.0.0.0 nexomyacwv.weebly.com
+0.0.0.0 nft-time11.vercel.app
+0.0.0.0 nichcheck.weeblysite.com
+0.0.0.0 ns1.carrier-ast2-portal-apple.com
+0.0.0.0 omadshf.ru
+0.0.0.0 online-assist.live
+0.0.0.0 online-promo-asb.org
+0.0.0.0 openkimono.pro
+0.0.0.0 opportunity-verified-status.vercel.app
+0.0.0.0 ourtime.reconnect-dating.workers.dev
+0.0.0.0 owouwuowo.click
+0.0.0.0 p365kf.com
+0.0.0.0 p4zv8crnrrha27so.94-103-188-123.plesk.page
+0.0.0.0 page-center-manage.com
+0.0.0.0 pavan-patil-22.github.io
+0.0.0.0 pecinternational.net
+0.0.0.0 peesom.chat
+0.0.0.0 pencairaanndannaa.my.id
+0.0.0.0 petty.wiki
+0.0.0.0 pimnhv.group
+0.0.0.0 policies-business-page-service.com
+0.0.0.0 pottatrebewe-2808.vercel.app
+0.0.0.0 pqo.hrf.mybluehost.me
+0.0.0.0 programming--service--panel-totlyy-free-for-you.vercel.app
+0.0.0.0 promo1.spik.ru
+0.0.0.0 protocolsecure.pages.dev
+0.0.0.0 pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev
+0.0.0.0 pub-1778406e4fec4394901793111c187dd9.r2.dev
+0.0.0.0 pub-19b834342e7d465b9f00b3511325a081.r2.dev
+0.0.0.0 pub-21dd4dc659614ceb93e45a6de4434502.r2.dev
+0.0.0.0 pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev
+0.0.0.0 pub-2fefe932a6974485b987c9ba851b5c40.r2.dev
+0.0.0.0 pub-3a46d9914f494078a6d6237513e7a096.r2.dev
+0.0.0.0 pub-442ed822851244a689b3472ea2c6a950.r2.dev
+0.0.0.0 pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev
+0.0.0.0 pub-682ad3b65d944376b919745aae3c56d4.r2.dev
+0.0.0.0 pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev
+0.0.0.0 pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev
+0.0.0.0 pub-7f5cf36445d042168bfacd712e890dc0.r2.dev
+0.0.0.0 pub-803839714a924882a7bcc2495a26860f.r2.dev
+0.0.0.0 pub-8161de4a277e4ee8b532af34954224e1.r2.dev
+0.0.0.0 pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev
+0.0.0.0 pub-8376b5b2334844d193a525d8b8548fa5.r2.dev
+0.0.0.0 pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev
+0.0.0.0 pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev
+0.0.0.0 pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev
+0.0.0.0 pub-9163a97d70394cb499bdd232be6c2169.r2.dev
+0.0.0.0 pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev
+0.0.0.0 pub-98171471e0944ac3a5820ef719bf0640.r2.dev
+0.0.0.0 pub-a263e0790935412eb10cacc55bbced18.r2.dev
+0.0.0.0 pub-a291041b077742899b63a9982f04a56c.r2.dev
+0.0.0.0 pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev
+0.0.0.0 pub-b50adc5d699a4f08aec37102c2103da7.r2.dev
+0.0.0.0 pub-c0a934c950e441db96b882789f53c9ea.r2.dev
+0.0.0.0 pub-c2c250050109456396c933de259a4fea.r2.dev
+0.0.0.0 pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev
+0.0.0.0 pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev
+0.0.0.0 pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev
+0.0.0.0 pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev
+0.0.0.0 pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev
+0.0.0.0 pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev
+0.0.0.0 pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev
+0.0.0.0 pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev
+0.0.0.0 pub-e42cb528b102447385e3145197916f51.r2.dev
+0.0.0.0 pub-e4aff507450c478cbe3f77ad23d75035.r2.dev
+0.0.0.0 pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev
+0.0.0.0 pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev
+0.0.0.0 pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev
+0.0.0.0 pubgm.club
+0.0.0.0 puffagroibrouwoi-8818.vercel.app
+0.0.0.0 qasimk.com
+0.0.0.0 qfjfvseq.info
+0.0.0.0 quauwograssodda-3503.vercel.app
+0.0.0.0 qysgyp.com
+0.0.0.0 rajdipchatterjee.github.io
+0.0.0.0 rechazaroanularaqui51.weebly.com
+0.0.0.0 remote-fix.pages.dev
+0.0.0.0 renggard.47-243-192-240.cprapid.com
+0.0.0.0 resolvepanel.live
+0.0.0.0 resolving--issue--with-us1.vercel.app
+0.0.0.0 resqat.weebly.com
+0.0.0.0 review-business-case.d2f7p3b7pucnle.amplifyapp.com
+0.0.0.0 rlpqwefi.pink
+0.0.0.0 rouloigeilleuja-9523.vercel.app
+0.0.0.0 rulemec.pages.dev
+0.0.0.0 rutinqqwin.shop
+0.0.0.0 rwftfu.quest
+0.0.0.0 s.team-pw.cc
+0.0.0.0 sairanees.github.io
+0.0.0.0 sanseipecas.com.br
+0.0.0.0 sasklelo.weebly.com
+0.0.0.0 sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com
+0.0.0.0 sasktelcustomerwebly.weebly.com
+0.0.0.0 sasktelnetwebmailservermaintainance.weebly.com
+0.0.0.0 sasktelrectify.weebly.com
+0.0.0.0 sasktelscrutinize.weebly.com
+0.0.0.0 sasktelservicecentterwebly.weebly.com
+0.0.0.0 sasktelsupportsystemwebly.weebly.com
+0.0.0.0 sbcglobal30.wixsite.com
+0.0.0.0 scan-vulnerability-guard-v3.pages.dev
+0.0.0.0 scan-vulnerability-guard.pages.dev
+0.0.0.0 scanner-metamask-v1.pages.dev
+0.0.0.0 scanner-metamask-v2.pages.dev
+0.0.0.0 scanner-metamask-v3.pages.dev
+0.0.0.0 scanner-metamask.pages.dev
+0.0.0.0 sec-sign-in.info
+0.0.0.0 secure2-validitycheck.weebly.com
+0.0.0.0 securecapitec.theprimepoint.online
+0.0.0.0 securerpcfix.com
+0.0.0.0 seeteressecalywoi.github.io
+0.0.0.0 seivviice.weebly.com
+0.0.0.0 server.0e7p.com
+0.0.0.0 server.2rk3.com
+0.0.0.0 server.8q3p.com
+0.0.0.0 server.n6b8.com
+0.0.0.0 server.v9vs.com
+0.0.0.0 sevvviicess.weebly.com
+0.0.0.0 shard.blue
+0.0.0.0 shard.skin
+0.0.0.0 shared-d7590.firebaseapp.com
+0.0.0.0 shared-d7590.web.app
+0.0.0.0 shaw-101329.weeblysite.com
+0.0.0.0 shaw-101587.weeblysite.com
+0.0.0.0 shaw-106427.weeblysite.com
+0.0.0.0 shaw-107375.weeblysite.com
+0.0.0.0 solutionwebsitedapp.firebaseapp.com
+0.0.0.0 solutionwebsitedapp.web.app
+0.0.0.0 solvetans.firebaseapp.com
+0.0.0.0 solvetans.web.app
+0.0.0.0 sondfrom.dexlog.my.id
+0.0.0.0 soyokai.or.jp
+0.0.0.0 srdate.club
+0.0.0.0 ssy.hmb.mybluehostin.me
+0.0.0.0 steam.poweredartsworkshop.com
+0.0.0.0 steam.workshopsreview.com
+0.0.0.0 steamcommmuty.com
+0.0.0.0 steamcommuunity.ru
+0.0.0.0 steamcomunutty.com
+0.0.0.0 steamconmumity.com
+0.0.0.0 stepsray.vercel.app
+0.0.0.0 support-metahelpcenter-id100003498934.netlify.app
+0.0.0.0 sv5gardens655665.weeblysite.com
+0.0.0.0 system-portalnu.duckdns.org
+0.0.0.0 talwgam.njmolada.com
+0.0.0.0 taste.baby
+0.0.0.0 tele.zhngain.top
+0.0.0.0 telegrambot-resolved.pages.dev
+0.0.0.0 telegrazm.net
+0.0.0.0 telstra-100408.weeblysite.com
+0.0.0.0 telstra-100469.weeblysite.com
+0.0.0.0 telstra-103234.weeblysite.com
+0.0.0.0 tiktok-888.vip
+0.0.0.0 tiltckshow.top
+0.0.0.0 tnomwzrp.top
+0.0.0.0 toeken.im
+0.0.0.0 tonic.pink
+0.0.0.0 tooma.cellinsurance.co.zw
+0.0.0.0 tpdtepremu.xyz
+0.0.0.0 trattujeilesso-3354.vercel.app
+0.0.0.0 trbinace.com
+0.0.0.0 treibrukeukonno-1395.vercel.app
+0.0.0.0 tuesmad.firebaseapp.com
+0.0.0.0 tuesmad.web.app
+0.0.0.0 tyyyyyytyyy.weebly.com
+0.0.0.0 tzcsjfto.chat
+0.0.0.0 u.updatetrackgre.top
+0.0.0.0 uc-whatstapp-web.com
+0.0.0.0 udxcady.wixsite.com
+0.0.0.0 uklifejv.cyou
+0.0.0.0 updatemail12.wixsite.com
+0.0.0.0 ups-trackdeliveryapps.chickenkiller.com
+0.0.0.0 usbest.cyou
+0.0.0.0 user-transaction-overview.vercel.app
+0.0.0.0 usps.com-trackdck.top
+0.0.0.0 usps.com-tracklnv.top
+0.0.0.0 usps.com-trackmcl.top
+0.0.0.0 usps.com-trackmec.top
+0.0.0.0 usps.com-tracktpq.top
+0.0.0.0 usps.com-trackvmd.top
+0.0.0.0 uspsinfw.top
+0.0.0.0 uwdtsczi.top
+0.0.0.0 uwm-onedrive.com
+0.0.0.0 vaishnavi1436.github.io
+0.0.0.0 validatie-veiligauthenticatie.com
+0.0.0.0 vbbu.ldgknhk.lol
+0.0.0.0 verified-this-request-badge.vercel.app
+0.0.0.0 vo4zzp.icu
+0.0.0.0 vs41.github.io
+0.0.0.0 walett-cont.gitbook.io
+0.0.0.0 walletauthenticators.vercel.app
+0.0.0.0 walletcomnecitt.gitbook.io
+0.0.0.0 walletconnectdapps.online
+0.0.0.0 watranfart-fdd6a8.ingress-bonde.ewp.live
+0.0.0.0 waxed.wiki
+0.0.0.0 webmaillshavv.weebly.com
+0.0.0.0 weeeqweeattt.weebly.com
+0.0.0.0 weigh.skin
+0.0.0.0 weigh.wiki
+0.0.0.0 wgqdqvtn.baby
+0.0.0.0 wgqdqvtn.pink
+0.0.0.0 whatsapp-rqr.com
+0.0.0.0 wirelessvoicebtpaidmailinfoplay047.weebly.com
+0.0.0.0 wscs1231.cyou
+0.0.0.0 xn--metmasklogin-vcb.gitbook.io
+0.0.0.0 xojautruffeuttu-4659.vercel.app
+0.0.0.0 xraiz.info
+0.0.0.0 xraiz.vip
+0.0.0.0 xsuweamskeidjf.weebly.com
+0.0.0.0 xya46.cc
+0.0.0.0 yahoooooo-108560.weeblysite.com
+0.0.0.0 yavanica123.github.io
+0.0.0.0 yi5lq-syaaa-aaaag-acfsq-cai.icp0.io
+0.0.0.0 you-can-receive-here.vercel.app
+0.0.0.0 zeiitgeist.angelocachero.info
+0.0.0.0 zenixoikitti-5809.vercel.app
+0.0.0.0 zeznjx.shop
+0.0.0.0 zwzcn.com
diff --git a/phishing-filter-hosts.txt.br b/phishing-filter-hosts.txt.br
new file mode 100644
index 000000000..31801aed1
Binary files /dev/null and b/phishing-filter-hosts.txt.br differ
diff --git a/phishing-filter-hosts.txt.gz b/phishing-filter-hosts.txt.gz
new file mode 100644
index 000000000..cbb74fffc
Binary files /dev/null and b/phishing-filter-hosts.txt.gz differ
diff --git a/phishing-filter-rpz.conf b/phishing-filter-rpz.conf
new file mode 100644
index 000000000..75c6b9e35
--- /dev/null
+++ b/phishing-filter-rpz.conf
@@ -0,0 +1,439 @@
+; Title: Phishing Domains RPZ Blocklist
+; Updated: 2024-11-25T00:20:55Z
+; Expires: 1 day (update frequency)
+; Homepage: https://gitlab.com/malware-filter/phishing-filter
+; License: https://gitlab.com/malware-filter/phishing-filter#license
+; Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+
+$TTL 30
+@ IN SOA rpz.curben.gitlab.io. hostmaster.rpz.curben.gitlab.io. 1732494055 86400 3600 604800 30
+ NS localhost.
+
+1111365dh.net CNAME .
+12931-coinbase.com CNAME .
+215323.com CNAME .
+260aesthetic.wixsite.com CNAME .
+3650947.cc CNAME .
+3659ll.net CNAME .
+83291-coinbase.com CNAME .
+94-103-188-123.plesk.page CNAME .
+9825057365.com CNAME .
+abctrvabc.com CNAME .
+access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com CNAME .
+acclimatizable.fun CNAME .
+account-update05.myvnc.com CNAME .
+accounts.google.auzen.us.kg CNAME .
+activebusiness-unlocker3.com CNAME .
+addwsrbh.green CNAME .
+ahnp.vercel.app CNAME .
+aldg.ldgknhk.lol CNAME .
+allegrolokalnie.pl-891241214.buzz CNAME .
+alutipcentra.pages.dev CNAME .
+ambil-pinjaman-daana-payleter.xforms.web.id CNAME .
+ambulatoriprivati.it CNAME .
+amev.ldgknhk.lol CNAME .
+antail-conv.com CNAME .
+apply-now-to-receive-badge.vercel.app CNAME .
+artsea.pages.dev CNAME .
+atmailupdatewptnskmdinfomailacct.weebly.com CNAME .
+att-101072.weeblysite.com CNAME .
+att-1041page.weeblysite.com CNAME .
+att-105714.weeblysite.com CNAME .
+att-105819.square.site CNAME .
+att-inc-107097.weeblysite.com CNAME .
+att-login380.weeblysite.com CNAME .
+att-login522.weeblysite.com CNAME .
+att-service-102155.weeblysite.com CNAME .
+att-sign-in-105669.weeblysite.com CNAME .
+attcom-100762.weeblysite.com CNAME .
+attcom-106808.weeblysite.com CNAME .
+attmailservicenow.wixstudio.com CNAME .
+attmailservicenow.wixstudio.io CNAME .
+attmailsrvrdesk.weebly.com CNAME .
+attnewmaill.weebly.com CNAME .
+attyhhhhiiii225.weebly.com CNAME .
+atw-tau.vercel.app CNAME .
+authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com CNAME .
+authsyncs.pages.dev CNAME .
+autoreplyattmode.wixsite.com CNAME .
+avoid.hold-managert.com CNAME .
+azbin.ir CNAME .
+b45018.com CNAME .
+bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link CNAME .
+baiii-wong.cutvi.cfd CNAME .
+basvuru-online-yap.vercel.app CNAME .
+beionfidi.pages.dev CNAME .
+bet73nn.com CNAME .
+bet83039.com CNAME .
+bet83054.com CNAME .
+bfrescentremebermainsetreouytnoy.weebly.com CNAME .
+biggggggggggg.weebly.com CNAME .
+bitnode.pages.dev CNAME .
+bitvavobtc.com CNAME .
+blackhere11.serv00.net CNAME .
+blss24att.weebly.com CNAME .
+braucrarasuteu-2470.vercel.app CNAME .
+bt-102124.weeblysite.com CNAME .
+bt1business.weebly.com CNAME .
+btuan-dan2-resmi.top1.my.id CNAME .
+buildingdesignsusapdf.s3.us-east-005.backblazeb2.com CNAME .
+business-page-property-897432967.netlify.app CNAME .
+caipora.xyz CNAME .
+calm-pothos-3b24c9.netlify.app CNAME .
+carrefourarabiank15.pages.dev CNAME .
+caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com CNAME .
+catgirl-appverset-nya.pages.dev CNAME .
+catxtokens.pages.dev CNAME .
+chat.94-103-188-123.plesk.page CNAME .
+check154109.click CNAME .
+checkseven.vercel.app CNAME .
+ciente-a.org CNAME .
+cieplo.app CNAME .
+cj12143.tw1.ru CNAME .
+cj87335.tw1.ru CNAME .
+claimyourethrewards.pages.dev CNAME .
+clickbait.design CNAME .
+cnsa163.com CNAME .
+cock2-iota.vercel.app CNAME .
+cock3.vercel.app CNAME .
+cock7.vercel.app CNAME .
+contact-pro-8291-d01.firebaseapp.com CNAME .
+contact-pro-8291-d01.web.app CNAME .
+creosrl.com CNAME .
+curmmgdv.email CNAME .
+currently541.weebly.com CNAME .
+currently890.weebly.com CNAME .
+currentlyserver.weebly.com CNAME .
+dara3dccj.wixsite.com CNAME .
+db.service4db.com CNAME .
+de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev CNAME .
+debutcan.firebaseapp.com CNAME .
+debutcan.web.app CNAME .
+delivery.attempt.failure.ebbs.co.za CNAME .
+dev.stream.mornar.app CNAME .
+dnwqmh.click CNAME .
+dropsmartchain.pages.dev CNAME .
+dsjoting.group CNAME .
+dulb6c5p5.top CNAME .
+ebay-mallwholesale.com CNAME .
+ebt-lilac.vercel.app CNAME .
+echoredled.netlify.app CNAME .
+elbarco.percentadnp.info CNAME .
+eltritongourmet.com CNAME .
+email.mgb.modento.io CNAME .
+enjomugg.firebaseapp.com CNAME .
+enjomugg.web.app CNAME .
+error3456vhubhornbase.azurewebsites.net CNAME .
+example223.wixsite.com CNAME .
+eyeydhe.wixsite.com CNAME .
+eyttueiu.square.site CNAME .
+facebook-avip.click CNAME .
+fame.pink CNAME .
+fassehoizubra-7696.vercel.app CNAME .
+fastdropchain.pages.dev CNAME .
+fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io CNAME .
+fla-1001.square.site CNAME .
+flo4211.github.io CNAME .
+fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com CNAME .
+fnuttlie.wiki CNAME .
+fokeijonnekou.vercel.app CNAME .
+fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com CNAME .
+free-verified-badge-form0-service.vercel.app CNAME .
+free-verified-meta-badge-service.vercel.app CNAME .
+g06668706.wixsite.com CNAME .
+gccndbqg.vip CNAME .
+geriodememerkezi.online CNAME .
+get-checkmark-for-you.vercel.app CNAME .
+get-free-verified-badge-service-on.vercel.app CNAME .
+gitanag.broke-it.net CNAME .
+gruprocuroipra-6493.vercel.app CNAME .
+h5.b9en.com CNAME .
+h5.metacoint.com CNAME .
+hcghij.top CNAME .
+hecregayatu-1014.vercel.app CNAME .
+hejmtxxt.guru CNAME .
+helenblunt6.wixsite.com CNAME .
+help.accountsupportcentre.com CNAME .
+here-apply-for-page-review.vercel.app CNAME .
+hgbk.ldgknhk.lol CNAME .
+hhideiie.wixsite.com CNAME .
+hitummoinneullei-5882.vercel.app CNAME .
+home-101067.weeblysite.com CNAME .
+home-103465.weeblysite.com CNAME .
+home-104341.weeblysite.com CNAME .
+home-105266.weeblysite.com CNAME .
+home-105929.weeblysite.com CNAME .
+homeattatthome.square.site CNAME .
+hpnefhqs.motorcycles CNAME .
+im25.net CNAME .
+info.supercitrus.ind.br CNAME .
+ins-business-home-center.com CNAME .
+instagaramgalochka.vercel.app CNAME .
+ipv6.43-135-137-110.cprapid.com CNAME .
+irmt0ken.win CNAME .
+iujf7839iofvkbcu748.weebly.com CNAME .
+iwimwmiwi.click CNAME .
+jagej73796.wixsite.com CNAME .
+jfdjy.com CNAME .
+kalyani963.github.io CNAME .
+kexoigrufouddou-5902.vercel.app CNAME .
+kl1k-ds1ni.neupdile.my.id CNAME .
+kliind08.wixsite.com CNAME .
+kreelo098.weebly.com CNAME .
+kremlcup.com CNAME .
+kshitij12375.github.io CNAME .
+kucoinglobal1.com CNAME .
+kxbztydc.black CNAME .
+labanquepostale.jupiter-analytics.com CNAME .
+leddevotoze-3146.vercel.app CNAME .
+linnkdna-kget.wxxzsite.buzz CNAME .
+llahi.info CNAME .
+llahi.vip CNAME .
+loffaummuddote-4145.vercel.app CNAME .
+login-att-10221.square.site CNAME .
+login-form.world CNAME .
+login-online-outlook365.com CNAME .
+login-outlook-midstreamauth.com CNAME .
+login-screen-103134.weeblysite.com CNAME .
+loginaccount70.wixsite.com CNAME .
+loginaccount77.wixsite.com CNAME .
+luk6414.wixsite.com CNAME .
+luxlifemiamiblog.com CNAME .
+m.meta-accessibility.io.vn CNAME .
+madebybmr.fyi CNAME .
+maqpiexyz.click CNAME .
+mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev CNAME .
+mayfair313.wixsite.com CNAME .
+mdbrvlfy.black CNAME .
+mesageriepro33range1.weebly.com CNAME .
+metamsk-wallet-3.gitbook.io CNAME .
+metttaa-audddt-new-02.firebaseapp.com CNAME .
+metttaa-audddt-new-02.web.app CNAME .
+microsoft365-storage.github.io CNAME .
+mikepattyjm.wixsite.com CNAME .
+mobilemidasbuy.n3g.fun CNAME .
+monespacepro-client.3utilities.com CNAME .
+monetization-violation.github.io CNAME .
+moodengsol-net.pages.dev CNAME .
+mwsiekdnfjrdufs.weebly.com CNAME .
+mxmxnmx.mx.zya.me CNAME .
+national-au-b.com CNAME .
+national-au.net CNAME .
+nbaaiqjq.group CNAME .
+nexomyacwv.weebly.com CNAME .
+nft-time11.vercel.app CNAME .
+nichcheck.weeblysite.com CNAME .
+ns1.carrier-ast2-portal-apple.com CNAME .
+omadshf.ru CNAME .
+online-assist.live CNAME .
+online-promo-asb.org CNAME .
+openkimono.pro CNAME .
+opportunity-verified-status.vercel.app CNAME .
+ourtime.reconnect-dating.workers.dev CNAME .
+owouwuowo.click CNAME .
+p365kf.com CNAME .
+p4zv8crnrrha27so.94-103-188-123.plesk.page CNAME .
+page-center-manage.com CNAME .
+pavan-patil-22.github.io CNAME .
+pecinternational.net CNAME .
+peesom.chat CNAME .
+pencairaanndannaa.my.id CNAME .
+petty.wiki CNAME .
+pimnhv.group CNAME .
+policies-business-page-service.com CNAME .
+pottatrebewe-2808.vercel.app CNAME .
+pqo.hrf.mybluehost.me CNAME .
+programming--service--panel-totlyy-free-for-you.vercel.app CNAME .
+promo1.spik.ru CNAME .
+protocolsecure.pages.dev CNAME .
+pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev CNAME .
+pub-1778406e4fec4394901793111c187dd9.r2.dev CNAME .
+pub-19b834342e7d465b9f00b3511325a081.r2.dev CNAME .
+pub-21dd4dc659614ceb93e45a6de4434502.r2.dev CNAME .
+pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev CNAME .
+pub-2fefe932a6974485b987c9ba851b5c40.r2.dev CNAME .
+pub-3a46d9914f494078a6d6237513e7a096.r2.dev CNAME .
+pub-442ed822851244a689b3472ea2c6a950.r2.dev CNAME .
+pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev CNAME .
+pub-682ad3b65d944376b919745aae3c56d4.r2.dev CNAME .
+pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev CNAME .
+pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev CNAME .
+pub-7f5cf36445d042168bfacd712e890dc0.r2.dev CNAME .
+pub-803839714a924882a7bcc2495a26860f.r2.dev CNAME .
+pub-8161de4a277e4ee8b532af34954224e1.r2.dev CNAME .
+pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev CNAME .
+pub-8376b5b2334844d193a525d8b8548fa5.r2.dev CNAME .
+pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev CNAME .
+pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev CNAME .
+pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev CNAME .
+pub-9163a97d70394cb499bdd232be6c2169.r2.dev CNAME .
+pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev CNAME .
+pub-98171471e0944ac3a5820ef719bf0640.r2.dev CNAME .
+pub-a263e0790935412eb10cacc55bbced18.r2.dev CNAME .
+pub-a291041b077742899b63a9982f04a56c.r2.dev CNAME .
+pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev CNAME .
+pub-b50adc5d699a4f08aec37102c2103da7.r2.dev CNAME .
+pub-c0a934c950e441db96b882789f53c9ea.r2.dev CNAME .
+pub-c2c250050109456396c933de259a4fea.r2.dev CNAME .
+pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev CNAME .
+pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev CNAME .
+pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev CNAME .
+pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev CNAME .
+pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev CNAME .
+pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev CNAME .
+pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev CNAME .
+pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev CNAME .
+pub-e42cb528b102447385e3145197916f51.r2.dev CNAME .
+pub-e4aff507450c478cbe3f77ad23d75035.r2.dev CNAME .
+pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev CNAME .
+pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev CNAME .
+pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev CNAME .
+pubgm.club CNAME .
+puffagroibrouwoi-8818.vercel.app CNAME .
+qasimk.com CNAME .
+qfjfvseq.info CNAME .
+quauwograssodda-3503.vercel.app CNAME .
+qysgyp.com CNAME .
+rajdipchatterjee.github.io CNAME .
+rechazaroanularaqui51.weebly.com CNAME .
+remote-fix.pages.dev CNAME .
+renggard.47-243-192-240.cprapid.com CNAME .
+resolvepanel.live CNAME .
+resolving--issue--with-us1.vercel.app CNAME .
+resqat.weebly.com CNAME .
+review-business-case.d2f7p3b7pucnle.amplifyapp.com CNAME .
+rlpqwefi.pink CNAME .
+rouloigeilleuja-9523.vercel.app CNAME .
+rulemec.pages.dev CNAME .
+rutinqqwin.shop CNAME .
+rwftfu.quest CNAME .
+s.team-pw.cc CNAME .
+sairanees.github.io CNAME .
+sanseipecas.com.br CNAME .
+sasklelo.weebly.com CNAME .
+sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com CNAME .
+sasktelcustomerwebly.weebly.com CNAME .
+sasktelnetwebmailservermaintainance.weebly.com CNAME .
+sasktelrectify.weebly.com CNAME .
+sasktelscrutinize.weebly.com CNAME .
+sasktelservicecentterwebly.weebly.com CNAME .
+sasktelsupportsystemwebly.weebly.com CNAME .
+sbcglobal30.wixsite.com CNAME .
+scan-vulnerability-guard-v3.pages.dev CNAME .
+scan-vulnerability-guard.pages.dev CNAME .
+scanner-metamask-v1.pages.dev CNAME .
+scanner-metamask-v2.pages.dev CNAME .
+scanner-metamask-v3.pages.dev CNAME .
