From 6bc6ef0ee495f04276d6a7e47fff5fd8e21c4edc Mon Sep 17 00:00:00 2001 From: curbengh Date: Mon, 25 Nov 2024 00:20:56 +0000 Subject: [PATCH] deploy: d7145f19e1ecd9f535686ae8518c14a7d078741e --- .nojekyll | 0 phishing-filter-ag.txt | 462 +++++++++++++++++ phishing-filter-ag.txt.br | Bin 0 -> 5597 bytes phishing-filter-ag.txt.gz | Bin 0 -> 5820 bytes phishing-filter-agh.txt | 434 ++++++++++++++++ phishing-filter-agh.txt.br | Bin 0 -> 5247 bytes phishing-filter-agh.txt.gz | Bin 0 -> 5399 bytes phishing-filter-bind.conf | 434 ++++++++++++++++ phishing-filter-bind.conf.br | Bin 0 -> 5536 bytes phishing-filter-bind.conf.gz | Bin 0 -> 5672 bytes phishing-filter-dnscrypt-blocked-ips.txt | 7 + phishing-filter-dnscrypt-blocked-ips.txt.br | Bin 0 -> 186 bytes phishing-filter-dnscrypt-blocked-ips.txt.gz | Bin 0 -> 213 bytes phishing-filter-dnscrypt-blocked-names.txt | 434 ++++++++++++++++ phishing-filter-dnscrypt-blocked-names.txt.br | Bin 0 -> 5164 bytes phishing-filter-dnscrypt-blocked-names.txt.gz | Bin 0 -> 5309 bytes phishing-filter-dnsmasq.conf | 434 ++++++++++++++++ phishing-filter-dnsmasq.conf.br | Bin 0 -> 5369 bytes phishing-filter-dnsmasq.conf.gz | Bin 0 -> 5523 bytes phishing-filter-domains.txt | 434 ++++++++++++++++ phishing-filter-domains.txt.br | Bin 0 -> 5165 bytes phishing-filter-domains.txt.gz | Bin 0 -> 5310 bytes phishing-filter-hosts.txt | 434 ++++++++++++++++ phishing-filter-hosts.txt.br | Bin 0 -> 5304 bytes phishing-filter-hosts.txt.gz | Bin 0 -> 5448 bytes phishing-filter-rpz.conf | 439 +++++++++++++++++ phishing-filter-rpz.conf.br | Bin 0 -> 5373 bytes phishing-filter-rpz.conf.gz | Bin 0 -> 5545 bytes phishing-filter-snort2.rules | 462 +++++++++++++++++ phishing-filter-snort2.rules.br | Bin 0 -> 7437 bytes phishing-filter-snort2.rules.gz | Bin 0 -> 8012 bytes phishing-filter-snort3.rules | 462 +++++++++++++++++ phishing-filter-snort3.rules.br | Bin 0 -> 7345 bytes phishing-filter-snort3.rules.gz | Bin 0 -> 7859 bytes phishing-filter-splunk.csv | 463 ++++++++++++++++++ phishing-filter-splunk.csv.br | Bin 0 -> 5905 bytes phishing-filter-splunk.csv.gz | Bin 0 -> 6110 bytes phishing-filter-suricata.rules | 462 +++++++++++++++++ phishing-filter-suricata.rules.br | Bin 0 -> 7411 bytes phishing-filter-suricata.rules.gz | Bin 0 -> 7993 bytes phishing-filter-unbound.conf | 434 ++++++++++++++++ phishing-filter-unbound.conf.br | Bin 0 -> 5409 bytes phishing-filter-unbound.conf.gz | Bin 0 -> 5586 bytes phishing-filter-vivaldi.txt | 462 +++++++++++++++++ phishing-filter-vivaldi.txt.br | Bin 0 -> 5638 bytes phishing-filter-vivaldi.txt.gz | Bin 0 -> 5846 bytes phishing-filter.tpl | 437 +++++++++++++++++ phishing-filter.tpl.br | Bin 0 -> 5261 bytes phishing-filter.tpl.gz | Bin 0 -> 5405 bytes phishing-filter.txt | 462 +++++++++++++++++ phishing-filter.txt.br | Bin 0 -> 5533 bytes phishing-filter.txt.gz | Bin 0 -> 5690 bytes 52 files changed, 7156 insertions(+) create mode 100644 .nojekyll create mode 100644 phishing-filter-ag.txt create mode 100644 phishing-filter-ag.txt.br create mode 100644 phishing-filter-ag.txt.gz create mode 100644 phishing-filter-agh.txt create mode 100644 phishing-filter-agh.txt.br create mode 100644 phishing-filter-agh.txt.gz create mode 100644 phishing-filter-bind.conf create mode 100644 phishing-filter-bind.conf.br create mode 100644 phishing-filter-bind.conf.gz create mode 100644 phishing-filter-dnscrypt-blocked-ips.txt create mode 100644 phishing-filter-dnscrypt-blocked-ips.txt.br create mode 100644 phishing-filter-dnscrypt-blocked-ips.txt.gz create mode 100644 phishing-filter-dnscrypt-blocked-names.txt create mode 100644 phishing-filter-dnscrypt-blocked-names.txt.br create mode 100644 phishing-filter-dnscrypt-blocked-names.txt.gz create mode 100644 phishing-filter-dnsmasq.conf create mode 100644 phishing-filter-dnsmasq.conf.br create mode 100644 phishing-filter-dnsmasq.conf.gz create mode 100644 phishing-filter-domains.txt create mode 100644 phishing-filter-domains.txt.br create mode 100644 phishing-filter-domains.txt.gz create mode 100644 phishing-filter-hosts.txt create mode 100644 phishing-filter-hosts.txt.br create mode 100644 phishing-filter-hosts.txt.gz create mode 100644 phishing-filter-rpz.conf create mode 100644 phishing-filter-rpz.conf.br create mode 100644 phishing-filter-rpz.conf.gz create mode 100644 phishing-filter-snort2.rules create mode 100644 phishing-filter-snort2.rules.br create mode 100644 phishing-filter-snort2.rules.gz create mode 100644 phishing-filter-snort3.rules create mode 100644 phishing-filter-snort3.rules.br create mode 100644 phishing-filter-snort3.rules.gz create mode 100644 phishing-filter-splunk.csv create mode 100644 phishing-filter-splunk.csv.br create mode 100644 phishing-filter-splunk.csv.gz create mode 100644 phishing-filter-suricata.rules create mode 100644 phishing-filter-suricata.rules.br create mode 100644 phishing-filter-suricata.rules.gz create mode 100644 phishing-filter-unbound.conf create mode 100644 phishing-filter-unbound.conf.br create mode 100644 phishing-filter-unbound.conf.gz create mode 100644 phishing-filter-vivaldi.txt create mode 100644 phishing-filter-vivaldi.txt.br create mode 100644 phishing-filter-vivaldi.txt.gz create mode 100644 phishing-filter.tpl create mode 100644 phishing-filter.tpl.br create mode 100644 phishing-filter.tpl.gz create mode 100644 phishing-filter.txt create mode 100644 phishing-filter.txt.br create mode 100644 phishing-filter.txt.gz diff --git a/.nojekyll b/.nojekyll new file mode 100644 index 000000000..e69de29bb diff --git a/phishing-filter-ag.txt b/phishing-filter-ag.txt new file mode 100644 index 000000000..c1702883d --- /dev/null +++ b/phishing-filter-ag.txt @@ -0,0 +1,462 @@ +! Title: Phishing URL Blocklist (AdGuard) +! Updated: 2024-11-25T00:20:55Z +! Expires: 1 day (update frequency) +! Homepage: https://gitlab.com/malware-filter/phishing-filter +! License: https://gitlab.com/malware-filter/phishing-filter#license +! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +||1111365dh.net$all +||12931-coinbase.com$all +||215323.com$all +||260aesthetic.wixsite.com$all +||3650947.cc$all +||3659ll.net$all +||83291-coinbase.com$all +||94-103-188-123.plesk.page$all +||9825057365.com$all +||abctrvabc.com$all +||access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com$all +||acclimatizable.fun$all +||account-update05.myvnc.com$all +||accounts.google.auzen.us.kg$all +||activebusiness-unlocker3.com$all +||addwsrbh.green$all +||ahnp.vercel.app$all +||aldg.ldgknhk.lol$all +||allegrolokalnie.pl-891241214.buzz$all +||alturl.com/hpqhv$all +||alutipcentra.pages.dev$all +||ambil-pinjaman-daana-payleter.xforms.web.id$all +||ambulatoriprivati.it$all +||amev.ldgknhk.lol$all +||antail-conv.com$all +||apply-now-to-receive-badge.vercel.app$all +||ardilu.com/descargar/kmsauto-net$all +||artsea.pages.dev$all +||atmailupdatewptnskmdinfomailacct.weebly.com$all +||att-101072.weeblysite.com$all +||att-1041page.weeblysite.com$all +||att-105714.weeblysite.com$all +||att-105819.square.site$all +||att-inc-107097.weeblysite.com$all +||att-login380.weeblysite.com$all +||att-login522.weeblysite.com$all +||att-service-102155.weeblysite.com$all +||att-sign-in-105669.weeblysite.com$all +||attcom-100762.weeblysite.com$all +||attcom-106808.weeblysite.com$all +||attmailservicenow.wixstudio.com$all +||attmailservicenow.wixstudio.io$all +||attmailsrvrdesk.weebly.com$all +||attnewmaill.weebly.com$all +||attyhhhhiiii225.weebly.com$all +||atw-tau.vercel.app$all +||authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com$all +||authsyncs.pages.dev$all +||autoreplyattmode.wixsite.com$all +||avoid.hold-managert.com$all +||azbin.ir$all +||b45018.com$all +||bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link$all +||baiii-wong.cutvi.cfd$all +||basvuru-online-yap.vercel.app$all +||beionfidi.pages.dev$all +||bet73nn.com$all +||bet83039.com$all +||bet83054.com$all +||bfrescentremebermainsetreouytnoy.weebly.com$all +||biggggggggggg.weebly.com$all +||bitnode.pages.dev$all +||bitvavobtc.com$all +||blackhere11.serv00.net$all +||blss24att.weebly.com$all +||braucrarasuteu-2470.vercel.app$all +||bt-102124.weeblysite.com$all +||bt1business.weebly.com$all +||btuan-dan2-resmi.top1.my.id$all +||buildingdesignsusapdf.s3.us-east-005.backblazeb2.com$all +||business-page-property-897432967.netlify.app$all +||caipora.xyz$all +||calm-pothos-3b24c9.netlify.app$all +||carrefourarabiank15.pages.dev$all +||caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com$all +||catgirl-appverset-nya.pages.dev$all +||catxtokens.pages.dev$all +||chat.94-103-188-123.plesk.page$all +||check154109.click$all +||checkseven.vercel.app$all +||ciente-a.org$all +||cieplo.app$all +||cj12143.tw1.ru$all +||cj87335.tw1.ru$all +||claimyourethrewards.pages.dev$all +||clickbait.design$all +||cnsa163.com$all +||cock2-iota.vercel.app$all +||cock3.vercel.app$all +||cock7.vercel.app$all +||contact-pro-8291-d01.firebaseapp.com$all +||contact-pro-8291-d01.web.app$all +||creosrl.com$all +||curmmgdv.email$all +||currently541.weebly.com$all +||currently890.weebly.com$all +||currentlyserver.weebly.com$all +||dara3dccj.wixsite.com$all +||db.service4db.com$all +||de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev$all +||debutcan.firebaseapp.com$all +||debutcan.web.app$all +||delivery.attempt.failure.ebbs.co.za$all +||dev.stream.mornar.app$all +||did.li/parcels$all +||dnwqmh.click$all +||dropsmartchain.pages.dev$all +||dsjoting.group$all +||dulb6c5p5.top$all +||ebay-mallwholesale.com$all +||ebt-lilac.vercel.app$all +||echoredled.netlify.app$all +||elbarco.percentadnp.info$all +||eltritongourmet.com$all +||email.mgb.modento.io$all +||enjomugg.firebaseapp.com$all +||enjomugg.web.app$all +||error3456vhubhornbase.azurewebsites.net$all +||example223.wixsite.com$all +||eyeydhe.wixsite.com$all +||eyttueiu.square.site$all +||facebook-avip.click$all +||fame.pink$all +||fassehoizubra-7696.vercel.app$all +||fastdropchain.pages.dev$all +||fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io$all +||fla-1001.square.site$all +||flo4211.github.io$all +||flow.page/servicesatttttmail$all +||fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com$all +||fnuttlie.wiki$all +||fokeijonnekou.vercel.app$all +||fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com$all +||free-verified-badge-form0-service.vercel.app$all +||free-verified-meta-badge-service.vercel.app$all +||g06668706.wixsite.com$all +||gccndbqg.vip$all +||geriodememerkezi.online$all +||get-checkmark-for-you.vercel.app$all +||get-free-verified-badge-service-on.vercel.app$all +||gitanag.broke-it.net$all +||gruprocuroipra-6493.vercel.app$all +||h5.b9en.com$all +||h5.metacoint.com$all +||hcghij.top$all +||hdfcsky.com/sky/indian-stock/dashboard$all +||hdfcsky.com/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!$all +||hecregayatu-1014.vercel.app$all +||hejmtxxt.guru$all +||helenblunt6.wixsite.com$all +||help.accountsupportcentre.com$all +||here-apply-for-page-review.vercel.app$all +||hgbk.ldgknhk.lol$all +||hhideiie.wixsite.com$all +||hitummoinneullei-5882.vercel.app$all +||home-101067.weeblysite.com$all +||home-103465.weeblysite.com$all +||home-104341.weeblysite.com$all +||home-105266.weeblysite.com$all +||home-105929.weeblysite.com$all +||homeattatthome.square.site$all +||hpnefhqs.motorcycles$all +||im25.net$all +||info.supercitrus.ind.br$all +||ins-business-home-center.com$all +||instagaramgalochka.vercel.app$all +||ipv6.43-135-137-110.cprapid.com$all +||irmt0ken.win$all +||is.gd/djgj07/$all +||iujf7839iofvkbcu748.weebly.com$all +||iwimwmiwi.click$all +||jagej73796.wixsite.com$all +||jfdjy.com$all +||kalyani963.github.io$all +||kexoigrufouddou-5902.vercel.app$all +||kl1k-ds1ni.neupdile.my.id$all +||kliind08.wixsite.com$all +||kreelo098.weebly.com$all +||kremlcup.com$all +||kshitij12375.github.io$all +||kucoinglobal1.com$all +||kxbztydc.black$all +||labanquepostale.jupiter-analytics.com$all +||leddevotoze-3146.vercel.app$all +||linnkdna-kget.wxxzsite.buzz$all +||llahi.info$all +||llahi.vip$all +||loffaummuddote-4145.vercel.app$all +||login-att-10221.square.site$all +||login-form.world$all +||login-online-outlook365.com$all +||login-outlook-midstreamauth.com$all +||login-screen-103134.weeblysite.com$all +||loginaccount70.wixsite.com$all +||loginaccount77.wixsite.com$all +||luk6414.wixsite.com$all +||luxlifemiamiblog.com$all +||m.meta-accessibility.io.vn$all +||madebybmr.fyi$all +||maqpiexyz.click$all +||mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev$all +||mayfair313.wixsite.com$all +||mdbrvlfy.black$all +||mesageriepro33range1.weebly.com$all +||metamsk-wallet-3.gitbook.io$all +||metttaa-audddt-new-02.firebaseapp.com$all +||metttaa-audddt-new-02.web.app$all +||microsoft365-storage.github.io$all +||mikepattyjm.wixsite.com$all +||mobilemidasbuy.n3g.fun$all +||monespacepro-client.3utilities.com$all +||monetization-violation.github.io$all +||moodengsol-net.pages.dev$all +||mwsiekdnfjrdufs.weebly.com$all +||mxmxnmx.mx.zya.me$all +||national-au-b.com$all +||national-au.net$all +||nbaaiqjq.group$all +||nexomyacwv.weebly.com$all +||nft-time11.vercel.app$all +||nichcheck.weeblysite.com$all +||ns1.carrier-ast2-portal-apple.com$all +||omadshf.ru$all +||online-assist.live$all +||online-promo-asb.org$all +||openkimono.pro$all +||opportunity-verified-status.vercel.app$all +||ourtime.reconnect-dating.workers.dev$all +||owouwuowo.click$all +||p365kf.com$all +||p4zv8crnrrha27so.94-103-188-123.plesk.page$all +||page-center-manage.com$all +||pavan-patil-22.github.io$all +||pay.zing.vn/pubgm/$all +||pecinternational.net$all +||peesom.chat$all +||pencairaanndannaa.my.id$all +||petty.wiki$all +||pimnhv.group$all +||policies-business-page-service.com$all +||pottatrebewe-2808.vercel.app$all +||pqo.hrf.mybluehost.me$all +||programming--service--panel-totlyy-free-for-you.vercel.app$all +||promo1.spik.ru$all +||protocolsecure.pages.dev$all +||pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev$all +||pub-1778406e4fec4394901793111c187dd9.r2.dev$all +||pub-19b834342e7d465b9f00b3511325a081.r2.dev$all +||pub-21dd4dc659614ceb93e45a6de4434502.r2.dev$all +||pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev$all +||pub-2fefe932a6974485b987c9ba851b5c40.r2.dev$all +||pub-3a46d9914f494078a6d6237513e7a096.r2.dev$all +||pub-442ed822851244a689b3472ea2c6a950.r2.dev$all +||pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev$all +||pub-682ad3b65d944376b919745aae3c56d4.r2.dev$all +||pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev$all +||pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev$all +||pub-7f5cf36445d042168bfacd712e890dc0.r2.dev$all +||pub-803839714a924882a7bcc2495a26860f.r2.dev$all +||pub-8161de4a277e4ee8b532af34954224e1.r2.dev$all +||pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev$all +||pub-8376b5b2334844d193a525d8b8548fa5.r2.dev$all +||pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev$all +||pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev$all +||pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev$all +||pub-9163a97d70394cb499bdd232be6c2169.r2.dev$all +||pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev$all +||pub-98171471e0944ac3a5820ef719bf0640.r2.dev$all +||pub-a263e0790935412eb10cacc55bbced18.r2.dev$all +||pub-a291041b077742899b63a9982f04a56c.r2.dev$all +||pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev$all +||pub-b50adc5d699a4f08aec37102c2103da7.r2.dev$all +||pub-c0a934c950e441db96b882789f53c9ea.r2.dev$all +||pub-c2c250050109456396c933de259a4fea.r2.dev$all +||pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev$all +||pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev$all +||pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev$all +||pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev$all +||pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev$all +||pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev$all +||pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev$all +||pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev$all +||pub-e42cb528b102447385e3145197916f51.r2.dev$all +||pub-e4aff507450c478cbe3f77ad23d75035.r2.dev$all +||pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev$all +||pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev$all +||pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev$all +||pubgm.club$all +||puffagroibrouwoi-8818.vercel.app$all +||qasimk.com$all +||qfjfvseq.info$all +||quauwograssodda-3503.vercel.app$all +||qysgyp.com$all +||rajdipchatterjee.github.io$all +||rb.gy/go4bnv/$all +||rebrand.ly/18ab5a$all +||rebrand.ly/4ff03b$all +||rebrand.ly/8wtcv4z$all +||rebrand.ly/96a02f$all +||rebrand.ly/c0d1afz$all +||rebrand.ly/d2f265$all +||rebrand.ly/eacc63$all +||rebrand.ly/f9decb$all +||rebrand.ly/mzhpkzf$all +||rebrand.ly/nbyh9vh$all +||rebrand.ly/sa2uoq0$all +||rebrand.ly/tcthi8d$all +||rebrand.ly/tnab363c6$all +||rebrand.ly/wx1eo7w$all +||rechazaroanularaqui51.weebly.com$all +||remote-fix.pages.dev$all +||renggard.47-243-192-240.cprapid.com$all +||resolvepanel.live$all +||resolving--issue--with-us1.vercel.app$all +||resqat.weebly.com$all +||review-business-case.d2f7p3b7pucnle.amplifyapp.com$all +||rlpqwefi.pink$all +||rouloigeilleuja-9523.vercel.app$all +||rulemec.pages.dev$all +||rutinqqwin.shop$all +||rwftfu.quest$all +||s.team-pw.cc$all +||sairanees.github.io$all +||sanseipecas.com.br$all +||sasklelo.weebly.com$all +||sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com$all +||sasktelcustomerwebly.weebly.com$all +||sasktelnetwebmailservermaintainance.weebly.com$all +||sasktelrectify.weebly.com$all +||sasktelscrutinize.weebly.com$all +||sasktelservicecentterwebly.weebly.com$all +||sasktelsupportsystemwebly.weebly.com$all +||sbcglobal30.wixsite.com$all +||scan-vulnerability-guard-v3.pages.dev$all +||scan-vulnerability-guard.pages.dev$all +||scanner-metamask-v1.pages.dev$all +||scanner-metamask-v2.pages.dev$all +||scanner-metamask-v3.pages.dev$all +||scanner-metamask.pages.dev$all +||sec-sign-in.info$all +||secure2-validitycheck.weebly.com$all +||securecapitec.theprimepoint.online$all +||securerpcfix.com$all +||seeteressecalywoi.github.io$all +||seivviice.weebly.com$all +||server.0e7p.com$all +||server.2rk3.com$all +||server.8q3p.com$all +||server.n6b8.com$all +||server.v9vs.com$all +||sevvviicess.weebly.com$all +||shard.blue$all +||shard.skin$all +||shared-d7590.firebaseapp.com$all +||shared-d7590.web.app$all +||shaw-101329.weeblysite.com$all +||shaw-101587.weeblysite.com$all +||shaw-106427.weeblysite.com$all +||shaw-107375.weeblysite.com$all +||solutionwebsitedapp.firebaseapp.com$all +||solutionwebsitedapp.web.app$all +||solvetans.firebaseapp.com$all +||solvetans.web.app$all +||sondfrom.dexlog.my.id$all +||soyokai.or.jp$all +||srdate.club$all +||ssy.hmb.mybluehostin.me$all +||steam.poweredartsworkshop.com$all +||steam.workshopsreview.com$all +||steamcommmuty.com$all +||steamcommuunity.ru$all +||steamcomunutty.com$all +||steamconmumity.com$all +||stepsray.vercel.app$all +||support-metahelpcenter-id100003498934.netlify.app$all +||surl.li/tvybxr$all +||sv5gardens655665.weeblysite.com$all +||system-portalnu.duckdns.org$all +||talwgam.njmolada.com$all +||taste.baby$all +||tele.zhngain.top$all +||telegrambot-resolved.pages.dev$all +||telegrazm.net$all +||telstra-100408.weeblysite.com$all +||telstra-100469.weeblysite.com$all +||telstra-103234.weeblysite.com$all +||tiktok-888.vip$all +||tiltckshow.top$all +||tinyurl.com/carrefour-926/$all +||tnomwzrp.top$all +||toeken.im$all +||tonic.pink$all +||tooma.cellinsurance.co.zw$all +||tpdtepremu.xyz$all +||trattujeilesso-3354.vercel.app$all +||trbinace.com$all +||treibrukeukonno-1395.vercel.app$all +||tuesmad.firebaseapp.com$all +||tuesmad.web.app$all +||tyyyyyytyyy.weebly.com$all +||tzcsjfto.chat$all +||u.updatetrackgre.top$all +||uc-whatstapp-web.com$all +||udxcady.wixsite.com$all +||uklifejv.cyou$all +||updatemail12.wixsite.com$all +||ups-trackdeliveryapps.chickenkiller.com$all +||urlz.fr/t8vi$all +||urlz.fr/t9ka$all +||urlz.fr/talr$all +||usbest.cyou$all +||user-transaction-overview.vercel.app$all +||usps.com-trackdck.top$all +||usps.com-tracklnv.top$all +||usps.com-trackmcl.top$all +||usps.com-trackmec.top$all +||usps.com-tracktpq.top$all +||usps.com-trackvmd.top$all +||uspsinfw.top$all +||uwdtsczi.top$all +||uwm-onedrive.com$all +||vaishnavi1436.github.io$all +||validatie-veiligauthenticatie.com$all +||vbbu.ldgknhk.lol$all +||verified-this-request-badge.vercel.app$all +||vo4zzp.icu$all +||vs41.github.io$all +||walett-cont.gitbook.io$all +||walletauthenticators.vercel.app$all +||walletcomnecitt.gitbook.io$all +||walletconnectdapps.online$all +||watranfart-fdd6a8.ingress-bonde.ewp.live$all +||waxed.wiki$all +||webmaillshavv.weebly.com$all +||weeeqweeattt.weebly.com$all +||weigh.skin$all +||weigh.wiki$all +||wgqdqvtn.baby$all +||wgqdqvtn.pink$all +||whatsapp-rqr.com$all +||wirelessvoicebtpaidmailinfoplay047.weebly.com$all +||wscs1231.cyou$all +||xn--metmasklogin-vcb.gitbook.io$all +||xojautruffeuttu-4659.vercel.app$all +||xraiz.info$all +||xraiz.vip$all +||xsuweamskeidjf.weebly.com$all +||xya46.cc$all +||yahoooooo-108560.weeblysite.com$all +||yavanica123.github.io$all +||yi5lq-syaaa-aaaag-acfsq-cai.icp0.io$all +||you-can-receive-here.vercel.app$all +||zeiitgeist.angelocachero.info$all +||zenixoikitti-5809.vercel.app$all +||zeznjx.shop$all +||zwzcn.com$all diff --git a/phishing-filter-ag.txt.br b/phishing-filter-ag.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..e5ee91eb5783d75e930f2613c0b6420708016fa5 GIT binary patch literal 5597 zcmV<36(Z{4P}GT{q}Bcq5ygA}G*TAM-yb2v-1lqN^S{5F)!Y|;h7mEeKgDf~1(aGX zsiDxe&wFU<|2R2cq6pYV1jxA*mphlA_xHNYHbCW7nG|KxrA!}gkxLg<-uwS+@=Y_6 z*EjjcvP0TKt?ipx)0e&u*JqLs6*!>H26j&lY~+vvh&>gR?G0~OrMioa;p$RmA{@B- zw;0`jee#kP(^KZ>*JX=)x*ZpDN{oy$N=Z~LXfAh{%u>Rqf`f_l8{Z3w)ul1sciD>V1px!YV zHvGe{ojDK2oQ>FnX~aGO`~?L?IWyn6STt+6jk?!?FEw?5m3L&a@}hUA$RyLy)7UM;EUmrWcJV&D%YW#8d27ocRHub{ zJcR1C%pU6@TbqZ&wGZqAh+Nu;R&nuyQFv?ctu|3|x zbRshg(IWef!P4Np!MUpzv&#X)BE%kZg?d`_5^{cjJ?}Q@-FC$NkUsgx&+Bn3$)^K+ zB$U~U$D;Z{^=go&eLl1u+=^$T6?=Z|=iTzglY9P1Gr#Wlsu1gvFw zAsT;|uRpU;o$BU3-fff+8huc?dH&q{aaO}q=R+-0*mC(Of89jU-tOhxEps9$x$lgA zbng=#`>JRMikw`bx?YVV?I~!Bg5nh$r)l|#*c627x_Ro!uGsYG9?(0qaPwli#MJ%4 z%~7HpkJ5u#&f=tzva?0Ri>|OIsOi1$`%XmE_v2ToOE5H^5X0=f57XI~d^gy~?Nj%@-`*=7U`9gyMw-?>>bR|EeUJShDX&#J`EjeKcqIBh zh)7&1ZqhbBN!ry#cd2J9O<<28af6h6^ad%#l^iukC4)Tc7|Va?$PeA=CHP$9fE!?< zfJ_JmG*|*qtjGmZyE&%2=eIGm{ZNu{#;}S)RwF*)Oor_%;86RH1(lNQJi6;NZ6xDs z?FV2Xl_XQ3*#ZS>V{D=y=B~j&%-oS)^jH-F z2nc+M+A3tX%Bp3n0!Uh->qd$6Dj5$SG<^n4XF@w|D9%G9Mm&~z(ET#a?Xa__^{&tJ zS)iN>$oKsTt-B8*C*D&P+Vq2678Ru+{+(qgU&KHxl%!)>(*OJ za*$GTik$^hMN%xZPb(p8?vw|RlU~89F5&NSP$NjAxS)@vgHi8;m;U!wPFBmg;CQYhKDn-Xf?xNMAr#j>gxsys9uj%Ua72SsEwW0 zdZsrirm=ru~A=9V6=W@&^zpG0G-v`Kz|y6u#PXC)a@iBM9?BPTt5XXxpc z8c`gtSJ+t}jAFFA@7eA^krypjpNS18G(OpVUh`(MV;&_MeY4QOEgTbQZG-tQ*VaPA z!UIJG=Yhv1R6*y_iJnJ5Z=l#D51ekgm?i4eNM^)^IK?fs5>O{2n^`h!MymADk?{=f zqhN1B+qRC;NL+5w4u2*+jMKR{v!{YYmcyqNbS21IhdNn;`d)Kic)am;JI01$Zb%Kz zGM`qlfRl13mRTX7%;+EiE7Xd6qE9mg#5^ri!<#Eq?tBmZ9=ks43StBR5P$qCCtj-u z5Ee+1&0Twn)dNy3s0!WPr=eF$+T`+LM!Irs{vLv&0{@WZf>@&geZ<(H_G5;V8M};A zQPSUnJ}h*XtY2HwzQ)Gvsgc_c3a?cO6Ioa=e+~1x^BMPry z_S-?-eP&)3K+~@AyRMD5s%`l`C|~0(LWtK*d~Z77S^wNf`)8GbTm2K?8~-g%oRj{~ zy@mfH_a}~AKPaUZHS}8hzhA9Uo>1FmUc4^TZ#nEb{=_Bgs20EOyIgg2|BzI{;n#lu zEN=|jf*ahx&5kZKG~DyxGw}P(a%=dahC6zU#<$390|2c>dStq^oKs=g?xdSvP&gKV zO%PrZpQNf3L7O?86%qHH91`JeB8XcEiDJa&J(3t7kNy_-Tmv}8l<11Lf`Az7uVwt*JSeni!Xko&L?kt3$Y|BFTs?JMw6Q*$z(>og>A)Jduuq z=u@}UuF6p`c-wMtE$U88Pu1&rEH7`;j5zK$Pz&~Yn-Aa4N-LH|H{-tW(w?DQ=19(Dp(Bv8^Vc|NTx zv=G`l45Jv-Fg~I{Z4yp7-@eBMgbEZTfabB@MNyZ9NR6jdT)f+qibQvcKo0qWQ^%c> z%#nb6xByBI_)SHj-`sV+ljwA3vmMjmmsG{__oR#!2m(#*$d8Rdt2GI?JY9ETxuhh| zu?CYsgUxM1k?T$2m0y|geSe10VLHH-V(CPJ0F|0;C{l(i*oY`z1TjLzg6`%7xc5j! zD{NXdI8#o)-t4FcR9w9ZVJ=DQi7b_^26eMSJ;dc^H&_f;K&;Zc6_A-RLOy7_YClJH52)HP-;-uvNQxu0MTg2RI^1gOO=hW`1golgkv$(eUl3p{s z!#jqz3~%|lL55+)rZ{&I(1a-~$H}UuYBT`!dcG{W8bo}jaD%; zvOA>oFwo3cm2@3(5?*HIULX!A)YzQu!*VHrtNZFAp~AopwNhni54%LthijI-vw&(O zGN1^2o`XV)N#>FqAlZXjB);icLdPjeBvLDdt z!?JAF(|D|f`_tv&b3SZ|rR>npHA$!7U%I+eIkWuqJ7+i{iVRF%^nD+*GTic$<$-7X z&dqG$+p!((B~GE8LVmGl#F~PXoM}g6q6I1dF}itVLs%_~GBV$sRmDsp?q`Q$y6%k# z`6Od<?ZNc%kSO8Sc#zlV3^hWtHJpyzjK9%6*@z&Uw%evlKEyTsix$f)o4u z=3~5ZI@puSC|NTd-A}s`9)Q6h{HE(jJzVBygi<{sti7FQJt#W>F6)SPT_0#+f>D+} zRNChGF?16SE80OX!_ujF(Ml<+9858;~lv%m^T3 zhoPe_o3cK77CDF%Rq12|Ur5FTKxNaa-5NAw(TSumErTn)zz622bf8v~%M%buiLx6y z1E)@9(ltgtjOvmp%4B2GYUJb!&Mn>UPFM6}Xsmp9a zWa@?<5=@J{Eoyy@!x-xW-6W-TtNKqeo0)(xYXtNW>WFwbPn$l4q`Nm+oih~9)V}Uh zYTBif^lC=rfzAr8mUNq|jZu|ahk@0^njuq%n!SZbFwYs4UGKSR+2dvt5dt-vWfP`Q z+d(|yK4mV#=+4uTh5bLQ))oSLD;6=;`y^X^U6F9q# zV#8*%imcH4%H>nP{bzf5VbhijGdqohnGH>i23vJmDbu`=W-nKx6rr}dshtK6=oSMZ zxQ5f3ki=A!DV;RLNf{eR2Dsa>DH}Pu_W-Y?)H#DjHAk2$tBFlps(C=C;?-$^d1xX< z4=@8!b3~nrS7ouwOLY*NlLI@=kyh2JyF7xJ3_4MwF(jy5*oi@**W1V9o-SXDn-I4k z(U^rx#1k-u8(ly?zBSJ6_xW#A*Cqm-E^8{2)1jl&_@02}r`1yVr63c@?qj;ID`q zQq<&vrs$^=LN)00Jea?bdmVRwWD+FB67>(DfcTGuB{!UMd&UL+r&Rt|*?(^Lcdbp8 zm8AXp{JC!D+J1iO`Q;~L=-z<94fw67l$hsZyWH>Z?ec-{WiC1I^;pjja5H_=j}M&g zHmBPgsmTv6X!n<@V`x0h;g_SfTZKyjBq42t!;kNu`nlE%xE}Gy#(BSe!Kkw5_+1yw z@JpP(zJ89^zF*d5fBcGzyv0CoV~csUzrA?!+2c}=cTGSSLE%i1&fBxRrZ6t)Q?e*HWjzz#2duSy$m&<|u z8-w(Y{x9b;re6AGucPUe8724%PfTCW58;9HAi(}lJ0+E;6t*Ufbb50ULYl{?zqM3D zLJbk~birBWLJR^fIt34w^Dx1ZGby4FxGR8{!l-<^l?j%HBY2247V5_}tRCHN1yeeF z&tndu(eu`Hrvpf)BA;P+(d;{jqVl!gat}t-Gm7FfuXA*x+ykMb11Ez_4(4@7{?H$D zY_1whH$M?=3L!MU-5Q&qP?7~PN8aEBs!&J7aRc3z$hE+|Ownl%$2{m@sgO@6w^u4s zr-$XS=mG!2D-L~-r*A%Q^ImN9b6o2u3uB$eangU1DV7Rdrx}}c%^ogRndz@)@Ye=G z#%D+#97KTojkw%+!w%-5NBP;~h8K~P@8AStxSLI4L0Kp!SL$)}Cx{+lDKNNzM}{=u zmmU5*A*CfdA>C_xrpa`0I>h7g&}dmqo^5y8;40EWiZ}9KLp&}QOFw;ksuWYWJ|&0K z6DmtvDaBnxx8o_h!Dhe>~%8Ejxmo84U~!JqGNG;B5g7%m4w!#{$Fr0 zS}JFGlT?sQX$Q6=#h8TB%NTf48rA@Aq%$8b9|qq);7`S5TZKQiK37h%UUFK6CF#ge)n>&6z5qJYDCfKceI zW-F6IX2;m0uAJ@{%*XQr2J3+i@M13*=hu0i!EHxz9Wqth<+$1p9nJ|NMRaFJ8gOjOC~`u&;mw?oW1x4#We;~Z%o(dxZB@NiqfNY{SXqIP zChGry)0+Bz$#;4}g@8*>xVV@0zSy$jHXtqGQo-Xs80nqpAZB!yZ?{CX%O^hHob^th>toS-ou>*6 literal 0 HcmV?d00001 diff --git a/phishing-filter-ag.txt.gz b/phishing-filter-ag.txt.gz new file mode 100644 index 0000000000000000000000000000000000000000..4abe23e9f91de0cd13b0240f8b7415e3278d20d5 GIT binary patch literal 5820 zcmV;t7DMSDiwFP!000021D#u0uj{&Xe($e1LE9h&Ds9cf1%eJ}(LUs%Xp@(|1RQ1B zk|>LmY#I6S{peBNqR$QLd(R#g7pFCTi{$>zk3TBgieG;G*G`$8>YE>b`tLvd_}5mm zL#vGa@w=Et7~PORX+{79lC3*tCP@;^q=FG=)Ep8qe}|NT6uQJ7zT z#6LJ$e*A8_^8b*dI8LHxiyPxVbteYWV8WfXgZbs_tHJz)hD>)~9cfQw6oFK&730@% zU()?|^!|flqBsAa&VSq9x?+(3(bLG>GW8((E1T>8k3TThZn}@9EZd2;J&d}!kgtbq z!ha){P=ZnZ@|PH&w8;4`?1lY1(zcG4)M*?rt$N4gM!Gj7ah@jWnovYU7`qczvGAnM zM%gt#29D~i3>kY7>b6}?Ri#PoovMarqBMxBDu^-V&`ZtPG*tZ6V`_=jqZ&pvL#&~)&n7YZ*56x#Nto{EwOodwU4mYp0;_{jFabdZl<-D) z1T%8gPS>4rVHg=3GJYL8LnicnnI##m5uQET4)fo%d>U+T4jos$)Q$=jTkKEJc3H2@ zS{M_|DY>_O^N?G67Q2~##*vrM(9hbdxDL$`Ax?yjVb!R5=IlAD%g+PA0aTw>(XVji z$xpUn#5f~3VJ?J;{3m>>>9Huc=%T1U^5GY-L}iiu3QJK%)khYmnftnNUH5Z;>PG*h4cDm&O931^eyKcQu)rV@l|4OqwimO#S zC32xck-jV2w(W{J8HZ&eyS%xWU6M3ssSbqZN~C9@3Yqk2-^kgV^CSz^AhA{#J6hEr zo&!Rd!AT>XvB}OVWRgFd%sh=#pnLF(U?H9eiM8lnDy}x7pu(1E->=s$Y?Vf7y&>h< zngoDguE9}sf{GEgfJBYo^t9MsFI%ls)x18wW^{upHVagChBByKXBdhAbl8be#Bu0M zIf_aA&A=ek+?h)*y)-M`UJ7rbSkuZ zh>;*)d4Nu;MHp@1SO^WUYcg;dniTml5X9IZLPn+79`<+DF#qI5E7m0VVPVMGlY`Rlw~o|Lu=25ooR1Sw52R(rdRqmY1H5EX?PAL4wY7zV#o z9Dr*;7SfR75~oR)=2?-KA&(oFTV9h%osuae-QZ@x1gq`9#~U@a0jTH=;|cnOc&4#u zs}F#I+om0{;jcj_KthJ)XK@6J2A({u=|;>zCL0T23WhBL66&#ek%m^UdG-!Rq@g{< z;W#~sRhg#wH)2avw?LS}?nVK)%RO6hD}$5U@Maeea&JgntYHxYP)Y)&E%7WHZKOtU zd!DUT9sQ)$c|1_ohJnLcQ_k4l6VEvf?>R5ybWImYDy1xfqGBw_NXh~l7j=+ToDviU zCCMmUGDt^rT%bo0A1fK2^e97@L9Pm$pJUO!%%H?!x68m0r{gYzJTeYZny z_S(9l3BY-Jjy<)sVEK@{Xm+Pze+x2W+n$gkg(2-)*a9K6bs%wTb%O1XdU=Zkz70E~ zrC7fX2iFTG$AR`8;(RvSQCZ|b_);g<`S@yLVb{>mrSsmdu#D*Ux|@)3{7QK?zbi$I zqaM>NFJ@GiSn&;okPGwzMrT`Qm2t$`1vrr){%kEzEMh^J^tM<#2{n13tRzfOtq%d2 z)$pc3iE1GnUdTWaW5iCY%Y@_>lto=^g$^F;6z|u$+#5-PoZu6>`x%(Iz2VCTOHUo(yA>Mu+R^HJ2@9YWhg@M; zf*Mhf-V6|pSxHg$lZ7EU0Uy+ZhJ>N^y6?q7dvK;4@|2o+;OSy|S*G+5HzYcB6+K>- zBvQj^8(e^QL~yI41-}(sfh+T(M=9W$=B*1XmfZV&?9oI;QB-AAc&w#itmpLDgs_MQ z31h?FJN!2u#6^WS4ESud!8Oal-4AZ9!QvB!WAkn9QQ>G$f^_NtC=TfeK?eweFJEZJ z326el(Oe zZA3Y>?ed$)S_M*QLr{`Tu7=J$LKFMWp3gRHrYE)l{1QEF;W0jwao{X`oW@K8kf6Om z_BWnU1h+#4XChZ(UD^!qIRpJ>~cj9_- zP<$xc?+huxmd#VRe7&!fZp$^mn1$+aN}@E z(gEg{zmf096?(EQaL)V5_MPL_6m*K;P_H}C*>D-=&WBxWh|>=h`<3w?22t>D75~Oi z`WU7|k-0NTPsyV`F$y$VFob>dXGYfk=tX!-O~rdvOZjtbPdY=Y7ZH zonoUlT3Q&2OZKBXLH_P^ojQoYoj&e6-+r(89mYfqotCgqo7J60rx9!&vUDXbB#(F- zrjvC#Q*UU~F}f=ecRU%)O1HOz%FR-=t3w*2TX)XBRm{mK0VkFFkx$Zdj?|sIbKjjq z{C`;p4CzkquhWqh!V1=9?25ihGpJgKI_{5e)m)D-+AV~g=Iyk-w1IU+ZoKvPUa{R3 zPWqj!H;8j&gy|q~8Jh$SZIJ8f&RcD$VfAJwU&kZ&K!7qv85_D<_`Lxd=`@<@>NLh( z0v;4}fm(6YPokT0>fvTDEPKOn+ufjqbQ=xb*%iPEvjM6PSNI}Q9mKd+mOkm}G~w%; zOAfHagIsNF$S!lm#(o@kBq@#l)sv|!)VgK%`x*0kG%^F$!kSeZB+16U2C{?~x7@k^ z8YbFwk32mHrrd}RgIHO^AcWCf=uXX^lpaOiNDx1`iy`DKQx5RUWnEPbs_S?2n=uU< zB7uhl?`M;b0%x@!?T{1PAN6yPxJ!(UN`|8jcca7_0BBLt!Wy1-4=pzUJDs~5epV)! zs~2rxwQZN>R>OR(a;{c{BsHkR%k)4*-Jsiht@+(cAy|N>LlG7_XHFkMYp$$fK3 zAw``g1iV>RVOdqlYD%g+ra8-^ZI6^>1+P&N$*j(zvciH2hmPV@lq3TD+w{n=XI>=< z#!Rw|6je>rtV{$+SV8LCGe;4ToD;!{n361#kT0uqUKJvzRh)5Ok18QNrA5wbNT)1l z9b-c|At=`Jf@hu{P;Ej96kW)SaaO0Klr+XFi=-xrM^+^hg>dJEB`2ATd6fytBPr_~ zw5m)!J!H;gT4Y(yqb!Mwib}$G32UqBh%?VVswf5iF5`^UNrozll$5a~!xTwT6_NDx zh>I8|foN2UOhEHFv?)_`$&w@!v9AX(b%bKJf*z`b)|}-6;)W5Vyb!)QoJ4bq8aS)6 zjK`2wo1Tq zaCihQvoa#KD5y3SQCUZInrE;L z8b=IxGS4Yxg2$DwN9}IdvGcObk_y{!`>LzNNjfi>rw1v^96QM=Ng*vl3!Y>N3>og5 zQsL1c%_9QC;6+`-+M^1)PD>O45LA?MQf_;&2+DPy8X-c(oI>@m;Ie{?rK}dj(*vXB zQ3MS`Sb34w1>7*@BFWvH-X3WUGbw9$AJ0T2D2$2aGRtB0apdzsmeROJ~!O|j$YgVKQ z6uIre6PS1gLq{~oDpnH2-ZX+jSVBl$_CuMqW< zI1{-BuF6@&rpkLmUV$O zl08@M@ZSO$?!~rn8fn-pUyaUaKRv1@o+^yX=O;#WQnHmt8&Ywhe|PlRie<2FvVD zRov6i6Pgw&E4EFib1ZaudNx267cy$nPc0eAaZ)Pr@zoKbn%mgfbf=vXI@f3dGJre6%pgSdgA%FKEAcV%s zA*JOovEDuX^IiOp?QlE^sn*w6aE?~1MyR$G)1Cx%o_I`qoKV3FwiO6U_5OG~sXjEj z=Uu^gl2%UPaT4ZH@tDvG(gnlm^-9yY3aCeIv~deVdLtAnDsnvmcpcChVh*in^;RaX z#fp|STtHd(cQ01qz8Irjke{|*Ak;i7 z+xNiF{*uKY&Ej$=y(;pKga940%=ll%W8&{wYK0?i2hB+C53u{rv?3cZ>h95fA6L z{kXJX5#T?w|alyVYLm2COFuA7$o*sQS zb?SQqCML@^McqT*)!*Iy>-~UF@i@W(ec5@T=VzjsbC>5uZ;CuG zKHYuZ!t4FOwVy&hu>*(ZUgxEtpBl)l-*>ttoUA%qV%+Tzq056Hkhd?pzHx6wUKj6< z?2h25w!s}$Yy<0^>C&x^9bFo*R|N&5W8C4W?9u* z=1k?Z-j3>*$E*M6Ysa8YiU z1Fi@1vjd0S0N72d2btKDwbLHR2Z2ooDJuP~RoRic8>+Xxjsi8sbP&@)_q`5cRA`=# z06!h!AH4k0`tIX)xqjTYZJ@OmX7w^_^57$afNH9}YPg3NZP$E+i{Ab8p-qwdg)@PhtJfCnhso^Vxl&Narg#y|uOd z{IRWL?dLX!0Y0?Z;rOv_?)bMhAd$7ZOeby)yQnu(7wBH_5#nBnb|%W~dNQjxON$Md zxS|{JZ!5Z=+B;d0v`4uXRv^nc(^-YQ}#0>z7$)m&*_;_E6Pqvh4%4 z6KRFD?yqd@_8Rkc!MR$b9zAzSH!du`7fjiY!`v^L_|-Dsu-SSE?z2ed#Cv*%V11c8FfJzlZCR@Lm*Kb?QAE69v9oLRS>lUQQWQ8Vcnr6OO%zKMHyz|B#qaecJ2e0RUL@F zUH#9DZe@Med+2MNq!dWzQ{YaHw<!QVNZ=}+#~**W7hKyN zUW8H>^)#ZDyTxxcBPbz8z25Xi^y;jkXlvcetf=-4bLsczbya;iUD)g8-v0rjneBCp GIsgDuxH3)v literal 0 HcmV?d00001 diff --git a/phishing-filter-agh.txt b/phishing-filter-agh.txt new file mode 100644 index 000000000..7e2b062ee --- /dev/null +++ b/phishing-filter-agh.txt @@ -0,0 +1,434 @@ +! Title: Phishing URL Blocklist (AdGuard Home) +! Updated: 2024-11-25T00:20:55Z +! Expires: 1 day (update frequency) +! Homepage: https://gitlab.com/malware-filter/phishing-filter +! License: https://gitlab.com/malware-filter/phishing-filter#license +! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +||1111365dh.net^ +||12931-coinbase.com^ +||215323.com^ +||260aesthetic.wixsite.com^ +||3650947.cc^ +||3659ll.net^ +||83291-coinbase.com^ +||94-103-188-123.plesk.page^ +||9825057365.com^ +||abctrvabc.com^ +||access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com^ +||acclimatizable.fun^ +||account-update05.myvnc.com^ +||accounts.google.auzen.us.kg^ +||activebusiness-unlocker3.com^ +||addwsrbh.green^ +||ahnp.vercel.app^ +||aldg.ldgknhk.lol^ +||allegrolokalnie.pl-891241214.buzz^ +||alutipcentra.pages.dev^ +||ambil-pinjaman-daana-payleter.xforms.web.id^ +||ambulatoriprivati.it^ +||amev.ldgknhk.lol^ +||antail-conv.com^ +||apply-now-to-receive-badge.vercel.app^ +||artsea.pages.dev^ +||atmailupdatewptnskmdinfomailacct.weebly.com^ +||att-101072.weeblysite.com^ +||att-1041page.weeblysite.com^ +||att-105714.weeblysite.com^ +||att-105819.square.site^ +||att-inc-107097.weeblysite.com^ +||att-login380.weeblysite.com^ +||att-login522.weeblysite.com^ +||att-service-102155.weeblysite.com^ +||att-sign-in-105669.weeblysite.com^ +||attcom-100762.weeblysite.com^ +||attcom-106808.weeblysite.com^ +||attmailservicenow.wixstudio.com^ +||attmailservicenow.wixstudio.io^ +||attmailsrvrdesk.weebly.com^ +||attnewmaill.weebly.com^ +||attyhhhhiiii225.weebly.com^ +||atw-tau.vercel.app^ +||authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com^ +||authsyncs.pages.dev^ +||autoreplyattmode.wixsite.com^ +||avoid.hold-managert.com^ +||azbin.ir^ +||b45018.com^ +||bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link^ +||baiii-wong.cutvi.cfd^ +||basvuru-online-yap.vercel.app^ +||beionfidi.pages.dev^ +||bet73nn.com^ +||bet83039.com^ +||bet83054.com^ +||bfrescentremebermainsetreouytnoy.weebly.com^ +||biggggggggggg.weebly.com^ +||bitnode.pages.dev^ +||bitvavobtc.com^ +||blackhere11.serv00.net^ +||blss24att.weebly.com^ +||braucrarasuteu-2470.vercel.app^ +||bt-102124.weeblysite.com^ +||bt1business.weebly.com^ +||btuan-dan2-resmi.top1.my.id^ +||buildingdesignsusapdf.s3.us-east-005.backblazeb2.com^ +||business-page-property-897432967.netlify.app^ +||caipora.xyz^ +||calm-pothos-3b24c9.netlify.app^ +||carrefourarabiank15.pages.dev^ +||caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com^ +||catgirl-appverset-nya.pages.dev^ +||catxtokens.pages.dev^ +||chat.94-103-188-123.plesk.page^ +||check154109.click^ +||checkseven.vercel.app^ +||ciente-a.org^ +||cieplo.app^ +||cj12143.tw1.ru^ +||cj87335.tw1.ru^ +||claimyourethrewards.pages.dev^ +||clickbait.design^ +||cnsa163.com^ +||cock2-iota.vercel.app^ +||cock3.vercel.app^ +||cock7.vercel.app^ +||contact-pro-8291-d01.firebaseapp.com^ +||contact-pro-8291-d01.web.app^ +||creosrl.com^ +||curmmgdv.email^ +||currently541.weebly.com^ +||currently890.weebly.com^ +||currentlyserver.weebly.com^ +||dara3dccj.wixsite.com^ +||db.service4db.com^ +||de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev^ +||debutcan.firebaseapp.com^ +||debutcan.web.app^ +||delivery.attempt.failure.ebbs.co.za^ +||dev.stream.mornar.app^ +||dnwqmh.click^ +||dropsmartchain.pages.dev^ +||dsjoting.group^ +||dulb6c5p5.top^ +||ebay-mallwholesale.com^ +||ebt-lilac.vercel.app^ +||echoredled.netlify.app^ +||elbarco.percentadnp.info^ +||eltritongourmet.com^ +||email.mgb.modento.io^ +||enjomugg.firebaseapp.com^ +||enjomugg.web.app^ +||error3456vhubhornbase.azurewebsites.net^ +||example223.wixsite.com^ +||eyeydhe.wixsite.com^ +||eyttueiu.square.site^ +||facebook-avip.click^ +||fame.pink^ +||fassehoizubra-7696.vercel.app^ +||fastdropchain.pages.dev^ +||fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io^ +||fla-1001.square.site^ +||flo4211.github.io^ +||fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com^ +||fnuttlie.wiki^ +||fokeijonnekou.vercel.app^ +||fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com^ +||free-verified-badge-form0-service.vercel.app^ +||free-verified-meta-badge-service.vercel.app^ +||g06668706.wixsite.com^ +||gccndbqg.vip^ +||geriodememerkezi.online^ +||get-checkmark-for-you.vercel.app^ +||get-free-verified-badge-service-on.vercel.app^ +||gitanag.broke-it.net^ +||gruprocuroipra-6493.vercel.app^ +||h5.b9en.com^ +||h5.metacoint.com^ +||hcghij.top^ +||hecregayatu-1014.vercel.app^ +||hejmtxxt.guru^ +||helenblunt6.wixsite.com^ +||help.accountsupportcentre.com^ +||here-apply-for-page-review.vercel.app^ +||hgbk.ldgknhk.lol^ +||hhideiie.wixsite.com^ +||hitummoinneullei-5882.vercel.app^ +||home-101067.weeblysite.com^ +||home-103465.weeblysite.com^ +||home-104341.weeblysite.com^ +||home-105266.weeblysite.com^ +||home-105929.weeblysite.com^ +||homeattatthome.square.site^ +||hpnefhqs.motorcycles^ +||im25.net^ +||info.supercitrus.ind.br^ +||ins-business-home-center.com^ +||instagaramgalochka.vercel.app^ +||ipv6.43-135-137-110.cprapid.com^ +||irmt0ken.win^ +||iujf7839iofvkbcu748.weebly.com^ +||iwimwmiwi.click^ +||jagej73796.wixsite.com^ +||jfdjy.com^ +||kalyani963.github.io^ +||kexoigrufouddou-5902.vercel.app^ +||kl1k-ds1ni.neupdile.my.id^ +||kliind08.wixsite.com^ +||kreelo098.weebly.com^ +||kremlcup.com^ +||kshitij12375.github.io^ +||kucoinglobal1.com^ +||kxbztydc.black^ +||labanquepostale.jupiter-analytics.com^ +||leddevotoze-3146.vercel.app^ +||linnkdna-kget.wxxzsite.buzz^ +||llahi.info^ +||llahi.vip^ +||loffaummuddote-4145.vercel.app^ +||login-att-10221.square.site^ +||login-form.world^ +||login-online-outlook365.com^ +||login-outlook-midstreamauth.com^ +||login-screen-103134.weeblysite.com^ +||loginaccount70.wixsite.com^ +||loginaccount77.wixsite.com^ +||luk6414.wixsite.com^ +||luxlifemiamiblog.com^ +||m.meta-accessibility.io.vn^ +||madebybmr.fyi^ +||maqpiexyz.click^ +||mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev^ +||mayfair313.wixsite.com^ +||mdbrvlfy.black^ +||mesageriepro33range1.weebly.com^ +||metamsk-wallet-3.gitbook.io^ +||metttaa-audddt-new-02.firebaseapp.com^ +||metttaa-audddt-new-02.web.app^ +||microsoft365-storage.github.io^ +||mikepattyjm.wixsite.com^ +||mobilemidasbuy.n3g.fun^ +||monespacepro-client.3utilities.com^ +||monetization-violation.github.io^ +||moodengsol-net.pages.dev^ +||mwsiekdnfjrdufs.weebly.com^ +||mxmxnmx.mx.zya.me^ +||national-au-b.com^ +||national-au.net^ +||nbaaiqjq.group^ +||nexomyacwv.weebly.com^ +||nft-time11.vercel.app^ +||nichcheck.weeblysite.com^ +||ns1.carrier-ast2-portal-apple.com^ +||omadshf.ru^ +||online-assist.live^ +||online-promo-asb.org^ +||openkimono.pro^ +||opportunity-verified-status.vercel.app^ +||ourtime.reconnect-dating.workers.dev^ +||owouwuowo.click^ +||p365kf.com^ +||p4zv8crnrrha27so.94-103-188-123.plesk.page^ +||page-center-manage.com^ +||pavan-patil-22.github.io^ +||pecinternational.net^ +||peesom.chat^ +||pencairaanndannaa.my.id^ +||petty.wiki^ +||pimnhv.group^ +||policies-business-page-service.com^ +||pottatrebewe-2808.vercel.app^ +||pqo.hrf.mybluehost.me^ +||programming--service--panel-totlyy-free-for-you.vercel.app^ +||promo1.spik.ru^ +||protocolsecure.pages.dev^ +||pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev^ +||pub-1778406e4fec4394901793111c187dd9.r2.dev^ +||pub-19b834342e7d465b9f00b3511325a081.r2.dev^ +||pub-21dd4dc659614ceb93e45a6de4434502.r2.dev^ +||pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev^ +||pub-2fefe932a6974485b987c9ba851b5c40.r2.dev^ +||pub-3a46d9914f494078a6d6237513e7a096.r2.dev^ +||pub-442ed822851244a689b3472ea2c6a950.r2.dev^ +||pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev^ +||pub-682ad3b65d944376b919745aae3c56d4.r2.dev^ +||pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev^ +||pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev^ +||pub-7f5cf36445d042168bfacd712e890dc0.r2.dev^ +||pub-803839714a924882a7bcc2495a26860f.r2.dev^ +||pub-8161de4a277e4ee8b532af34954224e1.r2.dev^ +||pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev^ +||pub-8376b5b2334844d193a525d8b8548fa5.r2.dev^ +||pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev^ +||pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev^ +||pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev^ +||pub-9163a97d70394cb499bdd232be6c2169.r2.dev^ +||pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev^ +||pub-98171471e0944ac3a5820ef719bf0640.r2.dev^ +||pub-a263e0790935412eb10cacc55bbced18.r2.dev^ +||pub-a291041b077742899b63a9982f04a56c.r2.dev^ +||pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev^ +||pub-b50adc5d699a4f08aec37102c2103da7.r2.dev^ +||pub-c0a934c950e441db96b882789f53c9ea.r2.dev^ +||pub-c2c250050109456396c933de259a4fea.r2.dev^ +||pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev^ +||pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev^ +||pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev^ +||pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev^ +||pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev^ +||pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev^ +||pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev^ +||pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev^ +||pub-e42cb528b102447385e3145197916f51.r2.dev^ +||pub-e4aff507450c478cbe3f77ad23d75035.r2.dev^ +||pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev^ +||pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev^ +||pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev^ +||pubgm.club^ +||puffagroibrouwoi-8818.vercel.app^ +||qasimk.com^ +||qfjfvseq.info^ +||quauwograssodda-3503.vercel.app^ +||qysgyp.com^ +||rajdipchatterjee.github.io^ +||rechazaroanularaqui51.weebly.com^ +||remote-fix.pages.dev^ +||renggard.47-243-192-240.cprapid.com^ +||resolvepanel.live^ +||resolving--issue--with-us1.vercel.app^ +||resqat.weebly.com^ +||review-business-case.d2f7p3b7pucnle.amplifyapp.com^ +||rlpqwefi.pink^ +||rouloigeilleuja-9523.vercel.app^ +||rulemec.pages.dev^ +||rutinqqwin.shop^ +||rwftfu.quest^ +||s.team-pw.cc^ +||sairanees.github.io^ +||sanseipecas.com.br^ +||sasklelo.weebly.com^ +||sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com^ +||sasktelcustomerwebly.weebly.com^ +||sasktelnetwebmailservermaintainance.weebly.com^ +||sasktelrectify.weebly.com^ +||sasktelscrutinize.weebly.com^ +||sasktelservicecentterwebly.weebly.com^ +||sasktelsupportsystemwebly.weebly.com^ +||sbcglobal30.wixsite.com^ +||scan-vulnerability-guard-v3.pages.dev^ +||scan-vulnerability-guard.pages.dev^ +||scanner-metamask-v1.pages.dev^ +||scanner-metamask-v2.pages.dev^ +||scanner-metamask-v3.pages.dev^ +||scanner-metamask.pages.dev^ +||sec-sign-in.info^ +||secure2-validitycheck.weebly.com^ +||securecapitec.theprimepoint.online^ +||securerpcfix.com^ +||seeteressecalywoi.github.io^ +||seivviice.weebly.com^ +||server.0e7p.com^ +||server.2rk3.com^ +||server.8q3p.com^ +||server.n6b8.com^ +||server.v9vs.com^ +||sevvviicess.weebly.com^ +||shard.blue^ +||shard.skin^ +||shared-d7590.firebaseapp.com^ +||shared-d7590.web.app^ +||shaw-101329.weeblysite.com^ +||shaw-101587.weeblysite.com^ +||shaw-106427.weeblysite.com^ +||shaw-107375.weeblysite.com^ +||solutionwebsitedapp.firebaseapp.com^ +||solutionwebsitedapp.web.app^ +||solvetans.firebaseapp.com^ +||solvetans.web.app^ +||sondfrom.dexlog.my.id^ +||soyokai.or.jp^ +||srdate.club^ +||ssy.hmb.mybluehostin.me^ +||steam.poweredartsworkshop.com^ +||steam.workshopsreview.com^ +||steamcommmuty.com^ +||steamcommuunity.ru^ +||steamcomunutty.com^ +||steamconmumity.com^ +||stepsray.vercel.app^ +||support-metahelpcenter-id100003498934.netlify.app^ +||sv5gardens655665.weeblysite.com^ +||system-portalnu.duckdns.org^ +||talwgam.njmolada.com^ +||taste.baby^ +||tele.zhngain.top^ +||telegrambot-resolved.pages.dev^ +||telegrazm.net^ +||telstra-100408.weeblysite.com^ +||telstra-100469.weeblysite.com^ +||telstra-103234.weeblysite.com^ +||tiktok-888.vip^ +||tiltckshow.top^ +||tnomwzrp.top^ +||toeken.im^ +||tonic.pink^ +||tooma.cellinsurance.co.zw^ +||tpdtepremu.xyz^ +||trattujeilesso-3354.vercel.app^ +||trbinace.com^ +||treibrukeukonno-1395.vercel.app^ +||tuesmad.firebaseapp.com^ +||tuesmad.web.app^ +||tyyyyyytyyy.weebly.com^ +||tzcsjfto.chat^ +||u.updatetrackgre.top^ +||uc-whatstapp-web.com^ +||udxcady.wixsite.com^ +||uklifejv.cyou^ +||updatemail12.wixsite.com^ +||ups-trackdeliveryapps.chickenkiller.com^ +||usbest.cyou^ +||user-transaction-overview.vercel.app^ +||usps.com-trackdck.top^ +||usps.com-tracklnv.top^ +||usps.com-trackmcl.top^ +||usps.com-trackmec.top^ +||usps.com-tracktpq.top^ +||usps.com-trackvmd.top^ +||uspsinfw.top^ +||uwdtsczi.top^ +||uwm-onedrive.com^ +||vaishnavi1436.github.io^ +||validatie-veiligauthenticatie.com^ +||vbbu.ldgknhk.lol^ +||verified-this-request-badge.vercel.app^ +||vo4zzp.icu^ +||vs41.github.io^ +||walett-cont.gitbook.io^ +||walletauthenticators.vercel.app^ +||walletcomnecitt.gitbook.io^ +||walletconnectdapps.online^ +||watranfart-fdd6a8.ingress-bonde.ewp.live^ +||waxed.wiki^ +||webmaillshavv.weebly.com^ +||weeeqweeattt.weebly.com^ +||weigh.skin^ +||weigh.wiki^ +||wgqdqvtn.baby^ +||wgqdqvtn.pink^ +||whatsapp-rqr.com^ +||wirelessvoicebtpaidmailinfoplay047.weebly.com^ +||wscs1231.cyou^ +||xn--metmasklogin-vcb.gitbook.io^ +||xojautruffeuttu-4659.vercel.app^ +||xraiz.info^ +||xraiz.vip^ +||xsuweamskeidjf.weebly.com^ +||xya46.cc^ +||yahoooooo-108560.weeblysite.com^ +||yavanica123.github.io^ +||yi5lq-syaaa-aaaag-acfsq-cai.icp0.io^ +||you-can-receive-here.vercel.app^ +||zeiitgeist.angelocachero.info^ +||zenixoikitti-5809.vercel.app^ +||zeznjx.shop^ +||zwzcn.com^ diff --git a/phishing-filter-agh.txt.br b/phishing-filter-agh.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..773a5338579d6cceeb26a2754e4ac34b664675d9 GIT binary patch literal 5247 zcmV-_6oBjDkdYyxm=Ay=WSIN^sXo#7(^PLZWLTnr={C19{C|Oqge`$guq>bb|L6L2 zCAF%ptWe}CG^r|Nxx)3{_g+rl=VajYea`31#|)j%$;%SX7SpOl$Q0(JoCQExPeP_V zTa1kBnha+XeNmtkLgbRpRYt4eOkeOZC`ne6zy3V8xV`=M^Y>fsTQ2L*6-$smj$BjRsABKB<%&WX_f%-C;&{igMQ{_^Y3-+a#8u>bbM zeB77PkKILqJ+C1s4w7z6@UBL#yBN1Yt3T^Psu3<>=!g7jZOaf**2Qi`pd6B zI%`2!Q1`pT)bh)(KWriTZ$AXVqVS#nXFqEm+pMoSk8qWr!e^`N7yg_`2K{RoK>WS_ z@_+xwIp=cGal5t)|KG%k!bwg-&7~An1vy26Ybj*PkroEn$A%*Zdgaf6u>AeVMKh-i z4Po8p_Pze+u~N7*bBb^#3AdJTA?dkee^LTtftgllrj1@8rzo z0S6Qk0Sb^4?i~j<`neX_v`#PdG{;Hu=MJN`{B+y~N2Ymvl*V`K4pIi>orGH6J&o>p z?l&p*BBPRq0rMM)hqz*I*V;zM<_?Yn@;(BA*Evdm9x<0xa}EX}40<8@{hr_SF$iaz z8S!o7Pf|ctd?xeuxt`i^b?CO-QO(Bbo_)QUOIWXuVa`mB3i3ls%iiCT77bVKiSeT% zoC&UV!TaR3kX&AXUKaN=4)q|MF|&v=FJQ6E0_ACgnoGUpe}~76xfWY3*PY(pEegAQ z2t~oG&{Fo?(C=;Aww!YoLVs=bA_FE*@oDrH8LB{05XwX0{blt$JBc_j42&yZb8P)C zp>ybjIcmdmzq{sIBWgsn=$x9nI%4S>Mz;CubD_EYU*MHy+`jz?Jfz!WhH{vF-;d=j z+Idgd^!n|a5bG!9CwQGvelRad6j|2v?jJ1_&1dQ~if{Lx%d^IF$T^d%mX(G%-kF9J z^K$xown@yiE4e}U`0}hnlV<1fhIjQNoB@}aH*Cl`WyTa^Hpr*ndlw3Z;)tSeFhhd| zeGZ&ND8uLh3g80;7uuoC53c2#x%t_#eRn`dQmmADL{0|ndL(Ze ze5s@U(Y`2p-)X4y3q=!e>JSyvqqYLAj?K#TIySxpj|`o@t%MD7;Tt3NM;&M#-5yMx zFn7NMeQG@dZw7j}i8G8I9=M#W0|xp*c7P;f6!7moHjFz)nXiDmhZZWmk8VAdlj1Cr zf6&qLsAa9Q9caOjD-3$9o|?W?873aD1;5T?t}A7geCry0ynRWfm-jaPR-1_)hVN|X zrZNpqy?0k3B(s!*H{Nl>ERSPM%oDV+7|CV?-uWDqyaWf*({e^ALGQTL{GGl5F^gL$ zswe1U7@bBiFg63O*}tx&ftAOW)sTly@)5 zNdM$3uYe@49bDsuBV=B&OFcB20*hEYH3KkHXs(l3=)=+&e?VK zPY2NVw&jR9<2q7#%;TuJ6rB5xnP_Xp8gH-z-M2?t3@z~jrCM}aNz3H4exX_{%M)?J znP3bU<3FjmPTtOfX?t}VImD&RDDkNzL9;=@Sec&hJ_;$!L%p0M9gvRkAAi{cYMHLq=^I%BMpXva9< z-+1o)Nn+P*k%y$vLaE4{}sLM;hZlorCWkRqU* z0T8XS$8_ohiaJL;*BWi3MMz#ZIda4{;0{ZQky~G0>eLfcz zm62xgPyE+7G8{RI%=R^hKCLBjLAs1ILvy8X0f0#JRDb)U(RAm;-M!9?pZm-2H;4nS zS{fr24(NG?iKL!z9ibqSSB6rcW3&2q9&oQcH_72ig(Ld*-qX!b;=mpY$j*4SDrI2Rg!9tSCyIfu*LlYgNIb`Q;!?M^`4hr(jdzrN^vfeT_uMNcsL1#UOK0aHqUxQ??Vt< z46Rt@Jh6O!Js|ci`I=Nx&Cq-9gSsQu9QuTldkJ*!%ffPjeLV9~OQmP4sW6|-X367* zIiC7}F?-`hovl-xy7xJyU>IbH6X=fiC$=%DRIfU(S+6QT1*cr}GkyOhPW64;&`N6? z2-B|{O>dp&5(fFuQ!0J#B_5~X+% zFfb!0j&Z}|-JJO-+k5QU@~b6~zzf5xtd+dNgb58jUPwd)RYKN)^Hu5A5{i_Ld7Sn$Klc>nmNWp7N+t*PW9I*QPER-& zh>%1uMk*c@pi3G(vc~_7wZ#*Xt+S@SPbott!2_mXSf0CX0t#4UT(AaMfzj7qNU5w+kvj=m=xDvw%BFq( za;#0p8>^LDyh==g0xLkX2=3v5jp}g^jBeuEpo&U+BX9{AtY+N!82vXz%@sGE8KqoR zB?J?+N(xv~jHe?i!0|knJ%~jjGmbf_6&L6^3lM_V-Up1_K5|F41$kzS zQNlXsmq$1&R;;UD!edOq7%c&`2dR_-zeJ&gi2zHK9yirDdd(mP9T(@oRnGzjX*d%> za3&)dX9NaL9&}M!3hwyMH5rk$;GtQjSi*yr$lQN>vH9GisONVMP zjz=36GW2mVK_{iP6r3GVmlLGtZb9uNb1I>7D1oP#z}w$7c=mQ^XIa$3N3NDAd}Pvv zxM+vmq-eZ5l#Lw0Iu(skEO8gE4RR6Og++>>S7zL!h)OF|F&eIHFrciKOqdu1fLnY_ zm$-1?K>$V-t@lAK$Uq98A~NIS8m)sMxI&${O2R>~QL4a$a84NOZo&KMgb_8EBXMDz z_c}RB6uyV7hVM@BdtcsmDX9kHeZtF@r0B#GfK0dj13-TG6tfM(P$lxf12EEZ zR3>t;S}lmepyV>Jomi{~Rosw}2&M#UtJ$|YubPRq+~6p9LC?q2Jel=MkM!>NnpzsK z3G=c%!tA}q2t;ZoOS${*>wOvx9x-E`p2ooTz)3~fa2qQJ?r*e=6zi8npzTDi9fV4VtjLwjZi{V(}I`^7a%=?b>0mNysK0zntc3@ce zfH`t`y{=rS01Jb&t~Ao5;xl+tI~7s2lJip2@NUAcr6BfAu$K;{V?Hs!+=_xrzB=^h zj(c5lh`MED!rIOU5uaJZk&1}x2Zp;rPB z()V*1kPDQ6x%7r%FcQuQv>sO2Tgl%7sNoEghh-maqlhO_jyb1I_y7hiS;7=s_5g)k zElR`{RI=*IT*zB)+<8ju@W#tj2j==86Z9u}^F$9zJPav&OJR_VD18H&HfVyV2;Y~- zJ%3f!1*W5S3&4Re(6Qm!@_|>q!V0;QZ_&PAgxKQq;OSGA#c!JuRC%P!X4aVu@c@={tYa!KmY_4O|os!y?0Q%uu#G;h^Pl)Ey#Z zMKLv}s$vY8fIHIfR#pm=a!n8pkVKEKgABZ~-ixM6eGjY!I#+EpGIQxlIA%-atW2}` zHA{gYA7JF?s83?81;mY!_Yt;n!`1rYQjhD~&M>ti?@^lz>8mA&aXV|&dH_B5c}3Wa z4E}A`y~Y^_o~dIhX7GIdjWHjXWzSo!L`qG;iP1cUZE1598)o0;6X&y*QVEw%XDf4J zKOi1WEZX{|jr$Myr>v)%HNK%g(x_NhVp5hEwc9l-J&eVO8Hmu@)CZg=DV{!fo$(VO z-eaCRp8$K-<4wa|j|fsS4D6-3$k2RtQYTYMWZ*nIy1g!6{nw*v3Xm0X5F9D4>ir~M6+{;=FQJAg z)z{pI#&+_%s_*xtIcx#9cUM9Kya)+(4E^qs2JJxD2y3%S)&?DuWS>K*N5POsArw@G z;bqZoG^iKs2>VUY21zk4VCl8^Qad?S$p})sPTPOvf)7T>mRg%z-TMY_bl!X+;_E^R zcgZ8VJ+IrCPC}Goi`Q3ty+`RSl|a^u;L!w6>Gs;Y*-1grpjQ1jkp?sl3@oqb4mVS# z8O1$xE+ju7#HWza0t`07thv2|Uy(=r)CbJbW=c56m;`{5ZHbXjgZ#DYNC@pYjZdE! za!Xso93QDkL!TSeGTp#aM#AS zlbFj)5e~`&*@yXyIgb??58%o0G9gC7hOI7O&=*Vo)cnk2hzd$GS4iKtJU)}Gp6~Sy Fx(nur4Cw#> literal 0 HcmV?d00001 diff --git a/phishing-filter-agh.txt.gz b/phishing-filter-agh.txt.gz new file mode 100644 index 0000000000000000000000000000000000000000..cd02760153ae6c8bf9eedff51906b151c4d101d0 GIT binary patch literal 5399 zcmV+y73k_8iwFP!000021D#q+uj4v$-se~JAe#vg>FWKsy95c6#VmqkW|Kt#K4sbx zDT|bB8S~@wQId6zWp_`Ib8mMav5Hi&o?nsr!;e2J*NWeN{KrYzlhVzPzx?N)e*AN5 z*riq0{rKZQ@qZi1z<>O^>BK+$-5-AZrRT&6{`-$4O0po1gCzfR6#bq=zvuaXgZ{7g zUJb(j{v-au$^7GwqvVeg9xN* zofv-WH@UWF%>I*NLfik(?GRuGMMH; zetRk?{1@T~C0OOJe~s~z7CAqKTDbr514*660W(T_4!?{aP2xOF(*3E3h_LP?oMPck z-K}yvCl-t9tPC03p6a%Ju3e=`{l0b$BSdKsS5*+>9epe8CG^T&h*gqDd5LwN?1VBm zO!#{rU{He%tzhHe7u{B$#Gs^N#3`f0)->R8&?|i=9nk?NM3bN=b1UFu;a!@cv*At9Q1Oj@Y>6|2 z>IXGJL!ol(xR~A~(~e+mX7sf0vhUkD(B>966AXe0=p>+oH{!U{!C7$>)pb~J)&8w_ z+Fm-Yv^0Jc+IJ9B(01P6n0oFyKk<DLF5p!k-eWxDM?V`9y@C`lKk$ zyh}xO`ID(|K&8_v`V~1(ekQaP!-T-cD-ekJ&zMxBA&8f&3sziJVX0VnNRpp_(_udjSA-?}Y#o)o23_muDyke=9j)DLZRs58gQvv@LW!KIP(*iS+qPXXB||@tPAlX zo+nwTdI{lt=(b8<*43b~;AW8b+2|$}GRfC*JB`B_7!6Jl%;cDNAcE0SarL@oDqNXr zy$dT`l}2g(`kZI`GwP;Ya**f*6$5OG`h_Pm&Q6>8U`VQ(ub(#>CP2rp;wU#k%hc^T znIbP-PGS&o9C}BLqG$b~t+h!8Qymu`$jAmV5IZ_C!Uf9cs0+8mUh*k3P!~Tl{Bd13 zF4PH}mbwPx3L$Mj`=pksbFZ-+~ zUJ*e*000bbMgb@@6xgEl+ijJcpTaYudV>;hpC9XE+XcOGCu4(@CK;>WCk%s-z!y*n zg&$tx{8i};F{C)4MUQlDpsG1elPt}%A}>Q8H}IOgCZoC~V@SH*uZ^Xj@*@}`0Cf)IC*s0i0tNsc26?kMf=dD|UG_mMCe-FvyD|mO6afj%&}`3r zYj*0{*V8m~w>TWeb)+iOH2*%*64lMnm2js)0J`y`$X*Bpp$k_#FJs!0xY%I;11d-Y zWgIz*2SWN`tb7|o)n(56LQr{(#iKZsK(RjAeb@XaKA$X}>mV%c(C+Nx&~*);Lg6#= zHZnkC?FrJS+zF?n(tZiOV{bRQH+Dy1xfqGBw_NXh~l z7j=+ToDx9Sl4KNt6QqN^&M=LLuayjMW{{yz)QcIWbs;)BM)W5=?X+*Y;i6UE(?jGB z(e*Br9+vm}N4)HEpN(Stp z_x$h>4h-rs)=G1Oa;P3~@lNd3Yw?J%YiQ`po_5djF7(-SBU1MVt?smMS{1`!hBV8I z2~7*+Tgx+fK(XNR-e8~ETiksr5eY*6;3#4iGqTb9uydnO;}Nh)!UQ$u5|BytUj~tY zvthqgO-Za3C!-!CibGHqb#c%p7@RlZ2kXhRl_baseggj&53aJs@5sZUVtur!3S%CN z#c$%ZCIb=)w?=Mb*3_ez6$fu!hcjEx0}K*}Twwx1gCU5vJ+^3{dXRc_u(#LGMJ)r! ztmUp=_PJRbn7a5eauOu`r9FVQQt+dHd}(Pus-k&MD#?h z#}~Zt!==bJ=`(v16-7~%QE{|x!(aN7(}pkY+g|d#2Cb+#O?UjhF*@%AK*C`O1(wmNx8A>ut60XsSQ1hfHenG91`X^K*eEjc!JBI41*Fv7I7D*5>$YzF2?8jAy z4rTKPpGeVf_}r@8Fj{0*4yRd3HrT=3B8RsH3gq^3&>d+|9=pZ|_UUrO2dbZnFas1y zbNnfTIF62uiyAr?0Z73l3-nOqS(a5=DRZyDm zNnc-nLA8kdX9+YZ6?LZo=FB{#ds2Jg{k7 za#DNcU7xn>)*2}ZV#q5HfHjM={J6G1LI~DliX?ffDl6G1W)Fs1{x!BWfM#?pisHAE zwvD`w2c6<8uJNt#D~o0R_{xW8oPO$%7OpMnptU+!@r7ExQO8S>`4gGr@Er(7bc%F} zVuj~;x8%}bJrh(^0r0_#OgJsh-w`0YnRY`cXSEJodnM2qeffGv&?^s7V6aoGMm9n< zJ-KyEqc~jA4QU{h;kDv-WCj`>u>GT)9jC+80&4BP)B&vdS|v~=(sUrY5l1NPx6s*3 zaP!A}E?A<;1D4HcK}JTxCgBVm&6BtVh^G&L>oemw^wlXg7;B`1)dPzZ<`2eR0;E$H z(fhNPbN9A21NFiJoLD-}p-!9UnQ3Q`(L4n4eFhYZq!y;5^TtqLu*7ru!&ZMX6HLmq z>lw}K>y1a3jWsQ#cL$~4tP+SOc^>#EkG*$y@9w(0hxq@2?y_5gKrgQ#Xg$YZ?^2?VqooU+Z!_XUJZi;G3+VU|5ZWTypvhJ~hgg>cz7CV6 zBmTni2Ht8|_0%z(qmB0QG}eNBlcRjd=KiILKxW z73o!Q0DZrq(6{y|*k~7lIejyNym3Ll{?xy@nejH_@2}YD;YSzw+(4f_riu-E7)~T9 zt@(B1z95aY{%vPv`#NMI8b|~V6eP*3gY<$aKjmq}rv-ZN`V1j)QZ<6d?8G=15X0x_gYw?_8=f6%;uTu7fivis=M|KG#;l9kk?DJN*}McJ&M?z%jloO2^dkj8 zNQ59VVPy%d#4;jknF}UmB^W749uCP1ds$XlRESIpmZf!8M{$WBJC0dgm7Lc{_L^2H zKv*J54xmPB8AUYB<2X%n5>@emJ&8HbI4knHh%>ZgbtutUPN)iG1ys~H5B(IVLt0h@RimIk*RwjZZtRQuMT)l`$&WT_}Oi30=sFKw=uL_aV zD$e*DdzBEL(jwm&9!jq~x;_N7U6{UceWt@>Z z$pG_7Nf}ErES?lq5y>NaT*RLN^%FAhzf;r2049(;T6i=%>tK^%%SCuSj30hsyOhy^W2sV&M9E#yZ`L;S0 z-uq;nLw26!6b?`@!Kxf_LODOO^E}Q#h~SS{J%!h@9R5ZknMJWYMpGRZDXB|dM&4a$ zR@YcENfU~9zzpx~EG2})!)ck7F(FYY7mrIRuVQ(Orn-t@qcRo|T#R69UL}!`C1O}c z#anp5c&UiWI;zt=gXw7;F@UT*r<4gES8wdKzi7i&%Q8zUi0=1NSBY0@Ua%uODa#zv z=ai(-4WR{3vIOplC`_q1nu+ESf!%pg*Kpvd!ZyM1sOmST3_1jvPmC z(Zo_3*NFQ%#p+UIwMa=Uxg>DOJf+b)dtF65Pbfz_!SN43wuIA(xRku4NA`-xf>d?J zq4!9}Fg;6)B(7PJCa~6lohR_x48DtS&MHgjunWOfG%?eh$u}e55fzYwYP`Xf*ph=OG z*h0#pg9A6fG3`j#C$xb8CyD}~+>AoTijQF9ingV@JfX=|p5n=XAhXXK`o{fD%vSK?Xzg*ph)rLTgkb6#BIBOoBR3j=CI1^hkmoHjZXU zU#~Z%Lwj1!_=cNwatyDdunS_fp+m17^tbIx8tdUJT2T9{eoM3!3MiN?ebsibWQo1B zqBVzI`(Y$N~Tk>hmjr z^}^TT57A6~o>f{x;$x(XvHZ>hY7w8)){8gZrgi+i9nrtrOixKFZdEp!DsC!ZI`< z(}=zK3sHZj5H$XqvS3PI4f`|3cP{PQ9N*_dx?qa`7DMv47}8%e9H@dlKNs2a!rC$< z!9-fcA^7*+b=Skf!-zlqVxc>s!AGaqFDKVu$L%ZE&@&(K`%M375kd{K+Zmbb;Ko8t zlTz;NKsEkDFr&8%HSR_IB=!fk z@6!7m?2vALGIt}s%+Oq-MTOVheMZ?^Zfj<9Au2ROcwRXNf33AwIcw+e)X{J4GW>LH zn61x>VQ+45Chor%^M?{XhwhRr49`)!U0r-9;`go_-TXE|z7+m1DbZD&S$4Ee|| z9ID^WelU1zpaXsGOiMUB#Jx;pu*O%KplOOZP5!AR~E4qiwwQ)SU z=Q)c{tZrB?GP92#jeTeM_*L2$Lz;X%J$CBi%mqlNdLD*5)jHhjkm%M`jJR2`!ycn%b5Chj9r=ZGrgnx>pC+S-pxq12V{~WTEdoX*J&g|!0W4PWB zLuz(umaE}qiID|2uvmvB1HbgPz{u~6@cCHp#*05(KTjc>%@Pgks=lbl$s2QTgXMkC zFC_2|WZ08p7k>x|XtZBwjg|u5e65O+INrFk?4iD%yTE9{2PoyKfQcx3(qvL`mKLui zaH+e*DSrbEpC;3*^*-DffAS?Le6?9`XekZp1r*L^=;7=LM+%N*WIq z0*VqMLUHSN++ab%M6%Bi3z(*^CyIN)Jh4=7NS#=svw9jtI4hLe&9rj;u9|0Fn-7-`qoJbvLk@bN+*ZsD4}Eq0jfd!Ft>tZ2RWoe*spIRcJFZ003ic BP{#lO literal 0 HcmV?d00001 diff --git a/phishing-filter-bind.conf b/phishing-filter-bind.conf new file mode 100644 index 000000000..2cf150dbb --- /dev/null +++ b/phishing-filter-bind.conf @@ -0,0 +1,434 @@ +# Title: Phishing Domains BIND Blocklist +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +zone "1111365dh.net" { type master; notify no; file "null.zone.file"; }; +zone "12931-coinbase.com" { type master; notify no; file "null.zone.file"; }; +zone "215323.com" { type master; notify no; file "null.zone.file"; }; +zone "260aesthetic.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "3650947.cc" { type master; notify no; file "null.zone.file"; }; +zone "3659ll.net" { type master; notify no; file "null.zone.file"; }; +zone "83291-coinbase.com" { type master; notify no; file "null.zone.file"; }; +zone "94-103-188-123.plesk.page" { type master; notify no; file "null.zone.file"; }; +zone "9825057365.com" { type master; notify no; file "null.zone.file"; }; +zone "abctrvabc.com" { type master; notify no; file "null.zone.file"; }; +zone "access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com" { type master; notify no; file "null.zone.file"; }; +zone "acclimatizable.fun" { type master; notify no; file "null.zone.file"; }; +zone "account-update05.myvnc.com" { type master; notify no; file "null.zone.file"; }; +zone "accounts.google.auzen.us.kg" { type master; notify no; file "null.zone.file"; }; +zone "activebusiness-unlocker3.com" { type master; notify no; file "null.zone.file"; }; +zone "addwsrbh.green" { type master; notify no; file "null.zone.file"; }; +zone "ahnp.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "aldg.ldgknhk.lol" { type master; notify no; file "null.zone.file"; }; +zone "allegrolokalnie.pl-891241214.buzz" { type master; notify no; file "null.zone.file"; }; +zone "alutipcentra.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "ambil-pinjaman-daana-payleter.xforms.web.id" { type master; notify no; file "null.zone.file"; }; +zone "ambulatoriprivati.it" { type master; notify no; file "null.zone.file"; }; +zone "amev.ldgknhk.lol" { type master; notify no; file "null.zone.file"; }; +zone "antail-conv.com" { type master; notify no; file "null.zone.file"; }; +zone "apply-now-to-receive-badge.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "artsea.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "atmailupdatewptnskmdinfomailacct.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "att-101072.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-1041page.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-105714.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-105819.square.site" { type master; notify no; file "null.zone.file"; }; +zone "att-inc-107097.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-login380.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-login522.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-service-102155.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "att-sign-in-105669.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "attcom-100762.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "attcom-106808.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "attmailservicenow.wixstudio.com" { type master; notify no; file "null.zone.file"; }; +zone "attmailservicenow.wixstudio.io" { type master; notify no; file "null.zone.file"; }; +zone "attmailsrvrdesk.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "attnewmaill.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "attyhhhhiiii225.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "atw-tau.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com" { type master; notify no; file "null.zone.file"; }; +zone "authsyncs.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "autoreplyattmode.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "avoid.hold-managert.com" { type master; notify no; file "null.zone.file"; }; +zone "azbin.ir" { type master; notify no; file "null.zone.file"; }; +zone "b45018.com" { type master; notify no; file "null.zone.file"; }; +zone "bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; }; +zone "baiii-wong.cutvi.cfd" { type master; notify no; file "null.zone.file"; }; +zone "basvuru-online-yap.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "beionfidi.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "bet73nn.com" { type master; notify no; file "null.zone.file"; }; +zone "bet83039.com" { type master; notify no; file "null.zone.file"; }; +zone "bet83054.com" { type master; notify no; file "null.zone.file"; }; +zone "bfrescentremebermainsetreouytnoy.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "biggggggggggg.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "bitnode.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "bitvavobtc.com" { type master; notify no; file "null.zone.file"; }; +zone "blackhere11.serv00.net" { type master; notify no; file "null.zone.file"; }; +zone "blss24att.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "braucrarasuteu-2470.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "bt-102124.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "bt1business.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "btuan-dan2-resmi.top1.my.id" { type master; notify no; file "null.zone.file"; }; +zone "buildingdesignsusapdf.s3.us-east-005.backblazeb2.com" { type master; notify no; file "null.zone.file"; }; +zone "business-page-property-897432967.netlify.app" { type master; notify no; file "null.zone.file"; }; +zone "caipora.xyz" { type master; notify no; file "null.zone.file"; }; +zone "calm-pothos-3b24c9.netlify.app" { type master; notify no; file "null.zone.file"; }; +zone "carrefourarabiank15.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com" { type master; notify no; file "null.zone.file"; }; +zone "catgirl-appverset-nya.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "catxtokens.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "chat.94-103-188-123.plesk.page" { type master; notify no; file "null.zone.file"; }; +zone "check154109.click" { type master; notify no; file "null.zone.file"; }; +zone "checkseven.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "ciente-a.org" { type master; notify no; file "null.zone.file"; }; +zone "cieplo.app" { type master; notify no; file "null.zone.file"; }; +zone "cj12143.tw1.ru" { type master; notify no; file "null.zone.file"; }; +zone "cj87335.tw1.ru" { type master; notify no; file "null.zone.file"; }; +zone "claimyourethrewards.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "clickbait.design" { type master; notify no; file "null.zone.file"; }; +zone "cnsa163.com" { type master; notify no; file "null.zone.file"; }; +zone "cock2-iota.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "cock3.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "cock7.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "contact-pro-8291-d01.firebaseapp.com" { type master; notify no; file "null.zone.file"; }; +zone "contact-pro-8291-d01.web.app" { type master; notify no; file "null.zone.file"; }; +zone "creosrl.com" { type master; notify no; file "null.zone.file"; }; +zone "curmmgdv.email" { type master; notify no; file "null.zone.file"; }; +zone "currently541.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "currently890.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "currentlyserver.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "dara3dccj.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "db.service4db.com" { type master; notify no; file "null.zone.file"; }; +zone "de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev" { type master; notify no; file "null.zone.file"; }; +zone "debutcan.firebaseapp.com" { type master; notify no; file "null.zone.file"; }; +zone "debutcan.web.app" { type master; notify no; file "null.zone.file"; }; +zone "delivery.attempt.failure.ebbs.co.za" { type master; notify no; file "null.zone.file"; }; +zone "dev.stream.mornar.app" { type master; notify no; file "null.zone.file"; }; +zone "dnwqmh.click" { type master; notify no; file "null.zone.file"; }; +zone "dropsmartchain.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "dsjoting.group" { type master; notify no; file "null.zone.file"; }; +zone "dulb6c5p5.top" { type master; notify no; file "null.zone.file"; }; +zone "ebay-mallwholesale.com" { type master; notify no; file "null.zone.file"; }; +zone "ebt-lilac.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "echoredled.netlify.app" { type master; notify no; file "null.zone.file"; }; +zone "elbarco.percentadnp.info" { type master; notify no; file "null.zone.file"; }; +zone "eltritongourmet.com" { type master; notify no; file "null.zone.file"; }; +zone "email.mgb.modento.io" { type master; notify no; file "null.zone.file"; }; +zone "enjomugg.firebaseapp.com" { type master; notify no; file "null.zone.file"; }; +zone "enjomugg.web.app" { type master; notify no; file "null.zone.file"; }; +zone "error3456vhubhornbase.azurewebsites.net" { type master; notify no; file "null.zone.file"; }; +zone "example223.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "eyeydhe.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "eyttueiu.square.site" { type master; notify no; file "null.zone.file"; }; +zone "facebook-avip.click" { type master; notify no; file "null.zone.file"; }; +zone "fame.pink" { type master; notify no; file "null.zone.file"; }; +zone "fassehoizubra-7696.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "fastdropchain.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io" { type master; notify no; file "null.zone.file"; }; +zone "fla-1001.square.site" { type master; notify no; file "null.zone.file"; }; +zone "flo4211.github.io" { type master; notify no; file "null.zone.file"; }; +zone "fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com" { type master; notify no; file "null.zone.file"; }; +zone "fnuttlie.wiki" { type master; notify no; file "null.zone.file"; }; +zone "fokeijonnekou.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "free-verified-badge-form0-service.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "free-verified-meta-badge-service.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "g06668706.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "gccndbqg.vip" { type master; notify no; file "null.zone.file"; }; +zone "geriodememerkezi.online" { type master; notify no; file "null.zone.file"; }; +zone "get-checkmark-for-you.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "get-free-verified-badge-service-on.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "gitanag.broke-it.net" { type master; notify no; file "null.zone.file"; }; +zone "gruprocuroipra-6493.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "h5.b9en.com" { type master; notify no; file "null.zone.file"; }; +zone "h5.metacoint.com" { type master; notify no; file "null.zone.file"; }; +zone "hcghij.top" { type master; notify no; file "null.zone.file"; }; +zone "hecregayatu-1014.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "hejmtxxt.guru" { type master; notify no; file "null.zone.file"; }; +zone "helenblunt6.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "help.accountsupportcentre.com" { type master; notify no; file "null.zone.file"; }; +zone "here-apply-for-page-review.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "hgbk.ldgknhk.lol" { type master; notify no; file "null.zone.file"; }; +zone "hhideiie.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "hitummoinneullei-5882.