diff --git a/.nojekyll b/.nojekyll
new file mode 100644
index 000000000..e69de29bb
diff --git a/phishing-filter-ag.txt b/phishing-filter-ag.txt
new file mode 100644
index 000000000..af2b95e91
--- /dev/null
+++ b/phishing-filter-ag.txt
@@ -0,0 +1,493 @@
+! Title: Phishing URL Blocklist (AdGuard)
+! Updated: 2024-11-22T12:07:59Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||073202.com$all
+||0xugiw6pb.top$all
+||11muskansingh.github.io$all
+||130365.vip$all
+||21403590.cc$all
+||2366xyx.com$all
+||25v05vtrg.top$all
+||365.915sj1.xyz$all
+||498291975887803508.weebly.com$all
+||5510003.top$all
+||5510006.top$all
+||551005.me$all
+||551008.me$all
+||57365ee.cc$all
+||5kplayer.com/r/go.php?an=5kpwin&cvs=6.1&cb=&fui=&rt=undef&eid=&pvs=6.0&ev=ins&uc=tos573mrjamdnino&jump=//talentbegins.com/attow/owa-index.html#3mail@b.c$all
+||657226703365.com$all
+||6bet938.com$all
+||838882.com/?home=casino&a=x$all
+||8904701.cc$all
+||909338844400.weebly.com$all
+||965009.com$all
+||98f63c2a712e05fbeccf379de02ec9a5.88110.co$all
+||a0omer.webwave.dev$all
+||aaloo.kiwiground.top$all
+||abueme-96e1.ehnelacsrralo.workers.dev$all
+||accountuserlogin.github.io$all
+||accshomecnfrm0log.github.io$all
+||adminuser.yw2201.xyz$all
+||agenciaancla.com.ar$all
+||airbnb-clone-one-chi.vercel.app$all
+||allegro-400.com$all
+||amazon-clone88.netlify.app$all
+||amazonclonebysid.netlify.app$all
+||amazons-help-cx-number.pages.dev$all
+||anshbotzone.com$all
+||anshidmuhmd.github.io$all
+||anuarw.kz$all
+||app.liquidations-aave.com$all
+||app.paxful87.com$all
+||app.sandbox.custombrandedboxesbyfedex.com$all
+||appeal-solve-violation-review.vercel.app$all
+||apri.94-141-120-29.cprapid.com$all
+||apwmensdjyeurir.weebly.com$all
+||arbnb-clone.vercel.app$all
+||arvestcd.embarkdigitalonboarding.com$all
+||arvestrewardscard.embarkdigitalonboarding.com$all
+||atbdgtehomeupdateform.weebly.com$all
+||atftt.weebly.com$all
+||atlgnrnewt.weebly.com$all
+||atlnes.icu$all
+||atmailupdateformeupdaterltdfdinfomailacct.weebly.com$all
+||atmailupdateformeupdatesbhtdinfomailacct.weebly.com$all
+||att-100081.weeblysite.com$all
+||att-102549.weeblysite.com$all
+||att-102856.weeblysite.com$all
+||att-10386990.weeblysite.com$all
+||att-106249.weeblysite.com$all
+||att-108680.weeblysite.com$all
+||att-109026.weeblysite.com$all
+||attadm977222.weebly.com$all
+||attcom-105588.weeblysite.com$all
+||attcom-107224.weeblysite.com$all
+||attconsultint.weebly.com$all
+||attflyupdateserver.weebly.com$all
+||attglobalwild.weebly.com$all
+||attmaill0gin2341.weebly.com$all
+||attnationameritechie.weebly.com$all
+||attserverupdatedmailbox.weebly.com$all
+||attt-107147.weeblysite.com$all
+||b.3656240205.vip$all
+||b12thgst9.weeblysite.com$all
+||b35ppp.com$all
+||b35sss.com$all
+||b45017.com$all
+||b45020.com$all
+||bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link$all
+||bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link$all
+||bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link$all
+||bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link$all
+||bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link$all
+||bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link$all
+||bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link$all
+||bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link$all
+||bancolombia.supportmaven.ai$all
+||bansos-2jt.get-regist.com$all
+||bbtryr.com$all
+||bentdynamicslm.com$all
+||bestorrogames.com$all
+||bet365ce.com$all
+||bet6205365.com$all
+||bet63035.com$all
+||bet83067.com$all
+||blajowet.cyou$all
+||braxapressaje-9251.vercel.app$all
+||bronm0.wixsite.com$all
+||bryfhdjffgc.weebly.com$all
+||bt-100831.weeblysite.com$all
+||bt-103187.weeblysite.com$all
+||bt-107510.weeblysite.com$all
+||btinternet-108597.weeblysite.com$all
+||btinternet18282.weebly.com$all
+||business-meta-center.com$all
+||byzhxx.com$all
+||c0nfrmpgsacc.github.io$all
+||cancel-binance.com$all
+||caracoliresidencial.com$all
+||cek-voucher.earth.web.id$all
+||cernifg359.cyou$all
+||chase-bank-one.vercel.app$all
+||chilly.makeup$all
+||china-link.pages.dev$all
+||chinnurpk.github.io$all
+||cibcgg.com$all
+||click.pstmrk.it/3s/sjc.hgp.mybluehost.me%2fdbs%2f/bwla/zio5aq/aq/0ec638bc-0952-4618-944f-73740120a333/1/nhcgdhrp7k$all
+||cmenvivo.github.io$all
+||codapay.events-games.com$all
+||coin-bosepro-log.godaddysites.com$all
+||coinbase-com-66117.danschaffert66529.workers.dev$all
+||communitycasesreviewlist.web.app$all
+||conennectakasd.b-cdn.net$all
+||conn-twallt.gitbook.io$all
+||correctingservicesalakks.pages.dev$all
+||credito-prestamos.fra1.zeabur.app$all
+||currently4988.weebly.com$all
+||currently6510.weebly.com$all
+||currently810.weebly.com$all
+||currently8711.weebly.com$all
+||currentlyatt04.weebly.com$all
+||currentlyatt223.weebly.com$all
+||currentlyatt468.weebly.com$all
+||currentlyatt7891.weebly.com$all
+||currentlyatt9854.weebly.com$all
+||currentlyattyaho85748.weebly.com$all
+||currentlyattyahoo6check.weebly.com$all
+||customersupportteam.serveusers.com$all
+||cv.geldmagazin.de$all
+||cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br$all
+||cwgml.top$all
+||d551000.cc$all
+||dappprompty.pages.dev$all
+||datagivers.com/f7101c3a3pb7f54dea0a99976cfw43ae6306.html$all
+||datingteles3x.netlify.app$all
+||debank-w.github.io$all
+||decenlaunchpad.pages.dev$all
+||demo.dynamicsolutionit.com$all
+||desktoptg.com$all
+||dev-0014021997322.pantheonsite.io$all
+||dev-102030654785555551.pantheonsite.io$all
+||dhl.ijpcr.net.in$all
+||dhlexpress.hu$all
+||djelp.top$all
+||dknrutkslsjf.weebly.com$all
+||dkrjjhrjemfkj.weeblysite.com$all
+||doccvview.buzz$all
+||docu-auth-5775940568.bb-abogados.com$all
+||doujeucrumoufau-8054.vercel.app$all
+||dropboxubdkw.weebly.com$all
+||duysysysh.weebly.com$all
+||eagbid.ru.com$all
+||ebay.ebayshoo.com$all
+||ebdaf.top$all
+||ejnapxqitd.cfolks.pl$all
+||elitefortnit.github.io$all
+||emailnoticeie.weebly.com$all
+||enforce-user-guidelines.vercel.app$all
+||erdtgyur57t6gyu.weebly.com$all
+||error3457uypcold.azurewebsites.net$all
+||eryiurgygeyigegh.weeblysite.com$all
+||eshop-eu.care.cps-partnersnp.de$all
+||ethereum-apple.org$all
+||evenstagservices.com$all
+||facebook-loginpage-clone.vercel.app$all
+||facebook-web.cloudns.be$all
+||faenl.top$all
+||fb-login-clone.vercel.app$all
+||feline-full-stick.glitch.me$all
+||fhger75gfg2fff.top$all
+||finityrrr.weebly.com$all
+||flngf.top$all
+||form-policy-appeal-k2d7nf.vercel.app$all
+||form-policy-appeal-k2x7nf.vercel.app$all
+||free-5476373.webadorsite.com$all
+||free-5481257.webadorsite.com$all
+||free-5562390.webadorsite.com$all
+||freevideomelayu.tme-viral.link$all
+||gasbot-demos.vercel.app$all
+||ggdhjssu7.wixsite.com$all
+||ghaho.vercel.app$all
+||gheedfhj.weebly.com$all
+||ghshbv.wixsite.com$all
+||global-reward.kraftonevent.com$all
+||gnaneshwarreddybaitinti.github.io$all
+||gnktan.top$all
+||goo.su/hcf4j99$all
+||goteleg-br.top$all
+||gradeis.info$all
+||help-manage-center.com$all
+||helpnets.info/ccf9d49ead88074a54h9dfc49c0o673cf425.html%20helpnets.info$all
+||heriodj.shop$all
+||hermiovz-bustling-sled.glitch.me$all
+||hobitronik.com$all
+||home-100383.weeblysite.com$all
+||home-100489.weeblysite.com$all
+||home-101941.weeblysite.com$all
+||home-102517.weeblysite.com$all
+||home-104101.weeblysite.com$all
+||home-104529.weeblysite.com$all
+||home-104657.weeblysite.com$all
+||iemnswgehdporlkf.weebly.com$all
+||iik-3100-2023-spear-phishing-login-page.vercel.app$all
+||imtikem.vip$all
+||imtoken-iim.org$all
+||institutodentalsante.com.br$all
+||interface-beta-eight.vercel.app$all
+||ipfs.io/ipfs/bafkreidlec2bka6gte7dvl66mqivaz5kovc4xavxuga7aukprms4vpcjsa$all
+||ipfs.io/ipfs/bafkreieqeeu2ua46eil6yh3nfrhsw6wxmuu3rvggciznuxj4vnnlrjrm6u$all
+||ipfs.io/ipfs/qmnwb6uzmfyemlxamalditpnspllzyxisuutjdhueup459/dalomanb.html$all
+||ipfs.io/ipfs/qmnyv2kmgpzcqkplwcylltkt6auyvsdhphoe7hnrs6uxqe/$all
+||ipfs.io/ipfs/qmytqhkwat1yxbkj972zsstss4vpgfhzya9fb4vannqnar$all
+||it-outlookwebaccess.com$all
+||itklkaklkakk.weebly.com$all
+||jaiganeshmachinery.com$all
+||jdkajsmxncbeuwie.weebly.com$all
+||jfnjkfvbhjvdc.weebly.com$all
+||jfvfbremdkf50nhfgs.weeblysite.com$all
+||jhyuj.weebly.com$all
+||jinqiao114.com$all
+||join-mywhatsapp-2sa.pages.dev$all
+||jttyavc.com$all
+||juno-100024.weeblysite.com$all
+||juno-102431.square.site$all
+||junoytremauilkdfh.weebly.com$all
+||jxzipper.com$all
+||jzhemuni-logun.godaddysites.com$all
+||jzyl669.net$all
+||khdny.top$all
+||learn-trzor-start.github.io$all
+||ledger-com-updatefirmware.aparecidovisentin.com.br$all
+||ledger-com-upgrade.gezix.com.tr$all
+||ledger-confirm.com$all
+||ledgerhardwarehelp.com$all
+||ledgersafetyplatform.com$all
+||ledqinlv.com$all
+||linkr.it/1nkr0v$all
+||loggmaskemttaa.godaddysites.com$all
+||login-midstreams-outlook.us$all
+||login.94-141-120-29.cprapid.com$all
+||loginhomeinbox.com$all
+||loginscreen-att-108245.weeblysite.com$all
+||lojer-vohex84.vercel.app$all
+||lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br$all
+||lttcloudvpn.pages.dev$all
+||m-telegrm.cc$all
+||m.amazontech.cc$all
+||m.key5188.com$all
+||mail-admin-102219.weeblysite.com$all
+||mail-securities.square.site$all
+||mail.apri.94-141-120-29.cprapid.com$all
+||mail.spotifyyclonne.freewebhostmost.com$all
+||mailboxspheretoday.weebly.com$all
+||mailhomebox-8096940.weeblysite.com$all
+||mailserverreservoir.weebly.com$all
+||malonlineservce12.weebly.com$all
+||managementbusinessrequiredaza.weebly.com$all
+||manorders.com$all
+||marketplace-center-checkitem-supp0rt-now-business.click$all
+||megadropclaim.com$all
+||met-aa-mass-klog-in.godaddysites.com$all
+||metamagskloin.gitbook.io$all
+||metamask-web.vercel.app$all
+||metameasklin.gitbook.io$all
+||metamsk-wallet-3.gitbook.io$all
+||metamuscklog.godaddysites.com$all
+||metau-maasck-loogiin.godaddysites.com$all
+||metawallet-server.vercel.app$all
+||metmassk-usalloggies.godaddysites.com$all
+||microsofstonline.com$all
+||micsoft.phishone.com$all
+||midjourneyex.com$all
+||mikam76544444.weebly.com$all
+||morsaglobal.com$all
+||mozp.ubjoubj.shop$all
+||multichaintool.netlify.app$all
+||myvalue365.com$all
+||navi-airbnb.vercel.app$all
+||nerve.black$all
+||netflix-clone-frontend-flax.vercel.app$all
+||netflix-clone-ml.vercel.app$all
+||netflix-lite-one.vercel.app$all
+||netflix-talarys.vercel.app$all
+||netzeero.weebly.com$all
+||netzero-webmail-109987.weeblysite.com$all
+||netzeroinfo.weebly.com$all
+||next-airbnb-clone-sage.vercel.app$all
+||nft-lift9.vercel.app$all
+||nihaalxz.github.io$all
+||nodeconnectdapp.pages.dev$all
+||nordicwalkingcadiz.com$all
+||notificationcentenooooo.weebly.com$all
+||notify-suspicious-activity.vercel.app$all
+||nsrocawsso.duckdns.org$all
+||ntlworldupdatemail.weebly.com$all
+||nuplaqsdmkd.weebly.com$all
+||nurnjjdsqs.duckdns.org$all
+||o08ofobnw.top$all
+||oatt745.wixsite.com$all
+||office-techservice.com$all
+||ortakoyescortum.site$all
+||outlook-loginsecurity.com$all
+||outlookcode22.weebly.com$all
+||pagedoc65.pages.dev$all
+||pay-pay-pay-loop-jp.replit.app$all
+||pedidosnozapp.com.br$all
+||pianorollcenter.com$all
+||pop.spotifycloning1.freewebhostmost.com$all
+||privateservicehsb.com$all
+||privatroom79.pages.dev$all
+||project-delta-brown.vercel.app$all
+||pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev$all
+||pub-e2c2179ca4e5490390f8741af2335633.r2.dev$all
+||pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev$all
+||pupstoken-whitelist.pages.dev$all
+||purple039053.studio.site$all
+||qiyee163.com$all
+||qnnbbbfinannnsbannk.vercel.app$all
+||quickmailservice331516277272772.weebly.com$all
+||qvegy.top$all
+||rakindotcom.github.io$all
+||rana-renthotel-example.vercel.app$all
+||react-netflix-delta.vercel.app$all
+||rebrand.ly/7d0w1hr$all
+||rebrand.ly/gm6cwnp$all
+||recognition-badge.netlify.app$all
+||refundpay.weebly.com$all
+||reply-notify-bussiness.com$all
+||resilient-cendol-b21196.netlify.app$all
+||review-business-case.d1t75tji1kkg4p.amplifyapp.com$all
+||reviewpage11.github.io$all
+||rgpih.top$all
+||rn.airenren.vip$all
+||robertvilliardhousing.weebly.com$all
+||rosamz123.github.io$all
+||saaveiices.weebly.com$all
+||safetystaying.homes$all
+||salofenushigo.weebly.com$all
+||savedfilters.top$all
+||sbcgloballane.weebly.com$all
+||secure.qqp.zle.temporary.site$all
+||securepageatt.weebly.com$all
+||securingmyledger.com$all
+||seller.shop-line.vip$all
+||senmeitefs.com$all
+||server.2rk3.com$all
+||server.h74w.com$all
+||server.n6b8.com$all
+||server.wyq6.com$all
+||service.santander.de$all
+||servicecoinwallet.live$all
+||seviiceess.weebly.com$all
+||sg3.xbenihime.us.kg$all
+||shaerepointt.weebly.com$all
+||shaw-101433.weeblysite.com$all
+||shaw-102890.weeblysite.com$all
+||shaw-104426.weeblysite.com$all
+||shaw-105083.weeblysite.com$all
+||shaw-105713.weeblysite.com$all
+||shaw-105802.weeblysite.com$all
+||shaw-105983.weeblysite.com$all
+||shaw-106114.weeblysite.com$all
+||shaw-107218.weeblysite.com$all
+||shaw-107259.weeblysite.com$all
+||shawvalidation.weebly.com$all
+||shimmering-star-epoch.glitch.me$all
+||shopee.gotback9898.cc$all
+||shoppingwithdiscount.top$all
+||shoptkoo.com$all
+||side-revshares.pages.dev$all
+||signiatdynamatz.weebly.com$all
+||sjc.hgp.mybluehost.me$all
+||skybestservice.wixsite.com$all
+||skyserviv.weebly.com$all
+||smartwalletcoin-sync.pages.dev$all
+||smartwebdapp.pages.dev$all
+||smtp.spotifyprojectyash.freewebhostmost.com$all
+||souwttillupa-4199.vercel.app$all
+||soygrupoelite.com$all
+||spotify-inspired-music-player-online.freewebhostmost.com$all
+||spotify.constantine.dev$all
+||spotify7972.freewebhostmost.com$all
+||spotifyclonebyrk.freewebhostmost.com$all
+||spotifywithyash.freewebhostmost.com$all
+||srvamch.in$all
+||staemcommunnutty.com$all
+||start-trazor-page.github.io$all
+||steamcommmuty.com$all
+||sukien.pubgm.shop$all
+||support-uk-cshelp-personal.getit.ink$all
+||systemserveerr.weebly.com$all
+||talentbegins.com$all
+||tapnm.top$all
+||tekbotavi.pro$all
+||telagram.vip$all
+||telegiramv.fit$all
+||telegram--hk.com$all
+||telegram-datingfree-sex.pages.dev$all
+||telegrambot-rectify.pages.dev$all
+||telegrambotsmart-solution.pages.dev$all
+||telegramis.work$all
+||telegrcm.ing$all
+||telergom.vip$all
+||tellegram.dmrtaxes.com$all
+||telpqgram.bocekilacla.com$all
+||telstra-101853.weeblysite.com$all
+||telstra-102223.weeblysite.com$all
+||telstra-102841.weeblysite.com$all
+||telstra-104158.weeblysite.com$all
+||telstra-105309.weeblysite.com$all
+||telstra-106488.weeblysite.com$all
+||telstra-106877.weeblysite.com$all
+||telstra-107132.weeblysite.com$all
+||telstra-108365.weeblysite.com$all
+||telstra-109995.weeblysite.com$all
+||temp-jledxoxqawgkocyshafr.webadorsite.com$all
+||tether-app.org$all
+||tether-zh.org$all
+||tfggfdfgddhs.weebly.com$all
+||tg.m-tslegram.top$all
+||thofx.top$all
+||tik-tok.cam$all
+||tiktok897.com$all
+||tiktokshopmallc.com$all
+||tkbuymarket.xyz$all
+||tkvipshop.top$all
+||tlktok.me$all
+||tlktokshop.tw$all
+||toinec.net$all
+||tr.alertsgame.ru$all
+||trackyourpackageusps.blogspot.de$all
+||trezzorwallle.azurewebsites.net$all
+||trxdapbundle.pages.dev$all
+||trzure-en-suite.pages.dev$all
+||ttk169.shop$all
+||tyuytrecurrently.weebly.com$all
+||ui-clone-neon.vercel.app$all
+||uijkr8f89oerfjncy78fo.weebly.com$all
+||ujjewmanskdeoiskedn.weebly.com$all
+||unusualaccountcnfrmpages.github.io$all
+||updatemymailbox246346253662.weebly.com$all
+||uqei112ao.top$all
+||useridteleku.com$all
+||usps.com-tarpocev.top$all
+||usps.com-tarpoiev.top$all
+||uspsservicetrack.blogspot.de$all
+||uspsservicetrack.blogspot.it$all
+||uspssmartparcellocker.tech$all
+||uspssmartparcellockers.tech$all
+||utkepp.top$all
+||v2-pancakeswap.github.io$all
+||vedi.94-141-120-29.cprapid.com$all
+||veloxs-invite.com$all
+||verify-page-submit-here.vercel.app$all
+||voii11cfx.mmm.page$all
+||walletconnect-web3.vercel.app$all
+||weasdrty.wixsite.com$all
+||web-cqxarjotd-uniswap.vercel.app$all
+||webdenet.weebly.com$all
+||welsfag-blog.vercel.app$all
+||wesrdtcfdzse5d6tfuvjdtufyi.weebly.com$all
+||woodplc.dogfriendlytahoe.com$all
+||wqsac.icu$all
+||www-blockchain-fi-auth.vercel.app$all
+||wxltx.com$all
+||xhrcu.top$all
+||xn--mnta-5q5a.network$all
+||xurl.es/qjjpk$all
+||y06gwc.webwave.dev$all
+||yahpi.com$all
+||yahpn.com$all
+||yondasatt.weebly.com$all
+||yufreittavassu-6526.vercel.app$all
+||yusdydsfjuuxx.weebly.com$all
+||zapqf.top$all
+||zcytjs.com$all
+||zecra.top$all
+||zgyxzggk.top$all
+||zlip.net$all
+||zvuhs.top$all
diff --git a/phishing-filter-ag.txt.br b/phishing-filter-ag.txt.br
new file mode 100644
index 000000000..0c48f31b4
Binary files /dev/null and b/phishing-filter-ag.txt.br differ
diff --git a/phishing-filter-ag.txt.gz b/phishing-filter-ag.txt.gz
new file mode 100644
index 000000000..6e2c788a3
Binary files /dev/null and b/phishing-filter-ag.txt.gz differ
diff --git a/phishing-filter-agh.txt b/phishing-filter-agh.txt
new file mode 100644
index 000000000..948c80bd9
--- /dev/null
+++ b/phishing-filter-agh.txt
@@ -0,0 +1,478 @@
+! Title: Phishing URL Blocklist (AdGuard Home)
+! Updated: 2024-11-22T12:07:59Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||073202.com^
+||0xugiw6pb.top^
+||11muskansingh.github.io^
+||130365.vip^
+||21403590.cc^
+||2366xyx.com^
+||25v05vtrg.top^
+||365.915sj1.xyz^
+||498291975887803508.weebly.com^
+||5510003.top^
+||5510006.top^
+||551005.me^
+||551008.me^
+||57365ee.cc^
+||657226703365.com^
+||6bet938.com^
+||8904701.cc^
+||909338844400.weebly.com^
+||965009.com^
+||98f63c2a712e05fbeccf379de02ec9a5.88110.co^
+||a0omer.webwave.dev^
+||aaloo.kiwiground.top^
+||abueme-96e1.ehnelacsrralo.workers.dev^
+||accountuserlogin.github.io^
+||accshomecnfrm0log.github.io^
+||adminuser.yw2201.xyz^
+||agenciaancla.com.ar^
+||airbnb-clone-one-chi.vercel.app^
+||allegro-400.com^
+||amazon-clone88.netlify.app^
+||amazonclonebysid.netlify.app^
+||amazons-help-cx-number.pages.dev^
+||anshbotzone.com^
+||anshidmuhmd.github.io^
+||anuarw.kz^
+||app.liquidations-aave.com^
+||app.paxful87.com^
+||app.sandbox.custombrandedboxesbyfedex.com^
+||appeal-solve-violation-review.vercel.app^
+||apri.94-141-120-29.cprapid.com^
+||apwmensdjyeurir.weebly.com^
+||arbnb-clone.vercel.app^
+||arvestcd.embarkdigitalonboarding.com^
+||arvestrewardscard.embarkdigitalonboarding.com^
+||atbdgtehomeupdateform.weebly.com^
+||atftt.weebly.com^
+||atlgnrnewt.weebly.com^
+||atlnes.icu^
+||atmailupdateformeupdaterltdfdinfomailacct.weebly.com^
+||atmailupdateformeupdatesbhtdinfomailacct.weebly.com^
+||att-100081.weeblysite.com^
+||att-102549.weeblysite.com^
+||att-102856.weeblysite.com^
+||att-10386990.weeblysite.com^
+||att-106249.weeblysite.com^
+||att-108680.weeblysite.com^
+||att-109026.weeblysite.com^
+||attadm977222.weebly.com^
+||attcom-105588.weeblysite.com^
+||attcom-107224.weeblysite.com^
+||attconsultint.weebly.com^
+||attflyupdateserver.weebly.com^
+||attglobalwild.weebly.com^
+||attmaill0gin2341.weebly.com^
+||attnationameritechie.weebly.com^
+||attserverupdatedmailbox.weebly.com^
+||attt-107147.weeblysite.com^
+||b.3656240205.vip^
+||b12thgst9.weeblysite.com^
+||b35ppp.com^
+||b35sss.com^
+||b45017.com^
+||b45020.com^
+||bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link^
+||bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link^
+||bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link^
+||bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link^
+||bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link^
+||bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link^
+||bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link^
+||bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link^
+||bancolombia.supportmaven.ai^
+||bansos-2jt.get-regist.com^
+||bbtryr.com^
+||bentdynamicslm.com^
+||bestorrogames.com^
+||bet365ce.com^
+||bet6205365.com^
+||bet63035.com^
+||bet83067.com^
+||blajowet.cyou^
+||braxapressaje-9251.vercel.app^
+||bronm0.wixsite.com^
+||bryfhdjffgc.weebly.com^
+||bt-100831.weeblysite.com^
+||bt-103187.weeblysite.com^
+||bt-107510.weeblysite.com^
+||btinternet-108597.weeblysite.com^
+||btinternet18282.weebly.com^
+||business-meta-center.com^
+||byzhxx.com^
+||c0nfrmpgsacc.github.io^
+||cancel-binance.com^
+||caracoliresidencial.com^
+||cek-voucher.earth.web.id^
+||cernifg359.cyou^
+||chase-bank-one.vercel.app^
+||chilly.makeup^
+||china-link.pages.dev^
+||chinnurpk.github.io^
+||cibcgg.com^
+||cmenvivo.github.io^
+||codapay.events-games.com^
+||coin-bosepro-log.godaddysites.com^
+||coinbase-com-66117.danschaffert66529.workers.dev^
+||communitycasesreviewlist.web.app^
+||conennectakasd.b-cdn.net^
+||conn-twallt.gitbook.io^
+||correctingservicesalakks.pages.dev^
+||credito-prestamos.fra1.zeabur.app^
+||currently4988.weebly.com^
+||currently6510.weebly.com^
+||currently810.weebly.com^
+||currently8711.weebly.com^
+||currentlyatt04.weebly.com^
+||currentlyatt223.weebly.com^
+||currentlyatt468.weebly.com^
+||currentlyatt7891.weebly.com^
+||currentlyatt9854.weebly.com^
+||currentlyattyaho85748.weebly.com^
+||currentlyattyahoo6check.weebly.com^
+||customersupportteam.serveusers.com^
+||cv.geldmagazin.de^
+||cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br^
+||cwgml.top^
+||d551000.cc^
+||dappprompty.pages.dev^
+||datingteles3x.netlify.app^
+||debank-w.github.io^
+||decenlaunchpad.pages.dev^
+||demo.dynamicsolutionit.com^
+||desktoptg.com^
+||dev-0014021997322.pantheonsite.io^
+||dev-102030654785555551.pantheonsite.io^
+||dhl.ijpcr.net.in^
+||dhlexpress.hu^
+||djelp.top^
+||dknrutkslsjf.weebly.com^
+||dkrjjhrjemfkj.weeblysite.com^
+||doccvview.buzz^
+||docu-auth-5775940568.bb-abogados.com^
+||doujeucrumoufau-8054.vercel.app^
+||dropboxubdkw.weebly.com^
+||duysysysh.weebly.com^
+||eagbid.ru.com^
+||ebay.ebayshoo.com^
+||ebdaf.top^
+||ejnapxqitd.cfolks.pl^
+||elitefortnit.github.io^
+||emailnoticeie.weebly.com^
+||enforce-user-guidelines.vercel.app^
+||erdtgyur57t6gyu.weebly.com^
+||error3457uypcold.azurewebsites.net^
+||eryiurgygeyigegh.weeblysite.com^
+||eshop-eu.care.cps-partnersnp.de^
+||ethereum-apple.org^
+||evenstagservices.com^
+||facebook-loginpage-clone.vercel.app^
+||facebook-web.cloudns.be^
+||faenl.top^
+||fb-login-clone.vercel.app^
+||feline-full-stick.glitch.me^
+||fhger75gfg2fff.top^
+||finityrrr.weebly.com^
+||flngf.top^
+||form-policy-appeal-k2d7nf.vercel.app^
+||form-policy-appeal-k2x7nf.vercel.app^
+||free-5476373.webadorsite.com^
+||free-5481257.webadorsite.com^
+||free-5562390.webadorsite.com^
+||freevideomelayu.tme-viral.link^
+||gasbot-demos.vercel.app^
+||ggdhjssu7.wixsite.com^
+||ghaho.vercel.app^
+||gheedfhj.weebly.com^
+||ghshbv.wixsite.com^
+||global-reward.kraftonevent.com^
+||gnaneshwarreddybaitinti.github.io^
+||gnktan.top^
+||goteleg-br.top^
+||gradeis.info^
+||help-manage-center.com^
+||heriodj.shop^
+||hermiovz-bustling-sled.glitch.me^
+||hobitronik.com^
+||home-100383.weeblysite.com^
+||home-100489.weeblysite.com^
+||home-101941.weeblysite.com^
+||home-102517.weeblysite.com^
+||home-104101.weeblysite.com^
+||home-104529.weeblysite.com^
+||home-104657.weeblysite.com^
+||iemnswgehdporlkf.weebly.com^
+||iik-3100-2023-spear-phishing-login-page.vercel.app^
+||imtikem.vip^
+||imtoken-iim.org^
+||institutodentalsante.com.br^
+||interface-beta-eight.vercel.app^
+||it-outlookwebaccess.com^
+||itklkaklkakk.weebly.com^
+||jaiganeshmachinery.com^
+||jdkajsmxncbeuwie.weebly.com^
+||jfnjkfvbhjvdc.weebly.com^
+||jfvfbremdkf50nhfgs.weeblysite.com^
+||jhyuj.weebly.com^
+||jinqiao114.com^
+||join-mywhatsapp-2sa.pages.dev^
+||jttyavc.com^
+||juno-100024.weeblysite.com^
+||juno-102431.square.site^
+||junoytremauilkdfh.weebly.com^
+||jxzipper.com^
+||jzhemuni-logun.godaddysites.com^
+||jzyl669.net^
+||khdny.top^
+||learn-trzor-start.github.io^
+||ledger-com-updatefirmware.aparecidovisentin.com.br^
+||ledger-com-upgrade.gezix.com.tr^
+||ledger-confirm.com^
+||ledgerhardwarehelp.com^
+||ledgersafetyplatform.com^
+||ledqinlv.com^
+||loggmaskemttaa.godaddysites.com^
+||login-midstreams-outlook.us^
+||login.94-141-120-29.cprapid.com^
+||loginhomeinbox.com^
+||loginscreen-att-108245.weeblysite.com^
+||lojer-vohex84.vercel.app^
+||lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br^
+||lttcloudvpn.pages.dev^
+||m-telegrm.cc^
+||m.amazontech.cc^
+||m.key5188.com^
+||mail-admin-102219.weeblysite.com^
+||mail-securities.square.site^
+||mail.apri.94-141-120-29.cprapid.com^
+||mail.spotifyyclonne.freewebhostmost.com^
+||mailboxspheretoday.weebly.com^
+||mailhomebox-8096940.weeblysite.com^
+||mailserverreservoir.weebly.com^
+||malonlineservce12.weebly.com^
+||managementbusinessrequiredaza.weebly.com^
+||manorders.com^
+||marketplace-center-checkitem-supp0rt-now-business.click^
+||megadropclaim.com^
+||met-aa-mass-klog-in.godaddysites.com^
+||metamagskloin.gitbook.io^
+||metamask-web.vercel.app^
+||metameasklin.gitbook.io^
+||metamsk-wallet-3.gitbook.io^
+||metamuscklog.godaddysites.com^
+||metau-maasck-loogiin.godaddysites.com^
+||metawallet-server.vercel.app^
+||metmassk-usalloggies.godaddysites.com^
+||microsofstonline.com^
+||micsoft.phishone.com^
+||midjourneyex.com^
+||mikam76544444.weebly.com^
+||morsaglobal.com^
+||mozp.ubjoubj.shop^
+||multichaintool.netlify.app^
+||myvalue365.com^
+||navi-airbnb.vercel.app^
+||nerve.black^
+||netflix-clone-frontend-flax.vercel.app^
+||netflix-clone-ml.vercel.app^
+||netflix-lite-one.vercel.app^
+||netflix-talarys.vercel.app^
+||netzeero.weebly.com^
+||netzero-webmail-109987.weeblysite.com^
+||netzeroinfo.weebly.com^
+||next-airbnb-clone-sage.vercel.app^
+||nft-lift9.vercel.app^
+||nihaalxz.github.io^
+||nodeconnectdapp.pages.dev^
+||nordicwalkingcadiz.com^
+||notificationcentenooooo.weebly.com^
+||notify-suspicious-activity.vercel.app^
+||nsrocawsso.duckdns.org^
+||ntlworldupdatemail.weebly.com^
+||nuplaqsdmkd.weebly.com^
+||nurnjjdsqs.duckdns.org^
+||o08ofobnw.top^
+||oatt745.wixsite.com^
+||office-techservice.com^
+||ortakoyescortum.site^
+||outlook-loginsecurity.com^
+||outlookcode22.weebly.com^
+||pagedoc65.pages.dev^
+||pay-pay-pay-loop-jp.replit.app^
+||pedidosnozapp.com.br^
+||pianorollcenter.com^
+||pop.spotifycloning1.freewebhostmost.com^
+||privateservicehsb.com^
+||privatroom79.pages.dev^
+||project-delta-brown.vercel.app^
+||pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev^
+||pub-e2c2179ca4e5490390f8741af2335633.r2.dev^
+||pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev^
+||pupstoken-whitelist.pages.dev^
+||purple039053.studio.site^
+||qiyee163.com^
+||qnnbbbfinannnsbannk.vercel.app^
+||quickmailservice331516277272772.weebly.com^
+||qvegy.top^
+||rakindotcom.github.io^
+||rana-renthotel-example.vercel.app^
+||react-netflix-delta.vercel.app^
+||recognition-badge.netlify.app^
+||refundpay.weebly.com^
+||reply-notify-bussiness.com^
+||resilient-cendol-b21196.netlify.app^
+||review-business-case.d1t75tji1kkg4p.amplifyapp.com^
+||reviewpage11.github.io^
+||rgpih.top^
+||rn.airenren.vip^
+||robertvilliardhousing.weebly.com^
+||rosamz123.github.io^
+||saaveiices.weebly.com^
+||safetystaying.homes^
+||salofenushigo.weebly.com^
+||savedfilters.top^
+||sbcgloballane.weebly.com^
+||secure.qqp.zle.temporary.site^
+||securepageatt.weebly.com^
+||securingmyledger.com^
+||seller.shop-line.vip^
+||senmeitefs.com^
+||server.2rk3.com^
+||server.h74w.com^
+||server.n6b8.com^
+||server.wyq6.com^
+||service.santander.de^
+||servicecoinwallet.live^
+||seviiceess.weebly.com^
+||sg3.xbenihime.us.kg^
+||shaerepointt.weebly.com^
+||shaw-101433.weeblysite.com^
+||shaw-102890.weeblysite.com^
+||shaw-104426.weeblysite.com^
+||shaw-105083.weeblysite.com^
+||shaw-105713.weeblysite.com^
+||shaw-105802.weeblysite.com^
+||shaw-105983.weeblysite.com^
+||shaw-106114.weeblysite.com^
+||shaw-107218.weeblysite.com^
+||shaw-107259.weeblysite.com^
+||shawvalidation.weebly.com^
+||shimmering-star-epoch.glitch.me^
+||shopee.gotback9898.cc^
+||shoppingwithdiscount.top^
+||shoptkoo.com^
+||side-revshares.pages.dev^
+||signiatdynamatz.weebly.com^
+||sjc.hgp.mybluehost.me^
+||skybestservice.wixsite.com^
+||skyserviv.weebly.com^
+||smartwalletcoin-sync.pages.dev^
+||smartwebdapp.pages.dev^
+||smtp.spotifyprojectyash.freewebhostmost.com^
+||souwttillupa-4199.vercel.app^
+||soygrupoelite.com^
+||spotify-inspired-music-player-online.freewebhostmost.com^
+||spotify.constantine.dev^
+||spotify7972.freewebhostmost.com^
+||spotifyclonebyrk.freewebhostmost.com^
+||spotifywithyash.freewebhostmost.com^
+||srvamch.in^
+||staemcommunnutty.com^
+||start-trazor-page.github.io^
+||steamcommmuty.com^
+||sukien.pubgm.shop^
+||support-uk-cshelp-personal.getit.ink^
+||systemserveerr.weebly.com^
+||talentbegins.com^
+||tapnm.top^
+||tekbotavi.pro^
+||telagram.vip^
+||telegiramv.fit^
+||telegram--hk.com^
+||telegram-datingfree-sex.pages.dev^
+||telegrambot-rectify.pages.dev^
+||telegrambotsmart-solution.pages.dev^
+||telegramis.work^
+||telegrcm.ing^
+||telergom.vip^
+||tellegram.dmrtaxes.com^
+||telpqgram.bocekilacla.com^
+||telstra-101853.weeblysite.com^
+||telstra-102223.weeblysite.com^
+||telstra-102841.weeblysite.com^
+||telstra-104158.weeblysite.com^
+||telstra-105309.weeblysite.com^
+||telstra-106488.weeblysite.com^
+||telstra-106877.weeblysite.com^
+||telstra-107132.weeblysite.com^
+||telstra-108365.weeblysite.com^
+||telstra-109995.weeblysite.com^
+||temp-jledxoxqawgkocyshafr.webadorsite.com^
+||tether-app.org^
+||tether-zh.org^
+||tfggfdfgddhs.weebly.com^
+||tg.m-tslegram.top^
+||thofx.top^
+||tik-tok.cam^
+||tiktok897.com^
+||tiktokshopmallc.com^
+||tkbuymarket.xyz^
+||tkvipshop.top^
+||tlktok.me^
+||tlktokshop.tw^
+||toinec.net^
+||tr.alertsgame.ru^
+||trackyourpackageusps.blogspot.de^
+||trezzorwallle.azurewebsites.net^
+||trxdapbundle.pages.dev^
+||trzure-en-suite.pages.dev^
+||ttk169.shop^