+scanner-metamask.pages.dev CNAME .
+sec-sign-in.info CNAME .
+secure2-validitycheck.weebly.com CNAME .
+securecapitec.theprimepoint.online CNAME .
+securerpcfix.com CNAME .
+seeteressecalywoi.github.io CNAME .
+seivviice.weebly.com CNAME .
+server.0e7p.com CNAME .
+server.2rk3.com CNAME .
+server.8q3p.com CNAME .
+server.n6b8.com CNAME .
+server.v9vs.com CNAME .
+sevvviicess.weebly.com CNAME .
+shard.blue CNAME .
+shard.skin CNAME .
+shared-d7590.firebaseapp.com CNAME .
+shared-d7590.web.app CNAME .
+shaw-101329.weeblysite.com CNAME .
+shaw-101587.weeblysite.com CNAME .
+shaw-106427.weeblysite.com CNAME .
+shaw-107375.weeblysite.com CNAME .
+solutionwebsitedapp.firebaseapp.com CNAME .
+solutionwebsitedapp.web.app CNAME .
+solvetans.firebaseapp.com CNAME .
+solvetans.web.app CNAME .
+sondfrom.dexlog.my.id CNAME .
+soyokai.or.jp CNAME .
+srdate.club CNAME .
+ssy.hmb.mybluehostin.me CNAME .
+steam.poweredartsworkshop.com CNAME .
+steam.workshopsreview.com CNAME .
+steamcommmuty.com CNAME .
+steamcommuunity.ru CNAME .
+steamcomunutty.com CNAME .
+steamconmumity.com CNAME .
+stepsray.vercel.app CNAME .
+support-metahelpcenter-id100003498934.netlify.app CNAME .
+sv5gardens655665.weeblysite.com CNAME .
+system-portalnu.duckdns.org CNAME .
+talwgam.njmolada.com CNAME .
+taste.baby CNAME .
+tele.zhngain.top CNAME .
+telegrambot-resolved.pages.dev CNAME .
+telegrazm.net CNAME .
+telstra-100408.weeblysite.com CNAME .
+telstra-100469.weeblysite.com CNAME .
+telstra-103234.weeblysite.com CNAME .
+tiktok-888.vip CNAME .
+tiltckshow.top CNAME .
+tnomwzrp.top CNAME .
+toeken.im CNAME .
+tonic.pink CNAME .
+tooma.cellinsurance.co.zw CNAME .
+tpdtepremu.xyz CNAME .
+trattujeilesso-3354.vercel.app CNAME .
+trbinace.com CNAME .
+treibrukeukonno-1395.vercel.app CNAME .
+tuesmad.firebaseapp.com CNAME .
+tuesmad.web.app CNAME .
+tyyyyyytyyy.weebly.com CNAME .
+tzcsjfto.chat CNAME .
+u.updatetrackgre.top CNAME .
+uc-whatstapp-web.com CNAME .
+udxcady.wixsite.com CNAME .
+uklifejv.cyou CNAME .
+updatemail12.wixsite.com CNAME .
+ups-trackdeliveryapps.chickenkiller.com CNAME .
+usbest.cyou CNAME .
+user-transaction-overview.vercel.app CNAME .
+usps.com-trackdck.top CNAME .
+usps.com-tracklnv.top CNAME .
+usps.com-trackmcl.top CNAME .
+usps.com-trackmec.top CNAME .
+usps.com-tracktpq.top CNAME .
+usps.com-trackvmd.top CNAME .
+uspsinfw.top CNAME .
+uwdtsczi.top CNAME .
+uwm-onedrive.com CNAME .
+vaishnavi1436.github.io CNAME .
+validatie-veiligauthenticatie.com CNAME .
+vbbu.ldgknhk.lol CNAME .
+verified-this-request-badge.vercel.app CNAME .
+vo4zzp.icu CNAME .
+vs41.github.io CNAME .
+walett-cont.gitbook.io CNAME .
+walletauthenticators.vercel.app CNAME .
+walletcomnecitt.gitbook.io CNAME .
+walletconnectdapps.online CNAME .
+watranfart-fdd6a8.ingress-bonde.ewp.live CNAME .
+waxed.wiki CNAME .
+webmaillshavv.weebly.com CNAME .
+weeeqweeattt.weebly.com CNAME .
+weigh.skin CNAME .
+weigh.wiki CNAME .
+wgqdqvtn.baby CNAME .
+wgqdqvtn.pink CNAME .
+whatsapp-rqr.com CNAME .
+wirelessvoicebtpaidmailinfoplay047.weebly.com CNAME .
+wscs1231.cyou CNAME .
+xn--metmasklogin-vcb.gitbook.io CNAME .
+xojautruffeuttu-4659.vercel.app CNAME .
+xraiz.info CNAME .
+xraiz.vip CNAME .
+xsuweamskeidjf.weebly.com CNAME .
+xya46.cc CNAME .
+yahoooooo-108560.weeblysite.com CNAME .
+yavanica123.github.io CNAME .
+yi5lq-syaaa-aaaag-acfsq-cai.icp0.io CNAME .
+you-can-receive-here.vercel.app CNAME .
+zeiitgeist.angelocachero.info CNAME .
+zenixoikitti-5809.vercel.app CNAME .
+zeznjx.shop CNAME .
+zwzcn.com CNAME .
diff --git a/phishing-filter-rpz.conf.br b/phishing-filter-rpz.conf.br
new file mode 100644
index 000000000..3ed3d27ec
Binary files /dev/null and b/phishing-filter-rpz.conf.br differ
diff --git a/phishing-filter-rpz.conf.gz b/phishing-filter-rpz.conf.gz
new file mode 100644
index 000000000..93fea3a8b
Binary files /dev/null and b/phishing-filter-rpz.conf.gz differ
diff --git a/phishing-filter-snort2.rules b/phishing-filter-snort2.rules
new file mode 100644
index 000000000..33efefc43
--- /dev/null
+++ b/phishing-filter-snort2.rules
@@ -0,0 +1,462 @@
+# Title: Phishing URL Snort2 Ruleset
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1111365dh.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000001; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"12931-coinbase.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000002; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"215323.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000003; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"260aesthetic.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000004; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3650947.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000005; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3659ll.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000006; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"83291-coinbase.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000007; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"94-103-188-123.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000008; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9825057365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000009; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abctrvabc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000010; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000011; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acclimatizable.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200000012; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-update05.myvnc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000013; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accounts.google.auzen.us.kg"; content:"Host"; http_header; classtype:attempted-recon; sid:200000014; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activebusiness-unlocker3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000015; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"addwsrbh.green"; content:"Host"; http_header; classtype:attempted-recon; sid:200000016; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahnp.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000017; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aldg.ldgknhk.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200000018; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allegrolokalnie.pl-891241214.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000019; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alutipcentra.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000020; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ambil-pinjaman-daana-payleter.xforms.web.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000021; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ambulatoriprivati.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200000022; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amev.ldgknhk.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200000023; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"antail-conv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000024; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apply-now-to-receive-badge.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000025; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"artsea.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000026; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atmailupdatewptnskmdinfomailacct.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000027; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101072.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000028; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-1041page.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000029; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105714.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000030; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105819.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000031; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-inc-107097.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000032; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-login380.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000033; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-login522.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000034; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-service-102155.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000035; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-sign-in-105669.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000036; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-100762.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000037; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-106808.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000038; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailservicenow.wixstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000039; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailservicenow.wixstudio.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000040; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailsrvrdesk.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000041; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnewmaill.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000042; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attyhhhhiiii225.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000043; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atw-tau.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000044; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000045; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authsyncs.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000046; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autoreplyattmode.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000047; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avoid.hold-managert.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000048; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azbin.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200000049; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b45018.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000050; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000051; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baiii-wong.cutvi.cfd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000052; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"basvuru-online-yap.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000053; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beionfidi.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000054; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet73nn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000055; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet83039.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000056; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet83054.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000057; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bfrescentremebermainsetreouytnoy.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000058; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biggggggggggg.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000059; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitnode.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000060; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitvavobtc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000061; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blackhere11.serv00.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000062; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blss24att.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000063; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"braucrarasuteu-2470.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000064; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-102124.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000065; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt1business.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000066; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btuan-dan2-resmi.top1.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000067; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buildingdesignsusapdf.s3.us-east-005.backblazeb2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000068; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-property-897432967.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000069; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caipora.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000070; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calm-pothos-3b24c9.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000071; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrefourarabiank15.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000072; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000073; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"catgirl-appverset-nya.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000074; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"catxtokens.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000075; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chat.94-103-188-123.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000076; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"check154109.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000077; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checkseven.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000078; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciente-a.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000079; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cieplo.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000080; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cj12143.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000081; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cj87335.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000082; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claimyourethrewards.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000083; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clickbait.design"; content:"Host"; http_header; classtype:attempted-recon; sid:200000084; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnsa163.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000085; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cock2-iota.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000086; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cock3.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000087; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cock7.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000088; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contact-pro-8291-d01.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000089; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contact-pro-8291-d01.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000090; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creosrl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000091; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"curmmgdv.email"; content:"Host"; http_header; classtype:attempted-recon; sid:200000092; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently541.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000093; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently890.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000094; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyserver.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000095; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dara3dccj.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000096; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"db.service4db.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000097; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000098; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"debutcan.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000099; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"debutcan.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000100; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery.attempt.failure.ebbs.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200000101; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev.stream.mornar.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000102; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dnwqmh.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000103; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dropsmartchain.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000104; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dsjoting.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200000105; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dulb6c5p5.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000106; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebay-mallwholesale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000107; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebt-lilac.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000108; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"echoredled.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000109; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elbarco.percentadnp.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000110; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eltritongourmet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000111; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"email.mgb.modento.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000112; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enjomugg.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000113; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enjomugg.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000114; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"error3456vhubhornbase.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000115; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"example223.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000116; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eyeydhe.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000117; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eyttueiu.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000118; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-avip.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000119; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fame.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000120; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fassehoizubra-7696.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000121; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fastdropchain.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000122; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000123; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fla-1001.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000124; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flo4211.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000125; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000126; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fnuttlie.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000127; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fokeijonnekou.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000128; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000129; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-verified-badge-form0-service.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000130; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-verified-meta-badge-service.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000131; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g06668706.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000132; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gccndbqg.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000133; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geriodememerkezi.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000134; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"get-checkmark-for-you.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000135; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"get-free-verified-badge-service-on.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000136; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gitanag.broke-it.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000137; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gruprocuroipra-6493.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000138; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.b9en.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000139; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.metacoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000140; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hcghij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000141; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hecregayatu-1014.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000142; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hejmtxxt.guru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000143; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helenblunt6.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000144; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"help.accountsupportcentre.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000145; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"here-apply-for-page-review.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000146; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgbk.ldgknhk.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200000147; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hhideiie.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000148; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hitummoinneullei-5882.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000149; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-101067.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000150; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-103465.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000151; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-104341.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000152; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-105266.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000153; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-105929.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000154; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"homeattatthome.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000155; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hpnefhqs.motorcycles"; content:"Host"; http_header; classtype:attempted-recon; sid:200000156; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"im25.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000157; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info.supercitrus.ind.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000158; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ins-business-home-center.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000159; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagaramgalochka.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000160; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipv6.43-135-137-110.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000161; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"irmt0ken.win"; content:"Host"; http_header; classtype:attempted-recon; sid:200000162; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iujf7839iofvkbcu748.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000163; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwimwmiwi.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000164; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jagej73796.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000165; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jfdjy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000166; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kalyani963.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000167; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kexoigrufouddou-5902.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000168; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kl1k-ds1ni.neupdile.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000169; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kliind08.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000170; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kreelo098.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000171; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kremlcup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000172; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kshitij12375.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000173; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kucoinglobal1.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000174; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kxbztydc.black"; content:"Host"; http_header; classtype:attempted-recon; sid:200000175; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"labanquepostale.jupiter-analytics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000176; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leddevotoze-3146.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000177; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linnkdna-kget.wxxzsite.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000178; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llahi.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000179; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llahi.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000180; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loffaummuddote-4145.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000181; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-att-10221.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000182; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-form.world"; content:"Host"; http_header; classtype:attempted-recon; sid:200000183; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-online-outlook365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000184; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-outlook-midstreamauth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000185; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-screen-103134.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000186; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginaccount70.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000187; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginaccount77.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000188; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luk6414.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000189; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luxlifemiamiblog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000190; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.meta-accessibility.io.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000191; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"madebybmr.fyi"; content:"Host"; http_header; classtype:attempted-recon; sid:200000192; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maqpiexyz.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000193; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000194; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mayfair313.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000195; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mdbrvlfy.black"; content:"Host"; http_header; classtype:attempted-recon; sid:200000196; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mesageriepro33range1.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000197; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamsk-wallet-3.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000198; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metttaa-audddt-new-02.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000199; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metttaa-audddt-new-02.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000200; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsoft365-storage.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000201; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mikepattyjm.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000202; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mobilemidasbuy.n3g.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200000203; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monespacepro-client.3utilities.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000204; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monetization-violation.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000205; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moodengsol-net.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000206; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mwsiekdnfjrdufs.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000207; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mxmxnmx.mx.zya.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000208; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"national-au-b.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000209; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"national-au.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000210; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbaaiqjq.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200000211; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nexomyacwv.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000212; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nft-time11.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000213; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nichcheck.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000214; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ns1.carrier-ast2-portal-apple.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000215; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"omadshf.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000216; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-assist.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000217; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-promo-asb.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000218; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openkimono.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000219; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opportunity-verified-status.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000220; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ourtime.reconnect-dating.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000221; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"owouwuowo.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000222; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p365kf.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000223; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p4zv8crnrrha27so.94-103-188-123.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000224; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"page-center-manage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000225; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pavan-patil-22.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000226; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pecinternational.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000227; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"peesom.chat"; content:"Host"; http_header; classtype:attempted-recon; sid:200000228; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pencairaanndannaa.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000229; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"petty.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000230; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pimnhv.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200000231; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"policies-business-page-service.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000232; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pottatrebewe-2808.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000233; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pqo.hrf.mybluehost.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000234; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"programming--service--panel-totlyy-free-for-you.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000235; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promo1.spik.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000236; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protocolsecure.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000237; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000238; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-1778406e4fec4394901793111c187dd9.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000239; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-19b834342e7d465b9f00b3511325a081.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000240; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-21dd4dc659614ceb93e45a6de4434502.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000241; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000242; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-2fefe932a6974485b987c9ba851b5c40.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000243; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-3a46d9914f494078a6d6237513e7a096.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000244; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-442ed822851244a689b3472ea2c6a950.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000245; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000246; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000247; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000248; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000249; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7f5cf36445d042168bfacd712e890dc0.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000250; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-803839714a924882a7bcc2495a26860f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000251; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8161de4a277e4ee8b532af34954224e1.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000252; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000253; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8376b5b2334844d193a525d8b8548fa5.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000254; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000255; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000256; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000257; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-9163a97d70394cb499bdd232be6c2169.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000258; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000259; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-98171471e0944ac3a5820ef719bf0640.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000260; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-a263e0790935412eb10cacc55bbced18.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000261; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-a291041b077742899b63a9982f04a56c.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000262; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000263; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-b50adc5d699a4f08aec37102c2103da7.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000264; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c0a934c950e441db96b882789f53c9ea.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000265; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c2c250050109456396c933de259a4fea.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000266; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000267; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000268; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000269; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000270; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000271; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000272; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000273; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000274; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e42cb528b102447385e3145197916f51.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000275; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e4aff507450c478cbe3f77ad23d75035.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000276; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000277; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000278; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000279; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pubgm.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200000280; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"puffagroibrouwoi-8818.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000281; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qasimk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000282; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qfjfvseq.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000283; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quauwograssodda-3503.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000284; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qysgyp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000285; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rajdipchatterjee.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000286; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rechazaroanularaqui51.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000287; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remote-fix.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000288; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renggard.47-243-192-240.