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "home-101067.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "home-103465.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "home-104341.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "home-105266.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "home-105929.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "homeattatthome.square.site" { type master; notify no; file "null.zone.file"; }; +zone "hpnefhqs.motorcycles" { type master; notify no; file "null.zone.file"; }; +zone "im25.net" { type master; notify no; file "null.zone.file"; }; +zone "info.supercitrus.ind.br" { type master; notify no; file "null.zone.file"; }; +zone "ins-business-home-center.com" { type master; notify no; file "null.zone.file"; }; +zone "instagaramgalochka.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "ipv6.43-135-137-110.cprapid.com" { type master; notify no; file "null.zone.file"; }; +zone "irmt0ken.win" { type master; notify no; file "null.zone.file"; }; +zone "iujf7839iofvkbcu748.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "iwimwmiwi.click" { type master; notify no; file "null.zone.file"; }; +zone "jagej73796.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "jfdjy.com" { type master; notify no; file "null.zone.file"; }; +zone "kalyani963.github.io" { type master; notify no; file "null.zone.file"; }; +zone "kexoigrufouddou-5902.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "kl1k-ds1ni.neupdile.my.id" { type master; notify no; file "null.zone.file"; }; +zone "kliind08.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "kreelo098.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "kremlcup.com" { type master; notify no; file "null.zone.file"; }; +zone "kshitij12375.github.io" { type master; notify no; file "null.zone.file"; }; +zone "kucoinglobal1.com" { type master; notify no; file "null.zone.file"; }; +zone "kxbztydc.black" { type master; notify no; file "null.zone.file"; }; +zone "labanquepostale.jupiter-analytics.com" { type master; notify no; file "null.zone.file"; }; +zone "leddevotoze-3146.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "linnkdna-kget.wxxzsite.buzz" { type master; notify no; file "null.zone.file"; }; +zone "llahi.info" { type master; notify no; file "null.zone.file"; }; +zone "llahi.vip" { type master; notify no; file "null.zone.file"; }; +zone "loffaummuddote-4145.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "login-att-10221.square.site" { type master; notify no; file "null.zone.file"; }; +zone "login-form.world" { type master; notify no; file "null.zone.file"; }; +zone "login-online-outlook365.com" { type master; notify no; file "null.zone.file"; }; +zone "login-outlook-midstreamauth.com" { type master; notify no; file "null.zone.file"; }; +zone "login-screen-103134.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "loginaccount70.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "loginaccount77.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "luk6414.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "luxlifemiamiblog.com" { type master; notify no; file "null.zone.file"; }; +zone "m.meta-accessibility.io.vn" { type master; notify no; file "null.zone.file"; }; +zone "madebybmr.fyi" { type master; notify no; file "null.zone.file"; }; +zone "maqpiexyz.click" { type master; notify no; file "null.zone.file"; }; +zone "mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "mayfair313.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "mdbrvlfy.black" { type master; notify no; file "null.zone.file"; }; +zone "mesageriepro33range1.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "metamsk-wallet-3.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "metttaa-audddt-new-02.firebaseapp.com" { type master; notify no; file "null.zone.file"; }; +zone "metttaa-audddt-new-02.web.app" { type master; notify no; file "null.zone.file"; }; +zone "microsoft365-storage.github.io" { type master; notify no; file "null.zone.file"; }; +zone "mikepattyjm.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "mobilemidasbuy.n3g.fun" { type master; notify no; file "null.zone.file"; }; +zone "monespacepro-client.3utilities.com" { type master; notify no; file "null.zone.file"; }; +zone "monetization-violation.github.io" { type master; notify no; file "null.zone.file"; }; +zone "moodengsol-net.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "mwsiekdnfjrdufs.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "mxmxnmx.mx.zya.me" { type master; notify no; file "null.zone.file"; }; +zone "national-au-b.com" { type master; notify no; file "null.zone.file"; }; +zone "national-au.net" { type master; notify no; file "null.zone.file"; }; +zone "nbaaiqjq.group" { type master; notify no; file "null.zone.file"; }; +zone "nexomyacwv.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "nft-time11.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "nichcheck.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "ns1.carrier-ast2-portal-apple.com" { type master; notify no; file "null.zone.file"; }; +zone "omadshf.ru" { type master; notify no; file "null.zone.file"; }; +zone "online-assist.live" { type master; notify no; file "null.zone.file"; }; +zone "online-promo-asb.org" { type master; notify no; file "null.zone.file"; }; +zone "openkimono.pro" { type master; notify no; file "null.zone.file"; }; +zone "opportunity-verified-status.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "ourtime.reconnect-dating.workers.dev" { type master; notify no; file "null.zone.file"; }; +zone "owouwuowo.click" { type master; notify no; file "null.zone.file"; }; +zone "p365kf.com" { type master; notify no; file "null.zone.file"; }; +zone "p4zv8crnrrha27so.94-103-188-123.plesk.page" { type master; notify no; file "null.zone.file"; }; +zone "page-center-manage.com" { type master; notify no; file "null.zone.file"; }; +zone "pavan-patil-22.github.io" { type master; notify no; file "null.zone.file"; }; +zone "pecinternational.net" { type master; notify no; file "null.zone.file"; }; +zone "peesom.chat" { type master; notify no; file "null.zone.file"; }; +zone "pencairaanndannaa.my.id" { type master; notify no; file "null.zone.file"; }; +zone "petty.wiki" { type master; notify no; file "null.zone.file"; }; +zone "pimnhv.group" { type master; notify no; file "null.zone.file"; }; +zone "policies-business-page-service.com" { type master; notify no; file "null.zone.file"; }; +zone "pottatrebewe-2808.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "pqo.hrf.mybluehost.me" { type master; notify no; file "null.zone.file"; }; +zone "programming--service--panel-totlyy-free-for-you.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "promo1.spik.ru" { type master; notify no; file "null.zone.file"; }; +zone "protocolsecure.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-1778406e4fec4394901793111c187dd9.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-19b834342e7d465b9f00b3511325a081.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-21dd4dc659614ceb93e45a6de4434502.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-2fefe932a6974485b987c9ba851b5c40.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-3a46d9914f494078a6d6237513e7a096.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-442ed822851244a689b3472ea2c6a950.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-682ad3b65d944376b919745aae3c56d4.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-7f5cf36445d042168bfacd712e890dc0.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-803839714a924882a7bcc2495a26860f.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-8161de4a277e4ee8b532af34954224e1.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-8376b5b2334844d193a525d8b8548fa5.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-9163a97d70394cb499bdd232be6c2169.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-98171471e0944ac3a5820ef719bf0640.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-a263e0790935412eb10cacc55bbced18.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-a291041b077742899b63a9982f04a56c.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-b50adc5d699a4f08aec37102c2103da7.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-c0a934c950e441db96b882789f53c9ea.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-c2c250050109456396c933de259a4fea.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-e42cb528b102447385e3145197916f51.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-e4aff507450c478cbe3f77ad23d75035.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev" { type master; notify no; file "null.zone.file"; }; +zone "pubgm.club" { type master; notify no; file "null.zone.file"; }; +zone "puffagroibrouwoi-8818.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "qasimk.com" { type master; notify no; file "null.zone.file"; }; +zone "qfjfvseq.info" { type master; notify no; file "null.zone.file"; }; +zone "quauwograssodda-3503.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "qysgyp.com" { type master; notify no; file "null.zone.file"; }; +zone "rajdipchatterjee.github.io" { type master; notify no; file "null.zone.file"; }; +zone "rechazaroanularaqui51.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "remote-fix.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "renggard.47-243-192-240.cprapid.com" { type master; notify no; file "null.zone.file"; }; +zone "resolvepanel.live" { type master; notify no; file "null.zone.file"; }; +zone "resolving--issue--with-us1.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "resqat.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "review-business-case.d2f7p3b7pucnle.amplifyapp.com" { type master; notify no; file "null.zone.file"; }; +zone "rlpqwefi.pink" { type master; notify no; file "null.zone.file"; }; +zone "rouloigeilleuja-9523.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "rulemec.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "rutinqqwin.shop" { type master; notify no; file "null.zone.file"; }; +zone "rwftfu.quest" { type master; notify no; file "null.zone.file"; }; +zone "s.team-pw.cc" { type master; notify no; file "null.zone.file"; }; +zone "sairanees.github.io" { type master; notify no; file "null.zone.file"; }; +zone "sanseipecas.com.br" { type master; notify no; file "null.zone.file"; }; +zone "sasklelo.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sasktelcustomerwebly.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sasktelnetwebmailservermaintainance.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sasktelrectify.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sasktelscrutinize.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sasktelservicecentterwebly.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sasktelsupportsystemwebly.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "sbcglobal30.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "scan-vulnerability-guard-v3.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "scan-vulnerability-guard.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "scanner-metamask-v1.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "scanner-metamask-v2.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "scanner-metamask-v3.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "scanner-metamask.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "sec-sign-in.info" { type master; notify no; file "null.zone.file"; }; +zone "secure2-validitycheck.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "securecapitec.theprimepoint.online" { type master; notify no; file "null.zone.file"; }; +zone "securerpcfix.com" { type master; notify no; file "null.zone.file"; }; +zone "seeteressecalywoi.github.io" { type master; notify no; file "null.zone.file"; }; +zone "seivviice.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "server.0e7p.com" { type master; notify no; file "null.zone.file"; }; +zone "server.2rk3.com" { type master; notify no; file "null.zone.file"; }; +zone "server.8q3p.com" { type master; notify no; file "null.zone.file"; }; +zone "server.n6b8.com" { type master; notify no; file "null.zone.file"; }; +zone "server.v9vs.com" { type master; notify no; file "null.zone.file"; }; +zone "sevvviicess.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "shard.blue" { type master; notify no; file "null.zone.file"; }; +zone "shard.skin" { type master; notify no; file "null.zone.file"; }; +zone "shared-d7590.firebaseapp.com" { type master; notify no; file "null.zone.file"; }; +zone "shared-d7590.web.app" { type master; notify no; file "null.zone.file"; }; +zone "shaw-101329.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "shaw-101587.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "shaw-106427.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "shaw-107375.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "solutionwebsitedapp.firebaseapp.com" { type master; notify no; file "null.zone.file"; }; +zone "solutionwebsitedapp.web.app" { type master; notify no; file "null.zone.file"; }; +zone "solvetans.firebaseapp.com" { type master; notify no; file "null.zone.file"; }; +zone "solvetans.web.app" { type master; notify no; file "null.zone.file"; }; +zone "sondfrom.dexlog.my.id" { type master; notify no; file "null.zone.file"; }; +zone "soyokai.or.jp" { type master; notify no; file "null.zone.file"; }; +zone "srdate.club" { type master; notify no; file "null.zone.file"; }; +zone "ssy.hmb.mybluehostin.me" { type master; notify no; file "null.zone.file"; }; +zone "steam.poweredartsworkshop.com" { type master; notify no; file "null.zone.file"; }; +zone "steam.workshopsreview.com" { type master; notify no; file "null.zone.file"; }; +zone "steamcommmuty.com" { type master; notify no; file "null.zone.file"; }; +zone "steamcommuunity.ru" { type master; notify no; file "null.zone.file"; }; +zone "steamcomunutty.com" { type master; notify no; file "null.zone.file"; }; +zone "steamconmumity.com" { type master; notify no; file "null.zone.file"; }; +zone "stepsray.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "support-metahelpcenter-id100003498934.netlify.app" { type master; notify no; file "null.zone.file"; }; +zone "sv5gardens655665.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "system-portalnu.duckdns.org" { type master; notify no; file "null.zone.file"; }; +zone "talwgam.njmolada.com" { type master; notify no; file "null.zone.file"; }; +zone "taste.baby" { type master; notify no; file "null.zone.file"; }; +zone "tele.zhngain.top" { type master; notify no; file "null.zone.file"; }; +zone "telegrambot-resolved.pages.dev" { type master; notify no; file "null.zone.file"; }; +zone "telegrazm.net" { type master; notify no; file "null.zone.file"; }; +zone "telstra-100408.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "telstra-100469.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "telstra-103234.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "tiktok-888.vip" { type master; notify no; file "null.zone.file"; }; +zone "tiltckshow.top" { type master; notify no; file "null.zone.file"; }; +zone "tnomwzrp.top" { type master; notify no; file "null.zone.file"; }; +zone "toeken.im" { type master; notify no; file "null.zone.file"; }; +zone "tonic.pink" { type master; notify no; file "null.zone.file"; }; +zone "tooma.cellinsurance.co.zw" { type master; notify no; file "null.zone.file"; }; +zone "tpdtepremu.xyz" { type master; notify no; file "null.zone.file"; }; +zone "trattujeilesso-3354.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "trbinace.com" { type master; notify no; file "null.zone.file"; }; +zone "treibrukeukonno-1395.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "tuesmad.firebaseapp.com" { type master; notify no; file "null.zone.file"; }; +zone "tuesmad.web.app" { type master; notify no; file "null.zone.file"; }; +zone "tyyyyyytyyy.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "tzcsjfto.chat" { type master; notify no; file "null.zone.file"; }; +zone "u.updatetrackgre.top" { type master; notify no; file "null.zone.file"; }; +zone "uc-whatstapp-web.com" { type master; notify no; file "null.zone.file"; }; +zone "udxcady.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "uklifejv.cyou" { type master; notify no; file "null.zone.file"; }; +zone "updatemail12.wixsite.com" { type master; notify no; file "null.zone.file"; }; +zone "ups-trackdeliveryapps.chickenkiller.com" { type master; notify no; file "null.zone.file"; }; +zone "usbest.cyou" { type master; notify no; file "null.zone.file"; }; +zone "user-transaction-overview.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackdck.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-tracklnv.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackmcl.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackmec.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-tracktpq.top" { type master; notify no; file "null.zone.file"; }; +zone "usps.com-trackvmd.top" { type master; notify no; file "null.zone.file"; }; +zone "uspsinfw.top" { type master; notify no; file "null.zone.file"; }; +zone "uwdtsczi.top" { type master; notify no; file "null.zone.file"; }; +zone "uwm-onedrive.com" { type master; notify no; file "null.zone.file"; }; +zone "vaishnavi1436.github.io" { type master; notify no; file "null.zone.file"; }; +zone "validatie-veiligauthenticatie.com" { type master; notify no; file "null.zone.file"; }; +zone "vbbu.ldgknhk.lol" { type master; notify no; file "null.zone.file"; }; +zone "verified-this-request-badge.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "vo4zzp.icu" { type master; notify no; file "null.zone.file"; }; +zone "vs41.github.io" { type master; notify no; file "null.zone.file"; }; +zone "walett-cont.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "walletauthenticators.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "walletcomnecitt.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "walletconnectdapps.online" { type master; notify no; file "null.zone.file"; }; +zone "watranfart-fdd6a8.ingress-bonde.ewp.live" { type master; notify no; file "null.zone.file"; }; +zone "waxed.wiki" { type master; notify no; file "null.zone.file"; }; +zone "webmaillshavv.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "weeeqweeattt.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "weigh.skin" { type master; notify no; file "null.zone.file"; }; +zone "weigh.wiki" { type master; notify no; file "null.zone.file"; }; +zone "wgqdqvtn.baby" { type master; notify no; file "null.zone.file"; }; +zone "wgqdqvtn.pink" { type master; notify no; file "null.zone.file"; }; +zone "whatsapp-rqr.com" { type master; notify no; file "null.zone.file"; }; +zone "wirelessvoicebtpaidmailinfoplay047.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "wscs1231.cyou" { type master; notify no; file "null.zone.file"; }; +zone "xn--metmasklogin-vcb.gitbook.io" { type master; notify no; file "null.zone.file"; }; +zone "xojautruffeuttu-4659.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "xraiz.info" { type master; notify no; file "null.zone.file"; }; +zone "xraiz.vip" { type master; notify no; file "null.zone.file"; }; +zone "xsuweamskeidjf.weebly.com" { type master; notify no; file "null.zone.file"; }; +zone "xya46.cc" { type master; notify no; file "null.zone.file"; }; +zone "yahoooooo-108560.weeblysite.com" { type master; notify no; file "null.zone.file"; }; +zone "yavanica123.github.io" { type master; notify no; file "null.zone.file"; }; +zone "yi5lq-syaaa-aaaag-acfsq-cai.icp0.io" { type master; notify no; file "null.zone.file"; }; +zone "you-can-receive-here.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "zeiitgeist.angelocachero.info" { type master; notify no; file "null.zone.file"; }; +zone "zenixoikitti-5809.vercel.app" { type master; notify no; file "null.zone.file"; }; +zone "zeznjx.shop" { type master; notify no; file "null.zone.file"; }; +zone "zwzcn.com" { type master; notify no; file "null.zone.file"; }; diff --git a/phishing-filter-bind.conf.br b/phishing-filter-bind.conf.br new file mode 100644 index 0000000000000000000000000000000000000000..6b073835959e8d528fe2d516f0f199d69240970d GIT binary patch literal 5536 zcmV;R6<_Lt`4NEpO_l$ze@*3icSC|t6ypAFLrC2L4idHmGC{Juv;Q|UrG|ll0kCBO ztgtXJu&@C4&y4&s_V$qM9+TUfUdk=+2558KzqenJQe@~Bscg#BRnH5hrR5hPf`);G zCG#w@(wD?xB z`J0exDz={w{s?eC{$N$p zM?4d;VD|SP{_^9o*(nDs`17&$e(Z~LOX?fAG`wtw?ShIVn$zDLu@c`q`pb_;ZFRQ+ zHhyH#kzam13WRDuA4$P}72dZ0$zw@<9e9UR_r^Y#zG_*%@SEiE>7PS~WS75W9E?mZ2tQAzlYh-_>s2n`|aaQ4Cd}fF28-)i+GP;O=cwhYe~O%?$_Tw{{OdN zVPPdFzNEYchz1&>wt{OZB+|D{46yYTd-C*3pJIcGn~`$T%ql~@UzTdOE!|5pOJT#W zvx;yg37==eg`~%Z?L`Ya9&l1;p_w*v(oswY}F=vJ03 zQ>}=oC$3a8;mlBfoT43e9D-Zgp{H+Ew@MmEMm$qS?xeQTooTw?XHF+To;2DRW+H|0 z#Y{(|ujS^Io=&W_6&bmDjuz|Az7s;YT6HUJPVmswnvde3pT~{DaXhWVEi7~k%PX%h zx|Qwbzv6~VEn9iPmJ`xrBeUf~alsXJDP?$Sn%l%KFe zCIKJ=IpE%~W2GM()kHRWp`$6RYWvurmzquzFvgx}>d(c%GuJXUcSsxYC7&g{yEu;R zCb?Xs7gEtRaN!Eh*onDA;yVK>$-U(-% z83BskzH?w#@x-9@QZjA0x;-^>OZ(Z9-k`p|l(JvSWSBM4Wy1sG$t2|x>1nc|!TGWi&X}15c8R8$%>il#k>H1Ox%%mq?IWZDA9*U*vwGIh zNv2Vysf-tRPBzrWaj)yTrj(Kp`n3`l=`h+JIYbg~=w0t&hkSUT;?1(9(MZ6KzGDcr zF#6i=>{|=C-{_^{vE7yEdkHx5WO5-%g(e$BUb5H@tJ~M5OjE_t)G5vQ9GicEgLpek zkax3f+diG59`}G%FWG9SvOB<<}IlIJv2xa2D7714z4rD^}#3Hm;E}Cc~-; zx3wk|^npPa;VKMYp+XxS2NBA!{SG?Z#t1HY@yA@}(hw49;Po-$UYl8vifvD{mxI&& z9%?%>crK{_rZyTJA<`!4Xaui)!kDJgczxXlUvy$q92pVp1aBq>n3Y0iYm^jrGDYvu z_K2FXS?D1hr2_rjU#M2H?c^wZEsaPgl(&&owW8jo0YC+pAiub-80I`QOu^HYS5Xc0 zJ8v$9l3GpL(7>0Ng0?WyB?g84*q*1ZQS(-L=t{K~LEtz}tPMNKH*A#GKN>X(eK}AG z=8p=+nPP07YsHzRdN^D_rfH;5*YV>-IE(}wlVM^l_t;8|}y43Cy8PQ1>%f@)M;IdhZk>dz$ei z+Z&h6dbLnsoW@jfK#E@b-Eti;a6yf`wiQdOTNE!Fb>Ek8QgQ<#8qh?lu-#hmj?EC( zsM)drUD+aFeXENA6=d-KIq*Lk92H_MR|N<7*P)Ox#)(X`_e6p8#PP`zH3tV)as$c{ z#)z!#eM8!jzvoD=QscR&u&QZ+XCy4+M)#2StsyS<{v;@E)0$QOH>RShB3q^;O3zELXW&@7V<&$afrB?+iU72 zFJ;snC6TPv@#(%eDl&~UcM(1F!CRVrEK5x@#Km41qwVvg($l#Px0WjMJ_p}Xk(7rj zSrHsZBZQERkxlT%JFEz4iQWgMp}ce$uQ3xi(@`mE8DU3yNR&H-2(95-(s#HD#7uUo zDP|E`uePbw*s1Z^A`lG#Kt5TUfxP1eKs+Rx{K0lh6*tgJ=7VSX_N^$vIVC(|M$pYp z1I0NDg84Mn%YoFcwdkdD1tIG^T-Z3HGO)yYeBq0Yq%{1^NHtNQ8F+c8Ng@hjK zVqw!X&4x`iWfm^p=iuH8JyYbq7i%g3cigeQ@SCVo3h(7Gb|QWPsy1X?G00s80sof8 zL*$qdq~r%Tb#3aH9xTsNN$O26o4=t&)Z#}i>8L;^Wu+auu9`ZFc~PsTdjRO!al3As zu6|k5vtORJqOZ8X4Sf*0a-q^J1M#`{&!^L6$om?`iW_FPjokNakh?!k8Ma%-ag^E> zmB`>nDiXFJ?37G>!i_0Nq^uE(dl4jSV_j3glyK=3QXl(XQqDNG4HMDxEEYD62%{So zWimk^mrSZjhZmHTz)@Msro}V`ldP~I0KG%+UyKAy1P(@106 zy45~ocy46_c)@l;Sa!b+0@+j{3xNpCMrz|Km zw9p0)@_V4QD@dWQd5$A>ti((j^>WXK;a>$;3+0PMay8xmhArj%3K__2!A`Hw=X-~0 zd=&4t!J4Gf90_xz9NJ2ZF!sH2utP_pxY9SwOkqq+HjEI0Uvp>>nt-A%;w|6_vZ^Yh zTXkbwZ3<|Pd5Y{Q=)iz>O#q%7ghN-_6fRX@Z(^WU2*YaN8UuVU^nN-Qg}rs*X}whA zMf^?_IB+?1EN0x#y_l`n;?jnD3eeoRX_kxqJDW9>sbzp$#od=osXVaD1t(PvtN{%5 z!8++QIaArbqL9S0XuNA-X=NiBd&ST!u9ol>a(vb>BCmYy?VtUV_Yd7a^m_x{J1&k( zn$;2*gw=FCAgVki!Px<%_w&tJX$ToVWxv5+XCBOQ?8M7W5jgLYZsz1y1rC)?(=0bm z3F|VAXJ)MnBHM=CS?+OcFM5_8LR%wuSM+d$&{}Gp(!H<|#lLxIr39MeOoK0<41A@% z;OkG;-><8qEr=Lm#aWsWNJzl+=7+OU~#!@ka$?k>$Ry)@4a9R~gqRSLv5& zddNw?Vj*mWhx(qguesJ0glWY%05F8iRoHo=-nM`PPRQhdo;D&x<8|yne+b{A0!FmT;Nm^7_nW4n@sakto^6ZcMeQw!ft15zKrJn@s7*o@ z9bQO;r9Xk{BIS4&y4Fbd+j-n7*V1|?Limi6yJs{f0j7lfSF*N}Uix<51Oh_51Xk5+ z$!R;%t0fwq=Qg-GfGN=Y+0%dJrw0HxPcP@$(l55j?sdWy;iZzY)M zxR~`MEQr$P8;=tjj_fg^i-;jZ15Tbpnyq+3AYFea`&N~kW$S`1#Ts1p~LKEt>)O~+|N8mu1$2q_#+UhrvE1OHtRtOIA1;Q-9U+SC@(g_%dO^cyobTp5ncDg|DG zo(02bxOI_DOhr8&mPBREzhsjz9?O_J=(r_lc;7kTE!S@WTY@E9a zhD!0^?BwQInAt`xy+ycuo$x|4rWt2e=}Cr=w^9ZadJBmx{f4xtCS!S+gF=QbOvdY| zw3dRi7W96+blgs;tz=e3R2C)h7$Ug&tssuwf4!Yq(82|-rXXBkGBk)uTjVANxx)O|+~L1~351jE(r4X9a5CQR@Gz)nj~F@=c(_X04e zFgxefgbbu`F(5NbUlC>tUT}pvautOIKL@Ei_rh9X<}kqhbi{xf%(ro2taI8+uG|!C z=_YXrDdC+KvzuliMHxA3lw9dq6{^9fsCnooAV$rM(#$I}dxtU_13}1OG?T@^jck;0 znprRBeqhUhXgK#Q!0dIj{efQ{jWCKash!nI8|C5@X92b{D2JN-w5pyUdIn(R%u$)Z zVb*Fw6b2=io|&MQoz6Reh}1#E2um%=)iSP<$UJj_m!@xMX@80168nzNcs6`fqx|=P zaY@XYL~A7kAW}2AwNL8ZmizE4JVUZ&v_kJ#pQyaEZipD%&v6bya2`R4Divu#*D?b+pmyk(3j3A@wCaqDi zy`kq8Sif8+FbAhs=`@IF4(ZG>eD-Tk!?{&r>vp^^jLCAii>PI6B`uh?4aXCR)ndPe z*;-84(HGv7(NliEuaxQZF?euuSL|`nDRpa$U#5tmwG%M8=qeM9`lqw-?BWPTRUsbG1tD60ST>E{NEf8 zW4&@~lGnUucx#ua9uWX@ktdtuSY=VhX^ zj*0VR{(ML}?nj%4Oipr?@lxx6ECXsFr>rDzYb8YPWu^)MC(@G8UgYH9xfCIXGElgG z9=)r6+`c$h_j-cN&Gv!RZ~hf-S!Vd+pS1X8=xJZ^sA@Z17-%dT`HSf((V73h(EcP=>yA-rCl4dzEpRCWV6of+G%TZ$uv1#^b>^y=kB z=6N=Z_j}s9uhSQMl_Gs}*{^Rsu-t-vSt3mP>vD7Q^7^mnrR+dGZrk+e%v1E^c0HmW zq2m$hK4vBf_X@p_C#K2TD^ZA)+Qpjc)!DKmm(?z!Vsdr7aJ)*+g>Y$gG%Yi*?GSpe z4lMSw*Y9`mDTNVlV*A&(XY9q6W-_QZR5tVfXmNvzx4CL~GQEGGbvO=^e3;L+7~$g~ z+_GSIyc`~A_dKb;OOKGJ94H=&!9@fQAC2UN--PwtPA;nrHJ$r&GdLl&HN%;>l9TwG=@b<7 zho3`BW>o?M^Jg(%ge zo5RuT`t`BN`SLZ-s z7{Mms`T;2v5>PPP;@IG3%4Dm)%{MM2@7SqNCQ?68taFcRCY;_?5a0SKPZ+(97;*GI zhyfOb8ZF*Wh4j_ib0ka&ivMZjLZ4Mtz!aV_i{t#z}Fk^_y{VQ zDUm9Q$}FYfe|Ipey2k^|%4FAcS9MKgp5POuh+lX2=51Yef|T!=AXj~o1D?!C8cfu<>#MgG%r=F!}{|omxqkdShpmI zKW|?n`uZN<{jW}g-~T^v{%QGqD}ww-IHJzO3>)~@%kumG@eQ#q#}}4M`U1;xi(!7s zpT8|l`l=;%U+#}( zY4bbV{QX~kefytZzX8#SkwypSGkP9E2^uAWQC5u7cM|q=f#h`ia38x%#UsPT>Lxz4 zS{I^B__M+_9~qtMt@(rj(Xob%V?%K5w*~fFn;pFfbflsa1J1W}cv9&U@A$bGNMq>i z?GE~gdC|UB?+(#fr)6@%w@a88-wNK)%n=+{q{A)WqTHORV1IEd+IdQ~;ExYqh!zf? znop+cM7y4MUt^6j>fX))R{~mjJi)ie-rnXi*yQe@j@^0Og68m}+lrtTGq?En<}WvNsHF^RfjNdH+~ndNU~o3$L?|be@KznqXBqgB z+=jU&MfnQ&y)|$zLR^(wn$7vET%~V}lwLNQJQqNu_QQs_?(G9q>rA1UW05IDw?%iy zh-zIb!-IRZ9rH=z8tCBf#ooPb%h~wwXi{h*Xuue1lr%Hc^3<4isI~P8rPuPwMvpD| z{k9tCZ5Ct;vP!~j2eq8VYmyRjGO{xL0<4kSKS4Rk3sD_b3>d1_K}RyR`}={avCXKZ zh|cSr>bhyDJXB1m&a<)m5wL>Rc7h$^9mO^-1qxA78{Ewv7dr1=-%oYH5dm?#p{G9r zw;#K)E^cOpuf;}wdujA^7#DsdvLH#N{BZa|si=mENk|^G z^3H*^nNPpV?(brJKlTlFckGQp$)K@h|50Kbhp?Ys@0GIOfocRWU1v8525MEE@*Z%m zm#~-y1r?4oreesaa=vx31VeGrk+F0nO4?I_lYSkRWm)?>joW$1iwO z0s8>gTk4sg?S20cl(%lPxM^8RF3#V|MuCyiJc6HFeWbfM!6pe4onq8 zS1abyOAFGP3SK4h?Ifhu{L}HOwmro%abI1V!baNlEG)Ct;TEjnX4E?nL!O{$@ie}j59I)8wiq@{cV{zB17~#VhwOF>f|YKnmTn7CwjbxS z3}#uIEu>4>8>T4NQ@sJk2sRwqr4{DK8xeI#L8HcU<^szWK?e+xlQ7De;Jp}HLuSk_ zVv>h@(4&>>mgj;~Dcx5Td9#a4gHUJ^$++>StTmzZk-`mpB^{?PGPOVCKwMuy<34iI zVX9o5z7>P*a0g$B=d{C&35{$+oC|TbB@~b5n$I^`n;xW%M;X#MFeYjsEz+$g#w4Um zgoli#mdj;lKoOeSPo6Ep^1CE`@v*uN`bHZUlC0%k2*@g84b`xGk~-yF(~S8}&2$7` z6d@O*HJI~pI&PG+dt8c#cf@s_&Ao+u0#S$*kwKOd39gc;`3^ZwU2VuLVT zHJGKD(fV4e=r^kUI>6#a6@vj~*4n=5N39z!nQj#6r-qM4$%&Cca)m;!VR3&yk>Y^7 zkG6e;Xxn_C@uH=B*#Oj$wDdLO>N{qISTeAkKz@lVC&)xF)FasICwfQct3^PTS zf}c?Wtx$Xl`N}x$I;%Dxm-OLhRC?+@0Ua2et#Z!%O?^I zqUWr!m!7J?M=sfbV#!h|5y1&3R*UuEQaZpLwJt8L)SyDRHS+GZazeCng?1}EO}291 z;S${QP*FBRKlPPZ0)bPe?22q{ue+6vkoeK$Po{ad3;tV6*E+p*g&~Pp`A(8l+wLWB zN=W{vKBuk!8FXTQQ%*Ha2#yOUTKMq}AizR2Ry;1LTi=*n`a&A?`C~C02DNMU_Jg~e+-Ux0(%J2D9>!jl% zS~WrO4IRQ{@6UJa#j@?9=Zm|RYI1a;2(vt8I&w1?ueDxqUDL-$YUiWutnUH~c(q_k zs20`v%)R~AU3+X>z`E;oNm&jYq513-%mMkjI*D+1@Tj$_v%1x4j=Wr)0q3eI%8N_K zx}sxyz}J9l#5mGg^A0P#S`GV}J#k;CjQ65GDretM-zuUC+V?*Ib)r*cRGAX~$^WV) zIWL?#=hh*Vq1JZh~04 zDTtfoETdfKETk{DTK5TVyZ0?;4PgTR4hpoo3Rg62Xb{N^@g1z6A zJ_bHk64379*2jvU%S+xXW{c~>S)F3<1|PwpPP5@KCLE2J zx>{M{wvbz6cH$kzHCB`OuEu^@N5IUhB{a3r2r4UN$!@&)Ubw$MfZmr4Jr0i@dnv6X{Qs!YX+Q)=JcnnHUl@ zoN!TV?eZfE&FAA9lvX}f3+`ia7FH)$r*OojclE8$6-_R zQib{Ar%)^)ELM!@q)7fIH69)f>cWZ_h<|RN!foQ}bPRj23E8^Yu{6yOE>;mxtGmIL zpCP)g)m$uK_#?9zxvS%BJ)29PeP8kO>q;i~Rbc>QvD&gDWs-5_*EAVDKct_ZOls~f zET7LP)mh$M378)(^jawD{+FN@VjAF#lRYxnLwT z#T`xm2dwlg#VaY@`}MuNU&UjIxt>x#?v>Wx+tj4ojzuczQSbESb$L@!F!>#eEE$pX zv6k5rZSuLce06%4_t^x@_WQ*a_U(SDTZt-UPi=1Xs(^;Pvj)UerTxON)8l`m>sgsj}CYbIyFYVn!T_Nxj`)EvG54Tm;rXw97;MM!u!Y zy8-NBZS(UMWiVc&AeN}IO;*~n{P1l<(RLQMXl!ovmwS0$*#gD_ikjw+4@Z6LVJP*K zkgrTo@4^EbnxFEoLlxV5XfM&?W~k+WOF-r=6A(y_bCm0ve=FMemH=D|4@;9mTF&#c zd7y4j!i(lfyKnARn1v821s#^J2BRvvZ#z^&2nCRq>S17LeFfl@iCgWhtRLjhyM#dSZFc{toHQBCHOc27TkljcsnW4lOZgelE zo^TCnV!(y$4REwAutKY326uuOZDCX+w?jV-9mu}NiA_=urrK;QSeO`x^p=;25U%=A!gHra`Vq7032ZU}mspcpu66nwPR^36Ef zK@EsG^@`h$OD=JPL}$>^Og~hcje^X^mI&M%!-Ybk={4w4V184^)G}iP;Rx6vKjUl| zvcDF{qq4KSBequdoJh~)G?<~wbf)+;;S?yN3g?7jRL_iNQX0%KYTyHrvK#D+NtrSu zv9+@2G!l%>fk21UDbb`DX$N*djbOXJT3W+kXV48(H!;DHVif7L)LICoG#D~gGc)C1 zFo!NM44jU*HF>Y5k!I%>y{=_O4uinm5lS-jHK}?-IYqk0Y|RwZ3Qr|EiTq;vX~IO% zjkx`6ARR?F>zI*4B{RCiaLB@vjD~<5CvGrqI!lmZH0vpubk8V8X(cm;BKvd90Vp&0 zs0WEUnspdBno2qK)y$w~CXyg1U;#2B#qb_Fi4<)Ol29#AGb0ullyDFh=rAd)HyGhaI#c%ST4p%aO3)FR87qQ;jRMe!Kp~9@&k9n_ zjI>r@iWZ&b!>AQ7I}8#Ns2N1ZYPo>za)r@N8pUVUfD$tr(I{+2T(PN|7O(@wc)?*S zv>^trY;RFPO_>OIuls6dERwXuO(DRsq{X5WJsRkMTf}r%DG|(TtCvHSp;#;D7@UgX zcm#(ElhiuwdY8LfZ>2|Z@Ahi%JG>XSMZF&qXE;Z>@4*<^F!bJ9Gd=hDEWQGc%6Gg3!5@-q}G#4m5{n|j! znU!{b*;8pQ8fm_|iAj9@oFi9W65ik~6WdN<=gZ$)!9lx*|SlJz!y~Q=N-n-ah@z_bqcwzBgf7F zaM^`f*gaW>3Fh=G>%Mn0#u)&5R{TnBh5RL3DQ;BKi7|t&Ah9CWq>3iPMJ&dW=Yagb zH{e5eSSEn=kg)n9>H(-vMSqHR?;#PqxFiRPRZQva=c#;b-j?S&vt2C9#V{ z73pb)V0$yH9p3ad{|!A13JqSeq&WHoOfitQo5Ay9x?YVPM{D^`_KgtkU~U5w)G4$j z6V&}(a!KW`)tw1ye2kF}HE!F;Mui-oc-mss2^}T2v=&fAFR(6!lHQjp?TrPB0t%jqBSi28k zQvyWaaz^v2S{sNaL*6!tG+vHnuzu&1%@yT{c;dwrhHOTpXTEala@di0rENy|j zvx*$6Pu}-dQp}aE_$^TD(qvY z>uE5y3b{48_0D;5EFWB)3n`n}OU-Gyejyp`)-t zo0S5U^ii`C6NnTOESbQiBYx1VKT7JED-N7nBs+MGg_=Fd8r)V5lMcrdn{Y!E>ppy$ z>0u2c?66fWHVbwgotP`f%EUzf^byQK5Y(zkwT2rgE#OXF#}?BmlH4zZ(hK$*BpS>)nr>EPdY`lSUOHG;1?a>;iEoiqqOnq?+xO5y}9TKsY&7`Q_GM?fnA^2AZ_y`=QlPK@{%=g{T`De zM?U@lQ9ZoXaz(>6yvdf<1fB?bVry|tl?G`wDhMW*hfdCi^Nnjuql(89l*$OWCtv?#)? Of`0(|3(PFdj{pGqeGxJM literal 0 HcmV?d00001 diff --git a/phishing-filter-dnscrypt-blocked-ips.txt b/phishing-filter-dnscrypt-blocked-ips.txt new file mode 100644 index 000000000..58ffda3f4 --- /dev/null +++ b/phishing-filter-dnscrypt-blocked-ips.txt @@ -0,0 +1,7 @@ +# Title: Phishing IPs Blocklist +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database + diff --git a/phishing-filter-dnscrypt-blocked-ips.txt.br b/phishing-filter-dnscrypt-blocked-ips.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..4adc382e077a73f671ea6040878cdb44cf9751d7 GIT binary patch literal 186 zcmV;r07d_yXbAuy7QesxmNW-w^RWr-eL!YAVBc;y+1<;wK*G9$E{-8hG(A~}irH~! z0yOYj+>3EF%-AqJ9hYm2{#YF|PN;!b0PG55rhbfOv(bF@oKAT@<<;s>4IGNVjMSJh zgCa_FJpkGRVy!2aJ!&A^OCWTWVI)Z~f}L(Aj*zI^T;b#*Qb*BY5(FcvHZe)@ z@%2WnKj3nhd(IsufrAQ~IP9eIQgsb%b{-bmh>KP}j1oB73IkOfimaHYd7c*KAw7#(^%?0u{S@3=#u^5Qb9=4`r=IUME3j0Y>5HS P7%ih0Hd_S8E&%`lxz%9l literal 0 HcmV?d00001 diff --git a/phishing-filter-dnscrypt-blocked-names.txt b/phishing-filter-dnscrypt-blocked-names.txt new file mode 100644 index 000000000..0f2e38733 --- /dev/null +++ b/phishing-filter-dnscrypt-blocked-names.txt @@ -0,0 +1,434 @@ +# Title: Phishing Names Blocklist +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +1111365dh.net +12931-coinbase.com +215323.com +260aesthetic.wixsite.com +3650947.cc +3659ll.net +83291-coinbase.com +94-103-188-123.plesk.page +9825057365.com +abctrvabc.com +access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com +acclimatizable.fun +account-update05.myvnc.com +accounts.google.auzen.us.kg +activebusiness-unlocker3.com +addwsrbh.green +ahnp.vercel.app +aldg.ldgknhk.lol +allegrolokalnie.pl-891241214.buzz +alutipcentra.pages.dev +ambil-pinjaman-daana-payleter.xforms.web.id +ambulatoriprivati.it +amev.ldgknhk.lol +antail-conv.com +apply-now-to-receive-badge.vercel.app +artsea.pages.dev +atmailupdatewptnskmdinfomailacct.weebly.com +att-101072.weeblysite.com +att-1041page.weeblysite.com +att-105714.weeblysite.com +att-105819.square.site +att-inc-107097.weeblysite.com +att-login380.weeblysite.com +att-login522.weeblysite.com +att-service-102155.weeblysite.com +att-sign-in-105669.weeblysite.com +attcom-100762.weeblysite.com +attcom-106808.weeblysite.com +attmailservicenow.wixstudio.com +attmailservicenow.wixstudio.io +attmailsrvrdesk.weebly.com +attnewmaill.weebly.com +attyhhhhiiii225.weebly.com +atw-tau.vercel.app +authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com +authsyncs.pages.dev +autoreplyattmode.wixsite.com +avoid.hold-managert.com +azbin.ir +b45018.com +bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link +baiii-wong.cutvi.cfd +basvuru-online-yap.vercel.app +beionfidi.pages.dev +bet73nn.com +bet83039.com +bet83054.com +bfrescentremebermainsetreouytnoy.weebly.com +biggggggggggg.weebly.com +bitnode.pages.dev +bitvavobtc.com +blackhere11.serv00.net +blss24att.weebly.com +braucrarasuteu-2470.vercel.app +bt-102124.weeblysite.com +bt1business.weebly.com +btuan-dan2-resmi.top1.my.id +buildingdesignsusapdf.s3.us-east-005.backblazeb2.com +business-page-property-897432967.netlify.app +caipora.xyz +calm-pothos-3b24c9.netlify.app +carrefourarabiank15.pages.dev +caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com +catgirl-appverset-nya.pages.dev +catxtokens.pages.dev +chat.94-103-188-123.plesk.page +check154109.click +checkseven.vercel.app +ciente-a.org +cieplo.app +cj12143.tw1.ru +cj87335.tw1.ru +claimyourethrewards.pages.dev +clickbait.design +cnsa163.com +cock2-iota.vercel.app +cock3.vercel.app +cock7.vercel.app +contact-pro-8291-d01.firebaseapp.com +contact-pro-8291-d01.web.app +creosrl.com +curmmgdv.email +currently541.weebly.com +currently890.weebly.com +currentlyserver.weebly.com +dara3dccj.wixsite.com +db.service4db.com +de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev +debutcan.firebaseapp.com +debutcan.web.app +delivery.attempt.failure.ebbs.co.za +dev.stream.mornar.app +dnwqmh.click +dropsmartchain.pages.dev +dsjoting.group +dulb6c5p5.top +ebay-mallwholesale.com +ebt-lilac.vercel.app +echoredled.netlify.app +elbarco.percentadnp.info +eltritongourmet.com +email.mgb.modento.io +enjomugg.firebaseapp.com +enjomugg.web.app +error3456vhubhornbase.azurewebsites.net +example223.wixsite.com +eyeydhe.wixsite.com +eyttueiu.square.site +facebook-avip.click +fame.pink +fassehoizubra-7696.vercel.app +fastdropchain.pages.dev +fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io +fla-1001.square.site +flo4211.github.io +fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com +fnuttlie.wiki +fokeijonnekou.vercel.app +fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com +free-verified-badge-form0-service.vercel.app +free-verified-meta-badge-service.vercel.app +g06668706.wixsite.com +gccndbqg.vip +geriodememerkezi.online +get-checkmark-for-you.vercel.app +get-free-verified-badge-service-on.vercel.app +gitanag.broke-it.net +gruprocuroipra-6493.vercel.app +h5.b9en.com +h5.metacoint.com +hcghij.top +hecregayatu-1014.vercel.app +hejmtxxt.guru +helenblunt6.wixsite.com +help.accountsupportcentre.com +here-apply-for-page-review.vercel.app +hgbk.ldgknhk.lol +hhideiie.wixsite.com +hitummoinneullei-5882.vercel.app +home-101067.weeblysite.com +home-103465.weeblysite.com +home-104341.weeblysite.com +home-105266.weeblysite.com +home-105929.weeblysite.com +homeattatthome.square.site +hpnefhqs.motorcycles +im25.net +info.supercitrus.ind.br +ins-business-home-center.com +instagaramgalochka.vercel.app +ipv6.43-135-137-110.cprapid.com +irmt0ken.win +iujf7839iofvkbcu748.weebly.com +iwimwmiwi.click +jagej73796.wixsite.com +jfdjy.com +kalyani963.github.io +kexoigrufouddou-5902.vercel.app +kl1k-ds1ni.neupdile.my.id +kliind08.wixsite.com +kreelo098.weebly.com +kremlcup.com +kshitij12375.github.io +kucoinglobal1.com +kxbztydc.black +labanquepostale.jupiter-analytics.com +leddevotoze-3146.vercel.app +linnkdna-kget.wxxzsite.buzz +llahi.info +llahi.vip +loffaummuddote-4145.vercel.app +login-att-10221.square.site +login-form.world +login-online-outlook365.com +login-outlook-midstreamauth.com +login-screen-103134.weeblysite.com +loginaccount70.wixsite.com +loginaccount77.wixsite.com +luk6414.wixsite.com +luxlifemiamiblog.com +m.meta-accessibility.io.vn +madebybmr.fyi +maqpiexyz.click +mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev +mayfair313.wixsite.com +mdbrvlfy.black +mesageriepro33range1.weebly.com +metamsk-wallet-3.gitbook.io +metttaa-audddt-new-02.firebaseapp.com +metttaa-audddt-new-02.web.app +microsoft365-storage.github.io +mikepattyjm.wixsite.com +mobilemidasbuy.n3g.fun +monespacepro-client.3utilities.com +monetization-violation.github.io +moodengsol-net.pages.dev +mwsiekdnfjrdufs.weebly.com +mxmxnmx.mx.zya.me +national-au-b.com +national-au.net +nbaaiqjq.group +nexomyacwv.weebly.com +nft-time11.vercel.app +nichcheck.weeblysite.com +ns1.carrier-ast2-portal-apple.com +omadshf.ru +online-assist.live +online-promo-asb.org +openkimono.pro +opportunity-verified-status.vercel.app +ourtime.reconnect-dating.workers.dev +owouwuowo.click +p365kf.com +p4zv8crnrrha27so.94-103-188-123.plesk.page +page-center-manage.com +pavan-patil-22.github.io +pecinternational.net +peesom.chat +pencairaanndannaa.my.id +petty.wiki +pimnhv.group +policies-business-page-service.com +pottatrebewe-2808.vercel.app +pqo.hrf.mybluehost.me +programming--service--panel-totlyy-free-for-you.vercel.app +promo1.spik.ru +protocolsecure.pages.dev +pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev +pub-1778406e4fec4394901793111c187dd9.r2.dev +pub-19b834342e7d465b9f00b3511325a081.r2.dev +pub-21dd4dc659614ceb93e45a6de4434502.r2.dev +pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev +pub-2fefe932a6974485b987c9ba851b5c40.r2.dev +pub-3a46d9914f494078a6d6237513e7a096.r2.dev +pub-442ed822851244a689b3472ea2c6a950.r2.dev +pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev +pub-682ad3b65d944376b919745aae3c56d4.r2.dev +pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev +pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev +pub-7f5cf36445d042168bfacd712e890dc0.r2.dev +pub-803839714a924882a7bcc2495a26860f.r2.dev +pub-8161de4a277e4ee8b532af34954224e1.r2.dev +pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev +pub-8376b5b2334844d193a525d8b8548fa5.r2.dev +pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev +pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev +pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev +pub-9163a97d70394cb499bdd232be6c2169.r2.dev +pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev +pub-98171471e0944ac3a5820ef719bf0640.r2.dev +pub-a263e0790935412eb10cacc55bbced18.r2.dev +pub-a291041b077742899b63a9982f04a56c.r2.dev +pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev +pub-b50adc5d699a4f08aec37102c2103da7.r2.dev +pub-c0a934c950e441db96b882789f53c9ea.r2.dev +pub-c2c250050109456396c933de259a4fea.r2.dev +pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev +pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev +pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev +pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev +pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev +pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev +pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev +pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev +pub-e42cb528b102447385e3145197916f51.r2.dev +pub-e4aff507450c478cbe3f77ad23d75035.r2.dev +pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev +pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev +pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev +pubgm.club +puffagroibrouwoi-8818.vercel.app +qasimk.com +qfjfvseq.info +quauwograssodda-3503.vercel.app +qysgyp.com +rajdipchatterjee.github.io +rechazaroanularaqui51.weebly.com +remote-fix.pages.dev +renggard.47-243-192-240.cprapid.com +resolvepanel.live +resolving--issue--with-us1.vercel.app +resqat.weebly.com +review-business-case.d2f7p3b7pucnle.amplifyapp.com +rlpqwefi.pink +rouloigeilleuja-9523.vercel.app +rulemec.pages.dev +rutinqqwin.shop +rwftfu.quest +s.team-pw.cc +sairanees.github.io +sanseipecas.com.br +sasklelo.weebly.com +sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com +sasktelcustomerwebly.weebly.com +sasktelnetwebmailservermaintainance.weebly.com +sasktelrectify.weebly.com +sasktelscrutinize.weebly.com +sasktelservicecentterwebly.weebly.com +sasktelsupportsystemwebly.weebly.com +sbcglobal30.wixsite.com +scan-vulnerability-guard-v3.pages.dev +scan-vulnerability-guard.pages.dev +scanner-metamask-v1.pages.dev +scanner-metamask-v2.pages.dev +scanner-metamask-v3.pages.dev +scanner-metamask.pages.dev +sec-sign-in.info +secure2-validitycheck.weebly.com +securecapitec.theprimepoint.online +securerpcfix.com +seeteressecalywoi.github.io +seivviice.weebly.com +server.0e7p.com +server.2rk3.com +server.8q3p.com +server.n6b8.com +server.v9vs.com +sevvviicess.weebly.com +shard.blue +shard.skin +shared-d7590.firebaseapp.com +shared-d7590.web.app +shaw-101329.weeblysite.com +shaw-101587.weeblysite.com +shaw-106427.weeblysite.com +shaw-107375.weeblysite.com +solutionwebsitedapp.firebaseapp.com +solutionwebsitedapp.web.app +solvetans.firebaseapp.com +solvetans.web.app +sondfrom.dexlog.my.id +soyokai.or.jp +srdate.club +ssy.hmb.mybluehostin.me +steam.poweredartsworkshop.com +steam.workshopsreview.com +steamcommmuty.com +steamcommuunity.ru +steamcomunutty.com +steamconmumity.com +stepsray.vercel.app +support-metahelpcenter-id100003498934.netlify.app +sv5gardens655665.weeblysite.com +system-portalnu.duckdns.org +talwgam.njmolada.com +taste.baby +tele.zhngain.top +telegrambot-resolved.pages.dev +telegrazm.net +telstra-100408.weeblysite.com +telstra-100469.weeblysite.com +telstra-103234.weeblysite.com +tiktok-888.vip +tiltckshow.top +tnomwzrp.top +toeken.im +tonic.pink +tooma.cellinsurance.co.zw +tpdtepremu.xyz +trattujeilesso-3354.vercel.app +trbinace.com +treibrukeukonno-1395.vercel.app +tuesmad.firebaseapp.com +tuesmad.web.app +tyyyyyytyyy.weebly.com +tzcsjfto.chat +u.updatetrackgre.top +uc-whatstapp-web.com +udxcady.wixsite.com +uklifejv.cyou +updatemail12.wixsite.com +ups-trackdeliveryapps.chickenkiller.com +usbest.cyou +user-transaction-overview.vercel.app +usps.com-trackdck.top +usps.com-tracklnv.top +usps.com-trackmcl.top +usps.com-trackmec.top +usps.com-tracktpq.top +usps.com-trackvmd.top +uspsinfw.top +uwdtsczi.top +uwm-onedrive.com +vaishnavi1436.github.io +validatie-veiligauthenticatie.com +vbbu.ldgknhk.lol +verified-this-request-badge.vercel.app +vo4zzp.icu +vs41.github.io +walett-cont.gitbook.io +walletauthenticators.vercel.app +walletcomnecitt.gitbook.io +walletconnectdapps.online +watranfart-fdd6a8.ingress-bonde.ewp.live +waxed.wiki +webmaillshavv.weebly.com +weeeqweeattt.weebly.com +weigh.skin +weigh.wiki +wgqdqvtn.baby +wgqdqvtn.pink +whatsapp-rqr.com +wirelessvoicebtpaidmailinfoplay047.weebly.com +wscs1231.cyou +xn--metmasklogin-vcb.gitbook.io +xojautruffeuttu-4659.vercel.app +xraiz.info +xraiz.vip +xsuweamskeidjf.weebly.com +xya46.cc +yahoooooo-108560.weeblysite.com +yavanica123.github.io +yi5lq-syaaa-aaaag-acfsq-cai.icp0.io +you-can-receive-here.vercel.app +zeiitgeist.angelocachero.info +zenixoikitti-5809.vercel.app +zeznjx.shop +zwzcn.com diff --git a/phishing-filter-dnscrypt-blocked-names.txt.br b/phishing-filter-dnscrypt-blocked-names.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..e0f7be29de5535c8d39d285768215cc5097b4a06 GIT binary patch literal 5164 zcmV+{6w~YB2x*C;oYnpi5ygA}G*TAM-yb2v+{c{#^WWQ4=cNEoG~fFDK80?8QD-GB z47%=n8~XR1?)4=ELbx3Xkj|}YtJ?nk|I=9}>@q-IxJm_7)cdYVNl>M`qRjs@qnEKA zkgUKQYaJSU1Coxka-xy;7<6IO2E7;5vG;<|QA*VTUGMtrH1x9J~lFe1d z{15$W-(k@WZIU<5-~C*-xU^qC|9Vh4DC|GvH_DHMcpVjPe)scVX=q`8{b>i-}JI;)6e)l5@qWt=y0d|G&ssH}76CZWF zam40WKGU8#?qB!^U8MXcFwlDgjZ#YW(`b*Qx1=?yTYDu;q|gCIaW|bB`>y}D)zktO zK9I@Cn?8ic#*}^<+jW?wF=gE9+<+If^xgWw)UxC)Gr2Ei#+!R4AX_;CPWS5Rl!WC{$TB0vOc6R%La~+ zCj03PIteK?;Os7)-Oq5G(nZ%?BHQmIM;A|UflwwVmQ{6w>eL{0{eBy8l_{BXZ$N^5 zJw;l)8t|H&NEBY+AqWc)KqPn^GG_TX>X)a;8?_|cf9mRhW2P(6wgZ?XaRVN&>1-r0 zkP{|`Yjd(s$vq;(TW}N^4bp`|gWYkf?w`5fiI#G#ztQrKe4#=sbsH==gW zY8sh^YE?UTMUyMist;=H0en7`aaO}qby2G{I9xvB*R>Q(dC<9C=N+QOx@-N?zOQ)f zrm3AN;`0}(?bJB-Iv(voP`I#hn$};KiC(C-ou{tDg-uJl09ENE#)WvR<p~y)?JA$K8ziNzNULPufTM6W8i+{TG3?S* zzDSzQHX6!Ra}~ZXE*`K4udI<`*vQi6xi#|KhcLtEMqc{1Un>q82Rw=&T7|bnj~cTF z3I*SjVtqKohd*m++JA&Jaz;kV1pLGoTv4-m1w>;%Fr!jZl#I5u?M<~Sr5k{iIZK_P znhY6AWvrqb=5}*IHP_v#PH87o8v(%@>>T82(!ES@CCq@;fg8bbjDDzqrIK(d=G zy{tvR4Jq1olz70Y9eh!D51Pe>EuL3gPK^|?tn<)!>ojj&ucPgmahDmO6f?-r^KA?` zFH+_GoqmpLIzC`PBjwMVW1${Bas>z5!M%cRNoE#I85U#t=c!T;|i7T zu1fG}J2tX1$L6Ko94;anaSN1T=z+jlCx>yj0$F@ptl+oB|)Qs#1x{IT@GRBf!XJ5_U z@Ai^s>jhO1WAT!Z-YtF10rIZR0Th{!n$XlP4xLgmtbne1&~BYTJc^V} zj_|yXV^%T(#HbnrxMJC0`xYv*BPw)yQnSSq=@mo3Gh&DT!Is8emn+%+DPfy?eX1SW z+b{b4eY%#?ty~ZQmP9O2L5okhK);u@;7lD}-2onnpYAH^t@++g)3nU(#I&!t8xyR4 z@A9J5?3gK9^yo34_$BG-Yt4=@WXbir|${h*f`rX6T9?(hItC_e8n&U?d` z=g)`bUUO{@bQrX&O9)lKzg;E+CRa@@;&i8(HeZx}n8vGz-q44Zi!^rAbf#;!+JG6D|5G)p z|B(W2$GgbP5@uZ-r6J#qdK4YqPH%jqn8bK%jN%O-Pm}ej@F;Zn0V$s~Fdokss%D>J+x9Kr&!W zmK;Jq+v$jcjfH}1YB~w`@_Hdzh_yPD9|X*7Hy1PI>}Q`9FLtdb3p$ zxgWaMmR(YmS7@?>A4fmhXSqGpcz7qm&+`?`UDU%JLvBR`4~43!C}M)!n}8_Z1R+4d z>>UsD@H_zJUU}>WZ*{)h_6UUVSb|9>Val=ZbC@bDgc(a;PH|^+3>HEUejMJVM`rfD zZ&9taECSx*Jrr^bpeMs0m?wvvxTl{+Q8?zrNI;+=!G38f>v&#%ONNh{9D1@)bbVy# z_tY1jz6v^LK*c1{Ys&sCaLeSdp&Mk&AbPKfi=z8aSuKw^s>xoW69Jj1?cas)v|)Q? zTeraO6Znt+1pkr#Bfk$wk4;v(DxeA!9IQpd*bp=Ty*+#%m^beT(8r%vSi{$Sz zO6g2*AanTQPyx0=Q8ISpq|#R5PIxX@t(g)IwMP%O99v{V)yNK|P+{zr6yA z4wWDeyTOxu3{j>Wo9GT7Qv>ni>JthB*D_BLYo0upA)+e;G%V8jpvmJ;%w%nhcdU1f zcNBC->ZkGC%3n4O-)k{B91B76es|?1vo{;%LdQ&Cx;kfw6a{u!Y@i+ruI3XULrzfMv8%3A+ z3eqbjy`wzxCjGPLgLTBhVnp{i;66*v#xsSuYT9nWk=^s)ttc#pOtdLk5}n-Eu66+I z>qPKuK&*F_RJBm5Lxim}^V|>041nu4qS>|u4NNe~-1X0Uo|mDWaM;ic{W`3zn%7<_ zWz;fTyDsl>)k{D0Lx-~+rctk3+vq^UnZ|WegTbZK9)}Soi^I?l zW7{o9Y$K|jXTwD=!!}Rr+#*cVFpVpi*{UTc+;HtXnAUk1mQk=M2##xy?EEmP#wa8C3vV1LbZ8D5OwZ zO{3(TYxY0|=D>*7seq1xLI{9Sx}{}Fkc7DPf(^R3QMd+ZEneec+_0{89_mmEHbl=- zlz_bTM%cza{CQd%+_@1-?Kl!DY6GR@Dt!;E_t>wpADKANkvcnPIQp+JvnkgI*chEtcWosqL@;;}m=mhLT& zhc1zpIV0ytf~Z!M8l)JUrH@qi_pVW>B@#=LLYN_XPNrr=y<2#04_p|Fw4Rt5p^5Zm z5Yk{B#;Mvv&dN+hmAV#0)LtDB*j1~S9^2zBJ0*1^uOgZ{YZ_KKCossVxN?$~RLZfF zbqd7nU21O)xXGYm654MK3@9Z^ISEoN$zxKA2hg;_y6z|vSXr_+$4Jq=ve7`I0y!NU zpT|niQiG%Y2?&? zvr-|8)dEKAty>%%2?O0ZV>4E4R1&Zos7mc}u3ocd0}V%Sy&Kj@TA&Y)#9iLrL=7?q zjf?|Ct$9Jq1|q;M72-5B!h@7sWnk%@tYqxfWd*9e2f;c)>za`iQJ01mF3e%sz7T=th7pG6m)RTmRy_BkYnxx4+h4R3UwhQ#y;w3 zptAWM0IOB|e1;`eE-eSLXKjQv0ys)8mi9|=UnX@xwqMU{488B$-1qJJZ1b(P+`v0t zdd$nOBj9_DpYcB86(Y&krPrsKZ}&JhcfA!#rSNfo$Nldqcm44h|4KN|*nh%H&U6p^ z*8jS1x?T_6^>xkU#fv?bxNGe(|7-ly_gL?D-F-s7K`8wM0yn@g+PTNEJ>KDT5Eqf; zqEAAusDOUEDIDUr>+nzqvB&Y!b2b1R33y0AAf!(YgP*1I^RktS4j~GB`{Vig#F+8H zEcfktZ1X+l$0M#Ey$QkU0*yv&30ugN>zvou>oc#D@}u9^{u$@ECdrHVIwswQxII7I zK0my@`>qkkirv7W>k;!aOalkNE1Dd7{66BbEgR$)&YIo#=MU{zyW28Wtw@Xe&(Gs{ z@B2E|{ahlzsIv546&M%$XJCZQG;5rn=yWIH!`AE6dDYdTh_#2E5OTy&Ro~ly^!bpP!x>FQ6da0-9U%=l&Jafhv|B|mW3GazVhvU>F&38*?V`@F<8Hefg^ z`4aon4oXrEqz&!FafIpP@3YPO;-F%Fzvp?A6C&n*DfpRpKG=UtyuFIe`PSOov2S@F zrT2tF$Vxn;Qr)MZg#H)ARC^9N{N_xO!hO|%Mfuk8tsek$0R>cKgU<>zK1&sWGxQbO z@l91?ZYy=cedfYvG|En!U#Rp7=K_zCbZEd{UtPgvO&SLbQlr=RE7 zvGWO}v3Ty|_?y0$9_Z=w`ofR;s5t4r^l;e;1j$fuk!hm^%Pt=@Hwk^wYoqxH- zD?*3pk7e_Vrcf;l>r%_yKkj+#`d6*egC36!fWv8wtnjvQh!ibqH(<@zwFo7JM&=puTvkNyDroEvuqD_{X$VBpVWaVUuQgG`v1M&86d#; zArm6x>-u)y8Y`vFpeDxuCBBC`%s6)3H7m_IP@lo{sNNWhr8lI#xmSslLxt>_h7(x`PU&jK2u2?+S{hSSBp9Vj_;Gat6 z;N!0;uZ<&KQmK+OLlI?hXUk-2su6NWTVY5^j1s<+tNj?TPa~n%6DIY&E@_@vo3TNo zw;a`(j!Q*Mgi*USNU6xPH0LKiWje)<-L;_&?@Nv1Ye87Nac8+M&p zS2qs>!vri2&cw1YV}rzIy-f504RLV_85ZqkrVXcl!^Yg?2ARcX?F5Uw_DgyZYV0~n zypxw&zu|)xrK9fC<6Sx6!d2}zBED~=v*yFY#?yYZbmYHeRPOz4-xr6vNXx+^8258{ ztmOAT$aK=^2I`s>%rGC|KqMyzPdm&Lbr(}q*Q$1L?OMG04X=-TU;W-+Lka`axE6{4 literal 0 HcmV?d00001 diff --git a/phishing-filter-dnscrypt-blocked-names.txt.gz b/phishing-filter-dnscrypt-blocked-names.txt.gz new file mode 100644 index 0000000000000000000000000000000000000000..88afedd09792d897abc108e07d039798987daf2b GIT binary patch literal 5309 zcmV;u6hiACiwFP!000021D#q+kL$Q{-uJIKz}+N3q|y5^%OC-=2!a5)*<{D3OG%XlnY|3}ZdI~!G`O&8So$M6#6^^Dp7ZiKS_ z|1#n0aJ=q`cI*I><1;!axN%50c zr98)0g|{?o^E499SR&F2Z&_OAS-yR&5~h4Ot6)TYHxF;Z#)Actwy0wv=wsV;>taow zwO0)d8+4Mx5%(wQF2PsTeH>&eoPn{0?S`zB@FFSGr4C6Ro5 za#&c!Yh$KnrG8eDcOZtZ1_2T58;s#H76Yk)Pw!s1#mtwgU+&R2Q>hcw?PB z#rSu%=PP9HFwm*f=sI_0oiz$NiJCUeiZn}$m`~3qIHq6*7(I+^RhEyXn%`K@O&1Nu zURcj;BpI_T8rae)cuD-wZtQ)0S3EY7c&Cm9H=1EIGjtG}fI&4MMX`ZlN#X3gZDkm` zC9>`w1s9D6C`C%^{!A-tXy|83leV$HO^BkHNb9h%f_x%r>z^jUeT>bUDaZNQOxo_kYrj`yh|=C@Bh$ zMzQKn)b7jha>kFrPnMNO5`2VB2e+7zC~Wu)(2ub7lOL2flaC}^RUi@nW!PdJzgXe- z9yY<16`Yec;iNhwBQ`rsJ-bduhzraa!#4ip#>QrR<3*XI%{s=JUbr&M_I1~FeKlv} zuuSY+o}T`kWv7QWSH?@D@`o~&&TMW^diIYpD`GQfNJ9bE8GFT2P)l@oNUmZEvx$Y4 z81(ZrPLZ?VQPIK!ZPiv-45TvqH3ASjSOm6k=?h!;!9Oxl^cszZ;1HJRp5K=wnIqtjNovD(hIL zCm6qM*<|k76tjMyRk7$QFrwyU#xBA$=E1m;UD#pi@Cfb-D6k(qvk?Ej$N~xo2w0>E zdqqgm=B@A3kMJ#sXi5`Z|ZQ~cJN_iaaX*^DNZ0bBOKOQ?~`UR>`;XEop z7?WDA9aq z@+T&W+jRxRj32v=aT@#nBOGsH5KO`Q{pEB&m4QC7S_kT8!a2Rnf89` z&o3{M2q)hI2*Cf4V?T{9{lx{sn?N`dCQTi$L^+fc&TkNHL5l9WJCe2XtlPArkSjVu z3VTBP$0)PhX#Wh{hA zndyL4G!u$Dca7L=hL?ghuv$D&nbFL9b#~@CA>&4M)mD2off~pdU+thTUbCoV_=)J3 zjBdKaXC%7Vh#?_OV1QsqdK9K}1uAp=YAJ}#aw_Q?ynCVK;9k%iWjT$d0XG9CR?PYV zyYcI0wVeViM;f@AH;vR~F3wtYbqCy_hcf4W9%R0FtLvO!(-TYXeZz0hB}>e3-v<`z zpo+FWK*{xRNx{a@-;@{3Q50mUM??Ov(g|iTMbXMF??nveP&rok8agh@M4N z(H;`z83nLa8;ZbZ+A6`XEe_7&bT*eY1R>?9P7F9|A{bsA)=-x|JRTuF0m0y@QH&L&KKk6llV3>b!1`4sp@)vQ0okyD)27)cDWzaa9jz;JtuMQo1QB+vH%xYnNUl=~HW<6C@df zs<6SnYiFPk>VtM~yCRG_m$U~-G1zxv+Vc3-!*L9NOJ0|IIVK8-Q|CDA(v9)KpJ9mx#NCx&Q(Ue~i@bUfe zc&=ivJ$=`)v)M}3_K^}w=d@<|~e0~?dbVLNCs z#e~fd?A{BDbbA9nwN=F##HBhG6b{_4EeBjVAw8470~vWTh{TU)Ic z26gZh~RjIqX=|182%gG0L!Bww<4#jhB#AwIy%(B|Mzi9r} z;=5Ij*TKlP0-Mok!+T5@W!cWcgA#_A-z~D5V^GSwKBhhspDpm?$PiSL0*k#8^#E61 zHk3D*-k#@|?FI+w;b76R7k>v|t1ylVCn5uoI?CwKYp1K>=HfFtoqhoh0S1OS;6hOL z3DvKs6Y>uPg_W)9qTtYtEgRPQ0f(&yL>?W?l`M_N;Dqa5SoYJUhl!(dW=b)giMj?- z5Cv1ME|t)_QG!*hjK}Pgx2~HasZ^nrDDt*wle9+jmZl{nkB#j zJKh4jl1-LjovbKW)wDb>>P)drRIDuz>sARXB~zkGIV%zkt%QMo89SsZv_o(#RSE-PIKDcYRXnx~Md%378k^iT^`DeALp$qJpy zrchcYTDK*}nmRx5>Qd;uDvDAj=#Z+0qi>TnyrgLpDGu^BNe)<5rv+=X0-%-ET!^f| zvRTzsi9YbARSJV5m}^xiSg(X#bPnbs%L$i1wyYcIwaIuZMX8`f7&4cYI<8B4 zDtVTJvnXT=J(L*~%$u@k^wEEtM%TOsp{;nKlY$itLYIkz8e~-;*X4?QN~a~{l|{*6 z-%2RalyG`3<$+h0X@SuMUWRpZIHD-wNG#DslIlZTv}u*Iww855uE2}7#bQ~WajXt? zf8iB5dRllauZucmEUESCN;#KJst<9|HYp5Irz(N(Fw85PEK#~f9O|Sx`Z~;$tE6s| zHZKcUmZymTBq>YIg_3D=94HBftS^F35iS2a%h6_N@hg{ zr$aF1Tpet|%Y?zKvT9rSWYSITlAi&n7% zFIFg%1Xh9~$|`Rwghnn^R?>UE@a8RyT(^h_S*S#DIDsg2QNlOVYCiC)ye+kos$|IPX;!x!sT3UoY~7Ob4!lJsc$qcuFXYKO zZ%PHu5=jkFpv&~g%d{>LL1iL}x)EIEx~>^QL)K-IANHmbN}fq8kbWqEFt~Xt5XKDz zXpixx>kN9u0vwEGU2t7#1bs`UD=JYPc{N;(LC{ncs3j;AP@2kWh@FdM?~^BBg>K^b zh}H%$z;Hl;yEDi!>7lsa0N4BL3IcBWqGzveTYH2i2NO`@y?0WwD90`j6BmD4HVi$o zi!^lh6#!chrM#t>bp{t*Zly|s*sI?AYxZZrHn zw$LL0Q8%j;61gYkSLndzoce=NzMO)x+f{|e#gBX7G#jUA1X7?#(XjNb_tWHde}c_<2BzuH@Eyi zx2T!>=eeEz>v`T@a=fVYXEFgbB(IPDYV7(E{T@yM(P!c)!Hwp6{AGxE0zwPq`=_+#OCJ=_@DHAXCoT-n&xYhy3e^ z`GbNFeLsceI5Mr>Idy*TLla$59Jp*h_2zR3OS5I4QeOeT#swXPzxrz<(*!@Lx(yK7 z;mXR-C6yFqeN~p#_w(p2cf5`y>=esMTqP7rXABs*pRiGT>0QSpTPFnO=~R*NFY6&f2-5`>5Mk<~9JqaNtuS&rntTa0Dxi_+s-~;6)1B?^;-x-nHhh!Y&L0;SGzi~79j~WpI&~-)^WjVt9~H1AU1f#i zxH+A-Dz|;ymO0(zZ4P$JLmy9T^sYWmE{mNqCULP z3!i3ry7}wFMwDy`gKXCnv*3H}Jlq9Z9no$m6OA0so*4X11$DIq=lbXRnM zuZ+Ct{mUNET<91ThNMH+PwOwH>~4`?-tXN{5fj?q4)^ZZ zRYcJ4{R@_KXS$d8sf-B#^@v!ycj%m8KvbjKHt|%}JRD3A0^Nuv?Q!bUULG5?f8L*B PyAb|gU`=h~A}s&_EY~N< literal 0 HcmV?d00001 diff --git a/phishing-filter-dnsmasq.conf b/phishing-filter-dnsmasq.conf new file mode 100644 index 000000000..62b2f94d9 --- /dev/null +++ b/phishing-filter-dnsmasq.conf @@ -0,0 +1,434 @@ +# Title: Phishing Domains dnsmasq Blocklist +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +address=/1111365dh.net/0.0.0.0 +address=/12931-coinbase.com/0.0.0.0 +address=/215323.com/0.0.0.0 +address=/260aesthetic.wixsite.com/0.0.0.0 +address=/3650947.cc/0.0.0.0 +address=/3659ll.net/0.0.0.0 +address=/83291-coinbase.com/0.0.0.0 +address=/94-103-188-123.plesk.page/0.0.0.0 +address=/9825057365.com/0.0.0.0 +address=/abctrvabc.com/0.0.0.0 +address=/access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com/0.0.0.0 +address=/acclimatizable.fun/0.0.0.0 +address=/account-update05.myvnc.com/0.0.0.0 +address=/accounts.google.auzen.us.kg/0.0.0.0 +address=/activebusiness-unlocker3.com/0.0.0.0 +address=/addwsrbh.green/0.0.0.0 +address=/ahnp.vercel.app/0.0.0.0 +address=/aldg.ldgknhk.lol/0.0.0.0 +address=/allegrolokalnie.pl-891241214.buzz/0.0.0.0 +address=/alutipcentra.pages.dev/0.0.0.0 +address=/ambil-pinjaman-daana-payleter.xforms.web.id/0.0.0.0 +address=/ambulatoriprivati.it/0.0.0.0 +address=/amev.ldgknhk.lol/0.0.0.0 +address=/antail-conv.com/0.0.0.0 +address=/apply-now-to-receive-badge.vercel.app/0.0.0.0 +address=/artsea.pages.dev/0.0.0.0 +address=/atmailupdatewptnskmdinfomailacct.weebly.com/0.0.0.0 +address=/att-101072.weeblysite.com/0.0.0.0 +address=/att-1041page.weeblysite.com/0.0.0.0 +address=/att-105714.weeblysite.com/0.0.0.0 +address=/att-105819.square.site/0.0.0.0 +address=/att-inc-107097.weeblysite.com/0.0.0.0 +address=/att-login380.weeblysite.com/0.0.0.0 +address=/att-login522.weeblysite.com/0.0.0.0 +address=/att-service-102155.weeblysite.com/0.0.0.0 +address=/att-sign-in-105669.weeblysite.com/0.0.0.0 +address=/attcom-100762.weeblysite.com/0.0.0.0 +address=/attcom-106808.weeblysite.com/0.0.0.0 +address=/attmailservicenow.wixstudio.com/0.0.0.0 +address=/attmailservicenow.wixstudio.io/0.0.0.0 +address=/attmailsrvrdesk.weebly.com/0.0.0.0 +address=/attnewmaill.weebly.com/0.0.0.0 +address=/attyhhhhiiii225.weebly.com/0.0.0.0 +address=/atw-tau.vercel.app/0.0.0.0 +address=/authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com/0.0.0.0 +address=/authsyncs.pages.dev/0.0.0.0 +address=/autoreplyattmode.wixsite.com/0.0.0.0 +address=/avoid.hold-managert.com/0.0.0.0 +address=/azbin.ir/0.0.0.0 +address=/b45018.com/0.0.0.0 +address=/bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link/0.0.0.0 +address=/baiii-wong.cutvi.cfd/0.0.0.0 +address=/basvuru-online-yap.vercel.app/0.0.0.0 +address=/beionfidi.pages.dev/0.0.0.0 +address=/bet73nn.com/0.0.0.0 +address=/bet83039.com/0.0.0.0 +address=/bet83054.com/0.0.0.0 +address=/bfrescentremebermainsetreouytnoy.weebly.com/0.0.0.0 +address=/biggggggggggg.weebly.com/0.0.0.0 +address=/bitnode.pages.dev/0.0.0.0 +address=/bitvavobtc.com/0.0.0.0 +address=/blackhere11.serv00.net/0.0.0.0 +address=/blss24att.weebly.com/0.0.0.0 +address=/braucrarasuteu-2470.vercel.app/0.0.0.0 +address=/bt-102124.weeblysite.com/0.0.0.0 +address=/bt1business.weebly.com/0.0.0.0 +address=/btuan-dan2-resmi.top1.my.id/0.0.0.0 +address=/buildingdesignsusapdf.s3.us-east-005.backblazeb2.com/0.0.0.0 +address=/business-page-property-897432967.netlify.app/0.0.0.0 +address=/caipora.xyz/0.0.0.0 +address=/calm-pothos-3b24c9.netlify.app/0.0.0.0 +address=/carrefourarabiank15.pages.dev/0.0.0.0 +address=/caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com/0.0.0.0 +address=/catgirl-appverset-nya.pages.dev/0.0.0.0 +address=/catxtokens.pages.dev/0.0.0.0 +address=/chat.94-103-188-123.plesk.page/0.0.0.0 +address=/check154109.click/0.0.0.0 +address=/checkseven.vercel.app/0.0.0.0 +address=/ciente-a.org/0.0.0.0 +address=/cieplo.app/0.0.0.0 +address=/cj12143.tw1.ru/0.0.0.0 +address=/cj87335.tw1.ru/0.0.0.0 +address=/claimyourethrewards.pages.dev/0.0.0.0 +address=/clickbait.design/0.0.0.0 +address=/cnsa163.com/0.0.0.0 +address=/cock2-iota.vercel.app/0.0.0.0 +address=/cock3.vercel.app/0.0.0.0 +address=/cock7.vercel.app/0.0.0.0 +address=/contact-pro-8291-d01.firebaseapp.com/0.0.0.0 +address=/contact-pro-8291-d01.web.app/0.0.0.0 +address=/creosrl.com/0.0.0.0 +address=/curmmgdv.email/0.0.0.0 +address=/currently541.weebly.com/0.0.0.0 +address=/currently890.weebly.com/0.0.0.0 +address=/currentlyserver.weebly.com/0.0.0.0 +address=/dara3dccj.wixsite.com/0.0.0.0 +address=/db.service4db.com/0.0.0.0 +address=/de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev/0.0.0.0 +address=/debutcan.firebaseapp.com/0.0.0.0 +address=/debutcan.web.app/0.0.0.0 +address=/delivery.attempt.failure.ebbs.co.za/0.0.0.0 +address=/dev.stream.mornar.app/0.0.0.0 +address=/dnwqmh.click/0.0.0.0 +address=/dropsmartchain.pages.dev/0.0.0.0 +address=/dsjoting.group/0.0.0.0 +address=/dulb6c5p5.top/0.0.0.0 +address=/ebay-mallwholesale.com/0.0.0.0 +address=/ebt-lilac.vercel.app/0.0.0.0 +address=/echoredled.netlify.app/0.0.0.0 +address=/elbarco.percentadnp.info/0.0.0.0 +address=/eltritongourmet.com/0.0.0.0 +address=/email.mgb.modento.io/0.0.0.0 +address=/enjomugg.firebaseapp.com/0.0.0.0 +address=/enjomugg.web.app/0.0.0.0 +address=/error3456vhubhornbase.azurewebsites.net/0.0.0.0 +address=/example223.wixsite.com/0.0.0.0 +address=/eyeydhe.wixsite.com/0.0.0.0 +address=/eyttueiu.square.site/0.0.0.0 +address=/facebook-avip.click/0.0.0.0 +address=/fame.pink/0.0.0.0 +address=/fassehoizubra-7696.vercel.app/0.0.0.0 +address=/fastdropchain.pages.dev/0.0.0.0 +address=/fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io/0.0.0.0 +address=/fla-1001.square.site/0.0.0.0 +address=/flo4211.github.io/0.0.0.0 +address=/fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com/0.0.0.0 +address=/fnuttlie.wiki/0.0.0.0 +address=/fokeijonnekou.vercel.app/0.0.0.0 +address=/fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com/0.0.0.0 +address=/free-verified-badge-form0-service.vercel.app/0.0.0.0 +address=/free-verified-meta-badge-service.vercel.app/0.0.0.0 +address=/g06668706.wixsite.com/0.0.0.0 +address=/gccndbqg.vip/0.0.0.0 +address=/geriodememerkezi.online/0.0.0.0 +address=/get-checkmark-for-you.vercel.app/0.0.0.0 +address=/get-free-verified-badge-service-on.vercel.app/0.0.0.0 +address=/gitanag.broke-it.net/0.0.0.0 +address=/gruprocuroipra-6493.vercel.app/0.0.0.0 +address=/h5.b9en.com/0.0.0.0 +address=/h5.metacoint.com/0.0.0.0 +address=/hcghij.top/0.0.0.0 +address=/hecregayatu-1014.vercel.app/0.0.0.0 +address=/hejmtxxt.guru/0.0.0.0 +address=/helenblunt6.wixsite.com/0.0.0.0 +address=/help.accountsupportcentre.com/0.0.0.0 +address=/here-apply-for-page-review.vercel.app/0.0.0.0 +address=/hgbk.ldgknhk.lol/0.0.0.0 +address=/hhideiie.wixsite.com/0.0.0.0 +address=/hitummoinneullei-5882.vercel.app/0.0.0.0 +address=/home-101067.weeblysite.com/0.0.0.0 +address=/home-103465.weeblysite.com/0.0.0.0 +address=/home-104341.weeblysite.com/0.0.0.0 +address=/home-105266.weeblysite.com/0.0.0.0 +address=/home-105929.weeblysite.com/0.0.0.0 +address=/homeattatthome.square.site/0.0.0.0 +address=/hpnefhqs.motorcycles/0.0.0.0 +address=/im25.net/0.0.0.0 +address=/info.supercitrus.ind.br/0.0.0.0 +address=/ins-business-home-center.com/0.0.0.0 +address=/instagaramgalochka.vercel.app/0.0.0.0 +address=/ipv6.43-135-137-110.cprapid.com/0.0.0.0 +address=/irmt0ken.win/0.0.0.0 +address=/iujf7839iofvkbcu748.weebly.com/0.0.0.0 +address=/iwimwmiwi.click/0.0.0.0 +address=/jagej73796.wixsite.com/0.0.0.0 +address=/jfdjy.com/0.0.0.0 +address=/kalyani963.github.io/0.0.0.0 +address=/kexoigrufouddou-5902.vercel.app/0.0.0.0 +address=/kl1k-ds1ni.neupdile.my.id/0.0.0.0 +address=/kliind08.wixsite.com/0.0.0.0 +address=/kreelo098.weebly.com/0.0.0.0 +address=/kremlcup.com/0.0.0.0 +address=/kshitij12375.github.io/0.0.0.0 +address=/kucoinglobal1.com/0.0.0.0 +address=/kxbztydc.black/0.0.0.0 +address=/labanquepostale.jupiter-analytics.com/0.0.0.0 +address=/leddevotoze-3146.vercel.app/0.0.0.0 +address=/linnkdna-kget.wxxzsite.buzz/0.0.0.0 +address=/llahi.info/0.0.0.0 +address=/llahi.vip/0.0.0.0 +address=/loffaummuddote-4145.vercel.app/0.0.0.0 +address=/login-att-10221.square.site/0.0.0.0 +address=/login-form.world/0.0.0.0 +address=/login-online-outlook365.com/0.0.0.0 +address=/login-outlook-midstreamauth.com/0.0.0.0 +address=/login-screen-103134.weeblysite.com/0.0.0.0 +address=/loginaccount70.wixsite.com/0.0.0.0 +address=/loginaccount77.wixsite.com/0.0.0.0 +address=/luk6414.wixsite.com/0.0.0.0 +address=/luxlifemiamiblog.com/0.0.0.0 +address=/m.meta-accessibility.io.vn/0.0.0.0 +address=/madebybmr.fyi/0.0.0.0 +address=/maqpiexyz.click/0.0.0.0 +address=/mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev/0.0.0.0 +address=/mayfair313.wixsite.com/0.0.0.0 +address=/mdbrvlfy.black/0.0.0.0 +address=/mesageriepro33range1.weebly.com/0.0.0.0 +address=/metamsk-wallet-3.gitbook.io/0.0.0.0 +address=/metttaa-audddt-new-02.firebaseapp.com/0.0.0.0 +address=/metttaa-audddt-new-02.web.app/0.0.0.0 +address=/microsoft365-storage.github.io/0.0.0.0 +address=/mikepattyjm.wixsite.com/0.0.0.0 +address=/mobilemidasbuy.n3g.fun/0.0.0.0 +address=/monespacepro-client.3utilities.com/0.0.0.0 +address=/monetization-violation.github.io/0.0.0.0 +address=/moodengsol-net.pages.dev/0.0.0.0 +address=/mwsiekdnfjrdufs.weebly.com/0.0.0.0 +address=/mxmxnmx.mx.zya.me/0.0.0.0 +address=/national-au-b.com/0.0.0.0 +address=/national-au.net/0.0.0.0 +address=/nbaaiqjq.group/0.0.0.0 +address=/nexomyacwv.weebly.com/0.0.0.0 +address=/nft-time11.vercel.app/0.0.0.0 +address=/nichcheck.weeblysite.com/0.0.0.0 +address=/ns1.carrier-ast2-portal-apple.com/0.0.0.0 +address=/omadshf.ru/0.0.0.0 +address=/online-assist.live/0.0.0.0 +address=/online-promo-asb.org/0.0.0.0 +address=/openkimono.pro/0.0.0.0 +address=/opportunity-verified-status.vercel.app/0.0.0.0 +address=/ourtime.reconnect-dating.workers.dev/0.0.0.0 +address=/owouwuowo.click/0.0.0.0 +address=/p365kf.com/0.0.0.0 +address=/p4zv8crnrrha27so.94-103-188-123.plesk.page/0.0.0.0 +address=/page-center-manage.com/0.0.0.0 +address=/pavan-patil-22.github.io/0.0.0.0 +address=/pecinternational.net/0.0.0.0 +address=/peesom.chat/0.0.0.0 +address=/pencairaanndannaa.my.id/0.0.0.0 +address=/petty.wiki/0.0.0.0 +address=/pimnhv.group/0.0.0.0 +address=/policies-business-page-service.com/0.0.0.0 +address=/pottatrebewe-2808.vercel.app/0.0.0.0 +address=/pqo.hrf.mybluehost.me/0.0.0.0 +address=/programming--service--panel-totlyy-free-for-you.vercel.app/0.0.0.0 +address=/promo1.spik.ru/0.0.0.0 +address=/protocolsecure.pages.dev/0.0.0.0 +address=/pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev/0.0.0.0 +address=/pub-1778406e4fec4394901793111c187dd9.r2.dev/0.0.0.0 +address=/pub-19b834342e7d465b9f00b3511325a081.r2.dev/0.0.0.0 +address=/pub-21dd4dc659614ceb93e45a6de4434502.r2.dev/0.0.0.0 +address=/pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev/0.0.0.0 +address=/pub-2fefe932a6974485b987c9ba851b5c40.r2.dev/0.0.0.0 +address=/pub-3a46d9914f494078a6d6237513e7a096.r2.dev/0.0.0.0 +address=/pub-442ed822851244a689b3472ea2c6a950.r2.dev/0.0.0.0 +address=/pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev/0.0.0.0 +address=/pub-682ad3b65d944376b919745aae3c56d4.r2.dev/0.0.0.0 +address=/pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev/0.0.0.0 +address=/pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev/0.0.0.0 +address=/pub-7f5cf36445d042168bfacd712e890dc0.r2.dev/0.0.0.0 +address=/pub-803839714a924882a7bcc2495a26860f.r2.dev/0.0.0.0 +address=/pub-8161de4a277e4ee8b532af34954224e1.r2.dev/0.0.0.0 +address=/pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev/0.0.0.0 +address=/pub-8376b5b2334844d193a525d8b8548fa5.r2.dev/0.0.0.0 +address=/pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev/0.0.0.0 +address=/pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev/0.0.0.0 +address=/pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev/0.0.0.0 +address=/pub-9163a97d70394cb499bdd232be6c2169.r2.dev/0.0.0.0 +address=/pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev/0.0.0.0 +address=/pub-98171471e0944ac3a5820ef719bf0640.r2.dev/0.0.0.0 +address=/pub-a263e0790935412eb10cacc55bbced18.r2.dev/0.0.0.0 +address=/pub-a291041b077742899b63a9982f04a56c.r2.dev/0.0.0.0 +address=/pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev/0.0.0.0 +address=/pub-b50adc5d699a4f08aec37102c2103da7.r2.dev/0.0.0.0 +address=/pub-c0a934c950e441db96b882789f53c9ea.r2.dev/0.0.0.0 +address=/pub-c2c250050109456396c933de259a4fea.r2.dev/0.0.0.0 +address=/pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev/0.0.0.0 +address=/pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev/0.0.0.0 +address=/pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev/0.0.0.0 +address=/pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev/0.0.0.0 +address=/pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev/0.0.0.0 +address=/pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev/0.0.0.0 +address=/pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev/0.0.0.0 +address=/pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev/0.0.0.0 +address=/pub-e42cb528b102447385e3145197916f51.r2.dev/0.0.0.0 +address=/pub-e4aff507450c478cbe3f77ad23d75035.r2.dev/0.0.0.0 +address=/pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev/0.0.0.0 +address=/pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev/0.0.0.0 +address=/pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev/0.0.0.0 +address=/pubgm.club/0.0.0.0 +address=/puffagroibrouwoi-8818.vercel.app/0.0.0.0 +address=/qasimk.com/0.0.0.0 +address=/qfjfvseq.info/0.0.0.0 +address=/quauwograssodda-3503.vercel.app/0.0.0.0 +address=/qysgyp.com/0.0.0.0 +address=/rajdipchatterjee.github.io/0.0.0.0 +address=/rechazaroanularaqui51.weebly.com/0.0.0.0 +address=/remote-fix.pages.dev/0.0.0.0 +address=/renggard.47-243-192-240.cprapid.com/0.0.0.0 +address=/resolvepanel.live/0.0.0.0 +address=/resolving--issue--with-us1.vercel.app/0.0.0.0 +address=/resqat.weebly.com/0.0.0.0 +address=/review-business-case.d2f7p3b7pucnle.amplifyapp.com/0.0.0.0 +address=/rlpqwefi.pink/0.0.0.0 +address=/rouloigeilleuja-9523.vercel.app/0.0.0.0 +address=/rulemec.pages.dev/0.0.0.0 +address=/rutinqqwin.shop/0.0.0.0 +address=/rwftfu.quest/0.0.0.0 +address=/s.team-pw.cc/0.0.0.0 +address=/sairanees.github.io/0.0.0.0 +address=/sanseipecas.com.br/0.0.0.0 +address=/sasklelo.weebly.com/0.0.0.0 +address=/sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com/0.0.0.0 +address=/sasktelcustomerwebly.weebly.com/0.0.0.0 +address=/sasktelnetwebmailservermaintainance.weebly.com/0.0.0.0 +address=/sasktelrectify.weebly.com/0.0.0.0 +address=/sasktelscrutinize.weebly.com/0.0.0.0 +address=/sasktelservicecentterwebly.weebly.com/0.0.0.0 +address=/sasktelsupportsystemwebly.weebly.com/0.0.0.0 +address=/sbcglobal30.wixsite.com/0.0.0.0 +address=/scan-vulnerability-guard-v3.pages.dev/0.0.0.0 +address=/scan-vulnerability-guard.pages.dev/0.0.0.0 +address=/scanner-metamask-v1.pages.dev/0.0.0.0 +address=/scanner-metamask-v2.pages.dev/0.0.0.0 +address=/scanner-metamask-v3.pages.dev/0.0.0.0 +address=/scanner-metamask.pages.dev/0.0.0.0 +address=/sec-sign-in.info/0.0.0.0 +address=/secure2-validitycheck.weebly.com/0.0.0.0 +address=/securecapitec.theprimepoint.online/0.0.0.0 +address=/securerpcfix.com/0.0.0.0 +address=/seeteressecalywoi.github.io/0.0.0.0 +address=/seivviice.weebly.com/0.0.0.0 +address=/server.0e7p.com/0.0.0.0 +address=/server.2rk3.com/0.0.0.0 +address=/server.8q3p.com/0.0.0.0 +address=/server.n6b8.com/0.0.0.0 +address=/server.v9vs.com/0.0.0.0 +address=/sevvviicess.weebly.com/0.0.0.0 +address=/shard.blue/0.0.0.0 +address=/shard.skin/0.0.0.0 +address=/shared-d7590.firebaseapp.com/0.0.0.0 +address=/shared-d7590.web.app/0.0.0.0 +address=/shaw-101329.weeblysite.com/0.0.0.0 +address=/shaw-101587.weeblysite.com/0.0.0.0 +address=/shaw-106427.weeblysite.com/0.0.0.0 +address=/shaw-107375.weeblysite.com/0.0.0.0 +address=/solutionwebsitedapp.firebaseapp.com/0.0.0.0 +address=/solutionwebsitedapp.web.app/0.0.0.0 +address=/solvetans.firebaseapp.com/0.0.0.0 +address=/solvetans.web.app/0.0.0.0 +address=/sondfrom.dexlog.my.id/0.0.0.0 +address=/soyokai.or.jp/0.0.0.0 +address=/srdate.club/0.0.0.0 +address=/ssy.hmb.mybluehostin.me/0.0.0.0 +address=/steam.poweredartsworkshop.com/0.0.0.0 +address=/steam.workshopsreview.com/0.0.0.0 +address=/steamcommmuty.com/0.0.0.0 +address=/steamcommuunity.ru/0.0.0.0 +address=/steamcomunutty.com/0.0.0.0 +address=/steamconmumity.com/0.0.0.0 +address=/stepsray.vercel.app/0.0.0.0 +address=/support-metahelpcenter-id100003498934.netlify.app/0.0.0.0 +address=/sv5gardens655665.weeblysite.com/0.0.0.0 +address=/system-portalnu.duckdns.org/0.0.0.0 +address=/talwgam.njmolada.com/0.0.0.0 +address=/taste.baby/0.0.0.0 +address=/tele.zhngain.top/0.0.0.0 +address=/telegrambot-resolved.pages.dev/0.0.0.0 +address=/telegrazm.net/0.0.0.0 +address=/telstra-100408.weeblysite.com/0.0.0.0 +address=/telstra-100469.weeblysite.com/0.0.0.0 +address=/telstra-103234.weeblysite.com/0.0.0.0 +address=/tiktok-888.vip/0.0.0.0 +address=/tiltckshow.top/0.0.0.0 +address=/tnomwzrp.top/0.0.0.0 +address=/toeken.im/0.0.0.0 +address=/tonic.pink/0.0.0.0 +address=/tooma.cellinsurance.co.zw/0.0.0.0 +address=/tpdtepremu.xyz/0.0.0.0 +address=/trattujeilesso-3354.vercel.app/0.0.0.0 +address=/trbinace.com/0.0.0.0 +address=/treibrukeukonno-1395.vercel.app/0.0.0.0 +address=/tuesmad.firebaseapp.com/0.0.0.0 +address=/tuesmad.web.app/0.0.0.0 +address=/tyyyyyytyyy.weebly.com/0.0.0.0 +address=/tzcsjfto.chat/0.0.0.0 +address=/u.updatetrackgre.top/0.0.0.0 +address=/uc-whatstapp-web.com/0.0.0.0 +address=/udxcady.wixsite.com/0.0.0.0 +address=/uklifejv.cyou/0.0.0.0 +address=/updatemail12.wixsite.com/0.0.0.0 +address=/ups-trackdeliveryapps.chickenkiller.com/0.0.0.0 +address=/usbest.cyou/0.0.0.0 +address=/user-transaction-overview.vercel.app/0.0.0.0 +address=/usps.com-trackdck.top/0.0.0.0 +address=/usps.com-tracklnv.top/0.0.0.0 +address=/usps.com-trackmcl.top/0.0.0.0 +address=/usps.com-trackmec.top/0.0.0.0 +address=/usps.com-tracktpq.top/0.0.0.0 +address=/usps.com-trackvmd.top/0.0.0.0 +address=/uspsinfw.top/0.0.0.0 +address=/uwdtsczi.top/0.0.0.0 +address=/uwm-onedrive.com/0.0.0.0 +address=/vaishnavi1436.github.io/0.0.0.0 +address=/validatie-veiligauthenticatie.com/0.0.0.0 +address=/vbbu.ldgknhk.lol/0.0.0.0 +address=/verified-this-request-badge.vercel.app/0.0.0.0 +address=/vo4zzp.icu/0.0.0.0 +address=/vs41.github.io/0.0.0.0 +address=/walett-cont.gitbook.io/0.0.0.0 +address=/walletauthenticators.vercel.app/0.0.0.0 +address=/walletcomnecitt.gitbook.io/0.0.0.0 +address=/walletconnectdapps.online/0.0.0.0 +address=/watranfart-fdd6a8.ingress-bonde.ewp.live/0.0.0.0 +address=/waxed.wiki/0.0.0.0 +address=/webmaillshavv.weebly.com/0.0.0.0 +address=/weeeqweeattt.weebly.com/0.0.0.0 +address=/weigh.skin/0.0.0.0 +address=/weigh.wiki/0.0.0.0 +address=/wgqdqvtn.baby/0.0.0.0 +address=/wgqdqvtn.pink/0.0.0.0 +address=/whatsapp-rqr.com/0.0.0.0 +address=/wirelessvoicebtpaidmailinfoplay047.weebly.com/0.0.0.0 +address=/wscs1231.cyou/0.0.0.0 +address=/xn--metmasklogin-vcb.gitbook.io/0.0.0.0 +address=/xojautruffeuttu-4659.vercel.app/0.0.0.0 +address=/xraiz.info/0.0.0.0 +address=/xraiz.vip/0.0.0.0 +address=/xsuweamskeidjf.weebly.com/0.0.0.0 +address=/xya46.cc/0.0.0.0 +address=/yahoooooo-108560.weeblysite.com/0.0.0.0 +address=/yavanica123.github.io/0.0.0.0 +address=/yi5lq-syaaa-aaaag-acfsq-cai.icp0.io/0.0.0.0 +address=/you-can-receive-here.vercel.app/0.0.0.0 +address=/zeiitgeist.angelocachero.info/0.0.0.0 +address=/zenixoikitti-5809.vercel.app/0.0.0.0 +address=/zeznjx.shop/0.0.0.0 +address=/zwzcn.com/0.0.0.0 diff --git a/phishing-filter-dnsmasq.conf.br b/phishing-filter-dnsmasq.conf.br new file mode 100644 index 0000000000000000000000000000000000000000..6a723e642fd9956155ccfa7366c2571780377f48 GIT binary patch literal 5369 zcmVPm>G`^(1o_34kkD2zrJe0y8_!