diff --git a/.nojekyll b/.nojekyll
new file mode 100644
index 000000000..e69de29bb
diff --git a/phishing-filter-ag.txt b/phishing-filter-ag.txt
new file mode 100644
index 000000000..510d0b249
--- /dev/null
+++ b/phishing-filter-ag.txt
@@ -0,0 +1,469 @@
+! Title: Phishing URL Blocklist (AdGuard)
+! Updated: 2024-12-15T00:23:11Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||23cssahil.github.io$all
+||3reshma.github.io$all
+||67533177.ishg.za.com$all
+||67780581.ishg.za.com$all
+||72386989.ishg.za.com$all
+||a2i9s4y.space$all
+||a3.ikansalasq.com$all
+||acederma.com$all
+||ahhhh.pe.kr$all
+||airbnb.sync114.com$all
+||aisths.cc$all
+||akanksha3012.github.io$all
+||aks34.github.io$all
+||alessandrodiana.it$all
+||amamz-product.click$all
+||amazonnu.co$all
+||amreeth.github.io$all
+||anjalijha167.github.io$all
+||apricotmelly.wixstudio.com$all
+||apricotmelly.wixstudio.io$all
+||arpitgoel889.github.io$all
+||art-tour.net$all
+||artofbaseball.net$all
+||ashishmaurya73.github.io$all
+||askewi3010.wixsite.com$all
+||asupanvviptelegram.my.id$all
+||atobi432.wixsite.com$all
+||attcom-103887.weebly.com$all
+||attisat.gr$all
+||attvalidatekindly.weebly.com$all
+||attyahoomai.wixsite.com$all
+||autoscurt24.de$all
+||bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz$all
+||bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link$all
+||bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link$all
+||bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link$all
+||bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link$all
+||ballefabrouyau-9112.vercel.app$all
+||bantuan-tunai-mystrx.jobs8.my.id$all
+||baradua.it$all
+||barberalonzo29.wixsite.com$all
+||basil0303.github.io$all
+||bernardamos422.wixsite.com$all
+||bettinamarks.com$all
+||bharathi1809.github.io$all
+||blue-tick-help.vercel.app$all
+||bntuan-dana4-resmii.danytx.web.id$all
+||boapremium-001-site1.ptempurl.com$all
+||bojanawauceu-3394.vercel.app$all
+||bolipost.cc$all
+||bomomvpfo.club$all
+||bountyhunterpc.github.io$all
+||bpqxqtuig.club$all
+||brbrgsnyqwer.wixsite.com$all
+||brwj.cn$all
+||bt.daftpage.com$all
+||busanopen.org/office/msgvoice/source/login.php$all
+||busanopen.org/office/msgvoice/source/wrongpass.php$all
+||cache.netflix.com.user12.sanasta.us.kg$all
+||carolesheridan4.wixsite.com$all
+||chance-to-availbale-free-badge.vercel.app$all
+||chiragrajoria.github.io$all
+||cid-phisher.github.io$all
+||clariveh.baby$all
+||clifforddaniells.wixsite.com$all
+||coinbasefaqdesk.com$all
+||coiniiobisaecoins.azurewebsites.net$all
+||confirmationhelpmeta.io.vn$all
+||cpisafety.che.buet.ac.bd$all
+||cricketbettingpro.com$all
+||cubixpro.com$all
+||currentlyatt810.weebly.com$all
+||dalipthukral0.wixsite.com$all
+||danaindonesia.bantuan-resmi.top$all
+||deepxzkdn.deadth.sbs$all
+||descounsell.wixsite.com$all
+||detlxc.master78lite.com$all
+||devshubhamjadav.github.io$all
+||dfxzsdf.wixsite.com$all
+||dhanushr24.github.io$all
+||dianecadei8.wixsite.com$all
+||did57sauveton.wixsite.com$all
+||dl.mod30t.ir$all
+||dmgeuntv.icu$all
+||doloribus-voluptat-space.wpkubio.com$all
+||donrichie781.wixsite.com$all
+||donttolinii.wixsite.com$all
+||dtn-3c.vercel.app$all
+||duvetrexuprau.vercel.app$all
+||ebayqi.shop$all
+||eirxkrdgtk.duckdns.org$all
+||energizahn.dicosur.net$all
+||eqrco.de/a/t3magy$all
+||esumbunk.cc$all
+||esunbonk.cc$all
+||everestmotors.com.np$all
+||evqjteoscz.link$all
+||exoduswallet.cn.com$all
+||facebook-tw-web.azurewebsites.net$all
+||facebookverifycenter.com.de$all
+||faceit.sunbim.pro$all
+||faizankhan0408.github.io$all
+||fauexpfv.icu$all
+||feprk.sbs$all
+||flow.page/mlh21880/$all
+||formsly-form.web.app$all
+||free-5573726.webadorsite.com$all
+||fsdfjeifls.click$all
+||galiciacgu.com.ar$all
+||gardakosto.wixsite.com$all
+||geemiioilogin.gitbook.io$all
+||guptanikshay.github.io$all
+||gyxgxuu.wixsite.com$all
+||h5.z3v2.com$all
+||hajjsj.top$all
+||hamza-nawaz.github.io$all
+||havkeye14.wixsite.com$all
+||hfhfyejkwsu.wixsite.com$all
+||hjdnshu.wixsite.com$all
+||hollykim.com$all
+||homemailweb-608850.weeblysite.com$all
+||htitofjpve.club$all
+||huynguyen2k.github.io$all
+||icontainrbbr.s3.us-west-004.backblazeb2.com$all
+||identifier-vous456.wixsite.com$all
+||ijhsk.github.io$all
+||im-creator.com/free/btin/bt/$all
+||imperia-trading.online$all
+||informed.deliverydn.top$all
+||informed.deliveryfp.top$all
+||informed.deliveryft.top$all
+||informed.deliveryhrw.top$all
+||informed.deliverywbk.top$all
+||inshatrading.com$all
+||instagram.ossamaelidrissi.com$all
+||inusualinteriorismo.com$all
+||is.gd/xqplkv$all
+||itaufatura.github.io$all
+||itpronetwork.net$all
+||itsmdshahin.github.io$all
+||ixbuxedexw.info$all
+||jeittagrennami-1729.vercel.app$all
+||jimenezbill.wixsite.com$all
+||jordanmargaret.wixsite.com$all
+||jpmc.shieldssecuritybags.com$all
+||jrcce.shop$all
+||kdotts1.wixsite.com$all
+||keepo.io/login/$all
+||keepo.io/serverguide53/$all
+||kemsnwshdurut.weebly.com$all
+||large-kitchen-substantial.on-fleek.app$all
+||leipeleufreyo.vercel.app$all
+||lemedab246.wixsite.com$all
+||lightseagreen-jaguar-612987.hostingersite.com$all
+||ljsherrm.wixsite.com$all
+||lnadm.icu$all
+||locateid.com.tr$all
+||loginmailaccount1.wixsite.com$all
+||lsddndp-up.top$all
+||lve1131.wixstudio.com$all
+||lve1131.wixstudio.io$all
+||mail.8724319-coinbase.com$all
+||mail.health-status.fb-business.com$all
+||maryp6608.wixsite.com$all
+||mauttauhuttiloi.vercel.app$all
+||messagevocale888.wixsite.com$all
+||meta-mask-io.serv00.net$all
+||metaiimaaskk-login.gitbook.io$all
+||metamsik.com$all
+||miss.votingforstudents.com$all
+||mkramer03.wixsite.com$all
+||mmoom4.wixsite.com$all
+||mobileservice34.wixsite.com$all
+||monetization-violation-page.github.io$all
+||monirshouvo.github.io$all
+||morinierevolailles.wixsite.com$all
+||mtalha21.github.io$all
+||muhammedasfacknk.github.io$all
+||munnoi.github.io$all
+||myurls.bio$all
+||myvalue365.com$all
+||navicrettobro-6686.vercel.app$all
+||nbbroker.az$all
+||nesgrjahwt.guru$all
+||netfeliz.netlify.app$all
+||nfwqayckqr.ltd$all
+||notify-user-deviations.vercel.app$all
+||oasisministries.com$all
+||omar7rb1.github.io$all
+||or-obaidullah.github.io$all
+||orangveri.wixsite.com$all
+||p.usertrackehe.top$all
+||p.usertrackkum.top$all
+||p.usertrackrry.top$all
+||p.usertrackyfk.top$all
+||pajem76668.wixsite.com$all
+||pancake-frontend-dejmy38ut-chefilip.vercel.app$all
+||perso8764002.wixsite.com$all
+||phenomenal-praline-ff95b6.netlify.app$all
+||pikay13.github.io$all
+||podrimapso.wixsite.com$all
+||portal-trezr-cdn.github.io$all
+||ppruphmllx.blue$all
+||premiumember.ct.ws$all
+||preuffeddoupraki-2297.vercel.app$all
+||pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev$all
+||pub-019ceedaa0894587aa4255109af6c416.r2.dev$all
+||pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev$all
+||pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev$all
+||pub-135a4055f8454025aa2f06845da4f8d8.r2.dev$all
+||pub-140cf903de964a479f3b465e010ddb3b.r2.dev$all
+||pub-14b5071e5a78406a9a92a00be9141089.r2.dev$all
+||pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev$all
+||pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev$all
+||pub-244225b6dd0e404291c857fafd588b4f.r2.dev$all
+||pub-28e193ca593a467bbd1e0232a73a5680.r2.dev$all
+||pub-2a64f782845943beae62e9f09c473700.r2.dev$all
+||pub-34ae76b320c445628f3e2bca4a192394.r2.dev$all
+||pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev$all
+||pub-3784361eb0b640e797495d46b35ce030.r2.dev$all
+||pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev$all
+||pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev$all
+||pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev$all
+||pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev$all
+||pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev$all
+||pub-55e3e997548a46879ee19f4d494309d6.r2.dev$all
+||pub-619d0209611d4e8fb34f21726fd3b133.r2.dev$all
+||pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev$all
+||pub-668f78270889467e8af696261336536f.r2.dev$all
+||pub-69356b68f37442e0a24ceb7981f0841b.r2.dev$all
+||pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev$all
+||pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev$all
+||pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev$all
+||pub-73ee129d9ec943f785408564adcaf985.r2.dev$all
+||pub-7695c0b23019424cb779394f7a362ba8.r2.dev$all
+||pub-76bf011f31344f45bf2356e9005ac465.r2.dev$all
+||pub-7a6b99614f4b41658cd677a620b18951.r2.dev$all
+||pub-7be95ce02232456db08522b3d3c99765.r2.dev$all
+||pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev$all
+||pub-80fb550826904a048a5391946ef49a69.r2.dev$all
+||pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev$all
+||pub-83f86cbfe52f42728c26cda54824eb39.r2.dev$all
+||pub-886654e4969e42e988d48d11222c8a57.r2.dev$all
+||pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev$all
+||pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev$all
+||pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev$all
+||pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev$all
+||pub-97673970c1c145eda5e559c4f9c18f61.r2.dev$all
+||pub-9839470418254b29962dec4220c83255.r2.dev$all
+||pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev$all
+||pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev$all
+||pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev$all
+||pub-a017bd9f9dc6498183af41770490c482.r2.dev$all
+||pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev$all
+||pub-aa456431547a4e28948699d7c6a22006.r2.dev$all
+||pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev$all
+||pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev$all
+||pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev$all
+||pub-cb72691642c444eb900a44aa1d8a7107.r2.dev$all
+||pub-ce8fc030252b4632959515dffef1b750.r2.dev$all
+||pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev$all
+||pub-de59803496c8489585895b6917266e7c.r2.dev$all
+||pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev$all
+||pub-ebb47370c13740ef9014f6bba927d946.r2.dev$all
+||pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev$all
+||pub-f7edd89a736e48428172001b0b1906fe.r2.dev$all
+||pub-fc37d2d339714056b7f16368b49ae532.r2.dev$all
+||pub-fd5baa54f2714f068701be4a7563f2de.r2.dev$all
+||pub-fef94e8fd76842a4818865dd78ef618f.r2.dev$all
+||puvomattipro.vercel.app$all
+||qfbspeclmg.bond$all
+||qowii.top$all
+||qr.me-qr.com/tcy5mrt1/$all
+||quiz.vidio.com.user3.hehdin.us.kg$all
+||radhikamd.github.io$all
+||raiyone.cc$all
+||rayatrecruitment.com$all
+||rectifcentrefdeptrescu.weebly.com$all
+||rekruitmenttjwtt.vip-media.web.id$all
+||resolverpad.dev$all
+||reward-webconnect.pages.dev$all
+||roberthood.net$all
+||rtm-att.directly.com$all
+||ruthah9.wixsite.com$all
+||rwhjdb.icu$all
+||s.eu.premiumisp.net$all
+||s.team-a.cam$all
+||s080rjhdn.top$all
+||salmanfarsi01.github.io$all
+||santanderpod.globalizeme-dublin2.co.uk$all
+||sedosexu.wixsite.com$all
+||seller.tksalem.com$all
+||server.2rk3.com$all
+||server.6avj.com$all
+||server.dgm0.com$all
+||server.k6dz.com$all
+||server.pxs7.com$all
+||seunelvis1.github.io$all
+||shanky0.github.io$all
+||sites.google.com/l0gin-microsoftwebonlne.app/r75567/$all
+||sites.google.com/view/345678987655/home/$all
+||sites.google.com/view/btconnectbusiness/btconnect/$all
+||sites.google.com/view/fatherplac/accueil/$all
+||sites.google.com/view/koiuld2dkjcxnjk2s/$all
+||sites.google.com/view/orange-aslkdsald/$all
+||sites.google.com/view/paypal-loginn/$all
+||sjhdoirrsjx.wixsite.com$all
+||smgolamalif.github.io$all
+||smsmmsernorepls.wixsite.com$all
+||snapto.link/closurep-1/$all
+||soumya252000.github.io$all
+||steam.communityartlist.com$all
+||steam.workshopgraphy.com$all
+||steamcommuitty.com$all
+||steamcommunmutly.com$all
+||steamcomunutty.com$all
+||steamconmumity.com$all
+||steeamcommnity.com$all
+||stephen55687.github.io$all
+||stevencrews.com$all
+||submit-dispute-form.github.io$all
+||sultan-raza.github.io$all
+||sumagayathri-999.github.io$all
+||support-verify-page.com$all
+||supports-center-communityhelp.cloud$all
+||svckhc.wixsite.com$all
+||swatteam219.wixsite.com$all
+||taher-mohamed-ahmed-saad.github.io$all
+||taiegrma.gold$all
+||tairgam.chat$all
+||tairgam.fund$all
+||tairgam.show$all
+||tairgam.zone$all
+||talergam.live$all
+||talergam.red$all
+||talergam.shopping$all
+||talergam.today$all
+||tanfupikyx.monster$all
+||tcsktjtl.icu$all
+||technoindiagroup.com$all
+||tecmachine.com.br$all
+||teiagram.group$all
+||teiagram.red$all
+||teiagram.zone$all
+||teiegrma.cab$all
+||teiegrma.design$all
+||teiegrrm.blue$all
+||teiegrrm.today$all
+||telargam.city$all
+||telargam.cloud$all
+||telargam.college$all
+||telargam.tax$all
+||telegram-safe.cc$all
+||telegrrm.monster$all
+||telegrrm.xin$all
+||telemlp-omsz.icu$all
+||teleqrma.show$all
+||telezelm-lbhg.icu$all
+||tellmeliu.github.io$all
+||terfanfranck.wixsite.com$all
+||tienda-linea7.com$all
+||tienda-linea9.com$all
+||tiktok.fhinek.com$all
+||tiktokkjshop.com$all
+||tiktokmax3.vip$all
+||troubadeihati-9272.vercel.app$all
+||tysmbdpz.icu$all
+||u-pphholfd.godaddysites.com$all
+||ultrafima.com$all
+||uphold-loges.github.io$all
+||urbexine.shop$all
+||urmilagome.github.io$all
+||user1.hehdin.us.kg$all
+||username895.wixsite.com$all
+||usps.com-parceliutxb.vip$all
+||usps.com-parceliutxc.vip$all
+||usps.com-parceliutxe.vip$all
+||usps.com-parceliutxg.vip$all
+||usps.com-parceljzuwb.vip$all
+||usps.com-parceljzuwc.vip$all
+||usps.com-trackaaw.top$all
+||usps.com-trackaba.top$all
+||usps.com-trackakt.top$all
+||usps.com-trackartjlo.top$all
+||usps.com-trackbpg.top$all
+||usps.com-trackdex.top$all
+||usps.com-trackeaj.top$all
+||usps.com-trackemh.top$all
+||usps.com-trackevj.top$all
+||usps.com-trackfnl.top$all
+||usps.com-trackghi.top$all
+||usps.com-trackgix.top$all
+||usps.com-trackgna.top$all
+||usps.com-trackhal.top$all
+||usps.com-trackicg.top$all
+||usps.com-trackidp.top$all
+||usps.com-trackiiz.top$all
+||usps.com-tracking-helpnko.cc$all
+||usps.com-tracking-helptom.cc$all
+||usps.com-tracking-helptot.cc$all
+||usps.com-tracking-helptwo.cc$all
+||usps.com-tracking-helptzo.cc$all
+||usps.com-trackipxdnh.top$all
+||usps.com-trackius.top$all
+||usps.com-trackjgc.top$all
+||usps.com-trackjkh.top$all
+||usps.com-trackkys.top$all
+||usps.com-trackloi.top$all
+||usps.com-tracklpe.top$all
+||usps.com-tracklvr.top$all
+||usps.com-trackmjx.top$all
+||usps.com-trackmli.top$all
+||usps.com-trackmvd.top$all
+||usps.com-tracknsr.top$all
+||usps.com-trackodf.top$all
+||usps.com-trackogx.top$all
+||usps.com-trackonp.top$all
+||usps.com-trackpgl.top$all
+||usps.com-trackpoq.top$all
+||usps.com-trackpsx.top$all
+||usps.com-trackpwg.top$all
+||usps.com-trackree.top$all
+||usps.com-tracksbw.top$all
+||usps.com-tracktdz.top$all
+||usps.com-tracktmb.top$all
+||usps.com-tracktus.top$all
+||usps.com-tracktyi.top$all
+||usps.com-trackuir.top$all
+||usps.com-trackuve.top$all
+||usps.com-trackvbw.top$all
+||usps.com-trackvkt.top$all
+||usps.com-trackvoi.top$all
+||usps.com-trackwil.top$all
+||usps.com-trackxgj.top$all
+||usps.com-trackxkt.top$all
+||usps.com-trackxrz.top$all
+||usps.com-trackxxh.top$all
+||usps.com-trackzyy.top$all
+||uspsservicetrack.blogspot.com.cy$all
+||veeradalaw.com$all
+||vmgmjfbz.icu$all
+||wakakehuteu-9247.vercel.app$all
+||walletcazonnect.gitbook.io$all
+||wap.brwj.cn$all
+||webmailservice08.wixsite.com$all
+||webogram.org/a/$all
+||wellyngtonkuhn.github.io$all
+||whare.100webspace.net$all
+||wwiiskdkdnffnjuca.weebly.com$all
+||www-degelyehuda-org-il.filesusr.com$all
+||wwwteiegramwor.xyz$all
+||xavier6709.github.io$all
+||xn--d1aqfkf.xn--p1ai$all
+||xox-exe.github.io$all
+||yairix.github.io$all
+||yarakobanrhg.wpenginepowered.com$all
+||zattajakoixa-8559.vercel.app$all
+||zerotelegram.pl$all
+||zetriyauffivou-1144.vercel.app$all
+||zkybgfddvl.shop$all
+||zpr.io/drpj3ayxdsc4$all
+||zures.com.br$all
+||zyexx.com/kcf05074c7d8ec461318b173a03xd5882406.html$all
diff --git a/phishing-filter-ag.txt.br b/phishing-filter-ag.txt.br
new file mode 100644
index 000000000..135fa85dd
Binary files /dev/null and b/phishing-filter-ag.txt.br differ
diff --git a/phishing-filter-ag.txt.gz b/phishing-filter-ag.txt.gz
new file mode 100644
index 000000000..1494179d0
Binary files /dev/null and b/phishing-filter-ag.txt.gz differ
diff --git a/phishing-filter-agh.txt b/phishing-filter-agh.txt
new file mode 100644
index 000000000..68893ac44
--- /dev/null
+++ b/phishing-filter-agh.txt
@@ -0,0 +1,449 @@
+! Title: Phishing URL Blocklist (AdGuard Home)
+! Updated: 2024-12-15T00:23:11Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||23cssahil.github.io^
+||3reshma.github.io^
+||67533177.ishg.za.com^
+||67780581.ishg.za.com^
+||72386989.ishg.za.com^
+||a2i9s4y.space^
+||a3.ikansalasq.com^
+||acederma.com^
+||ahhhh.pe.kr^
+||airbnb.sync114.com^
+||aisths.cc^
+||akanksha3012.github.io^
+||aks34.github.io^
+||alessandrodiana.it^
+||amamz-product.click^
+||amazonnu.co^
+||amreeth.github.io^
+||anjalijha167.github.io^
+||apricotmelly.wixstudio.com^
+||apricotmelly.wixstudio.io^
+||arpitgoel889.github.io^
+||art-tour.net^
+||artofbaseball.net^
+||ashishmaurya73.github.io^
+||askewi3010.wixsite.com^
+||asupanvviptelegram.my.id^
+||atobi432.wixsite.com^
+||attcom-103887.weebly.com^
+||attisat.gr^
+||attvalidatekindly.weebly.com^
+||attyahoomai.wixsite.com^
+||autoscurt24.de^
+||bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz^
+||bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link^
+||bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link^
+||bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link^
+||bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link^
+||ballefabrouyau-9112.vercel.app^
+||bantuan-tunai-mystrx.jobs8.my.id^
+||baradua.it^
+||barberalonzo29.wixsite.com^
+||basil0303.github.io^
+||bernardamos422.wixsite.com^
+||bettinamarks.com^
+||bharathi1809.github.io^
+||blue-tick-help.vercel.app^
+||bntuan-dana4-resmii.danytx.web.id^
+||boapremium-001-site1.ptempurl.com^
+||bojanawauceu-3394.vercel.app^
+||bolipost.cc^
+||bomomvpfo.club^
+||bountyhunterpc.github.io^
+||bpqxqtuig.club^
+||brbrgsnyqwer.wixsite.com^
+||brwj.cn^
+||bt.daftpage.com^
+||cache.netflix.com.user12.sanasta.us.kg^
+||carolesheridan4.wixsite.com^
+||chance-to-availbale-free-badge.vercel.app^
+||chiragrajoria.github.io^
+||cid-phisher.github.io^
+||clariveh.baby^
+||clifforddaniells.wixsite.com^
+||coinbasefaqdesk.com^
+||coiniiobisaecoins.azurewebsites.net^
+||confirmationhelpmeta.io.vn^
+||cpisafety.che.buet.ac.bd^
+||cricketbettingpro.com^
+||cubixpro.com^
+||currentlyatt810.weebly.com^
+||dalipthukral0.wixsite.com^
+||danaindonesia.bantuan-resmi.top^
+||deepxzkdn.deadth.sbs^
+||descounsell.wixsite.com^
+||detlxc.master78lite.com^
+||devshubhamjadav.github.io^
+||dfxzsdf.wixsite.com^
+||dhanushr24.github.io^
+||dianecadei8.wixsite.com^
+||did57sauveton.wixsite.com^
+||dl.mod30t.ir^
+||dmgeuntv.icu^
+||doloribus-voluptat-space.wpkubio.com^
+||donrichie781.wixsite.com^
+||donttolinii.wixsite.com^
+||dtn-3c.vercel.app^
+||duvetrexuprau.vercel.app^
+||ebayqi.shop^
+||eirxkrdgtk.duckdns.org^
+||energizahn.dicosur.net^
+||esumbunk.cc^
+||esunbonk.cc^
+||everestmotors.com.np^
+||evqjteoscz.link^
+||exoduswallet.cn.com^
+||facebook-tw-web.azurewebsites.net^
+||facebookverifycenter.com.de^
+||faceit.sunbim.pro^
+||faizankhan0408.github.io^
+||fauexpfv.icu^
+||feprk.sbs^
+||formsly-form.web.app^
+||free-5573726.webadorsite.com^
+||fsdfjeifls.click^
+||galiciacgu.com.ar^
+||gardakosto.wixsite.com^
+||geemiioilogin.gitbook.io^
+||guptanikshay.github.io^
+||gyxgxuu.wixsite.com^
+||h5.z3v2.com^
+||hajjsj.top^
+||hamza-nawaz.github.io^
+||havkeye14.wixsite.com^
+||hfhfyejkwsu.wixsite.com^
+||hjdnshu.wixsite.com^
+||hollykim.com^
+||homemailweb-608850.weeblysite.com^
+||htitofjpve.club^
+||huynguyen2k.github.io^
+||icontainrbbr.s3.us-west-004.backblazeb2.com^
+||identifier-vous456.wixsite.com^
+||ijhsk.github.io^
+||imperia-trading.online^
+||informed.deliverydn.top^
+||informed.deliveryfp.top^
+||informed.deliveryft.top^
+||informed.deliveryhrw.top^
+||informed.deliverywbk.top^
+||inshatrading.com^
+||instagram.ossamaelidrissi.com^
+||inusualinteriorismo.com^
+||itaufatura.github.io^
+||itpronetwork.net^
+||itsmdshahin.github.io^
+||ixbuxedexw.info^
+||jeittagrennami-1729.vercel.app^
+||jimenezbill.wixsite.com^
+||jordanmargaret.wixsite.com^
+||jpmc.shieldssecuritybags.com^
+||jrcce.shop^
+||kdotts1.wixsite.com^
+||kemsnwshdurut.weebly.com^
+||large-kitchen-substantial.on-fleek.app^
+||leipeleufreyo.vercel.app^
+||lemedab246.wixsite.com^
+||lightseagreen-jaguar-612987.hostingersite.com^
+||ljsherrm.wixsite.com^
+||lnadm.icu^
+||locateid.com.tr^
+||loginmailaccount1.wixsite.com^
+||lsddndp-up.top^
+||lve1131.wixstudio.com^
+||lve1131.wixstudio.io^
+||mail.8724319-coinbase.com^
+||mail.health-status.fb-business.com^
+||maryp6608.wixsite.com^
+||mauttauhuttiloi.vercel.app^
+||messagevocale888.wixsite.com^
+||meta-mask-io.serv00.net^
+||metaiimaaskk-login.gitbook.io^
+||metamsik.com^
+||miss.votingforstudents.com^
+||mkramer03.wixsite.com^
+||mmoom4.wixsite.com^
+||mobileservice34.wixsite.com^
+||monetization-violation-page.github.io^
+||monirshouvo.github.io^
+||morinierevolailles.wixsite.com^
+||mtalha21.github.io^
+||muhammedasfacknk.github.io^
+||munnoi.github.io^
+||myurls.bio^
+||myvalue365.com^
+||navicrettobro-6686.vercel.app^
+||nbbroker.az^
+||nesgrjahwt.guru^
+||netfeliz.netlify.app^
+||nfwqayckqr.ltd^
+||notify-user-deviations.vercel.app^
+||oasisministries.com^
+||omar7rb1.github.io^
+||or-obaidullah.github.io^
+||orangveri.wixsite.com^
+||p.usertrackehe.top^
+||p.usertrackkum.top^
+||p.usertrackrry.top^
+||p.usertrackyfk.top^
+||pajem76668.wixsite.com^
+||pancake-frontend-dejmy38ut-chefilip.vercel.app^
+||perso8764002.wixsite.com^
+||phenomenal-praline-ff95b6.netlify.app^
+||pikay13.github.io^
+||podrimapso.wixsite.com^
+||portal-trezr-cdn.github.io^
+||ppruphmllx.blue^
+||premiumember.ct.ws^
+||preuffeddoupraki-2297.vercel.app^
+||pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev^
+||pub-019ceedaa0894587aa4255109af6c416.r2.dev^
+||pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev^
+||pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev^
+||pub-135a4055f8454025aa2f06845da4f8d8.r2.dev^
+||pub-140cf903de964a479f3b465e010ddb3b.r2.dev^
+||pub-14b5071e5a78406a9a92a00be9141089.r2.dev^
+||pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev^
+||pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev^
+||pub-244225b6dd0e404291c857fafd588b4f.r2.dev^
+||pub-28e193ca593a467bbd1e0232a73a5680.r2.dev^
+||pub-2a64f782845943beae62e9f09c473700.r2.dev^
+||pub-34ae76b320c445628f3e2bca4a192394.r2.dev^
+||pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev^
+||pub-3784361eb0b640e797495d46b35ce030.r2.dev^
+||pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev^
+||pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev^
+||pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev^
+||pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev^
+||pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev^
+||pub-55e3e997548a46879ee19f4d494309d6.r2.dev^
+||pub-619d0209611d4e8fb34f21726fd3b133.r2.dev^
+||pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev^
+||pub-668f78270889467e8af696261336536f.r2.dev^
+||pub-69356b68f37442e0a24ceb7981f0841b.r2.dev^
+||pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev^
+||pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev^
+||pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev^
+||pub-73ee129d9ec943f785408564adcaf985.r2.dev^
+||pub-7695c0b23019424cb779394f7a362ba8.r2.dev^
+||pub-76bf011f31344f45bf2356e9005ac465.r2.dev^
+||pub-7a6b99614f4b41658cd677a620b18951.r2.dev^
+||pub-7be95ce02232456db08522b3d3c99765.r2.dev^
+||pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev^
+||pub-80fb550826904a048a5391946ef49a69.r2.dev^
+||pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev^
+||pub-83f86cbfe52f42728c26cda54824eb39.r2.dev^
+||pub-886654e4969e42e988d48d11222c8a57.r2.dev^
+||pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev^
+||pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev^
+||pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev^
+||pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev^
+||pub-97673970c1c145eda5e559c4f9c18f61.r2.dev^
+||pub-9839470418254b29962dec4220c83255.r2.dev^
+||pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev^
+||pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev^
+||pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev^
+||pub-a017bd9f9dc6498183af41770490c482.r2.dev^
+||pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev^
+||pub-aa456431547a4e28948699d7c6a22006.r2.dev^
+||pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev^
+||pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev^
+||pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev^
+||pub-cb72691642c444eb900a44aa1d8a7107.r2.dev^
+||pub-ce8fc030252b4632959515dffef1b750.r2.dev^
+||pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev^
+||pub-de59803496c8489585895b6917266e7c.r2.dev^
+||pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev^
+||pub-ebb47370c13740ef9014f6bba927d946.r2.dev^
+||pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev^
+||pub-f7edd89a736e48428172001b0b1906fe.r2.dev^
+||pub-fc37d2d339714056b7f16368b49ae532.r2.dev^
+||pub-fd5baa54f2714f068701be4a7563f2de.r2.dev^
+||pub-fef94e8fd76842a4818865dd78ef618f.r2.dev^
+||puvomattipro.vercel.app^
+||qfbspeclmg.bond^
+||qowii.top^
+||quiz.vidio.com.user3.hehdin.us.kg^
+||radhikamd.github.io^
+||raiyone.cc^
+||rayatrecruitment.com^
+||rectifcentrefdeptrescu.weebly.com^
+||rekruitmenttjwtt.vip-media.web.id^
+||resolverpad.dev^
+||reward-webconnect.pages.dev^
+||roberthood.net^
+||rtm-att.directly.com^
+||ruthah9.wixsite.com^
+||rwhjdb.icu^
+||s.eu.premiumisp.net^
+||s.team-a.cam^
+||s080rjhdn.top^
+||salmanfarsi01.github.io^
+||santanderpod.globalizeme-dublin2.co.uk^
+||sedosexu.wixsite.com^
+||seller.tksalem.com^
+||server.2rk3.com^
+||server.6avj.com^
+||server.dgm0.com^
+||server.k6dz.com^
+||server.pxs7.com^
+||seunelvis1.github.io^
+||shanky0.github.io^
+||sjhdoirrsjx.wixsite.com^
+||smgolamalif.github.io^
+||smsmmsernorepls.wixsite.com^
+||soumya252000.github.io^
+||steam.communityartlist.com^
+||steam.workshopgraphy.com^
+||steamcommuitty.com^
+||steamcommunmutly.com^
+||steamcomunutty.com^
+||steamconmumity.com^
+||steeamcommnity.com^
+||stephen55687.github.io^
+||stevencrews.com^
+||submit-dispute-form.github.io^
+||sultan-raza.github.io^
+||sumagayathri-999.github.io^
+||support-verify-page.com^
+||supports-center-communityhelp.cloud^
+||svckhc.wixsite.com^
+||swatteam219.wixsite.com^
+||taher-mohamed-ahmed-saad.github.io^
+||taiegrma.gold^
+||tairgam.chat^
+||tairgam.fund^
+||tairgam.show^
+||tairgam.zone^
+||talergam.live^
+||talergam.red^
+||talergam.shopping^
+||talergam.today^
+||tanfupikyx.monster^
+||tcsktjtl.icu^
+||technoindiagroup.com^
+||tecmachine.com.br^
+||teiagram.group^
+||teiagram.red^
+||teiagram.zone^
+||teiegrma.cab^
+||teiegrma.design^
+||teiegrrm.blue^
+||teiegrrm.today^
+||telargam.city^
+||telargam.cloud^
+||telargam.college^
+||telargam.tax^
+||telegram-safe.cc^
+||telegrrm.monster^
+||telegrrm.xin^
+||telemlp-omsz.icu^
+||teleqrma.show^
+||telezelm-lbhg.icu^
+||tellmeliu.github.io^
+||terfanfranck.wixsite.com^
+||tienda-linea7.com^
+||tienda-linea9.com^
+||tiktok.fhinek.com^
+||tiktokkjshop.com^
+||tiktokmax3.vip^
+||troubadeihati-9272.vercel.app^
+||tysmbdpz.icu^
+||u-pphholfd.godaddysites.com^
+||ultrafima.com^
+||uphold-loges.github.io^
+||urbexine.shop^
+||urmilagome.github.io^
+||user1.hehdin.us.kg^
+||username895.wixsite.com^
+||usps.com-parceliutxb.vip^
+||usps.com-parceliutxc.vip^
+||usps.com-parceliutxe.vip^
+||usps.com-parceliutxg.vip^
+||usps.com-parceljzuwb.vip^
+||usps.com-parceljzuwc.vip^
+||usps.com-trackaaw.top^
+||usps.com-trackaba.top^
+||usps.com-trackakt.top^
+||usps.com-trackartjlo.top^
+||usps.com-trackbpg.top^
+||usps.com-trackdex.top^
+||usps.com-trackeaj.top^
+||usps.com-trackemh.top^
+||usps.com-trackevj.top^
+||usps.com-trackfnl.top^
+||usps.com-trackghi.top^
+||usps.com-trackgix.top^
+||usps.com-trackgna.top^
+||usps.com-trackhal.top^
+||usps.com-trackicg.top^
+||usps.com-trackidp.top^
+||usps.com-trackiiz.top^
+||usps.com-tracking-helpnko.cc^
+||usps.com-tracking-helptom.cc^
+||usps.com-tracking-helptot.cc^
+||usps.com-tracking-helptwo.cc^
+||usps.com-tracking-helptzo.cc^
+||usps.com-trackipxdnh.top^
+||usps.com-trackius.top^
+||usps.com-trackjgc.top^
+||usps.com-trackjkh.top^
+||usps.com-trackkys.top^
+||usps.com-trackloi.top^
+||usps.com-tracklpe.top^
+||usps.com-tracklvr.top^
+||usps.com-trackmjx.top^
+||usps.com-trackmli.top^
+||usps.com-trackmvd.top^
+||usps.com-tracknsr.top^
+||usps.com-trackodf.top^
+||usps.com-trackogx.top^
+||usps.com-trackonp.top^
+||usps.com-trackpgl.top^
+||usps.com-trackpoq.top^
+||usps.com-trackpsx.top^
+||usps.com-trackpwg.top^
+||usps.com-trackree.top^
+||usps.com-tracksbw.top^
+||usps.com-tracktdz.top^
+||usps.com-tracktmb.top^
+||usps.com-tracktus.top^
+||usps.com-tracktyi.top^
+||usps.com-trackuir.top^
+||usps.com-trackuve.top^
+||usps.com-trackvbw.top^
+||usps.com-trackvkt.top^
+||usps.com-trackvoi.top^
+||usps.com-trackwil.top^
+||usps.com-trackxgj.top^
+||usps.com-trackxkt.top^
+||usps.com-trackxrz.top^
+||usps.com-trackxxh.top^
+||usps.com-trackzyy.top^
+||uspsservicetrack.blogspot.com.cy^
+||veeradalaw.com^
+||vmgmjfbz.icu^
+||wakakehuteu-9247.vercel.app^
+||walletcazonnect.gitbook.io^
+||wap.brwj.cn^
+||webmailservice08.wixsite.com^
+||wellyngtonkuhn.github.io^
+||whare.100webspace.net^
+||wwiiskdkdnffnjuca.weebly.com^
+||www-degelyehuda-org-il.filesusr.com^
+||wwwteiegramwor.xyz^
+||xavier6709.github.io^
+||xn--d1aqfkf.xn--p1ai^
+||xox-exe.github.io^
+||yairix.github.io^
+||yarakobanrhg.wpenginepowered.com^
+||zattajakoixa-8559.vercel.app^
+||zerotelegram.pl^
+||zetriyauffivou-1144.vercel.app^
+||zkybgfddvl.shop^
+||zures.com.br^
diff --git a/phishing-filter-agh.txt.br b/phishing-filter-agh.txt.br
new file mode 100644
index 000000000..4a1bb373c
Binary files /dev/null and b/phishing-filter-agh.txt.br differ
diff --git a/phishing-filter-agh.txt.gz b/phishing-filter-agh.txt.gz
new file mode 100644
index 000000000..0088fc589
Binary files /dev/null and b/phishing-filter-agh.txt.gz differ
diff --git a/phishing-filter-bind.conf b/phishing-filter-bind.conf
new file mode 100644
index 000000000..e808b3169
--- /dev/null
+++ b/phishing-filter-bind.conf
@@ -0,0 +1,449 @@
+# Title: Phishing Domains BIND Blocklist
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+zone "23cssahil.github.io" { type master; notify no; file "null.zone.file"; };
+zone "3reshma.github.io" { type master; notify no; file "null.zone.file"; };
+zone "67533177.ishg.za.com" { type master; notify no; file "null.zone.file"; };
+zone "67780581.ishg.za.com" { type master; notify no; file "null.zone.file"; };
+zone "72386989.ishg.za.com" { type master; notify no; file "null.zone.file"; };
+zone "a2i9s4y.space" { type master; notify no; file "null.zone.file"; };
+zone "a3.ikansalasq.com" { type master; notify no; file "null.zone.file"; };
+zone "acederma.com" { type master; notify no; file "null.zone.file"; };
+zone "ahhhh.pe.kr" { type master; notify no; file "null.zone.file"; };
+zone "airbnb.sync114.com" { type master; notify no; file "null.zone.file"; };
+zone "aisths.cc" { type master; notify no; file "null.zone.file"; };
+zone "akanksha3012.github.io" { type master; notify no; file "null.zone.file"; };
+zone "aks34.github.io" { type master; notify no; file "null.zone.file"; };
+zone "alessandrodiana.it" { type master; notify no; file "null.zone.file"; };
+zone "amamz-product.click" { type master; notify no; file "null.zone.file"; };
+zone "amazonnu.co" { type master; notify no; file "null.zone.file"; };
+zone "amreeth.github.io" { type master; notify no; file "null.zone.file"; };
+zone "anjalijha167.github.io" { type master; notify no; file "null.zone.file"; };
+zone "apricotmelly.wixstudio.com" { type master; notify no; file "null.zone.file"; };
+zone "apricotmelly.wixstudio.io" { type master; notify no; file "null.zone.file"; };
+zone "arpitgoel889.github.io" { type master; notify no; file "null.zone.file"; };
+zone "art-tour.net" { type master; notify no; file "null.zone.file"; };
+zone "artofbaseball.net" { type master; notify no; file "null.zone.file"; };
+zone "ashishmaurya73.github.io" { type master; notify no; file "null.zone.file"; };
+zone "askewi3010.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "asupanvviptelegram.my.id" { type master; notify no; file "null.zone.file"; };
+zone "atobi432.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "attcom-103887.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attisat.gr" { type master; notify no; file "null.zone.file"; };
+zone "attvalidatekindly.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attyahoomai.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "autoscurt24.de" { type master; notify no; file "null.zone.file"; };
+zone "bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz" { type master; notify no; file "null.zone.file"; };
+zone "bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "ballefabrouyau-9112.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "bantuan-tunai-mystrx.jobs8.my.id" { type master; notify no; file "null.zone.file"; };
+zone "baradua.it" { type master; notify no; file "null.zone.file"; };
+zone "barberalonzo29.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "basil0303.github.io" { type master; notify no; file "null.zone.file"; };
+zone "bernardamos422.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "bettinamarks.com" { type master; notify no; file "null.zone.file"; };
+zone "bharathi1809.github.io" { type master; notify no; file "null.zone.file"; };
+zone "blue-tick-help.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "bntuan-dana4-resmii.danytx.web.id" { type master; notify no; file "null.zone.file"; };
+zone "boapremium-001-site1.ptempurl.com" { type master; notify no; file "null.zone.file"; };
+zone "bojanawauceu-3394.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "bolipost.cc" { type master; notify no; file "null.zone.file"; };
+zone "bomomvpfo.club" { type master; notify no; file "null.zone.file"; };
+zone "bountyhunterpc.github.io" { type master; notify no; file "null.zone.file"; };
+zone "bpqxqtuig.club" { type master; notify no; file "null.zone.file"; };
+zone "brbrgsnyqwer.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "brwj.cn" { type master; notify no; file "null.zone.file"; };
+zone "bt.daftpage.com" { type master; notify no; file "null.zone.file"; };
+zone "cache.netflix.com.user12.sanasta.us.kg" { type master; notify no; file "null.zone.file"; };
+zone "carolesheridan4.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "chance-to-availbale-free-badge.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "chiragrajoria.github.io" { type master; notify no; file "null.zone.file"; };
+zone "cid-phisher.github.io" { type master; notify no; file "null.zone.file"; };
+zone "clariveh.baby" { type master; notify no; file "null.zone.file"; };
+zone "clifforddaniells.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "coinbasefaqdesk.com" { type master; notify no; file "null.zone.file"; };
+zone "coiniiobisaecoins.azurewebsites.net" { type master; notify no; file "null.zone.file"; };
+zone "confirmationhelpmeta.io.vn" { type master; notify no; file "null.zone.file"; };
+zone "cpisafety.che.buet.ac.bd" { type master; notify no; file "null.zone.file"; };
+zone "cricketbettingpro.com" { type master; notify no; file "null.zone.file"; };
+zone "cubixpro.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyatt810.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "dalipthukral0.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "danaindonesia.bantuan-resmi.top" { type master; notify no; file "null.zone.file"; };
+zone "deepxzkdn.deadth.sbs" { type master; notify no; file "null.zone.file"; };
+zone "descounsell.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "detlxc.master78lite.com" { type master; notify no; file "null.zone.file"; };
+zone "devshubhamjadav.github.io" { type master; notify no; file "null.zone.file"; };
+zone "dfxzsdf.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "dhanushr24.github.io" { type master; notify no; file "null.zone.file"; };
+zone "dianecadei8.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "did57sauveton.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "dl.mod30t.ir" { type master; notify no; file "null.zone.file"; };
+zone "dmgeuntv.icu" { type master; notify no; file "null.zone.file"; };
+zone "doloribus-voluptat-space.wpkubio.com" { type master; notify no; file "null.zone.file"; };
+zone "donrichie781.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "donttolinii.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "dtn-3c.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "duvetrexuprau.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "ebayqi.shop" { type master; notify no; file "null.zone.file"; };
+zone "eirxkrdgtk.duckdns.org" { type master; notify no; file "null.zone.file"; };
+zone "energizahn.dicosur.net" { type master; notify no; file "null.zone.file"; };
+zone "esumbunk.cc" { type master; notify no; file "null.zone.file"; };
+zone "esunbonk.cc" { type master; notify no; file "null.zone.file"; };
+zone "everestmotors.com.np" { type master; notify no; file "null.zone.file"; };
+zone "evqjteoscz.link" { type master; notify no; file "null.zone.file"; };
+zone "exoduswallet.cn.com" { type master; notify no; file "null.zone.file"; };
+zone "facebook-tw-web.azurewebsites.net" { type master; notify no; file "null.zone.file"; };
+zone "facebookverifycenter.com.de" { type master; notify no; file "null.zone.file"; };
+zone "faceit.sunbim.pro" { type master; notify no; file "null.zone.file"; };
+zone "faizankhan0408.github.io" { type master; notify no; file "null.zone.file"; };
+zone "fauexpfv.icu" { type master; notify no; file "null.zone.file"; };
+zone "feprk.sbs" { type master; notify no; file "null.zone.file"; };
+zone "formsly-form.web.app" { type master; notify no; file "null.zone.file"; };
+zone "free-5573726.webadorsite.com" { type master; notify no; file "null.zone.file"; };
+zone "fsdfjeifls.click" { type master; notify no; file "null.zone.file"; };
+zone "galiciacgu.com.ar" { type master; notify no; file "null.zone.file"; };
+zone "gardakosto.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "geemiioilogin.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "guptanikshay.github.io" { type master; notify no; file "null.zone.file"; };
+zone "gyxgxuu.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "h5.z3v2.com" { type master; notify no; file "null.zone.file"; };
+zone "hajjsj.top" { type master; notify no; file "null.zone.file"; };
+zone "hamza-nawaz.github.io" { type master; notify no; file "null.zone.file"; };
+zone "havkeye14.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "hfhfyejkwsu.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "hjdnshu.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "hollykim.com" { type master; notify no; file "null.zone.file"; };
+zone "homemailweb-608850.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "htitofjpve.club" { type master; notify no; file "null.zone.file"; };
+zone "huynguyen2k.github.io" { type master; notify no; file "null.zone.file"; };
+zone "icontainrbbr.s3.us-west-004.backblazeb2.com" { type master; notify no; file "null.zone.file"; };
+zone "identifier-vous456.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "ijhsk.github.io" { type master; notify no; file "null.zone.file"; };
+zone "imperia-trading.online" { type master; notify no; file "null.zone.file"; };
+zone "informed.deliverydn.top" { type master; notify no; file "null.zone.file"; };
+zone "informed.deliveryfp.top" { type master; notify no; file "null.zone.file"; };
+zone "informed.deliveryft.top" { type master; notify no; file "null.zone.file"; };
+zone "informed.deliveryhrw.top" { type master; notify no; file "null.zone.file"; };
+zone "informed.deliverywbk.top" { type master; notify no; file "null.zone.file"; };
+zone "inshatrading.com" { type master; notify no; file "null.zone.file"; };
+zone "instagram.ossamaelidrissi.com" { type master; notify no; file "null.zone.file"; };
+zone "inusualinteriorismo.com" { type master; notify no; file "null.zone.file"; };
+zone "itaufatura.github.io" { type master; notify no; file "null.zone.file"; };
+zone "itpronetwork.net" { type master; notify no; file "null.zone.file"; };
+zone "itsmdshahin.github.io" { type master; notify no; file "null.zone.file"; };
+zone "ixbuxedexw.info" { type master; notify no; file "null.zone.file"; };
+zone "jeittagrennami-1729.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "jimenezbill.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "jordanmargaret.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "jpmc.shieldssecuritybags.com" { type master; notify no; file "null.zone.file"; };
+zone "jrcce.shop" { type master; notify no; file "null.zone.file"; };
+zone "kdotts1.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "kemsnwshdurut.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "large-kitchen-substantial.on-fleek.app" { type master; notify no; file "null.zone.file"; };
+zone "leipeleufreyo.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "lemedab246.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "lightseagreen-jaguar-612987.hostingersite.com" { type master; notify no; file "null.zone.file"; };
+zone "ljsherrm.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "lnadm.icu" { type master; notify no; file "null.zone.file"; };