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000289; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resolvepanel.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000290; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resolving--issue--with-us1.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000291; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resqat.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000292; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-business-case.d2f7p3b7pucnle.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000293; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rlpqwefi.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000294; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rouloigeilleuja-9523.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000295; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rulemec.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000296; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rutinqqwin.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000297; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rwftfu.quest"; content:"Host"; http_header; classtype:attempted-recon; sid:200000298; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.team-pw.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000299; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sairanees.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000300; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sanseipecas.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000301; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasklelo.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000302; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000303; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelcustomerwebly.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000304; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelnetwebmailservermaintainance.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000305; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelrectify.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000306; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelscrutinize.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000307; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelservicecentterwebly.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000308; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelsupportsystemwebly.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000309; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobal30.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000310; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scan-vulnerability-guard-v3.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000311; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scan-vulnerability-guard.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000312; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanner-metamask-v1.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000313; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanner-metamask-v2.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000314; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanner-metamask-v3.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000315; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanner-metamask.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000316; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sec-sign-in.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000317; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure2-validitycheck.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000318; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securecapitec.theprimepoint.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000319; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securerpcfix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000320; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seeteressecalywoi.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000321; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seivviice.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000322; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.0e7p.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000323; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.2rk3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000324; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.8q3p.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000325; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.n6b8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000326; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.v9vs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000327; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sevvviicess.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000328; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shard.blue"; content:"Host"; http_header; classtype:attempted-recon; sid:200000329; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shard.skin"; content:"Host"; http_header; classtype:attempted-recon; sid:200000330; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-d7590.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000331; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-d7590.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000332; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-101329.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000333; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-101587.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000334; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-106427.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000335; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-107375.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000336; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solutionwebsitedapp.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000337; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solutionwebsitedapp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000338; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solvetans.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000339; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solvetans.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000340; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sondfrom.dexlog.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000341; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soyokai.or.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200000342; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srdate.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200000343; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssy.hmb.mybluehostin.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000344; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steam.poweredartsworkshop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000345; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steam.workshopsreview.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000346; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommmuty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000347; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommuunity.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000348; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcomunutty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000349; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamconmumity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000350; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepsray.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000351; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-metahelpcenter-id100003498934.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000352; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sv5gardens655665.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000353; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"system-portalnu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000354; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talwgam.njmolada.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000355; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taste.baby"; content:"Host"; http_header; classtype:attempted-recon; sid:200000356; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tele.zhngain.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000357; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrambot-resolved.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000358; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrazm.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000359; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-100408.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000360; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-100469.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000361; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-103234.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000362; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiktok-888.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000363; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiltckshow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000364; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tnomwzrp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000365; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toeken.im"; content:"Host"; http_header; classtype:attempted-recon; sid:200000366; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tonic.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000367; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tooma.cellinsurance.co.zw"; content:"Host"; http_header; classtype:attempted-recon; sid:200000368; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpdtepremu.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000369; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trattujeilesso-3354.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000370; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trbinace.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000371; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"treibrukeukonno-1395.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000372; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuesmad.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000373; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuesmad.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000374; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyyyyyytyyy.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000375; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tzcsjfto.chat"; content:"Host"; http_header; classtype:attempted-recon; sid:200000376; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u.updatetrackgre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000377; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uc-whatstapp-web.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000378; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"udxcady.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000379; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uklifejv.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000380; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatemail12.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000381; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups-trackdeliveryapps.chickenkiller.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000382; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usbest.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000383; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"user-transaction-overview.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000384; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackdck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000385; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracklnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000386; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000387; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000388; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracktpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000389; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackvmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000390; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsinfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000391; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uwdtsczi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000392; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uwm-onedrive.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000393; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaishnavi1436.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000394; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"validatie-veiligauthenticatie.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000395; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vbbu.ldgknhk.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200000396; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verified-this-request-badge.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000397; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vo4zzp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000398; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vs41.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000399; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walett-cont.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000400; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletauthenticators.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000401; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletcomnecitt.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000402; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconnectdapps.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000403; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"watranfart-fdd6a8.ingress-bonde.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000404; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"waxed.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000405; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmaillshavv.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000406; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weeeqweeattt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000407; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weigh.skin"; content:"Host"; http_header; classtype:attempted-recon; sid:200000408; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weigh.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000409; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wgqdqvtn.baby"; content:"Host"; http_header; classtype:attempted-recon; sid:200000410; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wgqdqvtn.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000411; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"whatsapp-rqr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000412; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wirelessvoicebtpaidmailinfoplay047.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000413; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wscs1231.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000414; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--metmasklogin-vcb.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000415; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xojautruffeuttu-4659.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000416; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xraiz.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000417; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xraiz.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000418; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xsuweamskeidjf.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000419; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xya46.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000420; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoooooo-108560.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000421; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yavanica123.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000422; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yi5lq-syaaa-aaaag-acfsq-cai.icp0.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000423; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"you-can-receive-here.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000424; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zeiitgeist.angelocachero.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000425; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zenixoikitti-5809.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000426; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zeznjx.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000427; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zwzcn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000428; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hpqhv"; http_uri; nocase; content:"alturl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000429; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/descargar/kmsauto-net"; http_uri; nocase; content:"ardilu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000430; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/parcels"; http_uri; nocase; content:"did.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200000431; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicesatttttmail"; http_uri; nocase; content:"flow.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000432; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sky/indian-stock/dashboard"; http_uri; nocase; content:"hdfcsky.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000433; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!"; http_uri; nocase; content:"hdfcsky.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000434; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/djgj07/"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000435; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pubgm/"; http_uri; nocase; content:"pay.zing.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000436; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/go4bnv/"; http_uri; nocase; content:"rb.gy"; content:"Host"; http_header; classtype:attempted-recon; sid:200000437; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/18ab5a"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000438; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4ff03b"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000439; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8wtcv4z"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000440; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/96a02f"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000441; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c0d1afz"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000442; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d2f265"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000443; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eacc63"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000444; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f9decb"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000445; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mzhpkzf"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000446; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nbyh9vh"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000447; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sa2uoq0"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000448; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tcthi8d"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000449; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tnab363c6"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000450; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wx1eo7w"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000451; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tvybxr"; http_uri; nocase; content:"surl.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200000452; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/carrefour-926/"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000453; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/t8vi"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000454; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/t9ka"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000455; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/talr"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000456; rev:1;)
diff --git a/phishing-filter-snort2.rules.br b/phishing-filter-snort2.rules.br
new file mode 100644
index 000000000..772bac1e7
Binary files /dev/null and b/phishing-filter-snort2.rules.br differ
diff --git a/phishing-filter-snort2.rules.gz b/phishing-filter-snort2.rules.gz
new file mode 100644
index 000000000..0907ff8ef
Binary files /dev/null and b/phishing-filter-snort2.rules.gz differ
diff --git a/phishing-filter-snort3.rules b/phishing-filter-snort3.rules
new file mode 100644
index 000000000..e8685a9a7
--- /dev/null
+++ b/phishing-filter-snort3.rules
@@ -0,0 +1,462 @@
+# Title: Phishing URL Snort3 Ruleset
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1111365dh.net",nocase; classtype:attempted-recon; sid:200000001; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"12931-coinbase.com",nocase; classtype:attempted-recon; sid:200000002; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"215323.com",nocase; classtype:attempted-recon; sid:200000003; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"260aesthetic.wixsite.com",nocase; classtype:attempted-recon; sid:200000004; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3650947.cc",nocase; classtype:attempted-recon; sid:200000005; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3659ll.net",nocase; classtype:attempted-recon; sid:200000006; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"83291-coinbase.com",nocase; classtype:attempted-recon; sid:200000007; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"94-103-188-123.plesk.page",nocase; classtype:attempted-recon; sid:200000008; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9825057365.com",nocase; classtype:attempted-recon; sid:200000009; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abctrvabc.com",nocase; classtype:attempted-recon; sid:200000010; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com",nocase; classtype:attempted-recon; sid:200000011; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acclimatizable.fun",nocase; classtype:attempted-recon; sid:200000012; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account-update05.myvnc.com",nocase; classtype:attempted-recon; sid:200000013; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.auzen.us.kg",nocase; classtype:attempted-recon; sid:200000014; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activebusiness-unlocker3.com",nocase; classtype:attempted-recon; sid:200000015; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"addwsrbh.green",nocase; classtype:attempted-recon; sid:200000016; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ahnp.vercel.app",nocase; classtype:attempted-recon; sid:200000017; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aldg.ldgknhk.lol",nocase; classtype:attempted-recon; sid:200000018; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allegrolokalnie.pl-891241214.buzz",nocase; classtype:attempted-recon; sid:200000019; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alutipcentra.pages.dev",nocase; classtype:attempted-recon; sid:200000020; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambil-pinjaman-daana-payleter.xforms.web.id",nocase; classtype:attempted-recon; sid:200000021; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambulatoriprivati.it",nocase; classtype:attempted-recon; sid:200000022; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amev.ldgknhk.lol",nocase; classtype:attempted-recon; sid:200000023; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"antail-conv.com",nocase; classtype:attempted-recon; sid:200000024; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apply-now-to-receive-badge.vercel.app",nocase; classtype:attempted-recon; sid:200000025; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artsea.pages.dev",nocase; classtype:attempted-recon; sid:200000026; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atmailupdatewptnskmdinfomailacct.weebly.com",nocase; classtype:attempted-recon; sid:200000027; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-101072.weeblysite.com",nocase; classtype:attempted-recon; sid:200000028; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-1041page.weeblysite.com",nocase; classtype:attempted-recon; sid:200000029; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-105714.weeblysite.com",nocase; classtype:attempted-recon; sid:200000030; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-105819.square.site",nocase; classtype:attempted-recon; sid:200000031; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-inc-107097.weeblysite.com",nocase; classtype:attempted-recon; sid:200000032; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-login380.weeblysite.com",nocase; classtype:attempted-recon; sid:200000033; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-login522.weeblysite.com",nocase; classtype:attempted-recon; sid:200000034; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-service-102155.weeblysite.com",nocase; classtype:attempted-recon; sid:200000035; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-sign-in-105669.weeblysite.com",nocase; classtype:attempted-recon; sid:200000036; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcom-100762.weeblysite.com",nocase; classtype:attempted-recon; sid:200000037; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcom-106808.weeblysite.com",nocase; classtype:attempted-recon; sid:200000038; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailservicenow.wixstudio.com",nocase; classtype:attempted-recon; sid:200000039; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailservicenow.wixstudio.io",nocase; classtype:attempted-recon; sid:200000040; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailsrvrdesk.weebly.com",nocase; classtype:attempted-recon; sid:200000041; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attnewmaill.weebly.com",nocase; classtype:attempted-recon; sid:200000042; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attyhhhhiiii225.weebly.com",nocase; classtype:attempted-recon; sid:200000043; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atw-tau.vercel.app",nocase; classtype:attempted-recon; sid:200000044; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com",nocase; classtype:attempted-recon; sid:200000045; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authsyncs.pages.dev",nocase; classtype:attempted-recon; sid:200000046; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoreplyattmode.wixsite.com",nocase; classtype:attempted-recon; sid:200000047; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"avoid.hold-managert.com",nocase; classtype:attempted-recon; sid:200000048; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azbin.ir",nocase; classtype:attempted-recon; sid:200000049; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b45018.com",nocase; classtype:attempted-recon; sid:200000050; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000051; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baiii-wong.cutvi.cfd",nocase; classtype:attempted-recon; sid:200000052; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"basvuru-online-yap.vercel.app",nocase; classtype:attempted-recon; sid:200000053; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beionfidi.pages.dev",nocase; classtype:attempted-recon; sid:200000054; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet73nn.com",nocase; classtype:attempted-recon; sid:200000055; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet83039.com",nocase; classtype:attempted-recon; sid:200000056; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet83054.com",nocase; classtype:attempted-recon; sid:200000057; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfrescentremebermainsetreouytnoy.weebly.com",nocase; classtype:attempted-recon; sid:200000058; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biggggggggggg.weebly.com",nocase; classtype:attempted-recon; sid:200000059; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitnode.pages.dev",nocase; classtype:attempted-recon; sid:200000060; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitvavobtc.com",nocase; classtype:attempted-recon; sid:200000061; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blackhere11.serv00.net",nocase; classtype:attempted-recon; sid:200000062; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blss24att.weebly.com",nocase; classtype:attempted-recon; sid:200000063; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"braucrarasuteu-2470.vercel.app",nocase; classtype:attempted-recon; sid:200000064; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-102124.weeblysite.com",nocase; classtype:attempted-recon; sid:200000065; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt1business.weebly.com",nocase; classtype:attempted-recon; sid:200000066; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btuan-dan2-resmi.top1.my.id",nocase; classtype:attempted-recon; sid:200000067; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buildingdesignsusapdf.s3.us-east-005.backblazeb2.com",nocase; classtype:attempted-recon; sid:200000068; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-property-897432967.netlify.app",nocase; classtype:attempted-recon; sid:200000069; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caipora.xyz",nocase; classtype:attempted-recon; sid:200000070; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calm-pothos-3b24c9.netlify.app",nocase; classtype:attempted-recon; sid:200000071; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carrefourarabiank15.pages.dev",nocase; classtype:attempted-recon; sid:200000072; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com",nocase; classtype:attempted-recon; sid:200000073; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catgirl-appverset-nya.pages.dev",nocase; classtype:attempted-recon; sid:200000074; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catxtokens.pages.dev",nocase; classtype:attempted-recon; sid:200000075; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chat.94-103-188-123.plesk.page",nocase; classtype:attempted-recon; sid:200000076; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"check154109.click",nocase; classtype:attempted-recon; sid:200000077; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkseven.vercel.app",nocase; classtype:attempted-recon; sid:200000078; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ciente-a.org",nocase; classtype:attempted-recon; sid:200000079; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cieplo.app",nocase; classtype:attempted-recon; sid:200000080; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cj12143.tw1.ru",nocase; classtype:attempted-recon; sid:200000081; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cj87335.tw1.ru",nocase; classtype:attempted-recon; sid:200000082; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claimyourethrewards.pages.dev",nocase; classtype:attempted-recon; sid:200000083; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clickbait.design",nocase; classtype:attempted-recon; sid:200000084; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cnsa163.com",nocase; classtype:attempted-recon; sid:200000085; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cock2-iota.vercel.app",nocase; classtype:attempted-recon; sid:200000086; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cock3.vercel.app",nocase; classtype:attempted-recon; sid:200000087; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cock7.vercel.app",nocase; classtype:attempted-recon; sid:200000088; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-pro-8291-d01.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000089; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-pro-8291-d01.web.app",nocase; classtype:attempted-recon; sid:200000090; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creosrl.com",nocase; classtype:attempted-recon; sid:200000091; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curmmgdv.email",nocase; classtype:attempted-recon; sid:200000092; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently541.weebly.com",nocase; classtype:attempted-recon; sid:200000093; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently890.weebly.com",nocase; classtype:attempted-recon; sid:200000094; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyserver.weebly.com",nocase; classtype:attempted-recon; sid:200000095; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dara3dccj.wixsite.com",nocase; classtype:attempted-recon; sid:200000096; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"db.service4db.com",nocase; classtype:attempted-recon; sid:200000097; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev",nocase; classtype:attempted-recon; sid:200000098; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"debutcan.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000099; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"debutcan.web.app",nocase; classtype:attempted-recon; sid:200000100; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delivery.attempt.failure.ebbs.co.za",nocase; classtype:attempted-recon; sid:200000101; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev.stream.mornar.app",nocase; classtype:attempted-recon; sid:200000102; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dnwqmh.click",nocase; classtype:attempted-recon; sid:200000103; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dropsmartchain.pages.dev",nocase; classtype:attempted-recon; sid:200000104; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsjoting.group",nocase; classtype:attempted-recon; sid:200000105; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dulb6c5p5.top",nocase; classtype:attempted-recon; sid:200000106; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebay-mallwholesale.com",nocase; classtype:attempted-recon; sid:200000107; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebt-lilac.vercel.app",nocase; classtype:attempted-recon; sid:200000108; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"echoredled.netlify.app",nocase; classtype:attempted-recon; sid:200000109; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elbarco.percentadnp.info",nocase; classtype:attempted-recon; sid:200000110; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eltritongourmet.com",nocase; classtype:attempted-recon; sid:200000111; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"email.mgb.modento.io",nocase; classtype:attempted-recon; sid:200000112; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enjomugg.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000113; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enjomugg.web.app",nocase; classtype:attempted-recon; sid:200000114; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"error3456vhubhornbase.