_Rq(`=USo{Ogwc zmdpAx+Kc;7tRK){KeFQ8b05F{@bh2iMr8cskAD3XgmWVFe=_z*!TzZA|Nr{K&%b=m z+_3-ghyO&lfBtT3wV!lm#M~v^fB)+bKRwSlVZ}fGY-612*s$iYgJiUJ> zIONcOh5?+P`o-$c`^#^fb1oMhH;K0x{kk)WS2)Q@sJRry`gczki{M%c`Ty@)7+@b8 zjvVNfKf_0$9un6z;b zO9y-y?F~MV%nAW}r|NJyZP_jglSTKs?uBYagcz<-Z?`f-!+9p)Xf?a{e89+G6?t)* zW}&;K&N7JL#>q52?ssV^&`)=2@CHg@ezDNm>2tlmVdOXJnuM`z?0c z9Qh2#iGhRvdYwjm)BefB=bfCnJm7#rB0vFh!oB0bMn8MledJCr^fbo`=FS~PZTXDL zz3#{~kGCNB?qg2MfV`7X%bU-|ai054O1;Raq+!7PM&co^$lWg5=*WUw#sPVkqRi_Y zr9Y3DORE3L3xqJ}h3NOYW!sKHIOEI+Qlh>ya#Qi<+!gOHi8fq4TxYqXGmxP7gpX@; z3D?~l=1kQ%$vs2Tve(Bz3uaV~Y4hDcI1^m!V&}_ALgF#$QlDe%cL`l{J#*BC=YF%RjT&*TML$zeCv1xNU(F2S zUcNpTn%jS4@JcgoOa2Euq}yYLa+rPJkL4}ec~98%`t6$#>nG(Wc%4yxFfU0IS=RLK zA1xHkXX-SX*caV%dDedl=A6k@%Syu>?@U9Al(YJKwn<#jHpmTgPTC%GEh)#$=6E~~ zBTMOa+&HXc(ow94R=E2v&P@$?pvUIG<{d}FI`2{HEuK&CdHte8Ek;~K?`ArAyy0E_ z2+t7lxHoLbIaOdEjQM1J@O$q2pEz1XbbN5N3s zo1A=>3}T&8Qn95w#!WtYfR4NH0`y70T8yuFEkr@EOXJ zYXNBp&@spTki~{T6v#k4UmQ_3dT^2( zP@XVGWb3aR@`3zi6TNCnr%N5h>3-i;C+O!0P{yr7O&co?IM;3pd{0qqYLFDY?=)2U zh1=;jg{I=6M{NaK{gKM`IyM^sxEVrok;4YLXqOZFqYjV-p(+)PXYPIp`qVRx;>AG^ zHvu;hu>%N^z%U2>AbU7QS0KQ06KEKBjPt81E9m`20J|%T-M$4m?wa#{+ z&xqRM&|~$~5%p1qOOJp8)J^z?sE;|Y4lt>*9a4TxFXA_sPYK15hg zdNb3bCmIaf&b_YL5VM6MZDysmw9hOAoV1H{H8GiGlD=zm$6u1qXE0tfQLN9tI>Yx$I6yvv4$-&JIFPJ z68&qX?_ALjV#_t+fd{rHelrcFl*HB`P7;9j(9Iy^<}Q>{vWWMu4N}XqnMcezNsr<< z1j$3a@vyXxfL6n7HJ=U0qMSbx%ciM!7~RQD({X@^o?`f7*uuKyhh@*&Ff?4@hB3jh z7F1gXh>v4@K7+2)+Z&P%cPxINWsETR>6cNAch)@5+D3>;DzdI2!4zQ_F*sp~7>yRU zvHB;F*_Un05p%}t(|R8BIBG5h=e}bm+FEgq2knJW-!u&D{Ov55wpXWlOU&urPk-(pA42O2O!ifp>9ayU+^}A0E|L01e03+m zEA|LvY6Y=rp07QqugHLq=^ zI%BMpXvcKnboAW$lf=$TrUmC2^Ns+9>$&G#BA!d`MjxIHaj(pAEtO}(V-NGB$a~-N z$PX^0(LEN^tg>uwGrYQaAO9V93>14((0F$6P+k+W$KW&X@R(;F*vPU2!p#$Qj2Ea) z67`Eja^*<4J{;!^MJ$p?F=5Y*t`~!*NO5bC8 zVUi>}f(YS-u>#JF&-V43P1TI z7QisM-Iab>j6I)=$|GqIiqFad=g4s6^$CRg>fsqol6)^;i}!joSNb+fu)g7=`r99k zraP0w^*S?t?ynU(OFrPLr7=?BfSzZVNa_jK5eg!CWhezYHZOni0e3gKNgnW|bVT3Y zd%Cqw9@sMmjTz5YrCi#f0e=9aoTERtK?kW^y@i<#D(*X`VogMo)f^?Ao5N9cauw8%A6kB4@Np$yFbV3kGa11P5y<2RTG{_nu|D4;@ znUcd6%IFyUozHb{^X>9{xdIk02Kiog%*-gU3VSK_H3OQlqod}^y8%_)- zT8WD-;mLg>_Il79gpwem1jr4blxVM;0!J;%iDTRVMoecu%J$X?W0l=~kQ9@F8W8v( zYN+99=ZY|N{UI_T&TkXRD@CQ_%IDl(L7HWjtZw#}^sAIox5rDS5 z0K0w9oc1$6M^NQ|4FsT3CN84Ra%ZdO^n`PP2uTEEq~bvVx}-6rWHG=3nl=$ZSr}s# zTTmqoN;>5jH%@ZS1Ggqd=YFB{Rw}6kny41-U1H2j?Jj;PG%(A*N$?m|42yOPR{`CT zAW>;pA}S@7X2PA5H1gs}XuVa*EY2{5Wl@WE5KQFm437z&6tFm>l-1r@6PyRDxz|B4 z_nRcBB|67dQcf{rVTsGGAayR$0CS5k3#9}`D}>ctCCC%a;cSdOdltC|1xst#D!h=hCNh-wPB$(v6 zuzC>=M2$Np;DRcbMJ5(O;?XKhk)`A`IBAW1D2b#)l8aJ0G9~z8eS#1T7ib-eq1>fm znY7XwuD}UptpMXg5Xxx~i(OdqCBYXSQGqZ96{7W83P@5pt%OkM%f@oY1asP0FO?PE z#h@_)3Rq-ZFm-66;?Z76sjO0wI|*9oXuZ|SrZK%I)+XbP)ygeiC8j`u6`)xJ_pmI+ z^f-!&BXMm|MWwwFxC9JVGj4p0{7(UI_;Rt_aAi0$rxXMU+6soraOV?S zCWO)fu}EabF(Vr);V7f(pk}TZRjODmIN51C4lxI zl~UlBD3mY}V2RRWNBK;z8N{ID;vBfc-vS0{I1@o|CL}(8t9Dos`y6a5kIlNsykq z1+|mRsf5a*1fF67Z+`^x?CqPKWl;+sxmu#|kx4fMi+0FOipINdvXLWLr=l^6CGLj9 z2Du3C!Xib`%~dv0M5Ps~7!6l87*JMACQJ+hz%9Ncmbh@>K>$V-t@lAK$Uq98A~NI4 zB3cJQaD_T?m4t&}qf~(h;hZqmjo|ro!iXBocX45y_c}d`o#8je(q$-ZNKJof%>t)$Y%A%fM8jNcC{Yq4F_x`DPRI4<-!bOyWa^MG8S1dPLO z7zVCJm)z>1@q*`XT6^LT(N=%DK}f>x34` zTXt7cP^~vnL^mKceiuT2k~a^s9K~{z^tY=p7-Uf9eI}%^1hLP2QXaRwky7^&C?_fB40s4rMM57&3S?n5urm3*|1{cnu zRf!ug=*L7`Gd7D7!f12#yr?F2wOW98B36NBb*KUoYX!K5k2`Rr>7(cJD*EbNrKZj%Mk_rKu){h}DIo?i z=%zYche+O+P>j8l4=JN#hL9Sh~LDuo$pkD;%^uj=DpHXz}O* zL2dX||L(yZ>31tDI8%)s11b=vU+?Q63^RQNF?IHoNQUJ2A0^MU!GgauS0rH1~=(L9QQRAWWZF#9&2IG?qYO1N}7 z$^<9&1L90+5YxV_asLFrrLUc-jBn_VG^!44dQyBZo+nXVfxW5(%_-2ZRgVciY5~PIY$@d#_-wM1lS8`#3kz2cr_5@A((7 z_YL025%-0NuM45LtqkHYdENE}?B6NbiD!Mq*LxHWp+Z7ft#GDJ=nDbZ>Q3UurypD2|uwknen)St!KQ%w| X7|{D5%q7stw>&-q$QSrt-(W=n!0BSl literal 0 HcmV?d00001 diff --git a/phishing-filter-dnsmasq.conf.gz b/phishing-filter-dnsmasq.conf.gz new file mode 100644 index 0000000000000000000000000000000000000000..0c748f05fe1620477159299a3b2a158251f5b8bc GIT binary patch literal 5523 zcmV;E6>RDsiwFP!000021DspQj^j#p-TNyNcpEohvN%L=D8QRW8}Pyl18#4;i{XY8 z5*efzK`E7A?-Np1y?!V%l&`a@vIgE8!yV7LRQ>k$cN+%!{`TKT>yOqQ-u^a?!aDz^ zogan2y!~~U)OoNz{L61||2u0DNPmB;ii%}rnN|GnMe)5VzH|P6c>W*nvt7u4e=Fa# zxWE1D`jCG!3td)n>i!qV{O2^%EDqT67{ctofBSa8353kmG=3Y!a1#q<#twm&Z}aD& zKK~Bw|FVjl|7Vnc8=k6IvZ_*UePAOG;U>gzI7lXX$;vGy-ARmtnB-g(v(f_ykq zuqwaVcW=YaDmX;Zvo=?1^I1O(+b8Vms(*FD9^NkMtn9k1#7XCY{5g+a+z{<5Uhoz> zZZ9RI3d^XTSi4n;#Q=6OS4(1#qq&hB`IsfI0yfey!leQ`e*1WutQcipk^JP-HGO}8ve*+PoopG*pUptNO| z;3<9mfZ{nkBj`2<=g*_I&cu>BAZ7xtPI9>KoGJuFGGe*<6x+}Brzk7qQNAe5TR8WN zqFveN{<5N&=23QA&N>wnujtz^EsLbJuI`Gj3-ju0hVZmpQQL7C6jJ^*6?<^FK)h?y z^j}fIzeBoco9gS*O;>bZk&e;vc?rbiqsoU>+v(3M*lAyWxh^`E?H3{F=oZC?S913w zzAV0~iocLWnu#@?St~l63%{56pM~GAekN~MpJ|j31@!Uf3O^S1cc*+ZYgg19LP?0G znlz>Rthi3t?KllOLy5zxOV|3)O5PR>|uQzn)a+S<9DD^uv|qV7{qIoo*(aOod?iAIvNJisgAZ_|1Y zZn`H!Q`*DtUoRxF7$PHeMH{Y&4HV5sPZY+iuhmv9GoX&FFl(?)|1*4(#EpoE<# zz?b*?$JWDP%;qT^C!f`_Vyb_&*s_oTk$?*%vh`f@RB$NNGONKTX26XJj=Gn1#cIwP z-sZYIAb)r-R(q?~T#R$v7u#-I0VVQammz}y7DBLR?k>`shxag@!G4lbM-lQr0rbI- z6mHGR0*MQ9b>0#2bOkm}#ip{zU&=&2Er-pg^Dymbo+4(g^KdKkW!-w-wRO$+pAW*0 zcX*M)aUrlroigtpK-h);k+oD9cZtB`>V`OL8Q$AvHGP%`$7U3ScRA)Sr_@8 zF3Q}1oX4iRA6Z*kv7K!1fgap z*+|K1WNodLI;C5^miZ^lVp{HqP*odanyl%R%9yBCCd;PJSf`}`^=}1}C~jH3_{$x^ zM&+e5`E6QE9wEmgl&)LL$~7qAUi<8)CzhSH-R&|S_wrw(Li-W43AF`KD3Mv(pQaE8Ea0W<);{YX8^vcHyUeeT zVWKeB7(T&bMS~2A-$vIqoC<9Li*IY*hT<`RUF7pp8@$ zpG$m2`A{@X)3rsDj@N@yPRq+7M<8xI#pX!g5kHnQec1d-qqYP?_5esIkmq>C?Eb>C zQDe(IKL#LE8fL{f0AJ1J0$*n6Je#R~SXQ)u#Lr|wth0voX)JOCZtrP_+2LXIL1gng zMenE%M|;|?>M+hi2LW2X#=#g%pMy?gcz+N1VckM{fZpWffb@9b-H6fiAM@RH24e_M zdbuaQQ1+ZBMi)Ma$wF64xAbWb@|+%G9*K^y>2$3raI$8(x1*!kMz z41}%b_|;}*S)>PIb{RtfDu}S!pf7eknYOEYJDKZQsIDLO3P<=6Dchj; zBtA!_(;5aq)ZKTVpTbY6Y_$5xu;P$9rQlV36&MR~S-+m&J#;=BSX-oH_7Ae{3)%JD zu=oxsE%Xk)M57g>l~{dSYJ8xA?D?+ON(&l{%$xG-MoAh4817w;OK$FV>+xl_^nU-? zt3ac;O>QZ&33m2&RV&;yi`%FifYikb=fHWE6v7|H9gKN_@zZx7wOp0))}|U{oZ64w<7{h6?zSByOwiGRD!W zW%82=i1Ey$amE*ri9$8nGtKdB(P?~Pya{1|xY5GP^`5)>u>F>PoX|%jjfpcVxE!rC zuh$Sm$nH^_s1slP$2Uva)lS3n9aHMqQ)J)=KMk-*NCwBvTSAR9r$w(OJux5O$9Ffr z=lJccE_Ag!wY%$Hn02V4!pa;@V7p1m6L`e~cem`$_6?7)L`E zrZC*^Px}9rS-~UZfo^7d-pn3650jdP&rwmL!p*A$t*D5EsZ`s7-zg@jH=L9)9VyWW zo-b8GxotaEG{g)kR`;wg%C@h|vQ%Z)YTc)md)d_>l@+xbG*tGcC}hpcvaYx&x-zL; zm0B~c8s0Z0QzZME7#EEuh7~#bTv8b~EVVM!$&Q(}>Dz)t)8G)jP_2Hkvmrx$T?wc$ z*5TY;t9mIqUP`W5kyNe)Yjoe2%&?vnZHE&#kr9+NwW0u(N+~m#N_SO-ohrse)Ah1u zZAGF|jp%uL=cW)`3sOxf1uG1krFyQrhPdoXre7#`mC&_pxb9)!wvl~_%X1;9R=m+H zt&Bjbq(E3ThAFN3TC_%%xJFa;qDou4Rn$;?-O_5oOsP9YMi<8P9RJp}bz0eQW$K18 zt_xO`O(%^|x<$lyeW6wQ&RtQ1F1IBUeZ@K$pp{Bh3>#NX*AynLTs9?Q5rw)XMu;aQTh^9B6s>vWNiB6( znsg=UyAl!7mQ)}y1Qz05Rgh^>+f32CC5X>igek%Q10W$ z1YxkYWmShOM;r8A72U=gl~xvQ%W-QiMGbok+31Q@NHNr-T2eYlBrgOaQa62%lq@4$#i_&N#kXF2w#Vh5$D>Sd9 zE>ZsR8|c14s!-V)-O99br%MuD&oum8m=Zy$>ZU4t)zlSYC8?|{gqUf02at+Xl`af4=uI*)t6?^vzx;qJ6D z)jc<)i3=cuvTA#Y&RUlYVcJKZrIlHwB(FMT6S`zucbuTg(Xdb^3@=|O3u8En5HA#K zJ0+<$Z7Wbrbjyo6Z7@^BURv}DjU!fifjUqs6weN4?qAd}(^l{=wvf=|Et94(sJ(p* zGS;Z(g|b0n30$@$1^@#v0$)+p;_9_3k|}urJ|9-O^~@LnU~MJ9^=-1~4rLk)Uxc^g zc^g(=%*k9mU3SKRmsMa7U}WzntwmPD+UdRS{&3%!d@SOmZG68Qz)((<9AkjN9mR)O zCgIjWEaI|So}S$-G{$kHvF|Bty^uQ`#G-T7W>p;H_Z5DBF~Z09X}HpZ7wqufr^tgx zSnpS`h#M}Ktv=1=@%8euZq0z=YfVP>47K|Xi$e`K0Q9zeNdxu*9m0ta5@eC zx-8DPC5&2{qY&}=SOY>ehH`OEBZ*L5I;Hz^%#cH;BYQjJyHtE13ugC1iT74hf4 z!7qP<=YN4Gv4VY)F(POF>Y%s~PaDZ$GJg6RBlEu0U=-t7EVGs9dfAF@(ICXc7;Bxr zV|ZXkTE!G5_!C-gCb;R6n_WonrQF*Ot5ESIzPcpf(${$s@ObCx78DTZB*1@r69f2l zC_8d+Q{fs#|5mKb)S-|wmI+RPIenk@!xg{K(I^F=2Gls@2Q&j8?CtS&6nh6N=qUCJ zBe}a+jp=n-ZK6Al!{48ZK&AMMAY-s_1s!U4gC<&2{Mo}L#>I%YOvEK?^rUMlGu>ye zP%Ax()*`&pm?^8;;)lx=PKc1x)ZopWb$Wo!$uUC@o$GkVM@F~6KNzz~b>dJcXV z3T5uM+x>v@XT3PLXpV9jcdX{He1fqSfD9$P0rhHiLpcpMX{kY-04=6KnE;A8SE@u| zW>7bV2y~>CGSl;GxK^{9f^OrY}NL{ys)}lM7@EBIYtJkZY*?#V3&fAa(rZzPifZbY7}t1 ze8wgnIL+4HAo)LEb{gsoS$h4+KY+dg$EYN$G29BqT|@%sOaVq%?D;@guvuj=tzIjF z$yB>?OJ}-;-fSHL0vVphU$92`Be0e=hhWG>_hGhsAA$Ln$6-LEBfH-X+!{8^SZPbN z61<1k6@E3IN>eH7<@uW5Qv`Tn>(olrDuWGEeiD2!y*Ji&QMj}u_FwGXR??8=OGS)5 zkhkykb)LISvcP)s=9(1P53~{1;&%zyr2J;p==>O_?$hFcwF1n95=`17jc+0XzU-rz zAu~|i98VxZ0n`${F@sRA_k<({@lOOM%#i3Hzj!KS0N8_|>=ybY% zrH5shIbZT~SA7-@;3oYnpi5ygA}G*TAM-yb2v+{c{#^WWQ4=cNEoG~fFDK80?8QD-GB z47%=n8~XR1?)4=ELbx3Xkj|}YtJ?nk|I=9}>@q-IxJm_7)cdYVNl>M`qRjs@qnEKA zkgUKQYaJSU1Coxka-xy;7<6IO2E7;5vG;<|QA*VTUGMtrH1x9J~lFe1d z{15$W-(k@WZIU<5-~C*-xQ+e#`PYNWL1F*lwo!g$#OtVV^Sht_N`njg>qoD?389qe z#{X>FUtRla9RI)h-Os;#5@jsEe$;OnZpbKRX#OKjh}KPLe)nUjX7>Q)-|=RA^Sd8e5arho6|gIOPyP3wo%pEZ zjUzV4^O^R{asR?UC?n-Rfq~*1Xp~Z_pGJEe!6mIx-P$W*B83hxio5C5*mwQEt)>>R z@PSN5-t-|oHm3B`*sjAYjVa?+=LWo>rSH}cwhltIy->>{RM*Sou$+>TGd1hdjqNyp zVP`*R!}$VjYFx%(DN?2`m!m3DmnL1@U6A7-I-WKTi%{(>O}Zv+Y#_TM4@_UN>XTay zjr^1ZkEd@(>7OgC7Md$Xnt)Ftp?)#QTI9JmV3;lxI3a2fuL@>D^#^P3lJz0QSvGKl zG}%vY&`C(C0cUsV?0$yhlrFmFGTDA7Il6d)3xqN`v8<{aRHp{1>-XD$t4zt9e*+Ti z>nYOW)qvOJM56El4?$Rf03yNTkTJ{8k-t1e-l!$n{!>>695Y>owjIDEi5u{EO=ly4 zft)ZgT$_`9O70OM-h!jZXpk-x8tjf+b^pu-Cs$_=CVAO5VRY5x(@$Qc_c6YvvXa7E4L6)=tcz>G>sQ8L=rwl~$Tlx_f4<}7uF zYBFRfm9dI$nA^<-)m(R{I;EYcSs7DxNQ0|gYZ*F`v3Qaklal^1XbcAsu+XB^0?BT& z^s*KKIHYLXQ6d7TcJM{rJ!lpiws>A~Ni|Z$vd%-_t<$`9y^gkL#$9HBQp_Mf&$lt) zyhxFcSVXV8!K~dy&WMLb2pKd%IMqm0hk=4*k49=_#8_YOQGGY`<1mf0v})hTjw@8U zyDGt_kuQ0`J7IufXNLk(x-b`H5gr)c;16(Almp=FLP|%ANX)6mLA9#{exw%hslqXG z7J=hXz;RNcVtjJ3jlVq8yY`ZAC39`eYnl6gtm<_@{+OW>`N)X<)ak)G>l%n9@7#?E z1=Qp?Ap}Y61Vx6aJYY0uU)jSf1A}3n>S9409@{FpQAT51tijm1lXdbjj32gtkb3-{X}k_7PthAfXY2T)+VwB;2Ub0T6- zX>4_RGGiK5+SZ_kM?`QKmOz|@?-Df&hZYoOLpYk4(K@sm_zLJWWE182Nn17~2{*Ra zpyNy&!yaq)=me0nQuzhMM+g?L2m2ljQ}>7_NYf&s|J`eB@|qv|7Ohjuf3YsMG~ zO(cyg<6YM?d~o>SV-KuPWUfdRudtxKPryZq$Z`XZGC0nn*`O3WB7LjQAm(YENM&tM zm?5FONZnp#12F;sh(B6d@!lMOFhG(_YN;VM2T)`_YC==HICM(MumZa3LA!MV@hDO@ zIl}Wkj#71uZ`10{vdrf-`k^bq9Dfe!8oux8{30P17>B6VtxpZcMQH zy~~SIvty=c(WA$F;+LeSuQfZeu&ofi!i<(9p3Q_#k&|b5a^7f=fuPj@yF4eqae`RT z@Dw6C%+b^wDP<7Tuo_F(F-pB6k`TuzHy0on(FMn0_Jdw(n0BDaxWfZnq4>PRIPVQ# zoHYU9^*5LPy%Ry{+ERH>e}MFK7)}V90yq> z!jcJb^*&MvSe-)>rsZ-dZ0?B|i zS#k*dY^Ng%HWmu5vFVu+U2NCc`p%5rnVKrvDF-pVRM*erTzFLql0Pb`&iy|6%a1h@ z`g$7&8p69`HVWL+9bPpNV-{&lENeNmx5r0v{G#a9V30qAqYzFTK%6_Wyg#4s8^-l@ z=infBMg9e&;&E}?pn6Z8Bt|i)VSL0;v?QY3<#e5`ChcJT01=qZR?^r*#LC$@mSCan zq@gN2Sr-q{R_47n8%JQS*?qKFA@Zvvut6NCT- zvv)kq!}9=?d*!hkyw&+~+anOdV+kgmgek|q&tj^u5N0fWImMmPF<1ya_;Glb9+}zq zzD2dxvIuyK_fW_&fSwG0V5S_h;+}pQMd6qeBLRVi6#J#AtmAq4Eg3#)a_GrI(e;s` z-&0?B3M=TG0Tq)}uPOU8!7Y=+hHj88gXp~`E{g6yWwkuws3v=fP6TA4wtpAG(}wMp zZQTO9PvAfP6Z}W|kNiF$JvMpis(>m`aIh8)V?)pY^nSfjWE%lL(LZ4BYj7)UEYiQr zD5W#Kfz08HLj~9hMakHWlS*5KJK?!twPs2<)E+(9a%_;_NrF+`biY@$1SObx`3t4}BlT+2K~tatZF_X11-m%^_ z-cisUsh`GkD}UKEe6Pjikn;iETw(wSe^Bp1lOy=_2NPTnL;@x!x{k{e6PiotK)Hf1 z_JmlXm$7DglQ0;d3=o1c}o}P>vZxmhP zD@d=D^p5h#oAl4#57rS2ixJ)Hfcq>t8_yKt%4xd=M|RJHx1z8ZGSQ}FNpx~syW#<` zzZ1c;0kPgyQq@AK4iUD_%yT~|GXSpJh-TXsG%&#^bJsubd0vKg!eK)*^y{#;YF>M# zlu^rU?Yg|jRWJR}4;{{Sm`1&BZL9ln8C&0t&@O6gow9bYW*XN?4F;D^dmKiXEDl3I zjBU3Zv5ly9o(&hh4BI@dbBi!d!!)j7W~-K*aKp9lU|Q#4SVp}rvspDPqtc@p+T{cF zFidt`)vyig(9R3&q3YGWHpwMelhl$oB7`@9Mi~&bHt7W!LcyvEjs2!IDY=H#+;th9 zQ3OrMTMg_&G&d>Aqi1MTK@?~q*`h|Q zy&rp)BYVRbp2iSTDUHir&Vy`}ib$Ria&3L6IcJC_$!*TLw^UjY&Zq*|8Yp)&Kp}fOR~d*H%Yr1iwi2u-9f zgOCR6FizDTa#m(4s?@b0qW0>5z^+=o^w=J6*(s?Tc@@#rS<|q>Ie|e=#g&t^q*9KZ ztWzLn?^1hfz)c1flhA%^U_dER%1MxFNgk6@Jb z_&ip6mKr1_364OCqIvkx-hP(X)9coyB`4^fu{v~5CAC>eBJ*(WX=}}MXcKg1Oe3fE zo0SS#tQIg@Z{6bHNEqnO8Jn?UqmqE#Kvim&bM=}v8)!Is>)o(M(gJ;WB<}L|CTfr| zXk;89YRwB;HV^@BsSu~35gw%6Dg#UJWF=#-E-O&&JqXqbT33yvAeTl_GLlH-Vsagn z^VKmZF;X(*WPZ5x`M$v9w=``!eYRvi*8qW9WU~=Du&&XPa-W+Tcs4MOQB5V!$`(at@N?ePw$gSdz! z7kv_PRR#3hP2&*1U5AG{h&_&%p0feqNWen^0wH~J82l`qpO>vvbO=%4+aJ%@C&r8q zX1Q*Mx_Rl!SHHlut*D)zK#O?Xv z_W9xM-FJ;RR_q22U5}WbVH!99UeV;x|H?r$o(^h zUvNEsZ|`g|<}jv3dA%x(=O#xj@u3a4DUf3G`4@+gWkw@8+=x%@mZ<}oT0DK zj&G_Gb6cqk?lTuYqfvI+{6eKyI2U-7q(cMt`sx}kYx4MajFT|2<+1&3zdBFbKK(qu zj-5{+jm2{x$KUk5^gvIa*B5@&N5x42riaT;AV`LKi%c6WSa$h-@_t zUJ*J(e=M6{G=*weSeIJn{&CM^*S~6&9`tx@031$ZY<+h9XVX+rniQn1#POzP<@v;V zRHBMWllp_g5{>IM`DMSp-kk@-f1UdH+;y4OpJjWf>lex*`J@j_`8wkf)Bo@F&Hw?% z519}lU)Q(u)>tWZ1~oDMFY!IpVaB-=K?^|1iDD5UWeIdED1aDl;GBQY?f2GN!#d?T zKTg|PrO%AI*KPUy-=7)!7MQeeUcSz4ovm?moZGhObRN-~{16Gs(|o?pCl8h}8NL$s zc)r_`>kCPi`1mOLexx-7XAMu%8Ot&w>0D2&XAB_<)vsfLL02pu?0(LMu}_1aU+_<* za`5rjl-I@)FR4^XnxTxcxU*$4HPr~gqpdKcBt{9}$<=-g*r$=u>j{(kUY9gatj*Y< z(OZt{Ovj}nCc>!Q8l+U@nVRzxpE8}}4fI-+nRJArU@oYKqHGf}2&F?E;ITm zRLr>u>X0*Y;W|@q98~?`-I;NEAAWgTrLf%@C%-Kh^CgEDF`zxCX`TpTygk*lO$7{s|=JWo)Npw ztgD-cfnfp`2WMj0n6W`(vtB0pfQGm@g$#>!Gt-7szhPr;a)Zobvvz_-UjHS%2t9Tk zCEm$Pt>5rLi_%f|>G7@{aN(-<8xh|((pmH2VdH5(S~~JyGAj4}w(pBWU8LpU5sdpe zJXZ31A7n~tbOUwG8fKUea3GSCgQp$liMop^s_WH0D?UL~xZsBnsv>q7y@pzT;tMM0 zx@}mQs{kmJm0SO0ps%k&{tK0o{FHhli2pbw``TteejXSm9~gz{@N3XQwaYkZ1^EM| z3Niq^2EK3i(CFTxJly-(cL8QAZ|jLwxOYrs3B0NDZvP???}$JH_kd@IUN;BkxFBg? b4D^X~5;H5hoOUf<{f5`ay{~@nuOWp2-Srdx literal 0 HcmV?d00001 diff --git a/phishing-filter-domains.txt.gz b/phishing-filter-domains.txt.gz new file mode 100644 index 0000000000000000000000000000000000000000..1c12231490f73779ee308d21189f7c51e1b23037 GIT binary patch literal 5310 zcmV;v6hZ4BiwFP!000021D#q+kL$Q{-uJIKz}+N3q|y5^%ispcB8vdI*<{D3OAy^nZH{W>o&qU+FK&mS6ugt^B|A zsBV+8V)xc-lxb$2$ZNSiLG@sHsp%~q>kqt(^FVdMF%umKU73;~;keh6XHv1-J+%L2JcqNg1 zd~#S=#cX;i8&5vIouG&6J%n}9(zA4Rc&VM*caylrI| zx+Svi9t9VTN+|3);!K{@VMk-|>L6G^#C4la??bTu+Dl_K#bF1v1_-5iw`{Kn0fvI9 zve)Q`Pi>SUrFDO%l{GZBfDK$9a?# zg-4@Ubth`~Wq3K`$KWT+$|DIr!lr{;Oh^$<+0 zvvF7^b}mm(f6lVgLz^q(rBV4qnM!9iwF73$pDO*$2tJjvVLLs@JOC`EqF2&z|HjcbWh zcyiMctXuZB;pX)Db0mNj%GZzUgw?nSpn4_78}_l zMm91(1vSBvb#mBhSR*9+7O*^|?}_xVT$t9JW-}xn-54*8#oXWN4B*_w764I@hC7#5`3xC?B z?PGc3bJs_M3uot}oM(k-zp##@(kR5(I)@`&({iU!0e?3V1$aREbkN6==2?-KMOD_Z zOiwU=*|N#pvngi%K&xWWRbWKT$&6iuXUv0fBfGG}(%})@6;NP5cxEB~eUSwe5D>6P z6ZjNx#C03-YDR6_SxXqWmWo*H#uGgZo!iDQRF(2L+|ziR@YvLOUVc1w%=8OXp~87o zfH3kP8odue65`EnZ^C+(R$I{&D4Z+~wY63NoF}~VCU%X~f$?y}= zFB#o*htEiKu@OT;n!o_Tkn|`_=L%Hj_|;Mno8?r}H+c6#$-%v#Im&VxO9O5OOstso z19s!r&1yRZSdKJsHE$ZJ%Uqnb>go=-K@Vll{XEEg@mAM4zosXa-1~;#o=cXP;l2+n z)Ik+(eSnf1HjN1RChx%Pu=If$ZoytNe&9VNRaG^0QXLF-62eM;JH;@~8<2&8BlY-i zysD>(w zs-it4$}16IIN*AeRw=Vd;)^OQ>QHN zVCEJ* z`R0*;5Gi62NPBOl2bLzAQsM$Qrd(#ih*r~B39Dn=M<4KIeKBbm1%}=RVqhnfm;OW{ zcfKAfs2S!eE`SB{694KbO_Kw-He(+WUn3lF)AN;!sV&CM za?%CHywrK!9v$MMEo&%&cJ&CnWS`6RJO^%h}SN?M$)I&Kqp8t z2328$eb>%FA=C%$-gZS8buMWSl47v$#I)t{tB2zl0GGTj_i{`W5U0*@)}^Yv9#) zxG8j~DDQ_WFWNR3^+s;xojR=@-3vOvpr}dnZ?Ju3d4)ZY{@x@9Qhg*%*Q%hV{V?`G zIaj@5z2TU<4)$xxinenf!wrxPe89!Ced`%e%)Qr{pFNBLkBh{k;8V- zVu}fyAK1MY7U}i|d~Q*+$6aOY*#gWnVvh%@ddbJR1IpN(p$9ynbgz(f^L%9Xqz;gf zr0xARy3=V+h*pQE8cv=D8nOX41G7q?cy*89@?YV`&s^`=qc>u7-su1nMjp9?4n;nl zxi?oeP^$w|o3Ns;M=ndH<&Zj_HHm_n$EOb&voqIGJ z*KIxg?v;)()XBRJvWC4v@7^f5y}pcc(ubz5fAkOAKVtm1irRObOw7h&>PU`=)S>};R0`mG! zM!-`NJf`*#g$-Q_U=;yoMDZ1E->On~chh~s@0XJg@Peye1s#g#+=$VR$B`kZBn1|GCF%jL zylg0MFugs`FWU_c(!;@`V=w*=zE)uz6;4D3Aa#_{q1R4V!_CEKbUOV490CjsbHIh5 z>=UYAPbcIb2ns7()kVRf8(TK4^#cxD4TwBCm@8QtkHHDoy|C=3OAixA<;;{~Iumsb zq#z2WT3srkb)y8USQ(GmCvROhMN+9kD^cWa(I#n)<}FP{+SF3E2i}%9IlxDzY6*10 zTb(34FVi&7N|rR~o;ORSETpK)wn_^$32m;5l2uX_SfE6@*z-cVR0^#c-V_>rLY*j9 zRd_|qL@kf&YNb`1XAE3L(Lji%7A9@ecAR!XKsm2y@j8d?)=DVs`_yh#gri)tja`d$DSY8)(%2-nC)s=ECn^Yg-qHR(bqE1x;-(i?nHd&%{jX2avb@X+ZCs#?` zCT(68uq;m#0Z3AooC_t>=E&R9Z3XsL*G1MqT#~k<-|oaN92@X4gXzVaIQ4@yXK$?83?NMIm}n*Y{{irpYlbM9$L|QQPKN zSF55`IZL(F4337zKKa7iHi;}VE&-h-{s3!gc#}$NEo*+@ZDgug(-so?O>_#&ioD9w zR#bTglk9nA21hL5j)=#i5j8_j%M&PAWQ?`dkr(+ZWhp2MxwV01i%KO7j;1ASf6#+$ zkUO)qP^CuxL;8SF&^IQxE!2GARe4)#B~{6g*VC+SIZ`P)1lYPI5T;oF$SPqCl7Fk(X&*B7(|96m=uG%5_~cgodokBtPs;CzL#sRv`UQ0%36TR3MBS z2+$tmP1hOpiUl|r%evsY(g^yNOjlH*I`V3`8iSyzDo{&MD4;Zz)et)u$=)YVzzW^O z@e!>JV1VI(0(WPSW70!$zX7iI*A)cZ^hM8J-M01!O%5iY#Cz|gWKoV?9wsjSv}_o9 zWEW}Z>?;7aT+|*R17DrllZ}qqsYADXn@o8?@MsyS=hEh}EBqr6E_!Pj7j=|T8{KC3 zdu*Xc0HSVIE8y7R;Wo135#v2NkmwFMqRAi7DY$Md97Ujmkxz6)mj|)TbUoy}9wuSw z8v1xiFm}W3uC&?C2BF#x&9yRULZ%Cg+A=$+YMjsvD6!ulP`|z1(EZ2$?7(r?K~FK- zULW3k9MBa;!=3K+Js~|bQGTaX&#YGlIFYSQ1D#cP=C2((^8LPOET~SL#^JJFIi5tX z?d$;5PM1sP=W(>!j-jXS?}vF48lGN__m%LS4p<7(`&H+57Z&i3S)qPlhbII&KK@QY z!%ONg&!48fkR{>g@OxQaCt!Z@LG|C6xY!OH@?*#B1rYc=VJCElM7?fwLTfLhIp5jp zcU)gsEWvwfMCa>WYDium{ngm@BlK};j9X)Jw+VBduNf#*Y3N_YXm|I@4&<&)P+jXn#m@}T(M zT14*_cVz~Rb9@2MNOuWaq40i*&pqEYd2lPVd7g4nJh(fYK+;!Es6nQjwY_(xz7P4= z5%UKHANqa@%W-5{yL0ON-iIc-qBwBbe(KHV5SC`kKBc|_evJz{3V-$2My3gVP<0z1 zvcr{?pGzt!%KEA-tMBL0Tkd!rN!TftlekJKl+GA1azA0C_R_nKNw!W1%+skNW;Y!(W_AH^Tmt&?AP9&@>dwwOQ7QW*G=}+?_Xp2q~_W8)52h` z!Cg`FoAsPCm@Wvi)O{1uy8iwghwZ^BI*&G(qtMLBT$-dbVgbTs)AYE(cY(^XAZXRV7;AhrWDieS&=Hy?i= zfA{dPtUvT;pBTbZ_=^s1J1d#u?ZONKitA~;DI4A<5#2%b0n0?R9L<~LLom4<3dD4! zBht$pi^WZE+e%dM((K4K_-K8>`?W6CMe;fuaiy~Qa zpFVv54&3aD=W~dSnBHbz?5|7jtWzP-ck06aPYY812i6n17j)`SF6P6TDn2S;OS;Mm z$8mEyZ&hylxGi(K$=e+4mWMu`*63Y*oLqdoZT@#hL{WgQ5Riv~8A&n_co;giBt?CA zp%*^Q@^tgphm9!N5(e3>DQ3a<+IhGOv^t{QP{`#|M28c5#Xd%6o*PctK2kz@`01|b z0ACq-(fgM_7IZ&^e;0Ok>km>~Q&!);C%DitDhx@7uAkOlOxfKczr5eOpCTr-za8$~ zv8#xn-TN0T>CSX7@lzQS0O}F3bnnnP!GNenw{7C7ta&(?AOyM*P1@tsr@cHjX#c!F Q#dab5zvFdrk0dPs0ODmfZ~y=R literal 0 HcmV?d00001 diff --git a/phishing-filter-hosts.txt b/phishing-filter-hosts.txt new file mode 100644 index 000000000..5c24abebf --- /dev/null +++ b/phishing-filter-hosts.txt @@ -0,0 +1,434 @@ +# Title: Phishing Hosts Blocklist +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +0.0.0.0 1111365dh.net +0.0.0.0 12931-coinbase.com +0.0.0.0 215323.com +0.0.0.0 260aesthetic.wixsite.com +0.0.0.0 3650947.cc +0.0.0.0 3659ll.net +0.0.0.0 83291-coinbase.com +0.0.0.0 94-103-188-123.plesk.page +0.0.0.0 9825057365.com +0.0.0.0 abctrvabc.com +0.0.0.0 access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com +0.0.0.0 acclimatizable.fun +0.0.0.0 account-update05.myvnc.com +0.0.0.0 accounts.google.auzen.us.kg +0.0.0.0 activebusiness-unlocker3.com +0.0.0.0 addwsrbh.green +0.0.0.0 ahnp.vercel.app +0.0.0.0 aldg.ldgknhk.lol +0.0.0.0 allegrolokalnie.pl-891241214.buzz +0.0.0.0 alutipcentra.pages.dev +0.0.0.0 ambil-pinjaman-daana-payleter.xforms.web.id +0.0.0.0 ambulatoriprivati.it +0.0.0.0 amev.ldgknhk.lol +0.0.0.0 antail-conv.com +0.0.0.0 apply-now-to-receive-badge.vercel.app +0.0.0.0 artsea.pages.dev +0.0.0.0 atmailupdatewptnskmdinfomailacct.weebly.com +0.0.0.0 att-101072.weeblysite.com +0.0.0.0 att-1041page.weeblysite.com +0.0.0.0 att-105714.weeblysite.com +0.0.0.0 att-105819.square.site +0.0.0.0 att-inc-107097.weeblysite.com +0.0.0.0 att-login380.weeblysite.com +0.0.0.0 att-login522.weeblysite.com +0.0.0.0 att-service-102155.weeblysite.com +0.0.0.0 att-sign-in-105669.weeblysite.com +0.0.0.0 attcom-100762.weeblysite.com +0.0.0.0 attcom-106808.weeblysite.com +0.0.0.0 attmailservicenow.wixstudio.com +0.0.0.0 attmailservicenow.wixstudio.io +0.0.0.0 attmailsrvrdesk.weebly.com +0.0.0.0 attnewmaill.weebly.com +0.0.0.0 attyhhhhiiii225.weebly.com +0.0.0.0 atw-tau.vercel.app +0.0.0.0 authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com +0.0.0.0 authsyncs.pages.dev +0.0.0.0 autoreplyattmode.wixsite.com +0.0.0.0 avoid.hold-managert.com +0.0.0.0 azbin.ir +0.0.0.0 b45018.com +0.0.0.0 bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link +0.0.0.0 baiii-wong.cutvi.cfd +0.0.0.0 basvuru-online-yap.vercel.app +0.0.0.0 beionfidi.pages.dev +0.0.0.0 bet73nn.com +0.0.0.0 bet83039.com +0.0.0.0 bet83054.com +0.0.0.0 bfrescentremebermainsetreouytnoy.weebly.com +0.0.0.0 biggggggggggg.weebly.com +0.0.0.0 bitnode.pages.dev +0.0.0.0 bitvavobtc.com +0.0.0.0 blackhere11.serv00.net +0.0.0.0 blss24att.weebly.com +0.0.0.0 braucrarasuteu-2470.vercel.app +0.0.0.0 bt-102124.weeblysite.com +0.0.0.0 bt1business.weebly.com +0.0.0.0 btuan-dan2-resmi.top1.my.id +0.0.0.0 buildingdesignsusapdf.s3.us-east-005.backblazeb2.com +0.0.0.0 business-page-property-897432967.netlify.app +0.0.0.0 caipora.xyz +0.0.0.0 calm-pothos-3b24c9.netlify.app +0.0.0.0 carrefourarabiank15.pages.dev +0.0.0.0 caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com +0.0.0.0 catgirl-appverset-nya.pages.dev +0.0.0.0 catxtokens.pages.dev +0.0.0.0 chat.94-103-188-123.plesk.page +0.0.0.0 check154109.click +0.0.0.0 checkseven.vercel.app +0.0.0.0 ciente-a.org +0.0.0.0 cieplo.app +0.0.0.0 cj12143.tw1.ru +0.0.0.0 cj87335.tw1.ru +0.0.0.0 claimyourethrewards.pages.dev +0.0.0.0 clickbait.design +0.0.0.0 cnsa163.com +0.0.0.0 cock2-iota.vercel.app +0.0.0.0 cock3.vercel.app +0.0.0.0 cock7.vercel.app +0.0.0.0 contact-pro-8291-d01.firebaseapp.com +0.0.0.0 contact-pro-8291-d01.web.app +0.0.0.0 creosrl.com +0.0.0.0 curmmgdv.email +0.0.0.0 currently541.weebly.com +0.0.0.0 currently890.weebly.com +0.0.0.0 currentlyserver.weebly.com +0.0.0.0 dara3dccj.wixsite.com +0.0.0.0 db.service4db.com +0.0.0.0 de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev +0.0.0.0 debutcan.firebaseapp.com +0.0.0.0 debutcan.web.app +0.0.0.0 delivery.attempt.failure.ebbs.co.za +0.0.0.0 dev.stream.mornar.app +0.0.0.0 dnwqmh.click +0.0.0.0 dropsmartchain.pages.dev +0.0.0.0 dsjoting.group +0.0.0.0 dulb6c5p5.top +0.0.0.0 ebay-mallwholesale.com +0.0.0.0 ebt-lilac.vercel.app +0.0.0.0 echoredled.netlify.app +0.0.0.0 elbarco.percentadnp.info +0.0.0.0 eltritongourmet.com +0.0.0.0 email.mgb.modento.io +0.0.0.0 enjomugg.firebaseapp.com +0.0.0.0 enjomugg.web.app +0.0.0.0 error3456vhubhornbase.azurewebsites.net +0.0.0.0 example223.wixsite.com +0.0.0.0 eyeydhe.wixsite.com +0.0.0.0 eyttueiu.square.site +0.0.0.0 facebook-avip.click +0.0.0.0 fame.pink +0.0.0.0 fassehoizubra-7696.vercel.app +0.0.0.0 fastdropchain.pages.dev +0.0.0.0 fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io +0.0.0.0 fla-1001.square.site +0.0.0.0 flo4211.github.io +0.0.0.0 fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com +0.0.0.0 fnuttlie.wiki +0.0.0.0 fokeijonnekou.vercel.app +0.0.0.0 fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com +0.0.0.0 free-verified-badge-form0-service.vercel.app +0.0.0.0 free-verified-meta-badge-service.vercel.app +0.0.0.0 g06668706.wixsite.com +0.0.0.0 gccndbqg.vip +0.0.0.0 geriodememerkezi.online +0.0.0.0 get-checkmark-for-you.vercel.app +0.0.0.0 get-free-verified-badge-service-on.vercel.app +0.0.0.0 gitanag.broke-it.net +0.0.0.0 gruprocuroipra-6493.vercel.app +0.0.0.0 h5.b9en.com +0.0.0.0 h5.metacoint.com +0.0.0.0 hcghij.top +0.0.0.0 hecregayatu-1014.vercel.app +0.0.0.0 hejmtxxt.guru +0.0.0.0 helenblunt6.wixsite.com +0.0.0.0 help.accountsupportcentre.com +0.0.0.0 here-apply-for-page-review.vercel.app +0.0.0.0 hgbk.ldgknhk.lol +0.0.0.0 hhideiie.wixsite.com +0.0.0.0 hitummoinneullei-5882.vercel.app +0.0.0.0 home-101067.weeblysite.com +0.0.0.0 home-103465.weeblysite.com +0.0.0.0 home-104341.weeblysite.com +0.0.0.0 home-105266.weeblysite.com +0.0.0.0 home-105929.weeblysite.com +0.0.0.0 homeattatthome.square.site +0.0.0.0 hpnefhqs.motorcycles +0.0.0.0 im25.net +0.0.0.0 info.supercitrus.ind.br +0.0.0.0 ins-business-home-center.com +0.0.0.0 instagaramgalochka.vercel.app +0.0.0.0 ipv6.43-135-137-110.cprapid.com +0.0.0.0 irmt0ken.win +0.0.0.0 iujf7839iofvkbcu748.weebly.com +0.0.0.0 iwimwmiwi.click +0.0.0.0 jagej73796.wixsite.com +0.0.0.0 jfdjy.com +0.0.0.0 kalyani963.github.io +0.0.0.0 kexoigrufouddou-5902.vercel.app +0.0.0.0 kl1k-ds1ni.neupdile.my.id +0.0.0.0 kliind08.wixsite.com +0.0.0.0 kreelo098.weebly.com +0.0.0.0 kremlcup.com +0.0.0.0 kshitij12375.github.io +0.0.0.0 kucoinglobal1.com +0.0.0.0 kxbztydc.black +0.0.0.0 labanquepostale.jupiter-analytics.com +0.0.0.0 leddevotoze-3146.vercel.app +0.0.0.0 linnkdna-kget.wxxzsite.buzz +0.0.0.0 llahi.info +0.0.0.0 llahi.vip +0.0.0.0 loffaummuddote-4145.vercel.app +0.0.0.0 login-att-10221.square.site +0.0.0.0 login-form.world +0.0.0.0 login-online-outlook365.com +0.0.0.0 login-outlook-midstreamauth.com +0.0.0.0 login-screen-103134.weeblysite.com +0.0.0.0 loginaccount70.wixsite.com +0.0.0.0 loginaccount77.wixsite.com +0.0.0.0 luk6414.wixsite.com +0.0.0.0 luxlifemiamiblog.com +0.0.0.0 m.meta-accessibility.io.vn +0.0.0.0 madebybmr.fyi +0.0.0.0 maqpiexyz.click +0.0.0.0 mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev +0.0.0.0 mayfair313.wixsite.com +0.0.0.0 mdbrvlfy.black +0.0.0.0 mesageriepro33range1.weebly.com +0.0.0.0 metamsk-wallet-3.gitbook.io +0.0.0.0 metttaa-audddt-new-02.firebaseapp.com +0.0.0.0 metttaa-audddt-new-02.web.app +0.0.0.0 microsoft365-storage.github.io +0.0.0.0 mikepattyjm.wixsite.com +0.0.0.0 mobilemidasbuy.n3g.fun +0.0.0.0 monespacepro-client.3utilities.com +0.0.0.0 monetization-violation.github.io +0.0.0.0 moodengsol-net.pages.dev +0.0.0.0 mwsiekdnfjrdufs.weebly.com +0.0.0.0 mxmxnmx.mx.zya.me +0.0.0.0 national-au-b.com +0.0.0.0 national-au.net +0.0.0.0 nbaaiqjq.group +0.0.0.0 nexomyacwv.weebly.com +0.0.0.0 nft-time11.vercel.app +0.0.0.0 nichcheck.weeblysite.com +0.0.0.0 ns1.carrier-ast2-portal-apple.com +0.0.0.0 omadshf.ru +0.0.0.0 online-assist.live +0.0.0.0 online-promo-asb.org +0.0.0.0 openkimono.pro +0.0.0.0 opportunity-verified-status.vercel.app +0.0.0.0 ourtime.reconnect-dating.workers.dev +0.0.0.0 owouwuowo.click +0.0.0.0 p365kf.com +0.0.0.0 p4zv8crnrrha27so.94-103-188-123.plesk.page +0.0.0.0 page-center-manage.com +0.0.0.0 pavan-patil-22.github.io +0.0.0.0 pecinternational.net +0.0.0.0 peesom.chat +0.0.0.0 pencairaanndannaa.my.id +0.0.0.0 petty.wiki +0.0.0.0 pimnhv.group +0.0.0.0 policies-business-page-service.com +0.0.0.0 pottatrebewe-2808.vercel.app +0.0.0.0 pqo.hrf.mybluehost.me +0.0.0.0 programming--service--panel-totlyy-free-for-you.vercel.app +0.0.0.0 promo1.spik.ru +0.0.0.0 protocolsecure.pages.dev +0.0.0.0 pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev +0.0.0.0 pub-1778406e4fec4394901793111c187dd9.r2.dev +0.0.0.0 pub-19b834342e7d465b9f00b3511325a081.r2.dev +0.0.0.0 pub-21dd4dc659614ceb93e45a6de4434502.r2.dev +0.0.0.0 pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev +0.0.0.0 pub-2fefe932a6974485b987c9ba851b5c40.r2.dev +0.0.0.0 pub-3a46d9914f494078a6d6237513e7a096.r2.dev +0.0.0.0 pub-442ed822851244a689b3472ea2c6a950.r2.dev +0.0.0.0 pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev +0.0.0.0 pub-682ad3b65d944376b919745aae3c56d4.r2.dev +0.0.0.0 pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev +0.0.0.0 pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev +0.0.0.0 pub-7f5cf36445d042168bfacd712e890dc0.r2.dev +0.0.0.0 pub-803839714a924882a7bcc2495a26860f.r2.dev +0.0.0.0 pub-8161de4a277e4ee8b532af34954224e1.r2.dev +0.0.0.0 pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev +0.0.0.0 pub-8376b5b2334844d193a525d8b8548fa5.r2.dev +0.0.0.0 pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev +0.0.0.0 pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev +0.0.0.0 pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev +0.0.0.0 pub-9163a97d70394cb499bdd232be6c2169.r2.dev +0.0.0.0 pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev +0.0.0.0 pub-98171471e0944ac3a5820ef719bf0640.r2.dev +0.0.0.0 pub-a263e0790935412eb10cacc55bbced18.r2.dev +0.0.0.0 pub-a291041b077742899b63a9982f04a56c.r2.dev +0.0.0.0 pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev +0.0.0.0 pub-b50adc5d699a4f08aec37102c2103da7.r2.dev +0.0.0.0 pub-c0a934c950e441db96b882789f53c9ea.r2.dev +0.0.0.0 pub-c2c250050109456396c933de259a4fea.r2.dev +0.0.0.0 pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev +0.0.0.0 pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev +0.0.0.0 pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev +0.0.0.0 pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev +0.0.0.0 pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev +0.0.0.0 pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev +0.0.0.0 pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev +0.0.0.0 pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev +0.0.0.0 pub-e42cb528b102447385e3145197916f51.r2.dev +0.0.0.0 pub-e4aff507450c478cbe3f77ad23d75035.r2.dev +0.0.0.0 pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev +0.0.0.0 pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev +0.0.0.0 pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev +0.0.0.0 pubgm.club +0.0.0.0 puffagroibrouwoi-8818.vercel.app +0.0.0.0 qasimk.com +0.0.0.0 qfjfvseq.info +0.0.0.0 quauwograssodda-3503.vercel.app +0.0.0.0 qysgyp.com +0.0.0.0 rajdipchatterjee.github.io +0.0.0.0 rechazaroanularaqui51.weebly.com +0.0.0.0 remote-fix.pages.dev +0.0.0.0 renggard.47-243-192-240.cprapid.com +0.0.0.0 resolvepanel.live +0.0.0.0 resolving--issue--with-us1.vercel.app +0.0.0.0 resqat.weebly.com +0.0.0.0 review-business-case.d2f7p3b7pucnle.amplifyapp.com +0.0.0.0 rlpqwefi.pink +0.0.0.0 rouloigeilleuja-9523.vercel.app +0.0.0.0 rulemec.pages.dev +0.0.0.0 rutinqqwin.shop +0.0.0.0 rwftfu.quest +0.0.0.0 s.team-pw.cc +0.0.0.0 sairanees.github.io +0.0.0.0 sanseipecas.com.br +0.0.0.0 sasklelo.weebly.com +0.0.0.0 sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com +0.0.0.0 sasktelcustomerwebly.weebly.com +0.0.0.0 sasktelnetwebmailservermaintainance.weebly.com +0.0.0.0 sasktelrectify.weebly.com +0.0.0.0 sasktelscrutinize.weebly.com +0.0.0.0 sasktelservicecentterwebly.weebly.com +0.0.0.0 sasktelsupportsystemwebly.weebly.com +0.0.0.0 sbcglobal30.wixsite.com +0.0.0.0 scan-vulnerability-guard-v3.pages.dev +0.0.0.0 scan-vulnerability-guard.pages.dev +0.0.0.0 scanner-metamask-v1.pages.dev +0.0.0.0 scanner-metamask-v2.pages.dev +0.0.0.0 scanner-metamask-v3.pages.dev +0.0.0.0 scanner-metamask.pages.dev +0.0.0.0 sec-sign-in.info +0.0.0.0 secure2-validitycheck.weebly.com +0.0.0.0 securecapitec.theprimepoint.online +0.0.0.0 securerpcfix.com +0.0.0.0 seeteressecalywoi.github.io +0.0.0.0 seivviice.weebly.com +0.0.0.0 server.0e7p.com +0.0.0.0 server.2rk3.com +0.0.0.0 server.8q3p.com +0.0.0.0 server.n6b8.com +0.0.0.0 server.v9vs.com +0.0.0.0 sevvviicess.weebly.com +0.0.0.0 shard.blue +0.0.0.0 shard.skin +0.0.0.0 shared-d7590.firebaseapp.com +0.0.0.0 shared-d7590.web.app +0.0.0.0 shaw-101329.weeblysite.com +0.0.0.0 shaw-101587.weeblysite.com +0.0.0.0 shaw-106427.weeblysite.com +0.0.0.0 shaw-107375.weeblysite.com +0.0.0.0 solutionwebsitedapp.firebaseapp.com +0.0.0.0 solutionwebsitedapp.web.app +0.0.0.0 solvetans.firebaseapp.com +0.0.0.0 solvetans.web.app +0.0.0.0 sondfrom.dexlog.my.id +0.0.0.0 soyokai.or.jp +0.0.0.0 srdate.club +0.0.0.0 ssy.hmb.mybluehostin.me +0.0.0.0 steam.poweredartsworkshop.com +0.0.0.0 steam.workshopsreview.com +0.0.0.0 steamcommmuty.com +0.0.0.0 steamcommuunity.ru +0.0.0.0 steamcomunutty.com +0.0.0.0 steamconmumity.com +0.0.0.0 stepsray.vercel.app +0.0.0.0 support-metahelpcenter-id100003498934.netlify.app +0.0.0.0 sv5gardens655665.weeblysite.com +0.0.0.0 system-portalnu.duckdns.org +0.0.0.0 talwgam.njmolada.com +0.0.0.0 taste.baby +0.0.0.0 tele.zhngain.top +0.0.0.0 telegrambot-resolved.pages.dev +0.0.0.0 telegrazm.net +0.0.0.0 telstra-100408.weeblysite.com +0.0.0.0 telstra-100469.weeblysite.com +0.0.0.0 telstra-103234.weeblysite.com +0.0.0.0 tiktok-888.vip +0.0.0.0 tiltckshow.top +0.0.0.0 tnomwzrp.top +0.0.0.0 toeken.im +0.0.0.0 tonic.pink +0.0.0.0 tooma.cellinsurance.co.zw +0.0.0.0 tpdtepremu.xyz +0.0.0.0 trattujeilesso-3354.vercel.app +0.0.0.0 trbinace.com +0.0.0.0 treibrukeukonno-1395.vercel.app +0.0.0.0 tuesmad.firebaseapp.com +0.0.0.0 tuesmad.web.app +0.0.0.0 tyyyyyytyyy.weebly.com +0.0.0.0 tzcsjfto.chat +0.0.0.0 u.updatetrackgre.top +0.0.0.0 uc-whatstapp-web.com +0.0.0.0 udxcady.wixsite.com +0.0.0.0 uklifejv.cyou +0.0.0.0 updatemail12.wixsite.com +0.0.0.0 ups-trackdeliveryapps.chickenkiller.com +0.0.0.0 usbest.cyou +0.0.0.0 user-transaction-overview.vercel.app +0.0.0.0 usps.com-trackdck.top +0.0.0.0 usps.com-tracklnv.top +0.0.0.0 usps.com-trackmcl.top +0.0.0.0 usps.com-trackmec.top +0.0.0.0 usps.com-tracktpq.top +0.0.0.0 usps.com-trackvmd.top +0.0.0.0 uspsinfw.top +0.0.0.0 uwdtsczi.top +0.0.0.0 uwm-onedrive.com +0.0.0.0 vaishnavi1436.github.io +0.0.0.0 validatie-veiligauthenticatie.com +0.0.0.0 vbbu.ldgknhk.lol +0.0.0.0 verified-this-request-badge.vercel.app +0.0.0.0 vo4zzp.icu +0.0.0.0 vs41.github.io +0.0.0.0 walett-cont.gitbook.io +0.0.0.0 walletauthenticators.vercel.app +0.0.0.0 walletcomnecitt.gitbook.io +0.0.0.0 walletconnectdapps.online +0.0.0.0 watranfart-fdd6a8.ingress-bonde.ewp.live +0.0.0.0 waxed.wiki +0.0.0.0 webmaillshavv.weebly.com +0.0.0.0 weeeqweeattt.weebly.com +0.0.0.0 weigh.skin +0.0.0.0 weigh.wiki +0.0.0.0 wgqdqvtn.baby +0.0.0.0 wgqdqvtn.pink +0.0.0.0 whatsapp-rqr.com +0.0.0.0 wirelessvoicebtpaidmailinfoplay047.weebly.com +0.0.0.0 wscs1231.cyou +0.0.0.0 xn--metmasklogin-vcb.gitbook.io +0.0.0.0 xojautruffeuttu-4659.vercel.app +0.0.0.0 xraiz.info +0.0.0.0 xraiz.vip +0.0.0.0 xsuweamskeidjf.weebly.com +0.0.0.0 xya46.cc +0.0.0.0 yahoooooo-108560.weeblysite.com +0.0.0.0 yavanica123.github.io +0.0.0.0 yi5lq-syaaa-aaaag-acfsq-cai.icp0.io +0.0.0.0 you-can-receive-here.vercel.app +0.0.0.0 zeiitgeist.angelocachero.info +0.0.0.0 zenixoikitti-5809.vercel.app +0.0.0.0 zeznjx.shop +0.0.0.0 zwzcn.com diff --git a/phishing-filter-hosts.txt.br b/phishing-filter-hosts.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..31801aed1a7ae9913fb8e15a6fa9be9d5459da71 GIT binary patch literal 5304 zcmV;p6i4gf2-G2>m=Ay=WSIMy>PO#iQ@y(%A{BFBMyA4jFvEUOs|fB*dJmiv~=`tvWfkN(3U-aYs6>(74v z>kQhCzkgcQFF`mbLjNaYzXkiP_5c6+v!8$boVj8D{lkAE+&_OENBk%K1Tl9B_uu^b zv!DD1oUr2WpKXk@5vHtp?BEM;jRW=z8j|$I|8ypYKDO}JpZ$ob=Q@DKKdYGqzy9op z6YT!`rwou3&ddM(&zi?J!<(N+c$LqJ&sNtj{Ha_V`VTOmyyyR7^s@DbFOqW6aeJ8y z=i(JkauRAT9w1cHxdg$r6!PIOS{Ps-8;%_4l|L0D5_Ll^nmJ`?2-7XyzDImxtQ78t zIYl^=gj-9vko4TKKWR;HR3B`GX4=R_d#(n280`%{xGWO__D(sqnZ_#cauD6?x)-Vy z5xlatvV=23!}jM1>7l|=YFVrT7Gb1SE?SfEQ zipTjZj{BnxSE~mtcT~_ax)e|M=Mtv-Y?w0vq2%5^Y1uw^EwW{PSY+i1XM$@@eYU(7 zlFNokScM2F6K^b8P)Cp|=9h9JS%O z-x>F>5d}S>7Dl`DM$((788j<@eJ(V&c~P%4dhCM z`Mh3e5V3)Ll?kpUk2k!lA7Kj!*1cgv&ME7^ma)FMX216?6bxY(X5V0j1`YZgIEhe( z6(fkMZ4+DwvqgUJPEH+FY|MUSSVfSA{m69GlhfnwKn#>fpyU_y+2M?dc1dR^aMU4; zX^Iz1@jHCci%5(f7E12LS5bKPR!Y!s$cHeWlbJo=W`K%4-=l(uEX7+=eb!@d0 z>4gf;yWJY1>0W{cK0|qOU1=!+I_CId=O?LUKZFNXa4OgDK}D zfmcEc4qG|*O3NNdIZhn$Lp0H99u(;M4dfI>*F5spuEF5<|!Tc z0<=J3E?baX2V`ZRYIw@oc`!~H5C+d##3Eo%WSpklP?*bWQ|SR@o)~Hg4Qp?^=QUpv@QDZ>@N{Gik28bqwT2r`XQ5M`$2p2#;Q4Vf3`8-HM9d_18loQ%Vb2 zYzRbw48-%r5oMzXC%FOT31dXI{<Vm7@2ZhDyIc-}a^|a4Gbttw0McU%6h#)-pgFM}@yo*dP}Mbz*EYyaZ8mX67<0!TD%dM9z6lk00891up)V-9e@PLG>4OwvYmE-&>8RyEWcMJIH%?V z!K+m~ydUoT4nN3V7QAa0w#5eb#zIAuC zuWVTsYuLgpU0p*c(Z5#u&bzO~mTSZV4{T5TW{Nm@n%E$HB-p$lF0rNN%CkI_XIT5OrHR8FZZ;c^}wt$Kv-{MyUfnYNCdeW#)O-HZZk}azR64 z5`Z#BoJWj|>eTqJ{%LGD0^61&=8V%&<}r_>=2CF(J7%J-6;pgm8Z;1Gro~XQnKo0yoj`I-B-HA~vC-c{>{_A0v5KM2w@eCt|MPr{vU}4toSg}IOg5MBgIExz4V0rhLYVP zMRJ&*_^EkqGu0VmokTmvU^D5t^CyX&mrM)JGv*ytCD(J$xkOuuDrGf48{%G>%WW0U zhQ}V}>Cl^f%OgLykVdDSO(8+7^=Y{0b|3#8cMMboHJv;=cqp%lV*vnT)_cq|4{T%* zNt|uAWBgZC%CBD}lB*8&N9?(jXDmRTD-L>nKHr^a&&;#$uw__79u|bTXRj&2JdRo@ zcOX$*=_Q)V8i;i+2O;`iLI=GRAlGbrbfh*3yUsDTA~kGNIzsRuIdX)aV8v0CJ2#9yM6&Z>67#tzgQeP?eMV}WBg2u$d&Fh^(Va99+dO?r!yz??Y~q zBgLwY=-YcwH{;p|cB5Bn#!X zFS6Hy$QnMRcp1lAVQkeS7ft%8&G4*furOeI_c`5$`*D=O@T<=|9yvny^QJ|vLmv44 zT?ht2OCD5354^T8gjnv|5lumd9 z(TU-Et5EI`H|`U$*Mr*1_{RfEfZPB|i9#nGbjEp39OKrIN;>mVwl{wnW9MmzozhTL z#Eh^C);tY8UP#1%h^k%!&R3;dOZ2!0^LN{7AI*Xe$g^Yg*@!1j$ir2>UzUtI_WR~T zba@q=R7E)LXMWB`^Xh#7x`XhMisd|4oYND|1tKI7jFE~51?ZB-kdnm!3uxLzx~Lmt z6Wi@h%2AErX)Rht#tq@jop%g6Ed8v#*5McqQ%R1r0Ku5r^ za1U;5BxBA#?ea#2c0rUYNCPY|Nv0*o7q@alY_~3WPDJ5UtlzK$6O7C4@phTUhRxU``wBrLw}i z7&Jye0gH?amIZzM=b^ojQdy-UcM`PF(R!5{>tWCxntCd^4N=$(QD?qad?&drg z%i}x_f8yGpib{JUa0wW!X59D~{mG){iW|?2Qf|~G1QWDM3RqH%r?nd3_#(lXXxMZc zJ6<{GV-!+&T!P?By1MXX5S<5al;Hr(q-k5W^wIKkJ4-mr4OfOEb4o#wpsiq-40k@U zW!=phAQp+tIOe2QT%hMHKnPlUA24!z%beyv$TMS%64p82M%!7@_x^ebw-E}(8t9Dos`y6aJE)YB}mWR zg4#*uR6^xY0#7l4x1YIq_Vn4#vZ#fRTrE-f$fWD#MLXmsMdRIP*~k&BQ_&d35_i3C zgIol6VUZ%}{+=zOh)OF|F&eIHFrciKOqdu1fLnaTm$-1?K>$V-t@lAK$Uq98A~NHn z9<75QxI&${O2R>~QL4a$a84NO>hK&oVMGn)i?}e(dmSWKeu=K*)i)j`g4e=&ENg%= z(rT1kY3S;m;7igx+K`fFMrjt5vB9HE#y}J@8qH)sScx4tlFS8ZH^VUi$#5Q61RHd6 zd%_P+Mi|AI)ZS^Ojq+(pR)Cuh`=FMvq>E+>48TasQJKiWYPBE=gOba@)`Pts6y3=G zIm9W!+G_T#&Z}l(Ehn&wzM$vhNtjjfN{{sJ_!2QVuL<)aw|cwx8Y2*?nauRIcVF+* zY4C_yKTzfv*dEBug}Pzb;0vunnL9Li&8)dnyWt_v@Jsnalm#~|>k2JWWrz@^y$&ac zP-3*yhQ01@Bo-yC1_?!)l3aijixA|eKbf5)szAg3f>B)%+H#aID9D3p6v>>@n{$Q& zq0>-=SJC$Kbz#c-m@v0G_nKGC`;PMg#Az`MfN}LbFmzJD9J#z+S1uGm%Y~&}X{1RZ z#OABjDIRtUa$ZIdCc=K&aYHH-Gc$IC)vdaFBcO8Z@xtyw;V௦O7a2YY105Tl zEgyJEU8MRj@@}^?Y)X=R06N;6*gFQ;@2loDQxVMXcg|Cf02TJi(41j6DB4r{+m}pp zgJtpd`rhu{8{QSu05{kIRD&73?qp~J0=bkBTA)!iN3+5c*;;JdyHsT zMO$-~7A2Tb321p%(ZlgtRP`)2Mz3M2`11C_!KZFy+;gI_6zQ!JEe#Sh;%85kh-tdq z>s_CaX>Ih8jy1iwgh+V%-fy}cUa<0-Tpn59|Ldt8gM|@p3_>tCZb<5iF^%BHuBMd7 zIs%~{$1%qpT0bRpg7n1*W>YP%PFYtvIr2@xvp2X8i*z%^y#v&+RJLa2X#G?(lge2q z6`aKGZ%tNI5=&pSUUZyfpQhr@Zk9>o49{4)oO0L$_G^WMmd8!^y4KZpx!~NNV zJJRn~R%C^sqlQ3`d_CmrAjFJvkET&y`#t1;aBPW<2DHdfL6C)*nviGC=O~57rkf)_ zM|~1&t&YkWc^_f+q`4YcN~y>7ZD)X0QRn%>obeuN$$>~p8MPij&!NRM{z2f=Y1diC z83&%PJthzm&jrUB^MTn&sBk4xYPG*TnpZ2y8W`q=*|+(``K+Z>!llz0RBU2DAg+5O zj`S@y?l178a#OBid_#YvQRTU9lY(K;7^;3n!Em|SGZ6D7S08Ymq)6ed{24z1;!R9g z^Qjhlo5!1myRKML8W2@EaFKNW*-2##h*}cPv(vLMVo$k!wtd%^TeI6^$qKSNwv4RO zElliM2*Okg6k*L?M!X&+X9>?P5Mx}~y}YmV5q2OE^!$|_=j-y{N8Cy-X*pCiuQ+=6 z=75xg)PnK+YQ(y2tJjinM_kN;EOf?Fg$x%JA zHOsLNJC*l)SM~j#G>5_TeRl=n!n1+0#;}X&a3~sy5|XcU=e6l@NZcbD>QOM{ksVd> zz%e>)C+w^XCfmm*XoI8}7qIlw`B|M+{nzt16tmwy{) zc^qws|Ma()|5+4|TK#w-6`@647li$zs(z5_2V?(>`Tuxbtk>bkOZ}qw_2r+}oBWIM z`m|~%um1v>zt59i_zoNGV_d?Izy8``UoJ{HPk&8(yl}4zW5=ldU(5SZ-v1Bn|FlxO z@c&W%+jv*SBL6+FUZ!Kti*`4$r2nrkSZlw&uVtg$>v25#dH2Tu`e~E$-+APMW0k7B z{d%eK)wE3QOQ+-KC>ff%kh673IIZ|GMQYZNW;@hYT!*;V(aQ2-UxSTX9c)kyv@4~2 z92&-PvuWRu;mM{0yj3+t-S@@QvQj`MDGC8GsNIHB0M!UY!37puN5HrfeFZ(NMJG^=}@npYQ#JB}(= zPS>;hXNT-+Ldc4kGlt%XwO=#!8#nfSY3j&_FE@#r7ppXeYx{mKOAB2 zmUJpH+!cy*$BTtuM-4QWuV(gBC@)%+Rz2#hBagGUi??Ukw6yVI zQlIljc9CN%IlJ@LB+D{h3pZbiI2T?^4J#IctDVkT#K)ks7l{*=zx(jAL>G>evd+wD z6z+?-gcjp*8m^`bcA8 z4T}zT4TVCeNff+4N@G|rT%8QL2v`x48o`t$=xNtwgic!rxq+}0q0 zGJ$PqOZ5VA?SE_mkP_luq_CnT@PfOYbn`|zI?69+bEHDmz zfU9s-ML$+clQNCAMs>F6ilg1d+7HuzOL3tw! zQMW@udnGtpla5n?a4s4jPFHwY*Qef;m)V;#)v22^&kw7KHA?QDTJ}TWt2LD#ZHl@Q z*-uYPEKOp9U|Cv-fF;T|{vdlU15!7i%4znF`|V2Za+>yEqCz3fgbBnG@rBy>D>zj+ z%rW(CVC3t=V(Tbc$rhH<;KwMgc17tO#|w(E4t(5NTO$XLiLvH@sO26NUX9=ixoo9J z!9A|KBu$`Dp{Ym|_(33g8&PBtZj;^?{u}DbX(!6W9bDYdDD4jOw4#tb^Ua6ASKnyw zXWvlPp3(H;^mp>Z-{2mICa{G~8Pl&RLu!K5l>?)`>MJtslerjIZPzTvHe6~k&&PtF z?efLJ20cr;Jkk-vL(u!#zOAU7Mb{2(&K;172^`OGVGhCYf^mEm>6e0fONc6eRAAX!Em|^+;bnvL=M531Ww&%S|jq`iU3_4hs%0i2y7uDQ_1y%?fqZzkG zASqe&Xg^0$V(ejdP9NtiuQdy6L^v<1xdvytMjY!MuP#$BPH$II+2xW;G~iLXxcBc` z-Fv(ub(q!9h9tYyMhURx@0#D}?5ehH`>txUK-o#@lsN55K;d%`I{^3-e)*$*v*n#_ zKFr7BRv(cGj_K6JHE)_En7ioDo@>q)*W@J7@ltr0zCdbx42qp!QBL5~867t-S~_G4 z*dD}b&|8*^v1GE;c5LH)FL!%;*rX=h&g&gV|FEXEm}d9Thbg|k#&Wkl6mf7L?ZgQ1 zScz5arnc!;E=vR4jZr0%59MWVL@F4>fUtG)HGX6 zk!;;jIbIx*K+DVP>)Y+xo43qy0NNE=Qvqxv%O{vI)}aRjsY`l$UbbDu0GtM0Tjz2Iczf=my>DVx;I)Asu&`kqG7 z!RMf{5$W#?Qju`)aN3RrBflz-& zkMq)Bx$KS%n9&xvrbJ!(Vjqo-HuU33r$&W<*KYo5xp>_f&$m!-iO{QNMSHeVeA^pl1nQ%BVC%-zrqri+*9`3l5H#scj`YG{%5 zj@oZsIbY`Wvf}%fU|xXQquE?^p>OA2dguL~lP=7E@HllNeRn4D{y@E5k)OE(GXz`< zLNZ8Pw6sb2Co(p$ShNoFRHk>bhcSnK%yT3gl@bpBQivCX?seN8Ep~GI^A~I_GpvCC zDz#Ua$8aA*(Zpz5#hAx>I1;VlY)D8dld0VZ7?= zoDQj#qDr=GXlsh5e`qviyj7ZFA%?V@)4}O$C5`SyPYwG0uF|}1vE{&Jr}Fz4ZS>F( z4rxkz9Io%=Ab8Je!6dD6It{0-8itx0I?$@?ajZ5`vbxb7ufRbwIuy58Jt0_^P|DkW z5Do2!=0vu9VA*}ziZjKvY-_=3WngVNFx9u3iN2;PuhSE*8qqQ}z*1c+h8h=Roa;ui zR?(~u+)V_B^IJoul0(BgBWj$rB?Bi}yLD2xI=v5eic?doo@%2iV+Mw?zH72NhDp=3 zlrmLOQn$S@T&fNz?1xIp?0x#GL0iz(ln;cW$>W`nl2B|z+PamK-$&?#VN)~QM^Pq#n^tPsGX$SdDyySdO)*;m)!3&& z07wSF^2*SvHrY5G>bBuSr@AUZP0(S$;-n!0yTM&gbY#Q1Ld1xUb~Wc!XKs*fgz9UP zjnkp8;n1$u6)?)7&w5g6(;-ios?En7+}-G^8>*pU6o?UZB|%{s6GCcL_j#Qmed-Sz zbR8u%C__xtRX$E-BkBQJW@xaF(R9!auZ=Psz-Eo8p6CpHr5F(kt)aqS z=z$DStLx6FPGog@Rcqc4RKY)$seu^Tw4@$n+Yq=mr=ti0fFcZ#H)t49g|g|6wDh6Y2@Ml>2$=XJO-43W($NxNPO-I%W9 z2vyaws>#~GRH2R$^R=HT%fy<4nco;(K4_amgsM%$<$eDGPT%FKvPR9)?JDGzy z2YuQ;FPv76g+R4Jn3dv111n`0yoTL%+w*yTP&R!w5J5)|I@ig8Z}0gV_cM3v$UQ%; zmSsCquc!2uVeD&$ka=`oJML9UyMm-=w1MF7{1ci70Upo#MijSg#(n0-Cv6Dm#ET2g zTdX154MF z54;!{$-2O=XnM8G83^62JDo1pm0|zz-t8|YnzcNwI(+s6p^TbO#d3N4ImnPY1c&Y+ zp$&q_&mWn({|rmSAMT|7Mhys!>0`#{5<%X~Yu~(h zS>Hb)2-gtx^juiT`-5eZe+df`o#J`L&C}0rq_?VKw<1i6bCbcyGwCOyF14rWnFuE? z&h;Njkw21Z{y-`xqUFz@)!SyUdml&suW&2db`^x7UxceY9na?=&`MRXGB|wwP0*f- z#ooSjtt2uD$tF7zPb1pH@4kWq_7j0CMExA%R@?jeIAnb3b0X1?ti^m$^A5_bYYVza4XYH?`|^{7#XcIfS~M!w#%L0R)?Q$w#LfR>Jl*MHR7kNtSrNw)5Vihy6(od ziG^Aq-zgW3Y9(0=kgV1k^1-P@w!uuA|$x~K>ereLjm0I~wNr^x~C z$EjUp+Z-vS)#O?MDBG37m0BrH_HctqJ`CWhrhN0vzx3-9Z-?;1zm!9^BQuYi)p0J@ zWm6#xOpKNHPyzF9(J|72v9Zt%!S0srIo>nMha`}2B~oG!pRqx|PwUhZ0;>H_`mx54 zFpyVy8uSZ6r;x0~oIRk~m@9WC2OPTU1mYDoq6~grq7}jF(yf9BXPOYy=3XJnN7IkA zmGWP-HLJd95gu%6ZS(x1^)>&{0$hoYg6p_7Y?LcuO|%lcg|&><%~NR#MZMe~59b8l z2*8J0i3K?T?C!6Ud@RUcwUp;BSyA#wq1Zwi623DtcKaI@uaD!{WRksKq&LS@`Bq0O zVJ&_WV^bvKL_jVEtlK1iGugpZlwi_+X=)H7 zF`Rik^6fJ|Zyk6fbbR5;mD`3&j$=pg+*EYf9WTiN8fNxChkblbdqptFA~v7se9!XK zTj=!z-e&7=Hvuu;5lqgeUTEJ^ImS4C5-kHsZ(Jvks1}kxZmGfc13jLX_t=3JI{YAX zT~FuD?}!GZ* y4~V>cr5S~rN~_~V7=@C(hOJ;NR&MQn(@l-)(Z^T)u^ZV`821mq#>2vbIsgEGp}B$p literal 0 HcmV?d00001 diff --git a/phishing-filter-rpz.conf b/phishing-filter-rpz.conf new file mode 100644 index 000000000..75c6b9e35 --- /dev/null +++ b/phishing-filter-rpz.conf @@ -0,0 +1,439 @@ +; Title: Phishing Domains RPZ Blocklist +; Updated: 2024-11-25T00:20:55Z +; Expires: 1 day (update frequency) +; Homepage: https://gitlab.com/malware-filter/phishing-filter +; License: https://gitlab.com/malware-filter/phishing-filter#license +; Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database + +$TTL 30 +@ IN SOA rpz.curben.gitlab.io. hostmaster.rpz.curben.gitlab.io. 1732494055 86400 3600 604800 30 + NS localhost. + +1111365dh.net CNAME . +12931-coinbase.com CNAME . +215323.com CNAME . +260aesthetic.wixsite.com CNAME . +3650947.cc CNAME . +3659ll.net CNAME . +83291-coinbase.com CNAME . +94-103-188-123.plesk.page CNAME . +9825057365.com CNAME . +abctrvabc.com CNAME . +access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com CNAME . +acclimatizable.fun CNAME . +account-update05.myvnc.com CNAME . +accounts.google.auzen.us.kg CNAME . +activebusiness-unlocker3.com CNAME . +addwsrbh.green CNAME . +ahnp.vercel.app CNAME . +aldg.ldgknhk.lol CNAME . +allegrolokalnie.pl-891241214.buzz CNAME . +alutipcentra.pages.dev CNAME . +ambil-pinjaman-daana-payleter.xforms.web.id CNAME . +ambulatoriprivati.it CNAME . +amev.ldgknhk.lol CNAME . +antail-conv.com CNAME . +apply-now-to-receive-badge.vercel.app CNAME . +artsea.pages.dev CNAME . +atmailupdatewptnskmdinfomailacct.weebly.com CNAME . +att-101072.weeblysite.com CNAME . +att-1041page.weeblysite.com CNAME . +att-105714.weeblysite.com CNAME . +att-105819.square.site CNAME . +att-inc-107097.weeblysite.com CNAME . +att-login380.weeblysite.com CNAME . +att-login522.weeblysite.com CNAME . +att-service-102155.weeblysite.com CNAME . +att-sign-in-105669.weeblysite.com CNAME . +attcom-100762.weeblysite.com CNAME . +attcom-106808.weeblysite.com CNAME . +attmailservicenow.wixstudio.com CNAME . +attmailservicenow.wixstudio.io CNAME . +attmailsrvrdesk.weebly.com CNAME . +attnewmaill.weebly.com CNAME . +attyhhhhiiii225.weebly.com CNAME . +atw-tau.vercel.app CNAME . +authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com CNAME . +authsyncs.pages.dev CNAME . +autoreplyattmode.wixsite.com CNAME . +avoid.hold-managert.com CNAME . +azbin.ir CNAME . +b45018.com CNAME . +bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link CNAME . +baiii-wong.cutvi.cfd CNAME . +basvuru-online-yap.vercel.app CNAME . +beionfidi.pages.dev CNAME . +bet73nn.com CNAME . +bet83039.com CNAME . +bet83054.com CNAME . +bfrescentremebermainsetreouytnoy.weebly.com CNAME . +biggggggggggg.weebly.com CNAME . +bitnode.pages.dev CNAME . +bitvavobtc.com CNAME . +blackhere11.serv00.net CNAME . +blss24att.weebly.com CNAME . +braucrarasuteu-2470.vercel.app CNAME . +bt-102124.weeblysite.com CNAME . +bt1business.weebly.com CNAME . +btuan-dan2-resmi.top1.my.id CNAME . +buildingdesignsusapdf.s3.us-east-005.backblazeb2.com CNAME . +business-page-property-897432967.netlify.app CNAME . +caipora.xyz CNAME . +calm-pothos-3b24c9.netlify.app CNAME . +carrefourarabiank15.pages.dev CNAME . +caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com CNAME . +catgirl-appverset-nya.pages.dev CNAME . +catxtokens.pages.dev CNAME . +chat.94-103-188-123.plesk.page CNAME . +check154109.click CNAME . +checkseven.vercel.app CNAME . +ciente-a.org CNAME . +cieplo.app CNAME . +cj12143.tw1.ru CNAME . +cj87335.tw1.ru CNAME . +claimyourethrewards.pages.dev CNAME . +clickbait.design CNAME . +cnsa163.com CNAME . +cock2-iota.vercel.app CNAME . +cock3.vercel.app CNAME . +cock7.vercel.app CNAME . +contact-pro-8291-d01.firebaseapp.com CNAME . +contact-pro-8291-d01.web.app CNAME . +creosrl.com CNAME . +curmmgdv.email CNAME . +currently541.weebly.com CNAME . +currently890.weebly.com CNAME . +currentlyserver.weebly.com CNAME . +dara3dccj.wixsite.com CNAME . +db.service4db.com CNAME . +de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev CNAME . +debutcan.firebaseapp.com CNAME . +debutcan.web.app CNAME . +delivery.attempt.failure.ebbs.co.za CNAME . +dev.stream.mornar.app CNAME . +dnwqmh.click CNAME . +dropsmartchain.pages.dev CNAME . +dsjoting.group CNAME . +dulb6c5p5.top CNAME . +ebay-mallwholesale.com CNAME . +ebt-lilac.vercel.app CNAME . +echoredled.netlify.app CNAME . +elbarco.percentadnp.info CNAME . +eltritongourmet.com CNAME . +email.mgb.modento.io CNAME . +enjomugg.firebaseapp.com CNAME . +enjomugg.web.app CNAME . +error3456vhubhornbase.azurewebsites.net CNAME . +example223.wixsite.com CNAME . +eyeydhe.wixsite.com CNAME . +eyttueiu.square.site CNAME . +facebook-avip.click CNAME . +fame.pink CNAME . +fassehoizubra-7696.vercel.app CNAME . +fastdropchain.pages.dev CNAME . +fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io CNAME . +fla-1001.square.site CNAME . +flo4211.github.io CNAME . +fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com CNAME . +fnuttlie.wiki CNAME . +fokeijonnekou.vercel.app CNAME . +fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com CNAME . +free-verified-badge-form0-service.vercel.app CNAME . +free-verified-meta-badge-service.vercel.app CNAME . +g06668706.wixsite.com CNAME . +gccndbqg.vip CNAME . +geriodememerkezi.online CNAME . +get-checkmark-for-you.vercel.app CNAME . +get-free-verified-badge-service-on.vercel.app CNAME . +gitanag.broke-it.net CNAME . +gruprocuroipra-6493.vercel.app CNAME . +h5.b9en.com CNAME . +h5.metacoint.com CNAME . +hcghij.top CNAME . +hecregayatu-1014.vercel.app CNAME . +hejmtxxt.guru CNAME . +helenblunt6.wixsite.com CNAME . +help.accountsupportcentre.com CNAME . +here-apply-for-page-review.vercel.app CNAME . +hgbk.ldgknhk.lol CNAME . +hhideiie.wixsite.com CNAME . +hitummoinneullei-5882.vercel.app CNAME . +home-101067.weeblysite.com CNAME . +home-103465.weeblysite.com CNAME . +home-104341.weeblysite.com CNAME . +home-105266.weeblysite.com CNAME . +home-105929.weeblysite.com CNAME . +homeattatthome.square.site CNAME . +hpnefhqs.motorcycles CNAME . +im25.net CNAME . +info.supercitrus.ind.br CNAME . +ins-business-home-center.com CNAME . +instagaramgalochka.vercel.app CNAME . +ipv6.43-135-137-110.cprapid.com CNAME . +irmt0ken.win CNAME . +iujf7839iofvkbcu748.weebly.com CNAME . +iwimwmiwi.click CNAME . +jagej73796.wixsite.com CNAME . +jfdjy.com CNAME . +kalyani963.github.io CNAME . +kexoigrufouddou-5902.vercel.app CNAME . +kl1k-ds1ni.neupdile.my.id CNAME . +kliind08.wixsite.com CNAME . +kreelo098.weebly.com CNAME . +kremlcup.com CNAME . +kshitij12375.github.io CNAME . +kucoinglobal1.com CNAME . +kxbztydc.black CNAME . +labanquepostale.jupiter-analytics.com CNAME . +leddevotoze-3146.vercel.app CNAME . +linnkdna-kget.wxxzsite.buzz CNAME . +llahi.info CNAME . +llahi.vip CNAME . +loffaummuddote-4145.vercel.app CNAME . +login-att-10221.square.site CNAME . +login-form.world CNAME . +login-online-outlook365.com CNAME . +login-outlook-midstreamauth.com CNAME . +login-screen-103134.weeblysite.com CNAME . +loginaccount70.wixsite.com CNAME . +loginaccount77.wixsite.com CNAME . +luk6414.wixsite.com CNAME . +luxlifemiamiblog.com CNAME . +m.meta-accessibility.io.vn CNAME . +madebybmr.fyi CNAME . +maqpiexyz.click CNAME . +mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev CNAME . +mayfair313.wixsite.com CNAME . +mdbrvlfy.black CNAME . +mesageriepro33range1.weebly.com CNAME . +metamsk-wallet-3.gitbook.io CNAME . +metttaa-audddt-new-02.firebaseapp.com CNAME . +metttaa-audddt-new-02.web.app CNAME . +microsoft365-storage.github.io CNAME . +mikepattyjm.wixsite.com CNAME . +mobilemidasbuy.n3g.fun CNAME . +monespacepro-client.3utilities.com CNAME . +monetization-violation.github.io CNAME . +moodengsol-net.pages.dev CNAME . +mwsiekdnfjrdufs.weebly.com CNAME . +mxmxnmx.mx.zya.me CNAME . +national-au-b.com CNAME . +national-au.net CNAME . +nbaaiqjq.group CNAME . +nexomyacwv.weebly.com CNAME . +nft-time11.vercel.app CNAME . +nichcheck.weeblysite.com CNAME . +ns1.carrier-ast2-portal-apple.com CNAME . +omadshf.ru CNAME . +online-assist.live CNAME . +online-promo-asb.org CNAME . +openkimono.pro CNAME . +opportunity-verified-status.vercel.app CNAME . +ourtime.reconnect-dating.workers.dev CNAME . +owouwuowo.click CNAME . +p365kf.com CNAME . +p4zv8crnrrha27so.94-103-188-123.plesk.page CNAME . +page-center-manage.com CNAME . +pavan-patil-22.github.io CNAME . +pecinternational.net CNAME . +peesom.chat CNAME . +pencairaanndannaa.my.id CNAME . +petty.wiki CNAME . +pimnhv.group CNAME . +policies-business-page-service.com CNAME . +pottatrebewe-2808.vercel.app CNAME . +pqo.hrf.mybluehost.me CNAME . +programming--service--panel-totlyy-free-for-you.vercel.app CNAME . +promo1.spik.ru CNAME . +protocolsecure.pages.dev CNAME . +pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev CNAME . +pub-1778406e4fec4394901793111c187dd9.r2.dev CNAME . +pub-19b834342e7d465b9f00b3511325a081.r2.dev CNAME . +pub-21dd4dc659614ceb93e45a6de4434502.r2.dev CNAME . +pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev CNAME . +pub-2fefe932a6974485b987c9ba851b5c40.r2.dev CNAME . +pub-3a46d9914f494078a6d6237513e7a096.r2.dev CNAME . +pub-442ed822851244a689b3472ea2c6a950.r2.dev CNAME . +pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev CNAME . +pub-682ad3b65d944376b919745aae3c56d4.r2.dev CNAME . +pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev CNAME . +pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev CNAME . +pub-7f5cf36445d042168bfacd712e890dc0.r2.dev CNAME . +pub-803839714a924882a7bcc2495a26860f.r2.dev CNAME . +pub-8161de4a277e4ee8b532af34954224e1.r2.dev CNAME . +pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev CNAME . +pub-8376b5b2334844d193a525d8b8548fa5.r2.dev CNAME . +pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev CNAME . +pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev CNAME . +pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev CNAME . +pub-9163a97d70394cb499bdd232be6c2169.r2.dev CNAME . +pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev CNAME . +pub-98171471e0944ac3a5820ef719bf0640.r2.dev CNAME . +pub-a263e0790935412eb10cacc55bbced18.r2.dev CNAME . +pub-a291041b077742899b63a9982f04a56c.r2.dev CNAME . +pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev CNAME . +pub-b50adc5d699a4f08aec37102c2103da7.r2.dev CNAME . +pub-c0a934c950e441db96b882789f53c9ea.r2.dev CNAME . +pub-c2c250050109456396c933de259a4fea.r2.dev CNAME . +pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev CNAME . +pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev CNAME . +pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev CNAME . +pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev CNAME . +pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev CNAME . +pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev CNAME . +pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev CNAME . +pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev CNAME . +pub-e42cb528b102447385e3145197916f51.r2.dev CNAME . +pub-e4aff507450c478cbe3f77ad23d75035.r2.dev CNAME . +pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev CNAME . +pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev CNAME . +pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev CNAME . +pubgm.club CNAME . +puffagroibrouwoi-8818.vercel.app CNAME . +qasimk.com CNAME . +qfjfvseq.info CNAME . +quauwograssodda-3503.vercel.app CNAME . +qysgyp.com CNAME . +rajdipchatterjee.github.io CNAME . +rechazaroanularaqui51.weebly.com CNAME . +remote-fix.pages.dev CNAME . +renggard.47-243-192-240.cprapid.com CNAME . +resolvepanel.live CNAME . +resolving--issue--with-us1.vercel.app CNAME . +resqat.weebly.com CNAME . +review-business-case.d2f7p3b7pucnle.amplifyapp.com CNAME . +rlpqwefi.pink CNAME . +rouloigeilleuja-9523.vercel.app CNAME . +rulemec.pages.dev CNAME . +rutinqqwin.shop CNAME . +rwftfu.quest CNAME . +s.team-pw.cc CNAME . +sairanees.github.io CNAME . +sanseipecas.com.br CNAME . +sasklelo.weebly.com CNAME . +sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com CNAME . +sasktelcustomerwebly.weebly.com CNAME . +sasktelnetwebmailservermaintainance.weebly.com CNAME . +sasktelrectify.weebly.com CNAME . +sasktelscrutinize.weebly.com CNAME . +sasktelservicecentterwebly.weebly.com CNAME . +sasktelsupportsystemwebly.weebly.com CNAME . +sbcglobal30.wixsite.com CNAME . +scan-vulnerability-guard-v3.pages.dev CNAME . +scan-vulnerability-guard.pages.dev CNAME . +scanner-metamask-v1.pages.dev CNAME . +scanner-metamask-v2.pages.dev CNAME . +scanner-metamask-v3.pages.dev CNAME . +scanner-metamask.pages.dev CNAME . +sec-sign-in.info CNAME . +secure2-validitycheck.weebly.com CNAME . +securecapitec.theprimepoint.online CNAME . +securerpcfix.com CNAME . +seeteressecalywoi.github.io CNAME . +seivviice.weebly.com CNAME . +server.0e7p.com CNAME . +server.2rk3.com CNAME . +server.8q3p.com CNAME . +server.n6b8.com CNAME . +server.v9vs.com CNAME . +sevvviicess.weebly.com CNAME . +shard.blue CNAME . +shard.skin CNAME . +shared-d7590.firebaseapp.com CNAME . +shared-d7590.web.app CNAME . +shaw-101329.weeblysite.com CNAME . +shaw-101587.weeblysite.com CNAME . +shaw-106427.weeblysite.com CNAME . +shaw-107375.weeblysite.com CNAME . +solutionwebsitedapp.firebaseapp.com CNAME . +solutionwebsitedapp.web.app CNAME . +solvetans.firebaseapp.com CNAME . +solvetans.web.app CNAME . +sondfrom.dexlog.my.id CNAME . +soyokai.or.jp CNAME . +srdate.club CNAME . +ssy.hmb.mybluehostin.me CNAME . +steam.poweredartsworkshop.com CNAME . +steam.workshopsreview.com CNAME . +steamcommmuty.com CNAME . +steamcommuunity.ru CNAME . +steamcomunutty.com CNAME . +steamconmumity.com CNAME . +stepsray.vercel.app CNAME . +support-metahelpcenter-id100003498934.netlify.app CNAME . +sv5gardens655665.weeblysite.com CNAME . +system-portalnu.duckdns.org CNAME . +talwgam.njmolada.com CNAME . +taste.baby CNAME . +tele.zhngain.top CNAME . +telegrambot-resolved.pages.dev CNAME . +telegrazm.net CNAME . +telstra-100408.weeblysite.com CNAME . +telstra-100469.weeblysite.com CNAME . +telstra-103234.weeblysite.com CNAME . +tiktok-888.vip CNAME . +tiltckshow.top CNAME . +tnomwzrp.top CNAME . +toeken.im CNAME . +tonic.pink CNAME . +tooma.cellinsurance.co.zw CNAME . +tpdtepremu.xyz CNAME . +trattujeilesso-3354.vercel.app CNAME . +trbinace.com CNAME . +treibrukeukonno-1395.vercel.app CNAME . +tuesmad.firebaseapp.com CNAME . +tuesmad.web.app CNAME . +tyyyyyytyyy.weebly.com CNAME . +tzcsjfto.chat CNAME . +u.updatetrackgre.top CNAME . +uc-whatstapp-web.com CNAME . +udxcady.wixsite.com CNAME . +uklifejv.cyou CNAME . +updatemail12.wixsite.com CNAME . +ups-trackdeliveryapps.chickenkiller.com CNAME . +usbest.cyou CNAME . +user-transaction-overview.vercel.app CNAME . +usps.com-trackdck.top CNAME . +usps.com-tracklnv.top CNAME . +usps.com-trackmcl.top CNAME . +usps.com-trackmec.top CNAME . +usps.com-tracktpq.top CNAME . +usps.com-trackvmd.top CNAME . +uspsinfw.top CNAME . +uwdtsczi.top CNAME . +uwm-onedrive.com CNAME . +vaishnavi1436.github.io CNAME . +validatie-veiligauthenticatie.com CNAME . +vbbu.ldgknhk.lol CNAME . +verified-this-request-badge.vercel.app CNAME . +vo4zzp.icu CNAME . +vs41.github.io CNAME . +walett-cont.gitbook.io CNAME . +walletauthenticators.vercel.app CNAME . +walletcomnecitt.gitbook.io CNAME . +walletconnectdapps.online CNAME . +watranfart-fdd6a8.ingress-bonde.ewp.live CNAME . +waxed.wiki CNAME . +webmaillshavv.weebly.com CNAME . +weeeqweeattt.weebly.com CNAME . +weigh.skin CNAME . +weigh.wiki CNAME . +wgqdqvtn.baby CNAME . +wgqdqvtn.pink CNAME . +whatsapp-rqr.com CNAME . +wirelessvoicebtpaidmailinfoplay047.weebly.com CNAME . +wscs1231.cyou CNAME . +xn--metmasklogin-vcb.gitbook.io CNAME . +xojautruffeuttu-4659.vercel.app CNAME . +xraiz.info CNAME . +xraiz.vip CNAME . +xsuweamskeidjf.weebly.com CNAME . +xya46.cc CNAME . +yahoooooo-108560.weeblysite.com CNAME . +yavanica123.github.io CNAME . +yi5lq-syaaa-aaaag-acfsq-cai.icp0.io CNAME . +you-can-receive-here.vercel.app CNAME . +zeiitgeist.angelocachero.info CNAME . +zenixoikitti-5809.vercel.app CNAME . +zeznjx.shop CNAME . +zwzcn.com CNAME . diff --git a/phishing-filter-rpz.conf.br b/phishing-filter-rpz.conf.br new file mode 100644 index 0000000000000000000000000000000000000000..3ed3d27ec330af77db75c88b054c0c945265c42c GIT binary patch literal 5373 zcmVr^!K@(dQ*TE&F^jgA%t52rB+L7 zD75YOI_$?uUqT>+Z6rW?_NumO+kgN6Y?`gRq)eHjOuDq`0V{^?iYoul?7ob7Wd-I~ z;XPg*%D!aiNLEPJ;U1wB5`?6~4N`?&dMYZ}d&C=FcUBp$PVI$mLrO`*xrubueY#RG zIehZ_-)o4E$k7r|EPS%e0_iD125kmIf0^Zo%Pp`jd-u)8%=B; z>ofb2$2|5;^XSH=d5ldz|DD!+J^uMW9>ob`dr$fGrIb?LIN1Hs zHQ(m(7ytaHfBLJ3{8H`GDPbao7(z1a;0jtbbZz(VPa7M+!aFh=x8E)dG(#Js4sSFP%$uAh(e)XJ31i&|iTY*(bkQ{>xw zO->{VPw)_g1qdJ#+zvIk_5H}WcPa8hEy)fyYjwae)8~xao=Fl56o6;6hafPJ6DEc; zTcV$myG4kX;3zU0q!Wb(yWwinnF}UnGJ7Cbj)7O=P!4Y?tTALLz!;VnqIUP>=VunG zQO(p!sOtrha(Xq*1vqcXFsXj?_^cLb-`DRbeGK~luj5X`#=2-a9Cd+<} z%GwLnv}zcnFGO1q6mIV@j>`dNq8F-Zrm+>gz2n@>P---iqeHyR)oa7mQk2b4ah1wv zwid}i5qQ8$G8ZSZU)=k???gmxJ6uX%f}yG`s{mp#Hd?kRv)@+mfnTT=VUf`=+F65@ z_i_hQYC%Tjm@&CK;r`L0p+~U9B$8+sAR-IP%=yt2B;{pU-4BhL<^BK~)>|V%@RM`S zk7t|HU11-#Pubgcd#`kW9tgWP(zv#v3)^~@_t5r|(psc7D(gE6$7oL@5s52?O`6Il zNwZpknaWvn70}3E++Z&o(?~I_WGQN)YU)lv*I! zRhCZHB2cg^nr4tNwG!>%gSwrF)xtu~Eh*kcNr0G_sqflloN{GDN9&!kW(`n^8RYx^ z{QtOdUZlu-ETYqGZ*%OJpV<-7iGS{GcpQo-H9&eokGeWCz5&dj6ES;L5*P>}em&@x0@~B?(DzBK=x8{uny7)Q9 zn(4|0Lhjl^${eM{TJn|zU%T|do0X__ktWIy$oHJm^R7htm;>ao6${tP?==HR0OT1; znH?x7sB6nJva^Wpwh)w2ogU4Q22*GsT-0z2ItDogAU))Sx~N$=)T&iR;F_w=XdPOM z^$zGXWE16!#;0sZ5(bMxL&BLjhAr0YvGGUEbEV(3#1AhI45jc{8aB_@Z7UyJNI6F~ z;{CdQ7|*@xJ!Swj6+Sg1p&~bBlx*^E+fE^CgE!uG$MC9|D^kVT7QVSVj7pRNKz{lRuCiI2wb0K1u*~sh+mG#ir4A@gaMLdQj^PkbpWAr zPzjjT#lBTa@)gpcPSEg@xIWZVO>%Ubr*O;YkIVlBU`|JcAnK|LN|lP^QMvLLP)_%t`iI7d@+q?AF7{nCh4un$r%h;;cr$ZP}G zLs93;?q=KRX`X_1G#NLzfvaoWe?Ofj@#*>fX1Uddd_UOHVbHDy&UL^?9g;|ysiqV& zV``P;n2drFfILQ=N4QOWZ2UKUkPSOw-^n5o&Lc@&y^j=Ma*QOD>Xk9mk74ZDAcNn`(7^kF%A!o^9A)1L)eS;*lTfO0 zfSaQ1xj8V%i$XvI>vNsvZlSoIhcIG$kBsPI zv!u3;BcpewrhqWZPE1eLcGD1dR*eMdB*>x$?)BCmzO9iis2!ByKtp&{?1BIo^PFc* z#F$0jmAqKNq5U#es*fKOo$4FZ@8Bqe!v+w?hAgl5`*V=_%p%UgPOygjTQcSuF0Lz7 z?@OUtM$xN&SR+-|CfK5qMm9vd|M)9Gxub zrvZy{y;RrZm73Clr$#+wu}d(e>M{0&r9Pa!JBVCQ;HjHQUbp(@q)l-1^qv&ZrLovq zBcW63o%OAKmg`L+mAw+-`~FnG5z50ALvBO_4~43!C}M)kn}8@@1R+4djIPe}aBl|X zP9ep*yw&-1>#exlVq;OU zmVf(q@Neng@^gdqRnh8{-H3oHyihSzZouja8h~EUmsb{Iz<2aFnCpy0Dy%H}Mh8^N zW;_=@9ff~G=Ik~3mt3R8t!fpj2x`BL)p%0&;h>?;#O&50LEp~BLoRR+^f$GxF| zqA3{Y&}{M`A48NW#~_Hnb~O;+P_)Xzz_p~0$C?w*B!x9o2xwUJmV@P6#eumv>x);c zSB+P!&}CCM4#%3<6E^jqb2d5TyhA&cNKnB)D4L)owY)h-2~G$i0h1GLtBvClnzzeB zwL{){6Jm*8a%JNG1A+m{03leTlMNcO=KJ2G{SzY#71W#!>Dsn?twI1)Lik9{bRH>E)k3Kj5!TjBQ`alg11{@;W?g4AFv1{n8!ztDH22Mj{fegV zmVRl}v~)@-qvpxl#eL01&t2d3El#!{2feIKqr1V4YS#|X%Wo>WGI4q;;4Z369 zVL!lVvG2QnXj*svI-vUVSaH^KzfR*aH3;L_kHZ3HvdYC2S6sRl#%1dJdCPQmihLaUcLZ+_ZWn%NoojSd-M7xFbS%189^1QEQW4kRcSTs!(2gtx3r> ztmdxn_!vddguK@`R9U>qE^sLo`Wlb&7pUr4`|fDuAtl zayJ7MQmCz_al|~=?12i*ff21!0UZT}5CG#CE?SlZNr+o7*r1CWg=>J;;x+PuHvaRV z4y9m2^ejaQ$XjoOZOozX)7s$9jZkXGkx)?^C?!