+zone "locateid.com.tr" { type master; notify no; file "null.zone.file"; };
+zone "loginmailaccount1.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "lsddndp-up.top" { type master; notify no; file "null.zone.file"; };
+zone "lve1131.wixstudio.com" { type master; notify no; file "null.zone.file"; };
+zone "lve1131.wixstudio.io" { type master; notify no; file "null.zone.file"; };
+zone "mail.8724319-coinbase.com" { type master; notify no; file "null.zone.file"; };
+zone "mail.health-status.fb-business.com" { type master; notify no; file "null.zone.file"; };
+zone "maryp6608.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "mauttauhuttiloi.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "messagevocale888.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "meta-mask-io.serv00.net" { type master; notify no; file "null.zone.file"; };
+zone "metaiimaaskk-login.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "metamsik.com" { type master; notify no; file "null.zone.file"; };
+zone "miss.votingforstudents.com" { type master; notify no; file "null.zone.file"; };
+zone "mkramer03.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "mmoom4.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "mobileservice34.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "monetization-violation-page.github.io" { type master; notify no; file "null.zone.file"; };
+zone "monirshouvo.github.io" { type master; notify no; file "null.zone.file"; };
+zone "morinierevolailles.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "mtalha21.github.io" { type master; notify no; file "null.zone.file"; };
+zone "muhammedasfacknk.github.io" { type master; notify no; file "null.zone.file"; };
+zone "munnoi.github.io" { type master; notify no; file "null.zone.file"; };
+zone "myurls.bio" { type master; notify no; file "null.zone.file"; };
+zone "myvalue365.com" { type master; notify no; file "null.zone.file"; };
+zone "navicrettobro-6686.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "nbbroker.az" { type master; notify no; file "null.zone.file"; };
+zone "nesgrjahwt.guru" { type master; notify no; file "null.zone.file"; };
+zone "netfeliz.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "nfwqayckqr.ltd" { type master; notify no; file "null.zone.file"; };
+zone "notify-user-deviations.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "oasisministries.com" { type master; notify no; file "null.zone.file"; };
+zone "omar7rb1.github.io" { type master; notify no; file "null.zone.file"; };
+zone "or-obaidullah.github.io" { type master; notify no; file "null.zone.file"; };
+zone "orangveri.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "p.usertrackehe.top" { type master; notify no; file "null.zone.file"; };
+zone "p.usertrackkum.top" { type master; notify no; file "null.zone.file"; };
+zone "p.usertrackrry.top" { type master; notify no; file "null.zone.file"; };
+zone "p.usertrackyfk.top" { type master; notify no; file "null.zone.file"; };
+zone "pajem76668.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "pancake-frontend-dejmy38ut-chefilip.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "perso8764002.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "phenomenal-praline-ff95b6.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "pikay13.github.io" { type master; notify no; file "null.zone.file"; };
+zone "podrimapso.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "portal-trezr-cdn.github.io" { type master; notify no; file "null.zone.file"; };
+zone "ppruphmllx.blue" { type master; notify no; file "null.zone.file"; };
+zone "premiumember.ct.ws" { type master; notify no; file "null.zone.file"; };
+zone "preuffeddoupraki-2297.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-019ceedaa0894587aa4255109af6c416.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-135a4055f8454025aa2f06845da4f8d8.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-140cf903de964a479f3b465e010ddb3b.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-14b5071e5a78406a9a92a00be9141089.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-244225b6dd0e404291c857fafd588b4f.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-28e193ca593a467bbd1e0232a73a5680.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-2a64f782845943beae62e9f09c473700.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-34ae76b320c445628f3e2bca4a192394.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-3784361eb0b640e797495d46b35ce030.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-55e3e997548a46879ee19f4d494309d6.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-619d0209611d4e8fb34f21726fd3b133.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-668f78270889467e8af696261336536f.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-69356b68f37442e0a24ceb7981f0841b.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-73ee129d9ec943f785408564adcaf985.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-7695c0b23019424cb779394f7a362ba8.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-76bf011f31344f45bf2356e9005ac465.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-7a6b99614f4b41658cd677a620b18951.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-7be95ce02232456db08522b3d3c99765.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-80fb550826904a048a5391946ef49a69.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-83f86cbfe52f42728c26cda54824eb39.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-886654e4969e42e988d48d11222c8a57.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-97673970c1c145eda5e559c4f9c18f61.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-9839470418254b29962dec4220c83255.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-a017bd9f9dc6498183af41770490c482.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-aa456431547a4e28948699d7c6a22006.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-cb72691642c444eb900a44aa1d8a7107.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-ce8fc030252b4632959515dffef1b750.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-de59803496c8489585895b6917266e7c.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-ebb47370c13740ef9014f6bba927d946.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-f7edd89a736e48428172001b0b1906fe.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-fc37d2d339714056b7f16368b49ae532.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-fd5baa54f2714f068701be4a7563f2de.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-fef94e8fd76842a4818865dd78ef618f.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "puvomattipro.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "qfbspeclmg.bond" { type master; notify no; file "null.zone.file"; };
+zone "qowii.top" { type master; notify no; file "null.zone.file"; };
+zone "quiz.vidio.com.user3.hehdin.us.kg" { type master; notify no; file "null.zone.file"; };
+zone "radhikamd.github.io" { type master; notify no; file "null.zone.file"; };
+zone "raiyone.cc" { type master; notify no; file "null.zone.file"; };
+zone "rayatrecruitment.com" { type master; notify no; file "null.zone.file"; };
+zone "rectifcentrefdeptrescu.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "rekruitmenttjwtt.vip-media.web.id" { type master; notify no; file "null.zone.file"; };
+zone "resolverpad.dev" { type master; notify no; file "null.zone.file"; };
+zone "reward-webconnect.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "roberthood.net" { type master; notify no; file "null.zone.file"; };
+zone "rtm-att.directly.com" { type master; notify no; file "null.zone.file"; };
+zone "ruthah9.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "rwhjdb.icu" { type master; notify no; file "null.zone.file"; };
+zone "s.eu.premiumisp.net" { type master; notify no; file "null.zone.file"; };
+zone "s.team-a.cam" { type master; notify no; file "null.zone.file"; };
+zone "s080rjhdn.top" { type master; notify no; file "null.zone.file"; };
+zone "salmanfarsi01.github.io" { type master; notify no; file "null.zone.file"; };
+zone "santanderpod.globalizeme-dublin2.co.uk" { type master; notify no; file "null.zone.file"; };
+zone "sedosexu.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "seller.tksalem.com" { type master; notify no; file "null.zone.file"; };
+zone "server.2rk3.com" { type master; notify no; file "null.zone.file"; };
+zone "server.6avj.com" { type master; notify no; file "null.zone.file"; };
+zone "server.dgm0.com" { type master; notify no; file "null.zone.file"; };
+zone "server.k6dz.com" { type master; notify no; file "null.zone.file"; };
+zone "server.pxs7.com" { type master; notify no; file "null.zone.file"; };
+zone "seunelvis1.github.io" { type master; notify no; file "null.zone.file"; };
+zone "shanky0.github.io" { type master; notify no; file "null.zone.file"; };
+zone "sjhdoirrsjx.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "smgolamalif.github.io" { type master; notify no; file "null.zone.file"; };
+zone "smsmmsernorepls.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "soumya252000.github.io" { type master; notify no; file "null.zone.file"; };
+zone "steam.communityartlist.com" { type master; notify no; file "null.zone.file"; };
+zone "steam.workshopgraphy.com" { type master; notify no; file "null.zone.file"; };
+zone "steamcommuitty.com" { type master; notify no; file "null.zone.file"; };
+zone "steamcommunmutly.com" { type master; notify no; file "null.zone.file"; };
+zone "steamcomunutty.com" { type master; notify no; file "null.zone.file"; };
+zone "steamconmumity.com" { type master; notify no; file "null.zone.file"; };
+zone "steeamcommnity.com" { type master; notify no; file "null.zone.file"; };
+zone "stephen55687.github.io" { type master; notify no; file "null.zone.file"; };
+zone "stevencrews.com" { type master; notify no; file "null.zone.file"; };
+zone "submit-dispute-form.github.io" { type master; notify no; file "null.zone.file"; };
+zone "sultan-raza.github.io" { type master; notify no; file "null.zone.file"; };
+zone "sumagayathri-999.github.io" { type master; notify no; file "null.zone.file"; };
+zone "support-verify-page.com" { type master; notify no; file "null.zone.file"; };
+zone "supports-center-communityhelp.cloud" { type master; notify no; file "null.zone.file"; };
+zone "svckhc.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "swatteam219.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "taher-mohamed-ahmed-saad.github.io" { type master; notify no; file "null.zone.file"; };
+zone "taiegrma.gold" { type master; notify no; file "null.zone.file"; };
+zone "tairgam.chat" { type master; notify no; file "null.zone.file"; };
+zone "tairgam.fund" { type master; notify no; file "null.zone.file"; };
+zone "tairgam.show" { type master; notify no; file "null.zone.file"; };
+zone "tairgam.zone" { type master; notify no; file "null.zone.file"; };
+zone "talergam.live" { type master; notify no; file "null.zone.file"; };
+zone "talergam.red" { type master; notify no; file "null.zone.file"; };
+zone "talergam.shopping" { type master; notify no; file "null.zone.file"; };
+zone "talergam.today" { type master; notify no; file "null.zone.file"; };
+zone "tanfupikyx.monster" { type master; notify no; file "null.zone.file"; };
+zone "tcsktjtl.icu" { type master; notify no; file "null.zone.file"; };
+zone "technoindiagroup.com" { type master; notify no; file "null.zone.file"; };
+zone "tecmachine.com.br" { type master; notify no; file "null.zone.file"; };
+zone "teiagram.group" { type master; notify no; file "null.zone.file"; };
+zone "teiagram.red" { type master; notify no; file "null.zone.file"; };
+zone "teiagram.zone" { type master; notify no; file "null.zone.file"; };
+zone "teiegrma.cab" { type master; notify no; file "null.zone.file"; };
+zone "teiegrma.design" { type master; notify no; file "null.zone.file"; };
+zone "teiegrrm.blue" { type master; notify no; file "null.zone.file"; };
+zone "teiegrrm.today" { type master; notify no; file "null.zone.file"; };
+zone "telargam.city" { type master; notify no; file "null.zone.file"; };
+zone "telargam.cloud" { type master; notify no; file "null.zone.file"; };
+zone "telargam.college" { type master; notify no; file "null.zone.file"; };
+zone "telargam.tax" { type master; notify no; file "null.zone.file"; };
+zone "telegram-safe.cc" { type master; notify no; file "null.zone.file"; };
+zone "telegrrm.monster" { type master; notify no; file "null.zone.file"; };
+zone "telegrrm.xin" { type master; notify no; file "null.zone.file"; };
+zone "telemlp-omsz.icu" { type master; notify no; file "null.zone.file"; };
+zone "teleqrma.show" { type master; notify no; file "null.zone.file"; };
+zone "telezelm-lbhg.icu" { type master; notify no; file "null.zone.file"; };
+zone "tellmeliu.github.io" { type master; notify no; file "null.zone.file"; };
+zone "terfanfranck.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "tienda-linea7.com" { type master; notify no; file "null.zone.file"; };
+zone "tienda-linea9.com" { type master; notify no; file "null.zone.file"; };
+zone "tiktok.fhinek.com" { type master; notify no; file "null.zone.file"; };
+zone "tiktokkjshop.com" { type master; notify no; file "null.zone.file"; };
+zone "tiktokmax3.vip" { type master; notify no; file "null.zone.file"; };
+zone "troubadeihati-9272.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "tysmbdpz.icu" { type master; notify no; file "null.zone.file"; };
+zone "u-pphholfd.godaddysites.com" { type master; notify no; file "null.zone.file"; };
+zone "ultrafima.com" { type master; notify no; file "null.zone.file"; };
+zone "uphold-loges.github.io" { type master; notify no; file "null.zone.file"; };
+zone "urbexine.shop" { type master; notify no; file "null.zone.file"; };
+zone "urmilagome.github.io" { type master; notify no; file "null.zone.file"; };
+zone "user1.hehdin.us.kg" { type master; notify no; file "null.zone.file"; };
+zone "username895.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-parceliutxb.vip" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-parceliutxc.vip" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-parceliutxe.vip" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-parceliutxg.vip" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-parceljzuwb.vip" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-parceljzuwc.vip" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackaaw.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackaba.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackakt.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackartjlo.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackbpg.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackdex.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackeaj.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackemh.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackevj.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackfnl.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackghi.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackgix.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackgna.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackhal.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackicg.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackidp.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackiiz.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracking-helpnko.cc" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracking-helptom.cc" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracking-helptot.cc" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracking-helptwo.cc" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracking-helptzo.cc" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackipxdnh.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackius.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackjgc.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackjkh.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackkys.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackloi.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracklpe.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracklvr.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackmjx.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackmli.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackmvd.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracknsr.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackodf.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackogx.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackonp.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackpgl.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackpoq.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackpsx.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackpwg.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackree.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracksbw.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracktdz.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracktmb.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracktus.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tracktyi.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackuir.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackuve.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackvbw.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackvkt.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackvoi.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackwil.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackxgj.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackxkt.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackxrz.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackxxh.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-trackzyy.top" { type master; notify no; file "null.zone.file"; };
+zone "uspsservicetrack.blogspot.com.cy" { type master; notify no; file "null.zone.file"; };
+zone "veeradalaw.com" { type master; notify no; file "null.zone.file"; };
+zone "vmgmjfbz.icu" { type master; notify no; file "null.zone.file"; };
+zone "wakakehuteu-9247.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "walletcazonnect.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "wap.brwj.cn" { type master; notify no; file "null.zone.file"; };
+zone "webmailservice08.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "wellyngtonkuhn.github.io" { type master; notify no; file "null.zone.file"; };
+zone "whare.100webspace.net" { type master; notify no; file "null.zone.file"; };
+zone "wwiiskdkdnffnjuca.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "www-degelyehuda-org-il.filesusr.com" { type master; notify no; file "null.zone.file"; };
+zone "wwwteiegramwor.xyz" { type master; notify no; file "null.zone.file"; };
+zone "xavier6709.github.io" { type master; notify no; file "null.zone.file"; };
+zone "xn--d1aqfkf.xn--p1ai" { type master; notify no; file "null.zone.file"; };
+zone "xox-exe.github.io" { type master; notify no; file "null.zone.file"; };
+zone "yairix.github.io" { type master; notify no; file "null.zone.file"; };
+zone "yarakobanrhg.wpenginepowered.com" { type master; notify no; file "null.zone.file"; };
+zone "zattajakoixa-8559.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "zerotelegram.pl" { type master; notify no; file "null.zone.file"; };
+zone "zetriyauffivou-1144.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "zkybgfddvl.shop" { type master; notify no; file "null.zone.file"; };
+zone "zures.com.br" { type master; notify no; file "null.zone.file"; };
diff --git a/phishing-filter-bind.conf.br b/phishing-filter-bind.conf.br
new file mode 100644
index 000000000..6416e2efa
Binary files /dev/null and b/phishing-filter-bind.conf.br differ
diff --git a/phishing-filter-bind.conf.gz b/phishing-filter-bind.conf.gz
new file mode 100644
index 000000000..4c2fb5ea3
Binary files /dev/null and b/phishing-filter-bind.conf.gz differ
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt b/phishing-filter-dnscrypt-blocked-ips.txt
new file mode 100644
index 000000000..529b877ea
--- /dev/null
+++ b/phishing-filter-dnscrypt-blocked-ips.txt
@@ -0,0 +1,7 @@
+# Title: Phishing IPs Blocklist
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt.br b/phishing-filter-dnscrypt-blocked-ips.txt.br
new file mode 100644
index 000000000..993166ea5
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-ips.txt.br differ
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt.gz b/phishing-filter-dnscrypt-blocked-ips.txt.gz
new file mode 100644
index 000000000..b54897b0b
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-ips.txt.gz differ
diff --git a/phishing-filter-dnscrypt-blocked-names.txt b/phishing-filter-dnscrypt-blocked-names.txt
new file mode 100644
index 000000000..21a910ab0
--- /dev/null
+++ b/phishing-filter-dnscrypt-blocked-names.txt
@@ -0,0 +1,449 @@
+# Title: Phishing Names Blocklist
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+23cssahil.github.io
+3reshma.github.io
+67533177.ishg.za.com
+67780581.ishg.za.com
+72386989.ishg.za.com
+a2i9s4y.space
+a3.ikansalasq.com
+acederma.com
+ahhhh.pe.kr
+airbnb.sync114.com
+aisths.cc
+akanksha3012.github.io
+aks34.github.io
+alessandrodiana.it
+amamz-product.click
+amazonnu.co
+amreeth.github.io
+anjalijha167.github.io
+apricotmelly.wixstudio.com
+apricotmelly.wixstudio.io
+arpitgoel889.github.io
+art-tour.net
+artofbaseball.net
+ashishmaurya73.github.io
+askewi3010.wixsite.com
+asupanvviptelegram.my.id
+atobi432.wixsite.com
+attcom-103887.weebly.com
+attisat.gr
+attvalidatekindly.weebly.com
+attyahoomai.wixsite.com
+autoscurt24.de
+bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz
+bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link
+bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link
+bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link
+bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link
+ballefabrouyau-9112.vercel.app
+bantuan-tunai-mystrx.jobs8.my.id
+baradua.it
+barberalonzo29.wixsite.com
+basil0303.github.io
+bernardamos422.wixsite.com
+bettinamarks.com
+bharathi1809.github.io
+blue-tick-help.vercel.app
+bntuan-dana4-resmii.danytx.web.id
+boapremium-001-site1.ptempurl.com
+bojanawauceu-3394.vercel.app
+bolipost.cc
+bomomvpfo.club
+bountyhunterpc.github.io
+bpqxqtuig.club
+brbrgsnyqwer.wixsite.com
+brwj.cn
+bt.daftpage.com
+cache.netflix.com.user12.sanasta.us.kg
+carolesheridan4.wixsite.com
+chance-to-availbale-free-badge.vercel.app
+chiragrajoria.github.io
+cid-phisher.github.io
+clariveh.baby
+clifforddaniells.wixsite.com
+coinbasefaqdesk.com
+coiniiobisaecoins.azurewebsites.net
+confirmationhelpmeta.io.vn
+cpisafety.che.buet.ac.bd
+cricketbettingpro.com
+cubixpro.com
+currentlyatt810.weebly.com
+dalipthukral0.wixsite.com
+danaindonesia.bantuan-resmi.top
+deepxzkdn.deadth.sbs
+descounsell.wixsite.com
+detlxc.master78lite.com
+devshubhamjadav.github.io
+dfxzsdf.wixsite.com
+dhanushr24.github.io
+dianecadei8.wixsite.com
+did57sauveton.wixsite.com
+dl.mod30t.ir
+dmgeuntv.icu
+doloribus-voluptat-space.wpkubio.com
+donrichie781.wixsite.com
+donttolinii.wixsite.com
+dtn-3c.vercel.app
+duvetrexuprau.vercel.app
+ebayqi.shop
+eirxkrdgtk.duckdns.org
+energizahn.dicosur.net
+esumbunk.cc
+esunbonk.cc
+everestmotors.com.np
+evqjteoscz.link
+exoduswallet.cn.com
+facebook-tw-web.azurewebsites.net
+facebookverifycenter.com.de
+faceit.sunbim.pro
+faizankhan0408.github.io
+fauexpfv.icu
+feprk.sbs
+formsly-form.web.app
+free-5573726.webadorsite.com
+fsdfjeifls.click
+galiciacgu.com.ar
+gardakosto.wixsite.com
+geemiioilogin.gitbook.io
+guptanikshay.github.io
+gyxgxuu.wixsite.com
+h5.z3v2.com
+hajjsj.top
+hamza-nawaz.github.io
+havkeye14.wixsite.com
+hfhfyejkwsu.wixsite.com
+hjdnshu.wixsite.com
+hollykim.com
+homemailweb-608850.weeblysite.com
+htitofjpve.club
+huynguyen2k.github.io
+icontainrbbr.s3.us-west-004.backblazeb2.com
+identifier-vous456.wixsite.com
+ijhsk.github.io
+imperia-trading.online
+informed.deliverydn.top
+informed.deliveryfp.top
+informed.deliveryft.top
+informed.deliveryhrw.top
+informed.deliverywbk.top
+inshatrading.com
+instagram.ossamaelidrissi.com
+inusualinteriorismo.com
+itaufatura.github.io
+itpronetwork.net
+itsmdshahin.github.io
+ixbuxedexw.info
+jeittagrennami-1729.vercel.app
+jimenezbill.wixsite.com
+jordanmargaret.wixsite.com
+jpmc.shieldssecuritybags.com
+jrcce.shop
+kdotts1.wixsite.com
+kemsnwshdurut.weebly.com
+large-kitchen-substantial.on-fleek.app
+leipeleufreyo.vercel.app
+lemedab246.wixsite.com
+lightseagreen-jaguar-612987.hostingersite.com
+ljsherrm.wixsite.com
+lnadm.icu
+locateid.com.tr
+loginmailaccount1.wixsite.com
+lsddndp-up.top
+lve1131.wixstudio.com
+lve1131.wixstudio.io
+mail.8724319-coinbase.com
+mail.health-status.fb-business.com
+maryp6608.wixsite.com
+mauttauhuttiloi.vercel.app
+messagevocale888.wixsite.com
+meta-mask-io.serv00.net
+metaiimaaskk-login.gitbook.io
+metamsik.com
+miss.votingforstudents.com
+mkramer03.wixsite.com
+mmoom4.wixsite.com
+mobileservice34.wixsite.com
+monetization-violation-page.github.io
+monirshouvo.github.io
+morinierevolailles.wixsite.com
+mtalha21.github.io
+muhammedasfacknk.github.io
+munnoi.github.io
+myurls.bio
+myvalue365.com
+navicrettobro-6686.vercel.app
+nbbroker.az
+nesgrjahwt.guru
+netfeliz.netlify.app
+nfwqayckqr.ltd
+notify-user-deviations.vercel.app
+oasisministries.com
+omar7rb1.github.io
+or-obaidullah.github.io
+orangveri.wixsite.com
+p.usertrackehe.top
+p.usertrackkum.top
+p.usertrackrry.top
+p.usertrackyfk.top
+pajem76668.wixsite.com
+pancake-frontend-dejmy38ut-chefilip.vercel.app
+perso8764002.wixsite.com
+phenomenal-praline-ff95b6.netlify.app
+pikay13.github.io
+podrimapso.wixsite.com
+portal-trezr-cdn.github.io
+ppruphmllx.blue
+premiumember.ct.ws
+preuffeddoupraki-2297.vercel.app
+pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev
+pub-019ceedaa0894587aa4255109af6c416.r2.dev
+pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev
+pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev
+pub-135a4055f8454025aa2f06845da4f8d8.r2.dev
+pub-140cf903de964a479f3b465e010ddb3b.r2.dev
+pub-14b5071e5a78406a9a92a00be9141089.r2.dev
+pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev
+pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev
+pub-244225b6dd0e404291c857fafd588b4f.r2.dev
+pub-28e193ca593a467bbd1e0232a73a5680.r2.dev
+pub-2a64f782845943beae62e9f09c473700.r2.dev
+pub-34ae76b320c445628f3e2bca4a192394.r2.dev
+pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev
+pub-3784361eb0b640e797495d46b35ce030.r2.dev
+pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev
+pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev
+pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev
+pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev
+pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev
+pub-55e3e997548a46879ee19f4d494309d6.r2.dev
+pub-619d0209611d4e8fb34f21726fd3b133.r2.dev
+pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev
+pub-668f78270889467e8af696261336536f.r2.dev
+pub-69356b68f37442e0a24ceb7981f0841b.r2.dev
+pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev
+pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev
+pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev
+pub-73ee129d9ec943f785408564adcaf985.r2.dev
+pub-7695c0b23019424cb779394f7a362ba8.r2.dev
+pub-76bf011f31344f45bf2356e9005ac465.r2.dev
+pub-7a6b99614f4b41658cd677a620b18951.r2.dev
+pub-7be95ce02232456db08522b3d3c99765.r2.dev
+pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev
+pub-80fb550826904a048a5391946ef49a69.r2.dev
+pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev
+pub-83f86cbfe52f42728c26cda54824eb39.r2.dev
+pub-886654e4969e42e988d48d11222c8a57.r2.dev
+pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev
+pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev
+pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev
+pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev
+pub-97673970c1c145eda5e559c4f9c18f61.r2.dev
+pub-9839470418254b29962dec4220c83255.r2.dev
+pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev
+pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev
+pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev
+pub-a017bd9f9dc6498183af41770490c482.r2.dev
+pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev
+pub-aa456431547a4e28948699d7c6a22006.r2.dev
+pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev
+pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev
+pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev
+pub-cb72691642c444eb900a44aa1d8a7107.r2.dev
+pub-ce8fc030252b4632959515dffef1b750.r2.dev
+pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev
+pub-de59803496c8489585895b6917266e7c.r2.dev
+pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev
+pub-ebb47370c13740ef9014f6bba927d946.r2.dev
+pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev
+pub-f7edd89a736e48428172001b0b1906fe.r2.dev
+pub-fc37d2d339714056b7f16368b49ae532.r2.dev
+pub-fd5baa54f2714f068701be4a7563f2de.r2.dev
+pub-fef94e8fd76842a4818865dd78ef618f.r2.dev
+puvomattipro.vercel.app
+qfbspeclmg.bond
+qowii.top
+quiz.vidio.com.user3.hehdin.us.kg
+radhikamd.github.io
+raiyone.cc
+rayatrecruitment.com
+rectifcentrefdeptrescu.weebly.com
+rekruitmenttjwtt.vip-media.web.id
+resolverpad.dev
+reward-webconnect.pages.dev
+roberthood.net
+rtm-att.directly.com
+ruthah9.wixsite.com
+rwhjdb.icu
+s.eu.premiumisp.net
+s.team-a.cam
+s080rjhdn.top
+salmanfarsi01.github.io
+santanderpod.globalizeme-dublin2.co.uk
+sedosexu.wixsite.com
+seller.tksalem.com
+server.2rk3.com
+server.6avj.com
+server.dgm0.com
+server.k6dz.com
+server.pxs7.com
+seunelvis1.github.io
+shanky0.github.io
+sjhdoirrsjx.wixsite.com
+smgolamalif.github.io
+smsmmsernorepls.wixsite.com
+soumya252000.github.io
+steam.communityartlist.com
+steam.workshopgraphy.com
+steamcommuitty.com
+steamcommunmutly.com
+steamcomunutty.com
+steamconmumity.com
+steeamcommnity.com
+stephen55687.github.io
+stevencrews.com
+submit-dispute-form.github.io
+sultan-raza.github.io
+sumagayathri-999.github.io
+support-verify-page.com
+supports-center-communityhelp.cloud
+svckhc.wixsite.com
+swatteam219.wixsite.com
+taher-mohamed-ahmed-saad.github.io
+taiegrma.gold
+tairgam.chat
+tairgam.fund
+tairgam.show
+tairgam.zone
+talergam.live
+talergam.red
+talergam.shopping
+talergam.today
+tanfupikyx.monster
+tcsktjtl.icu
+technoindiagroup.com
+tecmachine.com.br
+teiagram.group
+teiagram.red
+teiagram.zone
+teiegrma.cab
+teiegrma.design
+teiegrrm.blue
+teiegrrm.today
+telargam.city
+telargam.cloud
+telargam.college
+telargam.tax
+telegram-safe.cc
+telegrrm.monster
+telegrrm.xin
+telemlp-omsz.icu
+teleqrma.show
+telezelm-lbhg.icu
+tellmeliu.github.io
+terfanfranck.wixsite.com
+tienda-linea7.com
+tienda-linea9.com
+tiktok.fhinek.com
+tiktokkjshop.com
+tiktokmax3.vip
+troubadeihati-9272.vercel.app
+tysmbdpz.icu
+u-pphholfd.godaddysites.com
+ultrafima.com
+uphold-loges.github.io
+urbexine.shop
+urmilagome.github.io
+user1.hehdin.us.kg
+username895.wixsite.com
+usps.com-parceliutxb.vip
+usps.com-parceliutxc.vip
+usps.com-parceliutxe.vip
+usps.com-parceliutxg.vip
+usps.com-parceljzuwb.vip
+usps.com-parceljzuwc.vip
+usps.com-trackaaw.top
+usps.com-trackaba.top
+usps.com-trackakt.top
+usps.com-trackartjlo.top
+usps.com-trackbpg.top
+usps.com-trackdex.top
+usps.com-trackeaj.top
+usps.com-trackemh.top
+usps.com-trackevj.top
+usps.com-trackfnl.top
+usps.com-trackghi.top
+usps.com-trackgix.top
+usps.com-trackgna.top
+usps.com-trackhal.top
+usps.com-trackicg.top
+usps.com-trackidp.top
+usps.com-trackiiz.top
+usps.com-tracking-helpnko.cc
+usps.com-tracking-helptom.cc
+usps.com-tracking-helptot.cc
+usps.com-tracking-helptwo.cc
+usps.com-tracking-helptzo.cc
+usps.com-trackipxdnh.top
+usps.com-trackius.top
+usps.com-trackjgc.top
+usps.com-trackjkh.top
+usps.com-trackkys.top
+usps.com-trackloi.top
+usps.com-tracklpe.top
+usps.com-tracklvr.top
+usps.com-trackmjx.top
+usps.com-trackmli.top
+usps.com-trackmvd.top
+usps.com-tracknsr.top
+usps.com-trackodf.top
+usps.com-trackogx.top
+usps.com-trackonp.top
+usps.com-trackpgl.top
+usps.com-trackpoq.top
+usps.com-trackpsx.top
+usps.com-trackpwg.top
+usps.com-trackree.top
+usps.com-tracksbw.top
+usps.com-tracktdz.top
+usps.com-tracktmb.top
+usps.com-tracktus.top
+usps.com-tracktyi.top
+usps.com-trackuir.top
+usps.com-trackuve.top
+usps.com-trackvbw.top
+usps.com-trackvkt.top
+usps.com-trackvoi.top
+usps.com-trackwil.top
+usps.com-trackxgj.top
+usps.com-trackxkt.top
+usps.com-trackxrz.top
+usps.com-trackxxh.top
+usps.com-trackzyy.top
+uspsservicetrack.blogspot.com.cy
+veeradalaw.com
+vmgmjfbz.icu
+wakakehuteu-9247.vercel.app
+walletcazonnect.gitbook.io
+wap.brwj.cn
+webmailservice08.wixsite.com
+wellyngtonkuhn.github.io
+whare.100webspace.net
+wwiiskdkdnffnjuca.weebly.com
+www-degelyehuda-org-il.filesusr.com
+wwwteiegramwor.xyz
+xavier6709.github.io
+xn--d1aqfkf.xn--p1ai
+xox-exe.github.io
+yairix.github.io
+yarakobanrhg.wpenginepowered.com
+zattajakoixa-8559.vercel.app
+zerotelegram.pl
+zetriyauffivou-1144.vercel.app
+zkybgfddvl.shop
+zures.com.br
diff --git a/phishing-filter-dnscrypt-blocked-names.txt.br b/phishing-filter-dnscrypt-blocked-names.txt.br
new file mode 100644
index 000000000..f29a5bf40
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-names.txt.br differ
diff --git a/phishing-filter-dnscrypt-blocked-names.txt.gz b/phishing-filter-dnscrypt-blocked-names.txt.gz
new file mode 100644
index 000000000..dfcb7b370
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-names.txt.gz differ
diff --git a/phishing-filter-dnsmasq.conf b/phishing-filter-dnsmasq.conf
new file mode 100644
index 000000000..75e8de81d
--- /dev/null
+++ b/phishing-filter-dnsmasq.conf
@@ -0,0 +1,449 @@
+# Title: Phishing Domains dnsmasq Blocklist
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+address=/23cssahil.github.io/0.0.0.0
+address=/3reshma.github.io/0.0.0.0
+address=/67533177.ishg.za.com/0.0.0.0
+address=/67780581.ishg.za.com/0.0.0.0
+address=/72386989.ishg.za.com/0.0.0.0
+address=/a2i9s4y.space/0.0.0.0
+address=/a3.ikansalasq.com/0.0.0.0
+address=/acederma.com/0.0.0.0
+address=/ahhhh.pe.kr/0.0.0.0
+address=/airbnb.sync114.com/0.0.0.0
+address=/aisths.cc/0.0.0.0
+address=/akanksha3012.github.io/0.0.0.0
+address=/aks34.github.io/0.0.0.0
+address=/alessandrodiana.it/0.0.0.0
+address=/amamz-product.click/0.0.0.0
+address=/amazonnu.co/0.0.0.0
+address=/amreeth.github.io/0.0.0.0
+address=/anjalijha167.github.io/0.0.0.0
+address=/apricotmelly.wixstudio.com/0.0.0.0
+address=/apricotmelly.wixstudio.io/0.0.0.0
+address=/arpitgoel889.github.io/0.0.0.0
+address=/art-tour.net/0.0.0.0
+address=/artofbaseball.net/0.0.0.0
+address=/ashishmaurya73.github.io/0.0.0.0
+address=/askewi3010.wixsite.com/0.0.0.0
+address=/asupanvviptelegram.my.id/0.0.0.0
+address=/atobi432.wixsite.com/0.0.0.0
+address=/attcom-103887.weebly.com/0.0.0.0
+address=/attisat.gr/0.0.0.0
+address=/attvalidatekindly.weebly.com/0.0.0.0
+address=/attyahoomai.wixsite.com/0.0.0.0
+address=/autoscurt24.de/0.0.0.0
+address=/bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz/0.0.0.0
+address=/bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link/0.0.0.0
+address=/bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link/0.0.0.0
+address=/bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link/0.0.0.0
+address=/bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link/0.0.0.0
+address=/ballefabrouyau-9112.vercel.app/0.0.0.0
+address=/bantuan-tunai-mystrx.jobs8.my.id/0.0.0.0
+address=/baradua.it/0.0.0.0
+address=/barberalonzo29.wixsite.com/0.0.0.0
+address=/basil0303.github.io/0.0.0.0
+address=/bernardamos422.wixsite.com/0.0.0.0
+address=/bettinamarks.com/0.0.0.0
+address=/bharathi1809.github.io/0.0.0.0
+address=/blue-tick-help.vercel.app/0.0.0.0
+address=/bntuan-dana4-resmii.danytx.web.id/0.0.0.0
+address=/boapremium-001-site1.ptempurl.com/0.0.0.0
+address=/bojanawauceu-3394.vercel.app/0.0.0.0
+address=/bolipost.cc/0.0.0.0
+address=/bomomvpfo.club/0.0.0.0
+address=/bountyhunterpc.github.io/0.0.0.0
+address=/bpqxqtuig.club/0.0.0.0
+address=/brbrgsnyqwer.wixsite.com/0.0.0.0
+address=/brwj.cn/0.0.0.0
+address=/bt.daftpage.com/0.0.0.0
+address=/cache.netflix.com.user12.sanasta.us.kg/0.0.0.0
+address=/carolesheridan4.wixsite.com/0.0.0.0
+address=/chance-to-availbale-free-badge.vercel.app/0.0.0.0
+address=/chiragrajoria.github.io/0.0.0.0
+address=/cid-phisher.github.io/0.0.0.0
+address=/clariveh.baby/0.0.0.0
+address=/clifforddaniells.wixsite.com/0.0.0.0
+address=/coinbasefaqdesk.com/0.0.0.0
+address=/coiniiobisaecoins.azurewebsites.net/0.0.0.0
+address=/confirmationhelpmeta.io.vn/0.0.0.0
+address=/cpisafety.che.buet.ac.bd/0.0.0.0
+address=/cricketbettingpro.com/0.0.0.0
+address=/cubixpro.com/0.0.0.0
+address=/currentlyatt810.weebly.com/0.0.0.0
+address=/dalipthukral0.wixsite.com/0.0.0.0
+address=/danaindonesia.bantuan-resmi.top/0.0.0.0
+address=/deepxzkdn.deadth.sbs/0.0.0.0
+address=/descounsell.wixsite.com/0.0.0.0
+address=/detlxc.master78lite.com/0.0.0.0
+address=/devshubhamjadav.github.io/0.0.0.0
+address=/dfxzsdf.wixsite.com/0.0.0.0
+address=/dhanushr24.github.io/0.0.0.0
+address=/dianecadei8.wixsite.com/0.0.0.0
+address=/did57sauveton.wixsite.com/0.0.0.0
+address=/dl.mod30t.ir/0.0.0.0
+address=/dmgeuntv.icu/0.0.0.0
+address=/doloribus-voluptat-space.wpkubio.com/0.0.0.0
+address=/donrichie781.wixsite.com/0.0.0.0
+address=/donttolinii.wixsite.com/0.0.0.0
+address=/dtn-3c.vercel.app/0.0.0.0
+address=/duvetrexuprau.vercel.app/0.0.0.0
+address=/ebayqi.shop/0.0.0.0
+address=/eirxkrdgtk.duckdns.org/0.0.0.0
+address=/energizahn.dicosur.net/0.0.0.0
+address=/esumbunk.cc/0.0.0.0
+address=/esunbonk.cc/0.0.0.0
+address=/everestmotors.com.np/0.0.0.0
+address=/evqjteoscz.link/0.0.0.0
+address=/exoduswallet.cn.com/0.0.0.0
+address=/facebook-tw-web.azurewebsites.net/0.0.0.0
+address=/facebookverifycenter.com.de/0.0.0.0
+address=/faceit.sunbim.pro/0.0.0.0
+address=/faizankhan0408.github.io/0.0.0.0
+address=/fauexpfv.icu/0.0.0.0
+address=/feprk.sbs/0.0.0.0
+address=/formsly-form.web.app/0.0.0.0
+address=/free-5573726.webadorsite.com/0.0.0.0
+address=/fsdfjeifls.click/0.0.0.0
+address=/galiciacgu.com.ar/0.0.0.0
+address=/gardakosto.wixsite.com/0.0.0.0
+address=/geemiioilogin.gitbook.io/0.0.0.0
+address=/guptanikshay.github.io/0.0.0.0
+address=/gyxgxuu.wixsite.com/0.0.0.0
+address=/h5.z3v2.com/0.0.0.0
+address=/hajjsj.top/0.0.0.0
+address=/hamza-nawaz.github.io/0.0.0.0
+address=/havkeye14.wixsite.com/0.0.0.0
+address=/hfhfyejkwsu.wixsite.com/0.0.0.0
+address=/hjdnshu.wixsite.com/0.0.0.0
+address=/hollykim.com/0.0.0.0
+address=/homemailweb-608850.weeblysite.com/0.0.0.0
+address=/htitofjpve.club/0.0.0.0
+address=/huynguyen2k.github.io/0.0.0.0
+address=/icontainrbbr.s3.us-west-004.backblazeb2.com/0.0.0.0
+address=/identifier-vous456.wixsite.com/0.0.0.0
+address=/ijhsk.github.io/0.0.0.0
+address=/imperia-trading.online/0.0.0.0
+address=/informed.deliverydn.top/0.0.0.0
+address=/informed.deliveryfp.top/0.0.0.0
+address=/informed.deliveryft.top/0.0.0.0
+address=/informed.deliveryhrw.top/0.0.0.0
+address=/informed.deliverywbk.top/0.0.0.0
+address=/inshatrading.com/0.0.0.0
+address=/instagram.ossamaelidrissi.com/0.0.0.0
+address=/inusualinteriorismo.com/0.0.0.0
+address=/itaufatura.github.io/0.0.0.0
+address=/itpronetwork.net/0.0.0.0
+address=/itsmdshahin.github.io/0.0.0.0
+address=/ixbuxedexw.info/0.0.0.0
+address=/jeittagrennami-1729.vercel.app/0.0.0.0
+address=/jimenezbill.wixsite.com/0.0.0.0
+address=/jordanmargaret.wixsite.com/0.0.0.0
+address=/jpmc.shieldssecuritybags.com/0.0.0.0
+address=/jrcce.shop/0.0.0.0
+address=/kdotts1.wixsite.com/0.0.0.0
+address=/kemsnwshdurut.weebly.com/0.0.0.0
+address=/large-kitchen-substantial.on-fleek.app/0.0.0.0
+address=/leipeleufreyo.vercel.app/0.0.0.0
+address=/lemedab246.wixsite.com/0.0.0.0
+address=/lightseagreen-jaguar-612987.hostingersite.com/0.0.0.0
+address=/ljsherrm.wixsite.com/0.0.0.0
+address=/lnadm.icu/0.0.0.0
+address=/locateid.com.tr/0.0.0.0
+address=/loginmailaccount1.wixsite.com/0.0.0.0
+address=/lsddndp-up.top/0.0.0.0
+address=/lve1131.wixstudio.com/0.0.0.0
+address=/lve1131.wixstudio.io/0.0.0.0
+address=/mail.8724319-coinbase.com/0.0.0.0
+address=/mail.health-status.fb-business.com/0.0.0.0
+address=/maryp6608.wixsite.com/0.0.0.0
+address=/mauttauhuttiloi.vercel.app/0.0.0.0
+address=/messagevocale888.wixsite.com/0.0.0.0
+address=/meta-mask-io.serv00.net/0.0.0.0
+address=/metaiimaaskk-login.gitbook.io/0.0.0.0
+address=/metamsik.com/0.0.0.0
+address=/miss.votingforstudents.com/0.0.0.0
+address=/mkramer03.wixsite.com/0.0.0.0
+address=/mmoom4.wixsite.com/0.0.0.0
+address=/mobileservice34.wixsite.com/0.0.0.0
+address=/monetization-violation-page.github.io/0.0.0.0
+address=/monirshouvo.github.io/0.0.0.0
+address=/morinierevolailles.wixsite.com/0.0.0.0
+address=/mtalha21.github.io/0.0.0.0
+address=/muhammedasfacknk.github.io/0.0.0.0
+address=/munnoi.github.io/0.0.0.0
+address=/myurls.bio/0.0.0.0
+address=/myvalue365.com/0.0.0.0
+address=/navicrettobro-6686.vercel.app/0.0.0.0
+address=/nbbroker.az/0.0.0.0
+address=/nesgrjahwt.guru/0.0.0.0
+address=/netfeliz.netlify.app/0.0.0.0
+address=/nfwqayckqr.ltd/0.0.0.0
+address=/notify-user-deviations.vercel.app/0.0.0.0
+address=/oasisministries.com/0.0.0.0
+address=/omar7rb1.github.io/0.0.0.0
+address=/or-obaidullah.github.io/0.0.0.0
+address=/orangveri.wixsite.com/0.0.0.0
+address=/p.usertrackehe.top/0.0.0.0
+address=/p.usertrackkum.top/0.0.0.0
+address=/p.usertrackrry.top/0.0.0.0
+address=/p.usertrackyfk.top/0.0.0.0
+address=/pajem76668.wixsite.com/0.0.0.0
+address=/pancake-frontend-dejmy38ut-chefilip.vercel.app/0.0.0.0
+address=/perso8764002.wixsite.com/0.0.0.0
+address=/phenomenal-praline-ff95b6.netlify.app/0.0.0.0
+address=/pikay13.github.io/0.0.0.0
+address=/podrimapso.wixsite.com/0.0.0.0
+address=/portal-trezr-cdn.github.io/0.0.0.0
+address=/ppruphmllx.blue/0.0.0.0
+address=/premiumember.ct.ws/0.0.0.0
+address=/preuffeddoupraki-2297.vercel.app/0.0.0.0
+address=/pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev/0.0.0.0
+address=/pub-019ceedaa0894587aa4255109af6c416.r2.dev/0.0.0.0
+address=/pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev/0.0.0.0
+address=/pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev/0.0.0.0
+address=/pub-135a4055f8454025aa2f06845da4f8d8.r2.dev/0.0.0.0
+address=/pub-140cf903de964a479f3b465e010ddb3b.r2.dev/0.0.0.0
+address=/pub-14b5071e5a78406a9a92a00be9141089.r2.dev/0.0.0.0
+address=/pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev/0.0.0.0
+address=/pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev/0.0.0.0
+address=/pub-244225b6dd0e404291c857fafd588b4f.r2.dev/0.0.0.0
+address=/pub-28e193ca593a467bbd1e0232a73a5680.r2.dev/0.0.0.0
+address=/pub-2a64f782845943beae62e9f09c473700.r2.dev/0.0.0.0
+address=/pub-34ae76b320c445628f3e2bca4a192394.r2.dev/0.0.0.0
+address=/pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev/0.0.0.0
+address=/pub-3784361eb0b640e797495d46b35ce030.r2.dev/0.0.0.0
+address=/pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev/0.0.0.0
+address=/pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev/0.0.0.0
+address=/pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev/0.0.0.0
+address=/pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev/0.0.0.0
+address=/pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev/0.0.0.0
+address=/pub-55e3e997548a46879ee19f4d494309d6.r2.dev/0.0.0.0
+address=/pub-619d0209611d4e8fb34f21726fd3b133.r2.dev/0.0.0.0
+address=/pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev/0.0.0.0
+address=/pub-668f78270889467e8af696261336536f.r2.dev/0.0.0.0
+address=/pub-69356b68f37442e0a24ceb7981f0841b.r2.dev/0.0.0.0
+address=/pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev/0.0.0.0
+address=/pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev/0.0.0.0
+address=/pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev/0.0.0.0
+address=/pub-73ee129d9ec943f785408564adcaf985.r2.dev/0.0.0.0
+address=/pub-7695c0b23019424cb779394f7a362ba8.r2.dev/0.0.0.0
+address=/pub-76bf011f31344f45bf2356e9005ac465.r2.dev/0.0.0.0
+address=/pub-7a6b99614f4b41658cd677a620b18951.r2.dev/0.0.0.0
+address=/pub-7be95ce02232456db08522b3d3c99765.r2.dev/0.0.0.0
+address=/pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev/0.0.0.0
+address=/pub-80fb550826904a048a5391946ef49a69.r2.dev/0.0.0.0
+address=/pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev/0.0.0.0
+address=/pub-83f86cbfe52f42728c26cda54824eb39.r2.dev/0.0.0.0
+address=/pub-886654e4969e42e988d48d11222c8a57.r2.dev/0.0.0.0
+address=/pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev/0.0.0.0
+address=/pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev/0.0.0.0
+address=/pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev/0.0.0.0
+address=/pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev/0.0.0.0
+address=/pub-97673970c1c145eda5e559c4f9c18f61.r2.dev/0.0.0.0
+address=/pub-9839470418254b29962dec4220c83255.r2.dev/0.0.0.0
+address=/pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev/0.0.0.0
+address=/pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev/0.0.0.0
+address=/pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev/0.0.0.0
+address=/pub-a017bd9f9dc6498183af41770490c482.r2.dev/0.0.0.0
+address=/pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev/0.0.0.0
+address=/pub-aa456431547a4e28948699d7c6a22006.r2.dev/0.0.0.0
+address=/pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev/0.0.0.0
+address=/pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev/0.0.0.0
+address=/pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev/0.0.0.0
+address=/pub-cb72691642c444eb900a44aa1d8a7107.r2.dev/0.0.0.0
+address=/pub-ce8fc030252b4632959515dffef1b750.r2.dev/0.0.0.0
+address=/pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev/0.0.0.0
+address=/pub-de59803496c8489585895b6917266e7c.r2.dev/0.0.0.0
+address=/pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev/0.0.0.0
+address=/pub-ebb47370c13740ef9014f6bba927d946.r2.dev/0.0.0.0
+address=/pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev/0.0.0.0
+address=/pub-f7edd89a736e48428172001b0b1906fe.r2.dev/0.0.0.0
+address=/pub-fc37d2d339714056b7f16368b49ae532.r2.dev/0.0.0.0
+address=/pub-fd5baa54f2714f068701be4a7563f2de.r2.dev/0.0.0.0
+address=/pub-fef94e8fd76842a4818865dd78ef618f.r2.dev/0.0.0.0
+address=/puvomattipro.vercel.app/0.0.0.0
+address=/qfbspeclmg.bond/0.0.0.0
+address=/qowii.top/0.0.0.0
+address=/quiz.vidio.com.user3.hehdin.us.kg/0.0.0.0
+address=/radhikamd.github.io/0.0.0.0
+address=/raiyone.cc/0.0.0.0
+address=/rayatrecruitment.com/0.0.0.0
+address=/rectifcentrefdeptrescu.weebly.com/0.0.0.0
+address=/rekruitmenttjwtt.vip-media.web.id/0.0.0.0
+address=/resolverpad.dev/0.0.0.0
+address=/reward-webconnect.pages.dev/0.0.0.0
+address=/roberthood.net/0.0.0.0
+address=/rtm-att.directly.com/0.0.0.0
+address=/ruthah9.wixsite.com/0.0.0.0
+address=/rwhjdb.icu/0.0.0.0
+address=/s.eu.premiumisp.net/0.0.0.0
+address=/s.team-a.cam/0.0.0.0
+address=/s080rjhdn.top/0.0.0.0
+address=/salmanfarsi01.github.io/0.0.0.0
+address=/santanderpod.globalizeme-dublin2.co.uk/0.0.0.0
+address=/sedosexu.wixsite.com/0.0.0.0
+address=/seller.tksalem.com/0.0.0.0
+address=/server.2rk3.com/0.0.0.0
+address=/server.6avj.com/0.0.0.0
+address=/server.dgm0.com/0.0.0.0
+address=/server.k6dz.com/0.0.0.0
+address=/server.pxs7.com/0.0.0.0
+address=/seunelvis1.github.io/0.0.0.0
+address=/shanky0.github.io/0.0.0.0
+address=/sjhdoirrsjx.wixsite.com/0.0.0.0
+address=/smgolamalif.github.io/0.0.0.0
+address=/smsmmsernorepls.wixsite.com/0.0.0.0
+address=/soumya252000.github.io/0.0.0.0
+address=/steam.communityartlist.com/0.0.0.0
+address=/steam.workshopgraphy.com/0.0.0.0
+address=/steamcommuitty.com/0.0.0.0
+address=/steamcommunmutly.com/0.0.0.0
+address=/steamcomunutty.com/0.0.0.0
+address=/steamconmumity.com/0.0.0.0
+address=/steeamcommnity.com/0.0.0.0
+address=/stephen55687.github.io/0.0.0.0
+address=/stevencrews.com/0.0.0.0
+address=/submit-dispute-form.github.io/0.0.0.0
+address=/sultan-raza.github.io/0.0.0.0
+address=/sumagayathri-999.github.io/0.0.0.0
+address=/support-verify-page.com/0.0.0.0
+address=/supports-center-communityhelp.cloud/0.0.0.0
+address=/svckhc.wixsite.com/0.0.0.0
+address=/swatteam219.wixsite.com/0.0.0.0
+address=/taher-mohamed-ahmed-saad.github.io/0.0.0.0
+address=/taiegrma.gold/0.0.0.0
+address=/tairgam.chat/0.0.0.0
+address=/tairgam.fund/0.0.0.0
+address=/tairgam.show/0.0.0.0
+address=/tairgam.zone/0.0.0.0
+address=/talergam.live/0.0.0.0
+address=/talergam.red/0.0.0.0
+address=/talergam.shopping/0.0.0.0
+address=/talergam.today/0.0.0.0
+address=/tanfupikyx.monster/0.0.0.0
+address=/tcsktjtl.icu/0.0.0.0
+address=/technoindiagroup.com/0.0.0.0
+address=/tecmachine.com.br/0.0.0.0
+address=/teiagram.group/0.0.0.0
+address=/teiagram.red/0.0.0.0
+address=/teiagram.zone/0.0.0.0
+address=/teiegrma.cab/0.0.0.0
+address=/teiegrma.design/0.0.0.0
+address=/teiegrrm.blue/0.0.0.0
+address=/teiegrrm.today/0.0.0.0
+address=/telargam.city/0.0.0.0
+address=/telargam.cloud/0.0.0.0
+address=/telargam.college/0.0.0.0
+address=/telargam.tax/0.0.0.0
+address=/telegram-safe.cc/0.0.0.0
+address=/telegrrm.monster/0.0.0.0
+address=/telegrrm.xin/0.0.0.0
+address=/telemlp-omsz.icu/0.0.0.0
+address=/teleqrma.show/0.0.0.0
+address=/telezelm-lbhg.icu/0.0.0.0
+address=/tellmeliu.github.io/0.0.0.0
+address=/terfanfranck.wixsite.com/0.0.0.0
+address=/tienda-linea7.com/0.0.0.0
+address=/tienda-linea9.com/0.0.0.0
+address=/tiktok.fhinek.com/0.0.0.0
+address=/tiktokkjshop.com/0.0.0.0
+address=/tiktokmax3.vip/0.0.0.0
+address=/troubadeihati-9272.vercel.app/0.0.0.0
+address=/tysmbdpz.icu/0.0.0.0
+address=/u-pphholfd.godaddysites.com/0.0.0.0
+address=/ultrafima.com/0.0.0.0
+address=/uphold-loges.github.io/0.0.0.0
+address=/urbexine.shop/0.0.0.0
+address=/urmilagome.github.io/0.0.0.0
+address=/user1.hehdin.us.kg/0.0.0.0
+address=/username895.wixsite.com/0.0.0.0
+address=/usps.com-parceliutxb.vip/0.0.0.0
+address=/usps.com-parceliutxc.vip/0.0.0.0
+address=/usps.com-parceliutxe.vip/0.0.0.0
+address=/usps.com-parceliutxg.vip/0.0.0.0
+address=/usps.com-parceljzuwb.vip/0.0.0.0
+address=/usps.com-parceljzuwc.vip/0.0.0.0
+address=/usps.com-trackaaw.top/0.0.0.0
+address=/usps.com-trackaba.top/0.0.0.0
+address=/usps.com-trackakt.top/0.0.0.0
+address=/usps.com-trackartjlo.top/0.0.0.0
+address=/usps.com-trackbpg.top/0.0.0.0
+address=/usps.com-trackdex.top/0.0.0.0
+address=/usps.com-trackeaj.top/0.0.0.0
+address=/usps.com-trackemh.top/0.0.0.0
+address=/usps.com-trackevj.top/0.0.0.0
+address=/usps.com-trackfnl.top/0.0.0.0
+address=/usps.com-trackghi.top/0.0.0.0
+address=/usps.com-trackgix.top/0.0.0.0
+address=/usps.com-trackgna.top/0.0.0.0
+address=/usps.com-trackhal.top/0.0.0.0
+address=/usps.com-trackicg.top/0.0.0.0
+address=/usps.com-trackidp.top/0.0.0.0
+address=/usps.com-trackiiz.top/0.0.0.0
+address=/usps.com-tracking-helpnko.cc/0.0.0.0
+address=/usps.com-tracking-helptom.cc/0.0.0.0
+address=/usps.com-tracking-helptot.cc/0.0.0.0
+address=/usps.com-tracking-helptwo.cc/0.0.0.0
+address=/usps.com-tracking-helptzo.cc/0.0.0.0
+address=/usps.com-trackipxdnh.top/0.0.0.0
+address=/usps.com-trackius.top/0.0.0.0
+address=/usps.com-trackjgc.top/0.0.0.0
+address=/usps.com-trackjkh.top/0.0.0.0
+address=/usps.com-trackkys.top/0.0.0.0
+address=/usps.com-trackloi.top/0.0.0.0
+address=/usps.com-tracklpe.top/0.0.0.0
+address=/usps.com-tracklvr.top/0.0.0.0
+address=/usps.com-trackmjx.top/0.0.0.0
+address=/usps.com-trackmli.top/0.0.0.0
+address=/usps.com-trackmvd.top/0.0.0.0
+address=/usps.com-tracknsr.top/0.0.0.0
+address=/usps.com-trackodf.top/0.0.0.0
+address=/usps.com-trackogx.top/0.0.0.0
+address=/usps.com-trackonp.top/0.0.0.0
+address=/usps.com-trackpgl.top/0.0.0.0
+address=/usps.com-trackpoq.top/0.0.0.0
+address=/usps.com-trackpsx.top/0.0.0.0
+address=/usps.com-trackpwg.top/0.0.0.0
+address=/usps.com-trackree.top/0.0.0.0
+address=/usps.com-tracksbw.top/0.0.0.0
+address=/usps.com-tracktdz.top/0.0.0.0
+address=/usps.com-tracktmb.top/0.0.0.0
+address=/usps.com-tracktus.top/0.0.0.0
+address=/usps.com-tracktyi.top/0.0.0.0
+address=/usps.com-trackuir.top/0.0.0.0
+address=/usps.com-trackuve.top/0.0.0.0
+address=/usps.com-trackvbw.top/0.0.0.0
+address=/usps.com-trackvkt.top/0.0.0.0
+address=/usps.com-trackvoi.top/0.0.0.0
+address=/usps.com-trackwil.top/0.0.0.0
+address=/usps.com-trackxgj.top/0.0.0.0
+address=/usps.com-trackxkt.top/0.0.0.0
+address=/usps.com-trackxrz.top/0.0.0.0
+address=/usps.com-trackxxh.top/0.0.0.0
+address=/usps.com-trackzyy.top/0.0.0.0
+address=/uspsservicetrack.blogspot.com.cy/0.0.0.0
+address=/veeradalaw.com/0.0.0.0
+address=/vmgmjfbz.icu/0.0.0.0
+address=/wakakehuteu-9247.vercel.app/0.0.0.0
+address=/walletcazonnect.gitbook.io/0.0.0.0
+address=/wap.brwj.cn/0.0.0.0
+address=/webmailservice08.wixsite.com/0.0.0.0
+address=/wellyngtonkuhn.github.io/0.0.0.0
+address=/whare.100webspace.net/0.0.0.0
+address=/wwiiskdkdnffnjuca.weebly.com/0.0.0.0
+address=/www-degelyehuda-org-il.filesusr.com/0.0.0.0
+address=/wwwteiegramwor.xyz/0.0.0.0
+address=/xavier6709.github.io/0.0.0.0
+address=/xn--d1aqfkf.xn--p1ai/0.0.0.0
+address=/xox-exe.github.io/0.0.0.0
+address=/yairix.github.io/0.0.0.0
+address=/yarakobanrhg.wpenginepowered.com/0.0.0.0
+address=/zattajakoixa-8559.vercel.app/0.0.0.0
+address=/zerotelegram.pl/0.0.0.0
+address=/zetriyauffivou-1144.vercel.app/0.0.0.0
+address=/zkybgfddvl.shop/0.0.0.0
+address=/zures.com.br/0.0.0.0
diff --git a/phishing-filter-dnsmasq.conf.br b/phishing-filter-dnsmasq.conf.br
new file mode 100644
index 000000000..56a54a177
Binary files /dev/null and b/phishing-filter-dnsmasq.conf.br differ
diff --git a/phishing-filter-dnsmasq.conf.gz b/phishing-filter-dnsmasq.conf.gz
new file mode 100644
index 000000000..db8881fdc
Binary files /dev/null and b/phishing-filter-dnsmasq.conf.gz differ
diff --git a/phishing-filter-domains.txt b/phishing-filter-domains.txt
new file mode 100644
index 000000000..e7b2cb36c
--- /dev/null
+++ b/phishing-filter-domains.txt
@@ -0,0 +1,449 @@
+# Title: Phishing Domains Blocklist
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+23cssahil.github.io
+3reshma.github.io
+67533177.ishg.za.com
+67780581.ishg.za.com
+72386989.ishg.za.com
+a2i9s4y.space
+a3.ikansalasq.com
+acederma.com
+ahhhh.pe.kr
+airbnb.sync114.com
+aisths.cc
+akanksha3012.github.io
+aks34.github.io
+alessandrodiana.it
+amamz-product.click
+amazonnu.co
+amreeth.github.io
+anjalijha167.github.io
+apricotmelly.wixstudio.com
+apricotmelly.wixstudio.io
+arpitgoel889.github.io
+art-tour.net
+artofbaseball.net
+ashishmaurya73.github.io
+askewi3010.wixsite.com
+asupanvviptelegram.my.id
+atobi432.wixsite.com
+attcom-103887.weebly.com
+attisat.gr
+attvalidatekindly.weebly.com
+attyahoomai.wixsite.com
+autoscurt24.de
+bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz
+bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link
+bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link
+bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link
+bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link
+ballefabrouyau-9112.vercel.app
+bantuan-tunai-mystrx.jobs8.my.id
+baradua.it
+barberalonzo29.wixsite.com
+basil0303.github.io
+bernardamos422.wixsite.com
+bettinamarks.com
+bharathi1809.github.io
+blue-tick-help.vercel.app
+bntuan-dana4-resmii.danytx.web.id
+boapremium-001-site1.ptempurl.com
+bojanawauceu-3394.vercel.app
+bolipost.cc
+bomomvpfo.club
+bountyhunterpc.github.io
+bpqxqtuig.club
+brbrgsnyqwer.wixsite.com
+brwj.cn
+bt.daftpage.com
+cache.netflix.com.user12.sanasta.us.kg
+carolesheridan4.wixsite.com
+chance-to-availbale-free-badge.vercel.app
+chiragrajoria.github.io
+cid-phisher.github.io
+clariveh.baby
+clifforddaniells.wixsite.com
+coinbasefaqdesk.com
+coiniiobisaecoins.azurewebsites.net
+confirmationhelpmeta.io.vn
+cpisafety.che.buet.ac.bd
+cricketbettingpro.com
+cubixpro.com
+currentlyatt810.weebly.com
+dalipthukral0.wixsite.com
+danaindonesia.bantuan-resmi.top
+deepxzkdn.deadth.sbs
+descounsell.wixsite.com
+detlxc.master78lite.com
+devshubhamjadav.github.io
+dfxzsdf.wixsite.com
+dhanushr24.github.io
+dianecadei8.wixsite.com
+did57sauveton.wixsite.com
+dl.mod30t.ir
+dmgeuntv.icu
+doloribus-voluptat-space.wpkubio.com
+donrichie781.wixsite.com
+donttolinii.wixsite.com
+dtn-3c.vercel.app
+duvetrexuprau.vercel.app
+ebayqi.shop
+eirxkrdgtk.duckdns.org
+energizahn.dicosur.net
+esumbunk.cc
+esunbonk.cc
+everestmotors.com.np
+evqjteoscz.link
+exoduswallet.cn.com
+facebook-tw-web.azurewebsites.net
+facebookverifycenter.com.de
+faceit.sunbim.pro
+faizankhan0408.github.io
+fauexpfv.icu
+feprk.sbs
+formsly-form.web.app
+free-5573726.webadorsite.com
+fsdfjeifls.click
+galiciacgu.com.ar
+gardakosto.wixsite.com
+geemiioilogin.gitbook.io
+guptanikshay.github.io
+gyxgxuu.wixsite.com
+h5.z3v2.com
+hajjsj.top
+hamza-nawaz.github.io
+havkeye14.wixsite.com
+hfhfyejkwsu.wixsite.com
+hjdnshu.wixsite.com
+hollykim.com
+homemailweb-608850.weeblysite.com
+htitofjpve.club
+huynguyen2k.github.io
+icontainrbbr.s3.us-west-004.backblazeb2.com
+identifier-vous456.wixsite.com
+ijhsk.github.io
+imperia-trading.online
+informed.deliverydn.top
+informed.deliveryfp.top
+informed.deliveryft.top
+informed.deliveryhrw.top
+informed.deliverywbk.top
+inshatrading.com
+instagram.ossamaelidrissi.com
+inusualinteriorismo.com
+itaufatura.github.io
+itpronetwork.net
+itsmdshahin.github.io
+ixbuxedexw.info
+jeittagrennami-1729.vercel.app
+jimenezbill.wixsite.com
+jordanmargaret.wixsite.com
+jpmc.shieldssecuritybags.com
+jrcce.shop
+kdotts1.wixsite.com
+kemsnwshdurut.weebly.com
+large-kitchen-substantial.on-fleek.app
+leipeleufreyo.vercel.app
+lemedab246.wixsite.com
+lightseagreen-jaguar-612987.hostingersite.com
+ljsherrm.wixsite.com
+lnadm.icu
+locateid.com.tr
+loginmailaccount1.wixsite.com
+lsddndp-up.top
+lve1131.wixstudio.com
+lve1131.wixstudio.io
+mail.8724319-coinbase.com
+mail.health-status.fb-business.com
+maryp6608.wixsite.com
+mauttauhuttiloi.vercel.app
+messagevocale888.wixsite.com
+meta-mask-io.serv00.net
+metaiimaaskk-login.gitbook.io
+metamsik.com
+miss.votingforstudents.com
+mkramer03.wixsite.com
+mmoom4.wixsite.com
+mobileservice34.wixsite.com
+monetization-violation-page.github.io
+monirshouvo.github.io
+morinierevolailles.wixsite.com
+mtalha21.github.io
+muhammedasfacknk.github.io
+munnoi.github.io
+myurls.bio
+myvalue365.com
+navicrettobro-6686.vercel.app
+nbbroker.az
+nesgrjahwt.guru
+netfeliz.netlify.app
+nfwqayckqr.ltd
+notify-user-deviations.vercel.app
+oasisministries.com
+omar7rb1.github.io
+or-obaidullah.github.io
+orangveri.wixsite.com
+p.usertrackehe.top
+p.usertrackkum.top
+p.usertrackrry.top
+p.usertrackyfk.top
+pajem76668.wixsite.com
+pancake-frontend-dejmy38ut-chefilip.vercel.app
+perso8764002.wixsite.com
+phenomenal-praline-ff95b6.netlify.app
+pikay13.github.io
+podrimapso.wixsite.com
+portal-trezr-cdn.github.io
+ppruphmllx.blue
+premiumember.ct.ws
+preuffeddoupraki-2297.vercel.app
+pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev
+pub-019ceedaa0894587aa4255109af6c416.r2.dev
+pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev
+pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev
+pub-135a4055f8454025aa2f06845da4f8d8.r2.dev
+pub-140cf903de964a479f3b465e010ddb3b.r2.dev
+pub-14b5071e5a78406a9a92a00be9141089.r2.dev
+pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev
+pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev
+pub-244225b6dd0e404291c857fafd588b4f.r2.dev
+pub-28e193ca593a467bbd1e0232a73a5680.r2.dev
+pub-2a64f782845943beae62e9f09c473700.r2.dev
+pub-34ae76b320c445628f3e2bca4a192394.r2.dev
+pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev
+pub-3784361eb0b640e797495d46b35ce030.r2.dev
+pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev
+pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev
+pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev
+pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev
+pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev
+pub-55e3e997548a46879ee19f4d494309d6.r2.dev
+pub-619d0209611d4e8fb34f21726fd3b133.r2.dev
+pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev
+pub-668f78270889467e8af696261336536f.r2.dev
+pub-69356b68f37442e0a24ceb7981f0841b.r2.dev
+pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev
+pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev
+pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev
+pub-73ee129d9ec943f785408564adcaf985.r2.dev
+pub-7695c0b23019424cb779394f7a362ba8.r2.dev
+pub-76bf011f31344f45bf2356e9005ac465.r2.dev
+pub-7a6b99614f4b41658cd677a620b18951.r2.dev
+pub-7be95ce02232456db08522b3d3c99765.r2.dev
+pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev
+pub-80fb550826904a048a5391946ef49a69.r2.dev
+pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev
+pub-83f86cbfe52f42728c26cda54824eb39.r2.dev
+pub-886654e4969e42e988d48d11222c8a57.r2.dev
+pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev
+pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev
+pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev
+pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev
+pub-97673970c1c145eda5e559c4f9c18f61.r2.dev
+pub-9839470418254b29962dec4220c83255.r2.dev
+pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev
+pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev
+pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev
+pub-a017bd9f9dc6498183af41770490c482.r2.dev
+pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev
+pub-aa456431547a4e28948699d7c6a22006.r2.dev
+pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev
+pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev
+pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev
+pub-cb72691642c444eb900a44aa1d8a7107.r2.dev
+pub-ce8fc030252b4632959515dffef1b750.r2.dev
+pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev
+pub-de59803496c8489585895b6917266e7c.r2.dev
+pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev
+pub-ebb47370c13740ef9014f6bba927d946.r2.dev
+pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev
+pub-f7edd89a736e48428172001b0b1906fe.r2.dev
+pub-fc37d2d339714056b7f16368b49ae532.r2.dev
+pub-fd5baa54f2714f068701be4a7563f2de.r2.dev
+pub-fef94e8fd76842a4818865dd78ef618f.r2.dev
+puvomattipro.vercel.app
+qfbspeclmg.bond
+qowii.top
+quiz.vidio.com.user3.hehdin.us.kg
+radhikamd.github.io
+raiyone.cc
+rayatrecruitment.com
+rectifcentrefdeptrescu.weebly.com
+rekruitmenttjwtt.vip-media.web.id
+resolverpad.dev
+reward-webconnect.pages.dev
+roberthood.net
+rtm-att.directly.com
+ruthah9.wixsite.com
+rwhjdb.icu
+s.eu.premiumisp.net
+s.team-a.cam
+s080rjhdn.top
+salmanfarsi01.github.io
+santanderpod.globalizeme-dublin2.co.uk
+sedosexu.wixsite.com
+seller.tksalem.com
+server.2rk3.com
+server.6avj.com
+server.dgm0.com
+server.k6dz.com
+server.pxs7.com
+seunelvis1.github.io
+shanky0.github.io
+sjhdoirrsjx.wixsite.com
+smgolamalif.github.io
+smsmmsernorepls.wixsite.com
+soumya252000.github.io
+steam.communityartlist.com
+steam.workshopgraphy.com
+steamcommuitty.com
+steamcommunmutly.com
+steamcomunutty.com
+steamconmumity.com
+steeamcommnity.com
+stephen55687.github.io
+stevencrews.com
+submit-dispute-form.github.io
+sultan-raza.github.io
+sumagayathri-999.github.io
+support-verify-page.com
+supports-center-communityhelp.cloud
+svckhc.wixsite.com
+swatteam219.wixsite.com
+taher-mohamed-ahmed-saad.github.io
+taiegrma.gold
+tairgam.chat
+tairgam.fund
+tairgam.show
+tairgam.zone
+talergam.live
+talergam.red
+talergam.shopping
+talergam.today
+tanfupikyx.monster
+tcsktjtl.icu
+technoindiagroup.com
+tecmachine.com.br
+teiagram.group
+teiagram.red
+teiagram.zone
+teiegrma.cab
+teiegrma.design
+teiegrrm.blue
+teiegrrm.today
+telargam.city
+telargam.cloud
+telargam.college
+telargam.tax
+telegram-safe.cc
+telegrrm.monster
+telegrrm.xin
+telemlp-omsz.icu
+teleqrma.show
+telezelm-lbhg.icu
+tellmeliu.github.io
+terfanfranck.wixsite.com
+tienda-linea7.com
+tienda-linea9.com
+tiktok.fhinek.com
+tiktokkjshop.com
+tiktokmax3.vip
+troubadeihati-9272.vercel.app
+tysmbdpz.icu
+u-pphholfd.godaddysites.com
+ultrafima.com
+uphold-loges.github.io
+urbexine.shop
+urmilagome.github.io
+user1.hehdin.us.kg
+username895.wixsite.com
+usps.com-parceliutxb.vip
+usps.com-parceliutxc.vip
+usps.com-parceliutxe.vip
+usps.com-parceliutxg.vip
+usps.com-parceljzuwb.vip
+usps.com-parceljzuwc.vip
+usps.com-trackaaw.top
+usps.com-trackaba.top
+usps.com-trackakt.top
+usps.com-trackartjlo.top
+usps.com-trackbpg.top
+usps.com-trackdex.top
+usps.com-trackeaj.top
+usps.com-trackemh.top
+usps.com-trackevj.top
+usps.com-trackfnl.top
+usps.com-trackghi.top
+usps.com-trackgix.top
+usps.com-trackgna.top
+usps.com-trackhal.top
+usps.com-trackicg.top
+usps.com-trackidp.top
+usps.com-trackiiz.top
+usps.com-tracking-helpnko.cc
+usps.com-tracking-helptom.cc
+usps.com-tracking-helptot.cc
+usps.com-tracking-helptwo.cc
+usps.com-tracking-helptzo.cc
+usps.com-trackipxdnh.top
+usps.com-trackius.top
+usps.com-trackjgc.top
+usps.com-trackjkh.top
+usps.com-trackkys.top
+usps.com-trackloi.top
+usps.com-tracklpe.top
+usps.com-tracklvr.top
+usps.com-trackmjx.top
+usps.com-trackmli.top
+usps.com-trackmvd.top
+usps.com-tracknsr.top
+usps.com-trackodf.top
+usps.com-trackogx.top
+usps.com-trackonp.top
+usps.com-trackpgl.top
+usps.com-trackpoq.top
+usps.com-trackpsx.top
+usps.com-trackpwg.top
+usps.com-trackree.top
+usps.com-tracksbw.top
+usps.com-tracktdz.top
+usps.com-tracktmb.top
+usps.com-tracktus.top
+usps.com-tracktyi.top
+usps.com-trackuir.top
+usps.com-trackuve.top
+usps.com-trackvbw.top
+usps.com-trackvkt.top
+usps.com-trackvoi.top
+usps.com-trackwil.top
+usps.com-trackxgj.top
+usps.com-trackxkt.top
+usps.com-trackxrz.top
+usps.com-trackxxh.top
+usps.com-trackzyy.top
+uspsservicetrack.blogspot.com.cy
+veeradalaw.com
+vmgmjfbz.icu
+wakakehuteu-9247.vercel.app
+walletcazonnect.gitbook.io
+wap.brwj.cn
+webmailservice08.wixsite.com
+wellyngtonkuhn.github.io
+whare.100webspace.net
+wwiiskdkdnffnjuca.weebly.com
+www-degelyehuda-org-il.filesusr.com
+wwwteiegramwor.xyz
+xavier6709.github.io
+xn--d1aqfkf.xn--p1ai
+xox-exe.github.io
+yairix.github.io
+yarakobanrhg.wpenginepowered.com
+zattajakoixa-8559.vercel.app
+zerotelegram.pl
+zetriyauffivou-1144.vercel.app
+zkybgfddvl.shop
+zures.com.br
diff --git a/phishing-filter-domains.txt.br b/phishing-filter-domains.txt.br
new file mode 100644
index 000000000..b56e03e21
Binary files /dev/null and b/phishing-filter-domains.txt.br differ
diff --git a/phishing-filter-domains.txt.gz b/phishing-filter-domains.txt.gz
new file mode 100644
index 000000000..bd30fa8cd
Binary files /dev/null and b/phishing-filter-domains.txt.gz differ
diff --git a/phishing-filter-hosts.txt b/phishing-filter-hosts.txt
new file mode 100644
index 000000000..63a5c3f1d
--- /dev/null
+++ b/phishing-filter-hosts.txt
@@ -0,0 +1,449 @@
+# Title: Phishing Hosts Blocklist
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+0.0.0.0 23cssahil.github.io
+0.0.0.0 3reshma.github.io
+0.0.0.0 67533177.ishg.za.com
+0.0.0.0 67780581.ishg.za.com
+0.0.0.0 72386989.ishg.za.com
+0.0.0.0 a2i9s4y.space
+0.0.0.0 a3.ikansalasq.com
+0.0.0.0 acederma.com
+0.0.0.0 ahhhh.pe.kr
+0.0.0.0 airbnb.sync114.com
+0.0.0.0 aisths.cc
+0.0.0.0 akanksha3012.github.io
+0.0.0.0 aks34.github.io
+0.0.0.0 alessandrodiana.it
+0.0.0.0 amamz-product.click
+0.0.0.0 amazonnu.co
+0.0.0.0 amreeth.github.io
+0.0.0.0 anjalijha167.github.io
+0.0.0.0 apricotmelly.wixstudio.com
+0.0.0.0 apricotmelly.wixstudio.io
+0.0.0.0 arpitgoel889.github.io
+0.0.0.0 art-tour.net
+0.0.0.0 artofbaseball.net
+0.0.0.0 ashishmaurya73.github.io
+0.0.0.0 askewi3010.wixsite.com
+0.0.0.0 asupanvviptelegram.my.id
+0.0.0.0 atobi432.wixsite.com
+0.0.0.0 attcom-103887.weebly.com
+0.0.0.0 attisat.gr
+0.0.0.0 attvalidatekindly.weebly.com
+0.0.0.0 attyahoomai.wixsite.com
+0.0.0.0 autoscurt24.de
+0.0.0.0 bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz
+0.0.0.0 bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link
+0.0.0.0 bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link
+0.0.0.0 bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link
+0.0.0.0 bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link
+0.0.0.0 ballefabrouyau-9112.vercel.app
+0.0.0.0 bantuan-tunai-mystrx.jobs8.my.id
+0.0.0.0 baradua.it
+0.0.0.0 barberalonzo29.wixsite.com
+0.0.0.0 basil0303.github.io
+0.0.0.0 bernardamos422.wixsite.com
+0.0.0.0 bettinamarks.com
+0.0.0.0 bharathi1809.github.io
+0.0.0.0 blue-tick-help.vercel.app
+0.0.0.0 bntuan-dana4-resmii.danytx.web.id
+0.0.0.0 boapremium-001-site1.ptempurl.com
+0.0.0.0 bojanawauceu-3394.vercel.app
+0.0.0.0 bolipost.cc
+0.0.0.0 bomomvpfo.club
+0.0.0.0 bountyhunterpc.github.io
+0.0.0.0 bpqxqtuig.club
+0.0.0.0 brbrgsnyqwer.wixsite.com
+0.0.0.0 brwj.cn
+0.0.0.0 bt.daftpage.com
+0.0.0.0 cache.netflix.com.user12.sanasta.us.kg
+0.0.0.0 carolesheridan4.wixsite.com
+0.0.0.0 chance-to-availbale-free-badge.vercel.app
+0.0.0.0 chiragrajoria.github.io
+0.0.0.0 cid-phisher.github.io
+0.0.0.0 clariveh.baby
+0.0.0.0 clifforddaniells.wixsite.com
+0.0.0.0 coinbasefaqdesk.com
+0.0.0.0 coiniiobisaecoins.azurewebsites.net
+0.0.0.0 confirmationhelpmeta.io.vn
+0.0.0.0 cpisafety.che.buet.ac.bd
+0.0.0.0 cricketbettingpro.com
+0.0.0.0 cubixpro.com
+0.0.0.0 currentlyatt810.weebly.com
+0.0.0.0 dalipthukral0.wixsite.com
+0.0.0.0 danaindonesia.bantuan-resmi.top
+0.0.0.0 deepxzkdn.deadth.sbs
+0.0.0.0 descounsell.wixsite.com
+0.0.0.0 detlxc.master78lite.com
+0.0.0.0 devshubhamjadav.github.io
+0.0.0.0 dfxzsdf.wixsite.com
+0.0.0.0 dhanushr24.github.io
+0.0.0.0 dianecadei8.wixsite.com
+0.0.0.0 did57sauveton.wixsite.com
+0.0.0.0 dl.mod30t.ir
+0.0.0.0 dmgeuntv.icu
+0.0.0.0 doloribus-voluptat-space.wpkubio.com
+0.0.0.0 donrichie781.wixsite.com
+0.0.0.0 donttolinii.wixsite.com
+0.0.0.0 dtn-3c.vercel.app
+0.0.0.0 duvetrexuprau.vercel.app
+0.0.0.0 ebayqi.shop
+0.0.0.0 eirxkrdgtk.duckdns.org
+0.0.0.0 energizahn.dicosur.net
+0.0.0.0 esumbunk.cc
+0.0.0.0 esunbonk.cc
+0.0.0.0 everestmotors.com.np
+0.0.0.0 evqjteoscz.link
+0.0.0.0 exoduswallet.cn.com
+0.0.0.0 facebook-tw-web.azurewebsites.net
+0.0.0.0 facebookverifycenter.com.de
+0.0.0.0 faceit.sunbim.pro
+0.0.0.0 faizankhan0408.github.io
+0.0.0.0 fauexpfv.icu
+0.0.0.0 feprk.sbs
+0.0.0.0 formsly-form.web.app
+0.0.0.0 free-5573726.webadorsite.com
+0.0.0.0 fsdfjeifls.click
+0.0.0.0 galiciacgu.com.ar
+0.0.0.0 gardakosto.wixsite.com
+0.0.0.0 geemiioilogin.gitbook.io
+0.0.0.0 guptanikshay.github.io
+0.0.0.0 gyxgxuu.wixsite.com
+0.0.0.0 h5.z3v2.com
+0.0.0.0 hajjsj.top
+0.0.0.0 hamza-nawaz.github.io
+0.0.0.0 havkeye14.wixsite.com
+0.0.0.0 hfhfyejkwsu.wixsite.com
+0.0.0.0 hjdnshu.wixsite.com
+0.0.0.0 hollykim.com
+0.0.0.0 homemailweb-608850.weeblysite.com
+0.0.0.0 htitofjpve.club
+0.0.0.0 huynguyen2k.github.io
+0.0.0.0 icontainrbbr.s3.us-west-004.backblazeb2.com
+0.0.0.0 identifier-vous456.wixsite.com
+0.0.0.0 ijhsk.github.io
+0.0.0.0 imperia-trading.online
+0.0.0.0 informed.deliverydn.top
+0.0.0.0 informed.deliveryfp.top
+0.0.0.0 informed.deliveryft.top
+0.0.0.0 informed.deliveryhrw.top
+0.0.0.0 informed.deliverywbk.top
+0.0.0.0 inshatrading.com
+0.0.0.0 instagram.ossamaelidrissi.com
+0.0.0.0 inusualinteriorismo.com
+0.0.0.0 itaufatura.github.io
+0.0.0.0 itpronetwork.net
+0.0.0.0 itsmdshahin.github.io
+0.0.0.0 ixbuxedexw.info
+0.0.0.0 jeittagrennami-1729.vercel.app
+0.0.0.0 jimenezbill.wixsite.com
+0.0.0.0 jordanmargaret.wixsite.com
+0.0.0.0 jpmc.shieldssecuritybags.com
+0.0.0.0 jrcce.shop
+0.0.0.0 kdotts1.wixsite.com
+0.0.0.0 kemsnwshdurut.weebly.com
+0.0.0.0 large-kitchen-substantial.on-fleek.app
+0.0.0.0 leipeleufreyo.vercel.app
+0.0.0.0 lemedab246.wixsite.com
+0.0.0.0 lightseagreen-jaguar-612987.hostingersite.com
+0.0.0.0 ljsherrm.wixsite.com
+0.0.0.0 lnadm.icu
+0.0.0.0 locateid.com.tr
+0.0.0.0 loginmailaccount1.wixsite.com
+0.0.0.0 lsddndp-up.top
+0.0.0.0 lve1131.wixstudio.com
+0.0.0.0 lve1131.wixstudio.io
+0.0.0.0 mail.8724319-coinbase.com
+0.0.0.0 mail.health-status.fb-business.com
+0.0.0.0 maryp6608.wixsite.com
+0.0.0.0 mauttauhuttiloi.vercel.app
+0.0.0.0 messagevocale888.wixsite.com
+0.0.0.0 meta-mask-io.serv00.net
+0.0.0.0 metaiimaaskk-login.gitbook.io
+0.0.0.0 metamsik.com
+0.0.0.0 miss.votingforstudents.com
+0.0.0.0 mkramer03.wixsite.com
+0.0.0.0 mmoom4.wixsite.com
+0.0.0.0 mobileservice34.wixsite.com
+0.0.0.0 monetization-violation-page.github.io
+0.0.0.0 monirshouvo.github.io
+0.0.0.0 morinierevolailles.wixsite.com
+0.0.0.0 mtalha21.github.io
+0.0.0.0 muhammedasfacknk.github.io
+0.0.0.0 munnoi.github.io
+0.0.0.0 myurls.bio
+0.0.0.0 myvalue365.com
+0.0.0.0 navicrettobro-6686.vercel.app
+0.0.0.0 nbbroker.az
+0.0.0.0 nesgrjahwt.guru
+0.0.0.0 netfeliz.netlify.app
+0.0.0.0 nfwqayckqr.ltd
+0.0.0.0 notify-user-deviations.vercel.app
+0.0.0.0 oasisministries.com
+0.0.0.0 omar7rb1.github.io
+0.0.0.0 or-obaidullah.github.io
+0.0.0.0 orangveri.wixsite.com
+0.0.0.0 p.usertrackehe.top
+0.0.0.0 p.usertrackkum.top
+0.0.0.0 p.usertrackrry.top
+0.0.0.0 p.usertrackyfk.top
+0.0.0.0 pajem76668.wixsite.com
+0.0.0.0 pancake-frontend-dejmy38ut-chefilip.vercel.app
+0.0.0.0 perso8764002.wixsite.com
+0.0.0.0 phenomenal-praline-ff95b6.netlify.app
+0.0.0.0 pikay13.github.io
+0.0.0.0 podrimapso.wixsite.com
+0.0.0.0 portal-trezr-cdn.github.io
+0.0.0.0 ppruphmllx.blue
+0.0.0.0 premiumember.ct.ws
+0.0.0.0 preuffeddoupraki-2297.vercel.app
+0.0.0.0 pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev
+0.0.0.0 pub-019ceedaa0894587aa4255109af6c416.r2.dev
+0.0.0.0 pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev
+0.0.0.0 pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev
+0.0.0.0 pub-135a4055f8454025aa2f06845da4f8d8.r2.dev
+0.0.0.0 pub-140cf903de964a479f3b465e010ddb3b.r2.dev
+0.0.0.0 pub-14b5071e5a78406a9a92a00be9141089.r2.dev
+0.0.0.0 pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev
+0.0.0.0 pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev
+0.0.0.0 pub-244225b6dd0e404291c857fafd588b4f.r2.dev
+0.0.0.0 pub-28e193ca593a467bbd1e0232a73a5680.r2.dev
+0.0.0.0 pub-2a64f782845943beae62e9f09c473700.r2.dev
+0.0.0.0 pub-34ae76b320c445628f3e2bca4a192394.r2.dev
+0.0.0.0 pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev
+0.0.0.0 pub-3784361eb0b640e797495d46b35ce030.r2.dev
+0.0.0.0 pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev
+0.0.0.0 pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev
+0.0.0.0 pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev
+0.0.0.0 pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev
+0.0.0.0 pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev
+0.0.0.0 pub-55e3e997548a46879ee19f4d494309d6.r2.dev
+0.0.0.0 pub-619d0209611d4e8fb34f21726fd3b133.r2.dev
+0.0.0.0 pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev
+0.0.0.0 pub-668f78270889467e8af696261336536f.r2.dev
+0.0.0.0 pub-69356b68f37442e0a24ceb7981f0841b.r2.dev
+0.0.0.0 pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev
+0.0.0.0 pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev
+0.0.0.0 pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev
+0.0.0.0 pub-73ee129d9ec943f785408564adcaf985.r2.dev
+0.0.0.0 pub-7695c0b23019424cb779394f7a362ba8.r2.dev
+0.0.0.0 pub-76bf011f31344f45bf2356e9005ac465.r2.dev
+0.0.0.0 pub-7a6b99614f4b41658cd677a620b18951.r2.dev
+0.0.0.0 pub-7be95ce02232456db08522b3d3c99765.r2.dev
+0.0.0.0 pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev
+0.0.0.0 pub-80fb550826904a048a5391946ef49a69.r2.dev
+0.0.0.0 pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev
+0.0.0.0 pub-83f86cbfe52f42728c26cda54824eb39.r2.dev
+0.0.0.0 pub-886654e4969e42e988d48d11222c8a57.r2.dev
+0.0.0.0 pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev
+0.0.0.0 pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev
+0.0.0.0 pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev
+0.0.0.0 pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev
+0.0.0.0 pub-97673970c1c145eda5e559c4f9c18f61.r2.dev
+0.0.0.0 pub-9839470418254b29962dec4220c83255.r2.dev
+0.0.0.0 pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev
+0.0.0.0 pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev
+0.0.0.0 pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev
+0.0.0.0 pub-a017bd9f9dc6498183af41770490c482.r2.dev
+0.0.0.0 pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev
+0.0.0.0 pub-aa456431547a4e28948699d7c6a22006.r2.dev
+0.0.0.0 pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev
+0.0.0.0 pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev
+0.0.0.0 pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev
+0.0.0.0 pub-cb72691642c444eb900a44aa1d8a7107.r2.dev
+0.0.0.0 pub-ce8fc030252b4632959515dffef1b750.r2.dev
+0.0.0.0 pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev
+0.0.0.0 pub-de59803496c8489585895b6917266e7c.r2.dev
+0.0.0.0 pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev
+0.0.0.0 pub-ebb47370c13740ef9014f6bba927d946.r2.dev
+0.0.0.0 pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev
+0.0.0.0 pub-f7edd89a736e48428172001b0b1906fe.r2.dev
+0.0.0.0 pub-fc37d2d339714056b7f16368b49ae532.r2.dev
+0.0.0.0 pub-fd5baa54f2714f068701be4a7563f2de.r2.dev
+0.0.0.0 pub-fef94e8fd76842a4818865dd78ef618f.r2.dev
+0.0.0.0 puvomattipro.vercel.app
+0.0.0.0 qfbspeclmg.bond
+0.0.0.0 qowii.top
+0.0.0.0 quiz.vidio.com.user3.hehdin.us.kg
+0.0.0.0 radhikamd.github.io
+0.0.0.0 raiyone.cc
+0.0.0.0 rayatrecruitment.com
+0.0.0.0 rectifcentrefdeptrescu.weebly.com
+0.0.0.0 rekruitmenttjwtt.vip-media.web.id
+0.0.0.0 resolverpad.dev
+0.0.0.0 reward-webconnect.pages.dev
+0.0.0.0 roberthood.net
+0.0.0.0 rtm-att.directly.com
+0.0.0.0 ruthah9.wixsite.com
+0.0.0.0 rwhjdb.icu
+0.0.0.0 s.eu.premiumisp.net
+0.0.0.0 s.team-a.cam
+0.0.0.0 s080rjhdn.top
+0.0.0.0 salmanfarsi01.github.io
+0.0.0.0 santanderpod.globalizeme-dublin2.co.uk
+0.0.0.0 sedosexu.wixsite.com
+0.0.0.0 seller.tksalem.com
+0.0.0.0 server.2rk3.com
+0.0.0.0 server.6avj.com
+0.0.0.0 server.dgm0.com
+0.0.0.0 server.k6dz.com
+0.0.0.0 server.pxs7.com
+0.0.0.0 seunelvis1.github.io
+0.0.0.0 shanky0.github.io
+0.0.0.0 sjhdoirrsjx.wixsite.com
+0.0.0.0 smgolamalif.github.io
+0.0.0.0 smsmmsernorepls.wixsite.com
+0.0.0.0 soumya252000.github.io
+0.0.0.0 steam.communityartlist.com
+0.0.0.0 steam.workshopgraphy.com
+0.0.0.0 steamcommuitty.com
+0.0.0.0 steamcommunmutly.com
+0.0.0.0 steamcomunutty.com
+0.0.0.0 steamconmumity.com
+0.0.0.0 steeamcommnity.com
+0.0.0.0 stephen55687.github.io
+0.0.0.0 stevencrews.com
+0.0.0.0 submit-dispute-form.github.io
+0.0.0.0 sultan-raza.github.io
+0.0.0.0 sumagayathri-999.github.io
+0.0.0.0 support-verify-page.com
+0.0.0.0 supports-center-communityhelp.cloud
+0.0.0.0 svckhc.wixsite.com
+0.0.0.0 swatteam219.wixsite.com
+0.0.0.0 taher-mohamed-ahmed-saad.github.io
+0.0.0.0 taiegrma.gold
+0.0.0.0 tairgam.chat
+0.0.0.0 tairgam.fund
+0.0.0.0 tairgam.show
+0.0.0.0 tairgam.zone
+0.0.0.0 talergam.live
+0.0.0.0 talergam.red
+0.0.0.0 talergam.shopping
+0.0.0.0 talergam.today
+0.0.0.0 tanfupikyx.monster
+0.0.0.0 tcsktjtl.icu
+0.0.0.0 technoindiagroup.com
+0.0.0.0 tecmachine.com.br
+0.0.0.0 teiagram.group
+0.0.0.0 teiagram.red
+0.0.0.0 teiagram.zone
+0.0.0.0 teiegrma.cab
+0.0.0.0 teiegrma.design
+0.0.0.0 teiegrrm.blue
+0.0.0.0 teiegrrm.today
+0.0.0.0 telargam.city
+0.0.0.0 telargam.cloud
+0.0.0.0 telargam.college
+0.0.0.0 telargam.tax
+0.0.0.0 telegram-safe.cc
+0.0.0.0 telegrrm.monster
+0.0.0.0 telegrrm.xin
+0.0.0.0 telemlp-omsz.icu
+0.0.0.0 teleqrma.show
+0.0.0.0 telezelm-lbhg.icu
+0.0.0.0 tellmeliu.github.io
+0.0.0.0 terfanfranck.wixsite.com
+0.0.0.0 tienda-linea7.com
+0.0.0.0 tienda-linea9.com
+0.0.0.0 tiktok.fhinek.com
+0.0.0.0 tiktokkjshop.com
+0.0.0.0 tiktokmax3.vip
+0.0.0.0 troubadeihati-9272.vercel.app
+0.0.0.0 tysmbdpz.icu
+0.0.0.0 u-pphholfd.godaddysites.com
+0.0.0.0 ultrafima.com
+0.0.0.0 uphold-loges.github.io
+0.0.0.0 urbexine.shop
+0.0.0.0 urmilagome.github.io
+0.0.0.0 user1.hehdin.us.kg
+0.0.0.0 username895.wixsite.com
+0.0.0.0 usps.com-parceliutxb.vip
+0.0.0.0 usps.com-parceliutxc.vip
+0.0.0.0 usps.com-parceliutxe.vip
+0.0.0.0 usps.com-parceliutxg.vip
+0.0.0.0 usps.com-parceljzuwb.vip
+0.0.0.0 usps.com-parceljzuwc.vip
+0.0.0.0 usps.com-trackaaw.top
+0.0.0.0 usps.com-trackaba.top
+0.0.0.0 usps.com-trackakt.top
+0.0.0.0 usps.com-trackartjlo.top
+0.0.0.0 usps.com-trackbpg.top
+0.0.0.0 usps.com-trackdex.top
+0.0.0.0 usps.com-trackeaj.top
+0.0.0.0 usps.com-trackemh.top
+0.0.0.0 usps.com-trackevj.top
+0.0.0.0 usps.com-trackfnl.top
+0.0.0.0 usps.com-trackghi.top
+0.0.0.0 usps.com-trackgix.top
+0.0.0.0 usps.com-trackgna.top
+0.0.0.0 usps.com-trackhal.top
+0.0.0.0 usps.com-trackicg.top
+0.0.0.0 usps.com-trackidp.top
+0.0.0.0 usps.com-trackiiz.top
+0.0.0.0 usps.com-tracking-helpnko.cc
+0.0.0.0 usps.com-tracking-helptom.cc
+0.0.0.0 usps.com-tracking-helptot.cc
+0.0.0.0 usps.com-tracking-helptwo.cc
+0.0.0.0 usps.com-tracking-helptzo.cc
+0.0.0.0 usps.com-trackipxdnh.top
+0.0.0.0 usps.com-trackius.top
+0.0.0.0 usps.com-trackjgc.top
+0.0.0.0 usps.com-trackjkh.top
+0.0.0.0 usps.com-trackkys.top
+0.0.0.0 usps.com-trackloi.top
+0.0.0.0 usps.com-tracklpe.top
+0.0.0.0 usps.com-tracklvr.top
+0.0.0.0 usps.com-trackmjx.top
+0.0.0.0 usps.com-trackmli.top
+0.0.0.0 usps.com-trackmvd.top
+0.0.0.0 usps.com-tracknsr.top
+0.0.0.0 usps.com-trackodf.top
+0.0.0.0 usps.com-trackogx.top
+0.0.0.0 usps.com-trackonp.top
+0.0.0.0 usps.com-trackpgl.top
+0.0.0.0 usps.com-trackpoq.top
+0.0.0.0 usps.com-trackpsx.top
+0.0.0.0 usps.com-trackpwg.top
+0.0.0.0 usps.com-trackree.top
+0.0.0.0 usps.com-tracksbw.top
+0.0.0.0 usps.com-tracktdz.top
+0.0.0.0 usps.com-tracktmb.top
+0.0.0.0 usps.com-tracktus.top
+0.0.0.0 usps.com-tracktyi.top
+0.0.0.0 usps.com-trackuir.top
+0.0.0.0 usps.com-trackuve.top
+0.0.0.0 usps.com-trackvbw.top
+0.0.0.0 usps.com-trackvkt.top
+0.0.0.0 usps.com-trackvoi.top
+0.0.0.0 usps.com-trackwil.top
+0.0.0.0 usps.com-trackxgj.top
+0.0.0.0 usps.com-trackxkt.top
+0.0.0.0 usps.com-trackxrz.top
+0.0.0.0 usps.com-trackxxh.top
+0.0.0.0 usps.com-trackzyy.top
+0.0.0.0 uspsservicetrack.blogspot.com.cy
+0.0.0.0 veeradalaw.com
+0.0.0.0 vmgmjfbz.icu
+0.0.0.0 wakakehuteu-9247.vercel.app
+0.0.0.0 walletcazonnect.gitbook.io
+0.0.0.0 wap.brwj.cn
+0.0.0.0 webmailservice08.wixsite.com
+0.0.0.0 wellyngtonkuhn.github.io
+0.0.0.0 whare.100webspace.net
+0.0.0.0 wwiiskdkdnffnjuca.weebly.com
+0.0.0.0 www-degelyehuda-org-il.filesusr.com
+0.0.0.0 wwwteiegramwor.xyz
+0.0.0.0 xavier6709.github.io
+0.0.0.0 xn--d1aqfkf.xn--p1ai
+0.0.0.0 xox-exe.github.io
+0.0.0.0 yairix.github.io
+0.0.0.0 yarakobanrhg.wpenginepowered.com
+0.0.0.0 zattajakoixa-8559.vercel.app
+0.0.0.0 zerotelegram.pl
+0.0.0.0 zetriyauffivou-1144.vercel.app
+0.0.0.0 zkybgfddvl.shop
+0.0.0.0 zures.com.br
diff --git a/phishing-filter-hosts.txt.br b/phishing-filter-hosts.txt.br
new file mode 100644
index 000000000..9f2284998
Binary files /dev/null and b/phishing-filter-hosts.txt.br differ
diff --git a/phishing-filter-hosts.txt.gz b/phishing-filter-hosts.txt.gz
new file mode 100644
index 000000000..75ddee950
Binary files /dev/null and b/phishing-filter-hosts.txt.gz differ
diff --git a/phishing-filter-rpz.conf b/phishing-filter-rpz.conf
new file mode 100644
index 000000000..36e4dd7b1
--- /dev/null
+++ b/phishing-filter-rpz.conf
@@ -0,0 +1,454 @@
+; Title: Phishing Domains RPZ Blocklist
+; Updated: 2024-12-15T00:23:11Z
+; Expires: 1 day (update frequency)
+; Homepage: https://gitlab.com/malware-filter/phishing-filter
+; License: https://gitlab.com/malware-filter/phishing-filter#license
+; Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+
+$TTL 30
+@ IN SOA rpz.curben.gitlab.io. hostmaster.rpz.curben.gitlab.io. 1734222191 86400 3600 604800 30
+ NS localhost.