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000115; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"example223.wixsite.com",nocase; classtype:attempted-recon; sid:200000116; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eyeydhe.wixsite.com",nocase; classtype:attempted-recon; sid:200000117; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eyttueiu.square.site",nocase; classtype:attempted-recon; sid:200000118; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-avip.click",nocase; classtype:attempted-recon; sid:200000119; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fame.pink",nocase; classtype:attempted-recon; sid:200000120; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fassehoizubra-7696.vercel.app",nocase; classtype:attempted-recon; sid:200000121; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fastdropchain.pages.dev",nocase; classtype:attempted-recon; sid:200000122; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io",nocase; classtype:attempted-recon; sid:200000123; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fla-1001.square.site",nocase; classtype:attempted-recon; sid:200000124; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flo4211.github.io",nocase; classtype:attempted-recon; sid:200000125; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com",nocase; classtype:attempted-recon; sid:200000126; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fnuttlie.wiki",nocase; classtype:attempted-recon; sid:200000127; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fokeijonnekou.vercel.app",nocase; classtype:attempted-recon; sid:200000128; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com",nocase; classtype:attempted-recon; sid:200000129; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-verified-badge-form0-service.vercel.app",nocase; classtype:attempted-recon; sid:200000130; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-verified-meta-badge-service.vercel.app",nocase; classtype:attempted-recon; sid:200000131; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"g06668706.wixsite.com",nocase; classtype:attempted-recon; sid:200000132; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gccndbqg.vip",nocase; classtype:attempted-recon; sid:200000133; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geriodememerkezi.online",nocase; classtype:attempted-recon; sid:200000134; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"get-checkmark-for-you.vercel.app",nocase; classtype:attempted-recon; sid:200000135; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"get-free-verified-badge-service-on.vercel.app",nocase; classtype:attempted-recon; sid:200000136; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gitanag.broke-it.net",nocase; classtype:attempted-recon; sid:200000137; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gruprocuroipra-6493.vercel.app",nocase; classtype:attempted-recon; sid:200000138; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.b9en.com",nocase; classtype:attempted-recon; sid:200000139; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.metacoint.com",nocase; classtype:attempted-recon; sid:200000140; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hcghij.top",nocase; classtype:attempted-recon; sid:200000141; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hecregayatu-1014.vercel.app",nocase; classtype:attempted-recon; sid:200000142; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hejmtxxt.guru",nocase; classtype:attempted-recon; sid:200000143; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helenblunt6.wixsite.com",nocase; classtype:attempted-recon; sid:200000144; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help.accountsupportcentre.com",nocase; classtype:attempted-recon; sid:200000145; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"here-apply-for-page-review.vercel.app",nocase; classtype:attempted-recon; sid:200000146; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgbk.ldgknhk.lol",nocase; classtype:attempted-recon; sid:200000147; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hhideiie.wixsite.com",nocase; classtype:attempted-recon; sid:200000148; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitummoinneullei-5882.vercel.app",nocase; classtype:attempted-recon; sid:200000149; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-101067.weeblysite.com",nocase; classtype:attempted-recon; sid:200000150; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-103465.weeblysite.com",nocase; classtype:attempted-recon; sid:200000151; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-104341.weeblysite.com",nocase; classtype:attempted-recon; sid:200000152; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-105266.weeblysite.com",nocase; classtype:attempted-recon; sid:200000153; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-105929.weeblysite.com",nocase; classtype:attempted-recon; sid:200000154; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homeattatthome.square.site",nocase; classtype:attempted-recon; sid:200000155; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hpnefhqs.motorcycles",nocase; classtype:attempted-recon; sid:200000156; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im25.net",nocase; classtype:attempted-recon; sid:200000157; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info.supercitrus.ind.br",nocase; classtype:attempted-recon; sid:200000158; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ins-business-home-center.com",nocase; classtype:attempted-recon; sid:200000159; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instagaramgalochka.vercel.app",nocase; classtype:attempted-recon; sid:200000160; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipv6.43-135-137-110.cprapid.com",nocase; classtype:attempted-recon; sid:200000161; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irmt0ken.win",nocase; classtype:attempted-recon; sid:200000162; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iujf7839iofvkbcu748.weebly.com",nocase; classtype:attempted-recon; sid:200000163; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iwimwmiwi.click",nocase; classtype:attempted-recon; sid:200000164; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jagej73796.wixsite.com",nocase; classtype:attempted-recon; sid:200000165; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfdjy.com",nocase; classtype:attempted-recon; sid:200000166; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kalyani963.github.io",nocase; classtype:attempted-recon; sid:200000167; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kexoigrufouddou-5902.vercel.app",nocase; classtype:attempted-recon; sid:200000168; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kl1k-ds1ni.neupdile.my.id",nocase; classtype:attempted-recon; sid:200000169; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kliind08.wixsite.com",nocase; classtype:attempted-recon; sid:200000170; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kreelo098.weebly.com",nocase; classtype:attempted-recon; sid:200000171; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kremlcup.com",nocase; classtype:attempted-recon; sid:200000172; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kshitij12375.github.io",nocase; classtype:attempted-recon; sid:200000173; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kucoinglobal1.com",nocase; classtype:attempted-recon; sid:200000174; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kxbztydc.black",nocase; classtype:attempted-recon; sid:200000175; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"labanquepostale.jupiter-analytics.com",nocase; classtype:attempted-recon; sid:200000176; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leddevotoze-3146.vercel.app",nocase; classtype:attempted-recon; sid:200000177; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linnkdna-kget.wxxzsite.buzz",nocase; classtype:attempted-recon; sid:200000178; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llahi.info",nocase; classtype:attempted-recon; sid:200000179; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llahi.vip",nocase; classtype:attempted-recon; sid:200000180; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loffaummuddote-4145.vercel.app",nocase; classtype:attempted-recon; sid:200000181; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-att-10221.square.site",nocase; classtype:attempted-recon; sid:200000182; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-form.world",nocase; classtype:attempted-recon; sid:200000183; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-online-outlook365.com",nocase; classtype:attempted-recon; sid:200000184; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-outlook-midstreamauth.com",nocase; classtype:attempted-recon; sid:200000185; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-screen-103134.weeblysite.com",nocase; classtype:attempted-recon; sid:200000186; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginaccount70.wixsite.com",nocase; classtype:attempted-recon; sid:200000187; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginaccount77.wixsite.com",nocase; classtype:attempted-recon; sid:200000188; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luk6414.wixsite.com",nocase; classtype:attempted-recon; sid:200000189; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luxlifemiamiblog.com",nocase; classtype:attempted-recon; sid:200000190; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.meta-accessibility.io.vn",nocase; classtype:attempted-recon; sid:200000191; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madebybmr.fyi",nocase; classtype:attempted-recon; sid:200000192; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maqpiexyz.click",nocase; classtype:attempted-recon; sid:200000193; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev",nocase; classtype:attempted-recon; sid:200000194; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayfair313.wixsite.com",nocase; classtype:attempted-recon; sid:200000195; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdbrvlfy.black",nocase; classtype:attempted-recon; sid:200000196; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mesageriepro33range1.weebly.com",nocase; classtype:attempted-recon; sid:200000197; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamsk-wallet-3.gitbook.io",nocase; classtype:attempted-recon; sid:200000198; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metttaa-audddt-new-02.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000199; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metttaa-audddt-new-02.web.app",nocase; classtype:attempted-recon; sid:200000200; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft365-storage.github.io",nocase; classtype:attempted-recon; sid:200000201; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mikepattyjm.wixsite.com",nocase; classtype:attempted-recon; sid:200000202; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobilemidasbuy.n3g.fun",nocase; classtype:attempted-recon; sid:200000203; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monespacepro-client.3utilities.com",nocase; classtype:attempted-recon; sid:200000204; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monetization-violation.github.io",nocase; classtype:attempted-recon; sid:200000205; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moodengsol-net.pages.dev",nocase; classtype:attempted-recon; sid:200000206; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mwsiekdnfjrdufs.weebly.com",nocase; classtype:attempted-recon; sid:200000207; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mxmxnmx.mx.zya.me",nocase; classtype:attempted-recon; sid:200000208; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"national-au-b.com",nocase; classtype:attempted-recon; sid:200000209; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"national-au.net",nocase; classtype:attempted-recon; sid:200000210; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nbaaiqjq.group",nocase; classtype:attempted-recon; sid:200000211; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nexomyacwv.weebly.com",nocase; classtype:attempted-recon; sid:200000212; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nft-time11.vercel.app",nocase; classtype:attempted-recon; sid:200000213; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nichcheck.weeblysite.com",nocase; classtype:attempted-recon; sid:200000214; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ns1.carrier-ast2-portal-apple.com",nocase; classtype:attempted-recon; sid:200000215; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omadshf.ru",nocase; classtype:attempted-recon; sid:200000216; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-assist.live",nocase; classtype:attempted-recon; sid:200000217; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-promo-asb.org",nocase; classtype:attempted-recon; sid:200000218; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openkimono.pro",nocase; classtype:attempted-recon; sid:200000219; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opportunity-verified-status.vercel.app",nocase; classtype:attempted-recon; sid:200000220; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ourtime.reconnect-dating.workers.dev",nocase; classtype:attempted-recon; sid:200000221; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"owouwuowo.click",nocase; classtype:attempted-recon; sid:200000222; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p365kf.com",nocase; classtype:attempted-recon; sid:200000223; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p4zv8crnrrha27so.94-103-188-123.plesk.page",nocase; classtype:attempted-recon; sid:200000224; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"page-center-manage.com",nocase; classtype:attempted-recon; sid:200000225; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pavan-patil-22.github.io",nocase; classtype:attempted-recon; sid:200000226; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pecinternational.net",nocase; classtype:attempted-recon; sid:200000227; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peesom.chat",nocase; classtype:attempted-recon; sid:200000228; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pencairaanndannaa.my.id",nocase; classtype:attempted-recon; sid:200000229; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"petty.wiki",nocase; classtype:attempted-recon; sid:200000230; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pimnhv.group",nocase; classtype:attempted-recon; sid:200000231; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"policies-business-page-service.com",nocase; classtype:attempted-recon; sid:200000232; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pottatrebewe-2808.vercel.app",nocase; classtype:attempted-recon; sid:200000233; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pqo.hrf.mybluehost.me",nocase; classtype:attempted-recon; sid:200000234; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"programming--service--panel-totlyy-free-for-you.vercel.app",nocase; classtype:attempted-recon; sid:200000235; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promo1.spik.ru",nocase; classtype:attempted-recon; sid:200000236; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protocolsecure.pages.dev",nocase; classtype:attempted-recon; sid:200000237; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev",nocase; classtype:attempted-recon; sid:200000238; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-1778406e4fec4394901793111c187dd9.r2.dev",nocase; classtype:attempted-recon; sid:200000239; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-19b834342e7d465b9f00b3511325a081.r2.dev",nocase; classtype:attempted-recon; sid:200000240; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-21dd4dc659614ceb93e45a6de4434502.r2.dev",nocase; classtype:attempted-recon; sid:200000241; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev",nocase; classtype:attempted-recon; sid:200000242; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-2fefe932a6974485b987c9ba851b5c40.r2.dev",nocase; classtype:attempted-recon; sid:200000243; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-3a46d9914f494078a6d6237513e7a096.r2.dev",nocase; classtype:attempted-recon; sid:200000244; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-442ed822851244a689b3472ea2c6a950.r2.dev",nocase; classtype:attempted-recon; sid:200000245; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev",nocase; classtype:attempted-recon; sid:200000246; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev",nocase; classtype:attempted-recon; sid:200000247; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev",nocase; classtype:attempted-recon; sid:200000248; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev",nocase; classtype:attempted-recon; sid:200000249; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7f5cf36445d042168bfacd712e890dc0.r2.dev",nocase; classtype:attempted-recon; sid:200000250; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-803839714a924882a7bcc2495a26860f.r2.dev",nocase; classtype:attempted-recon; sid:200000251; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8161de4a277e4ee8b532af34954224e1.r2.dev",nocase; classtype:attempted-recon; sid:200000252; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev",nocase; classtype:attempted-recon; sid:200000253; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8376b5b2334844d193a525d8b8548fa5.r2.dev",nocase; classtype:attempted-recon; sid:200000254; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev",nocase; classtype:attempted-recon; sid:200000255; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev",nocase; classtype:attempted-recon; sid:200000256; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev",nocase; classtype:attempted-recon; sid:200000257; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-9163a97d70394cb499bdd232be6c2169.r2.dev",nocase; classtype:attempted-recon; sid:200000258; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev",nocase; classtype:attempted-recon; sid:200000259; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-98171471e0944ac3a5820ef719bf0640.r2.dev",nocase; classtype:attempted-recon; sid:200000260; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-a263e0790935412eb10cacc55bbced18.r2.dev",nocase; classtype:attempted-recon; sid:200000261; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-a291041b077742899b63a9982f04a56c.r2.dev",nocase; classtype:attempted-recon; sid:200000262; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev",nocase; classtype:attempted-recon; sid:200000263; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-b50adc5d699a4f08aec37102c2103da7.r2.dev",nocase; classtype:attempted-recon; sid:200000264; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c0a934c950e441db96b882789f53c9ea.r2.dev",nocase; classtype:attempted-recon; sid:200000265; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c2c250050109456396c933de259a4fea.r2.dev",nocase; classtype:attempted-recon; sid:200000266; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev",nocase; classtype:attempted-recon; sid:200000267; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev",nocase; classtype:attempted-recon; sid:200000268; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev",nocase; classtype:attempted-recon; sid:200000269; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev",nocase; classtype:attempted-recon; sid:200000270; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev",nocase; classtype:attempted-recon; sid:200000271; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev",nocase; classtype:attempted-recon; sid:200000272; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev",nocase; classtype:attempted-recon; sid:200000273; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev",nocase; classtype:attempted-recon; sid:200000274; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e42cb528b102447385e3145197916f51.r2.dev",nocase; classtype:attempted-recon; sid:200000275; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e4aff507450c478cbe3f77ad23d75035.r2.dev",nocase; classtype:attempted-recon; sid:200000276; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev",nocase; classtype:attempted-recon; sid:200000277; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev",nocase; classtype:attempted-recon; sid:200000278; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev",nocase; classtype:attempted-recon; sid:200000279; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgm.club",nocase; classtype:attempted-recon; sid:200000280; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puffagroibrouwoi-8818.vercel.app",nocase; classtype:attempted-recon; sid:200000281; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qasimk.com",nocase; classtype:attempted-recon; sid:200000282; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qfjfvseq.info",nocase; classtype:attempted-recon; sid:200000283; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quauwograssodda-3503.vercel.app",nocase; classtype:attempted-recon; sid:200000284; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qysgyp.com",nocase; classtype:attempted-recon; sid:200000285; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rajdipchatterjee.github.io",nocase; classtype:attempted-recon; sid:200000286; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rechazaroanularaqui51.weebly.com",nocase; classtype:attempted-recon; sid:200000287; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remote-fix.pages.dev",nocase; classtype:attempted-recon; sid:200000288; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renggard.47-243-192-240.cprapid.com",nocase; classtype:attempted-recon; sid:200000289; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resolvepanel.live",nocase; classtype:attempted-recon; sid:200000290; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resolving--issue--with-us1.vercel.app",nocase; classtype:attempted-recon; sid:200000291; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resqat.weebly.com",nocase; classtype:attempted-recon; sid:200000292; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-business-case.d2f7p3b7pucnle.amplifyapp.com",nocase; classtype:attempted-recon; sid:200000293; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rlpqwefi.pink",nocase; classtype:attempted-recon; sid:200000294; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rouloigeilleuja-9523.vercel.app",nocase; classtype:attempted-recon; sid:200000295; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rulemec.pages.dev",nocase; classtype:attempted-recon; sid:200000296; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rutinqqwin.shop",nocase; classtype:attempted-recon; sid:200000297; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rwftfu.quest",nocase; classtype:attempted-recon; sid:200000298; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.team-pw.cc",nocase; classtype:attempted-recon; sid:200000299; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sairanees.github.io",nocase; classtype:attempted-recon; sid:200000300; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanseipecas.com.br",nocase; classtype:attempted-recon; sid:200000301; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasklelo.weebly.com",nocase; classtype:attempted-recon; sid:200000302; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com",nocase; classtype:attempted-recon; sid:200000303; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelcustomerwebly.weebly.com",nocase; classtype:attempted-recon; sid:200000304; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelnetwebmailservermaintainance.weebly.com",nocase; classtype:attempted-recon; sid:200000305; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelrectify.weebly.com",nocase; classtype:attempted-recon; sid:200000306; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelscrutinize.weebly.com",nocase; classtype:attempted-recon; sid:200000307; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelservicecentterwebly.weebly.com",nocase; classtype:attempted-recon; sid:200000308; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelsupportsystemwebly.weebly.com",nocase; classtype:attempted-recon; sid:200000309; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sbcglobal30.wixsite.com",nocase; classtype:attempted-recon; sid:200000310; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scan-vulnerability-guard-v3.pages.dev",nocase; classtype:attempted-recon; sid:200000311; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scan-vulnerability-guard.pages.dev",nocase; classtype:attempted-recon; sid:200000312; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanner-metamask-v1.pages.dev",nocase; classtype:attempted-recon; sid:200000313; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanner-metamask-v2.pages.dev",nocase; classtype:attempted-recon; sid:200000314; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanner-metamask-v3.pages.dev",nocase; classtype:attempted-recon; sid:200000315; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanner-metamask.pages.dev",nocase; classtype:attempted-recon; sid:200000316; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sec-sign-in.info",nocase; classtype:attempted-recon; sid:200000317; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure2-validitycheck.weebly.com",nocase; classtype:attempted-recon; sid:200000318; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securecapitec.theprimepoint.online",nocase; classtype:attempted-recon; sid:200000319; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securerpcfix.com",nocase; classtype:attempted-recon; sid:200000320; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seeteressecalywoi.github.io",nocase; classtype:attempted-recon; sid:200000321; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seivviice.weebly.com",nocase; classtype:attempted-recon; sid:200000322; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.0e7p.com",nocase; classtype:attempted-recon; sid:200000323; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.2rk3.com",nocase; classtype:attempted-recon; sid:200000324; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.8q3p.com",nocase; classtype:attempted-recon; sid:200000325; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.n6b8.com",nocase; classtype:attempted-recon; sid:200000326; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.v9vs.com",nocase; classtype:attempted-recon; sid:200000327; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sevvviicess.weebly.com",nocase; classtype:attempted-recon; sid:200000328; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shard.blue",nocase; classtype:attempted-recon; sid:200000329; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shard.skin",nocase; classtype:attempted-recon; sid:200000330; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-d7590.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000331; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-d7590.web.app",nocase; classtype:attempted-recon; sid:200000332; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-101329.weeblysite.com",nocase; classtype:attempted-recon; sid:200000333; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-101587.weeblysite.com",nocase; classtype:attempted-recon; sid:200000334; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-106427.weeblysite.com",nocase; classtype:attempted-recon; sid:200000335; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-107375.weeblysite.com",nocase; classtype:attempted-recon; sid:200000336; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solutionwebsitedapp.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000337; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solutionwebsitedapp.web.app",nocase; classtype:attempted-recon; sid:200000338; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solvetans.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000339; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solvetans.web.app",nocase; classtype:attempted-recon; sid:200000340; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sondfrom.dexlog.my.id",nocase; classtype:attempted-recon; sid:200000341; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soyokai.or.jp",nocase; classtype:attempted-recon; sid:200000342; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srdate.club",nocase; classtype:attempted-recon; sid:200000343; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssy.hmb.mybluehostin.me",nocase; classtype:attempted-recon; sid:200000344; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steam.poweredartsworkshop.com",nocase; classtype:attempted-recon; sid:200000345; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steam.workshopsreview.com",nocase; classtype:attempted-recon; sid:200000346; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommmuty.com",nocase; classtype:attempted-recon; sid:200000347; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommuunity.ru",nocase; classtype:attempted-recon; sid:200000348; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcomunutty.com",nocase; classtype:attempted-recon; sid:200000349; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamconmumity.com",nocase; classtype:attempted-recon; sid:200000350; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepsray.vercel.app",nocase; classtype:attempted-recon; sid:200000351; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-metahelpcenter-id100003498934.netlify.app",nocase; classtype:attempted-recon; sid:200000352; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sv5gardens655665.weeblysite.com",nocase; classtype:attempted-recon; sid:200000353; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"system-portalnu.duckdns.org",nocase; classtype:attempted-recon; sid:200000354; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talwgam.njmolada.com",nocase; classtype:attempted-recon; sid:200000355; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taste.baby",nocase; classtype:attempted-recon; sid:200000356; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tele.zhngain.top",nocase; classtype:attempted-recon; sid:200000357; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrambot-resolved.pages.dev",nocase; classtype:attempted-recon; sid:200000358; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrazm.net",nocase; classtype:attempted-recon; sid:200000359; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-100408.weeblysite.com",nocase; classtype:attempted-recon; sid:200000360; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-100469.weeblysite.com",nocase; classtype:attempted-recon; sid:200000361; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-103234.weeblysite.com",nocase; classtype:attempted-recon; sid:200000362; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiktok-888.vip",nocase; classtype:attempted-recon; sid:200000363; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiltckshow.top",nocase; classtype:attempted-recon; sid:200000364; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tnomwzrp.top",nocase; classtype:attempted-recon; sid:200000365; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toeken.im",nocase; classtype:attempted-recon; sid:200000366; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tonic.pink",nocase; classtype:attempted-recon; sid:200000367; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tooma.cellinsurance.co.zw",nocase; classtype:attempted-recon; sid:200000368; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tpdtepremu.xyz",nocase; classtype:attempted-recon; sid:200000369; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trattujeilesso-3354.vercel.app",nocase; classtype:attempted-recon; sid:200000370; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trbinace.com",nocase; classtype:attempted-recon; sid:200000371; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"treibrukeukonno-1395.vercel.app",nocase; classtype:attempted-recon; sid:200000372; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuesmad.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000373; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuesmad.web.app",nocase; classtype:attempted-recon; sid:200000374; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tyyyyyytyyy.weebly.com",nocase; classtype:attempted-recon; sid:200000375; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tzcsjfto.chat",nocase; classtype:attempted-recon; sid:200000376; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.updatetrackgre.top",nocase; classtype:attempted-recon; sid:200000377; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uc-whatstapp-web.com",nocase; classtype:attempted-recon; sid:200000378; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"udxcady.wixsite.com",nocase; classtype:attempted-recon; sid:200000379; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uklifejv.cyou",nocase; classtype:attempted-recon; sid:200000380; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatemail12.wixsite.com",nocase; classtype:attempted-recon; sid:200000381; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ups-trackdeliveryapps.chickenkiller.com",nocase; classtype:attempted-recon; sid:200000382; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usbest.cyou",nocase; classtype:attempted-recon; sid:200000383; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-transaction-overview.vercel.app",nocase; classtype:attempted-recon; sid:200000384; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackdck.top",nocase; classtype:attempted-recon; sid:200000385; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracklnv.top",nocase; classtype:attempted-recon; sid:200000386; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmcl.top",nocase; classtype:attempted-recon; sid:200000387; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmec.top",nocase; classtype:attempted-recon; sid:200000388; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracktpq.top",nocase; classtype:attempted-recon; sid:200000389; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackvmd.top",nocase; classtype:attempted-recon; sid:200000390; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsinfw.top",nocase; classtype:attempted-recon; sid:200000391; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uwdtsczi.top",nocase; classtype:attempted-recon; sid:200000392; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uwm-onedrive.com",nocase; classtype:attempted-recon; sid:200000393; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vaishnavi1436.github.io",nocase; classtype:attempted-recon; sid:200000394; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validatie-veiligauthenticatie.com",nocase; classtype:attempted-recon; sid:200000395; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbbu.ldgknhk.lol",nocase; classtype:attempted-recon; sid:200000396; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verified-this-request-badge.vercel.app",nocase; classtype:attempted-recon; sid:200000397; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vo4zzp.icu",nocase; classtype:attempted-recon; sid:200000398; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vs41.github.io",nocase; classtype:attempted-recon; sid:200000399; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walett-cont.gitbook.io",nocase; classtype:attempted-recon; sid:200000400; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletauthenticators.vercel.app",nocase; classtype:attempted-recon; sid:200000401; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletcomnecitt.gitbook.io",nocase; classtype:attempted-recon; sid:200000402; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnectdapps.online",nocase; classtype:attempted-recon; sid:200000403; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"watranfart-fdd6a8.ingress-bonde.ewp.live",nocase; classtype:attempted-recon; sid:200000404; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waxed.wiki",nocase; classtype:attempted-recon; sid:200000405; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmaillshavv.weebly.com",nocase; classtype:attempted-recon; sid:200000406; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weeeqweeattt.weebly.com",nocase; classtype:attempted-recon; sid:200000407; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weigh.skin",nocase; classtype:attempted-recon; sid:200000408; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weigh.wiki",nocase; classtype:attempted-recon; sid:200000409; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wgqdqvtn.baby",nocase; classtype:attempted-recon; sid:200000410; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wgqdqvtn.pink",nocase; classtype:attempted-recon; sid:200000411; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whatsapp-rqr.com",nocase; classtype:attempted-recon; sid:200000412; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wirelessvoicebtpaidmailinfoplay047.weebly.com",nocase; classtype:attempted-recon; sid:200000413; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wscs1231.cyou",nocase; classtype:attempted-recon; sid:200000414; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--metmasklogin-vcb.gitbook.io",nocase; classtype:attempted-recon; sid:200000415; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xojautruffeuttu-4659.vercel.app",nocase; classtype:attempted-recon; sid:200000416; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xraiz.info",nocase; classtype:attempted-recon; sid:200000417; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xraiz.vip",nocase; classtype:attempted-recon; sid:200000418; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xsuweamskeidjf.weebly.com",nocase; classtype:attempted-recon; sid:200000419; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xya46.cc",nocase; classtype:attempted-recon; sid:200000420; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoooooo-108560.weeblysite.com",nocase; classtype:attempted-recon; sid:200000421; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yavanica123.github.io",nocase; classtype:attempted-recon; sid:200000422; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yi5lq-syaaa-aaaag-acfsq-cai.icp0.io",nocase; classtype:attempted-recon; sid:200000423; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"you-can-receive-here.vercel.app",nocase; classtype:attempted-recon; sid:200000424; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeiitgeist.angelocachero.info",nocase; classtype:attempted-recon; sid:200000425; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zenixoikitti-5809.vercel.app",nocase; classtype:attempted-recon; sid:200000426; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeznjx.shop",nocase; classtype:attempted-recon; sid:200000427; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zwzcn.com",nocase; classtype:attempted-recon; sid:200000428; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alturl.com",nocase; http_uri; content:"/hpqhv",nocase; classtype:attempted-recon; sid:200000429; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ardilu.com",nocase; http_uri; content:"/descargar/kmsauto-net",nocase; classtype:attempted-recon; sid:200000430; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"did.li",nocase; http_uri; content:"/parcels",nocase; classtype:attempted-recon; sid:200000431; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/servicesatttttmail",nocase; classtype:attempted-recon; sid:200000432; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hdfcsky.com",nocase; http_uri; content:"/sky/indian-stock/dashboard",nocase; classtype:attempted-recon; sid:200000433; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hdfcsky.com",nocase; http_uri; content:"/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!",nocase; classtype:attempted-recon; sid:200000434; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/djgj07/",nocase; classtype:attempted-recon; sid:200000435; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pay.zing.vn",nocase; http_uri; content:"/pubgm/",nocase; classtype:attempted-recon; sid:200000436; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rb.gy",nocase; http_uri; content:"/go4bnv/",nocase; classtype:attempted-recon; sid:200000437; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/18ab5a",nocase; classtype:attempted-recon; sid:200000438; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/4ff03b",nocase; classtype:attempted-recon; sid:200000439; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/8wtcv4z",nocase; classtype:attempted-recon; sid:200000440; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/96a02f",nocase; classtype:attempted-recon; sid:200000441; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/c0d1afz",nocase; classtype:attempted-recon; sid:200000442; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/d2f265",nocase; classtype:attempted-recon; sid:200000443; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/eacc63",nocase; classtype:attempted-recon; sid:200000444; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/f9decb",nocase; classtype:attempted-recon; sid:200000445; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/mzhpkzf",nocase; classtype:attempted-recon; sid:200000446; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/nbyh9vh",nocase; classtype:attempted-recon; sid:200000447; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/sa2uoq0",nocase; classtype:attempted-recon; sid:200000448; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/tcthi8d",nocase; classtype:attempted-recon; sid:200000449; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/tnab363c6",nocase; classtype:attempted-recon; sid:200000450; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/wx1eo7w",nocase; classtype:attempted-recon; sid:200000451; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/tvybxr",nocase; classtype:attempted-recon; sid:200000452; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/carrefour-926/",nocase; classtype:attempted-recon; sid:200000453; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/t8vi",nocase; classtype:attempted-recon; sid:200000454; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/t9ka",nocase; classtype:attempted-recon; sid:200000455; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/talr",nocase; classtype:attempted-recon; sid:200000456; rev:1;)
diff --git a/phishing-filter-snort3.rules.br b/phishing-filter-snort3.rules.br
new file mode 100644