+||tyuytrecurrently.weebly.com^
+||ui-clone-neon.vercel.app^
+||uijkr8f89oerfjncy78fo.weebly.com^
+||ujjewmanskdeoiskedn.weebly.com^
+||unusualaccountcnfrmpages.github.io^
+||updatemymailbox246346253662.weebly.com^
+||uqei112ao.top^
+||useridteleku.com^
+||usps.com-tarpocev.top^
+||usps.com-tarpoiev.top^
+||uspsservicetrack.blogspot.de^
+||uspsservicetrack.blogspot.it^
+||uspssmartparcellocker.tech^
+||uspssmartparcellockers.tech^
+||utkepp.top^
+||v2-pancakeswap.github.io^
+||vedi.94-141-120-29.cprapid.com^
+||veloxs-invite.com^
+||verify-page-submit-here.vercel.app^
+||voii11cfx.mmm.page^
+||walletconnect-web3.vercel.app^
+||weasdrty.wixsite.com^
+||web-cqxarjotd-uniswap.vercel.app^
+||webdenet.weebly.com^
+||welsfag-blog.vercel.app^
+||wesrdtcfdzse5d6tfuvjdtufyi.weebly.com^
+||woodplc.dogfriendlytahoe.com^
+||wqsac.icu^
+||www-blockchain-fi-auth.vercel.app^
+||wxltx.com^
+||xhrcu.top^
+||xn--mnta-5q5a.network^
+||y06gwc.webwave.dev^
+||yahpi.com^
+||yahpn.com^
+||yondasatt.weebly.com^
+||yufreittavassu-6526.vercel.app^
+||yusdydsfjuuxx.weebly.com^
+||zapqf.top^
+||zcytjs.com^
+||zecra.top^
+||zgyxzggk.top^
+||zlip.net^
+||zvuhs.top^
diff --git a/phishing-filter-agh.txt.br b/phishing-filter-agh.txt.br
new file mode 100644
index 000000000..6e43f7d35
Binary files /dev/null and b/phishing-filter-agh.txt.br differ
diff --git a/phishing-filter-agh.txt.gz b/phishing-filter-agh.txt.gz
new file mode 100644
index 000000000..8255454fa
Binary files /dev/null and b/phishing-filter-agh.txt.gz differ
diff --git a/phishing-filter-bind.conf b/phishing-filter-bind.conf
new file mode 100644
index 000000000..5b6079b1d
--- /dev/null
+++ b/phishing-filter-bind.conf
@@ -0,0 +1,478 @@
+# Title: Phishing Domains BIND Blocklist
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+zone "073202.com" { type master; notify no; file "null.zone.file"; };
+zone "0xugiw6pb.top" { type master; notify no; file "null.zone.file"; };
+zone "11muskansingh.github.io" { type master; notify no; file "null.zone.file"; };
+zone "130365.vip" { type master; notify no; file "null.zone.file"; };
+zone "21403590.cc" { type master; notify no; file "null.zone.file"; };
+zone "2366xyx.com" { type master; notify no; file "null.zone.file"; };
+zone "25v05vtrg.top" { type master; notify no; file "null.zone.file"; };
+zone "365.915sj1.xyz" { type master; notify no; file "null.zone.file"; };
+zone "498291975887803508.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "5510003.top" { type master; notify no; file "null.zone.file"; };
+zone "5510006.top" { type master; notify no; file "null.zone.file"; };
+zone "551005.me" { type master; notify no; file "null.zone.file"; };
+zone "551008.me" { type master; notify no; file "null.zone.file"; };
+zone "57365ee.cc" { type master; notify no; file "null.zone.file"; };
+zone "657226703365.com" { type master; notify no; file "null.zone.file"; };
+zone "6bet938.com" { type master; notify no; file "null.zone.file"; };
+zone "8904701.cc" { type master; notify no; file "null.zone.file"; };
+zone "909338844400.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "965009.com" { type master; notify no; file "null.zone.file"; };
+zone "98f63c2a712e05fbeccf379de02ec9a5.88110.co" { type master; notify no; file "null.zone.file"; };
+zone "a0omer.webwave.dev" { type master; notify no; file "null.zone.file"; };
+zone "aaloo.kiwiground.top" { type master; notify no; file "null.zone.file"; };
+zone "abueme-96e1.ehnelacsrralo.workers.dev" { type master; notify no; file "null.zone.file"; };
+zone "accountuserlogin.github.io" { type master; notify no; file "null.zone.file"; };
+zone "accshomecnfrm0log.github.io" { type master; notify no; file "null.zone.file"; };
+zone "adminuser.yw2201.xyz" { type master; notify no; file "null.zone.file"; };
+zone "agenciaancla.com.ar" { type master; notify no; file "null.zone.file"; };
+zone "airbnb-clone-one-chi.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "allegro-400.com" { type master; notify no; file "null.zone.file"; };
+zone "amazon-clone88.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "amazonclonebysid.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "amazons-help-cx-number.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "anshbotzone.com" { type master; notify no; file "null.zone.file"; };
+zone "anshidmuhmd.github.io" { type master; notify no; file "null.zone.file"; };
+zone "anuarw.kz" { type master; notify no; file "null.zone.file"; };
+zone "app.liquidations-aave.com" { type master; notify no; file "null.zone.file"; };
+zone "app.paxful87.com" { type master; notify no; file "null.zone.file"; };
+zone "app.sandbox.custombrandedboxesbyfedex.com" { type master; notify no; file "null.zone.file"; };
+zone "appeal-solve-violation-review.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "apri.94-141-120-29.cprapid.com" { type master; notify no; file "null.zone.file"; };
+zone "apwmensdjyeurir.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "arbnb-clone.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "arvestcd.embarkdigitalonboarding.com" { type master; notify no; file "null.zone.file"; };
+zone "arvestrewardscard.embarkdigitalonboarding.com" { type master; notify no; file "null.zone.file"; };
+zone "atbdgtehomeupdateform.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "atftt.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "atlgnrnewt.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "atlnes.icu" { type master; notify no; file "null.zone.file"; };
+zone "atmailupdateformeupdaterltdfdinfomailacct.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "atmailupdateformeupdatesbhtdinfomailacct.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "att-100081.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-102549.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-102856.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-10386990.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-106249.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-108680.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "att-109026.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "attadm977222.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attcom-105588.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "attcom-107224.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "attconsultint.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attflyupdateserver.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attglobalwild.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attmaill0gin2341.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attnationameritechie.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attserverupdatedmailbox.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "attt-107147.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "b.3656240205.vip" { type master; notify no; file "null.zone.file"; };
+zone "b12thgst9.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "b35ppp.com" { type master; notify no; file "null.zone.file"; };
+zone "b35sss.com" { type master; notify no; file "null.zone.file"; };
+zone "b45017.com" { type master; notify no; file "null.zone.file"; };
+zone "b45020.com" { type master; notify no; file "null.zone.file"; };
+zone "bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link" { type master; notify no; file "null.zone.file"; };
+zone "bancolombia.supportmaven.ai" { type master; notify no; file "null.zone.file"; };
+zone "bansos-2jt.get-regist.com" { type master; notify no; file "null.zone.file"; };
+zone "bbtryr.com" { type master; notify no; file "null.zone.file"; };
+zone "bentdynamicslm.com" { type master; notify no; file "null.zone.file"; };
+zone "bestorrogames.com" { type master; notify no; file "null.zone.file"; };
+zone "bet365ce.com" { type master; notify no; file "null.zone.file"; };
+zone "bet6205365.com" { type master; notify no; file "null.zone.file"; };
+zone "bet63035.com" { type master; notify no; file "null.zone.file"; };
+zone "bet83067.com" { type master; notify no; file "null.zone.file"; };
+zone "blajowet.cyou" { type master; notify no; file "null.zone.file"; };
+zone "braxapressaje-9251.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "bronm0.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "bryfhdjffgc.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "bt-100831.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "bt-103187.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "bt-107510.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "btinternet-108597.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "btinternet18282.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "business-meta-center.com" { type master; notify no; file "null.zone.file"; };
+zone "byzhxx.com" { type master; notify no; file "null.zone.file"; };
+zone "c0nfrmpgsacc.github.io" { type master; notify no; file "null.zone.file"; };
+zone "cancel-binance.com" { type master; notify no; file "null.zone.file"; };
+zone "caracoliresidencial.com" { type master; notify no; file "null.zone.file"; };
+zone "cek-voucher.earth.web.id" { type master; notify no; file "null.zone.file"; };
+zone "cernifg359.cyou" { type master; notify no; file "null.zone.file"; };
+zone "chase-bank-one.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "chilly.makeup" { type master; notify no; file "null.zone.file"; };
+zone "china-link.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "chinnurpk.github.io" { type master; notify no; file "null.zone.file"; };
+zone "cibcgg.com" { type master; notify no; file "null.zone.file"; };
+zone "cmenvivo.github.io" { type master; notify no; file "null.zone.file"; };
+zone "codapay.events-games.com" { type master; notify no; file "null.zone.file"; };
+zone "coin-bosepro-log.godaddysites.com" { type master; notify no; file "null.zone.file"; };
+zone "coinbase-com-66117.danschaffert66529.workers.dev" { type master; notify no; file "null.zone.file"; };
+zone "communitycasesreviewlist.web.app" { type master; notify no; file "null.zone.file"; };
+zone "conennectakasd.b-cdn.net" { type master; notify no; file "null.zone.file"; };
+zone "conn-twallt.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "correctingservicesalakks.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "credito-prestamos.fra1.zeabur.app" { type master; notify no; file "null.zone.file"; };
+zone "currently4988.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currently6510.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currently810.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currently8711.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyatt04.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyatt223.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyatt468.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyatt7891.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyatt9854.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyattyaho85748.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "currentlyattyahoo6check.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "customersupportteam.serveusers.com" { type master; notify no; file "null.zone.file"; };
+zone "cv.geldmagazin.de" { type master; notify no; file "null.zone.file"; };
+zone "cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br" { type master; notify no; file "null.zone.file"; };
+zone "cwgml.top" { type master; notify no; file "null.zone.file"; };
+zone "d551000.cc" { type master; notify no; file "null.zone.file"; };
+zone "dappprompty.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "datingteles3x.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "debank-w.github.io" { type master; notify no; file "null.zone.file"; };
+zone "decenlaunchpad.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "demo.dynamicsolutionit.com" { type master; notify no; file "null.zone.file"; };
+zone "desktoptg.com" { type master; notify no; file "null.zone.file"; };
+zone "dev-0014021997322.pantheonsite.io" { type master; notify no; file "null.zone.file"; };
+zone "dev-102030654785555551.pantheonsite.io" { type master; notify no; file "null.zone.file"; };
+zone "dhl.ijpcr.net.in" { type master; notify no; file "null.zone.file"; };
+zone "dhlexpress.hu" { type master; notify no; file "null.zone.file"; };
+zone "djelp.top" { type master; notify no; file "null.zone.file"; };
+zone "dknrutkslsjf.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "dkrjjhrjemfkj.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "doccvview.buzz" { type master; notify no; file "null.zone.file"; };
+zone "docu-auth-5775940568.bb-abogados.com" { type master; notify no; file "null.zone.file"; };
+zone "doujeucrumoufau-8054.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "dropboxubdkw.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "duysysysh.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "eagbid.ru.com" { type master; notify no; file "null.zone.file"; };
+zone "ebay.ebayshoo.com" { type master; notify no; file "null.zone.file"; };
+zone "ebdaf.top" { type master; notify no; file "null.zone.file"; };
+zone "ejnapxqitd.cfolks.pl" { type master; notify no; file "null.zone.file"; };
+zone "elitefortnit.github.io" { type master; notify no; file "null.zone.file"; };
+zone "emailnoticeie.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "enforce-user-guidelines.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "erdtgyur57t6gyu.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "error3457uypcold.azurewebsites.net" { type master; notify no; file "null.zone.file"; };
+zone "eryiurgygeyigegh.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "eshop-eu.care.cps-partnersnp.de" { type master; notify no; file "null.zone.file"; };
+zone "ethereum-apple.org" { type master; notify no; file "null.zone.file"; };
+zone "evenstagservices.com" { type master; notify no; file "null.zone.file"; };
+zone "facebook-loginpage-clone.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "facebook-web.cloudns.be" { type master; notify no; file "null.zone.file"; };
+zone "faenl.top" { type master; notify no; file "null.zone.file"; };
+zone "fb-login-clone.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "feline-full-stick.glitch.me" { type master; notify no; file "null.zone.file"; };
+zone "fhger75gfg2fff.top" { type master; notify no; file "null.zone.file"; };
+zone "finityrrr.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "flngf.top" { type master; notify no; file "null.zone.file"; };
+zone "form-policy-appeal-k2d7nf.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "form-policy-appeal-k2x7nf.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "free-5476373.webadorsite.com" { type master; notify no; file "null.zone.file"; };
+zone "free-5481257.webadorsite.com" { type master; notify no; file "null.zone.file"; };
+zone "free-5562390.webadorsite.com" { type master; notify no; file "null.zone.file"; };
+zone "freevideomelayu.tme-viral.link" { type master; notify no; file "null.zone.file"; };
+zone "gasbot-demos.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "ggdhjssu7.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "ghaho.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "gheedfhj.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "ghshbv.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "global-reward.kraftonevent.com" { type master; notify no; file "null.zone.file"; };
+zone "gnaneshwarreddybaitinti.github.io" { type master; notify no; file "null.zone.file"; };
+zone "gnktan.top" { type master; notify no; file "null.zone.file"; };
+zone "goteleg-br.top" { type master; notify no; file "null.zone.file"; };
+zone "gradeis.info" { type master; notify no; file "null.zone.file"; };
+zone "help-manage-center.com" { type master; notify no; file "null.zone.file"; };
+zone "heriodj.shop" { type master; notify no; file "null.zone.file"; };
+zone "hermiovz-bustling-sled.glitch.me" { type master; notify no; file "null.zone.file"; };
+zone "hobitronik.com" { type master; notify no; file "null.zone.file"; };
+zone "home-100383.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-100489.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-101941.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-102517.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-104101.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-104529.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "home-104657.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "iemnswgehdporlkf.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "iik-3100-2023-spear-phishing-login-page.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "imtikem.vip" { type master; notify no; file "null.zone.file"; };
+zone "imtoken-iim.org" { type master; notify no; file "null.zone.file"; };
+zone "institutodentalsante.com.br" { type master; notify no; file "null.zone.file"; };
+zone "interface-beta-eight.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "it-outlookwebaccess.com" { type master; notify no; file "null.zone.file"; };
+zone "itklkaklkakk.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "jaiganeshmachinery.com" { type master; notify no; file "null.zone.file"; };
+zone "jdkajsmxncbeuwie.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "jfnjkfvbhjvdc.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "jfvfbremdkf50nhfgs.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "jhyuj.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "jinqiao114.com" { type master; notify no; file "null.zone.file"; };
+zone "join-mywhatsapp-2sa.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "jttyavc.com" { type master; notify no; file "null.zone.file"; };
+zone "juno-100024.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "juno-102431.square.site" { type master; notify no; file "null.zone.file"; };
+zone "junoytremauilkdfh.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "jxzipper.com" { type master; notify no; file "null.zone.file"; };
+zone "jzhemuni-logun.godaddysites.com" { type master; notify no; file "null.zone.file"; };
+zone "jzyl669.net" { type master; notify no; file "null.zone.file"; };
+zone "khdny.top" { type master; notify no; file "null.zone.file"; };
+zone "learn-trzor-start.github.io" { type master; notify no; file "null.zone.file"; };
+zone "ledger-com-updatefirmware.aparecidovisentin.com.br" { type master; notify no; file "null.zone.file"; };
+zone "ledger-com-upgrade.gezix.com.tr" { type master; notify no; file "null.zone.file"; };
+zone "ledger-confirm.com" { type master; notify no; file "null.zone.file"; };
+zone "ledgerhardwarehelp.com" { type master; notify no; file "null.zone.file"; };
+zone "ledgersafetyplatform.com" { type master; notify no; file "null.zone.file"; };
+zone "ledqinlv.com" { type master; notify no; file "null.zone.file"; };
+zone "loggmaskemttaa.godaddysites.com" { type master; notify no; file "null.zone.file"; };
+zone "login-midstreams-outlook.us" { type master; notify no; file "null.zone.file"; };
+zone "login.94-141-120-29.cprapid.com" { type master; notify no; file "null.zone.file"; };
+zone "loginhomeinbox.com" { type master; notify no; file "null.zone.file"; };
+zone "loginscreen-att-108245.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "lojer-vohex84.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br" { type master; notify no; file "null.zone.file"; };
+zone "lttcloudvpn.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "m-telegrm.cc" { type master; notify no; file "null.zone.file"; };
+zone "m.amazontech.cc" { type master; notify no; file "null.zone.file"; };
+zone "m.key5188.com" { type master; notify no; file "null.zone.file"; };
+zone "mail-admin-102219.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "mail-securities.square.site" { type master; notify no; file "null.zone.file"; };
+zone "mail.apri.94-141-120-29.cprapid.com" { type master; notify no; file "null.zone.file"; };
+zone "mail.spotifyyclonne.freewebhostmost.com" { type master; notify no; file "null.zone.file"; };
+zone "mailboxspheretoday.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "mailhomebox-8096940.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "mailserverreservoir.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "malonlineservce12.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "managementbusinessrequiredaza.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "manorders.com" { type master; notify no; file "null.zone.file"; };
+zone "marketplace-center-checkitem-supp0rt-now-business.click" { type master; notify no; file "null.zone.file"; };
+zone "megadropclaim.com" { type master; notify no; file "null.zone.file"; };
+zone "met-aa-mass-klog-in.godaddysites.com" { type master; notify no; file "null.zone.file"; };
+zone "metamagskloin.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "metamask-web.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "metameasklin.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "metamsk-wallet-3.gitbook.io" { type master; notify no; file "null.zone.file"; };
+zone "metamuscklog.godaddysites.com" { type master; notify no; file "null.zone.file"; };
+zone "metau-maasck-loogiin.godaddysites.com" { type master; notify no; file "null.zone.file"; };
+zone "metawallet-server.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "metmassk-usalloggies.godaddysites.com" { type master; notify no; file "null.zone.file"; };
+zone "microsofstonline.com" { type master; notify no; file "null.zone.file"; };
+zone "micsoft.phishone.com" { type master; notify no; file "null.zone.file"; };
+zone "midjourneyex.com" { type master; notify no; file "null.zone.file"; };
+zone "mikam76544444.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "morsaglobal.com" { type master; notify no; file "null.zone.file"; };
+zone "mozp.ubjoubj.shop" { type master; notify no; file "null.zone.file"; };
+zone "multichaintool.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "myvalue365.com" { type master; notify no; file "null.zone.file"; };
+zone "navi-airbnb.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "nerve.black" { type master; notify no; file "null.zone.file"; };
+zone "netflix-clone-frontend-flax.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "netflix-clone-ml.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "netflix-lite-one.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "netflix-talarys.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "netzeero.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "netzero-webmail-109987.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "netzeroinfo.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "next-airbnb-clone-sage.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "nft-lift9.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "nihaalxz.github.io" { type master; notify no; file "null.zone.file"; };
+zone "nodeconnectdapp.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "nordicwalkingcadiz.com" { type master; notify no; file "null.zone.file"; };
+zone "notificationcentenooooo.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "notify-suspicious-activity.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "nsrocawsso.duckdns.org" { type master; notify no; file "null.zone.file"; };
+zone "ntlworldupdatemail.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "nuplaqsdmkd.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "nurnjjdsqs.duckdns.org" { type master; notify no; file "null.zone.file"; };
+zone "o08ofobnw.top" { type master; notify no; file "null.zone.file"; };
+zone "oatt745.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "office-techservice.com" { type master; notify no; file "null.zone.file"; };
+zone "ortakoyescortum.site" { type master; notify no; file "null.zone.file"; };
+zone "outlook-loginsecurity.com" { type master; notify no; file "null.zone.file"; };
+zone "outlookcode22.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "pagedoc65.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "pay-pay-pay-loop-jp.replit.app" { type master; notify no; file "null.zone.file"; };
+zone "pedidosnozapp.com.br" { type master; notify no; file "null.zone.file"; };
+zone "pianorollcenter.com" { type master; notify no; file "null.zone.file"; };
+zone "pop.spotifycloning1.freewebhostmost.com" { type master; notify no; file "null.zone.file"; };
+zone "privateservicehsb.com" { type master; notify no; file "null.zone.file"; };
+zone "privatroom79.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "project-delta-brown.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pub-e2c2179ca4e5490390f8741af2335633.r2.dev" { type master; notify no; file "null.zone.file"; };
+zone "pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "pupstoken-whitelist.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "purple039053.studio.site" { type master; notify no; file "null.zone.file"; };
+zone "qiyee163.com" { type master; notify no; file "null.zone.file"; };
+zone "qnnbbbfinannnsbannk.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "quickmailservice331516277272772.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "qvegy.top" { type master; notify no; file "null.zone.file"; };
+zone "rakindotcom.github.io" { type master; notify no; file "null.zone.file"; };
+zone "rana-renthotel-example.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "react-netflix-delta.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "recognition-badge.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "refundpay.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "reply-notify-bussiness.com" { type master; notify no; file "null.zone.file"; };
+zone "resilient-cendol-b21196.netlify.app" { type master; notify no; file "null.zone.file"; };
+zone "review-business-case.d1t75tji1kkg4p.amplifyapp.com" { type master; notify no; file "null.zone.file"; };
+zone "reviewpage11.github.io" { type master; notify no; file "null.zone.file"; };
+zone "rgpih.top" { type master; notify no; file "null.zone.file"; };
+zone "rn.airenren.vip" { type master; notify no; file "null.zone.file"; };
+zone "robertvilliardhousing.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "rosamz123.github.io" { type master; notify no; file "null.zone.file"; };
+zone "saaveiices.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "safetystaying.homes" { type master; notify no; file "null.zone.file"; };
+zone "salofenushigo.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "savedfilters.top" { type master; notify no; file "null.zone.file"; };
+zone "sbcgloballane.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "secure.qqp.zle.temporary.site" { type master; notify no; file "null.zone.file"; };
+zone "securepageatt.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "securingmyledger.com" { type master; notify no; file "null.zone.file"; };
+zone "seller.shop-line.vip" { type master; notify no; file "null.zone.file"; };
+zone "senmeitefs.com" { type master; notify no; file "null.zone.file"; };
+zone "server.2rk3.com" { type master; notify no; file "null.zone.file"; };
+zone "server.h74w.com" { type master; notify no; file "null.zone.file"; };
+zone "server.n6b8.com" { type master; notify no; file "null.zone.file"; };
+zone "server.wyq6.com" { type master; notify no; file "null.zone.file"; };
+zone "service.santander.de" { type master; notify no; file "null.zone.file"; };
+zone "servicecoinwallet.live" { type master; notify no; file "null.zone.file"; };
+zone "seviiceess.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sg3.xbenihime.us.kg" { type master; notify no; file "null.zone.file"; };
+zone "shaerepointt.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-101433.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-102890.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-104426.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-105083.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-105713.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-105802.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-105983.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-106114.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-107218.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shaw-107259.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "shawvalidation.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "shimmering-star-epoch.glitch.me" { type master; notify no; file "null.zone.file"; };
+zone "shopee.gotback9898.cc" { type master; notify no; file "null.zone.file"; };
+zone "shoppingwithdiscount.top" { type master; notify no; file "null.zone.file"; };
+zone "shoptkoo.com" { type master; notify no; file "null.zone.file"; };
+zone "side-revshares.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "signiatdynamatz.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "sjc.hgp.mybluehost.me" { type master; notify no; file "null.zone.file"; };
+zone "skybestservice.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "skyserviv.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "smartwalletcoin-sync.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "smartwebdapp.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "smtp.spotifyprojectyash.freewebhostmost.com" { type master; notify no; file "null.zone.file"; };
+zone "souwttillupa-4199.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "soygrupoelite.com" { type master; notify no; file "null.zone.file"; };
+zone "spotify-inspired-music-player-online.freewebhostmost.com" { type master; notify no; file "null.zone.file"; };