|9xdiO=7{}2cnK;mqIzv5z^+=o^yt@pc1r3-UPaU$+ooZKa{_~$ ziYq(Ul1iD=QBQ%Gy-V$_0XG>`OhRuy4h$$IN;wHqEiS{P6c3=hO^)HANML2j-W(%E z_sT{Ci3;R2SHF*yo}~s!NrEF#qG%pIw71VfdV2bJX~_w?XRHq0Q*j|zlE^%qyZgB2 zIkX8nGp3PU_{~a%ELIB`wfAu0;7Azg&KaArVxy9P-9T095%cObYc|ku^wzs!jid$o z@JM{b-J7UE#-NdLfT%SuXxTsnxVe_N2#xR{u)j;tP`{jp$$MT zjiO{E#O(dZbx@ACjzNi$k|8(iQ3kU*6lY4M9h{Lij!8+Zw8ii^(7`!da&1OK)`V|8 z7#LG3)P;~3`>3OV%5c~WtXAX2b68U4(sCes)<#$(fTQGMX+H4VI)f_3KSy{By&e0~ zkNy4Km#MW(V3mF8xvam0Sskx&AD=T`A_n*M*7uj(3i~{Fcby8QlIT7E&fDM9J@oF2 zexS2v=t~}P>=`D4uhYi^Yd*R zgw8+_UdQoxzP>RQeN2>({r%XNTP%-9yze>*K{o)j)^`nSq=5IeY_HdM*=FFb;FtCt z*Lcs!W&71RXBh5E)ANgkWG9!fsV(B{$oDvPJ7al!`h zvxu5H!Y);#VW`AuOGsycr%xFtMlnpD*v6uQsOU}C^LP5>ke41VZP7kG6o%JRtYU(_*|66DC2`3zG z3_>v2Hxy;Xkd}A*sisti+6lI=>-xU_d|TfVI!XFsd9$}#ULUh%8(>{-Np{6WSyqs&OvVP+28i-+bO3!;!7Xj zo38VAU-yT)CW5v~Y&O~v{+tnynE(H5H)MsRqXtiqd_B?kYa(W}Ycvh|^8c&+5B8SC zbpS1LL)34wmz1&wIB%b+>%k_z5n^ZcAt{c?;oU>Ld zsVW%djHGitupTjlC{(u$3Dm4&@nGk@6-N1%;QI^ws9lun;EyTKm7_ejr%Esk+F-SA zC>SACUX8Gt@)U-YM3&N9_0_%&*qfMe>Y)~UgXbyD9cL`b4T!1&R2y}4DxxqJL~RnJ zROC4)u|sa3&pCa$Q;QjxDkEMnC**`;VZvh&2vZ|agi}i%$>?*=V~!?}LtI}M&g<=s z0}{dPxW1fT*M54t3JU9VsHC{V zIm-+c*)B)3fhd$82euBH8C!;2qvK^dm2eR>Sb6WgWm1W!oI4|vs_k%>dp#~Im^I!m3#O#=3Lj-*= b&^yvW%;>EGnkBi7e8Th1?r-FCeGE7b$oizL literal 0 HcmV?d00001 diff --git a/phishing-filter-rpz.conf.gz b/phishing-filter-rpz.conf.gz new file mode 100644 index 0000000000000000000000000000000000000000..93fea3a8b412dc4c7cd3552e00e88315245403af GIT binary patch literal 5545 zcmV;a6;|pWiwFP!000021D#t*ljAsczW1-l2>W11m~8G#&&6ZUMA#AI_JpT>nHyFK z5(!WQNQwIO{vatcNhOrkVO3RD74WdV^?MJ{AKrdbt`on!{dKSGUg_Q2pG;4bwr~IQ z*T290TW8p@Q`Y_ThqwP7IB|mi@|Go85v6IAmA@s)FInw504E! z{*TdrQA}w2{~7!b-F+w~`J0(W=C^4Ep>Je<{J*?muKo0wOF6a|U3VPK?n-`s=S=)3 z;s_;}<)?rA?YF;Ny#RlRqL0aco z(H2QrzBN^mByV|zA5~H`{@=+@Z@>QS4I&_&pDF(7rxc&OD)~Ov!oB_buYdfnKflF4 zrCFP&5i?5r-T5PYbY*FoXZg0NN{Fy-FPviWSzWAh+c8)mX^T2$Y~9p$-Dc4y&)OG@ zwos2GkJ6@zQY=1n!X9HU_D_l?E0eOuw3~s1GB?inxou^TmyN9e|NKIa6=yLjsTgs} z=(sbxPRC^tWnM80ES%r~!$=0jpC{{7k3m;LI}yuCue;2oU36F6q>TGz)?c>bNo>3` zSWv`dxirRC?N%L~*o~$$N788}!0V`K)2v9dw20|+y{;%Hrv_Mo8_7)=Hs)gf?Cz=R zqCx2c>4}awA(})3Svujh_ae>M+xRS?wtPKi>WDL=8b&pPr?GOYPBDkKtR2Bp%;AXpPNKZL-80NE!W;SF26HHRTnEas)7eOaaW`imBrsEOp9dnFs+kd4>$7=j&phcOa&4z{& zxlo~q?(44W`fAR`VVTIj++FQH%XSy3j)ay<W$M*tK^kozlnE zlwfakHi))taJ!2is&IBk}YPEfV`{DcWG6haDYR=F8sqHY_5DBRd_FGi83u~+*f z*~DeqS(_CQeQ>dnOl%}0v6B-MG^|d7EOa-IkiB$d)TQqMF1U=FZZSk>aOAdEu`@%8 zaJmj2bW$B0^A6?+*8(db1DCPQ5ltfj%oHVvz!XQtd9Q+I+XddEtLIuYjKFfETM+u{ z0MpT!w=bX#(8`Kt67JteAmq0@}e8Oh7~=HsfyHICN%9ckn1AkKH+q z$7$8v)OlWhY3_*X7qD2k{V0ItdGKg{pKuZ`zU$3rhqffGwjhfEcx90?js%Z^-uzWZ z9qs^hVb1GY)OhsElQfn{db}h5BFPZ3_jj8a;XCZuZ3j+c-|zSw3m=Qt%_I2UEf849 z=05tHHu<*S`wT$3011b7=bW)aFk)~TKcZ~G>9$8?xsAkH=`!wb|!s3_4_BQ;BYgx2k?Y_AvS(hPHqpz`9u+jd|FL5 zb+lsTPkTZxX65yu_;NN6EP zQsE)+iolJ^A;`kqda(`sH?52N9gRJ9&~5{xgg%&lLLhr3n-79#*@$s8V_uZij4T_w zzk?rgg?K>fmCbI#n7DWkDKfaOkTQxzEbz21`kb4Dnt~Wx5+ zJ5vA|#*bRXdYGmjTHe#1N0#c$BV`60Ok=JviXayiMB4#eup6dHJvnHS=jc&=wj#u+ zgV90ZOLQgH)D25RaH%$R6#}AF{U{^?P93HXCqdC;`jJ99>rC~ceJ_cchN0A!V?_* zuA?Q)8c!HH=zGp(g2B}b32;27BUm57HLi_fH%Ujbc{f9Nfu{9)pDjBX%$P`%8^A0#<&-VaEM{3Ce3A}O<~`VmQ+wcn8-{NcC%SI~>>2QB3OWZ~f98Q8)Q zem*)?kKA^xb3Sk&N%gTrxpA_HBplkg>bKDc9KUVQOB4WOy(`>=*8&=$d^nAX`g7R>&RYhAgLBNa`@jbgT+r ztPJ*D04qhWNUtd7+I04}P!iqi@`@@T_{Cpm%%9fS6QJ~k_G2s;wQ4;LN+AD!GQOUi zjUJQ8fGt){YyvX}a_*T%_&g!s)&PrR09o~90mdJ}tKcbmPRF?eI^HU654i2ayg)F` z^O5MC2&Pp2l)XJhXJ2J^(aq33c3fKwXy9$Z45%4Lwl2;QO#Kx+4pTp4PZ|dL2}9wj9pZT4Y)A+F!DC;(0x)7OLOS6ST6n#q7`LJ{XEU8A{CqOz0a|;M zn}ZI;b#B1 z_I0vVn?^o15;z;~9S(U4!~;xs*=9$B>h*qp(yhUO8!(_~TcdnWQZ|P$9;m@nAO(&x ze;E>x$#639ew5e^aJ9JI1FuX1!rlQ@_5P~+BeTGYT6B>!u3MIS4)RT&a#JY8y+Iw< znuum+nCTul2|;AW>Ke$F6-2bM6imuSFjA2+9<#4w>bfbCN)%GCB5#W} zN$WOG)0Cx6&3PLf)6ymfc+N!4fwE~UlZ57Fn&w$ak|qs}$x_Y>&Z@Gl(gI0;n~S0( z6&D32D&clRW3c;_GbtL{6cYJnk2xWfiVS6&zmg6yjf9@s%dFn)R`a|t4Lc0*QpXx zaw1rjQc@%m+-7abn@W_lNednx(`1C_v?_TEPSq7{Qyi=$MC7cjco7@}ac7i3_?0Xe zXKhYuNmJ~#%36{I`BpPg311(qIVohyn?gvQNZFQXYwA2WMwU$GRZ)~YDYCR`s3eTn z(88uoI18SqNphqGby|=%E0E-onlhFZSSG8QDv`l4X_Z1z;H+v<2xvnI`N|xFiYzNc z8Xg0XpR{G&KrT&2Th2-W=0h=ZUWxEJp1&o{a*QYno`P>>1_9BgEE*ZMpQe#DtwGRM zw2(FUMF7FXwkNqJj*kR)gZ1HV^~fIhsDsks8d3cTHaJPr@TpJ&`#SX zg+S|6B+yZU@nw@GLe}sTGO5Bg2XW^jsoSK@%K{oh(}V%SmL;W3@U#h!Y5lD~cu?0x z*5Ek)d~K6?zLymXjv;kj;zT7SIXFjX#j_%VlEcVzDuOblWkR4XylPw6Lek*;d5wGo zOiOZ3>d+XLK;Yh<6L_?gQ>X*9yKZ2FIco(8j=_v&l0fQUTv_F91yjwr$V$KNi!pf% z<*8d(C@(}JD3pwqvM6B_X%ev(Kn!Fg(HVH2?%8?p! z{DmAyLTg1@OJ399n1-izcq+d0i%XkOwmHK_h7y+^Khj1m>19xSa+YYs3CP)*0l22`L7YbwOn%;jCJ( z3Pr`L@E8fzCOAkc3dCFlQZQR&HI9|DBxDOaV7YFht0tuWfMtpTnw^b;&rE~h>V$N& zKW;$TNgm{E#c5k!I86i-0cu%mI44mKE(IrC>~7iSd?Pt<QqzdIZ{JCCE5 zdUU<7!hAD+vd;8kJl_aj(;*E4$@`P3`x_RAKSVR}%`j-F^Vf{8DJ;9OS6#oG=8>WJ zyw3f2ua6r7yI3ds*Tj_F3zm7f5@s1P#d*TX{o4&+tBQ6L%p{ugfR4PPenF~zdg{wW z*l{$czl$pST~zt+pbC))_Wo9H>%s1MTo%owQyj-y*D$vHx)Czs3%M+Idohfv7sKu1 z=;Dobn*O1~v+{ z&+TlV+UNVG!VjD5-m8L7#Gjh%adj2pn*@&#O55aRDR4vdTmeMq*Vel!6`&O0znA9~XfPBs%b|22si zIpFfyBmfbvd%g3oD%SVYzQb3&sBzH)$b|g!gY4RGYJWbixbgPLqImuMcun>Cx$`Gg zp1r=Uaq8&I5g4@D+)p{xIp#Izygi&Y{rNf$+eRb&eWzMYYP4cofaHwn!Bo+~N84$< zMRfn@>HJACaA*lYzoidOF-FfU>8fn2ttk6Q#&t zf`b9Bdct4Y{Coei#k=M9@qdLJvb!>Skj`vtxl??92!n&MqX=5xl0MQ0FOhh-wa z+(W;bA|^ZBg4$zMMET9}H@%&nzv=B+_g$}t2QPcwaQdcq z?)jHqz?H2jOlR&ayQ-(gJ~CSH5xm^+Z6?a@HJMdf*Xs}~_9@8O7NO@`XVMAh{C8qp=#ue%0lC_+ z8H4vXcRCzJ3#QyRQ$4PC_)Qg`K;4;mMU#knk>tE04RGYnW4VYT`ifYbhi%4qCKveM z&CSRo#pnPp=HMM0ngnt@|5U|=`_*p0MOF8v?J~O)Kg~{Wivsd{*71Y#8;t|Ly`{<= $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"1111365dh.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000001; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"12931-coinbase.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000002; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"215323.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000003; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"260aesthetic.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000004; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3650947.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000005; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3659ll.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000006; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"83291-coinbase.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000007; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"94-103-188-123.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000008; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"9825057365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000009; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abctrvabc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000010; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000011; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acclimatizable.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200000012; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"account-update05.myvnc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000013; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accounts.google.auzen.us.kg"; content:"Host"; http_header; classtype:attempted-recon; sid:200000014; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"activebusiness-unlocker3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000015; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"addwsrbh.green"; content:"Host"; http_header; classtype:attempted-recon; sid:200000016; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahnp.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000017; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aldg.ldgknhk.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200000018; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allegrolokalnie.pl-891241214.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000019; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alutipcentra.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000020; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ambil-pinjaman-daana-payleter.xforms.web.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000021; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ambulatoriprivati.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200000022; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amev.ldgknhk.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200000023; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"antail-conv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000024; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apply-now-to-receive-badge.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000025; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"artsea.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000026; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atmailupdatewptnskmdinfomailacct.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000027; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-101072.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000028; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-1041page.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000029; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105714.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000030; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-105819.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000031; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-inc-107097.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000032; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-login380.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000033; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-login522.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000034; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-service-102155.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000035; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-sign-in-105669.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000036; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-100762.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000037; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-106808.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000038; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailservicenow.wixstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000039; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailservicenow.wixstudio.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000040; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmailsrvrdesk.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000041; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnewmaill.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000042; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attyhhhhiiii225.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000043; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atw-tau.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000044; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000045; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"authsyncs.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000046; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autoreplyattmode.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000047; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"avoid.hold-managert.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000048; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"azbin.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200000049; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b45018.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000050; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000051; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baiii-wong.cutvi.cfd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000052; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"basvuru-online-yap.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000053; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"beionfidi.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000054; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet73nn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000055; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet83039.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000056; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet83054.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000057; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bfrescentremebermainsetreouytnoy.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000058; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"biggggggggggg.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000059; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitnode.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000060; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bitvavobtc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000061; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blackhere11.serv00.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000062; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blss24att.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000063; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"braucrarasuteu-2470.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000064; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-102124.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000065; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt1business.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000066; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btuan-dan2-resmi.top1.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000067; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"buildingdesignsusapdf.s3.us-east-005.backblazeb2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000068; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-page-property-897432967.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000069; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caipora.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000070; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"calm-pothos-3b24c9.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000071; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carrefourarabiank15.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000072; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000073; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"catgirl-appverset-nya.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000074; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"catxtokens.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000075; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chat.94-103-188-123.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000076; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"check154109.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000077; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"checkseven.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000078; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ciente-a.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000079; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cieplo.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000080; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cj12143.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000081; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cj87335.tw1.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000082; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"claimyourethrewards.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000083; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clickbait.design"; content:"Host"; http_header; classtype:attempted-recon; sid:200000084; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cnsa163.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000085; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cock2-iota.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000086; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cock3.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000087; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cock7.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000088; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contact-pro-8291-d01.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000089; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"contact-pro-8291-d01.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000090; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"creosrl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000091; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"curmmgdv.email"; content:"Host"; http_header; classtype:attempted-recon; sid:200000092; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently541.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000093; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently890.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000094; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyserver.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000095; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dara3dccj.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000096; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"db.service4db.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000097; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000098; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"debutcan.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000099; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"debutcan.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000100; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"delivery.attempt.failure.ebbs.co.za"; content:"Host"; http_header; classtype:attempted-recon; sid:200000101; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev.stream.mornar.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000102; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dnwqmh.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000103; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dropsmartchain.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000104; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dsjoting.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200000105; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dulb6c5p5.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000106; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebay-mallwholesale.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000107; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebt-lilac.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000108; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"echoredled.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000109; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elbarco.percentadnp.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000110; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eltritongourmet.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000111; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"email.mgb.modento.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000112; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enjomugg.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000113; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enjomugg.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000114; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"error3456vhubhornbase.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000115; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"example223.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000116; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eyeydhe.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000117; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eyttueiu.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000118; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-avip.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000119; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fame.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000120; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fassehoizubra-7696.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000121; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fastdropchain.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000122; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000123; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fla-1001.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000124; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flo4211.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000125; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000126; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fnuttlie.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000127; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fokeijonnekou.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000128; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000129; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-verified-badge-form0-service.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000130; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-verified-meta-badge-service.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000131; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"g06668706.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000132; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gccndbqg.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000133; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geriodememerkezi.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000134; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"get-checkmark-for-you.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000135; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"get-free-verified-badge-service-on.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000136; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gitanag.broke-it.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000137; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gruprocuroipra-6493.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000138; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.b9en.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000139; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.metacoint.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000140; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hcghij.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000141; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hecregayatu-1014.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000142; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hejmtxxt.guru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000143; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"helenblunt6.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000144; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"help.accountsupportcentre.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000145; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"here-apply-for-page-review.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000146; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hgbk.ldgknhk.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200000147; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hhideiie.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000148; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hitummoinneullei-5882.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000149; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-101067.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000150; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-103465.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000151; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-104341.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000152; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-105266.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000153; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-105929.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000154; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"homeattatthome.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000155; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hpnefhqs.motorcycles"; content:"Host"; http_header; classtype:attempted-recon; sid:200000156; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"im25.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000157; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"info.supercitrus.ind.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000158; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ins-business-home-center.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000159; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagaramgalochka.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000160; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ipv6.43-135-137-110.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000161; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"irmt0ken.win"; content:"Host"; http_header; classtype:attempted-recon; sid:200000162; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iujf7839iofvkbcu748.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000163; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iwimwmiwi.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000164; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jagej73796.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000165; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jfdjy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000166; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kalyani963.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000167; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kexoigrufouddou-5902.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000168; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kl1k-ds1ni.neupdile.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000169; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kliind08.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000170; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kreelo098.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000171; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kremlcup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000172; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kshitij12375.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000173; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kucoinglobal1.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000174; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kxbztydc.black"; content:"Host"; http_header; classtype:attempted-recon; sid:200000175; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"labanquepostale.jupiter-analytics.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000176; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leddevotoze-3146.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000177; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"linnkdna-kget.wxxzsite.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000178; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llahi.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000179; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"llahi.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000180; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loffaummuddote-4145.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000181; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-att-10221.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000182; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-form.world"; content:"Host"; http_header; classtype:attempted-recon; sid:200000183; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-online-outlook365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000184; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-outlook-midstreamauth.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000185; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-screen-103134.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000186; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginaccount70.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000187; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginaccount77.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000188; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luk6414.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000189; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"luxlifemiamiblog.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000190; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.meta-accessibility.io.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000191; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"madebybmr.fyi"; content:"Host"; http_header; classtype:attempted-recon; sid:200000192; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maqpiexyz.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000193; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000194; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mayfair313.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000195; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mdbrvlfy.black"; content:"Host"; http_header; classtype:attempted-recon; sid:200000196; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mesageriepro33range1.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000197; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamsk-wallet-3.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000198; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metttaa-audddt-new-02.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000199; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metttaa-audddt-new-02.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000200; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsoft365-storage.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000201; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mikepattyjm.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000202; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mobilemidasbuy.n3g.fun"; content:"Host"; http_header; classtype:attempted-recon; sid:200000203; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monespacepro-client.3utilities.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000204; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monetization-violation.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000205; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"moodengsol-net.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000206; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mwsiekdnfjrdufs.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000207; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mxmxnmx.mx.zya.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000208; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"national-au-b.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000209; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"national-au.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000210; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbaaiqjq.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200000211; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nexomyacwv.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000212; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nft-time11.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000213; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nichcheck.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000214; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ns1.carrier-ast2-portal-apple.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000215; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"omadshf.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000216; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-assist.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000217; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"online-promo-asb.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000218; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"openkimono.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000219; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"opportunity-verified-status.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000220; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ourtime.reconnect-dating.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000221; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"owouwuowo.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000222; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p365kf.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000223; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p4zv8crnrrha27so.94-103-188-123.plesk.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000224; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"page-center-manage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000225; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pavan-patil-22.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000226; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pecinternational.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000227; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"peesom.chat"; content:"Host"; http_header; classtype:attempted-recon; sid:200000228; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pencairaanndannaa.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000229; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"petty.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000230; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pimnhv.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200000231; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"policies-business-page-service.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000232; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pottatrebewe-2808.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000233; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pqo.hrf.mybluehost.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000234; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"programming--service--panel-totlyy-free-for-you.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000235; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"promo1.spik.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000236; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"protocolsecure.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000237; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000238; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-1778406e4fec4394901793111c187dd9.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000239; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-19b834342e7d465b9f00b3511325a081.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000240; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-21dd4dc659614ceb93e45a6de4434502.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000241; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000242; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-2fefe932a6974485b987c9ba851b5c40.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000243; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-3a46d9914f494078a6d6237513e7a096.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000244; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-442ed822851244a689b3472ea2c6a950.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000245; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000246; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000247; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000248; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000249; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7f5cf36445d042168bfacd712e890dc0.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000250; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-803839714a924882a7bcc2495a26860f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000251; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8161de4a277e4ee8b532af34954224e1.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000252; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000253; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8376b5b2334844d193a525d8b8548fa5.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000254; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000255; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000256; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000257; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-9163a97d70394cb499bdd232be6c2169.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000258; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000259; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-98171471e0944ac3a5820ef719bf0640.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000260; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-a263e0790935412eb10cacc55bbced18.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000261; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-a291041b077742899b63a9982f04a56c.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000262; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000263; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-b50adc5d699a4f08aec37102c2103da7.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000264; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c0a934c950e441db96b882789f53c9ea.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000265; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c2c250050109456396c933de259a4fea.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000266; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000267; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000268; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000269; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000270; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000271; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000272; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000273; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000274; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e42cb528b102447385e3145197916f51.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000275; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e4aff507450c478cbe3f77ad23d75035.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000276; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000277; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000278; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000279; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pubgm.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200000280; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"puffagroibrouwoi-8818.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000281; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qasimk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000282; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qfjfvseq.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000283; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quauwograssodda-3503.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000284; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qysgyp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000285; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rajdipchatterjee.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000286; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rechazaroanularaqui51.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000287; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"remote-fix.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000288; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"renggard.47-243-192-240.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000289; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resolvepanel.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000290; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resolving--issue--with-us1.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000291; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resqat.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000292; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-business-case.d2f7p3b7pucnle.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000293; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rlpqwefi.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000294; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rouloigeilleuja-9523.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000295; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rulemec.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000296; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rutinqqwin.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000297; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rwftfu.quest"; content:"Host"; http_header; classtype:attempted-recon; sid:200000298; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.team-pw.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000299; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sairanees.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000300; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sanseipecas.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000301; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasklelo.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000302; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000303; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelcustomerwebly.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000304; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelnetwebmailservermaintainance.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000305; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelrectify.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000306; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelscrutinize.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000307; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelservicecentterwebly.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000308; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sasktelsupportsystemwebly.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000309; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcglobal30.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000310; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scan-vulnerability-guard-v3.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000311; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scan-vulnerability-guard.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000312; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanner-metamask-v1.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000313; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanner-metamask-v2.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000314; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanner-metamask-v3.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000315; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"scanner-metamask.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000316; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sec-sign-in.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000317; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure2-validitycheck.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000318; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securecapitec.theprimepoint.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000319; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securerpcfix.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000320; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seeteressecalywoi.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000321; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seivviice.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000322; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.0e7p.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000323; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.2rk3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000324; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.8q3p.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000325; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.n6b8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000326; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.v9vs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000327; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sevvviicess.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000328; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shard.blue"; content:"Host"; http_header; classtype:attempted-recon; sid:200000329; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shard.skin"; content:"Host"; http_header; classtype:attempted-recon; sid:200000330; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-d7590.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000331; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shared-d7590.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000332; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-101329.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000333; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-101587.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000334; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-106427.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000335; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-107375.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000336; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solutionwebsitedapp.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000337; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solutionwebsitedapp.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000338; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solvetans.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000339; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"solvetans.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000340; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sondfrom.dexlog.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000341; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soyokai.or.jp"; content:"Host"; http_header; classtype:attempted-recon; sid:200000342; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srdate.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200000343; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ssy.hmb.mybluehostin.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000344; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steam.poweredartsworkshop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000345; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steam.workshopsreview.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000346; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommmuty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000347; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommuunity.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000348; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcomunutty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000349; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamconmumity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000350; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stepsray.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000351; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-metahelpcenter-id100003498934.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000352; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sv5gardens655665.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000353; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"system-portalnu.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000354; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talwgam.njmolada.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000355; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taste.baby"; content:"Host"; http_header; classtype:attempted-recon; sid:200000356; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tele.zhngain.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000357; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrambot-resolved.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000358; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrazm.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000359; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-100408.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000360; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-100469.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000361; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-103234.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000362; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiktok-888.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000363; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiltckshow.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000364; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tnomwzrp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000365; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toeken.im"; content:"Host"; http_header; classtype:attempted-recon; sid:200000366; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tonic.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000367; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tooma.cellinsurance.co.zw"; content:"Host"; http_header; classtype:attempted-recon; sid:200000368; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tpdtepremu.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000369; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trattujeilesso-3354.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000370; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trbinace.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000371; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"treibrukeukonno-1395.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000372; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuesmad.firebaseapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000373; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tuesmad.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000374; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyyyyyytyyy.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000375; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tzcsjfto.chat"; content:"Host"; http_header; classtype:attempted-recon; sid:200000376; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u.updatetrackgre.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000377; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uc-whatstapp-web.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000378; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"udxcady.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000379; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uklifejv.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000380; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatemail12.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000381; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ups-trackdeliveryapps.chickenkiller.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000382; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usbest.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000383; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"user-transaction-overview.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000384; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackdck.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000385; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracklnv.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000386; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmcl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000387; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmec.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000388; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracktpq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000389; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackvmd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000390; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsinfw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000391; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uwdtsczi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000392; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uwm-onedrive.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000393; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vaishnavi1436.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000394; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"validatie-veiligauthenticatie.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000395; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vbbu.ldgknhk.lol"; content:"Host"; http_header; classtype:attempted-recon; sid:200000396; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verified-this-request-badge.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000397; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vo4zzp.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000398; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vs41.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000399; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walett-cont.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000400; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletauthenticators.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000401; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletcomnecitt.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000402; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconnectdapps.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000403; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"watranfart-fdd6a8.ingress-bonde.ewp.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000404; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"waxed.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000405; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmaillshavv.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000406; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weeeqweeattt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000407; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weigh.skin"; content:"Host"; http_header; classtype:attempted-recon; sid:200000408; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weigh.wiki"; content:"Host"; http_header; classtype:attempted-recon; sid:200000409; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wgqdqvtn.baby"; content:"Host"; http_header; classtype:attempted-recon; sid:200000410; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wgqdqvtn.pink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000411; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"whatsapp-rqr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000412; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wirelessvoicebtpaidmailinfoplay047.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000413; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wscs1231.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000414; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--metmasklogin-vcb.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000415; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xojautruffeuttu-4659.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000416; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xraiz.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000417; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xraiz.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000418; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xsuweamskeidjf.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000419; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xya46.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000420; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahoooooo-108560.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000421; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yavanica123.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000422; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yi5lq-syaaa-aaaag-acfsq-cai.icp0.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000423; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"you-can-receive-here.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000424; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zeiitgeist.angelocachero.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000425; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zenixoikitti-5809.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000426; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zeznjx.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000427; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zwzcn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000428; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hpqhv"; http_uri; nocase; content:"alturl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000429; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/descargar/kmsauto-net"; http_uri; nocase; content:"ardilu.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000430; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/parcels"; http_uri; nocase; content:"did.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200000431; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/servicesatttttmail"; http_uri; nocase; content:"flow.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000432; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sky/indian-stock/dashboard"; http_uri; nocase; content:"hdfcsky.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000433; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!"; http_uri; nocase; content:"hdfcsky.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000434; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/djgj07/"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000435; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/pubgm/"; http_uri; nocase; content:"pay.zing.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000436; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/go4bnv/"; http_uri; nocase; content:"rb.gy"; content:"Host"; http_header; classtype:attempted-recon; sid:200000437; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/18ab5a"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000438; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/4ff03b"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000439; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/8wtcv4z"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000440; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/96a02f"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000441; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/c0d1afz"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000442; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/d2f265"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000443; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/eacc63"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000444; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f9decb"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000445; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mzhpkzf"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000446; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/nbyh9vh"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000447; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/sa2uoq0"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000448; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tcthi8d"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000449; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tnab363c6"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000450; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/wx1eo7w"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000451; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tvybxr"; http_uri; nocase; content:"surl.li"; content:"Host"; http_header; classtype:attempted-recon; sid:200000452; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/carrefour-926/"; http_uri; nocase; content:"tinyurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000453; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/t8vi"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000454; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/t9ka"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000455; rev:1;) +alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/talr"; http_uri; nocase; content:"urlz.fr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000456; rev:1;) diff --git a/phishing-filter-snort2.rules.br b/phishing-filter-snort2.rules.br new file mode 100644 index 0000000000000000000000000000000000000000..772bac1e7f922269a639eb92fa1b9bf4a505cf68 GIT binary patch literal 7437 zcmV+o9rEIV>Sm89s%k$3KqF=0{QVA_R{!_Cocu!mQlmte`5~u5Dxi!4RsiGoTKbjM zw>X5v;=rwtSo!yL_&aIC{EfXS&;O+P8!{;f1?6*+ z%Pb*8hswgDvFg@UT}O32QsY{-eB&P8y+XBYITHAuq3R=Rx7*DHO9;b1kh<|FkGaKN z?Azn-H!2&&_0h59qx@4$xyr{sHjf4C4?lVQ%kj5o?%U&x^<6L_m^A;~b>C$7&6xlE z;U|wjc^{Oqe0zw8gZuHzliB!KW+65n?ft7Ce)9N~CmgWix5rlNaXwtOQuQ$FcUAy@ zK}PmZ-1v3;i;|z)@xxCZOR78iFBtsfi?jWQpFA={R=z!Ch<>YiKlZmCE7h(2ecPzo zjy}ilIjtY~l4ivJ7%E8K|G_Kc>prSI9zXr_zx$g%`MMd|-v=D6vvpDBb8syA-yh;!E;KOFq?RO+8hUH2~8 z=b@BNPlIpk#v|xh#)q-*k3#O-g4TTak5PPoWIVr#@4r&wbU7)(Y@+z}Ghbv0a>$pEW(tG)v)b;C-QU-Uj1DWb4y0zvhroAkh~y}~t=W%7PO$=XxBQOOC`fsZz6 zCOXB$I5Hs>KRlM57hEK$0z2ZDQJT&SsyCT~b;2hw+nP_9trC_M9Y`^^XK8 zV0*GH9xER=So9o@;~93KDR{SX@76tTJNL=o(vHj;JgzzUw1ba?{P1j?gw#R`&FA*{ zs6#t(ZL4%xKhtP~rUr#OJSDNL?D(2tCeIFvPY4j11Bk#5xII?P{2c_!3x!`eb8*q)^tfc$pu#OtWB?7>l7(yxRHSX=ppIQ#qT1UoR7j%A_~-5?ba zbh(U;<*3R~i}R4cSK^84nL+3~E31zEqnLP8kuJZL@Ww0HO3|hY4&5|l6kbWxwy1<^ z?4F?&B{WjPtC=6Jk_(yWq%cMuV8c~tjf`RiP2W%8_H4B&JeRQ>`ZE*skSf@Z-3ac8 z+3HCaGTUOhnqSqVHb?3H_k)_WDFCG#JL`_U`OK~bj;IY~>uNz3@lqydUJ_hMklow1 zZA3&;nm1ZSy)IUvRY6)-Yr3tk#$9Tor1_>w^D{WRwoohVRAndoYNKJT${lT~#iiA( z)N0Cj_`7B`B!>;hX>~z&bS84V6Vib7Kgvth1a`y?pP3@3ECTCY!p= z^5PmD>N2WMO}E57MKK!Kfyl%!YUS8+VZa%40Ez``#?s#!Rw&l(J2hN#!kOl3-!0ntHb9K=aH4DcN@DrMVK?T^PME z@c^O%-Yq-~YDDo}Wo<#*br^|<7VidRz*Am@z?~?`;Zt6)?AXzLMyl|D;`I_dw@2Es zyy~FmI4EVLfR#-4K;cd;W8E^wgqBsju&~SasPeiK31Yx%>JkfxJ`fh{hzY^( zEXgQUC`#CO>=ntGy5=3o*#PaxC|0nw&UDDe2*0PfPVj{?Hinl|oAEnfoCGp$FlFQ# z%T65*$(Ty^nZvS^;H;KISl!8uN(4xOD=~gG_42pT;&Mz&PfC-LjZ+7-#-5h$*pJR&*pDiW_hKxed78 zS}1Uw=fZ8`AJB(Zu;JvUa&F-vqz)I>8uUFVEd7~BPSH{0EvPi6x-GE|+GOb7> zSDvX_`$f)(5~P4NoYwr@TXUGEnG&8@dqz0J&74sqyHDdkDx;u5D}1mg|xy7>m|_7kZt1gk=*Oz!NVF05Jg*8thsbj%~VrdQz}TnU>LN* z|lUMhpt)11xyRjx4>}zVuf{)=N8W%}41dp7Qf||D0SK~`;wR$SG7GWnPU~ zD?4dxfOQK(9SB%KEtyZO0-vp2-}mFt^_2(Ox?zRHYHf7$Yvm_p3s}WFVy5IUV8FcN zhj@fp39qo4ZCF{K@mgE2tF4>iS6#4Tk#ZTiw(eFA+3dQ} zv$>VFZdQ{vv>8{pp*HL1eCg$cww6|*u;DY*_q+171wNn^E>?lIp~pD;7VB1vwpLaq zKG_;RFqos-aim;hoJ&!L*04Pz8-jr;vqy0u<6+MUTbjW3lxv;$!Aj5yn<}qu8#yGx zD`nr>v5jgAAyJIjyhmbY9OYRCc4C-<=XK>o*ALJNFRMhB3M$JTp}AxkP~ zWZ%QADB&b0cr{~CE7bZUVJ$1PHLW^xJ0dRItMIXsM&k(0L3!8Kys9D;q^UQBHJHvb zJw8^{aIjQ!E1aU^bJm1*WOHF5|D%Pf+3GC_X0$b`N{(Q|*a{iK+RUg}+aC3fR+v_` zS#+E|*NO>cm{0=~qBHQO6)sl6KsnTI$H*^=LcmH|sPQf(cmJho>+t%k@Tbrq%+RH|jo;3+mkdX16(h3);x_A#8g<;b6C6+-(=MHTxq)zi`S)hfm)#k2>ObcypwY8LrhI-d$ zqa`ewlzqFk^_PluF}(^+r0G2PEm&P8)8E|g$~m~s(eCew6&j#vn*4dm@< z!9Wmb_G!J<)_JNIx`*}I+yatGIn{wv;^!sU+8R-XLjZ^KJ%`Mfo0OoHxaM^bzVFWk z*4p|{{ZA^um16E#f&hh@ZOGCASFjP0y$E82f;qaGw#HOj0^F%;l$D4as;w!NXM&sa z>6g2rSz9-%y#Wh^zF3AwPD;(DNtUf0t?;HYYu<~6va<`k$I2Q%n0TTxp0#zH8U?Ji z#zqXn=A5f6;>9`{!dqMWsoS8Cn0Vf_(u*pZky%qJX{o9=tkjfY#S46Cr43bR1={g| zTJL9ABh$*)cp7HG5y(NA+s&g|rvO7MEva^d6b~q!Su^+9pWevTPQ}X$1<<6G=2S+W zxzziNUUiY3l>ComEmmL+-Q+9crL`o_BG!!