index 000000000..8a38f0ec5
Binary files /dev/null and b/phishing-filter-snort3.rules.br differ
diff --git a/phishing-filter-snort3.rules.gz b/phishing-filter-snort3.rules.gz
new file mode 100644
index 000000000..fd2579342
Binary files /dev/null and b/phishing-filter-snort3.rules.gz differ
diff --git a/phishing-filter-splunk.csv b/phishing-filter-splunk.csv
new file mode 100644
index 000000000..2034d248d
--- /dev/null
+++ b/phishing-filter-splunk.csv
@@ -0,0 +1,463 @@
+# Title: Phishing URL Splunk Lookup
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+"host","path","message","updated"
+"1111365dh.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"12931-coinbase.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"215323.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"260aesthetic.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"3650947.cc","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"3659ll.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"83291-coinbase.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"94-103-188-123.plesk.page","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"9825057365.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"abctrvabc.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"acclimatizable.fun","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"account-update05.myvnc.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"accounts.google.auzen.us.kg","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"activebusiness-unlocker3.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"addwsrbh.green","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ahnp.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"aldg.ldgknhk.lol","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"allegrolokalnie.pl-891241214.buzz","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"alutipcentra.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ambil-pinjaman-daana-payleter.xforms.web.id","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ambulatoriprivati.it","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"amev.ldgknhk.lol","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"antail-conv.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"apply-now-to-receive-badge.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"artsea.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"atmailupdatewptnskmdinfomailacct.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-101072.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-1041page.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-105714.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-105819.square.site","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-inc-107097.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-login380.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-login522.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-service-102155.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"att-sign-in-105669.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"attcom-100762.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"attcom-106808.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"attmailservicenow.wixstudio.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"attmailservicenow.wixstudio.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"attmailsrvrdesk.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"attnewmaill.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"attyhhhhiiii225.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"atw-tau.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"authsyncs.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"autoreplyattmode.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"avoid.hold-managert.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"azbin.ir","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"b45018.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"baiii-wong.cutvi.cfd","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"basvuru-online-yap.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"beionfidi.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bet73nn.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bet83039.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bet83054.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bfrescentremebermainsetreouytnoy.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"biggggggggggg.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bitnode.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bitvavobtc.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"blackhere11.serv00.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"blss24att.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"braucrarasuteu-2470.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bt-102124.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"bt1business.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"btuan-dan2-resmi.top1.my.id","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"buildingdesignsusapdf.s3.us-east-005.backblazeb2.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"business-page-property-897432967.netlify.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"caipora.xyz","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"calm-pothos-3b24c9.netlify.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"carrefourarabiank15.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"catgirl-appverset-nya.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"catxtokens.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"chat.94-103-188-123.plesk.page","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"check154109.click","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"checkseven.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ciente-a.org","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"cieplo.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"cj12143.tw1.ru","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"cj87335.tw1.ru","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"claimyourethrewards.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"clickbait.design","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"cnsa163.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"cock2-iota.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"cock3.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"cock7.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"contact-pro-8291-d01.firebaseapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"contact-pro-8291-d01.web.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"creosrl.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"curmmgdv.email","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"currently541.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"currently890.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"currentlyserver.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"dara3dccj.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"db.service4db.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"debutcan.firebaseapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"debutcan.web.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"delivery.attempt.failure.ebbs.co.za","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"dev.stream.mornar.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"dnwqmh.click","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"dropsmartchain.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"dsjoting.group","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"dulb6c5p5.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ebay-mallwholesale.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ebt-lilac.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"echoredled.netlify.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"elbarco.percentadnp.info","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"eltritongourmet.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"email.mgb.modento.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"enjomugg.firebaseapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"enjomugg.web.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"error3456vhubhornbase.azurewebsites.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"example223.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"eyeydhe.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"eyttueiu.square.site","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"facebook-avip.click","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fame.pink","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fassehoizubra-7696.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fastdropchain.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fla-1001.square.site","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"flo4211.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fnuttlie.wiki","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fokeijonnekou.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"free-verified-badge-form0-service.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"free-verified-meta-badge-service.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"g06668706.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"gccndbqg.vip","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"geriodememerkezi.online","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"get-checkmark-for-you.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"get-free-verified-badge-service-on.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"gitanag.broke-it.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"gruprocuroipra-6493.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"h5.b9en.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"h5.metacoint.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hcghij.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hecregayatu-1014.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hejmtxxt.guru","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"helenblunt6.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"help.accountsupportcentre.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"here-apply-for-page-review.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hgbk.ldgknhk.lol","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hhideiie.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hitummoinneullei-5882.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"home-101067.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"home-103465.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"home-104341.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"home-105266.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"home-105929.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"homeattatthome.square.site","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hpnefhqs.motorcycles","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"im25.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"info.supercitrus.ind.br","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ins-business-home-center.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"instagaramgalochka.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ipv6.43-135-137-110.cprapid.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"irmt0ken.win","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"iujf7839iofvkbcu748.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"iwimwmiwi.click","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"jagej73796.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"jfdjy.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kalyani963.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kexoigrufouddou-5902.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kl1k-ds1ni.neupdile.my.id","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kliind08.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kreelo098.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kremlcup.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kshitij12375.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kucoinglobal1.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"kxbztydc.black","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"labanquepostale.jupiter-analytics.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"leddevotoze-3146.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"linnkdna-kget.wxxzsite.buzz","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"llahi.info","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"llahi.vip","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"loffaummuddote-4145.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"login-att-10221.square.site","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"login-form.world","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"login-online-outlook365.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"login-outlook-midstreamauth.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"login-screen-103134.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"loginaccount70.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"loginaccount77.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"luk6414.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"luxlifemiamiblog.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"m.meta-accessibility.io.vn","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"madebybmr.fyi","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"maqpiexyz.click","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"mayfair313.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"mdbrvlfy.black","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"mesageriepro33range1.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"metamsk-wallet-3.gitbook.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"metttaa-audddt-new-02.firebaseapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"metttaa-audddt-new-02.web.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"microsoft365-storage.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"mikepattyjm.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"mobilemidasbuy.n3g.fun","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"monespacepro-client.3utilities.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"monetization-violation.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"moodengsol-net.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"mwsiekdnfjrdufs.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"mxmxnmx.mx.zya.me","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"national-au-b.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"national-au.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"nbaaiqjq.group","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"nexomyacwv.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"nft-time11.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"nichcheck.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ns1.carrier-ast2-portal-apple.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"omadshf.ru","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"online-assist.live","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"online-promo-asb.org","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"openkimono.pro","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"opportunity-verified-status.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ourtime.reconnect-dating.workers.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"owouwuowo.click","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"p365kf.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"p4zv8crnrrha27so.94-103-188-123.plesk.page","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"page-center-manage.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pavan-patil-22.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pecinternational.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"peesom.chat","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pencairaanndannaa.my.id","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"petty.wiki","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pimnhv.group","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"policies-business-page-service.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pottatrebewe-2808.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pqo.hrf.mybluehost.me","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"programming--service--panel-totlyy-free-for-you.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"promo1.spik.ru","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"protocolsecure.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-1778406e4fec4394901793111c187dd9.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-19b834342e7d465b9f00b3511325a081.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-21dd4dc659614ceb93e45a6de4434502.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-2fefe932a6974485b987c9ba851b5c40.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-3a46d9914f494078a6d6237513e7a096.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-442ed822851244a689b3472ea2c6a950.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-682ad3b65d944376b919745aae3c56d4.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-7f5cf36445d042168bfacd712e890dc0.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-803839714a924882a7bcc2495a26860f.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-8161de4a277e4ee8b532af34954224e1.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-8376b5b2334844d193a525d8b8548fa5.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-9163a97d70394cb499bdd232be6c2169.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-98171471e0944ac3a5820ef719bf0640.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-a263e0790935412eb10cacc55bbced18.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-a291041b077742899b63a9982f04a56c.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-b50adc5d699a4f08aec37102c2103da7.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-c0a934c950e441db96b882789f53c9ea.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-c2c250050109456396c933de259a4fea.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-e42cb528b102447385e3145197916f51.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-e4aff507450c478cbe3f77ad23d75035.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pubgm.club","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"puffagroibrouwoi-8818.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"qasimk.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"qfjfvseq.info","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"quauwograssodda-3503.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"qysgyp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rajdipchatterjee.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rechazaroanularaqui51.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"remote-fix.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"renggard.47-243-192-240.cprapid.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"resolvepanel.live","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"resolving--issue--with-us1.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"resqat.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"review-business-case.d2f7p3b7pucnle.amplifyapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rlpqwefi.pink","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rouloigeilleuja-9523.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rulemec.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rutinqqwin.shop","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rwftfu.quest","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"s.team-pw.cc","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sairanees.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sanseipecas.com.br","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sasklelo.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sasktelcustomerwebly.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sasktelnetwebmailservermaintainance.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sasktelrectify.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sasktelscrutinize.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sasktelservicecentterwebly.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sasktelsupportsystemwebly.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sbcglobal30.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"scan-vulnerability-guard-v3.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"scan-vulnerability-guard.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"scanner-metamask-v1.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"scanner-metamask-v2.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"scanner-metamask-v3.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"scanner-metamask.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sec-sign-in.info","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"secure2-validitycheck.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"securecapitec.theprimepoint.online","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"securerpcfix.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"seeteressecalywoi.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"seivviice.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"server.0e7p.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"server.2rk3.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"server.8q3p.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"server.n6b8.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"server.v9vs.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sevvviicess.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"shard.blue","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"shard.skin","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"shared-d7590.firebaseapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"shared-d7590.web.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"shaw-101329.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"shaw-101587.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"shaw-106427.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"shaw-107375.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"solutionwebsitedapp.firebaseapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"solutionwebsitedapp.web.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"solvetans.firebaseapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"solvetans.web.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sondfrom.dexlog.my.id","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"soyokai.or.jp","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"srdate.club","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ssy.hmb.mybluehostin.me","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"steam.poweredartsworkshop.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"steam.workshopsreview.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"steamcommmuty.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"steamcommuunity.ru","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"steamcomunutty.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"steamconmumity.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"stepsray.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"support-metahelpcenter-id100003498934.netlify.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"sv5gardens655665.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"system-portalnu.duckdns.org","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"talwgam.njmolada.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"taste.baby","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tele.zhngain.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"telegrambot-resolved.pages.dev","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"telegrazm.net","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"telstra-100408.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"telstra-100469.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"telstra-103234.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tiktok-888.vip","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tiltckshow.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tnomwzrp.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"toeken.im","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tonic.pink","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tooma.cellinsurance.co.zw","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tpdtepremu.xyz","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"trattujeilesso-3354.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"trbinace.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"treibrukeukonno-1395.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tuesmad.firebaseapp.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tuesmad.web.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tyyyyyytyyy.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tzcsjfto.chat","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"u.updatetrackgre.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"uc-whatstapp-web.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"udxcady.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"uklifejv.cyou","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"updatemail12.wixsite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ups-trackdeliveryapps.chickenkiller.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"usbest.cyou","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"user-transaction-overview.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"usps.com-trackdck.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"usps.com-tracklnv.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"usps.com-trackmcl.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"usps.com-trackmec.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"usps.com-tracktpq.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"usps.com-trackvmd.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"uspsinfw.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"uwdtsczi.top","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"uwm-onedrive.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"vaishnavi1436.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"validatie-veiligauthenticatie.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"vbbu.ldgknhk.lol","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"verified-this-request-badge.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"vo4zzp.icu","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"vs41.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"walett-cont.gitbook.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"walletauthenticators.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"walletcomnecitt.gitbook.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"walletconnectdapps.online","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"watranfart-fdd6a8.ingress-bonde.ewp.live","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"waxed.wiki","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"webmaillshavv.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"weeeqweeattt.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"weigh.skin","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"weigh.wiki","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"wgqdqvtn.baby","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"wgqdqvtn.pink","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"whatsapp-rqr.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"wirelessvoicebtpaidmailinfoplay047.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"wscs1231.cyou","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"xn--metmasklogin-vcb.gitbook.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"xojautruffeuttu-4659.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"xraiz.info","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"xraiz.vip","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"xsuweamskeidjf.weebly.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"xya46.cc","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"yahoooooo-108560.weeblysite.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"yavanica123.github.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"yi5lq-syaaa-aaaag-acfsq-cai.icp0.io","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"you-can-receive-here.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"zeiitgeist.angelocachero.info","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"zenixoikitti-5809.vercel.app","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"zeznjx.shop","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"zwzcn.com","","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"alturl.com","/hpqhv","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"ardilu.com","/descargar/kmsauto-net","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"did.li","/parcels","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"flow.page","/servicesatttttmail","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hdfcsky.com","/sky/indian-stock/dashboard","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"hdfcsky.com","/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"is.gd","/djgj07/","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"pay.zing.vn","/pubgm/","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rb.gy","/go4bnv/","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/18ab5a","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/4ff03b","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/8wtcv4z","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/96a02f","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/c0d1afz","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/d2f265","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/eacc63","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/f9decb","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/mzhpkzf","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/nbyh9vh","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/sa2uoq0","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/tcthi8d","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/tnab363c6","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"rebrand.ly","/wx1eo7w","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"surl.li","/tvybxr","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"tinyurl.com","/carrefour-926/","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"urlz.fr","/t8vi","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"urlz.fr","/t9ka","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
+"urlz.fr","/talr","phishing-filter phishing website detected","2024-11-25T00:20:55Z"
diff --git a/phishing-filter-splunk.csv.br b/phishing-filter-splunk.csv.br
new file mode 100644
index 000000000..260f73ae1
Binary files /dev/null and b/phishing-filter-splunk.csv.br differ
diff --git a/phishing-filter-splunk.csv.gz b/phishing-filter-splunk.csv.gz
new file mode 100644
index 000000000..7de4df5e5
Binary files /dev/null and b/phishing-filter-splunk.csv.gz differ
diff --git a/phishing-filter-suricata.rules b/phishing-filter-suricata.rules
new file mode 100644
index 000000000..17d814e1a
--- /dev/null
+++ b/phishing-filter-suricata.rules
@@ -0,0 +1,462 @@
+# Title: Phishing URL Suricata Ruleset
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1111365dh.net"; classtype:attempted-recon; sid:200000001; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"12931-coinbase.com"; classtype:attempted-recon; sid:200000002; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"215323.com"; classtype:attempted-recon; sid:200000003; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"260aesthetic.wixsite.com"; classtype:attempted-recon; sid:200000004; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3650947.cc"; classtype:attempted-recon; sid:200000005; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3659ll.net"; classtype:attempted-recon; sid:200000006; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"83291-coinbase.com"; classtype:attempted-recon; sid:200000007; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"94-103-188-123.plesk.page"; classtype:attempted-recon; sid:200000008; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9825057365.com"; classtype:attempted-recon; sid:200000009; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abctrvabc.com"; classtype:attempted-recon; sid:200000010; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com"; classtype:attempted-recon; sid:200000011; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acclimatizable.fun"; classtype:attempted-recon; sid:200000012; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-update05.myvnc.com"; classtype:attempted-recon; sid:200000013; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accounts.google.auzen.us.kg"; classtype:attempted-recon; sid:200000014; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"activebusiness-unlocker3.com"; classtype:attempted-recon; sid:200000015; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"addwsrbh.green"; classtype:attempted-recon; sid:200000016; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahnp.vercel.app"; classtype:attempted-recon; sid:200000017; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aldg.ldgknhk.lol"; classtype:attempted-recon; sid:200000018; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allegrolokalnie.pl-891241214.buzz"; classtype:attempted-recon; sid:200000019; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alutipcentra.pages.dev"; classtype:attempted-recon; sid:200000020; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ambil-pinjaman-daana-payleter.xforms.web.id"; classtype:attempted-recon; sid:200000021; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ambulatoriprivati.it"; classtype:attempted-recon; sid:200000022; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amev.ldgknhk.lol"; classtype:attempted-recon; sid:200000023; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"antail-conv.com"; classtype:attempted-recon; sid:200000024; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apply-now-to-receive-badge.vercel.app"; classtype:attempted-recon; sid:200000025; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artsea.pages.dev"; classtype:attempted-recon; sid:200000026; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atmailupdatewptnskmdinfomailacct.weebly.com"; classtype:attempted-recon; sid:200000027; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-101072.weeblysite.com"; classtype:attempted-recon; sid:200000028; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-1041page.weeblysite.com"; classtype:attempted-recon; sid:200000029; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-105714.weeblysite.com"; classtype:attempted-recon; sid:200000030; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-105819.square.site"; classtype:attempted-recon; sid:200000031; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-inc-107097.weeblysite.com"; classtype:attempted-recon; sid:200000032; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-login380.weeblysite.com"; classtype:attempted-recon; sid:200000033; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-login522.weeblysite.com"; classtype:attempted-recon; sid:200000034; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-service-102155.weeblysite.com"; classtype:attempted-recon; sid:200000035; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-sign-in-105669.weeblysite.com"; classtype:attempted-recon; sid:200000036; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcom-100762.weeblysite.com"; classtype:attempted-recon; sid:200000037; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcom-106808.weeblysite.com"; classtype:attempted-recon; sid:200000038; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmailservicenow.wixstudio.com"; classtype:attempted-recon; sid:200000039; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmailservicenow.wixstudio.io"; classtype:attempted-recon; sid:200000040; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmailsrvrdesk.weebly.com"; classtype:attempted-recon; sid:200000041; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attnewmaill.weebly.com"; classtype:attempted-recon; sid:200000042; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attyhhhhiiii225.weebly.com"; classtype:attempted-recon; sid:200000043; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atw-tau.vercel.app"; classtype:attempted-recon; sid:200000044; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com"; classtype:attempted-recon; sid:200000045; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authsyncs.pages.dev"; classtype:attempted-recon; sid:200000046; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autoreplyattmode.wixsite.com"; classtype:attempted-recon; sid:200000047; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avoid.hold-managert.com"; classtype:attempted-recon; sid:200000048; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azbin.ir"; classtype:attempted-recon; sid:200000049; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b45018.com"; classtype:attempted-recon; sid:200000050; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link"; classtype:attempted-recon; sid:200000051; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baiii-wong.cutvi.cfd"; classtype:attempted-recon; sid:200000052; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"basvuru-online-yap.vercel.app"; classtype:attempted-recon; sid:200000053; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beionfidi.pages.dev"; classtype:attempted-recon; sid:200000054; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet73nn.com"; classtype:attempted-recon; sid:200000055; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet83039.com"; classtype:attempted-recon; sid:200000056; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet83054.com"; classtype:attempted-recon; sid:200000057; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfrescentremebermainsetreouytnoy.weebly.com"; classtype:attempted-recon; sid:200000058; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"biggggggggggg.weebly.com"; classtype:attempted-recon; sid:200000059; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitnode.pages.dev"; classtype:attempted-recon; sid:200000060; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitvavobtc.com"; classtype:attempted-recon; sid:200000061; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blackhere11.serv00.net"; classtype:attempted-recon; sid:200000062; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blss24att.weebly.com"; classtype:attempted-recon; sid:200000063; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"braucrarasuteu-2470.vercel.app"; classtype:attempted-recon; sid:200000064; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-102124.weeblysite.com"; classtype:attempted-recon; sid:200000065; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt1business.weebly.com"; classtype:attempted-recon; sid:200000066; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btuan-dan2-resmi.top1.my.id"; classtype:attempted-recon; sid:200000067; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buildingdesignsusapdf.s3.us-east-005.backblazeb2.com"; classtype:attempted-recon; sid:200000068; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-property-897432967.netlify.app"; classtype:attempted-recon; sid:200000069; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caipora.xyz"; classtype:attempted-recon; sid:200000070; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calm-pothos-3b24c9.netlify.app"; classtype:attempted-recon; sid:200000071; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"carrefourarabiank15.pages.dev"; classtype:attempted-recon; sid:200000072; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com"; classtype:attempted-recon; sid:200000073; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"catgirl-appverset-nya.pages.dev"; classtype:attempted-recon; sid:200000074; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"catxtokens.pages.dev"; classtype:attempted-recon; sid:200000075; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chat.94-103-188-123.plesk.page"; classtype:attempted-recon; sid:200000076; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"check154109.click"; classtype:attempted-recon; sid:200000077; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkseven.vercel.app"; classtype:attempted-recon; sid:200000078; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ciente-a.org"; classtype:attempted-recon; sid:200000079; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cieplo.app"; classtype:attempted-recon; sid:200000080; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cj12143.tw1.ru"; classtype:attempted-recon; sid:200000081; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cj87335.tw1.ru"; classtype:attempted-recon; sid:200000082; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claimyourethrewards.pages.dev"; classtype:attempted-recon; sid:200000083; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clickbait.design"; classtype:attempted-recon; sid:200000084; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnsa163.com"; classtype:attempted-recon; sid:200000085; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cock2-iota.vercel.app"; classtype:attempted-recon; sid:200000086; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cock3.vercel.app"; classtype:attempted-recon; sid:200000087; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cock7.vercel.app"; classtype:attempted-recon; sid:200000088; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contact-pro-8291-d01.firebaseapp.com"; classtype:attempted-recon; sid:200000089; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contact-pro-8291-d01.web.app"; classtype:attempted-recon; sid:200000090; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creosrl.com"; classtype:attempted-recon; sid:200000091; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"curmmgdv.email"; classtype:attempted-recon; sid:200000092; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently541.weebly.com"; classtype:attempted-recon; sid:200000093; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently890.weebly.com"; classtype:attempted-recon; sid:200000094; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyserver.weebly.com"; classtype:attempted-recon; sid:200000095; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dara3dccj.wixsite.com"; classtype:attempted-recon; sid:200000096; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"db.service4db.com"; classtype:attempted-recon; sid:200000097; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev"; classtype:attempted-recon; sid:200000098; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"debutcan.firebaseapp.com"; classtype:attempted-recon; sid:200000099; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"debutcan.web.app"; classtype:attempted-recon; sid:200000100; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delivery.attempt.failure.ebbs.co.za"; classtype:attempted-recon; sid:200000101; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev.stream.mornar.app"; classtype:attempted-recon; sid:200000102; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnwqmh.click"; classtype:attempted-recon; sid:200000103; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dropsmartchain.pages.dev"; classtype:attempted-recon; sid:200000104; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsjoting.group"; classtype:attempted-recon; sid:200000105; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dulb6c5p5.top"; classtype:attempted-recon; sid:200000106; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebay-mallwholesale.com"; classtype:attempted-recon; sid:200000107; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebt-lilac.vercel.app"; classtype:attempted-recon; sid:200000108; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"echoredled.netlify.app"; classtype:attempted-recon; sid:200000109; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elbarco.percentadnp.info"; classtype:attempted-recon; sid:200000110; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eltritongourmet.com"; classtype:attempted-recon; sid:200000111; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"email.mgb.modento.io"; classtype:attempted-recon; sid:200000112; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enjomugg.firebaseapp.com"; classtype:attempted-recon; sid:200000113; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enjomugg.web.app"; classtype:attempted-recon; sid:200000114; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"error3456vhubhornbase.azurewebsites.net"; classtype:attempted-recon; sid:200000115; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"example223.wixsite.com"; classtype:attempted-recon; sid:200000116; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eyeydhe.wixsite.com"; classtype:attempted-recon; sid:200000117; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eyttueiu.square.site"; classtype:attempted-recon; sid:200000118; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-avip.click"; classtype:attempted-recon; sid:200000119; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fame.pink"; classtype:attempted-recon; sid:200000120; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fassehoizubra-7696.vercel.app"; classtype:attempted-recon; sid:200000121; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fastdropchain.pages.dev"; classtype:attempted-recon; sid:200000122; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io"; classtype:attempted-recon; sid:200000123; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fla-1001.square.site"; classtype:attempted-recon; sid:200000124; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flo4211.github.io"; classtype:attempted-recon; sid:200000125; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200000126; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fnuttlie.wiki"; classtype:attempted-recon; sid:200000127; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fokeijonnekou.vercel.app"; classtype:attempted-recon; sid:200000128; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com"; classtype:attempted-recon; sid:200000129; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-verified-badge-form0-service.vercel.app"; classtype:attempted-recon; sid:200000130; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-verified-meta-badge-service.vercel.app"; classtype:attempted-recon; sid:200000131; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"g06668706.wixsite.com"; classtype:attempted-recon; sid:200000132; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gccndbqg.vip"; classtype:attempted-recon; sid:200000133; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geriodememerkezi.online"; classtype:attempted-recon; sid:200000134; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"get-checkmark-for-you.vercel.app"; classtype:attempted-recon; sid:200000135; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"get-free-verified-badge-service-on.vercel.app"; classtype:attempted-recon; sid:200000136; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gitanag.broke-it.net"; classtype:attempted-recon; sid:200000137; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gruprocuroipra-6493.vercel.app"; classtype:attempted-recon; sid:200000138; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.b9en.com"; classtype:attempted-recon; sid:200000139; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.metacoint.com"; classtype:attempted-recon; sid:200000140; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcghij.top"; classtype:attempted-recon; sid:200000141; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hecregayatu-1014.vercel.app"; classtype:attempted-recon; sid:200000142; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hejmtxxt.guru"; classtype:attempted-recon; sid:200000143; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helenblunt6.wixsite.com"; classtype:attempted-recon; sid:200000144; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"help.accountsupportcentre.com"; classtype:attempted-recon; sid:200000145; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"here-apply-for-page-review.vercel.app"; classtype:attempted-recon; sid:200000146; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgbk.ldgknhk.lol"; classtype:attempted-recon; sid:200000147; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhideiie.wixsite.com"; classtype:attempted-recon; sid:200000148; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hitummoinneullei-5882.vercel.app"; classtype:attempted-recon; sid:200000149; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-101067.weeblysite.com"; classtype:attempted-recon; sid:200000150; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-103465.weeblysite.com"; classtype:attempted-recon; sid:200000151; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-104341.weeblysite.com"; classtype:attempted-recon; sid:200000152; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-105266.weeblysite.com"; classtype:attempted-recon; sid:200000153; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-105929.weeblysite.com"; classtype:attempted-recon; sid:200000154; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homeattatthome.square.site"; classtype:attempted-recon; sid:200000155; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpnefhqs.motorcycles"; classtype:attempted-recon; sid:200000156; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"im25.net"; classtype:attempted-recon; sid:200000157; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info.supercitrus.ind.br"; classtype:attempted-recon; sid:200000158; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ins-business-home-center.com"; classtype:attempted-recon; sid:200000159; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"instagaramgalochka.vercel.app"; classtype:attempted-recon; sid:200000160; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipv6.43-135-137-110.cprapid.com"; classtype:attempted-recon; sid:200000161; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irmt0ken.win"; classtype:attempted-recon; sid:200000162; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iujf7839iofvkbcu748.weebly.com"; classtype:attempted-recon; sid:200000163; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwimwmiwi.click"; classtype:attempted-recon; sid:200000164; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jagej73796.wixsite.com"; classtype:attempted-recon; sid:200000165; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfdjy.com"; classtype:attempted-recon; sid:200000166; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kalyani963.github.io"; classtype:attempted-recon; sid:200000167; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kexoigrufouddou-5902.vercel.app"; classtype:attempted-recon; sid:200000168; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kl1k-ds1ni.neupdile.my.id"; classtype:attempted-recon; sid:200000169; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kliind08.wixsite.com"; classtype:attempted-recon; sid:200000170; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kreelo098.weebly.com"; classtype:attempted-recon; sid:200000171; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kremlcup.com"; classtype:attempted-recon; sid:200000172; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kshitij12375.github.io"; classtype:attempted-recon; sid:200000173; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kucoinglobal1.com"; classtype:attempted-recon; sid:200000174; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxbztydc.black"; classtype:attempted-recon; sid:200000175; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"labanquepostale.jupiter-analytics.com"; classtype:attempted-recon; sid:200000176; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leddevotoze-3146.vercel.app"; classtype:attempted-recon; sid:200000177; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"linnkdna-kget.wxxzsite.buzz"; classtype:attempted-recon; sid:200000178; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llahi.info"; classtype:attempted-recon; sid:200000179; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llahi.vip"; classtype:attempted-recon; sid:200000180; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loffaummuddote-4145.vercel.app"; classtype:attempted-recon; sid:200000181; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-att-10221.square.site"; classtype:attempted-recon; sid:200000182; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-form.world"; classtype:attempted-recon; sid:200000183; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-online-outlook365.com"; classtype:attempted-recon; sid:200000184; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-outlook-midstreamauth.com"; classtype:attempted-recon; sid:200000185; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-screen-103134.weeblysite.com"; classtype:attempted-recon; sid:200000186; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginaccount70.wixsite.com"; classtype:attempted-recon; sid:200000187; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginaccount77.wixsite.com"; classtype:attempted-recon; sid:200000188; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luk6414.wixsite.com"; classtype:attempted-recon; sid:200000189; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luxlifemiamiblog.com"; classtype:attempted-recon; sid:200000190; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.meta-accessibility.io.vn"; classtype:attempted-recon; sid:200000191; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"madebybmr.fyi"; classtype:attempted-recon; sid:200000192; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maqpiexyz.click"; classtype:attempted-recon; sid:200000193; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev"; classtype:attempted-recon; sid:200000194; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mayfair313.wixsite.com"; classtype:attempted-recon; sid:200000195; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdbrvlfy.black"; classtype:attempted-recon; sid:200000196; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mesageriepro33range1.weebly.com"; classtype:attempted-recon; sid:200000197; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamsk-wallet-3.gitbook.io"; classtype:attempted-recon; sid:200000198; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metttaa-audddt-new-02.firebaseapp.com"; classtype:attempted-recon; sid:200000199; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metttaa-audddt-new-02.web.app"; classtype:attempted-recon; sid:200000200; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoft365-storage.github.io"; classtype:attempted-recon; sid:200000201; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mikepattyjm.wixsite.com"; classtype:attempted-recon; sid:200000202; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobilemidasbuy.n3g.fun"; classtype:attempted-recon; sid:200000203; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monespacepro-client.3utilities.com"; classtype:attempted-recon; sid:200000204; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monetization-violation.github.io"; classtype:attempted-recon; sid:200000205; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moodengsol-net.pages.dev"; classtype:attempted-recon; sid:200000206; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwsiekdnfjrdufs.weebly.com"; classtype:attempted-recon; sid:200000207; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxmxnmx.mx.zya.me"; classtype:attempted-recon; sid:200000208; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"national-au-b.com"; classtype:attempted-recon; sid:200000209; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"national-au.net"; classtype:attempted-recon; sid:200000210; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbaaiqjq.group"; classtype:attempted-recon; sid:200000211; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nexomyacwv.weebly.com"; classtype:attempted-recon; sid:200000212; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nft-time11.vercel.app"; classtype:attempted-recon; sid:200000213; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nichcheck.weeblysite.com"; classtype:attempted-recon; sid:200000214; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ns1.carrier-ast2-portal-apple.com"; classtype:attempted-recon; sid:200000215; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omadshf.ru"; classtype:attempted-recon; sid:200000216; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-assist.live"; classtype:attempted-recon; sid:200000217; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-promo-asb.org"; classtype:attempted-recon; sid:200000218; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"openkimono.pro"; classtype:attempted-recon; sid:200000219; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opportunity-verified-status.vercel.app"; classtype:attempted-recon; sid:200000220; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ourtime.reconnect-dating.workers.dev"; classtype:attempted-recon; sid:200000221; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owouwuowo.click"; classtype:attempted-recon; sid:200000222; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p365kf.com"; classtype:attempted-recon; sid:200000223; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p4zv8crnrrha27so.94-103-188-123.plesk.page"; classtype:attempted-recon; sid:200000224; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"page-center-manage.com"; classtype:attempted-recon; sid:200000225; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pavan-patil-22.github.io"; classtype:attempted-recon; sid:200000226; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pecinternational.net"; classtype:attempted-recon; sid:200000227; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peesom.chat"; classtype:attempted-recon; sid:200000228; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pencairaanndannaa.my.id"; classtype:attempted-recon; sid:200000229; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"petty.wiki"; classtype:attempted-recon; sid:200000230; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pimnhv.group"; classtype:attempted-recon; sid:200000231; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"policies-business-page-service.com"; classtype:attempted-recon; sid:200000232; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pottatrebewe-2808.vercel.app"; classtype:attempted-recon; sid:200000233; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqo.hrf.mybluehost.me"; classtype:attempted-recon; sid:200000234; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"programming--service--panel-totlyy-free-for-you.vercel.app"; classtype:attempted-recon; sid:200000235; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"promo1.spik.ru"; classtype:attempted-recon; sid:200000236; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protocolsecure.pages.dev"; classtype:attempted-recon; sid:200000237; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev"; classtype:attempted-recon; sid:200000238; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-1778406e4fec4394901793111c187dd9.r2.dev"; classtype:attempted-recon; sid:200000239; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-19b834342e7d465b9f00b3511325a081.r2.dev"; classtype:attempted-recon; sid:200000240; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-21dd4dc659614ceb93e45a6de4434502.r2.dev"; classtype:attempted-recon; sid:200000241; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev"; classtype:attempted-recon; sid:200000242; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-2fefe932a6974485b987c9ba851b5c40.r2.dev"; classtype:attempted-recon; sid:200000243; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-3a46d9914f494078a6d6237513e7a096.r2.dev"; classtype:attempted-recon; sid:200000244; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-442ed822851244a689b3472ea2c6a950.r2.dev"; classtype:attempted-recon; sid:200000245; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev"; classtype:attempted-recon; sid:200000246; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev"; classtype:attempted-recon; sid:200000247; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev"; classtype:attempted-recon; sid:200000248; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev"; classtype:attempted-recon; sid:200000249; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7f5cf36445d042168bfacd712e890dc0.r2.dev"; classtype:attempted-recon; sid:200000250; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-803839714a924882a7bcc2495a26860f.r2.dev"; classtype:attempted-recon; sid:200000251; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8161de4a277e4ee8b532af34954224e1.r2.dev"; classtype:attempted-recon; sid:200000252; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev"; classtype:attempted-recon; sid:200000253; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8376b5b2334844d193a525d8b8548fa5.r2.dev"; classtype:attempted-recon; sid:200000254; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev"; classtype:attempted-recon; sid:200000255; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev"; classtype:attempted-recon; sid:200000256; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev"; classtype:attempted-recon; sid:200000257; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-9163a97d70394cb499bdd232be6c2169.r2.dev"; classtype:attempted-recon; sid:200000258; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev"; classtype:attempted-recon; sid:200000259; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-98171471e0944ac3a5820ef719bf0640.r2.dev"; classtype:attempted-recon; sid:200000260; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-a263e0790935412eb10cacc55bbced18.r2.dev"; classtype:attempted-recon; sid:200000261; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-a291041b077742899b63a9982f04a56c.r2.dev"; classtype:attempted-recon; sid:200000262; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev"; classtype:attempted-recon; sid:200000263; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-b50adc5d699a4f08aec37102c2103da7.r2.dev"; classtype:attempted-recon; sid:200000264; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c0a934c950e441db96b882789f53c9ea.r2.dev"; classtype:attempted-recon; sid:200000265; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c2c250050109456396c933de259a4fea.r2.dev"; classtype:attempted-recon; sid:200000266; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev"; classtype:attempted-recon; sid:200000267; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev"; classtype:attempted-recon; sid:200000268; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev"; classtype:attempted-recon; sid:200000269; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev"; classtype:attempted-recon; sid:200000270; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev"; classtype:attempted-recon; sid:200000271; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev"; classtype:attempted-recon; sid:200000272; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev"; classtype:attempted-recon; sid:200000273; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev"; classtype:attempted-recon; sid:200000274; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e42cb528b102447385e3145197916f51.r2.dev"; classtype:attempted-recon; sid:200000275; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e4aff507450c478cbe3f77ad23d75035.r2.dev"; classtype:attempted-recon; sid:200000276; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev"; classtype:attempted-recon; sid:200000277; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev"; classtype:attempted-recon; sid:200000278; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev"; classtype:attempted-recon; sid:200000279; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pubgm.club"; classtype:attempted-recon; sid:200000280; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puffagroibrouwoi-8818.vercel.app"; classtype:attempted-recon; sid:200000281; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qasimk.com"; classtype:attempted-recon; sid:200000282; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qfjfvseq.info"; classtype:attempted-recon; sid:200000283; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quauwograssodda-3503.vercel.app"; classtype:attempted-recon; sid:200000284; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qysgyp.com"; classtype:attempted-recon; sid:200000285; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rajdipchatterjee.github.io"; classtype:attempted-recon; sid:200000286; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rechazaroanularaqui51.weebly.com"; classtype:attempted-recon; sid:200000287; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"remote-fix.pages.dev"; classtype:attempted-recon; sid:200000288; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"renggard.47-243-192-240.cprapid.com"; classtype:attempted-recon; sid:200000289; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resolvepanel.live"; classtype:attempted-recon; sid:200000290; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resolving--issue--with-us1.vercel.app"; classtype:attempted-recon; sid:200000291; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resqat.weebly.com"; classtype:attempted-recon; sid:200000292; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"review-business-case.d2f7p3b7pucnle.amplifyapp.com"; classtype:attempted-recon; sid:200000293; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlpqwefi.pink"; classtype:attempted-recon; sid:200000294; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rouloigeilleuja-9523.vercel.app"; classtype:attempted-recon; sid:200000295; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rulemec.pages.dev"; classtype:attempted-recon; sid:200000296; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rutinqqwin.shop"; classtype:attempted-recon; sid:200000297; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwftfu.quest"; classtype:attempted-recon; sid:200000298; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s.team-pw.cc"; classtype:attempted-recon; sid:200000299; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sairanees.github.io"; classtype:attempted-recon; sid:200000300; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sanseipecas.com.br"; classtype:attempted-recon; sid:200000301; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasklelo.weebly.com"; classtype:attempted-recon; sid:200000302; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com"; classtype:attempted-recon; sid:200000303; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelcustomerwebly.weebly.com"; classtype:attempted-recon; sid:200000304; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelnetwebmailservermaintainance.weebly.com"; classtype:attempted-recon; sid:200000305; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelrectify.weebly.com"; classtype:attempted-recon; sid:200000306; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelscrutinize.weebly.com"; classtype:attempted-recon; sid:200000307; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelservicecentterwebly.weebly.com"; classtype:attempted-recon; sid:200000308; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelsupportsystemwebly.weebly.com"; classtype:attempted-recon; sid:200000309; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbcglobal30.wixsite.com"; classtype:attempted-recon; sid:200000310; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scan-vulnerability-guard-v3.pages.dev"; classtype:attempted-recon; sid:200000311; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scan-vulnerability-guard.pages.dev"; classtype:attempted-recon; sid:200000312; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanner-metamask-v1.pages.dev"; classtype:attempted-recon; sid:200000313; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanner-metamask-v2.pages.dev"; classtype:attempted-recon; sid:200000314; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanner-metamask-v3.pages.dev"; classtype:attempted-recon; sid:200000315; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanner-metamask.pages.dev"; classtype:attempted-recon; sid:200000316; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sec-sign-in.info"; classtype:attempted-recon; sid:200000317; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure2-validitycheck.weebly.com"; classtype:attempted-recon; sid:200000318; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securecapitec.theprimepoint.online"; classtype:attempted-recon; sid:200000319; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securerpcfix.com"; classtype:attempted-recon; sid:200000320; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seeteressecalywoi.github.io"; classtype:attempted-recon; sid:200000321; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seivviice.weebly.com"; classtype:attempted-recon; sid:200000322; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.0e7p.com"; classtype:attempted-recon; sid:200000323; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.2rk3.com"; classtype:attempted-recon; sid:200000324; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.8q3p.com"; classtype:attempted-recon; sid:200000325; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.n6b8.com"; classtype:attempted-recon; sid:200000326; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.v9vs.com"; classtype:attempted-recon; sid:200000327; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sevvviicess.weebly.com"; classtype:attempted-recon; sid:200000328; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shard.blue"; classtype:attempted-recon; sid:200000329; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shard.skin"; classtype:attempted-recon; sid:200000330; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-d7590.firebaseapp.com"; classtype:attempted-recon; sid:200000331; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-d7590.web.app"; classtype:attempted-recon; sid:200000332; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-101329.weeblysite.com"; classtype:attempted-recon; sid:200000333; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-101587.weeblysite.com"; classtype:attempted-recon; sid:200000334; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-106427.weeblysite.com"; classtype:attempted-recon; sid:200000335; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-107375.weeblysite.com"; classtype:attempted-recon; sid:200000336; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solutionwebsitedapp.firebaseapp.com"; classtype:attempted-recon; sid:200000337; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solutionwebsitedapp.web.app"; classtype:attempted-recon; sid:200000338; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solvetans.firebaseapp.com"; classtype:attempted-recon; sid:200000339; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solvetans.web.app"; classtype:attempted-recon; sid:200000340; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sondfrom.dexlog.my.id"; classtype:attempted-recon; sid:200000341; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soyokai.or.jp"; classtype:attempted-recon; sid:200000342; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srdate.club"; classtype:attempted-recon; sid:200000343; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssy.hmb.mybluehostin.me"; classtype:attempted-recon; sid:200000344; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steam.poweredartsworkshop.com"; classtype:attempted-recon; sid:200000345; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steam.workshopsreview.com"; classtype:attempted-recon; sid:200000346; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommmuty.com"; classtype:attempted-recon; sid:200000347; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommuunity.ru"; classtype:attempted-recon; sid:200000348; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcomunutty.com"; classtype:attempted-recon; sid:200000349; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamconmumity.com"; classtype:attempted-recon; sid:200000350; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepsray.vercel.app"; classtype:attempted-recon; sid:200000351; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-metahelpcenter-id100003498934.netlify.app"; classtype:attempted-recon; sid:200000352; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sv5gardens655665.weeblysite.com"; classtype:attempted-recon; sid:200000353; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"system-portalnu.duckdns.org"; classtype:attempted-recon; sid:200000354; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talwgam.njmolada.com"; classtype:attempted-recon; sid:200000355; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"taste.baby"; classtype:attempted-recon; sid:200000356; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tele.zhngain.top"; classtype:attempted-recon; sid:200000357; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrambot-resolved.pages.dev"; classtype:attempted-recon; sid:200000358; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrazm.net"; classtype:attempted-recon; sid:200000359; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-100408.weeblysite.com"; classtype:attempted-recon; sid:200000360; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-100469.weeblysite.com"; classtype:attempted-recon; sid:200000361; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-103234.weeblysite.com"; classtype:attempted-recon; sid:200000362; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiktok-888.vip"; classtype:attempted-recon; sid:200000363; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiltckshow.top"; classtype:attempted-recon; sid:200000364; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnomwzrp.top"; classtype:attempted-recon; sid:200000365; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toeken.im"; classtype:attempted-recon; sid:200000366; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tonic.pink"; classtype:attempted-recon; sid:200000367; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tooma.cellinsurance.co.zw"; classtype:attempted-recon; sid:200000368; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpdtepremu.xyz"; classtype:attempted-recon; sid:200000369; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trattujeilesso-3354.vercel.app"; classtype:attempted-recon; sid:200000370; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trbinace.com"; classtype:attempted-recon; sid:200000371; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"treibrukeukonno-1395.vercel.app"; classtype:attempted-recon; sid:200000372; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuesmad.firebaseapp.com"; classtype:attempted-recon; sid:200000373; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuesmad.web.app"; classtype:attempted-recon; sid:200000374; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyyyyyytyyy.weebly.com"; classtype:attempted-recon; sid:200000375; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzcsjfto.chat"; classtype:attempted-recon; sid:200000376; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u.updatetrackgre.top"; classtype:attempted-recon; sid:200000377; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uc-whatstapp-web.com"; classtype:attempted-recon; sid:200000378; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udxcady.wixsite.com"; classtype:attempted-recon; sid:200000379; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uklifejv.cyou"; classtype:attempted-recon; sid:200000380; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updatemail12.wixsite.com"; classtype:attempted-recon; sid:200000381; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ups-trackdeliveryapps.chickenkiller.com"; classtype:attempted-recon; sid:200000382; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usbest.cyou"; classtype:attempted-recon; sid:200000383; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"user-transaction-overview.vercel.app"; classtype:attempted-recon; sid:200000384; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackdck.top"; classtype:attempted-recon; sid:200000385; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracklnv.top"; classtype:attempted-recon; sid:200000386; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmcl.top"; classtype:attempted-recon; sid:200000387; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmec.top"; classtype:attempted-recon; sid:200000388; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracktpq.top"; classtype:attempted-recon; sid:200000389; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackvmd.top"; classtype:attempted-recon; sid:200000390; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsinfw.top"; classtype:attempted-recon; sid:200000391; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwdtsczi.top"; classtype:attempted-recon; sid:200000392; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwm-onedrive.com"; classtype:attempted-recon; sid:200000393; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vaishnavi1436.github.io"; classtype:attempted-recon; sid:200000394; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"validatie-veiligauthenticatie.com"; classtype:attempted-recon; sid:200000395; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbbu.ldgknhk.lol"; classtype:attempted-recon; sid:200000396; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verified-this-request-badge.vercel.app"; classtype:attempted-recon; sid:200000397; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vo4zzp.icu"; classtype:attempted-recon; sid:200000398; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vs41.github.io"; classtype:attempted-recon; sid:200000399; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walett-cont.gitbook.io"; classtype:attempted-recon; sid:200000400; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletauthenticators.vercel.app"; classtype:attempted-recon; sid:200000401; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletcomnecitt.gitbook.io"; classtype:attempted-recon; sid:200000402; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletconnectdapps.online"; classtype:attempted-recon; sid:200000403; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"watranfart-fdd6a8.