+zone "spotify.constantine.dev" { type master; notify no; file "null.zone.file"; };
+zone "spotify7972.freewebhostmost.com" { type master; notify no; file "null.zone.file"; };
+zone "spotifyclonebyrk.freewebhostmost.com" { type master; notify no; file "null.zone.file"; };
+zone "spotifywithyash.freewebhostmost.com" { type master; notify no; file "null.zone.file"; };
+zone "srvamch.in" { type master; notify no; file "null.zone.file"; };
+zone "staemcommunnutty.com" { type master; notify no; file "null.zone.file"; };
+zone "start-trazor-page.github.io" { type master; notify no; file "null.zone.file"; };
+zone "steamcommmuty.com" { type master; notify no; file "null.zone.file"; };
+zone "sukien.pubgm.shop" { type master; notify no; file "null.zone.file"; };
+zone "support-uk-cshelp-personal.getit.ink" { type master; notify no; file "null.zone.file"; };
+zone "systemserveerr.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "talentbegins.com" { type master; notify no; file "null.zone.file"; };
+zone "tapnm.top" { type master; notify no; file "null.zone.file"; };
+zone "tekbotavi.pro" { type master; notify no; file "null.zone.file"; };
+zone "telagram.vip" { type master; notify no; file "null.zone.file"; };
+zone "telegiramv.fit" { type master; notify no; file "null.zone.file"; };
+zone "telegram--hk.com" { type master; notify no; file "null.zone.file"; };
+zone "telegram-datingfree-sex.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "telegrambot-rectify.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "telegrambotsmart-solution.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "telegramis.work" { type master; notify no; file "null.zone.file"; };
+zone "telegrcm.ing" { type master; notify no; file "null.zone.file"; };
+zone "telergom.vip" { type master; notify no; file "null.zone.file"; };
+zone "tellegram.dmrtaxes.com" { type master; notify no; file "null.zone.file"; };
+zone "telpqgram.bocekilacla.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-101853.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-102223.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-102841.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-104158.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-105309.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-106488.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-106877.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-107132.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-108365.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "telstra-109995.weeblysite.com" { type master; notify no; file "null.zone.file"; };
+zone "temp-jledxoxqawgkocyshafr.webadorsite.com" { type master; notify no; file "null.zone.file"; };
+zone "tether-app.org" { type master; notify no; file "null.zone.file"; };
+zone "tether-zh.org" { type master; notify no; file "null.zone.file"; };
+zone "tfggfdfgddhs.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "tg.m-tslegram.top" { type master; notify no; file "null.zone.file"; };
+zone "thofx.top" { type master; notify no; file "null.zone.file"; };
+zone "tik-tok.cam" { type master; notify no; file "null.zone.file"; };
+zone "tiktok897.com" { type master; notify no; file "null.zone.file"; };
+zone "tiktokshopmallc.com" { type master; notify no; file "null.zone.file"; };
+zone "tkbuymarket.xyz" { type master; notify no; file "null.zone.file"; };
+zone "tkvipshop.top" { type master; notify no; file "null.zone.file"; };
+zone "tlktok.me" { type master; notify no; file "null.zone.file"; };
+zone "tlktokshop.tw" { type master; notify no; file "null.zone.file"; };
+zone "toinec.net" { type master; notify no; file "null.zone.file"; };
+zone "tr.alertsgame.ru" { type master; notify no; file "null.zone.file"; };
+zone "trackyourpackageusps.blogspot.de" { type master; notify no; file "null.zone.file"; };
+zone "trezzorwallle.azurewebsites.net" { type master; notify no; file "null.zone.file"; };
+zone "trxdapbundle.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "trzure-en-suite.pages.dev" { type master; notify no; file "null.zone.file"; };
+zone "ttk169.shop" { type master; notify no; file "null.zone.file"; };
+zone "tyuytrecurrently.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "ui-clone-neon.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "uijkr8f89oerfjncy78fo.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "ujjewmanskdeoiskedn.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "unusualaccountcnfrmpages.github.io" { type master; notify no; file "null.zone.file"; };
+zone "updatemymailbox246346253662.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "uqei112ao.top" { type master; notify no; file "null.zone.file"; };
+zone "useridteleku.com" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tarpocev.top" { type master; notify no; file "null.zone.file"; };
+zone "usps.com-tarpoiev.top" { type master; notify no; file "null.zone.file"; };
+zone "uspsservicetrack.blogspot.de" { type master; notify no; file "null.zone.file"; };
+zone "uspsservicetrack.blogspot.it" { type master; notify no; file "null.zone.file"; };
+zone "uspssmartparcellocker.tech" { type master; notify no; file "null.zone.file"; };
+zone "uspssmartparcellockers.tech" { type master; notify no; file "null.zone.file"; };
+zone "utkepp.top" { type master; notify no; file "null.zone.file"; };
+zone "v2-pancakeswap.github.io" { type master; notify no; file "null.zone.file"; };
+zone "vedi.94-141-120-29.cprapid.com" { type master; notify no; file "null.zone.file"; };
+zone "veloxs-invite.com" { type master; notify no; file "null.zone.file"; };
+zone "verify-page-submit-here.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "voii11cfx.mmm.page" { type master; notify no; file "null.zone.file"; };
+zone "walletconnect-web3.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "weasdrty.wixsite.com" { type master; notify no; file "null.zone.file"; };
+zone "web-cqxarjotd-uniswap.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "webdenet.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "welsfag-blog.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "wesrdtcfdzse5d6tfuvjdtufyi.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "woodplc.dogfriendlytahoe.com" { type master; notify no; file "null.zone.file"; };
+zone "wqsac.icu" { type master; notify no; file "null.zone.file"; };
+zone "www-blockchain-fi-auth.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "wxltx.com" { type master; notify no; file "null.zone.file"; };
+zone "xhrcu.top" { type master; notify no; file "null.zone.file"; };
+zone "xn--mnta-5q5a.network" { type master; notify no; file "null.zone.file"; };
+zone "y06gwc.webwave.dev" { type master; notify no; file "null.zone.file"; };
+zone "yahpi.com" { type master; notify no; file "null.zone.file"; };
+zone "yahpn.com" { type master; notify no; file "null.zone.file"; };
+zone "yondasatt.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "yufreittavassu-6526.vercel.app" { type master; notify no; file "null.zone.file"; };
+zone "yusdydsfjuuxx.weebly.com" { type master; notify no; file "null.zone.file"; };
+zone "zapqf.top" { type master; notify no; file "null.zone.file"; };
+zone "zcytjs.com" { type master; notify no; file "null.zone.file"; };
+zone "zecra.top" { type master; notify no; file "null.zone.file"; };
+zone "zgyxzggk.top" { type master; notify no; file "null.zone.file"; };
+zone "zlip.net" { type master; notify no; file "null.zone.file"; };
+zone "zvuhs.top" { type master; notify no; file "null.zone.file"; };
diff --git a/phishing-filter-bind.conf.br b/phishing-filter-bind.conf.br
new file mode 100644
index 000000000..164d02aa9
Binary files /dev/null and b/phishing-filter-bind.conf.br differ
diff --git a/phishing-filter-bind.conf.gz b/phishing-filter-bind.conf.gz
new file mode 100644
index 000000000..60b1182af
Binary files /dev/null and b/phishing-filter-bind.conf.gz differ
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt b/phishing-filter-dnscrypt-blocked-ips.txt
new file mode 100644
index 000000000..bfdf075eb
--- /dev/null
+++ b/phishing-filter-dnscrypt-blocked-ips.txt
@@ -0,0 +1,7 @@
+# Title: Phishing IPs Blocklist
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt.br b/phishing-filter-dnscrypt-blocked-ips.txt.br
new file mode 100644
index 000000000..b01010b82
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-ips.txt.br differ
diff --git a/phishing-filter-dnscrypt-blocked-ips.txt.gz b/phishing-filter-dnscrypt-blocked-ips.txt.gz
new file mode 100644
index 000000000..1d816fec0
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-ips.txt.gz differ
diff --git a/phishing-filter-dnscrypt-blocked-names.txt b/phishing-filter-dnscrypt-blocked-names.txt
new file mode 100644
index 000000000..c87b7362f
--- /dev/null
+++ b/phishing-filter-dnscrypt-blocked-names.txt
@@ -0,0 +1,478 @@
+# Title: Phishing Names Blocklist
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+073202.com
+0xugiw6pb.top
+11muskansingh.github.io
+130365.vip
+21403590.cc
+2366xyx.com
+25v05vtrg.top
+365.915sj1.xyz
+498291975887803508.weebly.com
+5510003.top
+5510006.top
+551005.me
+551008.me
+57365ee.cc
+657226703365.com
+6bet938.com
+8904701.cc
+909338844400.weebly.com
+965009.com
+98f63c2a712e05fbeccf379de02ec9a5.88110.co
+a0omer.webwave.dev
+aaloo.kiwiground.top
+abueme-96e1.ehnelacsrralo.workers.dev
+accountuserlogin.github.io
+accshomecnfrm0log.github.io
+adminuser.yw2201.xyz
+agenciaancla.com.ar
+airbnb-clone-one-chi.vercel.app
+allegro-400.com
+amazon-clone88.netlify.app
+amazonclonebysid.netlify.app
+amazons-help-cx-number.pages.dev
+anshbotzone.com
+anshidmuhmd.github.io
+anuarw.kz
+app.liquidations-aave.com
+app.paxful87.com
+app.sandbox.custombrandedboxesbyfedex.com
+appeal-solve-violation-review.vercel.app
+apri.94-141-120-29.cprapid.com
+apwmensdjyeurir.weebly.com
+arbnb-clone.vercel.app
+arvestcd.embarkdigitalonboarding.com
+arvestrewardscard.embarkdigitalonboarding.com
+atbdgtehomeupdateform.weebly.com
+atftt.weebly.com
+atlgnrnewt.weebly.com
+atlnes.icu
+atmailupdateformeupdaterltdfdinfomailacct.weebly.com
+atmailupdateformeupdatesbhtdinfomailacct.weebly.com
+att-100081.weeblysite.com
+att-102549.weeblysite.com
+att-102856.weeblysite.com
+att-10386990.weeblysite.com
+att-106249.weeblysite.com
+att-108680.weeblysite.com
+att-109026.weeblysite.com
+attadm977222.weebly.com
+attcom-105588.weeblysite.com
+attcom-107224.weeblysite.com
+attconsultint.weebly.com
+attflyupdateserver.weebly.com
+attglobalwild.weebly.com
+attmaill0gin2341.weebly.com
+attnationameritechie.weebly.com
+attserverupdatedmailbox.weebly.com
+attt-107147.weeblysite.com
+b.3656240205.vip
+b12thgst9.weeblysite.com
+b35ppp.com
+b35sss.com
+b45017.com
+b45020.com
+bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link
+bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link
+bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link
+bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link
+bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link
+bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link
+bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link
+bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link
+bancolombia.supportmaven.ai
+bansos-2jt.get-regist.com
+bbtryr.com
+bentdynamicslm.com
+bestorrogames.com
+bet365ce.com
+bet6205365.com
+bet63035.com
+bet83067.com
+blajowet.cyou
+braxapressaje-9251.vercel.app
+bronm0.wixsite.com
+bryfhdjffgc.weebly.com
+bt-100831.weeblysite.com
+bt-103187.weeblysite.com
+bt-107510.weeblysite.com
+btinternet-108597.weeblysite.com
+btinternet18282.weebly.com
+business-meta-center.com
+byzhxx.com
+c0nfrmpgsacc.github.io
+cancel-binance.com
+caracoliresidencial.com
+cek-voucher.earth.web.id
+cernifg359.cyou
+chase-bank-one.vercel.app
+chilly.makeup
+china-link.pages.dev
+chinnurpk.github.io
+cibcgg.com
+cmenvivo.github.io
+codapay.events-games.com
+coin-bosepro-log.godaddysites.com
+coinbase-com-66117.danschaffert66529.workers.dev
+communitycasesreviewlist.web.app
+conennectakasd.b-cdn.net
+conn-twallt.gitbook.io
+correctingservicesalakks.pages.dev
+credito-prestamos.fra1.zeabur.app
+currently4988.weebly.com
+currently6510.weebly.com
+currently810.weebly.com
+currently8711.weebly.com
+currentlyatt04.weebly.com
+currentlyatt223.weebly.com
+currentlyatt468.weebly.com
+currentlyatt7891.weebly.com
+currentlyatt9854.weebly.com
+currentlyattyaho85748.weebly.com
+currentlyattyahoo6check.weebly.com
+customersupportteam.serveusers.com
+cv.geldmagazin.de
+cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br
+cwgml.top
+d551000.cc
+dappprompty.pages.dev
+datingteles3x.netlify.app
+debank-w.github.io
+decenlaunchpad.pages.dev
+demo.dynamicsolutionit.com
+desktoptg.com
+dev-0014021997322.pantheonsite.io
+dev-102030654785555551.pantheonsite.io
+dhl.ijpcr.net.in
+dhlexpress.hu
+djelp.top
+dknrutkslsjf.weebly.com
+dkrjjhrjemfkj.weeblysite.com
+doccvview.buzz
+docu-auth-5775940568.bb-abogados.com
+doujeucrumoufau-8054.vercel.app
+dropboxubdkw.weebly.com
+duysysysh.weebly.com
+eagbid.ru.com
+ebay.ebayshoo.com
+ebdaf.top
+ejnapxqitd.cfolks.pl
+elitefortnit.github.io
+emailnoticeie.weebly.com
+enforce-user-guidelines.vercel.app
+erdtgyur57t6gyu.weebly.com
+error3457uypcold.azurewebsites.net
+eryiurgygeyigegh.weeblysite.com
+eshop-eu.care.cps-partnersnp.de
+ethereum-apple.org
+evenstagservices.com
+facebook-loginpage-clone.vercel.app
+facebook-web.cloudns.be
+faenl.top
+fb-login-clone.vercel.app
+feline-full-stick.glitch.me
+fhger75gfg2fff.top
+finityrrr.weebly.com
+flngf.top
+form-policy-appeal-k2d7nf.vercel.app
+form-policy-appeal-k2x7nf.vercel.app
+free-5476373.webadorsite.com
+free-5481257.webadorsite.com
+free-5562390.webadorsite.com
+freevideomelayu.tme-viral.link
+gasbot-demos.vercel.app
+ggdhjssu7.wixsite.com
+ghaho.vercel.app
+gheedfhj.weebly.com
+ghshbv.wixsite.com
+global-reward.kraftonevent.com
+gnaneshwarreddybaitinti.github.io
+gnktan.top
+goteleg-br.top
+gradeis.info
+help-manage-center.com
+heriodj.shop
+hermiovz-bustling-sled.glitch.me
+hobitronik.com
+home-100383.weeblysite.com
+home-100489.weeblysite.com
+home-101941.weeblysite.com
+home-102517.weeblysite.com
+home-104101.weeblysite.com
+home-104529.weeblysite.com
+home-104657.weeblysite.com
+iemnswgehdporlkf.weebly.com
+iik-3100-2023-spear-phishing-login-page.vercel.app
+imtikem.vip
+imtoken-iim.org
+institutodentalsante.com.br
+interface-beta-eight.vercel.app
+it-outlookwebaccess.com
+itklkaklkakk.weebly.com
+jaiganeshmachinery.com
+jdkajsmxncbeuwie.weebly.com
+jfnjkfvbhjvdc.weebly.com
+jfvfbremdkf50nhfgs.weeblysite.com
+jhyuj.weebly.com
+jinqiao114.com
+join-mywhatsapp-2sa.pages.dev
+jttyavc.com
+juno-100024.weeblysite.com
+juno-102431.square.site
+junoytremauilkdfh.weebly.com
+jxzipper.com
+jzhemuni-logun.godaddysites.com
+jzyl669.net
+khdny.top
+learn-trzor-start.github.io
+ledger-com-updatefirmware.aparecidovisentin.com.br
+ledger-com-upgrade.gezix.com.tr
+ledger-confirm.com
+ledgerhardwarehelp.com
+ledgersafetyplatform.com
+ledqinlv.com
+loggmaskemttaa.godaddysites.com
+login-midstreams-outlook.us
+login.94-141-120-29.cprapid.com
+loginhomeinbox.com
+loginscreen-att-108245.weeblysite.com
+lojer-vohex84.vercel.app
+lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br
+lttcloudvpn.pages.dev
+m-telegrm.cc
+m.amazontech.cc
+m.key5188.com
+mail-admin-102219.weeblysite.com
+mail-securities.square.site
+mail.apri.94-141-120-29.cprapid.com
+mail.spotifyyclonne.freewebhostmost.com
+mailboxspheretoday.weebly.com
+mailhomebox-8096940.weeblysite.com
+mailserverreservoir.weebly.com
+malonlineservce12.weebly.com
+managementbusinessrequiredaza.weebly.com
+manorders.com
+marketplace-center-checkitem-supp0rt-now-business.click
+megadropclaim.com
+met-aa-mass-klog-in.godaddysites.com
+metamagskloin.gitbook.io
+metamask-web.vercel.app
+metameasklin.gitbook.io
+metamsk-wallet-3.gitbook.io
+metamuscklog.godaddysites.com
+metau-maasck-loogiin.godaddysites.com
+metawallet-server.vercel.app
+metmassk-usalloggies.godaddysites.com
+microsofstonline.com
+micsoft.phishone.com
+midjourneyex.com
+mikam76544444.weebly.com
+morsaglobal.com
+mozp.ubjoubj.shop
+multichaintool.netlify.app
+myvalue365.com
+navi-airbnb.vercel.app
+nerve.black
+netflix-clone-frontend-flax.vercel.app
+netflix-clone-ml.vercel.app
+netflix-lite-one.vercel.app
+netflix-talarys.vercel.app
+netzeero.weebly.com
+netzero-webmail-109987.weeblysite.com
+netzeroinfo.weebly.com
+next-airbnb-clone-sage.vercel.app
+nft-lift9.vercel.app
+nihaalxz.github.io
+nodeconnectdapp.pages.dev
+nordicwalkingcadiz.com
+notificationcentenooooo.weebly.com
+notify-suspicious-activity.vercel.app
+nsrocawsso.duckdns.org
+ntlworldupdatemail.weebly.com
+nuplaqsdmkd.weebly.com
+nurnjjdsqs.duckdns.org
+o08ofobnw.top
+oatt745.wixsite.com
+office-techservice.com
+ortakoyescortum.site
+outlook-loginsecurity.com
+outlookcode22.weebly.com
+pagedoc65.pages.dev
+pay-pay-pay-loop-jp.replit.app
+pedidosnozapp.com.br
+pianorollcenter.com
+pop.spotifycloning1.freewebhostmost.com
+privateservicehsb.com
+privatroom79.pages.dev
+project-delta-brown.vercel.app
+pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev
+pub-e2c2179ca4e5490390f8741af2335633.r2.dev
+pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev
+pupstoken-whitelist.pages.dev
+purple039053.studio.site
+qiyee163.com
+qnnbbbfinannnsbannk.vercel.app
+quickmailservice331516277272772.weebly.com
+qvegy.top
+rakindotcom.github.io
+rana-renthotel-example.vercel.app
+react-netflix-delta.vercel.app
+recognition-badge.netlify.app
+refundpay.weebly.com
+reply-notify-bussiness.com
+resilient-cendol-b21196.netlify.app
+review-business-case.d1t75tji1kkg4p.amplifyapp.com
+reviewpage11.github.io
+rgpih.top
+rn.airenren.vip
+robertvilliardhousing.weebly.com
+rosamz123.github.io
+saaveiices.weebly.com
+safetystaying.homes
+salofenushigo.weebly.com
+savedfilters.top
+sbcgloballane.weebly.com
+secure.qqp.zle.temporary.site
+securepageatt.weebly.com
+securingmyledger.com
+seller.shop-line.vip
+senmeitefs.com
+server.2rk3.com
+server.h74w.com
+server.n6b8.com
+server.wyq6.com
+service.santander.de
+servicecoinwallet.live
+seviiceess.weebly.com
+sg3.xbenihime.us.kg
+shaerepointt.weebly.com
+shaw-101433.weeblysite.com
+shaw-102890.weeblysite.com
+shaw-104426.weeblysite.com
+shaw-105083.weeblysite.com
+shaw-105713.weeblysite.com
+shaw-105802.weeblysite.com
+shaw-105983.weeblysite.com
+shaw-106114.weeblysite.com
+shaw-107218.weeblysite.com
+shaw-107259.weeblysite.com
+shawvalidation.weebly.com
+shimmering-star-epoch.glitch.me
+shopee.gotback9898.cc
+shoppingwithdiscount.top
+shoptkoo.com
+side-revshares.pages.dev
+signiatdynamatz.weebly.com
+sjc.hgp.mybluehost.me
+skybestservice.wixsite.com
+skyserviv.weebly.com
+smartwalletcoin-sync.pages.dev
+smartwebdapp.pages.dev
+smtp.spotifyprojectyash.freewebhostmost.com
+souwttillupa-4199.vercel.app
+soygrupoelite.com
+spotify-inspired-music-player-online.freewebhostmost.com
+spotify.constantine.dev
+spotify7972.freewebhostmost.com
+spotifyclonebyrk.freewebhostmost.com
+spotifywithyash.freewebhostmost.com
+srvamch.in
+staemcommunnutty.com
+start-trazor-page.github.io
+steamcommmuty.com
+sukien.pubgm.shop
+support-uk-cshelp-personal.getit.ink
+systemserveerr.weebly.com
+talentbegins.com
+tapnm.top
+tekbotavi.pro
+telagram.vip
+telegiramv.fit
+telegram--hk.com
+telegram-datingfree-sex.pages.dev
+telegrambot-rectify.pages.dev
+telegrambotsmart-solution.pages.dev
+telegramis.work
+telegrcm.ing
+telergom.vip
+tellegram.dmrtaxes.com
+telpqgram.bocekilacla.com
+telstra-101853.weeblysite.com
+telstra-102223.weeblysite.com
+telstra-102841.weeblysite.com
+telstra-104158.weeblysite.com
+telstra-105309.weeblysite.com
+telstra-106488.weeblysite.com
+telstra-106877.weeblysite.com
+telstra-107132.weeblysite.com
+telstra-108365.weeblysite.com
+telstra-109995.weeblysite.com
+temp-jledxoxqawgkocyshafr.webadorsite.com
+tether-app.org
+tether-zh.org
+tfggfdfgddhs.weebly.com
+tg.m-tslegram.top
+thofx.top
+tik-tok.cam
+tiktok897.com
+tiktokshopmallc.com
+tkbuymarket.xyz
+tkvipshop.top
+tlktok.me
+tlktokshop.tw
+toinec.net
+tr.alertsgame.ru
+trackyourpackageusps.blogspot.de
+trezzorwallle.azurewebsites.net
+trxdapbundle.pages.dev
+trzure-en-suite.pages.dev
+ttk169.shop
+tyuytrecurrently.weebly.com
+ui-clone-neon.vercel.app
+uijkr8f89oerfjncy78fo.weebly.com
+ujjewmanskdeoiskedn.weebly.com
+unusualaccountcnfrmpages.github.io
+updatemymailbox246346253662.weebly.com
+uqei112ao.top
+useridteleku.com
+usps.com-tarpocev.top
+usps.com-tarpoiev.top
+uspsservicetrack.blogspot.de
+uspsservicetrack.blogspot.it
+uspssmartparcellocker.tech
+uspssmartparcellockers.tech
+utkepp.top
+v2-pancakeswap.github.io
+vedi.94-141-120-29.cprapid.com
+veloxs-invite.com
+verify-page-submit-here.vercel.app
+voii11cfx.mmm.page
+walletconnect-web3.vercel.app
+weasdrty.wixsite.com
+web-cqxarjotd-uniswap.vercel.app
+webdenet.weebly.com
+welsfag-blog.vercel.app
+wesrdtcfdzse5d6tfuvjdtufyi.weebly.com
+woodplc.dogfriendlytahoe.com
+wqsac.icu
+www-blockchain-fi-auth.vercel.app
+wxltx.com
+xhrcu.top
+xn--mnta-5q5a.network
+y06gwc.webwave.dev
+yahpi.com
+yahpn.com
+yondasatt.weebly.com
+yufreittavassu-6526.vercel.app
+yusdydsfjuuxx.weebly.com
+zapqf.top
+zcytjs.com
+zecra.top
+zgyxzggk.top
+zlip.net
+zvuhs.top
diff --git a/phishing-filter-dnscrypt-blocked-names.txt.br b/phishing-filter-dnscrypt-blocked-names.txt.br
new file mode 100644
index 000000000..783992a56
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-names.txt.br differ
diff --git a/phishing-filter-dnscrypt-blocked-names.txt.gz b/phishing-filter-dnscrypt-blocked-names.txt.gz
new file mode 100644
index 000000000..34e9beda3
Binary files /dev/null and b/phishing-filter-dnscrypt-blocked-names.txt.gz differ
diff --git a/phishing-filter-dnsmasq.conf b/phishing-filter-dnsmasq.conf
new file mode 100644
index 000000000..e7c0b3b53
--- /dev/null
+++ b/phishing-filter-dnsmasq.conf
@@ -0,0 +1,478 @@
+# Title: Phishing Domains dnsmasq Blocklist
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+address=/073202.com/0.0.0.0
+address=/0xugiw6pb.top/0.0.0.0
+address=/11muskansingh.github.io/0.0.0.0
+address=/130365.vip/0.0.0.0
+address=/21403590.cc/0.0.0.0
+address=/2366xyx.com/0.0.0.0
+address=/25v05vtrg.top/0.0.0.0
+address=/365.915sj1.xyz/0.0.0.0
+address=/498291975887803508.weebly.com/0.0.0.0
+address=/5510003.top/0.0.0.0
+address=/5510006.top/0.0.0.0
+address=/551005.me/0.0.0.0
+address=/551008.me/0.0.0.0
+address=/57365ee.cc/0.0.0.0
+address=/657226703365.com/0.0.0.0
+address=/6bet938.com/0.0.0.0
+address=/8904701.cc/0.0.0.0
+address=/909338844400.weebly.com/0.0.0.0
+address=/965009.com/0.0.0.0
+address=/98f63c2a712e05fbeccf379de02ec9a5.88110.co/0.0.0.0
+address=/a0omer.webwave.dev/0.0.0.0
+address=/aaloo.kiwiground.top/0.0.0.0
+address=/abueme-96e1.ehnelacsrralo.workers.dev/0.0.0.0
+address=/accountuserlogin.github.io/0.0.0.0
+address=/accshomecnfrm0log.github.io/0.0.0.0
+address=/adminuser.yw2201.xyz/0.0.0.0
+address=/agenciaancla.com.ar/0.0.0.0
+address=/airbnb-clone-one-chi.vercel.app/0.0.0.0
+address=/allegro-400.com/0.0.0.0
+address=/amazon-clone88.netlify.app/0.0.0.0
+address=/amazonclonebysid.netlify.app/0.0.0.0
+address=/amazons-help-cx-number.pages.dev/0.0.0.0
+address=/anshbotzone.com/0.0.0.0
+address=/anshidmuhmd.github.io/0.0.0.0
+address=/anuarw.kz/0.0.0.0
+address=/app.liquidations-aave.com/0.0.0.0
+address=/app.paxful87.com/0.0.0.0
+address=/app.sandbox.custombrandedboxesbyfedex.com/0.0.0.0
+address=/appeal-solve-violation-review.vercel.app/0.0.0.0
+address=/apri.94-141-120-29.cprapid.com/0.0.0.0
+address=/apwmensdjyeurir.weebly.com/0.0.0.0
+address=/arbnb-clone.vercel.app/0.0.0.0
+address=/arvestcd.embarkdigitalonboarding.com/0.0.0.0
+address=/arvestrewardscard.embarkdigitalonboarding.com/0.0.0.0
+address=/atbdgtehomeupdateform.weebly.com/0.0.0.0
+address=/atftt.weebly.com/0.0.0.0
+address=/atlgnrnewt.weebly.com/0.0.0.0
+address=/atlnes.icu/0.0.0.0
+address=/atmailupdateformeupdaterltdfdinfomailacct.weebly.com/0.0.0.0
+address=/atmailupdateformeupdatesbhtdinfomailacct.weebly.com/0.0.0.0
+address=/att-100081.weeblysite.com/0.0.0.0
+address=/att-102549.weeblysite.com/0.0.0.0
+address=/att-102856.weeblysite.com/0.0.0.0
+address=/att-10386990.weeblysite.com/0.0.0.0
+address=/att-106249.weeblysite.com/0.0.0.0
+address=/att-108680.weeblysite.com/0.0.0.0
+address=/att-109026.weeblysite.com/0.0.0.0
+address=/attadm977222.weebly.com/0.0.0.0
+address=/attcom-105588.weeblysite.com/0.0.0.0
+address=/attcom-107224.weeblysite.com/0.0.0.0
+address=/attconsultint.weebly.com/0.0.0.0
+address=/attflyupdateserver.weebly.com/0.0.0.0
+address=/attglobalwild.weebly.com/0.0.0.0
+address=/attmaill0gin2341.weebly.com/0.0.0.0
+address=/attnationameritechie.weebly.com/0.0.0.0
+address=/attserverupdatedmailbox.weebly.com/0.0.0.0
+address=/attt-107147.weeblysite.com/0.0.0.0
+address=/b.3656240205.vip/0.0.0.0
+address=/b12thgst9.weeblysite.com/0.0.0.0
+address=/b35ppp.com/0.0.0.0
+address=/b35sss.com/0.0.0.0
+address=/b45017.com/0.0.0.0
+address=/b45020.com/0.0.0.0
+address=/bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link/0.0.0.0
+address=/bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link/0.0.0.0
+address=/bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link/0.0.0.0
+address=/bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link/0.0.0.0
+address=/bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link/0.0.0.0
+address=/bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link/0.0.0.0
+address=/bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link/0.0.0.0
+address=/bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link/0.0.0.0
+address=/bancolombia.supportmaven.ai/0.0.0.0
+address=/bansos-2jt.get-regist.com/0.0.0.0
+address=/bbtryr.com/0.0.0.0
+address=/bentdynamicslm.com/0.0.0.0
+address=/bestorrogames.com/0.0.0.0
+address=/bet365ce.com/0.0.0.0
+address=/bet6205365.com/0.0.0.0
+address=/bet63035.com/0.0.0.0
+address=/bet83067.com/0.0.0.0
+address=/blajowet.cyou/0.0.0.0
+address=/braxapressaje-9251.vercel.app/0.0.0.0
+address=/bronm0.wixsite.com/0.0.0.0
+address=/bryfhdjffgc.weebly.com/0.0.0.0
+address=/bt-100831.weeblysite.com/0.0.0.0
+address=/bt-103187.weeblysite.com/0.0.0.0
+address=/bt-107510.weeblysite.com/0.0.0.0
+address=/btinternet-108597.weeblysite.com/0.0.0.0
+address=/btinternet18282.weebly.com/0.0.0.0
+address=/business-meta-center.com/0.0.0.0
+address=/byzhxx.com/0.0.0.0
+address=/c0nfrmpgsacc.github.io/0.0.0.0
+address=/cancel-binance.com/0.0.0.0
+address=/caracoliresidencial.com/0.0.0.0
+address=/cek-voucher.earth.web.id/0.0.0.0
+address=/cernifg359.cyou/0.0.0.0
+address=/chase-bank-one.vercel.app/0.0.0.0
+address=/chilly.makeup/0.0.0.0
+address=/china-link.pages.dev/0.0.0.0
+address=/chinnurpk.github.io/0.0.0.0
+address=/cibcgg.com/0.0.0.0
+address=/cmenvivo.github.io/0.0.0.0
+address=/codapay.events-games.com/0.0.0.0
+address=/coin-bosepro-log.godaddysites.com/0.0.0.0
+address=/coinbase-com-66117.danschaffert66529.workers.dev/0.0.0.0
+address=/communitycasesreviewlist.web.app/0.0.0.0
+address=/conennectakasd.b-cdn.net/0.0.0.0
+address=/conn-twallt.gitbook.io/0.0.0.0
+address=/correctingservicesalakks.pages.dev/0.0.0.0
+address=/credito-prestamos.fra1.zeabur.app/0.0.0.0
+address=/currently4988.weebly.com/0.0.0.0
+address=/currently6510.weebly.com/0.0.0.0
+address=/currently810.weebly.com/0.0.0.0
+address=/currently8711.weebly.com/0.0.0.0
+address=/currentlyatt04.weebly.com/0.0.0.0
+address=/currentlyatt223.weebly.com/0.0.0.0
+address=/currentlyatt468.weebly.com/0.0.0.0
+address=/currentlyatt7891.weebly.com/0.0.0.0
+address=/currentlyatt9854.weebly.com/0.0.0.0
+address=/currentlyattyaho85748.weebly.com/0.0.0.0
+address=/currentlyattyahoo6check.weebly.com/0.0.0.0
+address=/customersupportteam.serveusers.com/0.0.0.0
+address=/cv.geldmagazin.de/0.0.0.0
+address=/cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br/0.0.0.0
+address=/cwgml.top/0.0.0.0
+address=/d551000.cc/0.0.0.0
+address=/dappprompty.pages.dev/0.0.0.0
+address=/datingteles3x.netlify.app/0.0.0.0
+address=/debank-w.github.io/0.0.0.0
+address=/decenlaunchpad.pages.dev/0.0.0.0
+address=/demo.dynamicsolutionit.com/0.0.0.0
+address=/desktoptg.com/0.0.0.0
+address=/dev-0014021997322.pantheonsite.io/0.0.0.0
+address=/dev-102030654785555551.pantheonsite.io/0.0.0.0
+address=/dhl.ijpcr.net.in/0.0.0.0
+address=/dhlexpress.hu/0.0.0.0
+address=/djelp.top/0.0.0.0
+address=/dknrutkslsjf.weebly.com/0.0.0.0
+address=/dkrjjhrjemfkj.weeblysite.com/0.0.0.0
+address=/doccvview.buzz/0.0.0.0
+address=/docu-auth-5775940568.bb-abogados.com/0.0.0.0
+address=/doujeucrumoufau-8054.vercel.app/0.0.0.0
+address=/dropboxubdkw.weebly.com/0.0.0.0
+address=/duysysysh.weebly.com/0.0.0.0
+address=/eagbid.ru.com/0.0.0.0
+address=/ebay.ebayshoo.com/0.0.0.0
+address=/ebdaf.top/0.0.0.0
+address=/ejnapxqitd.cfolks.pl/0.0.0.0
+address=/elitefortnit.github.io/0.0.0.0
+address=/emailnoticeie.weebly.com/0.0.0.0
+address=/enforce-user-guidelines.vercel.app/0.0.0.0
+address=/erdtgyur57t6gyu.weebly.com/0.0.0.0
+address=/error3457uypcold.azurewebsites.net/0.0.0.0
+address=/eryiurgygeyigegh.weeblysite.com/0.0.0.0
+address=/eshop-eu.care.cps-partnersnp.de/0.0.0.0
+address=/ethereum-apple.org/0.0.0.0
+address=/evenstagservices.com/0.0.0.0
+address=/facebook-loginpage-clone.vercel.app/0.0.0.0
+address=/facebook-web.cloudns.be/0.0.0.0
+address=/faenl.top/0.0.0.0
+address=/fb-login-clone.vercel.app/0.0.0.0
+address=/feline-full-stick.glitch.me/0.0.0.0
+address=/fhger75gfg2fff.top/0.0.0.0
+address=/finityrrr.weebly.com/0.0.0.0
+address=/flngf.top/0.0.0.0
+address=/form-policy-appeal-k2d7nf.vercel.app/0.0.0.0
+address=/form-policy-appeal-k2x7nf.vercel.app/0.0.0.0