_TIpQXu){RWF6@dq|5^?@-FlDivz$q5Jw)Tg$5K`aBCCy_ZjD>AUlBOw87_Of1VspPTpE zI#>DS`g?u;KCi#m3&3g7vC1Jgn)0y=8`>IEHRc=t|IhOLKF_y6y$msPYn>`7Mh`O>X^o{5iJKqN|i+ZkMm`w}17cutYlB@OwDMU7H$f$yl*! z>mfC~U4vPM*4e9n`#>AE9jC3QREu%@xxT!e`{nCzeLnl`dVgH(rtM2ICHL;vsixkJ?mNV*UUw?a1q=udJlz4cZz?{a@ww zTn7Ml$Hr78hU949(z&;F#teBmQ72&IEme)jY~Gzr&fbSVga`lM8UJ%fj2u3wU{--gn0<4HHOc`%gmaX zvC9xm0GVT&FJi?G%o#4%yut3Vzo)=AVBvElMc>59gfRI~FEFk#mD?UO7dVq-3F3PCAbCTzP7$-=@{ zU&6L7HDRBN_u$|#3>g(po)lnVxOzLkJ=!4JTr5kmXLgzl&{dUyCofk547!Fg(~Kxm zQ+RWX%>%Z>t4wg16t1OXbFDcoc3)LUxOyhS)QQ+wk#85}E0(fC#L&H&>mpiZurUEU zvn2xsR_Ni(krZM$dMo(aW7f0TcMfJofs=Zu4<}*3UNAB;Mb^qLutW^JrNdxYLsc2g zeJ!IhH!KU3NM>FEBeSAV6^f7*#LTf~A){8rELtt_5;LPEBPyk)d+;6>oun`@5e8K# zyv!&^IMva%MWdOamd|B|YQBZiI})()MwlpL$bjK2lQ=D%s2U}2iAune*%Ep4REM(S z9=&R6%4QKl7Ht>oDw2-mJ28UP~~GLJ;ymJO*np+{N~CnUO~TH+Y6&d{R9{PyfY&T9 z2nb5R%;}7|1Z_d{mm^9h{SrU|t`2hx+!G5kqS#x8vW#T4Tuoaw3aL~E3A~fx9t~+0 zhbP&Ej}0ld0_3Q$lm@&*O9tE8pat7IUeD`go!95@^>Ua&2QzIA+#K=~_siEu$3s}d zBR~6n|GW2(#Um}6wT*tB@%-&x7h?DOwJHvhL1z+JrY?W?*S{OA!q^$_b-BeesMn*< z_l~}dSO{Kva`SZQA@Qi|8=s|_PQlI`}_4Z&U#@z zkm&%&19=!NwCK^c{OtSn^Ivz~mJ-@fTZ6V(4Rf0P;}FvL>^OcekGJD_j~J`1S6jW# zzW>DZxM|U^Egpp5O(KW1aXe(9Aa`;Z4mA%)v(e*3YAq`#Jd*wKx^SWK%F{}}wl*xM z<`b<*-eY?Ln~W^hYir!*s@yyVw1pIH-y1}3mE!AlQRHPyxdL`z*|pTA@ttZYK?v3n zUld*u0z0mKl}9T**t#WZU6mqY+0dm`&TAJb5DU_Q77U|AjGK*CxvhDsK-oR|R2H?Y z>M(k&sEc;Z$8$H*EUq>zaW6Z*#rk~ua^@VDm}_v}mZcf9BKd!KvJLYkiY#rAHCrRr z*K{}S#QT-PV-+Yuv?vv_!D$(7r6uzq_be1!ge@9WS*-(|(&m+h^RXL}#Ks(Ss zR~*82J`JrhdK;Fl`p1|PNsxhfq6lRl4mPdwb~9JrL&w};rfxVtw94!4=E8^>#Sg7= zck^M{;9{Z^YVroO>Lrz>gk~H-)|9c=5@bUK2Q?UAd$Q!4&v0@IUAM9kxZ>d-^bxfF z!5wvR;)xYv$tl#+i=6zStvB0T8bY}_@wyI95vMXLxW(aetEEtijJ`CC#geB4x;}gd3L#r&nOkc5unkTBCL%oY>X_e{M z&6E+ii*{+1&DTw?3aI3W^=Xx{S721yYued3j&sJKRo-2rO1|3Kv7B5hTy5>Syi#Kd z*C!uBz#3eUaL34L!9d%;l_Zi4%0{cqvtFmB6o6aw{%~bPJJKf)mnyI$hYwfrNW}?(`W~jA2kvx`?m{Mli*0jn1%PBR_6k%Lkw94VC6{{I(&TYrGrx+6xYBCuF zR^q^hC4g(!qpgEgs)?LdJ=(fdE!6vi`L3)^8rm9Cd8B@9c`h}LN03%oPHkv>=W;}c zi>0^jRSps764rsq&9ZBQS}Gg|TVx1%VI6T zQkHtWAfG77864U=N10R>ip#}|+8RW8q+PBS`=O+*H&m#!E3g#NWjeQ2v~_+8s}rbf z5l#|X^)b%0^?-_kCB7C^LUtl~T6f#Kxf7FHU=8J(=e8FwXq5@n{IK~K>qdngN~!{u zdYnCIl{b_h&ZIw|gOlC3*Y>4aXVGGLs_g6PEA7Qv+0TiZ$QiA+hl(e)cGHzgu~MFM z1FiOoinZ~YO(CMCnq8QsESJWG>Z*^W1SY1{rclERDobB=fn3?*Tn{7v|DX{fh0Q5C zwpfnxWrOp4qSXZ0g@~^U5$etor`4WM@qbGTA(1C( zwXstygOo)D?1W3!mwTNx_HCrqrcLuo$Y^0stIe6Bc0J~%9Ql=@)mBXD5zmWkNyp}T z0J-(4F;H>W;oOrdHxy4nyIiN8x7@TfV`{bD z=?Sgowk+6cZA|xO+Q`?|k*Ox{4D|70qSeGQi0Ir&t4)_0*t@g~A(S1-J(m><>qITy zH|T!s0JPd;DLO!m=7aN?=tk2Y3m{tUvlLJ_oDj)^kb8cFRzIJ2lkqQB?tMe(u9bmZ z$_rY}-a9pBFPk3ht8#6aZ)mj{)5ShWR9B=@`H`vYrDG&nl$;78+FCO;vJXajC)%l2 zVrJ|LsIU@;eDD*W@8O(SR!i#gxjr_oc9nfQ?rS?<+xc65ZOioi5tD_2zppCbYugjm zwA#AqlYBWW7V--DYYzolO)T=&ZI-Sk*^zH(Yxi{7*Kt2A`XW{x969c*=C!qd8hj1K zp<6DoiVwEY?a<7eu8=7P(rS~a#jmp8Uq`8QA+jSvy7=XwY{ygdcF5S(<9HmR`nB0zdv*PdlTgx{LXPIeS@DnS}FaX zOZNZB{Z9I}PHG{rzjaD2 z&HMXDUq4vQ^WmQBvm3tDssk0iI-Ot*(J(e|&yyz(xcP_Tx@RM3wLRAJ^R*^D$5X8; z|f~XdJ9a$m9%v#dp^GEdC%|s z)GZgTiMaejTa&W2Ux&ly{;)~*wNcfn6z>ZowRJCh9A9-jNh&wA>_2?TGSO=OG1Csv L8vZfhGgs>Y+BvMN literal 0 HcmV?d00001 diff --git a/phishing-filter-snort2.rules.gz b/phishing-filter-snort2.rules.gz new file mode 100644 index 0000000000000000000000000000000000000000..0907ff8ef88d2ec8c6554c1520135b350d81da45 GIT binary patch literal 8012 zcmV-SAG6>eiwFP!000021Kge8kL$Q~$KU%`7`u5$fE8Dye%}QO6zHOPNRuMj07Z); zpvWVMV~W&Jls%fizNBaFZc^l_IDRY|GYX$iwfU$n*X7@{@@czFhueG5ccN zeEIVqe|Pzl^C61M9}f#V#DDts^5;#<2>Q!Kl%g&;FGTZGS$+}am!|oz^!Sf&n+dRg zx$ujY=jGSOc>Pz8@pP-&MlZ}k{N}G7_^sdL*HgA!tjPj<7&9irvjyehWk(H8~(DK$Jt>F{O|YG!zjG)*=SUmK=h<62nu1 zWJeCgki<<{6};~Yo`U6;^v{)L(Sk&zr$?k0P1$s*n;IgYdd`65L1Tz^Wqw$VeKU>F|x)3={s8dHO(*UytxfzWJk5hza&6*&+r-J~S z4u^z7P(-!$Yh0Or~D}>M!t#WZ&9(WX3CbtcV13kqmt)5x>cXi7(jlC8L zL{AWeg*kZZuhKdLNxK*Qz(vgkui1FKzax<$s9o(5&8E`*ARo!h&NSR`a0r4Tb{&l^ zHsfC8DqW$abh6mwY16v|_BQ#j?kv4EGa88zr^x8AGWuY)U~WmXGJ`ZfA_%J06>j(; zRuI&vF3Qw(()Tw!2_^{Y(rvS6;rzXbKA#aJm0FBa&w#E-1VMos;tu!&4MB+-*VJ7; za@_kC-F{uQag)zKP3c}tgA9!JMC?igKqc@C3-D3hj3 zO8yx{s*);^o)2t)J!Alu-vkK2MS3+ zn=_uz0F$!j$I`2KXyXyN4F6DEjK{%Jmt?VoThMv+4R(@TlT^13?wN|k$3aroo=du! zbQ7Y%M?z86-is&?^y$Z%pqM@4lJ5MnAnE62O8c>Iu$yBqzP{trmnqc^Nq+n3)Q&xa zTelQh_yC(d^PuE4;4d1l35wjCPhDj3Ru`*usf~n)$b+E1eIJcuCLjTzCuGOEDS40A z1{!*zb(GUNf{||RthH-<6Ja|Kxis_pz6deDP39`c#z6H3rk#YV+&ta(w?@>=Y*UJ| zdBK4-?uvwv6GWKgTyghqX6lGH!_Ku?p7Q-J-k!Vy*&A*|B49nyFHIHU6? z`W!(+Pp6J%{^f=bgrIIUscEF74tX$XONu0JDXkkL;vSrqpaiv2T^9(zIm^@XWr?>h zxFsk;?Y@gTofLYoXbEc1AP*H}koytgC`8?r=#so8C`038#ejIu!mO5{CXM{-hBf?d zLr|T@#KN8EyL`HuBA2)5ui(%x zn0NHluUceePcEX=wFI$%N`bfL<-pPl71C9{uA@m}hZ{Kb?75>SZdHCR6q5OXROO`` zC_>n*$7=^YLGAjIt5j4h-Z={g5(a`=^`-Bss=>uTP@Gz6)-y@=^gw{S3>sZp^aS;1 z9ydp6BKw#(K>|TgaJpUc7O@CcPf%xibrps2QKHL;z9mVc!Uxfj1kvGxASf);9jRiT zFD?39-B*{KO(sBI2#-3G(GUL^aPs;~v=%cEl%N6p9xPtN7zpamBdqJJZw&HYD z0J*Z&2PXq!OQ9!bwY$Hr3*uEbPSE&D2fyvB3{fr8IONG>PSE&D?=L=PTfaH@1FLfo zl&yyyTh(k$UY3bOfu3AV(&8*uY3+US7WVY1(L@F(=z#@eENre&i#?Ib3EE$QT6_R) zL8GrGYE`d9~%1;iA-TW4WX;4iJKlSYTr?(Yx6nAw7r}I0zbCJ!VbWI*%;Z zN^udbj2S0raRu(hug5$;C3ocn4X%C$f||P$bhUyIe5mTCy)DO>MwgG`RPsHgub*$Y zqis9n1P!j>Ew8u+Au9CAR8G+73Qjon0#9H;P@0}G9$*gin&+IL;ngG+jNV@hc{3a4 z1P4Kjt4XfFHmveVoS>`Kl+FtlZ{CkF$f9e97Cn6<=wp?r#60=+lzA_LR#wx?KFOky z=~m<~x_F&zy04^RMr|dUVkhWsl|bZj<{W=;A!u=x4p9rv*=%A`sd&wTo*bRrm`lli z*f@Q<^hW<_fgOF|Oq)bWTCYI5eM_VAjwjLx+FniWh%vn&Db}k&qCiioPW}q!#XARA zf8YZ_Cg{~(CKOl07YsoW-{rN9-e|l zb|fvo8nmD{C4%Nxe+wx+EI&y-jS)TNJC|+S_FdWHPaF_*!kU$GdVHN(N|liy&=a_G z>M>r!n*M|>VgF$Pz8vupnL^ zC+KXosCh9jcuTDaI$5RBHoz=T8INrHT%*Sbf_7F5ysYuPI#?}W!HxEC z@d+6VK^v=Fn~Z%dWv+J$1AgX zzPcs-?=2DtdTMl8j0R(#uxNsyKh2&zaL(YDV)QjtY6h~YU%YLZCODW$*p9{#Edf`(Pg z=3rW0ceeWIgF2Ok9SH_KwQ5$;;LVv5G_A@TXIRSZk`gm996K{kvoRp?=n3-Ji=WH= zKLTpbcp)H0(SahAC}$buI_D)u%N4!i9Vcj5Wwu+(>Z;&Xlm2xD=Owy%Hz(*|Wx^WE zE4Y;SIwT16vIoZ+Rby5R{E z%>)grUMBs5*)iw|(W|tlbY^HP?B&h`&8e>N=FJ?A$sbz#qiBW_f3lFE57pK3YoT}U zOv+h~O&be{HfEfl>D1Mll(3XNeiS9>K6MQM)|Ugm(je$Lm0+w^9f~V#lebn{H3xHuW#dfJhfsEyI~{@^mM0{qjawaZ0V$P$)%TL zOK%bi>5?3aMj>vZBIp=pL2J1A=-;8Jc#XfAm!Nl)HO^hNlf`w0$nI}%?+@8A9`El+ zOz6o{Yvp1POE3}ikNQA>wy}eteU$anB#(8?8C!&+=5>P}F9_O6Sw9CqZ zx(RwqeK5&83UifdihIIRtmQ2T`cSP#1;6_#R&7)4(T5am zkT3QMf)-S(xx$vt>3mtyM`J64Bx>l|C-N045 z=_Tl6+ObuwAn07RzO8R=ePikG`zhH9NF?ZKS@#GV(k8i9jEHSwpiBa7v!NhpROLn~ z&Fjl6qT`_;=uze1&9A3a_Zxb^Bxq9QrdY)6I?b`yiwJ@aRnDm8Q4jPP7k33grz*E| zrep{vFU#DcC~_6597?y%Vv?b!M*S-FzDx|MV4EQ5OZB;QCY_zxBg=N&NGLk0C{i}N z`UGTTKFmlk=t)n%fxDWN$9k54AYm8?V#vYra3-F=lu=GcjK_{X))KU<@<+(RgFQ~h zr2`jQJ`B0ape+gv9+p+V4;YOCLGy$UXbMT&0s zY^d`J#De#I!9~TA5ZkYh*)SwT^i=Aj2r4>dG!Q{sstsWGD^rWaV$c(0;FL5$O6PQ5KqV13@(Y5VQyav1;<>d6 zf{s#~S>1BOoEs%*8MXPOHVyn$5w^$B`qfkmZBQlXAGP^h$TGkPcPK<(_UJhrK|iVO z)w3l`DSD3ffF+$e+9fxFZc&Y+1kI$jV=Ooq0CEzl>#CZoTEZ|jpr)w@C0p6BAP^b# zG#PbWUzaV^6R5fx>LKsnuQ=z5_np=QE~9}aqhai;x~c_qx^A0sn96dj8qO=x$g=0C zj0l=iWk!N)U2D}gL(6Lg<4{4}$W}x8SankhTt=KGqZEC(RulANUr${-bS22PO-*W$ zs?*5rNDyTN6AYD*iB4Vjsk8N+8b;YSd~8%*;xej8GOA?V>S5sZR1bC8^{Jb+xkMPR zpp)g$;xej9GOAOw*1Zs^-K0~HZ9j}v-3gFFwQ^{X+fhT3QCrGJOHeHzWnE5b^jAZp z`xct9=e0&=)Y4?s3#qHIZS;^nNY{=7Pl2hC5-QcSy2fQhQ)jnHPK!|{aotX}(rTz= zH;p{?y;clTAdhP_b#|wqg~X`pw5%tt`x+))PSen&pY>gZ%ZR4V?xsdfRa@7ME^EQt zew?JzUCQG6q0|aD9yK&|c3)O~HFUg|L+T1CICY~^=@;He(e`aQ;WDDBvwPn1lz2$d zbx=c6+fCAwQEm^%F@$sLr!Kg7n`|hxvD2sj_ueY z#V<|t-yqOG145je8uFTGKp?4J@ZKTM9|@W|yYF46Ish`Xio1$SE@4m-m4UQo+73C6 zXzJ`<*<9nhTEKW@xKL1swA$)kRCT9}!DU2KXZJ?b9B5Qf^+OynsXHy8z?GHbRqb%+ zAq7pHJ=86eLua}wmuiX+0|ZaQ8U@h=atWDHPn3~nQkp?Y)$y*Dvg+Kc#AV9#wZol< z6f|}A(AOX!yV_Pz(@Nka`lhn3s|V$(7I}`XrKz()PBU9|Lp3nLp#o8LrKQ$FD5b5b zdt62}QAR^u@fybLuH#J)!%-fehQ7%AGMiMbX?W8aDO~I;;)Y-ZML7nGkE6aIp6v%C;{=0r~ zg6Y9ZTt+l?wuXoiRRyXV5}Rn*(CUFPVv;q$Db%j;78wjp2e@ZVZ$pz3wFM1%sq$s8Mk9T1Qi7n|_d>7r7O#=B|NndINe1 zpbZ1aBxFW3b+%=LaMoBMI|DUsHz*}Et2xvpLlyzJjA-g?%Nwmk(?h-AaNef#OH5a|b0Zx|ojuN_o_2+Uprvv8^FNbGAw^$e#aEn|<&~+`!C0f5(5E@xclqw*h zs0pHo*U3&RwhmAn05;RW6H7aQs&w*#PPkzFHD|$VFRxOoA#VxRwN!9X^qkDv_vP^3^}z5GEa2 zD4!h>bD!??wy~xsOJ{%CMZ`yht9uh1f|^(9aaxs}ScPsQ%Lsb7MJ<=&*da3osj^$@ zqZoG?OmQ&eIRi$}+U@_*K}XY&M6+ajglzi`BTjMD=v3I>fJ%c-h5rqx;14c>JQZ{# z1l6w9MfBrR_yuo;5+i8;_Sv_&DGoV#18L_+4@pG5(h~)vAWBXEk+0$!9@#)3pN4}IX&*H$DZFN=>Hb2KMwETFwI2J1nzV4t*mUf zA#z|;IW*zQ5IJzF9Qqr>j0ZuL!_ulAkwZ(B!!aBYkpo2)dVD6081d5vLG5|YQ$N|5 z2noSJ6hXZD1qT5^U$=|^uElg>s7mL9RWe%4MTm@`&)c7%z$wty+%baAZUEz6)Kv{P z__tvb_b~%OU$^f_MBlv!38#vr<;|Or2&zar)`|BZAt*)HY0nHZdM zaC1*jk;!3`T;iLeWFSlgH8u$Pvc+{V`BkN{A9=kZo<%hy=)e}&$9k2%Ttj)miV1>R zH5i#wELOt|M$kho#z%Rc)eok_e!;RGW(57xV%{53ZtLAbO(#Q&_cdJeo*BG6LeL@Y zlgf7#@pFeFB9WFR5dbjHdqSKUBTiMG4~&x zg_wdYKzi`1e@lKPX!!LbmG(W)a0yy`{XvB_AW+{zg`P%D{+iZn(f56Mc%&>t(6=kW zS#+KmyW=HWg4SGVS?BvRY={sDs?XJ4?NWNIL4lz7To%YDm>dLYs2>liFvEke*&YS+abf&q@PZABg~@a_+K3UoIg zTABxb<0FDbQTuiB&R&jEKUSpG8U($fK1Yh&kg#s>!-Akk)V{^yHETA?P8s$L+Og`rBQk zuXyr5%ZsMIOH9ti|qcM$rH1)hJOWZ;QkF z$&YeRXZV5F`QH#Dg`NaGl-kS5jMwFSEvI!t0zprGLUHDuhpS0&9=N2J15%-+87+F@ zM$i}PSo!n0m0lwi_5@v_j>v2Dv6PteM}ZwQr!ERqF~B=ed&Mr=yV2^vD(Wu7Q?GNi&8)5^YtbLHN=g<2P5 zOMBn&9FaLeXQ;dUu%^8Gt4BgWPoaLZ#G2w+9tZY122RlQ2@u#D`~{bl@Og9udHC^+ z*L9K;GW&1?Q7%&4V!+afVR4v6EtRet?9{2dcqCwc|0d*!*ut- z=7rQROH!3K=}pe1**s;NsbE z)p~Pr_{oHx4*hsY-j-V903hhE^pNNE^{1$-UbNLawt{nl9!n2-$i-_3N(1>R0w-v) z^zdT374adZEZ{?qh14$I3N3x<^;Y4rp{GYdg%;Ub7B0s6!xm>7(4Rqaf<{bF>wOxn zkExW)Xs1<64Qy6K5kk1h}LvHGh|$rqxp@Wm-XkEW-6E|-ro_hLn2Ku?`M?@zrT zrd)dJ^mN{C=i~d2_u&8ij|B#eXn*(}Ii)>Jh?wX})|0VO%P`7ty3P@b-L?4adi67G z!T4#%!$#2R>9ol_&c>gEGTxLE(zHB5>!(w8%gY{d`Ds;3dG_(=yz)6;4d{@NH3X4e zA1A*U4-zn@RbNj=#FvzOs7#*cpe&8+%2Z+?Z_x8ZeN4>eR0tR6(S`>nN158W`a z(Ec*ROCVZ*h2P(2cnkk(s(eOk@)w^+bo(?t{`uAacbs4zx{Q~qJN=xLkL75P7zu(& zXIJC=7l=0bD4*~i$^+?s0qr3HcX@tO{}g5rf5v zU>(7otC;#?P6P{y{+{%~pI-}#px4%EXl2#7FXlwBdeD`rrTglDB3Lt+#xW{!!btyMHk#g2Fr<5A_j#&MD>xYgo@d2pW`~ zv<$(zbq~eRw0|)ZmHhHReGo~|x$Kns!~Yx;AbOTAAR!_s%+qj{Ux|pICQot-Uy0}k OHU2*{d^0TG>;V8QXM&>u literal 0 HcmV?d00001 diff --git a/phishing-filter-snort3.rules b/phishing-filter-snort3.rules new file mode 100644 index 000000000..e8685a9a7 --- /dev/null +++ b/phishing-filter-snort3.rules @@ -0,0 +1,462 @@ +# Title: Phishing URL Snort3 Ruleset +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1111365dh.net",nocase; classtype:attempted-recon; sid:200000001; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"12931-coinbase.com",nocase; classtype:attempted-recon; sid:200000002; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"215323.com",nocase; classtype:attempted-recon; sid:200000003; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"260aesthetic.wixsite.com",nocase; classtype:attempted-recon; sid:200000004; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3650947.cc",nocase; classtype:attempted-recon; sid:200000005; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3659ll.net",nocase; classtype:attempted-recon; sid:200000006; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"83291-coinbase.com",nocase; classtype:attempted-recon; sid:200000007; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"94-103-188-123.plesk.page",nocase; classtype:attempted-recon; sid:200000008; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9825057365.com",nocase; classtype:attempted-recon; sid:200000009; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abctrvabc.com",nocase; classtype:attempted-recon; sid:200000010; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com",nocase; classtype:attempted-recon; sid:200000011; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acclimatizable.fun",nocase; classtype:attempted-recon; sid:200000012; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account-update05.myvnc.com",nocase; classtype:attempted-recon; sid:200000013; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.auzen.us.kg",nocase; classtype:attempted-recon; sid:200000014; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activebusiness-unlocker3.com",nocase; classtype:attempted-recon; sid:200000015; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"addwsrbh.green",nocase; classtype:attempted-recon; sid:200000016; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ahnp.vercel.app",nocase; classtype:attempted-recon; sid:200000017; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aldg.ldgknhk.lol",nocase; classtype:attempted-recon; sid:200000018; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allegrolokalnie.pl-891241214.buzz",nocase; classtype:attempted-recon; sid:200000019; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alutipcentra.pages.dev",nocase; classtype:attempted-recon; sid:200000020; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambil-pinjaman-daana-payleter.xforms.web.id",nocase; classtype:attempted-recon; sid:200000021; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambulatoriprivati.it",nocase; classtype:attempted-recon; sid:200000022; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amev.ldgknhk.lol",nocase; classtype:attempted-recon; sid:200000023; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"antail-conv.com",nocase; classtype:attempted-recon; sid:200000024; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apply-now-to-receive-badge.vercel.app",nocase; classtype:attempted-recon; sid:200000025; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artsea.pages.dev",nocase; classtype:attempted-recon; sid:200000026; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atmailupdatewptnskmdinfomailacct.weebly.com",nocase; classtype:attempted-recon; sid:200000027; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-101072.weeblysite.com",nocase; classtype:attempted-recon; sid:200000028; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-1041page.weeblysite.com",nocase; classtype:attempted-recon; sid:200000029; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-105714.weeblysite.com",nocase; classtype:attempted-recon; sid:200000030; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-105819.square.site",nocase; classtype:attempted-recon; sid:200000031; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-inc-107097.weeblysite.com",nocase; classtype:attempted-recon; sid:200000032; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-login380.weeblysite.com",nocase; classtype:attempted-recon; sid:200000033; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-login522.weeblysite.com",nocase; classtype:attempted-recon; sid:200000034; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-service-102155.weeblysite.com",nocase; classtype:attempted-recon; sid:200000035; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-sign-in-105669.weeblysite.com",nocase; classtype:attempted-recon; sid:200000036; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcom-100762.weeblysite.com",nocase; classtype:attempted-recon; sid:200000037; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcom-106808.weeblysite.com",nocase; classtype:attempted-recon; sid:200000038; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailservicenow.wixstudio.com",nocase; classtype:attempted-recon; sid:200000039; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailservicenow.wixstudio.io",nocase; classtype:attempted-recon; sid:200000040; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailsrvrdesk.weebly.com",nocase; classtype:attempted-recon; sid:200000041; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attnewmaill.weebly.com",nocase; classtype:attempted-recon; sid:200000042; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attyhhhhiiii225.weebly.com",nocase; classtype:attempted-recon; sid:200000043; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atw-tau.vercel.app",nocase; classtype:attempted-recon; sid:200000044; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com",nocase; classtype:attempted-recon; sid:200000045; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authsyncs.pages.dev",nocase; classtype:attempted-recon; sid:200000046; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoreplyattmode.wixsite.com",nocase; classtype:attempted-recon; sid:200000047; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"avoid.hold-managert.com",nocase; classtype:attempted-recon; sid:200000048; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azbin.ir",nocase; classtype:attempted-recon; sid:200000049; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b45018.com",nocase; classtype:attempted-recon; sid:200000050; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000051; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baiii-wong.cutvi.cfd",nocase; classtype:attempted-recon; sid:200000052; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"basvuru-online-yap.vercel.app",nocase; classtype:attempted-recon; sid:200000053; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beionfidi.pages.dev",nocase; classtype:attempted-recon; sid:200000054; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet73nn.com",nocase; classtype:attempted-recon; sid:200000055; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet83039.com",nocase; classtype:attempted-recon; sid:200000056; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet83054.com",nocase; classtype:attempted-recon; sid:200000057; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfrescentremebermainsetreouytnoy.weebly.com",nocase; classtype:attempted-recon; sid:200000058; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biggggggggggg.weebly.com",nocase; classtype:attempted-recon; sid:200000059; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitnode.pages.dev",nocase; classtype:attempted-recon; sid:200000060; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitvavobtc.com",nocase; classtype:attempted-recon; sid:200000061; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blackhere11.serv00.net",nocase; classtype:attempted-recon; sid:200000062; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blss24att.weebly.com",nocase; classtype:attempted-recon; sid:200000063; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"braucrarasuteu-2470.vercel.app",nocase; classtype:attempted-recon; sid:200000064; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-102124.weeblysite.com",nocase; classtype:attempted-recon; sid:200000065; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt1business.weebly.com",nocase; classtype:attempted-recon; sid:200000066; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btuan-dan2-resmi.top1.my.id",nocase; classtype:attempted-recon; sid:200000067; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buildingdesignsusapdf.s3.us-east-005.backblazeb2.com",nocase; classtype:attempted-recon; sid:200000068; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-property-897432967.netlify.app",nocase; classtype:attempted-recon; sid:200000069; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caipora.xyz",nocase; classtype:attempted-recon; sid:200000070; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calm-pothos-3b24c9.netlify.app",nocase; classtype:attempted-recon; sid:200000071; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carrefourarabiank15.pages.dev",nocase; classtype:attempted-recon; sid:200000072; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com",nocase; classtype:attempted-recon; sid:200000073; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catgirl-appverset-nya.pages.dev",nocase; classtype:attempted-recon; sid:200000074; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catxtokens.pages.dev",nocase; classtype:attempted-recon; sid:200000075; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chat.94-103-188-123.plesk.page",nocase; classtype:attempted-recon; sid:200000076; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"check154109.click",nocase; classtype:attempted-recon; sid:200000077; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkseven.vercel.app",nocase; classtype:attempted-recon; sid:200000078; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ciente-a.org",nocase; classtype:attempted-recon; sid:200000079; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cieplo.app",nocase; classtype:attempted-recon; sid:200000080; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cj12143.tw1.ru",nocase; classtype:attempted-recon; sid:200000081; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cj87335.tw1.ru",nocase; classtype:attempted-recon; sid:200000082; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claimyourethrewards.pages.dev",nocase; classtype:attempted-recon; sid:200000083; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clickbait.design",nocase; classtype:attempted-recon; sid:200000084; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cnsa163.com",nocase; classtype:attempted-recon; sid:200000085; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cock2-iota.vercel.app",nocase; classtype:attempted-recon; sid:200000086; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cock3.vercel.app",nocase; classtype:attempted-recon; sid:200000087; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cock7.vercel.app",nocase; classtype:attempted-recon; sid:200000088; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-pro-8291-d01.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000089; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-pro-8291-d01.web.app",nocase; classtype:attempted-recon; sid:200000090; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creosrl.com",nocase; classtype:attempted-recon; sid:200000091; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curmmgdv.email",nocase; classtype:attempted-recon; sid:200000092; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently541.weebly.com",nocase; classtype:attempted-recon; sid:200000093; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently890.weebly.com",nocase; classtype:attempted-recon; sid:200000094; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyserver.weebly.com",nocase; classtype:attempted-recon; sid:200000095; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dara3dccj.wixsite.com",nocase; classtype:attempted-recon; sid:200000096; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"db.service4db.com",nocase; classtype:attempted-recon; sid:200000097; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev",nocase; classtype:attempted-recon; sid:200000098; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"debutcan.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000099; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"debutcan.web.app",nocase; classtype:attempted-recon; sid:200000100; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delivery.attempt.failure.ebbs.co.za",nocase; classtype:attempted-recon; sid:200000101; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev.stream.mornar.app",nocase; classtype:attempted-recon; sid:200000102; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dnwqmh.click",nocase; classtype:attempted-recon; sid:200000103; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dropsmartchain.pages.dev",nocase; classtype:attempted-recon; sid:200000104; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsjoting.group",nocase; classtype:attempted-recon; sid:200000105; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dulb6c5p5.top",nocase; classtype:attempted-recon; sid:200000106; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebay-mallwholesale.com",nocase; classtype:attempted-recon; sid:200000107; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebt-lilac.vercel.app",nocase; classtype:attempted-recon; sid:200000108; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"echoredled.netlify.app",nocase; classtype:attempted-recon; sid:200000109; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elbarco.percentadnp.info",nocase; classtype:attempted-recon; sid:200000110; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eltritongourmet.com",nocase; classtype:attempted-recon; sid:200000111; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"email.mgb.modento.io",nocase; classtype:attempted-recon; sid:200000112; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enjomugg.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000113; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enjomugg.web.app",nocase; classtype:attempted-recon; sid:200000114; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"error3456vhubhornbase.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000115; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"example223.wixsite.com",nocase; classtype:attempted-recon; sid:200000116; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eyeydhe.wixsite.com",nocase; classtype:attempted-recon; sid:200000117; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eyttueiu.square.site",nocase; classtype:attempted-recon; sid:200000118; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-avip.click",nocase; classtype:attempted-recon; sid:200000119; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fame.pink",nocase; classtype:attempted-recon; sid:200000120; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fassehoizubra-7696.vercel.app",nocase; classtype:attempted-recon; sid:200000121; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fastdropchain.pages.dev",nocase; classtype:attempted-recon; sid:200000122; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io",nocase; classtype:attempted-recon; sid:200000123; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fla-1001.square.site",nocase; classtype:attempted-recon; sid:200000124; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flo4211.github.io",nocase; classtype:attempted-recon; sid:200000125; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com",nocase; classtype:attempted-recon; sid:200000126; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fnuttlie.wiki",nocase; classtype:attempted-recon; sid:200000127; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fokeijonnekou.vercel.app",nocase; classtype:attempted-recon; sid:200000128; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com",nocase; classtype:attempted-recon; sid:200000129; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-verified-badge-form0-service.vercel.app",nocase; classtype:attempted-recon; sid:200000130; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-verified-meta-badge-service.vercel.app",nocase; classtype:attempted-recon; sid:200000131; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"g06668706.wixsite.com",nocase; classtype:attempted-recon; sid:200000132; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gccndbqg.vip",nocase; classtype:attempted-recon; sid:200000133; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geriodememerkezi.online",nocase; classtype:attempted-recon; sid:200000134; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"get-checkmark-for-you.vercel.app",nocase; classtype:attempted-recon; sid:200000135; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"get-free-verified-badge-service-on.vercel.app",nocase; classtype:attempted-recon; sid:200000136; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gitanag.broke-it.net",nocase; classtype:attempted-recon; sid:200000137; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gruprocuroipra-6493.vercel.app",nocase; classtype:attempted-recon; sid:200000138; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.b9en.com",nocase; classtype:attempted-recon; sid:200000139; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.metacoint.com",nocase; classtype:attempted-recon; sid:200000140; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hcghij.top",nocase; classtype:attempted-recon; sid:200000141; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hecregayatu-1014.vercel.app",nocase; classtype:attempted-recon; sid:200000142; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hejmtxxt.guru",nocase; classtype:attempted-recon; sid:200000143; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helenblunt6.wixsite.com",nocase; classtype:attempted-recon; sid:200000144; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help.accountsupportcentre.com",nocase; classtype:attempted-recon; sid:200000145; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"here-apply-for-page-review.vercel.app",nocase; classtype:attempted-recon; sid:200000146; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgbk.ldgknhk.lol",nocase; classtype:attempted-recon; sid:200000147; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hhideiie.wixsite.com",nocase; classtype:attempted-recon; sid:200000148; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitummoinneullei-5882.vercel.app",nocase; classtype:attempted-recon; sid:200000149; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-101067.weeblysite.com",nocase; classtype:attempted-recon; sid:200000150; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-103465.weeblysite.com",nocase; classtype:attempted-recon; sid:200000151; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-104341.weeblysite.com",nocase; classtype:attempted-recon; sid:200000152; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-105266.weeblysite.com",nocase; classtype:attempted-recon; sid:200000153; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-105929.weeblysite.com",nocase; classtype:attempted-recon; sid:200000154; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homeattatthome.square.site",nocase; classtype:attempted-recon; sid:200000155; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hpnefhqs.motorcycles",nocase; classtype:attempted-recon; sid:200000156; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im25.net",nocase; classtype:attempted-recon; sid:200000157; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info.supercitrus.ind.br",nocase; classtype:attempted-recon; sid:200000158; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ins-business-home-center.com",nocase; classtype:attempted-recon; sid:200000159; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instagaramgalochka.vercel.app",nocase; classtype:attempted-recon; sid:200000160; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipv6.43-135-137-110.cprapid.com",nocase; classtype:attempted-recon; sid:200000161; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irmt0ken.win",nocase; classtype:attempted-recon; sid:200000162; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iujf7839iofvkbcu748.weebly.com",nocase; classtype:attempted-recon; sid:200000163; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iwimwmiwi.click",nocase; classtype:attempted-recon; sid:200000164; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jagej73796.wixsite.com",nocase; classtype:attempted-recon; sid:200000165; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfdjy.com",nocase; classtype:attempted-recon; sid:200000166; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kalyani963.github.io",nocase; classtype:attempted-recon; sid:200000167; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kexoigrufouddou-5902.vercel.app",nocase; classtype:attempted-recon; sid:200000168; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kl1k-ds1ni.neupdile.my.id",nocase; classtype:attempted-recon; sid:200000169; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kliind08.wixsite.com",nocase; classtype:attempted-recon; sid:200000170; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kreelo098.weebly.com",nocase; classtype:attempted-recon; sid:200000171; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kremlcup.com",nocase; classtype:attempted-recon; sid:200000172; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kshitij12375.github.io",nocase; classtype:attempted-recon; sid:200000173; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kucoinglobal1.com",nocase; classtype:attempted-recon; sid:200000174; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kxbztydc.black",nocase; classtype:attempted-recon; sid:200000175; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"labanquepostale.jupiter-analytics.com",nocase; classtype:attempted-recon; sid:200000176; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leddevotoze-3146.vercel.app",nocase; classtype:attempted-recon; sid:200000177; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linnkdna-kget.wxxzsite.buzz",nocase; classtype:attempted-recon; sid:200000178; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llahi.info",nocase; classtype:attempted-recon; sid:200000179; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llahi.vip",nocase; classtype:attempted-recon; sid:200000180; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loffaummuddote-4145.vercel.app",nocase; classtype:attempted-recon; sid:200000181; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-att-10221.square.site",nocase; classtype:attempted-recon; sid:200000182; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-form.world",nocase; classtype:attempted-recon; sid:200000183; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-online-outlook365.com",nocase; classtype:attempted-recon; sid:200000184; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-outlook-midstreamauth.com",nocase; classtype:attempted-recon; sid:200000185; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-screen-103134.weeblysite.com",nocase; classtype:attempted-recon; sid:200000186; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginaccount70.wixsite.com",nocase; classtype:attempted-recon; sid:200000187; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginaccount77.wixsite.com",nocase; classtype:attempted-recon; sid:200000188; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luk6414.wixsite.com",nocase; classtype:attempted-recon; sid:200000189; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luxlifemiamiblog.com",nocase; classtype:attempted-recon; sid:200000190; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.meta-accessibility.io.vn",nocase; classtype:attempted-recon; sid:200000191; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madebybmr.fyi",nocase; classtype:attempted-recon; sid:200000192; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maqpiexyz.click",nocase; classtype:attempted-recon; sid:200000193; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev",nocase; classtype:attempted-recon; sid:200000194; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayfair313.wixsite.com",nocase; classtype:attempted-recon; sid:200000195; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdbrvlfy.black",nocase; classtype:attempted-recon; sid:200000196; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mesageriepro33range1.weebly.com",nocase; classtype:attempted-recon; sid:200000197; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamsk-wallet-3.gitbook.io",nocase; classtype:attempted-recon; sid:200000198; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metttaa-audddt-new-02.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000199; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metttaa-audddt-new-02.web.app",nocase; classtype:attempted-recon; sid:200000200; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft365-storage.github.io",nocase; classtype:attempted-recon; sid:200000201; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mikepattyjm.wixsite.com",nocase; classtype:attempted-recon; sid:200000202; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobilemidasbuy.n3g.fun",nocase; classtype:attempted-recon; sid:200000203; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monespacepro-client.3utilities.com",nocase; classtype:attempted-recon; sid:200000204; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monetization-violation.github.io",nocase; classtype:attempted-recon; sid:200000205; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moodengsol-net.pages.dev",nocase; classtype:attempted-recon; sid:200000206; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mwsiekdnfjrdufs.weebly.com",nocase; classtype:attempted-recon; sid:200000207; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mxmxnmx.mx.zya.me",nocase; classtype:attempted-recon; sid:200000208; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"national-au-b.com",nocase; classtype:attempted-recon; sid:200000209; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"national-au.net",nocase; classtype:attempted-recon; sid:200000210; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nbaaiqjq.group",nocase; classtype:attempted-recon; sid:200000211; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nexomyacwv.weebly.com",nocase; classtype:attempted-recon; sid:200000212; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nft-time11.vercel.app",nocase; classtype:attempted-recon; sid:200000213; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nichcheck.weeblysite.com",nocase; classtype:attempted-recon; sid:200000214; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ns1.carrier-ast2-portal-apple.com",nocase; classtype:attempted-recon; sid:200000215; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omadshf.ru",nocase; classtype:attempted-recon; sid:200000216; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-assist.live",nocase; classtype:attempted-recon; sid:200000217; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-promo-asb.org",nocase; classtype:attempted-recon; sid:200000218; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openkimono.pro",nocase; classtype:attempted-recon; sid:200000219; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opportunity-verified-status.vercel.app",nocase; classtype:attempted-recon; sid:200000220; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ourtime.reconnect-dating.workers.dev",nocase; classtype:attempted-recon; sid:200000221; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"owouwuowo.click",nocase; classtype:attempted-recon; sid:200000222; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p365kf.com",nocase; classtype:attempted-recon; sid:200000223; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p4zv8crnrrha27so.94-103-188-123.plesk.page",nocase; classtype:attempted-recon; sid:200000224; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"page-center-manage.com",nocase; classtype:attempted-recon; sid:200000225; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pavan-patil-22.github.io",nocase; classtype:attempted-recon; sid:200000226; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pecinternational.net",nocase; classtype:attempted-recon; sid:200000227; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peesom.chat",nocase; classtype:attempted-recon; sid:200000228; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pencairaanndannaa.my.id",nocase; classtype:attempted-recon; sid:200000229; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"petty.wiki",nocase; classtype:attempted-recon; sid:200000230; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pimnhv.group",nocase; classtype:attempted-recon; sid:200000231; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"policies-business-page-service.com",nocase; classtype:attempted-recon; sid:200000232; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pottatrebewe-2808.vercel.app",nocase; classtype:attempted-recon; sid:200000233; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pqo.hrf.mybluehost.me",nocase; classtype:attempted-recon; sid:200000234; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"programming--service--panel-totlyy-free-for-you.vercel.app",nocase; classtype:attempted-recon; sid:200000235; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promo1.spik.ru",nocase; classtype:attempted-recon; sid:200000236; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protocolsecure.pages.dev",nocase; classtype:attempted-recon; sid:200000237; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev",nocase; classtype:attempted-recon; sid:200000238; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-1778406e4fec4394901793111c187dd9.r2.dev",nocase; classtype:attempted-recon; sid:200000239; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-19b834342e7d465b9f00b3511325a081.r2.dev",nocase; classtype:attempted-recon; sid:200000240; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-21dd4dc659614ceb93e45a6de4434502.r2.dev",nocase; classtype:attempted-recon; sid:200000241; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev",nocase; classtype:attempted-recon; sid:200000242; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-2fefe932a6974485b987c9ba851b5c40.r2.dev",nocase; classtype:attempted-recon; sid:200000243; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-3a46d9914f494078a6d6237513e7a096.r2.dev",nocase; classtype:attempted-recon; sid:200000244; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-442ed822851244a689b3472ea2c6a950.r2.dev",nocase; classtype:attempted-recon; sid:200000245; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev",nocase; classtype:attempted-recon; sid:200000246; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev",nocase; classtype:attempted-recon; sid:200000247; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev",nocase; classtype:attempted-recon; sid:200000248; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev",nocase; classtype:attempted-recon; sid:200000249; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7f5cf36445d042168bfacd712e890dc0.r2.dev",nocase; classtype:attempted-recon; sid:200000250; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-803839714a924882a7bcc2495a26860f.r2.dev",nocase; classtype:attempted-recon; sid:200000251; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8161de4a277e4ee8b532af34954224e1.r2.dev",nocase; classtype:attempted-recon; sid:200000252; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev",nocase; classtype:attempted-recon; sid:200000253; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8376b5b2334844d193a525d8b8548fa5.r2.dev",nocase; classtype:attempted-recon; sid:200000254; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev",nocase; classtype:attempted-recon; sid:200000255; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev",nocase; classtype:attempted-recon; sid:200000256; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev",nocase; classtype:attempted-recon; sid:200000257; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-9163a97d70394cb499bdd232be6c2169.r2.dev",nocase; classtype:attempted-recon; sid:200000258; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev",nocase; classtype:attempted-recon; sid:200000259; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-98171471e0944ac3a5820ef719bf0640.r2.dev",nocase; classtype:attempted-recon; sid:200000260; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-a263e0790935412eb10cacc55bbced18.r2.dev",nocase; classtype:attempted-recon; sid:200000261; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-a291041b077742899b63a9982f04a56c.r2.dev",nocase; classtype:attempted-recon; sid:200000262; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev",nocase; classtype:attempted-recon; sid:200000263; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-b50adc5d699a4f08aec37102c2103da7.r2.dev",nocase; classtype:attempted-recon; sid:200000264; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c0a934c950e441db96b882789f53c9ea.r2.dev",nocase; classtype:attempted-recon; sid:200000265; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c2c250050109456396c933de259a4fea.r2.dev",nocase; classtype:attempted-recon; sid:200000266; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev",nocase; classtype:attempted-recon; sid:200000267; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev",nocase; classtype:attempted-recon; sid:200000268; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev",nocase; classtype:attempted-recon; sid:200000269; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev",nocase; classtype:attempted-recon; sid:200000270; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev",nocase; classtype:attempted-recon; sid:200000271; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev",nocase; classtype:attempted-recon; sid:200000272; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev",nocase; classtype:attempted-recon; sid:200000273; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev",nocase; classtype:attempted-recon; sid:200000274; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e42cb528b102447385e3145197916f51.r2.dev",nocase; classtype:attempted-recon; sid:200000275; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e4aff507450c478cbe3f77ad23d75035.r2.dev",nocase; classtype:attempted-recon; sid:200000276; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev",nocase; classtype:attempted-recon; sid:200000277; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev",nocase; classtype:attempted-recon; sid:200000278; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev",nocase; classtype:attempted-recon; sid:200000279; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgm.club",nocase; classtype:attempted-recon; sid:200000280; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puffagroibrouwoi-8818.vercel.app",nocase; classtype:attempted-recon; sid:200000281; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qasimk.com",nocase; classtype:attempted-recon; sid:200000282; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qfjfvseq.info",nocase; classtype:attempted-recon; sid:200000283; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quauwograssodda-3503.vercel.app",nocase; classtype:attempted-recon; sid:200000284; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qysgyp.com",nocase; classtype:attempted-recon; sid:200000285; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rajdipchatterjee.github.io",nocase; classtype:attempted-recon; sid:200000286; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rechazaroanularaqui51.weebly.com",nocase; classtype:attempted-recon; sid:200000287; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remote-fix.pages.dev",nocase; classtype:attempted-recon; sid:200000288; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renggard.47-243-192-240.cprapid.com",nocase; classtype:attempted-recon; sid:200000289; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resolvepanel.live",nocase; classtype:attempted-recon; sid:200000290; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resolving--issue--with-us1.vercel.app",nocase; classtype:attempted-recon; sid:200000291; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resqat.weebly.com",nocase; classtype:attempted-recon; sid:200000292; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-business-case.d2f7p3b7pucnle.amplifyapp.com",nocase; classtype:attempted-recon; sid:200000293; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rlpqwefi.pink",nocase; classtype:attempted-recon; sid:200000294; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rouloigeilleuja-9523.vercel.app",nocase; classtype:attempted-recon; sid:200000295; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rulemec.pages.dev",nocase; classtype:attempted-recon; sid:200000296; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rutinqqwin.shop",nocase; classtype:attempted-recon; sid:200000297; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rwftfu.quest",nocase; classtype:attempted-recon; sid:200000298; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.team-pw.cc",nocase; classtype:attempted-recon; sid:200000299; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sairanees.github.io",nocase; classtype:attempted-recon; sid:200000300; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanseipecas.com.br",nocase; classtype:attempted-recon; sid:200000301; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasklelo.weebly.com",nocase; classtype:attempted-recon; sid:200000302; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com",nocase; classtype:attempted-recon; sid:200000303; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelcustomerwebly.weebly.com",nocase; classtype:attempted-recon; sid:200000304; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelnetwebmailservermaintainance.weebly.com",nocase; classtype:attempted-recon; sid:200000305; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelrectify.weebly.com",nocase; classtype:attempted-recon; sid:200000306; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelscrutinize.weebly.com",nocase; classtype:attempted-recon; sid:200000307; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelservicecentterwebly.weebly.com",nocase; classtype:attempted-recon; sid:200000308; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sasktelsupportsystemwebly.weebly.com",nocase; classtype:attempted-recon; sid:200000309; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sbcglobal30.wixsite.com",nocase; classtype:attempted-recon; sid:200000310; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scan-vulnerability-guard-v3.pages.dev",nocase; classtype:attempted-recon; sid:200000311; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scan-vulnerability-guard.pages.dev",nocase; classtype:attempted-recon; sid:200000312; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanner-metamask-v1.pages.dev",nocase; classtype:attempted-recon; sid:200000313; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanner-metamask-v2.pages.dev",nocase; classtype:attempted-recon; sid:200000314; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanner-metamask-v3.pages.dev",nocase; classtype:attempted-recon; sid:200000315; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanner-metamask.pages.dev",nocase; classtype:attempted-recon; sid:200000316; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sec-sign-in.info",nocase; classtype:attempted-recon; sid:200000317; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure2-validitycheck.weebly.com",nocase; classtype:attempted-recon; sid:200000318; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securecapitec.theprimepoint.online",nocase; classtype:attempted-recon; sid:200000319; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securerpcfix.com",nocase; classtype:attempted-recon; sid:200000320; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seeteressecalywoi.github.io",nocase; classtype:attempted-recon; sid:200000321; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seivviice.weebly.com",nocase; classtype:attempted-recon; sid:200000322; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.0e7p.com",nocase; classtype:attempted-recon; sid:200000323; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.2rk3.com",nocase; classtype:attempted-recon; sid:200000324; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.8q3p.com",nocase; classtype:attempted-recon; sid:200000325; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.n6b8.com",nocase; classtype:attempted-recon; sid:200000326; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.v9vs.com",nocase; classtype:attempted-recon; sid:200000327; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sevvviicess.weebly.com",nocase; classtype:attempted-recon; sid:200000328; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shard.blue",nocase; classtype:attempted-recon; sid:200000329; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shard.skin",nocase; classtype:attempted-recon; sid:200000330; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-d7590.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000331; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-d7590.web.app",nocase; classtype:attempted-recon; sid:200000332; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-101329.weeblysite.com",nocase; classtype:attempted-recon; sid:200000333; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-101587.weeblysite.com",nocase; classtype:attempted-recon; sid:200000334; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-106427.weeblysite.com",nocase; classtype:attempted-recon; sid:200000335; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-107375.weeblysite.com",nocase; classtype:attempted-recon; sid:200000336; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solutionwebsitedapp.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000337; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solutionwebsitedapp.web.app",nocase; classtype:attempted-recon; sid:200000338; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solvetans.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000339; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solvetans.web.app",nocase; classtype:attempted-recon; sid:200000340; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sondfrom.dexlog.my.id",nocase; classtype:attempted-recon; sid:200000341; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soyokai.or.jp",nocase; classtype:attempted-recon; sid:200000342; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srdate.club",nocase; classtype:attempted-recon; sid:200000343; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssy.hmb.mybluehostin.me",nocase; classtype:attempted-recon; sid:200000344; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steam.poweredartsworkshop.com",nocase; classtype:attempted-recon; sid:200000345; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steam.workshopsreview.com",nocase; classtype:attempted-recon; sid:200000346; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommmuty.com",nocase; classtype:attempted-recon; sid:200000347; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommuunity.ru",nocase; classtype:attempted-recon; sid:200000348; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcomunutty.com",nocase; classtype:attempted-recon; sid:200000349; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamconmumity.com",nocase; classtype:attempted-recon; sid:200000350; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepsray.vercel.app",nocase; classtype:attempted-recon; sid:200000351; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-metahelpcenter-id100003498934.netlify.app",nocase; classtype:attempted-recon; sid:200000352; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sv5gardens655665.weeblysite.com",nocase; classtype:attempted-recon; sid:200000353; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"system-portalnu.duckdns.org",nocase; classtype:attempted-recon; sid:200000354; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talwgam.njmolada.com",nocase; classtype:attempted-recon; sid:200000355; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taste.baby",nocase; classtype:attempted-recon; sid:200000356; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tele.zhngain.top",nocase; classtype:attempted-recon; sid:200000357; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrambot-resolved.pages.dev",nocase; classtype:attempted-recon; sid:200000358; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrazm.net",nocase; classtype:attempted-recon; sid:200000359; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-100408.weeblysite.com",nocase; classtype:attempted-recon; sid:200000360; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-100469.weeblysite.com",nocase; classtype:attempted-recon; sid:200000361; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-103234.weeblysite.com",nocase; classtype:attempted-recon; sid:200000362; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiktok-888.vip",nocase; classtype:attempted-recon; sid:200000363; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiltckshow.top",nocase; classtype:attempted-recon; sid:200000364; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tnomwzrp.top",nocase; classtype:attempted-recon; sid:200000365; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toeken.im",nocase; classtype:attempted-recon; sid:200000366; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tonic.pink",nocase; classtype:attempted-recon; sid:200000367; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tooma.cellinsurance.co.zw",nocase; classtype:attempted-recon; sid:200000368; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tpdtepremu.xyz",nocase; classtype:attempted-recon; sid:200000369; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trattujeilesso-3354.vercel.app",nocase; classtype:attempted-recon; sid:200000370; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trbinace.com",nocase; classtype:attempted-recon; sid:200000371; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"treibrukeukonno-1395.vercel.app",nocase; classtype:attempted-recon; sid:200000372; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuesmad.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000373; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuesmad.web.app",nocase; classtype:attempted-recon; sid:200000374; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tyyyyyytyyy.weebly.com",nocase; classtype:attempted-recon; sid:200000375; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tzcsjfto.chat",nocase; classtype:attempted-recon; sid:200000376; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.updatetrackgre.top",nocase; classtype:attempted-recon; sid:200000377; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uc-whatstapp-web.com",nocase; classtype:attempted-recon; sid:200000378; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"udxcady.wixsite.com",nocase; classtype:attempted-recon; sid:200000379; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uklifejv.cyou",nocase; classtype:attempted-recon; sid:200000380; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatemail12.wixsite.com",nocase; classtype:attempted-recon; sid:200000381; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ups-trackdeliveryapps.chickenkiller.com",nocase; classtype:attempted-recon; sid:200000382; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usbest.cyou",nocase; classtype:attempted-recon; sid:200000383; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-transaction-overview.vercel.app",nocase; classtype:attempted-recon; sid:200000384; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackdck.top",nocase; classtype:attempted-recon; sid:200000385; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracklnv.top",nocase; classtype:attempted-recon; sid:200000386; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmcl.top",nocase; classtype:attempted-recon; sid:200000387; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmec.top",nocase; classtype:attempted-recon; sid:200000388; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracktpq.top",nocase; classtype:attempted-recon; sid:200000389; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackvmd.top",nocase; classtype:attempted-recon; sid:200000390; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsinfw.top",nocase; classtype:attempted-recon; sid:200000391; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uwdtsczi.top",nocase; classtype:attempted-recon; sid:200000392; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uwm-onedrive.com",nocase; classtype:attempted-recon; sid:200000393; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vaishnavi1436.github.io",nocase; classtype:attempted-recon; sid:200000394; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validatie-veiligauthenticatie.com",nocase; classtype:attempted-recon; sid:200000395; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbbu.ldgknhk.lol",nocase; classtype:attempted-recon; sid:200000396; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verified-this-request-badge.vercel.app",nocase; classtype:attempted-recon; sid:200000397; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vo4zzp.icu",nocase; classtype:attempted-recon; sid:200000398; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vs41.github.io",nocase; classtype:attempted-recon; sid:200000399; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walett-cont.gitbook.io",nocase; classtype:attempted-recon; sid:200000400; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletauthenticators.vercel.app",nocase; classtype:attempted-recon; sid:200000401; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletcomnecitt.gitbook.io",nocase; classtype:attempted-recon; sid:200000402; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnectdapps.online",nocase; classtype:attempted-recon; sid:200000403; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"watranfart-fdd6a8.ingress-bonde.ewp.live",nocase; classtype:attempted-recon; sid:200000404; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waxed.wiki",nocase; classtype:attempted-recon; sid:200000405; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmaillshavv.weebly.com",nocase; classtype:attempted-recon; sid:200000406; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weeeqweeattt.weebly.com",nocase; classtype:attempted-recon; sid:200000407; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weigh.skin",nocase; classtype:attempted-recon; sid:200000408; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weigh.wiki",nocase; classtype:attempted-recon; sid:200000409; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wgqdqvtn.baby",nocase; classtype:attempted-recon; sid:200000410; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wgqdqvtn.pink",nocase; classtype:attempted-recon; sid:200000411; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whatsapp-rqr.com",nocase; classtype:attempted-recon; sid:200000412; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wirelessvoicebtpaidmailinfoplay047.weebly.com",nocase; classtype:attempted-recon; sid:200000413; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wscs1231.cyou",nocase; classtype:attempted-recon; sid:200000414; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--metmasklogin-vcb.gitbook.io",nocase; classtype:attempted-recon; sid:200000415; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xojautruffeuttu-4659.vercel.app",nocase; classtype:attempted-recon; sid:200000416; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xraiz.info",nocase; classtype:attempted-recon; sid:200000417; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xraiz.vip",nocase; classtype:attempted-recon; sid:200000418; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xsuweamskeidjf.weebly.com",nocase; classtype:attempted-recon; sid:200000419; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xya46.cc",nocase; classtype:attempted-recon; sid:200000420; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoooooo-108560.weeblysite.com",nocase; classtype:attempted-recon; sid:200000421; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yavanica123.github.io",nocase; classtype:attempted-recon; sid:200000422; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yi5lq-syaaa-aaaag-acfsq-cai.icp0.io",nocase; classtype:attempted-recon; sid:200000423; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"you-can-receive-here.vercel.app",nocase; classtype:attempted-recon; sid:200000424; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeiitgeist.angelocachero.info",nocase; classtype:attempted-recon; sid:200000425; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zenixoikitti-5809.vercel.app",nocase; classtype:attempted-recon; sid:200000426; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeznjx.shop",nocase; classtype:attempted-recon; sid:200000427; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zwzcn.com",nocase; classtype:attempted-recon; sid:200000428; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alturl.com",nocase; http_uri; content:"/hpqhv",nocase; classtype:attempted-recon; sid:200000429; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ardilu.com",nocase; http_uri; content:"/descargar/kmsauto-net",nocase; classtype:attempted-recon; sid:200000430; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"did.li",nocase; http_uri; content:"/parcels",nocase; classtype:attempted-recon; sid:200000431; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/servicesatttttmail",nocase; classtype:attempted-recon; sid:200000432; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hdfcsky.com",nocase; http_uri; content:"/sky/indian-stock/dashboard",nocase; classtype:attempted-recon; sid:200000433; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hdfcsky.com",nocase; http_uri; content:"/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!",nocase; classtype:attempted-recon; sid:200000434; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/djgj07/",nocase; classtype:attempted-recon; sid:200000435; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pay.zing.vn",nocase; http_uri; content:"/pubgm/",nocase; classtype:attempted-recon; sid:200000436; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rb.gy",nocase; http_uri; content:"/go4bnv/",nocase; classtype:attempted-recon; sid:200000437; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/18ab5a",nocase; classtype:attempted-recon; sid:200000438; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/4ff03b",nocase; classtype:attempted-recon; sid:200000439; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/8wtcv4z",nocase; classtype:attempted-recon; sid:200000440; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/96a02f",nocase; classtype:attempted-recon; sid:200000441; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/c0d1afz",nocase; classtype:attempted-recon; sid:200000442; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/d2f265",nocase; classtype:attempted-recon; sid:200000443; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/eacc63",nocase; classtype:attempted-recon; sid:200000444; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/f9decb",nocase; classtype:attempted-recon; sid:200000445; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/mzhpkzf",nocase; classtype:attempted-recon; sid:200000446; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/nbyh9vh",nocase; classtype:attempted-recon; sid:200000447; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/sa2uoq0",nocase; classtype:attempted-recon; sid:200000448; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/tcthi8d",nocase; classtype:attempted-recon; sid:200000449; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/tnab363c6",nocase; classtype:attempted-recon; sid:200000450; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/wx1eo7w",nocase; classtype:attempted-recon; sid:200000451; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/tvybxr",nocase; classtype:attempted-recon; sid:200000452; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/carrefour-926/",nocase; classtype:attempted-recon; sid:200000453; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/t8vi",nocase; classtype:attempted-recon; sid:200000454; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/t9ka",nocase; classtype:attempted-recon; sid:200000455; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/talr",nocase; classtype:attempted-recon; sid:200000456; rev:1;) diff --git a/phishing-filter-snort3.rules.br b/phishing-filter-snort3.rules.br new file mode 100644 index 0000000000000000000000000000000000000000..8a38f0ec5ef87cd727eabc315e634f8f696d0978 GIT binary patch literal 7345 zcmV;i98Tkb3J;7Zs%k$3KqF=0{QVA_R{!