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200000404; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"waxed.wiki"; classtype:attempted-recon; sid:200000405; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmaillshavv.weebly.com"; classtype:attempted-recon; sid:200000406; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weeeqweeattt.weebly.com"; classtype:attempted-recon; sid:200000407; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weigh.skin"; classtype:attempted-recon; sid:200000408; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weigh.wiki"; classtype:attempted-recon; sid:200000409; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgqdqvtn.baby"; classtype:attempted-recon; sid:200000410; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgqdqvtn.pink"; classtype:attempted-recon; sid:200000411; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whatsapp-rqr.com"; classtype:attempted-recon; sid:200000412; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wirelessvoicebtpaidmailinfoplay047.weebly.com"; classtype:attempted-recon; sid:200000413; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wscs1231.cyou"; classtype:attempted-recon; sid:200000414; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--metmasklogin-vcb.gitbook.io"; classtype:attempted-recon; sid:200000415; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xojautruffeuttu-4659.vercel.app"; classtype:attempted-recon; sid:200000416; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xraiz.info"; classtype:attempted-recon; sid:200000417; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xraiz.vip"; classtype:attempted-recon; sid:200000418; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsuweamskeidjf.weebly.com"; classtype:attempted-recon; sid:200000419; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xya46.cc"; classtype:attempted-recon; sid:200000420; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoooooo-108560.weeblysite.com"; classtype:attempted-recon; sid:200000421; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yavanica123.github.io"; classtype:attempted-recon; sid:200000422; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yi5lq-syaaa-aaaag-acfsq-cai.icp0.io"; classtype:attempted-recon; sid:200000423; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"you-can-receive-here.vercel.app"; classtype:attempted-recon; sid:200000424; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zeiitgeist.angelocachero.info"; classtype:attempted-recon; sid:200000425; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zenixoikitti-5809.vercel.app"; classtype:attempted-recon; sid:200000426; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zeznjx.shop"; classtype:attempted-recon; sid:200000427; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwzcn.com"; classtype:attempted-recon; sid:200000428; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hpqhv"; endswith; nocase; http.host; content:"alturl.com"; classtype:attempted-recon; sid:200000429; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/descargar/kmsauto-net"; endswith; nocase; http.host; content:"ardilu.com"; classtype:attempted-recon; sid:200000430; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/parcels"; endswith; nocase; http.host; content:"did.li"; classtype:attempted-recon; sid:200000431; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicesatttttmail"; endswith; nocase; http.host; content:"flow.page"; classtype:attempted-recon; sid:200000432; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sky/indian-stock/dashboard"; endswith; nocase; http.host; content:"hdfcsky.com"; classtype:attempted-recon; sid:200000433; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!"; endswith; nocase; http.host; content:"hdfcsky.com"; classtype:attempted-recon; sid:200000434; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/djgj07/"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200000435; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pubgm/"; endswith; nocase; http.host; content:"pay.zing.vn"; classtype:attempted-recon; sid:200000436; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/go4bnv/"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200000437; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/18ab5a"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000438; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/4ff03b"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000439; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8wtcv4z"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000440; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/96a02f"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000441; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/c0d1afz"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000442; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d2f265"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000443; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eacc63"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000444; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f9decb"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000445; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mzhpkzf"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000446; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nbyh9vh"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000447; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sa2uoq0"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000448; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tcthi8d"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000449; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tnab363c6"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000450; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wx1eo7w"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000451; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tvybxr"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200000452; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/carrefour-926/"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200000453; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/t8vi"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200000454; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/t9ka"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200000455; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/talr"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200000456; rev:1;)
diff --git a/phishing-filter-suricata.rules.br b/phishing-filter-suricata.rules.br
new file mode 100644
index 000000000..b06da31b8
Binary files /dev/null and b/phishing-filter-suricata.rules.br differ
diff --git a/phishing-filter-suricata.rules.gz b/phishing-filter-suricata.rules.gz
new file mode 100644
index 000000000..3ee3c2982
Binary files /dev/null and b/phishing-filter-suricata.rules.gz differ
diff --git a/phishing-filter-unbound.conf b/phishing-filter-unbound.conf
new file mode 100644
index 000000000..393536f71
--- /dev/null
+++ b/phishing-filter-unbound.conf
@@ -0,0 +1,434 @@
+# Title: Phishing Domains Unbound Blocklist
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+local-zone: "1111365dh.net" always_nxdomain
+local-zone: "12931-coinbase.com" always_nxdomain
+local-zone: "215323.com" always_nxdomain
+local-zone: "260aesthetic.wixsite.com" always_nxdomain
+local-zone: "3650947.cc" always_nxdomain
+local-zone: "3659ll.net" always_nxdomain
+local-zone: "83291-coinbase.com" always_nxdomain
+local-zone: "94-103-188-123.plesk.page" always_nxdomain
+local-zone: "9825057365.com" always_nxdomain
+local-zone: "abctrvabc.com" always_nxdomain
+local-zone: "access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com" always_nxdomain
+local-zone: "acclimatizable.fun" always_nxdomain
+local-zone: "account-update05.myvnc.com" always_nxdomain
+local-zone: "accounts.google.auzen.us.kg" always_nxdomain
+local-zone: "activebusiness-unlocker3.com" always_nxdomain
+local-zone: "addwsrbh.green" always_nxdomain
+local-zone: "ahnp.vercel.app" always_nxdomain
+local-zone: "aldg.ldgknhk.lol" always_nxdomain
+local-zone: "allegrolokalnie.pl-891241214.buzz" always_nxdomain
+local-zone: "alutipcentra.pages.dev" always_nxdomain
+local-zone: "ambil-pinjaman-daana-payleter.xforms.web.id" always_nxdomain
+local-zone: "ambulatoriprivati.it" always_nxdomain
+local-zone: "amev.ldgknhk.lol" always_nxdomain
+local-zone: "antail-conv.com" always_nxdomain
+local-zone: "apply-now-to-receive-badge.vercel.app" always_nxdomain
+local-zone: "artsea.pages.dev" always_nxdomain
+local-zone: "atmailupdatewptnskmdinfomailacct.weebly.com" always_nxdomain
+local-zone: "att-101072.weeblysite.com" always_nxdomain
+local-zone: "att-1041page.weeblysite.com" always_nxdomain
+local-zone: "att-105714.weeblysite.com" always_nxdomain
+local-zone: "att-105819.square.site" always_nxdomain
+local-zone: "att-inc-107097.weeblysite.com" always_nxdomain
+local-zone: "att-login380.weeblysite.com" always_nxdomain
+local-zone: "att-login522.weeblysite.com" always_nxdomain
+local-zone: "att-service-102155.weeblysite.com" always_nxdomain
+local-zone: "att-sign-in-105669.weeblysite.com" always_nxdomain
+local-zone: "attcom-100762.weeblysite.com" always_nxdomain
+local-zone: "attcom-106808.weeblysite.com" always_nxdomain
+local-zone: "attmailservicenow.wixstudio.com" always_nxdomain
+local-zone: "attmailservicenow.wixstudio.io" always_nxdomain
+local-zone: "attmailsrvrdesk.weebly.com" always_nxdomain
+local-zone: "attnewmaill.weebly.com" always_nxdomain
+local-zone: "attyhhhhiiii225.weebly.com" always_nxdomain
+local-zone: "atw-tau.vercel.app" always_nxdomain
+local-zone: "authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com" always_nxdomain
+local-zone: "authsyncs.pages.dev" always_nxdomain
+local-zone: "autoreplyattmode.wixsite.com" always_nxdomain
+local-zone: "avoid.hold-managert.com" always_nxdomain
+local-zone: "azbin.ir" always_nxdomain
+local-zone: "b45018.com" always_nxdomain
+local-zone: "bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link" always_nxdomain
+local-zone: "baiii-wong.cutvi.cfd" always_nxdomain
+local-zone: "basvuru-online-yap.vercel.app" always_nxdomain
+local-zone: "beionfidi.pages.dev" always_nxdomain
+local-zone: "bet73nn.com" always_nxdomain
+local-zone: "bet83039.com" always_nxdomain
+local-zone: "bet83054.com" always_nxdomain
+local-zone: "bfrescentremebermainsetreouytnoy.weebly.com" always_nxdomain
+local-zone: "biggggggggggg.weebly.com" always_nxdomain
+local-zone: "bitnode.pages.dev" always_nxdomain
+local-zone: "bitvavobtc.com" always_nxdomain
+local-zone: "blackhere11.serv00.net" always_nxdomain
+local-zone: "blss24att.weebly.com" always_nxdomain
+local-zone: "braucrarasuteu-2470.vercel.app" always_nxdomain
+local-zone: "bt-102124.weeblysite.com" always_nxdomain
+local-zone: "bt1business.weebly.com" always_nxdomain
+local-zone: "btuan-dan2-resmi.top1.my.id" always_nxdomain
+local-zone: "buildingdesignsusapdf.s3.us-east-005.backblazeb2.com" always_nxdomain
+local-zone: "business-page-property-897432967.netlify.app" always_nxdomain
+local-zone: "caipora.xyz" always_nxdomain
+local-zone: "calm-pothos-3b24c9.netlify.app" always_nxdomain
+local-zone: "carrefourarabiank15.pages.dev" always_nxdomain
+local-zone: "caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com" always_nxdomain
+local-zone: "catgirl-appverset-nya.pages.dev" always_nxdomain
+local-zone: "catxtokens.pages.dev" always_nxdomain
+local-zone: "chat.94-103-188-123.plesk.page" always_nxdomain
+local-zone: "check154109.click" always_nxdomain
+local-zone: "checkseven.vercel.app" always_nxdomain
+local-zone: "ciente-a.org" always_nxdomain
+local-zone: "cieplo.app" always_nxdomain
+local-zone: "cj12143.tw1.ru" always_nxdomain
+local-zone: "cj87335.tw1.ru" always_nxdomain
+local-zone: "claimyourethrewards.pages.dev" always_nxdomain
+local-zone: "clickbait.design" always_nxdomain
+local-zone: "cnsa163.com" always_nxdomain
+local-zone: "cock2-iota.vercel.app" always_nxdomain
+local-zone: "cock3.vercel.app" always_nxdomain
+local-zone: "cock7.vercel.app" always_nxdomain
+local-zone: "contact-pro-8291-d01.firebaseapp.com" always_nxdomain
+local-zone: "contact-pro-8291-d01.web.app" always_nxdomain
+local-zone: "creosrl.com" always_nxdomain
+local-zone: "curmmgdv.email" always_nxdomain
+local-zone: "currently541.weebly.com" always_nxdomain
+local-zone: "currently890.weebly.com" always_nxdomain
+local-zone: "currentlyserver.weebly.com" always_nxdomain
+local-zone: "dara3dccj.wixsite.com" always_nxdomain
+local-zone: "db.service4db.com" always_nxdomain
+local-zone: "de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev" always_nxdomain
+local-zone: "debutcan.firebaseapp.com" always_nxdomain
+local-zone: "debutcan.web.app" always_nxdomain
+local-zone: "delivery.attempt.failure.ebbs.co.za" always_nxdomain
+local-zone: "dev.stream.mornar.app" always_nxdomain
+local-zone: "dnwqmh.click" always_nxdomain
+local-zone: "dropsmartchain.pages.dev" always_nxdomain
+local-zone: "dsjoting.group" always_nxdomain
+local-zone: "dulb6c5p5.top" always_nxdomain
+local-zone: "ebay-mallwholesale.com" always_nxdomain
+local-zone: "ebt-lilac.vercel.app" always_nxdomain
+local-zone: "echoredled.netlify.app" always_nxdomain
+local-zone: "elbarco.percentadnp.info" always_nxdomain
+local-zone: "eltritongourmet.com" always_nxdomain
+local-zone: "email.mgb.modento.io" always_nxdomain
+local-zone: "enjomugg.firebaseapp.com" always_nxdomain
+local-zone: "enjomugg.web.app" always_nxdomain
+local-zone: "error3456vhubhornbase.azurewebsites.net" always_nxdomain
+local-zone: "example223.wixsite.com" always_nxdomain
+local-zone: "eyeydhe.wixsite.com" always_nxdomain
+local-zone: "eyttueiu.square.site" always_nxdomain
+local-zone: "facebook-avip.click" always_nxdomain
+local-zone: "fame.pink" always_nxdomain
+local-zone: "fassehoizubra-7696.vercel.app" always_nxdomain
+local-zone: "fastdropchain.pages.dev" always_nxdomain
+local-zone: "fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io" always_nxdomain
+local-zone: "fla-1001.square.site" always_nxdomain
+local-zone: "flo4211.github.io" always_nxdomain
+local-zone: "fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com" always_nxdomain
+local-zone: "fnuttlie.wiki" always_nxdomain
+local-zone: "fokeijonnekou.vercel.app" always_nxdomain
+local-zone: "fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com" always_nxdomain
+local-zone: "free-verified-badge-form0-service.vercel.app" always_nxdomain
+local-zone: "free-verified-meta-badge-service.vercel.app" always_nxdomain
+local-zone: "g06668706.wixsite.com" always_nxdomain
+local-zone: "gccndbqg.vip" always_nxdomain
+local-zone: "geriodememerkezi.online" always_nxdomain
+local-zone: "get-checkmark-for-you.vercel.app" always_nxdomain
+local-zone: "get-free-verified-badge-service-on.vercel.app" always_nxdomain
+local-zone: "gitanag.broke-it.net" always_nxdomain
+local-zone: "gruprocuroipra-6493.vercel.app" always_nxdomain
+local-zone: "h5.b9en.com" always_nxdomain
+local-zone: "h5.metacoint.com" always_nxdomain
+local-zone: "hcghij.top" always_nxdomain
+local-zone: "hecregayatu-1014.vercel.app" always_nxdomain
+local-zone: "hejmtxxt.guru" always_nxdomain
+local-zone: "helenblunt6.wixsite.com" always_nxdomain
+local-zone: "help.accountsupportcentre.com" always_nxdomain
+local-zone: "here-apply-for-page-review.vercel.app" always_nxdomain
+local-zone: "hgbk.ldgknhk.lol" always_nxdomain
+local-zone: "hhideiie.wixsite.com" always_nxdomain
+local-zone: "hitummoinneullei-5882.vercel.app" always_nxdomain
+local-zone: "home-101067.weeblysite.com" always_nxdomain
+local-zone: "home-103465.weeblysite.com" always_nxdomain
+local-zone: "home-104341.weeblysite.com" always_nxdomain
+local-zone: "home-105266.weeblysite.com" always_nxdomain
+local-zone: "home-105929.weeblysite.com" always_nxdomain
+local-zone: "homeattatthome.square.site" always_nxdomain
+local-zone: "hpnefhqs.motorcycles" always_nxdomain
+local-zone: "im25.net" always_nxdomain
+local-zone: "info.supercitrus.ind.br" always_nxdomain
+local-zone: "ins-business-home-center.com" always_nxdomain
+local-zone: "instagaramgalochka.vercel.app" always_nxdomain
+local-zone: "ipv6.43-135-137-110.cprapid.com" always_nxdomain
+local-zone: "irmt0ken.win" always_nxdomain
+local-zone: "iujf7839iofvkbcu748.weebly.com" always_nxdomain
+local-zone: "iwimwmiwi.click" always_nxdomain
+local-zone: "jagej73796.wixsite.com" always_nxdomain
+local-zone: "jfdjy.com" always_nxdomain
+local-zone: "kalyani963.github.io" always_nxdomain
+local-zone: "kexoigrufouddou-5902.vercel.app" always_nxdomain
+local-zone: "kl1k-ds1ni.neupdile.my.id" always_nxdomain
+local-zone: "kliind08.wixsite.com" always_nxdomain
+local-zone: "kreelo098.weebly.com" always_nxdomain
+local-zone: "kremlcup.com" always_nxdomain
+local-zone: "kshitij12375.github.io" always_nxdomain
+local-zone: "kucoinglobal1.com" always_nxdomain
+local-zone: "kxbztydc.black" always_nxdomain
+local-zone: "labanquepostale.jupiter-analytics.com" always_nxdomain
+local-zone: "leddevotoze-3146.vercel.app" always_nxdomain
+local-zone: "linnkdna-kget.wxxzsite.buzz" always_nxdomain
+local-zone: "llahi.info" always_nxdomain
+local-zone: "llahi.vip" always_nxdomain
+local-zone: "loffaummuddote-4145.vercel.app" always_nxdomain
+local-zone: "login-att-10221.square.site" always_nxdomain
+local-zone: "login-form.world" always_nxdomain
+local-zone: "login-online-outlook365.com" always_nxdomain
+local-zone: "login-outlook-midstreamauth.com" always_nxdomain
+local-zone: "login-screen-103134.weeblysite.com" always_nxdomain
+local-zone: "loginaccount70.wixsite.com" always_nxdomain
+local-zone: "loginaccount77.wixsite.com" always_nxdomain
+local-zone: "luk6414.wixsite.com" always_nxdomain
+local-zone: "luxlifemiamiblog.com" always_nxdomain
+local-zone: "m.meta-accessibility.io.vn" always_nxdomain
+local-zone: "madebybmr.fyi" always_nxdomain
+local-zone: "maqpiexyz.click" always_nxdomain
+local-zone: "mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev" always_nxdomain
+local-zone: "mayfair313.wixsite.com" always_nxdomain
+local-zone: "mdbrvlfy.black" always_nxdomain
+local-zone: "mesageriepro33range1.weebly.com" always_nxdomain
+local-zone: "metamsk-wallet-3.gitbook.io" always_nxdomain
+local-zone: "metttaa-audddt-new-02.firebaseapp.com" always_nxdomain
+local-zone: "metttaa-audddt-new-02.web.app" always_nxdomain
+local-zone: "microsoft365-storage.github.io" always_nxdomain
+local-zone: "mikepattyjm.wixsite.com" always_nxdomain
+local-zone: "mobilemidasbuy.n3g.fun" always_nxdomain
+local-zone: "monespacepro-client.3utilities.com" always_nxdomain
+local-zone: "monetization-violation.github.io" always_nxdomain
+local-zone: "moodengsol-net.pages.dev" always_nxdomain
+local-zone: "mwsiekdnfjrdufs.weebly.com" always_nxdomain
+local-zone: "mxmxnmx.mx.zya.me" always_nxdomain
+local-zone: "national-au-b.com" always_nxdomain
+local-zone: "national-au.net" always_nxdomain
+local-zone: "nbaaiqjq.group" always_nxdomain
+local-zone: "nexomyacwv.weebly.com" always_nxdomain
+local-zone: "nft-time11.vercel.app" always_nxdomain
+local-zone: "nichcheck.weeblysite.com" always_nxdomain
+local-zone: "ns1.carrier-ast2-portal-apple.com" always_nxdomain
+local-zone: "omadshf.ru" always_nxdomain
+local-zone: "online-assist.live" always_nxdomain
+local-zone: "online-promo-asb.org" always_nxdomain
+local-zone: "openkimono.pro" always_nxdomain
+local-zone: "opportunity-verified-status.vercel.app" always_nxdomain
+local-zone: "ourtime.reconnect-dating.workers.dev" always_nxdomain
+local-zone: "owouwuowo.click" always_nxdomain
+local-zone: "p365kf.com" always_nxdomain
+local-zone: "p4zv8crnrrha27so.94-103-188-123.plesk.page" always_nxdomain
+local-zone: "page-center-manage.com" always_nxdomain
+local-zone: "pavan-patil-22.github.io" always_nxdomain
+local-zone: "pecinternational.net" always_nxdomain
+local-zone: "peesom.chat" always_nxdomain
+local-zone: "pencairaanndannaa.my.id" always_nxdomain
+local-zone: "petty.wiki" always_nxdomain
+local-zone: "pimnhv.group" always_nxdomain
+local-zone: "policies-business-page-service.com" always_nxdomain
+local-zone: "pottatrebewe-2808.vercel.app" always_nxdomain
+local-zone: "pqo.hrf.mybluehost.me" always_nxdomain
+local-zone: "programming--service--panel-totlyy-free-for-you.vercel.app" always_nxdomain
+local-zone: "promo1.spik.ru" always_nxdomain
+local-zone: "protocolsecure.pages.dev" always_nxdomain
+local-zone: "pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev" always_nxdomain
+local-zone: "pub-1778406e4fec4394901793111c187dd9.r2.dev" always_nxdomain
+local-zone: "pub-19b834342e7d465b9f00b3511325a081.r2.dev" always_nxdomain
+local-zone: "pub-21dd4dc659614ceb93e45a6de4434502.r2.dev" always_nxdomain
+local-zone: "pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev" always_nxdomain
+local-zone: "pub-2fefe932a6974485b987c9ba851b5c40.r2.dev" always_nxdomain
+local-zone: "pub-3a46d9914f494078a6d6237513e7a096.r2.dev" always_nxdomain
+local-zone: "pub-442ed822851244a689b3472ea2c6a950.r2.dev" always_nxdomain
+local-zone: "pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev" always_nxdomain
+local-zone: "pub-682ad3b65d944376b919745aae3c56d4.r2.dev" always_nxdomain
+local-zone: "pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev" always_nxdomain
+local-zone: "pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev" always_nxdomain
+local-zone: "pub-7f5cf36445d042168bfacd712e890dc0.r2.dev" always_nxdomain
+local-zone: "pub-803839714a924882a7bcc2495a26860f.r2.dev" always_nxdomain
+local-zone: "pub-8161de4a277e4ee8b532af34954224e1.r2.dev" always_nxdomain
+local-zone: "pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev" always_nxdomain
+local-zone: "pub-8376b5b2334844d193a525d8b8548fa5.r2.dev" always_nxdomain
+local-zone: "pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev" always_nxdomain
+local-zone: "pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev" always_nxdomain
+local-zone: "pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev" always_nxdomain
+local-zone: "pub-9163a97d70394cb499bdd232be6c2169.r2.dev" always_nxdomain
+local-zone: "pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev" always_nxdomain
+local-zone: "pub-98171471e0944ac3a5820ef719bf0640.r2.dev" always_nxdomain
+local-zone: "pub-a263e0790935412eb10cacc55bbced18.r2.dev" always_nxdomain
+local-zone: "pub-a291041b077742899b63a9982f04a56c.r2.dev" always_nxdomain
+local-zone: "pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev" always_nxdomain
+local-zone: "pub-b50adc5d699a4f08aec37102c2103da7.r2.dev" always_nxdomain
+local-zone: "pub-c0a934c950e441db96b882789f53c9ea.r2.dev" always_nxdomain
+local-zone: "pub-c2c250050109456396c933de259a4fea.r2.dev" always_nxdomain
+local-zone: "pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev" always_nxdomain
+local-zone: "pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev" always_nxdomain
+local-zone: "pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev" always_nxdomain
+local-zone: "pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev" always_nxdomain
+local-zone: "pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev" always_nxdomain
+local-zone: "pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev" always_nxdomain
+local-zone: "pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev" always_nxdomain
+local-zone: "pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev" always_nxdomain
+local-zone: "pub-e42cb528b102447385e3145197916f51.r2.dev" always_nxdomain
+local-zone: "pub-e4aff507450c478cbe3f77ad23d75035.r2.dev" always_nxdomain
+local-zone: "pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev" always_nxdomain
+local-zone: "pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev" always_nxdomain
+local-zone: "pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev" always_nxdomain
+local-zone: "pubgm.club" always_nxdomain
+local-zone: "puffagroibrouwoi-8818.vercel.app" always_nxdomain
+local-zone: "qasimk.com" always_nxdomain
+local-zone: "qfjfvseq.info" always_nxdomain
+local-zone: "quauwograssodda-3503.vercel.app" always_nxdomain
+local-zone: "qysgyp.com" always_nxdomain
+local-zone: "rajdipchatterjee.github.io" always_nxdomain
+local-zone: "rechazaroanularaqui51.weebly.com" always_nxdomain
+local-zone: "remote-fix.pages.dev" always_nxdomain
+local-zone: "renggard.47-243-192-240.cprapid.com" always_nxdomain
+local-zone: "resolvepanel.live" always_nxdomain
+local-zone: "resolving--issue--with-us1.vercel.app" always_nxdomain
+local-zone: "resqat.weebly.com" always_nxdomain
+local-zone: "review-business-case.d2f7p3b7pucnle.amplifyapp.com" always_nxdomain
+local-zone: "rlpqwefi.pink" always_nxdomain
+local-zone: "rouloigeilleuja-9523.vercel.app" always_nxdomain
+local-zone: "rulemec.pages.dev" always_nxdomain
+local-zone: "rutinqqwin.shop" always_nxdomain
+local-zone: "rwftfu.quest" always_nxdomain
+local-zone: "s.team-pw.cc" always_nxdomain
+local-zone: "sairanees.github.io" always_nxdomain
+local-zone: "sanseipecas.com.br" always_nxdomain
+local-zone: "sasklelo.weebly.com" always_nxdomain
+local-zone: "sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com" always_nxdomain
+local-zone: "sasktelcustomerwebly.weebly.com" always_nxdomain
+local-zone: "sasktelnetwebmailservermaintainance.weebly.com" always_nxdomain
+local-zone: "sasktelrectify.weebly.com" always_nxdomain
+local-zone: "sasktelscrutinize.weebly.com" always_nxdomain
+local-zone: "sasktelservicecentterwebly.weebly.com" always_nxdomain
+local-zone: "sasktelsupportsystemwebly.weebly.com" always_nxdomain
+local-zone: "sbcglobal30.wixsite.com" always_nxdomain
+local-zone: "scan-vulnerability-guard-v3.pages.dev" always_nxdomain
+local-zone: "scan-vulnerability-guard.pages.dev" always_nxdomain
+local-zone: "scanner-metamask-v1.pages.dev" always_nxdomain
+local-zone: "scanner-metamask-v2.pages.dev" always_nxdomain
+local-zone: "scanner-metamask-v3.pages.dev" always_nxdomain
+local-zone: "scanner-metamask.pages.dev" always_nxdomain
+local-zone: "sec-sign-in.info" always_nxdomain
+local-zone: "secure2-validitycheck.weebly.com" always_nxdomain
+local-zone: "securecapitec.theprimepoint.online" always_nxdomain
+local-zone: "securerpcfix.com" always_nxdomain
+local-zone: "seeteressecalywoi.github.io" always_nxdomain
+local-zone: "seivviice.weebly.com" always_nxdomain
+local-zone: "server.0e7p.com" always_nxdomain
+local-zone: "server.2rk3.com" always_nxdomain
+local-zone: "server.8q3p.com" always_nxdomain
+local-zone: "server.n6b8.com" always_nxdomain
+local-zone: "server.v9vs.com" always_nxdomain
+local-zone: "sevvviicess.weebly.com" always_nxdomain
+local-zone: "shard.blue" always_nxdomain
+local-zone: "shard.skin" always_nxdomain
+local-zone: "shared-d7590.firebaseapp.com" always_nxdomain
+local-zone: "shared-d7590.web.app" always_nxdomain
+local-zone: "shaw-101329.weeblysite.com" always_nxdomain
+local-zone: "shaw-101587.weeblysite.com" always_nxdomain
+local-zone: "shaw-106427.weeblysite.com" always_nxdomain
+local-zone: "shaw-107375.weeblysite.com" always_nxdomain
+local-zone: "solutionwebsitedapp.firebaseapp.com" always_nxdomain
+local-zone: "solutionwebsitedapp.web.app" always_nxdomain
+local-zone: "solvetans.firebaseapp.com" always_nxdomain
+local-zone: "solvetans.web.app" always_nxdomain
+local-zone: "sondfrom.dexlog.my.id" always_nxdomain
+local-zone: "soyokai.or.jp" always_nxdomain
+local-zone: "srdate.club" always_nxdomain
+local-zone: "ssy.hmb.mybluehostin.me" always_nxdomain
+local-zone: "steam.poweredartsworkshop.com" always_nxdomain
+local-zone: "steam.workshopsreview.com" always_nxdomain
+local-zone: "steamcommmuty.com" always_nxdomain
+local-zone: "steamcommuunity.ru" always_nxdomain
+local-zone: "steamcomunutty.com" always_nxdomain
+local-zone: "steamconmumity.com" always_nxdomain
+local-zone: "stepsray.vercel.app" always_nxdomain
+local-zone: "support-metahelpcenter-id100003498934.netlify.app" always_nxdomain
+local-zone: "sv5gardens655665.weeblysite.com" always_nxdomain
+local-zone: "system-portalnu.duckdns.org" always_nxdomain
+local-zone: "talwgam.njmolada.com" always_nxdomain
+local-zone: "taste.baby" always_nxdomain
+local-zone: "tele.zhngain.top" always_nxdomain
+local-zone: "telegrambot-resolved.pages.dev" always_nxdomain
+local-zone: "telegrazm.net" always_nxdomain
+local-zone: "telstra-100408.weeblysite.com" always_nxdomain
+local-zone: "telstra-100469.weeblysite.com" always_nxdomain
+local-zone: "telstra-103234.weeblysite.com" always_nxdomain
+local-zone: "tiktok-888.vip" always_nxdomain
+local-zone: "tiltckshow.top" always_nxdomain
+local-zone: "tnomwzrp.top" always_nxdomain
+local-zone: "toeken.im" always_nxdomain
+local-zone: "tonic.pink" always_nxdomain
+local-zone: "tooma.cellinsurance.co.zw" always_nxdomain
+local-zone: "tpdtepremu.xyz" always_nxdomain
+local-zone: "trattujeilesso-3354.vercel.app" always_nxdomain
+local-zone: "trbinace.com" always_nxdomain
+local-zone: "treibrukeukonno-1395.vercel.app" always_nxdomain
+local-zone: "tuesmad.firebaseapp.com" always_nxdomain
+local-zone: "tuesmad.web.app" always_nxdomain
+local-zone: "tyyyyyytyyy.weebly.com" always_nxdomain
+local-zone: "tzcsjfto.chat" always_nxdomain
+local-zone: "u.updatetrackgre.top" always_nxdomain
+local-zone: "uc-whatstapp-web.com" always_nxdomain
+local-zone: "udxcady.wixsite.com" always_nxdomain
+local-zone: "uklifejv.cyou" always_nxdomain
+local-zone: "updatemail12.wixsite.com" always_nxdomain
+local-zone: "ups-trackdeliveryapps.chickenkiller.com" always_nxdomain
+local-zone: "usbest.cyou" always_nxdomain
+local-zone: "user-transaction-overview.vercel.app" always_nxdomain
+local-zone: "usps.com-trackdck.top" always_nxdomain
+local-zone: "usps.com-tracklnv.top" always_nxdomain
+local-zone: "usps.com-trackmcl.top" always_nxdomain
+local-zone: "usps.com-trackmec.top" always_nxdomain
+local-zone: "usps.com-tracktpq.top" always_nxdomain
+local-zone: "usps.com-trackvmd.top" always_nxdomain
+local-zone: "uspsinfw.top" always_nxdomain
+local-zone: "uwdtsczi.top" always_nxdomain
+local-zone: "uwm-onedrive.com" always_nxdomain
+local-zone: "vaishnavi1436.github.io" always_nxdomain
+local-zone: "validatie-veiligauthenticatie.com" always_nxdomain
+local-zone: "vbbu.ldgknhk.lol" always_nxdomain
+local-zone: "verified-this-request-badge.vercel.app" always_nxdomain
+local-zone: "vo4zzp.icu" always_nxdomain
+local-zone: "vs41.github.io" always_nxdomain
+local-zone: "walett-cont.gitbook.io" always_nxdomain
+local-zone: "walletauthenticators.vercel.app" always_nxdomain
+local-zone: "walletcomnecitt.gitbook.io" always_nxdomain
+local-zone: "walletconnectdapps.online" always_nxdomain
+local-zone: "watranfart-fdd6a8.ingress-bonde.ewp.live" always_nxdomain
+local-zone: "waxed.wiki" always_nxdomain
+local-zone: "webmaillshavv.weebly.com" always_nxdomain
+local-zone: "weeeqweeattt.weebly.com" always_nxdomain
+local-zone: "weigh.skin" always_nxdomain
+local-zone: "weigh.wiki" always_nxdomain
+local-zone: "wgqdqvtn.baby" always_nxdomain
+local-zone: "wgqdqvtn.pink" always_nxdomain
+local-zone: "whatsapp-rqr.com" always_nxdomain
+local-zone: "wirelessvoicebtpaidmailinfoplay047.weebly.com" always_nxdomain
+local-zone: "wscs1231.cyou" always_nxdomain
+local-zone: "xn--metmasklogin-vcb.gitbook.io" always_nxdomain
+local-zone: "xojautruffeuttu-4659.vercel.app" always_nxdomain
+local-zone: "xraiz.info" always_nxdomain
+local-zone: "xraiz.vip" always_nxdomain
+local-zone: "xsuweamskeidjf.weebly.com" always_nxdomain
+local-zone: "xya46.cc" always_nxdomain
+local-zone: "yahoooooo-108560.weeblysite.com" always_nxdomain
+local-zone: "yavanica123.github.io" always_nxdomain
+local-zone: "yi5lq-syaaa-aaaag-acfsq-cai.icp0.io" always_nxdomain
+local-zone: "you-can-receive-here.vercel.app" always_nxdomain
+local-zone: "zeiitgeist.angelocachero.info" always_nxdomain
+local-zone: "zenixoikitti-5809.vercel.app" always_nxdomain
+local-zone: "zeznjx.shop" always_nxdomain
+local-zone: "zwzcn.com" always_nxdomain
diff --git a/phishing-filter-unbound.conf.br b/phishing-filter-unbound.conf.br
new file mode 100644
index 000000000..0a0231013
Binary files /dev/null and b/phishing-filter-unbound.conf.br differ
diff --git a/phishing-filter-unbound.conf.gz b/phishing-filter-unbound.conf.gz
new file mode 100644
index 000000000..343030180
Binary files /dev/null and b/phishing-filter-unbound.conf.gz differ
diff --git a/phishing-filter-vivaldi.txt b/phishing-filter-vivaldi.txt
new file mode 100644
index 000000000..ffcbf9c3a
--- /dev/null
+++ b/phishing-filter-vivaldi.txt
@@ -0,0 +1,462 @@
+! Title: Phishing URL Blocklist (Vivaldi)
+! Updated: 2024-11-25T00:20:55Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||1111365dh.net$document
+||12931-coinbase.com$document
+||215323.com$document
+||260aesthetic.wixsite.com$document
+||3650947.cc$document
+||3659ll.net$document
+||83291-coinbase.com$document
+||94-103-188-123.plesk.page$document
+||9825057365.com$document
+||abctrvabc.com$document
+||access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com$document
+||acclimatizable.fun$document
+||account-update05.myvnc.com$document
+||accounts.google.auzen.us.kg$document
+||activebusiness-unlocker3.com$document
+||addwsrbh.green$document
+||ahnp.vercel.app$document
+||aldg.ldgknhk.lol$document
+||allegrolokalnie.pl-891241214.buzz$document
+||alturl.com/hpqhv$document
+||alutipcentra.pages.dev$document
+||ambil-pinjaman-daana-payleter.xforms.web.id$document
+||ambulatoriprivati.it$document
+||amev.ldgknhk.lol$document
+||antail-conv.com$document
+||apply-now-to-receive-badge.vercel.app$document
+||ardilu.com/descargar/kmsauto-net$document
+||artsea.pages.dev$document
+||atmailupdatewptnskmdinfomailacct.weebly.com$document
+||att-101072.weeblysite.com$document
+||att-1041page.weeblysite.com$document
+||att-105714.weeblysite.com$document
+||att-105819.square.site$document
+||att-inc-107097.weeblysite.com$document
+||att-login380.weeblysite.com$document
+||att-login522.weeblysite.com$document
+||att-service-102155.weeblysite.com$document
+||att-sign-in-105669.weeblysite.com$document
+||attcom-100762.weeblysite.com$document
+||attcom-106808.weeblysite.com$document
+||attmailservicenow.wixstudio.com$document
+||attmailservicenow.wixstudio.io$document
+||attmailsrvrdesk.weebly.com$document
+||attnewmaill.weebly.com$document
+||attyhhhhiiii225.weebly.com$document
+||atw-tau.vercel.app$document
+||authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com$document
+||authsyncs.pages.dev$document
+||autoreplyattmode.wixsite.com$document
+||avoid.hold-managert.com$document
+||azbin.ir$document
+||b45018.com$document
+||bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link$document
+||baiii-wong.cutvi.cfd$document
+||basvuru-online-yap.vercel.app$document
+||beionfidi.pages.dev$document
+||bet73nn.com$document
+||bet83039.com$document
+||bet83054.com$document
+||bfrescentremebermainsetreouytnoy.weebly.com$document
+||biggggggggggg.weebly.com$document
+||bitnode.pages.dev$document
+||bitvavobtc.com$document
+||blackhere11.serv00.net$document
+||blss24att.weebly.com$document
+||braucrarasuteu-2470.vercel.app$document
+||bt-102124.weeblysite.com$document
+||bt1business.weebly.com$document
+||btuan-dan2-resmi.top1.my.id$document
+||buildingdesignsusapdf.s3.us-east-005.backblazeb2.com$document
+||business-page-property-897432967.netlify.app$document
+||caipora.xyz$document
+||calm-pothos-3b24c9.netlify.app$document
+||carrefourarabiank15.pages.dev$document
+||caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com$document
+||catgirl-appverset-nya.pages.dev$document
+||catxtokens.pages.dev$document
+||chat.94-103-188-123.plesk.page$document
+||check154109.click$document
+||checkseven.vercel.app$document
+||ciente-a.org$document
+||cieplo.app$document
+||cj12143.tw1.ru$document
+||cj87335.tw1.ru$document
+||claimyourethrewards.pages.dev$document
+||clickbait.design$document
+||cnsa163.com$document
+||cock2-iota.vercel.app$document
+||cock3.vercel.app$document
+||cock7.vercel.app$document
+||contact-pro-8291-d01.firebaseapp.com$document
+||contact-pro-8291-d01.web.app$document
+||creosrl.com$document
+||curmmgdv.email$document
+||currently541.weebly.com$document
+||currently890.weebly.com$document
+||currentlyserver.weebly.com$document
+||dara3dccj.wixsite.com$document
+||db.service4db.com$document
+||de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev$document
+||debutcan.firebaseapp.com$document
+||debutcan.web.app$document
+||delivery.attempt.failure.ebbs.co.za$document
+||dev.stream.mornar.app$document
+||did.li/parcels$document
+||dnwqmh.click$document
+||dropsmartchain.pages.dev$document
+||dsjoting.group$document
+||dulb6c5p5.top$document
+||ebay-mallwholesale.com$document
+||ebt-lilac.vercel.app$document
+||echoredled.netlify.app$document
+||elbarco.percentadnp.info$document
+||eltritongourmet.com$document
+||email.mgb.modento.io$document
+||enjomugg.firebaseapp.com$document
+||enjomugg.web.app$document
+||error3456vhubhornbase.azurewebsites.net$document
+||example223.wixsite.com$document
+||eyeydhe.wixsite.com$document
+||eyttueiu.square.site$document
+||facebook-avip.click$document
+||fame.pink$document
+||fassehoizubra-7696.vercel.app$document
+||fastdropchain.pages.dev$document
+||fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io$document
+||fla-1001.square.site$document
+||flo4211.github.io$document
+||flow.page/servicesatttttmail$document
+||fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com$document
+||fnuttlie.wiki$document
+||fokeijonnekou.vercel.app$document
+||fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com$document
+||free-verified-badge-form0-service.vercel.app$document
+||free-verified-meta-badge-service.vercel.app$document
+||g06668706.wixsite.com$document
+||gccndbqg.vip$document
+||geriodememerkezi.online$document
+||get-checkmark-for-you.vercel.app$document
+||get-free-verified-badge-service-on.vercel.app$document
+||gitanag.broke-it.net$document
+||gruprocuroipra-6493.vercel.app$document
+||h5.b9en.com$document
+||h5.metacoint.com$document
+||hcghij.top$document
+||hdfcsky.com/sky/indian-stock/dashboard$document
+||hdfcsky.com/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!$document
+||hecregayatu-1014.vercel.app$document
+||hejmtxxt.guru$document
+||helenblunt6.wixsite.com$document
+||help.accountsupportcentre.com$document
+||here-apply-for-page-review.vercel.app$document
+||hgbk.ldgknhk.lol$document
+||hhideiie.wixsite.com$document
+||hitummoinneullei-5882.vercel.app$document
+||home-101067.weeblysite.com$document