+
+23cssahil.github.io CNAME .
+3reshma.github.io CNAME .
+67533177.ishg.za.com CNAME .
+67780581.ishg.za.com CNAME .
+72386989.ishg.za.com CNAME .
+a2i9s4y.space CNAME .
+a3.ikansalasq.com CNAME .
+acederma.com CNAME .
+ahhhh.pe.kr CNAME .
+airbnb.sync114.com CNAME .
+aisths.cc CNAME .
+akanksha3012.github.io CNAME .
+aks34.github.io CNAME .
+alessandrodiana.it CNAME .
+amamz-product.click CNAME .
+amazonnu.co CNAME .
+amreeth.github.io CNAME .
+anjalijha167.github.io CNAME .
+apricotmelly.wixstudio.com CNAME .
+apricotmelly.wixstudio.io CNAME .
+arpitgoel889.github.io CNAME .
+art-tour.net CNAME .
+artofbaseball.net CNAME .
+ashishmaurya73.github.io CNAME .
+askewi3010.wixsite.com CNAME .
+asupanvviptelegram.my.id CNAME .
+atobi432.wixsite.com CNAME .
+attcom-103887.weebly.com CNAME .
+attisat.gr CNAME .
+attvalidatekindly.weebly.com CNAME .
+attyahoomai.wixsite.com CNAME .
+autoscurt24.de CNAME .
+bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz CNAME .
+bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link CNAME .
+bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link CNAME .
+bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link CNAME .
+bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link CNAME .
+ballefabrouyau-9112.vercel.app CNAME .
+bantuan-tunai-mystrx.jobs8.my.id CNAME .
+baradua.it CNAME .
+barberalonzo29.wixsite.com CNAME .
+basil0303.github.io CNAME .
+bernardamos422.wixsite.com CNAME .
+bettinamarks.com CNAME .
+bharathi1809.github.io CNAME .
+blue-tick-help.vercel.app CNAME .
+bntuan-dana4-resmii.danytx.web.id CNAME .
+boapremium-001-site1.ptempurl.com CNAME .
+bojanawauceu-3394.vercel.app CNAME .
+bolipost.cc CNAME .
+bomomvpfo.club CNAME .
+bountyhunterpc.github.io CNAME .
+bpqxqtuig.club CNAME .
+brbrgsnyqwer.wixsite.com CNAME .
+brwj.cn CNAME .
+bt.daftpage.com CNAME .
+cache.netflix.com.user12.sanasta.us.kg CNAME .
+carolesheridan4.wixsite.com CNAME .
+chance-to-availbale-free-badge.vercel.app CNAME .
+chiragrajoria.github.io CNAME .
+cid-phisher.github.io CNAME .
+clariveh.baby CNAME .
+clifforddaniells.wixsite.com CNAME .
+coinbasefaqdesk.com CNAME .
+coiniiobisaecoins.azurewebsites.net CNAME .
+confirmationhelpmeta.io.vn CNAME .
+cpisafety.che.buet.ac.bd CNAME .
+cricketbettingpro.com CNAME .
+cubixpro.com CNAME .
+currentlyatt810.weebly.com CNAME .
+dalipthukral0.wixsite.com CNAME .
+danaindonesia.bantuan-resmi.top CNAME .
+deepxzkdn.deadth.sbs CNAME .
+descounsell.wixsite.com CNAME .
+detlxc.master78lite.com CNAME .
+devshubhamjadav.github.io CNAME .
+dfxzsdf.wixsite.com CNAME .
+dhanushr24.github.io CNAME .
+dianecadei8.wixsite.com CNAME .
+did57sauveton.wixsite.com CNAME .
+dl.mod30t.ir CNAME .
+dmgeuntv.icu CNAME .
+doloribus-voluptat-space.wpkubio.com CNAME .
+donrichie781.wixsite.com CNAME .
+donttolinii.wixsite.com CNAME .
+dtn-3c.vercel.app CNAME .
+duvetrexuprau.vercel.app CNAME .
+ebayqi.shop CNAME .
+eirxkrdgtk.duckdns.org CNAME .
+energizahn.dicosur.net CNAME .
+esumbunk.cc CNAME .
+esunbonk.cc CNAME .
+everestmotors.com.np CNAME .
+evqjteoscz.link CNAME .
+exoduswallet.cn.com CNAME .
+facebook-tw-web.azurewebsites.net CNAME .
+facebookverifycenter.com.de CNAME .
+faceit.sunbim.pro CNAME .
+faizankhan0408.github.io CNAME .
+fauexpfv.icu CNAME .
+feprk.sbs CNAME .
+formsly-form.web.app CNAME .
+free-5573726.webadorsite.com CNAME .
+fsdfjeifls.click CNAME .
+galiciacgu.com.ar CNAME .
+gardakosto.wixsite.com CNAME .
+geemiioilogin.gitbook.io CNAME .
+guptanikshay.github.io CNAME .
+gyxgxuu.wixsite.com CNAME .
+h5.z3v2.com CNAME .
+hajjsj.top CNAME .
+hamza-nawaz.github.io CNAME .
+havkeye14.wixsite.com CNAME .
+hfhfyejkwsu.wixsite.com CNAME .
+hjdnshu.wixsite.com CNAME .
+hollykim.com CNAME .
+homemailweb-608850.weeblysite.com CNAME .
+htitofjpve.club CNAME .
+huynguyen2k.github.io CNAME .
+icontainrbbr.s3.us-west-004.backblazeb2.com CNAME .
+identifier-vous456.wixsite.com CNAME .
+ijhsk.github.io CNAME .
+imperia-trading.online CNAME .
+informed.deliverydn.top CNAME .
+informed.deliveryfp.top CNAME .
+informed.deliveryft.top CNAME .
+informed.deliveryhrw.top CNAME .
+informed.deliverywbk.top CNAME .
+inshatrading.com CNAME .
+instagram.ossamaelidrissi.com CNAME .
+inusualinteriorismo.com CNAME .
+itaufatura.github.io CNAME .
+itpronetwork.net CNAME .
+itsmdshahin.github.io CNAME .
+ixbuxedexw.info CNAME .
+jeittagrennami-1729.vercel.app CNAME .
+jimenezbill.wixsite.com CNAME .
+jordanmargaret.wixsite.com CNAME .
+jpmc.shieldssecuritybags.com CNAME .
+jrcce.shop CNAME .
+kdotts1.wixsite.com CNAME .
+kemsnwshdurut.weebly.com CNAME .
+large-kitchen-substantial.on-fleek.app CNAME .
+leipeleufreyo.vercel.app CNAME .
+lemedab246.wixsite.com CNAME .
+lightseagreen-jaguar-612987.hostingersite.com CNAME .
+ljsherrm.wixsite.com CNAME .
+lnadm.icu CNAME .
+locateid.com.tr CNAME .
+loginmailaccount1.wixsite.com CNAME .
+lsddndp-up.top CNAME .
+lve1131.wixstudio.com CNAME .
+lve1131.wixstudio.io CNAME .
+mail.8724319-coinbase.com CNAME .
+mail.health-status.fb-business.com CNAME .
+maryp6608.wixsite.com CNAME .
+mauttauhuttiloi.vercel.app CNAME .
+messagevocale888.wixsite.com CNAME .
+meta-mask-io.serv00.net CNAME .
+metaiimaaskk-login.gitbook.io CNAME .
+metamsik.com CNAME .
+miss.votingforstudents.com CNAME .
+mkramer03.wixsite.com CNAME .
+mmoom4.wixsite.com CNAME .
+mobileservice34.wixsite.com CNAME .
+monetization-violation-page.github.io CNAME .
+monirshouvo.github.io CNAME .
+morinierevolailles.wixsite.com CNAME .
+mtalha21.github.io CNAME .
+muhammedasfacknk.github.io CNAME .
+munnoi.github.io CNAME .
+myurls.bio CNAME .
+myvalue365.com CNAME .
+navicrettobro-6686.vercel.app CNAME .
+nbbroker.az CNAME .
+nesgrjahwt.guru CNAME .
+netfeliz.netlify.app CNAME .
+nfwqayckqr.ltd CNAME .
+notify-user-deviations.vercel.app CNAME .
+oasisministries.com CNAME .
+omar7rb1.github.io CNAME .
+or-obaidullah.github.io CNAME .
+orangveri.wixsite.com CNAME .
+p.usertrackehe.top CNAME .
+p.usertrackkum.top CNAME .
+p.usertrackrry.top CNAME .
+p.usertrackyfk.top CNAME .
+pajem76668.wixsite.com CNAME .
+pancake-frontend-dejmy38ut-chefilip.vercel.app CNAME .
+perso8764002.wixsite.com CNAME .
+phenomenal-praline-ff95b6.netlify.app CNAME .
+pikay13.github.io CNAME .
+podrimapso.wixsite.com CNAME .
+portal-trezr-cdn.github.io CNAME .
+ppruphmllx.blue CNAME .
+premiumember.ct.ws CNAME .
+preuffeddoupraki-2297.vercel.app CNAME .
+pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev CNAME .
+pub-019ceedaa0894587aa4255109af6c416.r2.dev CNAME .
+pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev CNAME .
+pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev CNAME .
+pub-135a4055f8454025aa2f06845da4f8d8.r2.dev CNAME .
+pub-140cf903de964a479f3b465e010ddb3b.r2.dev CNAME .
+pub-14b5071e5a78406a9a92a00be9141089.r2.dev CNAME .
+pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev CNAME .
+pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev CNAME .
+pub-244225b6dd0e404291c857fafd588b4f.r2.dev CNAME .
+pub-28e193ca593a467bbd1e0232a73a5680.r2.dev CNAME .
+pub-2a64f782845943beae62e9f09c473700.r2.dev CNAME .
+pub-34ae76b320c445628f3e2bca4a192394.r2.dev CNAME .
+pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev CNAME .
+pub-3784361eb0b640e797495d46b35ce030.r2.dev CNAME .
+pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev CNAME .
+pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev CNAME .
+pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev CNAME .
+pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev CNAME .
+pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev CNAME .
+pub-55e3e997548a46879ee19f4d494309d6.r2.dev CNAME .
+pub-619d0209611d4e8fb34f21726fd3b133.r2.dev CNAME .
+pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev CNAME .
+pub-668f78270889467e8af696261336536f.r2.dev CNAME .
+pub-69356b68f37442e0a24ceb7981f0841b.r2.dev CNAME .
+pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev CNAME .
+pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev CNAME .
+pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev CNAME .
+pub-73ee129d9ec943f785408564adcaf985.r2.dev CNAME .
+pub-7695c0b23019424cb779394f7a362ba8.r2.dev CNAME .
+pub-76bf011f31344f45bf2356e9005ac465.r2.dev CNAME .
+pub-7a6b99614f4b41658cd677a620b18951.r2.dev CNAME .
+pub-7be95ce02232456db08522b3d3c99765.r2.dev CNAME .
+pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev CNAME .
+pub-80fb550826904a048a5391946ef49a69.r2.dev CNAME .
+pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev CNAME .
+pub-83f86cbfe52f42728c26cda54824eb39.r2.dev CNAME .
+pub-886654e4969e42e988d48d11222c8a57.r2.dev CNAME .
+pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev CNAME .
+pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev CNAME .
+pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev CNAME .
+pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev CNAME .
+pub-97673970c1c145eda5e559c4f9c18f61.r2.dev CNAME .
+pub-9839470418254b29962dec4220c83255.r2.dev CNAME .
+pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev CNAME .
+pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev CNAME .
+pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev CNAME .
+pub-a017bd9f9dc6498183af41770490c482.r2.dev CNAME .
+pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev CNAME .
+pub-aa456431547a4e28948699d7c6a22006.r2.dev CNAME .
+pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev CNAME .
+pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev CNAME .
+pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev CNAME .
+pub-cb72691642c444eb900a44aa1d8a7107.r2.dev CNAME .
+pub-ce8fc030252b4632959515dffef1b750.r2.dev CNAME .
+pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev CNAME .
+pub-de59803496c8489585895b6917266e7c.r2.dev CNAME .
+pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev CNAME .
+pub-ebb47370c13740ef9014f6bba927d946.r2.dev CNAME .
+pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev CNAME .
+pub-f7edd89a736e48428172001b0b1906fe.r2.dev CNAME .
+pub-fc37d2d339714056b7f16368b49ae532.r2.dev CNAME .
+pub-fd5baa54f2714f068701be4a7563f2de.r2.dev CNAME .
+pub-fef94e8fd76842a4818865dd78ef618f.r2.dev CNAME .
+puvomattipro.vercel.app CNAME .
+qfbspeclmg.bond CNAME .
+qowii.top CNAME .
+quiz.vidio.com.user3.hehdin.us.kg CNAME .
+radhikamd.github.io CNAME .
+raiyone.cc CNAME .
+rayatrecruitment.com CNAME .
+rectifcentrefdeptrescu.weebly.com CNAME .
+rekruitmenttjwtt.vip-media.web.id CNAME .
+resolverpad.dev CNAME .
+reward-webconnect.pages.dev CNAME .
+roberthood.net CNAME .
+rtm-att.directly.com CNAME .
+ruthah9.wixsite.com CNAME .
+rwhjdb.icu CNAME .
+s.eu.premiumisp.net CNAME .
+s.team-a.cam CNAME .
+s080rjhdn.top CNAME .
+salmanfarsi01.github.io CNAME .
+santanderpod.globalizeme-dublin2.co.uk CNAME .
+sedosexu.wixsite.com CNAME .
+seller.tksalem.com CNAME .
+server.2rk3.com CNAME .
+server.6avj.com CNAME .
+server.dgm0.com CNAME .
+server.k6dz.com CNAME .
+server.pxs7.com CNAME .
+seunelvis1.github.io CNAME .
+shanky0.github.io CNAME .
+sjhdoirrsjx.wixsite.com CNAME .
+smgolamalif.github.io CNAME .
+smsmmsernorepls.wixsite.com CNAME .
+soumya252000.github.io CNAME .
+steam.communityartlist.com CNAME .
+steam.workshopgraphy.com CNAME .
+steamcommuitty.com CNAME .
+steamcommunmutly.com CNAME .
+steamcomunutty.com CNAME .
+steamconmumity.com CNAME .
+steeamcommnity.com CNAME .
+stephen55687.github.io CNAME .
+stevencrews.com CNAME .
+submit-dispute-form.github.io CNAME .
+sultan-raza.github.io CNAME .
+sumagayathri-999.github.io CNAME .
+support-verify-page.com CNAME .
+supports-center-communityhelp.cloud CNAME .
+svckhc.wixsite.com CNAME .
+swatteam219.wixsite.com CNAME .
+taher-mohamed-ahmed-saad.github.io CNAME .
+taiegrma.gold CNAME .
+tairgam.chat CNAME .
+tairgam.fund CNAME .
+tairgam.show CNAME .
+tairgam.zone CNAME .
+talergam.live CNAME .
+talergam.red CNAME .
+talergam.shopping CNAME .
+talergam.today CNAME .
+tanfupikyx.monster CNAME .
+tcsktjtl.icu CNAME .
+technoindiagroup.com CNAME .
+tecmachine.com.br CNAME .
+teiagram.group CNAME .
+teiagram.red CNAME .
+teiagram.zone CNAME .
+teiegrma.cab CNAME .
+teiegrma.design CNAME .
+teiegrrm.blue CNAME .
+teiegrrm.today CNAME .
+telargam.city CNAME .
+telargam.cloud CNAME .
+telargam.college CNAME .
+telargam.tax CNAME .
+telegram-safe.cc CNAME .
+telegrrm.monster CNAME .
+telegrrm.xin CNAME .
+telemlp-omsz.icu CNAME .
+teleqrma.show CNAME .
+telezelm-lbhg.icu CNAME .
+tellmeliu.github.io CNAME .
+terfanfranck.wixsite.com CNAME .
+tienda-linea7.com CNAME .
+tienda-linea9.com CNAME .
+tiktok.fhinek.com CNAME .
+tiktokkjshop.com CNAME .
+tiktokmax3.vip CNAME .
+troubadeihati-9272.vercel.app CNAME .
+tysmbdpz.icu CNAME .
+u-pphholfd.godaddysites.com CNAME .
+ultrafima.com CNAME .
+uphold-loges.github.io CNAME .
+urbexine.shop CNAME .
+urmilagome.github.io CNAME .
+user1.hehdin.us.kg CNAME .
+username895.wixsite.com CNAME .
+usps.com-parceliutxb.vip CNAME .
+usps.com-parceliutxc.vip CNAME .
+usps.com-parceliutxe.vip CNAME .
+usps.com-parceliutxg.vip CNAME .
+usps.com-parceljzuwb.vip CNAME .
+usps.com-parceljzuwc.vip CNAME .
+usps.com-trackaaw.top CNAME .
+usps.com-trackaba.top CNAME .
+usps.com-trackakt.top CNAME .
+usps.com-trackartjlo.top CNAME .
+usps.com-trackbpg.top CNAME .
+usps.com-trackdex.top CNAME .
+usps.com-trackeaj.top CNAME .
+usps.com-trackemh.top CNAME .
+usps.com-trackevj.top CNAME .
+usps.com-trackfnl.top CNAME .
+usps.com-trackghi.top CNAME .
+usps.com-trackgix.top CNAME .
+usps.com-trackgna.top CNAME .
+usps.com-trackhal.top CNAME .
+usps.com-trackicg.top CNAME .
+usps.com-trackidp.top CNAME .
+usps.com-trackiiz.top CNAME .
+usps.com-tracking-helpnko.cc CNAME .
+usps.com-tracking-helptom.cc CNAME .
+usps.com-tracking-helptot.cc CNAME .
+usps.com-tracking-helptwo.cc CNAME .
+usps.com-tracking-helptzo.cc CNAME .
+usps.com-trackipxdnh.top CNAME .
+usps.com-trackius.top CNAME .
+usps.com-trackjgc.top CNAME .
+usps.com-trackjkh.top CNAME .
+usps.com-trackkys.top CNAME .
+usps.com-trackloi.top CNAME .
+usps.com-tracklpe.top CNAME .
+usps.com-tracklvr.top CNAME .
+usps.com-trackmjx.top CNAME .
+usps.com-trackmli.top CNAME .
+usps.com-trackmvd.top CNAME .
+usps.com-tracknsr.top CNAME .
+usps.com-trackodf.top CNAME .
+usps.com-trackogx.top CNAME .
+usps.com-trackonp.top CNAME .
+usps.com-trackpgl.top CNAME .
+usps.com-trackpoq.top CNAME .
+usps.com-trackpsx.top CNAME .
+usps.com-trackpwg.top CNAME .
+usps.com-trackree.top CNAME .
+usps.com-tracksbw.top CNAME .
+usps.com-tracktdz.top CNAME .
+usps.com-tracktmb.top CNAME .
+usps.com-tracktus.top CNAME .
+usps.com-tracktyi.top CNAME .
+usps.com-trackuir.top CNAME .
+usps.com-trackuve.top CNAME .
+usps.com-trackvbw.top CNAME .
+usps.com-trackvkt.top CNAME .
+usps.com-trackvoi.top CNAME .
+usps.com-trackwil.top CNAME .
+usps.com-trackxgj.top CNAME .
+usps.com-trackxkt.top CNAME .
+usps.com-trackxrz.top CNAME .
+usps.com-trackxxh.top CNAME .
+usps.com-trackzyy.top CNAME .
+uspsservicetrack.blogspot.com.cy CNAME .
+veeradalaw.com CNAME .
+vmgmjfbz.icu CNAME .
+wakakehuteu-9247.vercel.app CNAME .
+walletcazonnect.gitbook.io CNAME .
+wap.brwj.cn CNAME .
+webmailservice08.wixsite.com CNAME .
+wellyngtonkuhn.github.io CNAME .
+whare.100webspace.net CNAME .
+wwiiskdkdnffnjuca.weebly.com CNAME .
+www-degelyehuda-org-il.filesusr.com CNAME .
+wwwteiegramwor.xyz CNAME .
+xavier6709.github.io CNAME .
+xn--d1aqfkf.xn--p1ai CNAME .
+xox-exe.github.io CNAME .
+yairix.github.io CNAME .
+yarakobanrhg.wpenginepowered.com CNAME .
+zattajakoixa-8559.vercel.app CNAME .
+zerotelegram.pl CNAME .
+zetriyauffivou-1144.vercel.app CNAME .
+zkybgfddvl.shop CNAME .
+zures.com.br CNAME .
diff --git a/phishing-filter-rpz.conf.br b/phishing-filter-rpz.conf.br
new file mode 100644
index 000000000..52f0d0817
Binary files /dev/null and b/phishing-filter-rpz.conf.br differ
diff --git a/phishing-filter-rpz.conf.gz b/phishing-filter-rpz.conf.gz
new file mode 100644
index 000000000..68700afb6
Binary files /dev/null and b/phishing-filter-rpz.conf.gz differ
diff --git a/phishing-filter-snort2.rules b/phishing-filter-snort2.rules
new file mode 100644
index 000000000..e11f8befa
--- /dev/null
+++ b/phishing-filter-snort2.rules
@@ -0,0 +1,469 @@
+# Title: Phishing URL Snort2 Ruleset
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"23cssahil.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000001; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"3reshma.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000002; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"67533177.ishg.za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000003; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"67780581.ishg.za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000004; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"72386989.ishg.za.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000005; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a2i9s4y.space"; content:"Host"; http_header; classtype:attempted-recon; sid:200000006; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a3.ikansalasq.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000007; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"acederma.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000008; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ahhhh.pe.kr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000009; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airbnb.sync114.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000010; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aisths.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000011; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"akanksha3012.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000012; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aks34.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000013; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"alessandrodiana.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200000014; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amamz-product.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000015; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazonnu.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000016; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amreeth.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000017; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anjalijha167.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000018; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apricotmelly.wixstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000019; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apricotmelly.wixstudio.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000020; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arpitgoel889.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000021; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"art-tour.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000022; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"artofbaseball.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000023; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ashishmaurya73.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000024; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"askewi3010.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000025; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"asupanvviptelegram.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000026; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atobi432.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000027; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-103887.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000028; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attisat.gr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000029; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attvalidatekindly.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000030; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attyahoomai.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000031; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"autoscurt24.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000032; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000033; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000034; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000035; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000036; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000037; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ballefabrouyau-9112.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000038; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bantuan-tunai-mystrx.jobs8.my.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000039; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"baradua.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200000040; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"barberalonzo29.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000041; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"basil0303.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000042; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bernardamos422.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000043; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bettinamarks.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000044; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bharathi1809.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000045; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blue-tick-help.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000046; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bntuan-dana4-resmii.danytx.web.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000047; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"boapremium-001-site1.ptempurl.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000048; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bojanawauceu-3394.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000049; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bolipost.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000050; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bomomvpfo.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200000051; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bountyhunterpc.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000052; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bpqxqtuig.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200000053; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brbrgsnyqwer.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000054; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"brwj.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000055; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt.daftpage.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000056; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cache.netflix.com.user12.sanasta.us.kg"; content:"Host"; http_header; classtype:attempted-recon; sid:200000057; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"carolesheridan4.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000058; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chance-to-availbale-free-badge.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000059; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chiragrajoria.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000060; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cid-phisher.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000061; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clariveh.baby"; content:"Host"; http_header; classtype:attempted-recon; sid:200000062; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"clifforddaniells.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000063; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbasefaqdesk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000064; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coiniiobisaecoins.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000065; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"confirmationhelpmeta.io.vn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000066; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cpisafety.che.buet.ac.bd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000067; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cricketbettingpro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000068; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cubixpro.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000069; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyatt810.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000070; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dalipthukral0.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000071; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"danaindonesia.bantuan-resmi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000072; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"deepxzkdn.deadth.sbs"; content:"Host"; http_header; classtype:attempted-recon; sid:200000073; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"descounsell.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000074; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"detlxc.master78lite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000075; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"devshubhamjadav.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000076; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dfxzsdf.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000077; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhanushr24.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000078; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dianecadei8.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000079; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"did57sauveton.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000080; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dl.mod30t.ir"; content:"Host"; http_header; classtype:attempted-recon; sid:200000081; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dmgeuntv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000082; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doloribus-voluptat-space.wpkubio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000083; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"donrichie781.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000084; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"donttolinii.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000085; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dtn-3c.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000086; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"duvetrexuprau.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000087; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebayqi.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000088; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eirxkrdgtk.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000089; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"energizahn.dicosur.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000090; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esumbunk.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000091; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"esunbonk.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000092; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"everestmotors.com.np"; content:"Host"; http_header; classtype:attempted-recon; sid:200000093; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evqjteoscz.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000094; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"exoduswallet.cn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000095; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-tw-web.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000096; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebookverifycenter.com.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000097; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faceit.sunbim.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000098; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faizankhan0408.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000099; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fauexpfv.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000100; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"feprk.sbs"; content:"Host"; http_header; classtype:attempted-recon; sid:200000101; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"formsly-form.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000102; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-5573726.webadorsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000103; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fsdfjeifls.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000104; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"galiciacgu.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200000105; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gardakosto.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000106; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"geemiioilogin.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000107; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"guptanikshay.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000108; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gyxgxuu.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000109; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"h5.z3v2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000110; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hajjsj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000111; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hamza-nawaz.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000112; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"havkeye14.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000113; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hfhfyejkwsu.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000114; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hjdnshu.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000115; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hollykim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000116; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"homemailweb-608850.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000117; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"htitofjpve.club"; content:"Host"; http_header; classtype:attempted-recon; sid:200000118; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"huynguyen2k.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000119; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"icontainrbbr.s3.us-west-004.backblazeb2.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000120; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"identifier-vous456.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000121; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ijhsk.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000122; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imperia-trading.online"; content:"Host"; http_header; classtype:attempted-recon; sid:200000123; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informed.deliverydn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000124; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informed.deliveryfp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000125; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informed.deliveryft.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000126; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informed.deliveryhrw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000127; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"informed.deliverywbk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000128; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inshatrading.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000129; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"instagram.ossamaelidrissi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000130; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"inusualinteriorismo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000131; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itaufatura.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000132; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itpronetwork.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000133; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itsmdshahin.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000134; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ixbuxedexw.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000135; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jeittagrennami-1729.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000136; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jimenezbill.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000137; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jordanmargaret.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000138; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jpmc.shieldssecuritybags.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000139; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jrcce.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000140; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kdotts1.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000141; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"kemsnwshdurut.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000142; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"large-kitchen-substantial.on-fleek.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000143; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"leipeleufreyo.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000144; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lemedab246.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000145; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lightseagreen-jaguar-612987.hostingersite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000146; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ljsherrm.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000147; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lnadm.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000148; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"locateid.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000149; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginmailaccount1.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000150; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lsddndp-up.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000151; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lve1131.wixstudio.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000152; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lve1131.wixstudio.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000153; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.8724319-coinbase.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000154; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.health-status.fb-business.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000155; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"maryp6608.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000156; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mauttauhuttiloi.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000157; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"messagevocale888.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000158; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"meta-mask-io.serv00.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000159; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metaiimaaskk-login.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000160; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamsik.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000161; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"miss.votingforstudents.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000162; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mkramer03.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000163; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mmoom4.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000164; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mobileservice34.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000165; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monetization-violation-page.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000166; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"monirshouvo.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000167; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"morinierevolailles.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000168; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mtalha21.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000169; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"muhammedasfacknk.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000170; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"munnoi.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000171; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myurls.bio"; content:"Host"; http_header; classtype:attempted-recon; sid:200000172; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myvalue365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000173; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navicrettobro-6686.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000174; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nbbroker.az"; content:"Host"; http_header; classtype:attempted-recon; sid:200000175; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nesgrjahwt.guru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000176; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netfeliz.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000177; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nfwqayckqr.ltd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000178; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notify-user-deviations.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000179; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oasisministries.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000180; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"omar7rb1.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000181; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"or-obaidullah.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000182; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"orangveri.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000183; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.usertrackehe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000184; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.usertrackkum.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000185; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.usertrackrry.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000186; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"p.usertrackyfk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000187; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pajem76668.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000188; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pancake-frontend-dejmy38ut-chefilip.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000189; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"perso8764002.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000190; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"phenomenal-praline-ff95b6.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000191; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pikay13.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000192; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"podrimapso.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000193; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"portal-trezr-cdn.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000194; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ppruphmllx.blue"; content:"Host"; http_header; classtype:attempted-recon; sid:200000195; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"premiumember.ct.ws"; content:"Host"; http_header; classtype:attempted-recon; sid:200000196; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"preuffeddoupraki-2297.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000197; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000198; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-019ceedaa0894587aa4255109af6c416.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000199; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000200; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000201; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-135a4055f8454025aa2f06845da4f8d8.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000202; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-140cf903de964a479f3b465e010ddb3b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000203; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-14b5071e5a78406a9a92a00be9141089.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000204; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000205; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000206; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-244225b6dd0e404291c857fafd588b4f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000207; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-28e193ca593a467bbd1e0232a73a5680.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000208; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-2a64f782845943beae62e9f09c473700.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000209; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-34ae76b320c445628f3e2bca4a192394.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000210; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000211; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-3784361eb0b640e797495d46b35ce030.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000212; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000213; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000214; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000215; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000216; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000217; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-55e3e997548a46879ee19f4d494309d6.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000218; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-619d0209611d4e8fb34f21726fd3b133.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000219; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000220; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-668f78270889467e8af696261336536f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000221; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-69356b68f37442e0a24ceb7981f0841b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000222; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000223; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000224; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000225; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-73ee129d9ec943f785408564adcaf985.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000226; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7695c0b23019424cb779394f7a362ba8.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000227; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-76bf011f31344f45bf2356e9005ac465.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000228; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7a6b99614f4b41658cd677a620b18951.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000229; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7be95ce02232456db08522b3d3c99765.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000230; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000231; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-80fb550826904a048a5391946ef49a69.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000232; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000233; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-83f86cbfe52f42728c26cda54824eb39.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000234; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-886654e4969e42e988d48d11222c8a57.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000235; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000236; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000237; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000238; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000239; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-97673970c1c145eda5e559c4f9c18f61.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000240; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-9839470418254b29962dec4220c83255.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000241; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000242; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000243; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000244; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-a017bd9f9dc6498183af41770490c482.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000245; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000246; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-aa456431547a4e28948699d7c6a22006.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000247; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000248; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000249; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000250; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-cb72691642c444eb900a44aa1d8a7107.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000251; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-ce8fc030252b4632959515dffef1b750.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000252; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000253; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-de59803496c8489585895b6917266e7c.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000254; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000255; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-ebb47370c13740ef9014f6bba927d946.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000256; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000257; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-f7edd89a736e48428172001b0b1906fe.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000258; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-fc37d2d339714056b7f16368b49ae532.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000259; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-fd5baa54f2714f068701be4a7563f2de.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000260; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-fef94e8fd76842a4818865dd78ef618f.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000261; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"puvomattipro.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000262; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qfbspeclmg.bond"; content:"Host"; http_header; classtype:attempted-recon; sid:200000263; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qowii.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000264; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quiz.vidio.com.user3.hehdin.us.kg"; content:"Host"; http_header; classtype:attempted-recon; sid:200000265; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"radhikamd.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000266; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"raiyone.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000267; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rayatrecruitment.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000268; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rectifcentrefdeptrescu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000269; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rekruitmenttjwtt.vip-media.web.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000270; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resolverpad.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000271; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reward-webconnect.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000272; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"roberthood.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000273; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rtm-att.directly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000274; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ruthah9.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000275; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rwhjdb.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000276; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.eu.premiumisp.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000277; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s.team-a.cam"; content:"Host"; http_header; classtype:attempted-recon; sid:200000278; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"s080rjhdn.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000279; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"salmanfarsi01.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000280; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"santanderpod.globalizeme-dublin2.co.uk"; content:"Host"; http_header; classtype:attempted-recon; sid:200000281; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sedosexu.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000282; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seller.tksalem.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000283; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.2rk3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000284; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.6avj.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000285; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.dgm0.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000286; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.k6dz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000287; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.pxs7.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000288; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seunelvis1.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000289; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shanky0.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000290; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjhdoirrsjx.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000291; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smgolamalif.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000292; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smsmmsernorepls.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000293; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soumya252000.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000294; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steam.communityartlist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000295; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steam.workshopgraphy.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000296; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommuitty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000297; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommunmutly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000298; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcomunutty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000299; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamconmumity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000300; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steeamcommnity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000301; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stephen55687.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000302; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"stevencrews.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000303; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"submit-dispute-form.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000304; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sultan-raza.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000305; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sumagayathri-999.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000306; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-verify-page.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000307; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"supports-center-communityhelp.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200000308; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"svckhc.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000309; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"swatteam219.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000310; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taher-mohamed-ahmed-saad.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000311; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"taiegrma.gold"; content:"Host"; http_header; classtype:attempted-recon; sid:200000312; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tairgam.chat"; content:"Host"; http_header; classtype:attempted-recon; sid:200000313; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tairgam.fund"; content:"Host"; http_header; classtype:attempted-recon; sid:200000314; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tairgam.show"; content:"Host"; http_header; classtype:attempted-recon; sid:200000315; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tairgam.zone"; content:"Host"; http_header; classtype:attempted-recon; sid:200000316; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talergam.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000317; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talergam.red"; content:"Host"; http_header; classtype:attempted-recon; sid:200000318; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talergam.shopping"; content:"Host"; http_header; classtype:attempted-recon; sid:200000319; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talergam.today"; content:"Host"; http_header; classtype:attempted-recon; sid:200000320; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tanfupikyx.monster"; content:"Host"; http_header; classtype:attempted-recon; sid:200000321; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tcsktjtl.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000322; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"technoindiagroup.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000323; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tecmachine.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000324; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teiagram.group"; content:"Host"; http_header; classtype:attempted-recon; sid:200000325; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teiagram.red"; content:"Host"; http_header; classtype:attempted-recon; sid:200000326; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teiagram.zone"; content:"Host"; http_header; classtype:attempted-recon; sid:200000327; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teiegrma.cab"; content:"Host"; http_header; classtype:attempted-recon; sid:200000328; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teiegrma.design"; content:"Host"; http_header; classtype:attempted-recon; sid:200000329; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teiegrrm.blue"; content:"Host"; http_header; classtype:attempted-recon; sid:200000330; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teiegrrm.today"; content:"Host"; http_header; classtype:attempted-recon; sid:200000331; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telargam.city"; content:"Host"; http_header; classtype:attempted-recon; sid:200000332; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telargam.cloud"; content:"Host"; http_header; classtype:attempted-recon; sid:200000333; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telargam.college"; content:"Host"; http_header; classtype:attempted-recon; sid:200000334; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telargam.tax"; content:"Host"; http_header; classtype:attempted-recon; sid:200000335; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegram-safe.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000336; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrrm.monster"; content:"Host"; http_header; classtype:attempted-recon; sid:200000337; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrrm.xin"; content:"Host"; http_header; classtype:attempted-recon; sid:200000338; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telemlp-omsz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000339; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"teleqrma.show"; content:"Host"; http_header; classtype:attempted-recon; sid:200000340; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telezelm-lbhg.