_8ocu!m(x61>{UN79Dxi!4RsiFdmR45l z5ubprM1T^Xlh|3u_rdf3OHH~VEHo@(3t-r?g*IEG1bXTE{~0N+IY+iqCVjWdsoK=~ zf2xEcrCO<0>L~S3s%9gn7StN*gv~IE?XZZ2;GBnYF8nZnv9LhNP^0Bq|DHbu8)M1{ zNcAU=xy7yZ_4xaZ%0_X0bS(Ka{}fZM>hX`wW5N3ECy#$QEf28qCJ#7Z#jnR!>#-m1w^H>m zUw@Yi;4jF?e#Pqd<2MTb-YMUH@<^#nU%>oNBIo39KY45nQTcjY4fIzF##p{>M<^Dxdr2D?|S#-{$etKmWVG`IGUZL;~y?P+-+vR;_E3MTPpPj z=Wc6#{a6SgRBznY#pb2___t!RQ1A!G!@A?r{MYgAUC^-WOutFbb`VRlVsZ zJ#cI9K#W#?@_y&1=rxg}k`u+CPd8~MI>p2|G9eW|JeHjw?#x<-F{=MZX*x5g-b50` zq<)9l)_lTjt?`EFbUtgb6rNi=mhVN^$WIR9KCM1-qnXUCT~UurbOX1?92w1D2_QoC zo&r?*WOi4VFD;q`B6VhJv9e5a5<0`fea1}{Mwzx$_z7X=a%dlnycNE$j~rUNE1h`i z6tNc1C|i#?DXp6Wt)KvQqBn7dcv1(PDeF`pGh>n`RLD$up|c&QVOf z@@s}an*AaXI+3CcT^+hE*XAfa`%q2xwUp9>Z*-^a z`OK~s&r$~8BU&hmcv;spZx)DDuHDTb@urpYtW{;> zt6dnQ-2KcHIb}mACOJN9(}^)YykWY}pC6WcMuHdy?|tY`nUA}{X4X&Hq+H(%?Jyfc z^+xI!8C6`Dv%HPeoQ|b%SJ@H_`^MxmhS5Rk3`E4P6jyFrJ&D`J3B%}eGnBLC#@cIl zjNMTG>(q%F*W^ zj;o>ptF_G#qt{|>?bFunC|Sl5h}U!o9`1%|9DT+jYUKOI238YQVVpX4E%k6 z-uy9iwhT2N*pcd%3RAPxc8Vr{3_?-P*lRn7Aj3=$cVRM#{urcnI|`C>)Te&gFMeXa zg_2qs-J5|su`cAy1dT4)ID{icryh(aF#Z^n=`$5da0Y|pcu7>j%HrKp(IbPlZ}yEu zuvO9Ei@``iCH@(_W2HZa-n_%1-G$MM6GurH{r1W*SfptkwsQWy7)AwyJv|8-co#Km z49KJvKYWT4Z;YL0o;`&6RPlNVp4%(On6F64a~za1=3q$e@Ib+*Z4K*|ky>Nx@Z*h9 zNu|qY&Onu)dzm!|Lo5DRK=d6{F-9riR-z=MRN+wLld-p|Y3iP2&?Xx=M%7{kTgxCS zY$TOj(shC_lySbdaW>?&aWYc1FEAZ@-k3T$o-vi|Bgq?+(B)bVVRa|Rql#u24&eS`ibe$%`ho3fSy^`F_p{f1_~%%8=_N4Yp&k>x1Q%<*R16@&xPB>KVTz=(9+2fwC?kea)caf7*g@a z>lL;VRt^E<(u6xS459&*LnwK~?Wz8nI(nM#b$6xzDxyE(*1 z*)SV-a*#H)>w?!)+Vtnv<}Kxpqi4aVWxU8nm*&760=gM`)993xs(`{9LMVB790vxS^(rgij9a z<`ov7v=oB-`7s?u7)F&iBQ*jnWk_1D*5nf4teUdm9;LLGF6|Ji;pJc~2a2&d z=GV$kiXIH5_r*-fVZeZS#}9GJhS^UHt&^~_cJsRc93)O<;B_XFCH83B zQv9Omr7~GNBdmO`P%F-;7D&lK<1AupZbweGZ8{IU{qEqVh+Y1rRv3wzhX+^y<_) z@6LHR1U55u+eQwF@J@`cVzyCjAtZ_soA*e}jHBHAFeX(};Qvpc==y;}ur))|CRFL( zzz7|$Rp$vi0Y+*mK+$(^gUt4=b(nE07j0FE<6|a+|Vd`<US8&!G=sRong$$_-2?5#2|7|l`RMI>QpUFJQ1 z>g_DYzMD0N!f2p}8RDzqkxK1Kd6j27sA6V=xiTMN6us`?(cPjVNlPDOO6Ugba_}ra zgQpmG7lG|7R(`$TpF@-Bu}N?Us%8A%!$w^z<@g9pG2O6D4y5I!d|DQ0A>>q(Rgr0- z&7&NMOYJ&)j(Ku#pOk$F(kT7RMQ_(p#R;+NCoAGi={4DjC1B{uy0UXZv95P>SvW7z{ z39p0jeSZr1<=|m{2LY}WbH@?{DAa62mJYarjfm_;5MyW)=H9<@fHF@AaEI)2OTpCSR8lnPk7{{)VL{aVP`o6D^sQFYlX723%tk5DsB|Z!SuTv z1k75%T5DhWTy4&|$|7E@lV~0}aG2M_N(-DG4#~#UV^JM8B`sC;hLxH!tXRO#A+eZw z6==r;YQ3K!wdatZ!9Y+mJCK7ix0^?`4xf)hA~H`2Dc&p zgk>rdw}siy=qZ-jNy-0}t=$a6XeROGQnQxiS;U%2?-I;C#%pu{KeII84dOcrsU=GR6%&Ca) z6mGEBnGneFUW-d*mBQa7QD?;=shK+>*^S3wu|SE48boD^(hBNP?#0hw9C~9E{`uW&ZCt^yeIHjyZ48L#WTY!)gx1XDTDYUTfjN zn9Ro>hA5xncYGa>__=-@h$Sj=Ffvblbgm6mct&XaMGjPE{iFMN|GfBuH){)rX~0*; z^^ExXstVD@N9PT1AS(7p|NQ);v2q~gG69e4=hyr1@&*i2X^sdtbBv**1nV@NXv@L0 ztUT@zg1kC=^`Ab_hUH!5U|hb-sI4Oyl&&w=rgVp1> z*^AD9{M>&&{{3S_+GSsIp!CVF({On{uD8+&3{rV1xlhUa2UFZm)r=f~%fIR$uXO-m zcWg{mVn~kmEuDK?XUvexiMFDc-c{9j%;w$6*IV+t)_X0GT=z$;-(_xxDyReW}@P;z(U1M*Ta55#KxJHyMxoI*> z4Mv!@c4R4Fn~%zU)F(1Dve+OaSKx4DGYnms$S#4?=GXxR^a)`?H3zCTciR%e*!0*F zM&!Qpi{RUgx2h^UqPB<)msd(xG{&Tw9j7QHbv!9PvXF?4xxgs|rEHn7?Q>AC2;Y4U z+q%?*eJ=}S|z}sYbdjZ3q@)Q zZ;r8fz;=Kzl~U6^cn^zCQW%&BgDO-c ztXht6DlaK2qnV+W&t-;czJ<~|0*dJEFj2;k0mE4)=~C%L)hKanDWFV^HssAy9mTn?(p=lqvXSYWU;}e6~0Z=iTg00lRiAdu__P^USobw|5&QxC(d{t{S8qnc@w) zOP5ewZ)XJ^=3J^gHfTs#(nRo_gefAQ=+MT6#lp>X420p68f-!XwGtzI1{Bb!GHXIW zVsvrYTFJ9V5UyQ4G=zdWka;8mw`>T*2R+h?I3dv;)dC6W3pKgyu9nbZK=rjG33$!& zgN&7c!n!nLE*z|~=HfoB%ch!T6tP?nLbmaA#2Mj@5TAQ8z_Wsge0 z<>5(IKs{t)D?pA4OW9sVgrfS?TTyuolI6mpy!PCN;n|{Y@XQ%dR0rI;b3`Z^vUL4C`5H<{Hp7t-%PK5 z`ux>ICOH_fh3f2lkNPSo*S`&}<+vYw_Sf56oONM6 z(3M)x91mnSY8=Rn-T&<8{o{9cY%t$_Uk+ewV3E4Sxnq%7({>zxu0QX`>q+{MgB{ze zv!CBF*IcX>+8oyzkbExf>|gzK(a|XUmrY#0qsFdj_-9iw@UH#x+wCprP#q3wBNPVrSU1* zn>B`FR6iG95du4|Iec?SChSb<5#F7MSTg7wiUhkxfmo0Zv;f^S?6a9e(O*+kpzI!f z$}{|%s7~6np)T7sAJ6H{Ew45#aoqvlWqm$)VpQWkz1#=EcSp|v^Et(5sl(>wx(h`X~24fl?+jR=-xRf@P-F>jk6NacJjIYrM9SLm_Dce$Ap}>$!0!syFA^ z{4tGXG%&nnncoO4uNxkj0^Uy97RE@&p^&wKiBUdmrI_jXk^@e=Eu0%GW-KKn2>g8| zD)*6tNjvq`z4IhG-IN1N8%}&+^*bC6dtj8dyv)0T(dxkXQgH)gwB=(zk1)Nq{5hS4 zW6<20pjn#~9ftzXR?2n?sKAnDO<|eT+OiKw1M5mA z&6i=68n+Ckm-{w_5L!J`mxIJwwrI9_Xfy0RfI|USOD1)r#a3eoX3~b(hCo3MeCkx_ z(NQwo&CWR#CN*q`qw8XKZRig_Wv7r6n^U*ON$IK5a41-6R8G^aDybMtZ%jYdRSpG6 z4cbzLu4*$nHtw3;T`Yb?ITR3e-LK%U6#|dXkUThuEDmGTREU?)FyE$N^vY`V$Uj?L zf#MjnITXEA8Kk@}?V3|%ofB=f{gMM%8k*PYPw;2Rp^&7i-RNS?6YFTIUg{1G1tGnL zbyk;MghOFRuXfi~B}ZJvp+KVNWPkdZupGe3K5v(+#eOKr!K%#qb_JFqx=d%@P7V@fKAk{ii*S`R?Z zA)=)kZ8XxfL*h*BSJi|9I^oce%E|?W4{x|Yu559xhmqgvc3EE7oT5XH*Fl%((6q|f zFL&v~)8ruwWXozIl8q+O;I5aF$*YBx^vCgl|q0x|~wZqjo>$UGCt8&003)MS4q1D`$1zW9+>E28y z7;+FIV}EC$4;zw0D=@`y!)Fc+fgED*(k_Hhb|m*)5;}@WF~4uny?+l5&3x2LajbqM zl8J6K{n{vUXzpVU-EcxA3qsBsi$lL(=_cb}tlV>X-?~-?b}26ot?hSe3=dvfXwFV; zm>)Pa9CED>64e!{RK6z8Q%~{R4RbnB$$^R-Y9EaBPP9|4#LU=bBrv2L|KKM+-)^@F6+HTx?EbG6bbk?Csauwr(`KN7_mKS|iM=SGIrkt?4vb zueZQ7T#_JCZ(sK1e~#Akp5OUF4mj$=uN3dH?DCQht}dHoe-0}LH1+vt*?;(wzgD%5 XCq2o5P&Hub*iJjJ8nqbwo_eGnRrGEx literal 0 HcmV?d00001 diff --git a/phishing-filter-snort3.rules.gz b/phishing-filter-snort3.rules.gz new file mode 100644 index 0000000000000000000000000000000000000000..fd2579342e032971d3d9a56adc84da99b3fd150b GIT binary patch literal 7859 zcmV;k9!%jMiwFP!000021Js>eZ{)a@hVS=R7&Ey@fJh@!-)>-m1$Ka3%qEM;1X%1% zK#@l(x+qens4C09ehXItEU zK?Z-ruPG#~phO~3zpVKRa`Um_e72w)cs*(C!PO-p)MYd$%wjF5}%9c;d>`E@$X zRgvNf`UbOa-ro3|! zTXO}sqez^T*q8@xvPIh$F$-(2KP-#cGwbeIaPeLN)kHQ3HNlA!Uvs^tnuDV6lbdIVl=uvg7&)3&Yc*x@=4kIyQNZQIc{!;Yq*}~$)$c&q`ExY0@ zS4okp=4V4;SrOw}!QZq5tc{%2^;x=_8l9djHntc-nx;QXM@xhRL_n~jZBAFpmLgcw z72R1dV!|UT#LotYYX32f8aAa}5?lZOgiX7nXjMTF&ELF=GkEFZz9ObVEZifRIfFz@ ze(V=~Xnb&9pTVM~KJHl%+liroij?Ts!UdoFIx+cex^mst1y;SS+1Km+hSQZ*P3$vR zcPrQQ5s|8)#p66IW{<(rDLAu0s3IjsZVs#4#Tk{&!eUwZkihk zsxDZUQWiBOaWRN-A3zH`x5k*cxpBYjo4C}|`+DJgdK>js47G;x4RkYdTiR*7t#382 za=nZgIpRc%(e`@yV_>8{2JEu4yR%a+w{X+B91qVO)tnU2dfWV#Ig4cj*)Gn^J=c`f z2-a3-N3C>v*Hu@fctTrRn-ocES{z-8NnsL5Lk^^_l0YbFhhg-vK4$)5h5CSXP`*w3ynpDLN+dv8dI1+%Wa!rML3cp6d~!HZ3L;l;WI*f4ufnVfnl#EJ|xgiHc1dg>P06r?%E@6^k14wam9Q1F?n- z`_X*B5Q%Z}9R{9MkfhYb*HzWAC(ah{7QCT7>-x4TdEc}#`Wrp&Ns)z;;*dfw&WrqQ zKfL0#El6>gIa^%7m$P!tEO&q#U@Pn>t1a7&bM65ODs(+%#`5LmZY%5q`k?I1(`89%j|w)m10}bVtWhj z3iiY#LrY1e$cqU1Z?>tjZAhVk#9&gfqR*w#^6+SG+ft)h;Rg1E>TfBD5UKHhkcr&+ z!#ma5o)*YrTuOO#q%_7$+#OWr;m&fu9Y!IgDPFp^EbCMhQX;|#J?|)wAY44$g;yuK zo{p4Gh%tE(I^-XD*I^h^!oaSAHA$OOJ5qYU$t%ya3*tmK(>271$}=!6F_`uY3@HJC zPlOC{{2}Y2ONlC2K57qf;ZkBI)b-Q>xRL1K4Xf=6C1EJgz}~ zi1fqhM&FV81coh0Vb3azzNZM4rYcxbkb*Hfj*{n}cbt!LN4SR^hGE5`%HPFdK1Pb~ zmaoBsnDg0rD|}LkQ4$@>-e2cS(&#E9WyGnxTh>|lATL7O-AQrr zI1kEzIx)-6NZE3N8HC3!bcrQogHU$KqrJ*eC{hlcV1n1d*~wuZ4=J077%9We$0$TT zPeUH}d)bh%&6km~+ywjL=53lzYHmi#aPu2fqUI*$vI*WhUsiQJr)iuC*d17#akuu(d9d>nrQ#_<3#2&&1dOP7q#7G%%jzYrV+%*$7 zy`&{bq%1c_F+;u_-xA44xonPj$8d4_eH*;U+NN(#NLEt5nn)I65_>X#C1tHSzO19j zYJra|eo@)$Xz;ldI@fY364VhXw@rkJRzvJe&?9BJIT}}S#`4cIeiDj@l58055bZQR zEGa)-)`R;z4j?$sa;1?}7$-s4b-{?grgX%lY&b`|1(g&IjpxumHTSPwj8c(62*P)hS&F<7kas;Pbe}{&YPnL$Ue^6z?*&e_GZxq zyZCCZccMs1nQ{Ij=nO%8(*6dVloZNTG)>dBMRO);A?3_DNom#aI^`(w4}(w=A`{j= zr(nka{1x7H{^783n5iPg6tc&f`C0gDj2zj1sv98X!WrTIS%CcNJL>EiQc8Lx3M?z8 zeDK(vXF8+|Mv-#jocy+UhZ@r91#{4*>dP}_MM<1o>U`+ICdKuh7Dw!cqlI45oB}DQ z&5N8a`Xy!Bl$5h3Msg36*hSc)eSUSK&5*L!yuiyG-rhn!ZHG6iFj9`17cgK4gGur! zg-6O(Gw$8ZzaFr*EsOKv!+R)+tR_X~A^SKYC2FIG4*=erhWnY8MM*harr~-)w zGV^lL3bZ~o;X}$V^PFQQ*aM-_j!kDL2fk2QaSa&-6s3JTMVxHgZea8$rtQ@``T_`i1ebt<&QjDLc#S z7AFEH;|5_^QUOuY3D>vbJ?u*656kz%D3tVp5reR=8!Y&8+(!AbEqDo^35#8B&@yQ; zCMgF?14_Zo1@{hF$*MDp)k%3-8g1=WS&>~Q2>Jc(?fua$4cq(sVJ=GY!5DGTN!uz( z`B{EoBrIwpWoK#JIErnaqe=~sRjjH{v>#ITmXBkzvyW5UIX|_3fRxwe2UlF>8=Ys& zVbx8_-tq(H^Q@YcZ0eLwiImgjC)Wp1Hf!}^X%bK0Ok%6av8@vGi+H?w$;y*Q zk}y(Mm=CQVE7IB}Y1;}2tuolUD`p#ccCYiI?N1;9Tzh|N!DTB;e4gO}vJ#FBH zlr!cGYdo}D!{S|8dSNFxVL8i4`DDh3KCjp8E{uVYJtl3Uk3+&JCMowzAdAWtCcy*HL0VidY8S#RC z7ePCl-Lx~0XD6B%DdFLwm)x{EgE28A3q(%JMRUHd8m`KYFJ5iqi33(SDJRYOZGN-! zTaJI;cY*2UVH!%B!#<=V zG&)ME!OcRgm+|=Nd7P9_=I8Vq-nU*u9*-9|jMLJ?K@~nbgc=f#&g7(QGTj39s!@Nt z9H9=Q^rTQ?0NAV!`>(bvYY<^uPsDLj_L*+;v17^~w`uWhnG%l!2JX&Z!6&5^q+B%J z-EH>`za~u>a8mA>OWD-dF{L9SWs-|OWc6GnmVbz?Jb>_o>;bX^IHb=*! zBnd&vKXVZ`VY3AzgvmHhA59_UkGX)xIgDI&XDVxj%V0CjI&w)S8(UIb?QfM!P zwJJ`AilmJjoRkOV0wL@vPOO}i!{wr9d%2~JHITBfTpX$b4gYJS@gr=1HR? z3ufOx{2@>KUUE{tmyg7kM8 zvJ%jbHOO)7K#E4xx#vlo9W~Cj?W&@IY6Mx8ebvWZ93^8+vaVICPvz{XarQ%3R%OMZ zRaH|D{a6%3Su8@ax!Y1*czFV zBXmPojcwDn1&F4>qV0ujRdRW9a-1+iUvhzjRn=j|?ONFnqN~|Z%c@A_EQxWJqH0v% zvudpRs%Sf`vQ6B6%SvcP(Ko4_6*0~VBarGa>8u&voM^g!D65u(;Ia{Yom`$ZG0vtC zwGtp3Hi)Viv1gHet-1#4p<|Uw=4_~Oc3h}(Xlm7Cgl(IlXV_3{A)u6XqpDO+YI>+a z*~15cBB&WFsbpV@b{rViM9sjF^+wWuXSyi%1KQR zwPP*EvZ<WZ=}`<7Lr$I6C{wH>6y;;030x~3RY zIjQNPjx`KLp5Sc@6`(4rQ8SDsf>xYYklH?LPL8vWE2`?Y!+x{lL$72F*wLUsDpdo? zP0bD z1shYx6KZODsAo+n`c}0?l(s|F_gIMkQ{B02If^4;_*rH#vx5R8Zi_xMZ_-ETf@On* zB>`za{ez-BVgOkLSxehN;!SujSt=(sJ;b5q>Y@Pk0|B>gNZ;_D5Fue?fc8!2#HNQh=|T9l zeJMIYWg!O;wY*lehWxB7lIIhe79HnM_KmE20_~|J?ImHQ5{f~>Qj;Nh{Os^?_FW+D4~Ytr zF$yV}0QuMPmeH;zaGiozjP*@2CpJAK8qt)j1S%=0=s@k!MivYb79~IrrpDVAn;sHf z&p;DUS*wz&3Z8TV#!~?Adl*KOIkD*>N%~qzA#2tO(D7|Q3^gYu1^w5@0Vb6bn;w$1 z;zM0^kf&6Xwxp{iP}XG+Lu#Yy)OpReM#ssNs*9G^1*dJt2T4@hGEouH)&)t9L)i3? zD&hiQ(R0$hCZ`#s*d;Fn>)@vCljnz8YUB&t+iD<)9*R$IW z9jAhng+a$GC2d8?x*7%+S+&qj2`^IfvKE;h8t0r(>u?mK!zFi=VxzNqaCY6T&bqEV zvpE)(ne3f;J>OC`FQf8~y{oI*yu7E_FIT9HWA7`2n{0G&;Z_Ki5g5hJ+-#VH$^GHS z$C7ljVbUFrU4>ranHl(~t32VxgvuWlF7Lvg%vomEi8*#(b$!CwtwQAz>*O4Lz?J?; z-)xP_AJ$1Tj?9UiwpkU+sPz^6JX1ogLgg3hq_@*1Uxyl!j_#u}i+$6)&TDAzSD9ry z#Efk9XIwr|`Njg_orM$O0+n~{yBPYPC%qy_E-KY7WN4R_n@Q$uUM8&`Y3_*?DtlQs zE%#k2oiExPKKG8wI~FARWc4WZG|BbKvc9g)$R|`LvTmK^EP46>hRR3QtwEdneb*-U z7kj*AP^pVu1-0h)Rr*ei#IkeDLu!xRKCLQpGtz3V^na(#_FK~8*h%XMaY@*|&>*{tSryj~~2IcJn{VUCp# zPB0UM%&QM}mTrGRonWK**o+MD?pK3K2Py&{nE>C+aCru`#)k@589>dRp=$6^dH#|a z`gy9kT7+QlQ~%L3DEuG#UWbryeOapchllGv4Twsc4E$YCl$@!;L{NFkdd^I?tq?IC zd)LCr#+5mdZ6rBgA*ifo{}`Z5?5tE(3 zLZwP1&%7Q@rcKI9B|&9J`}VG>vW-nzKsfx-<2h+O>(Ie*7K=*rJY3}B^eh((`aggB z@E*qN(c!s;#|5#3wnAl0>m|I{Ne@tLdhAxG&-tM8qxDj6o7SgNO;o0|?<6`eWV z5PU3^yOAUoijSqcleBiJ@v)d@=#p3(d@NhP`6L!xYGHc^Gw;uYGgKPk64SqEDtQ>A zM~C5W`e>Chg34z$V!&03w(g6Qr40!x-`T%_rByT}sGMd2XwS-`gl=%IBn(02Gy5H@ z?%K0h6dzVYtJ7FDKCG6s^;s-blEF@E^rruOuZRKgY%pw*^QFeb4j0!Z12g_~YxO9p z659xsPpr2_C}-zf$d9;=pHgCgpmK!u_F->K=ho%d<86aVQ#iq5_&$Evh@kRx_5P7x z=HUmkdTox|)e}_ytv>E4%NM&#(6P(~9}7msJ%1_j4V7c-o9sJ|fA1PjqH3^F0mMA7 zAt_5o<-+<0&HAd&cD!-`L1ni39cMLbNNk-RAC8&VS*PKkvQ7mY2m|bqzU7>tvPk{h zg!5X5y~t_#tWl;#`FSgKJ)yA*Ry+xjM2kv9Y;`6RoAR4T#B zn>4vT-bql21Zy-;Idn`=8F>b4XAqupnzZq&dz}vAHh=DisZc3{ML;&|rt`ua>Gp%MeD z^fMD@*Y;4kX?|x)T-ihAm>C|gulVD{<}_61nBmF&RRx<;+nu1Yzg+WmiHmy>#QAM> zGDW+g^0{1jwnL-%0No~w-6!QAr6vOHV=|kELNKkP|7aPlX z#^b)N%x>}Iy4+7lJ5-*Qt6yH5^FQxMeoGmiP}y7lm1r_s5>bPeXy#KAQHz%-9#Kpn z>d+E}<(@>;qb1sAkwS#Z#WE6Uqmrh9QJGb)y9k~?brJ|FnXu29HBvaxK`ELCl?&y@ z;LV0@x}>B@Kf{a4kMeamo&_zlP3lRHYz-Iqh34_^l3EOtRM>`L%_lM5%;lC(b~+4$ zNhN?F)$j|E1^5)W*q57QHZU>D6JiyWPvvIm^SR`jA5JPzxm0eRmM7u^CXuki6@-w* z=aFcz_I4bJqOz(4Bw+d>&{^lxI}k#ux%vQ;Z&1V2(b)c1@W3rNisR1s0=E1 z7AGDQb0JegG_1?vlcG;ZHdrHMF83wHS)QVDs@&O!6#1@i`Y;A2CGlyqIr$6Qw)8a^ zipqo%FytNnfC~<1m|9d!dc35#1yEEblW&ZqZi7lbjCXP0f=SsgOi>v~{y~zk8;GJZ zihQl@#ic!WPg#ecsB9s3?PT0E^RluY!oswOaXOmUEfaebv^^2nP}xN8p8K*QWy+ch zMP&>5VX}B&C;BE%cGM=@_;5n0qB4g3uvf?|+^UpZLs&D~)cuL%0+l=DhhzGg;tNSp z`9i)ij&FLVs0<)K{JKjv`_sl;SV;Ow2F=Jf$d&Zg0HD8JpK1{j+)It`m!QnEc z-eh)>?!?&XXH~p z&GjRtq!vZx7x~ddRl)@Dx~Mk zjm&+!%^sw@&5oZtrKpT2g%>@>Tg?(+%HV3+WFT3mtr$t%#4~ zZ7|zGPx9MH;*gJTAU#-Fg39UE$P z7`6L?s8p$f42MzsFNoUhfp7HasbNZsFUZu zm3%=|$vAJwVO07BQB^M_KOBQmxsLuS>ioPcx99P|)O zVb-rGnF0?N-5pM$=~vWD!LWfegf~ZN>#wMq_K#B9c0bID%O2HDKb`vv+hh1}hdFVX znVH8g&0}-soK$voSzk4W^H)@cslfZpmHSECcH7|%gsALOe~q%g9Zt|ud8+;zC7X`- R(jT<_>GaZPPadHFId`2qiOY$HFv{c0 zXSqK-{QU8gbI#?Y!)gO#e*XINKdzFmN56hnRN~H8z>Xfp%l`UvI}_%0VI?QNq?{MZ zFa~;t1lLkXv|ltaz}8pn$h!Cs|@x2; zNskTNlOFXEfl7L2p_w*v(wR>YIN$3D&ST!@J+?-h(Z}dkzoMb-qgz?FOtm5c$AxMp zoEhqm3y%ktq3)J;=;_lU2Sek?=ueiBJ85$GVw&#vnKvhq*=)2o&lU>fgPD#-pUds@ zJ)PJG88UL$>=4$5XfK3twdz*dQ-Yv2Yd$I$CmuHn$MHN=wy@AGEYG|?=~lMesb#~Z zmaRNt%L(bRk=b&gxZsMq@%d0YJ$gEP=p4}?Mbc=%lf?JmUE0Wz@&k6rBmiU}2izMz z)%0z@o0vu~bTkFJJI4mS)O2YIW9f;ePQXDtcY6lq4rwF4i-U(-%89@PSTqLPf zif=RE*O0a0>h9T@TRIEU^cLssnUsAB)-Y=dBBphI%b7j9t3|b%MY86Xa3;9c)E<(S zOi~V2Pm_hr_GKrWF*6B5p-wZKfm$uKlMd!`O}G9ZeS}nKxs}RIQ_mV^G=L4U$#_w+ zaU+q1_qwiYN+}7U-{QMShtcKg!RETHPnu>^soCP!Pq#E0!Gxa@H~QM{?As{dfYD3E zW4q()dkM&>5G+Ye`E?7zsA40&m!7$)rW>kX9i40f|}cNQXN*tUILKuvaYO z?z!CU`WswYJ^&KYU91CFVN#U(31@NLKazN;yJAJo>CnR+#(1;Ib6aadL7(i6d9K3n z6)LpRaS)*lYX)el%8?6-&4O8$`S639{{=u6|p`=!mHZ<@h zrl2j1bcsP>KT7)W4Nm1S9=e2l;1M{E6Klgx@(snU`&(8HH;5+5zvWaAC4}LtTr18j zmAwOD7pewuEwo%U#z7?DrVs|PN5@w3svnYogh<*iPV0DO>oFTCHR`Pm((X*L#lBWl zm%yvuRM$>ANS*c_Ajl)i4frJJB5fr01WBbsRSvTFr#x9`pv@h8?{h0MOW@Z6<20s< z%nYp7{F(%5&WckihANg;x6Ge6>b@`Gq&itBs7ci=y6x7Aj~iz+{GBZWns+#d^*wz7 zD#+mdgX?rSILfK@NCk)e??WMDj1!q=?}-BGiQ|(cY7P#pxQ%=f6b9z zrN#^3BN|j&&K$AnM)#19?imrNBU-8dE^n%ayr7zbxkAyoMtz|lptpHa{X&lDUTTI~ znwawS+Sid8sagtc&e;44DR=N~Xphp>`h-#>#>;vbo145o^i&q(wM7RvQQ8%nsH7T; zQ_)*=oorHXxXzd~qS>n$HViYy_rc9U^@T2ttO@y`Vtf=LS=4LlB`;;v9hvu{=WXe} zI4XZ|CwEbr@TDH+K9;3@oDqRaLTCA-q|(#54!4#nfI0=AQ4x_njTNX=+WiwkcE~*9 zjdxfPKYP6oOhZqiu!D$+z?qIlo|yhnB9LN04{R(Mb2? z3$SaS-RpA;mX2$(L)Ip9qJzDOK~GQPw89OG)=Q%Q)8bi zi}yLW*Fw*f?XSd|O28d=tWW$TDzOH6J&2v~SjixX_Pm4SuHHoKnw3rMa{oxlk5%d_ z9do)^EPqJq0}~OB)wiOr zxWEm4sOH+IwsWT7WAE>Gr^{f3XW)t(X19&pTOE>*JxUEhwvFQ`wd+J6Q94wSsFYJ1 zA>^def)Q_T__w&HvV8*AH3duw(kK#>Vqs!79B zN;04!Q_xyW6L@Qdg%0!%y?=){6WF^R8RPnD)GS<>Oxw{O!%4f){Vp+&N@})U`xFF@ z7n*XQuF`m_5tR_Jlc`m82P>#6JEpThg?*U@xwk&0f@5Af&WS2XxYUG8LpWy&z*&;& z-q{l~y;4Rz!i`5Xv$Uzi^XdFBYM%b2DP3v5_H-rwNeUmZ;KN8`JO6+lF+4U#rafW1 zAtyUYmcW?z#CJ(c9kGlM${^aZ4suL-Zv06?<2lic;|OU(RkhA@ODP9i5wtyai z$)1AfoUD-0Xi0B8G$ZnoO9kRxP37G)tb4hVjD-f8@tl;wF&=*Xc7xRJ3HIbn3Fo%l z*9&Wu(9kEe$`Almo8a zXGHQ!kTW!_(zX3N+ySO4xuiEqdvNvK;@$CAJ35!zQxhJwNa+X+Ppyt>YP+{5xjco` zoeb7V{tNTm?$~>mZQf&q5IV_tk!MI1h3lXQrLQ2I@sZ=bH92Y0dZ~^Vzy_@34e*g8 zd3Zne8a#Z8OB?PfKy%}!SuQS%L~wc`j3q5u=_PMT<@$kbN&;FUM_!l6diex7Q`x?Q z+bz22?Idn#Wg{7Tqm_SGOZW^qK57`z0Bex!@BN+kH{IX#a|7Lnf`#kEfCvntg?c%5 z90p*LvI9u3$4e_P<1)U>euKZxo!I2qi3dmLIG;0Y<>XfxF602U$&FK+FP)~cP3wY4 znrQcWbR63&H)V&=)@X^MrXyWwEwxTndZEy(>p&|U0?nBak?YG$d8WPOLXTQd(++&w z$f@6=c;;G%K3e@WWz@>AsR`em9)w-Zmi^- zdp?^GEPO}nW~rnSXo8xwvym|;HE<_|1~zl}EWtxi!B5&wTzQ0{CsApb0xBhyW&$3F z8u@q_adxwcX0nDMOp}_l1#bd}i4G%LDPXcjsaZQa8*d%Vnmg?kgC8V8O~G2OqOyva z8Ky9a)e^@g8en!xQ=d`-!z{$CxljtG**d9=KoEWctIPU<69XLp{lp!>FpSbFZ*`a_ z)NbY~q^WNf5Tu)Quu4fYIm@k48UUr&Q&2GRp$Fl>MmnX zZ9MmxFy=)bW`!}Z7_9~?XCqG&U(`OzNhuwe5`3Cn1Ro3+I9nF{KArq#CTD34S73#j zX931}FO=0Frg>s9O?-Uf0Tl>iP$AAvO94?TtCbK6(^NQf%LKF9%ucFVI2*ji04QLR zVZyS~F)|)%C!|!fQh{3uTIevlS*tnrp}%LIqj6@|%1%y2ra-|gK(he$WTAn|VLvkd zMXn91ptLgrCy##Cj2jn1x>wL#apRa#3Wl8oZ@gAf0gH<9XragQNrE-Ou;z9+I%Ta3 zK}g|n@`6uvH~g1DunwG2h66AYn|=PI3p0-*O@lKxTp5ncDg|DGo(02bxOI_D{q|%C zVv@*=Wmam%1v<_=c(1i{9s{3~ww|N=95co!FhZ-h3rx^sV!(=U}$Yww<4QIj&&SU@st!H56m}Kl@s1y&*PHvusnQhe4 zTZHsk!VArqW}I22CkbobN*Pe-vLmKxP+C-zu{_K{Aww4?<8@S8OTpP#;rDpyxSdd2 z$*hW~EK1-pL~!%Fi;g{fww+nf!Ue9TAY5P)GH=orxrxCz_^df_gxRWKjAD^P{>@%a zf?GdH;q~z{6$TNMR;WTST+QBqnzdxY1TO&WlqS9@OdPlufI)@XIj<&UAcczonMqS$ zm@Rn073#=U6c+p(r1IPgYlWF%0}s#<18Oi|#D%fWX)n2QQ?LgP-f2w<@3fd*puHYt zmBO@wP8lRihhL;)B<^IP~kO_)`~I}cYR#nVtO-``zz*Uff}eX zM3~YNN0}Wa|kp*N3aR1+wr87IZuG&DU)Xg8_-lh+}ODQ+$rdZzhm-3PzV=99Z+;rY(%|dC-@y_NU zlZ!4c>=n{RmH{=8Q?~QhMG^5qXB8zwUHYk5e^3~MCPfCEwL7`J~4qHPH+kKTZ=3o)i zd8X8LNk`4WF*FD6;6!~&@Na&}JO`I2H$zCLJsZr=iUAm0rfO?~hsuOmv93iA zt9}vlYNK1*N}{NM<-aF~Sj$cWzUQPsYTDV-%3Yq2XsPs(Z(aSW0x|jDy|tUJyHjj- zCgpqG_%9`0t_Vs6`bBe7heaiUzU=!x`i;FD7CJE6*9Ce#+~VTp zd?P!yr&DxCt8lYL6*EB0oyd)%vW*#dDR9OZlgiFkDtGv%om#BGDdsk5J^9#^d=6!< zmpOURF#I#*W~VlII&9YhJI#;1Y!ILjVnsBOPzUZtyM`Om&zcv{;4nT)2{~DAJm*R$ z!W=jri6Z6BXSaVM-dNqMqj5`B2=pr`frgB~EIBHL$Ck|L>DkMZ%=7GHsO@R%zW1`| zs-PU@vR|KiAg&7f{BtGkZyx33g>0YFOWA>X+_shdh`>E|T=1ZNgpP+h`v~MY;`Iu> zj|Zj=TPs9L?e^I8>f8b$9Ux;~#pLRE;&_&v3*pl00u?-olf%65H^SRPxP>v*c)F!x|4$u|2zb)q~Pn8Pw;m48<2`5Om|&(?JwgsO;z|xk@jA3tBf8*?!Mll4(~56vE1Z75x)&n8 zE)3UTVW;6yT2{%XL<_X3Ia*%fb@t4=n_j$Jz|44y` zzhi@&DN{)}YQAwH`B>Y$GhvjIevx#E?A_^IOZJ8D@_^Cnh!IEcgBWPTHOdjaE2NJu zlSB){3~b+RT)`dl9$T<-?Z5<+soSA`jb%nx>(I`2}ZTT@QuXE zKpfk4|3-P&LQ7)gDOI$x{ zO}7(sdukKIvNzB;^n23oz&jN>-apr=EV$wkIubrFZQ+&||^fiRN z{j(m=&wk`CyL+|g3fwgiqrBKHcis0j&EYn6J%f{z^wT2;*PCN87w9&!kwXIp`gyx| nO>gZf-(#lP;*vrjR!nVnchv1eV|@s$&u2pHnSBB{0NYju<`;L& literal 0 HcmV?d00001 diff --git a/phishing-filter-splunk.csv.gz b/phishing-filter-splunk.csv.gz new file mode 100644 index 0000000000000000000000000000000000000000..7de4df5e529e5e681e26bc1ce7d41c88a9ea11f8 GIT binary patch literal 6110 zcmV<47a`~$iwFP!000021H4>KbL2LXz0a>u*q7Z1lO_m&AAR19*n&tH;T+jV)KfnBQH;~YLd+EDgG>kR9{72V)>$`7K{xALi|9szF#N*owdol2M z`M2}={udkZ?L@C1|4#4uudv|`3qf5{+K+F){<;t{s8)yV*A3P?L~N{E6UJZnuf}}+ zOrQSEY4pec=fgj*pC2V7e-CHWxtU={|9o5i{4XzL>vDeCa!FrsU9T}LAMoq`Yjkivw<9;UnCYHL-t)31hYs*a7fepKclVw@Ruq5+xSPe; zYF*OgyskwjZQ}i0Y0_r;Wyc#fO%0>T+gCiU?f&VDg%GA*c5j4(Eo)WN z%0Aiy^%?U(e~tJJqq9y!a>2K2SXSRk(e(NAf(EW52iha-&XjJ<>NW!X0JUOkPhZk> zIDKk9>86wI_PF`tLzy9tb_q0K*uwdNzCDljx)j7n?uP0-oTq7PPQM0y#aNbvz?l0H z)umk`V!T?-msafx9KS6ID6;)-UPSua@6M61q^ zkAg^Nay!M_6yZrmM{Dp_&itm_+U(B1!Un!E03Mnh9xHt^w(mB??P$qd>r6?^bA=S5 z+oQYDnr>YxXdG{Krral>q0+(M$}XvWUmuMR_a=oVqDET9jRLb^l@$@wfmIwSZ8SWe z9D3iAKdzf`-iG{JqQ68=glc`19lDe#;84ivzpNM6M4t$P<0}Q$>)>SYH!Fto%&1(rH}y%WzyM4ij(D91pLL8VcYfNrxn6veN~FRW>Q$ z7HCK=VKoiuRq8`bW$k|`=UW$x8B{`cY%1DD1@@uPf#1e;UAN)Z$Nh1_MJ^x5rSF$_ z>#m@rL;j9#u)XJgvA5%0_M&yWrCHB{es%s@ut~H$n|ts}tIu?Et+uA1@#A*Jvk9Ks zjLie8i-&{Y|xbUycReBaQD+gzK%&f4u!a`Q%=Zl%P2AvsB@ z1*sU=jcpI!l9E9S%0L}=e19|di$TeF9B2}i?KFZ5ig=`o@WXI?sr1jCid3WTLe&pLC#b&se6t;+}F zz2H&|a%>G-D5%OAPIvFm7PdY2k~&$`F-To6F0KvPC434ljekIuuBP`CuIOtBXnldy z)<1;O7u4hkf_0=FR;RCJEgyJ8UxS^sBME^Gv>`4fjqYnG+s@Z~3c%ZRXKg$Snw>_@ zWpT4Bxa~m{f$0+Q4$)L`?d)fiB&7B;Zj>|Z4`4&tLoOZkwQpQVP{obOI4wMS?LjP!>}|5`Jw)5)eYPi=-U_xxok@eQwz7W!lwQpSSC>_1OW7xGdunYy ziHz8yQU`UR{eXg4xAsU8VQaS#J;bs-@%OjwQdpH4N|TNaVj_L%e1+g{j@OWKN#7E~ zS#U7URSjD1GN-Y{tdeU#nhn;Q!(6bE?UYV*XO$WW3mR1j*9LBG zFHGT(4}yEU)ORD`z!a(Y*%m@fxa}>)Ty&b=-EtABVRiS68+`ci$%U_VMUDx8G|dIyNFU zpY_*hK5GPaj!*FEAq~W3p^m5xhz*y8Do6i z())XAm$Tp|_yt$=YNg;;hjH@RSo{4F$hq%-o!xJ`q7N-x@Dx$w2xEN$*2*H1BKG%Yf z{V>#qnESaV1f)cN@^@9TfXnXDUfzy&3#82TL$7!gGw!xt7LB=iU^yXFiY3^9`g5IET&;B*@tip+~>LFCKE zRcybn&f?}^bBg*>)cE$?3Tr-}OX8GUT_Vj8+FLm_yMaOVP+M&6!xgmpwmW=(d=wV1 z8{C7BT@z?o9q!a8E#@8WoA!v!n*;CRpp2;e$=U`F3og=HtKvnQQSr9gN8zBqVScbw zbhyXBc?7>;m6E#brQ30B?)fPpsd)sH5m15p!Epn*f3kJj_0=;MmE;PH77n=53A zPtd29pDDAUD||Scq4E=#^3CPu=EC}Uhq=O(gj}<;9APEjN;L@UemEp~Y+s`}ZI#Pc z+xzzJxA&I*d^~_cRWZx{Iqa~~@@vXgp#F>HqMLtS0l2rH9^b?E0DZsJm_Tn+ zlX8_UtC25wr!UX*+gjq(AC!4Rr0_;*?2-B=pEAMoN>t$*$3QCSxY&}nP`*+TAYFH) zHkb33Hcf1~1p-h-uMg$NUS1vXWM~PXpxHcmrze5?`!W2HAe~1I-wbEWj^F0%d*0KV z8w1aRUdlSJ7|T*|xQFw8($~Ubcqi3xwM89$7azAtM<3$_`tb;V!R5T?q3!2M#@7Qb z%Jv9u;2TmuZf*L$LL}c&yWIHik)>!@*%6PhwfUZ8L7QGvDg%@(nVc{|;f?5>r1PU} zb=&SXf4LQot$U!=NCL9?;~neoMP5anFyw<$%2e=x6odqrP);LiTM%3 zB_$b={Ssl@vXvi|Q8Z#6*CvIuJ|3SnR2A#Ao&k-u$L_8rBQcpxL5KCL2DH2s-%mxq z?GeHDdK|f6S^&;gqPBKI4FkwF_T@3haT48t!lD*@7IVkOnKQ;Tn?_^iDwwmHxZtA4 z(TG8+*>;`ck}=*(=q6SJvuDN#qX#(;OlVXyMMenF%Xq(Tx)g>yVGs7{?L1 zd8mOY$a~Dx_tdXm2pFbWaWVD?y&hneRr)z}APt}%m;%vRS}l5(W*Shci3w8&bLzox zHApj)r;dY~8BMGNK(6IrL={Y;n_dBt&tQc%dgd@%#b~UDeuln^-;Npw%=bG-1Hv*h z3ACoOc9!(JY2;Nft<;teLP*nzo(+?-pv_1uJk6caRpxW*_{8Ut37C5^(d3Rw>t0Yd z`(YY7TLqI1jEIiJ`iKIFjU@4d;raG8&erh!N&^U^IqUp@@J5POHH*(NbFku`e&8Sqs$#X#s zrWZX084@X6VHHkLvIC+!Gt4u^vTh>(;UnvMa@vj?7;9kajtD2~k&YBCGm7YlqRTi@ z5a)VEsDep7l3hovLyjv4J`W@nxWQiLepkZeGm+molR_{8J5)rnT3R6~rm?P$PS9Mj znN;4)sh<|bj2xIX7AUYtuDVK?^VAvHE5k@#(?1<&mRKLzXw9gqU`~c1OtUbwK0C{Z z@iZTLHtT`+L=81CO-}(#P#7cKB_=%r>X{KvKbsvg1{J$aXpD>t;=I zJ_~7}aLqKyzKI5QuA_(S*webC4k-eZqfmCRBsS+vMPkrH9ZXB11!y7}iqSA2sXHL{ zBTXyUU5!|_Y^`2TRnVlhu*Be04Cg&K((J6t=IR?9Zo3xU6n?X>_IBV~+49o26KEio z2*(kOfris6sWKpsV|kRVxry*YUkQ@-@67I< z)XcPh+WGl}ZTTQe`cz;V&8>i+JSj9@2iJ{yz38WPQ*X$tKf#2Mbe2sp-dPGP(Fh>z zDI(8MW5VfAFA|c&=BlVKLs?yhBrTRd;~|0d-SC`rZD_erU@7gKX|(A&ogN~)oeGvE z#HUX8T5?Q~6pej8Cu8$)C(QTuQyuG+Ka&o0{@9R5E&6PjDCP z{st)=BDDO}dZV?Vwm6U?8%1XnsMXgPR@(Wp3X%d7F=Za_dhn*#!%BQZ%%!x6@`FT! zgtiS>HWiM&(2i~f3!LM;q0KlN!?bN}B+Yw$88~nY-*JsJ{zV=*QIdI3@7>IGl zO(}Q^%Y-{_B^XFY3>jKNDhhlkx2pDFTr2%Tdz3arJGj}k z!sO2955jl$$f-(u!5_k$-}~xIP%|9&2*a8K-o505o8SKG5M! zQAaKT0Q)}0nFl$o**TPv*B|JFl(;N!ZTr+4dT1CzF>_przApk+y9p^2-+3`c9ro}k zkGJcsJhD*Xhw+3i1#QFmbUO3#>uq-&?^HdTa+PGOU;(AfQ3K?ufeB|Hz3YS$qz#B7 zAj^!XW;#gS>3q4{23f%=`AHENvouM3+goT{Taeeb=F8)2U~Qmheb(u zov|VL^+q0x_DpmV1_is6*L@-_;t47oV|r-Qf!Xb{vOKX+9!FmxB@prC@Y+;9wK}!V zT9+Nl8w*WVOgi*JvDq9Sd}@m$&g%z%a9pUwMTSQm9c?aa%C|xepqR34)(Q@EJ(6TL z!OMmS-JD@}Q}#zvFDcZ_;)qEtQc^v}T+WW}w7&H;Ius8D&ub4MTLn zBIiKY5p&(9Q0WkfJ1M|%9U5VSkSmD{RtM%HBu`;jFIC^YCR{uf3wK}RkT`~$k>!Oy^dP9a$=|UBygjxg^yXS)LC3}cpiPx zS>>$Kxt<2vh}B8Fw4!A;d536q;VwoNjxT`JPxuQAx5$HUnmesmbAzPq=H{uMW3;sQ zc0W)_ZwFSJ15FP9q&@FWV3DHXzJ@$jaS%qK?qTrE(203}ys#)pkl|322ikM?%Vu~< zj

9r7qEj#cdC9X~tl~Mv^r8Q^#yh-7^dGr>4VGz< zw1xFV7nASakh}ZvypKe{UYRa^fRzqX_(u3$+Xq-XUA8%eDC(md1qV75G6)>RKvrya z`fwWV-htl%&r31l{zz2IO4Ty7pVe{)Uw6hT0~0MoC)=G8;a)lDN;YxpKDk>hyIEu8 z?5=kTzhfge3g=x@;y?bWa{2d0zWFVrm3;m$tcvTtD<{7j^$iB1I35m%+u>N0<>7X^ zBr}|KDQ}lsSNii`Jv;&(`VD?R^zN|QquTzxc zap8czoyESWIgsUE9YoFY(yFM7^N9l)YhRyB4&?f#v}Dnaez_0r!ZL=on(w#q&H)`n zk=%370Uc$$o2z1hwxTM}r95+hPp^Y^mx(H7%6IQ$K^*7m<*A|`?EK}tghb=IcFAYA k;!Lz&1N@TLetq-nXy`$2t)K@L9Ze7a3zXiomp8Bg0ILZPPyhe` literal 0 HcmV?d00001 diff --git a/phishing-filter-suricata.rules b/phishing-filter-suricata.rules new file mode 100644 index 000000000..17d814e1a --- /dev/null +++ b/phishing-filter-suricata.rules @@ -0,0 +1,462 @@ +# Title: Phishing URL Suricata Ruleset +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"1111365dh.net"; classtype:attempted-recon; sid:200000001; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"12931-coinbase.com"; classtype:attempted-recon; sid:200000002; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"215323.com"; classtype:attempted-recon; sid:200000003; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"260aesthetic.wixsite.com"; classtype:attempted-recon; sid:200000004; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3650947.cc"; classtype:attempted-recon; sid:200000005; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3659ll.net"; classtype:attempted-recon; sid:200000006; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"83291-coinbase.com"; classtype:attempted-recon; sid:200000007; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"94-103-188-123.plesk.page"; classtype:attempted-recon; sid:200000008; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"9825057365.com"; classtype:attempted-recon; sid:200000009; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abctrvabc.com"; classtype:attempted-recon; sid:200000010; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com"; classtype:attempted-recon; sid:200000011; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acclimatizable.fun"; classtype:attempted-recon; sid:200000012; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"account-update05.myvnc.com"; classtype:attempted-recon; sid:200000013; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accounts.google.auzen.us.kg"; classtype:attempted-recon; sid:200000014; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"activebusiness-unlocker3.com"; classtype:attempted-recon; sid:200000015; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"addwsrbh.green"; classtype:attempted-recon; sid:200000016; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahnp.vercel.app"; classtype:attempted-recon; sid:200000017; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aldg.ldgknhk.lol"; classtype:attempted-recon; sid:200000018; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allegrolokalnie.pl-891241214.buzz"; classtype:attempted-recon; sid:200000019; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alutipcentra.pages.dev"; classtype:attempted-recon; sid:200000020; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ambil-pinjaman-daana-payleter.xforms.web.id"; classtype:attempted-recon; sid:200000021; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ambulatoriprivati.it"; classtype:attempted-recon; sid:200000022; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amev.ldgknhk.lol"; classtype:attempted-recon; sid:200000023; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"antail-conv.com"; classtype:attempted-recon; sid:200000024; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apply-now-to-receive-badge.vercel.app"; classtype:attempted-recon; sid:200000025; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artsea.pages.dev"; classtype:attempted-recon; sid:200000026; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atmailupdatewptnskmdinfomailacct.weebly.com"; classtype:attempted-recon; sid:200000027; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-101072.weeblysite.com"; classtype:attempted-recon; sid:200000028; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-1041page.weeblysite.com"; classtype:attempted-recon; sid:200000029; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-105714.weeblysite.com"; classtype:attempted-recon; sid:200000030; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-105819.square.site"; classtype:attempted-recon; sid:200000031; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-inc-107097.weeblysite.com"; classtype:attempted-recon; sid:200000032; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-login380.weeblysite.com"; classtype:attempted-recon; sid:200000033; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-login522.weeblysite.com"; classtype:attempted-recon; sid:200000034; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-service-102155.weeblysite.com"; classtype:attempted-recon; sid:200000035; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-sign-in-105669.weeblysite.com"; classtype:attempted-recon; sid:200000036; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcom-100762.weeblysite.com"; classtype:attempted-recon; sid:200000037; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcom-106808.weeblysite.com"; classtype:attempted-recon; sid:200000038; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmailservicenow.wixstudio.com"; classtype:attempted-recon; sid:200000039; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmailservicenow.wixstudio.io"; classtype:attempted-recon; sid:200000040; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmailsrvrdesk.weebly.com"; classtype:attempted-recon; sid:200000041; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attnewmaill.weebly.com"; classtype:attempted-recon; sid:200000042; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attyhhhhiiii225.weebly.com"; classtype:attempted-recon; sid:200000043; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atw-tau.vercel.app"; classtype:attempted-recon; sid:200000044; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com"; classtype:attempted-recon; sid:200000045; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"authsyncs.pages.dev"; classtype:attempted-recon; sid:200000046; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autoreplyattmode.wixsite.com"; classtype:attempted-recon; sid:200000047; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"avoid.hold-managert.com"; classtype:attempted-recon; sid:200000048; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"azbin.ir"; classtype:attempted-recon; sid:200000049; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b45018.com"; classtype:attempted-recon; sid:200000050; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link"; classtype:attempted-recon; sid:200000051; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baiii-wong.cutvi.cfd"; classtype:attempted-recon; sid:200000052; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"basvuru-online-yap.vercel.app"; classtype:attempted-recon; sid:200000053; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"beionfidi.pages.dev"; classtype:attempted-recon; sid:200000054; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet73nn.com"; classtype:attempted-recon; sid:200000055; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet83039.com"; classtype:attempted-recon; sid:200000056; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet83054.com"; classtype:attempted-recon; sid:200000057; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bfrescentremebermainsetreouytnoy.weebly.com"; classtype:attempted-recon; sid:200000058; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"biggggggggggg.weebly.com"; classtype:attempted-recon; sid:200000059; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitnode.pages.dev"; classtype:attempted-recon; sid:200000060; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bitvavobtc.com"; classtype:attempted-recon; sid:200000061; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blackhere11.serv00.net"; classtype:attempted-recon; sid:200000062; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blss24att.weebly.com"; classtype:attempted-recon; sid:200000063; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"braucrarasuteu-2470.vercel.app"; classtype:attempted-recon; sid:200000064; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-102124.weeblysite.com"; classtype:attempted-recon; sid:200000065; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt1business.weebly.com"; classtype:attempted-recon; sid:200000066; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btuan-dan2-resmi.top1.my.id"; classtype:attempted-recon; sid:200000067; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"buildingdesignsusapdf.s3.us-east-005.backblazeb2.com"; classtype:attempted-recon; sid:200000068; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-page-property-897432967.netlify.app"; classtype:attempted-recon; sid:200000069; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caipora.xyz"; classtype:attempted-recon; sid:200000070; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"calm-pothos-3b24c9.netlify.app"; classtype:attempted-recon; sid:200000071; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"carrefourarabiank15.pages.dev"; classtype:attempted-recon; sid:200000072; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com"; classtype:attempted-recon; sid:200000073; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"catgirl-appverset-nya.pages.dev"; classtype:attempted-recon; sid:200000074; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"catxtokens.pages.dev"; classtype:attempted-recon; sid:200000075; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chat.94-103-188-123.plesk.page"; classtype:attempted-recon; sid:200000076; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"check154109.click"; classtype:attempted-recon; sid:200000077; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"checkseven.vercel.app"; classtype:attempted-recon; sid:200000078; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ciente-a.org"; classtype:attempted-recon; sid:200000079; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cieplo.app"; classtype:attempted-recon; sid:200000080; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cj12143.tw1.ru"; classtype:attempted-recon; sid:200000081; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cj87335.tw1.ru"; classtype:attempted-recon; sid:200000082; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"claimyourethrewards.pages.dev"; classtype:attempted-recon; sid:200000083; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clickbait.design"; classtype:attempted-recon; sid:200000084; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cnsa163.com"; classtype:attempted-recon; sid:200000085; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cock2-iota.vercel.app"; classtype:attempted-recon; sid:200000086; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cock3.vercel.app"; classtype:attempted-recon; sid:200000087; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cock7.vercel.app"; classtype:attempted-recon; sid:200000088; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contact-pro-8291-d01.firebaseapp.com"; classtype:attempted-recon; sid:200000089; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"contact-pro-8291-d01.web.app"; classtype:attempted-recon; sid:200000090; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"creosrl.com"; classtype:attempted-recon; sid:200000091; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"curmmgdv.email"; classtype:attempted-recon; sid:200000092; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently541.weebly.com"; classtype:attempted-recon; sid:200000093; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently890.weebly.com"; classtype:attempted-recon; sid:200000094; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyserver.weebly.com"; classtype:attempted-recon; sid:200000095; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dara3dccj.wixsite.com"; classtype:attempted-recon; sid:200000096; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"db.service4db.com"; classtype:attempted-recon; sid:200000097; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev"; classtype:attempted-recon; sid:200000098; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"debutcan.firebaseapp.com"; classtype:attempted-recon; sid:200000099; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"debutcan.web.app"; classtype:attempted-recon; sid:200000100; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"delivery.attempt.failure.ebbs.co.za"; classtype:attempted-recon; sid:200000101; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev.stream.mornar.app"; classtype:attempted-recon; sid:200000102; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dnwqmh.click"; classtype:attempted-recon; sid:200000103; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dropsmartchain.pages.dev"; classtype:attempted-recon; sid:200000104; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dsjoting.group"; classtype:attempted-recon; sid:200000105; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dulb6c5p5.top"; classtype:attempted-recon; sid:200000106; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebay-mallwholesale.com"; classtype:attempted-recon; sid:200000107; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebt-lilac.vercel.app"; classtype:attempted-recon; sid:200000108; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"echoredled.netlify.app"; classtype:attempted-recon; sid:200000109; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elbarco.percentadnp.info"; classtype:attempted-recon; sid:200000110; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eltritongourmet.com"; classtype:attempted-recon; sid:200000111; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"email.mgb.modento.io"; classtype:attempted-recon; sid:200000112; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enjomugg.firebaseapp.com"; classtype:attempted-recon; sid:200000113; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enjomugg.web.app"; classtype:attempted-recon; sid:200000114; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"error3456vhubhornbase.azurewebsites.net"; classtype:attempted-recon; sid:200000115; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"example223.wixsite.com"; classtype:attempted-recon; sid:200000116; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eyeydhe.wixsite.com"; classtype:attempted-recon; sid:200000117; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eyttueiu.square.site"; classtype:attempted-recon; sid:200000118; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-avip.click"; classtype:attempted-recon; sid:200000119; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fame.pink"; classtype:attempted-recon; sid:200000120; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fassehoizubra-7696.vercel.app"; classtype:attempted-recon; sid:200000121; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fastdropchain.pages.dev"; classtype:attempted-recon; sid:200000122; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io"; classtype:attempted-recon; sid:200000123; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fla-1001.square.site"; classtype:attempted-recon; sid:200000124; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flo4211.github.io"; classtype:attempted-recon; sid:200000125; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com"; classtype:attempted-recon; sid:200000126; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fnuttlie.wiki"; classtype:attempted-recon; sid:200000127; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fokeijonnekou.vercel.app"; classtype:attempted-recon; sid:200000128; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com"; classtype:attempted-recon; sid:200000129; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-verified-badge-form0-service.vercel.app"; classtype:attempted-recon; sid:200000130; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-verified-meta-badge-service.vercel.app"; classtype:attempted-recon; sid:200000131; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"g06668706.wixsite.com"; classtype:attempted-recon; sid:200000132; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gccndbqg.vip"; classtype:attempted-recon; sid:200000133; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geriodememerkezi.online"; classtype:attempted-recon; sid:200000134; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"get-checkmark-for-you.vercel.app"; classtype:attempted-recon; sid:200000135; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"get-free-verified-badge-service-on.vercel.app"; classtype:attempted-recon; sid:200000136; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gitanag.broke-it.net"; classtype:attempted-recon; sid:200000137; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gruprocuroipra-6493.vercel.app"; classtype:attempted-recon; sid:200000138; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.b9en.com"; classtype:attempted-recon; sid:200000139; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.metacoint.com"; classtype:attempted-recon; sid:200000140; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hcghij.top"; classtype:attempted-recon; sid:200000141; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hecregayatu-1014.vercel.app"; classtype:attempted-recon; sid:200000142; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hejmtxxt.guru"; classtype:attempted-recon; sid:200000143; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"helenblunt6.wixsite.com"; classtype:attempted-recon; sid:200000144; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"help.accountsupportcentre.com"; classtype:attempted-recon; sid:200000145; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"here-apply-for-page-review.vercel.app"; classtype:attempted-recon; sid:200000146; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hgbk.ldgknhk.lol"; classtype:attempted-recon; sid:200000147; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hhideiie.wixsite.com"; classtype:attempted-recon; sid:200000148; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hitummoinneullei-5882.vercel.app"; classtype:attempted-recon; sid:200000149; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-101067.weeblysite.com"; classtype:attempted-recon; sid:200000150; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-103465.weeblysite.com"; classtype:attempted-recon; sid:200000151; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-104341.weeblysite.com"; classtype:attempted-recon; sid:200000152; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-105266.weeblysite.com"; classtype:attempted-recon; sid:200000153; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-105929.weeblysite.com"; classtype:attempted-recon; sid:200000154; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homeattatthome.square.site"; classtype:attempted-recon; sid:200000155; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hpnefhqs.motorcycles"; classtype:attempted-recon; sid:200000156; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"im25.net"; classtype:attempted-recon; sid:200000157; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"info.supercitrus.ind.br"; classtype:attempted-recon; sid:200000158; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ins-business-home-center.com"; classtype:attempted-recon; sid:200000159; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"instagaramgalochka.vercel.app"; classtype:attempted-recon; sid:200000160; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ipv6.43-135-137-110.cprapid.com"; classtype:attempted-recon; sid:200000161; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"irmt0ken.win"; classtype:attempted-recon; sid:200000162; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iujf7839iofvkbcu748.weebly.com"; classtype:attempted-recon; sid:200000163; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iwimwmiwi.click"; classtype:attempted-recon; sid:200000164; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jagej73796.wixsite.com"; classtype:attempted-recon; sid:200000165; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfdjy.com"; classtype:attempted-recon; sid:200000166; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kalyani963.github.io"; classtype:attempted-recon; sid:200000167; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kexoigrufouddou-5902.vercel.app"; classtype:attempted-recon; sid:200000168; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kl1k-ds1ni.neupdile.my.id"; classtype:attempted-recon; sid:200000169; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kliind08.wixsite.com"; classtype:attempted-recon; sid:200000170; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kreelo098.weebly.com"; classtype:attempted-recon; sid:200000171; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kremlcup.com"; classtype:attempted-recon; sid:200000172; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kshitij12375.github.io"; classtype:attempted-recon; sid:200000173; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kucoinglobal1.com"; classtype:attempted-recon; sid:200000174; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kxbztydc.black"; classtype:attempted-recon; sid:200000175; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"labanquepostale.jupiter-analytics.com"; classtype:attempted-recon; sid:200000176; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leddevotoze-3146.vercel.app"; classtype:attempted-recon; sid:200000177; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"linnkdna-kget.wxxzsite.buzz"; classtype:attempted-recon; sid:200000178; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llahi.info"; classtype:attempted-recon; sid:200000179; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"llahi.vip"; classtype:attempted-recon; sid:200000180; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loffaummuddote-4145.vercel.app"; classtype:attempted-recon; sid:200000181; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-att-10221.square.site"; classtype:attempted-recon; sid:200000182; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-form.world"; classtype:attempted-recon; sid:200000183; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-online-outlook365.com"; classtype:attempted-recon; sid:200000184; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-outlook-midstreamauth.com"; classtype:attempted-recon; sid:200000185; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-screen-103134.weeblysite.com"; classtype:attempted-recon; sid:200000186; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginaccount70.wixsite.com"; classtype:attempted-recon; sid:200000187; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginaccount77.wixsite.com"; classtype:attempted-recon; sid:200000188; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luk6414.wixsite.com"; classtype:attempted-recon; sid:200000189; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"luxlifemiamiblog.com"; classtype:attempted-recon; sid:200000190; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.meta-accessibility.io.vn"; classtype:attempted-recon; sid:200000191; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"madebybmr.fyi"; classtype:attempted-recon; sid:200000192; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maqpiexyz.click"; classtype:attempted-recon; sid:200000193; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev"; classtype:attempted-recon; sid:200000194; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mayfair313.wixsite.com"; classtype:attempted-recon; sid:200000195; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mdbrvlfy.black"; classtype:attempted-recon; sid:200000196; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mesageriepro33range1.weebly.com"; classtype:attempted-recon; sid:200000197; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamsk-wallet-3.gitbook.io"; classtype:attempted-recon; sid:200000198; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metttaa-audddt-new-02.firebaseapp.com"; classtype:attempted-recon; sid:200000199; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metttaa-audddt-new-02.web.app"; classtype:attempted-recon; sid:200000200; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsoft365-storage.github.io"; classtype:attempted-recon; sid:200000201; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mikepattyjm.wixsite.com"; classtype:attempted-recon; sid:200000202; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobilemidasbuy.n3g.fun"; classtype:attempted-recon; sid:200000203; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monespacepro-client.3utilities.com"; classtype:attempted-recon; sid:200000204; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monetization-violation.github.io"; classtype:attempted-recon; sid:200000205; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"moodengsol-net.pages.dev"; classtype:attempted-recon; sid:200000206; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mwsiekdnfjrdufs.weebly.com"; classtype:attempted-recon; sid:200000207; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mxmxnmx.mx.zya.me"; classtype:attempted-recon; sid:200000208; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"national-au-b.com"; classtype:attempted-recon; sid:200000209; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"national-au.net"; classtype:attempted-recon; sid:200000210; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbaaiqjq.group"; classtype:attempted-recon; sid:200000211; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nexomyacwv.weebly.com"; classtype:attempted-recon; sid:200000212; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nft-time11.vercel.app"; classtype:attempted-recon; sid:200000213; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nichcheck.weeblysite.com"; classtype:attempted-recon; sid:200000214; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ns1.carrier-ast2-portal-apple.com"; classtype:attempted-recon; sid:200000215; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omadshf.ru"; classtype:attempted-recon; sid:200000216; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-assist.live"; classtype:attempted-recon; sid:200000217; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"online-promo-asb.org"; classtype:attempted-recon; sid:200000218; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"openkimono.pro"; classtype:attempted-recon; sid:200000219; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"opportunity-verified-status.vercel.app"; classtype:attempted-recon; sid:200000220; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ourtime.reconnect-dating.workers.dev"; classtype:attempted-recon; sid:200000221; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"owouwuowo.click"; classtype:attempted-recon; sid:200000222; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p365kf.com"; classtype:attempted-recon; sid:200000223; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p4zv8crnrrha27so.94-103-188-123.plesk.page"; classtype:attempted-recon; sid:200000224; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"page-center-manage.com"; classtype:attempted-recon; sid:200000225; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pavan-patil-22.github.io"; classtype:attempted-recon; sid:200000226; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pecinternational.net"; classtype:attempted-recon; sid:200000227; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"peesom.chat"; classtype:attempted-recon; sid:200000228; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pencairaanndannaa.my.id"; classtype:attempted-recon; sid:200000229; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"petty.wiki"; classtype:attempted-recon; sid:200000230; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pimnhv.group"; classtype:attempted-recon; sid:200000231; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"policies-business-page-service.com"; classtype:attempted-recon; sid:200000232; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pottatrebewe-2808.vercel.app"; classtype:attempted-recon; sid:200000233; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pqo.hrf.mybluehost.me"; classtype:attempted-recon; sid:200000234; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"programming--service--panel-totlyy-free-for-you.vercel.app"; classtype:attempted-recon; sid:200000235; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"promo1.spik.ru"; classtype:attempted-recon; sid:200000236; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"protocolsecure.pages.dev"; classtype:attempted-recon; sid:200000237; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev"; classtype:attempted-recon; sid:200000238; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-1778406e4fec4394901793111c187dd9.r2.dev"; classtype:attempted-recon; sid:200000239; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-19b834342e7d465b9f00b3511325a081.r2.dev"; classtype:attempted-recon; sid:200000240; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-21dd4dc659614ceb93e45a6de4434502.r2.dev"; classtype:attempted-recon; sid:200000241; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev"; classtype:attempted-recon; sid:200000242; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-2fefe932a6974485b987c9ba851b5c40.r2.dev"; classtype:attempted-recon; sid:200000243; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-3a46d9914f494078a6d6237513e7a096.r2.dev"; classtype:attempted-recon; sid:200000244; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-442ed822851244a689b3472ea2c6a950.r2.dev"; classtype:attempted-recon; sid:200000245; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev"; classtype:attempted-recon; sid:200000246; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-682ad3b65d944376b919745aae3c56d4.r2.dev"; classtype:attempted-recon; sid:200000247; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev"; classtype:attempted-recon; sid:200000248; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev"; classtype:attempted-recon; sid:200000249; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7f5cf36445d042168bfacd712e890dc0.r2.dev"; classtype:attempted-recon; sid:200000250; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-803839714a924882a7bcc2495a26860f.r2.dev"; classtype:attempted-recon; sid:200000251; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8161de4a277e4ee8b532af34954224e1.r2.dev"; classtype:attempted-recon; sid:200000252; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev"; classtype:attempted-recon; sid:200000253; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8376b5b2334844d193a525d8b8548fa5.r2.dev"; classtype:attempted-recon; sid:200000254; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev"; classtype:attempted-recon; sid:200000255; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev"; classtype:attempted-recon; sid:200000256; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev"; classtype:attempted-recon; sid:200000257; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-9163a97d70394cb499bdd232be6c2169.r2.dev"; classtype:attempted-recon; sid:200000258; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev"; classtype:attempted-recon; sid:200000259; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-98171471e0944ac3a5820ef719bf0640.r2.dev"; classtype:attempted-recon; sid:200000260; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-a263e0790935412eb10cacc55bbced18.r2.dev"; classtype:attempted-recon; sid:200000261; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-a291041b077742899b63a9982f04a56c.r2.dev"; classtype:attempted-recon; sid:200000262; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev"; classtype:attempted-recon; sid:200000263; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-b50adc5d699a4f08aec37102c2103da7.r2.dev"; classtype:attempted-recon; sid:200000264; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c0a934c950e441db96b882789f53c9ea.r2.dev"; classtype:attempted-recon; sid:200000265; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c2c250050109456396c933de259a4fea.r2.dev"; classtype:attempted-recon; sid:200000266; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev"; classtype:attempted-recon; sid:200000267; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev"; classtype:attempted-recon; sid:200000268; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev"; classtype:attempted-recon; sid:200000269; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev"; classtype:attempted-recon; sid:200000270; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev"; classtype:attempted-recon; sid:200000271; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev"; classtype:attempted-recon; sid:200000272; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev"; classtype:attempted-recon; sid:200000273; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev"; classtype:attempted-recon; sid:200000274; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e42cb528b102447385e3145197916f51.r2.dev"; classtype:attempted-recon; sid:200000275; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e4aff507450c478cbe3f77ad23d75035.r2.dev"; classtype:attempted-recon; sid:200000276; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev"; classtype:attempted-recon; sid:200000277; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev"; classtype:attempted-recon; sid:200000278; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev"; classtype:attempted-recon; sid:200000279; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pubgm.club"; classtype:attempted-recon; sid:200000280; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puffagroibrouwoi-8818.vercel.app"; classtype:attempted-recon; sid:200000281; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qasimk.com"; classtype:attempted-recon; sid:200000282; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qfjfvseq.info"; classtype:attempted-recon; sid:200000283; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quauwograssodda-3503.vercel.app"; classtype:attempted-recon; sid:200000284; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qysgyp.com"; classtype:attempted-recon; sid:200000285; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rajdipchatterjee.github.io"; classtype:attempted-recon; sid:200000286; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rechazaroanularaqui51.weebly.com"; classtype:attempted-recon; sid:200000287; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"remote-fix.pages.dev"; classtype:attempted-recon; sid:200000288; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"renggard.47-243-192-240.cprapid.com"; classtype:attempted-recon; sid:200000289; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resolvepanel.live"; classtype:attempted-recon; sid:200000290; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resolving--issue--with-us1.vercel.app"; classtype:attempted-recon; sid:200000291; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resqat.weebly.com"; classtype:attempted-recon; sid:200000292; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"review-business-case.d2f7p3b7pucnle.amplifyapp.com"; classtype:attempted-recon; sid:200000293; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rlpqwefi.pink"; classtype:attempted-recon; sid:200000294; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rouloigeilleuja-9523.vercel.app"; classtype:attempted-recon; sid:200000295; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rulemec.pages.dev"; classtype:attempted-recon; sid:200000296; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rutinqqwin.shop"; classtype:attempted-recon; sid:200000297; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwftfu.quest"; classtype:attempted-recon; sid:200000298; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s.team-pw.cc"; classtype:attempted-recon; sid:200000299; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sairanees.github.io"; classtype:attempted-recon; sid:200000300; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sanseipecas.com.br"; classtype:attempted-recon; sid:200000301; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasklelo.weebly.com"; classtype:attempted-recon; sid:200000302; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com"; classtype:attempted-recon; sid:200000303; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelcustomerwebly.weebly.com"; classtype:attempted-recon; sid:200000304; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelnetwebmailservermaintainance.weebly.com"; classtype:attempted-recon; sid:200000305; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelrectify.weebly.com"; classtype:attempted-recon; sid:200000306; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelscrutinize.weebly.com"; classtype:attempted-recon; sid:200000307; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelservicecentterwebly.weebly.com"; classtype:attempted-recon; sid:200000308; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sasktelsupportsystemwebly.weebly.com"; classtype:attempted-recon; sid:200000309; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbcglobal30.wixsite.com"; classtype:attempted-recon; sid:200000310; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scan-vulnerability-guard-v3.pages.dev"; classtype:attempted-recon; sid:200000311; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scan-vulnerability-guard.pages.dev"; classtype:attempted-recon; sid:200000312; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanner-metamask-v1.pages.dev"; classtype:attempted-recon; sid:200000313; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanner-metamask-v2.pages.dev"; classtype:attempted-recon; sid:200000314; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanner-metamask-v3.pages.dev"; classtype:attempted-recon; sid:200000315; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"scanner-metamask.pages.dev"; classtype:attempted-recon; sid:200000316; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sec-sign-in.info"; classtype:attempted-recon; sid:200000317; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure2-validitycheck.weebly.com"; classtype:attempted-recon; sid:200000318; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securecapitec.theprimepoint.online"; classtype:attempted-recon; sid:200000319; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securerpcfix.com"; classtype:attempted-recon; sid:200000320; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seeteressecalywoi.github.io"; classtype:attempted-recon; sid:200000321; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seivviice.weebly.com"; classtype:attempted-recon; sid:200000322; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.0e7p.com"; classtype:attempted-recon; sid:200000323; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.2rk3.com"; classtype:attempted-recon; sid:200000324; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.8q3p.com"; classtype:attempted-recon; sid:200000325; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.n6b8.com"; classtype:attempted-recon; sid:200000326; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.v9vs.com"; classtype:attempted-recon; sid:200000327; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sevvviicess.weebly.com"; classtype:attempted-recon; sid:200000328; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shard.blue"; classtype:attempted-recon; sid:200000329; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shard.skin"; classtype:attempted-recon; sid:200000330; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-d7590.firebaseapp.com"; classtype:attempted-recon; sid:200000331; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shared-d7590.web.app"; classtype:attempted-recon; sid:200000332; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-101329.weeblysite.com"; classtype:attempted-recon; sid:200000333; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-101587.weeblysite.com"; classtype:attempted-recon; sid:200000334; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-106427.weeblysite.com"; classtype:attempted-recon; sid:200000335; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-107375.weeblysite.com"; classtype:attempted-recon; sid:200000336; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solutionwebsitedapp.firebaseapp.com"; classtype:attempted-recon; sid:200000337; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solutionwebsitedapp.web.app"; classtype:attempted-recon; sid:200000338; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solvetans.firebaseapp.com"; classtype:attempted-recon; sid:200000339; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"solvetans.web.app"; classtype:attempted-recon; sid:200000340; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sondfrom.dexlog.my.id"; classtype:attempted-recon; sid:200000341; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soyokai.or.jp"; classtype:attempted-recon; sid:200000342; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srdate.club"; classtype:attempted-recon; sid:200000343; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ssy.hmb.mybluehostin.me"; classtype:attempted-recon; sid:200000344; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steam.poweredartsworkshop.com"; classtype:attempted-recon; sid:200000345; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steam.workshopsreview.com"; classtype:attempted-recon; sid:200000346; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommmuty.com"; classtype:attempted-recon; sid:200000347; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommuunity.ru"; classtype:attempted-recon; sid:200000348; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcomunutty.com"; classtype:attempted-recon; sid:200000349; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamconmumity.com"; classtype:attempted-recon; sid:200000350; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stepsray.vercel.app"; classtype:attempted-recon; sid:200000351; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-metahelpcenter-id100003498934.netlify.app"; classtype:attempted-recon; sid:200000352; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sv5gardens655665.weeblysite.com"; classtype:attempted-recon; sid:200000353; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"system-portalnu.duckdns.org"; classtype:attempted-recon; sid:200000354; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talwgam.njmolada.com"; classtype:attempted-recon; sid:200000355; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"taste.baby"; classtype:attempted-recon; sid:200000356; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tele.zhngain.top"; classtype:attempted-recon; sid:200000357; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrambot-resolved.pages.dev"; classtype:attempted-recon; sid:200000358; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrazm.net"; classtype:attempted-recon; sid:200000359; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-100408.weeblysite.com"; classtype:attempted-recon; sid:200000360; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-100469.weeblysite.com"; classtype:attempted-recon; sid:200000361; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-103234.weeblysite.com"; classtype:attempted-recon; sid:200000362; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiktok-888.vip"; classtype:attempted-recon; sid:200000363; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiltckshow.top"; classtype:attempted-recon; sid:200000364; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tnomwzrp.top"; classtype:attempted-recon; sid:200000365; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toeken.im"; classtype:attempted-recon; sid:200000366; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tonic.pink"; classtype:attempted-recon; sid:200000367; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tooma.cellinsurance.co.zw"; classtype:attempted-recon; sid:200000368; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tpdtepremu.xyz"; classtype:attempted-recon; sid:200000369; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trattujeilesso-3354.vercel.app"; classtype:attempted-recon; sid:200000370; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trbinace.com"; classtype:attempted-recon; sid:200000371; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"treibrukeukonno-1395.vercel.app"; classtype:attempted-recon; sid:200000372; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuesmad.firebaseapp.com"; classtype:attempted-recon; sid:200000373; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tuesmad.web.app"; classtype:attempted-recon; sid:200000374; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyyyyyytyyy.weebly.com"; classtype:attempted-recon; sid:200000375; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tzcsjfto.chat"; classtype:attempted-recon; sid:200000376; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u.updatetrackgre.top"; classtype:attempted-recon; sid:200000377; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uc-whatstapp-web.com"; classtype:attempted-recon; sid:200000378; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"udxcady.wixsite.com"; classtype:attempted-recon; sid:200000379; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uklifejv.cyou"; classtype:attempted-recon; sid:200000380; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updatemail12.wixsite.com"; classtype:attempted-recon; sid:200000381; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ups-trackdeliveryapps.chickenkiller.com"; classtype:attempted-recon; sid:200000382; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usbest.cyou"; classtype:attempted-recon; sid:200000383; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"user-transaction-overview.vercel.app"; classtype:attempted-recon; sid:200000384; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackdck.top"; classtype:attempted-recon; sid:200000385; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracklnv.top"; classtype:attempted-recon; sid:200000386; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmcl.top"; classtype:attempted-recon; sid:200000387; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmec.top"; classtype:attempted-recon; sid:200000388; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracktpq.top"; classtype:attempted-recon; sid:200000389; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackvmd.top"; classtype:attempted-recon; sid:200000390; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsinfw.top"; classtype:attempted-recon; sid:200000391; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwdtsczi.top"; classtype:attempted-recon; sid:200000392; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uwm-onedrive.com"; classtype:attempted-recon; sid:200000393; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vaishnavi1436.github.io"; classtype:attempted-recon; sid:200000394; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"validatie-veiligauthenticatie.com"; classtype:attempted-recon; sid:200000395; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vbbu.ldgknhk.lol"; classtype:attempted-recon; sid:200000396; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verified-this-request-badge.vercel.app"; classtype:attempted-recon; sid:200000397; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vo4zzp.icu"; classtype:attempted-recon; sid:200000398; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vs41.github.io"; classtype:attempted-recon; sid:200000399; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walett-cont.gitbook.io"; classtype:attempted-recon; sid:200000400; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletauthenticators.vercel.app"; classtype:attempted-recon; sid:200000401; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletcomnecitt.gitbook.io"; classtype:attempted-recon; sid:200000402; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletconnectdapps.online"; classtype:attempted-recon; sid:200000403; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"watranfart-fdd6a8.ingress-bonde.ewp.live"; classtype:attempted-recon; sid:200000404; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"waxed.wiki"; classtype:attempted-recon; sid:200000405; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmaillshavv.weebly.com"; classtype:attempted-recon; sid:200000406; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weeeqweeattt.weebly.com"; classtype:attempted-recon; sid:200000407; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weigh.skin"; classtype:attempted-recon; sid:200000408; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weigh.wiki"; classtype:attempted-recon; sid:200000409; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgqdqvtn.baby"; classtype:attempted-recon; sid:200000410; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wgqdqvtn.pink"; classtype:attempted-recon; sid:200000411; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whatsapp-rqr.com"; classtype:attempted-recon; sid:200000412; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wirelessvoicebtpaidmailinfoplay047.weebly.com"; classtype:attempted-recon; sid:200000413; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wscs1231.cyou"; classtype:attempted-recon; sid:200000414; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--metmasklogin-vcb.gitbook.io"; classtype:attempted-recon; sid:200000415; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xojautruffeuttu-4659.vercel.app"; classtype:attempted-recon; sid:200000416; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xraiz.info"; classtype:attempted-recon; sid:200000417; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xraiz.vip"; classtype:attempted-recon; sid:200000418; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xsuweamskeidjf.weebly.com"; classtype:attempted-recon; sid:200000419; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xya46.cc"; classtype:attempted-recon; sid:200000420; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahoooooo-108560.weeblysite.com"; classtype:attempted-recon; sid:200000421; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yavanica123.github.io"; classtype:attempted-recon; sid:200000422; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yi5lq-syaaa-aaaag-acfsq-cai.icp0.io"; classtype:attempted-recon; sid:200000423; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"you-can-receive-here.vercel.app"; classtype:attempted-recon; sid:200000424; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zeiitgeist.angelocachero.info"; classtype:attempted-recon; sid:200000425; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zenixoikitti-5809.vercel.app"; classtype:attempted-recon; sid:200000426; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zeznjx.shop"; classtype:attempted-recon; sid:200000427; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zwzcn.com"; classtype:attempted-recon; sid:200000428; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hpqhv"; endswith; nocase; http.host; content:"alturl.com"; classtype:attempted-recon; sid:200000429; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/descargar/kmsauto-net"; endswith; nocase; http.host; content:"ardilu.com"; classtype:attempted-recon; sid:200000430; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/parcels"; endswith; nocase; http.host; content:"did.li"; classtype:attempted-recon; sid:200000431; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/servicesatttttmail"; endswith; nocase; http.host; content:"flow.page"; classtype:attempted-recon; sid:200000432; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sky/indian-stock/dashboard"; endswith; nocase; http.host; content:"hdfcsky.com"; classtype:attempted-recon; sid:200000433; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!"; endswith; nocase; http.host; content:"hdfcsky.com"; classtype:attempted-recon; sid:200000434; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/djgj07/"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200000435; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/pubgm/"; endswith; nocase; http.host; content:"pay.zing.vn"; classtype:attempted-recon; sid:200000436; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/go4bnv/"; endswith; nocase; http.host; content:"rb.gy"; classtype:attempted-recon; sid:200000437; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/18ab5a"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000438; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/4ff03b"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000439; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/8wtcv4z"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000440; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/96a02f"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000441; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/c0d1afz"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000442; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/d2f265"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000443; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/eacc63"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000444; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f9decb"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000445; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mzhpkzf"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000446; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/nbyh9vh"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000447; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/sa2uoq0"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000448; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tcthi8d"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000449; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tnab363c6"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000450; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/wx1eo7w"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000451; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tvybxr"; endswith; nocase; http.host; content:"surl.li"; classtype:attempted-recon; sid:200000452; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/carrefour-926/"; endswith; nocase; http.host; content:"tinyurl.com"; classtype:attempted-recon; sid:200000453; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/t8vi"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200000454; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/t9ka"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200000455; rev:1;) +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/talr"; endswith; nocase; http.host; content:"urlz.fr"; classtype:attempted-recon; sid:200000456; rev:1;) diff --git a/phishing-filter-suricata.rules.br b/phishing-filter-suricata.rules.br new file mode 100644 index 0000000000000000000000000000000000000000..b06da31b89b207977135b74e9d5b5cace2261d8b GIT binary patch literal 7411 zcmV`5~u5Dxi!4RsiFdmR45l z5ubprM1T_Kv$M`~If(jY<kqGA#gfI=rGxXW&tpzz)6?is0P_oSHJk!krmKf7{g z%}P=7eXQmCgj&Ak-^li!=H&f17J0&+Sbx@^4HN8zN#r09K=cR8Ozs0JRIDQU;d%qW9f(3w$a|d`r#)JqlX-@;@4xV^*ASP zw^H>md+>k&{(_9`AKCkM{F|cBUHQXL9@8r6Uoi8N!E?nAKY5G}N%?v>BKTJGvh!~} zR;pY3eV0?UReg5db6P*}%{hJk$56rP(?6(X1pks>}LI{W0cV_%%&P(EZjh zo&LX3tn>YEPxEo%Hs2NBcKZ79pZ&={|M=?<-%_d9`wJn2>W$lK^gso*s8 zH6MH*bS$Gy@%y8Y`D8=pS72Q_|l@`)RKkNVr6Sec6Nq``;2D}a^--z z!gC9p#G!pK@>cl1UO{U%RXTC)J7FzmN@R$60p8ETJnZM(Rr0*?+zTP2nR}8g9ut0> zEP4*d@xVM#N8YX6yLFG-&VBM%&?BRg$2BLPcJPsqAD)eqkXlHg`P@DqKR{1h-zpte zHZxd|FQ;&ar}2K49Y0~1$+Lsv69Po$03xshZjTi+e@7LnP~jKOoSa9f1v@tnHD&63 zZb_9m)kkPa_IOVC{45oYixtQ-o8q|u<7cTEb{zg@F^O_rR{093v&R zrrnmG!C|74!Wchr8_qy$WE7{y^!-HLbD2%y;W%|ee^y{0($w^0H&Tz7rTu7PaCuBu z;gj-ebChoW=1`LtvY~Y8b=|QppV^gFkY4HYwH721FCV1uji;74|K7H3BO;R0JVPr= zzgUHq!R2SIiCbas+th*@?cy8lE?`|>s1^1PxYd)lweeQj<&L)G210Aj)N0Cj`1_(7 zQuq38dsyxn31S$$ z_n|*!KJEsaSwCfya(yqf!)yrE8>wGpRB>I-@-|X)I+nuS2HvnmRw6gdhDI|35wR=9 zmD^TN;&yQ`8xEMEoGmw2Eh~R^L%AL=8%4Eeq!br&G`sh-(UzB32NmPAklI*W;;1?` zU4i$UgGMtC1Ugqi39W{X0cXqsC>E?4Q@d+S_u8$O&B(oGT3^YV4?PjrD&Eo)b6@wJ z-S(Yurn%Y|KlcJty?)ybGYY}8ZL{mTx^&R}!kYcQ6se&W%7N~e(HeM$W;0|ctzu(R z58XnlpL>ldo^gDnkVR9V`(?L_tEf^UKjJg@%+^-sy4Ip(8A~8u(;;}c3tL0?3w22& zA3PlAJNzkfR~POb~Zr z7WO?oNFS^(NKS{^SoZx-%(qZdE2Dcea3|Jf}6~XzlXu@ zAe5f?+Mt(*k+8kiHX#F^@@g{mM1F@)!`IJaNBpc+T^YseC3tRk(Bm?lwa;--${5Wo z8Sa6?om$4aWekWZKD+kws4#P=g&C;wb$cPRnKdQG0-_Is!aQQ42U{)~r3$lVZ;!q0 z>8lIuft5c%kMv^&Tl3z!Y>aBSkLv_qC}Sa7(Y5Wr9mdHOrlgqInBeEB!@7*AWIw?D zJP8hHIfT`nJifV%(bN(X(7tqk8!fgv`F&E>Py9G_>>5*|AbZR&$cE}W$e^6H&+`6W zo_elyGq3ZPqjt01%maTulxkU)p7o=(OoOs)7X8HZ=w_Id7(mag>zK;rbpr(yuW{j5 z%FB+X2v**NR#rVdjlLR~xm62s3D57-WWMB5ou5TVBwEzFxrsAe-^4{6=ecm3_y;@z zEtosGUW<)9q#PlS0nCyTcnS0~WSe-`+19yu@Su${<}0l}u{!NhGu0H=l(Gw0MH^a(Nd!4?eIC}C*UZl> z*3dN2LQZ0dV0@;~)^%MBT0FMR7drG+LIammJj75s9m z-6IRCzjl4!k3-k5@+z%5;i}cz=;qhTPa4$BiVww1$zi~NdB+d&SbIWG%$m!wvf6s< z0_1(#cMq_8rl_>SgmJ^o&Inq{8`-D$jND@ugEvH2c~?a9V^lMBl~$Q(@@sBKPPXMl zM+VmGNez3QpX}QVpC^nLN^44VH}exQ1Xvf`N~yGpgms%;H+mK}QCc-(*oHRa3OCdy z7nr&}KPxRA;i3(np}yahudV7Xv`~xq0oc%EoPCRRXZsH{^m#w5t9ooX90pV`Sf>D<)@>6Sig>s1<7c zNPc^@(&7;NZ%4#sdllZqx1jlJ>690xMIwr$AWi-ov%wUO@9<{Jxye$^t#FEt&)ItD zkxL2-8yrmL%o^M|hgoSsh-e4NZ?i&%uok_@eA^=vK?`w+CQirMbFG+Ah6yz=Avz&P zXrUJ2B+8+7J4Sv{G?`h_pxbj9Mm14d&V9CR&|`uYRFf_WSD=eZ6e}$cu@s)L;&V{L zls&2RW0B9rJx6Wi9!KxsZ-_MYs#vAcLJ&=U$9JMNwPu(>4R$AYof_ui`Z97b6mbkiXROu#9O?6FC3~*-6e((8HZ)dr9osiMUhM^v2h_8l6Dm4(tVb69@#mrj$ zD>(3xd+z1Y9iS`w(+8Onx&oZiIt^dIQ;fTd!1fg@zuxc9tX!m{~VWLju*rL=TI&}5=%)@G=CK+5`!O6xd;9x(NIOl-`Q z{Mwk((hZ^6Q40a=Os)Eq_U64p3l)dR1EJ{~SRfZDu|Q~b^8&abY-P78A2KOIX{BWz z0!Ku}A+sO4j0vR$AC7jw*)TAV3_#m^Ewts(6E*ktv|u0zH2bt(DXs7jhaZ>&*2dwe zCk-WWO8nf0sI=gNn*unT?>S_?++;Jf#Lm}2_`W}z43*Y-_>nrmm16E#f&hh@ZOGCA zSFjP0y$E82f;n1^(gF~d2DsBBKv{`+Yf6hhR5G|ZpMJTsCY4rwSQoHBh3xI{$VsX0 zCy2|uKno2BGk-f-C_B5rd#r4evWdbb_Mo(~LqA}xH73;$PIJyx7V%=83@@s*%)>44 zg=DNzXsP)SbTy=oOIoVx4J$QeSaCxfw3K^rd7vE+sP%q^`5v@<3i}M=v_KBZ+-@G# z+Aw!$DgAI|NbxvFnfc!|`$avj_H|W?6pRd7ia;1gtWKRz>*wa#Ny&dCe)eZJ#3_b& zh1Zfii&z)-p`}7Zjfblc?k+CR?Ap?#6lkduQBUC=-Z8v+c=OK*Tip*~kil~#zT;_dhL{ri3Uy={VoMr8==?lk3f z&%BiufcT4i=l?&J=f`ZI-#*ZWt*I!j-S9s5 z&)ens+?V&i_4eK0Ahzj5Y2}8f|DEysKcF?%_m1NTFYb7J-M-%b{!|TaB~1rtB*>_- z3@(rR^)*+HnP?w@kt_4|re-F*(O7BWh93*>-|GOt?%0^B#E=~ATRQi)&X^&W6FtIh zysxV9n9aMB$=NHex|RSS!L-T~xAQ4|88I=o7Ef8e$5O;|DmV5w~|cVN6$MljWxAD@WeJ7))h>T4VT3*vzQRj9rFk0>~WGd=V>lV9s#4z!pw8M@U8I zgca2DCg*f1n=Q+LD{)UoUBf6^Q_7i1=W=jmiD*ih#c(U5ZfD>M-!eC6rBmo$fF=_? z5WqH0)9l%em$ZU6lyUDGd%J{_DZ%ZGs#|i?WR@C?Fm3I~QouGJl>=|f;IrBwBUj*X zWHSt1naKCn;H(jhRZ9ZD;i@` z%^p9v2{UJH&a#k*jk&-n1f^`5uu4&E6ES zYsa#?bl1t})1KemZIs|D;90n85RRSV4Z2Gg+|IjML5De)Dvu4+s3lDV&q#-PICW45+@ABmu8kKD(7o+|0g=xdd%NiG!_5CjIDG0au5)1#ZBF z5jXahp)4a=EmzZ4jY2AwK?3%qyGQYa`Qb^nS*eC&D?pA4OWB?`%B_6vt*AT($#P*) zUVCoC@I}%>dFD*q$_cmb91%(eO#>|m6Q13uO+YymY{j0Z_e;KgFM~a8g9g8MJe{}e zI&a^BAwsq4K?Z|PrszI41;rL|8Q`Pum#|Kq&H$M;*D@%ep~$k~2I zBRTtB?JMtn{Z|D_>5GPc_Q%sxoONM6km&%&1GyOi(5Qv7{n?M(+fP@46bwqGv=B;Y zxB2ta$MF@Y{&DiaKxCd^~sI!Tf5&5_i4U`>fBWFK5ni ziMa+1M{)0&NpKked~`$fpSR-e(DJ(BktyH-vXN|=IJA;t z2_2E-!*0|U8}>?zuB=Ws#)=tBNmhfuuSB_`N^7mGd42@WlPJ?eX~C7KLyHA=I2=}! zD^{V*yCT=*Ilk0zCO53Y*v}(*&ni5pvp^3_pA&8Q9e)6=1Xa3a%ZM)qb5D|d)4YrRSnMYBx6VX=*)VuQcG^!pdSHM~tPso4ho2rrhq=-kD63O9 zx?i%6JA9Y7l9NG%R%$2CD(Ox;5Koyuhc&Y#$qr^_QdPO3m0rm+mvZwh%p!PMQM~c9 z(!`~#bcgR^)@{&1u0@>Ol#7>}jw`K368fNJ_)O{chMfJ}JvQ1DLTEMbNoj?Vw%wi9 zLIEjtLue%=(lWfz7F!+KK+6M5b|8IRdSOKf;o~QDa&h78`fX?k<*ghd?W#k6NtY zuN4B1&yYMg81T@>^fjp@KEr$)%-rKL^vFM3T!CVrw4jwLhcVmec5j?hWkD;%%QGu2 z#1T0mvrlMe1hkUcFf}=5Ywlp`vC+G&4_b+99OZ*sXQvH9D>;oLPWOzGE%Jp{0vZmh zwAZw=aU5Ho4XrdX`jvdOIWp;8vo)nbOwg*pYw}k!|6aP zk&1VyDFxsbz295f!ES{}>9U`BWXs_y9x1cXcGDBIQk`hvHAAiKiR7`A#FR4KLxfgB z6BgDyQ-oHsKr1DQMqe}1oZF6VPcbGY)MN%avt(czmH@7-gVIV7E$c-~Iw-9MFj_#(JIpoSmGNLduXolyj7yE<$OFThW!DC^R5%WH)|Puj z9;Uu9|ADu>Nt%V>Q)!RWOWG9lRbr;Q= zYsoQy*^v7@xBg{AE3t)k1Ayo2Mui8Cpvov<}HkAd$7rTn`{O*D?XnZ9hERogOCON=qPA?kctjsl*mx zXf1h=yd$d)ZKC~$om$NOwDY=&(xL~A{GFcAYHrJdt=7hLZ>CjKrIioLduO1J<^i-O zG+3&N6tosMsQGtk7eXjIl6x)_bL5G#-Z$u8)fHN683ad!$h;a5Cc4q|`>Y>Y>lrxu zh7%%L5VAk;(E8z!n~Z<4a_>{9^ZLrbF69NSS$C(#&oQYsy?ys`!lz{*Xya7-#J!W@A7j;E2aN)$^IX?-$_5KlUfKd2`!Zp zlNlNvJt{j5lUKR_`2pTq|2r<(0~?n7Om=^@i|&K)w~pbZd4Kv9snXg+8wG_Ho%r_Q^5oQCI z9XyO?S#j?lD)jb7{3K%ORw$Al2ccNMZSQ&PSl74d=}@xFihS^EV(J^k0L_gS0i z=`TP1`1I$)=|Ot=^wY7x4*p-hfBMU&qzCosN#vr;IL}1&bDn<^`KPM-AAJAI>!uy- zpPu-WlIPQJkNfAJMh7nknBn{#e&!E$g-uR)wb}b^|MbHT6JA{QY_RJOt6Xl7km2zJ6>(U4}tpq=PpSbfXB}ai`;jAZtzKZ59@~4%pBmy zKR@kSVS~Ou_~$1F*H8TO@2KGwUBR=#Y7-hOwCLlY1y#_3SA{6zz!qe|*15!!&EWOG zZu&J`Ee?7~6*}I?c~>@U7#;^(5eC~WOPt%Pse)|_(WSbrhAQX|nM7V>ylpd%?rTG` zabbZWJdV93i@g<9UNzXs;~Kl83Rw1ocUSx!g_q}K@eW8dcecZDxNt*%+}T%fdJODZ zTf-JRErwNPCIX`_@ixfOxo=KxTE&@(6E@SLS2V{Po)6e~n8!g2!l3P8eD7w`g3jMKbgYF?a%wmTNxH$68$&xy$)NObD z%q9mAajTOhc5*gbaQXu*Om5rbh{>`#xu}WZ&&A9ajBv~2kXyQt7nqz~>_sj{12WmH z?YJnp;3eyix3|Y_K$qVwhu7PH&z-!J_?;=ZJ`7yYC3YJqRoaX;yow2p zM+Xo6a>m^VbSa+q8P9p%h!5P+WALJ-jlJZd_a~$8Xrr$hH)C-3tm;pHmFG3 zKu-ppKyZL{-6h+AFah)k6yfJhoqiiMHb9wEH-Ni371k*vBzz@h258_G@GnWgDO105#)rm-5LFU*!p!fMd3mG^Zk2Qi z-{EI`^2;KPZ%a4!W8Yxc$DVz?`2WY!jk2O_sr@v=o-h(v)`U@82itOnfM69QEkP~m z62Ys*4nEsOWvevU?#{;{r^^A~dTp3?k3%I(_WH8Qc^lQP6Wl0v4aF{%?7JutTgpvc)8%JQ z9)puk?uUmX6J?X95Y(D3RrB}RS&_UfrKZc>0@2XGl_5k6{2~!5j1N_~a@|7D zz>X2+8k>Tyar~s+k|AQW3?~1XIa5~gHzi>Uyn1^9lQL!5kY$L&EIs?@i)}PDT?4>? zuCU~J$M77(<1;l)LmKlAS1>7=U_+Jw4&gA!B(v`EdIC*H81A;%sJ3nC^1J7-qq<=J z#+f@F2TYgGJ-1C!RMCLx61YX`^+W=Thd8)Nr&2<7OP8aC=+sN?*?V69IApq{%jx1+WJ^R@2SE@b^Gg;E6KosLR)>+*SLsrUS z$a-FPS=p*yb_H)_*=Kp46>fhyF;@lt(vIwA-N?eOkbC0xc%s_1bnVn1evl@a-E|## z=#h+$=Q&--iw?7C>;oPfLp3A^4Elb@W@m5maVv1TR=Bd=JCG||tuxZawLV$Gr_AkT zo#SRsI9-7WW{RW8eIwhQd|ivqz0a0Vt1n?dj?^ljSoYot2_aVciLMs*~8&sQ8zeUA&L9w8(XKIgIK z5#hmX_1n=qnKgA+rz9wJ^&$|z4+Ac#V=Z(gBgW@_lvyS5k%eC>dl?seK1j{H!`fD*{9pr5TVaIr^Hz@tm)wyNm&>!ylxH)B)u z7e2}SwzmDt+bMFr-4Yg8aJq^TqXWp^RZ$VyT}>wonpyeRvg;|`gRaQL-&*KL#6N$D=fj7+C&_yrhfV zXZM|Yt8|y(_p&oBAktNr2qySPLEx+EhBZm{Aj<^<1vYYGy+e|eX&*J9OIKlHa>wQ@ z<^oo4PG)u46-n(*mKe?z>pL)U5w0VQHjtZ8Ts>}vlCFZpJWR8Gj#_9!S1|%(nuAH6 z(jP%8uuQp^>B>gT@VxrhSI?&7@ol@Du2RGd3z&X6j89|gbmbyKtr_+)n6)3}86!vg!`u*otyy^1Po?2WECL|7Ql zFnd7`qrE$Jrj25~dmMR77x|ujD;a!uaUpvH7w6YH!tlMEq?79umR-!3l&VCWt}uk& zt~D!*j29LDG#Tf4iijhps}!N#>hlX2OybPraLH0QeLRm%TXfov*GoSfP1&X_x1g&O zp>KMr;7rRoOd1yF2MhIb85MUO#hDG*yC6rz_KNIl`idX|cUrcwA$X`6i zV0YoV#{rY&W{d2lc{yOimqQVb=VQa`xl9@)GF}gH8z1N@Gc2GKT&=fnkQKa4+WbaW zqhZm;T$GX7WdhG`udi?SFy0?;Z;zuVOWl@5&N{9r2VI?pcd#+bx#`L@EOs2_v92K} z@sO3gtWxf4y0Q(6owUgiTM(rbX?q*#YB;>34|{k*UCib2OpLB6Sl>tU5In}*l(Epob$uExVEZ`Qaxvq)feeGCT@x=r5J z!2o10S{fsFa0!)a=!!qA@*Jgh$ZC>2JYC_3RrT(=jA!JqBwfXa6?PdmW5ecbQ8;NP zNRfEqboC!XY+LtBc9Y8jKD$pRhYD;la}RV?9q^;xhk8_pQp#rrZdoppON-K#c=*S5 zh^#Xz=;}SJdT@5Pqc7?z+r4$@72+r11YN0zRbOC3Xy@~q67vLIv4_4F{)xP(Wu;TC`ztM4p$OK&hh+qV--=x>pWLIsM`?Hi=pDyXM zp?>(Z+Xel;k0<(qt~$he+cjL28K0dx#yx@g3Azdq>+AYz)>nrA-%g1~K8~3z-!u2y zTP{d+vOcbzyI%q3nC(4+t{{ZzrPMFaFLA0qg02>Xfmgepa=2YnTo_$32s8T32Tekr zFyAidDnS@M%=ap4iIZ-Et|EllIUA&NIxHUBy~siZlHlC7ZHcr2S;l5psrGqfkC)mJ zboC!T78xK&y?Yj986OAT5C@H!*=iAb&#apshfS8A*$vD^V@_rnLVp}^M;CB#Ux(5D z{G}Wup4=aMN<^b83t5GI)(l$-6M)&AJP?xP+9hI)uI1<96WhxamhhR~2F_ z>gqB^1#Y_H4_oNIRN6a{n8!woXg=50!rLRYt8d$DYGBl@#`IUu|lGi^dwwE>gy$;ovM7yqVHfc@XV zl6mWw^L$q{NY`@^boCtWgEXA&o4&-1$k7#SK)~J(cKJ{;i=Qy2E84Ifea5)}kfRuy zrYQMPO6bN4hH-3RkhQFs6LHpPNn4|7+A^=99APMnuI$35)q-}p@g}K5AsAjjBlE6~wnjU zk7HNiYi(0RTZ1$gZN_RCi@Gc;m6w9oZ9mFEHJH7$U9N^`zfqCqqHSKZMc43BcG%0& zi8TE%U<+4L)NP%Q(bgc%MO$8Tq~TID4U~Y4v_d8}7HE!Ah!UdxMkQ!lqYDdstENSs z(TcuPLj@Rek(?H)hWNfgnv1p}s#d)y&=zH>IL4GpAmQlSs%*#j@r{Z!7j4_I=^KRJ z)qOeUr7R^nk1AIfQdHf<_YKlqwEf@iu5HJ0+=%{4@{oO#S`tZJ5G;~ES@0&AwnWJ! zCAaHSx4wtul6N_xS=Q$pvr5hWy^}P5lSVq zfm(~Uij@>_7f`{%+#pcKO9mwzFM3*(ee&8DL#;)-vL?K1R8zzfMbNH;2~m+szzhNT zkYWheTg zPG9Y*QEO3&t0lhs#^T8j!+a1i6F?mDRGixwg%Y09F4 zgi;X2n`AanYf)K%=!~m>g{HJr0wgI^vQ69djL1&&WHwN1Q3ODJb+VrrKmSP-{_5D=ApjLhV{n+K`rM;DVJMNRYZ`$xjd(hMNuE_pE3rDKvk`7yZ?nnTwmfur1g}ZTm3uQ?k`4;t^+dV$=YI40nq+rW;Wb3Lt{kTI z-~i>U6we4`{X^3mtthrZ-y6=lEHfC7$Pn>z?(IUa@$6PXNn_Ke(H@T}STt zbv5ir*X#}i{pz?X@lS4Wx>zm zrk}?j(;8CYH9>h{exCm{-mf~#ZV>UZ)gS7-hu04Uc)0R#B-r8gM1gm0^zDyx?~;3+ ztEz7nBAR8DcGNkameKV0#E$tDUfUEmF4vpxO}-erzfTihPZTKI#@P(ojH6!9JnL9> zNZ{f%M{(<@CoK;oe7ycBZVkp>uQy|Jf0`3U8LzUt^`T$$>k6;9A1+!&=kuWXlr6Vh z%KdQBN;e<-5?KxRZ*sv#@Vc9LZoM{(hQuASb1vL|&?R2b{xa%uKA_bIUN@77I_Oaj zZaGifjDC<)Z@1Y4o#lS4aD zaPXZC@X4*zhX`TF2?0m}YL`RUYvkCyd`dj?I5zYRcKEMeRHkK~Y#H^J+b;w87)wnA2L{N-(&4J&sl+emt)OYmB#{4XAkkWgVJ z!NzvX(G(OSL$;Mi@RRR@zdC}SejogYf&lw2_>X|cs|dBsycuj}Y|^d`g4br{)xomL zHa;2!A^&GjrL_Ft;-*0I1+F6VaMFu2lU`=13Gqdj)Lo4~1;J`s@@JA)?*Dey|;Gu>NA~Zm@X$QzBS^q#D*0 zd2gH+-0Q>*R0OY|%AerF)lzm55xfp60Q;7eMG1H5LGxaM*FWV4c-A(D!BgbmYg!!# z&ya&}NW%_;$1B(7agBa=Ul&p_$R7^)&39rUIqtWJ(Qi6%>yM9ohaY?Dc;ody@v~L& z1#+c7<6f&I3q*p~>BP_X`NB;;yZoFm&Up2lQ#>ZJgk#(UuUCop_xv=8pA7JfO|ZZt zczsEH+$Wtc^G!q5!d>vum^|)@Pm1Aqok(8ze}ML{GeK$CYt+~Q>NKq(ZQTj4yU6dD z*VP(8z2Di8;58BX0eZD-NFC`8IcPhrlSu@P*AfIkLlEQl14q~hUh9vqZJy8lEhjxL zao?+UnNj7}9Bw;8qbGYj%bCUrUIDkUc%)rhUo%$MhnFYtntr@?{bq4y@X@ZhTIEGS zu{OJ5KYFyn4lv&akT&)_%_CPlZO|EB*f8k1;Nrd?ELs5<^r-X4$qpRKl`toSwFWcf z=-DmikbO0*II@=+uL;K&0gox>v;BBG#CUyhJcCqDi}q+1!)vVZGyeMUvo*X{8h_v? z6^OW__|fXPU@l?4WNq8#o7o@X@%m!~xS))yF}I|YhSvfk*m=4=+>!WFk0WESG6A1h0!kaM}pBUi5mIt(~)ybnMW8;}v47_7hi! z_c`EoiTHs$b(aHPCx~!=e#9?Fwq@freFzWf&wZHl*aLV!UbF&j&DSMvbbxdwFN4!b z8XT{G!z!~I3^2UhvSjhLPMY0lRobdPC0F-DtuXK!GOU-;^!mKz@;>i>+Ktzf;dMvH zMo?vSXsGdeF|3Qvo}oavOB;Q(GHnxL%||s{?CFw^ z^SB=}T7?GXhv^M~3UEn4_Vgdf1XqJTQkvlPU)W~)cr3Y*`^!&Nh701}wh(u8BfUttGt0en!;#m2Pe ziWIN$!i~oTx1PI@^-9&e&Ec}K^I#@st8}h!OOlHo#p}Ruh~7udAh8LxC3uIjo4n{;M~;x$J2 z9dF96REpOC;knNtZgX(gq-UQLuie4TI32fTKJBqYSh!I!W5wp@%gFBqZH@$Qy!Hn- zFMU~&GU;hB#cOx)X|s3~I(GUW=fT))lj2BSg4giib3Q{&>ejy3YY1ybYt|hpOYyoM zd^&C(Nqz?uuiwE7Y{Kyy zfl|w&bs1pNX4Bb8yCYAGC|<*Zhc+e*+W3%jJLqwiTmlPoT2jYrfAG-Oe9q=#LNFO? zi$ekquNT5YKkWH4$)29#^+9;t9@3^IHarS$b>^pEe4Li+DRwH+R{0wwwtxQ3!oBVF ze`kh|VRd5~H62!Jl=hOlfxC~(9W4y*swuQD3^ z{G!ZY=HJvTe>3V=xF0K8mStChN+)HrCmy5>^W-Nda@g+T)9vQQ$A?G>>;DX`IF{Tw-OsDbx~ks4k`s)*r#@(7 vXjO7(H?x}>pyiSGZa*z(1#;*v{C%{b)y9F3?tQfUq>BFoq{i*s$i@KxxuW-M literal 0 HcmV?d00001 diff --git a/phishing-filter-unbound.conf b/phishing-filter-unbound.conf new file mode 100644 index 000000000..393536f71 --- /dev/null +++ b/phishing-filter-unbound.conf @@ -0,0 +1,434 @@ +# Title: Phishing Domains Unbound Blocklist +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +local-zone: "1111365dh.net" always_nxdomain +local-zone: "12931-coinbase.com" always_nxdomain +local-zone: "215323.com" always_nxdomain +local-zone: "260aesthetic.wixsite.com" always_nxdomain +local-zone: "3650947.cc" always_nxdomain +local-zone: "3659ll.net" always_nxdomain +local-zone: "83291-coinbase.com" always_nxdomain +local-zone: "94-103-188-123.plesk.page" always_nxdomain +local-zone: "9825057365.com" always_nxdomain +local-zone: "abctrvabc.com" always_nxdomain +local-zone: "access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com" always_nxdomain +local-zone: "acclimatizable.fun" always_nxdomain +local-zone: "account-update05.myvnc.com" always_nxdomain +local-zone: "accounts.google.auzen.us.kg" always_nxdomain +local-zone: "activebusiness-unlocker3.com" always_nxdomain +local-zone: "addwsrbh.green" always_nxdomain +local-zone: "ahnp.vercel.app" always_nxdomain +local-zone: "aldg.ldgknhk.lol" always_nxdomain +local-zone: "allegrolokalnie.pl-891241214.buzz" always_nxdomain +local-zone: "alutipcentra.pages.dev" always_nxdomain +local-zone: "ambil-pinjaman-daana-payleter.xforms.web.id" always_nxdomain +local-zone: "ambulatoriprivati.it" always_nxdomain +local-zone: "amev.ldgknhk.lol" always_nxdomain +local-zone: "antail-conv.com" always_nxdomain +local-zone: "apply-now-to-receive-badge.vercel.app" always_nxdomain +local-zone: "artsea.pages.dev" always_nxdomain +local-zone: "atmailupdatewptnskmdinfomailacct.weebly.com" always_nxdomain +local-zone: "att-101072.weeblysite.com" always_nxdomain +local-zone: "att-1041page.weeblysite.com" always_nxdomain +local-zone: "att-105714.weeblysite.com" always_nxdomain +local-zone: "att-105819.square.site" always_nxdomain +local-zone: "att-inc-107097.weeblysite.com" always_nxdomain +local-zone: "att-login380.weeblysite.com" always_nxdomain +local-zone: "att-login522.weeblysite.com" always_nxdomain +local-zone: "att-service-102155.weeblysite.com" always_nxdomain +local-zone: "att-sign-in-105669.weeblysite.com" always_nxdomain +local-zone: "attcom-100762.weeblysite.com" always_nxdomain +local-zone: "attcom-106808.weeblysite.com" always_nxdomain +local-zone: "attmailservicenow.wixstudio.com" always_nxdomain +local-zone: "attmailservicenow.wixstudio.io" always_nxdomain +local-zone: "attmailsrvrdesk.weebly.com" always_nxdomain +local-zone: "attnewmaill.weebly.com" always_nxdomain +local-zone: "attyhhhhiiii225.weebly.com" always_nxdomain +local-zone: "atw-tau.vercel.app" always_nxdomain +local-zone: "authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com" always_nxdomain +local-zone: "authsyncs.pages.dev" always_nxdomain +local-zone: "autoreplyattmode.wixsite.com" always_nxdomain +local-zone: "avoid.hold-managert.com" always_nxdomain +local-zone: "azbin.ir" always_nxdomain +local-zone: "b45018.com" always_nxdomain +local-zone: "bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link" always_nxdomain +local-zone: "baiii-wong.cutvi.cfd" always_nxdomain +local-zone: "basvuru-online-yap.vercel.app" always_nxdomain +local-zone: "beionfidi.pages.dev" always_nxdomain +local-zone: "bet73nn.com" always_nxdomain +local-zone: "bet83039.com" always_nxdomain +local-zone: "bet83054.com" always_nxdomain +local-zone: "bfrescentremebermainsetreouytnoy.weebly.com" always_nxdomain +local-zone: "biggggggggggg.weebly.com" always_nxdomain +local-zone: "bitnode.pages.dev" always_nxdomain +local-zone: "bitvavobtc.com" always_nxdomain +local-zone: "blackhere11.serv00.net" always_nxdomain +local-zone: "blss24att.weebly.com" always_nxdomain +local-zone: "braucrarasuteu-2470.vercel.app" always_nxdomain +local-zone: "bt-102124.weeblysite.com" always_nxdomain +local-zone: "bt1business.weebly.com" always_nxdomain +local-zone: "btuan-dan2-resmi.top1.my.id" always_nxdomain +local-zone: "buildingdesignsusapdf.s3.us-east-005.backblazeb2.com" always_nxdomain +local-zone: "business-page-property-897432967.netlify.app" always_nxdomain +local-zone: "caipora.xyz" always_nxdomain +local-zone: "calm-pothos-3b24c9.netlify.app" always_nxdomain +local-zone: "carrefourarabiank15.pages.dev" always_nxdomain +local-zone: "caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com" always_nxdomain +local-zone: "catgirl-appverset-nya.pages.dev" always_nxdomain +local-zone: "catxtokens.pages.dev" always_nxdomain +local-zone: "chat.94-103-188-123.plesk.page" always_nxdomain +local-zone: "check154109.click" always_nxdomain +local-zone: "checkseven.vercel.app" always_nxdomain +local-zone: "ciente-a.org" always_nxdomain +local-zone: "cieplo.app" always_nxdomain +local-zone: "cj12143.tw1.ru" always_nxdomain +local-zone: "cj87335.tw1.ru" always_nxdomain +local-zone: "claimyourethrewards.pages.dev" always_nxdomain +local-zone: "clickbait.design" always_nxdomain +local-zone: "cnsa163.com" always_nxdomain +local-zone: "cock2-iota.vercel.app" always_nxdomain +local-zone: "cock3.vercel.app" always_nxdomain +local-zone: "cock7.vercel.app" always_nxdomain +local-zone: "contact-pro-8291-d01.firebaseapp.com" always_nxdomain +local-zone: "contact-pro-8291-d01.web.app" always_nxdomain +local-zone: "creosrl.com" always_nxdomain +local-zone: "curmmgdv.email" always_nxdomain +local-zone: "currently541.weebly.com" always_nxdomain +local-zone: "currently890.weebly.com" always_nxdomain +local-zone: "currentlyserver.weebly.com" always_nxdomain +local-zone: "dara3dccj.wixsite.com" always_nxdomain +local-zone: "db.service4db.com" always_nxdomain +local-zone: "de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev" always_nxdomain +local-zone: "debutcan.firebaseapp.com" always_nxdomain +local-zone: "debutcan.web.app" always_nxdomain +local-zone: "delivery.attempt.failure.ebbs.co.za" always_nxdomain +local-zone: "dev.stream.mornar.app" always_nxdomain +local-zone: "dnwqmh.click" always_nxdomain +local-zone: "dropsmartchain.pages.dev" always_nxdomain +local-zone: "dsjoting.group" always_nxdomain +local-zone: "dulb6c5p5.top" always_nxdomain +local-zone: "ebay-mallwholesale.com" always_nxdomain +local-zone: "ebt-lilac.vercel.app" always_nxdomain +local-zone: "echoredled.netlify.app" always_nxdomain +local-zone: "elbarco.percentadnp.info" always_nxdomain +local-zone: "eltritongourmet.com" always_nxdomain +local-zone: "email.mgb.modento.io" always_nxdomain +local-zone: "enjomugg.firebaseapp.com" always_nxdomain +local-zone: "enjomugg.web.app" always_nxdomain +local-zone: "error3456vhubhornbase.azurewebsites.net" always_nxdomain +local-zone: "example223.wixsite.com" always_nxdomain +local-zone: "eyeydhe.wixsite.com" always_nxdomain +local-zone: "eyttueiu.square.site" always_nxdomain +local-zone: "facebook-avip.click" always_nxdomain +local-zone: "fame.pink" always_nxdomain +local-zone: "fassehoizubra-7696.vercel.app" always_nxdomain +local-zone: "fastdropchain.pages.dev" always_nxdomain +local-zone: "fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io" always_nxdomain +local-zone: "fla-1001.square.site" always_nxdomain +local-zone: "flo4211.github.io" always_nxdomain +local-zone: "fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com" always_nxdomain +local-zone: "fnuttlie.wiki" always_nxdomain +local-zone: "fokeijonnekou.vercel.app" always_nxdomain +local-zone: "fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com" always_nxdomain +local-zone: "free-verified-badge-form0-service.vercel.app" always_nxdomain +local-zone: "free-verified-meta-badge-service.vercel.app" always_nxdomain +local-zone: "g06668706.wixsite.com" always_nxdomain +local-zone: "gccndbqg.vip" always_nxdomain +local-zone: "geriodememerkezi.online" always_nxdomain +local-zone: "get-checkmark-for-you.vercel.app" always_nxdomain +local-zone: "get-free-verified-badge-service-on.vercel.app" always_nxdomain +local-zone: "gitanag.broke-it.net" always_nxdomain +local-zone: "gruprocuroipra-6493.vercel.app" always_nxdomain +local-zone: "h5.b9en.com" always_nxdomain +local-zone: "h5.metacoint.com" always_nxdomain +local-zone: "hcghij.top" always_nxdomain +local-zone: "hecregayatu-1014.vercel.app" always_nxdomain +local-zone: "hejmtxxt.guru" always_nxdomain +local-zone: "helenblunt6.wixsite.com" always_nxdomain +local-zone: "help.accountsupportcentre.com" always_nxdomain +local-zone: "here-apply-for-page-review.vercel.app" always_nxdomain +local-zone: "hgbk.ldgknhk.lol" always_nxdomain +local-zone: "hhideiie.wixsite.com" always_nxdomain +local-zone: "hitummoinneullei-5882.vercel.app" always_nxdomain +local-zone: "home-101067.weeblysite.com" always_nxdomain +local-zone: "home-103465.weeblysite.com" always_nxdomain +local-zone: "home-104341.weeblysite.com" always_nxdomain +local-zone: "home-105266.weeblysite.com" always_nxdomain +local-zone: "home-105929.weeblysite.com" always_nxdomain +local-zone: "homeattatthome.square.site" always_nxdomain +local-zone: "hpnefhqs.motorcycles" always_nxdomain +local-zone: "im25.net" always_nxdomain +local-zone: "info.supercitrus.ind.br" always_nxdomain +local-zone: "ins-business-home-center.com" always_nxdomain +local-zone: "instagaramgalochka.vercel.app" always_nxdomain +local-zone: "ipv6.43-135-137-110.cprapid.com" always_nxdomain +local-zone: "irmt0ken.win" always_nxdomain +local-zone: "iujf7839iofvkbcu748.weebly.com" always_nxdomain +local-zone: "iwimwmiwi.click" always_nxdomain +local-zone: "jagej73796.wixsite.com" always_nxdomain +local-zone: "jfdjy.com" always_nxdomain +local-zone: "kalyani963.github.io" always_nxdomain +local-zone: "kexoigrufouddou-5902.vercel.app" always_nxdomain +local-zone: "kl1k-ds1ni.neupdile.my.id" always_nxdomain +local-zone: "kliind08.wixsite.com" always_nxdomain +local-zone: "kreelo098.weebly.com" always_nxdomain +local-zone: "kremlcup.com" always_nxdomain +local-zone: "kshitij12375.github.io" always_nxdomain +local-zone: "kucoinglobal1.com" always_nxdomain +local-zone: "kxbztydc.black" always_nxdomain +local-zone: "labanquepostale.jupiter-analytics.com" always_nxdomain +local-zone: "leddevotoze-3146.vercel.app" always_nxdomain +local-zone: "linnkdna-kget.wxxzsite.buzz" always_nxdomain +local-zone: "llahi.info" always_nxdomain +local-zone: "llahi.vip" always_nxdomain +local-zone: "loffaummuddote-4145.vercel.app" always_nxdomain +local-zone: "login-att-10221.square.site" always_nxdomain +local-zone: "login-form.world" always_nxdomain +local-zone: "login-online-outlook365.com" always_nxdomain +local-zone: "login-outlook-midstreamauth.com" always_nxdomain +local-zone: "login-screen-103134.weeblysite.com" always_nxdomain +local-zone: "loginaccount70.wixsite.com" always_nxdomain +local-zone: "loginaccount77.wixsite.com" always_nxdomain +local-zone: "luk6414.wixsite.com" always_nxdomain +local-zone: "luxlifemiamiblog.com" always_nxdomain +local-zone: "m.meta-accessibility.io.vn" always_nxdomain +local-zone: "madebybmr.fyi" always_nxdomain +local-zone: "maqpiexyz.click" always_nxdomain +local-zone: "mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev" always_nxdomain +local-zone: "mayfair313.wixsite.com" always_nxdomain +local-zone: "mdbrvlfy.black" always_nxdomain +local-zone: "mesageriepro33range1.weebly.com" always_nxdomain +local-zone: "metamsk-wallet-3.gitbook.io" always_nxdomain +local-zone: "metttaa-audddt-new-02.firebaseapp.com" always_nxdomain +local-zone: "metttaa-audddt-new-02.web.app" always_nxdomain +local-zone: "microsoft365-storage.github.io" always_nxdomain +local-zone: "mikepattyjm.wixsite.com" always_nxdomain +local-zone: "mobilemidasbuy.n3g.fun" always_nxdomain +local-zone: "monespacepro-client.3utilities.com" always_nxdomain +local-zone: "monetization-violation.github.io" always_nxdomain +local-zone: "moodengsol-net.pages.dev" always_nxdomain +local-zone: "mwsiekdnfjrdufs.weebly.com" always_nxdomain +local-zone: "mxmxnmx.mx.zya.me" always_nxdomain +local-zone: "national-au-b.com" always_nxdomain +local-zone: "national-au.net" always_nxdomain +local-zone: "nbaaiqjq.group" always_nxdomain +local-zone: "nexomyacwv.weebly.com" always_nxdomain +local-zone: "nft-time11.vercel.app" always_nxdomain +local-zone: "nichcheck.weeblysite.com" always_nxdomain +local-zone: "ns1.carrier-ast2-portal-apple.com" always_nxdomain +local-zone: "omadshf.ru" always_nxdomain +local-zone: "online-assist.live" always_nxdomain +local-zone: "online-promo-asb.org" always_nxdomain +local-zone: "openkimono.pro" always_nxdomain +local-zone: "opportunity-verified-status.vercel.app" always_nxdomain +local-zone: "ourtime.reconnect-dating.workers.dev" always_nxdomain +local-zone: "owouwuowo.click" always_nxdomain +local-zone: "p365kf.com" always_nxdomain +local-zone: "p4zv8crnrrha27so.94-103-188-123.plesk.page" always_nxdomain +local-zone: "page-center-manage.com" always_nxdomain +local-zone: "pavan-patil-22.github.io" always_nxdomain +local-zone: "pecinternational.net" always_nxdomain +local-zone: "peesom.chat" always_nxdomain +local-zone: "pencairaanndannaa.my.id" always_nxdomain +local-zone: "petty.wiki" always_nxdomain +local-zone: "pimnhv.group" always_nxdomain +local-zone: "policies-business-page-service.com" always_nxdomain +local-zone: "pottatrebewe-2808.vercel.app" always_nxdomain +local-zone: "pqo.hrf.mybluehost.me" always_nxdomain +local-zone: "programming--service--panel-totlyy-free-for-you.vercel.app" always_nxdomain +local-zone: "promo1.spik.ru" always_nxdomain +local-zone: "protocolsecure.pages.dev" always_nxdomain +local-zone: "pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev" always_nxdomain +local-zone: "pub-1778406e4fec4394901793111c187dd9.r2.dev" always_nxdomain +local-zone: "pub-19b834342e7d465b9f00b3511325a081.r2.dev" always_nxdomain +local-zone: "pub-21dd4dc659614ceb93e45a6de4434502.r2.dev" always_nxdomain +local-zone: "pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev" always_nxdomain +local-zone: "pub-2fefe932a6974485b987c9ba851b5c40.r2.dev" always_nxdomain +local-zone: "pub-3a46d9914f494078a6d6237513e7a096.r2.dev" always_nxdomain +local-zone: "pub-442ed822851244a689b3472ea2c6a950.r2.dev" always_nxdomain +local-zone: "pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev" always_nxdomain +local-zone: "pub-682ad3b65d944376b919745aae3c56d4.r2.dev" always_nxdomain +local-zone: "pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev" always_nxdomain +local-zone: "pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev" always_nxdomain +local-zone: "pub-7f5cf36445d042168bfacd712e890dc0.r2.dev" always_nxdomain +local-zone: "pub-803839714a924882a7bcc2495a26860f.r2.dev" always_nxdomain +local-zone: "pub-8161de4a277e4ee8b532af34954224e1.r2.dev" always_nxdomain +local-zone: "pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev" always_nxdomain +local-zone: "pub-8376b5b2334844d193a525d8b8548fa5.r2.dev" always_nxdomain +local-zone: "pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev" always_nxdomain +local-zone: "pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev" always_nxdomain +local-zone: "pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev" always_nxdomain +local-zone: "pub-9163a97d70394cb499bdd232be6c2169.r2.dev" always_nxdomain +local-zone: "pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev" always_nxdomain +local-zone: "pub-98171471e0944ac3a5820ef719bf0640.r2.dev" always_nxdomain +local-zone: "pub-a263e0790935412eb10cacc55bbced18.r2.dev" always_nxdomain +local-zone: "pub-a291041b077742899b63a9982f04a56c.r2.dev" always_nxdomain +local-zone: "pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev" always_nxdomain +local-zone: "pub-b50adc5d699a4f08aec37102c2103da7.r2.dev" always_nxdomain +local-zone: "pub-c0a934c950e441db96b882789f53c9ea.r2.dev" always_nxdomain +local-zone: "pub-c2c250050109456396c933de259a4fea.r2.dev" always_nxdomain +local-zone: "pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev" always_nxdomain +local-zone: "pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev" always_nxdomain +local-zone: "pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev" always_nxdomain +local-zone: "pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev" always_nxdomain +local-zone: "pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev" always_nxdomain +local-zone: "pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev" always_nxdomain +local-zone: "pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev" always_nxdomain +local-zone: "pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev" always_nxdomain +local-zone: "pub-e42cb528b102447385e3145197916f51.r2.dev" always_nxdomain +local-zone: "pub-e4aff507450c478cbe3f77ad23d75035.r2.dev" always_nxdomain +local-zone: "pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev" always_nxdomain +local-zone: "pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev" always_nxdomain +local-zone: "pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev" always_nxdomain +local-zone: "pubgm.club" always_nxdomain +local-zone: "puffagroibrouwoi-8818.vercel.app" always_nxdomain +local-zone: "qasimk.com" always_nxdomain +local-zone: "qfjfvseq.info" always_nxdomain +local-zone: "quauwograssodda-3503.vercel.app" always_nxdomain +local-zone: "qysgyp.com" always_nxdomain +local-zone: "rajdipchatterjee.github.io" always_nxdomain +local-zone: "rechazaroanularaqui51.weebly.com" always_nxdomain +local-zone: "remote-fix.pages.dev" always_nxdomain +local-zone: "renggard.47-243-192-240.cprapid.com" always_nxdomain +local-zone: "resolvepanel.live" always_nxdomain +local-zone: "resolving--issue--with-us1.vercel.app" always_nxdomain +local-zone: "resqat.weebly.com" always_nxdomain +local-zone: "review-business-case.d2f7p3b7pucnle.amplifyapp.com" always_nxdomain +local-zone: "rlpqwefi.pink" always_nxdomain +local-zone: "rouloigeilleuja-9523.vercel.app" always_nxdomain +local-zone: "rulemec.pages.dev" always_nxdomain +local-zone: "rutinqqwin.shop" always_nxdomain +local-zone: "rwftfu.quest" always_nxdomain +local-zone: "s.team-pw.cc" always_nxdomain +local-zone: "sairanees.github.io" always_nxdomain +local-zone: "sanseipecas.com.br" always_nxdomain +local-zone: "sasklelo.weebly.com" always_nxdomain +local-zone: "sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com" always_nxdomain +local-zone: "sasktelcustomerwebly.weebly.com" always_nxdomain +local-zone: "sasktelnetwebmailservermaintainance.weebly.com" always_nxdomain +local-zone: "sasktelrectify.weebly.com" always_nxdomain +local-zone: "sasktelscrutinize.weebly.com" always_nxdomain +local-zone: "sasktelservicecentterwebly.weebly.com" always_nxdomain +local-zone: "sasktelsupportsystemwebly.weebly.com" always_nxdomain +local-zone: "sbcglobal30.wixsite.com" always_nxdomain +local-zone: "scan-vulnerability-guard-v3.pages.dev" always_nxdomain +local-zone: "scan-vulnerability-guard.pages.dev" always_nxdomain +local-zone: "scanner-metamask-v1.pages.dev" always_nxdomain +local-zone: "scanner-metamask-v2.pages.dev" always_nxdomain +local-zone: "scanner-metamask-v3.pages.dev" always_nxdomain +local-zone: "scanner-metamask.pages.dev" always_nxdomain +local-zone: "sec-sign-in.info" always_nxdomain +local-zone: "secure2-validitycheck.weebly.com" always_nxdomain +local-zone: "securecapitec.theprimepoint.online" always_nxdomain +local-zone: "securerpcfix.com" always_nxdomain +local-zone: "seeteressecalywoi.github.io" always_nxdomain +local-zone: "seivviice.weebly.com" always_nxdomain +local-zone: "server.0e7p.com" always_nxdomain +local-zone: "server.2rk3.com" always_nxdomain +local-zone: "server.8q3p.com" always_nxdomain +local-zone: "server.n6b8.com" always_nxdomain +local-zone: "server.v9vs.com" always_nxdomain +local-zone: "sevvviicess.weebly.com" always_nxdomain +local-zone: "shard.blue" always_nxdomain +local-zone: "shard.skin" always_nxdomain +local-zone: "shared-d7590.firebaseapp.com" always_nxdomain +local-zone: "shared-d7590.web.app" always_nxdomain +local-zone: "shaw-101329.weeblysite.com" always_nxdomain +local-zone: "shaw-101587.weeblysite.com" always_nxdomain +local-zone: "shaw-106427.weeblysite.com" always_nxdomain +local-zone: "shaw-107375.weeblysite.com" always_nxdomain +local-zone: "solutionwebsitedapp.firebaseapp.com" always_nxdomain +local-zone: "solutionwebsitedapp.web.app" always_nxdomain +local-zone: "solvetans.firebaseapp.com" always_nxdomain +local-zone: "solvetans.web.app" always_nxdomain +local-zone: "sondfrom.dexlog.my.id" always_nxdomain +local-zone: "soyokai.or.jp" always_nxdomain +local-zone: "srdate.club" always_nxdomain +local-zone: "ssy.hmb.mybluehostin.me" always_nxdomain +local-zone: "steam.poweredartsworkshop.com" always_nxdomain +local-zone: "steam.workshopsreview.com" always_nxdomain +local-zone: "steamcommmuty.com" always_nxdomain +local-zone: "steamcommuunity.ru" always_nxdomain +local-zone: "steamcomunutty.com" always_nxdomain +local-zone: "steamconmumity.com" always_nxdomain +local-zone: "stepsray.vercel.app" always_nxdomain +local-zone: "support-metahelpcenter-id100003498934.netlify.app" always_nxdomain +local-zone: "sv5gardens655665.weeblysite.com" always_nxdomain +local-zone: "system-portalnu.duckdns.org" always_nxdomain +local-zone: "talwgam.njmolada.com" always_nxdomain +local-zone: "taste.baby" always_nxdomain +local-zone: "tele.zhngain.top" always_nxdomain +local-zone: "telegrambot-resolved.pages.dev" always_nxdomain +local-zone: "telegrazm.net" always_nxdomain +local-zone: "telstra-100408.weeblysite.com" always_nxdomain +local-zone: "telstra-100469.weeblysite.com" always_nxdomain +local-zone: "telstra-103234.weeblysite.com" always_nxdomain +local-zone: "tiktok-888.vip" always_nxdomain +local-zone: "tiltckshow.top" always_nxdomain +local-zone: "tnomwzrp.top" always_nxdomain +local-zone: "toeken.im" always_nxdomain +local-zone: "tonic.pink" always_nxdomain +local-zone: "tooma.cellinsurance.co.zw" always_nxdomain +local-zone: "tpdtepremu.xyz" always_nxdomain +local-zone: "trattujeilesso-3354.vercel.app" always_nxdomain +local-zone: "trbinace.com" always_nxdomain +local-zone: "treibrukeukonno-1395.vercel.app" always_nxdomain +local-zone: "tuesmad.firebaseapp.com" always_nxdomain +local-zone: "tuesmad.web.app" always_nxdomain +local-zone: "tyyyyyytyyy.weebly.com" always_nxdomain +local-zone: "tzcsjfto.chat" always_nxdomain +local-zone: "u.updatetrackgre.top" always_nxdomain +local-zone: "uc-whatstapp-web.com" always_nxdomain +local-zone: "udxcady.wixsite.com" always_nxdomain +local-zone: "uklifejv.cyou" always_nxdomain +local-zone: "updatemail12.wixsite.com" always_nxdomain +local-zone: "ups-trackdeliveryapps.chickenkiller.com" always_nxdomain +local-zone: "usbest.cyou" always_nxdomain +local-zone: "user-transaction-overview.vercel.app" always_nxdomain +local-zone: "usps.com-trackdck.top" always_nxdomain +local-zone: "usps.com-tracklnv.top" always_nxdomain +local-zone: "usps.com-trackmcl.top" always_nxdomain +local-zone: "usps.com-trackmec.top" always_nxdomain +local-zone: "usps.com-tracktpq.top" always_nxdomain +local-zone: "usps.com-trackvmd.top" always_nxdomain +local-zone: "uspsinfw.top" always_nxdomain +local-zone: "uwdtsczi.top" always_nxdomain +local-zone: "uwm-onedrive.com" always_nxdomain +local-zone: "vaishnavi1436.github.io" always_nxdomain +local-zone: "validatie-veiligauthenticatie.com" always_nxdomain +local-zone: "vbbu.ldgknhk.lol" always_nxdomain +local-zone: "verified-this-request-badge.vercel.app" always_nxdomain +local-zone: "vo4zzp.icu" always_nxdomain +local-zone: "vs41.github.io" always_nxdomain +local-zone: "walett-cont.gitbook.io" always_nxdomain +local-zone: "walletauthenticators.vercel.app" always_nxdomain +local-zone: "walletcomnecitt.gitbook.io" always_nxdomain +local-zone: "walletconnectdapps.online" always_nxdomain +local-zone: "watranfart-fdd6a8.ingress-bonde.ewp.live" always_nxdomain +local-zone: "waxed.wiki" always_nxdomain +local-zone: "webmaillshavv.weebly.com" always_nxdomain +local-zone: "weeeqweeattt.weebly.com" always_nxdomain +local-zone: "weigh.skin" always_nxdomain +local-zone: "weigh.wiki" always_nxdomain +local-zone: "wgqdqvtn.baby" always_nxdomain +local-zone: "wgqdqvtn.pink" always_nxdomain +local-zone: "whatsapp-rqr.com" always_nxdomain +local-zone: "wirelessvoicebtpaidmailinfoplay047.weebly.com" always_nxdomain +local-zone: "wscs1231.cyou" always_nxdomain +local-zone: "xn--metmasklogin-vcb.gitbook.io" always_nxdomain +local-zone: "xojautruffeuttu-4659.vercel.app" always_nxdomain +local-zone: "xraiz.info" always_nxdomain +local-zone: "xraiz.vip" always_nxdomain +local-zone: "xsuweamskeidjf.weebly.com" always_nxdomain +local-zone: "xya46.cc" always_nxdomain +local-zone: "yahoooooo-108560.weeblysite.com" always_nxdomain +local-zone: "yavanica123.github.io" always_nxdomain +local-zone: "yi5lq-syaaa-aaaag-acfsq-cai.icp0.io" always_nxdomain +local-zone: "you-can-receive-here.vercel.app" always_nxdomain +local-zone: "zeiitgeist.angelocachero.info" always_nxdomain +local-zone: "zenixoikitti-5809.vercel.app" always_nxdomain +local-zone: "zeznjx.shop" always_nxdomain +local-zone: "zwzcn.com" always_nxdomain diff --git a/phishing-filter-unbound.conf.br b/phishing-filter-unbound.conf.br new file mode 100644 index 0000000000000000000000000000000000000000..0a0231013039b2b90d0bc1276cf8f1f3c3ca3632 GIT binary patch literal 5409 zcmV++72fLcnEE23m=Ay=WSIMy>OZ*uWqN4^LKX1mWUuvrL&BCordXD*RMVEFN|h=~ zyK~XF^sACP)0OGUD%ET64jkWSkaRd@{5wGz{8xcjNV|@ND!`F&BppG=gCj70IHpQ= z>pm4dpo(-QbVm6$hO1lDfdL1r*C7mTCs(N{kW4y%^mA@;pZELc@3-8yT-G0HFZG{) zDT_Y+(^lMj?&H@V{rt;Wh>E{|`q!U9I445?Gh@F6`>pkV{`#Yzzx$lIVgLQZesTUcQGz^&ENIb+9r8ulMIx_UoI3VwB zKkGV2>CYqPl2Ye-hY$w65dD5Hz^P*p&NwrIj$)kTw5H;mMySHuIa?V)@{V}SG448w8 zoC^9w#suA*wws6TeC6tSb`o)57#OcoG{@HO68h-nnxi&6_nY}))rhJYGiM~#^=FBi z-}9i<^YyvV+>&bbN;7Wr{1NpzKd5==>9`*#E*DqwGazFz_OiMbC zH@vGK;Thln=Y|bAr^B0H#%zsL`Mr0cU?>4)$~TyyL4!UAP9l_H4F{&>Fa;OW`CdP` z8ckK%)|k5ESQbGV_9N3#Pfm|pX*A4!jtzWEpB>JaXqR+$f-l&FF--vg-F}BJdQl<6 z3IO>(oE)}J2C>d4DcoY@HRztx&Bwe2$Y*UpKleBF#M=*Y*0I%2q!%i&Dv^pkt2PvS>8~dVc54rBG6IvaGbT;d52}C3NVnd2}R&M z-`F}1Qf{bPYkZI|qA3W_xl2L~Yz9MhbFDaY6!k*WFzAk`SMhx-??M6_^FSu=``l~3 z@?qU2Ch531ZIfVoSR|zw1)Vh8ajfx8acLX@ zfcPWYZ>{)9-lVLzbqr?1fUte0D?$SqLwM+#d!ncIMBgfUn!gT(Oerm7u^|uzG7!%f zN0f~ooa6?SCyWu<`s;>#Ab;6JuiDaq__I#X+q;}t`Z)rWmeV99Xf47K*SV=faF$~B zd86okr=ij>e+5+KtYPS&ne+5x=sj5BfdUX|dS`nr(C zn8kxC9DEg?gwCjrk;9`lPTiNxCCt2!y>{_CQ<-DzxyAT;=JZ8XpO_!D6ns`pXagvn zTKfJzqr7`bM*1gTfnA67ukS5bKCg)tyrwh6`_smVc1wcc&oTIts%qzE$F_?n@}zx9 z*UFY?Hcf>OASHUn(Yl3o z%Z~{;z6@EP^oLyaI8~qP}|euFH`w^FH}jwr6yb&!Z~w% zBBV2PPNJBD<9X9udLmr?Ex!3j5Ka28u*doqdEoi zg#Ct+-6GYcGWEny&1;*f&KT;y{DwW3@{9$@bHzcg&*%GsjXa6G@33VfmM2E4 zb*{ap1oJrBXq*NT#g)EiF8&!3mk^i`b_b^hof&W-|9d16UOiRk2$CcS@eoi5+EVS zSNp&*2F9??j4=*U@FK5-Fw{llLx4%KaCHbxcgaPQK57e~BAFN<3jX%Yy;{HzyOZ}kL2!9d5k-~XHWw&fmlw6J~>F3@57xrPoobZN1P8fM7LX0hYPYj2QC;BAz$$297deGPbTw~)Un^UB$QT$$|kr*PWzdkt4Q;$h6B(Tm*|shJR2qF^n`PP z2uTEEq~bvVx}-6rWHG=3nl_PI)iTB^wxCKFlyu55Zk*(t2X0M_&izd1tyEG8G*KctCCFxXfI@$%bw_HVEwXA?B{i35&N}9zx z?u^m^D1%<2auo{$2oEmlC8-dDlVFnP!s#dvZq!|_FeGtsbVH~GAB&c`UE@VErQm(*(EyC6Cb-YCNXm`Rg5 zUeZU)lknBda>JG3$edCTBxoxbCc~XiY+3Cp8;C_BGmbf_6&L6^3lM_V-Up1_dg<^# zS)LhVl(5eEwo}fEQ4yA2!ehk(W3&X&9;8wV{1Sx{CIT!`dK{hWdd(mP9T(@oO(qK% zq~S~i!I_L;oE;cAx$2fJhD!11-Qukk#=4|sa0m}yCxXz7X~vmTdXdf*oRkrTE+?I@ zX40WrjN{Qpg$#XMOwdVbEd^)m=H&$Gxm!>>$(%~497^CRCh+!WaGrhodS_YG!bh%_ zD12nn71W{~a+9L*?(1yi2-c}+jADtq;<7<5g1fLt5%fr?YEeX`6{;8wS2h?>R!b&K z3cmwN4uXwR1s;TR!dO?s>*$0L zHJESX!Z`1BkX-pCx*{R!J|yZ zKol|>&19>ai5+ncG8d%XGA9@$!+Bs4Y|zQA<-a-^VH9Ihd#9B)%BLk+0dA-dO)X(b zt>UD>0F1O8m5CgzRtusqD7g&GIJF*><^UJCM5P34tJ$|YubPRq`~s%+1w9|nOJ2gS z^hocHFO`b@nlP_RT2b|0V+0~Klf}BNcVF+*Zt#fNZY)M)V0)l!v{W?=8+@TvD07Df zubH((Sv5Q~K;fkPx%Oo@Eb9s_Qe}uxC6CMrB9t1ryJ4^U8?U)&ffbL#?#TRgS2PJB zy$FlUF2##k!~TNNIAB(CmK*_qAlWpEWKQYLIYR-@lL0;wZu|MVFl8IWGS%wbYhE$$ zJI)6Xr^UbnGLeuD44s-WM=r0|l?x>>LB;60(nyo?x?nz;ol=+dNzRK;LU#Gla0+4{ z{GZXGbj&9P5X&PiE>hH?KX=^gIDlBSaWJgyd_ZLnuHi_9rsZ4K$7ApB)=DaE9Qrfb zl*PL{X&1IDDrpKQ6dV_N@GnOIrglIsPy!}sH4MYBnlx^!hv5@&{$?v=T_F9uB%>XK z^%!TbAx)<3gOPz}Qa}6Z9-xpn=z{4#(?iw?Et0pKaTk>i-6vT@#-I#*UqOG8H;=!y z#MY5SpYFhb>PPR`T!PsWguLlVdE9y%bRV-M#5-!}%P`Qf;o0(muM8)F)hqw5+8H)g zbe=!~QbgE02H5Yb<`pn@nBVW5Cp-rb4T+&SV>C##rwq%!Wcm#%i?_G@?cROn-8f_b zTlVs@%}B-e_`tyUb$wHbkwl{%Q?s8Noj|*8^$jkQQBS2gr4hOQ+M1hTQ9>G{FhVaY z_fDr4_==1TO4+yRD~*+S_$OH4fmXgvrq5`{cNBZ5$ip4@= zCLjvvV(;;FkV`7jxlAPB_j~Bo;q=-X4Y1{@q6<1FJ}JS`Sw2uHEE;n<@^jQDvDR9b z+9U5H%;cW0rq^BSaednv+^lGO?k^ud`Yt(KwZCH2dH@Z$@2s2*>U%@3Ym74vJpCS% zy23pgj4>aWnLbBViIf_Sqek-vq4;hpQw_6k^NI6WOR0oQr!$M?#C|~Bhy|BM3qa;KsZw!eZYB=svy6`YsOE2cwZgO`82iF z^mx;7*Byt~V&`LMI~UpPIy!m#GIXS7GG4=v1MwO&I_q( zA>1g0KrD0iQg-T5cHiOIW#`7L?_S<@KEe(cLP}rXalY#DK4Rawqy;wddBxGgHwRDp zAhlp@`90=}=MA}U1>Tt}x!hdY)m*{Iu+Dq)o>!_i_<+wjEbk|FuW5XEaBR5~;^9F1 z;HOOLUDfw{(j2BmNbj!T)Q$^w9D`@mqhZ9&&A!iWxS(pYsN^Z6Hq@hF$RlfEh6y(( z54u3aykL>|!US!Q6ypMxzBvhIC-ml#k>Yh~03u)T!DuHagrcL``vz~DVCRL1uM1&? zo{gA&=XH|?@WALQ=w4s(^&aJX+YFCA>99Qxo^EP;HG_toiMmZc2-2ZtK>!!8bBCKL z(@?s5=v+v?tEf*QR~nEIasW<9@8HMjw|?pa=4dk|oMTL4U_&%LB7Yj>uZ)ogMjnIh zPoEb;HAaLvK2oDa{M?`xjR|AGA+M4d_uIh+jFc|U0gRJ@U+h2Vg?XPeDb@toYhtu0%=1Kan zz5Okyc@O68-^N*AN592?`t#f079*oIzrN9i@`{j(ioZ6^ueAA9i2uRA|NHymSG)cC zM&68kzWww5qJML%z3n#W=f8mFKjz6U@`NSNF)rJ$zx;B722#~}o_?9+_>iluoFAiI ze_6hi`uZB&|LL_2+jp4%Jbto5$bZlKs*{@YV#A9p@&D@^WS#dfSw8Bs9mnfBpFZR- zKde*#MMkM4q`)e2tUl%dUH(My!CGO?b+GYIZ%L2m_V@5^Ubg&yv~*yk(z6dqPFn1M zffB(e%OPwVX}5T`(d+u*-!~s~;OE1Cj< zL-htmTvoYwlefg^Cy4rxYP7Z6!!ZK_GFG2K)rfj}-b3bQ6602%W~gjyxqsMD?^}I6 z9dbs0w`$*ffH|r?BrLFNjx$PQ9^0zU^=Y;CaBJtVB;#s3)^b^ns7G_E@%tLiSDeCl zNIu%rI*;>Jj=@`aSJe-MazY8O)&B8u$iGLw06XF;UrxEz#@>&ZCgsO!@!=vT87d=X zkkuleqXiVz?`~eFt$tWldvh#lA7z|ZzpVZaf2n;uWU==W1BED|te(R?=U|s*d{$w8 zRB^6Wt1UdFQqr7k!3nN$vjxVC_}=*G_m3rp?K&ABT%sJ|+!2PfYJBD>A0xsPfl9x4 zGBNU#kCUYFcQ{1{U;7SUPlkHC?MQ2NV$5LjK_?_?hOT@;K$;J%Z@$SX=r_!|+4YXh z44ska#5ef;DPYsdSZzBL^MeSiP1n+IvbKHG7qceM{n|Jp>6NVGZv6ZYa{D=xdA+YD z<=B$I3HFhA$0DZZ86O@Wl!_8Ypo`oK0A)wn6XI{l`De=B_HD77-?z#DdNr!oe;{RJ zmF*eymXBOJfZGBvli_D$3(7KipP|%w9!-S|g7wyz!}XzjsQr3CrnqQGpCM04_f*!) zFm>ZNPVJqp%X61!ar)TKl%C$5ze**%W$)Ivjs_M^?!LVX%4@$k*eE5r(TD5dLU5Am zF{8%Td%XKvJ9Egg-S>5`<^cJ&ddh+t0(+W+^TuZ%rLwVOA>`Q1#-257$R-s$hZJ4Z z_NqecWR+cCU7E#L^Ztxse&$D)@~7WEO4zUrTsYfcKHlNPD(2Lv3W@xBwyPziPSDmg z8GVKtw~cayR>3A#x$9M~a@(WbfdO4p;56}-rD$O)SCRZEp$im^`>SpY6h+oH`8v)E zLCJqyFsj{;D34A6c%(+)pInTqH-?J8vT}=6gWf^G+_3qFRWwJLA00qC`)XOyH?Q%D zGP>hv_1Z3-)#%+b!-iV=Wkw>?VeYP5AzSjb2}K=r?;uZn6t>fPSeTUYn$rY zW8xLQIzAB)`6&LAs~?(gaHULW*L+3;v|~o=OF^A!RQ=UUaHDeQEoIKRwrYE=D=wL? z6lsTw_eRNqkxp`j6jQNvyFC#vmfU(*KjzidsSAf5<}#_j*GKCZ~Fu*C5xNRm0;powE?tAkl7hf-&vsqsm2uJD&%1&JKO12A0hfk=1P5D2QElH-O=Brag?tdPPy0m0RKyYEZv9>` z-EvY}HP6>d-u;plKu%8RSB{%cC%4U>XaBLIKd8EPX!D&FyfFo8S&X{N=42%#KC1M| zR5v%`?(?zpoWCwb;=GdDc*v4q zvNCK7&S%RwdKdPHs7~H;^+&WQc>QG#!CvQrd5~KKQ`>zp?70QkF?A&;**vCR-9DbQ z@yjDWsiN<;)#uHRHJ_92D$VbkAEV0xwSFfGa3jCu6-zobZQJ%;(-wr>N$X(L?NlRt zj!2;+z-_{R>(zev`g6u|$Q7$s7l52~O*X2YC5M*S|H#-sCd6|=W0Bl4$WyIWI8cS6 z;~4l(>yC00zCHT|DA4kuphP~Sr5Fh5V$r*NE?MXgm+|v~Y zFVNjyruhCI>(hSN0--CmL5%={63hsbmdDLqHvD&-0 zkAfYZ)V1J3?0ojddS8;x&OYwbgfk6xA4lse(f71K!FjT;i>bEo*5-?m@m73`k+Yxe zOc|q~ZTmgOfez)2DADmN{jDJ1otI$U`L>}@L$=aSjiU8{#ZOdZU_~k{Yj`rw*T;3= zP-z-q%^}xT{T!ve%#or14c@U0z#8QV?cH=r>Gpgr==S|`Z)?sf!UTSI6(LQ*rH5aq z*jxc^4}UbY@cYGeJsbS&?pLMvj`#U#)<698nD9BPvbz8VE*CsdTmPvquJT^KQ(%S7K-i!v8vwYh^YPJbVx3mPcomGwQvL9*&ppAG2+6MS>mY zW+*rruuP-gb2^sm1|akoLRlyBZMUancp7IVN0PJ1yZVSvqwCkD!2$6ol?=DtE;9lM zX1(kS47FCM4#sEnI;UVoBZ`V181i8&MtDJUfTAf}O_0?U#ZCQqfB$$LQ^u>4ag=AD z)4+Zb9+!0E?3_f7O8yyb#R(S$`$*UO)#sZ8N=tfGW7BYg5fQ z+|BQLhoda=G3kKT;pSxs5*vi5{7ZJeK zh6*e_p2|%MlfT*}Js`PECFe53Md9E^Zfbwlft@lQR!;ciHM~f-4e&tJWHsAk@^zmz z&`1K(JI?g-q`Lcg{CtCwz12C*5l`DZ!oD%zaUYwvNG|TOn%xy#El=;$dzjv9{Q7uG z1o#1ccx?w?%e~6EA^1P^8KrbkQu^EFmNl&oD6^)g)Q@}qc7uymO!p8ZKi>tf&#y^F zSrP~v>KC~p)KOq;kyfeGm9GomtXVm}Wwx_BzKQ%wkP?`@#X4PM3lo+ZCk>#ke*a44 z$4E89ymJ~ZAS>F3t!R4AneDO5ZLZI&!`{`n+cSEMV>m@HozTZm=|@w3&NiWQuwxbH zI6j}BQ_$l1=_|NVn=k%)j36M6v!2JVX?||fS$0(sLamjK>aJs)XfEyGgw@XVR?Ak3 zdZoFNx~}I|p!(WLK;844r~s%M;WYCFSQp$6A9iU~p(6|(6`z9dSF z;YPP&XbIO=4a{;OTVpxI3lu;3l3*2Lw6neHx$D}YYpiTrs5eO6nG&6xb#`D>LI&qO zw%2!hP_h?93C){)NlfzA3S#II!0$%DE zL~%;FB_)!EhBkxfdiYUK)nK%+a0@s+Gp#MrDV@AfltB*XhT!Z3g+r-c@ZOc+Q{THz zbzmD>#a+WCmoS!S435sUU5QT0rnq-Rz)pq>g-B_&)x7}ZDPsyG89_LB8Xy65Vt^7Y z5YDo3ydkatGY8T#IdrCLQphPj3{ZqJs-PL%t4NY&QW_wV>Uc+_Y&!P}Xr@e0Tmfbd zJ%L+x#5Rav38|u|jddOH-8F3q(!rIPZMvZunBa&JMH(%&7D6d)4e3iH4e4ipVDYZw zw1=6J-G-hfj}WackR-cKz*0g^*Y1CPexiIxp5V3Qe3MbfcI5*rXM z-2k*S+%{Gr*tBq509{B^f|;5rG9Z%-3_3Z>2g@XJ#z}yIV5%vSH1v%TR2hOCia#1g z9Aes%&Y4aXNa_u-vLCpCKQ)dZMl@?F8Fb4i95i2&p@0$&KtUGZz3wDx1J=NyG?j8_ zOC+HVAd-O3qWb9(BfPbZ1QxT`}#=OkJ@uh8Z_W{-SJ3YxE*-28OSXz*_C z;_jQhXwWY| zDsQ_N1=Hl!PU-f?`Sy-iIA8L^9_zT=9@hDs_lI!* zarP(c$I?m01`@f}J36i5a3_X#lBqZtNIL3B}S#08s!0ATO7d#^+Zb5`7z`IhfKgQC5N_;B%DW~-sy*#nRJ1s%A-*YyU=exiKM@on&!cz@S_i9+EnIy*RI)EDl z9;lT0u>A)dFED2}fyG1L{gh5g>#W7T77rcN*Fcv(xwfQB-(F?L*akdHx^%iHPm)fn zVseUW{Sy};hU`g#zTKt1p`elsoPhfwGsXS~l$Kcs$cS{&GM7sE0bXujKLTFQr=J18 zkPwy!wAgpYnyqw2qB1iT`#&QP^^4|e0D~ic#tlcE$H<2RV@9es+7y%&nzxf}xh||L zn%(goR&G#SG4H41*;n5ZS+D``rm{TRd&OW!*wiF8^}$3f+LRPsE!YphZfqP_3@@m=>RN$h` zPg7$Z)_%PNienzOvVm<5D%~dAz;jQ?siWl@+)}J{&TSR+9h=+S=s#?E%4IVK-3HsT z+wDeRmImDgfvb3=sNL9poZUbXwF-IXdiP?j(SqV;2Md2JV8wxD=c8MECoJRVC3^$_LVAf>n+a z8jn38tzp;~C9eo8`e8BXx9bK!jqtesz;q^MV|vl$W6&AQ#Dw9MjY+*EV!#!qY_4&X z!HZdwM0*CmNe6Ea;Y~?g`={YaAJ65L?6od#IS(33I(4V(Pn$Mu(ngxKs$xdn-f!Yz zcxum6D66_#lzEt>~jVeg5bulw1Oi9hY~0b~Alxn}lfosd2Z+XoVrsr%KW zFWrmz>C>O0W?Ve{E2BRJya5bD-=7x2SjSC&LbK93)C$?{STBSB6EK3MJhWLE{kE_G gL%=%h!#!u(*)(rTT5KL?@t1P{U#k;j*i>Ht0O~3d6aWAK literal 0 HcmV?d00001 diff --git a/phishing-filter-vivaldi.txt b/phishing-filter-vivaldi.txt new file mode 100644 index 000000000..ffcbf9c3a --- /dev/null +++ b/phishing-filter-vivaldi.txt @@ -0,0 +1,462 @@ +! Title: Phishing URL Blocklist (Vivaldi) +! Updated: 2024-11-25T00:20:55Z +! Expires: 1 day (update frequency) +! Homepage: https://gitlab.com/malware-filter/phishing-filter +! License: https://gitlab.com/malware-filter/phishing-filter#license +! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +||1111365dh.net$document +||12931-coinbase.com$document +||215323.com$document +||260aesthetic.wixsite.com$document +||3650947.cc$document +||3659ll.net$document +||83291-coinbase.com$document +||94-103-188-123.plesk.page$document +||9825057365.com$document +||abctrvabc.com$document +||access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com$document +||acclimatizable.fun$document +||account-update05.myvnc.com$document +||accounts.google.auzen.us.kg$document +||activebusiness-unlocker3.com$document +||addwsrbh.green$document +||ahnp.vercel.app$document +||aldg.ldgknhk.lol$document +||allegrolokalnie.pl-891241214.buzz$document +||alturl.com/hpqhv$document +||alutipcentra.pages.dev$document +||ambil-pinjaman-daana-payleter.xforms.web.id$document +||ambulatoriprivati.it$document +||amev.ldgknhk.lol$document +||antail-conv.com$document +||apply-now-to-receive-badge.vercel.app$document +||ardilu.com/descargar/kmsauto-net$document +||artsea.pages.dev$document +||atmailupdatewptnskmdinfomailacct.weebly.com$document +||att-101072.weeblysite.com$document +||att-1041page.weeblysite.com$document +||att-105714.weeblysite.com$document +||att-105819.square.site$document +||att-inc-107097.weeblysite.com$document +||att-login380.weeblysite.com$document +||att-login522.weeblysite.com$document +||att-service-102155.weeblysite.com$document +||att-sign-in-105669.weeblysite.com$document +||attcom-100762.weeblysite.com$document +||attcom-106808.weeblysite.com$document +||attmailservicenow.wixstudio.com$document +||attmailservicenow.wixstudio.io$document +||attmailsrvrdesk.weebly.com$document +||attnewmaill.weebly.com$document +||attyhhhhiiii225.weebly.com$document +||atw-tau.vercel.app$document +||authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com$document +||authsyncs.pages.dev$document +||autoreplyattmode.wixsite.com$document +||avoid.hold-managert.com$document +||azbin.ir$document +||b45018.com$document +||bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link$document +||baiii-wong.cutvi.cfd$document +||basvuru-online-yap.vercel.app$document +||beionfidi.pages.dev$document +||bet73nn.com$document +||bet83039.com$document +||bet83054.com$document +||bfrescentremebermainsetreouytnoy.weebly.com$document +||biggggggggggg.weebly.com$document +||bitnode.pages.dev$document +||bitvavobtc.com$document +||blackhere11.serv00.net$document +||blss24att.weebly.com$document +||braucrarasuteu-2470.vercel.app$document +||bt-102124.weeblysite.com$document +||bt1business.weebly.com$document +||btuan-dan2-resmi.top1.my.id$document +||buildingdesignsusapdf.s3.us-east-005.backblazeb2.com$document +||business-page-property-897432967.netlify.app$document +||caipora.xyz$document +||calm-pothos-3b24c9.netlify.app$document +||carrefourarabiank15.pages.dev$document +||caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com$document +||catgirl-appverset-nya.pages.dev$document +||catxtokens.pages.dev$document +||chat.94-103-188-123.plesk.page$document +||check154109.click$document +||checkseven.vercel.app$document +||ciente-a.org$document +||cieplo.app$document +||cj12143.tw1.ru$document +||cj87335.tw1.ru$document +||claimyourethrewards.pages.dev$document +||clickbait.design$document +||cnsa163.com$document +||cock2-iota.vercel.app$document +||cock3.vercel.app$document +||cock7.vercel.app$document +||contact-pro-8291-d01.firebaseapp.com$document +||contact-pro-8291-d01.web.app$document +||creosrl.com$document +||curmmgdv.email$document +||currently541.weebly.com$document +||currently890.weebly.com$document +||currentlyserver.weebly.com$document +||dara3dccj.wixsite.com$document +||db.service4db.com$document +||de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev$document +||debutcan.firebaseapp.com$document +||debutcan.web.app$document +||delivery.attempt.failure.ebbs.co.za$document +||dev.stream.mornar.app$document +||did.li/parcels$document +||dnwqmh.click$document +||dropsmartchain.pages.dev$document +||dsjoting.group$document +||dulb6c5p5.top$document +||ebay-mallwholesale.com$document +||ebt-lilac.vercel.app$document +||echoredled.netlify.app$document +||elbarco.percentadnp.info$document +||eltritongourmet.com$document +||email.mgb.modento.io$document +||enjomugg.firebaseapp.com$document +||enjomugg.web.app$document +||error3456vhubhornbase.azurewebsites.net$document +||example223.wixsite.com$document +||eyeydhe.wixsite.com$document +||eyttueiu.square.site$document +||facebook-avip.click$document +||fame.pink$document +||fassehoizubra-7696.vercel.app$document +||fastdropchain.pages.dev$document +||fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io$document +||fla-1001.square.site$document +||flo4211.github.io$document +||flow.page/servicesatttttmail$document +||fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com$document +||fnuttlie.wiki$document +||fokeijonnekou.vercel.app$document +||fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com$document +||free-verified-badge-form0-service.vercel.app$document +||free-verified-meta-badge-service.vercel.app$document +||g06668706.wixsite.com$document +||gccndbqg.vip$document +||geriodememerkezi.online$document +||get-checkmark-for-you.vercel.app$document +||get-free-verified-badge-service-on.vercel.app$document +||gitanag.broke-it.net$document +||gruprocuroipra-6493.vercel.app$document +||h5.b9en.com$document +||h5.metacoint.com$document +||hcghij.top$document +||hdfcsky.com/sky/indian-stock/dashboard$document +||hdfcsky.com/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!