+address=/free-5476373.webadorsite.com/0.0.0.0
+address=/free-5481257.webadorsite.com/0.0.0.0
+address=/free-5562390.webadorsite.com/0.0.0.0
+address=/freevideomelayu.tme-viral.link/0.0.0.0
+address=/gasbot-demos.vercel.app/0.0.0.0
+address=/ggdhjssu7.wixsite.com/0.0.0.0
+address=/ghaho.vercel.app/0.0.0.0
+address=/gheedfhj.weebly.com/0.0.0.0
+address=/ghshbv.wixsite.com/0.0.0.0
+address=/global-reward.kraftonevent.com/0.0.0.0
+address=/gnaneshwarreddybaitinti.github.io/0.0.0.0
+address=/gnktan.top/0.0.0.0
+address=/goteleg-br.top/0.0.0.0
+address=/gradeis.info/0.0.0.0
+address=/help-manage-center.com/0.0.0.0
+address=/heriodj.shop/0.0.0.0
+address=/hermiovz-bustling-sled.glitch.me/0.0.0.0
+address=/hobitronik.com/0.0.0.0
+address=/home-100383.weeblysite.com/0.0.0.0
+address=/home-100489.weeblysite.com/0.0.0.0
+address=/home-101941.weeblysite.com/0.0.0.0
+address=/home-102517.weeblysite.com/0.0.0.0
+address=/home-104101.weeblysite.com/0.0.0.0
+address=/home-104529.weeblysite.com/0.0.0.0
+address=/home-104657.weeblysite.com/0.0.0.0
+address=/iemnswgehdporlkf.weebly.com/0.0.0.0
+address=/iik-3100-2023-spear-phishing-login-page.vercel.app/0.0.0.0
+address=/imtikem.vip/0.0.0.0
+address=/imtoken-iim.org/0.0.0.0
+address=/institutodentalsante.com.br/0.0.0.0
+address=/interface-beta-eight.vercel.app/0.0.0.0
+address=/it-outlookwebaccess.com/0.0.0.0
+address=/itklkaklkakk.weebly.com/0.0.0.0
+address=/jaiganeshmachinery.com/0.0.0.0
+address=/jdkajsmxncbeuwie.weebly.com/0.0.0.0
+address=/jfnjkfvbhjvdc.weebly.com/0.0.0.0
+address=/jfvfbremdkf50nhfgs.weeblysite.com/0.0.0.0
+address=/jhyuj.weebly.com/0.0.0.0
+address=/jinqiao114.com/0.0.0.0
+address=/join-mywhatsapp-2sa.pages.dev/0.0.0.0
+address=/jttyavc.com/0.0.0.0
+address=/juno-100024.weeblysite.com/0.0.0.0
+address=/juno-102431.square.site/0.0.0.0
+address=/junoytremauilkdfh.weebly.com/0.0.0.0
+address=/jxzipper.com/0.0.0.0
+address=/jzhemuni-logun.godaddysites.com/0.0.0.0
+address=/jzyl669.net/0.0.0.0
+address=/khdny.top/0.0.0.0
+address=/learn-trzor-start.github.io/0.0.0.0
+address=/ledger-com-updatefirmware.aparecidovisentin.com.br/0.0.0.0
+address=/ledger-com-upgrade.gezix.com.tr/0.0.0.0
+address=/ledger-confirm.com/0.0.0.0
+address=/ledgerhardwarehelp.com/0.0.0.0
+address=/ledgersafetyplatform.com/0.0.0.0
+address=/ledqinlv.com/0.0.0.0
+address=/loggmaskemttaa.godaddysites.com/0.0.0.0
+address=/login-midstreams-outlook.us/0.0.0.0
+address=/login.94-141-120-29.cprapid.com/0.0.0.0
+address=/loginhomeinbox.com/0.0.0.0
+address=/loginscreen-att-108245.weeblysite.com/0.0.0.0
+address=/lojer-vohex84.vercel.app/0.0.0.0
+address=/lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br/0.0.0.0
+address=/lttcloudvpn.pages.dev/0.0.0.0
+address=/m-telegrm.cc/0.0.0.0
+address=/m.amazontech.cc/0.0.0.0
+address=/m.key5188.com/0.0.0.0
+address=/mail-admin-102219.weeblysite.com/0.0.0.0
+address=/mail-securities.square.site/0.0.0.0
+address=/mail.apri.94-141-120-29.cprapid.com/0.0.0.0
+address=/mail.spotifyyclonne.freewebhostmost.com/0.0.0.0
+address=/mailboxspheretoday.weebly.com/0.0.0.0
+address=/mailhomebox-8096940.weeblysite.com/0.0.0.0
+address=/mailserverreservoir.weebly.com/0.0.0.0
+address=/malonlineservce12.weebly.com/0.0.0.0
+address=/managementbusinessrequiredaza.weebly.com/0.0.0.0
+address=/manorders.com/0.0.0.0
+address=/marketplace-center-checkitem-supp0rt-now-business.click/0.0.0.0
+address=/megadropclaim.com/0.0.0.0
+address=/met-aa-mass-klog-in.godaddysites.com/0.0.0.0
+address=/metamagskloin.gitbook.io/0.0.0.0
+address=/metamask-web.vercel.app/0.0.0.0
+address=/metameasklin.gitbook.io/0.0.0.0
+address=/metamsk-wallet-3.gitbook.io/0.0.0.0
+address=/metamuscklog.godaddysites.com/0.0.0.0
+address=/metau-maasck-loogiin.godaddysites.com/0.0.0.0
+address=/metawallet-server.vercel.app/0.0.0.0
+address=/metmassk-usalloggies.godaddysites.com/0.0.0.0
+address=/microsofstonline.com/0.0.0.0
+address=/micsoft.phishone.com/0.0.0.0
+address=/midjourneyex.com/0.0.0.0
+address=/mikam76544444.weebly.com/0.0.0.0
+address=/morsaglobal.com/0.0.0.0
+address=/mozp.ubjoubj.shop/0.0.0.0
+address=/multichaintool.netlify.app/0.0.0.0
+address=/myvalue365.com/0.0.0.0
+address=/navi-airbnb.vercel.app/0.0.0.0
+address=/nerve.black/0.0.0.0
+address=/netflix-clone-frontend-flax.vercel.app/0.0.0.0
+address=/netflix-clone-ml.vercel.app/0.0.0.0
+address=/netflix-lite-one.vercel.app/0.0.0.0
+address=/netflix-talarys.vercel.app/0.0.0.0
+address=/netzeero.weebly.com/0.0.0.0
+address=/netzero-webmail-109987.weeblysite.com/0.0.0.0
+address=/netzeroinfo.weebly.com/0.0.0.0
+address=/next-airbnb-clone-sage.vercel.app/0.0.0.0
+address=/nft-lift9.vercel.app/0.0.0.0
+address=/nihaalxz.github.io/0.0.0.0
+address=/nodeconnectdapp.pages.dev/0.0.0.0
+address=/nordicwalkingcadiz.com/0.0.0.0
+address=/notificationcentenooooo.weebly.com/0.0.0.0
+address=/notify-suspicious-activity.vercel.app/0.0.0.0
+address=/nsrocawsso.duckdns.org/0.0.0.0
+address=/ntlworldupdatemail.weebly.com/0.0.0.0
+address=/nuplaqsdmkd.weebly.com/0.0.0.0
+address=/nurnjjdsqs.duckdns.org/0.0.0.0
+address=/o08ofobnw.top/0.0.0.0
+address=/oatt745.wixsite.com/0.0.0.0
+address=/office-techservice.com/0.0.0.0
+address=/ortakoyescortum.site/0.0.0.0
+address=/outlook-loginsecurity.com/0.0.0.0
+address=/outlookcode22.weebly.com/0.0.0.0
+address=/pagedoc65.pages.dev/0.0.0.0
+address=/pay-pay-pay-loop-jp.replit.app/0.0.0.0
+address=/pedidosnozapp.com.br/0.0.0.0
+address=/pianorollcenter.com/0.0.0.0
+address=/pop.spotifycloning1.freewebhostmost.com/0.0.0.0
+address=/privateservicehsb.com/0.0.0.0
+address=/privatroom79.pages.dev/0.0.0.0
+address=/project-delta-brown.vercel.app/0.0.0.0
+address=/pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev/0.0.0.0
+address=/pub-e2c2179ca4e5490390f8741af2335633.r2.dev/0.0.0.0
+address=/pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev/0.0.0.0
+address=/pupstoken-whitelist.pages.dev/0.0.0.0
+address=/purple039053.studio.site/0.0.0.0
+address=/qiyee163.com/0.0.0.0
+address=/qnnbbbfinannnsbannk.vercel.app/0.0.0.0
+address=/quickmailservice331516277272772.weebly.com/0.0.0.0
+address=/qvegy.top/0.0.0.0
+address=/rakindotcom.github.io/0.0.0.0
+address=/rana-renthotel-example.vercel.app/0.0.0.0
+address=/react-netflix-delta.vercel.app/0.0.0.0
+address=/recognition-badge.netlify.app/0.0.0.0
+address=/refundpay.weebly.com/0.0.0.0
+address=/reply-notify-bussiness.com/0.0.0.0
+address=/resilient-cendol-b21196.netlify.app/0.0.0.0
+address=/review-business-case.d1t75tji1kkg4p.amplifyapp.com/0.0.0.0
+address=/reviewpage11.github.io/0.0.0.0
+address=/rgpih.top/0.0.0.0
+address=/rn.airenren.vip/0.0.0.0
+address=/robertvilliardhousing.weebly.com/0.0.0.0
+address=/rosamz123.github.io/0.0.0.0
+address=/saaveiices.weebly.com/0.0.0.0
+address=/safetystaying.homes/0.0.0.0
+address=/salofenushigo.weebly.com/0.0.0.0
+address=/savedfilters.top/0.0.0.0
+address=/sbcgloballane.weebly.com/0.0.0.0
+address=/secure.qqp.zle.temporary.site/0.0.0.0
+address=/securepageatt.weebly.com/0.0.0.0
+address=/securingmyledger.com/0.0.0.0
+address=/seller.shop-line.vip/0.0.0.0
+address=/senmeitefs.com/0.0.0.0
+address=/server.2rk3.com/0.0.0.0
+address=/server.h74w.com/0.0.0.0
+address=/server.n6b8.com/0.0.0.0
+address=/server.wyq6.com/0.0.0.0
+address=/service.santander.de/0.0.0.0
+address=/servicecoinwallet.live/0.0.0.0
+address=/seviiceess.weebly.com/0.0.0.0
+address=/sg3.xbenihime.us.kg/0.0.0.0
+address=/shaerepointt.weebly.com/0.0.0.0
+address=/shaw-101433.weeblysite.com/0.0.0.0
+address=/shaw-102890.weeblysite.com/0.0.0.0
+address=/shaw-104426.weeblysite.com/0.0.0.0
+address=/shaw-105083.weeblysite.com/0.0.0.0
+address=/shaw-105713.weeblysite.com/0.0.0.0
+address=/shaw-105802.weeblysite.com/0.0.0.0
+address=/shaw-105983.weeblysite.com/0.0.0.0
+address=/shaw-106114.weeblysite.com/0.0.0.0
+address=/shaw-107218.weeblysite.com/0.0.0.0
+address=/shaw-107259.weeblysite.com/0.0.0.0
+address=/shawvalidation.weebly.com/0.0.0.0
+address=/shimmering-star-epoch.glitch.me/0.0.0.0
+address=/shopee.gotback9898.cc/0.0.0.0
+address=/shoppingwithdiscount.top/0.0.0.0
+address=/shoptkoo.com/0.0.0.0
+address=/side-revshares.pages.dev/0.0.0.0
+address=/signiatdynamatz.weebly.com/0.0.0.0
+address=/sjc.hgp.mybluehost.me/0.0.0.0
+address=/skybestservice.wixsite.com/0.0.0.0
+address=/skyserviv.weebly.com/0.0.0.0
+address=/smartwalletcoin-sync.pages.dev/0.0.0.0
+address=/smartwebdapp.pages.dev/0.0.0.0
+address=/smtp.spotifyprojectyash.freewebhostmost.com/0.0.0.0
+address=/souwttillupa-4199.vercel.app/0.0.0.0
+address=/soygrupoelite.com/0.0.0.0
+address=/spotify-inspired-music-player-online.freewebhostmost.com/0.0.0.0
+address=/spotify.constantine.dev/0.0.0.0
+address=/spotify7972.freewebhostmost.com/0.0.0.0
+address=/spotifyclonebyrk.freewebhostmost.com/0.0.0.0
+address=/spotifywithyash.freewebhostmost.com/0.0.0.0
+address=/srvamch.in/0.0.0.0
+address=/staemcommunnutty.com/0.0.0.0
+address=/start-trazor-page.github.io/0.0.0.0
+address=/steamcommmuty.com/0.0.0.0
+address=/sukien.pubgm.shop/0.0.0.0
+address=/support-uk-cshelp-personal.getit.ink/0.0.0.0
+address=/systemserveerr.weebly.com/0.0.0.0
+address=/talentbegins.com/0.0.0.0
+address=/tapnm.top/0.0.0.0
+address=/tekbotavi.pro/0.0.0.0
+address=/telagram.vip/0.0.0.0
+address=/telegiramv.fit/0.0.0.0
+address=/telegram--hk.com/0.0.0.0
+address=/telegram-datingfree-sex.pages.dev/0.0.0.0
+address=/telegrambot-rectify.pages.dev/0.0.0.0
+address=/telegrambotsmart-solution.pages.dev/0.0.0.0
+address=/telegramis.work/0.0.0.0
+address=/telegrcm.ing/0.0.0.0
+address=/telergom.vip/0.0.0.0
+address=/tellegram.dmrtaxes.com/0.0.0.0
+address=/telpqgram.bocekilacla.com/0.0.0.0
+address=/telstra-101853.weeblysite.com/0.0.0.0
+address=/telstra-102223.weeblysite.com/0.0.0.0
+address=/telstra-102841.weeblysite.com/0.0.0.0
+address=/telstra-104158.weeblysite.com/0.0.0.0
+address=/telstra-105309.weeblysite.com/0.0.0.0
+address=/telstra-106488.weeblysite.com/0.0.0.0
+address=/telstra-106877.weeblysite.com/0.0.0.0
+address=/telstra-107132.weeblysite.com/0.0.0.0
+address=/telstra-108365.weeblysite.com/0.0.0.0
+address=/telstra-109995.weeblysite.com/0.0.0.0
+address=/temp-jledxoxqawgkocyshafr.webadorsite.com/0.0.0.0
+address=/tether-app.org/0.0.0.0
+address=/tether-zh.org/0.0.0.0
+address=/tfggfdfgddhs.weebly.com/0.0.0.0
+address=/tg.m-tslegram.top/0.0.0.0
+address=/thofx.top/0.0.0.0
+address=/tik-tok.cam/0.0.0.0
+address=/tiktok897.com/0.0.0.0
+address=/tiktokshopmallc.com/0.0.0.0
+address=/tkbuymarket.xyz/0.0.0.0
+address=/tkvipshop.top/0.0.0.0
+address=/tlktok.me/0.0.0.0
+address=/tlktokshop.tw/0.0.0.0
+address=/toinec.net/0.0.0.0
+address=/tr.alertsgame.ru/0.0.0.0
+address=/trackyourpackageusps.blogspot.de/0.0.0.0
+address=/trezzorwallle.azurewebsites.net/0.0.0.0
+address=/trxdapbundle.pages.dev/0.0.0.0
+address=/trzure-en-suite.pages.dev/0.0.0.0
+address=/ttk169.shop/0.0.0.0
+address=/tyuytrecurrently.weebly.com/0.0.0.0
+address=/ui-clone-neon.vercel.app/0.0.0.0
+address=/uijkr8f89oerfjncy78fo.weebly.com/0.0.0.0
+address=/ujjewmanskdeoiskedn.weebly.com/0.0.0.0
+address=/unusualaccountcnfrmpages.github.io/0.0.0.0
+address=/updatemymailbox246346253662.weebly.com/0.0.0.0
+address=/uqei112ao.top/0.0.0.0
+address=/useridteleku.com/0.0.0.0
+address=/usps.com-tarpocev.top/0.0.0.0
+address=/usps.com-tarpoiev.top/0.0.0.0
+address=/uspsservicetrack.blogspot.de/0.0.0.0
+address=/uspsservicetrack.blogspot.it/0.0.0.0
+address=/uspssmartparcellocker.tech/0.0.0.0
+address=/uspssmartparcellockers.tech/0.0.0.0
+address=/utkepp.top/0.0.0.0
+address=/v2-pancakeswap.github.io/0.0.0.0
+address=/vedi.94-141-120-29.cprapid.com/0.0.0.0
+address=/veloxs-invite.com/0.0.0.0
+address=/verify-page-submit-here.vercel.app/0.0.0.0
+address=/voii11cfx.mmm.page/0.0.0.0
+address=/walletconnect-web3.vercel.app/0.0.0.0
+address=/weasdrty.wixsite.com/0.0.0.0
+address=/web-cqxarjotd-uniswap.vercel.app/0.0.0.0
+address=/webdenet.weebly.com/0.0.0.0
+address=/welsfag-blog.vercel.app/0.0.0.0
+address=/wesrdtcfdzse5d6tfuvjdtufyi.weebly.com/0.0.0.0
+address=/woodplc.dogfriendlytahoe.com/0.0.0.0
+address=/wqsac.icu/0.0.0.0
+address=/www-blockchain-fi-auth.vercel.app/0.0.0.0
+address=/wxltx.com/0.0.0.0
+address=/xhrcu.top/0.0.0.0
+address=/xn--mnta-5q5a.network/0.0.0.0
+address=/y06gwc.webwave.dev/0.0.0.0
+address=/yahpi.com/0.0.0.0
+address=/yahpn.com/0.0.0.0
+address=/yondasatt.weebly.com/0.0.0.0
+address=/yufreittavassu-6526.vercel.app/0.0.0.0
+address=/yusdydsfjuuxx.weebly.com/0.0.0.0
+address=/zapqf.top/0.0.0.0
+address=/zcytjs.com/0.0.0.0
+address=/zecra.top/0.0.0.0
+address=/zgyxzggk.top/0.0.0.0
+address=/zlip.net/0.0.0.0
+address=/zvuhs.top/0.0.0.0
diff --git a/phishing-filter-dnsmasq.conf.br b/phishing-filter-dnsmasq.conf.br
new file mode 100644
index 000000000..82f8462f2
Binary files /dev/null and b/phishing-filter-dnsmasq.conf.br differ
diff --git a/phishing-filter-dnsmasq.conf.gz b/phishing-filter-dnsmasq.conf.gz
new file mode 100644
index 000000000..5f03474ba
Binary files /dev/null and b/phishing-filter-dnsmasq.conf.gz differ
diff --git a/phishing-filter-domains.txt b/phishing-filter-domains.txt
new file mode 100644
index 000000000..470c86473
--- /dev/null
+++ b/phishing-filter-domains.txt
@@ -0,0 +1,478 @@
+# Title: Phishing Domains Blocklist
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+073202.com
+0xugiw6pb.top
+11muskansingh.github.io
+130365.vip
+21403590.cc
+2366xyx.com
+25v05vtrg.top
+365.915sj1.xyz
+498291975887803508.weebly.com
+5510003.top
+5510006.top
+551005.me
+551008.me
+57365ee.cc
+657226703365.com
+6bet938.com
+8904701.cc
+909338844400.weebly.com
+965009.com
+98f63c2a712e05fbeccf379de02ec9a5.88110.co
+a0omer.webwave.dev
+aaloo.kiwiground.top
+abueme-96e1.ehnelacsrralo.workers.dev
+accountuserlogin.github.io
+accshomecnfrm0log.github.io
+adminuser.yw2201.xyz
+agenciaancla.com.ar
+airbnb-clone-one-chi.vercel.app
+allegro-400.com
+amazon-clone88.netlify.app
+amazonclonebysid.netlify.app
+amazons-help-cx-number.pages.dev
+anshbotzone.com
+anshidmuhmd.github.io
+anuarw.kz
+app.liquidations-aave.com
+app.paxful87.com
+app.sandbox.custombrandedboxesbyfedex.com
+appeal-solve-violation-review.vercel.app
+apri.94-141-120-29.cprapid.com
+apwmensdjyeurir.weebly.com
+arbnb-clone.vercel.app
+arvestcd.embarkdigitalonboarding.com
+arvestrewardscard.embarkdigitalonboarding.com
+atbdgtehomeupdateform.weebly.com
+atftt.weebly.com
+atlgnrnewt.weebly.com
+atlnes.icu
+atmailupdateformeupdaterltdfdinfomailacct.weebly.com
+atmailupdateformeupdatesbhtdinfomailacct.weebly.com
+att-100081.weeblysite.com
+att-102549.weeblysite.com
+att-102856.weeblysite.com
+att-10386990.weeblysite.com
+att-106249.weeblysite.com
+att-108680.weeblysite.com
+att-109026.weeblysite.com
+attadm977222.weebly.com
+attcom-105588.weeblysite.com
+attcom-107224.weeblysite.com
+attconsultint.weebly.com
+attflyupdateserver.weebly.com
+attglobalwild.weebly.com
+attmaill0gin2341.weebly.com
+attnationameritechie.weebly.com
+attserverupdatedmailbox.weebly.com
+attt-107147.weeblysite.com
+b.3656240205.vip
+b12thgst9.weeblysite.com
+b35ppp.com
+b35sss.com
+b45017.com
+b45020.com
+bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link
+bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link
+bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link
+bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link
+bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link
+bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link
+bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link
+bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link
+bancolombia.supportmaven.ai
+bansos-2jt.get-regist.com
+bbtryr.com
+bentdynamicslm.com
+bestorrogames.com
+bet365ce.com
+bet6205365.com
+bet63035.com
+bet83067.com
+blajowet.cyou
+braxapressaje-9251.vercel.app
+bronm0.wixsite.com
+bryfhdjffgc.weebly.com
+bt-100831.weeblysite.com
+bt-103187.weeblysite.com
+bt-107510.weeblysite.com
+btinternet-108597.weeblysite.com
+btinternet18282.weebly.com
+business-meta-center.com
+byzhxx.com
+c0nfrmpgsacc.github.io
+cancel-binance.com
+caracoliresidencial.com
+cek-voucher.earth.web.id
+cernifg359.cyou
+chase-bank-one.vercel.app
+chilly.makeup
+china-link.pages.dev
+chinnurpk.github.io
+cibcgg.com
+cmenvivo.github.io
+codapay.events-games.com
+coin-bosepro-log.godaddysites.com
+coinbase-com-66117.danschaffert66529.workers.dev
+communitycasesreviewlist.web.app
+conennectakasd.b-cdn.net
+conn-twallt.gitbook.io
+correctingservicesalakks.pages.dev
+credito-prestamos.fra1.zeabur.app
+currently4988.weebly.com
+currently6510.weebly.com
+currently810.weebly.com
+currently8711.weebly.com
+currentlyatt04.weebly.com
+currentlyatt223.weebly.com
+currentlyatt468.weebly.com
+currentlyatt7891.weebly.com
+currentlyatt9854.weebly.com
+currentlyattyaho85748.weebly.com
+currentlyattyahoo6check.weebly.com
+customersupportteam.serveusers.com
+cv.geldmagazin.de
+cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br
+cwgml.top
+d551000.cc
+dappprompty.pages.dev
+datingteles3x.netlify.app
+debank-w.github.io
+decenlaunchpad.pages.dev
+demo.dynamicsolutionit.com
+desktoptg.com
+dev-0014021997322.pantheonsite.io
+dev-102030654785555551.pantheonsite.io
+dhl.ijpcr.net.in
+dhlexpress.hu
+djelp.top
+dknrutkslsjf.weebly.com
+dkrjjhrjemfkj.weeblysite.com
+doccvview.buzz
+docu-auth-5775940568.bb-abogados.com
+doujeucrumoufau-8054.vercel.app
+dropboxubdkw.weebly.com
+duysysysh.weebly.com
+eagbid.ru.com
+ebay.ebayshoo.com
+ebdaf.top
+ejnapxqitd.cfolks.pl
+elitefortnit.github.io
+emailnoticeie.weebly.com
+enforce-user-guidelines.vercel.app
+erdtgyur57t6gyu.weebly.com
+error3457uypcold.azurewebsites.net
+eryiurgygeyigegh.weeblysite.com
+eshop-eu.care.cps-partnersnp.de
+ethereum-apple.org
+evenstagservices.com
+facebook-loginpage-clone.vercel.app
+facebook-web.cloudns.be
+faenl.top
+fb-login-clone.vercel.app
+feline-full-stick.glitch.me
+fhger75gfg2fff.top
+finityrrr.weebly.com
+flngf.top
+form-policy-appeal-k2d7nf.vercel.app
+form-policy-appeal-k2x7nf.vercel.app
+free-5476373.webadorsite.com
+free-5481257.webadorsite.com
+free-5562390.webadorsite.com
+freevideomelayu.tme-viral.link
+gasbot-demos.vercel.app
+ggdhjssu7.wixsite.com
+ghaho.vercel.app
+gheedfhj.weebly.com
+ghshbv.wixsite.com
+global-reward.kraftonevent.com
+gnaneshwarreddybaitinti.github.io
+gnktan.top
+goteleg-br.top
+gradeis.info
+help-manage-center.com
+heriodj.shop
+hermiovz-bustling-sled.glitch.me
+hobitronik.com
+home-100383.weeblysite.com
+home-100489.weeblysite.com
+home-101941.weeblysite.com
+home-102517.weeblysite.com
+home-104101.weeblysite.com
+home-104529.weeblysite.com
+home-104657.weeblysite.com
+iemnswgehdporlkf.weebly.com
+iik-3100-2023-spear-phishing-login-page.vercel.app
+imtikem.vip
+imtoken-iim.org
+institutodentalsante.com.br
+interface-beta-eight.vercel.app
+it-outlookwebaccess.com
+itklkaklkakk.weebly.com
+jaiganeshmachinery.com
+jdkajsmxncbeuwie.weebly.com
+jfnjkfvbhjvdc.weebly.com
+jfvfbremdkf50nhfgs.weeblysite.com
+jhyuj.weebly.com
+jinqiao114.com
+join-mywhatsapp-2sa.pages.dev
+jttyavc.com
+juno-100024.weeblysite.com
+juno-102431.square.site
+junoytremauilkdfh.weebly.com
+jxzipper.com
+jzhemuni-logun.godaddysites.com
+jzyl669.net
+khdny.top
+learn-trzor-start.github.io
+ledger-com-updatefirmware.aparecidovisentin.com.br
+ledger-com-upgrade.gezix.com.tr
+ledger-confirm.com
+ledgerhardwarehelp.com
+ledgersafetyplatform.com
+ledqinlv.com
+loggmaskemttaa.godaddysites.com
+login-midstreams-outlook.us
+login.94-141-120-29.cprapid.com
+loginhomeinbox.com
+loginscreen-att-108245.weeblysite.com
+lojer-vohex84.vercel.app
+lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br
+lttcloudvpn.pages.dev
+m-telegrm.cc
+m.amazontech.cc
+m.key5188.com
+mail-admin-102219.weeblysite.com
+mail-securities.square.site
+mail.apri.94-141-120-29.cprapid.com
+mail.spotifyyclonne.freewebhostmost.com
+mailboxspheretoday.weebly.com
+mailhomebox-8096940.weeblysite.com
+mailserverreservoir.weebly.com
+malonlineservce12.weebly.com
+managementbusinessrequiredaza.weebly.com
+manorders.com
+marketplace-center-checkitem-supp0rt-now-business.click
+megadropclaim.com
+met-aa-mass-klog-in.godaddysites.com
+metamagskloin.gitbook.io
+metamask-web.vercel.app
+metameasklin.gitbook.io
+metamsk-wallet-3.gitbook.io
+metamuscklog.godaddysites.com
+metau-maasck-loogiin.godaddysites.com
+metawallet-server.vercel.app
+metmassk-usalloggies.godaddysites.com
+microsofstonline.com
+micsoft.phishone.com
+midjourneyex.com
+mikam76544444.weebly.com
+morsaglobal.com
+mozp.ubjoubj.shop
+multichaintool.netlify.app
+myvalue365.com
+navi-airbnb.vercel.app
+nerve.black
+netflix-clone-frontend-flax.vercel.app
+netflix-clone-ml.vercel.app
+netflix-lite-one.vercel.app
+netflix-talarys.vercel.app
+netzeero.weebly.com
+netzero-webmail-109987.weeblysite.com
+netzeroinfo.weebly.com
+next-airbnb-clone-sage.vercel.app
+nft-lift9.vercel.app
+nihaalxz.github.io
+nodeconnectdapp.pages.dev
+nordicwalkingcadiz.com
+notificationcentenooooo.weebly.com
+notify-suspicious-activity.vercel.app
+nsrocawsso.duckdns.org
+ntlworldupdatemail.weebly.com
+nuplaqsdmkd.weebly.com
+nurnjjdsqs.duckdns.org
+o08ofobnw.top
+oatt745.wixsite.com
+office-techservice.com
+ortakoyescortum.site
+outlook-loginsecurity.com
+outlookcode22.weebly.com
+pagedoc65.pages.dev
+pay-pay-pay-loop-jp.replit.app
+pedidosnozapp.com.br
+pianorollcenter.com
+pop.spotifycloning1.freewebhostmost.com
+privateservicehsb.com
+privatroom79.pages.dev
+project-delta-brown.vercel.app
+pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev
+pub-e2c2179ca4e5490390f8741af2335633.r2.dev
+pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev
+pupstoken-whitelist.pages.dev
+purple039053.studio.site
+qiyee163.com
+qnnbbbfinannnsbannk.vercel.app
+quickmailservice331516277272772.weebly.com
+qvegy.top
+rakindotcom.github.io
+rana-renthotel-example.vercel.app
+react-netflix-delta.vercel.app
+recognition-badge.netlify.app
+refundpay.weebly.com
+reply-notify-bussiness.com
+resilient-cendol-b21196.netlify.app
+review-business-case.d1t75tji1kkg4p.amplifyapp.com
+reviewpage11.github.io
+rgpih.top
+rn.airenren.vip
+robertvilliardhousing.weebly.com
+rosamz123.github.io
+saaveiices.weebly.com
+safetystaying.homes
+salofenushigo.weebly.com
+savedfilters.top
+sbcgloballane.weebly.com
+secure.qqp.zle.temporary.site
+securepageatt.weebly.com
+securingmyledger.com
+seller.shop-line.vip
+senmeitefs.com
+server.2rk3.com
+server.h74w.com
+server.n6b8.com
+server.wyq6.com
+service.santander.de
+servicecoinwallet.live
+seviiceess.weebly.com
+sg3.xbenihime.us.kg
+shaerepointt.weebly.com
+shaw-101433.weeblysite.com
+shaw-102890.weeblysite.com
+shaw-104426.weeblysite.com
+shaw-105083.weeblysite.com
+shaw-105713.weeblysite.com
+shaw-105802.weeblysite.com
+shaw-105983.weeblysite.com
+shaw-106114.weeblysite.com
+shaw-107218.weeblysite.com
+shaw-107259.weeblysite.com
+shawvalidation.weebly.com
+shimmering-star-epoch.glitch.me
+shopee.gotback9898.cc
+shoppingwithdiscount.top
+shoptkoo.com
+side-revshares.pages.dev
+signiatdynamatz.weebly.com
+sjc.hgp.mybluehost.me
+skybestservice.wixsite.com
+skyserviv.weebly.com
+smartwalletcoin-sync.pages.dev
+smartwebdapp.pages.dev
+smtp.spotifyprojectyash.freewebhostmost.com
+souwttillupa-4199.vercel.app
+soygrupoelite.com
+spotify-inspired-music-player-online.freewebhostmost.com
+spotify.constantine.dev
+spotify7972.freewebhostmost.com
+spotifyclonebyrk.freewebhostmost.com
+spotifywithyash.freewebhostmost.com
+srvamch.in
+staemcommunnutty.com
+start-trazor-page.github.io
+steamcommmuty.com
+sukien.pubgm.shop
+support-uk-cshelp-personal.getit.ink
+systemserveerr.weebly.com
+talentbegins.com
+tapnm.top
+tekbotavi.pro
+telagram.vip
+telegiramv.fit
+telegram--hk.com
+telegram-datingfree-sex.pages.dev
+telegrambot-rectify.pages.dev
+telegrambotsmart-solution.pages.dev
+telegramis.work
+telegrcm.ing
+telergom.vip
+tellegram.dmrtaxes.com
+telpqgram.bocekilacla.com
+telstra-101853.weeblysite.com
+telstra-102223.weeblysite.com
+telstra-102841.weeblysite.com
+telstra-104158.weeblysite.com
+telstra-105309.weeblysite.com
+telstra-106488.weeblysite.com
+telstra-106877.weeblysite.com
+telstra-107132.weeblysite.com
+telstra-108365.weeblysite.com
+telstra-109995.weeblysite.com
+temp-jledxoxqawgkocyshafr.webadorsite.com
+tether-app.org
+tether-zh.org
+tfggfdfgddhs.weebly.com
+tg.m-tslegram.top
+thofx.top
+tik-tok.cam
+tiktok897.com
+tiktokshopmallc.com
+tkbuymarket.xyz
+tkvipshop.top
+tlktok.me
+tlktokshop.tw
+toinec.net
+tr.alertsgame.ru
+trackyourpackageusps.blogspot.de
+trezzorwallle.azurewebsites.net
+trxdapbundle.pages.dev
+trzure-en-suite.pages.dev
+ttk169.shop
+tyuytrecurrently.weebly.com
+ui-clone-neon.vercel.app
+uijkr8f89oerfjncy78fo.weebly.com
+ujjewmanskdeoiskedn.weebly.com
+unusualaccountcnfrmpages.github.io
+updatemymailbox246346253662.weebly.com
+uqei112ao.top
+useridteleku.com
+usps.com-tarpocev.top
+usps.com-tarpoiev.top
+uspsservicetrack.blogspot.de
+uspsservicetrack.blogspot.it
+uspssmartparcellocker.tech
+uspssmartparcellockers.tech
+utkepp.top
+v2-pancakeswap.github.io
+vedi.94-141-120-29.cprapid.com
+veloxs-invite.com
+verify-page-submit-here.vercel.app
+voii11cfx.mmm.page
+walletconnect-web3.vercel.app
+weasdrty.wixsite.com
+web-cqxarjotd-uniswap.vercel.app
+webdenet.weebly.com
+welsfag-blog.vercel.app
+wesrdtcfdzse5d6tfuvjdtufyi.weebly.com
+woodplc.dogfriendlytahoe.com
+wqsac.icu
+www-blockchain-fi-auth.vercel.app
+wxltx.com
+xhrcu.top
+xn--mnta-5q5a.network
+y06gwc.webwave.dev
+yahpi.com
+yahpn.com
+yondasatt.weebly.com
+yufreittavassu-6526.vercel.app
+yusdydsfjuuxx.weebly.com
+zapqf.top
+zcytjs.com
+zecra.top
+zgyxzggk.top
+zlip.net
+zvuhs.top
diff --git a/phishing-filter-domains.txt.br b/phishing-filter-domains.txt.br
new file mode 100644
index 000000000..cbb21dcd6
Binary files /dev/null and b/phishing-filter-domains.txt.br differ
diff --git a/phishing-filter-domains.txt.gz b/phishing-filter-domains.txt.gz
new file mode 100644
index 000000000..ef160271b
Binary files /dev/null and b/phishing-filter-domains.txt.gz differ
diff --git a/phishing-filter-hosts.txt b/phishing-filter-hosts.txt
new file mode 100644
index 000000000..ff42db014
--- /dev/null
+++ b/phishing-filter-hosts.txt
@@ -0,0 +1,478 @@
+# Title: Phishing Hosts Blocklist
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+0.0.0.0 073202.com
+0.0.0.0 0xugiw6pb.top
+0.0.0.0 11muskansingh.github.io
+0.0.0.0 130365.vip
+0.0.0.0 21403590.cc
+0.0.0.0 2366xyx.com
+0.0.0.0 25v05vtrg.top
+0.0.0.0 365.915sj1.xyz
+0.0.0.0 498291975887803508.weebly.com
+0.0.0.0 5510003.top
+0.0.0.0 5510006.top
+0.0.0.0 551005.me
+0.0.0.0 551008.me
+0.0.0.0 57365ee.cc
+0.0.0.0 657226703365.com
+0.0.0.0 6bet938.com
+0.0.0.0 8904701.cc
+0.0.0.0 909338844400.weebly.com
+0.0.0.0 965009.com
+0.0.0.0 98f63c2a712e05fbeccf379de02ec9a5.88110.co
+0.0.0.0 a0omer.webwave.dev
+0.0.0.0 aaloo.kiwiground.top
+0.0.0.0 abueme-96e1.ehnelacsrralo.workers.dev
+0.0.0.0 accountuserlogin.github.io
+0.0.0.0 accshomecnfrm0log.github.io
+0.0.0.0 adminuser.yw2201.xyz
+0.0.0.0 agenciaancla.com.ar
+0.0.0.0 airbnb-clone-one-chi.vercel.app
+0.0.0.0 allegro-400.com
+0.0.0.0 amazon-clone88.netlify.app
+0.0.0.0 amazonclonebysid.netlify.app
+0.0.0.0 amazons-help-cx-number.pages.dev
+0.0.0.0 anshbotzone.com
+0.0.0.0 anshidmuhmd.github.io
+0.0.0.0 anuarw.kz
+0.0.0.0 app.liquidations-aave.com
+0.0.0.0 app.paxful87.com
+0.0.0.0 app.sandbox.custombrandedboxesbyfedex.com
+0.0.0.0 appeal-solve-violation-review.vercel.app
+0.0.0.0 apri.94-141-120-29.cprapid.com
+0.0.0.0 apwmensdjyeurir.weebly.com
+0.0.0.0 arbnb-clone.vercel.app
+0.0.0.0 arvestcd.embarkdigitalonboarding.com
+0.0.0.0 arvestrewardscard.embarkdigitalonboarding.com
+0.0.0.0 atbdgtehomeupdateform.weebly.com
+0.0.0.0 atftt.weebly.com
+0.0.0.0 atlgnrnewt.weebly.com
+0.0.0.0 atlnes.icu
+0.0.0.0 atmailupdateformeupdaterltdfdinfomailacct.weebly.com
+0.0.0.0 atmailupdateformeupdatesbhtdinfomailacct.weebly.com
+0.0.0.0 att-100081.weeblysite.com
+0.0.0.0 att-102549.weeblysite.com
+0.0.0.0 att-102856.weeblysite.com
+0.0.0.0 att-10386990.weeblysite.com
+0.0.0.0 att-106249.weeblysite.com
+0.0.0.0 att-108680.weeblysite.com
+0.0.0.0 att-109026.weeblysite.com
+0.0.0.0 attadm977222.weebly.com
+0.0.0.0 attcom-105588.weeblysite.com
+0.0.0.0 attcom-107224.weeblysite.com
+0.0.0.0 attconsultint.weebly.com
+0.0.0.0 attflyupdateserver.weebly.com
+0.0.0.0 attglobalwild.weebly.com
+0.0.0.0 attmaill0gin2341.weebly.com
+0.0.0.0 attnationameritechie.weebly.com
+0.0.0.0 attserverupdatedmailbox.weebly.com
+0.0.0.0 attt-107147.weeblysite.com
+0.0.0.0 b.3656240205.vip
+0.0.0.0 b12thgst9.weeblysite.com
+0.0.0.0 b35ppp.com
+0.0.0.0 b35sss.com
+0.0.0.0 b45017.com
+0.0.0.0 b45020.com
+0.0.0.0 bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link
+0.0.0.0 bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link
+0.0.0.0 bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link
+0.0.0.0 bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link
+0.0.0.0 bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link
+0.0.0.0 bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link
+0.0.0.0 bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link
+0.0.0.0 bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link
+0.0.0.0 bancolombia.supportmaven.ai
+0.0.0.0 bansos-2jt.get-regist.com
+0.0.0.0 bbtryr.com
+0.0.0.0 bentdynamicslm.com
+0.0.0.0 bestorrogames.com
+0.0.0.0 bet365ce.com
+0.0.0.0 bet6205365.com
+0.0.0.0 bet63035.com
+0.0.0.0 bet83067.com
+0.0.0.0 blajowet.cyou
+0.0.0.0 braxapressaje-9251.vercel.app
+0.0.0.0 bronm0.wixsite.com
+0.0.0.0 bryfhdjffgc.weebly.com
+0.0.0.0 bt-100831.weeblysite.com
+0.0.0.0 bt-103187.weeblysite.com
+0.0.0.0 bt-107510.weeblysite.com
+0.0.0.0 btinternet-108597.weeblysite.com