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000341; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tellmeliu.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000342; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"terfanfranck.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000343; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tienda-linea7.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000344; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tienda-linea9.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000345; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiktok.fhinek.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000346; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiktokkjshop.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000347; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiktokmax3.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000348; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"troubadeihati-9272.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000349; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tysmbdpz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000350; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"u-pphholfd.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000351; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ultrafima.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000352; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uphold-loges.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000353; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urbexine.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000354; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"urmilagome.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000355; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"user1.hehdin.us.kg"; content:"Host"; http_header; classtype:attempted-recon; sid:200000356; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"username895.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000357; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-parceliutxb.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000358; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-parceliutxc.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000359; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-parceliutxe.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000360; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-parceliutxg.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000361; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-parceljzuwb.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000362; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-parceljzuwc.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000363; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackaaw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000364; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackaba.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000365; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackakt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000366; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackartjlo.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000367; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackbpg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000368; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackdex.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000369; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackeaj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000370; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackemh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000371; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackevj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000372; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackfnl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000373; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackghi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000374; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackgix.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000375; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackgna.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000376; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackhal.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000377; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackicg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000378; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackidp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000379; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackiiz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000380; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracking-helpnko.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000381; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracking-helptom.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000382; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracking-helptot.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000383; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracking-helptwo.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000384; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracking-helptzo.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000385; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackipxdnh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000386; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackius.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000387; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackjgc.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000388; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackjkh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000389; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackkys.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000390; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackloi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000391; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracklpe.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000392; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracklvr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000393; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmjx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000394; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmli.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000395; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackmvd.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000396; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracknsr.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000397; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackodf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000398; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackogx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000399; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackonp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000400; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackpgl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000401; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackpoq.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000402; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackpsx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000403; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackpwg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000404; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackree.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000405; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracksbw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000406; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracktdz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000407; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracktmb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000408; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracktus.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000409; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tracktyi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000410; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackuir.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000411; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackuve.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000412; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackvbw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000413; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackvkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000414; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackvoi.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000415; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackwil.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000416; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackxgj.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000417; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackxkt.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000418; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackxrz.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000419; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackxxh.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000420; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-trackzyy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000421; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsservicetrack.blogspot.com.cy"; content:"Host"; http_header; classtype:attempted-recon; sid:200000422; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veeradalaw.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000423; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vmgmjfbz.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000424; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wakakehuteu-9247.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000425; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletcazonnect.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000426; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wap.brwj.cn"; content:"Host"; http_header; classtype:attempted-recon; sid:200000427; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webmailservice08.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000428; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wellyngtonkuhn.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000429; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"whare.100webspace.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000430; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwiiskdkdnffnjuca.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000431; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-degelyehuda-org-il.filesusr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000432; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wwwteiegramwor.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000433; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xavier6709.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000434; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--d1aqfkf.xn--p1ai"; content:"Host"; http_header; classtype:attempted-recon; sid:200000435; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xox-exe.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000436; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yairix.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000437; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yarakobanrhg.wpenginepowered.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000438; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zattajakoixa-8559.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000439; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zerotelegram.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200000440; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zetriyauffivou-1144.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000441; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zkybgfddvl.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000442; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zures.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000443; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/office/msgvoice/source/login.php"; http_uri; nocase; content:"busanopen.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000444; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/office/msgvoice/source/wrongpass.php"; http_uri; nocase; content:"busanopen.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000445; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a/t3magy"; http_uri; nocase; content:"eqrco.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000446; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/mlh21880/"; http_uri; nocase; content:"flow.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000447; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/free/btin/bt/"; http_uri; nocase; content:"im-creator.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000448; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/xqplkv"; http_uri; nocase; content:"is.gd"; content:"Host"; http_header; classtype:attempted-recon; sid:200000449; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/login/"; http_uri; nocase; content:"keepo.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000450; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/serverguide53/"; http_uri; nocase; content:"keepo.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000451; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/tcy5mrt1/"; http_uri; nocase; content:"qr.me-qr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000452; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/l0gin-microsoftwebonlne.app/r75567/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000453; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/345678987655/home/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000454; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/btconnectbusiness/btconnect/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000455; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/fatherplac/accueil/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000456; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/koiuld2dkjcxnjk2s/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000457; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/orange-aslkdsald/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000458; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/view/paypal-loginn/"; http_uri; nocase; content:"sites.google.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000459; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/closurep-1/"; http_uri; nocase; content:"snapto.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000460; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/a/"; http_uri; nocase; content:"webogram.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000461; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/drpj3ayxdsc4"; http_uri; nocase; content:"zpr.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000462; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/kcf05074c7d8ec461318b173a03xd5882406.html"; http_uri; nocase; content:"zyexx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000463; rev:1;)
diff --git a/phishing-filter-snort2.rules.br b/phishing-filter-snort2.rules.br
new file mode 100644
index 000000000..7063e8aa9
Binary files /dev/null and b/phishing-filter-snort2.rules.br differ
diff --git a/phishing-filter-snort2.rules.gz b/phishing-filter-snort2.rules.gz
new file mode 100644
index 000000000..7f69e9e27
Binary files /dev/null and b/phishing-filter-snort2.rules.gz differ
diff --git a/phishing-filter-snort3.rules b/phishing-filter-snort3.rules
new file mode 100644
index 000000000..afb5f7dfd
--- /dev/null
+++ b/phishing-filter-snort3.rules
@@ -0,0 +1,469 @@
+# Title: Phishing URL Snort3 Ruleset
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"23cssahil.github.io",nocase; classtype:attempted-recon; sid:200000001; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3reshma.github.io",nocase; classtype:attempted-recon; sid:200000002; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"67533177.ishg.za.com",nocase; classtype:attempted-recon; sid:200000003; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"67780581.ishg.za.com",nocase; classtype:attempted-recon; sid:200000004; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"72386989.ishg.za.com",nocase; classtype:attempted-recon; sid:200000005; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a2i9s4y.space",nocase; classtype:attempted-recon; sid:200000006; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a3.ikansalasq.com",nocase; classtype:attempted-recon; sid:200000007; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acederma.com",nocase; classtype:attempted-recon; sid:200000008; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ahhhh.pe.kr",nocase; classtype:attempted-recon; sid:200000009; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"airbnb.sync114.com",nocase; classtype:attempted-recon; sid:200000010; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aisths.cc",nocase; classtype:attempted-recon; sid:200000011; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akanksha3012.github.io",nocase; classtype:attempted-recon; sid:200000012; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aks34.github.io",nocase; classtype:attempted-recon; sid:200000013; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alessandrodiana.it",nocase; classtype:attempted-recon; sid:200000014; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amamz-product.click",nocase; classtype:attempted-recon; sid:200000015; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonnu.co",nocase; classtype:attempted-recon; sid:200000016; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amreeth.github.io",nocase; classtype:attempted-recon; sid:200000017; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anjalijha167.github.io",nocase; classtype:attempted-recon; sid:200000018; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apricotmelly.wixstudio.com",nocase; classtype:attempted-recon; sid:200000019; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apricotmelly.wixstudio.io",nocase; classtype:attempted-recon; sid:200000020; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arpitgoel889.github.io",nocase; classtype:attempted-recon; sid:200000021; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"art-tour.net",nocase; classtype:attempted-recon; sid:200000022; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artofbaseball.net",nocase; classtype:attempted-recon; sid:200000023; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ashishmaurya73.github.io",nocase; classtype:attempted-recon; sid:200000024; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"askewi3010.wixsite.com",nocase; classtype:attempted-recon; sid:200000025; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asupanvviptelegram.my.id",nocase; classtype:attempted-recon; sid:200000026; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atobi432.wixsite.com",nocase; classtype:attempted-recon; sid:200000027; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcom-103887.weebly.com",nocase; classtype:attempted-recon; sid:200000028; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attisat.gr",nocase; classtype:attempted-recon; sid:200000029; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attvalidatekindly.weebly.com",nocase; classtype:attempted-recon; sid:200000030; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attyahoomai.wixsite.com",nocase; classtype:attempted-recon; sid:200000031; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoscurt24.de",nocase; classtype:attempted-recon; sid:200000032; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz",nocase; classtype:attempted-recon; sid:200000033; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link",nocase; classtype:attempted-recon; sid:200000034; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200000035; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link",nocase; classtype:attempted-recon; sid:200000036; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000037; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ballefabrouyau-9112.vercel.app",nocase; classtype:attempted-recon; sid:200000038; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bantuan-tunai-mystrx.jobs8.my.id",nocase; classtype:attempted-recon; sid:200000039; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baradua.it",nocase; classtype:attempted-recon; sid:200000040; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"barberalonzo29.wixsite.com",nocase; classtype:attempted-recon; sid:200000041; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"basil0303.github.io",nocase; classtype:attempted-recon; sid:200000042; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bernardamos422.wixsite.com",nocase; classtype:attempted-recon; sid:200000043; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bettinamarks.com",nocase; classtype:attempted-recon; sid:200000044; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bharathi1809.github.io",nocase; classtype:attempted-recon; sid:200000045; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blue-tick-help.vercel.app",nocase; classtype:attempted-recon; sid:200000046; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bntuan-dana4-resmii.danytx.web.id",nocase; classtype:attempted-recon; sid:200000047; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boapremium-001-site1.ptempurl.com",nocase; classtype:attempted-recon; sid:200000048; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bojanawauceu-3394.vercel.app",nocase; classtype:attempted-recon; sid:200000049; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bolipost.cc",nocase; classtype:attempted-recon; sid:200000050; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bomomvpfo.club",nocase; classtype:attempted-recon; sid:200000051; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bountyhunterpc.github.io",nocase; classtype:attempted-recon; sid:200000052; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bpqxqtuig.club",nocase; classtype:attempted-recon; sid:200000053; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brbrgsnyqwer.wixsite.com",nocase; classtype:attempted-recon; sid:200000054; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brwj.cn",nocase; classtype:attempted-recon; sid:200000055; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt.daftpage.com",nocase; classtype:attempted-recon; sid:200000056; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cache.netflix.com.user12.sanasta.us.kg",nocase; classtype:attempted-recon; sid:200000057; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carolesheridan4.wixsite.com",nocase; classtype:attempted-recon; sid:200000058; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chance-to-availbale-free-badge.vercel.app",nocase; classtype:attempted-recon; sid:200000059; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chiragrajoria.github.io",nocase; classtype:attempted-recon; sid:200000060; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cid-phisher.github.io",nocase; classtype:attempted-recon; sid:200000061; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clariveh.baby",nocase; classtype:attempted-recon; sid:200000062; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clifforddaniells.wixsite.com",nocase; classtype:attempted-recon; sid:200000063; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbasefaqdesk.com",nocase; classtype:attempted-recon; sid:200000064; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coiniiobisaecoins.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000065; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmationhelpmeta.io.vn",nocase; classtype:attempted-recon; sid:200000066; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cpisafety.che.buet.ac.bd",nocase; classtype:attempted-recon; sid:200000067; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cricketbettingpro.com",nocase; classtype:attempted-recon; sid:200000068; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cubixpro.com",nocase; classtype:attempted-recon; sid:200000069; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyatt810.weebly.com",nocase; classtype:attempted-recon; sid:200000070; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dalipthukral0.wixsite.com",nocase; classtype:attempted-recon; sid:200000071; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"danaindonesia.bantuan-resmi.top",nocase; classtype:attempted-recon; sid:200000072; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deepxzkdn.deadth.sbs",nocase; classtype:attempted-recon; sid:200000073; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"descounsell.wixsite.com",nocase; classtype:attempted-recon; sid:200000074; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"detlxc.master78lite.com",nocase; classtype:attempted-recon; sid:200000075; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"devshubhamjadav.github.io",nocase; classtype:attempted-recon; sid:200000076; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfxzsdf.wixsite.com",nocase; classtype:attempted-recon; sid:200000077; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhanushr24.github.io",nocase; classtype:attempted-recon; sid:200000078; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dianecadei8.wixsite.com",nocase; classtype:attempted-recon; sid:200000079; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"did57sauveton.wixsite.com",nocase; classtype:attempted-recon; sid:200000080; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dl.mod30t.ir",nocase; classtype:attempted-recon; sid:200000081; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dmgeuntv.icu",nocase; classtype:attempted-recon; sid:200000082; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doloribus-voluptat-space.wpkubio.com",nocase; classtype:attempted-recon; sid:200000083; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"donrichie781.wixsite.com",nocase; classtype:attempted-recon; sid:200000084; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"donttolinii.wixsite.com",nocase; classtype:attempted-recon; sid:200000085; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dtn-3c.vercel.app",nocase; classtype:attempted-recon; sid:200000086; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duvetrexuprau.vercel.app",nocase; classtype:attempted-recon; sid:200000087; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebayqi.shop",nocase; classtype:attempted-recon; sid:200000088; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eirxkrdgtk.duckdns.org",nocase; classtype:attempted-recon; sid:200000089; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"energizahn.dicosur.net",nocase; classtype:attempted-recon; sid:200000090; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esumbunk.cc",nocase; classtype:attempted-recon; sid:200000091; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esunbonk.cc",nocase; classtype:attempted-recon; sid:200000092; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"everestmotors.com.np",nocase; classtype:attempted-recon; sid:200000093; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evqjteoscz.link",nocase; classtype:attempted-recon; sid:200000094; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exoduswallet.cn.com",nocase; classtype:attempted-recon; sid:200000095; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-tw-web.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000096; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebookverifycenter.com.de",nocase; classtype:attempted-recon; sid:200000097; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faceit.sunbim.pro",nocase; classtype:attempted-recon; sid:200000098; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faizankhan0408.github.io",nocase; classtype:attempted-recon; sid:200000099; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fauexpfv.icu",nocase; classtype:attempted-recon; sid:200000100; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feprk.sbs",nocase; classtype:attempted-recon; sid:200000101; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formsly-form.web.app",nocase; classtype:attempted-recon; sid:200000102; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-5573726.webadorsite.com",nocase; classtype:attempted-recon; sid:200000103; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fsdfjeifls.click",nocase; classtype:attempted-recon; sid:200000104; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiciacgu.com.ar",nocase; classtype:attempted-recon; sid:200000105; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gardakosto.wixsite.com",nocase; classtype:attempted-recon; sid:200000106; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geemiioilogin.gitbook.io",nocase; classtype:attempted-recon; sid:200000107; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guptanikshay.github.io",nocase; classtype:attempted-recon; sid:200000108; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gyxgxuu.wixsite.com",nocase; classtype:attempted-recon; sid:200000109; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.z3v2.com",nocase; classtype:attempted-recon; sid:200000110; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hajjsj.top",nocase; classtype:attempted-recon; sid:200000111; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hamza-nawaz.github.io",nocase; classtype:attempted-recon; sid:200000112; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"havkeye14.wixsite.com",nocase; classtype:attempted-recon; sid:200000113; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfhfyejkwsu.wixsite.com",nocase; classtype:attempted-recon; sid:200000114; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjdnshu.wixsite.com",nocase; classtype:attempted-recon; sid:200000115; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hollykim.com",nocase; classtype:attempted-recon; sid:200000116; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homemailweb-608850.weeblysite.com",nocase; classtype:attempted-recon; sid:200000117; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htitofjpve.club",nocase; classtype:attempted-recon; sid:200000118; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huynguyen2k.github.io",nocase; classtype:attempted-recon; sid:200000119; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icontainrbbr.s3.us-west-004.backblazeb2.com",nocase; classtype:attempted-recon; sid:200000120; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"identifier-vous456.wixsite.com",nocase; classtype:attempted-recon; sid:200000121; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ijhsk.github.io",nocase; classtype:attempted-recon; sid:200000122; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imperia-trading.online",nocase; classtype:attempted-recon; sid:200000123; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informed.deliverydn.top",nocase; classtype:attempted-recon; sid:200000124; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informed.deliveryfp.top",nocase; classtype:attempted-recon; sid:200000125; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informed.deliveryft.top",nocase; classtype:attempted-recon; sid:200000126; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informed.deliveryhrw.top",nocase; classtype:attempted-recon; sid:200000127; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informed.deliverywbk.top",nocase; classtype:attempted-recon; sid:200000128; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inshatrading.com",nocase; classtype:attempted-recon; sid:200000129; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instagram.ossamaelidrissi.com",nocase; classtype:attempted-recon; sid:200000130; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inusualinteriorismo.com",nocase; classtype:attempted-recon; sid:200000131; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itaufatura.github.io",nocase; classtype:attempted-recon; sid:200000132; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itpronetwork.net",nocase; classtype:attempted-recon; sid:200000133; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itsmdshahin.github.io",nocase; classtype:attempted-recon; sid:200000134; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ixbuxedexw.info",nocase; classtype:attempted-recon; sid:200000135; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jeittagrennami-1729.vercel.app",nocase; classtype:attempted-recon; sid:200000136; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jimenezbill.wixsite.com",nocase; classtype:attempted-recon; sid:200000137; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jordanmargaret.wixsite.com",nocase; classtype:attempted-recon; sid:200000138; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jpmc.shieldssecuritybags.com",nocase; classtype:attempted-recon; sid:200000139; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jrcce.shop",nocase; classtype:attempted-recon; sid:200000140; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdotts1.wixsite.com",nocase; classtype:attempted-recon; sid:200000141; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kemsnwshdurut.weebly.com",nocase; classtype:attempted-recon; sid:200000142; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"large-kitchen-substantial.on-fleek.app",nocase; classtype:attempted-recon; sid:200000143; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leipeleufreyo.vercel.app",nocase; classtype:attempted-recon; sid:200000144; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lemedab246.wixsite.com",nocase; classtype:attempted-recon; sid:200000145; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lightseagreen-jaguar-612987.hostingersite.com",nocase; classtype:attempted-recon; sid:200000146; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ljsherrm.wixsite.com",nocase; classtype:attempted-recon; sid:200000147; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnadm.icu",nocase; classtype:attempted-recon; sid:200000148; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"locateid.com.tr",nocase; classtype:attempted-recon; sid:200000149; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginmailaccount1.wixsite.com",nocase; classtype:attempted-recon; sid:200000150; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lsddndp-up.top",nocase; classtype:attempted-recon; sid:200000151; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lve1131.wixstudio.com",nocase; classtype:attempted-recon; sid:200000152; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lve1131.wixstudio.io",nocase; classtype:attempted-recon; sid:200000153; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.8724319-coinbase.com",nocase; classtype:attempted-recon; sid:200000154; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.health-status.fb-business.com",nocase; classtype:attempted-recon; sid:200000155; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maryp6608.wixsite.com",nocase; classtype:attempted-recon; sid:200000156; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mauttauhuttiloi.vercel.app",nocase; classtype:attempted-recon; sid:200000157; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messagevocale888.wixsite.com",nocase; classtype:attempted-recon; sid:200000158; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meta-mask-io.serv00.net",nocase; classtype:attempted-recon; sid:200000159; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaiimaaskk-login.gitbook.io",nocase; classtype:attempted-recon; sid:200000160; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamsik.com",nocase; classtype:attempted-recon; sid:200000161; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miss.votingforstudents.com",nocase; classtype:attempted-recon; sid:200000162; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkramer03.wixsite.com",nocase; classtype:attempted-recon; sid:200000163; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmoom4.wixsite.com",nocase; classtype:attempted-recon; sid:200000164; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobileservice34.wixsite.com",nocase; classtype:attempted-recon; sid:200000165; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monetization-violation-page.github.io",nocase; classtype:attempted-recon; sid:200000166; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monirshouvo.github.io",nocase; classtype:attempted-recon; sid:200000167; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"morinierevolailles.wixsite.com",nocase; classtype:attempted-recon; sid:200000168; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtalha21.github.io",nocase; classtype:attempted-recon; sid:200000169; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muhammedasfacknk.github.io",nocase; classtype:attempted-recon; sid:200000170; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"munnoi.github.io",nocase; classtype:attempted-recon; sid:200000171; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myurls.bio",nocase; classtype:attempted-recon; sid:200000172; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myvalue365.com",nocase; classtype:attempted-recon; sid:200000173; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navicrettobro-6686.vercel.app",nocase; classtype:attempted-recon; sid:200000174; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nbbroker.az",nocase; classtype:attempted-recon; sid:200000175; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nesgrjahwt.guru",nocase; classtype:attempted-recon; sid:200000176; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netfeliz.netlify.app",nocase; classtype:attempted-recon; sid:200000177; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfwqayckqr.ltd",nocase; classtype:attempted-recon; sid:200000178; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notify-user-deviations.vercel.app",nocase; classtype:attempted-recon; sid:200000179; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oasisministries.com",nocase; classtype:attempted-recon; sid:200000180; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omar7rb1.github.io",nocase; classtype:attempted-recon; sid:200000181; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"or-obaidullah.github.io",nocase; classtype:attempted-recon; sid:200000182; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orangveri.wixsite.com",nocase; classtype:attempted-recon; sid:200000183; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.usertrackehe.top",nocase; classtype:attempted-recon; sid:200000184; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.usertrackkum.top",nocase; classtype:attempted-recon; sid:200000185; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.usertrackrry.top",nocase; classtype:attempted-recon; sid:200000186; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p.usertrackyfk.top",nocase; classtype:attempted-recon; sid:200000187; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pajem76668.wixsite.com",nocase; classtype:attempted-recon; sid:200000188; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancake-frontend-dejmy38ut-chefilip.vercel.app",nocase; classtype:attempted-recon; sid:200000189; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perso8764002.wixsite.com",nocase; classtype:attempted-recon; sid:200000190; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phenomenal-praline-ff95b6.netlify.app",nocase; classtype:attempted-recon; sid:200000191; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pikay13.github.io",nocase; classtype:attempted-recon; sid:200000192; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"podrimapso.wixsite.com",nocase; classtype:attempted-recon; sid:200000193; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portal-trezr-cdn.github.io",nocase; classtype:attempted-recon; sid:200000194; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppruphmllx.blue",nocase; classtype:attempted-recon; sid:200000195; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"premiumember.ct.ws",nocase; classtype:attempted-recon; sid:200000196; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preuffeddoupraki-2297.vercel.app",nocase; classtype:attempted-recon; sid:200000197; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev",nocase; classtype:attempted-recon; sid:200000198; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-019ceedaa0894587aa4255109af6c416.r2.dev",nocase; classtype:attempted-recon; sid:200000199; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev",nocase; classtype:attempted-recon; sid:200000200; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev",nocase; classtype:attempted-recon; sid:200000201; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-135a4055f8454025aa2f06845da4f8d8.r2.dev",nocase; classtype:attempted-recon; sid:200000202; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-140cf903de964a479f3b465e010ddb3b.r2.dev",nocase; classtype:attempted-recon; sid:200000203; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-14b5071e5a78406a9a92a00be9141089.r2.dev",nocase; classtype:attempted-recon; sid:200000204; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev",nocase; classtype:attempted-recon; sid:200000205; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev",nocase; classtype:attempted-recon; sid:200000206; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-244225b6dd0e404291c857fafd588b4f.r2.dev",nocase; classtype:attempted-recon; sid:200000207; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-28e193ca593a467bbd1e0232a73a5680.r2.dev",nocase; classtype:attempted-recon; sid:200000208; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-2a64f782845943beae62e9f09c473700.r2.dev",nocase; classtype:attempted-recon; sid:200000209; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-34ae76b320c445628f3e2bca4a192394.r2.dev",nocase; classtype:attempted-recon; sid:200000210; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev",nocase; classtype:attempted-recon; sid:200000211; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-3784361eb0b640e797495d46b35ce030.r2.dev",nocase; classtype:attempted-recon; sid:200000212; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev",nocase; classtype:attempted-recon; sid:200000213; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev",nocase; classtype:attempted-recon; sid:200000214; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev",nocase; classtype:attempted-recon; sid:200000215; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev",nocase; classtype:attempted-recon; sid:200000216; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev",nocase; classtype:attempted-recon; sid:200000217; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-55e3e997548a46879ee19f4d494309d6.r2.dev",nocase; classtype:attempted-recon; sid:200000218; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-619d0209611d4e8fb34f21726fd3b133.r2.dev",nocase; classtype:attempted-recon; sid:200000219; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev",nocase; classtype:attempted-recon; sid:200000220; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-668f78270889467e8af696261336536f.r2.dev",nocase; classtype:attempted-recon; sid:200000221; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-69356b68f37442e0a24ceb7981f0841b.r2.dev",nocase; classtype:attempted-recon; sid:200000222; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev",nocase; classtype:attempted-recon; sid:200000223; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev",nocase; classtype:attempted-recon; sid:200000224; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev",nocase; classtype:attempted-recon; sid:200000225; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-73ee129d9ec943f785408564adcaf985.r2.dev",nocase; classtype:attempted-recon; sid:200000226; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7695c0b23019424cb779394f7a362ba8.r2.dev",nocase; classtype:attempted-recon; sid:200000227; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-76bf011f31344f45bf2356e9005ac465.r2.dev",nocase; classtype:attempted-recon; sid:200000228; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7a6b99614f4b41658cd677a620b18951.r2.dev",nocase; classtype:attempted-recon; sid:200000229; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7be95ce02232456db08522b3d3c99765.r2.dev",nocase; classtype:attempted-recon; sid:200000230; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev",nocase; classtype:attempted-recon; sid:200000231; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-80fb550826904a048a5391946ef49a69.r2.dev",nocase; classtype:attempted-recon; sid:200000232; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev",nocase; classtype:attempted-recon; sid:200000233; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-83f86cbfe52f42728c26cda54824eb39.r2.dev",nocase; classtype:attempted-recon; sid:200000234; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-886654e4969e42e988d48d11222c8a57.r2.dev",nocase; classtype:attempted-recon; sid:200000235; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev",nocase; classtype:attempted-recon; sid:200000236; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev",nocase; classtype:attempted-recon; sid:200000237; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev",nocase; classtype:attempted-recon; sid:200000238; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev",nocase; classtype:attempted-recon; sid:200000239; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-97673970c1c145eda5e559c4f9c18f61.r2.dev",nocase; classtype:attempted-recon; sid:200000240; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-9839470418254b29962dec4220c83255.r2.dev",nocase; classtype:attempted-recon; sid:200000241; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev",nocase; classtype:attempted-recon; sid:200000242; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev",nocase; classtype:attempted-recon; sid:200000243; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev",nocase; classtype:attempted-recon; sid:200000244; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-a017bd9f9dc6498183af41770490c482.r2.dev",nocase; classtype:attempted-recon; sid:200000245; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev",nocase; classtype:attempted-recon; sid:200000246; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-aa456431547a4e28948699d7c6a22006.r2.dev",nocase; classtype:attempted-recon; sid:200000247; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev",nocase; classtype:attempted-recon; sid:200000248; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev",nocase; classtype:attempted-recon; sid:200000249; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev",nocase; classtype:attempted-recon; sid:200000250; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-cb72691642c444eb900a44aa1d8a7107.r2.dev",nocase; classtype:attempted-recon; sid:200000251; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-ce8fc030252b4632959515dffef1b750.r2.dev",nocase; classtype:attempted-recon; sid:200000252; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev",nocase; classtype:attempted-recon; sid:200000253; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-de59803496c8489585895b6917266e7c.r2.dev",nocase; classtype:attempted-recon; sid:200000254; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev",nocase; classtype:attempted-recon; sid:200000255; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-ebb47370c13740ef9014f6bba927d946.r2.dev",nocase; classtype:attempted-recon; sid:200000256; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev",nocase; classtype:attempted-recon; sid:200000257; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-f7edd89a736e48428172001b0b1906fe.r2.dev",nocase; classtype:attempted-recon; sid:200000258; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-fc37d2d339714056b7f16368b49ae532.r2.dev",nocase; classtype:attempted-recon; sid:200000259; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-fd5baa54f2714f068701be4a7563f2de.r2.dev",nocase; classtype:attempted-recon; sid:200000260; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-fef94e8fd76842a4818865dd78ef618f.r2.dev",nocase; classtype:attempted-recon; sid:200000261; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puvomattipro.vercel.app",nocase; classtype:attempted-recon; sid:200000262; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qfbspeclmg.bond",nocase; classtype:attempted-recon; sid:200000263; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qowii.top",nocase; classtype:attempted-recon; sid:200000264; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quiz.vidio.com.user3.hehdin.us.kg",nocase; classtype:attempted-recon; sid:200000265; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"radhikamd.github.io",nocase; classtype:attempted-recon; sid:200000266; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raiyone.cc",nocase; classtype:attempted-recon; sid:200000267; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rayatrecruitment.com",nocase; classtype:attempted-recon; sid:200000268; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rectifcentrefdeptrescu.weebly.com",nocase; classtype:attempted-recon; sid:200000269; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rekruitmenttjwtt.vip-media.web.id",nocase; classtype:attempted-recon; sid:200000270; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resolverpad.dev",nocase; classtype:attempted-recon; sid:200000271; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reward-webconnect.pages.dev",nocase; classtype:attempted-recon; sid:200000272; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roberthood.net",nocase; classtype:attempted-recon; sid:200000273; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rtm-att.directly.com",nocase; classtype:attempted-recon; sid:200000274; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ruthah9.wixsite.com",nocase; classtype:attempted-recon; sid:200000275; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rwhjdb.icu",nocase; classtype:attempted-recon; sid:200000276; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.eu.premiumisp.net",nocase; classtype:attempted-recon; sid:200000277; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.team-a.cam",nocase; classtype:attempted-recon; sid:200000278; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s080rjhdn.top",nocase; classtype:attempted-recon; sid:200000279; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salmanfarsi01.github.io",nocase; classtype:attempted-recon; sid:200000280; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santanderpod.globalizeme-dublin2.co.uk",nocase; classtype:attempted-recon; sid:200000281; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sedosexu.wixsite.com",nocase; classtype:attempted-recon; sid:200000282; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seller.tksalem.com",nocase; classtype:attempted-recon; sid:200000283; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.2rk3.com",nocase; classtype:attempted-recon; sid:200000284; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.6avj.com",nocase; classtype:attempted-recon; sid:200000285; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.dgm0.com",nocase; classtype:attempted-recon; sid:200000286; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.k6dz.com",nocase; classtype:attempted-recon; sid:200000287; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.pxs7.com",nocase; classtype:attempted-recon; sid:200000288; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seunelvis1.github.io",nocase; classtype:attempted-recon; sid:200000289; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shanky0.github.io",nocase; classtype:attempted-recon; sid:200000290; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sjhdoirrsjx.wixsite.com",nocase; classtype:attempted-recon; sid:200000291; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smgolamalif.github.io",nocase; classtype:attempted-recon; sid:200000292; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsmmsernorepls.wixsite.com",nocase; classtype:attempted-recon; sid:200000293; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soumya252000.github.io",nocase; classtype:attempted-recon; sid:200000294; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steam.communityartlist.com",nocase; classtype:attempted-recon; sid:200000295; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steam.workshopgraphy.com",nocase; classtype:attempted-recon; sid:200000296; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommuitty.com",nocase; classtype:attempted-recon; sid:200000297; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommunmutly.com",nocase; classtype:attempted-recon; sid:200000298; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcomunutty.com",nocase; classtype:attempted-recon; sid:200000299; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamconmumity.com",nocase; classtype:attempted-recon; sid:200000300; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steeamcommnity.com",nocase; classtype:attempted-recon; sid:200000301; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stephen55687.github.io",nocase; classtype:attempted-recon; sid:200000302; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevencrews.com",nocase; classtype:attempted-recon; sid:200000303; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"submit-dispute-form.github.io",nocase; classtype:attempted-recon; sid:200000304; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sultan-raza.github.io",nocase; classtype:attempted-recon; sid:200000305; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sumagayathri-999.github.io",nocase; classtype:attempted-recon; sid:200000306; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-verify-page.com",nocase; classtype:attempted-recon; sid:200000307; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supports-center-communityhelp.cloud",nocase; classtype:attempted-recon; sid:200000308; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"svckhc.wixsite.com",nocase; classtype:attempted-recon; sid:200000309; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swatteam219.wixsite.com",nocase; classtype:attempted-recon; sid:200000310; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taher-mohamed-ahmed-saad.github.io",nocase; classtype:attempted-recon; sid:200000311; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taiegrma.gold",nocase; classtype:attempted-recon; sid:200000312; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tairgam.chat",nocase; classtype:attempted-recon; sid:200000313; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tairgam.fund",nocase; classtype:attempted-recon; sid:200000314; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tairgam.show",nocase; classtype:attempted-recon; sid:200000315; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tairgam.zone",nocase; classtype:attempted-recon; sid:200000316; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talergam.live",nocase; classtype:attempted-recon; sid:200000317; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talergam.red",nocase; classtype:attempted-recon; sid:200000318; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talergam.shopping",nocase; classtype:attempted-recon; sid:200000319; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talergam.today",nocase; classtype:attempted-recon; sid:200000320; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tanfupikyx.monster",nocase; classtype:attempted-recon; sid:200000321; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcsktjtl.icu",nocase; classtype:attempted-recon; sid:200000322; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"technoindiagroup.com",nocase; classtype:attempted-recon; sid:200000323; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecmachine.com.br",nocase; classtype:attempted-recon; sid:200000324; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teiagram.group",nocase; classtype:attempted-recon; sid:200000325; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teiagram.red",nocase; classtype:attempted-recon; sid:200000326; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teiagram.zone",nocase; classtype:attempted-recon; sid:200000327; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teiegrma.cab",nocase; classtype:attempted-recon; sid:200000328; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teiegrma.design",nocase; classtype:attempted-recon; sid:200000329; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teiegrrm.blue",nocase; classtype:attempted-recon; sid:200000330; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teiegrrm.today",nocase; classtype:attempted-recon; sid:200000331; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telargam.city",nocase; classtype:attempted-recon; sid:200000332; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telargam.cloud",nocase; classtype:attempted-recon; sid:200000333; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telargam.college",nocase; classtype:attempted-recon