$document +||hecregayatu-1014.vercel.app$document +||hejmtxxt.guru$document +||helenblunt6.wixsite.com$document +||help.accountsupportcentre.com$document +||here-apply-for-page-review.vercel.app$document +||hgbk.ldgknhk.lol$document +||hhideiie.wixsite.com$document +||hitummoinneullei-5882.vercel.app$document +||home-101067.weeblysite.com$document +||home-103465.weeblysite.com$document +||home-104341.weeblysite.com$document +||home-105266.weeblysite.com$document +||home-105929.weeblysite.com$document +||homeattatthome.square.site$document +||hpnefhqs.motorcycles$document +||im25.net$document +||info.supercitrus.ind.br$document +||ins-business-home-center.com$document +||instagaramgalochka.vercel.app$document +||ipv6.43-135-137-110.cprapid.com$document +||irmt0ken.win$document +||is.gd/djgj07/$document +||iujf7839iofvkbcu748.weebly.com$document +||iwimwmiwi.click$document +||jagej73796.wixsite.com$document +||jfdjy.com$document +||kalyani963.github.io$document +||kexoigrufouddou-5902.vercel.app$document +||kl1k-ds1ni.neupdile.my.id$document +||kliind08.wixsite.com$document +||kreelo098.weebly.com$document +||kremlcup.com$document +||kshitij12375.github.io$document +||kucoinglobal1.com$document +||kxbztydc.black$document +||labanquepostale.jupiter-analytics.com$document +||leddevotoze-3146.vercel.app$document +||linnkdna-kget.wxxzsite.buzz$document +||llahi.info$document +||llahi.vip$document +||loffaummuddote-4145.vercel.app$document +||login-att-10221.square.site$document +||login-form.world$document +||login-online-outlook365.com$document +||login-outlook-midstreamauth.com$document +||login-screen-103134.weeblysite.com$document +||loginaccount70.wixsite.com$document +||loginaccount77.wixsite.com$document +||luk6414.wixsite.com$document +||luxlifemiamiblog.com$document +||m.meta-accessibility.io.vn$document +||madebybmr.fyi$document +||maqpiexyz.click$document +||mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev$document +||mayfair313.wixsite.com$document +||mdbrvlfy.black$document +||mesageriepro33range1.weebly.com$document +||metamsk-wallet-3.gitbook.io$document +||metttaa-audddt-new-02.firebaseapp.com$document +||metttaa-audddt-new-02.web.app$document +||microsoft365-storage.github.io$document +||mikepattyjm.wixsite.com$document +||mobilemidasbuy.n3g.fun$document +||monespacepro-client.3utilities.com$document +||monetization-violation.github.io$document +||moodengsol-net.pages.dev$document +||mwsiekdnfjrdufs.weebly.com$document +||mxmxnmx.mx.zya.me$document +||national-au-b.com$document +||national-au.net$document +||nbaaiqjq.group$document +||nexomyacwv.weebly.com$document +||nft-time11.vercel.app$document +||nichcheck.weeblysite.com$document +||ns1.carrier-ast2-portal-apple.com$document +||omadshf.ru$document +||online-assist.live$document +||online-promo-asb.org$document +||openkimono.pro$document +||opportunity-verified-status.vercel.app$document +||ourtime.reconnect-dating.workers.dev$document +||owouwuowo.click$document +||p365kf.com$document +||p4zv8crnrrha27so.94-103-188-123.plesk.page$document +||page-center-manage.com$document +||pavan-patil-22.github.io$document +||pay.zing.vn/pubgm/$document +||pecinternational.net$document +||peesom.chat$document +||pencairaanndannaa.my.id$document +||petty.wiki$document +||pimnhv.group$document +||policies-business-page-service.com$document +||pottatrebewe-2808.vercel.app$document +||pqo.hrf.mybluehost.me$document +||programming--service--panel-totlyy-free-for-you.vercel.app$document +||promo1.spik.ru$document +||protocolsecure.pages.dev$document +||pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev$document +||pub-1778406e4fec4394901793111c187dd9.r2.dev$document +||pub-19b834342e7d465b9f00b3511325a081.r2.dev$document +||pub-21dd4dc659614ceb93e45a6de4434502.r2.dev$document +||pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev$document +||pub-2fefe932a6974485b987c9ba851b5c40.r2.dev$document +||pub-3a46d9914f494078a6d6237513e7a096.r2.dev$document +||pub-442ed822851244a689b3472ea2c6a950.r2.dev$document +||pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev$document +||pub-682ad3b65d944376b919745aae3c56d4.r2.dev$document +||pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev$document +||pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev$document +||pub-7f5cf36445d042168bfacd712e890dc0.r2.dev$document +||pub-803839714a924882a7bcc2495a26860f.r2.dev$document +||pub-8161de4a277e4ee8b532af34954224e1.r2.dev$document +||pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev$document +||pub-8376b5b2334844d193a525d8b8548fa5.r2.dev$document +||pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev$document +||pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev$document +||pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev$document +||pub-9163a97d70394cb499bdd232be6c2169.r2.dev$document +||pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev$document +||pub-98171471e0944ac3a5820ef719bf0640.r2.dev$document +||pub-a263e0790935412eb10cacc55bbced18.r2.dev$document +||pub-a291041b077742899b63a9982f04a56c.r2.dev$document +||pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev$document +||pub-b50adc5d699a4f08aec37102c2103da7.r2.dev$document +||pub-c0a934c950e441db96b882789f53c9ea.r2.dev$document +||pub-c2c250050109456396c933de259a4fea.r2.dev$document +||pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev$document +||pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev$document +||pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev$document +||pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev$document +||pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev$document +||pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev$document +||pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev$document +||pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev$document +||pub-e42cb528b102447385e3145197916f51.r2.dev$document +||pub-e4aff507450c478cbe3f77ad23d75035.r2.dev$document +||pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev$document +||pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev$document +||pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev$document +||pubgm.club$document +||puffagroibrouwoi-8818.vercel.app$document +||qasimk.com$document +||qfjfvseq.info$document +||quauwograssodda-3503.vercel.app$document +||qysgyp.com$document +||rajdipchatterjee.github.io$document +||rb.gy/go4bnv/$document +||rebrand.ly/18ab5a$document +||rebrand.ly/4ff03b$document +||rebrand.ly/8wtcv4z$document +||rebrand.ly/96a02f$document +||rebrand.ly/c0d1afz$document +||rebrand.ly/d2f265$document +||rebrand.ly/eacc63$document +||rebrand.ly/f9decb$document +||rebrand.ly/mzhpkzf$document +||rebrand.ly/nbyh9vh$document +||rebrand.ly/sa2uoq0$document +||rebrand.ly/tcthi8d$document +||rebrand.ly/tnab363c6$document +||rebrand.ly/wx1eo7w$document +||rechazaroanularaqui51.weebly.com$document +||remote-fix.pages.dev$document +||renggard.47-243-192-240.cprapid.com$document +||resolvepanel.live$document +||resolving--issue--with-us1.vercel.app$document +||resqat.weebly.com$document +||review-business-case.d2f7p3b7pucnle.amplifyapp.com$document +||rlpqwefi.pink$document +||rouloigeilleuja-9523.vercel.app$document +||rulemec.pages.dev$document +||rutinqqwin.shop$document +||rwftfu.quest$document +||s.team-pw.cc$document +||sairanees.github.io$document +||sanseipecas.com.br$document +||sasklelo.weebly.com$document +||sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com$document +||sasktelcustomerwebly.weebly.com$document +||sasktelnetwebmailservermaintainance.weebly.com$document +||sasktelrectify.weebly.com$document +||sasktelscrutinize.weebly.com$document +||sasktelservicecentterwebly.weebly.com$document +||sasktelsupportsystemwebly.weebly.com$document +||sbcglobal30.wixsite.com$document +||scan-vulnerability-guard-v3.pages.dev$document +||scan-vulnerability-guard.pages.dev$document +||scanner-metamask-v1.pages.dev$document +||scanner-metamask-v2.pages.dev$document +||scanner-metamask-v3.pages.dev$document +||scanner-metamask.pages.dev$document +||sec-sign-in.info$document +||secure2-validitycheck.weebly.com$document +||securecapitec.theprimepoint.online$document +||securerpcfix.com$document +||seeteressecalywoi.github.io$document +||seivviice.weebly.com$document +||server.0e7p.com$document +||server.2rk3.com$document +||server.8q3p.com$document +||server.n6b8.com$document +||server.v9vs.com$document +||sevvviicess.weebly.com$document +||shard.blue$document +||shard.skin$document +||shared-d7590.firebaseapp.com$document +||shared-d7590.web.app$document +||shaw-101329.weeblysite.com$document +||shaw-101587.weeblysite.com$document +||shaw-106427.weeblysite.com$document +||shaw-107375.weeblysite.com$document +||solutionwebsitedapp.firebaseapp.com$document +||solutionwebsitedapp.web.app$document +||solvetans.firebaseapp.com$document +||solvetans.web.app$document +||sondfrom.dexlog.my.id$document +||soyokai.or.jp$document +||srdate.club$document +||ssy.hmb.mybluehostin.me$document +||steam.poweredartsworkshop.com$document +||steam.workshopsreview.com$document +||steamcommmuty.com$document +||steamcommuunity.ru$document +||steamcomunutty.com$document +||steamconmumity.com$document +||stepsray.vercel.app$document +||support-metahelpcenter-id100003498934.netlify.app$document +||surl.li/tvybxr$document +||sv5gardens655665.weeblysite.com$document +||system-portalnu.duckdns.org$document +||talwgam.njmolada.com$document +||taste.baby$document +||tele.zhngain.top$document +||telegrambot-resolved.pages.dev$document +||telegrazm.net$document +||telstra-100408.weeblysite.com$document +||telstra-100469.weeblysite.com$document +||telstra-103234.weeblysite.com$document +||tiktok-888.vip$document +||tiltckshow.top$document +||tinyurl.com/carrefour-926/$document +||tnomwzrp.top$document +||toeken.im$document +||tonic.pink$document +||tooma.cellinsurance.co.zw$document +||tpdtepremu.xyz$document +||trattujeilesso-3354.vercel.app$document +||trbinace.com$document +||treibrukeukonno-1395.vercel.app$document +||tuesmad.firebaseapp.com$document +||tuesmad.web.app$document +||tyyyyyytyyy.weebly.com$document +||tzcsjfto.chat$document +||u.updatetrackgre.top$document +||uc-whatstapp-web.com$document +||udxcady.wixsite.com$document +||uklifejv.cyou$document +||updatemail12.wixsite.com$document +||ups-trackdeliveryapps.chickenkiller.com$document +||urlz.fr/t8vi$document +||urlz.fr/t9ka$document +||urlz.fr/talr$document +||usbest.cyou$document +||user-transaction-overview.vercel.app$document +||usps.com-trackdck.top$document +||usps.com-tracklnv.top$document +||usps.com-trackmcl.top$document +||usps.com-trackmec.top$document +||usps.com-tracktpq.top$document +||usps.com-trackvmd.top$document +||uspsinfw.top$document +||uwdtsczi.top$document +||uwm-onedrive.com$document +||vaishnavi1436.github.io$document +||validatie-veiligauthenticatie.com$document +||vbbu.ldgknhk.lol$document +||verified-this-request-badge.vercel.app$document +||vo4zzp.icu$document +||vs41.github.io$document +||walett-cont.gitbook.io$document +||walletauthenticators.vercel.app$document +||walletcomnecitt.gitbook.io$document +||walletconnectdapps.online$document +||watranfart-fdd6a8.ingress-bonde.ewp.live$document +||waxed.wiki$document +||webmaillshavv.weebly.com$document +||weeeqweeattt.weebly.com$document +||weigh.skin$document +||weigh.wiki$document +||wgqdqvtn.baby$document +||wgqdqvtn.pink$document +||whatsapp-rqr.com$document +||wirelessvoicebtpaidmailinfoplay047.weebly.com$document +||wscs1231.cyou$document +||xn--metmasklogin-vcb.gitbook.io$document +||xojautruffeuttu-4659.vercel.app$document +||xraiz.info$document +||xraiz.vip$document +||xsuweamskeidjf.weebly.com$document +||xya46.cc$document +||yahoooooo-108560.weeblysite.com$document +||yavanica123.github.io$document +||yi5lq-syaaa-aaaag-acfsq-cai.icp0.io$document +||you-can-receive-here.vercel.app$document +||zeiitgeist.angelocachero.info$document +||zenixoikitti-5809.vercel.app$document +||zeznjx.shop$document +||zwzcn.com$document diff --git a/phishing-filter-vivaldi.txt.br b/phishing-filter-vivaldi.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..4d05c8ef40f54928e360cec508b4c922545bc5aa GIT binary patch literal 5638 zcmV+h7WwJ%kQ<7kq}Bcq5ygA}G*TAM-yb2v-1lqN^S{5F)!Y|w zHDNAmi89e%lJ}Bk=914#@QUOok}ms9(u(92Nf%Rf(9)-(J0Y^ks(9)+9YbqR(K--A z?7Fux)b!^T*Mg(TxAODrvc+xbkH7wYr@B+zzBVjD{Wu&?mA`)PU+Dzz==Xp8{Q8%? z2=4y)t9N}BLMhRY|J-$d+;@LGj{o`N=hxr8GZn0V{H4Ae++V-9tjgDVQN(z(cREn+ zhzuM4@z>6rJ7e8O?7>vxLIL~*1w}q9-#J_KZ*zY9{4!U|JAu+KTWI!=pI;im>mPsB z1&YGwWB=%DBi>tjvxx21K94_2+CK1IKbHJkV5s*k{`lSRlu}AhquV!h8U2+@)`mb} zW4~x6Y@#R)N!lcQ_iEI=4%yw*0ao6T$;yk~Z6uV7Nl#<9470TMy5r(~KCa?J_siie zgHW9o>hTb&*D`yohin+TV84%k?8aG7V-o#?v0P3tHgJr!SgX|JTV)Pxx*jEc+I*Db zAbK5Iba)8W&C=$}?8nck6wGpwMB^sQj07!ZK~ZU!+pklf#gV)mMInq?SoOa zDv#~{9;Oq!1Q#uKg7#P%Ydko2)nazp_w1p3kGZ(-ZqZA~`SsWEZj;_^N8AtTlfVD3 zc-%_z=>Q)IW%lB+sD4nr8l-8TPlQo!#cOGoJ-_zz=Ap)v?LjNBK|QK;DD@?SAulq; zCj^MX0YnfPZjX#bzBhjBtI7+FBp3Cu%>$=GmnNNiNb)}uqLa;k#7|ML(+IC8m63MYj_FpSml)ctbShdm8A6Lh_s+A3tX%Bp3n0-;-?>qZHo{TmM-H2tD9ECH3esyNG&2=Q3v zLHElvSCyxy^)6@}7AU6z@_m1T2GR$S6Yr@CZTi73iSSa;*+>8sFa+^XW5d>2s7P*e zZKI$s^966E`$3PxG|tkgZ6!A@(CF%$gpika^PRA)+yZ-g10*2l6H7%F@rH#O{C3+^ zYzz326PMr=y`y?H4ys$EGbR>5_fbWc$iX~kp@6N&MPZ$@PchgNi}j%;UrLr1dZUk7 z>v7Zrh3&m9x+)Gb{%Mw6pd(kj-&Mf`ZP2GXh^9_Ih2{NlXuG#Q@q0qozd+4`*P}YKFmxt`oY{ z*9{apDh_SBf(MI$lwuoak18+ZCe}Xy#Z`0ByKXiXLAu|5sGQj!i5CSas1C#7%0z$@?< zp&8?AG?<)tnUsU5aAHOt#``R@&W>0PN+=Bv>ln$h4iV=_G861bK zdDNz!+3CB+b=Kxk8+2EAnAhj-JIa?)1b(n6D4P*<4mlIlK)Lhzloo1_i@STF2`s}) zSX(zu(_`)?4UA*6Hahd#=C*NrHs?CQ6Jx)Z_5v5*BQd{;-|#wO+O!%Y@$6G!-D{=MlxZ1XRT zw0}_#eo#s+YUs6|+1Xd4JfXJBym(!v-%!!zKg$yT zb>A&jNB0X!6{zgz-aj)PfwtfVH*jNRS{kY~27Cs7zgcb#q$O-ekJ0!RS@{4QmnD5T zrsbRpdtVaa*#!li1$u^#IBV)0E57FEzjn%)cpF?D2b!xbCkiXP$6Y#tv0HDfDBv zgmJwf=VuH{dwcRDDLQG2*zHw#ahPXl|MSE`FI#lY1_i=q&mHXtFi#`O=OhO$lpclB zvrwvIV2+te;O@XEFN$HuT;=Az-E(_(^Y?v4To2Ua8*T;5nFcT z(KW9*JW+J4pF&1MItrps-BJsE9|eQAEr%tg?!@#|y`IO?ux5tIyCdMLWc7-=D@#y|rF+rsd3atikbOfGaJX{2EY{>F@zdtX+ zDTD6b!%j$+gosAf2A|dyS_q9545Jv-Fy7-3Q4|EVv%W`DL=*r7xIL427fz`)o*GYt z%I2D=D3Q5K1ack=kdzAIWR4ST+7(rLz)x!79nGCa*(J}|Y_?+>xO^oM_MT|90zshZ zTH$>mjPXS=dq!7E+Eh}Krv-p1-hRw&LXqoDfm3;9!uS2@*T)F~t`tir5(KE!Y(tSU zT){>}@gj&3Di<Gr+xeRJ3v(rV*Ser(bWq*8`5~;|gIeN$dG*C1)OrZ-sh@Ya+~G zVM)ND5WQLfnHl4MPIJz&h&%lGR~9QOI8n+bjYhIN*jMfJW~@rmqm1mYS-BUW4szQ$XaDXm1#op= znLTQ;YN1xDEXfv`1bz6=)jb7N!(jxpK@10l6qC#)xk7q2YLWQff{=B!N~U>grBIk; z-j0b8Eel8sjJ2H)EOkGfbftE+bfs~^XV%krtcCE0kcZFtuqBqVLqFHVnuWj7#S)eJ z2p*{|(*g?VRbHQP|o;Dw@>S}Ig-M1Cc?msN%v zE#$SQ%3Y9xepo=ZXc1O~xLOIu3Qp|rdn>yPJ6>$4zLcz)j&`2^M`8d+M%Wedk>vk6 zHzSnl5n=7^JnKQ(0dQGIwCnmn3log8^j@=So*zRu;jp3|^fD}+nis8fbS&{^ z!)6r`R4RaS2O=M86G@;PVz_aPpE;Uydd29|&EPFG3ggsKJhfBWtWxmAIXI07WlZZP z#O{T`Bgte`g~N1PJQhWUq05>bln0nYX<8CBiiti$GL2SGrCQn6GIm21yveA=v2YM^ zHiABME{~KBrPea?ms#3S(WH|bkSe&$2q0sJp`$IEQGN6*au6x1(#Z(Ekc&=J7>G=a0*C^l?HtH=tyuUtO$)8TASJ2!2~FtgK0 znAy-IXs}h6l`_rFG<&%kr3kgvO|mp_K(`nO!IhA82}w*vnbJu^oRqPFWPrO3n^7Z2 z_a5Mtlsae7sOAWBWi_!`m1-W)sd#l-U>=%C(F4pt)C|?hcvTj=?5=~@oE+F`j?I)78uBzI7Mg1;1-Hhsb~Ivm&6X9-T~K?GWOrp6RUm~OqjesB{`~-Q z3tUoYEkEzqZSL3S`?{S}`-0Es-H+|}d%4*6eSNLhQFq3Tb$|Nvy#h?qaa=R~gxoOn z8~i)Ye>ZFQuiT_*fjl0yf7Mp^*!THy{`>EIrFnV%=U6CodqO^b{{HLglbv8#Xsw1b z7=1tDMgQ&tvEdDt4JcZ6U*3l$VZmS!!#NrF($li6NOM5H|2}Wu|B^L4m-+W;ug_o( zhv)U)?t^;7<8#xb2<74v2gZ2x^ZvirRo*s*;?w{6e)Y@q$9KO!H)g%?y?*(8F4p${ zGCz8+%lYhkevq7ib={l635ac7zt?g7dDT`#yg4QWxM?A0A*7#9>I<$;&tpp;*j~ro zAE^iF%2GQoKr%&tBrLh%l-n~dAa6CqQs4W}?f$N{38m9$zdnDi+qt%%pL%}z$rw5q z=xw<9tth;R=VQCv@9*vMp%`L!u6wV?dVVO!*lzXXL)oL#>Gp>9vt!S?7MH4{uWsS+ z%Te2{!dXWmAx0>NAKyRqb1g|A8G2OXyx+ditkrY;u8T6tZq8p{KgVm|FYB^DetDM5 z5DdKrM`qRjrc)<>+@&7xnlM{}VEh;!zFqth<=fmV9-s|%LgR=Ecs|>|0O`&dcoh?W zq@79tiN=h&pOG0dg4U3$yy+2sIh`IdvU|fgou9tv>4l9-$&=y}yKrEDwfa8s~Ze1?G+Fq}1Ypn!nwl=Ng=6qFP|3+7ON1s>aGNxY1%U(zE zl~gqhEFLFD&kq)p#0AvaPBG-lQwm$-xZ7!EjCS+*^tUv+b(H#QlsU3Wu7h~kvst94 zYFW~nsicUXVlI2iS(SN_<{0L~A)ZJLj}pp5(W6u1Go{1#C@khz#!}Or4j`F|eEMbu zbtGPzzH_a&+=JmQwxjsS>P%FS>Vi5t1sdQd!#pNVJrZjar3!bD5{70|2%+&!P-u*A z5gSsYU=0JM=2-^sqb@JwOCm)xGM&(>I^D zc~7|dIWCxj$5^LvoUjyRBB26^7-N&J*~7&uF!)s&{Ix-l@fnf_2SK4)FO&MMc9#b9 zC_j7L@Nyzx5V!;P_->O}EZJ1%5lY?m6WHr89U5E^bgd71H#TB*g`cIYbKQ$`HNOt{L$0-Gn zM`Oz?`Xb!+RM&|(JI35LGL{baxDG9AdNE7E`MADKHN~3~gN;|L}DaIs} zUdCVoZde1j(Mcndy%~Iefge?7n7;XA>vQEKgc)fP5Q#d`g$)U551uzG6q#!(L(U?4 z(OXc>y)C$VZKbzE&i?MtQ`$Q_ffz=rIQ+fCv<_~(0X z#ed{lzWH&I+vP6@TpD~~RpDEba$d0{OOI7Em8U3lG*n?_daH@9q>z>N_9$XIQ4T(y zxdiKB<)v(M;QYGWGq}za*WNshb~�LvD3Jq=@ctdBRFc#tBsS2q&pQPs=)7YjR)$ ze%?c#Hf=h1kc8>Vmqnny_R;l}TEvar>-P)KDxkQ|ZIFZyZFMsr*vtM5RYv-4pAKI5c{r4YU z{;eDJq4P_4`Td{$QFg}v)8GB_@~6qjV9l2oT2P)5l2P%;qWD6KFGBnUVOqYtzP4Cjs$7r#YcIQ#oNeZO7wr5x zeQfFDcWD2?Ydb9eALYOAuBw>if5vszahv00hl^O$|K}IXwOc>t@~7xwG4h7@@{OqAs0NO5kDL|C~%}{mXkM6=IeY9 zy|YxE&D}cOjgIROvMb68k@wqic($h~wdC!Hm2EE9vmNqv$q((VSnx-y*2NDvLbeVu z0POtWC~3@Tnbj_DXKQb_vm2&(RBgLlPSed$XWAT}hhcYs0lM3<&bIT|jR)Bc-ohDK z-4MzNB|KN_`FtxJ*15YNbT_^2j<;iL@Dnf|W_fYuk{f#~(JS9&lOOi7mqTWx9Aq}h zt+R-a{N0UnzvL&Ya&PX`)=q|T_S1}95Pa^#?YKQAPd5aKHT5_gA1pad-IfjGDGOsZ zTWw+gOi9z)loe;=yY+H-V;3#wR?e@7evvCCxWm7k!(vlr2tD?6Ma^jn!*b}2AKVz9 z0xbb1u&Uc0_8S7Q3bfJ>foCy#72+f={6jHO!Norms!5YCZ!0oe9;NOj{Gek96;1Vn zsStR6V0G~`VuJqYkc*vCecOby0sV7rpwi zSzzswTf=Jn_zE%9a_XUQWru=PR8X618>NzTtZfWZYUfc7C2i) zAC~#bBcegGX$H}p!-m3MaS*ezie~D(+wKpkrJqKW@AvI|`?%|~X$-q@$(W*CH|YuH z**frBm{cKN4n#b6sz#3R1{8Nf=^bJ6jWEiY;H9W?Lt3C&G;;MPy5_Q<;#yeh{+viU zt)IILLzn_!%!W;-77XuUJb;2H#&o$`2)I!XgO)Pq zT$z=%))|*fXNr_f#%rS_TEI$jg+!6Dd3oCa2}|B;m!HPj<*|TX+=%sIY+*={S7bcdNpAu0&6s;bKTf{4V$P*S^Q(Z7Gsz z0^)YF8|pxMIE2;uHPwPRsjV8vLne=YdIW?+bC^$eyvxaDvAfZqSCs#(Dw{IlH3)_X zsZY@4_KTC5kod^r7n8lY4nL!k=3Y<5oeMA)y9<&$PB(IJy`48&`012Lh+vpDyI$8=b8W`6cr8$T?e|g( z-smAT`CV>};asKt{aGgNP!?p8z6r62#y~>IhyYT(l9=$!KcGapw>b7jR z^Tv9gOvXDO*1iW81`DHDpNYDrsddKQUhb>P&n|{Oq!?)bkEJ;KM#(;r60|ITLaL$7 z52TP>@jw2Q%GSGSux|IZpxz>_>P>?jd_V4cD(*uv*7O`Mh0%PN*9Ar1AbxK}mh4*x zciC_BJy_)3CLtGO3l7=0F_-TSDN^pIW0`aGHB8{M$_Ob^w=aI~LxC;{5V+|F{F1lk z)$H4SQN7*_tb140tns5e9+X}yUMG^fKl%RDyy{Lp!LE8h4$-{b)~yc>%q zWdV%$on9YE*I_|qd9-@05{Z+nF$K5XsANYT)Zf)PY)0po`;hNPI;rIFw%Ta~QgEXE zI$_&$hN97J!Rv>z4}uDU12ms)#t2UlBNV&gU2lT7L=7Rf_wc{=kr_HnH?uAu{geDa>@L+m=9 z_1;{&m3Tqlv)oZkN5bg;dgW!w)e943Nzl1 z_m}#fUEiE})K(vW`Y}J=M1L>Q_id`5bGP~1fw#%q_wD=`)4e>6!(3z|EVlSnuQ2r_ zPrV*Mbl$)T26PYeb5`BU4ZY(GGp5ef8#Nz0v{4V3M@f&jz21WPFgDAfwW&rv9=%@< z*(tsR3)v-$#Af0y_#lQ-03!jMCS-#>Wym9+G*QnLo^({b*YmiHE&zRzBF*u&&C>+X z`-7e0js3n)n&d)_08_cBb;}3V-oLTzN0gLE_v5Vz9EPVkTSIiZe{2DwbbR$0@Ab2z zAG_-f|MTsQvEyu)v5RlQ5>7oW-Xd$b{cKj3x*_e~`}d)L&+-4fNucxl!Qrw6*}<~e z!+pqigZD)jovQS2`?trQe?W=oH>pp@#C`@BvJfv%NFpB%UhghM|C4|p79?#s1C+?U zOQ2aKbn4`1+V5CgA?y?hP>U z^Rd?RFwZ+lt7ZJTYuO9+y%MF5H$D&Z$|E`vM3L_@N}mIHl3RX`hdBYY!A)$uUkT+LZ$8%8A*IIpqG zy3&o3wIE7pUL@3*vJgyeJJ%sR0aB zNkF4?TpQgmSvf_p>5?{*rYu=$TiSSmUKz<9F*Uc&6wWmQ&+3Y$)SS?cm7EJxa7xNr zIjKzrq}EMgbn0w%!O%Qagv*9N+z4iR7HfN;!T4kD5DB%!i{M)&7?GlFjeu2NLf_wf^4QtO_RA|ts!+%t%-jO1d~)1r!|fi&)U>9 zIzyB?r6#LN;B-Ps23ty18p$i$<`qQ&Ou&?)WKD?xXU0+yS5K?42I#69#I@nJunIub z!f}BBB1JN~HB+QPo@y9YbCx%jN#cx?2m!%VkydN!!U(DinrVY?Xbl~}ZAs-!rBZ6O zAy(E6H}G5G2q2|dNlBwiM&b2@nxTjmj+jB(;kB+L>HsU?I8CK&%A^`{K9K}M76q#Y zq;y@wN#_Jof+#evYOO4DRV5MNrV<59nZy;bA{C8B za*jDwB0`Bq;;OO3CYeiIMd2?@tDqw)u3YJm@tOz}Ug|Qb<`4uDha#4v#G`1#1C~}e zBGW}8a9Z%pZdJEWos%GoUV$*4Mvn|kQe^K9O?iK~r;2ZG?~aRod$_cDTP0=$`&*XL z7@09xFE#VFwA({ZJj=cD@l9F)f8N_fn>(w#-Co;~tKoRVyun`4%A35~UP&#LkcmO= zkor|(us#KSS!qvgYgwy$r6LEF;=Jc+n;yS|2A$VN{)g+ z^owvOG3VzXq9H0Mhu7C{x0>Bi#FfBXP>W&F*GHa46kSV3Q!F_JJoyzsFvB6 zc%&h!q)B{>*)2ft`V&|8ZcT-w9jR7Sx{_+zIB^YyT{N#S#+QkH-^ABk<~h}Abh(o= zhOM7x_#X^eYw)?smQQYo=NQk#$zc)3IB-`wxOc>vkUI|@8ft?x$IQxquM1I35gh)# zj+1-sm_&eg5Ur%ky6Jc(yo5Bo)>4U_i?ZbIP090m4m~dIN?vgm*f#`^b+>`_8}wHtxU>83)KF=-0C$*9VWUj~!%$O{yi|c*M6%^2 z%XR&pkgPeYGTAEdCiC~ZG_BS$liF4ouRI>Y8LKL;yNTzJ6+Cs|`ao=F^rD47Dj7fS z30K=9VB?US~`**`NF%d12Fgw6SZI2chjj7riv*b7AGVW^kn z4jvk5Ja9Z7=6L8D$Jg=r{6N3f6EyEjxoT+*#`^mDY!Z2a3(D+MG6c39@6vn zapGkZlPN5+FJ5a=@p?*<`$&M9Th|N)o;MQKK7c5J(aHf-cHp^j(Y8W_Z|aOP`{MUH zKsxIp4v-#A9O@;(77vixXKQ>?J5Mu+e>E?>Js4i{TTQV}IbthM2^eb6ucK)Dif<># z4)hK)(eYu%_rrC4+<)e}fjjgw*B#S&2V4p(W|Um8QzRVn`1c1ZfQvTd(uEOBXW*X!*NM=>jrCHWv-lsZp*4m2FGQ5eMw_+iOPpRBLP&|2_ zZ!53HN>z2EuD#xhBL+jPr=g@^p6zIrs^Elp32Fx}$z;wT)OKZ^+d75233j*JLi=F@ ztaWcNJwa$I635pNoXP40)6xF!Xb%3SE4V9^l!~0d!4C}q)@Mc2Bgyn(*^x_jn11*# zpk3_9%saEnOTf5j21CMXS&>gD$kot}kq){T3!fzT>CM0{?HNsnkX_{p%(1`Qhz)8b zP3Etn(Rn%tJJ*Ix^ZLN2VGf{KUxF2wvjdmF1OC9p8lz1Av5!{lwm%EH+fK`s=x`a`0&S2*P1fQJf z#MV@#xFB?L>XHs$mwRZ+hMChjK6yf*mjo>pbf#u-Q_GUTVfE?_N3UI$aWI-3!R$@o z^m|Rk==olA>qfWs#&sOwIb5XgEHM3kpqJYwbTQDEntq_!AJ^Ma!SR5I0JyJ+D%idH zgSeIrF~bMmpA*V5(}dvtu!jU)=1(~}qH_Z~F>)bn&JoOk5T#Nv3NEKs-sX&4ieAC( gu@(WhU(euxqkQ*X;AiYcwt;p31!amua&tof0OrPQXaE2J literal 0 HcmV?d00001 diff --git a/phishing-filter.tpl b/phishing-filter.tpl new file mode 100644 index 000000000..d35c36da7 --- /dev/null +++ b/phishing-filter.tpl @@ -0,0 +1,437 @@ +msFilterList +# Title: Phishing Hosts Blocklist (IE) +# Updated: 2024-11-25T00:20:55Z +# Expires: 1 day (update frequency) +# Homepage: https://gitlab.com/malware-filter/phishing-filter +# License: https://gitlab.com/malware-filter/phishing-filter#license +# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +: Expires=1 +# +-d 1111365dh.net +-d 12931-coinbase.com +-d 215323.com +-d 260aesthetic.wixsite.com +-d 3650947.cc +-d 3659ll.net +-d 83291-coinbase.com +-d 94-103-188-123.plesk.page +-d 9825057365.com +-d abctrvabc.com +-d access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com +-d acclimatizable.fun +-d account-update05.myvnc.com +-d accounts.google.auzen.us.kg +-d activebusiness-unlocker3.com +-d addwsrbh.green +-d ahnp.vercel.app +-d aldg.ldgknhk.lol +-d allegrolokalnie.pl-891241214.buzz +-d alutipcentra.pages.dev +-d ambil-pinjaman-daana-payleter.xforms.web.id +-d ambulatoriprivati.it +-d amev.ldgknhk.lol +-d antail-conv.com +-d apply-now-to-receive-badge.vercel.app +-d artsea.pages.dev +-d atmailupdatewptnskmdinfomailacct.weebly.com +-d att-101072.weeblysite.com +-d att-1041page.weeblysite.com +-d att-105714.weeblysite.com +-d att-105819.square.site +-d att-inc-107097.weeblysite.com +-d att-login380.weeblysite.com +-d att-login522.weeblysite.com +-d att-service-102155.weeblysite.com +-d att-sign-in-105669.weeblysite.com +-d attcom-100762.weeblysite.com +-d attcom-106808.weeblysite.com +-d attmailservicenow.wixstudio.com +-d attmailservicenow.wixstudio.io +-d attmailsrvrdesk.weebly.com +-d attnewmaill.weebly.com +-d attyhhhhiiii225.weebly.com +-d atw-tau.vercel.app +-d authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com +-d authsyncs.pages.dev +-d autoreplyattmode.wixsite.com +-d avoid.hold-managert.com +-d azbin.ir +-d b45018.com +-d bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link +-d baiii-wong.cutvi.cfd +-d basvuru-online-yap.vercel.app +-d beionfidi.pages.dev +-d bet73nn.com +-d bet83039.com +-d bet83054.com +-d bfrescentremebermainsetreouytnoy.weebly.com +-d biggggggggggg.weebly.com +-d bitnode.pages.dev +-d bitvavobtc.com +-d blackhere11.serv00.net +-d blss24att.weebly.com +-d braucrarasuteu-2470.vercel.app +-d bt-102124.weeblysite.com +-d bt1business.weebly.com +-d btuan-dan2-resmi.top1.my.id +-d buildingdesignsusapdf.s3.us-east-005.backblazeb2.com +-d business-page-property-897432967.netlify.app +-d caipora.xyz +-d calm-pothos-3b24c9.netlify.app +-d carrefourarabiank15.pages.dev +-d caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com +-d catgirl-appverset-nya.pages.dev +-d catxtokens.pages.dev +-d chat.94-103-188-123.plesk.page +-d check154109.click +-d checkseven.vercel.app +-d ciente-a.org +-d cieplo.app +-d cj12143.tw1.ru +-d cj87335.tw1.ru +-d claimyourethrewards.pages.dev +-d clickbait.design +-d cnsa163.com +-d cock2-iota.vercel.app +-d cock3.vercel.app +-d cock7.vercel.app +-d contact-pro-8291-d01.firebaseapp.com +-d contact-pro-8291-d01.web.app +-d creosrl.com +-d curmmgdv.email +-d currently541.weebly.com +-d currently890.weebly.com +-d currentlyserver.weebly.com +-d dara3dccj.wixsite.com +-d db.service4db.com +-d de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev +-d debutcan.firebaseapp.com +-d debutcan.web.app +-d delivery.attempt.failure.ebbs.co.za +-d dev.stream.mornar.app +-d dnwqmh.click +-d dropsmartchain.pages.dev +-d dsjoting.group +-d dulb6c5p5.top +-d ebay-mallwholesale.com +-d ebt-lilac.vercel.app +-d echoredled.netlify.app +-d elbarco.percentadnp.info +-d eltritongourmet.com +-d email.mgb.modento.io +-d enjomugg.firebaseapp.com +-d enjomugg.web.app +-d error3456vhubhornbase.azurewebsites.net +-d example223.wixsite.com +-d eyeydhe.wixsite.com +-d eyttueiu.square.site +-d facebook-avip.click +-d fame.pink +-d fassehoizubra-7696.vercel.app +-d fastdropchain.pages.dev +-d fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io +-d fla-1001.square.site +-d flo4211.github.io +-d fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com +-d fnuttlie.wiki +-d fokeijonnekou.vercel.app +-d fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com +-d free-verified-badge-form0-service.vercel.app +-d free-verified-meta-badge-service.vercel.app +-d g06668706.wixsite.com +-d gccndbqg.vip +-d geriodememerkezi.online +-d get-checkmark-for-you.vercel.app +-d get-free-verified-badge-service-on.vercel.app +-d gitanag.broke-it.net +-d gruprocuroipra-6493.vercel.app +-d h5.b9en.com +-d h5.metacoint.com +-d hcghij.top +-d hecregayatu-1014.vercel.app +-d hejmtxxt.guru +-d helenblunt6.wixsite.com +-d help.accountsupportcentre.com +-d here-apply-for-page-review.vercel.app +-d hgbk.ldgknhk.lol +-d hhideiie.wixsite.com +-d hitummoinneullei-5882.vercel.app +-d home-101067.weeblysite.com +-d home-103465.weeblysite.com +-d home-104341.weeblysite.com +-d home-105266.weeblysite.com +-d home-105929.weeblysite.com +-d homeattatthome.square.site +-d hpnefhqs.motorcycles +-d im25.net +-d info.supercitrus.ind.br +-d ins-business-home-center.com +-d instagaramgalochka.vercel.app +-d ipv6.43-135-137-110.cprapid.com +-d irmt0ken.win +-d iujf7839iofvkbcu748.weebly.com +-d iwimwmiwi.click +-d jagej73796.wixsite.com +-d jfdjy.com +-d kalyani963.github.io +-d kexoigrufouddou-5902.vercel.app +-d kl1k-ds1ni.neupdile.my.id +-d kliind08.wixsite.com +-d kreelo098.weebly.com +-d kremlcup.com +-d kshitij12375.github.io +-d kucoinglobal1.com +-d kxbztydc.black +-d labanquepostale.jupiter-analytics.com +-d leddevotoze-3146.vercel.app +-d linnkdna-kget.wxxzsite.buzz +-d llahi.info +-d llahi.vip +-d loffaummuddote-4145.vercel.app +-d login-att-10221.square.site +-d login-form.world +-d login-online-outlook365.com +-d login-outlook-midstreamauth.com +-d login-screen-103134.weeblysite.com +-d loginaccount70.wixsite.com +-d loginaccount77.wixsite.com +-d luk6414.wixsite.com +-d luxlifemiamiblog.com +-d m.meta-accessibility.io.vn +-d madebybmr.fyi +-d maqpiexyz.click +-d mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev +-d mayfair313.wixsite.com +-d mdbrvlfy.black +-d mesageriepro33range1.weebly.com +-d metamsk-wallet-3.gitbook.io +-d metttaa-audddt-new-02.firebaseapp.com +-d metttaa-audddt-new-02.web.app +-d microsoft365-storage.github.io +-d mikepattyjm.wixsite.com +-d mobilemidasbuy.n3g.fun +-d monespacepro-client.3utilities.com +-d monetization-violation.github.io +-d moodengsol-net.pages.dev +-d mwsiekdnfjrdufs.weebly.com +-d mxmxnmx.mx.zya.me +-d national-au-b.com +-d national-au.net +-d nbaaiqjq.group +-d nexomyacwv.weebly.com +-d nft-time11.vercel.app +-d nichcheck.weeblysite.com +-d ns1.carrier-ast2-portal-apple.com +-d omadshf.ru +-d online-assist.live +-d online-promo-asb.org +-d openkimono.pro +-d opportunity-verified-status.vercel.app +-d ourtime.reconnect-dating.workers.dev +-d owouwuowo.click +-d p365kf.com +-d p4zv8crnrrha27so.94-103-188-123.plesk.page +-d page-center-manage.com +-d pavan-patil-22.github.io +-d pecinternational.net +-d peesom.chat +-d pencairaanndannaa.my.id +-d petty.wiki +-d pimnhv.group +-d policies-business-page-service.com +-d pottatrebewe-2808.vercel.app +-d pqo.hrf.mybluehost.me +-d programming--service--panel-totlyy-free-for-you.vercel.app +-d promo1.spik.ru +-d protocolsecure.pages.dev +-d pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev +-d pub-1778406e4fec4394901793111c187dd9.r2.dev +-d pub-19b834342e7d465b9f00b3511325a081.r2.dev +-d pub-21dd4dc659614ceb93e45a6de4434502.r2.dev +-d pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev +-d pub-2fefe932a6974485b987c9ba851b5c40.r2.dev +-d pub-3a46d9914f494078a6d6237513e7a096.r2.dev +-d pub-442ed822851244a689b3472ea2c6a950.r2.dev +-d pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev +-d pub-682ad3b65d944376b919745aae3c56d4.r2.dev +-d pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev +-d pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev +-d pub-7f5cf36445d042168bfacd712e890dc0.r2.dev +-d pub-803839714a924882a7bcc2495a26860f.r2.dev +-d pub-8161de4a277e4ee8b532af34954224e1.r2.dev +-d pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev +-d pub-8376b5b2334844d193a525d8b8548fa5.r2.dev +-d pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev +-d pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev +-d pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev +-d pub-9163a97d70394cb499bdd232be6c2169.r2.dev +-d pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev +-d pub-98171471e0944ac3a5820ef719bf0640.r2.dev +-d pub-a263e0790935412eb10cacc55bbced18.r2.dev +-d pub-a291041b077742899b63a9982f04a56c.r2.dev +-d pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev +-d pub-b50adc5d699a4f08aec37102c2103da7.r2.dev +-d pub-c0a934c950e441db96b882789f53c9ea.r2.dev +-d pub-c2c250050109456396c933de259a4fea.r2.dev +-d pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev +-d pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev +-d pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev +-d pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev +-d pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev +-d pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev +-d pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev +-d pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev +-d pub-e42cb528b102447385e3145197916f51.r2.dev +-d pub-e4aff507450c478cbe3f77ad23d75035.r2.dev +-d pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev +-d pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev +-d pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev +-d pubgm.club +-d puffagroibrouwoi-8818.vercel.app +-d qasimk.com +-d qfjfvseq.info +-d quauwograssodda-3503.vercel.app +-d qysgyp.com +-d rajdipchatterjee.github.io +-d rechazaroanularaqui51.weebly.com +-d remote-fix.pages.dev +-d renggard.47-243-192-240.cprapid.com +-d resolvepanel.live +-d resolving--issue--with-us1.vercel.app +-d resqat.weebly.com +-d review-business-case.d2f7p3b7pucnle.amplifyapp.com +-d rlpqwefi.pink +-d rouloigeilleuja-9523.vercel.app +-d rulemec.pages.dev +-d rutinqqwin.shop +-d rwftfu.quest +-d s.team-pw.cc +-d sairanees.github.io +-d sanseipecas.com.br +-d sasklelo.weebly.com +-d sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com +-d sasktelcustomerwebly.weebly.com +-d sasktelnetwebmailservermaintainance.weebly.com +-d sasktelrectify.weebly.com +-d sasktelscrutinize.weebly.com +-d sasktelservicecentterwebly.weebly.com +-d sasktelsupportsystemwebly.weebly.com +-d sbcglobal30.wixsite.com +-d scan-vulnerability-guard-v3.pages.dev +-d scan-vulnerability-guard.pages.dev +-d scanner-metamask-v1.pages.dev +-d scanner-metamask-v2.pages.dev +-d scanner-metamask-v3.pages.dev +-d scanner-metamask.pages.dev +-d sec-sign-in.info +-d secure2-validitycheck.weebly.com +-d securecapitec.theprimepoint.online +-d securerpcfix.com +-d seeteressecalywoi.github.io +-d seivviice.weebly.com +-d server.0e7p.com +-d server.2rk3.com +-d server.8q3p.com +-d server.n6b8.com +-d server.v9vs.com +-d sevvviicess.weebly.com +-d shard.blue +-d shard.skin +-d shared-d7590.firebaseapp.com +-d shared-d7590.web.app +-d shaw-101329.weeblysite.com +-d shaw-101587.weeblysite.com +-d shaw-106427.weeblysite.com +-d shaw-107375.weeblysite.com +-d solutionwebsitedapp.firebaseapp.com +-d solutionwebsitedapp.web.app +-d solvetans.firebaseapp.com +-d solvetans.web.app +-d sondfrom.dexlog.my.id +-d soyokai.or.jp +-d srdate.club +-d ssy.hmb.mybluehostin.me +-d steam.poweredartsworkshop.com +-d steam.workshopsreview.com +-d steamcommmuty.com +-d steamcommuunity.ru +-d steamcomunutty.com +-d steamconmumity.com +-d stepsray.vercel.app +-d support-metahelpcenter-id100003498934.netlify.app +-d sv5gardens655665.weeblysite.com +-d system-portalnu.duckdns.org +-d talwgam.njmolada.com +-d taste.baby +-d tele.zhngain.top +-d telegrambot-resolved.pages.dev +-d telegrazm.net +-d telstra-100408.weeblysite.com +-d telstra-100469.weeblysite.com +-d telstra-103234.weeblysite.com +-d tiktok-888.vip +-d tiltckshow.top +-d tnomwzrp.top +-d toeken.im +-d tonic.pink +-d tooma.cellinsurance.co.zw +-d tpdtepremu.xyz +-d trattujeilesso-3354.vercel.app +-d trbinace.com +-d treibrukeukonno-1395.vercel.app +-d tuesmad.firebaseapp.com +-d tuesmad.web.app +-d tyyyyyytyyy.weebly.com +-d tzcsjfto.chat +-d u.updatetrackgre.top +-d uc-whatstapp-web.com +-d udxcady.wixsite.com +-d uklifejv.cyou +-d updatemail12.wixsite.com +-d ups-trackdeliveryapps.chickenkiller.com +-d usbest.cyou +-d user-transaction-overview.vercel.app +-d usps.com-trackdck.top +-d usps.com-tracklnv.top +-d usps.com-trackmcl.top +-d usps.com-trackmec.top +-d usps.com-tracktpq.top +-d usps.com-trackvmd.top +-d uspsinfw.top +-d uwdtsczi.top +-d uwm-onedrive.com +-d vaishnavi1436.github.io +-d validatie-veiligauthenticatie.com +-d vbbu.ldgknhk.lol +-d verified-this-request-badge.vercel.app +-d vo4zzp.icu +-d vs41.github.io +-d walett-cont.gitbook.io +-d walletauthenticators.vercel.app +-d walletcomnecitt.gitbook.io +-d walletconnectdapps.online +-d watranfart-fdd6a8.ingress-bonde.ewp.live +-d waxed.wiki +-d webmaillshavv.weebly.com +-d weeeqweeattt.weebly.com +-d weigh.skin +-d weigh.wiki +-d wgqdqvtn.baby +-d wgqdqvtn.pink +-d whatsapp-rqr.com +-d wirelessvoicebtpaidmailinfoplay047.weebly.com +-d wscs1231.cyou +-d xn--metmasklogin-vcb.gitbook.io +-d xojautruffeuttu-4659.vercel.app +-d xraiz.info +-d xraiz.vip +-d xsuweamskeidjf.weebly.com +-d xya46.cc +-d yahoooooo-108560.weeblysite.com +-d yavanica123.github.io +-d yi5lq-syaaa-aaaag-acfsq-cai.icp0.io +-d you-can-receive-here.vercel.app +-d zeiitgeist.angelocachero.info +-d zenixoikitti-5809.vercel.app +-d zeznjx.shop +-d zwzcn.com diff --git a/phishing-filter.tpl.br b/phishing-filter.tpl.br new file mode 100644 index 0000000000000000000000000000000000000000..c0fa13ae4f6d712b463444c3959693cad77dda8e GIT binary patch literal 5261 zcmV;86msj~D3T$fm=Ay=WSIMy>hsnArh1nGEK$JjUKc{>1{fr431ot0`Tw8m)0Nb! zwz5KztI(vXkmU;3d*6FGeV>zo)Au=_GaoZ_J|{0rI9p7s79mrZlX4aSWjzU*@@z3O zu4^)!P4q>9QV5YtI#(I3f-`+Ve4wORJ>Jp(I`0G9KjuDu`MsYf8h7+x|NQHg`y?IAO(K|7>HNVwtt(v4bb)lmqq)8j=<#e|5Hr zrnUa^dq0Y6L03@sdt=q|%kTa0hUmZkp$Zm-@BBaiS@YOtea(4<>-`iyTV22KE8-aR zFJZt4q<;BzhmZaj{FmSRg~T7uIhTu$+cjV?aiVaNlTdS+2x^9$BEhv3GUZ4M1MFkN zkpsQ*XOLL_e&nK=Q-+4HZgcxy|MOTW+?hE=IFp21OSq8q+_66?y|KVdD>TzaE_#yL z;KOKd@F6iL1nix%WCNXpjcJ4EUe~=)t%zWO>B$51)5(=JJ383W)#($O-q30~`HZvus+Y7kZlGB>8iPQCohBZi6G!JU&X} zyLAUC1M*HnE$^O2_dNHTlzNd-NyC8ojl@G-vA1h&qhoUi#{qdCfxzn=r9Y3DOR6~s zgAfM25dD77Z~7R7GtP|ow(%z^pejC-dHY;XZMZsgTkfc~<8;ry-pnPe*T*ntCP$_D zp`~T-Z%K=WEBDU$Q4!7r*Sg?+@>)nPFF-Gg`x%FN5YCucM41<`SZ0Cpv_Z|KUh==g zW5!&It(NOfZ|@d`T|R`O;8kcTdv56WwryL^ISZk`wtA5Plc)GJgo_MSpeP9C;qm^m zdY+v`92f@1m9IIrewWZWbiy39;kn;kbFC3IB3gM)O<*0dehnkr{Pnre-2N}{N;7WX zegq!U?J+|+%)al(@)qs9Cv1BC_DzWOlkyY1&L}^amn4cTYkK#O7K-LGbsELDd(Y)r z<2mG<$yLir!yNBSLyCDh{XN?xrrVX=pnLpy%(bK(bGM5<4kJrxuooOwGU?Lp&r^l^Y z8R8+Z=m>pwIAfw+(%A{LG6-XuVxMBa!xz1%n%NW}#^U5*c?1yajFQ4Frpvv1PIm|P z6(FCr0sY+Hr0cRDok%ZKa1)8v5Cw(+4Sa_3Got@xje9nF9d7>=ZO09L?rh zapoxcRWcB#%f^=6TVgX3xOy&4Yd`l|f-|O3AmRQiRYi8pnUis?~XfmX+6<$4_(UxJs0j^I|p z2D$K!5&NSK@Q$t!rcRi0}WMz0UtP}Tth{UAF)k}(SS{2m*|9iz-w zz}-U&mELc+9?MB_7Rf*8XnEAK*4YlUV8|5)JyuUmU#bifkJpS}=P}onvP!;njeg(0 zq|(cKn|`a!L=VGvHgsK?2B#jqs}Pb|%E24&xM7yZF(&2-+F0CVGXn2?4oY5v1LV-01PfEoBRQ(yGc;=B)Hla?2fEhvofhU)<`{dXk@n1qVb&++M=b@P z6*t|0(y68I?=#A~mt>@W@)g*1SpWLog5~oPVQ|xHiNlq^2<BI+4(mCnRI4c^)U zop2uB{H|TMe_-d^RA9a$3A-)6_deQDW1S5`a$?5i8ij zy5)zwf76Dc;R-j5xhct2o%_JYF+QI`*J+nR-f+j__gMzzz;4%5&oyVBXKe$ZSqil@ zBwia33t;y85RB=zH68#GG**sXXR!)LaVAeaB3+wPKAo;(_klBQ1uOc!5$a zI<2H-a$3JoEtchpIN?k%28{8aR9q)-XTh|+I*le`q>cA;Z$5Ecm5=?^O9-7dB(gWST;TPoJ;geB@OWTY>0bht{1bO4Uav{ zGcByX<&hs;NTXZFr|6M5V*{UL(#L=LZ)tj9d_z(#`JZ1bKS z;|nVjFOWCB;a%7DV*%xK#K} z6;DaSM$%s5fsH<&i;Bufv-l?_Y#bSm99d@jnnRz~lDHsUZknOF(zgIW^m(ek{n2Q; zbK>q^XU5O{<@X!J0aq=JkqQU&Ji|m%Pq>ay5Xmb;DbTT5{W}l1*Pff?@T9^KeS7ce z<|lDrj|F6BJX@7AWG;o%&<*40PjZF&v_T{aKns004jg0Pi*J}Q#z6{Rec#usCLdTr}yUw&0juNMP~K8|T{nejMF9arJq}BS+|d-n7UyZi=_@gD?bq4YIHy zN#)%zFOs1Nl!SmQL}xPOo$LOetO>j#OkZoSJ1IB_AMVvNK4VFb7H9Imk9vHLPdPsH z_|WeS^biELprnt$BwmFzgX!%G#RKHm863V>eZZK#@uJSwDNfz{oKi3hvJ?t*NBa}o7*wiPo!6{am7juB zF8Z0i{}QMAzHMlwwGD*n)p>`%sSTv@GIprK32!Lmgpqe51e3I#7#?T_9Y}UEpNPF4 zG-g1O0!o0~07{8cya*VWkrT(b;qh+He3b1y_H3Ef5=h{M;Z@d3USYz7h8`~@B7!O* zYry%cbZdzo_oB6)t@go`bjcV$9+W;T;Upoqy?hQCE&F{7rt=`TV%O(!+RywPDax&D z0Ocy#9N3SU|LZwD;ang>62Ta$cu;^YX$&b@46uNvO+<;SF;=k!Rl=a8Q;u=tB^)|)DoTJDk-O!v9QEN zX7I%&8end*aaBrSv_e?Tg;KCs=cO_NL4*aI&f#kp208+Ug?lj7PtvL2bhHaCC%a;cSdOdltC|1nV4b#;lU-nBo$(C5=`=3SiJ}bqIC=ta6!Oij)_rB zJX(b*vXq<#C#{hWF-tb z?81_bDPMR*1;Q9qh}LT@W4j(I0B=axHhPw(%uMM0tTxY zH$F!DO;K~jjb}zFQ&kDU1g(++mK5XZhzf9gk>E@;Y{*<6ublHS3Mo7;LGUHYE#YVo zod<7};Q-8}QRh+mXnA^!xwG7GWjHdY6a)#{3WmvW=M!5Fk=TP+Br@ZelUi|sp0fZU zXzhK#$n7I{%C;cSj4?`B=X`yHv!Y>L^%5Rq3dU#&pgl;X6!;|yB}@cZqV(8R-{>`i z7<62m15-T<7^LA$1i_h%V2lwMIC;=Tm7!8RdbfCMg|RMa863jHp+pdxG0ix0N-xq( z2u{j~Lg(mU<1HPk#W)^qRLIcB#RQ#{)>3eGL|smhp1TFLlgz1v%Ao|FVghe}*WlUP zp`B$>3m>^!qVSPP6XK#Ba+9L*=1?|r1nX2ZMzO?AxHiZ|a2FOSf^N*XM-i1)sA4o+ z*k(+MMLFh}CTIPZ0kT=^xsR+Tx#RVWlMzNSCbf53X`_5vk`>@O zckOBkOO$w}zyOT29F>V2tX2!6FeteUY!Hj}pe!8X62X*UZ8iH==T$SYmJ1vOFX;Jr ziYK#P>5<+YUt3G#HDO+oN0`0W7=cL5WGZ*xeZ5bk!6Rm@)6*E(9=J(}WW%t*7g~if zcWCgMS?_5?!(-#>lJZ9?32s={6ks|#P50stAHHJ_L zp&Gf8*=2Fh4f_j5sQ}fo2zH><3Z_vcb4qW{84906uDqJn_VaaN%1Ch(Tb+B&E9QO2 z`2gayXiwlyxg8iPA23HQuh*3eC1s&=)|Ez@l#m8*YNy1iR&ri!8s0_NwG_nO1$*gG zI_47t?5!xcQgV!x16V`S<6!Dog9H|hyj<7x+dw;i9QfcGZRL?_ndM_w6 zW4rvFgB27U7kVZDQTl!k19E{9FqYmh42^_y0Ii1xdn@^y02Q2J^RVorY!vY%Y%=Gt z2_L|qB}%LiT^3oGPKzC}C3L9fIHdQn)|I|kVA ztLC9x2IluW=TSnGhHGPJPUq(m?I~UDONM-|vUvN9w|n>6ch++CJ)TFg8tIPB;sR94 zn?55(5{-5Yda;MGA})I0;6k~VF41Nd;t6VNp6H?kHyEdr<&_MUtVOBDV{sje?iAEk z1DJNLchk&=PX(GZ{4HhmBR_2I z><#YepUygX9D?qJ0vu|N>~Wt=DrcQk`dHE5dRZ(VOJB5JG#+Fcqqxxl%A|3IXDl86 zIpKi)TH&DOanv0mL`8x%r%YpXnSeXe?^ae7Ce<~8J3taWz7DeR%4RPbD)l|E7MNVM z(Uh4>SHv+}AZKQp#jaTj1o;3XKSzBMYb_vdjJ%J~#|>BMi%UJOZ#&)8ih7UQoJe0S zIjq}Rqt*lHInpa+XVl=|cHL{7ap0LcCSwNA>)#mjftd=u)k>t)DmXEk$FMDBj$*^? z+kE1D)>10r(&=brPV5K7qltN2zqE1x0soZERI|o6^hX*M>q<iu_Q8Zo}FIU0)GOL ztL(c{OP!rGZb?~mY|+)y$+DsrLML)kH>$HInyg1w>F}(Y-SY|T<^4pCu)|8`XrI71 zUyphpu|1bG4lB$njvl_*E$bk)U_6U_)(GLeA@{AoJ98zMWf0e10V8Xnd-I-G0wcUw z(s1>DDqa;t7cWDhh7i}++y}>Y^1G_<_oO-WfZMw(q5)p4ggOR)cS%F-K(rCoVwJ27 zIwrwBhft4#A&*2Ts0_=?qFrcEFBk~>P0$8OF)m=~HTzOKIi<-6QoK&tf8>G>M#z>* zn_J!c25)rUd?DiNLKW_khj)8kw>6!(D9IMDulRb8GFvK+Y!<GZjJ#;Q4KOn@XkktYNHlkT`dk5c;NBq$911VZXB{jQUU%Zw2Y%mdkn`HMM^6*V59C&SB$7zrD;TEU<%mi(#tna3a% Tlx8lGzHfPaHd)=@>l=6%73T@j literal 0 HcmV?d00001 diff --git a/phishing-filter.tpl.gz b/phishing-filter.tpl.gz new file mode 100644 index 0000000000000000000000000000000000000000..2495b66c6c1233285a7474f047f5e240463dd9ae GIT binary patch literal 5405 zcmV+&72@h2iwFP!000021D#q+uj4p&-p{WnU^WvVQtSO_Ae$f)On_Mg$YhfppE7NU zltoIm{Oj{kl69|TS9OrvT~${+ht%PDeuq?N|6R3C41ZVF{prs?{-Inee*f{GCuL7c zH$VPntg}D)WR(TNu9<4GfMjjepNr3#Ce*e`%@7S zVckhM#loAqTjh36EEd&S88Ws#)ouG+yGoP#eeD`HiP9jhsvyQY`c~LW=ykmit0a%| z66-wK31x1W@b^BzpcNZh!N$Qax~)EmK}p4kQ$~laX<8lTS&(@1XLwTt5&MDkihor13iV!AjJB*lkUCfOtc~C`(>!*O^81ieY#*H?K;+qW-zU}kX9=Jr3Fft_aAd5n6$i=i!I;z^BSNcpkq61EdCP7c;R>0-LyEH>*!<(R? z;v4(e5@!b04{CyjLgm(RF}+Eq9l_en=xN_&-?ww1%`I>y7z7j0Nk9p2#BryCv*IYK z>#*Lc{af#}y>wh@Y5XX(?;xh2?YzIsIoKA~O*X=J-&~1V>|gLxa$Z7(KP6Ui9op-N zfDJwMNl}`4mx}80CsW~oN~cxyD{`LvOlT{H33&joKp^HnV^WQVAYRI%s6R8|H_)T9 zNPa~xs;K%*_gdeCfjyVlcOzHk|H7iocaC8ixDWI<^J#JO4DCB*KH*2uoi zK%imf;C9l3Djll9|4y?!imNAu5;;?$i0;a^ZM$MhhJGH&DQ_P3lqAhvstcjH66sy2 zLMA%ZjhyT~PqI+;62ke=ZI!;Pt3hMI&7cgh(M>93lCR@-8iz438k{1S$uaLh1f!+m z>UGOhxH8px7go3`jnew{InVZIlu^6nAkhgb2G|zm3{Pg9oi_8qkW@8aKW{WlfR10q zQEq~ksoQfhMP9g^#3150^o|%s&-z1KYm*G7Ixakrkqu-Zc64Hd3zX4O7jB8Yk3bOXf(Ye?Vl&v$ zL(pVj_E}H7B7%MZ9vIw=0#Ifsutn*&+bTIfg=a+d1|{G=Ki0>#3wq;D#s(=(GFHD& z7zQB$H=q&UWPnw;5B(oMs-WZkaWFY8%sas zM=&;OXafvkDx4wEGdaG%-JQ7r`5eYi#D%{E48T7O@@8=amjrma?1NTJsLii-WeT1t z0uq{`*`E8>?9{Wbr)lVJaX5_YNL8k3{(Yn+s+*xJ;ZB19lH*5_y$}dO7p`_*#l!|V!e``dWPrxn845l)`%bFr=w~D!jsO_1R1PmoIb-Kz^5it!3Q5N4J}8n@N?8O& z#aNJ$lm#>{>L9B)C4jCa$tVIRNC$hJVHy!%D;eI*AVZ(17c)%jLUeSD=udjuY2S3i zMXS80hsYnI>s=^4E&&b@lv+#-A7o{lLW}f9y09~YCc{2o->%*1%O^SF)^>nA@M#o+ z7oXwwY@7$~z)D#1BB^88xMCZ>TQ9l6F^{K(cB*I663qU?M`QafP7}R5|mF5QJP(9${o!G0_;t^rj(9oAX?Vjab=(FiYr0x$|-D%&n zDu%%fX_glgdKk#JmS^&SV!`FT!9KIMxcgKh5`_H0QN%1}WTW?C=SHE%BVdz+32MwG zAd~993?cz%!+xupl2|KFMmZWSn3G8Lw?p`%zKdXOwgg{c zec&62=!sg7FL>dHOOb8TXZ9v4ilQo`;%ME5G0o|<31P(L8B4+yJN!3X#6yKEuvtki zSV{oG?c#+C=C^%&o=;nOLT_^{9bVf&bRiv}%>a32bJJ!RkzQdJgKmigMOGg(_z6|L z7CVB%qt}ARrh9muSaVY6XRJf?K{Ny)bM(zkc3e-KJ9odkuo>5ygu*N|ZQ&wsTJtqK ze0Hs44_x3@aQ4M8h+ys5yrLF}F^EZt+wrXpy&RiAz;iB?dW*!9a%0zFgIbK}Tvd=) zRdQUa_s z1?Ms?>olF9<6GfZ7R&tcl@HH2{nQ~XTwBsXYjv>V3$=Wsj+Y|yCo;$3 zI}nWM6zLSj3eWLw$)&-1Ca9nt5a++)<_4d2No&J zAB?>ONT)8M_h&EX?rm!Z>V*Y3v2>h6oi@)i)6O8Hc?jbB3@8>!Elfw}jiJ6^iRbc% zt^Q;tn3QSPGn&`e8;>pIbuq_;-vN z@$dz4kj)$_(yQPA`hG*9Z|zaA(JlgW`ep=qU$N7}k1q1Lfj)ao z6&v(0oJdky^XtZaK^klQ+s?}Nb;v|CkO&+oNRn3v=>=1M%F~EX3-&@-(}n)LV13j; z-vdGPav#CutGM(Cl6i;5z3TL7`m%d(us1ku@OtR-#HvpTjfV(`KQt{t;!jUsRoY)o zctQu-%|K;nD`3IZAz_>b<-PM4K0DOJE3{|>XV5XvD=7VpSr@Y-)A#DKc?m|GVW!<0 zgO_;eM+$(D2tj1R$`V+KWkl367fi}ZFj9~_9FiCIvaGVG5SbJ#OY5wT;u1Y}9J9D8 zIj@iGHLX&Butby`K#kTiifEe0ahl{Ls^SBC5_6t$R^)XNXK2alRAf0RxX7?Zj!bo6 zhomuQQdG3cBwDgE5~L{bqMERhzpXBX6m^;qFlJc=X{wUdlvH_4bCyL1_LO7=uj@FI zS)D~?1vv_j7vfZuBm(exWzVolUL^@uOR|gUEEmu$%$)KqBQ$v1zmDp}GJw7Q^~j53lDY#@&~ z6vK=1ZFMTV_sKYi>^#dU9H3x=RXO5>a(-mzd7Oa|!5^`D3a@23{Eb91i(+|uCZj2CKT_08Q$4hN(hIC(=sb#LZVVG9+y&H#qtq@(T1&-WtLPB-S4HY60g*} zU`KXRmN}%)DM_IlLJOW`3EUG=m{M^x6U`$6yYr&1;lNRaZKfqqFVqsHoRkN47QuWz z;38y}m{S-RepyzCmz33l9NDo>9!0PrRFfBJT_B)RE|T28?VUZX;RR)lIO3Uz1cjrp zTxK~OIgZ|yzj;~#)*38xcrDS1hc z>=lm%sp^bF?~#mQdX^SRT(crgV66i?PvEr~d>7%IRjee)lW7FSvxJbkcwl*4mvWv9NrQjkbs2*`r))aXf zO%$A=_8L91X9=TuQo$3Efy=bY1(43A&;?N)fC7#HG42I~jB?GyRDnIr!Xvcli zD%JfJkqm(L4Hd63fHs^C|r(w`i53chK_2;Q0y2MTlw}tkR z1ppk>=T`vhg|EXOqM7(S11{wJZNx{SWs9=Z<0q3h(Cixr_e;69(@r~EC%TV(l&uFr z>Dv*7WoSUA5qt9&qW(-FXht}0Fr}}C{Tbssm-cOr@ADyDFvWkwko*xt`fG**Rj}vh zB70s~TZSZfJ-u3&Tj1{b48>F6m*Yx~4}ijZ%LYn(E1Z4NdE7->&ZM$y?2LYhO?H zvL2!OCp6Ef8+G*Q*yV-(?X(5sH-EyNemrS@QuC_(Ikf;P`Z=}q=bIm>#(xNA^md`f zy{MnW{=oKKdY^+G(#=oiZp4=vnoG2(@VdLtD0|Co&1^12g=PrPE9c;^we~7!?Hryu z`mJ4tpRNtF^;t3O%?-}P{r6)2P{QZXU6O_2Icm47i|<7I-gTp!-v-C!bY$zKpQEF{ zJUjC0ZtT>{DBeWoL+al$&Ju(E-eo)7P&|(C16WZ3mLBh7?UehHD6}o|y!d$Av8J%? z%t((RAK8UN_1oDG25${?pwFFY2`A5Kj#z)zOz6Bk36!|UNjLuba=T~pWBxdT8W(Iu z_mH_Zjz{-AXYq;E4a-Gl_VJ^!?+hQmO8a6+laHszPF^LlC$=}}J7Glp~OW>99`Lzs0b8bAN#3M#$_tm);f_`JE9yAM4$C@rUc@DP*%*qG4Ut7xg%K zWA1IRyzlvi1m1xRds6J;4u18$@$Uo_&)o;d8+VpH)Yo$t7%lh!r92fd5oJ%B zOe)UO;gtTz$gL^8wi*mz}uoLVsDJ}*VyFDffYA23aD>2hwoeJ^O}8_8DRU)714uaW9w$SA9$7C@YU5SZ3oSjrU-<>%dnE z57yROwTaP#67S{=6Ab791&Y!b_`|1z748F3j~&ykPg~Z!+wms+y^>J;EDz$`XY{FC zt1*+4S$>d{tGxL1&GPJz5#b literal 0 HcmV?d00001 diff --git a/phishing-filter.txt b/phishing-filter.txt new file mode 100644 index 000000000..ceed72497 --- /dev/null +++ b/phishing-filter.txt @@ -0,0 +1,462 @@ +! Title: Phishing URL Blocklist +! Updated: 2024-11-25T00:20:55Z +! Expires: 1 day (update frequency) +! Homepage: https://gitlab.com/malware-filter/phishing-filter +! License: https://gitlab.com/malware-filter/phishing-filter#license +! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database +1111365dh.net +12931-coinbase.com +215323.com +260aesthetic.wixsite.com +3650947.cc +3659ll.net +83291-coinbase.com +94-103-188-123.plesk.page +9825057365.com +abctrvabc.com +access.secure.coinbase.verification.logln.54-211-248-107.cprapid.com +acclimatizable.fun +account-update05.myvnc.com +accounts.google.auzen.us.kg +activebusiness-unlocker3.com +addwsrbh.green +ahnp.vercel.app +aldg.ldgknhk.lol +allegrolokalnie.pl-891241214.buzz +alutipcentra.pages.dev +ambil-pinjaman-daana-payleter.xforms.web.id +ambulatoriprivati.it +amev.ldgknhk.lol +antail-conv.com +apply-now-to-receive-badge.vercel.app +artsea.pages.dev +atmailupdatewptnskmdinfomailacct.weebly.com +att-101072.weeblysite.com +att-1041page.weeblysite.com +att-105714.weeblysite.com +att-105819.square.site +att-inc-107097.weeblysite.com +att-login380.weeblysite.com +att-login522.weeblysite.com +att-service-102155.weeblysite.com +att-sign-in-105669.weeblysite.com +attcom-100762.weeblysite.com +attcom-106808.weeblysite.com +attmailservicenow.wixstudio.com +attmailservicenow.wixstudio.io +attmailsrvrdesk.weebly.com +attnewmaill.weebly.com +attyhhhhiiii225.weebly.com +atw-tau.vercel.app +authentification.coinbase.suspesius-detected.54-211-248-107.cprapid.com +authsyncs.pages.dev +autoreplyattmode.wixsite.com +avoid.hold-managert.com +azbin.ir +b45018.com +bafybeianm7lllm6v2rpyuah5gzsh22gxfikab5ie3xei6f2n3ngfvsx524.ipfs.dweb.link +baiii-wong.cutvi.cfd +basvuru-online-yap.vercel.app +beionfidi.pages.dev +bet73nn.com +bet83039.com +bet83054.com +bfrescentremebermainsetreouytnoy.weebly.com +biggggggggggg.weebly.com +bitnode.pages.dev +bitvavobtc.com +blackhere11.serv00.net +blss24att.weebly.com +braucrarasuteu-2470.vercel.app +bt-102124.weeblysite.com +bt1business.weebly.com +btuan-dan2-resmi.top1.my.id +buildingdesignsusapdf.s3.us-east-005.backblazeb2.com +business-page-property-897432967.netlify.app +caipora.xyz +calm-pothos-3b24c9.netlify.app +carrefourarabiank15.pages.dev +caseidhelprecovery1324354657.d1gfid59auiw2u.amplifyapp.com +catgirl-appverset-nya.pages.dev +catxtokens.pages.dev +chat.94-103-188-123.plesk.page +check154109.click +checkseven.vercel.app +ciente-a.org +cieplo.app +cj12143.tw1.ru +cj87335.tw1.ru +claimyourethrewards.pages.dev +clickbait.design +cnsa163.com +cock2-iota.vercel.app +cock3.vercel.app +cock7.vercel.app +contact-pro-8291-d01.firebaseapp.com +contact-pro-8291-d01.web.app +creosrl.com +curmmgdv.email +currently541.weebly.com +currently890.weebly.com +currentlyserver.weebly.com +dara3dccj.wixsite.com +db.service4db.com +de23fff6-68cc-4a3c-b169-48dba9317a4b-00-3rsqyaime1q8f.worf.replit.dev +debutcan.firebaseapp.com +debutcan.web.app +delivery.attempt.failure.ebbs.co.za +dev.stream.mornar.app +dnwqmh.click +dropsmartchain.pages.dev +dsjoting.group +dulb6c5p5.top +ebay-mallwholesale.com +ebt-lilac.vercel.app +echoredled.netlify.app +elbarco.percentadnp.info +eltritongourmet.com +email.mgb.modento.io +enjomugg.firebaseapp.com +enjomugg.web.app +error3456vhubhornbase.azurewebsites.net +example223.wixsite.com +eyeydhe.wixsite.com +eyttueiu.square.site +facebook-avip.click +fame.pink +fassehoizubra-7696.vercel.app +fastdropchain.pages.dev +fjsfa-5aaaa-aaaad-qflaa-cai.icp0.io +fla-1001.square.site +flo4211.github.io +fnbficaupdateaccounttosecure.tor1.digitaloceanspaces.com +fnuttlie.wiki +fokeijonnekou.vercel.app +fp53bsvpd3ysnf73bk1ga0wm8bqzy20ipw.weebly.com +free-verified-badge-form0-service.vercel.app +free-verified-meta-badge-service.vercel.app +g06668706.wixsite.com +gccndbqg.vip +geriodememerkezi.online +get-checkmark-for-you.vercel.app +get-free-verified-badge-service-on.vercel.app +gitanag.broke-it.net +gruprocuroipra-6493.vercel.app +h5.b9en.com +h5.metacoint.com +hcghij.top +hecregayatu-1014.vercel.app +hejmtxxt.guru +helenblunt6.wixsite.com +help.accountsupportcentre.com +here-apply-for-page-review.vercel.app +hgbk.ldgknhk.lol +hhideiie.wixsite.com +hitummoinneullei-5882.vercel.app +home-101067.weeblysite.com +home-103465.weeblysite.com +home-104341.weeblysite.com +home-105266.weeblysite.com +home-105929.weeblysite.com +homeattatthome.square.site +hpnefhqs.motorcycles +im25.net +info.supercitrus.ind.br +ins-business-home-center.com +instagaramgalochka.vercel.app +ipv6.43-135-137-110.cprapid.com +irmt0ken.win +iujf7839iofvkbcu748.weebly.com +iwimwmiwi.click +jagej73796.wixsite.com +jfdjy.com +kalyani963.github.io +kexoigrufouddou-5902.vercel.app +kl1k-ds1ni.neupdile.my.id +kliind08.wixsite.com +kreelo098.weebly.com +kremlcup.com +kshitij12375.github.io +kucoinglobal1.com +kxbztydc.black +labanquepostale.jupiter-analytics.com +leddevotoze-3146.vercel.app +linnkdna-kget.wxxzsite.buzz +llahi.info +llahi.vip +loffaummuddote-4145.vercel.app +login-att-10221.square.site +login-form.world +login-online-outlook365.com +login-outlook-midstreamauth.com +login-screen-103134.weeblysite.com +loginaccount70.wixsite.com +loginaccount77.wixsite.com +luk6414.wixsite.com +luxlifemiamiblog.com +m.meta-accessibility.io.vn +madebybmr.fyi +maqpiexyz.click +mawonr0-oamasiucue-opawmcnee-qiannaser.pages.dev +mayfair313.wixsite.com +mdbrvlfy.black +mesageriepro33range1.weebly.com +metamsk-wallet-3.gitbook.io +metttaa-audddt-new-02.firebaseapp.com +metttaa-audddt-new-02.web.app +microsoft365-storage.github.io +mikepattyjm.wixsite.com +mobilemidasbuy.n3g.fun +monespacepro-client.3utilities.com +monetization-violation.github.io +moodengsol-net.pages.dev +mwsiekdnfjrdufs.weebly.com +mxmxnmx.mx.zya.me +national-au-b.com +national-au.net +nbaaiqjq.group +nexomyacwv.weebly.com +nft-time11.vercel.app +nichcheck.weeblysite.com +ns1.carrier-ast2-portal-apple.com +omadshf.ru +online-assist.live +online-promo-asb.org +openkimono.pro +opportunity-verified-status.vercel.app +ourtime.reconnect-dating.workers.dev +owouwuowo.click +p365kf.com +p4zv8crnrrha27so.94-103-188-123.plesk.page +page-center-manage.com +pavan-patil-22.github.io +pecinternational.net +peesom.chat +pencairaanndannaa.my.id +petty.wiki +pimnhv.group +policies-business-page-service.com +pottatrebewe-2808.vercel.app +pqo.hrf.mybluehost.me +programming--service--panel-totlyy-free-for-you.vercel.app +promo1.spik.ru +protocolsecure.pages.dev +pub-112eeaf2c77341c4ae9f5ecff8eca6a5.r2.dev +pub-1778406e4fec4394901793111c187dd9.r2.dev +pub-19b834342e7d465b9f00b3511325a081.r2.dev +pub-21dd4dc659614ceb93e45a6de4434502.r2.dev +pub-2f5e1dcfe8b84f76970ea664659ac7d1.r2.dev +pub-2fefe932a6974485b987c9ba851b5c40.r2.dev +pub-3a46d9914f494078a6d6237513e7a096.r2.dev +pub-442ed822851244a689b3472ea2c6a950.r2.dev +pub-60a5daec61ba40f394c95d86e5b814d0.r2.dev +pub-682ad3b65d944376b919745aae3c56d4.r2.dev +pub-6eca2ba9f56f4cdc93a7fb1285629a21.r2.dev +pub-7ce6eba937da4f1d84efd0ff95a93873.r2.dev +pub-7f5cf36445d042168bfacd712e890dc0.r2.dev +pub-803839714a924882a7bcc2495a26860f.r2.dev +pub-8161de4a277e4ee8b532af34954224e1.r2.dev +pub-8190209578b3482b9dc5edae2a63d6ef.r2.dev +pub-8376b5b2334844d193a525d8b8548fa5.r2.dev +pub-88f7b785496b4f04a4a82a50da93d67f.r2.dev +pub-8be4659f157e4d45b72e6cec85017bdd.r2.dev +pub-8d51417b07444f03ac7c54f4a0f401f9.r2.dev +pub-9163a97d70394cb499bdd232be6c2169.r2.dev +pub-91c3aad9bab7471aa07faec613bd81f2.r2.dev +pub-98171471e0944ac3a5820ef719bf0640.r2.dev +pub-a263e0790935412eb10cacc55bbced18.r2.dev +pub-a291041b077742899b63a9982f04a56c.r2.dev +pub-aa7753aa5ba3444ab6d2427daa6d3be5.r2.dev +pub-b50adc5d699a4f08aec37102c2103da7.r2.dev +pub-c0a934c950e441db96b882789f53c9ea.r2.dev +pub-c2c250050109456396c933de259a4fea.r2.dev +pub-c39e46791d8d4e0ebd67c5f455321073.r2.dev +pub-c3b196e593094fe49e3a1fdfab8553b0.r2.dev +pub-c3b980d52bd146d2bd031f659e17fd7b.r2.dev +pub-c8d1ea894d7740f1bd8c36219c632c55.r2.dev +pub-d2d454e4dd7148c7a4853027dc2aa965.r2.dev +pub-d6d61a1c2aed4d8bbc46e0a32bfde07a.r2.dev +pub-d89ac214e5f14f29ac8d34c1c299278a.r2.dev +pub-e395fede5a7d41279bb5c314b6d97c5f.r2.dev +pub-e42cb528b102447385e3145197916f51.r2.dev +pub-e4aff507450c478cbe3f77ad23d75035.r2.dev +pub-f05b8109c3834954af711c0da8c5f9f9.r2.dev +pub-f72740035b954574bf6f82a9fdfa46c6.r2.dev +pub-f7fc0aa7381e47d1a8546ee27e313c07.r2.dev +pubgm.club +puffagroibrouwoi-8818.vercel.app +qasimk.com +qfjfvseq.info +quauwograssodda-3503.vercel.app +qysgyp.com +rajdipchatterjee.github.io +rechazaroanularaqui51.weebly.com +remote-fix.pages.dev +renggard.47-243-192-240.cprapid.com +resolvepanel.live +resolving--issue--with-us1.vercel.app +resqat.weebly.com +review-business-case.d2f7p3b7pucnle.amplifyapp.com +rlpqwefi.pink +rouloigeilleuja-9523.vercel.app +rulemec.pages.dev +rutinqqwin.shop +rwftfu.quest +s.team-pw.cc +sairanees.github.io +sanseipecas.com.br +sasklelo.weebly.com +sasktelcgrpjmailsgcmfnvoicegjjlsvrrnfnrtmlog.weebly.com +sasktelcustomerwebly.weebly.com +sasktelnetwebmailservermaintainance.weebly.com +sasktelrectify.weebly.com +sasktelscrutinize.weebly.com +sasktelservicecentterwebly.weebly.com +sasktelsupportsystemwebly.weebly.com +sbcglobal30.wixsite.com +scan-vulnerability-guard-v3.pages.dev +scan-vulnerability-guard.pages.dev +scanner-metamask-v1.pages.dev +scanner-metamask-v2.pages.dev +scanner-metamask-v3.pages.dev +scanner-metamask.pages.dev +sec-sign-in.info +secure2-validitycheck.weebly.com +securecapitec.theprimepoint.online +securerpcfix.com +seeteressecalywoi.github.io +seivviice.weebly.com +server.0e7p.com +server.2rk3.com +server.8q3p.com +server.n6b8.com +server.v9vs.com +sevvviicess.weebly.com +shard.blue +shard.skin +shared-d7590.firebaseapp.com +shared-d7590.web.app +shaw-101329.weeblysite.com +shaw-101587.weeblysite.com +shaw-106427.weeblysite.com +shaw-107375.weeblysite.com +solutionwebsitedapp.firebaseapp.com +solutionwebsitedapp.web.app +solvetans.firebaseapp.com +solvetans.web.app +sondfrom.dexlog.my.id +soyokai.or.jp +srdate.club +ssy.hmb.mybluehostin.me +steam.poweredartsworkshop.com +steam.workshopsreview.com +steamcommmuty.com +steamcommuunity.ru +steamcomunutty.com +steamconmumity.com +stepsray.vercel.app +support-metahelpcenter-id100003498934.netlify.app +sv5gardens655665.weeblysite.com +system-portalnu.duckdns.org +talwgam.njmolada.com +taste.baby +tele.zhngain.top +telegrambot-resolved.pages.dev +telegrazm.net +telstra-100408.weeblysite.com +telstra-100469.weeblysite.com +telstra-103234.weeblysite.com +tiktok-888.vip +tiltckshow.top +tnomwzrp.top +toeken.im +tonic.pink +tooma.cellinsurance.co.zw +tpdtepremu.xyz +trattujeilesso-3354.vercel.app +trbinace.com +treibrukeukonno-1395.vercel.app +tuesmad.firebaseapp.com +tuesmad.web.app +tyyyyyytyyy.weebly.com +tzcsjfto.chat +u.updatetrackgre.top +uc-whatstapp-web.com +udxcady.wixsite.com +uklifejv.cyou +updatemail12.wixsite.com +ups-trackdeliveryapps.chickenkiller.com +usbest.cyou +user-transaction-overview.vercel.app +usps.com-trackdck.top +usps.com-tracklnv.top +usps.com-trackmcl.top +usps.com-trackmec.top +usps.com-tracktpq.top +usps.com-trackvmd.top +uspsinfw.top +uwdtsczi.top +uwm-onedrive.com +vaishnavi1436.github.io +validatie-veiligauthenticatie.com +vbbu.ldgknhk.lol +verified-this-request-badge.vercel.app +vo4zzp.icu +vs41.github.io +walett-cont.gitbook.io +walletauthenticators.vercel.app +walletcomnecitt.gitbook.io +walletconnectdapps.online +watranfart-fdd6a8.ingress-bonde.ewp.live +waxed.wiki +webmaillshavv.weebly.com +weeeqweeattt.weebly.com +weigh.skin +weigh.wiki +wgqdqvtn.baby +wgqdqvtn.pink +whatsapp-rqr.com +wirelessvoicebtpaidmailinfoplay047.weebly.com +wscs1231.cyou +xn--metmasklogin-vcb.gitbook.io +xojautruffeuttu-4659.vercel.app +xraiz.info +xraiz.vip +xsuweamskeidjf.weebly.com +xya46.cc +yahoooooo-108560.weeblysite.com +yavanica123.github.io +yi5lq-syaaa-aaaag-acfsq-cai.icp0.io +you-can-receive-here.vercel.app +zeiitgeist.angelocachero.info +zenixoikitti-5809.vercel.app +zeznjx.shop +zwzcn.com +||alturl.com/hpqhv$all +||ardilu.com/descargar/kmsauto-net$all +||did.li/parcels$all +||flow.page/servicesatttttmail$all +||hdfcsky.com/sky/indian-stock/dashboard$all +||hdfcsky.com/sky/login/verifyesign/modifyemailmobile/g3mail@b.c?status=success&digio_doc_id=did241119142331957uip6e3c979l3r6&message=document%20signed%20successfully!$all +||is.gd/djgj07/$all +||pay.zing.vn/pubgm/$all +||rb.gy/go4bnv/$all +||rebrand.ly/18ab5a$all +||rebrand.ly/4ff03b$all +||rebrand.ly/8wtcv4z$all +||rebrand.ly/96a02f$all +||rebrand.ly/c0d1afz$all +||rebrand.ly/d2f265$all +||rebrand.ly/eacc63$all +||rebrand.ly/f9decb$all +||rebrand.ly/mzhpkzf$all +||rebrand.ly/nbyh9vh$all +||rebrand.ly/sa2uoq0$all +||rebrand.ly/tcthi8d$all +||rebrand.ly/tnab363c6$all +||rebrand.ly/wx1eo7w$all +||surl.li/tvybxr$all +||tinyurl.com/carrefour-926/$all +||urlz.fr/t8vi$all +||urlz.fr/t9ka$all +||urlz.fr/talr$all diff --git a/phishing-filter.txt.br b/phishing-filter.txt.br new file mode 100644 index 0000000000000000000000000000000000000000..6200ec21f117b5c3f4e61b0d9162520b79b6eb58 GIT binary patch literal 5533 zcmV;O6=Le)z=MgRq}Bcq5ygA}G*TAM-yb2v-1lqt5B=WF>b?mXTEsXh>|^-9fKsa^ zH9=d?ytko$-|1doLLh|OkpSu3sooM7e23-j6*z1sYgF5zJ5ISn9sMZ_w26dfWT}+0W=I1I9 zj5SY+v#JrD9f}uL9HcaU{oJ;=js5Y@-|v)n^4re|OHe+%mU3x+{rpQDSeQTl(W!5O z3BkJIpWF72yY`QV;Xj*SKY#a)lraDCkN7cg|NPz>jGy%eh}pfqf4}+lv$YWsHvHqC zy_Beej*W^1MY<9P_JV|LcE&4ChSuHG{Q5CcQ+t5)Z}KJA{Q8jtk^lII0@xM4$N!_B zjmlof%Tm#&@tN>QVSC_36^s8Z6rlD-8X<&`<6!m^w?s9fTclt*knaGaxSLK4vXlR8 zG`4`b>{v+ii@s#X#t1nM?b1(N>yllp9q^K7*)1Pz>6vIH6Z6bOCwa7(4^GL+nq}^W zc9_1fb15iY(g{k}xU|NcxjbFXN0lTlircVR&xf9MJT32MCfbSXcq`i2Kz2(G3Oyp# z!`JE?*-0@TPuvdN-KSqIG-onb|4+i9KInPP{MZ`Mg-#SU!KxRp3?@SL24k+A)XqiO zYGC(qvY%d~x5no*4iSEW&NEVB+5set9y#P;oN-$FCMjNOberMxYR<(tyKr zI-BqX$TA)LxjFI2Xm94j#Y$iaHPVSpf!T1Yo|sC;$rXzOvUH8SV)6NKhWr{@HU(N2 zejzG*uco{dCR))>T~XwUv}(N=yAPjFXP89)l%K`I%?;;|_;n+BU7m7km+63LuO6P9 z+xJBe-87YpM68{OwiCn9>o~M|M*h-V znZbg(pjqnFvgh0DEM=ZrLc(b84G9N>1_^y8=ME*!d`YUb4e==QoKmCup%wG@Pe8$X zD{7fd?8Eltz3aB`N(ZQcP=1ldwe!+%>zThp*K>+%=0?fB0Zaa96c7=+ zg5S8VHQ2hjAfRsTq+J4dOU$2T7|bn zhYFJe@)_T&g?bksZvHH%X!{Y+$O|r#CQwS{gfpn3Ujfh9cT6Y*7bU%IZF^m1bMAU5 z${eRkP<4U?xfZOf>!)^eK{Z$0iB4&6Rz(<7c}TrfyVlTmEMa!UONfHI+n_NFK!8Gn zTr)(o@+^7H3~X4eZ3m79oXWz3s(Vl@Hf-^X>{@C>uz8t!*)8L=b={WMd&X_1fnrF& zzxUHIPw(_cqcRz$k`%;7*9+Y3-dP&ua_@ql#~OY>uhpIizv(~hF-J_2YsX# zv8lu{a`Av!WN>;^sK`Yd+W6Zuy{qKq5^<~CK9#m}pO+T&WdTgz^$jGDM(ek=y2&VRp>w@awcj6h za$VPvjkDIQ2dSA7otN#0_$gUD(WXM8ay?W zMn(Y|w;MOlAEY_N-yuh(GS`7W&=@>9pm%c@l81EY9)Eq@E=dqeV7T&py#sm1TPD9l z!JLTJBN|h!8ubtdm9{mg;AYVqh9nRp;k$*ZFpCx>Wy6!#mtFRlM zz*7^(PiP`(Od0Mv$?*Q+jknpczG^8Isp1tDu=g-HDH7RQ!66Tf<7igM8TUX>RSDQM zE+eVT6>?!nATJ`*HSD|q1A($H5^Fq;5{AzJNysUI7pSxXyl#! zI!Sei4cg1i>hs)POYu@J2>((n7RaE%r<|eRt6Fd-4=*18Pr^?RRq3t%){f&iPwmLG zuefRLjrwf-q}XhjC>V6;Fdg_1_w<=YO|w7uWVfcr~>}&DjqPoYK$QjY(jhF60%SNXo3Ehg!J;-!kapR zkpb*G86?6I3zh0zAn&nSi^PU`?h2m40|pdlJ5IFuvdDfMuJ5Ix4=k5y=*IC}mu|5^ zDNxG4WR2>*N000N$vm%wITuH6$aMo>!FZ`W&!THO*M_Zf@`kI_kk1Ul;L3r@2V$bP z2G+Jg0=KE%g8Sh`;46#4gR-Uk}y0rmz@%P37qoCkgbZKx_3% zbYvi_dUG$g)EAz+3OZ*%#U#yZaCrf^X>!=m4YFkry%*R?!Tw8HEe|-V&X$8^9t%;M zzcS%r{Q6F&u7TYra9{WJ?#tbmKR0lPO-?$`pfVKfuSLUH<`n>a-X9d%gvW1iH|Xme z-1KWJ(3x&ediTYF0&My$cZ#nWzDh1oYM!SEHBFxL5Ygp5>cW!wpvk!d z6Isi{73x*P6$IT8bzHtV zqP}(xlq>jRkBB)q9&1K75xoXV0NxwrN`tX3Ml9t=j}(=_+(i2aJX zmrK92Vp^mSLW_AaW?A0jqGs94zQf7%8%E6!@}*J)g)7GWIwaacf4Ml1>8ii_-ET&BLC2er(TUKGrO zP=oH<h9o z3be4;qDHK}AA6i5d&3x>#t>2|jmuragKU(FNS+XKZGEUYXNV@rZO)0eR9X?vr~=p; zD0eeJA%)s%8YSUevj-|L2S&6`1#}b?LI8}?E-g!fB*d*3Y|zDx!Zko^@fr_dLs{)S z)S(n?h@Pb=0eS0b}EyU zVp&oteJAb|h}pZ;-WqU|LB%9=+ZGs5N|bUEq*@k_NhuycaRsgIQ6#XkWN(gKmWOO3zY*q$I%+C{Z*IAKKgZ!g_kywzT8~-7{8)?x`$IR+7j(ocpq^<~g(p zIy0t`m*$(53R$ccFe&6*7~9KH2!SR-kHK0Fey zNqZAD$QU#-4iL5G1uYwh0Jo(hPDLX;NV!o4mfp!q#$H_tP~JQU)(Kiij6@)pMo}^n zK;&|A9h8&RF(@%oGUR4G%3xN9;!LUJPaA0fEhMqh29Z(F!8u!UZAL@-+y@>Ej42iB zLP(5#)X_kt`kn-?fPu< zt+hPCJ6?Ls%P%2N@)|$meZ-4JvR;>7pJ~3?N9|a++cH+9 zNQ3*&&*OOS`#RSBTsXi=e(7^6kd6IgS;5T&Yn-3x>Q15$8`P=us;h+;a}PU3$Q5k$ z!-`~)^M9|Dx&#_}HqZ1>DHs8xRB)K-CUlrd;hI-IOxN3eEJS|ym2dY;cfY+$ef7y@ z&jL+fxuABE=gj}IexMo09q#BV8VI=|z& z&r952113i$pJIPnrzHLW+R#iKN0>hTKHJ?#m7smv0{5`VnBxq6ih4^?9Mj z=cyua7JUV-d_$EO+p4! z)p^?X>F4=%?D_;US#09KEsIGpm>+U(fRx~ZTvDX6v* z$D5{=T4FsaQI$!P@q>yb%GYc1%YJ=*Di4PKI`#3n>oToB%l1&$PlQDB2^$#kb;cv6 z|KICf0|YXDFa!?y_P(9B$x0eCs1yDF!r#Lfrk}eaXch=Lkz7=OviR0T6p$Eh{5Y+)QlEsn*KPUy-=7BB7BcCQdHFiGb+*aPacSZ8I?%`6d998&1Ynr2%aGo z0+lpc&0!hA#gNfQ7G#@qv;I6+r!5Tq!Rxt|_&NM^CQp973{HBPlJ!Fl$AU+5Ez_9C z;h#Wx_i&QvpCWZ#0v6TlqyJr;MMo_fSU&UVfog*k9%XF*ZeW>P#Jm0K$f64mEP|Vb}ltAJ|fHFA=Xje)jXXz*?&@ z$&jspkoQ8`AiWNkA$K6@r%t_w47c=(5LY@|05lzEm-LHT=DG0@oFR4Q*v+c*@m6@{ z<9@;9xmRg8_3<*0cR+VvJYa>ZuP&+H7^16Q_ZUUJ$3mj(5U))d6#r6j{TI^q^q&F4 z`R~9I4h#R!e1QK)=Fbe7t`|ZqqVJ@#YYV;d=dL2q{%7F! zeu){>0B>FB*R_?Zmia3B?4M%|%Lr|^t~Ke_2v|LJ!E|dk4gmC6#3Cs%mo2 z9*-yXu6T9t%emK*p{wE39&0PQ>@*w8L3mJdlzKdme|-gp=~{Vi>u0s}D(9`f2`&f1 f`hbGryMry=SSKS|lYRJ_US&SX_#Br5GGIdop;hi} literal 0 HcmV?d00001 diff --git a/phishing-filter.txt.gz b/phishing-filter.txt.gz new file mode 100644 index 0000000000000000000000000000000000000000..794f0277650e1d15f26bdbe3acf3f570a12be0ba GIT binary patch literal 5690 zcmV-A7RBiwiwFP!000021D#r1kE}X&e(ztgN4Y4G0?qw$q*0)!tG~BBfADk>d{%%_N zf5=hXCZXB#_u%n7X`f3ub`f3Ij;48%_m@V(e<6-gf>~nx zq(#mzp%(5fPUBC1u-TaI$_(;Yw@kFl03>wJiam#%G@~P_jbpyOdDFkrqNHd&p3-w zNyUg$Mu(kgIvwU&ka&A$ctHe#hLH@4zb5Ha59TMKoe1Tm{g9co3pV>kdDt(r{&=M) z*|0H~ScGJH3LQ>1Y#Y#=ngyM#(hw_{w0A8rZb~AY-|a{*VKWMWS6uYq1!bZO$uPW; zjyECxwffRR<_-g$XhzeSmULPP=p?A>ILYE9&O$mppWv9B8enucl2utY2qPqO!7?nlxOJY$))i*@1(Om#oX$?s?ab^Bbx-uW+aUQvk z!n0AdxO-~%X?VHdN8u+)@-qoOLZ*{jOh^>k{S45Lu(gvNgjJIbI9!z>5&v%3VjjC_ zW{(~=!IcG^(=WnsaY{yHHhA=6IvyY{@XYA8@h4R}RO1`X@+hv>F-qh@g(A8yyRPet zIT?p#BA2{*+Dno&52;#0b0yM;P=!o%sv9}mN1kM%8YHCg0oEzqVk)R5xEmx_Hn~}a zOmYm`c^ap{Xz++&A*Wn`HybS#SBIrh;mTC&O*-MKG)n8kO`dHxC`ES72%;BMjIb3- z0`APTIBk}rZK!H~{+tP5h4KzBS8j&-sM~TNMYy&XF^V`2y&FZ*n%8M(ZIVItr^!Y# zv5}0#PEJg)WEq{7>edKJz630F@hg#@rgPJp({zHwV|x`kGsH;GKAF);bx0@;+!mn) zZz2Pip-qvU13|0{B4lz3(INj+&}5tNm9711gJDF;9NmIcTV^OzMd?@8DY>lDGNJ~9 zWcyg2xbFI3Fz#Y(kkTY$^(WSG6cU9POQ&$8HqH+UW$<^!QGf@ePXm1{ahhalo)vi+ z^02R|z&T?IzeG-~Vu+~YYIH_!_?P3<1ew15J~!3%NWuZt|80E2*8 z9Kol6Bie1miW#--U@fNLS|T8!85@5ybY>gB`l^(M?jDEZgxji2)BNMMBdTAZ3gIrJ z0EFQu(fs=mBre?S_Qtd&aj_Lmh60)d$~bZo1EcBZf$}_nlEs|2XHa>x!J{~oz-~U# zd}#7JCLg!!42T&!b{pd~_I<)tjqznJk$WejmjYz!yS9E6@b;MVc*cu*9`5} zGAQ)b^b-=}XI*^|Ub+(FXvQ?liy7b=(rm?yJfSYIc%#}iJ&K2qWRW2Bj>Z;?Sda-m zjX5_7HJz}EBur3a+JMYz*cB{+)xyD-8A+@a7o(mNGHy^7b#YV^sLmVXvmNBsN)qG* zKY{b&f^XO~@W?lM0khN8CuX<>*`N4^w~30PsLH4~8LVMUb9!q+nC1=0Lcx)G z{5Q7Zslu(wW84L6UPVN-UYcMzFVQo6C-@6Xno~0N$^?uF=?Ikt2yyRZ%{U>QLFWdD zo&-f!pAzK-1+W$yiomsBs)t`&99&p)QP(vDA>}9<0vt7Y7@nQx5ZB&49xiNvU~tz7 zO*x2aED0LMO;DL10kRGP!;7`MR(d|6-YHH-q|-v**14a!U3 z_>jA_rwXcuxd=00fi%azGKk~o1g_QCy9gKpiq>yxy2`RjYh~ozQZ|)YbqqCiSN*-m z?>#47Va#ipmi5^ou99E32hh+iM5`J#{%87V#lt9gFCY`=W(x8;IvKI;;x^zm)(Sd7 zl2ND%8|-U41%>!N=Q2;J!nIGktd_Xjvp`?p9#s_`6 zg|l#ly>A_%MBgSc7$_J*T&Dpq9RtK-w>ZVNq=tfo{0eJ6MUckXDH$Uf=$4}?ZxQg} z{qcCNVy``Y*O80bO4WAh6G~^KB=B*s8NjbB&hpcIz6}kw4mU~8d3vMy%;(WS$M=D~ z?=X|=P*Gl+D?4o)40^@4^6opW1Kl#ef#IVjPQSqRm1PfmApN6BPNecon%W}sP5Wu= zfpRW-MS4Z?>^j)5DJ$6aeH2wdHt+!x&ibt051O-ZhX)6!XCY1qp?Ohm@u%&9ez{f zr!)7e6@zcjul;!y2C9QnSu=g zA4b-s2$V(C?Rwi0q(=Ja7sBrIabhi9;5-_RkMW`vyR3Eiv-4_;h)3V1d^lT|1iosK zwbj}&sDYQ+i}YR19zuX!%DT|Q<<}6j*BcP%+9vru*j7PrK%=9!a7=#kmSvSig~+5}Sz2dx6qjh;;+Vx%$$5R^t!b44d?cde zKqs`8QAE=`j?*M3Q57F~lbG|2vm&pHI75?Ary|Qq!9|7%a-@qRFQkh(lcJ(kCebI9 zksw8ZSJZ@+{5-D|Qq*Zez?Eecgs4hZQ&QzI%~=*5c~g=VysqO+W_1>o6<%NX(i*3t zBoVN{fj7gdc$FlWC&@BWR5eYrG7%(U1*!AXyhTKEP6R7rO0q~oYpl+BRfwEcamLTQ zRYG`5i=5Y3d0EgphT!OKM9T7lXD42mCqeHl^Fn5fvpOZEq%mYFlA0tZJ(Nro!uQ!F zCz*_Sl?llsDeD|#Rhgc6WzJ+;WLeH5bVx--(YNsuUQ*Q&XD4~9C&@#OshPrQ=xO1xw9Lwwkf@ZaE2WfIu{^~^UBxg&8H)(ML-1T)C6SON;!sA#+1Fv7 zR77PR)oGr=vNVnuAW5E6$^?(AGjHurE3me*%#sS?dim=r@%qaPcH$*vnM2~7k`$UC zwBSjW!08Z7DHSJM&^#hAD=+FAJ{eV5S6Tx9K?zaHNqOXD5e($xCPGGtIfeP)ZDj@L zPgyOZP&fh0WtPJ?q7=o=5$HPn3K6=|JI!9`Ax*W;wDDN-pq1lYRv$~*C938Q&Z z!M~6v%e2Y`ICCU5M1joXGcS=cM+D^&%gTyTk;<|p2n}B5QF>aNjC}HpYKHXV69|Eu z#|&XyL4f)kZ?a6FS4=>`n3oxqg+$QT-gH^PiZic-s}Tqqiwv~{g#tr3f6p!S2td@$Vg(!fy zv>Ya;{W0|UkYMbF+g(Vt?F~Y;9hz&Q(1c7^64ZHeQq?%284&EaK%jnoyP^9J?ZtrO zE}fi0w7u57+0daY42HWu*S8+&p^35wrCOq`P{4^~Z5sSug(bG_(2*b4<;R@pSThdS z^~kYdz0|V-P;0K&&d%egr5;`HyT5Oqo6zv|V!W?}uXMmtkX}cf+gX^yKcboVh8>>Z z{Pyuz3L0Lo4)y%*u^m}@{Oo=$%f16<7wbg-m5H)#!y!F)%$5Ox&l6VS&yakt8#HL` zc`&C3Tm6db6N~on-nXNWD465lr6#{iO@D`aBnkF9~(kU@@qDAYVF^~v1ZAxtF7;dq~n zZF;<~Zt01xQ8SPCb3NPre%@YkKB%-8Zvx+t?3cDxdc8!yhm>4LUt0YW@zvpD@a{J+ z)2|zfFH&BWzaSMr55FLle%tFa$@niyjNXqexEJh;kl*lp$m$cGL-2q1)K2-ytGPs< z1y_0a_}*GXYZlWIg~mC&f@kz+30tACb_p*%Jv4c6E3|pm=b~^hcQ^s}pPcvx+2^e7 zy({%KWcMxR4+<{&esarsWLmp(-}$|UCVxb6;?n)ptDi%dnk>hZx(ECk7k(>z@2?e) zBmAK1RzPH@BP%=SzN83ki##vB?niIAW8ad{Q^+UQawydAF<|80V4?cjn~rd@KH!M; zyNZM^Z^%F*d|q_pPk;RWz8~=2F*PpO3)L}S?Br*^_Vzx1xp6%N%D#SXa-@F!jO8aa zO}_3HI@LPUqUKlYKBrTiW8PBtO-OC}`*R$&8zcOFw8BG1E4CFjXH1X9iVnHKPUD){ z{o&;O%?%t@LGhl}!+MC|+;l|+M3|Z&1#UlD%Z=1;P3}UC0%&Av#nc+DO%MaIotRMs zd&0l?_-p*-;ci)f{GVfDa8G8h(wS|qWD2(fGYH7qW<4nz-X<2@L9`Cj1b#aI+{7P@ z@a0q>rq*wfUgwZ4W_sIZ@&zwW&TNAX))%~vbullJ*F~|`?@a*}Y-a|OrKs=wWXN;= zA#MFvZAJ(FD}~PoG?N|HB)HFxY`%(r8twG_&1lcM??!#v|1#=^+c%?g&p$>{UN)DR z?%Y}SRQpXI7%ljSHLvTNiLw_>W)){?ai|k(K_X81gEth==Jkn^|3GPflG5pP67{il z=Pt?y>-V45ef@dh4&4r&I+Tm~w5N(o z0c`1yvfO!GHJ7c*ZI|0L&5hq?r?))xakobA>f_$U$J^$AcSMvA&=mqwHxR|W3?4iT z9a*BRJiX8|8z*VJ`RhXmKG}K>*j2^Y~Fjr`GM7tr7%csC^P8=2c7>RmrIAy!^ z3F%>{yYL(MLh-9SzWlME`|D(Qw3OuxXePHR&Opg*jg;EZn9ue!$9Xi7Z5Y=e5MLdO84+9f8=TAhV`uylq zUmqK^f8L*LI}rY#{~?{5wr^hEFT?FJ|2167506}R(>lxr5Z{PG_1^Z@e{Sb@`FA#s z&ZkrF1M%;%`=IQQ&3$Eg-;uKQjiLo7CU@6Y}UkZaeLNw9|Tm^tb+#1oIbe*k2U?BjiuA zIF9Q$OVTv1^Kw!{AyS5ZyGzI7Z+kp~mHZL>Q;+!kny!mOt#WDl|p> zonM=4RKD+H18~CAZ{*MVeeHu^gc0t#yf-GJdj1#_6oCt^F7I(gXimP4XHrHf{W@OV z9hs(f`Lpe)9l2&7{b`j{A>1iuCKathr#{NYp3$Q$G8syQZ6t5|M-3{sFUJl g4-lWB9N%3vtItDqOFj>gZkzdk0ifc0`gt$_0P}?V*8l(j literal 0 HcmV?d00001