+0.0.0.0 btinternet18282.weebly.com
+0.0.0.0 business-meta-center.com
+0.0.0.0 byzhxx.com
+0.0.0.0 c0nfrmpgsacc.github.io
+0.0.0.0 cancel-binance.com
+0.0.0.0 caracoliresidencial.com
+0.0.0.0 cek-voucher.earth.web.id
+0.0.0.0 cernifg359.cyou
+0.0.0.0 chase-bank-one.vercel.app
+0.0.0.0 chilly.makeup
+0.0.0.0 china-link.pages.dev
+0.0.0.0 chinnurpk.github.io
+0.0.0.0 cibcgg.com
+0.0.0.0 cmenvivo.github.io
+0.0.0.0 codapay.events-games.com
+0.0.0.0 coin-bosepro-log.godaddysites.com
+0.0.0.0 coinbase-com-66117.danschaffert66529.workers.dev
+0.0.0.0 communitycasesreviewlist.web.app
+0.0.0.0 conennectakasd.b-cdn.net
+0.0.0.0 conn-twallt.gitbook.io
+0.0.0.0 correctingservicesalakks.pages.dev
+0.0.0.0 credito-prestamos.fra1.zeabur.app
+0.0.0.0 currently4988.weebly.com
+0.0.0.0 currently6510.weebly.com
+0.0.0.0 currently810.weebly.com
+0.0.0.0 currently8711.weebly.com
+0.0.0.0 currentlyatt04.weebly.com
+0.0.0.0 currentlyatt223.weebly.com
+0.0.0.0 currentlyatt468.weebly.com
+0.0.0.0 currentlyatt7891.weebly.com
+0.0.0.0 currentlyatt9854.weebly.com
+0.0.0.0 currentlyattyaho85748.weebly.com
+0.0.0.0 currentlyattyahoo6check.weebly.com
+0.0.0.0 customersupportteam.serveusers.com
+0.0.0.0 cv.geldmagazin.de
+0.0.0.0 cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br
+0.0.0.0 cwgml.top
+0.0.0.0 d551000.cc
+0.0.0.0 dappprompty.pages.dev
+0.0.0.0 datingteles3x.netlify.app
+0.0.0.0 debank-w.github.io
+0.0.0.0 decenlaunchpad.pages.dev
+0.0.0.0 demo.dynamicsolutionit.com
+0.0.0.0 desktoptg.com
+0.0.0.0 dev-0014021997322.pantheonsite.io
+0.0.0.0 dev-102030654785555551.pantheonsite.io
+0.0.0.0 dhl.ijpcr.net.in
+0.0.0.0 dhlexpress.hu
+0.0.0.0 djelp.top
+0.0.0.0 dknrutkslsjf.weebly.com
+0.0.0.0 dkrjjhrjemfkj.weeblysite.com
+0.0.0.0 doccvview.buzz
+0.0.0.0 docu-auth-5775940568.bb-abogados.com
+0.0.0.0 doujeucrumoufau-8054.vercel.app
+0.0.0.0 dropboxubdkw.weebly.com
+0.0.0.0 duysysysh.weebly.com
+0.0.0.0 eagbid.ru.com
+0.0.0.0 ebay.ebayshoo.com
+0.0.0.0 ebdaf.top
+0.0.0.0 ejnapxqitd.cfolks.pl
+0.0.0.0 elitefortnit.github.io
+0.0.0.0 emailnoticeie.weebly.com
+0.0.0.0 enforce-user-guidelines.vercel.app
+0.0.0.0 erdtgyur57t6gyu.weebly.com
+0.0.0.0 error3457uypcold.azurewebsites.net
+0.0.0.0 eryiurgygeyigegh.weeblysite.com
+0.0.0.0 eshop-eu.care.cps-partnersnp.de
+0.0.0.0 ethereum-apple.org
+0.0.0.0 evenstagservices.com
+0.0.0.0 facebook-loginpage-clone.vercel.app
+0.0.0.0 facebook-web.cloudns.be
+0.0.0.0 faenl.top
+0.0.0.0 fb-login-clone.vercel.app
+0.0.0.0 feline-full-stick.glitch.me
+0.0.0.0 fhger75gfg2fff.top
+0.0.0.0 finityrrr.weebly.com
+0.0.0.0 flngf.top
+0.0.0.0 form-policy-appeal-k2d7nf.vercel.app
+0.0.0.0 form-policy-appeal-k2x7nf.vercel.app
+0.0.0.0 free-5476373.webadorsite.com
+0.0.0.0 free-5481257.webadorsite.com
+0.0.0.0 free-5562390.webadorsite.com
+0.0.0.0 freevideomelayu.tme-viral.link
+0.0.0.0 gasbot-demos.vercel.app
+0.0.0.0 ggdhjssu7.wixsite.com
+0.0.0.0 ghaho.vercel.app
+0.0.0.0 gheedfhj.weebly.com
+0.0.0.0 ghshbv.wixsite.com
+0.0.0.0 global-reward.kraftonevent.com
+0.0.0.0 gnaneshwarreddybaitinti.github.io
+0.0.0.0 gnktan.top
+0.0.0.0 goteleg-br.top
+0.0.0.0 gradeis.info
+0.0.0.0 help-manage-center.com
+0.0.0.0 heriodj.shop
+0.0.0.0 hermiovz-bustling-sled.glitch.me
+0.0.0.0 hobitronik.com
+0.0.0.0 home-100383.weeblysite.com
+0.0.0.0 home-100489.weeblysite.com
+0.0.0.0 home-101941.weeblysite.com
+0.0.0.0 home-102517.weeblysite.com
+0.0.0.0 home-104101.weeblysite.com
+0.0.0.0 home-104529.weeblysite.com
+0.0.0.0 home-104657.weeblysite.com
+0.0.0.0 iemnswgehdporlkf.weebly.com
+0.0.0.0 iik-3100-2023-spear-phishing-login-page.vercel.app
+0.0.0.0 imtikem.vip
+0.0.0.0 imtoken-iim.org
+0.0.0.0 institutodentalsante.com.br
+0.0.0.0 interface-beta-eight.vercel.app
+0.0.0.0 it-outlookwebaccess.com
+0.0.0.0 itklkaklkakk.weebly.com
+0.0.0.0 jaiganeshmachinery.com
+0.0.0.0 jdkajsmxncbeuwie.weebly.com
+0.0.0.0 jfnjkfvbhjvdc.weebly.com
+0.0.0.0 jfvfbremdkf50nhfgs.weeblysite.com
+0.0.0.0 jhyuj.weebly.com
+0.0.0.0 jinqiao114.com
+0.0.0.0 join-mywhatsapp-2sa.pages.dev
+0.0.0.0 jttyavc.com
+0.0.0.0 juno-100024.weeblysite.com
+0.0.0.0 juno-102431.square.site
+0.0.0.0 junoytremauilkdfh.weebly.com
+0.0.0.0 jxzipper.com
+0.0.0.0 jzhemuni-logun.godaddysites.com
+0.0.0.0 jzyl669.net
+0.0.0.0 khdny.top
+0.0.0.0 learn-trzor-start.github.io
+0.0.0.0 ledger-com-updatefirmware.aparecidovisentin.com.br
+0.0.0.0 ledger-com-upgrade.gezix.com.tr
+0.0.0.0 ledger-confirm.com
+0.0.0.0 ledgerhardwarehelp.com
+0.0.0.0 ledgersafetyplatform.com
+0.0.0.0 ledqinlv.com
+0.0.0.0 loggmaskemttaa.godaddysites.com
+0.0.0.0 login-midstreams-outlook.us
+0.0.0.0 login.94-141-120-29.cprapid.com
+0.0.0.0 loginhomeinbox.com
+0.0.0.0 loginscreen-att-108245.weeblysite.com
+0.0.0.0 lojer-vohex84.vercel.app
+0.0.0.0 lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br
+0.0.0.0 lttcloudvpn.pages.dev
+0.0.0.0 m-telegrm.cc
+0.0.0.0 m.amazontech.cc
+0.0.0.0 m.key5188.com
+0.0.0.0 mail-admin-102219.weeblysite.com
+0.0.0.0 mail-securities.square.site
+0.0.0.0 mail.apri.94-141-120-29.cprapid.com
+0.0.0.0 mail.spotifyyclonne.freewebhostmost.com
+0.0.0.0 mailboxspheretoday.weebly.com
+0.0.0.0 mailhomebox-8096940.weeblysite.com
+0.0.0.0 mailserverreservoir.weebly.com
+0.0.0.0 malonlineservce12.weebly.com
+0.0.0.0 managementbusinessrequiredaza.weebly.com
+0.0.0.0 manorders.com
+0.0.0.0 marketplace-center-checkitem-supp0rt-now-business.click
+0.0.0.0 megadropclaim.com
+0.0.0.0 met-aa-mass-klog-in.godaddysites.com
+0.0.0.0 metamagskloin.gitbook.io
+0.0.0.0 metamask-web.vercel.app
+0.0.0.0 metameasklin.gitbook.io
+0.0.0.0 metamsk-wallet-3.gitbook.io
+0.0.0.0 metamuscklog.godaddysites.com
+0.0.0.0 metau-maasck-loogiin.godaddysites.com
+0.0.0.0 metawallet-server.vercel.app
+0.0.0.0 metmassk-usalloggies.godaddysites.com
+0.0.0.0 microsofstonline.com
+0.0.0.0 micsoft.phishone.com
+0.0.0.0 midjourneyex.com
+0.0.0.0 mikam76544444.weebly.com
+0.0.0.0 morsaglobal.com
+0.0.0.0 mozp.ubjoubj.shop
+0.0.0.0 multichaintool.netlify.app
+0.0.0.0 myvalue365.com
+0.0.0.0 navi-airbnb.vercel.app
+0.0.0.0 nerve.black
+0.0.0.0 netflix-clone-frontend-flax.vercel.app
+0.0.0.0 netflix-clone-ml.vercel.app
+0.0.0.0 netflix-lite-one.vercel.app
+0.0.0.0 netflix-talarys.vercel.app
+0.0.0.0 netzeero.weebly.com
+0.0.0.0 netzero-webmail-109987.weeblysite.com
+0.0.0.0 netzeroinfo.weebly.com
+0.0.0.0 next-airbnb-clone-sage.vercel.app
+0.0.0.0 nft-lift9.vercel.app
+0.0.0.0 nihaalxz.github.io
+0.0.0.0 nodeconnectdapp.pages.dev
+0.0.0.0 nordicwalkingcadiz.com
+0.0.0.0 notificationcentenooooo.weebly.com
+0.0.0.0 notify-suspicious-activity.vercel.app
+0.0.0.0 nsrocawsso.duckdns.org
+0.0.0.0 ntlworldupdatemail.weebly.com
+0.0.0.0 nuplaqsdmkd.weebly.com
+0.0.0.0 nurnjjdsqs.duckdns.org
+0.0.0.0 o08ofobnw.top
+0.0.0.0 oatt745.wixsite.com
+0.0.0.0 office-techservice.com
+0.0.0.0 ortakoyescortum.site
+0.0.0.0 outlook-loginsecurity.com
+0.0.0.0 outlookcode22.weebly.com
+0.0.0.0 pagedoc65.pages.dev
+0.0.0.0 pay-pay-pay-loop-jp.replit.app
+0.0.0.0 pedidosnozapp.com.br
+0.0.0.0 pianorollcenter.com
+0.0.0.0 pop.spotifycloning1.freewebhostmost.com
+0.0.0.0 privateservicehsb.com
+0.0.0.0 privatroom79.pages.dev
+0.0.0.0 project-delta-brown.vercel.app
+0.0.0.0 pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev
+0.0.0.0 pub-e2c2179ca4e5490390f8741af2335633.r2.dev
+0.0.0.0 pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev
+0.0.0.0 pupstoken-whitelist.pages.dev
+0.0.0.0 purple039053.studio.site
+0.0.0.0 qiyee163.com
+0.0.0.0 qnnbbbfinannnsbannk.vercel.app
+0.0.0.0 quickmailservice331516277272772.weebly.com
+0.0.0.0 qvegy.top
+0.0.0.0 rakindotcom.github.io
+0.0.0.0 rana-renthotel-example.vercel.app
+0.0.0.0 react-netflix-delta.vercel.app
+0.0.0.0 recognition-badge.netlify.app
+0.0.0.0 refundpay.weebly.com
+0.0.0.0 reply-notify-bussiness.com
+0.0.0.0 resilient-cendol-b21196.netlify.app
+0.0.0.0 review-business-case.d1t75tji1kkg4p.amplifyapp.com
+0.0.0.0 reviewpage11.github.io
+0.0.0.0 rgpih.top
+0.0.0.0 rn.airenren.vip
+0.0.0.0 robertvilliardhousing.weebly.com
+0.0.0.0 rosamz123.github.io
+0.0.0.0 saaveiices.weebly.com
+0.0.0.0 safetystaying.homes
+0.0.0.0 salofenushigo.weebly.com
+0.0.0.0 savedfilters.top
+0.0.0.0 sbcgloballane.weebly.com
+0.0.0.0 secure.qqp.zle.temporary.site
+0.0.0.0 securepageatt.weebly.com
+0.0.0.0 securingmyledger.com
+0.0.0.0 seller.shop-line.vip
+0.0.0.0 senmeitefs.com
+0.0.0.0 server.2rk3.com
+0.0.0.0 server.h74w.com
+0.0.0.0 server.n6b8.com
+0.0.0.0 server.wyq6.com
+0.0.0.0 service.santander.de
+0.0.0.0 servicecoinwallet.live
+0.0.0.0 seviiceess.weebly.com
+0.0.0.0 sg3.xbenihime.us.kg
+0.0.0.0 shaerepointt.weebly.com
+0.0.0.0 shaw-101433.weeblysite.com
+0.0.0.0 shaw-102890.weeblysite.com
+0.0.0.0 shaw-104426.weeblysite.com
+0.0.0.0 shaw-105083.weeblysite.com
+0.0.0.0 shaw-105713.weeblysite.com
+0.0.0.0 shaw-105802.weeblysite.com
+0.0.0.0 shaw-105983.weeblysite.com
+0.0.0.0 shaw-106114.weeblysite.com
+0.0.0.0 shaw-107218.weeblysite.com
+0.0.0.0 shaw-107259.weeblysite.com
+0.0.0.0 shawvalidation.weebly.com
+0.0.0.0 shimmering-star-epoch.glitch.me
+0.0.0.0 shopee.gotback9898.cc
+0.0.0.0 shoppingwithdiscount.top
+0.0.0.0 shoptkoo.com
+0.0.0.0 side-revshares.pages.dev
+0.0.0.0 signiatdynamatz.weebly.com
+0.0.0.0 sjc.hgp.mybluehost.me
+0.0.0.0 skybestservice.wixsite.com
+0.0.0.0 skyserviv.weebly.com
+0.0.0.0 smartwalletcoin-sync.pages.dev
+0.0.0.0 smartwebdapp.pages.dev
+0.0.0.0 smtp.spotifyprojectyash.freewebhostmost.com
+0.0.0.0 souwttillupa-4199.vercel.app
+0.0.0.0 soygrupoelite.com
+0.0.0.0 spotify-inspired-music-player-online.freewebhostmost.com
+0.0.0.0 spotify.constantine.dev
+0.0.0.0 spotify7972.freewebhostmost.com
+0.0.0.0 spotifyclonebyrk.freewebhostmost.com
+0.0.0.0 spotifywithyash.freewebhostmost.com
+0.0.0.0 srvamch.in
+0.0.0.0 staemcommunnutty.com
+0.0.0.0 start-trazor-page.github.io
+0.0.0.0 steamcommmuty.com
+0.0.0.0 sukien.pubgm.shop
+0.0.0.0 support-uk-cshelp-personal.getit.ink
+0.0.0.0 systemserveerr.weebly.com
+0.0.0.0 talentbegins.com
+0.0.0.0 tapnm.top
+0.0.0.0 tekbotavi.pro
+0.0.0.0 telagram.vip
+0.0.0.0 telegiramv.fit
+0.0.0.0 telegram--hk.com
+0.0.0.0 telegram-datingfree-sex.pages.dev
+0.0.0.0 telegrambot-rectify.pages.dev
+0.0.0.0 telegrambotsmart-solution.pages.dev
+0.0.0.0 telegramis.work
+0.0.0.0 telegrcm.ing
+0.0.0.0 telergom.vip
+0.0.0.0 tellegram.dmrtaxes.com
+0.0.0.0 telpqgram.bocekilacla.com
+0.0.0.0 telstra-101853.weeblysite.com
+0.0.0.0 telstra-102223.weeblysite.com
+0.0.0.0 telstra-102841.weeblysite.com
+0.0.0.0 telstra-104158.weeblysite.com
+0.0.0.0 telstra-105309.weeblysite.com
+0.0.0.0 telstra-106488.weeblysite.com
+0.0.0.0 telstra-106877.weeblysite.com
+0.0.0.0 telstra-107132.weeblysite.com
+0.0.0.0 telstra-108365.weeblysite.com
+0.0.0.0 telstra-109995.weeblysite.com
+0.0.0.0 temp-jledxoxqawgkocyshafr.webadorsite.com
+0.0.0.0 tether-app.org
+0.0.0.0 tether-zh.org
+0.0.0.0 tfggfdfgddhs.weebly.com
+0.0.0.0 tg.m-tslegram.top
+0.0.0.0 thofx.top
+0.0.0.0 tik-tok.cam
+0.0.0.0 tiktok897.com
+0.0.0.0 tiktokshopmallc.com
+0.0.0.0 tkbuymarket.xyz
+0.0.0.0 tkvipshop.top
+0.0.0.0 tlktok.me
+0.0.0.0 tlktokshop.tw
+0.0.0.0 toinec.net
+0.0.0.0 tr.alertsgame.ru
+0.0.0.0 trackyourpackageusps.blogspot.de
+0.0.0.0 trezzorwallle.azurewebsites.net
+0.0.0.0 trxdapbundle.pages.dev
+0.0.0.0 trzure-en-suite.pages.dev
+0.0.0.0 ttk169.shop
+0.0.0.0 tyuytrecurrently.weebly.com
+0.0.0.0 ui-clone-neon.vercel.app
+0.0.0.0 uijkr8f89oerfjncy78fo.weebly.com
+0.0.0.0 ujjewmanskdeoiskedn.weebly.com
+0.0.0.0 unusualaccountcnfrmpages.github.io
+0.0.0.0 updatemymailbox246346253662.weebly.com
+0.0.0.0 uqei112ao.top
+0.0.0.0 useridteleku.com
+0.0.0.0 usps.com-tarpocev.top
+0.0.0.0 usps.com-tarpoiev.top
+0.0.0.0 uspsservicetrack.blogspot.de
+0.0.0.0 uspsservicetrack.blogspot.it
+0.0.0.0 uspssmartparcellocker.tech
+0.0.0.0 uspssmartparcellockers.tech
+0.0.0.0 utkepp.top
+0.0.0.0 v2-pancakeswap.github.io
+0.0.0.0 vedi.94-141-120-29.cprapid.com
+0.0.0.0 veloxs-invite.com
+0.0.0.0 verify-page-submit-here.vercel.app
+0.0.0.0 voii11cfx.mmm.page
+0.0.0.0 walletconnect-web3.vercel.app
+0.0.0.0 weasdrty.wixsite.com
+0.0.0.0 web-cqxarjotd-uniswap.vercel.app
+0.0.0.0 webdenet.weebly.com
+0.0.0.0 welsfag-blog.vercel.app
+0.0.0.0 wesrdtcfdzse5d6tfuvjdtufyi.weebly.com
+0.0.0.0 woodplc.dogfriendlytahoe.com
+0.0.0.0 wqsac.icu
+0.0.0.0 www-blockchain-fi-auth.vercel.app
+0.0.0.0 wxltx.com
+0.0.0.0 xhrcu.top
+0.0.0.0 xn--mnta-5q5a.network
+0.0.0.0 y06gwc.webwave.dev
+0.0.0.0 yahpi.com
+0.0.0.0 yahpn.com
+0.0.0.0 yondasatt.weebly.com
+0.0.0.0 yufreittavassu-6526.vercel.app
+0.0.0.0 yusdydsfjuuxx.weebly.com
+0.0.0.0 zapqf.top
+0.0.0.0 zcytjs.com
+0.0.0.0 zecra.top
+0.0.0.0 zgyxzggk.top
+0.0.0.0 zlip.net
+0.0.0.0 zvuhs.top
diff --git a/phishing-filter-hosts.txt.br b/phishing-filter-hosts.txt.br
new file mode 100644
index 000000000..20a4b98c3
Binary files /dev/null and b/phishing-filter-hosts.txt.br differ
diff --git a/phishing-filter-hosts.txt.gz b/phishing-filter-hosts.txt.gz
new file mode 100644
index 000000000..12d8916d7
Binary files /dev/null and b/phishing-filter-hosts.txt.gz differ
diff --git a/phishing-filter-rpz.conf b/phishing-filter-rpz.conf
new file mode 100644
index 000000000..8b6585009
--- /dev/null
+++ b/phishing-filter-rpz.conf
@@ -0,0 +1,483 @@
+; Title: Phishing Domains RPZ Blocklist
+; Updated: 2024-11-22T12:07:59Z
+; Expires: 1 day (update frequency)
+; Homepage: https://gitlab.com/malware-filter/phishing-filter
+; License: https://gitlab.com/malware-filter/phishing-filter#license
+; Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+
+$TTL 30
+@ IN SOA rpz.curben.gitlab.io. hostmaster.rpz.curben.gitlab.io. 1732277279 86400 3600 604800 30
+ NS localhost.
+
+073202.com CNAME .
+0xugiw6pb.top CNAME .
+11muskansingh.github.io CNAME .
+130365.vip CNAME .
+21403590.cc CNAME .
+2366xyx.com CNAME .
+25v05vtrg.top CNAME .
+365.915sj1.xyz CNAME .
+498291975887803508.weebly.com CNAME .
+5510003.top CNAME .
+5510006.top CNAME .
+551005.me CNAME .
+551008.me CNAME .
+57365ee.cc CNAME .
+657226703365.com CNAME .
+6bet938.com CNAME .
+8904701.cc CNAME .
+909338844400.weebly.com CNAME .
+965009.com CNAME .
+98f63c2a712e05fbeccf379de02ec9a5.88110.co CNAME .
+a0omer.webwave.dev CNAME .
+aaloo.kiwiground.top CNAME .
+abueme-96e1.ehnelacsrralo.workers.dev CNAME .
+accountuserlogin.github.io CNAME .
+accshomecnfrm0log.github.io CNAME .
+adminuser.yw2201.xyz CNAME .
+agenciaancla.com.ar CNAME .
+airbnb-clone-one-chi.vercel.app CNAME .
+allegro-400.com CNAME .
+amazon-clone88.netlify.app CNAME .
+amazonclonebysid.netlify.app CNAME .
+amazons-help-cx-number.pages.dev CNAME .
+anshbotzone.com CNAME .
+anshidmuhmd.github.io CNAME .
+anuarw.kz CNAME .
+app.liquidations-aave.com CNAME .
+app.paxful87.com CNAME .
+app.sandbox.custombrandedboxesbyfedex.com CNAME .
+appeal-solve-violation-review.vercel.app CNAME .
+apri.94-141-120-29.cprapid.com CNAME .
+apwmensdjyeurir.weebly.com CNAME .
+arbnb-clone.vercel.app CNAME .
+arvestcd.embarkdigitalonboarding.com CNAME .
+arvestrewardscard.embarkdigitalonboarding.com CNAME .
+atbdgtehomeupdateform.weebly.com CNAME .
+atftt.weebly.com CNAME .
+atlgnrnewt.weebly.com CNAME .
+atlnes.icu CNAME .
+atmailupdateformeupdaterltdfdinfomailacct.weebly.com CNAME .
+atmailupdateformeupdatesbhtdinfomailacct.weebly.com CNAME .
+att-100081.weeblysite.com CNAME .
+att-102549.weeblysite.com CNAME .
+att-102856.weeblysite.com CNAME .
+att-10386990.weeblysite.com CNAME .
+att-106249.weeblysite.com CNAME .
+att-108680.weeblysite.com CNAME .
+att-109026.weeblysite.com CNAME .
+attadm977222.weebly.com CNAME .
+attcom-105588.weeblysite.com CNAME .
+attcom-107224.weeblysite.com CNAME .
+attconsultint.weebly.com CNAME .
+attflyupdateserver.weebly.com CNAME .
+attglobalwild.weebly.com CNAME .
+attmaill0gin2341.weebly.com CNAME .
+attnationameritechie.weebly.com CNAME .
+attserverupdatedmailbox.weebly.com CNAME .
+attt-107147.weeblysite.com CNAME .
+b.3656240205.vip CNAME .
+b12thgst9.weeblysite.com CNAME .
+b35ppp.com CNAME .
+b35sss.com CNAME .
+b45017.com CNAME .
+b45020.com CNAME .
+bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link CNAME .
+bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link CNAME .
+bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link CNAME .
+bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link CNAME .
+bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link CNAME .
+bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link CNAME .
+bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link CNAME .
+bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link CNAME .
+bancolombia.supportmaven.ai CNAME .
+bansos-2jt.get-regist.com CNAME .
+bbtryr.com CNAME .
+bentdynamicslm.com CNAME .
+bestorrogames.com CNAME .
+bet365ce.com CNAME .
+bet6205365.com CNAME .
+bet63035.com CNAME .
+bet83067.com CNAME .
+blajowet.cyou CNAME .
+braxapressaje-9251.vercel.app CNAME .
+bronm0.wixsite.com CNAME .
+bryfhdjffgc.weebly.com CNAME .
+bt-100831.weeblysite.com CNAME .
+bt-103187.weeblysite.com CNAME .
+bt-107510.weeblysite.com CNAME .
+btinternet-108597.weeblysite.com CNAME .
+btinternet18282.weebly.com CNAME .
+business-meta-center.com CNAME .
+byzhxx.com CNAME .
+c0nfrmpgsacc.github.io CNAME .
+cancel-binance.com CNAME .
+caracoliresidencial.com CNAME .
+cek-voucher.earth.web.id CNAME .
+cernifg359.cyou CNAME .
+chase-bank-one.vercel.app CNAME .
+chilly.makeup CNAME .
+china-link.pages.dev CNAME .
+chinnurpk.github.io CNAME .
+cibcgg.com CNAME .
+cmenvivo.github.io CNAME .
+codapay.events-games.com CNAME .
+coin-bosepro-log.godaddysites.com CNAME .
+coinbase-com-66117.danschaffert66529.workers.dev CNAME .
+communitycasesreviewlist.web.app CNAME .
+conennectakasd.b-cdn.net CNAME .
+conn-twallt.gitbook.io CNAME .
+correctingservicesalakks.pages.dev CNAME .
+credito-prestamos.fra1.zeabur.app CNAME .
+currently4988.weebly.com CNAME .
+currently6510.weebly.com CNAME .
+currently810.weebly.com CNAME .
+currently8711.weebly.com CNAME .
+currentlyatt04.weebly.com CNAME .
+currentlyatt223.weebly.com CNAME .
+currentlyatt468.weebly.com CNAME .
+currentlyatt7891.weebly.com CNAME .
+currentlyatt9854.weebly.com CNAME .
+currentlyattyaho85748.weebly.com CNAME .
+currentlyattyahoo6check.weebly.com CNAME .
+customersupportteam.serveusers.com CNAME .
+cv.geldmagazin.de CNAME .
+cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br CNAME .
+cwgml.top CNAME .
+d551000.cc CNAME .
+dappprompty.pages.dev CNAME .
+datingteles3x.netlify.app CNAME .
+debank-w.github.io CNAME .
+decenlaunchpad.pages.dev CNAME .
+demo.dynamicsolutionit.com CNAME .
+desktoptg.com CNAME .
+dev-0014021997322.pantheonsite.io CNAME .
+dev-102030654785555551.pantheonsite.io CNAME .
+dhl.ijpcr.net.in CNAME .
+dhlexpress.hu CNAME .
+djelp.top CNAME .
+dknrutkslsjf.weebly.com CNAME .
+dkrjjhrjemfkj.weeblysite.com CNAME .
+doccvview.buzz CNAME .
+docu-auth-5775940568.bb-abogados.com CNAME .
+doujeucrumoufau-8054.vercel.app CNAME .
+dropboxubdkw.weebly.com CNAME .
+duysysysh.weebly.com CNAME .
+eagbid.ru.com CNAME .
+ebay.ebayshoo.com CNAME .
+ebdaf.top CNAME .
+ejnapxqitd.cfolks.pl CNAME .
+elitefortnit.github.io CNAME .
+emailnoticeie.weebly.com CNAME .
+enforce-user-guidelines.vercel.app CNAME .
+erdtgyur57t6gyu.weebly.com CNAME .
+error3457uypcold.azurewebsites.net CNAME .
+eryiurgygeyigegh.weeblysite.com CNAME .
+eshop-eu.care.cps-partnersnp.de CNAME .
+ethereum-apple.org CNAME .
+evenstagservices.com CNAME .
+facebook-loginpage-clone.vercel.app CNAME .
+facebook-web.cloudns.be CNAME .
+faenl.top CNAME .
+fb-login-clone.vercel.app CNAME .
+feline-full-stick.glitch.me CNAME .
+fhger75gfg2fff.top CNAME .
+finityrrr.weebly.com CNAME .
+flngf.top CNAME .
+form-policy-appeal-k2d7nf.vercel.app CNAME .
+form-policy-appeal-k2x7nf.vercel.app CNAME .
+free-5476373.webadorsite.com CNAME .
+free-5481257.webadorsite.com CNAME .
+free-5562390.webadorsite.com CNAME .
+freevideomelayu.tme-viral.link CNAME .
+gasbot-demos.vercel.app CNAME .
+ggdhjssu7.wixsite.com CNAME .
+ghaho.vercel.app CNAME .
+gheedfhj.weebly.com CNAME .
+ghshbv.wixsite.com CNAME .
+global-reward.kraftonevent.com CNAME .
+gnaneshwarreddybaitinti.github.io CNAME .
+gnktan.top CNAME .
+goteleg-br.top CNAME .
+gradeis.info CNAME .
+help-manage-center.com CNAME .
+heriodj.shop CNAME .
+hermiovz-bustling-sled.glitch.me CNAME .
+hobitronik.com CNAME .
+home-100383.weeblysite.com CNAME .
+home-100489.weeblysite.com CNAME .
+home-101941.weeblysite.com CNAME .
+home-102517.weeblysite.com CNAME .
+home-104101.weeblysite.com CNAME .
+home-104529.weeblysite.com CNAME .
+home-104657.weeblysite.com CNAME .
+iemnswgehdporlkf.weebly.com CNAME .
+iik-3100-2023-spear-phishing-login-page.vercel.app CNAME .
+imtikem.vip CNAME .
+imtoken-iim.org CNAME .
+institutodentalsante.com.br CNAME .
+interface-beta-eight.vercel.app CNAME .
+it-outlookwebaccess.com CNAME .
+itklkaklkakk.weebly.com CNAME .
+jaiganeshmachinery.com CNAME .
+jdkajsmxncbeuwie.weebly.com CNAME .
+jfnjkfvbhjvdc.weebly.com CNAME .
+jfvfbremdkf50nhfgs.weeblysite.com CNAME .
+jhyuj.weebly.com CNAME .
+jinqiao114.com CNAME .
+join-mywhatsapp-2sa.pages.dev CNAME .
+jttyavc.com CNAME .
+juno-100024.weeblysite.com CNAME .
+juno-102431.square.site CNAME .
+junoytremauilkdfh.weebly.com CNAME .
+jxzipper.com CNAME .
+jzhemuni-logun.godaddysites.com CNAME .
+jzyl669.net CNAME .
+khdny.top CNAME .
+learn-trzor-start.github.io CNAME .
+ledger-com-updatefirmware.aparecidovisentin.com.br CNAME .
+ledger-com-upgrade.gezix.com.tr CNAME .
+ledger-confirm.com CNAME .
+ledgerhardwarehelp.com CNAME .
+ledgersafetyplatform.com CNAME .
+ledqinlv.com CNAME .
+loggmaskemttaa.godaddysites.com CNAME .
+login-midstreams-outlook.us CNAME .
+login.94-141-120-29.cprapid.com CNAME .
+loginhomeinbox.com CNAME .
+loginscreen-att-108245.weeblysite.com CNAME .
+lojer-vohex84.vercel.app CNAME .
+lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br CNAME .
+lttcloudvpn.pages.dev CNAME .
+m-telegrm.cc CNAME .
+m.amazontech.cc CNAME .
+m.key5188.com CNAME .
+mail-admin-102219.weeblysite.com CNAME .
+mail-securities.square.site CNAME .
+mail.apri.94-141-120-29.cprapid.com CNAME .
+mail.spotifyyclonne.freewebhostmost.com CNAME .
+mailboxspheretoday.weebly.com CNAME .
+mailhomebox-8096940.weeblysite.com CNAME .
+mailserverreservoir.weebly.com CNAME .
+malonlineservce12.weebly.com CNAME .
+managementbusinessrequiredaza.weebly.com CNAME .
+manorders.com CNAME .
+marketplace-center-checkitem-supp0rt-now-business.click CNAME .
+megadropclaim.com CNAME .
+met-aa-mass-klog-in.godaddysites.com CNAME .
+metamagskloin.gitbook.io CNAME .
+metamask-web.vercel.app CNAME .
+metameasklin.gitbook.io CNAME .
+metamsk-wallet-3.gitbook.io CNAME .
+metamuscklog.godaddysites.com CNAME .
+metau-maasck-loogiin.godaddysites.com CNAME .
+metawallet-server.vercel.app CNAME .
+metmassk-usalloggies.godaddysites.com CNAME .
+microsofstonline.com CNAME .
+micsoft.phishone.com CNAME .
+midjourneyex.com CNAME .
+mikam76544444.weebly.com CNAME .
+morsaglobal.com CNAME .
+mozp.ubjoubj.shop CNAME .
+multichaintool.netlify.app CNAME .
+myvalue365.com CNAME .
+navi-airbnb.vercel.app CNAME .
+nerve.black CNAME .
+netflix-clone-frontend-flax.vercel.app CNAME .
+netflix-clone-ml.vercel.app CNAME .
+netflix-lite-one.vercel.app CNAME .
+netflix-talarys.vercel.app CNAME .
+netzeero.weebly.com CNAME .
+netzero-webmail-109987.weeblysite.com CNAME .
+netzeroinfo.weebly.com CNAME .
+next-airbnb-clone-sage.vercel.app CNAME .
+nft-lift9.vercel.app CNAME .
+nihaalxz.github.io CNAME .
+nodeconnectdapp.pages.dev CNAME .
+nordicwalkingcadiz.com CNAME .
+notificationcentenooooo.weebly.com CNAME .
+notify-suspicious-activity.vercel.app CNAME .
+nsrocawsso.duckdns.org CNAME .
+ntlworldupdatemail.weebly.com CNAME .
+nuplaqsdmkd.weebly.com CNAME .
+nurnjjdsqs.duckdns.org CNAME .
+o08ofobnw.top CNAME .
+oatt745.wixsite.com CNAME .
+office-techservice.com CNAME .
+ortakoyescortum.site CNAME .
+outlook-loginsecurity.com CNAME .
+outlookcode22.weebly.com CNAME .
+pagedoc65.pages.dev CNAME .
+pay-pay-pay-loop-jp.replit.app CNAME .
+pedidosnozapp.com.br CNAME .
+pianorollcenter.com CNAME .
+pop.spotifycloning1.freewebhostmost.com CNAME .
+privateservicehsb.com CNAME .
+privatroom79.pages.dev CNAME .
+project-delta-brown.vercel.app CNAME .
+pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev CNAME .
+pub-e2c2179ca4e5490390f8741af2335633.r2.dev CNAME .
+pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev CNAME .
+pupstoken-whitelist.pages.dev CNAME .
+purple039053.studio.site CNAME .
+qiyee163.com CNAME .
+qnnbbbfinannnsbannk.vercel.app CNAME .
+quickmailservice331516277272772.weebly.com CNAME .
+qvegy.top CNAME .
+rakindotcom.github.io CNAME .
+rana-renthotel-example.vercel.app CNAME .
+react-netflix-delta.vercel.app CNAME .
+recognition-badge.netlify.app CNAME .
+refundpay.weebly.com CNAME .
+reply-notify-bussiness.com CNAME .
+resilient-cendol-b21196.netlify.app CNAME .
+review-business-case.d1t75tji1kkg4p.amplifyapp.com CNAME .
+reviewpage11.github.io CNAME .
+rgpih.top CNAME .
+rn.airenren.vip CNAME .
+robertvilliardhousing.weebly.com CNAME .
+rosamz123.github.io CNAME .
+saaveiices.weebly.com CNAME .
+safetystaying.homes CNAME .
+salofenushigo.weebly.com CNAME .
+savedfilters.top CNAME .
+sbcgloballane.weebly.com CNAME .
+secure.qqp.zle.temporary.site CNAME .
+securepageatt.weebly.com CNAME .
+securingmyledger.com CNAME .
+seller.shop-line.vip CNAME .
+senmeitefs.com CNAME .
+server.2rk3.com CNAME .
+server.h74w.com CNAME .
+server.n6b8.com CNAME .
+server.wyq6.com CNAME .
+service.santander.de CNAME .
+servicecoinwallet.live CNAME .
+seviiceess.weebly.com CNAME .
+sg3.xbenihime.us.kg CNAME .
+shaerepointt.weebly.com CNAME .
+shaw-101433.weeblysite.com CNAME .
+shaw-102890.weeblysite.com CNAME .
+shaw-104426.weeblysite.com CNAME .
+shaw-105083.weeblysite.com CNAME .
+shaw-105713.weeblysite.com CNAME .
+shaw-105802.weeblysite.com CNAME .
+shaw-105983.weeblysite.com CNAME .
+shaw-106114.weeblysite.com CNAME .
+shaw-107218.weeblysite.com CNAME .
+shaw-107259.weeblysite.com CNAME .
+shawvalidation.weebly.com CNAME .
+shimmering-star-epoch.glitch.me CNAME .
+shopee.gotback9898.cc CNAME .
+shoppingwithdiscount.top CNAME .
+shoptkoo.com CNAME .
+side-revshares.pages.dev CNAME .
+signiatdynamatz.weebly.com CNAME .
+sjc.hgp.mybluehost.me CNAME .
+skybestservice.wixsite.com CNAME .
+skyserviv.weebly.com CNAME .
+smartwalletcoin-sync.pages.dev CNAME .
+smartwebdapp.pages.dev CNAME .
+smtp.spotifyprojectyash.freewebhostmost.com CNAME .
+souwttillupa-4199.vercel.app CNAME .
+soygrupoelite.com CNAME .
+spotify-inspired-music-player-online.freewebhostmost.com CNAME .
+spotify.constantine.dev CNAME .
+spotify7972.freewebhostmost.com CNAME .
+spotifyclonebyrk.freewebhostmost.com CNAME .
+spotifywithyash.freewebhostmost.com CNAME .
+srvamch.in CNAME .
+staemcommunnutty.com CNAME .
+start-trazor-page.github.io CNAME .
+steamcommmuty.com CNAME .
+sukien.pubgm.shop CNAME .
+support-uk-cshelp-personal.getit.ink CNAME .
+systemserveerr.weebly.com CNAME .
+talentbegins.com CNAME .
+tapnm.top CNAME .
+tekbotavi.pro CNAME .
+telagram.vip CNAME .
+telegiramv.fit CNAME .
+telegram--hk.com CNAME .
+telegram-datingfree-sex.pages.dev CNAME .
+telegrambot-rectify.pages.dev CNAME .
+telegrambotsmart-solution.pages.dev CNAME .
+telegramis.work CNAME .
+telegrcm.ing CNAME .
+telergom.vip CNAME .
+tellegram.dmrtaxes.com CNAME .
+telpqgram.bocekilacla.com CNAME .
+telstra-101853.weeblysite.com CNAME .
+telstra-102223.weeblysite.com CNAME .
+telstra-102841.weeblysite.com CNAME .
+telstra-104158.weeblysite.com CNAME .
+telstra-105309.weeblysite.com CNAME .
+telstra-106488.weeblysite.com CNAME .
+telstra-106877.weeblysite.com CNAME .
+telstra-107132.weeblysite.com CNAME .
+telstra-108365.weeblysite.com CNAME .
+telstra-109995.weeblysite.com CNAME .
+temp-jledxoxqawgkocyshafr.webadorsite.com CNAME .
+tether-app.org CNAME .
+tether-zh.org CNAME .
+tfggfdfgddhs.weebly.com CNAME .
+tg.m-tslegram.top CNAME .
+thofx.top CNAME .
+tik-tok.cam CNAME .
+tiktok897.com CNAME .
+tiktokshopmallc.com CNAME .
+tkbuymarket.xyz CNAME .
+tkvipshop.top CNAME .
+tlktok.me CNAME .
+tlktokshop.tw CNAME .
+toinec.net CNAME .
+tr.alertsgame.ru CNAME .
+trackyourpackageusps.blogspot.de CNAME .
+trezzorwallle.azurewebsites.net CNAME .
+trxdapbundle.pages.dev CNAME .
+trzure-en-suite.pages.dev CNAME .
+ttk169.shop CNAME .
+tyuytrecurrently.weebly.com CNAME .
+ui-clone-neon.vercel.app CNAME .
+uijkr8f89oerfjncy78fo.weebly.com CNAME .
+ujjewmanskdeoiskedn.weebly.com CNAME .
+unusualaccountcnfrmpages.github.io CNAME .
+updatemymailbox246346253662.weebly.com CNAME .
+uqei112ao.top CNAME .
+useridteleku.com CNAME .
+usps.com-tarpocev.top CNAME .
+usps.com-tarpoiev.top CNAME .
+uspsservicetrack.blogspot.de CNAME .
+uspsservicetrack.blogspot.it CNAME .
+uspssmartparcellocker.tech CNAME .
+uspssmartparcellockers.tech CNAME .
+utkepp.top CNAME .
+v2-pancakeswap.github.io CNAME .
+vedi.94-141-120-29.cprapid.com CNAME .
+veloxs-invite.com CNAME .
+verify-page-submit-here.vercel.app CNAME .
+voii11cfx.mmm.page CNAME .
+walletconnect-web3.vercel.app CNAME .
+weasdrty.wixsite.com CNAME .
+web-cqxarjotd-uniswap.vercel.app CNAME .
+webdenet.weebly.com CNAME .
+welsfag-blog.vercel.app CNAME .
+wesrdtcfdzse5d6tfuvjdtufyi.weebly.com CNAME .
+woodplc.dogfriendlytahoe.com CNAME .
+wqsac.icu CNAME .
+www-blockchain-fi-auth.vercel.app CNAME .
+wxltx.com CNAME .
+xhrcu.top CNAME .
+xn--mnta-5q5a.network CNAME .
+y06gwc.webwave.dev CNAME .
+yahpi.com CNAME .
+yahpn.com CNAME .
+yondasatt.weebly.com CNAME .
+yufreittavassu-6526.vercel.app CNAME .
+yusdydsfjuuxx.weebly.com CNAME .
+zapqf.top CNAME .
+zcytjs.com CNAME .
+zecra.top CNAME .
+zgyxzggk.top CNAME .
+zlip.net CNAME .