; sid:200000334; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telargam.tax",nocase; classtype:attempted-recon; sid:200000335; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegram-safe.cc",nocase; classtype:attempted-recon; sid:200000336; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrrm.monster",nocase; classtype:attempted-recon; sid:200000337; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrrm.xin",nocase; classtype:attempted-recon; sid:200000338; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telemlp-omsz.icu",nocase; classtype:attempted-recon; sid:200000339; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teleqrma.show",nocase; classtype:attempted-recon; sid:200000340; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telezelm-lbhg.icu",nocase; classtype:attempted-recon; sid:200000341; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tellmeliu.github.io",nocase; classtype:attempted-recon; sid:200000342; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"terfanfranck.wixsite.com",nocase; classtype:attempted-recon; sid:200000343; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tienda-linea7.com",nocase; classtype:attempted-recon; sid:200000344; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tienda-linea9.com",nocase; classtype:attempted-recon; sid:200000345; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiktok.fhinek.com",nocase; classtype:attempted-recon; sid:200000346; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiktokkjshop.com",nocase; classtype:attempted-recon; sid:200000347; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiktokmax3.vip",nocase; classtype:attempted-recon; sid:200000348; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"troubadeihati-9272.vercel.app",nocase; classtype:attempted-recon; sid:200000349; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tysmbdpz.icu",nocase; classtype:attempted-recon; sid:200000350; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u-pphholfd.godaddysites.com",nocase; classtype:attempted-recon; sid:200000351; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ultrafima.com",nocase; classtype:attempted-recon; sid:200000352; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uphold-loges.github.io",nocase; classtype:attempted-recon; sid:200000353; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urbexine.shop",nocase; classtype:attempted-recon; sid:200000354; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urmilagome.github.io",nocase; classtype:attempted-recon; sid:200000355; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user1.hehdin.us.kg",nocase; classtype:attempted-recon; sid:200000356; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"username895.wixsite.com",nocase; classtype:attempted-recon; sid:200000357; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-parceliutxb.vip",nocase; classtype:attempted-recon; sid:200000358; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-parceliutxc.vip",nocase; classtype:attempted-recon; sid:200000359; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-parceliutxe.vip",nocase; classtype:attempted-recon; sid:200000360; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-parceliutxg.vip",nocase; classtype:attempted-recon; sid:200000361; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-parceljzuwb.vip",nocase; classtype:attempted-recon; sid:200000362; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-parceljzuwc.vip",nocase; classtype:attempted-recon; sid:200000363; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackaaw.top",nocase; classtype:attempted-recon; sid:200000364; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackaba.top",nocase; classtype:attempted-recon; sid:200000365; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackakt.top",nocase; classtype:attempted-recon; sid:200000366; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackartjlo.top",nocase; classtype:attempted-recon; sid:200000367; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackbpg.top",nocase; classtype:attempted-recon; sid:200000368; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackdex.top",nocase; classtype:attempted-recon; sid:200000369; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackeaj.top",nocase; classtype:attempted-recon; sid:200000370; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackemh.top",nocase; classtype:attempted-recon; sid:200000371; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackevj.top",nocase; classtype:attempted-recon; sid:200000372; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackfnl.top",nocase; classtype:attempted-recon; sid:200000373; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackghi.top",nocase; classtype:attempted-recon; sid:200000374; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackgix.top",nocase; classtype:attempted-recon; sid:200000375; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackgna.top",nocase; classtype:attempted-recon; sid:200000376; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackhal.top",nocase; classtype:attempted-recon; sid:200000377; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackicg.top",nocase; classtype:attempted-recon; sid:200000378; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackidp.top",nocase; classtype:attempted-recon; sid:200000379; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackiiz.top",nocase; classtype:attempted-recon; sid:200000380; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracking-helpnko.cc",nocase; classtype:attempted-recon; sid:200000381; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracking-helptom.cc",nocase; classtype:attempted-recon; sid:200000382; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracking-helptot.cc",nocase; classtype:attempted-recon; sid:200000383; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracking-helptwo.cc",nocase; classtype:attempted-recon; sid:200000384; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracking-helptzo.cc",nocase; classtype:attempted-recon; sid:200000385; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackipxdnh.top",nocase; classtype:attempted-recon; sid:200000386; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackius.top",nocase; classtype:attempted-recon; sid:200000387; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackjgc.top",nocase; classtype:attempted-recon; sid:200000388; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackjkh.top",nocase; classtype:attempted-recon; sid:200000389; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackkys.top",nocase; classtype:attempted-recon; sid:200000390; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackloi.top",nocase; classtype:attempted-recon; sid:200000391; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracklpe.top",nocase; classtype:attempted-recon; sid:200000392; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracklvr.top",nocase; classtype:attempted-recon; sid:200000393; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmjx.top",nocase; classtype:attempted-recon; sid:200000394; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmli.top",nocase; classtype:attempted-recon; sid:200000395; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackmvd.top",nocase; classtype:attempted-recon; sid:200000396; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracknsr.top",nocase; classtype:attempted-recon; sid:200000397; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackodf.top",nocase; classtype:attempted-recon; sid:200000398; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackogx.top",nocase; classtype:attempted-recon; sid:200000399; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackonp.top",nocase; classtype:attempted-recon; sid:200000400; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackpgl.top",nocase; classtype:attempted-recon; sid:200000401; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackpoq.top",nocase; classtype:attempted-recon; sid:200000402; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackpsx.top",nocase; classtype:attempted-recon; sid:200000403; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackpwg.top",nocase; classtype:attempted-recon; sid:200000404; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackree.top",nocase; classtype:attempted-recon; sid:200000405; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracksbw.top",nocase; classtype:attempted-recon; sid:200000406; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracktdz.top",nocase; classtype:attempted-recon; sid:200000407; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracktmb.top",nocase; classtype:attempted-recon; sid:200000408; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracktus.top",nocase; classtype:attempted-recon; sid:200000409; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tracktyi.top",nocase; classtype:attempted-recon; sid:200000410; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackuir.top",nocase; classtype:attempted-recon; sid:200000411; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackuve.top",nocase; classtype:attempted-recon; sid:200000412; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackvbw.top",nocase; classtype:attempted-recon; sid:200000413; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackvkt.top",nocase; classtype:attempted-recon; sid:200000414; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackvoi.top",nocase; classtype:attempted-recon; sid:200000415; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackwil.top",nocase; classtype:attempted-recon; sid:200000416; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackxgj.top",nocase; classtype:attempted-recon; sid:200000417; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackxkt.top",nocase; classtype:attempted-recon; sid:200000418; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackxrz.top",nocase; classtype:attempted-recon; sid:200000419; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackxxh.top",nocase; classtype:attempted-recon; sid:200000420; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-trackzyy.top",nocase; classtype:attempted-recon; sid:200000421; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsservicetrack.blogspot.com.cy",nocase; classtype:attempted-recon; sid:200000422; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veeradalaw.com",nocase; classtype:attempted-recon; sid:200000423; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vmgmjfbz.icu",nocase; classtype:attempted-recon; sid:200000424; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wakakehuteu-9247.vercel.app",nocase; classtype:attempted-recon; sid:200000425; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletcazonnect.gitbook.io",nocase; classtype:attempted-recon; sid:200000426; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wap.brwj.cn",nocase; classtype:attempted-recon; sid:200000427; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailservice08.wixsite.com",nocase; classtype:attempted-recon; sid:200000428; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wellyngtonkuhn.github.io",nocase; classtype:attempted-recon; sid:200000429; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whare.100webspace.net",nocase; classtype:attempted-recon; sid:200000430; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwiiskdkdnffnjuca.weebly.com",nocase; classtype:attempted-recon; sid:200000431; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-degelyehuda-org-il.filesusr.com",nocase; classtype:attempted-recon; sid:200000432; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwwteiegramwor.xyz",nocase; classtype:attempted-recon; sid:200000433; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xavier6709.github.io",nocase; classtype:attempted-recon; sid:200000434; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--d1aqfkf.xn--p1ai",nocase; classtype:attempted-recon; sid:200000435; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xox-exe.github.io",nocase; classtype:attempted-recon; sid:200000436; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yairix.github.io",nocase; classtype:attempted-recon; sid:200000437; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yarakobanrhg.wpenginepowered.com",nocase; classtype:attempted-recon; sid:200000438; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zattajakoixa-8559.vercel.app",nocase; classtype:attempted-recon; sid:200000439; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zerotelegram.pl",nocase; classtype:attempted-recon; sid:200000440; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zetriyauffivou-1144.vercel.app",nocase; classtype:attempted-recon; sid:200000441; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zkybgfddvl.shop",nocase; classtype:attempted-recon; sid:200000442; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zures.com.br",nocase; classtype:attempted-recon; sid:200000443; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"busanopen.org",nocase; http_uri; content:"/office/msgvoice/source/login.php",nocase; classtype:attempted-recon; sid:200000444; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"busanopen.org",nocase; http_uri; content:"/office/msgvoice/source/wrongpass.php",nocase; classtype:attempted-recon; sid:200000445; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eqrco.de",nocase; http_uri; content:"/a/t3magy",nocase; classtype:attempted-recon; sid:200000446; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/mlh21880/",nocase; classtype:attempted-recon; sid:200000447; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/btin/bt/",nocase; classtype:attempted-recon; sid:200000448; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/xqplkv",nocase; classtype:attempted-recon; sid:200000449; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keepo.io",nocase; http_uri; content:"/login/",nocase; classtype:attempted-recon; sid:200000450; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keepo.io",nocase; http_uri; content:"/serverguide53/",nocase; classtype:attempted-recon; sid:200000451; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qr.me-qr.com",nocase; http_uri; content:"/tcy5mrt1/",nocase; classtype:attempted-recon; sid:200000452; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/l0gin-microsoftwebonlne.app/r75567/",nocase; classtype:attempted-recon; sid:200000453; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/345678987655/home/",nocase; classtype:attempted-recon; sid:200000454; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectbusiness/btconnect/",nocase; classtype:attempted-recon; sid:200000455; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fatherplac/accueil/",nocase; classtype:attempted-recon; sid:200000456; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/koiuld2dkjcxnjk2s/",nocase; classtype:attempted-recon; sid:200000457; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-aslkdsald/",nocase; classtype:attempted-recon; sid:200000458; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paypal-loginn/",nocase; classtype:attempted-recon; sid:200000459; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snapto.link",nocase; http_uri; content:"/closurep-1/",nocase; classtype:attempted-recon; sid:200000460; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webogram.org",nocase; http_uri; content:"/a/",nocase; classtype:attempted-recon; sid:200000461; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/drpj3ayxdsc4",nocase; classtype:attempted-recon; sid:200000462; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zyexx.com",nocase; http_uri; content:"/kcf05074c7d8ec461318b173a03xd5882406.html",nocase; classtype:attempted-recon; sid:200000463; rev:1;)
diff --git a/phishing-filter-snort3.rules.br b/phishing-filter-snort3.rules.br
new file mode 100644
index 000000000..1a9872e19
Binary files /dev/null and b/phishing-filter-snort3.rules.br differ
diff --git a/phishing-filter-snort3.rules.gz b/phishing-filter-snort3.rules.gz
new file mode 100644
index 000000000..7e98309c5
Binary files /dev/null and b/phishing-filter-snort3.rules.gz differ
diff --git a/phishing-filter-splunk.csv b/phishing-filter-splunk.csv
new file mode 100644
index 000000000..9ae44c593
--- /dev/null
+++ b/phishing-filter-splunk.csv
@@ -0,0 +1,470 @@
+# Title: Phishing URL Splunk Lookup
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+"host","path","message","updated"
+"23cssahil.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"3reshma.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"67533177.ishg.za.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"67780581.ishg.za.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"72386989.ishg.za.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"a2i9s4y.space","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"a3.ikansalasq.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"acederma.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ahhhh.pe.kr","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"airbnb.sync114.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"aisths.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"akanksha3012.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"aks34.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"alessandrodiana.it","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"amamz-product.click","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"amazonnu.co","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"amreeth.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"anjalijha167.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"apricotmelly.wixstudio.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"apricotmelly.wixstudio.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"arpitgoel889.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"art-tour.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"artofbaseball.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ashishmaurya73.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"askewi3010.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"asupanvviptelegram.my.id","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"atobi432.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"attcom-103887.weebly.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"attisat.gr","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"attvalidatekindly.weebly.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"attyahoomai.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"autoscurt24.de","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ballefabrouyau-9112.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bantuan-tunai-mystrx.jobs8.my.id","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"baradua.it","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"barberalonzo29.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"basil0303.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bernardamos422.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bettinamarks.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bharathi1809.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"blue-tick-help.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bntuan-dana4-resmii.danytx.web.id","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"boapremium-001-site1.ptempurl.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bojanawauceu-3394.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bolipost.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bomomvpfo.club","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bountyhunterpc.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bpqxqtuig.club","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"brbrgsnyqwer.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"brwj.cn","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"bt.daftpage.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"cache.netflix.com.user12.sanasta.us.kg","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"carolesheridan4.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"chance-to-availbale-free-badge.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"chiragrajoria.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"cid-phisher.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"clariveh.baby","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"clifforddaniells.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"coinbasefaqdesk.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"coiniiobisaecoins.azurewebsites.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"confirmationhelpmeta.io.vn","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"cpisafety.che.buet.ac.bd","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"cricketbettingpro.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"cubixpro.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"currentlyatt810.weebly.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"dalipthukral0.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"danaindonesia.bantuan-resmi.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"deepxzkdn.deadth.sbs","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"descounsell.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"detlxc.master78lite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"devshubhamjadav.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"dfxzsdf.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"dhanushr24.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"dianecadei8.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"did57sauveton.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"dl.mod30t.ir","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"dmgeuntv.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"doloribus-voluptat-space.wpkubio.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"donrichie781.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"donttolinii.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"dtn-3c.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"duvetrexuprau.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ebayqi.shop","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"eirxkrdgtk.duckdns.org","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"energizahn.dicosur.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"esumbunk.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"esunbonk.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"everestmotors.com.np","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"evqjteoscz.link","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"exoduswallet.cn.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"facebook-tw-web.azurewebsites.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"facebookverifycenter.com.de","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"faceit.sunbim.pro","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"faizankhan0408.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"fauexpfv.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"feprk.sbs","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"formsly-form.web.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"free-5573726.webadorsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"fsdfjeifls.click","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"galiciacgu.com.ar","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"gardakosto.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"geemiioilogin.gitbook.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"guptanikshay.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"gyxgxuu.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"h5.z3v2.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"hajjsj.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"hamza-nawaz.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"havkeye14.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"hfhfyejkwsu.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"hjdnshu.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"hollykim.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"homemailweb-608850.weeblysite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"htitofjpve.club","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"huynguyen2k.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"icontainrbbr.s3.us-west-004.backblazeb2.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"identifier-vous456.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ijhsk.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"imperia-trading.online","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"informed.deliverydn.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"informed.deliveryfp.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"informed.deliveryft.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"informed.deliveryhrw.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"informed.deliverywbk.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"inshatrading.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"instagram.ossamaelidrissi.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"inusualinteriorismo.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"itaufatura.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"itpronetwork.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"itsmdshahin.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ixbuxedexw.info","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"jeittagrennami-1729.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"jimenezbill.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"jordanmargaret.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"jpmc.shieldssecuritybags.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"jrcce.shop","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"kdotts1.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"kemsnwshdurut.weebly.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"large-kitchen-substantial.on-fleek.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"leipeleufreyo.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"lemedab246.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"lightseagreen-jaguar-612987.hostingersite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ljsherrm.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"lnadm.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"locateid.com.tr","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"loginmailaccount1.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"lsddndp-up.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"lve1131.wixstudio.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"lve1131.wixstudio.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"mail.8724319-coinbase.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"mail.health-status.fb-business.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"maryp6608.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"mauttauhuttiloi.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"messagevocale888.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"meta-mask-io.serv00.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"metaiimaaskk-login.gitbook.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"metamsik.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"miss.votingforstudents.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"mkramer03.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"mmoom4.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"mobileservice34.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"monetization-violation-page.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"monirshouvo.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"morinierevolailles.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"mtalha21.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"muhammedasfacknk.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"munnoi.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"myurls.bio","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"myvalue365.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"navicrettobro-6686.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"nbbroker.az","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"nesgrjahwt.guru","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"netfeliz.netlify.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"nfwqayckqr.ltd","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"notify-user-deviations.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"oasisministries.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"omar7rb1.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"or-obaidullah.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"orangveri.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"p.usertrackehe.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"p.usertrackkum.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"p.usertrackrry.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"p.usertrackyfk.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pajem76668.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pancake-frontend-dejmy38ut-chefilip.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"perso8764002.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"phenomenal-praline-ff95b6.netlify.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pikay13.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"podrimapso.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"portal-trezr-cdn.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ppruphmllx.blue","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"premiumember.ct.ws","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"preuffeddoupraki-2297.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-019ceedaa0894587aa4255109af6c416.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-135a4055f8454025aa2f06845da4f8d8.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-140cf903de964a479f3b465e010ddb3b.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-14b5071e5a78406a9a92a00be9141089.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-244225b6dd0e404291c857fafd588b4f.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-28e193ca593a467bbd1e0232a73a5680.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-2a64f782845943beae62e9f09c473700.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-34ae76b320c445628f3e2bca4a192394.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-3784361eb0b640e797495d46b35ce030.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-55e3e997548a46879ee19f4d494309d6.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-619d0209611d4e8fb34f21726fd3b133.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-668f78270889467e8af696261336536f.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-69356b68f37442e0a24ceb7981f0841b.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-73ee129d9ec943f785408564adcaf985.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-7695c0b23019424cb779394f7a362ba8.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-76bf011f31344f45bf2356e9005ac465.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-7a6b99614f4b41658cd677a620b18951.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-7be95ce02232456db08522b3d3c99765.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-80fb550826904a048a5391946ef49a69.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-83f86cbfe52f42728c26cda54824eb39.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-886654e4969e42e988d48d11222c8a57.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-97673970c1c145eda5e559c4f9c18f61.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-9839470418254b29962dec4220c83255.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-a017bd9f9dc6498183af41770490c482.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-aa456431547a4e28948699d7c6a22006.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-cb72691642c444eb900a44aa1d8a7107.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-ce8fc030252b4632959515dffef1b750.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-de59803496c8489585895b6917266e7c.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-ebb47370c13740ef9014f6bba927d946.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-f7edd89a736e48428172001b0b1906fe.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-fc37d2d339714056b7f16368b49ae532.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-fd5baa54f2714f068701be4a7563f2de.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"pub-fef94e8fd76842a4818865dd78ef618f.r2.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"puvomattipro.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"qfbspeclmg.bond","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"qowii.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"quiz.vidio.com.user3.hehdin.us.kg","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"radhikamd.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"raiyone.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"rayatrecruitment.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"rectifcentrefdeptrescu.weebly.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"rekruitmenttjwtt.vip-media.web.id","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"resolverpad.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"reward-webconnect.pages.dev","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"roberthood.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"rtm-att.directly.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ruthah9.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"rwhjdb.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"s.eu.premiumisp.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"s.team-a.cam","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"s080rjhdn.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"salmanfarsi01.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"santanderpod.globalizeme-dublin2.co.uk","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sedosexu.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"seller.tksalem.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"server.2rk3.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"server.6avj.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"server.dgm0.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"server.k6dz.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"server.pxs7.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"seunelvis1.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"shanky0.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sjhdoirrsjx.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"smgolamalif.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"smsmmsernorepls.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"soumya252000.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"steam.communityartlist.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"steam.workshopgraphy.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"steamcommuitty.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"steamcommunmutly.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"steamcomunutty.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"steamconmumity.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"steeamcommnity.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"stephen55687.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"stevencrews.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"submit-dispute-form.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sultan-raza.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sumagayathri-999.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"support-verify-page.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"supports-center-communityhelp.cloud","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"svckhc.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"swatteam219.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"taher-mohamed-ahmed-saad.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"taiegrma.gold","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tairgam.chat","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tairgam.fund","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tairgam.show","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tairgam.zone","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"talergam.live","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"talergam.red","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"talergam.shopping","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"talergam.today","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tanfupikyx.monster","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tcsktjtl.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"technoindiagroup.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tecmachine.com.br","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"teiagram.group","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"teiagram.red","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"teiagram.zone","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"teiegrma.cab","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"teiegrma.design","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"teiegrrm.blue","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"teiegrrm.today","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telargam.city","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telargam.cloud","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telargam.college","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telargam.tax","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telegram-safe.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telegrrm.monster","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telegrrm.xin","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telemlp-omsz.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"teleqrma.show","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"telezelm-lbhg.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tellmeliu.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"terfanfranck.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tienda-linea7.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tienda-linea9.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tiktok.fhinek.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tiktokkjshop.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tiktokmax3.vip","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"troubadeihati-9272.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"tysmbdpz.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"u-pphholfd.godaddysites.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"ultrafima.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"uphold-loges.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"urbexine.shop","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"urmilagome.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"user1.hehdin.us.kg","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"username895.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-parceliutxb.vip","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-parceliutxc.vip","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-parceliutxe.vip","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-parceliutxg.vip","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-parceljzuwb.vip","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-parceljzuwc.vip","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackaaw.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackaba.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackakt.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackartjlo.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackbpg.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackdex.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackeaj.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackemh.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackevj.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackfnl.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackghi.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackgix.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackgna.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackhal.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackicg.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackidp.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackiiz.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracking-helpnko.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracking-helptom.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracking-helptot.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracking-helptwo.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracking-helptzo.cc","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackipxdnh.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackius.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackjgc.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackjkh.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackkys.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackloi.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracklpe.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracklvr.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackmjx.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackmli.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackmvd.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracknsr.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackodf.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackogx.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackonp.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackpgl.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackpoq.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackpsx.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackpwg.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackree.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracksbw.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracktdz.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracktmb.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracktus.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-tracktyi.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackuir.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackuve.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackvbw.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackvkt.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackvoi.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackwil.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackxgj.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackxkt.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackxrz.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackxxh.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"usps.com-trackzyy.top","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"uspsservicetrack.blogspot.com.cy","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"veeradalaw.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"vmgmjfbz.icu","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"wakakehuteu-9247.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"walletcazonnect.gitbook.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"wap.brwj.cn","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"webmailservice08.wixsite.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"wellyngtonkuhn.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"whare.100webspace.net","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"wwiiskdkdnffnjuca.weebly.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"www-degelyehuda-org-il.filesusr.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"wwwteiegramwor.xyz","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"xavier6709.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"xn--d1aqfkf.xn--p1ai","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"xox-exe.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"yairix.github.io","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"yarakobanrhg.wpenginepowered.com","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"zattajakoixa-8559.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"zerotelegram.pl","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"zetriyauffivou-1144.vercel.app","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"zkybgfddvl.shop","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"zures.com.br","","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"busanopen.org","/office/msgvoice/source/login.php","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"busanopen.org","/office/msgvoice/source/wrongpass.php","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"eqrco.de","/a/t3magy","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"flow.page","/mlh21880/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"im-creator.com","/free/btin/bt/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"is.gd","/xqplkv","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"keepo.io","/login/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"keepo.io","/serverguide53/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"qr.me-qr.com","/tcy5mrt1/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sites.google.com","/l0gin-microsoftwebonlne.app/r75567/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sites.google.com","/view/345678987655/home/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sites.google.com","/view/btconnectbusiness/btconnect/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sites.google.com","/view/fatherplac/accueil/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sites.google.com","/view/koiuld2dkjcxnjk2s/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sites.google.com","/view/orange-aslkdsald/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"sites.google.com","/view/paypal-loginn/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"snapto.link","/closurep-1/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"webogram.org","/a/","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"zpr.io","/drpj3ayxdsc4","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
+"zyexx.com","/kcf05074c7d8ec461318b173a03xd5882406.html","phishing-filter phishing website detected","2024-12-15T00:23:11Z"
diff --git a/phishing-filter-splunk.csv.br b/phishing-filter-splunk.csv.br
new file mode 100644
index 000000000..7277fce73
Binary files /dev/null and b/phishing-filter-splunk.csv.br differ
diff --git a/phishing-filter-splunk.csv.gz b/phishing-filter-splunk.csv.gz
new file mode 100644
index 000000000..86d16e8d5
Binary files /dev/null and b/phishing-filter-splunk.csv.gz differ
diff --git a/phishing-filter-suricata.rules b/phishing-filter-suricata.rules
new file mode 100644
index 000000000..a8ccab35c
--- /dev/null
+++ b/phishing-filter-suricata.rules
@@ -0,0 +1,469 @@
+# Title: Phishing URL Suricata Ruleset
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"23cssahil.github.io"; classtype:attempted-recon; sid:200000001; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"3reshma.github.io"; classtype:attempted-recon; sid:200000002; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"67533177.ishg.za.com"; classtype:attempted-recon; sid:200000003; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"67780581.ishg.za.com"; classtype:attempted-recon; sid:200000004; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"72386989.ishg.za.com"; classtype:attempted-recon; sid:200000005; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a2i9s4y.space"; classtype:attempted-recon; sid:200000006; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a3.ikansalasq.com"; classtype:attempted-recon; sid:200000007; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"acederma.com"; classtype:attempted-recon; sid:200000008; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ahhhh.pe.kr"; classtype:attempted-recon; sid:200000009; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"airbnb.sync114.com"; classtype:attempted-recon; sid:200000010; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aisths.cc"; classtype:attempted-recon; sid:200000011; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"akanksha3012.github.io"; classtype:attempted-recon; sid:200000012; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aks34.github.io"; classtype:attempted-recon; sid:200000013; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"alessandrodiana.it"; classtype:attempted-recon; sid:200000014; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amamz-product.click"; classtype:attempted-recon; sid:200000015; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazonnu.co"; classtype:attempted-recon; sid:200000016; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amreeth.github.io"; classtype:attempted-recon; sid:200000017; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anjalijha167.github.io"; classtype:attempted-recon; sid:200000018; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apricotmelly.wixstudio.com"; classtype:attempted-recon; sid:200000019; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apricotmelly.wixstudio.io"; classtype:attempted-recon; sid:200000020; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arpitgoel889.github.io"; classtype:attempted-recon; sid:200000021; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"art-tour.net"; classtype:attempted-recon; sid:200000022; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"artofbaseball.net"; classtype:attempted-recon; sid:200000023; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ashishmaurya73.github.io"; classtype:attempted-recon; sid:200000024; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"askewi3010.wixsite.com"; classtype:attempted-recon; sid:200000025; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"asupanvviptelegram.my.id"; classtype:attempted-recon; sid:200000026; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atobi432.wixsite.com"; classtype:attempted-recon; sid:200000027; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcom-103887.weebly.com"; classtype:attempted-recon; sid:200000028; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attisat.gr"; classtype:attempted-recon; sid:200000029; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attvalidatekindly.weebly.com"; classtype:attempted-recon; sid:200000030; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attyahoomai.wixsite.com"; classtype:attempted-recon; sid:200000031; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"autoscurt24.de"; classtype:attempted-recon; sid:200000032; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz"; classtype:attempted-recon; sid:200000033; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link"; classtype:attempted-recon; sid:200000034; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link"; classtype:attempted-recon; sid:200000035; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link"; classtype:attempted-recon; sid:200000036; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link"; classtype:attempted-recon; sid:200000037; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ballefabrouyau-9112.vercel.app"; classtype:attempted-recon; sid:200000038; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bantuan-tunai-mystrx.jobs8.my.id"; classtype:attempted-recon; sid:200000039; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"baradua.it"; classtype:attempted-recon; sid:200000040; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"barberalonzo29.wixsite.com"; classtype:attempted-recon; sid:200000041; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"basil0303.github.io"; classtype:attempted-recon; sid:200000042; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bernardamos422.wixsite.com"; classtype:attempted-recon; sid:200000043; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bettinamarks.com"; classtype:attempted-recon; sid:200000044; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bharathi1809.github.io"; classtype:attempted-recon; sid:200000045; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blue-tick-help.vercel.app"; classtype:attempted-recon; sid:200000046; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bntuan-dana4-resmii.danytx.web.id"; classtype:attempted-recon; sid:200000047; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"boapremium-001-site1.ptempurl.com"; classtype:attempted-recon; sid:200000048; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bojanawauceu-3394.vercel.app"; classtype:attempted-recon; sid:200000049; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bolipost.cc"; classtype:attempted-recon; sid:200000050; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bomomvpfo.club"; classtype:attempted-recon; sid:200000051; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bountyhunterpc.github.io"; classtype:attempted-recon; sid:200000052; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bpqxqtuig.club"; classtype:attempted-recon; sid:200000053; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brbrgsnyqwer.wixsite.com"; classtype:attempted-recon; sid:200000054; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"brwj.cn"; classtype:attempted-recon; sid:200000055; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt.daftpage.com"; classtype:attempted-recon; sid:200000056; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cache.netflix.com.user12.sanasta.us.kg"; classtype:attempted-recon; sid:200000057; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"carolesheridan4.wixsite.com"; classtype:attempted-recon; sid:200000058; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chance-to-availbale-free-badge.vercel.app"; classtype:attempted-recon; sid:200000059; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chiragrajoria.github.io"; classtype:attempted-recon; sid:200000060; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cid-phisher.github.io"; classtype:attempted-recon; sid:200000061; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clariveh.baby"; classtype:attempted-recon; sid:200000062; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"clifforddaniells.wixsite.com"; classtype:attempted-recon; sid:200000063; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinbasefaqdesk.com"; classtype:attempted-recon; sid:200000064; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coiniiobisaecoins.azurewebsites.net"; classtype:attempted-recon; sid:200000065; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"confirmationhelpmeta.io.vn"; classtype:attempted-recon; sid:200000066; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cpisafety.che.buet.ac.bd"; classtype:attempted-recon; sid:200000067; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cricketbettingpro.com"; classtype:attempted-recon; sid:200000068; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cubixpro.com"; classtype:attempted-recon; sid:200000069; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyatt810.weebly.com"; classtype:attempted-recon; sid:200000070; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dalipthukral0.wixsite.com"; classtype:attempted-recon; sid:200000071; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"danaindonesia.bantuan-resmi.top"; classtype:attempted-recon; sid:200000072; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"deepxzkdn.deadth.sbs"; classtype:attempted-recon; sid:200000073; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"descounsell.wixsite.com"; classtype:attempted-recon; sid:200000074; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"detlxc.master78lite.com"; classtype:attempted-recon; sid:200000075; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"devshubhamjadav.github.io"; classtype:attempted-recon; sid:200000076; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dfxzsdf.wixsite.com"; classtype:attempted-recon; sid:200000077; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhanushr24.github.io"; classtype:attempted-recon; sid:200000078; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dianecadei8.wixsite.com"; classtype:attempted-recon; sid:200000079; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"did57sauveton.wixsite.com"; classtype:attempted-recon; sid:200000080; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dl.mod30t.ir"; classtype:attempted-recon; sid:200000081; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dmgeuntv.icu"; classtype:attempted-recon; sid:200000082; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doloribus-voluptat-space.wpkubio.com"; classtype:attempted-recon; sid:200000083; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"donrichie781.wixsite.com"; classtype:attempted-recon; sid:200000084; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"donttolinii.wixsite.com"; classtype:attempted-recon; sid:200000085; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dtn-3c.vercel.app"; classtype:attempted-recon; sid:200000086; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duvetrexuprau.vercel.app"; classtype:attempted-recon; sid:200000087; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebayqi.shop"; classtype:attempted-recon; sid:200000088; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eirxkrdgtk.duckdns.org"; classtype:attempted-recon; sid:200000089; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"energizahn.dicosur.net"; classtype:attempted-recon; sid:200000090; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esumbunk.cc"; classtype:attempted-recon; sid:200000091; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"esunbonk.cc"; classtype:attempted-recon; sid:200000092; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"everestmotors.com.np"; classtype:attempted-recon; sid:200000093; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evqjteoscz.link"; classtype:attempted-recon; sid:200000094; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"exoduswallet.cn.com"; classtype:attempted-recon; sid:200000095; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-tw-web.azurewebsites.net"; classtype:attempted-recon; sid:200000096; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebookverifycenter.com.de"; classtype:attempted-recon; sid:200000097; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faceit.sunbim.pro"; classtype:attempted-recon; sid:200000098; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faizankhan0408.github.io"; classtype:attempted-recon; sid:200000099; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fauexpfv.icu"; classtype:attempted-recon; sid:200000100; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"feprk.sbs"; classtype:attempted-recon; sid:200000101; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"formsly-form.web.app"; classtype:attempted-recon; sid:200000102; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-5573726.webadorsite.com"; classtype:attempted-recon; sid:200000103; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fsdfjeifls.click"; classtype:attempted-recon; sid:200000104; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"galiciacgu.com.ar"; classtype:attempted-recon; sid:200000105; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gardakosto.wixsite.com"; classtype:attempted-recon; sid:200000106; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"geemiioilogin.gitbook.io"; classtype:attempted-recon; sid:200000107; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"guptanikshay.github.io"; classtype:attempted-recon; sid:200000108; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gyxgxuu.wixsite.com"; classtype:attempted-recon; sid:200000109; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"h5.z3v2.com"; classtype:attempted-recon; sid:200000110; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hajjsj.top"; classtype:attempted-recon; sid:200000111; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hamza-nawaz.github.io"; classtype:attempted-recon; sid:200000112; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"havkeye14.wixsite.com"; classtype:attempted-recon; sid:200000113; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hfhfyejkwsu.wixsite.com"; classtype:attempted-recon; sid:200000114; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hjdnshu.wixsite.com"; classtype:attempted-recon; sid:200000115; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hollykim.com"; classtype:attempted-recon; sid:200000116; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"homemailweb-608850.weeblysite.com"; classtype:attempted-recon; sid:200000117; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"htitofjpve.club"; classtype:attempted-recon; sid:200000118; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"huynguyen2k.github.io"; classtype:attempted-recon; sid:200000119; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"icontainrbbr.s3.us-west-004.backblazeb2.com"; classtype:attempted-recon; sid:200000120; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"identifier-vous456.wixsite.com"; classtype:attempted-recon; sid:200000121; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ijhsk.github.io"; classtype:attempted-recon; sid:200000122; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imperia-trading.online"; classtype:attempted-recon; sid:200000123; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informed.deliverydn.top"; classtype:attempted-recon; sid:200000124; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informed.deliveryfp.top"; classtype:attempted-recon; sid:200000125; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informed.deliveryft.top"; classtype:attempted-recon; sid:200000126; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informed.deliveryhrw.top"; classtype:attempted-recon; sid:200000127; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"informed.deliverywbk.top"; classtype:attempted-recon; sid:200000128; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inshatrading.com"; classtype:attempted-recon; sid:200000129; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"instagram.ossamaelidrissi.com"; classtype:attempted-recon; sid:200000130; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"inusualinteriorismo.com"; classtype:attempted-recon; sid:200000131; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itaufatura.github.io"; classtype:attempted-recon; sid:200000132; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itpronetwork.net"; classtype:attempted-recon; sid:200000133; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itsmdshahin.github.io"; classtype:attempted-recon; sid:200000134; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ixbuxedexw.info"; classtype:attempted-recon; sid:200000135; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jeittagrennami-1729.vercel.app"; classtype:attempted-recon; sid:200000136; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jimenezbill.wixsite.com"; classtype:attempted-recon; sid:200000137; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jordanmargaret.wixsite.com"; classtype:attempted-recon; sid:200000138; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jpmc.shieldssecuritybags.com"; classtype:attempted-recon; sid:200000139; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jrcce.shop"; classtype:attempted-recon; sid:200000140; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kdotts1.wixsite.com"; classtype:attempted-recon; sid:200000141; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"kemsnwshdurut.weebly.com"; classtype:attempted-recon; sid:200000142; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"large-kitchen-substantial.on-fleek.app"; classtype:attempted-recon; sid:200000143; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"leipeleufreyo.vercel.app"; classtype:attempted-recon; sid:200000144; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lemedab246.wixsite.com"; classtype:attempted-recon; sid:200000145; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lightseagreen-jaguar-612987.hostingersite.com"; classtype:attempted-recon; sid:200000146; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ljsherrm.wixsite.com"; classtype:attempted-recon; sid:200000147; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lnadm.icu"; classtype:attempted-recon; sid:200000148; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"locateid.com.tr"; classtype:attempted-recon; sid:200000149; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginmailaccount1.wixsite.com"; classtype:attempted-recon; sid:200000150; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lsddndp-up.top"; classtype:attempted-recon; sid:200000151; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lve1131.wixstudio.com"; classtype:attempted-recon; sid:200000152; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lve1131.wixstudio.io"; classtype:attempted-recon; sid:200000153; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.8724319-coinbase.com"; classtype:attempted-recon; sid:200000154; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.health-status.fb-business.com"; classtype:attempted-recon; sid:200000155; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"maryp6608.wixsite.com"; classtype:attempted-recon; sid:200000156; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mauttauhuttiloi.vercel.app"; classtype:attempted-recon; sid:200000157; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"messagevocale888.wixsite.com"; classtype:attempted-recon; sid:200000158; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"meta-mask-io.serv00.net"; classtype:attempted-recon; sid:200000159; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metaiimaaskk-login.gitbook.io"; classtype:attempted-recon; sid:200000160; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamsik.com"; classtype:attempted-recon; sid:200000161; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"miss.votingforstudents.com"; classtype:attempted-recon; sid:200000162; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mkramer03.wixsite.com"; classtype:attempted-recon; sid:200000163; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mmoom4.wixsite.com"; classtype:attempted-recon; sid:200000164; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mobileservice34.wixsite.com"; classtype:attempted-recon; sid:200000165; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monetization-violation-page.github.io"; classtype:attempted-recon; sid:200000166; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"monirshouvo.github.io"; classtype:attempted-recon; sid:200000167; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"morinierevolailles.wixsite.com"; classtype:attempted-recon; sid:200000168; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mtalha21.github.io"; classtype:attempted-recon; sid:200000169; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"muhammedasfacknk.github.io"; classtype:attempted-recon; sid:200000170; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"munnoi.github.io"; classtype:attempted-recon; sid:200000171; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myurls.bio"; classtype:attempted-recon; sid:200000172; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myvalue365.com"; classtype:attempted-recon; sid:200000173; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navicrettobro-6686.vercel.app"; classtype:attempted-recon; sid:200000174; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nbbroker.az"; classtype:attempted-recon; sid:200000175; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nesgrjahwt.guru"; classtype:attempted-recon; sid:200000176; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netfeliz.netlify.app"; classtype:attempted-recon; sid:200000177; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nfwqayckqr.ltd"; classtype:attempted-recon; sid:200000178; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notify-user-deviations.vercel.app"; classtype:attempted-recon; sid:200000179; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oasisministries.com"; classtype:attempted-recon; sid:200000180; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"omar7rb1.github.io"; classtype:attempted-recon; sid:200000181; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"or-obaidullah.github.io"; classtype:attempted-recon; sid:200000182; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"orangveri.wixsite.com"; classtype:attempted-recon; sid:200000183; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.usertrackehe.top"; classtype:attempted-recon; sid:200000184; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.usertrackkum.top"; classtype:attempted-recon; sid:200000185; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.usertrackrry.top"; classtype:attempted-recon; sid:200000186; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"p.usertrackyfk.top"; classtype:attempted-recon; sid:200000187; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pajem76668.wixsite.com"; classtype:attempted-recon; sid:200000188; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pancake-frontend-dejmy38ut-chefilip.vercel.app"; classtype:attempted-recon; sid:200000189; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"perso8764002.wixsite.com"; classtype:attempted-recon; sid:200000190; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"phenomenal-praline-ff95b6.netlify.app"; classtype:attempted-recon; sid:200000191; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pikay13.github.io"; classtype:attempted-recon; sid:200000192; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"podrimapso.wixsite.com"; classtype:attempted-recon; sid:200000193; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"portal-trezr-cdn.github.io"; classtype:attempted-recon; sid:200000194; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ppruphmllx.blue"; classtype:attempted-recon; sid:200000195; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"premiumember.ct.ws"; classtype:attempted-recon; sid:200000196; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"preuffeddoupraki-2297.vercel.app"; classtype:attempted-recon; sid:200000197; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev"; classtype:attempted-recon; sid:200000198; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-019ceedaa0894587aa4255109af6c416.r2.dev"; classtype:attempted-recon; sid:200000199; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev"; classtype:attempted-recon; sid:200000200; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev"; classtype:attempted-recon; sid:200000201; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-135a4055f8454025aa2f06845da4f8d8.r2.dev"; classtype:attempted-recon; sid:200000202; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-140cf903de964a479f3b465e010ddb3b.r2.dev"; classtype:attempted-recon; sid:200000203; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-14b5071e5a78406a9a92a00be9141089.r2.dev"; classtype:attempted-recon; sid:200000204; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev"; classtype:attempted-recon; sid:200000205; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev"; classtype:attempted-recon; sid:200000206; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-244225b6dd0e404291c857fafd588b4f.r2.dev"; classtype:attempted-recon; sid:200000207; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-28e193ca593a467bbd1e0232a73a5680.r2.dev"; classtype:attempted-recon; sid:200000208; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-2a64f782845943beae62e9f09c473700.r2.dev"; classtype:attempted-recon; sid:200000209; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-34ae76b320c445628f3e2bca4a192394.r2.dev"; classtype:attempted-recon; sid:200000210; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev"; classtype:attempted-recon; sid:200000211; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-3784361eb0b640e797495d46b35ce030.r2.dev"; classtype:attempted-recon; sid:200000212; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev"; classtype:attempted-recon; sid:200000213; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev"; classtype:attempted-recon; sid:200000214; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev"; classtype:attempted-recon; sid:200000215; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev"; classtype:attempted-recon; sid:200000216; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev"; classtype:attempted-recon; sid:200000217; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-55e3e997548a46879ee19f4d494309d6.r2.dev"; classtype:attempted-recon; sid:200000218; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-619d0209611d4e8fb34f21726fd3b133.r2.dev"; classtype:attempted-recon; sid:200000219; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev"; classtype:attempted-recon; sid:200000220; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-668f78270889467e8af696261336536f.r2.dev"; classtype:attempted-recon; sid:200000221; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-69356b68f37442e0a24ceb7981f0841b.r2.dev"; classtype:attempted-recon; sid:200000222; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev"; classtype:attempted-recon; sid:200000223; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev"; classtype:attempted-recon; sid:200000224; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev"; classtype:attempted-recon; sid:200000225; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-73ee129d9ec943f785408564adcaf985.r2.dev"; classtype:attempted-recon; sid:200000226; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7695c0b23019424cb779394f7a362ba8.r2.dev"; classtype:attempted-recon; sid:200000227; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-76bf011f31344f45bf2356e9005ac465.r2.dev"; classtype:attempted-recon; sid:200000228; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7a6b99614f4b41658cd677a620b18951.r2.dev"; classtype:attempted-recon; sid:200000229; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7be95ce02232456db08522b3d3c99765.r2.dev"; classtype:attempted-recon; sid:200000230; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev"; classtype:attempted-recon; sid:200000231; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-80fb550826904a048a5391946ef49a69.r2.dev"; classtype:attempted-recon; sid:200000232; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev"; classtype:attempted-recon; sid:200000233; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-83f86cbfe52f42728c26cda54824eb39.r2.dev"; classtype:attempted-recon; sid:200000234; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-886654e4969e42e988d48d11222c8a57.r2.dev"; classtype:attempted-recon; sid:200000235; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev"; classtype:attempted-recon; sid:200000236; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev"; classtype:attempted-recon; sid:200000237; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev"; classtype:attempted-recon; sid:200000238; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev"; classtype:attempted-recon; sid:200000239; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-97673970c1c145eda5e559c4f9c18f61.r2.dev"; classtype:attempted-recon; sid:200000240; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-9839470418254b29962dec4220c83255.r2.dev"; classtype:attempted-recon; sid:200000241; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev"; classtype:attempted-recon; sid:200000242; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev"; classtype:attempted-recon; sid:200000243; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev"; classtype:attempted-recon; sid:200000244; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-a017bd9f9dc6498183af41770490c482.r2.dev"; classtype:attempted-recon; sid:200000245; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev"; classtype:attempted-recon; sid:200000246; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-aa456431547a4e28948699d7c6a22006.r2.dev"; classtype:attempted-recon; sid:200000247; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev"; classtype:attempted-recon; sid:200000248; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev"; classtype:attempted-recon; sid:200000249; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev"; classtype:attempted-recon; sid:200000250; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-cb72691642c444eb900a44aa1d8a7107.r2.dev"; classtype:attempted-recon; sid:200000251; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-ce8fc030252b4632959515dffef1b750.r2.dev"; classtype:attempted-recon; sid:200000252; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev"; classtype:attempted-recon; sid:200000253; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-de59803496c8489585895b6917266e7c.r2.dev"; classtype:attempted-recon; sid:200000254; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev"; classtype:attempted-recon; sid:200000255; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-ebb47370c13740ef9014f6bba927d946.r2.dev"; classtype:attempted-recon; sid:200000256; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev"; classtype:attempted-recon; sid:200000257; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-f7edd89a736e48428172001b0b1906fe.r2.dev"; classtype:attempted-recon; sid:200000258; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-fc37d2d339714056b7f16368b49ae532.r2.dev"; classtype:attempted-recon; sid:200000259; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-fd5baa54f2714f068701be4a7563f2de.r2.dev"; classtype:attempted-recon; sid:200000260; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-fef94e8fd76842a4818865dd78ef618f.r2.dev"; classtype:attempted-recon; sid:200000261; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"puvomattipro.vercel.app"; classtype:attempted-recon; sid:200000262; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qfbspeclmg.bond"; classtype:attempted-recon; sid:200000263; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qowii.top"; classtype:attempted-recon; sid:200000264; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quiz.vidio.com.user3.hehdin.us.kg"; classtype:attempted-recon; sid:200000265; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"radhikamd.github.io"; classtype:attempted-recon; sid:200000266; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"raiyone.cc"; classtype:attempted-recon; sid:200000267; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rayatrecruitment.com"; classtype:attempted-recon; sid:200000268; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rectifcentrefdeptrescu.weebly.com"; classtype:attempted-recon; sid:200000269; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rekruitmenttjwtt.vip-media.web.id"; classtype:attempted-recon; sid:200000270; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resolverpad.dev"; classtype:attempted-recon; sid:200000271; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reward-webconnect.pages.dev"; classtype:attempted-recon; sid:200000272; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"roberthood.net"; classtype:attempted-recon; sid:200000273; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rtm-att.directly.com"; classtype:attempted-recon; sid:200000274; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ruthah9.wixsite.com"; classtype:attempted-recon; sid:200000275; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rwhjdb.icu"; classtype:attempted-recon; sid:200000276; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s.eu.premiumisp.net"; classtype:attempted-recon; sid:200000277; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s.team-a.cam"; classtype:attempted-recon; sid:200000278; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"s080rjhdn.top"; classtype:attempted-recon; sid:200000279; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"salmanfarsi01.github.io"; classtype:attempted-recon; sid:200000280; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"santanderpod.globalizeme-dublin2.co.uk"; classtype:attempted-recon; sid:200000281; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sedosexu.wixsite.com"; classtype:attempted-recon; sid:200000282; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seller.tksalem.com"; classtype:attempted-recon; sid:200000283; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.2rk3.com"; classtype:attempted-recon; sid:200000284; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.6avj.com"; classtype:attempted-recon; sid:200000285; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.dgm0.com"; classtype:attempted-recon; sid:200000286; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.k6dz.com"; classtype:attempted-recon; sid:200000287; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.pxs7.com"; classtype:attempted-recon; sid:200000288; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seunelvis1.github.io"; classtype:attempted-recon; sid:200000289; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shanky0.github.io"; classtype:attempted-recon; sid:200000290; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjhdoirrsjx.wixsite.com"; classtype:attempted-recon; sid:200000291; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smgolamalif.github.io"; classtype:attempted-recon; sid:200000292; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smsmmsernorepls.wixsite.com"; classtype:attempted-recon; sid:200000293; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soumya252000.github.io"; classtype:attempted-recon; sid:200000294; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steam.communityartlist.com"; classtype:attempted-recon; sid:200000295; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steam.workshopgraphy.com"; classtype:attempted-recon; sid:200000296; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommuitty.com"; classtype:attempted-recon; sid:200000297; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommunmutly.com"; classtype:attempted-recon; sid:200000298; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcomunutty.com"; classtype:attempted-recon; sid:200000299; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamconmumity.com"; classtype:attempted-recon; sid:200000300; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steeamcommnity.com"; classtype:attempted-recon; sid:200000301; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stephen55687.github.io"; classtype:attempted-recon; sid:200000302; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"stevencrews.com"; classtype:attempted-recon; sid:200000303; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"submit-dispute-form.github.io"; classtype:attempted-recon; sid:200000304; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sultan-raza.github.io"; classtype:attempted-recon; sid:200000305; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sumagayathri-999.github.io"; classtype:attempted-recon; sid:200000306; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-verify-page.com"; classtype:attempted-recon; sid:200000307; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"supports-center-communityhelp.cloud"; classtype:attempted-recon; sid:200000308; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"svckhc.wixsite.com"; classtype:attempted-recon; sid:200000309; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"swatteam219.wixsite.com"; classtype:attempted-recon; sid:200000310; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"taher-mohamed-ahmed-saad.github.io"; classtype:attempted-recon; sid:200000311; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"taiegrma.gold"; classtype:attempted-recon; sid:200000312; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tairgam.chat"; classtype:attempted-recon; sid:200000313; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tairgam.fund"; classtype:attempted-recon; sid:200000314; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tairgam.show"; classtype:attempted-recon; sid:200000315; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tairgam.zone"; classtype:attempted-recon; sid:200000316; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talergam.live"; classtype:attempted-recon; sid:200000317; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talergam.red"; classtype:attempted-recon; sid:200000318; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talergam.shopping"; classtype:attempted-recon; sid:200000319; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talergam.today"; classtype:attempted-recon; sid:200000320; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tanfupikyx.monster"; classtype:attempted-recon; sid:200000321; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tcsktjtl.icu"; classtype:attempted-recon; sid:200000322; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"technoindiagroup.com"; classtype:attempted-recon; sid:200000323; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tecmachine.com.br"; classtype:attempted-recon; sid:200000324; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teiagram.group"; classtype:attempted-recon; sid:200000325; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teiagram.red"; classtype:attempted-recon; sid:200000326; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teiagram.zone"; classtype:attempted-recon; sid:200000327; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teiegrma.cab"; classtype:attempted-recon; sid:200000328; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teiegrma.design"; classtype:attempted-recon; sid:200000329; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teiegrrm.blue"; classtype:attempted-recon; sid:200000330; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teiegrrm.today"; classtype:attempted-recon; sid:200000331; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telargam.city"; classtype:attempted-recon; sid:200000332; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telargam.cloud"; classtype:attempted-recon; sid:200000333; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telargam.college"; classtype:attempted-recon; sid:200000334; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telargam.tax"; classtype:attempted-recon; sid:200000335; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegram-safe.cc"; classtype:attempted-recon; sid:200000336; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrrm.monster"; classtype:attempted-recon; sid:200000337; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrrm.xin"; classtype:attempted-recon; sid:200000338; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telemlp-omsz.icu"; classtype:attempted-recon; sid:200000339; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"teleqrma.show"; classtype:attempted-recon; sid:200000340; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telezelm-lbhg.icu"; classtype:attempted-recon; sid:200000341; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tellmeliu.github.io"; classtype:attempted-recon; sid:200000342; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"terfanfranck.wixsite.com"; classtype:attempted-recon; sid:200000343; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tienda-linea7.com"; classtype:attempted-recon; sid:200000344; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tienda-linea9.com"; classtype:attempted-recon; sid:200000345; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiktok.fhinek.com"; classtype:attempted-recon; sid:200000346; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiktokkjshop.com"; classtype:attempted-recon; sid:200000347; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiktokmax3.vip"; classtype:attempted-recon; sid:200000348; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"troubadeihati-9272.vercel.app"; classtype:attempted-recon; sid:200000349; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tysmbdpz.icu"; classtype:attempted-recon; sid:200000350; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"u-pphholfd.godaddysites.com"; classtype:attempted-recon; sid:200000351; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ultrafima.com"; classtype:attempted-recon; sid:200000352; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uphold-loges.github.io"; classtype:attempted-recon; sid:200000353; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urbexine.shop"; classtype:attempted-recon; sid:200000354; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"urmilagome.github.io"; classtype:attempted-recon; sid:200000355; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"user1.hehdin.us.kg"; classtype:attempted-recon; sid:200000356; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"username895.wixsite.com"; classtype:attempted-recon; sid:200000357; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-parceliutxb.vip"; classtype:attempted-recon; sid:200000358; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-parceliutxc.vip"; classtype:attempted-recon; sid:200000359; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-parceliutxe.vip"; classtype:attempted-recon; sid:200000360; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-parceliutxg.vip"; classtype:attempted-recon; sid:200000361; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-parceljzuwb.vip"; classtype:attempted-recon; sid:200000362; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-parceljzuwc.vip"; classtype:attempted-recon; sid:200000363; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackaaw.top"; classtype:attempted-recon; sid:200000364; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackaba.top"; classtype:attempted-recon; sid:200000365; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackakt.top"; classtype:attempted-recon; sid:200000366; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackartjlo.top"; classtype:attempted-recon; sid:200000367; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackbpg.top"; classtype:attempted-recon; sid:200000368; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackdex.top"; classtype:attempted-recon; sid:200000369; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackeaj.top"; classtype:attempted-recon; sid:200000370; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackemh.top"; classtype:attempted-recon; sid:200000371; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackevj.top"; classtype:attempted-recon; sid:200000372; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackfnl.top"; classtype:attempted-recon; sid:200000373; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackghi.top"; classtype:attempted-recon; sid:200000374; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackgix.top"; classtype:attempted-recon; sid:200000375; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackgna.top"; classtype:attempted-recon; sid:200000376; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackhal.top"; classtype:attempted-recon; sid:200000377; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackicg.top"; classtype:attempted-recon; sid:200000378; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackidp.top"; classtype:attempted-recon; sid:200000379; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackiiz.top"; classtype:attempted-recon; sid:200000380; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracking-helpnko.cc"; classtype:attempted-recon; sid:200000381; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracking-helptom.cc"; classtype:attempted-recon; sid:200000382; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracking-helptot.cc"; classtype:attempted-recon; sid:200000383; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracking-helptwo.cc"; classtype:attempted-recon; sid:200000384; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracking-helptzo.cc"; classtype:attempted-recon; sid:200000385; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackipxdnh.top"; classtype:attempted-recon; sid:200000386; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackius.top"; classtype:attempted-recon; sid:200000387; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackjgc.top"; classtype:attempted-recon; sid:200000388; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackjkh.top"; classtype:attempted-recon; sid:200000389; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackkys.top"; classtype:attempted-recon; sid:200000390; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackloi.top"; classtype:attempted-recon; sid:200000391; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracklpe.top"; classtype:attempted-recon; sid:200000392; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracklvr.top"; classtype:attempted-recon; sid:200000393; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmjx.top"; classtype:attempted-recon; sid:200000394; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmli.top"; classtype:attempted-recon; sid:200000395; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackmvd.top"; classtype:attempted-recon; sid:200000396; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracknsr.top"; classtype:attempted-recon; sid:200000397; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackodf.top"; classtype:attempted-recon; sid:200000398; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackogx.top"; classtype:attempted-recon; sid:200000399; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackonp.top"; classtype:attempted-recon; sid:200000400; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackpgl.top"; classtype:attempted-recon; sid:200000401; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackpoq.top"; classtype:attempted-recon; sid:200000402; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackpsx.top"; classtype:attempted-recon; sid:200000403; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackpwg.top"; classtype:attempted-recon; sid:200000404; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackree.top"; classtype:attempted-recon; sid:200000405; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracksbw.top"; classtype:attempted-recon; sid:200000406; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracktdz.top"; classtype:attempted-recon; sid:200000407; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracktmb.top"; classtype:attempted-recon; sid:200000408; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracktus.top"; classtype:attempted-recon; sid:200000409; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tracktyi.top"; classtype:attempted-recon; sid:200000410; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackuir.top"; classtype:attempted-recon; sid:200000411; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackuve.top"; classtype:attempted-recon; sid:200000412; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackvbw.top"; classtype:attempted-recon; sid:200000413; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackvkt.top"; classtype:attempted-recon; sid:200000414; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackvoi.top"; classtype:attempted-recon; sid:200000415; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackwil.top"; classtype:attempted-recon; sid:200000416; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackxgj.top"; classtype:attempted-recon; sid:200000417; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackxkt.top"; classtype:attempted-recon; sid:200000418; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackxrz.top"; classtype:attempted-recon; sid:200000419; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackxxh.top"; classtype:attempted-recon; sid:200000420; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-trackzyy.top"; classtype:attempted-recon; sid:200000421; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsservicetrack.blogspot.com.cy"; classtype:attempted-recon; sid:200000422; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veeradalaw.com"; classtype:attempted-recon; sid:200000423; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vmgmjfbz.icu"; classtype:attempted-recon; sid:200000424; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wakakehuteu-9247.vercel.app"; classtype:attempted-recon; sid:200000425; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletcazonnect.gitbook.io"; classtype:attempted-recon; sid:200000426; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wap.brwj.cn"; classtype:attempted-recon; sid:200000427; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webmailservice08.wixsite.com"; classtype:attempted-recon; sid:200000428; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wellyngtonkuhn.github.io"; classtype:attempted-recon; sid:200000429; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"whare.100webspace.net"; classtype:attempted-recon; sid:200000430; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwiiskdkdnffnjuca.weebly.com"; classtype:attempted-recon; sid:200000431; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-degelyehuda-org-il.filesusr.com"; classtype:attempted-recon; sid:200000432; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wwwteiegramwor.xyz"; classtype:attempted-recon; sid:200000433; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xavier6709.github.io"; classtype:attempted-recon; sid:200000434; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--d1aqfkf.xn--p1ai"; classtype:attempted-recon; sid:200000435; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xox-exe.github.io"; classtype:attempted-recon; sid:200000436; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yairix.github.io"; classtype:attempted-recon; sid:200000437; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yarakobanrhg.wpenginepowered.com"; classtype:attempted-recon; sid:200000438; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zattajakoixa-8559.vercel.app"; classtype:attempted-recon; sid:200000439; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zerotelegram.pl"; classtype:attempted-recon; sid:200000440; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zetriyauffivou-1144.vercel.app"; classtype:attempted-recon; sid:200000441; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zkybgfddvl.shop"; classtype:attempted-recon; sid:200000442; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zures.com.br"; classtype:attempted-recon; sid:200000443; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/office/msgvoice/source/login.php"; endswith; nocase; http.host; content:"busanopen.org"; classtype:attempted-recon; sid:200000444; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/office/msgvoice/source/wrongpass.php"; endswith; nocase; http.host; content:"busanopen.org"; classtype:attempted-recon; sid:200000445; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a/t3magy"; endswith; nocase; http.host; content:"eqrco.de"; classtype:attempted-recon; sid:200000446; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/mlh21880/"; endswith; nocase; http.host; content:"flow.page"; classtype:attempted-recon; sid:200000447; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/free/btin/bt/"; endswith; nocase; http.host; content:"im-creator.com"; classtype:attempted-recon; sid:200000448; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/xqplkv"; endswith; nocase; http.host; content:"is.gd"; classtype:attempted-recon; sid:200000449; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/login/"; endswith; nocase; http.host; content:"keepo.io"; classtype:attempted-recon; sid:200000450; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/serverguide53/"; endswith; nocase; http.host; content:"keepo.io"; classtype:attempted-recon; sid:200000451; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/tcy5mrt1/"; endswith; nocase; http.host; content:"qr.me-qr.com"; classtype:attempted-recon; sid:200000452; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/l0gin-microsoftwebonlne.app/r75567/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200000453; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/345678987655/home/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200000454; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/btconnectbusiness/btconnect/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200000455; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/fatherplac/accueil/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200000456; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/koiuld2dkjcxnjk2s/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200000457; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/orange-aslkdsald/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200000458; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/view/paypal-loginn/"; endswith; nocase; http.host; content:"sites.google.com"; classtype:attempted-recon; sid:200000459; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/closurep-1/"; endswith; nocase; http.host; content:"snapto.link"; classtype:attempted-recon; sid:200000460; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/a/"; endswith; nocase; http.host; content:"webogram.org"; classtype:attempted-recon; sid:200000461; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/drpj3ayxdsc4"; endswith; nocase; http.host; content:"zpr.io"; classtype:attempted-recon; sid:200000462; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/kcf05074c7d8ec461318b173a03xd5882406.html"; endswith; nocase; http.host; content:"zyexx.com"; classtype:attempted-recon; sid:200000463; rev:1;)
diff --git a/phishing-filter-suricata.rules.br b/phishing-filter-suricata.rules.br
new file mode 100644
index 000000000..7dd68ff37
Binary files /dev/null and b/phishing-filter-suricata.rules.br differ
diff --git a/phishing-filter-suricata.rules.gz b/phishing-filter-suricata.rules.gz
new file mode 100644
index 000000000..ccfc2ddc4
Binary files /dev/null and b/phishing-filter-suricata.rules.gz differ
diff --git a/phishing-filter-unbound.conf b/phishing-filter-unbound.conf
new file mode 100644
index 000000000..75526eef3
--- /dev/null
+++ b/phishing-filter-unbound.conf
@@ -0,0 +1,449 @@
+# Title: Phishing Domains Unbound Blocklist
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+local-zone: "23cssahil.github.io" always_nxdomain
+local-zone: "3reshma.github.io" always_nxdomain
+local-zone: "67533177.ishg.za.com" always_nxdomain
+local-zone: "67780581.ishg.za.com" always_nxdomain
+local-zone: "72386989.ishg.za.com" always_nxdomain
+local-zone: "a2i9s4y.space" always_nxdomain
+local-zone: "a3.ikansalasq.com" always_nxdomain
+local-zone: "acederma.com" always_nxdomain
+local-zone: "ahhhh.pe.kr" always_nxdomain
+local-zone: "airbnb.sync114.com" always_nxdomain
+local-zone: "aisths.cc" always_nxdomain
+local-zone: "akanksha3012.github.io" always_nxdomain
+local-zone: "aks34.github.io" always_nxdomain
+local-zone: "alessandrodiana.it" always_nxdomain
+local-zone: "amamz-product.click" always_nxdomain
+local-zone: "amazonnu.co" always_nxdomain
+local-zone: "amreeth.github.io" always_nxdomain
+local-zone: "anjalijha167.github.io" always_nxdomain
+local-zone: "apricotmelly.wixstudio.com" always_nxdomain
+local-zone: "apricotmelly.wixstudio.io" always_nxdomain
+local-zone: "arpitgoel889.github.io" always_nxdomain
+local-zone: "art-tour.net" always_nxdomain
+local-zone: "artofbaseball.net" always_nxdomain
+local-zone: "ashishmaurya73.github.io" always_nxdomain
+local-zone: "askewi3010.wixsite.com" always_nxdomain
+local-zone: "asupanvviptelegram.my.id" always_nxdomain
+local-zone: "atobi432.wixsite.com" always_nxdomain
+local-zone: "attcom-103887.weebly.com" always_nxdomain
+local-zone: "attisat.gr" always_nxdomain
+local-zone: "attvalidatekindly.weebly.com" always_nxdomain
+local-zone: "attyahoomai.wixsite.com" always_nxdomain
+local-zone: "autoscurt24.de" always_nxdomain
+local-zone: "bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz" always_nxdomain
+local-zone: "bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link" always_nxdomain
+local-zone: "bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link" always_nxdomain
+local-zone: "bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link" always_nxdomain
+local-zone: "bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link" always_nxdomain
+local-zone: "ballefabrouyau-9112.vercel.app" always_nxdomain
+local-zone: "bantuan-tunai-mystrx.jobs8.my.id" always_nxdomain
+local-zone: "baradua.it" always_nxdomain
+local-zone: "barberalonzo29.wixsite.com" always_nxdomain
+local-zone: "basil0303.github.io" always_nxdomain
+local-zone: "bernardamos422.wixsite.com" always_nxdomain
+local-zone: "bettinamarks.com" always_nxdomain
+local-zone: "bharathi1809.github.io" always_nxdomain
+local-zone: "blue-tick-help.vercel.app" always_nxdomain
+local-zone: "bntuan-dana4-resmii.danytx.web.id" always_nxdomain
+local-zone: "boapremium-001-site1.ptempurl.com" always_nxdomain
+local-zone: "bojanawauceu-3394.vercel.app" always_nxdomain
+local-zone: "bolipost.cc" always_nxdomain
+local-zone: "bomomvpfo.club" always_nxdomain
+local-zone: "bountyhunterpc.github.io" always_nxdomain
+local-zone: "bpqxqtuig.club" always_nxdomain
+local-zone: "brbrgsnyqwer.wixsite.com" always_nxdomain
+local-zone: "brwj.cn" always_nxdomain
+local-zone: "bt.daftpage.com" always_nxdomain
+local-zone: "cache.netflix.com.user12.sanasta.us.kg" always_nxdomain
+local-zone: "carolesheridan4.wixsite.com" always_nxdomain
+local-zone: "chance-to-availbale-free-badge.vercel.app" always_nxdomain
+local-zone: "chiragrajoria.github.io" always_nxdomain
+local-zone: "cid-phisher.github.io" always_nxdomain
+local-zone: "clariveh.baby" always_nxdomain
+local-zone: "clifforddaniells.wixsite.com" always_nxdomain
+local-zone: "coinbasefaqdesk.com" always_nxdomain
+local-zone: "coiniiobisaecoins.azurewebsites.net" always_nxdomain
+local-zone: "confirmationhelpmeta.io.vn" always_nxdomain
+local-zone: "cpisafety.che.buet.ac.bd" always_nxdomain
+local-zone: "cricketbettingpro.com" always_nxdomain
+local-zone: "cubixpro.com" always_nxdomain
+local-zone: "currentlyatt810.weebly.com" always_nxdomain
+local-zone: "dalipthukral0.wixsite.com" always_nxdomain
+local-zone: "danaindonesia.bantuan-resmi.top" always_nxdomain
+local-zone: "deepxzkdn.deadth.sbs" always_nxdomain
+local-zone: "descounsell.wixsite.com" always_nxdomain
+local-zone: "detlxc.master78lite.com" always_nxdomain
+local-zone: "devshubhamjadav.github.io" always_nxdomain
+local-zone: "dfxzsdf.wixsite.com" always_nxdomain
+local-zone: "dhanushr24.github.io" always_nxdomain
+local-zone: "dianecadei8.wixsite.com" always_nxdomain
+local-zone: "did57sauveton.wixsite.com" always_nxdomain
+local-zone: "dl.mod30t.ir" always_nxdomain
+local-zone: "dmgeuntv.icu" always_nxdomain
+local-zone: "doloribus-voluptat-space.wpkubio.com" always_nxdomain
+local-zone: "donrichie781.wixsite.com" always_nxdomain
+local-zone: "donttolinii.wixsite.com" always_nxdomain
+local-zone: "dtn-3c.vercel.app" always_nxdomain
+local-zone: "duvetrexuprau.vercel.app" always_nxdomain
+local-zone: "ebayqi.shop" always_nxdomain
+local-zone: "eirxkrdgtk.duckdns.org" always_nxdomain
+local-zone: "energizahn.dicosur.net" always_nxdomain
+local-zone: "esumbunk.cc" always_nxdomain
+local-zone: "esunbonk.cc" always_nxdomain
+local-zone: "everestmotors.com.np" always_nxdomain
+local-zone: "evqjteoscz.link" always_nxdomain
+local-zone: "exoduswallet.cn.com" always_nxdomain
+local-zone: "facebook-tw-web.azurewebsites.net" always_nxdomain
+local-zone: "facebookverifycenter.com.de" always_nxdomain
+local-zone: "faceit.sunbim.pro" always_nxdomain
+local-zone: "faizankhan0408.github.io" always_nxdomain
+local-zone: "fauexpfv.icu" always_nxdomain
+local-zone: "feprk.sbs" always_nxdomain
+local-zone: "formsly-form.web.app" always_nxdomain
+local-zone: "free-5573726.webadorsite.com" always_nxdomain
+local-zone: "fsdfjeifls.click" always_nxdomain
+local-zone: "galiciacgu.com.ar" always_nxdomain
+local-zone: "gardakosto.wixsite.com" always_nxdomain
+local-zone: "geemiioilogin.gitbook.io" always_nxdomain
+local-zone: "guptanikshay.github.io" always_nxdomain
+local-zone: "gyxgxuu.wixsite.com" always_nxdomain
+local-zone: "h5.z3v2.com" always_nxdomain
+local-zone: "hajjsj.top" always_nxdomain
+local-zone: "hamza-nawaz.github.io" always_nxdomain
+local-zone: "havkeye14.wixsite.com" always_nxdomain
+local-zone: "hfhfyejkwsu.wixsite.com" always_nxdomain
+local-zone: "hjdnshu.wixsite.com" always_nxdomain
+local-zone: "hollykim.com" always_nxdomain
+local-zone: "homemailweb-608850.weeblysite.com" always_nxdomain
+local-zone: "htitofjpve.club" always_nxdomain
+local-zone: "huynguyen2k.github.io" always_nxdomain
+local-zone: "icontainrbbr.s3.us-west-004.backblazeb2.com" always_nxdomain
+local-zone: "identifier-vous456.wixsite.com" always_nxdomain
+local-zone: "ijhsk.github.io" always_nxdomain
+local-zone: "imperia-trading.online" always_nxdomain
+local-zone: "informed.deliverydn.top" always_nxdomain
+local-zone: "informed.deliveryfp.top" always_nxdomain
+local-zone: "informed.deliveryft.top" always_nxdomain
+local-zone: "informed.deliveryhrw.top" always_nxdomain
+local-zone: "informed.deliverywbk.top" always_nxdomain
+local-zone: "inshatrading.com" always_nxdomain
+local-zone: "instagram.ossamaelidrissi.com" always_nxdomain
+local-zone: "inusualinteriorismo.com" always_nxdomain
+local-zone: "itaufatura.github.io" always_nxdomain
+local-zone: "itpronetwork.net" always_nxdomain
+local-zone: "itsmdshahin.github.io" always_nxdomain
+local-zone: "ixbuxedexw.info" always_nxdomain
+local-zone: "jeittagrennami-1729.vercel.app" always_nxdomain
+local-zone: "jimenezbill.wixsite.com" always_nxdomain
+local-zone: "jordanmargaret.wixsite.com" always_nxdomain
+local-zone: "jpmc.shieldssecuritybags.com" always_nxdomain
+local-zone: "jrcce.shop" always_nxdomain
+local-zone: "kdotts1.wixsite.com" always_nxdomain
+local-zone: "kemsnwshdurut.weebly.com" always_nxdomain
+local-zone: "large-kitchen-substantial.on-fleek.app" always_nxdomain
+local-zone: "leipeleufreyo.vercel.app" always_nxdomain
+local-zone: "lemedab246.wixsite.com" always_nxdomain
+local-zone: "lightseagreen-jaguar-612987.hostingersite.com" always_nxdomain
+local-zone: "ljsherrm.wixsite.com" always_nxdomain
+local-zone: "lnadm.icu" always_nxdomain
+local-zone: "locateid.com.tr" always_nxdomain
+local-zone: "loginmailaccount1.wixsite.com" always_nxdomain
+local-zone: "lsddndp-up.top" always_nxdomain
+local-zone: "lve1131.wixstudio.com" always_nxdomain
+local-zone: "lve1131.wixstudio.io" always_nxdomain
+local-zone: "mail.8724319-coinbase.com" always_nxdomain
+local-zone: "mail.health-status.fb-business.com" always_nxdomain
+local-zone: "maryp6608.wixsite.com" always_nxdomain
+local-zone: "mauttauhuttiloi.vercel.app" always_nxdomain
+local-zone: "messagevocale888.wixsite.com" always_nxdomain
+local-zone: "meta-mask-io.serv00.net" always_nxdomain
+local-zone: "metaiimaaskk-login.gitbook.io" always_nxdomain
+local-zone: "metamsik.com" always_nxdomain
+local-zone: "miss.votingforstudents.com" always_nxdomain
+local-zone: "mkramer03.wixsite.com" always_nxdomain
+local-zone: "mmoom4.wixsite.com" always_nxdomain
+local-zone: "mobileservice34.wixsite.com" always_nxdomain
+local-zone: "monetization-violation-page.github.io" always_nxdomain
+local-zone: "monirshouvo.github.io" always_nxdomain
+local-zone: "morinierevolailles.wixsite.com" always_nxdomain
+local-zone: "mtalha21.github.io" always_nxdomain
+local-zone: "muhammedasfacknk.github.io" always_nxdomain
+local-zone: "munnoi.github.io" always_nxdomain
+local-zone: "myurls.bio" always_nxdomain
+local-zone: "myvalue365.com" always_nxdomain
+local-zone: "navicrettobro-6686.vercel.app" always_nxdomain
+local-zone: "nbbroker.az" always_nxdomain
+local-zone: "nesgrjahwt.guru" always_nxdomain
+local-zone: "netfeliz.netlify.app" always_nxdomain
+local-zone: "nfwqayckqr.ltd" always_nxdomain
+local-zone: "notify-user-deviations.vercel.app" always_nxdomain
+local-zone: "oasisministries.com" always_nxdomain
+local-zone: "omar7rb1.github.io" always_nxdomain
+local-zone: "or-obaidullah.github.io" always_nxdomain
+local-zone: "orangveri.wixsite.com" always_nxdomain
+local-zone: "p.usertrackehe.top" always_nxdomain
+local-zone: "p.usertrackkum.top" always_nxdomain
+local-zone: "p.usertrackrry.top" always_nxdomain
+local-zone: "p.usertrackyfk.top" always_nxdomain
+local-zone: "pajem76668.wixsite.com" always_nxdomain
+local-zone: "pancake-frontend-dejmy38ut-chefilip.vercel.app" always_nxdomain
+local-zone: "perso8764002.wixsite.com" always_nxdomain
+local-zone: "phenomenal-praline-ff95b6.netlify.app" always_nxdomain
+local-zone: "pikay13.github.io" always_nxdomain
+local-zone: "podrimapso.wixsite.com" always_nxdomain
+local-zone: "portal-trezr-cdn.github.io" always_nxdomain
+local-zone: "ppruphmllx.blue" always_nxdomain
+local-zone: "premiumember.ct.ws" always_nxdomain
+local-zone: "preuffeddoupraki-2297.vercel.app" always_nxdomain
+local-zone: "pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev" always_nxdomain
+local-zone: "pub-019ceedaa0894587aa4255109af6c416.r2.dev" always_nxdomain
+local-zone: "pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev" always_nxdomain
+local-zone: "pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev" always_nxdomain
+local-zone: "pub-135a4055f8454025aa2f06845da4f8d8.r2.dev" always_nxdomain
+local-zone: "pub-140cf903de964a479f3b465e010ddb3b.r2.dev" always_nxdomain
+local-zone: "pub-14b5071e5a78406a9a92a00be9141089.r2.dev" always_nxdomain
+local-zone: "pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev" always_nxdomain
+local-zone: "pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev" always_nxdomain
+local-zone: "pub-244225b6dd0e404291c857fafd588b4f.r2.dev" always_nxdomain
+local-zone: "pub-28e193ca593a467bbd1e0232a73a5680.r2.dev" always_nxdomain
+local-zone: "pub-2a64f782845943beae62e9f09c473700.r2.dev" always_nxdomain
+local-zone: "pub-34ae76b320c445628f3e2bca4a192394.r2.dev" always_nxdomain
+local-zone: "pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev" always_nxdomain
+local-zone: "pub-3784361eb0b640e797495d46b35ce030.r2.dev" always_nxdomain
+local-zone: "pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev" always_nxdomain
+local-zone: "pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev" always_nxdomain
+local-zone: "pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev" always_nxdomain
+local-zone: "pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev" always_nxdomain
+local-zone: "pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev" always_nxdomain
+local-zone: "pub-55e3e997548a46879ee19f4d494309d6.r2.dev" always_nxdomain
+local-zone: "pub-619d0209611d4e8fb34f21726fd3b133.r2.dev" always_nxdomain
+local-zone: "pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev" always_nxdomain
+local-zone: "pub-668f78270889467e8af696261336536f.r2.dev" always_nxdomain
+local-zone: "pub-69356b68f37442e0a24ceb7981f0841b.r2.dev" always_nxdomain
+local-zone: "pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev" always_nxdomain
+local-zone: "pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev" always_nxdomain
+local-zone: "pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev" always_nxdomain
+local-zone: "pub-73ee129d9ec943f785408564adcaf985.r2.dev" always_nxdomain
+local-zone: "pub-7695c0b23019424cb779394f7a362ba8.r2.dev" always_nxdomain
+local-zone: "pub-76bf011f31344f45bf2356e9005ac465.r2.dev" always_nxdomain
+local-zone: "pub-7a6b99614f4b41658cd677a620b18951.r2.dev" always_nxdomain
+local-zone: "pub-7be95ce02232456db08522b3d3c99765.r2.dev" always_nxdomain
+local-zone: "pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev" always_nxdomain