+||home-103465.weeblysite.com$document
+||home-104341.weeblysite.com$document
+||home-105266.weeblysite.com$document
+||home-105929.weeblysite.com$document
+||homeattatthome.square.site$document
+||hpnefhqs.motorcycles$document
+||im25.net$document
+||info.supercitrus.ind.br$document
+||ins-business-home-center.com$document
+||instagaramgalochka.vercel.app$document
+||ipv6.43-135-137-110.cprapid.com$document
+||irmt0ken.win$document
+||is.gd/djgj07/$document
+||iujf7839iofvkbcu748.weebly.com$document
+||iwimwmiwi.click$document
+||jagej73796.wixsite.com$document
+||jfdjy.com$document
+||kalyani963.github.io$document
+||kexoigrufouddou-5902.vercel.app$document
+||kl1k-ds1ni.neupdile.my.id$document
+||kliind08.wixsite.com$document
+||kreelo098.weebly.com$document
+||kremlcup.com$document
+||kshitij12375.github.io$document
+||kucoinglobal1.com$document
+||kxbztydc.black$document
+||labanquepostale.jupiter-analytics.com$document
+||leddevotoze-3146.vercel.app$document
+||linnkdna-kget.wxxzsite.buzz$document
+||llahi.info$document
+||llahi.vip$document
+||loffaummuddote-4145.vercel.app$document
+||login-att-10221.square.site$document
+||login-form.world$document
+||login-online-outlook365.com$document
+||login-outlook-midstreamauth.com$document
+||login-screen-103134.weeblysite.com$document
+||loginaccount70.wixsite.com$document
+||loginaccount77.wixsite.com$document
+||luk6414.wixsite.com$document
+||luxlifemiamiblog.com$document
+||m.meta-accessibility.io.vn$document
+||madebybmr.fyi$document
+||maqpiexyz.click$document
+||mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev$document
+||mayfair313.wixsite.com$document
+||mdbrvlfy.black$document
+||mesageriepro33range1.weebly.com$document
+||metamsk-wallet-3.gitbook.io$document
+||metttaa-audddt-new-02.firebaseapp.com$document
+||metttaa-audddt-new-02.web.app$document
+||microsoft365-storage.github.io$document
+||mikepattyjm.wixsite.com$document
+||mobilemidasbuy.n3g.fun$document
+||monespacepro-client.3utilities.com$document
+||monetization-violation.github.io$document
+||moodengsol-net.pages.dev$document
+||mwsiekdnfjrdufs.weebly.com$document
+||mxmxnmx.mx.zya.me$document
+||national-au-b.com$document
+||national-au.net$document
+||nbaaiqjq.group$document
+||nexomyacwv.weebly.com$document
+||nft-time11.vercel.app$document
+||nichcheck.weeblysite.com$document
+||ns1.carrier-ast2-portal-apple.com$document
+||omadshf.ru$document
+||online-assist.live$document
+||online-promo-asb.org$document
+||openkimono.pro$document
+||opportunity-verified-status.vercel.app$document
+||ourtime.reconnect-dating.workers.dev$document
+||owouwuowo.click$document
+||p365kf.com$document
+||p4zv8crnrrha27so.94-103-188-123.plesk.page$document
+||page-center-manage.com$document
+||pavan-patil-22.github.io$document
+||pay.zing.vn/pubgm/$document
+||pecinternational.net$document
+||peesom.chat$document
+||pencairaanndannaa.my.id$document
+||petty.wiki$document
+||pimnhv.group$document
+||policies-business-page-service.com$document
+||pottatrebewe-2808.vercel.app$document
+||pqo.hrf.mybluehost.me$document
+||programming--service--panel-totlyy-free-for-you.vercel.app$document
+||promo1.spik.ru$document
+||protocolsecure.pages.dev$document
+||pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev$document
+||pub-1778406e4fec4394901793111c187dd9.r2.dev$document
+||pub-19b834342e7d465b9f00b3511325a081.r2.dev$document
+||pub-21dd4dc659614ceb93e45a6de4434502.r2.dev$document
+||pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev$document
+||pub-2fefe932a6974485b987c9ba851b5c40.r2.dev$document
+||pub-3a46d9914f494078a6d6237513e7a096.r2.dev$document
+||pub-442ed822851244a689b3472ea2c6a950.r2.dev$document
+||pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev$document
+||pub-682ad3b65d944376b919745aae3c56d4.r2.dev$document
+||pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev$document
+||pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev$document
+||pub-7f5cf36445d042168bfacd712e890dc0.r2.dev$document
+||pub-803839714a924882a7bcc2495a26860f.r2.dev$document
+||pub-8161de4a277e4ee8b532af34954224e1.r2.dev$document
+||pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev$document
+||pub-8376b5b2334844d193a525d8b8548fa5.r2.dev$document
+||pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev$document
+||pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev$document
+||pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev$document
+||pub-9163a97d70394cb499bdd232be6c2169.r2.dev$document
+||pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev$document
+||pub-98171471e0944ac3a5820ef719bf0640.r2.dev$document
+||pub-a263e0790935412eb10cacc55bbced18.r2.dev$document
+||pub-a291041b077742899b63a9982f04a56c.r2.dev$document
+||pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev$document
+||pub-b50adc5d699a4f08aec37102c2103da7.r2.dev$document
+||pub-c0a934c950e441db96b882789f53c9ea.r2.dev$document
+||pub-c2c250050109456396c933de259a4fea.r2.dev$document
+||pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev$document
+||pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev$document
+||pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev$document
+||pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev$document
+||pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev$document
+||pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev$document
+||pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev$document
+||pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev$document
+||pub-e42cb528b102447385e3145197916f51.r2.dev$document
+||pub-e4aff507450c478cbe3f77ad23d75035.r2.dev$document
+||pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev$document
+||pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev$document
+||pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev$document
+||pubgm.club$document
+||puffagroibrouwoi-8818.vercel.app$document
+||qasimk.com$document
+||qfjfvseq.info$document
+||quauwograssodda-3503.vercel.app$document
+||qysgyp.com$document
+||rajdipchatterjee.github.io$document
+||rb.gy/go4bnv/$document
+||rebrand.ly/18ab5a$document
+||rebrand.ly/4ff03b$document
+||rebrand.ly/8wtcv4z$document
+||rebrand.ly/96a02f$document
+||rebrand.ly/c0d1afz$document
+||rebrand.ly/d2f265$document
+||rebrand.ly/eacc63$document
+||rebrand.ly/f9decb$document
+||rebrand.ly/mzhpkzf$document
+||rebrand.ly/nbyh9vh$document
+||rebrand.ly/sa2uoq0$document
+||rebrand.ly/tcthi8d$document
+||rebrand.ly/tnab363c6$document
+||rebrand.ly/wx1eo7w$document
+||rechazaroanularaqui51.weebly.com$document
+||remote-fix.pages.dev$document
+||renggard.47-243-192-240.cprapid.com$document
+||resolvepanel.live$document
+||resolving--issue--with-us1.vercel.app$document
+||resqat.weebly.com$document
+||review-business-case.d2f7p3b7pucnle.amplifyapp.com$document
+||rlpqwefi.pink$document
+||rouloigeilleuja-9523.vercel.app$document
+||rulemec.pages.dev$document
+||rutinqqwin.shop$document
+||rwftfu.quest$document
+||s.team-pw.cc$document
+||sairanees.github.io$document
+||sanseipecas.com.br$document
+||sasklelo.weebly.com$document
+||sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com$document
+||sasktelcustomerwebly.weebly.com$document
+||sasktelnetwebmailservermaintainance.weebly.com$document
+||sasktelrectify.weebly.com$document
+||sasktelscrutinize.weebly.com$document
+||sasktelservicecentterwebly.weebly.com$document
+||sasktelsupportsystemwebly.weebly.com$document
+||sbcglobal30.wixsite.com$document
+||scan-vulnerability-guard-v3.pages.dev$document
+||scan-vulnerability-guard.pages.dev$document
+||scanner-metamask-v1.pages.dev$document
+||scanner-metamask-v2.pages.dev$document
+||scanner-metamask-v3.pages.dev$document
+||scanner-metamask.pages.dev$document
+||sec-sign-in.info$document
+||secure2-validitycheck.weebly.com$document
+||securecapitec.theprimepoint.online$document
+||securerpcfix.com$document
+||seeteressecalywoi.github.io$document
+||seivviice.weebly.com$document
+||server.0e7p.com$document
+||server.2rk3.com$document
+||server.8q3p.com$document
+||server.n6b8.com$document
+||server.v9vs.com$document
+||sevvviicess.weebly.com$document
+||shard.blue$document
+||shard.skin$document
+||shared-d7590.firebaseapp.com$document
+||shared-d7590.web.app$document
+||shaw-101329.weeblysite.com$document
+||shaw-101587.weeblysite.com$document
+||shaw-106427.weeblysite.com$document
+||shaw-107375.weeblysite.com$document
+||solutionwebsitedapp.firebaseapp.com$document
+||solutionwebsitedapp.web.app$document
+||solvetans.firebaseapp.com$document
+||solvetans.web.app$document
+||sondfrom.dexlog.my.id$document
+||soyokai.or.jp$document
+||srdate.club$document
+||ssy.hmb.mybluehostin.me$document
+||steam.poweredartsworkshop.com$document
+||steam.workshopsreview.com$document
+||steamcommmuty.com$document
+||steamcommuunity.ru$document
+||steamcomunutty.com$document
+||steamconmumity.com$document
+||stepsray.vercel.app$document
+||support-metahelpcenter-id100003498934.netlify.app$document
+||surl.li/tvybxr$document
+||sv5gardens655665.weeblysite.com$document
+||system-portalnu.duckdns.org$document
+||talwgam.njmolada.com$document
+||taste.baby$document
+||tele.zhngain.top$document
+||telegrambot-resolved.pages.dev$document
+||telegrazm.net$document
+||telstra-100408.weeblysite.com$document
+||telstra-100469.weeblysite.com$document
+||telstra-103234.weeblysite.com$document
+||tiktok-888.vip$document
+||tiltckshow.top$document
+||tinyurl.com/carrefour-926/$document
+||tnomwzrp.top$document
+||toeken.im$document
+||tonic.pink$document
+||tooma.cellinsurance.co.zw$document
+||tpdtepremu.xyz$document
+||trattujeilesso-3354.vercel.app$document
+||trbinace.com$document
+||treibrukeukonno-1395.vercel.app$document
+||tuesmad.firebaseapp.com$document
+||tuesmad.web.app$document
+||tyyyyyytyyy.weebly.com$document
+||tzcsjfto.chat$document
+||u.updatetrackgre.top$document
+||uc-whatstapp-web.com$document
+||udxcady.wixsite.com$document
+||uklifejv.cyou$document
+||updatemail12.wixsite.com$document
+||ups-trackdeliveryapps.chickenkiller.com$document
+||urlz.fr/t8vi$document
+||urlz.fr/t9ka$document
+||urlz.fr/talr$document
+||usbest.cyou$document
+||user-transaction-overview.vercel.app$document
+||usps.com-trackdck.top$document
+||usps.com-tracklnv.top$document
+||usps.com-trackmcl.top$document
+||usps.com-trackmec.top$document
+||usps.com-tracktpq.top$document
+||usps.com-trackvmd.top$document
+||uspsinfw.top$document
+||uwdtsczi.top$document
+||uwm-onedrive.com$document
+||vaishnavi1436.github.io$document
+||validatie-veiligauthenticatie.com$document
+||vbbu.ldgknhk.lol$document
+||verified-this-request-badge.vercel.app$document
+||vo4zzp.icu$document
+||vs41.github.io$document
+||walett-cont.gitbook.io$document
+||walletauthenticators.vercel.app$document
+||walletcomnecitt.gitbook.io$document
+||walletconnectdapps.online$document
+||watranfart-fdd6a8.ingress-bonde.ewp.live$document
+||waxed.wiki$document
+||webmaillshavv.weebly.com$document
+||weeeqweeattt.weebly.com$document
+||weigh.skin$document
+||weigh.wiki$document
+||wgqdqvtn.baby$document
+||wgqdqvtn.pink$document
+||whatsapp-rqr.com$document
+||wirelessvoicebtpaidmailinfoplay047.weebly.com$document
+||wscs1231.cyou$document
+||xn--metmasklogin-vcb.gitbook.io$document
+||xojautruffeuttu-4659.vercel.app$document
+||xraiz.info$document
+||xraiz.vip$document
+||xsuweamskeidjf.weebly.com$document
+||xya46.cc$document
+||yahoooooo-108560.weeblysite.com$document
+||yavanica123.github.io$document
+||yi5lq-syaaa-aaaag-acfsq-cai.icp0.io$document
+||you-can-receive-here.vercel.app$document
+||zeiitgeist.angelocachero.info$document
+||zenixoikitti-5809.vercel.app$document
+||zeznjx.shop$document
+||zwzcn.com$document
diff --git a/phishing-filter-vivaldi.txt.br b/phishing-filter-vivaldi.txt.br
new file mode 100644
index 000000000..4d05c8ef4
Binary files /dev/null and b/phishing-filter-vivaldi.txt.br differ
diff --git a/phishing-filter-vivaldi.txt.gz b/phishing-filter-vivaldi.txt.gz
new file mode 100644
index 000000000..9c263b25f
Binary files /dev/null and b/phishing-filter-vivaldi.txt.gz differ
diff --git a/phishing-filter.tpl b/phishing-filter.tpl
new file mode 100644
index 000000000..d35c36da7
--- /dev/null
+++ b/phishing-filter.tpl
@@ -0,0 +1,437 @@
+msFilterList
+# Title: Phishing Hosts Blocklist (IE)
+# Updated: 2024-11-25T00:20:55Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+: Expires=1
+#
+-d 1111365dh.net
+-d 12931-coinbase.com
+-d 215323.com
+-d 260aesthetic.wixsite.com
+-d 3650947.cc
+-d 3659ll.net
+-d 83291-coinbase.com
+-d 94-103-188-123.plesk.page
+-d 9825057365.com
+-d abctrvabc.com
+-d access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com
+-d acclimatizable.fun
+-d account-update05.myvnc.com
+-d accounts.google.auzen.us.kg
+-d activebusiness-unlocker3.com
+-d addwsrbh.green
+-d ahnp.vercel.app
+-d aldg.ldgknhk.lol
+-d allegrolokalnie.pl-891241214.buzz
+-d alutipcentra.pages.dev
+-d ambil-pinjaman-daana-payleter.xforms.web.id
+-d ambulatoriprivati.it
+-d amev.ldgknhk.lol
+-d antail-conv.com
+-d apply-now-to-receive-badge.vercel.app
+-d artsea.pages.dev
+-d atmailupdatewptnskmdinfomailacct.weebly.com
+-d att-101072.weeblysite.com
+-d att-1041page.weeblysite.com
+-d att-105714.weeblysite.com
+-d att-105819.square.site
+-d att-inc-107097.weeblysite.com
+-d att-login380.weeblysite.com
+-d att-login522.weeblysite.com
+-d att-service-102155.weeblysite.com
+-d att-sign-in-105669.weeblysite.com
+-d attcom-100762.weeblysite.com
+-d attcom-106808.weeblysite.com
+-d attmailservicenow.wixstudio.com
+-d attmailservicenow.wixstudio.io
+-d attmailsrvrdesk.weebly.com
+-d attnewmaill.weebly.com
+-d attyhhhhiiii225.weebly.com
+-d atw-tau.vercel.app
+-d authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com
+-d authsyncs.pages.dev
+-d autoreplyattmode.wixsite.com
+-d avoid.hold-managert.com
+-d azbin.ir
+-d b45018.com
+-d bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link
+-d baiii-wong.cutvi.cfd
+-d basvuru-online-yap.vercel.app
+-d beionfidi.pages.dev
+-d bet73nn.com
+-d bet83039.com
+-d bet83054.com
+-d bfrescentremebermainsetreouytnoy.weebly.com
+-d biggggggggggg.weebly.com
+-d bitnode.pages.dev
+-d bitvavobtc.com
+-d blackhere11.serv00.net
+-d blss24att.weebly.com
+-d braucrarasuteu-2470.vercel.app
+-d bt-102124.weeblysite.com
+-d bt1business.weebly.com
+-d btuan-dan2-resmi.top1.my.id
+-d buildingdesignsusapdf.s3.us-east-005.backblazeb2.com
+-d business-page-property-897432967.netlify.app
+-d caipora.xyz
+-d calm-pothos-3b24c9.netlify.app
+-d carrefourarabiank15.pages.dev
+-d caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com
+-d catgirl-appverset-nya.pages.dev
+-d catxtokens.pages.dev
+-d chat.94-103-188-123.plesk.page
+-d check154109.click
+-d checkseven.vercel.app
+-d ciente-a.org
+-d cieplo.app
+-d cj12143.tw1.ru
+-d cj87335.tw1.ru
+-d claimyourethrewards.pages.dev
+-d clickbait.design
+-d cnsa163.com
+-d cock2-iota.vercel.app
+-d cock3.vercel.app
+-d cock7.vercel.app
+-d contact-pro-8291-d01.firebaseapp.com
+-d contact-pro-8291-d01.web.app
+-d creosrl.com
+-d curmmgdv.email
+-d currently541.weebly.com
+-d currently890.weebly.com
+-d currentlyserver.weebly.com
+-d dara3dccj.wixsite.com
+-d db.service4db.com
+-d de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev
+-d debutcan.firebaseapp.com
+-d debutcan.web.app
+-d delivery.attempt.failure.ebbs.co.za
+-d dev.stream.mornar.app
+-d dnwqmh.click
+-d dropsmartchain.pages.dev
+-d dsjoting.group
+-d dulb6c5p5.top
+-d ebay-mallwholesale.com
+-d ebt-lilac.vercel.app
+-d echoredled.netlify.app
+-d elbarco.percentadnp.info
+-d eltritongourmet.com
+-d email.mgb.modento.io
+-d enjomugg.firebaseapp.com
+-d enjomugg.web.app
+-d error3456vhubhornbase.azurewebsites.net
+-d example223.wixsite.com
+-d eyeydhe.wixsite.com
+-d eyttueiu.square.site
+-d facebook-avip.click
+-d fame.pink
+-d fassehoizubra-7696.vercel.app
+-d fastdropchain.pages.dev
+-d fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io
+-d fla-1001.square.site
+-d flo4211.github.io
+-d fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com
+-d fnuttlie.wiki
+-d fokeijonnekou.vercel.app
+-d fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com
+-d free-verified-badge-form0-service.vercel.app
+-d free-verified-meta-badge-service.vercel.app
+-d g06668706.wixsite.com
+-d gccndbqg.vip
+-d geriodememerkezi.online
+-d get-checkmark-for-you.vercel.app
+-d get-free-verified-badge-service-on.vercel.app
+-d gitanag.broke-it.net
+-d gruprocuroipra-6493.vercel.app
+-d h5.b9en.com
+-d h5.metacoint.com
+-d hcghij.top
+-d hecregayatu-1014.vercel.app
+-d hejmtxxt.guru
+-d helenblunt6.wixsite.com
+-d help.accountsupportcentre.com
+-d here-apply-for-page-review.vercel.app
+-d hgbk.ldgknhk.lol
+-d hhideiie.wixsite.com
+-d hitummoinneullei-5882.vercel.app
+-d home-101067.weeblysite.com
+-d home-103465.weeblysite.com
+-d home-104341.weeblysite.com
+-d home-105266.weeblysite.com
+-d home-105929.weeblysite.com
+-d homeattatthome.square.site
+-d hpnefhqs.motorcycles
+-d im25.net
+-d info.supercitrus.ind.br
+-d ins-business-home-center.com
+-d instagaramgalochka.vercel.app
+-d ipv6.43-135-137-110.cprapid.com
+-d irmt0ken.win
+-d iujf7839iofvkbcu748.weebly.com
+-d iwimwmiwi.click
+-d jagej73796.wixsite.com
+-d jfdjy.com
+-d kalyani963.github.io
+-d kexoigrufouddou-5902.vercel.app
+-d kl1k-ds1ni.neupdile.my.id
+-d kliind08.wixsite.com
+-d kreelo098.weebly.com
+-d kremlcup.com
+-d kshitij12375.github.io
+-d kucoinglobal1.com
+-d kxbztydc.black
+-d labanquepostale.jupiter-analytics.com
+-d leddevotoze-3146.vercel.app
+-d linnkdna-kget.wxxzsite.buzz
+-d llahi.info
+-d llahi.vip
+-d loffaummuddote-4145.vercel.app
+-d login-att-10221.square.site
+-d login-form.world
+-d login-online-outlook365.com
+-d login-outlook-midstreamauth.com
+-d login-screen-103134.weeblysite.com
+-d loginaccount70.wixsite.com
+-d loginaccount77.wixsite.com
+-d luk6414.wixsite.com
+-d luxlifemiamiblog.com
+-d m.meta-accessibility.io.vn
+-d madebybmr.fyi
+-d maqpiexyz.click
+-d mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev
+-d mayfair313.wixsite.com
+-d mdbrvlfy.black
+-d mesageriepro33range1.weebly.com
+-d metamsk-wallet-3.gitbook.io
+-d metttaa-audddt-new-02.firebaseapp.com
+-d metttaa-audddt-new-02.web.app
+-d microsoft365-storage.github.io
+-d mikepattyjm.wixsite.com
+-d mobilemidasbuy.n3g.fun
+-d monespacepro-client.3utilities.com
+-d monetization-violation.github.io
+-d moodengsol-net.pages.dev
+-d mwsiekdnfjrdufs.weebly.com
+-d mxmxnmx.mx.zya.me
+-d national-au-b.com
+-d national-au.net
+-d nbaaiqjq.group
+-d nexomyacwv.weebly.com
+-d nft-time11.vercel.app
+-d nichcheck.weeblysite.com
+-d ns1.carrier-ast2-portal-apple.com
+-d omadshf.ru
+-d online-assist.live
+-d online-promo-asb.org
+-d openkimono.pro
+-d opportunity-verified-status.vercel.app
+-d ourtime.reconnect-dating.workers.dev
+-d owouwuowo.click
+-d p365kf.com
+-d p4zv8crnrrha27so.94-103-188-123.plesk.page
+-d page-center-manage.com
+-d pavan-patil-22.github.io
+-d pecinternational.net
+-d peesom.chat
+-d pencairaanndannaa.my.id
+-d petty.wiki
+-d pimnhv.group
+-d policies-business-page-service.com
+-d pottatrebewe-2808.vercel.app
+-d pqo.hrf.mybluehost.me
+-d programming--service--panel-totlyy-free-for-you.vercel.app
+-d promo1.spik.ru
+-d protocolsecure.pages.dev
+-d pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev
+-d pub-1778406e4fec4394901793111c187dd9.r2.dev
+-d pub-19b834342e7d465b9f00b3511325a081.r2.dev
+-d pub-21dd4dc659614ceb93e45a6de4434502.r2.dev
+-d pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev
+-d pub-2fefe932a6974485b987c9ba851b5c40.r2.dev
+-d pub-3a46d9914f494078a6d6237513e7a096.r2.dev
+-d pub-442ed822851244a689b3472ea2c6a950.r2.dev
+-d pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev
+-d pub-682ad3b65d944376b919745aae3c56d4.r2.dev
+-d pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev
+-d pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev
+-d pub-7f5cf36445d042168bfacd712e890dc0.r2.dev
+-d pub-803839714a924882a7bcc2495a26860f.r2.dev
+-d pub-8161de4a277e4ee8b532af34954224e1.r2.dev
+-d pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev
+-d pub-8376b5b2334844d193a525d8b8548fa5.r2.dev
+-d pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev
+-d pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev
+-d pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev
+-d pub-9163a97d70394cb499bdd232be6c2169.r2.dev
+-d pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev
+-d pub-98171471e0944ac3a5820ef719bf0640.r2.dev
+-d pub-a263e0790935412eb10cacc55bbced18.r2.dev
+-d pub-a291041b077742899b63a9982f04a56c.r2.dev
+-d pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev
+-d pub-b50adc5d699a4f08aec37102c2103da7.r2.dev
+-d pub-c0a934c950e441db96b882789f53c9ea.r2.dev
+-d pub-c2c250050109456396c933de259a4fea.r2.dev
+-d pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev
+-d pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev
+-d pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev
+-d pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev
+-d pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev
+-d pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev
+-d pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev
+-d pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev
+-d pub-e42cb528b102447385e3145197916f51.r2.dev
+-d pub-e4aff507450c478cbe3f77ad23d75035.r2.dev
+-d pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev
+-d pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev
+-d pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev
+-d pubgm.club
+-d puffagroibrouwoi-8818.vercel.app
+-d qasimk.com
+-d qfjfvseq.info
+-d quauwograssodda-3503.vercel.app
+-d qysgyp.com
+-d rajdipchatterjee.github.io
+-d rechazaroanularaqui51.weebly.com
+-d remote-fix.pages.dev
+-d renggard.47-243-192-240.cprapid.com
+-d resolvepanel.live
+-d resolving--issue--with-us1.vercel.app
+-d resqat.weebly.com
+-d review-business-case.d2f7p3b7pucnle.amplifyapp.com
+-d rlpqwefi.pink
+-d rouloigeilleuja-9523.vercel.app
+-d rulemec.pages.dev
+-d rutinqqwin.shop
+-d rwftfu.quest
+-d s.team-pw.cc
+-d sairanees.github.io
+-d sanseipecas.com.br
+-d sasklelo.weebly.com
+-d sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com
+-d sasktelcustomerwebly.weebly.com
+-d sasktelnetwebmailservermaintainance.weebly.com
+-d sasktelrectify.weebly.com
+-d sasktelscrutinize.weebly.com
+-d sasktelservicecentterwebly.weebly.com
+-d sasktelsupportsystemwebly.weebly.com
+-d sbcglobal30.wixsite.com
+-d scan-vulnerability-guard-v3.pages.dev
+-d scan-vulnerability-guard.pages.dev
+-d scanner-metamask-v1.pages.dev
+-d scanner-metamask-v2.pages.dev
+-d scanner-metamask-v3.pages.dev
+-d scanner-metamask.pages.dev
+-d sec-sign-in.info
+-d secure2-validitycheck.weebly.com
+-d securecapitec.theprimepoint.online
+-d securerpcfix.com
+-d seeteressecalywoi.github.io
+-d seivviice.weebly.com
+-d server.0e7p.com
+-d server.2rk3.com
+-d server.8q3p.com
+-d server.n6b8.com
+-d server.v9vs.com
+-d sevvviicess.weebly.com
+-d shard.blue
+-d shard.skin
+-d shared-d7590.firebaseapp.com
+-d shared-d7590.web.app
+-d shaw-101329.weeblysite.com
+-d shaw-101587.weeblysite.com
+-d shaw-106427.weeblysite.com
+-d shaw-107375.weeblysite.com
+-d solutionwebsitedapp.firebaseapp.com
+-d solutionwebsitedapp.web.app
+-d solvetans.firebaseapp.com
+-d solvetans.web.app
+-d sondfrom.dexlog.my.id
+-d soyokai.or.jp
+-d srdate.club
+-d ssy.hmb.mybluehostin.me
+-d steam.poweredartsworkshop.com
+-d steam.workshopsreview.com
+-d steamcommmuty.com
+-d steamcommuunity.ru
+-d steamcomunutty.com
+-d steamconmumity.com
+-d stepsray.vercel.app
+-d support-metahelpcenter-id100003498934.netlify.app
+-d sv5gardens655665.weeblysite.com
+-d system-portalnu.duckdns.org
+-d talwgam.njmolada.com
+-d taste.baby
+-d tele.zhngain.top
+-d telegrambot-resolved.pages.dev
+-d telegrazm.net
+-d telstra-100408.weeblysite.com
+-d telstra-100469.weeblysite.com
+-d telstra-103234.weeblysite.com
+-d tiktok-888.vip
+-d tiltckshow.top
+-d tnomwzrp.top
+-d toeken.im
+-d tonic.pink
+-d tooma.cellinsurance.co.zw
+-d tpdtepremu.xyz
+-d trattujeilesso-3354.vercel.app
+-d trbinace.com
+-d treibrukeukonno-1395.vercel.app
+-d tuesmad.firebaseapp.com
+-d tuesmad.web.app
+-d tyyyyyytyyy.weebly.com
+-d tzcsjfto.chat
+-d u.updatetrackgre.top
+-d uc-whatstapp-web.com
+-d udxcady.wixsite.com
+-d uklifejv.cyou
+-d updatemail12.wixsite.com
+-d ups-trackdeliveryapps.chickenkiller.com
+-d usbest.cyou
+-d user-transaction-overview.vercel.app
+-d usps.com-trackdck.top
+-d usps.com-tracklnv.top
+-d usps.com-trackmcl.top
+-d usps.com-trackmec.top
+-d usps.com-tracktpq.top
+-d usps.com-trackvmd.top
+-d uspsinfw.top
+-d uwdtsczi.top
+-d uwm-onedrive.com
+-d vaishnavi1436.github.io
+-d validatie-veiligauthenticatie.com
+-d vbbu.ldgknhk.lol
+-d verified-this-request-badge.vercel.app
+-d vo4zzp.icu
+-d vs41.github.io
+-d walett-cont.gitbook.io
+-d walletauthenticators.vercel.app
+-d walletcomnecitt.gitbook.io
+-d walletconnectdapps.online
+-d watranfart-fdd6a8.ingress-bonde.ewp.live
+-d waxed.wiki
+-d webmaillshavv.weebly.com
+-d weeeqweeattt.weebly.com
+-d weigh.skin
+-d weigh.wiki
+-d wgqdqvtn.baby
+-d wgqdqvtn.pink
+-d whatsapp-rqr.com
+-d wirelessvoicebtpaidmailinfoplay047.weebly.com
+-d wscs1231.cyou
+-d xn--metmasklogin-vcb.gitbook.io
+-d xojautruffeuttu-4659.vercel.app
+-d xraiz.info
+-d xraiz.vip
+-d xsuweamskeidjf.weebly.com
+-d xya46.cc
+-d yahoooooo-108560.weeblysite.com
+-d yavanica123.github.io
+-d yi5lq-syaaa-aaaag-acfsq-cai.icp0.io
+-d you-can-receive-here.vercel.app
+-d zeiitgeist.angelocachero.info
+-d zenixoikitti-5809.vercel.app
+-d zeznjx.shop
+-d zwzcn.com
diff --git a/phishing-filter.tpl.br b/phishing-filter.tpl.br
new file mode 100644
index 000000000..c0fa13ae4
Binary files /dev/null and b/phishing-filter.tpl.br differ
diff --git a/phishing-filter.tpl.gz b/phishing-filter.tpl.gz
new file mode 100644
index 000000000..2495b66c6
Binary files /dev/null and b/phishing-filter.tpl.gz differ
diff --git a/phishing-filter.txt b/phishing-filter.txt
new file mode 100644
index 000000000..ceed72497
--- /dev/null
+++ b/phishing-filter.txt
@@ -0,0 +1,462 @@
+! Title: Phishing URL Blocklist
+! Updated: 2024-11-25T00:20:55Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+1111365dh.net
+12931-coinbase.com
+215323.com
+260aesthetic.wixsite.com
+3650947.cc
+3659ll.net
+83291-coinbase.com
+94-103-188-123.plesk.page
+9825057365.com
+abctrvabc.com
+access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com
+acclimatizable.fun
+account-update05.myvnc.com
+accounts.google.auzen.us.kg
+activebusiness-unlocker3.com
+addwsrbh.green
+ahnp.vercel.app
+aldg.ldgknhk.lol
+allegrolokalnie.pl-891241214.buzz
+alutipcentra.pages.dev
+ambil-pinjaman-daana-payleter.xforms.web.id
+ambulatoriprivati.it
+amev.ldgknhk.lol
+antail-conv.com
+apply-now-to-receive-badge.vercel.app
+artsea.pages.dev
+atmailupdatewptnskmdinfomailacct.weebly.com
+att-101072.weeblysite.com
+att-1041page.weeblysite.com
+att-105714.weeblysite.com
+att-105819.square.site
+att-inc-107097.weeblysite.com
+att-login380.weeblysite.com
+att-login522.weeblysite.com
+att-service-102155.weeblysite.com
+att-sign-in-105669.weeblysite.com
+attcom-100762.weeblysite.com
+attcom-106808.weeblysite.com
+attmailservicenow.wixstudio.com
+attmailservicenow.wixstudio.io
+attmailsrvrdesk.weebly.com
+attnewmaill.weebly.com
+attyhhhhiiii225.weebly.com
+atw-tau.vercel.app
+authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com
+authsyncs.pages.dev
+autoreplyattmode.wixsite.com
+avoid.hold-managert.com
+azbin.ir
+b45018.com
+bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link
+baiii-wong.cutvi.cfd
+basvuru-online-yap.vercel.app
+beionfidi.pages.dev
+bet73nn.com
+bet83039.com
+bet83054.com
+bfrescentremebermainsetreouytnoy.weebly.com
+biggggggggggg.weebly.com
+bitnode.pages.dev
+bitvavobtc.com
+blackhere11.serv00.net
+blss24att.weebly.com
+braucrarasuteu-2470.vercel.app
+bt-102124.weeblysite.com
+bt1business.weebly.com
+btuan-dan2-resmi.top1.my.id
+buildingdesignsusapdf.s3.us-east-005.backblazeb2.com
+business-page-property-897432967.netlify.app
+caipora.xyz
+calm-pothos-3b24c9.netlify.app
+carrefourarabiank15.pages.dev
+caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com
+catgirl-appverset-nya.pages.dev
+catxtokens.pages.dev
+chat.94-103-188-123.plesk.page
+check154109.click
+checkseven.vercel.app
+ciente-a.org
+cieplo.app
+cj12143.tw1.ru
+cj87335.tw1.ru
+claimyourethrewards.pages.dev
+clickbait.design
+cnsa163.com
+cock2-iota.vercel.app
+cock3.vercel.app
+cock7.vercel.app
+contact-pro-8291-d01.firebaseapp.com
+contact-pro-8291-d01.web.app
+creosrl.com
+curmmgdv.email
+currently541.weebly.com
+currently890.weebly.com
+currentlyserver.weebly.com
+dara3dccj.wixsite.com
+db.service4db.com
+de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev
+debutcan.firebaseapp.com
+debutcan.web.app
+delivery.attempt.failure.ebbs.co.za
+dev.stream.mornar.app
+dnwqmh.click
+dropsmartchain.pages.dev
+dsjoting.group
+dulb6c5p5.top
+ebay-mallwholesale.com
+ebt-lilac.vercel.app
+echoredled.netlify.app
+elbarco.percentadnp.info
+eltritongourmet.com
+email.mgb.modento.io
+enjomugg.firebaseapp.com
+enjomugg.web.app
+error3456vhubhornbase.azurewebsites.net
+example223.wixsite.com
+eyeydhe.wixsite.com
+eyttueiu.square.site
+facebook-avip.click
+fame.pink
+fassehoizubra-7696.vercel.app
+fastdropchain.pages.dev
+fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io
+fla-1001.square.site
+flo4211.github.io
+fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com
+fnuttlie.wiki
+fokeijonnekou.vercel.app
+fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com
+free-verified-badge-form0-service.vercel.app
+free-verified-meta-badge-service.vercel.app
+g06668706.wixsite.com
+gccndbqg.vip
+geriodememerkezi.online
+get-checkmark-for-you.vercel.app
+get-free-verified-badge-service-on.vercel.app
+gitanag.broke-it.net
+gruprocuroipra-6493.vercel.app
+h5.b9en.com
+h5.metacoint.com
+hcghij.top
+hecregayatu-1014.vercel.app
+hejmtxxt.guru
+helenblunt6.wixsite.com
+help.accountsupportcentre.com
+here-apply-for-page-review.vercel.app
+hgbk.ldgknhk.lol
+hhideiie.wixsite.com
+hitummoinneullei-5882.vercel.app
+home-101067.weeblysite.com
+home-103465.weeblysite.com
+home-104341.weeblysite.com
+home-105266.weeblysite.com
+home-105929.weeblysite.com
+homeattatthome.square.site
+hpnefhqs.motorcycles
+im25.net
+info.supercitrus.ind.br
+ins-business-home-center.com
+instagaramgalochka.vercel.app
+ipv6.43-135-137-110.cprapid.com
+irmt0ken.win
+iujf7839iofvkbcu748.weebly.com
+iwimwmiwi.click
+jagej73796.wixsite.com
+jfdjy.com
+kalyani963.github.io
+kexoigrufouddou-5902.vercel.app
+kl1k-ds1ni.neupdile.my.id
+kliind08.wixsite.com
+kreelo098.weebly.com
+kremlcup.com
+kshitij12375.github.io
+kucoinglobal1.com
+kxbztydc.black
+labanquepostale.jupiter-analytics.com
+leddevotoze-3146.vercel.app
+linnkdna-kget.wxxzsite.buzz
+llahi.info
+llahi.vip
+loffaummuddote-4145.vercel.app
+login-att-10221.square.site
+login-form.world
+login-online-outlook365.com
+login-outlook-midstreamauth.com
+login-screen-103134.weeblysite.com
+loginaccount70.wixsite.com
+loginaccount77.wixsite.com
+luk6414.wixsite.com
+luxlifemiamiblog.com
+m.meta-accessibility.io.vn
+madebybmr.fyi
+maqpiexyz.click
+mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev
+mayfair313.wixsite.com
+mdbrvlfy.black
+mesageriepro33range1.weebly.com
+metamsk-wallet-3.gitbook.io
+metttaa-audddt-new-02.firebaseapp.com
+metttaa-audddt-new-02.web.app
+microsoft365-storage.github.io
+mikepattyjm.wixsite.com
+mobilemidasbuy.n3g.fun
+monespacepro-client.3utilities.com
+monetization-violation.github.io
+moodengsol-net.pages.dev
+mwsiekdnfjrdufs.weebly.com
+mxmxnmx.mx.zya.me
+national-au-b.com
+national-au.net
+nbaaiqjq.group
+nexomyacwv.weebly.com
+nft-time11.vercel.app
+nichcheck.weeblysite.com
+ns1.carrier-ast2-portal-apple.com
+omadshf.ru
+online-assist.live
+online-promo-asb.org
+openkimono.pro
+opportunity-verified-status.vercel.app
+ourtime.reconnect-dating.workers.dev
+owouwuowo.click
+p365kf.com
+p4zv8crnrrha27so.94-103-188-123.plesk.page
+page-center-manage.com
+pavan-patil-22.github.io
+pecinternational.net
+peesom.chat
+pencairaanndannaa.my.id
+petty.wiki
+pimnhv.group
+policies-business-page-service.com
+pottatrebewe-2808.vercel.app
+pqo.hrf.mybluehost.me
+programming--service--panel-totlyy-free-for-you.vercel.app
+promo1.spik.ru
+protocolsecure.pages.dev
+pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev
+pub-1778406e4fec4394901793111c187dd9.r2.dev
+pub-19b834342e7d465b9f00b3511325a081.r2.dev
+pub-21dd4dc659614ceb93e45a6de4434502.r2.dev
+pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev
+pub-2fefe932a6974485b987c9ba851b5c40.r2.dev
+pub-3a46d9914f494078a6d6237513e7a096.r2.dev
+pub-442ed822851244a689b3472ea2c6a950.r2.dev
+pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev
+pub-682ad3b65d944376b919745aae3c56d4.r2.dev
+pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev
+pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev
+pub-7f5cf36445d042168bfacd712e890dc0.r2.dev
+pub-803839714a924882a7bcc2495a26860f.r2.dev
+pub-8161de4a277e4ee8b532af34954224e1.r2.dev
+pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev
+pub-8376b5b2334844d193a525d8b8548fa5.r2.dev
+pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev
+pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev
+pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev
+pub-9163a97d70394cb499bdd232be6c2169.r2.dev
+pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev
+pub-98171471e0944ac3a5820ef719bf0640.r2.dev
+pub-a263e0790935412eb10cacc55bbced18.r2.dev
+pub-a291041b077742899b63a9982f04a56c.r2.dev
+pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev
+pub-b50adc5d699a4f08aec37102c2103da7.r2.dev
+pub-c0a934c950e441db96b882789f53c9ea.r2.dev
+pub-c2c250050109456396c933de259a4fea.r2.dev
+pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev
+pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev
+pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev
+pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev
+pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev
+pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev
+pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev
+pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev
+pub-e42cb528b102447385e3145197916f51.r2.dev
+pub-e4aff507450c478cbe3f77ad23d75035.r2.dev
+pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev
+pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev
+pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev
+pubgm.club
+puffagroibrouwoi-8818.vercel.app
+qasimk.com
+qfjfvseq.info
+quauwograssodda-3503.vercel.app
+qysgyp.com
+rajdipchatterjee.github.io
+rechazaroanularaqui51.weebly.com
+remote-fix.pages.dev
+renggard.47-243-192-240.cprapid.com
+resolvepanel.live
+resolving--issue--with-us1.vercel.app
+resqat.weebly.com
+review-business-case.d2f7p3b7pucnle.amplifyapp.com
+rlpqwefi.pink
+rouloigeilleuja-9523.vercel.app
+rulemec.pages.dev
+rutinqqwin.shop
+rwftfu.quest
+s.team-pw.cc
+sairanees.github.io
+sanseipecas.com.br
+sasklelo.weebly.com
+sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com
+sasktelcustomerwebly.weebly.com
+sasktelnetwebmailservermaintainance.weebly.com
+sasktelrectify.weebly.com
+sasktelscrutinize.weebly.com
+sasktelservicecentterwebly.weebly.com
+sasktelsupportsystemwebly.weebly.com
+sbcglobal30.wixsite.com
+scan-vulnerability-guard-v3.pages.dev
+scan-vulnerability-guard.pages.dev
+scanner-metamask-v1.pages.dev
+scanner-metamask-v2.pages.dev
+scanner-metamask-v3.pages.dev
+scanner-metamask.pages.dev
+sec-sign-in.info
+secure2-validitycheck.weebly.com
+securecapitec.theprimepoint.online
+securerpcfix.com
+seeteressecalywoi.github.io
+seivviice.weebly.com
+server.0e7p.com
+server.2rk3.com
+server.8q3p.com
+server.n6b8.com
+server.v9vs.com
+sevvviicess.weebly.com
+shard.blue
+shard.skin
+shared-d7590.firebaseapp.com
+shared-d7590.web.app
+shaw-101329.weeblysite.com
+shaw-101587.weeblysite.com
+shaw-106427.weeblysite.com
+shaw-107375.weeblysite.com
+solutionwebsitedapp.firebaseapp.com
+solutionwebsitedapp.web.app
+solvetans.firebaseapp.com
+solvetans.web.app
+sondfrom.dexlog.my.id
+soyokai.or.jp
+srdate.club
+ssy.hmb.mybluehostin.me
+steam.poweredartsworkshop.com
+steam.workshopsreview.com
+steamcommmuty.com
+steamcommuunity.ru
+steamcomunutty.com
+steamconmumity.com
+stepsray.vercel.app
+support-metahelpcenter-id100003498934.netlify.app
+sv5gardens655665.weeblysite.com
+system-portalnu.duckdns.org
+talwgam.njmolada.com
+taste.baby
+tele.zhngain.top
+telegrambot-resolved.pages.dev
+telegrazm.net
+telstra-100408.weeblysite.com
+telstra-100469.weeblysite.com
+telstra-103234.weeblysite.com
+tiktok-888.vip
+tiltckshow.top
+tnomwzrp.top
+toeken.im
+tonic.pink
+tooma.cellinsurance.co.zw
+tpdtepremu.xyz
+trattujeilesso-3354.vercel.app
+trbinace.com
+treibrukeukonno-1395.vercel.app
+tuesmad.firebaseapp.com
+tuesmad.web.app
+tyyyyyytyyy.weebly.com
+tzcsjfto.chat
+u.updatetrackgre.top
+uc-whatstapp-web.com
+udxcady.wixsite.com
+uklifejv.cyou
+updatemail12.wixsite.com
+ups-trackdeliveryapps.chickenkiller.com
+usbest.cyou
+user-transaction-overview.vercel.app
+usps.com-trackdck.top
+usps.com-tracklnv.top
+usps.com-trackmcl.top
+usps.com-trackmec.top
+usps.com-tracktpq.top
+usps.com-trackvmd.top
+uspsinfw.top
+uwdtsczi.top
+uwm-onedrive.com
+vaishnavi1436.github.io
+validatie-veiligauthenticatie.com
+vbbu.ldgknhk.lol
+verified-this-request-badge.vercel.app
+vo4zzp.icu
+vs41.github.io
+walett-cont.gitbook.io
+walletauthenticators.vercel.app
+walletcomnecitt.gitbook.io
+walletconnectdapps.online
+watranfart-fdd6a8.ingress-bonde.ewp.live
+waxed.wiki
+webmaillshavv.weebly.com
+weeeqweeattt.weebly.com
+weigh.skin
+weigh.wiki
+wgqdqvtn.baby
+wgqdqvtn.pink
+whatsapp-rqr.com
+wirelessvoicebtpaidmailinfoplay047.weebly.com
+wscs1231.cyou
+xn--metmasklogin-vcb.gitbook.io
+xojautruffeuttu-4659.vercel.app
+xraiz.info
+xraiz.vip
+xsuweamskeidjf.weebly.com
+xya46.cc
+yahoooooo-108560.weeblysite.com
+yavanica123.github.io
+yi5lq-syaaa-aaaag-acfsq-cai.icp0.io
+you-can-receive-here.vercel.app
+zeiitgeist.angelocachero.info
+zenixoikitti-5809.vercel.app
+zeznjx.shop
+zwzcn.com
+||alturl.com/hpqhv$all
+||ardilu.com/descargar/kmsauto-net$all
+||did.li/parcels$all
+||flow.page/servicesatttttmail$all
+||hdfcsky.com/sky/indian-stock/dashboard$all
+||hdfcsky.com/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!$all
+||is.gd/djgj07/$all
+||pay.zing.vn/pubgm/$all
+||rb.gy/go4bnv/$all
+||rebrand.ly/18ab5a$all
+||rebrand.ly/4ff03b$all
+||rebrand.ly/8wtcv4z$all
+||rebrand.ly/96a02f$all
+||rebrand.ly/c0d1afz$all
+||rebrand.ly/d2f265$all
+||rebrand.ly/eacc63$all
+||rebrand.ly/f9decb$all
+||rebrand.ly/mzhpkzf$all
+||rebrand.ly/nbyh9vh$all
+||rebrand.ly/sa2uoq0$all
+||rebrand.ly/tcthi8d$all
+||rebrand.ly/tnab363c6$all
+||rebrand.ly/wx1eo7w$all
+||surl.li/tvybxr$all
+||tinyurl.com/carrefour-926/$all
+||urlz.fr/t8vi$all
+||urlz.fr/t9ka$all
+||urlz.fr/talr$all
diff --git a/phishing-filter.txt.br b/phishing-filter.txt.br
new file mode 100644
index 000000000..6200ec21f
Binary files /dev/null and b/phishing-filter.txt.br differ
diff --git a/phishing-filter.txt.gz b/phishing-filter.txt.gz
new file mode 100644
index 000000000..794f02776
Binary files /dev/null and b/phishing-filter.txt.gz differ