+zvuhs.top CNAME .
diff --git a/phishing-filter-rpz.conf.br b/phishing-filter-rpz.conf.br
new file mode 100644
index 000000000..3b0bff434
Binary files /dev/null and b/phishing-filter-rpz.conf.br differ
diff --git a/phishing-filter-rpz.conf.gz b/phishing-filter-rpz.conf.gz
new file mode 100644
index 000000000..49ba08c83
Binary files /dev/null and b/phishing-filter-rpz.conf.gz differ
diff --git a/phishing-filter-snort2.rules b/phishing-filter-snort2.rules
new file mode 100644
index 000000000..a37a71c07
--- /dev/null
+++ b/phishing-filter-snort2.rules
@@ -0,0 +1,493 @@
+# Title: Phishing URL Snort2 Ruleset
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"073202.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000001; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"0xugiw6pb.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000002; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"11muskansingh.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000003; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"130365.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000004; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"21403590.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000005; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"2366xyx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000006; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"25v05vtrg.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000007; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"365.915sj1.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000008; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"498291975887803508.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000009; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5510003.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000010; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"5510006.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000011; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"551005.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000012; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"551008.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000013; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"57365ee.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000014; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"657226703365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000015; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"6bet938.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000016; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"8904701.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000017; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"909338844400.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000018; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"965009.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000019; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"98f63c2a712e05fbeccf379de02ec9a5.88110.co"; content:"Host"; http_header; classtype:attempted-recon; sid:200000020; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"a0omer.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000021; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"aaloo.kiwiground.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000022; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"abueme-96e1.ehnelacsrralo.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000023; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accountuserlogin.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000024; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"accshomecnfrm0log.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000025; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"adminuser.yw2201.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000026; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"agenciaancla.com.ar"; content:"Host"; http_header; classtype:attempted-recon; sid:200000027; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"airbnb-clone-one-chi.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000028; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"allegro-400.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000029; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazon-clone88.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000030; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazonclonebysid.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000031; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"amazons-help-cx-number.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000032; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anshbotzone.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000033; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anshidmuhmd.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000034; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"anuarw.kz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000035; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.liquidations-aave.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000036; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.paxful87.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000037; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"app.sandbox.custombrandedboxesbyfedex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000038; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"appeal-solve-violation-review.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000039; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apri.94-141-120-29.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000040; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"apwmensdjyeurir.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000041; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arbnb-clone.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000042; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arvestcd.embarkdigitalonboarding.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000043; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"arvestrewardscard.embarkdigitalonboarding.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000044; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atbdgtehomeupdateform.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000045; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atftt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000046; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atlgnrnewt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000047; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atlnes.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000048; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atmailupdateformeupdaterltdfdinfomailacct.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000049; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"atmailupdateformeupdatesbhtdinfomailacct.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000050; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-100081.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000051; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102549.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000052; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-102856.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000053; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-10386990.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000054; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-106249.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000055; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-108680.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000056; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"att-109026.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000057; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attadm977222.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000058; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-105588.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000059; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attcom-107224.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000060; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attconsultint.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000061; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attflyupdateserver.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000062; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attglobalwild.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000063; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attmaill0gin2341.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000064; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attnationameritechie.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000065; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attserverupdatedmailbox.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000066; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"attt-107147.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000067; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b.3656240205.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000068; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b12thgst9.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000069; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b35ppp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000070; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b35sss.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000071; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b45017.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000072; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"b45020.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000073; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000074; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000075; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000076; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000077; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000078; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000079; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000080; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000081; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bancolombia.supportmaven.ai"; content:"Host"; http_header; classtype:attempted-recon; sid:200000082; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bansos-2jt.get-regist.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000083; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bbtryr.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000084; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bentdynamicslm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000085; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bestorrogames.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000086; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet365ce.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000087; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet6205365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000088; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet63035.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000089; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bet83067.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000090; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"blajowet.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000091; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"braxapressaje-9251.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000092; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bronm0.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000093; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bryfhdjffgc.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000094; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-100831.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000095; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-103187.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000096; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"bt-107510.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000097; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btinternet-108597.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000098; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"btinternet18282.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000099; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"business-meta-center.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000100; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"byzhxx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000101; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"c0nfrmpgsacc.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000102; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cancel-binance.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000103; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"caracoliresidencial.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000104; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cek-voucher.earth.web.id"; content:"Host"; http_header; classtype:attempted-recon; sid:200000105; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cernifg359.cyou"; content:"Host"; http_header; classtype:attempted-recon; sid:200000106; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chase-bank-one.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000107; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chilly.makeup"; content:"Host"; http_header; classtype:attempted-recon; sid:200000108; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"china-link.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000109; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"chinnurpk.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000110; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cibcgg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000111; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cmenvivo.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000112; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"codapay.events-games.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000113; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coin-bosepro-log.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000114; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"coinbase-com-66117.danschaffert66529.workers.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000115; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"communitycasesreviewlist.web.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000116; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"conennectakasd.b-cdn.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000117; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"conn-twallt.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000118; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"correctingservicesalakks.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000119; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"credito-prestamos.fra1.zeabur.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000120; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently4988.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000121; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently6510.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000122; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently810.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000123; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currently8711.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000124; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyatt04.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000125; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyatt223.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000126; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyatt468.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000127; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyatt7891.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000128; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyatt9854.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000129; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyattyaho85748.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000130; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"currentlyattyahoo6check.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000131; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"customersupportteam.serveusers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000132; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cv.geldmagazin.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000133; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000134; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"cwgml.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000135; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"d551000.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000136; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dappprompty.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000137; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"datingteles3x.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000138; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"debank-w.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000139; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"decenlaunchpad.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000140; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"demo.dynamicsolutionit.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000141; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"desktoptg.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000142; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-0014021997322.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000143; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dev-102030654785555551.pantheonsite.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000144; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhl.ijpcr.net.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200000145; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dhlexpress.hu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000146; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"djelp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000147; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dknrutkslsjf.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000148; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dkrjjhrjemfkj.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000149; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doccvview.buzz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000150; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"docu-auth-5775940568.bb-abogados.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000151; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"doujeucrumoufau-8054.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000152; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"dropboxubdkw.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000153; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"duysysysh.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000154; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eagbid.ru.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000155; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebay.ebayshoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000156; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ebdaf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000157; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ejnapxqitd.cfolks.pl"; content:"Host"; http_header; classtype:attempted-recon; sid:200000158; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"elitefortnit.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000159; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"emailnoticeie.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000160; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"enforce-user-guidelines.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000161; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"erdtgyur57t6gyu.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000162; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"error3457uypcold.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000163; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eryiurgygeyigegh.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000164; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"eshop-eu.care.cps-partnersnp.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000165; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ethereum-apple.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000166; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"evenstagservices.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000167; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-loginpage-clone.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000168; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"facebook-web.cloudns.be"; content:"Host"; http_header; classtype:attempted-recon; sid:200000169; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"faenl.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000170; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fb-login-clone.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000171; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"feline-full-stick.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000172; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"fhger75gfg2fff.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000173; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"finityrrr.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000174; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"flngf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000175; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"form-policy-appeal-k2d7nf.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000176; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"form-policy-appeal-k2x7nf.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000177; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-5476373.webadorsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000178; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-5481257.webadorsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000179; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"free-5562390.webadorsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000180; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"freevideomelayu.tme-viral.link"; content:"Host"; http_header; classtype:attempted-recon; sid:200000181; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gasbot-demos.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000182; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ggdhjssu7.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000183; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghaho.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000184; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gheedfhj.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000185; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ghshbv.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000186; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"global-reward.kraftonevent.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000187; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnaneshwarreddybaitinti.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000188; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gnktan.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000189; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"goteleg-br.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000190; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"gradeis.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000191; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"help-manage-center.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000192; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"heriodj.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000193; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hermiovz-bustling-sled.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000194; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"hobitronik.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000195; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-100383.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000196; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-100489.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000197; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-101941.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000198; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-102517.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000199; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-104101.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000200; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-104529.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000201; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"home-104657.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000202; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iemnswgehdporlkf.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000203; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"iik-3100-2023-spear-phishing-login-page.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000204; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imtikem.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000205; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"imtoken-iim.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000206; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"institutodentalsante.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000207; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"interface-beta-eight.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000208; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"it-outlookwebaccess.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000209; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"itklkaklkakk.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000210; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jaiganeshmachinery.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000211; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jdkajsmxncbeuwie.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000212; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jfnjkfvbhjvdc.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000213; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jfvfbremdkf50nhfgs.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000214; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jhyuj.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000215; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jinqiao114.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000216; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"join-mywhatsapp-2sa.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000217; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jttyavc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000218; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juno-100024.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000219; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"juno-102431.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000220; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"junoytremauilkdfh.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000221; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jxzipper.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000222; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jzhemuni-logun.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000223; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"jzyl669.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000224; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"khdny.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000225; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"learn-trzor-start.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000226; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ledger-com-updatefirmware.aparecidovisentin.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000227; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ledger-com-upgrade.gezix.com.tr"; content:"Host"; http_header; classtype:attempted-recon; sid:200000228; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ledger-confirm.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000229; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ledgerhardwarehelp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000230; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ledgersafetyplatform.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000231; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ledqinlv.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000232; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loggmaskemttaa.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000233; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login-midstreams-outlook.us"; content:"Host"; http_header; classtype:attempted-recon; sid:200000234; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"login.94-141-120-29.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000235; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginhomeinbox.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000236; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"loginscreen-att-108245.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000237; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lojer-vohex84.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000238; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000239; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"lttcloudvpn.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000240; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m-telegrm.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000241; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.amazontech.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000242; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"m.key5188.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000243; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-admin-102219.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000244; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail-securities.square.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000245; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.apri.94-141-120-29.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000246; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mail.spotifyyclonne.freewebhostmost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000247; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailboxspheretoday.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000248; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailhomebox-8096940.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000249; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mailserverreservoir.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000250; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"malonlineservce12.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000251; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"managementbusinessrequiredaza.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000252; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"manorders.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000253; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"marketplace-center-checkitem-supp0rt-now-business.click"; content:"Host"; http_header; classtype:attempted-recon; sid:200000254; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"megadropclaim.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000255; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"met-aa-mass-klog-in.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000256; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamagskloin.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000257; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamask-web.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000258; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metameasklin.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000259; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamsk-wallet-3.gitbook.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000260; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metamuscklog.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000261; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metau-maasck-loogiin.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000262; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metawallet-server.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000263; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"metmassk-usalloggies.godaddysites.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000264; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"microsofstonline.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000265; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"micsoft.phishone.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000266; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"midjourneyex.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000267; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mikam76544444.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000268; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"morsaglobal.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000269; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"mozp.ubjoubj.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000270; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"multichaintool.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000271; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"myvalue365.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000272; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"navi-airbnb.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000273; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nerve.black"; content:"Host"; http_header; classtype:attempted-recon; sid:200000274; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-clone-frontend-flax.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000275; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-clone-ml.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000276; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-lite-one.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000277; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netflix-talarys.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000278; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netzeero.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000279; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netzero-webmail-109987.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000280; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"netzeroinfo.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000281; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"next-airbnb-clone-sage.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000282; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nft-lift9.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000283; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nihaalxz.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000284; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nodeconnectdapp.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000285; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nordicwalkingcadiz.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000286; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notificationcentenooooo.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000287; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"notify-suspicious-activity.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000288; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nsrocawsso.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000289; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ntlworldupdatemail.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000290; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nuplaqsdmkd.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000291; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"nurnjjdsqs.duckdns.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000292; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"o08ofobnw.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000293; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"oatt745.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000294; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"office-techservice.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000295; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ortakoyescortum.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000296; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlook-loginsecurity.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000297; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"outlookcode22.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000298; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pagedoc65.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000299; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pay-pay-pay-loop-jp.replit.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000300; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pedidosnozapp.com.br"; content:"Host"; http_header; classtype:attempted-recon; sid:200000301; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pianorollcenter.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000302; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pop.spotifycloning1.freewebhostmost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000303; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"privateservicehsb.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000304; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"privatroom79.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000305; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"project-delta-brown.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000306; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000307; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pub-e2c2179ca4e5490390f8741af2335633.r2.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000308; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000309; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"pupstoken-whitelist.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000310; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"purple039053.studio.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000311; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qiyee163.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000312; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qnnbbbfinannnsbannk.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000313; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"quickmailservice331516277272772.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000314; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"qvegy.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000315; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rakindotcom.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000316; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rana-renthotel-example.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000317; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"react-netflix-delta.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000318; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"recognition-badge.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000319; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"refundpay.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000320; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reply-notify-bussiness.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000321; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"resilient-cendol-b21196.netlify.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000322; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"review-business-case.d1t75tji1kkg4p.amplifyapp.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000323; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"reviewpage11.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000324; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rgpih.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000325; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rn.airenren.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000326; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"robertvilliardhousing.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000327; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"rosamz123.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000328; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"saaveiices.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000329; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"safetystaying.homes"; content:"Host"; http_header; classtype:attempted-recon; sid:200000330; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"salofenushigo.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000331; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"savedfilters.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000332; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sbcgloballane.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000333; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"secure.qqp.zle.temporary.site"; content:"Host"; http_header; classtype:attempted-recon; sid:200000334; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securepageatt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000335; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"securingmyledger.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000336; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seller.shop-line.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000337; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"senmeitefs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000338; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.2rk3.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000339; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.h74w.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000340; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.n6b8.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000341; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"server.wyq6.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000342; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"service.santander.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000343; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"servicecoinwallet.live"; content:"Host"; http_header; classtype:attempted-recon; sid:200000344; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"seviiceess.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000345; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sg3.xbenihime.us.kg"; content:"Host"; http_header; classtype:attempted-recon; sid:200000346; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaerepointt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000347; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-101433.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000348; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-102890.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000349; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-104426.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000350; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-105083.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000351; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-105713.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000352; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-105802.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000353; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-105983.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000354; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-106114.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000355; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-107218.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000356; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shaw-107259.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000357; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shawvalidation.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000358; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shimmering-star-epoch.glitch.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000359; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shopee.gotback9898.cc"; content:"Host"; http_header; classtype:attempted-recon; sid:200000360; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shoppingwithdiscount.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000361; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"shoptkoo.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000362; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"side-revshares.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000363; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"signiatdynamatz.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000364; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sjc.hgp.mybluehost.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000365; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skybestservice.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000366; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"skyserviv.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000367; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smartwalletcoin-sync.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000368; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smartwebdapp.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000369; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"smtp.spotifyprojectyash.freewebhostmost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000370; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"souwttillupa-4199.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000371; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"soygrupoelite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000372; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spotify-inspired-music-player-online.freewebhostmost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000373; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spotify.constantine.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000374; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spotify7972.freewebhostmost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000375; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spotifyclonebyrk.freewebhostmost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000376; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"spotifywithyash.freewebhostmost.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000377; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"srvamch.in"; content:"Host"; http_header; classtype:attempted-recon; sid:200000378; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"staemcommunnutty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000379; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"start-trazor-page.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000380; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"steamcommmuty.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000381; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"sukien.pubgm.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000382; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"support-uk-cshelp-personal.getit.ink"; content:"Host"; http_header; classtype:attempted-recon; sid:200000383; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"systemserveerr.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000384; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"talentbegins.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000385; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tapnm.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000386; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tekbotavi.pro"; content:"Host"; http_header; classtype:attempted-recon; sid:200000387; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telagram.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000388; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegiramv.fit"; content:"Host"; http_header; classtype:attempted-recon; sid:200000389; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegram--hk.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000390; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegram-datingfree-sex.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000391; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrambot-rectify.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000392; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrambotsmart-solution.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000393; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegramis.work"; content:"Host"; http_header; classtype:attempted-recon; sid:200000394; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telegrcm.ing"; content:"Host"; http_header; classtype:attempted-recon; sid:200000395; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telergom.vip"; content:"Host"; http_header; classtype:attempted-recon; sid:200000396; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tellegram.dmrtaxes.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000397; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telpqgram.bocekilacla.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000398; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-101853.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000399; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-102223.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000400; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-102841.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000401; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-104158.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000402; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-105309.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000403; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-106488.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000404; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-106877.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000405; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-107132.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000406; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-108365.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000407; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"telstra-109995.weeblysite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000408; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"temp-jledxoxqawgkocyshafr.webadorsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000409; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tether-app.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000410; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tether-zh.org"; content:"Host"; http_header; classtype:attempted-recon; sid:200000411; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tfggfdfgddhs.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000412; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tg.m-tslegram.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000413; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"thofx.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000414; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tik-tok.cam"; content:"Host"; http_header; classtype:attempted-recon; sid:200000415; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiktok897.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000416; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tiktokshopmallc.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000417; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tkbuymarket.xyz"; content:"Host"; http_header; classtype:attempted-recon; sid:200000418; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tkvipshop.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000419; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tlktok.me"; content:"Host"; http_header; classtype:attempted-recon; sid:200000420; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tlktokshop.tw"; content:"Host"; http_header; classtype:attempted-recon; sid:200000421; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"toinec.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000422; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tr.alertsgame.ru"; content:"Host"; http_header; classtype:attempted-recon; sid:200000423; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trackyourpackageusps.blogspot.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000424; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trezzorwallle.azurewebsites.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000425; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trxdapbundle.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000426; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"trzure-en-suite.pages.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000427; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ttk169.shop"; content:"Host"; http_header; classtype:attempted-recon; sid:200000428; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"tyuytrecurrently.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000429; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ui-clone-neon.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000430; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uijkr8f89oerfjncy78fo.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000431; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"ujjewmanskdeoiskedn.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000432; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"unusualaccountcnfrmpages.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000433; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"updatemymailbox246346253662.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000434; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uqei112ao.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000435; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"useridteleku.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000436; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tarpocev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000437; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"usps.com-tarpoiev.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000438; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsservicetrack.blogspot.de"; content:"Host"; http_header; classtype:attempted-recon; sid:200000439; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspsservicetrack.blogspot.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200000440; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspssmartparcellocker.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200000441; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"uspssmartparcellockers.tech"; content:"Host"; http_header; classtype:attempted-recon; sid:200000442; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"utkepp.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000443; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"v2-pancakeswap.github.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000444; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"vedi.94-141-120-29.cprapid.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000445; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"veloxs-invite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000446; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"verify-page-submit-here.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000447; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"voii11cfx.mmm.page"; content:"Host"; http_header; classtype:attempted-recon; sid:200000448; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"walletconnect-web3.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000449; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"weasdrty.wixsite.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000450; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"web-cqxarjotd-uniswap.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000451; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"webdenet.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000452; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"welsfag-blog.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000453; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wesrdtcfdzse5d6tfuvjdtufyi.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000454; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"woodplc.dogfriendlytahoe.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000455; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wqsac.icu"; content:"Host"; http_header; classtype:attempted-recon; sid:200000456; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"www-blockchain-fi-auth.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000457; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"wxltx.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000458; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xhrcu.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000459; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"xn--mnta-5q5a.network"; content:"Host"; http_header; classtype:attempted-recon; sid:200000460; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"y06gwc.webwave.dev"; content:"Host"; http_header; classtype:attempted-recon; sid:200000461; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahpi.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000462; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yahpn.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000463; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yondasatt.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000464; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yufreittavassu-6526.vercel.app"; content:"Host"; http_header; classtype:attempted-recon; sid:200000465; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"yusdydsfjuuxx.weebly.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000466; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zapqf.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000467; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zcytjs.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000468; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zecra.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000469; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zgyxzggk.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000470; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zlip.net"; content:"Host"; http_header; classtype:attempted-recon; sid:200000471; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"zvuhs.top"; content:"Host"; http_header; classtype:attempted-recon; sid:200000472; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/r/go.php?an=5kpwin&cvs=6.1&cb=&fui=&rt=undef&eid=&pvs=6.0&ev=ins&uc=tos573mrjamdnino&jump=//talentbegins.com/attow/owa-index.html#3mail@b.c"; http_uri; nocase; content:"5kplayer.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000473; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/?home=casino&a=x"; http_uri; nocase; content:"838882.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000474; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/3s/sjc.hgp.mybluehost.me%2fdbs%2f/bwla/zio5aq/aq/0ec638bc-0952-4618-944f-73740120a333/1/nhcgdhrp7k"; http_uri; nocase; content:"click.pstmrk.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200000475; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/f7101c3a3pb7f54dea0a99976cfw43ae6306.html"; http_uri; nocase; content:"datagivers.com"; content:"Host"; http_header; classtype:attempted-recon; sid:200000476; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/hcf4j99"; http_uri; nocase; content:"goo.su"; content:"Host"; http_header; classtype:attempted-recon; sid:200000477; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ccf9d49ead88074a54h9dfc49c0o673cf425.html%20helpnets.info"; http_uri; nocase; content:"helpnets.info"; content:"Host"; http_header; classtype:attempted-recon; sid:200000478; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafkreidlec2bka6gte7dvl66mqivaz5kovc4xavxuga7aukprms4vpcjsa"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000479; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/bafkreieqeeu2ua46eil6yh3nfrhsw6wxmuu3rvggciznuxj4vnnlrjrm6u"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000480; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmnwb6uzmfyemlxamalditpnspllzyxisuutjdhueup459/dalomanb.html"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000481; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmnyv2kmgpzcqkplwcylltkt6auyvsdhphoe7hnrs6uxqe/"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000482; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/ipfs/qmytqhkwat1yxbkj972zsstss4vpgfhzya9fb4vannqnar"; http_uri; nocase; content:"ipfs.io"; content:"Host"; http_header; classtype:attempted-recon; sid:200000483; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/1nkr0v"; http_uri; nocase; content:"linkr.it"; content:"Host"; http_header; classtype:attempted-recon; sid:200000484; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/7d0w1hr"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000485; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/gm6cwnp"; http_uri; nocase; content:"rebrand.ly"; content:"Host"; http_header; classtype:attempted-recon; sid:200000486; rev:1;)
+alert tcp $HOME_NET any -> $EXTERNAL_NET [80,443] (msg:"phishing-filter phishing website detected"; flow:established,from_client; content:"GET"; http_method; content:"/qjjpk"; http_uri; nocase; content:"xurl.es"; content:"Host"; http_header; classtype:attempted-recon; sid:200000487; rev:1;)
diff --git a/phishing-filter-snort2.rules.br b/phishing-filter-snort2.rules.br
new file mode 100644
index 000000000..a82d41769
Binary files /dev/null and b/phishing-filter-snort2.rules.br differ
diff --git a/phishing-filter-snort2.rules.gz b/phishing-filter-snort2.rules.gz
new file mode 100644
index 000000000..fc75032fd
Binary files /dev/null and b/phishing-filter-snort2.rules.gz differ
diff --git a/phishing-filter-snort3.rules b/phishing-filter-snort3.rules
new file mode 100644
index 000000000..7124f18fc
--- /dev/null
+++ b/phishing-filter-snort3.rules
@@ -0,0 +1,493 @@
+# Title: Phishing URL Snort3 Ruleset