+local-zone: "pub-80fb550826904a048a5391946ef49a69.r2.dev" always_nxdomain
+local-zone: "pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev" always_nxdomain
+local-zone: "pub-83f86cbfe52f42728c26cda54824eb39.r2.dev" always_nxdomain
+local-zone: "pub-886654e4969e42e988d48d11222c8a57.r2.dev" always_nxdomain
+local-zone: "pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev" always_nxdomain
+local-zone: "pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev" always_nxdomain
+local-zone: "pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev" always_nxdomain
+local-zone: "pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev" always_nxdomain
+local-zone: "pub-97673970c1c145eda5e559c4f9c18f61.r2.dev" always_nxdomain
+local-zone: "pub-9839470418254b29962dec4220c83255.r2.dev" always_nxdomain
+local-zone: "pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev" always_nxdomain
+local-zone: "pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev" always_nxdomain
+local-zone: "pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev" always_nxdomain
+local-zone: "pub-a017bd9f9dc6498183af41770490c482.r2.dev" always_nxdomain
+local-zone: "pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev" always_nxdomain
+local-zone: "pub-aa456431547a4e28948699d7c6a22006.r2.dev" always_nxdomain
+local-zone: "pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev" always_nxdomain
+local-zone: "pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev" always_nxdomain
+local-zone: "pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev" always_nxdomain
+local-zone: "pub-cb72691642c444eb900a44aa1d8a7107.r2.dev" always_nxdomain
+local-zone: "pub-ce8fc030252b4632959515dffef1b750.r2.dev" always_nxdomain
+local-zone: "pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev" always_nxdomain
+local-zone: "pub-de59803496c8489585895b6917266e7c.r2.dev" always_nxdomain
+local-zone: "pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev" always_nxdomain
+local-zone: "pub-ebb47370c13740ef9014f6bba927d946.r2.dev" always_nxdomain
+local-zone: "pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev" always_nxdomain
+local-zone: "pub-f7edd89a736e48428172001b0b1906fe.r2.dev" always_nxdomain
+local-zone: "pub-fc37d2d339714056b7f16368b49ae532.r2.dev" always_nxdomain
+local-zone: "pub-fd5baa54f2714f068701be4a7563f2de.r2.dev" always_nxdomain
+local-zone: "pub-fef94e8fd76842a4818865dd78ef618f.r2.dev" always_nxdomain
+local-zone: "puvomattipro.vercel.app" always_nxdomain
+local-zone: "qfbspeclmg.bond" always_nxdomain
+local-zone: "qowii.top" always_nxdomain
+local-zone: "quiz.vidio.com.user3.hehdin.us.kg" always_nxdomain
+local-zone: "radhikamd.github.io" always_nxdomain
+local-zone: "raiyone.cc" always_nxdomain
+local-zone: "rayatrecruitment.com" always_nxdomain
+local-zone: "rectifcentrefdeptrescu.weebly.com" always_nxdomain
+local-zone: "rekruitmenttjwtt.vip-media.web.id" always_nxdomain
+local-zone: "resolverpad.dev" always_nxdomain
+local-zone: "reward-webconnect.pages.dev" always_nxdomain
+local-zone: "roberthood.net" always_nxdomain
+local-zone: "rtm-att.directly.com" always_nxdomain
+local-zone: "ruthah9.wixsite.com" always_nxdomain
+local-zone: "rwhjdb.icu" always_nxdomain
+local-zone: "s.eu.premiumisp.net" always_nxdomain
+local-zone: "s.team-a.cam" always_nxdomain
+local-zone: "s080rjhdn.top" always_nxdomain
+local-zone: "salmanfarsi01.github.io" always_nxdomain
+local-zone: "santanderpod.globalizeme-dublin2.co.uk" always_nxdomain
+local-zone: "sedosexu.wixsite.com" always_nxdomain
+local-zone: "seller.tksalem.com" always_nxdomain
+local-zone: "server.2rk3.com" always_nxdomain
+local-zone: "server.6avj.com" always_nxdomain
+local-zone: "server.dgm0.com" always_nxdomain
+local-zone: "server.k6dz.com" always_nxdomain
+local-zone: "server.pxs7.com" always_nxdomain
+local-zone: "seunelvis1.github.io" always_nxdomain
+local-zone: "shanky0.github.io" always_nxdomain
+local-zone: "sjhdoirrsjx.wixsite.com" always_nxdomain
+local-zone: "smgolamalif.github.io" always_nxdomain
+local-zone: "smsmmsernorepls.wixsite.com" always_nxdomain
+local-zone: "soumya252000.github.io" always_nxdomain
+local-zone: "steam.communityartlist.com" always_nxdomain
+local-zone: "steam.workshopgraphy.com" always_nxdomain
+local-zone: "steamcommuitty.com" always_nxdomain
+local-zone: "steamcommunmutly.com" always_nxdomain
+local-zone: "steamcomunutty.com" always_nxdomain
+local-zone: "steamconmumity.com" always_nxdomain
+local-zone: "steeamcommnity.com" always_nxdomain
+local-zone: "stephen55687.github.io" always_nxdomain
+local-zone: "stevencrews.com" always_nxdomain
+local-zone: "submit-dispute-form.github.io" always_nxdomain
+local-zone: "sultan-raza.github.io" always_nxdomain
+local-zone: "sumagayathri-999.github.io" always_nxdomain
+local-zone: "support-verify-page.com" always_nxdomain
+local-zone: "supports-center-communityhelp.cloud" always_nxdomain
+local-zone: "svckhc.wixsite.com" always_nxdomain
+local-zone: "swatteam219.wixsite.com" always_nxdomain
+local-zone: "taher-mohamed-ahmed-saad.github.io" always_nxdomain
+local-zone: "taiegrma.gold" always_nxdomain
+local-zone: "tairgam.chat" always_nxdomain
+local-zone: "tairgam.fund" always_nxdomain
+local-zone: "tairgam.show" always_nxdomain
+local-zone: "tairgam.zone" always_nxdomain
+local-zone: "talergam.live" always_nxdomain
+local-zone: "talergam.red" always_nxdomain
+local-zone: "talergam.shopping" always_nxdomain
+local-zone: "talergam.today" always_nxdomain
+local-zone: "tanfupikyx.monster" always_nxdomain
+local-zone: "tcsktjtl.icu" always_nxdomain
+local-zone: "technoindiagroup.com" always_nxdomain
+local-zone: "tecmachine.com.br" always_nxdomain
+local-zone: "teiagram.group" always_nxdomain
+local-zone: "teiagram.red" always_nxdomain
+local-zone: "teiagram.zone" always_nxdomain
+local-zone: "teiegrma.cab" always_nxdomain
+local-zone: "teiegrma.design" always_nxdomain
+local-zone: "teiegrrm.blue" always_nxdomain
+local-zone: "teiegrrm.today" always_nxdomain
+local-zone: "telargam.city" always_nxdomain
+local-zone: "telargam.cloud" always_nxdomain
+local-zone: "telargam.college" always_nxdomain
+local-zone: "telargam.tax" always_nxdomain
+local-zone: "telegram-safe.cc" always_nxdomain
+local-zone: "telegrrm.monster" always_nxdomain
+local-zone: "telegrrm.xin" always_nxdomain
+local-zone: "telemlp-omsz.icu" always_nxdomain
+local-zone: "teleqrma.show" always_nxdomain
+local-zone: "telezelm-lbhg.icu" always_nxdomain
+local-zone: "tellmeliu.github.io" always_nxdomain
+local-zone: "terfanfranck.wixsite.com" always_nxdomain
+local-zone: "tienda-linea7.com" always_nxdomain
+local-zone: "tienda-linea9.com" always_nxdomain
+local-zone: "tiktok.fhinek.com" always_nxdomain
+local-zone: "tiktokkjshop.com" always_nxdomain
+local-zone: "tiktokmax3.vip" always_nxdomain
+local-zone: "troubadeihati-9272.vercel.app" always_nxdomain
+local-zone: "tysmbdpz.icu" always_nxdomain
+local-zone: "u-pphholfd.godaddysites.com" always_nxdomain
+local-zone: "ultrafima.com" always_nxdomain
+local-zone: "uphold-loges.github.io" always_nxdomain
+local-zone: "urbexine.shop" always_nxdomain
+local-zone: "urmilagome.github.io" always_nxdomain
+local-zone: "user1.hehdin.us.kg" always_nxdomain
+local-zone: "username895.wixsite.com" always_nxdomain
+local-zone: "usps.com-parceliutxb.vip" always_nxdomain
+local-zone: "usps.com-parceliutxc.vip" always_nxdomain
+local-zone: "usps.com-parceliutxe.vip" always_nxdomain
+local-zone: "usps.com-parceliutxg.vip" always_nxdomain
+local-zone: "usps.com-parceljzuwb.vip" always_nxdomain
+local-zone: "usps.com-parceljzuwc.vip" always_nxdomain
+local-zone: "usps.com-trackaaw.top" always_nxdomain
+local-zone: "usps.com-trackaba.top" always_nxdomain
+local-zone: "usps.com-trackakt.top" always_nxdomain
+local-zone: "usps.com-trackartjlo.top" always_nxdomain
+local-zone: "usps.com-trackbpg.top" always_nxdomain
+local-zone: "usps.com-trackdex.top" always_nxdomain
+local-zone: "usps.com-trackeaj.top" always_nxdomain
+local-zone: "usps.com-trackemh.top" always_nxdomain
+local-zone: "usps.com-trackevj.top" always_nxdomain
+local-zone: "usps.com-trackfnl.top" always_nxdomain
+local-zone: "usps.com-trackghi.top" always_nxdomain
+local-zone: "usps.com-trackgix.top" always_nxdomain
+local-zone: "usps.com-trackgna.top" always_nxdomain
+local-zone: "usps.com-trackhal.top" always_nxdomain
+local-zone: "usps.com-trackicg.top" always_nxdomain
+local-zone: "usps.com-trackidp.top" always_nxdomain
+local-zone: "usps.com-trackiiz.top" always_nxdomain
+local-zone: "usps.com-tracking-helpnko.cc" always_nxdomain
+local-zone: "usps.com-tracking-helptom.cc" always_nxdomain
+local-zone: "usps.com-tracking-helptot.cc" always_nxdomain
+local-zone: "usps.com-tracking-helptwo.cc" always_nxdomain
+local-zone: "usps.com-tracking-helptzo.cc" always_nxdomain
+local-zone: "usps.com-trackipxdnh.top" always_nxdomain
+local-zone: "usps.com-trackius.top" always_nxdomain
+local-zone: "usps.com-trackjgc.top" always_nxdomain
+local-zone: "usps.com-trackjkh.top" always_nxdomain
+local-zone: "usps.com-trackkys.top" always_nxdomain
+local-zone: "usps.com-trackloi.top" always_nxdomain
+local-zone: "usps.com-tracklpe.top" always_nxdomain
+local-zone: "usps.com-tracklvr.top" always_nxdomain
+local-zone: "usps.com-trackmjx.top" always_nxdomain
+local-zone: "usps.com-trackmli.top" always_nxdomain
+local-zone: "usps.com-trackmvd.top" always_nxdomain
+local-zone: "usps.com-tracknsr.top" always_nxdomain
+local-zone: "usps.com-trackodf.top" always_nxdomain
+local-zone: "usps.com-trackogx.top" always_nxdomain
+local-zone: "usps.com-trackonp.top" always_nxdomain
+local-zone: "usps.com-trackpgl.top" always_nxdomain
+local-zone: "usps.com-trackpoq.top" always_nxdomain
+local-zone: "usps.com-trackpsx.top" always_nxdomain
+local-zone: "usps.com-trackpwg.top" always_nxdomain
+local-zone: "usps.com-trackree.top" always_nxdomain
+local-zone: "usps.com-tracksbw.top" always_nxdomain
+local-zone: "usps.com-tracktdz.top" always_nxdomain
+local-zone: "usps.com-tracktmb.top" always_nxdomain
+local-zone: "usps.com-tracktus.top" always_nxdomain
+local-zone: "usps.com-tracktyi.top" always_nxdomain
+local-zone: "usps.com-trackuir.top" always_nxdomain
+local-zone: "usps.com-trackuve.top" always_nxdomain
+local-zone: "usps.com-trackvbw.top" always_nxdomain
+local-zone: "usps.com-trackvkt.top" always_nxdomain
+local-zone: "usps.com-trackvoi.top" always_nxdomain
+local-zone: "usps.com-trackwil.top" always_nxdomain
+local-zone: "usps.com-trackxgj.top" always_nxdomain
+local-zone: "usps.com-trackxkt.top" always_nxdomain
+local-zone: "usps.com-trackxrz.top" always_nxdomain
+local-zone: "usps.com-trackxxh.top" always_nxdomain
+local-zone: "usps.com-trackzyy.top" always_nxdomain
+local-zone: "uspsservicetrack.blogspot.com.cy" always_nxdomain
+local-zone: "veeradalaw.com" always_nxdomain
+local-zone: "vmgmjfbz.icu" always_nxdomain
+local-zone: "wakakehuteu-9247.vercel.app" always_nxdomain
+local-zone: "walletcazonnect.gitbook.io" always_nxdomain
+local-zone: "wap.brwj.cn" always_nxdomain
+local-zone: "webmailservice08.wixsite.com" always_nxdomain
+local-zone: "wellyngtonkuhn.github.io" always_nxdomain
+local-zone: "whare.100webspace.net" always_nxdomain
+local-zone: "wwiiskdkdnffnjuca.weebly.com" always_nxdomain
+local-zone: "www-degelyehuda-org-il.filesusr.com" always_nxdomain
+local-zone: "wwwteiegramwor.xyz" always_nxdomain
+local-zone: "xavier6709.github.io" always_nxdomain
+local-zone: "xn--d1aqfkf.xn--p1ai" always_nxdomain
+local-zone: "xox-exe.github.io" always_nxdomain
+local-zone: "yairix.github.io" always_nxdomain
+local-zone: "yarakobanrhg.wpenginepowered.com" always_nxdomain
+local-zone: "zattajakoixa-8559.vercel.app" always_nxdomain
+local-zone: "zerotelegram.pl" always_nxdomain
+local-zone: "zetriyauffivou-1144.vercel.app" always_nxdomain
+local-zone: "zkybgfddvl.shop" always_nxdomain
+local-zone: "zures.com.br" always_nxdomain
diff --git a/phishing-filter-unbound.conf.br b/phishing-filter-unbound.conf.br
new file mode 100644
index 000000000..5f58d1d29
Binary files /dev/null and b/phishing-filter-unbound.conf.br differ
diff --git a/phishing-filter-unbound.conf.gz b/phishing-filter-unbound.conf.gz
new file mode 100644
index 000000000..1cb38f30f
Binary files /dev/null and b/phishing-filter-unbound.conf.gz differ
diff --git a/phishing-filter-vivaldi.txt b/phishing-filter-vivaldi.txt
new file mode 100644
index 000000000..4383c3267
--- /dev/null
+++ b/phishing-filter-vivaldi.txt
@@ -0,0 +1,469 @@
+! Title: Phishing URL Blocklist (Vivaldi)
+! Updated: 2024-12-15T00:23:11Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||23cssahil.github.io$document
+||3reshma.github.io$document
+||67533177.ishg.za.com$document
+||67780581.ishg.za.com$document
+||72386989.ishg.za.com$document
+||a2i9s4y.space$document
+||a3.ikansalasq.com$document
+||acederma.com$document
+||ahhhh.pe.kr$document
+||airbnb.sync114.com$document
+||aisths.cc$document
+||akanksha3012.github.io$document
+||aks34.github.io$document
+||alessandrodiana.it$document
+||amamz-product.click$document
+||amazonnu.co$document
+||amreeth.github.io$document
+||anjalijha167.github.io$document
+||apricotmelly.wixstudio.com$document
+||apricotmelly.wixstudio.io$document
+||arpitgoel889.github.io$document
+||art-tour.net$document
+||artofbaseball.net$document
+||ashishmaurya73.github.io$document
+||askewi3010.wixsite.com$document
+||asupanvviptelegram.my.id$document
+||atobi432.wixsite.com$document
+||attcom-103887.weebly.com$document
+||attisat.gr$document
+||attvalidatekindly.weebly.com$document
+||attyahoomai.wixsite.com$document
+||autoscurt24.de$document
+||bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz$document
+||bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link$document
+||bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link$document
+||bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link$document
+||bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link$document
+||ballefabrouyau-9112.vercel.app$document
+||bantuan-tunai-mystrx.jobs8.my.id$document
+||baradua.it$document
+||barberalonzo29.wixsite.com$document
+||basil0303.github.io$document
+||bernardamos422.wixsite.com$document
+||bettinamarks.com$document
+||bharathi1809.github.io$document
+||blue-tick-help.vercel.app$document
+||bntuan-dana4-resmii.danytx.web.id$document
+||boapremium-001-site1.ptempurl.com$document
+||bojanawauceu-3394.vercel.app$document
+||bolipost.cc$document
+||bomomvpfo.club$document
+||bountyhunterpc.github.io$document
+||bpqxqtuig.club$document
+||brbrgsnyqwer.wixsite.com$document
+||brwj.cn$document
+||bt.daftpage.com$document
+||busanopen.org/office/msgvoice/source/login.php$document
+||busanopen.org/office/msgvoice/source/wrongpass.php$document
+||cache.netflix.com.user12.sanasta.us.kg$document
+||carolesheridan4.wixsite.com$document
+||chance-to-availbale-free-badge.vercel.app$document
+||chiragrajoria.github.io$document
+||cid-phisher.github.io$document
+||clariveh.baby$document
+||clifforddaniells.wixsite.com$document
+||coinbasefaqdesk.com$document
+||coiniiobisaecoins.azurewebsites.net$document
+||confirmationhelpmeta.io.vn$document
+||cpisafety.che.buet.ac.bd$document
+||cricketbettingpro.com$document
+||cubixpro.com$document
+||currentlyatt810.weebly.com$document
+||dalipthukral0.wixsite.com$document
+||danaindonesia.bantuan-resmi.top$document
+||deepxzkdn.deadth.sbs$document
+||descounsell.wixsite.com$document
+||detlxc.master78lite.com$document
+||devshubhamjadav.github.io$document
+||dfxzsdf.wixsite.com$document
+||dhanushr24.github.io$document
+||dianecadei8.wixsite.com$document
+||did57sauveton.wixsite.com$document
+||dl.mod30t.ir$document
+||dmgeuntv.icu$document
+||doloribus-voluptat-space.wpkubio.com$document
+||donrichie781.wixsite.com$document
+||donttolinii.wixsite.com$document
+||dtn-3c.vercel.app$document
+||duvetrexuprau.vercel.app$document
+||ebayqi.shop$document
+||eirxkrdgtk.duckdns.org$document
+||energizahn.dicosur.net$document
+||eqrco.de/a/t3magy$document
+||esumbunk.cc$document
+||esunbonk.cc$document
+||everestmotors.com.np$document
+||evqjteoscz.link$document
+||exoduswallet.cn.com$document
+||facebook-tw-web.azurewebsites.net$document
+||facebookverifycenter.com.de$document
+||faceit.sunbim.pro$document
+||faizankhan0408.github.io$document
+||fauexpfv.icu$document
+||feprk.sbs$document
+||flow.page/mlh21880/$document
+||formsly-form.web.app$document
+||free-5573726.webadorsite.com$document
+||fsdfjeifls.click$document
+||galiciacgu.com.ar$document
+||gardakosto.wixsite.com$document
+||geemiioilogin.gitbook.io$document
+||guptanikshay.github.io$document
+||gyxgxuu.wixsite.com$document
+||h5.z3v2.com$document
+||hajjsj.top$document
+||hamza-nawaz.github.io$document
+||havkeye14.wixsite.com$document
+||hfhfyejkwsu.wixsite.com$document
+||hjdnshu.wixsite.com$document
+||hollykim.com$document
+||homemailweb-608850.weeblysite.com$document
+||htitofjpve.club$document
+||huynguyen2k.github.io$document
+||icontainrbbr.s3.us-west-004.backblazeb2.com$document
+||identifier-vous456.wixsite.com$document
+||ijhsk.github.io$document
+||im-creator.com/free/btin/bt/$document
+||imperia-trading.online$document
+||informed.deliverydn.top$document
+||informed.deliveryfp.top$document
+||informed.deliveryft.top$document
+||informed.deliveryhrw.top$document
+||informed.deliverywbk.top$document
+||inshatrading.com$document
+||instagram.ossamaelidrissi.com$document
+||inusualinteriorismo.com$document
+||is.gd/xqplkv$document
+||itaufatura.github.io$document
+||itpronetwork.net$document
+||itsmdshahin.github.io$document
+||ixbuxedexw.info$document
+||jeittagrennami-1729.vercel.app$document
+||jimenezbill.wixsite.com$document
+||jordanmargaret.wixsite.com$document
+||jpmc.shieldssecuritybags.com$document
+||jrcce.shop$document
+||kdotts1.wixsite.com$document
+||keepo.io/login/$document
+||keepo.io/serverguide53/$document
+||kemsnwshdurut.weebly.com$document
+||large-kitchen-substantial.on-fleek.app$document
+||leipeleufreyo.vercel.app$document
+||lemedab246.wixsite.com$document
+||lightseagreen-jaguar-612987.hostingersite.com$document
+||ljsherrm.wixsite.com$document
+||lnadm.icu$document
+||locateid.com.tr$document
+||loginmailaccount1.wixsite.com$document
+||lsddndp-up.top$document
+||lve1131.wixstudio.com$document
+||lve1131.wixstudio.io$document
+||mail.8724319-coinbase.com$document
+||mail.health-status.fb-business.com$document
+||maryp6608.wixsite.com$document
+||mauttauhuttiloi.vercel.app$document
+||messagevocale888.wixsite.com$document
+||meta-mask-io.serv00.net$document
+||metaiimaaskk-login.gitbook.io$document
+||metamsik.com$document
+||miss.votingforstudents.com$document
+||mkramer03.wixsite.com$document
+||mmoom4.wixsite.com$document
+||mobileservice34.wixsite.com$document
+||monetization-violation-page.github.io$document
+||monirshouvo.github.io$document
+||morinierevolailles.wixsite.com$document
+||mtalha21.github.io$document
+||muhammedasfacknk.github.io$document
+||munnoi.github.io$document
+||myurls.bio$document
+||myvalue365.com$document
+||navicrettobro-6686.vercel.app$document
+||nbbroker.az$document
+||nesgrjahwt.guru$document
+||netfeliz.netlify.app$document
+||nfwqayckqr.ltd$document
+||notify-user-deviations.vercel.app$document
+||oasisministries.com$document
+||omar7rb1.github.io$document
+||or-obaidullah.github.io$document
+||orangveri.wixsite.com$document
+||p.usertrackehe.top$document
+||p.usertrackkum.top$document
+||p.usertrackrry.top$document
+||p.usertrackyfk.top$document
+||pajem76668.wixsite.com$document
+||pancake-frontend-dejmy38ut-chefilip.vercel.app$document
+||perso8764002.wixsite.com$document
+||phenomenal-praline-ff95b6.netlify.app$document
+||pikay13.github.io$document
+||podrimapso.wixsite.com$document
+||portal-trezr-cdn.github.io$document
+||ppruphmllx.blue$document
+||premiumember.ct.ws$document
+||preuffeddoupraki-2297.vercel.app$document
+||pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev$document
+||pub-019ceedaa0894587aa4255109af6c416.r2.dev$document
+||pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev$document
+||pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev$document
+||pub-135a4055f8454025aa2f06845da4f8d8.r2.dev$document
+||pub-140cf903de964a479f3b465e010ddb3b.r2.dev$document
+||pub-14b5071e5a78406a9a92a00be9141089.r2.dev$document
+||pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev$document
+||pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev$document
+||pub-244225b6dd0e404291c857fafd588b4f.r2.dev$document
+||pub-28e193ca593a467bbd1e0232a73a5680.r2.dev$document
+||pub-2a64f782845943beae62e9f09c473700.r2.dev$document
+||pub-34ae76b320c445628f3e2bca4a192394.r2.dev$document
+||pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev$document
+||pub-3784361eb0b640e797495d46b35ce030.r2.dev$document
+||pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev$document
+||pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev$document
+||pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev$document
+||pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev$document
+||pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev$document
+||pub-55e3e997548a46879ee19f4d494309d6.r2.dev$document
+||pub-619d0209611d4e8fb34f21726fd3b133.r2.dev$document
+||pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev$document
+||pub-668f78270889467e8af696261336536f.r2.dev$document
+||pub-69356b68f37442e0a24ceb7981f0841b.r2.dev$document
+||pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev$document
+||pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev$document
+||pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev$document
+||pub-73ee129d9ec943f785408564adcaf985.r2.dev$document
+||pub-7695c0b23019424cb779394f7a362ba8.r2.dev$document
+||pub-76bf011f31344f45bf2356e9005ac465.r2.dev$document
+||pub-7a6b99614f4b41658cd677a620b18951.r2.dev$document
+||pub-7be95ce02232456db08522b3d3c99765.r2.dev$document
+||pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev$document
+||pub-80fb550826904a048a5391946ef49a69.r2.dev$document
+||pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev$document
+||pub-83f86cbfe52f42728c26cda54824eb39.r2.dev$document
+||pub-886654e4969e42e988d48d11222c8a57.r2.dev$document
+||pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev$document
+||pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev$document
+||pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev$document
+||pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev$document
+||pub-97673970c1c145eda5e559c4f9c18f61.r2.dev$document
+||pub-9839470418254b29962dec4220c83255.r2.dev$document
+||pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev$document
+||pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev$document
+||pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev$document
+||pub-a017bd9f9dc6498183af41770490c482.r2.dev$document
+||pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev$document
+||pub-aa456431547a4e28948699d7c6a22006.r2.dev$document
+||pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev$document
+||pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev$document
+||pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev$document
+||pub-cb72691642c444eb900a44aa1d8a7107.r2.dev$document
+||pub-ce8fc030252b4632959515dffef1b750.r2.dev$document
+||pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev$document
+||pub-de59803496c8489585895b6917266e7c.r2.dev$document
+||pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev$document
+||pub-ebb47370c13740ef9014f6bba927d946.r2.dev$document
+||pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev$document
+||pub-f7edd89a736e48428172001b0b1906fe.r2.dev$document
+||pub-fc37d2d339714056b7f16368b49ae532.r2.dev$document
+||pub-fd5baa54f2714f068701be4a7563f2de.r2.dev$document
+||pub-fef94e8fd76842a4818865dd78ef618f.r2.dev$document
+||puvomattipro.vercel.app$document
+||qfbspeclmg.bond$document
+||qowii.top$document
+||qr.me-qr.com/tcy5mrt1/$document
+||quiz.vidio.com.user3.hehdin.us.kg$document
+||radhikamd.github.io$document
+||raiyone.cc$document
+||rayatrecruitment.com$document
+||rectifcentrefdeptrescu.weebly.com$document
+||rekruitmenttjwtt.vip-media.web.id$document
+||resolverpad.dev$document
+||reward-webconnect.pages.dev$document
+||roberthood.net$document
+||rtm-att.directly.com$document
+||ruthah9.wixsite.com$document
+||rwhjdb.icu$document
+||s.eu.premiumisp.net$document
+||s.team-a.cam$document
+||s080rjhdn.top$document
+||salmanfarsi01.github.io$document
+||santanderpod.globalizeme-dublin2.co.uk$document
+||sedosexu.wixsite.com$document
+||seller.tksalem.com$document
+||server.2rk3.com$document
+||server.6avj.com$document
+||server.dgm0.com$document
+||server.k6dz.com$document
+||server.pxs7.com$document
+||seunelvis1.github.io$document
+||shanky0.github.io$document
+||sites.google.com/l0gin-microsoftwebonlne.app/r75567/$document
+||sites.google.com/view/345678987655/home/$document
+||sites.google.com/view/btconnectbusiness/btconnect/$document
+||sites.google.com/view/fatherplac/accueil/$document
+||sites.google.com/view/koiuld2dkjcxnjk2s/$document
+||sites.google.com/view/orange-aslkdsald/$document
+||sites.google.com/view/paypal-loginn/$document
+||sjhdoirrsjx.wixsite.com$document
+||smgolamalif.github.io$document
+||smsmmsernorepls.wixsite.com$document
+||snapto.link/closurep-1/$document
+||soumya252000.github.io$document
+||steam.communityartlist.com$document
+||steam.workshopgraphy.com$document
+||steamcommuitty.com$document
+||steamcommunmutly.com$document
+||steamcomunutty.com$document
+||steamconmumity.com$document
+||steeamcommnity.com$document
+||stephen55687.github.io$document
+||stevencrews.com$document
+||submit-dispute-form.github.io$document
+||sultan-raza.github.io$document
+||sumagayathri-999.github.io$document
+||support-verify-page.com$document
+||supports-center-communityhelp.cloud$document
+||svckhc.wixsite.com$document
+||swatteam219.wixsite.com$document
+||taher-mohamed-ahmed-saad.github.io$document
+||taiegrma.gold$document
+||tairgam.chat$document
+||tairgam.fund$document
+||tairgam.show$document
+||tairgam.zone$document
+||talergam.live$document
+||talergam.red$document
+||talergam.shopping$document
+||talergam.today$document
+||tanfupikyx.monster$document
+||tcsktjtl.icu$document
+||technoindiagroup.com$document
+||tecmachine.com.br$document
+||teiagram.group$document
+||teiagram.red$document
+||teiagram.zone$document
+||teiegrma.cab$document
+||teiegrma.design$document
+||teiegrrm.blue$document
+||teiegrrm.today$document
+||telargam.city$document
+||telargam.cloud$document
+||telargam.college$document
+||telargam.tax$document
+||telegram-safe.cc$document
+||telegrrm.monster$document
+||telegrrm.xin$document
+||telemlp-omsz.icu$document
+||teleqrma.show$document
+||telezelm-lbhg.icu$document
+||tellmeliu.github.io$document
+||terfanfranck.wixsite.com$document
+||tienda-linea7.com$document
+||tienda-linea9.com$document
+||tiktok.fhinek.com$document
+||tiktokkjshop.com$document
+||tiktokmax3.vip$document
+||troubadeihati-9272.vercel.app$document
+||tysmbdpz.icu$document
+||u-pphholfd.godaddysites.com$document
+||ultrafima.com$document
+||uphold-loges.github.io$document
+||urbexine.shop$document
+||urmilagome.github.io$document
+||user1.hehdin.us.kg$document
+||username895.wixsite.com$document
+||usps.com-parceliutxb.vip$document
+||usps.com-parceliutxc.vip$document
+||usps.com-parceliutxe.vip$document
+||usps.com-parceliutxg.vip$document
+||usps.com-parceljzuwb.vip$document
+||usps.com-parceljzuwc.vip$document
+||usps.com-trackaaw.top$document
+||usps.com-trackaba.top$document
+||usps.com-trackakt.top$document
+||usps.com-trackartjlo.top$document
+||usps.com-trackbpg.top$document
+||usps.com-trackdex.top$document
+||usps.com-trackeaj.top$document
+||usps.com-trackemh.top$document
+||usps.com-trackevj.top$document
+||usps.com-trackfnl.top$document
+||usps.com-trackghi.top$document
+||usps.com-trackgix.top$document
+||usps.com-trackgna.top$document
+||usps.com-trackhal.top$document
+||usps.com-trackicg.top$document
+||usps.com-trackidp.top$document
+||usps.com-trackiiz.top$document
+||usps.com-tracking-helpnko.cc$document
+||usps.com-tracking-helptom.cc$document
+||usps.com-tracking-helptot.cc$document
+||usps.com-tracking-helptwo.cc$document
+||usps.com-tracking-helptzo.cc$document
+||usps.com-trackipxdnh.top$document
+||usps.com-trackius.top$document
+||usps.com-trackjgc.top$document
+||usps.com-trackjkh.top$document
+||usps.com-trackkys.top$document
+||usps.com-trackloi.top$document
+||usps.com-tracklpe.top$document
+||usps.com-tracklvr.top$document
+||usps.com-trackmjx.top$document
+||usps.com-trackmli.top$document
+||usps.com-trackmvd.top$document
+||usps.com-tracknsr.top$document
+||usps.com-trackodf.top$document
+||usps.com-trackogx.top$document
+||usps.com-trackonp.top$document
+||usps.com-trackpgl.top$document
+||usps.com-trackpoq.top$document
+||usps.com-trackpsx.top$document
+||usps.com-trackpwg.top$document
+||usps.com-trackree.top$document
+||usps.com-tracksbw.top$document
+||usps.com-tracktdz.top$document
+||usps.com-tracktmb.top$document
+||usps.com-tracktus.top$document
+||usps.com-tracktyi.top$document
+||usps.com-trackuir.top$document
+||usps.com-trackuve.top$document
+||usps.com-trackvbw.top$document
+||usps.com-trackvkt.top$document
+||usps.com-trackvoi.top$document
+||usps.com-trackwil.top$document
+||usps.com-trackxgj.top$document
+||usps.com-trackxkt.top$document
+||usps.com-trackxrz.top$document
+||usps.com-trackxxh.top$document
+||usps.com-trackzyy.top$document
+||uspsservicetrack.blogspot.com.cy$document
+||veeradalaw.com$document
+||vmgmjfbz.icu$document
+||wakakehuteu-9247.vercel.app$document
+||walletcazonnect.gitbook.io$document
+||wap.brwj.cn$document
+||webmailservice08.wixsite.com$document
+||webogram.org/a/$document
+||wellyngtonkuhn.github.io$document
+||whare.100webspace.net$document
+||wwiiskdkdnffnjuca.weebly.com$document
+||www-degelyehuda-org-il.filesusr.com$document
+||wwwteiegramwor.xyz$document
+||xavier6709.github.io$document
+||xn--d1aqfkf.xn--p1ai$document
+||xox-exe.github.io$document
+||yairix.github.io$document
+||yarakobanrhg.wpenginepowered.com$document
+||zattajakoixa-8559.vercel.app$document
+||zerotelegram.pl$document
+||zetriyauffivou-1144.vercel.app$document
+||zkybgfddvl.shop$document
+||zpr.io/drpj3ayxdsc4$document
+||zures.com.br$document
+||zyexx.com/kcf05074c7d8ec461318b173a03xd5882406.html$document
diff --git a/phishing-filter-vivaldi.txt.br b/phishing-filter-vivaldi.txt.br
new file mode 100644
index 000000000..061654672
Binary files /dev/null and b/phishing-filter-vivaldi.txt.br differ
diff --git a/phishing-filter-vivaldi.txt.gz b/phishing-filter-vivaldi.txt.gz
new file mode 100644
index 000000000..5db11c19a
Binary files /dev/null and b/phishing-filter-vivaldi.txt.gz differ
diff --git a/phishing-filter.tpl b/phishing-filter.tpl
new file mode 100644
index 000000000..6e68aee87
--- /dev/null
+++ b/phishing-filter.tpl
@@ -0,0 +1,452 @@
+msFilterList
+# Title: Phishing Hosts Blocklist (IE)
+# Updated: 2024-12-15T00:23:11Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+: Expires=1
+#
+-d 23cssahil.github.io
+-d 3reshma.github.io
+-d 67533177.ishg.za.com
+-d 67780581.ishg.za.com
+-d 72386989.ishg.za.com
+-d a2i9s4y.space
+-d a3.ikansalasq.com
+-d acederma.com
+-d ahhhh.pe.kr
+-d airbnb.sync114.com
+-d aisths.cc
+-d akanksha3012.github.io
+-d aks34.github.io
+-d alessandrodiana.it
+-d amamz-product.click
+-d amazonnu.co
+-d amreeth.github.io
+-d anjalijha167.github.io
+-d apricotmelly.wixstudio.com
+-d apricotmelly.wixstudio.io
+-d arpitgoel889.github.io
+-d art-tour.net
+-d artofbaseball.net
+-d ashishmaurya73.github.io
+-d askewi3010.wixsite.com
+-d asupanvviptelegram.my.id
+-d atobi432.wixsite.com
+-d attcom-103887.weebly.com
+-d attisat.gr
+-d attvalidatekindly.weebly.com
+-d attyahoomai.wixsite.com
+-d autoscurt24.de
+-d bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz
+-d bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link
+-d bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link
+-d bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link
+-d bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link
+-d ballefabrouyau-9112.vercel.app
+-d bantuan-tunai-mystrx.jobs8.my.id
+-d baradua.it
+-d barberalonzo29.wixsite.com
+-d basil0303.github.io
+-d bernardamos422.wixsite.com
+-d bettinamarks.com
+-d bharathi1809.github.io
+-d blue-tick-help.vercel.app
+-d bntuan-dana4-resmii.danytx.web.id
+-d boapremium-001-site1.ptempurl.com
+-d bojanawauceu-3394.vercel.app
+-d bolipost.cc
+-d bomomvpfo.club
+-d bountyhunterpc.github.io
+-d bpqxqtuig.club
+-d brbrgsnyqwer.wixsite.com
+-d brwj.cn
+-d bt.daftpage.com
+-d cache.netflix.com.user12.sanasta.us.kg
+-d carolesheridan4.wixsite.com
+-d chance-to-availbale-free-badge.vercel.app
+-d chiragrajoria.github.io
+-d cid-phisher.github.io
+-d clariveh.baby
+-d clifforddaniells.wixsite.com
+-d coinbasefaqdesk.com
+-d coiniiobisaecoins.azurewebsites.net
+-d confirmationhelpmeta.io.vn
+-d cpisafety.che.buet.ac.bd
+-d cricketbettingpro.com
+-d cubixpro.com
+-d currentlyatt810.weebly.com
+-d dalipthukral0.wixsite.com
+-d danaindonesia.bantuan-resmi.top
+-d deepxzkdn.deadth.sbs
+-d descounsell.wixsite.com
+-d detlxc.master78lite.com
+-d devshubhamjadav.github.io
+-d dfxzsdf.wixsite.com
+-d dhanushr24.github.io
+-d dianecadei8.wixsite.com
+-d did57sauveton.wixsite.com
+-d dl.mod30t.ir
+-d dmgeuntv.icu
+-d doloribus-voluptat-space.wpkubio.com
+-d donrichie781.wixsite.com
+-d donttolinii.wixsite.com
+-d dtn-3c.vercel.app
+-d duvetrexuprau.vercel.app
+-d ebayqi.shop
+-d eirxkrdgtk.duckdns.org
+-d energizahn.dicosur.net
+-d esumbunk.cc
+-d esunbonk.cc
+-d everestmotors.com.np
+-d evqjteoscz.link
+-d exoduswallet.cn.com
+-d facebook-tw-web.azurewebsites.net
+-d facebookverifycenter.com.de
+-d faceit.sunbim.pro
+-d faizankhan0408.github.io
+-d fauexpfv.icu
+-d feprk.sbs
+-d formsly-form.web.app
+-d free-5573726.webadorsite.com
+-d fsdfjeifls.click
+-d galiciacgu.com.ar
+-d gardakosto.wixsite.com
+-d geemiioilogin.gitbook.io
+-d guptanikshay.github.io
+-d gyxgxuu.wixsite.com
+-d h5.z3v2.com
+-d hajjsj.top
+-d hamza-nawaz.github.io
+-d havkeye14.wixsite.com
+-d hfhfyejkwsu.wixsite.com
+-d hjdnshu.wixsite.com
+-d hollykim.com
+-d homemailweb-608850.weeblysite.com
+-d htitofjpve.club
+-d huynguyen2k.github.io
+-d icontainrbbr.s3.us-west-004.backblazeb2.com
+-d identifier-vous456.wixsite.com
+-d ijhsk.github.io
+-d imperia-trading.online
+-d informed.deliverydn.top
+-d informed.deliveryfp.top
+-d informed.deliveryft.top
+-d informed.deliveryhrw.top
+-d informed.deliverywbk.top
+-d inshatrading.com
+-d instagram.ossamaelidrissi.com
+-d inusualinteriorismo.com
+-d itaufatura.github.io
+-d itpronetwork.net
+-d itsmdshahin.github.io
+-d ixbuxedexw.info
+-d jeittagrennami-1729.vercel.app
+-d jimenezbill.wixsite.com
+-d jordanmargaret.wixsite.com
+-d jpmc.shieldssecuritybags.com
+-d jrcce.shop
+-d kdotts1.wixsite.com
+-d kemsnwshdurut.weebly.com
+-d large-kitchen-substantial.on-fleek.app
+-d leipeleufreyo.vercel.app
+-d lemedab246.wixsite.com
+-d lightseagreen-jaguar-612987.hostingersite.com
+-d ljsherrm.wixsite.com
+-d lnadm.icu
+-d locateid.com.tr
+-d loginmailaccount1.wixsite.com
+-d lsddndp-up.top
+-d lve1131.wixstudio.com
+-d lve1131.wixstudio.io
+-d mail.8724319-coinbase.com
+-d mail.health-status.fb-business.com
+-d maryp6608.wixsite.com
+-d mauttauhuttiloi.vercel.app
+-d messagevocale888.wixsite.com
+-d meta-mask-io.serv00.net
+-d metaiimaaskk-login.gitbook.io
+-d metamsik.com
+-d miss.votingforstudents.com
+-d mkramer03.wixsite.com
+-d mmoom4.wixsite.com
+-d mobileservice34.wixsite.com
+-d monetization-violation-page.github.io
+-d monirshouvo.github.io
+-d morinierevolailles.wixsite.com
+-d mtalha21.github.io
+-d muhammedasfacknk.github.io
+-d munnoi.github.io
+-d myurls.bio
+-d myvalue365.com
+-d navicrettobro-6686.vercel.app
+-d nbbroker.az
+-d nesgrjahwt.guru
+-d netfeliz.netlify.app
+-d nfwqayckqr.ltd
+-d notify-user-deviations.vercel.app
+-d oasisministries.com
+-d omar7rb1.github.io
+-d or-obaidullah.github.io
+-d orangveri.wixsite.com
+-d p.usertrackehe.top
+-d p.usertrackkum.top
+-d p.usertrackrry.top
+-d p.usertrackyfk.top
+-d pajem76668.wixsite.com
+-d pancake-frontend-dejmy38ut-chefilip.vercel.app
+-d perso8764002.wixsite.com
+-d phenomenal-praline-ff95b6.netlify.app
+-d pikay13.github.io
+-d podrimapso.wixsite.com
+-d portal-trezr-cdn.github.io
+-d ppruphmllx.blue
+-d premiumember.ct.ws
+-d preuffeddoupraki-2297.vercel.app
+-d pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev
+-d pub-019ceedaa0894587aa4255109af6c416.r2.dev
+-d pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev
+-d pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev
+-d pub-135a4055f8454025aa2f06845da4f8d8.r2.dev
+-d pub-140cf903de964a479f3b465e010ddb3b.r2.dev
+-d pub-14b5071e5a78406a9a92a00be9141089.r2.dev
+-d pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev
+-d pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev
+-d pub-244225b6dd0e404291c857fafd588b4f.r2.dev
+-d pub-28e193ca593a467bbd1e0232a73a5680.r2.dev
+-d pub-2a64f782845943beae62e9f09c473700.r2.dev
+-d pub-34ae76b320c445628f3e2bca4a192394.r2.dev
+-d pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev
+-d pub-3784361eb0b640e797495d46b35ce030.r2.dev
+-d pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev
+-d pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev
+-d pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev
+-d pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev
+-d pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev
+-d pub-55e3e997548a46879ee19f4d494309d6.r2.dev
+-d pub-619d0209611d4e8fb34f21726fd3b133.r2.dev
+-d pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev
+-d pub-668f78270889467e8af696261336536f.r2.dev
+-d pub-69356b68f37442e0a24ceb7981f0841b.r2.dev
+-d pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev
+-d pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev
+-d pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev
+-d pub-73ee129d9ec943f785408564adcaf985.r2.dev
+-d pub-7695c0b23019424cb779394f7a362ba8.r2.dev
+-d pub-76bf011f31344f45bf2356e9005ac465.r2.dev
+-d pub-7a6b99614f4b41658cd677a620b18951.r2.dev
+-d pub-7be95ce02232456db08522b3d3c99765.r2.dev
+-d pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev
+-d pub-80fb550826904a048a5391946ef49a69.r2.dev
+-d pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev
+-d pub-83f86cbfe52f42728c26cda54824eb39.r2.dev
+-d pub-886654e4969e42e988d48d11222c8a57.r2.dev
+-d pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev
+-d pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev
+-d pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev
+-d pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev
+-d pub-97673970c1c145eda5e559c4f9c18f61.r2.dev
+-d pub-9839470418254b29962dec4220c83255.r2.dev
+-d pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev
+-d pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev
+-d pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev
+-d pub-a017bd9f9dc6498183af41770490c482.r2.dev
+-d pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev
+-d pub-aa456431547a4e28948699d7c6a22006.r2.dev
+-d pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev
+-d pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev
+-d pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev
+-d pub-cb72691642c444eb900a44aa1d8a7107.r2.dev
+-d pub-ce8fc030252b4632959515dffef1b750.r2.dev
+-d pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev
+-d pub-de59803496c8489585895b6917266e7c.r2.dev
+-d pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev
+-d pub-ebb47370c13740ef9014f6bba927d946.r2.dev
+-d pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev
+-d pub-f7edd89a736e48428172001b0b1906fe.r2.dev
+-d pub-fc37d2d339714056b7f16368b49ae532.r2.dev
+-d pub-fd5baa54f2714f068701be4a7563f2de.r2.dev
+-d pub-fef94e8fd76842a4818865dd78ef618f.r2.dev
+-d puvomattipro.vercel.app
+-d qfbspeclmg.bond
+-d qowii.top
+-d quiz.vidio.com.user3.hehdin.us.kg
+-d radhikamd.github.io
+-d raiyone.cc
+-d rayatrecruitment.com
+-d rectifcentrefdeptrescu.weebly.com
+-d rekruitmenttjwtt.vip-media.web.id
+-d resolverpad.dev
+-d reward-webconnect.pages.dev
+-d roberthood.net
+-d rtm-att.directly.com
+-d ruthah9.wixsite.com
+-d rwhjdb.icu
+-d s.eu.premiumisp.net
+-d s.team-a.cam
+-d s080rjhdn.top
+-d salmanfarsi01.github.io
+-d santanderpod.globalizeme-dublin2.co.uk
+-d sedosexu.wixsite.com
+-d seller.tksalem.com
+-d server.2rk3.com
+-d server.6avj.com
+-d server.dgm0.com
+-d server.k6dz.com
+-d server.pxs7.com
+-d seunelvis1.github.io
+-d shanky0.github.io
+-d sjhdoirrsjx.wixsite.com
+-d smgolamalif.github.io
+-d smsmmsernorepls.wixsite.com
+-d soumya252000.github.io
+-d steam.communityartlist.com
+-d steam.workshopgraphy.com
+-d steamcommuitty.com
+-d steamcommunmutly.com
+-d steamcomunutty.com
+-d steamconmumity.com
+-d steeamcommnity.com
+-d stephen55687.github.io
+-d stevencrews.com
+-d submit-dispute-form.github.io
+-d sultan-raza.github.io
+-d sumagayathri-999.github.io
+-d support-verify-page.com
+-d supports-center-communityhelp.cloud
+-d svckhc.wixsite.com
+-d swatteam219.wixsite.com
+-d taher-mohamed-ahmed-saad.github.io
+-d taiegrma.gold
+-d tairgam.chat
+-d tairgam.fund
+-d tairgam.show
+-d tairgam.zone
+-d talergam.live
+-d talergam.red
+-d talergam.shopping
+-d talergam.today
+-d tanfupikyx.monster
+-d tcsktjtl.icu
+-d technoindiagroup.com
+-d tecmachine.com.br
+-d teiagram.group
+-d teiagram.red
+-d teiagram.zone
+-d teiegrma.cab
+-d teiegrma.design
+-d teiegrrm.blue
+-d teiegrrm.today
+-d telargam.city
+-d telargam.cloud
+-d telargam.college
+-d telargam.tax
+-d telegram-safe.cc
+-d telegrrm.monster
+-d telegrrm.xin
+-d telemlp-omsz.icu
+-d teleqrma.show
+-d telezelm-lbhg.icu
+-d tellmeliu.github.io
+-d terfanfranck.wixsite.com
+-d tienda-linea7.com
+-d tienda-linea9.com
+-d tiktok.fhinek.com
+-d tiktokkjshop.com
+-d tiktokmax3.vip
+-d troubadeihati-9272.vercel.app
+-d tysmbdpz.icu
+-d u-pphholfd.godaddysites.com
+-d ultrafima.com
+-d uphold-loges.github.io
+-d urbexine.shop
+-d urmilagome.github.io
+-d user1.hehdin.us.kg
+-d username895.wixsite.com
+-d usps.com-parceliutxb.vip
+-d usps.com-parceliutxc.vip
+-d usps.com-parceliutxe.vip
+-d usps.com-parceliutxg.vip
+-d usps.com-parceljzuwb.vip
+-d usps.com-parceljzuwc.vip
+-d usps.com-trackaaw.top
+-d usps.com-trackaba.top
+-d usps.com-trackakt.top
+-d usps.com-trackartjlo.top
+-d usps.com-trackbpg.top
+-d usps.com-trackdex.top
+-d usps.com-trackeaj.top
+-d usps.com-trackemh.top
+-d usps.com-trackevj.top
+-d usps.com-trackfnl.top
+-d usps.com-trackghi.top
+-d usps.com-trackgix.top
+-d usps.com-trackgna.top
+-d usps.com-trackhal.top
+-d usps.com-trackicg.top
+-d usps.com-trackidp.top
+-d usps.com-trackiiz.top
+-d usps.com-tracking-helpnko.cc
+-d usps.com-tracking-helptom.cc
+-d usps.com-tracking-helptot.cc
+-d usps.com-tracking-helptwo.cc
+-d usps.com-tracking-helptzo.cc
+-d usps.com-trackipxdnh.top
+-d usps.com-trackius.top
+-d usps.com-trackjgc.top
+-d usps.com-trackjkh.top
+-d usps.com-trackkys.top
+-d usps.com-trackloi.top
+-d usps.com-tracklpe.top
+-d usps.com-tracklvr.top
+-d usps.com-trackmjx.top
+-d usps.com-trackmli.top
+-d usps.com-trackmvd.top
+-d usps.com-tracknsr.top
+-d usps.com-trackodf.top
+-d usps.com-trackogx.top
+-d usps.com-trackonp.top
+-d usps.com-trackpgl.top
+-d usps.com-trackpoq.top
+-d usps.com-trackpsx.top
+-d usps.com-trackpwg.top
+-d usps.com-trackree.top
+-d usps.com-tracksbw.top
+-d usps.com-tracktdz.top
+-d usps.com-tracktmb.top
+-d usps.com-tracktus.top
+-d usps.com-tracktyi.top
+-d usps.com-trackuir.top
+-d usps.com-trackuve.top
+-d usps.com-trackvbw.top
+-d usps.com-trackvkt.top
+-d usps.com-trackvoi.top
+-d usps.com-trackwil.top
+-d usps.com-trackxgj.top
+-d usps.com-trackxkt.top
+-d usps.com-trackxrz.top
+-d usps.com-trackxxh.top
+-d usps.com-trackzyy.top
+-d uspsservicetrack.blogspot.com.cy
+-d veeradalaw.com
+-d vmgmjfbz.icu
+-d wakakehuteu-9247.vercel.app
+-d walletcazonnect.gitbook.io
+-d wap.brwj.cn
+-d webmailservice08.wixsite.com
+-d wellyngtonkuhn.github.io
+-d whare.100webspace.net
+-d wwiiskdkdnffnjuca.weebly.com
+-d www-degelyehuda-org-il.filesusr.com
+-d wwwteiegramwor.xyz
+-d xavier6709.github.io
+-d xn--d1aqfkf.xn--p1ai
+-d xox-exe.github.io
+-d yairix.github.io
+-d yarakobanrhg.wpenginepowered.com
+-d zattajakoixa-8559.vercel.app
+-d zerotelegram.pl
+-d zetriyauffivou-1144.vercel.app
+-d zkybgfddvl.shop
+-d zures.com.br
diff --git a/phishing-filter.tpl.br b/phishing-filter.tpl.br
new file mode 100644
index 000000000..7216ce87c
Binary files /dev/null and b/phishing-filter.tpl.br differ
diff --git a/phishing-filter.tpl.gz b/phishing-filter.tpl.gz
new file mode 100644
index 000000000..50a9d30a8
Binary files /dev/null and b/phishing-filter.tpl.gz differ
diff --git a/phishing-filter.txt b/phishing-filter.txt
new file mode 100644
index 000000000..64818c6fc
--- /dev/null
+++ b/phishing-filter.txt
@@ -0,0 +1,469 @@
+! Title: Phishing URL Blocklist
+! Updated: 2024-12-15T00:23:11Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+23cssahil.github.io
+3reshma.github.io
+67533177.ishg.za.com
+67780581.ishg.za.com
+72386989.ishg.za.com
+a2i9s4y.space
+a3.ikansalasq.com
+acederma.com
+ahhhh.pe.kr
+airbnb.sync114.com
+aisths.cc
+akanksha3012.github.io
+aks34.github.io
+alessandrodiana.it
+amamz-product.click
+amazonnu.co
+amreeth.github.io
+anjalijha167.github.io
+apricotmelly.wixstudio.com
+apricotmelly.wixstudio.io
+arpitgoel889.github.io
+art-tour.net
+artofbaseball.net
+ashishmaurya73.github.io
+askewi3010.wixsite.com
+asupanvviptelegram.my.id
+atobi432.wixsite.com
+attcom-103887.weebly.com
+attisat.gr
+attvalidatekindly.weebly.com
+attyahoomai.wixsite.com
+autoscurt24.de
+bafkreife4y7p4gcawzfdovynwczzw3plagqbb4ripxmskhopfcdduvrdgi.ipfs.flk-ipfs.xyz
+bafybeid2kyrhgkvukuaz3pxzpt6gjexevmdkd73nrtvciaxw3ecprvdlzm.ipfs.w3s.link
+bafybeieppcmmshlcnlffkhlsrabpgrqcj6z6jtpjux6mqkmwvx2hnvgqmi.ipfs.nftstorage.link
+bafybeig7gixmihmnga7eeqtbjym5irsnpntbq7cdv47o53jd5jxu33boey.ipfs.w3s.link
+bafybeigmeo3la52w6o3w7nz4jta37u27hr2gaedfwuxgk2wlyfgstjvlka.ipfs.dweb.link
+ballefabrouyau-9112.vercel.app
+bantuan-tunai-mystrx.jobs8.my.id
+baradua.it
+barberalonzo29.wixsite.com
+basil0303.github.io
+bernardamos422.wixsite.com
+bettinamarks.com
+bharathi1809.github.io
+blue-tick-help.vercel.app
+bntuan-dana4-resmii.danytx.web.id
+boapremium-001-site1.ptempurl.com
+bojanawauceu-3394.vercel.app
+bolipost.cc
+bomomvpfo.club
+bountyhunterpc.github.io
+bpqxqtuig.club
+brbrgsnyqwer.wixsite.com
+brwj.cn
+bt.daftpage.com
+cache.netflix.com.user12.sanasta.us.kg
+carolesheridan4.wixsite.com
+chance-to-availbale-free-badge.vercel.app
+chiragrajoria.github.io
+cid-phisher.github.io
+clariveh.baby
+clifforddaniells.wixsite.com
+coinbasefaqdesk.com
+coiniiobisaecoins.azurewebsites.net
+confirmationhelpmeta.io.vn
+cpisafety.che.buet.ac.bd
+cricketbettingpro.com
+cubixpro.com
+currentlyatt810.weebly.com
+dalipthukral0.wixsite.com
+danaindonesia.bantuan-resmi.top
+deepxzkdn.deadth.sbs
+descounsell.wixsite.com
+detlxc.master78lite.com
+devshubhamjadav.github.io
+dfxzsdf.wixsite.com
+dhanushr24.github.io
+dianecadei8.wixsite.com
+did57sauveton.wixsite.com
+dl.mod30t.ir
+dmgeuntv.icu
+doloribus-voluptat-space.wpkubio.com
+donrichie781.wixsite.com
+donttolinii.wixsite.com
+dtn-3c.vercel.app
+duvetrexuprau.vercel.app
+ebayqi.shop
+eirxkrdgtk.duckdns.org
+energizahn.dicosur.net
+esumbunk.cc
+esunbonk.cc
+everestmotors.com.np
+evqjteoscz.link
+exoduswallet.cn.com
+facebook-tw-web.azurewebsites.net
+facebookverifycenter.com.de
+faceit.sunbim.pro
+faizankhan0408.github.io
+fauexpfv.icu
+feprk.sbs
+formsly-form.web.app
+free-5573726.webadorsite.com
+fsdfjeifls.click
+galiciacgu.com.ar
+gardakosto.wixsite.com
+geemiioilogin.gitbook.io
+guptanikshay.github.io
+gyxgxuu.wixsite.com
+h5.z3v2.com
+hajjsj.top
+hamza-nawaz.github.io
+havkeye14.wixsite.com
+hfhfyejkwsu.wixsite.com
+hjdnshu.wixsite.com
+hollykim.com
+homemailweb-608850.weeblysite.com
+htitofjpve.club
+huynguyen2k.github.io
+icontainrbbr.s3.us-west-004.backblazeb2.com
+identifier-vous456.wixsite.com
+ijhsk.github.io
+imperia-trading.online
+informed.deliverydn.top
+informed.deliveryfp.top
+informed.deliveryft.top
+informed.deliveryhrw.top
+informed.deliverywbk.top
+inshatrading.com
+instagram.ossamaelidrissi.com
+inusualinteriorismo.com
+itaufatura.github.io
+itpronetwork.net
+itsmdshahin.github.io
+ixbuxedexw.info
+jeittagrennami-1729.vercel.app
+jimenezbill.wixsite.com
+jordanmargaret.wixsite.com
+jpmc.shieldssecuritybags.com
+jrcce.shop
+kdotts1.wixsite.com
+kemsnwshdurut.weebly.com
+large-kitchen-substantial.on-fleek.app
+leipeleufreyo.vercel.app
+lemedab246.wixsite.com
+lightseagreen-jaguar-612987.hostingersite.com
+ljsherrm.wixsite.com
+lnadm.icu
+locateid.com.tr
+loginmailaccount1.wixsite.com
+lsddndp-up.top
+lve1131.wixstudio.com
+lve1131.wixstudio.io
+mail.8724319-coinbase.com
+mail.health-status.fb-business.com
+maryp6608.wixsite.com
+mauttauhuttiloi.vercel.app
+messagevocale888.wixsite.com
+meta-mask-io.serv00.net
+metaiimaaskk-login.gitbook.io
+metamsik.com
+miss.votingforstudents.com
+mkramer03.wixsite.com
+mmoom4.wixsite.com
+mobileservice34.wixsite.com
+monetization-violation-page.github.io
+monirshouvo.github.io
+morinierevolailles.wixsite.com
+mtalha21.github.io
+muhammedasfacknk.github.io
+munnoi.github.io
+myurls.bio
+myvalue365.com
+navicrettobro-6686.vercel.app
+nbbroker.az
+nesgrjahwt.guru
+netfeliz.netlify.app
+nfwqayckqr.ltd
+notify-user-deviations.vercel.app
+oasisministries.com
+omar7rb1.github.io
+or-obaidullah.github.io
+orangveri.wixsite.com
+p.usertrackehe.top
+p.usertrackkum.top
+p.usertrackrry.top
+p.usertrackyfk.top
+pajem76668.wixsite.com
+pancake-frontend-dejmy38ut-chefilip.vercel.app
+perso8764002.wixsite.com
+phenomenal-praline-ff95b6.netlify.app
+pikay13.github.io
+podrimapso.wixsite.com
+portal-trezr-cdn.github.io
+ppruphmllx.blue
+premiumember.ct.ws
+preuffeddoupraki-2297.vercel.app
+pub-00bef5f99dab49e39fc5ca6f34eab29a.r2.dev
+pub-019ceedaa0894587aa4255109af6c416.r2.dev
+pub-0524d4a975d949ffa30d3322278eb4fa.r2.dev
+pub-06eb4f001f904e9ab1d27a4f2f387796.r2.dev
+pub-135a4055f8454025aa2f06845da4f8d8.r2.dev
+pub-140cf903de964a479f3b465e010ddb3b.r2.dev
+pub-14b5071e5a78406a9a92a00be9141089.r2.dev
+pub-19128e0e6ecc4449a51ef13fa09d2461.r2.dev
+pub-1f1a35f8dc62417ca5074987edc3aa1b.r2.dev
+pub-244225b6dd0e404291c857fafd588b4f.r2.dev
+pub-28e193ca593a467bbd1e0232a73a5680.r2.dev
+pub-2a64f782845943beae62e9f09c473700.r2.dev
+pub-34ae76b320c445628f3e2bca4a192394.r2.dev
+pub-3522962ac6df4ad498359dbbd15fc84b.r2.dev
+pub-3784361eb0b640e797495d46b35ce030.r2.dev
+pub-4bf302a1b3af4892a9d2466a4a693dbd.r2.dev
+pub-4d0f6fcf67c84d5f9c4c2f4482f841b5.r2.dev
+pub-4d51938427f44a3b83d94f700fb7d6e1.r2.dev
+pub-4fcdb9364c8b45b5bf2b641c51c1208e.r2.dev
+pub-52e14e9b8cf84e48885151652cfe94bd.r2.dev
+pub-55e3e997548a46879ee19f4d494309d6.r2.dev
+pub-619d0209611d4e8fb34f21726fd3b133.r2.dev
+pub-65c60d3a289d4129a0670802fa2aaeb1.r2.dev
+pub-668f78270889467e8af696261336536f.r2.dev
+pub-69356b68f37442e0a24ceb7981f0841b.r2.dev
+pub-6a9486f046fb4f93bcd4d9ead1ff8f9e.r2.dev
+pub-6b898b25dccb43a8b9fd13efe75efaf8.r2.dev
+pub-6c2025a4f4d14be292b733b023a6fe84.r2.dev
+pub-73ee129d9ec943f785408564adcaf985.r2.dev
+pub-7695c0b23019424cb779394f7a362ba8.r2.dev
+pub-76bf011f31344f45bf2356e9005ac465.r2.dev
+pub-7a6b99614f4b41658cd677a620b18951.r2.dev
+pub-7be95ce02232456db08522b3d3c99765.r2.dev
+pub-7fba1b15f67c48dab9fed7ef0dc5513b.r2.dev
+pub-80fb550826904a048a5391946ef49a69.r2.dev
+pub-81d7a88e86fd45c4845f781bd88222ab.r2.dev
+pub-83f86cbfe52f42728c26cda54824eb39.r2.dev
+pub-886654e4969e42e988d48d11222c8a57.r2.dev
+pub-88eaaa6af3d04d8688059cffaf78d050.r2.dev
+pub-8f65f9d5fa9b4344928c7d39a69c7046.r2.dev
+pub-93447d52bbd14ef0872d9ebe64bd09eb.r2.dev
+pub-93d6946f4b1c48449681dc7f7ce2b8bd.r2.dev
+pub-97673970c1c145eda5e559c4f9c18f61.r2.dev
+pub-9839470418254b29962dec4220c83255.r2.dev
+pub-9ab5a2326cc7498ca88d41b695cf49c8.r2.dev
+pub-9b0c4b61dcdb4349b13b6e0f0902a227.r2.dev
+pub-9c6604a9b0af4b1582dda6c248dbf929.r2.dev
+pub-a017bd9f9dc6498183af41770490c482.r2.dev
+pub-a6e2696f063d44f0aeccf7a9ba82c581.r2.dev
+pub-aa456431547a4e28948699d7c6a22006.r2.dev
+pub-ba357d95075c4d879b3d01b38b24ecc6.r2.dev
+pub-bbc4d3d59f114fb79d8fc541efbb1429.r2.dev
+pub-c9e64147d3574630a977dc0fc6d899b0.r2.dev
+pub-cb72691642c444eb900a44aa1d8a7107.r2.dev
+pub-ce8fc030252b4632959515dffef1b750.r2.dev
+pub-d69751ce7c104b1a8abc630d80ac130c.r2.dev
+pub-de59803496c8489585895b6917266e7c.r2.dev
+pub-eb03e594738b420c8a34cb7366d9f29b.r2.dev
+pub-ebb47370c13740ef9014f6bba927d946.r2.dev
+pub-f5f6eab7eccf4608b3a7b23eb15a4a60.r2.dev
+pub-f7edd89a736e48428172001b0b1906fe.r2.dev
+pub-fc37d2d339714056b7f16368b49ae532.r2.dev
+pub-fd5baa54f2714f068701be4a7563f2de.r2.dev
+pub-fef94e8fd76842a4818865dd78ef618f.r2.dev
+puvomattipro.vercel.app
+qfbspeclmg.bond
+qowii.top
+quiz.vidio.com.user3.hehdin.us.kg
+radhikamd.github.io
+raiyone.cc
+rayatrecruitment.com
+rectifcentrefdeptrescu.weebly.com
+rekruitmenttjwtt.vip-media.web.id
+resolverpad.dev
+reward-webconnect.pages.dev
+roberthood.net
+rtm-att.directly.com
+ruthah9.wixsite.com
+rwhjdb.icu
+s.eu.premiumisp.net
+s.team-a.cam
+s080rjhdn.top
+salmanfarsi01.github.io
+santanderpod.globalizeme-dublin2.co.uk
+sedosexu.wixsite.com
+seller.tksalem.com
+server.2rk3.com
+server.6avj.com
+server.dgm0.com
+server.k6dz.com
+server.pxs7.com
+seunelvis1.github.io
+shanky0.github.io
+sjhdoirrsjx.wixsite.com
+smgolamalif.github.io
+smsmmsernorepls.wixsite.com
+soumya252000.github.io
+steam.communityartlist.com
+steam.workshopgraphy.com
+steamcommuitty.com
+steamcommunmutly.com
+steamcomunutty.com
+steamconmumity.com
+steeamcommnity.com
+stephen55687.github.io
+stevencrews.com
+submit-dispute-form.github.io
+sultan-raza.github.io
+sumagayathri-999.github.io
+support-verify-page.com
+supports-center-communityhelp.cloud
+svckhc.wixsite.com
+swatteam219.wixsite.com
+taher-mohamed-ahmed-saad.github.io
+taiegrma.gold
+tairgam.chat
+tairgam.fund
+tairgam.show
+tairgam.zone
+talergam.live
+talergam.red
+talergam.shopping
+talergam.today
+tanfupikyx.monster
+tcsktjtl.icu
+technoindiagroup.com
+tecmachine.com.br
+teiagram.group
+teiagram.red
+teiagram.zone
+teiegrma.cab
+teiegrma.design
+teiegrrm.blue
+teiegrrm.today
+telargam.city
+telargam.cloud
+telargam.college
+telargam.tax
+telegram-safe.cc
+telegrrm.monster
+telegrrm.xin
+telemlp-omsz.icu
+teleqrma.show
+telezelm-lbhg.icu
+tellmeliu.github.io
+terfanfranck.wixsite.com
+tienda-linea7.com
+tienda-linea9.com
+tiktok.fhinek.com
+tiktokkjshop.com
+tiktokmax3.vip
+troubadeihati-9272.vercel.app
+tysmbdpz.icu
+u-pphholfd.godaddysites.com
+ultrafima.com
+uphold-loges.github.io
+urbexine.shop
+urmilagome.github.io
+user1.hehdin.us.kg
+username895.wixsite.com
+usps.com-parceliutxb.vip
+usps.com-parceliutxc.vip
+usps.com-parceliutxe.vip
+usps.com-parceliutxg.vip
+usps.com-parceljzuwb.vip
+usps.com-parceljzuwc.vip
+usps.com-trackaaw.top
+usps.com-trackaba.top
+usps.com-trackakt.top
+usps.com-trackartjlo.top
+usps.com-trackbpg.top
+usps.com-trackdex.top
+usps.com-trackeaj.top
+usps.com-trackemh.top
+usps.com-trackevj.top
+usps.com-trackfnl.top
+usps.com-trackghi.top
+usps.com-trackgix.top
+usps.com-trackgna.top
+usps.com-trackhal.top
+usps.com-trackicg.top
+usps.com-trackidp.top
+usps.com-trackiiz.top
+usps.com-tracking-helpnko.cc
+usps.com-tracking-helptom.cc
+usps.com-tracking-helptot.cc
+usps.com-tracking-helptwo.cc
+usps.com-tracking-helptzo.cc
+usps.com-trackipxdnh.top
+usps.com-trackius.top
+usps.com-trackjgc.top
+usps.com-trackjkh.top
+usps.com-trackkys.top
+usps.com-trackloi.top
+usps.com-tracklpe.top
+usps.com-tracklvr.top
+usps.com-trackmjx.top
+usps.com-trackmli.top
+usps.com-trackmvd.top
+usps.com-tracknsr.top
+usps.com-trackodf.top
+usps.com-trackogx.top
+usps.com-trackonp.top
+usps.com-trackpgl.top
+usps.com-trackpoq.top
+usps.com-trackpsx.top
+usps.com-trackpwg.top
+usps.com-trackree.top
+usps.com-tracksbw.top
+usps.com-tracktdz.top
+usps.com-tracktmb.top
+usps.com-tracktus.top
+usps.com-tracktyi.top
+usps.com-trackuir.top
+usps.com-trackuve.top
+usps.com-trackvbw.top
+usps.com-trackvkt.top
+usps.com-trackvoi.top
+usps.com-trackwil.top
+usps.com-trackxgj.top
+usps.com-trackxkt.top
+usps.com-trackxrz.top
+usps.com-trackxxh.top
+usps.com-trackzyy.top
+uspsservicetrack.blogspot.com.cy
+veeradalaw.com
+vmgmjfbz.icu
+wakakehuteu-9247.vercel.app
+walletcazonnect.gitbook.io
+wap.brwj.cn
+webmailservice08.wixsite.com
+wellyngtonkuhn.github.io
+whare.100webspace.net
+wwiiskdkdnffnjuca.weebly.com
+www-degelyehuda-org-il.filesusr.com
+wwwteiegramwor.xyz
+xavier6709.github.io
+xn--d1aqfkf.xn--p1ai
+xox-exe.github.io
+yairix.github.io
+yarakobanrhg.wpenginepowered.com
+zattajakoixa-8559.vercel.app
+zerotelegram.pl
+zetriyauffivou-1144.vercel.app
+zkybgfddvl.shop
+zures.com.br
+||busanopen.org/office/msgvoice/source/login.php$all
+||busanopen.org/office/msgvoice/source/wrongpass.php$all
+||eqrco.de/a/t3magy$all
+||flow.page/mlh21880/$all
+||im-creator.com/free/btin/bt/$all
+||is.gd/xqplkv$all
+||keepo.io/login/$all
+||keepo.io/serverguide53/$all
+||qr.me-qr.com/tcy5mrt1/$all
+||sites.google.com/l0gin-microsoftwebonlne.app/r75567/$all
+||sites.google.com/view/345678987655/home/$all
+||sites.google.com/view/btconnectbusiness/btconnect/$all
+||sites.google.com/view/fatherplac/accueil/$all
+||sites.google.com/view/koiuld2dkjcxnjk2s/$all
+||sites.google.com/view/orange-aslkdsald/$all
+||sites.google.com/view/paypal-loginn/$all
+||snapto.link/closurep-1/$all
+||webogram.org/a/$all
+||zpr.io/drpj3ayxdsc4$all
+||zyexx.com/kcf05074c7d8ec461318b173a03xd5882406.html$all
diff --git a/phishing-filter.txt.br b/phishing-filter.txt.br
new file mode 100644
index 000000000..1e0a3d5ab
Binary files /dev/null and b/phishing-filter.txt.br differ
diff --git a/phishing-filter.txt.gz b/phishing-filter.txt.gz
new file mode 100644
index 000000000..ce6da64be
Binary files /dev/null and b/phishing-filter.txt.gz differ