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"073202.com",nocase; classtype:attempted-recon; sid:200000001; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0xugiw6pb.top",nocase; classtype:attempted-recon; sid:200000002; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11muskansingh.github.io",nocase; classtype:attempted-recon; sid:200000003; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"130365.vip",nocase; classtype:attempted-recon; sid:200000004; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"21403590.cc",nocase; classtype:attempted-recon; sid:200000005; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2366xyx.com",nocase; classtype:attempted-recon; sid:200000006; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"25v05vtrg.top",nocase; classtype:attempted-recon; sid:200000007; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365.915sj1.xyz",nocase; classtype:attempted-recon; sid:200000008; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"498291975887803508.weebly.com",nocase; classtype:attempted-recon; sid:200000009; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5510003.top",nocase; classtype:attempted-recon; sid:200000010; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5510006.top",nocase; classtype:attempted-recon; sid:200000011; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"551005.me",nocase; classtype:attempted-recon; sid:200000012; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"551008.me",nocase; classtype:attempted-recon; sid:200000013; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"57365ee.cc",nocase; classtype:attempted-recon; sid:200000014; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"657226703365.com",nocase; classtype:attempted-recon; sid:200000015; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6bet938.com",nocase; classtype:attempted-recon; sid:200000016; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8904701.cc",nocase; classtype:attempted-recon; sid:200000017; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"909338844400.weebly.com",nocase; classtype:attempted-recon; sid:200000018; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"965009.com",nocase; classtype:attempted-recon; sid:200000019; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"98f63c2a712e05fbeccf379de02ec9a5.88110.co",nocase; classtype:attempted-recon; sid:200000020; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0omer.webwave.dev",nocase; classtype:attempted-recon; sid:200000021; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaloo.kiwiground.top",nocase; classtype:attempted-recon; sid:200000022; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abueme-96e1.ehnelacsrralo.workers.dev",nocase; classtype:attempted-recon; sid:200000023; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accountuserlogin.github.io",nocase; classtype:attempted-recon; sid:200000024; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accshomecnfrm0log.github.io",nocase; classtype:attempted-recon; sid:200000025; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adminuser.yw2201.xyz",nocase; classtype:attempted-recon; sid:200000026; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agenciaancla.com.ar",nocase; classtype:attempted-recon; sid:200000027; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"airbnb-clone-one-chi.vercel.app",nocase; classtype:attempted-recon; sid:200000028; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allegro-400.com",nocase; classtype:attempted-recon; sid:200000029; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-clone88.netlify.app",nocase; classtype:attempted-recon; sid:200000030; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonclonebysid.netlify.app",nocase; classtype:attempted-recon; sid:200000031; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazons-help-cx-number.pages.dev",nocase; classtype:attempted-recon; sid:200000032; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anshbotzone.com",nocase; classtype:attempted-recon; sid:200000033; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anshidmuhmd.github.io",nocase; classtype:attempted-recon; sid:200000034; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anuarw.kz",nocase; classtype:attempted-recon; sid:200000035; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.liquidations-aave.com",nocase; classtype:attempted-recon; sid:200000036; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.paxful87.com",nocase; classtype:attempted-recon; sid:200000037; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.sandbox.custombrandedboxesbyfedex.com",nocase; classtype:attempted-recon; sid:200000038; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appeal-solve-violation-review.vercel.app",nocase; classtype:attempted-recon; sid:200000039; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apri.94-141-120-29.cprapid.com",nocase; classtype:attempted-recon; sid:200000040; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apwmensdjyeurir.weebly.com",nocase; classtype:attempted-recon; sid:200000041; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arbnb-clone.vercel.app",nocase; classtype:attempted-recon; sid:200000042; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arvestcd.embarkdigitalonboarding.com",nocase; classtype:attempted-recon; sid:200000043; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arvestrewardscard.embarkdigitalonboarding.com",nocase; classtype:attempted-recon; sid:200000044; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atbdgtehomeupdateform.weebly.com",nocase; classtype:attempted-recon; sid:200000045; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atftt.weebly.com",nocase; classtype:attempted-recon; sid:200000046; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atlgnrnewt.weebly.com",nocase; classtype:attempted-recon; sid:200000047; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atlnes.icu",nocase; classtype:attempted-recon; sid:200000048; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atmailupdateformeupdaterltdfdinfomailacct.weebly.com",nocase; classtype:attempted-recon; sid:200000049; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atmailupdateformeupdatesbhtdinfomailacct.weebly.com",nocase; classtype:attempted-recon; sid:200000050; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-100081.weeblysite.com",nocase; classtype:attempted-recon; sid:200000051; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-102549.weeblysite.com",nocase; classtype:attempted-recon; sid:200000052; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-102856.weeblysite.com",nocase; classtype:attempted-recon; sid:200000053; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-10386990.weeblysite.com",nocase; classtype:attempted-recon; sid:200000054; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-106249.weeblysite.com",nocase; classtype:attempted-recon; sid:200000055; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-108680.weeblysite.com",nocase; classtype:attempted-recon; sid:200000056; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-109026.weeblysite.com",nocase; classtype:attempted-recon; sid:200000057; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attadm977222.weebly.com",nocase; classtype:attempted-recon; sid:200000058; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcom-105588.weeblysite.com",nocase; classtype:attempted-recon; sid:200000059; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcom-107224.weeblysite.com",nocase; classtype:attempted-recon; sid:200000060; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attconsultint.weebly.com",nocase; classtype:attempted-recon; sid:200000061; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attflyupdateserver.weebly.com",nocase; classtype:attempted-recon; sid:200000062; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attglobalwild.weebly.com",nocase; classtype:attempted-recon; sid:200000063; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmaill0gin2341.weebly.com",nocase; classtype:attempted-recon; sid:200000064; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attnationameritechie.weebly.com",nocase; classtype:attempted-recon; sid:200000065; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attserverupdatedmailbox.weebly.com",nocase; classtype:attempted-recon; sid:200000066; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attt-107147.weeblysite.com",nocase; classtype:attempted-recon; sid:200000067; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b.3656240205.vip",nocase; classtype:attempted-recon; sid:200000068; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b12thgst9.weeblysite.com",nocase; classtype:attempted-recon; sid:200000069; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b35ppp.com",nocase; classtype:attempted-recon; sid:200000070; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b35sss.com",nocase; classtype:attempted-recon; sid:200000071; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b45017.com",nocase; classtype:attempted-recon; sid:200000072; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b45020.com",nocase; classtype:attempted-recon; sid:200000073; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000074; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000075; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000076; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000077; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000078; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000079; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000080; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200000081; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolombia.supportmaven.ai",nocase; classtype:attempted-recon; sid:200000082; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bansos-2jt.get-regist.com",nocase; classtype:attempted-recon; sid:200000083; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbtryr.com",nocase; classtype:attempted-recon; sid:200000084; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bentdynamicslm.com",nocase; classtype:attempted-recon; sid:200000085; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestorrogames.com",nocase; classtype:attempted-recon; sid:200000086; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet365ce.com",nocase; classtype:attempted-recon; sid:200000087; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet6205365.com",nocase; classtype:attempted-recon; sid:200000088; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet63035.com",nocase; classtype:attempted-recon; sid:200000089; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bet83067.com",nocase; classtype:attempted-recon; sid:200000090; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blajowet.cyou",nocase; classtype:attempted-recon; sid:200000091; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"braxapressaje-9251.vercel.app",nocase; classtype:attempted-recon; sid:200000092; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bronm0.wixsite.com",nocase; classtype:attempted-recon; sid:200000093; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bryfhdjffgc.weebly.com",nocase; classtype:attempted-recon; sid:200000094; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-100831.weeblysite.com",nocase; classtype:attempted-recon; sid:200000095; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-103187.weeblysite.com",nocase; classtype:attempted-recon; sid:200000096; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-107510.weeblysite.com",nocase; classtype:attempted-recon; sid:200000097; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet-108597.weeblysite.com",nocase; classtype:attempted-recon; sid:200000098; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet18282.weebly.com",nocase; classtype:attempted-recon; sid:200000099; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-meta-center.com",nocase; classtype:attempted-recon; sid:200000100; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"byzhxx.com",nocase; classtype:attempted-recon; sid:200000101; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0nfrmpgsacc.github.io",nocase; classtype:attempted-recon; sid:200000102; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cancel-binance.com",nocase; classtype:attempted-recon; sid:200000103; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caracoliresidencial.com",nocase; classtype:attempted-recon; sid:200000104; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cek-voucher.earth.web.id",nocase; classtype:attempted-recon; sid:200000105; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cernifg359.cyou",nocase; classtype:attempted-recon; sid:200000106; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-bank-one.vercel.app",nocase; classtype:attempted-recon; sid:200000107; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chilly.makeup",nocase; classtype:attempted-recon; sid:200000108; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"china-link.pages.dev",nocase; classtype:attempted-recon; sid:200000109; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chinnurpk.github.io",nocase; classtype:attempted-recon; sid:200000110; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cibcgg.com",nocase; classtype:attempted-recon; sid:200000111; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cmenvivo.github.io",nocase; classtype:attempted-recon; sid:200000112; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"codapay.events-games.com",nocase; classtype:attempted-recon; sid:200000113; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coin-bosepro-log.godaddysites.com",nocase; classtype:attempted-recon; sid:200000114; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbase-com-66117.danschaffert66529.workers.dev",nocase; classtype:attempted-recon; sid:200000115; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"communitycasesreviewlist.web.app",nocase; classtype:attempted-recon; sid:200000116; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conennectakasd.b-cdn.net",nocase; classtype:attempted-recon; sid:200000117; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conn-twallt.gitbook.io",nocase; classtype:attempted-recon; sid:200000118; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correctingservicesalakks.pages.dev",nocase; classtype:attempted-recon; sid:200000119; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credito-prestamos.fra1.zeabur.app",nocase; classtype:attempted-recon; sid:200000120; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently4988.weebly.com",nocase; classtype:attempted-recon; sid:200000121; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently6510.weebly.com",nocase; classtype:attempted-recon; sid:200000122; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently810.weebly.com",nocase; classtype:attempted-recon; sid:200000123; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently8711.weebly.com",nocase; classtype:attempted-recon; sid:200000124; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyatt04.weebly.com",nocase; classtype:attempted-recon; sid:200000125; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyatt223.weebly.com",nocase; classtype:attempted-recon; sid:200000126; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyatt468.weebly.com",nocase; classtype:attempted-recon; sid:200000127; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyatt7891.weebly.com",nocase; classtype:attempted-recon; sid:200000128; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyatt9854.weebly.com",nocase; classtype:attempted-recon; sid:200000129; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyattyaho85748.weebly.com",nocase; classtype:attempted-recon; sid:200000130; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currentlyattyahoo6check.weebly.com",nocase; classtype:attempted-recon; sid:200000131; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"customersupportteam.serveusers.com",nocase; classtype:attempted-recon; sid:200000132; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cv.geldmagazin.de",nocase; classtype:attempted-recon; sid:200000133; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br",nocase; classtype:attempted-recon; sid:200000134; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwgml.top",nocase; classtype:attempted-recon; sid:200000135; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d551000.cc",nocase; classtype:attempted-recon; sid:200000136; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappprompty.pages.dev",nocase; classtype:attempted-recon; sid:200000137; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"datingteles3x.netlify.app",nocase; classtype:attempted-recon; sid:200000138; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"debank-w.github.io",nocase; classtype:attempted-recon; sid:200000139; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decenlaunchpad.pages.dev",nocase; classtype:attempted-recon; sid:200000140; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.dynamicsolutionit.com",nocase; classtype:attempted-recon; sid:200000141; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desktoptg.com",nocase; classtype:attempted-recon; sid:200000142; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-0014021997322.pantheonsite.io",nocase; classtype:attempted-recon; sid:200000143; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-102030654785555551.pantheonsite.io",nocase; classtype:attempted-recon; sid:200000144; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhl.ijpcr.net.in",nocase; classtype:attempted-recon; sid:200000145; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhlexpress.hu",nocase; classtype:attempted-recon; sid:200000146; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"djelp.top",nocase; classtype:attempted-recon; sid:200000147; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dknrutkslsjf.weebly.com",nocase; classtype:attempted-recon; sid:200000148; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkrjjhrjemfkj.weeblysite.com",nocase; classtype:attempted-recon; sid:200000149; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doccvview.buzz",nocase; classtype:attempted-recon; sid:200000150; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docu-auth-5775940568.bb-abogados.com",nocase; classtype:attempted-recon; sid:200000151; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doujeucrumoufau-8054.vercel.app",nocase; classtype:attempted-recon; sid:200000152; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dropboxubdkw.weebly.com",nocase; classtype:attempted-recon; sid:200000153; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duysysysh.weebly.com",nocase; classtype:attempted-recon; sid:200000154; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eagbid.ru.com",nocase; classtype:attempted-recon; sid:200000155; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebay.ebayshoo.com",nocase; classtype:attempted-recon; sid:200000156; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebdaf.top",nocase; classtype:attempted-recon; sid:200000157; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ejnapxqitd.cfolks.pl",nocase; classtype:attempted-recon; sid:200000158; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elitefortnit.github.io",nocase; classtype:attempted-recon; sid:200000159; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailnoticeie.weebly.com",nocase; classtype:attempted-recon; sid:200000160; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enforce-user-guidelines.vercel.app",nocase; classtype:attempted-recon; sid:200000161; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"erdtgyur57t6gyu.weebly.com",nocase; classtype:attempted-recon; sid:200000162; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"error3457uypcold.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000163; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eryiurgygeyigegh.weeblysite.com",nocase; classtype:attempted-recon; sid:200000164; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eshop-eu.care.cps-partnersnp.de",nocase; classtype:attempted-recon; sid:200000165; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethereum-apple.org",nocase; classtype:attempted-recon; sid:200000166; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evenstagservices.com",nocase; classtype:attempted-recon; sid:200000167; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-loginpage-clone.vercel.app",nocase; classtype:attempted-recon; sid:200000168; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-web.cloudns.be",nocase; classtype:attempted-recon; sid:200000169; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faenl.top",nocase; classtype:attempted-recon; sid:200000170; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb-login-clone.vercel.app",nocase; classtype:attempted-recon; sid:200000171; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feline-full-stick.glitch.me",nocase; classtype:attempted-recon; sid:200000172; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhger75gfg2fff.top",nocase; classtype:attempted-recon; sid:200000173; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finityrrr.weebly.com",nocase; classtype:attempted-recon; sid:200000174; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flngf.top",nocase; classtype:attempted-recon; sid:200000175; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form-policy-appeal-k2d7nf.vercel.app",nocase; classtype:attempted-recon; sid:200000176; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form-policy-appeal-k2x7nf.vercel.app",nocase; classtype:attempted-recon; sid:200000177; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-5476373.webadorsite.com",nocase; classtype:attempted-recon; sid:200000178; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-5481257.webadorsite.com",nocase; classtype:attempted-recon; sid:200000179; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-5562390.webadorsite.com",nocase; classtype:attempted-recon; sid:200000180; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freevideomelayu.tme-viral.link",nocase; classtype:attempted-recon; sid:200000181; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gasbot-demos.vercel.app",nocase; classtype:attempted-recon; sid:200000182; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ggdhjssu7.wixsite.com",nocase; classtype:attempted-recon; sid:200000183; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghaho.vercel.app",nocase; classtype:attempted-recon; sid:200000184; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gheedfhj.weebly.com",nocase; classtype:attempted-recon; sid:200000185; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghshbv.wixsite.com",nocase; classtype:attempted-recon; sid:200000186; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"global-reward.kraftonevent.com",nocase; classtype:attempted-recon; sid:200000187; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gnaneshwarreddybaitinti.github.io",nocase; classtype:attempted-recon; sid:200000188; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gnktan.top",nocase; classtype:attempted-recon; sid:200000189; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goteleg-br.top",nocase; classtype:attempted-recon; sid:200000190; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gradeis.info",nocase; classtype:attempted-recon; sid:200000191; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-manage-center.com",nocase; classtype:attempted-recon; sid:200000192; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heriodj.shop",nocase; classtype:attempted-recon; sid:200000193; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hermiovz-bustling-sled.glitch.me",nocase; classtype:attempted-recon; sid:200000194; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hobitronik.com",nocase; classtype:attempted-recon; sid:200000195; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-100383.weeblysite.com",nocase; classtype:attempted-recon; sid:200000196; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-100489.weeblysite.com",nocase; classtype:attempted-recon; sid:200000197; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-101941.weeblysite.com",nocase; classtype:attempted-recon; sid:200000198; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-102517.weeblysite.com",nocase; classtype:attempted-recon; sid:200000199; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-104101.weeblysite.com",nocase; classtype:attempted-recon; sid:200000200; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-104529.weeblysite.com",nocase; classtype:attempted-recon; sid:200000201; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-104657.weeblysite.com",nocase; classtype:attempted-recon; sid:200000202; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iemnswgehdporlkf.weebly.com",nocase; classtype:attempted-recon; sid:200000203; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iik-3100-2023-spear-phishing-login-page.vercel.app",nocase; classtype:attempted-recon; sid:200000204; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imtikem.vip",nocase; classtype:attempted-recon; sid:200000205; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imtoken-iim.org",nocase; classtype:attempted-recon; sid:200000206; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"institutodentalsante.com.br",nocase; classtype:attempted-recon; sid:200000207; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interface-beta-eight.vercel.app",nocase; classtype:attempted-recon; sid:200000208; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"it-outlookwebaccess.com",nocase; classtype:attempted-recon; sid:200000209; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itklkaklkakk.weebly.com",nocase; classtype:attempted-recon; sid:200000210; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jaiganeshmachinery.com",nocase; classtype:attempted-recon; sid:200000211; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jdkajsmxncbeuwie.weebly.com",nocase; classtype:attempted-recon; sid:200000212; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfnjkfvbhjvdc.weebly.com",nocase; classtype:attempted-recon; sid:200000213; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfvfbremdkf50nhfgs.weeblysite.com",nocase; classtype:attempted-recon; sid:200000214; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhyuj.weebly.com",nocase; classtype:attempted-recon; sid:200000215; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jinqiao114.com",nocase; classtype:attempted-recon; sid:200000216; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"join-mywhatsapp-2sa.pages.dev",nocase; classtype:attempted-recon; sid:200000217; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jttyavc.com",nocase; classtype:attempted-recon; sid:200000218; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juno-100024.weeblysite.com",nocase; classtype:attempted-recon; sid:200000219; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juno-102431.square.site",nocase; classtype:attempted-recon; sid:200000220; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"junoytremauilkdfh.weebly.com",nocase; classtype:attempted-recon; sid:200000221; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jxzipper.com",nocase; classtype:attempted-recon; sid:200000222; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jzhemuni-logun.godaddysites.com",nocase; classtype:attempted-recon; sid:200000223; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jzyl669.net",nocase; classtype:attempted-recon; sid:200000224; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khdny.top",nocase; classtype:attempted-recon; sid:200000225; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"learn-trzor-start.github.io",nocase; classtype:attempted-recon; sid:200000226; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledger-com-updatefirmware.aparecidovisentin.com.br",nocase; classtype:attempted-recon; sid:200000227; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledger-com-upgrade.gezix.com.tr",nocase; classtype:attempted-recon; sid:200000228; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledger-confirm.com",nocase; classtype:attempted-recon; sid:200000229; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledgerhardwarehelp.com",nocase; classtype:attempted-recon; sid:200000230; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledgersafetyplatform.com",nocase; classtype:attempted-recon; sid:200000231; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledqinlv.com",nocase; classtype:attempted-recon; sid:200000232; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loggmaskemttaa.godaddysites.com",nocase; classtype:attempted-recon; sid:200000233; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-midstreams-outlook.us",nocase; classtype:attempted-recon; sid:200000234; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.94-141-120-29.cprapid.com",nocase; classtype:attempted-recon; sid:200000235; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginhomeinbox.com",nocase; classtype:attempted-recon; sid:200000236; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginscreen-att-108245.weeblysite.com",nocase; classtype:attempted-recon; sid:200000237; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lojer-vohex84.vercel.app",nocase; classtype:attempted-recon; sid:200000238; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br",nocase; classtype:attempted-recon; sid:200000239; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lttcloudvpn.pages.dev",nocase; classtype:attempted-recon; sid:200000240; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m-telegrm.cc",nocase; classtype:attempted-recon; sid:200000241; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.amazontech.cc",nocase; classtype:attempted-recon; sid:200000242; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.key5188.com",nocase; classtype:attempted-recon; sid:200000243; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-admin-102219.weeblysite.com",nocase; classtype:attempted-recon; sid:200000244; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-securities.square.site",nocase; classtype:attempted-recon; sid:200000245; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.apri.94-141-120-29.cprapid.com",nocase; classtype:attempted-recon; sid:200000246; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.spotifyyclonne.freewebhostmost.com",nocase; classtype:attempted-recon; sid:200000247; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailboxspheretoday.weebly.com",nocase; classtype:attempted-recon; sid:200000248; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailhomebox-8096940.weeblysite.com",nocase; classtype:attempted-recon; sid:200000249; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailserverreservoir.weebly.com",nocase; classtype:attempted-recon; sid:200000250; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malonlineservce12.weebly.com",nocase; classtype:attempted-recon; sid:200000251; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"managementbusinessrequiredaza.weebly.com",nocase; classtype:attempted-recon; sid:200000252; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"manorders.com",nocase; classtype:attempted-recon; sid:200000253; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplace-center-checkitem-supp0rt-now-business.click",nocase; classtype:attempted-recon; sid:200000254; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"megadropclaim.com",nocase; classtype:attempted-recon; sid:200000255; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"met-aa-mass-klog-in.godaddysites.com",nocase; classtype:attempted-recon; sid:200000256; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamagskloin.gitbook.io",nocase; classtype:attempted-recon; sid:200000257; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-web.vercel.app",nocase; classtype:attempted-recon; sid:200000258; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metameasklin.gitbook.io",nocase; classtype:attempted-recon; sid:200000259; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamsk-wallet-3.gitbook.io",nocase; classtype:attempted-recon; sid:200000260; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamuscklog.godaddysites.com",nocase; classtype:attempted-recon; sid:200000261; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metau-maasck-loogiin.godaddysites.com",nocase; classtype:attempted-recon; sid:200000262; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metawallet-server.vercel.app",nocase; classtype:attempted-recon; sid:200000263; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metmassk-usalloggies.godaddysites.com",nocase; classtype:attempted-recon; sid:200000264; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsofstonline.com",nocase; classtype:attempted-recon; sid:200000265; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micsoft.phishone.com",nocase; classtype:attempted-recon; sid:200000266; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"midjourneyex.com",nocase; classtype:attempted-recon; sid:200000267; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mikam76544444.weebly.com",nocase; classtype:attempted-recon; sid:200000268; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"morsaglobal.com",nocase; classtype:attempted-recon; sid:200000269; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mozp.ubjoubj.shop",nocase; classtype:attempted-recon; sid:200000270; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"multichaintool.netlify.app",nocase; classtype:attempted-recon; sid:200000271; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myvalue365.com",nocase; classtype:attempted-recon; sid:200000272; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi-airbnb.vercel.app",nocase; classtype:attempted-recon; sid:200000273; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nerve.black",nocase; classtype:attempted-recon; sid:200000274; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix-clone-frontend-flax.vercel.app",nocase; classtype:attempted-recon; sid:200000275; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix-clone-ml.vercel.app",nocase; classtype:attempted-recon; sid:200000276; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix-lite-one.vercel.app",nocase; classtype:attempted-recon; sid:200000277; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix-talarys.vercel.app",nocase; classtype:attempted-recon; sid:200000278; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netzeero.weebly.com",nocase; classtype:attempted-recon; sid:200000279; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netzero-webmail-109987.weeblysite.com",nocase; classtype:attempted-recon; sid:200000280; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netzeroinfo.weebly.com",nocase; classtype:attempted-recon; sid:200000281; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"next-airbnb-clone-sage.vercel.app",nocase; classtype:attempted-recon; sid:200000282; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nft-lift9.vercel.app",nocase; classtype:attempted-recon; sid:200000283; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nihaalxz.github.io",nocase; classtype:attempted-recon; sid:200000284; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nodeconnectdapp.pages.dev",nocase; classtype:attempted-recon; sid:200000285; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nordicwalkingcadiz.com",nocase; classtype:attempted-recon; sid:200000286; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notificationcentenooooo.weebly.com",nocase; classtype:attempted-recon; sid:200000287; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notify-suspicious-activity.vercel.app",nocase; classtype:attempted-recon; sid:200000288; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nsrocawsso.duckdns.org",nocase; classtype:attempted-recon; sid:200000289; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ntlworldupdatemail.weebly.com",nocase; classtype:attempted-recon; sid:200000290; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuplaqsdmkd.weebly.com",nocase; classtype:attempted-recon; sid:200000291; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nurnjjdsqs.duckdns.org",nocase; classtype:attempted-recon; sid:200000292; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"o08ofobnw.top",nocase; classtype:attempted-recon; sid:200000293; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oatt745.wixsite.com",nocase; classtype:attempted-recon; sid:200000294; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office-techservice.com",nocase; classtype:attempted-recon; sid:200000295; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ortakoyescortum.site",nocase; classtype:attempted-recon; sid:200000296; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlook-loginsecurity.com",nocase; classtype:attempted-recon; sid:200000297; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookcode22.weebly.com",nocase; classtype:attempted-recon; sid:200000298; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagedoc65.pages.dev",nocase; classtype:attempted-recon; sid:200000299; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pay-pay-pay-loop-jp.replit.app",nocase; classtype:attempted-recon; sid:200000300; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pedidosnozapp.com.br",nocase; classtype:attempted-recon; sid:200000301; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pianorollcenter.com",nocase; classtype:attempted-recon; sid:200000302; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pop.spotifycloning1.freewebhostmost.com",nocase; classtype:attempted-recon; sid:200000303; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"privateservicehsb.com",nocase; classtype:attempted-recon; sid:200000304; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"privatroom79.pages.dev",nocase; classtype:attempted-recon; sid:200000305; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-delta-brown.vercel.app",nocase; classtype:attempted-recon; sid:200000306; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev",nocase; classtype:attempted-recon; sid:200000307; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub-e2c2179ca4e5490390f8741af2335633.r2.dev",nocase; classtype:attempted-recon; sid:200000308; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev",nocase; classtype:attempted-recon; sid:200000309; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pupstoken-whitelist.pages.dev",nocase; classtype:attempted-recon; sid:200000310; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"purple039053.studio.site",nocase; classtype:attempted-recon; sid:200000311; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qiyee163.com",nocase; classtype:attempted-recon; sid:200000312; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qnnbbbfinannnsbannk.vercel.app",nocase; classtype:attempted-recon; sid:200000313; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quickmailservice331516277272772.weebly.com",nocase; classtype:attempted-recon; sid:200000314; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qvegy.top",nocase; classtype:attempted-recon; sid:200000315; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakindotcom.github.io",nocase; classtype:attempted-recon; sid:200000316; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rana-renthotel-example.vercel.app",nocase; classtype:attempted-recon; sid:200000317; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"react-netflix-delta.vercel.app",nocase; classtype:attempted-recon; sid:200000318; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recognition-badge.netlify.app",nocase; classtype:attempted-recon; sid:200000319; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"refundpay.weebly.com",nocase; classtype:attempted-recon; sid:200000320; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reply-notify-bussiness.com",nocase; classtype:attempted-recon; sid:200000321; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resilient-cendol-b21196.netlify.app",nocase; classtype:attempted-recon; sid:200000322; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-business-case.d1t75tji1kkg4p.amplifyapp.com",nocase; classtype:attempted-recon; sid:200000323; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reviewpage11.github.io",nocase; classtype:attempted-recon; sid:200000324; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rgpih.top",nocase; classtype:attempted-recon; sid:200000325; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rn.airenren.vip",nocase; classtype:attempted-recon; sid:200000326; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robertvilliardhousing.weebly.com",nocase; classtype:attempted-recon; sid:200000327; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rosamz123.github.io",nocase; classtype:attempted-recon; sid:200000328; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saaveiices.weebly.com",nocase; classtype:attempted-recon; sid:200000329; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safetystaying.homes",nocase; classtype:attempted-recon; sid:200000330; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salofenushigo.weebly.com",nocase; classtype:attempted-recon; sid:200000331; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"savedfilters.top",nocase; classtype:attempted-recon; sid:200000332; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sbcgloballane.weebly.com",nocase; classtype:attempted-recon; sid:200000333; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.qqp.zle.temporary.site",nocase; classtype:attempted-recon; sid:200000334; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securepageatt.weebly.com",nocase; classtype:attempted-recon; sid:200000335; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securingmyledger.com",nocase; classtype:attempted-recon; sid:200000336; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seller.shop-line.vip",nocase; classtype:attempted-recon; sid:200000337; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"senmeitefs.com",nocase; classtype:attempted-recon; sid:200000338; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.2rk3.com",nocase; classtype:attempted-recon; sid:200000339; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.h74w.com",nocase; classtype:attempted-recon; sid:200000340; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.n6b8.com",nocase; classtype:attempted-recon; sid:200000341; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server.wyq6.com",nocase; classtype:attempted-recon; sid:200000342; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service.santander.de",nocase; classtype:attempted-recon; sid:200000343; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicecoinwallet.live",nocase; classtype:attempted-recon; sid:200000344; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seviiceess.weebly.com",nocase; classtype:attempted-recon; sid:200000345; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sg3.xbenihime.us.kg",nocase; classtype:attempted-recon; sid:200000346; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaerepointt.weebly.com",nocase; classtype:attempted-recon; sid:200000347; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-101433.weeblysite.com",nocase; classtype:attempted-recon; sid:200000348; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-102890.weeblysite.com",nocase; classtype:attempted-recon; sid:200000349; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-104426.weeblysite.com",nocase; classtype:attempted-recon; sid:200000350; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-105083.weeblysite.com",nocase; classtype:attempted-recon; sid:200000351; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-105713.weeblysite.com",nocase; classtype:attempted-recon; sid:200000352; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-105802.weeblysite.com",nocase; classtype:attempted-recon; sid:200000353; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-105983.weeblysite.com",nocase; classtype:attempted-recon; sid:200000354; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-106114.weeblysite.com",nocase; classtype:attempted-recon; sid:200000355; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-107218.weeblysite.com",nocase; classtype:attempted-recon; sid:200000356; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaw-107259.weeblysite.com",nocase; classtype:attempted-recon; sid:200000357; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shawvalidation.weebly.com",nocase; classtype:attempted-recon; sid:200000358; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shimmering-star-epoch.glitch.me",nocase; classtype:attempted-recon; sid:200000359; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopee.gotback9898.cc",nocase; classtype:attempted-recon; sid:200000360; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shoppingwithdiscount.top",nocase; classtype:attempted-recon; sid:200000361; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shoptkoo.com",nocase; classtype:attempted-recon; sid:200000362; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"side-revshares.pages.dev",nocase; classtype:attempted-recon; sid:200000363; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"signiatdynamatz.weebly.com",nocase; classtype:attempted-recon; sid:200000364; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sjc.hgp.mybluehost.me",nocase; classtype:attempted-recon; sid:200000365; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skybestservice.wixsite.com",nocase; classtype:attempted-recon; sid:200000366; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skyserviv.weebly.com",nocase; classtype:attempted-recon; sid:200000367; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartwalletcoin-sync.pages.dev",nocase; classtype:attempted-recon; sid:200000368; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartwebdapp.pages.dev",nocase; classtype:attempted-recon; sid:200000369; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smtp.spotifyprojectyash.freewebhostmost.com",nocase; classtype:attempted-recon; sid:200000370; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"souwttillupa-4199.vercel.app",nocase; classtype:attempted-recon; sid:200000371; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soygrupoelite.com",nocase; classtype:attempted-recon; sid:200000372; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spotify-inspired-music-player-online.freewebhostmost.com",nocase; classtype:attempted-recon; sid:200000373; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spotify.constantine.dev",nocase; classtype:attempted-recon; sid:200000374; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spotify7972.freewebhostmost.com",nocase; classtype:attempted-recon; sid:200000375; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spotifyclonebyrk.freewebhostmost.com",nocase; classtype:attempted-recon; sid:200000376; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spotifywithyash.freewebhostmost.com",nocase; classtype:attempted-recon; sid:200000377; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srvamch.in",nocase; classtype:attempted-recon; sid:200000378; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staemcommunnutty.com",nocase; classtype:attempted-recon; sid:200000379; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"start-trazor-page.github.io",nocase; classtype:attempted-recon; sid:200000380; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommmuty.com",nocase; classtype:attempted-recon; sid:200000381; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sukien.pubgm.shop",nocase; classtype:attempted-recon; sid:200000382; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-uk-cshelp-personal.getit.ink",nocase; classtype:attempted-recon; sid:200000383; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"systemserveerr.weebly.com",nocase; classtype:attempted-recon; sid:200000384; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talentbegins.com",nocase; classtype:attempted-recon; sid:200000385; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tapnm.top",nocase; classtype:attempted-recon; sid:200000386; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tekbotavi.pro",nocase; classtype:attempted-recon; sid:200000387; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telagram.vip",nocase; classtype:attempted-recon; sid:200000388; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegiramv.fit",nocase; classtype:attempted-recon; sid:200000389; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegram--hk.com",nocase; classtype:attempted-recon; sid:200000390; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegram-datingfree-sex.pages.dev",nocase; classtype:attempted-recon; sid:200000391; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrambot-rectify.pages.dev",nocase; classtype:attempted-recon; sid:200000392; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrambotsmart-solution.pages.dev",nocase; classtype:attempted-recon; sid:200000393; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegramis.work",nocase; classtype:attempted-recon; sid:200000394; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telegrcm.ing",nocase; classtype:attempted-recon; sid:200000395; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telergom.vip",nocase; classtype:attempted-recon; sid:200000396; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tellegram.dmrtaxes.com",nocase; classtype:attempted-recon; sid:200000397; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telpqgram.bocekilacla.com",nocase; classtype:attempted-recon; sid:200000398; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-101853.weeblysite.com",nocase; classtype:attempted-recon; sid:200000399; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-102223.weeblysite.com",nocase; classtype:attempted-recon; sid:200000400; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-102841.weeblysite.com",nocase; classtype:attempted-recon; sid:200000401; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-104158.weeblysite.com",nocase; classtype:attempted-recon; sid:200000402; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-105309.weeblysite.com",nocase; classtype:attempted-recon; sid:200000403; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-106488.weeblysite.com",nocase; classtype:attempted-recon; sid:200000404; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-106877.weeblysite.com",nocase; classtype:attempted-recon; sid:200000405; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-107132.weeblysite.com",nocase; classtype:attempted-recon; sid:200000406; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-108365.weeblysite.com",nocase; classtype:attempted-recon; sid:200000407; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-109995.weeblysite.com",nocase; classtype:attempted-recon; sid:200000408; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"temp-jledxoxqawgkocyshafr.webadorsite.com",nocase; classtype:attempted-recon; sid:200000409; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tether-app.org",nocase; classtype:attempted-recon; sid:200000410; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tether-zh.org",nocase; classtype:attempted-recon; sid:200000411; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tfggfdfgddhs.weebly.com",nocase; classtype:attempted-recon; sid:200000412; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tg.m-tslegram.top",nocase; classtype:attempted-recon; sid:200000413; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thofx.top",nocase; classtype:attempted-recon; sid:200000414; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tik-tok.cam",nocase; classtype:attempted-recon; sid:200000415; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiktok897.com",nocase; classtype:attempted-recon; sid:200000416; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiktokshopmallc.com",nocase; classtype:attempted-recon; sid:200000417; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tkbuymarket.xyz",nocase; classtype:attempted-recon; sid:200000418; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tkvipshop.top",nocase; classtype:attempted-recon; sid:200000419; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tlktok.me",nocase; classtype:attempted-recon; sid:200000420; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tlktokshop.tw",nocase; classtype:attempted-recon; sid:200000421; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toinec.net",nocase; classtype:attempted-recon; sid:200000422; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tr.alertsgame.ru",nocase; classtype:attempted-recon; sid:200000423; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trackyourpackageusps.blogspot.de",nocase; classtype:attempted-recon; sid:200000424; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trezzorwallle.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000425; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trxdapbundle.pages.dev",nocase; classtype:attempted-recon; sid:200000426; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trzure-en-suite.pages.dev",nocase; classtype:attempted-recon; sid:200000427; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ttk169.shop",nocase; classtype:attempted-recon; sid:200000428; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tyuytrecurrently.weebly.com",nocase; classtype:attempted-recon; sid:200000429; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ui-clone-neon.vercel.app",nocase; classtype:attempted-recon; sid:200000430; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uijkr8f89oerfjncy78fo.weebly.com",nocase; classtype:attempted-recon; sid:200000431; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujjewmanskdeoiskedn.weebly.com",nocase; classtype:attempted-recon; sid:200000432; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unusualaccountcnfrmpages.github.io",nocase; classtype:attempted-recon; sid:200000433; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatemymailbox246346253662.weebly.com",nocase; classtype:attempted-recon; sid:200000434; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uqei112ao.top",nocase; classtype:attempted-recon; sid:200000435; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"useridteleku.com",nocase; classtype:attempted-recon; sid:200000436; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tarpocev.top",nocase; classtype:attempted-recon; sid:200000437; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.com-tarpoiev.top",nocase; classtype:attempted-recon; sid:200000438; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsservicetrack.blogspot.de",nocase; classtype:attempted-recon; sid:200000439; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsservicetrack.blogspot.it",nocase; classtype:attempted-recon; sid:200000440; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspssmartparcellocker.tech",nocase; classtype:attempted-recon; sid:200000441; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspssmartparcellockers.tech",nocase; classtype:attempted-recon; sid:200000442; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"utkepp.top",nocase; classtype:attempted-recon; sid:200000443; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v2-pancakeswap.github.io",nocase; classtype:attempted-recon; sid:200000444; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vedi.94-141-120-29.cprapid.com",nocase; classtype:attempted-recon; sid:200000445; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veloxs-invite.com",nocase; classtype:attempted-recon; sid:200000446; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verify-page-submit-here.vercel.app",nocase; classtype:attempted-recon; sid:200000447; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"voii11cfx.mmm.page",nocase; classtype:attempted-recon; sid:200000448; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnect-web3.vercel.app",nocase; classtype:attempted-recon; sid:200000449; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weasdrty.wixsite.com",nocase; classtype:attempted-recon; sid:200000450; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-cqxarjotd-uniswap.vercel.app",nocase; classtype:attempted-recon; sid:200000451; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webdenet.weebly.com",nocase; classtype:attempted-recon; sid:200000452; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"welsfag-blog.vercel.app",nocase; classtype:attempted-recon; sid:200000453; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wesrdtcfdzse5d6tfuvjdtufyi.weebly.com",nocase; classtype:attempted-recon; sid:200000454; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"woodplc.dogfriendlytahoe.com",nocase; classtype:attempted-recon; sid:200000455; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wqsac.icu",nocase; classtype:attempted-recon; sid:200000456; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-blockchain-fi-auth.vercel.app",nocase; classtype:attempted-recon; sid:200000457; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wxltx.com",nocase; classtype:attempted-recon; sid:200000458; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xhrcu.top",nocase; classtype:attempted-recon; sid:200000459; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--mnta-5q5a.network",nocase; classtype:attempted-recon; sid:200000460; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"y06gwc.webwave.dev",nocase; classtype:attempted-recon; sid:200000461; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahpi.com",nocase; classtype:attempted-recon; sid:200000462; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahpn.com",nocase; classtype:attempted-recon; sid:200000463; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yondasatt.weebly.com",nocase; classtype:attempted-recon; sid:200000464; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yufreittavassu-6526.vercel.app",nocase; classtype:attempted-recon; sid:200000465; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yusdydsfjuuxx.weebly.com",nocase; classtype:attempted-recon; sid:200000466; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zapqf.top",nocase; classtype:attempted-recon; sid:200000467; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zcytjs.com",nocase; classtype:attempted-recon; sid:200000468; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zecra.top",nocase; classtype:attempted-recon; sid:200000469; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zgyxzggk.top",nocase; classtype:attempted-recon; sid:200000470; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zlip.net",nocase; classtype:attempted-recon; sid:200000471; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zvuhs.top",nocase; classtype:attempted-recon; sid:200000472; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5kplayer.com",nocase; http_uri; content:"/r/go.php?an=5kpwin&cvs=6.1&cb=&fui=&rt=undef&eid=&pvs=6.0&ev=ins&uc=tos573mrjamdnino&jump=//talentbegins.com/attow/owa-index.html#3mail@b.c",nocase; classtype:attempted-recon; sid:200000473; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"838882.com",nocase; http_uri; content:"/?home=casino&a=x",nocase; classtype:attempted-recon; sid:200000474; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"click.pstmrk.it",nocase; http_uri; content:"/3s/sjc.hgp.mybluehost.me%2fdbs%2f/bwla/zio5aq/aq/0ec638bc-0952-4618-944f-73740120a333/1/nhcgdhrp7k",nocase; classtype:attempted-recon; sid:200000475; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"datagivers.com",nocase; http_uri; content:"/f7101c3a3pb7f54dea0a99976cfw43ae6306.html",nocase; classtype:attempted-recon; sid:200000476; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goo.su",nocase; http_uri; content:"/hcf4j99",nocase; classtype:attempted-recon; sid:200000477; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpnets.info",nocase; http_uri; content:"/ccf9d49ead88074a54h9dfc49c0o673cf425.html%20helpnets.info",nocase; classtype:attempted-recon; sid:200000478; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/bafkreidlec2bka6gte7dvl66mqivaz5kovc4xavxuga7aukprms4vpcjsa",nocase; classtype:attempted-recon; sid:200000479; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/bafkreieqeeu2ua46eil6yh3nfrhsw6wxmuu3rvggciznuxj4vnnlrjrm6u",nocase; classtype:attempted-recon; sid:200000480; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmnwb6uzmfyemlxamalditpnspllzyxisuutjdhueup459/dalomanb.html",nocase; classtype:attempted-recon; sid:200000481; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmnyv2kmgpzcqkplwcylltkt6auyvsdhphoe7hnrs6uxqe/",nocase; classtype:attempted-recon; sid:200000482; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmytqhkwat1yxbkj972zsstss4vpgfhzya9fb4vannqnar",nocase; classtype:attempted-recon; sid:200000483; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.it",nocase; http_uri; content:"/1nkr0v",nocase; classtype:attempted-recon; sid:200000484; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/7d0w1hr",nocase; classtype:attempted-recon; sid:200000485; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/gm6cwnp",nocase; classtype:attempted-recon; sid:200000486; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xurl.es",nocase; http_uri; content:"/qjjpk",nocase; classtype:attempted-recon; sid:200000487; rev:1;)
diff --git a/phishing-filter-snort3.rules.br b/phishing-filter-snort3.rules.br
new file mode 100644
index 000000000..e6345738f
Binary files /dev/null and b/phishing-filter-snort3.rules.br differ
diff --git a/phishing-filter-snort3.rules.gz b/phishing-filter-snort3.rules.gz
new file mode 100644
index 000000000..fba40e086
Binary files /dev/null and b/phishing-filter-snort3.rules.gz differ
diff --git a/phishing-filter-splunk.csv b/phishing-filter-splunk.csv
new file mode 100644
index 000000000..5f7cab23f
--- /dev/null
+++ b/phishing-filter-splunk.csv
@@ -0,0 +1,494 @@
+# Title: Phishing URL Splunk Lookup
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+"host","path","message","updated"
+"073202.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"0xugiw6pb.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"11muskansingh.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"130365.vip","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"21403590.cc","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"2366xyx.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"25v05vtrg.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"365.915sj1.xyz","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"498291975887803508.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"5510003.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"5510006.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"551005.me","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"551008.me","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"57365ee.cc","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"657226703365.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"6bet938.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"8904701.cc","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"909338844400.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"965009.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"98f63c2a712e05fbeccf379de02ec9a5.88110.co","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"a0omer.webwave.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"aaloo.kiwiground.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"abueme-96e1.ehnelacsrralo.workers.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"accountuserlogin.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"accshomecnfrm0log.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"adminuser.yw2201.xyz","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"agenciaancla.com.ar","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"airbnb-clone-one-chi.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"allegro-400.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"amazon-clone88.netlify.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"amazonclonebysid.netlify.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"amazons-help-cx-number.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"anshbotzone.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"anshidmuhmd.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"anuarw.kz","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"app.liquidations-aave.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"app.paxful87.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"app.sandbox.custombrandedboxesbyfedex.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"appeal-solve-violation-review.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"apri.94-141-120-29.cprapid.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"apwmensdjyeurir.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"arbnb-clone.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"arvestcd.embarkdigitalonboarding.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"arvestrewardscard.embarkdigitalonboarding.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"atbdgtehomeupdateform.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"atftt.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"atlgnrnewt.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"atlnes.icu","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"atmailupdateformeupdaterltdfdinfomailacct.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"atmailupdateformeupdatesbhtdinfomailacct.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"att-100081.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"att-102549.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"att-102856.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"att-10386990.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"att-106249.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"att-108680.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"att-109026.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attadm977222.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attcom-105588.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attcom-107224.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attconsultint.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attflyupdateserver.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attglobalwild.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attmaill0gin2341.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attnationameritechie.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attserverupdatedmailbox.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"attt-107147.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"b.3656240205.vip","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"b12thgst9.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"b35ppp.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"b35sss.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"b45017.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"b45020.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bancolombia.supportmaven.ai","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bansos-2jt.get-regist.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bbtryr.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bentdynamicslm.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bestorrogames.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bet365ce.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bet6205365.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bet63035.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bet83067.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"blajowet.cyou","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"braxapressaje-9251.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bronm0.wixsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bryfhdjffgc.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bt-100831.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bt-103187.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"bt-107510.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"btinternet-108597.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"btinternet18282.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"business-meta-center.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"byzhxx.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"c0nfrmpgsacc.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"cancel-binance.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"caracoliresidencial.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"cek-voucher.earth.web.id","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"cernifg359.cyou","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"chase-bank-one.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"chilly.makeup","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"china-link.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"chinnurpk.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"cibcgg.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"cmenvivo.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"codapay.events-games.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"coin-bosepro-log.godaddysites.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"coinbase-com-66117.danschaffert66529.workers.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"communitycasesreviewlist.web.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"conennectakasd.b-cdn.net","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"conn-twallt.gitbook.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"correctingservicesalakks.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"credito-prestamos.fra1.zeabur.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currently4988.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currently6510.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currently810.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currently8711.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currentlyatt04.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currentlyatt223.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currentlyatt468.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currentlyatt7891.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currentlyatt9854.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currentlyattyaho85748.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"currentlyattyahoo6check.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"customersupportteam.serveusers.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"cv.geldmagazin.de","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"cwgml.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"d551000.cc","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"dappprompty.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"datingteles3x.netlify.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"debank-w.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"decenlaunchpad.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"demo.dynamicsolutionit.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"desktoptg.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"dev-0014021997322.pantheonsite.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"dev-102030654785555551.pantheonsite.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"dhl.ijpcr.net.in","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"dhlexpress.hu","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"djelp.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"dknrutkslsjf.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"dkrjjhrjemfkj.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"doccvview.buzz","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"docu-auth-5775940568.bb-abogados.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"doujeucrumoufau-8054.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"dropboxubdkw.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"duysysysh.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"eagbid.ru.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ebay.ebayshoo.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ebdaf.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ejnapxqitd.cfolks.pl","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"elitefortnit.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"emailnoticeie.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"enforce-user-guidelines.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"erdtgyur57t6gyu.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"error3457uypcold.azurewebsites.net","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"eryiurgygeyigegh.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"eshop-eu.care.cps-partnersnp.de","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ethereum-apple.org","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"evenstagservices.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"facebook-loginpage-clone.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"facebook-web.cloudns.be","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"faenl.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"fb-login-clone.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"feline-full-stick.glitch.me","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"fhger75gfg2fff.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"finityrrr.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"flngf.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"form-policy-appeal-k2d7nf.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"form-policy-appeal-k2x7nf.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"free-5476373.webadorsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"free-5481257.webadorsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"free-5562390.webadorsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"freevideomelayu.tme-viral.link","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"gasbot-demos.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ggdhjssu7.wixsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ghaho.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"gheedfhj.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ghshbv.wixsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"global-reward.kraftonevent.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"gnaneshwarreddybaitinti.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"gnktan.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"goteleg-br.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"gradeis.info","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"help-manage-center.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"heriodj.shop","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"hermiovz-bustling-sled.glitch.me","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"hobitronik.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"home-100383.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"home-100489.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"home-101941.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"home-102517.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"home-104101.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"home-104529.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"home-104657.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"iemnswgehdporlkf.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"iik-3100-2023-spear-phishing-login-page.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"imtikem.vip","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"imtoken-iim.org","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"institutodentalsante.com.br","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"interface-beta-eight.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"it-outlookwebaccess.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"itklkaklkakk.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jaiganeshmachinery.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jdkajsmxncbeuwie.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jfnjkfvbhjvdc.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jfvfbremdkf50nhfgs.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jhyuj.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jinqiao114.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"join-mywhatsapp-2sa.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jttyavc.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"juno-100024.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"juno-102431.square.site","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"junoytremauilkdfh.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jxzipper.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jzhemuni-logun.godaddysites.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"jzyl669.net","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"khdny.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"learn-trzor-start.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ledger-com-updatefirmware.aparecidovisentin.com.br","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ledger-com-upgrade.gezix.com.tr","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ledger-confirm.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ledgerhardwarehelp.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ledgersafetyplatform.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ledqinlv.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"loggmaskemttaa.godaddysites.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"login-midstreams-outlook.us","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"login.94-141-120-29.cprapid.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"loginhomeinbox.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"loginscreen-att-108245.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"lojer-vohex84.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"lttcloudvpn.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"m-telegrm.cc","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"m.amazontech.cc","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"m.key5188.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mail-admin-102219.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mail-securities.square.site","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mail.apri.94-141-120-29.cprapid.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mail.spotifyyclonne.freewebhostmost.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mailboxspheretoday.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mailhomebox-8096940.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mailserverreservoir.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"malonlineservce12.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"managementbusinessrequiredaza.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"manorders.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"marketplace-center-checkitem-supp0rt-now-business.click","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"megadropclaim.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"met-aa-mass-klog-in.godaddysites.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"metamagskloin.gitbook.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"metamask-web.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"metameasklin.gitbook.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"metamsk-wallet-3.gitbook.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"metamuscklog.godaddysites.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"metau-maasck-loogiin.godaddysites.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"metawallet-server.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"metmassk-usalloggies.godaddysites.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"microsofstonline.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"micsoft.phishone.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"midjourneyex.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mikam76544444.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"morsaglobal.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"mozp.ubjoubj.shop","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"multichaintool.netlify.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"myvalue365.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"navi-airbnb.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"nerve.black","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"netflix-clone-frontend-flax.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"netflix-clone-ml.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"netflix-lite-one.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"netflix-talarys.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"netzeero.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"netzero-webmail-109987.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"netzeroinfo.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"next-airbnb-clone-sage.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"nft-lift9.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"nihaalxz.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"nodeconnectdapp.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"nordicwalkingcadiz.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"notificationcentenooooo.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"notify-suspicious-activity.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"nsrocawsso.duckdns.org","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ntlworldupdatemail.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"nuplaqsdmkd.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"nurnjjdsqs.duckdns.org","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"o08ofobnw.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"oatt745.wixsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"office-techservice.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ortakoyescortum.site","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"outlook-loginsecurity.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"outlookcode22.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pagedoc65.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pay-pay-pay-loop-jp.replit.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pedidosnozapp.com.br","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pianorollcenter.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pop.spotifycloning1.freewebhostmost.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"privateservicehsb.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"privatroom79.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"project-delta-brown.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pub-e2c2179ca4e5490390f8741af2335633.r2.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"pupstoken-whitelist.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"purple039053.studio.site","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"qiyee163.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"qnnbbbfinannnsbannk.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"quickmailservice331516277272772.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"qvegy.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"rakindotcom.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"rana-renthotel-example.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"react-netflix-delta.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"recognition-badge.netlify.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"refundpay.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"reply-notify-bussiness.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"resilient-cendol-b21196.netlify.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"review-business-case.d1t75tji1kkg4p.amplifyapp.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"reviewpage11.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"rgpih.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"rn.airenren.vip","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"robertvilliardhousing.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"rosamz123.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"saaveiices.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"safetystaying.homes","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"salofenushigo.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"savedfilters.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"sbcgloballane.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"secure.qqp.zle.temporary.site","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"securepageatt.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"securingmyledger.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"seller.shop-line.vip","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"senmeitefs.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"server.2rk3.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"server.h74w.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"server.n6b8.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"server.wyq6.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"service.santander.de","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"servicecoinwallet.live","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"seviiceess.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"sg3.xbenihime.us.kg","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaerepointt.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-101433.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-102890.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-104426.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-105083.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-105713.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-105802.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-105983.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-106114.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-107218.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shaw-107259.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shawvalidation.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shimmering-star-epoch.glitch.me","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shopee.gotback9898.cc","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shoppingwithdiscount.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"shoptkoo.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"side-revshares.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"signiatdynamatz.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"sjc.hgp.mybluehost.me","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"skybestservice.wixsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"skyserviv.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"smartwalletcoin-sync.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"smartwebdapp.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"smtp.spotifyprojectyash.freewebhostmost.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"souwttillupa-4199.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"soygrupoelite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"spotify-inspired-music-player-online.freewebhostmost.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"spotify.constantine.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"spotify7972.freewebhostmost.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"spotifyclonebyrk.freewebhostmost.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"spotifywithyash.freewebhostmost.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"srvamch.in","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"staemcommunnutty.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"start-trazor-page.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"steamcommmuty.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"sukien.pubgm.shop","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"support-uk-cshelp-personal.getit.ink","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"systemserveerr.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"talentbegins.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tapnm.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tekbotavi.pro","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telagram.vip","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telegiramv.fit","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telegram--hk.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telegram-datingfree-sex.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telegrambot-rectify.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telegrambotsmart-solution.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telegramis.work","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telegrcm.ing","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telergom.vip","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tellegram.dmrtaxes.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telpqgram.bocekilacla.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-101853.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-102223.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-102841.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-104158.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-105309.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-106488.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-106877.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-107132.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-108365.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"telstra-109995.weeblysite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"temp-jledxoxqawgkocyshafr.webadorsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tether-app.org","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tether-zh.org","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tfggfdfgddhs.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tg.m-tslegram.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"thofx.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tik-tok.cam","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tiktok897.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tiktokshopmallc.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tkbuymarket.xyz","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tkvipshop.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tlktok.me","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tlktokshop.tw","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"toinec.net","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tr.alertsgame.ru","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"trackyourpackageusps.blogspot.de","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"trezzorwallle.azurewebsites.net","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"trxdapbundle.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"trzure-en-suite.pages.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ttk169.shop","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"tyuytrecurrently.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ui-clone-neon.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"uijkr8f89oerfjncy78fo.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ujjewmanskdeoiskedn.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"unusualaccountcnfrmpages.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"updatemymailbox246346253662.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"uqei112ao.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"useridteleku.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"usps.com-tarpocev.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"usps.com-tarpoiev.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"uspsservicetrack.blogspot.de","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"uspsservicetrack.blogspot.it","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"uspssmartparcellocker.tech","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"uspssmartparcellockers.tech","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"utkepp.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"v2-pancakeswap.github.io","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"vedi.94-141-120-29.cprapid.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"veloxs-invite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"verify-page-submit-here.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"voii11cfx.mmm.page","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"walletconnect-web3.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"weasdrty.wixsite.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"web-cqxarjotd-uniswap.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"webdenet.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"welsfag-blog.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"wesrdtcfdzse5d6tfuvjdtufyi.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"woodplc.dogfriendlytahoe.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"wqsac.icu","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"www-blockchain-fi-auth.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"wxltx.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"xhrcu.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"xn--mnta-5q5a.network","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"y06gwc.webwave.dev","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"yahpi.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"yahpn.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"yondasatt.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"yufreittavassu-6526.vercel.app","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"yusdydsfjuuxx.weebly.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"zapqf.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"zcytjs.com","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"zecra.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"zgyxzggk.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"zlip.net","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"zvuhs.top","","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"5kplayer.com","/r/go.php?an=5kpwin&cvs=6.1&cb=&fui=&rt=undef&eid=&pvs=6.0&ev=ins&uc=tos573mrjamdnino&jump=//talentbegins.com/attow/owa-index.html#3mail@b.c","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"838882.com","/?home=casino&a=x","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"click.pstmrk.it","/3s/sjc.hgp.mybluehost.me%2fdbs%2f/bwla/zio5aq/aq/0ec638bc-0952-4618-944f-73740120a333/1/nhcgdhrp7k","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"datagivers.com","/f7101c3a3pb7f54dea0a99976cfw43ae6306.html","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"goo.su","/hcf4j99","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"helpnets.info","/ccf9d49ead88074a54h9dfc49c0o673cf425.html%20helpnets.info","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ipfs.io","/ipfs/bafkreidlec2bka6gte7dvl66mqivaz5kovc4xavxuga7aukprms4vpcjsa","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ipfs.io","/ipfs/bafkreieqeeu2ua46eil6yh3nfrhsw6wxmuu3rvggciznuxj4vnnlrjrm6u","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ipfs.io","/ipfs/qmnwb6uzmfyemlxamalditpnspllzyxisuutjdhueup459/dalomanb.html","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ipfs.io","/ipfs/qmnyv2kmgpzcqkplwcylltkt6auyvsdhphoe7hnrs6uxqe/","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"ipfs.io","/ipfs/qmytqhkwat1yxbkj972zsstss4vpgfhzya9fb4vannqnar","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"linkr.it","/1nkr0v","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"rebrand.ly","/7d0w1hr","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"rebrand.ly","/gm6cwnp","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
+"xurl.es","/qjjpk","phishing-filter phishing website detected","2024-11-22T12:07:59Z"
diff --git a/phishing-filter-splunk.csv.br b/phishing-filter-splunk.csv.br
new file mode 100644
index 000000000..62bf47bdd
Binary files /dev/null and b/phishing-filter-splunk.csv.br differ
diff --git a/phishing-filter-splunk.csv.gz b/phishing-filter-splunk.csv.gz
new file mode 100644
index 000000000..f7d486ebe
Binary files /dev/null and b/phishing-filter-splunk.csv.gz differ
diff --git a/phishing-filter-suricata.rules b/phishing-filter-suricata.rules
new file mode 100644
index 000000000..f143e24cb
--- /dev/null
+++ b/phishing-filter-suricata.rules
@@ -0,0 +1,493 @@
+# Title: Phishing URL Suricata Ruleset
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"073202.com"; classtype:attempted-recon; sid:200000001; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"0xugiw6pb.top"; classtype:attempted-recon; sid:200000002; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"11muskansingh.github.io"; classtype:attempted-recon; sid:200000003; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"130365.vip"; classtype:attempted-recon; sid:200000004; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"21403590.cc"; classtype:attempted-recon; sid:200000005; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"2366xyx.com"; classtype:attempted-recon; sid:200000006; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"25v05vtrg.top"; classtype:attempted-recon; sid:200000007; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"365.915sj1.xyz"; classtype:attempted-recon; sid:200000008; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"498291975887803508.weebly.com"; classtype:attempted-recon; sid:200000009; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5510003.top"; classtype:attempted-recon; sid:200000010; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"5510006.top"; classtype:attempted-recon; sid:200000011; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"551005.me"; classtype:attempted-recon; sid:200000012; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"551008.me"; classtype:attempted-recon; sid:200000013; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"57365ee.cc"; classtype:attempted-recon; sid:200000014; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"657226703365.com"; classtype:attempted-recon; sid:200000015; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"6bet938.com"; classtype:attempted-recon; sid:200000016; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"8904701.cc"; classtype:attempted-recon; sid:200000017; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"909338844400.weebly.com"; classtype:attempted-recon; sid:200000018; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"965009.com"; classtype:attempted-recon; sid:200000019; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"98f63c2a712e05fbeccf379de02ec9a5.88110.co"; classtype:attempted-recon; sid:200000020; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"a0omer.webwave.dev"; classtype:attempted-recon; sid:200000021; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"aaloo.kiwiground.top"; classtype:attempted-recon; sid:200000022; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"abueme-96e1.ehnelacsrralo.workers.dev"; classtype:attempted-recon; sid:200000023; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accountuserlogin.github.io"; classtype:attempted-recon; sid:200000024; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"accshomecnfrm0log.github.io"; classtype:attempted-recon; sid:200000025; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"adminuser.yw2201.xyz"; classtype:attempted-recon; sid:200000026; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"agenciaancla.com.ar"; classtype:attempted-recon; sid:200000027; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"airbnb-clone-one-chi.vercel.app"; classtype:attempted-recon; sid:200000028; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"allegro-400.com"; classtype:attempted-recon; sid:200000029; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazon-clone88.netlify.app"; classtype:attempted-recon; sid:200000030; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazonclonebysid.netlify.app"; classtype:attempted-recon; sid:200000031; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"amazons-help-cx-number.pages.dev"; classtype:attempted-recon; sid:200000032; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anshbotzone.com"; classtype:attempted-recon; sid:200000033; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anshidmuhmd.github.io"; classtype:attempted-recon; sid:200000034; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"anuarw.kz"; classtype:attempted-recon; sid:200000035; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.liquidations-aave.com"; classtype:attempted-recon; sid:200000036; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.paxful87.com"; classtype:attempted-recon; sid:200000037; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"app.sandbox.custombrandedboxesbyfedex.com"; classtype:attempted-recon; sid:200000038; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"appeal-solve-violation-review.vercel.app"; classtype:attempted-recon; sid:200000039; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apri.94-141-120-29.cprapid.com"; classtype:attempted-recon; sid:200000040; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"apwmensdjyeurir.weebly.com"; classtype:attempted-recon; sid:200000041; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arbnb-clone.vercel.app"; classtype:attempted-recon; sid:200000042; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arvestcd.embarkdigitalonboarding.com"; classtype:attempted-recon; sid:200000043; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"arvestrewardscard.embarkdigitalonboarding.com"; classtype:attempted-recon; sid:200000044; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atbdgtehomeupdateform.weebly.com"; classtype:attempted-recon; sid:200000045; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atftt.weebly.com"; classtype:attempted-recon; sid:200000046; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atlgnrnewt.weebly.com"; classtype:attempted-recon; sid:200000047; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atlnes.icu"; classtype:attempted-recon; sid:200000048; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atmailupdateformeupdaterltdfdinfomailacct.weebly.com"; classtype:attempted-recon; sid:200000049; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"atmailupdateformeupdatesbhtdinfomailacct.weebly.com"; classtype:attempted-recon; sid:200000050; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-100081.weeblysite.com"; classtype:attempted-recon; sid:200000051; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-102549.weeblysite.com"; classtype:attempted-recon; sid:200000052; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-102856.weeblysite.com"; classtype:attempted-recon; sid:200000053; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-10386990.weeblysite.com"; classtype:attempted-recon; sid:200000054; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-106249.weeblysite.com"; classtype:attempted-recon; sid:200000055; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-108680.weeblysite.com"; classtype:attempted-recon; sid:200000056; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"att-109026.weeblysite.com"; classtype:attempted-recon; sid:200000057; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attadm977222.weebly.com"; classtype:attempted-recon; sid:200000058; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcom-105588.weeblysite.com"; classtype:attempted-recon; sid:200000059; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attcom-107224.weeblysite.com"; classtype:attempted-recon; sid:200000060; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attconsultint.weebly.com"; classtype:attempted-recon; sid:200000061; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attflyupdateserver.weebly.com"; classtype:attempted-recon; sid:200000062; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attglobalwild.weebly.com"; classtype:attempted-recon; sid:200000063; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attmaill0gin2341.weebly.com"; classtype:attempted-recon; sid:200000064; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attnationameritechie.weebly.com"; classtype:attempted-recon; sid:200000065; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attserverupdatedmailbox.weebly.com"; classtype:attempted-recon; sid:200000066; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"attt-107147.weeblysite.com"; classtype:attempted-recon; sid:200000067; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b.3656240205.vip"; classtype:attempted-recon; sid:200000068; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b12thgst9.weeblysite.com"; classtype:attempted-recon; sid:200000069; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b35ppp.com"; classtype:attempted-recon; sid:200000070; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b35sss.com"; classtype:attempted-recon; sid:200000071; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b45017.com"; classtype:attempted-recon; sid:200000072; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"b45020.com"; classtype:attempted-recon; sid:200000073; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link"; classtype:attempted-recon; sid:200000074; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link"; classtype:attempted-recon; sid:200000075; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link"; classtype:attempted-recon; sid:200000076; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link"; classtype:attempted-recon; sid:200000077; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link"; classtype:attempted-recon; sid:200000078; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link"; classtype:attempted-recon; sid:200000079; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link"; classtype:attempted-recon; sid:200000080; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link"; classtype:attempted-recon; sid:200000081; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bancolombia.supportmaven.ai"; classtype:attempted-recon; sid:200000082; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bansos-2jt.get-regist.com"; classtype:attempted-recon; sid:200000083; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bbtryr.com"; classtype:attempted-recon; sid:200000084; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bentdynamicslm.com"; classtype:attempted-recon; sid:200000085; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bestorrogames.com"; classtype:attempted-recon; sid:200000086; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet365ce.com"; classtype:attempted-recon; sid:200000087; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet6205365.com"; classtype:attempted-recon; sid:200000088; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet63035.com"; classtype:attempted-recon; sid:200000089; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bet83067.com"; classtype:attempted-recon; sid:200000090; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"blajowet.cyou"; classtype:attempted-recon; sid:200000091; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"braxapressaje-9251.vercel.app"; classtype:attempted-recon; sid:200000092; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bronm0.wixsite.com"; classtype:attempted-recon; sid:200000093; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bryfhdjffgc.weebly.com"; classtype:attempted-recon; sid:200000094; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-100831.weeblysite.com"; classtype:attempted-recon; sid:200000095; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-103187.weeblysite.com"; classtype:attempted-recon; sid:200000096; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"bt-107510.weeblysite.com"; classtype:attempted-recon; sid:200000097; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternet-108597.weeblysite.com"; classtype:attempted-recon; sid:200000098; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"btinternet18282.weebly.com"; classtype:attempted-recon; sid:200000099; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"business-meta-center.com"; classtype:attempted-recon; sid:200000100; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"byzhxx.com"; classtype:attempted-recon; sid:200000101; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"c0nfrmpgsacc.github.io"; classtype:attempted-recon; sid:200000102; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cancel-binance.com"; classtype:attempted-recon; sid:200000103; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"caracoliresidencial.com"; classtype:attempted-recon; sid:200000104; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cek-voucher.earth.web.id"; classtype:attempted-recon; sid:200000105; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cernifg359.cyou"; classtype:attempted-recon; sid:200000106; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chase-bank-one.vercel.app"; classtype:attempted-recon; sid:200000107; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chilly.makeup"; classtype:attempted-recon; sid:200000108; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"china-link.pages.dev"; classtype:attempted-recon; sid:200000109; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"chinnurpk.github.io"; classtype:attempted-recon; sid:200000110; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cibcgg.com"; classtype:attempted-recon; sid:200000111; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cmenvivo.github.io"; classtype:attempted-recon; sid:200000112; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"codapay.events-games.com"; classtype:attempted-recon; sid:200000113; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coin-bosepro-log.godaddysites.com"; classtype:attempted-recon; sid:200000114; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"coinbase-com-66117.danschaffert66529.workers.dev"; classtype:attempted-recon; sid:200000115; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"communitycasesreviewlist.web.app"; classtype:attempted-recon; sid:200000116; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"conennectakasd.b-cdn.net"; classtype:attempted-recon; sid:200000117; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"conn-twallt.gitbook.io"; classtype:attempted-recon; sid:200000118; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"correctingservicesalakks.pages.dev"; classtype:attempted-recon; sid:200000119; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"credito-prestamos.fra1.zeabur.app"; classtype:attempted-recon; sid:200000120; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently4988.weebly.com"; classtype:attempted-recon; sid:200000121; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently6510.weebly.com"; classtype:attempted-recon; sid:200000122; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently810.weebly.com"; classtype:attempted-recon; sid:200000123; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currently8711.weebly.com"; classtype:attempted-recon; sid:200000124; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyatt04.weebly.com"; classtype:attempted-recon; sid:200000125; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyatt223.weebly.com"; classtype:attempted-recon; sid:200000126; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyatt468.weebly.com"; classtype:attempted-recon; sid:200000127; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyatt7891.weebly.com"; classtype:attempted-recon; sid:200000128; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyatt9854.weebly.com"; classtype:attempted-recon; sid:200000129; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyattyaho85748.weebly.com"; classtype:attempted-recon; sid:200000130; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"currentlyattyahoo6check.weebly.com"; classtype:attempted-recon; sid:200000131; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"customersupportteam.serveusers.com"; classtype:attempted-recon; sid:200000132; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cv.geldmagazin.de"; classtype:attempted-recon; sid:200000133; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br"; classtype:attempted-recon; sid:200000134; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"cwgml.top"; classtype:attempted-recon; sid:200000135; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"d551000.cc"; classtype:attempted-recon; sid:200000136; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dappprompty.pages.dev"; classtype:attempted-recon; sid:200000137; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"datingteles3x.netlify.app"; classtype:attempted-recon; sid:200000138; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"debank-w.github.io"; classtype:attempted-recon; sid:200000139; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"decenlaunchpad.pages.dev"; classtype:attempted-recon; sid:200000140; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"demo.dynamicsolutionit.com"; classtype:attempted-recon; sid:200000141; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"desktoptg.com"; classtype:attempted-recon; sid:200000142; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-0014021997322.pantheonsite.io"; classtype:attempted-recon; sid:200000143; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dev-102030654785555551.pantheonsite.io"; classtype:attempted-recon; sid:200000144; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhl.ijpcr.net.in"; classtype:attempted-recon; sid:200000145; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dhlexpress.hu"; classtype:attempted-recon; sid:200000146; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"djelp.top"; classtype:attempted-recon; sid:200000147; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dknrutkslsjf.weebly.com"; classtype:attempted-recon; sid:200000148; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dkrjjhrjemfkj.weeblysite.com"; classtype:attempted-recon; sid:200000149; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doccvview.buzz"; classtype:attempted-recon; sid:200000150; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"docu-auth-5775940568.bb-abogados.com"; classtype:attempted-recon; sid:200000151; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"doujeucrumoufau-8054.vercel.app"; classtype:attempted-recon; sid:200000152; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"dropboxubdkw.weebly.com"; classtype:attempted-recon; sid:200000153; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"duysysysh.weebly.com"; classtype:attempted-recon; sid:200000154; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eagbid.ru.com"; classtype:attempted-recon; sid:200000155; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebay.ebayshoo.com"; classtype:attempted-recon; sid:200000156; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ebdaf.top"; classtype:attempted-recon; sid:200000157; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ejnapxqitd.cfolks.pl"; classtype:attempted-recon; sid:200000158; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"elitefortnit.github.io"; classtype:attempted-recon; sid:200000159; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"emailnoticeie.weebly.com"; classtype:attempted-recon; sid:200000160; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"enforce-user-guidelines.vercel.app"; classtype:attempted-recon; sid:200000161; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"erdtgyur57t6gyu.weebly.com"; classtype:attempted-recon; sid:200000162; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"error3457uypcold.azurewebsites.net"; classtype:attempted-recon; sid:200000163; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eryiurgygeyigegh.weeblysite.com"; classtype:attempted-recon; sid:200000164; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"eshop-eu.care.cps-partnersnp.de"; classtype:attempted-recon; sid:200000165; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ethereum-apple.org"; classtype:attempted-recon; sid:200000166; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"evenstagservices.com"; classtype:attempted-recon; sid:200000167; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-loginpage-clone.vercel.app"; classtype:attempted-recon; sid:200000168; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"facebook-web.cloudns.be"; classtype:attempted-recon; sid:200000169; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"faenl.top"; classtype:attempted-recon; sid:200000170; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fb-login-clone.vercel.app"; classtype:attempted-recon; sid:200000171; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"feline-full-stick.glitch.me"; classtype:attempted-recon; sid:200000172; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"fhger75gfg2fff.top"; classtype:attempted-recon; sid:200000173; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"finityrrr.weebly.com"; classtype:attempted-recon; sid:200000174; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"flngf.top"; classtype:attempted-recon; sid:200000175; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"form-policy-appeal-k2d7nf.vercel.app"; classtype:attempted-recon; sid:200000176; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"form-policy-appeal-k2x7nf.vercel.app"; classtype:attempted-recon; sid:200000177; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-5476373.webadorsite.com"; classtype:attempted-recon; sid:200000178; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-5481257.webadorsite.com"; classtype:attempted-recon; sid:200000179; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"free-5562390.webadorsite.com"; classtype:attempted-recon; sid:200000180; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"freevideomelayu.tme-viral.link"; classtype:attempted-recon; sid:200000181; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gasbot-demos.vercel.app"; classtype:attempted-recon; sid:200000182; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ggdhjssu7.wixsite.com"; classtype:attempted-recon; sid:200000183; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghaho.vercel.app"; classtype:attempted-recon; sid:200000184; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gheedfhj.weebly.com"; classtype:attempted-recon; sid:200000185; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ghshbv.wixsite.com"; classtype:attempted-recon; sid:200000186; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"global-reward.kraftonevent.com"; classtype:attempted-recon; sid:200000187; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gnaneshwarreddybaitinti.github.io"; classtype:attempted-recon; sid:200000188; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gnktan.top"; classtype:attempted-recon; sid:200000189; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"goteleg-br.top"; classtype:attempted-recon; sid:200000190; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"gradeis.info"; classtype:attempted-recon; sid:200000191; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"help-manage-center.com"; classtype:attempted-recon; sid:200000192; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"heriodj.shop"; classtype:attempted-recon; sid:200000193; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hermiovz-bustling-sled.glitch.me"; classtype:attempted-recon; sid:200000194; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"hobitronik.com"; classtype:attempted-recon; sid:200000195; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-100383.weeblysite.com"; classtype:attempted-recon; sid:200000196; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-100489.weeblysite.com"; classtype:attempted-recon; sid:200000197; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-101941.weeblysite.com"; classtype:attempted-recon; sid:200000198; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-102517.weeblysite.com"; classtype:attempted-recon; sid:200000199; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-104101.weeblysite.com"; classtype:attempted-recon; sid:200000200; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-104529.weeblysite.com"; classtype:attempted-recon; sid:200000201; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"home-104657.weeblysite.com"; classtype:attempted-recon; sid:200000202; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iemnswgehdporlkf.weebly.com"; classtype:attempted-recon; sid:200000203; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"iik-3100-2023-spear-phishing-login-page.vercel.app"; classtype:attempted-recon; sid:200000204; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imtikem.vip"; classtype:attempted-recon; sid:200000205; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"imtoken-iim.org"; classtype:attempted-recon; sid:200000206; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"institutodentalsante.com.br"; classtype:attempted-recon; sid:200000207; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"interface-beta-eight.vercel.app"; classtype:attempted-recon; sid:200000208; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"it-outlookwebaccess.com"; classtype:attempted-recon; sid:200000209; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"itklkaklkakk.weebly.com"; classtype:attempted-recon; sid:200000210; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jaiganeshmachinery.com"; classtype:attempted-recon; sid:200000211; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jdkajsmxncbeuwie.weebly.com"; classtype:attempted-recon; sid:200000212; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfnjkfvbhjvdc.weebly.com"; classtype:attempted-recon; sid:200000213; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jfvfbremdkf50nhfgs.weeblysite.com"; classtype:attempted-recon; sid:200000214; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jhyuj.weebly.com"; classtype:attempted-recon; sid:200000215; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jinqiao114.com"; classtype:attempted-recon; sid:200000216; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"join-mywhatsapp-2sa.pages.dev"; classtype:attempted-recon; sid:200000217; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jttyavc.com"; classtype:attempted-recon; sid:200000218; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juno-100024.weeblysite.com"; classtype:attempted-recon; sid:200000219; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"juno-102431.square.site"; classtype:attempted-recon; sid:200000220; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"junoytremauilkdfh.weebly.com"; classtype:attempted-recon; sid:200000221; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jxzipper.com"; classtype:attempted-recon; sid:200000222; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzhemuni-logun.godaddysites.com"; classtype:attempted-recon; sid:200000223; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"jzyl669.net"; classtype:attempted-recon; sid:200000224; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"khdny.top"; classtype:attempted-recon; sid:200000225; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"learn-trzor-start.github.io"; classtype:attempted-recon; sid:200000226; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ledger-com-updatefirmware.aparecidovisentin.com.br"; classtype:attempted-recon; sid:200000227; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ledger-com-upgrade.gezix.com.tr"; classtype:attempted-recon; sid:200000228; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ledger-confirm.com"; classtype:attempted-recon; sid:200000229; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ledgerhardwarehelp.com"; classtype:attempted-recon; sid:200000230; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ledgersafetyplatform.com"; classtype:attempted-recon; sid:200000231; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ledqinlv.com"; classtype:attempted-recon; sid:200000232; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loggmaskemttaa.godaddysites.com"; classtype:attempted-recon; sid:200000233; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login-midstreams-outlook.us"; classtype:attempted-recon; sid:200000234; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"login.94-141-120-29.cprapid.com"; classtype:attempted-recon; sid:200000235; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginhomeinbox.com"; classtype:attempted-recon; sid:200000236; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"loginscreen-att-108245.weeblysite.com"; classtype:attempted-recon; sid:200000237; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lojer-vohex84.vercel.app"; classtype:attempted-recon; sid:200000238; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br"; classtype:attempted-recon; sid:200000239; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"lttcloudvpn.pages.dev"; classtype:attempted-recon; sid:200000240; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m-telegrm.cc"; classtype:attempted-recon; sid:200000241; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.amazontech.cc"; classtype:attempted-recon; sid:200000242; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"m.key5188.com"; classtype:attempted-recon; sid:200000243; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail-admin-102219.weeblysite.com"; classtype:attempted-recon; sid:200000244; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail-securities.square.site"; classtype:attempted-recon; sid:200000245; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.apri.94-141-120-29.cprapid.com"; classtype:attempted-recon; sid:200000246; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mail.spotifyyclonne.freewebhostmost.com"; classtype:attempted-recon; sid:200000247; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailboxspheretoday.weebly.com"; classtype:attempted-recon; sid:200000248; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailhomebox-8096940.weeblysite.com"; classtype:attempted-recon; sid:200000249; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mailserverreservoir.weebly.com"; classtype:attempted-recon; sid:200000250; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"malonlineservce12.weebly.com"; classtype:attempted-recon; sid:200000251; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"managementbusinessrequiredaza.weebly.com"; classtype:attempted-recon; sid:200000252; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"manorders.com"; classtype:attempted-recon; sid:200000253; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"marketplace-center-checkitem-supp0rt-now-business.click"; classtype:attempted-recon; sid:200000254; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"megadropclaim.com"; classtype:attempted-recon; sid:200000255; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"met-aa-mass-klog-in.godaddysites.com"; classtype:attempted-recon; sid:200000256; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamagskloin.gitbook.io"; classtype:attempted-recon; sid:200000257; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamask-web.vercel.app"; classtype:attempted-recon; sid:200000258; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metameasklin.gitbook.io"; classtype:attempted-recon; sid:200000259; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamsk-wallet-3.gitbook.io"; classtype:attempted-recon; sid:200000260; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metamuscklog.godaddysites.com"; classtype:attempted-recon; sid:200000261; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metau-maasck-loogiin.godaddysites.com"; classtype:attempted-recon; sid:200000262; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metawallet-server.vercel.app"; classtype:attempted-recon; sid:200000263; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"metmassk-usalloggies.godaddysites.com"; classtype:attempted-recon; sid:200000264; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"microsofstonline.com"; classtype:attempted-recon; sid:200000265; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"micsoft.phishone.com"; classtype:attempted-recon; sid:200000266; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"midjourneyex.com"; classtype:attempted-recon; sid:200000267; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mikam76544444.weebly.com"; classtype:attempted-recon; sid:200000268; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"morsaglobal.com"; classtype:attempted-recon; sid:200000269; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"mozp.ubjoubj.shop"; classtype:attempted-recon; sid:200000270; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"multichaintool.netlify.app"; classtype:attempted-recon; sid:200000271; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"myvalue365.com"; classtype:attempted-recon; sid:200000272; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"navi-airbnb.vercel.app"; classtype:attempted-recon; sid:200000273; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nerve.black"; classtype:attempted-recon; sid:200000274; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netflix-clone-frontend-flax.vercel.app"; classtype:attempted-recon; sid:200000275; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netflix-clone-ml.vercel.app"; classtype:attempted-recon; sid:200000276; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netflix-lite-one.vercel.app"; classtype:attempted-recon; sid:200000277; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netflix-talarys.vercel.app"; classtype:attempted-recon; sid:200000278; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netzeero.weebly.com"; classtype:attempted-recon; sid:200000279; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netzero-webmail-109987.weeblysite.com"; classtype:attempted-recon; sid:200000280; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"netzeroinfo.weebly.com"; classtype:attempted-recon; sid:200000281; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"next-airbnb-clone-sage.vercel.app"; classtype:attempted-recon; sid:200000282; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nft-lift9.vercel.app"; classtype:attempted-recon; sid:200000283; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nihaalxz.github.io"; classtype:attempted-recon; sid:200000284; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nodeconnectdapp.pages.dev"; classtype:attempted-recon; sid:200000285; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nordicwalkingcadiz.com"; classtype:attempted-recon; sid:200000286; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notificationcentenooooo.weebly.com"; classtype:attempted-recon; sid:200000287; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"notify-suspicious-activity.vercel.app"; classtype:attempted-recon; sid:200000288; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nsrocawsso.duckdns.org"; classtype:attempted-recon; sid:200000289; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ntlworldupdatemail.weebly.com"; classtype:attempted-recon; sid:200000290; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nuplaqsdmkd.weebly.com"; classtype:attempted-recon; sid:200000291; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"nurnjjdsqs.duckdns.org"; classtype:attempted-recon; sid:200000292; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"o08ofobnw.top"; classtype:attempted-recon; sid:200000293; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"oatt745.wixsite.com"; classtype:attempted-recon; sid:200000294; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"office-techservice.com"; classtype:attempted-recon; sid:200000295; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ortakoyescortum.site"; classtype:attempted-recon; sid:200000296; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlook-loginsecurity.com"; classtype:attempted-recon; sid:200000297; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"outlookcode22.weebly.com"; classtype:attempted-recon; sid:200000298; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pagedoc65.pages.dev"; classtype:attempted-recon; sid:200000299; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pay-pay-pay-loop-jp.replit.app"; classtype:attempted-recon; sid:200000300; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pedidosnozapp.com.br"; classtype:attempted-recon; sid:200000301; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pianorollcenter.com"; classtype:attempted-recon; sid:200000302; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pop.spotifycloning1.freewebhostmost.com"; classtype:attempted-recon; sid:200000303; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"privateservicehsb.com"; classtype:attempted-recon; sid:200000304; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"privatroom79.pages.dev"; classtype:attempted-recon; sid:200000305; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"project-delta-brown.vercel.app"; classtype:attempted-recon; sid:200000306; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev"; classtype:attempted-recon; sid:200000307; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pub-e2c2179ca4e5490390f8741af2335633.r2.dev"; classtype:attempted-recon; sid:200000308; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev"; classtype:attempted-recon; sid:200000309; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"pupstoken-whitelist.pages.dev"; classtype:attempted-recon; sid:200000310; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"purple039053.studio.site"; classtype:attempted-recon; sid:200000311; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qiyee163.com"; classtype:attempted-recon; sid:200000312; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qnnbbbfinannnsbannk.vercel.app"; classtype:attempted-recon; sid:200000313; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"quickmailservice331516277272772.weebly.com"; classtype:attempted-recon; sid:200000314; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"qvegy.top"; classtype:attempted-recon; sid:200000315; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rakindotcom.github.io"; classtype:attempted-recon; sid:200000316; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rana-renthotel-example.vercel.app"; classtype:attempted-recon; sid:200000317; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"react-netflix-delta.vercel.app"; classtype:attempted-recon; sid:200000318; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"recognition-badge.netlify.app"; classtype:attempted-recon; sid:200000319; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"refundpay.weebly.com"; classtype:attempted-recon; sid:200000320; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reply-notify-bussiness.com"; classtype:attempted-recon; sid:200000321; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"resilient-cendol-b21196.netlify.app"; classtype:attempted-recon; sid:200000322; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"review-business-case.d1t75tji1kkg4p.amplifyapp.com"; classtype:attempted-recon; sid:200000323; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"reviewpage11.github.io"; classtype:attempted-recon; sid:200000324; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rgpih.top"; classtype:attempted-recon; sid:200000325; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rn.airenren.vip"; classtype:attempted-recon; sid:200000326; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"robertvilliardhousing.weebly.com"; classtype:attempted-recon; sid:200000327; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"rosamz123.github.io"; classtype:attempted-recon; sid:200000328; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"saaveiices.weebly.com"; classtype:attempted-recon; sid:200000329; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"safetystaying.homes"; classtype:attempted-recon; sid:200000330; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"salofenushigo.weebly.com"; classtype:attempted-recon; sid:200000331; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"savedfilters.top"; classtype:attempted-recon; sid:200000332; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sbcgloballane.weebly.com"; classtype:attempted-recon; sid:200000333; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"secure.qqp.zle.temporary.site"; classtype:attempted-recon; sid:200000334; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securepageatt.weebly.com"; classtype:attempted-recon; sid:200000335; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"securingmyledger.com"; classtype:attempted-recon; sid:200000336; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seller.shop-line.vip"; classtype:attempted-recon; sid:200000337; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"senmeitefs.com"; classtype:attempted-recon; sid:200000338; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.2rk3.com"; classtype:attempted-recon; sid:200000339; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.h74w.com"; classtype:attempted-recon; sid:200000340; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.n6b8.com"; classtype:attempted-recon; sid:200000341; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"server.wyq6.com"; classtype:attempted-recon; sid:200000342; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"service.santander.de"; classtype:attempted-recon; sid:200000343; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"servicecoinwallet.live"; classtype:attempted-recon; sid:200000344; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"seviiceess.weebly.com"; classtype:attempted-recon; sid:200000345; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sg3.xbenihime.us.kg"; classtype:attempted-recon; sid:200000346; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaerepointt.weebly.com"; classtype:attempted-recon; sid:200000347; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-101433.weeblysite.com"; classtype:attempted-recon; sid:200000348; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-102890.weeblysite.com"; classtype:attempted-recon; sid:200000349; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-104426.weeblysite.com"; classtype:attempted-recon; sid:200000350; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-105083.weeblysite.com"; classtype:attempted-recon; sid:200000351; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-105713.weeblysite.com"; classtype:attempted-recon; sid:200000352; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-105802.weeblysite.com"; classtype:attempted-recon; sid:200000353; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-105983.weeblysite.com"; classtype:attempted-recon; sid:200000354; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-106114.weeblysite.com"; classtype:attempted-recon; sid:200000355; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-107218.weeblysite.com"; classtype:attempted-recon; sid:200000356; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shaw-107259.weeblysite.com"; classtype:attempted-recon; sid:200000357; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shawvalidation.weebly.com"; classtype:attempted-recon; sid:200000358; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shimmering-star-epoch.glitch.me"; classtype:attempted-recon; sid:200000359; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shopee.gotback9898.cc"; classtype:attempted-recon; sid:200000360; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shoppingwithdiscount.top"; classtype:attempted-recon; sid:200000361; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"shoptkoo.com"; classtype:attempted-recon; sid:200000362; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"side-revshares.pages.dev"; classtype:attempted-recon; sid:200000363; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"signiatdynamatz.weebly.com"; classtype:attempted-recon; sid:200000364; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sjc.hgp.mybluehost.me"; classtype:attempted-recon; sid:200000365; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skybestservice.wixsite.com"; classtype:attempted-recon; sid:200000366; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"skyserviv.weebly.com"; classtype:attempted-recon; sid:200000367; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartwalletcoin-sync.pages.dev"; classtype:attempted-recon; sid:200000368; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smartwebdapp.pages.dev"; classtype:attempted-recon; sid:200000369; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"smtp.spotifyprojectyash.freewebhostmost.com"; classtype:attempted-recon; sid:200000370; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"souwttillupa-4199.vercel.app"; classtype:attempted-recon; sid:200000371; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"soygrupoelite.com"; classtype:attempted-recon; sid:200000372; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spotify-inspired-music-player-online.freewebhostmost.com"; classtype:attempted-recon; sid:200000373; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spotify.constantine.dev"; classtype:attempted-recon; sid:200000374; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spotify7972.freewebhostmost.com"; classtype:attempted-recon; sid:200000375; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spotifyclonebyrk.freewebhostmost.com"; classtype:attempted-recon; sid:200000376; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"spotifywithyash.freewebhostmost.com"; classtype:attempted-recon; sid:200000377; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"srvamch.in"; classtype:attempted-recon; sid:200000378; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"staemcommunnutty.com"; classtype:attempted-recon; sid:200000379; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"start-trazor-page.github.io"; classtype:attempted-recon; sid:200000380; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"steamcommmuty.com"; classtype:attempted-recon; sid:200000381; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"sukien.pubgm.shop"; classtype:attempted-recon; sid:200000382; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"support-uk-cshelp-personal.getit.ink"; classtype:attempted-recon; sid:200000383; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"systemserveerr.weebly.com"; classtype:attempted-recon; sid:200000384; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"talentbegins.com"; classtype:attempted-recon; sid:200000385; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tapnm.top"; classtype:attempted-recon; sid:200000386; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tekbotavi.pro"; classtype:attempted-recon; sid:200000387; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telagram.vip"; classtype:attempted-recon; sid:200000388; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegiramv.fit"; classtype:attempted-recon; sid:200000389; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegram--hk.com"; classtype:attempted-recon; sid:200000390; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegram-datingfree-sex.pages.dev"; classtype:attempted-recon; sid:200000391; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrambot-rectify.pages.dev"; classtype:attempted-recon; sid:200000392; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrambotsmart-solution.pages.dev"; classtype:attempted-recon; sid:200000393; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegramis.work"; classtype:attempted-recon; sid:200000394; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telegrcm.ing"; classtype:attempted-recon; sid:200000395; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telergom.vip"; classtype:attempted-recon; sid:200000396; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tellegram.dmrtaxes.com"; classtype:attempted-recon; sid:200000397; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telpqgram.bocekilacla.com"; classtype:attempted-recon; sid:200000398; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-101853.weeblysite.com"; classtype:attempted-recon; sid:200000399; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-102223.weeblysite.com"; classtype:attempted-recon; sid:200000400; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-102841.weeblysite.com"; classtype:attempted-recon; sid:200000401; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-104158.weeblysite.com"; classtype:attempted-recon; sid:200000402; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-105309.weeblysite.com"; classtype:attempted-recon; sid:200000403; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-106488.weeblysite.com"; classtype:attempted-recon; sid:200000404; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-106877.weeblysite.com"; classtype:attempted-recon; sid:200000405; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-107132.weeblysite.com"; classtype:attempted-recon; sid:200000406; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-108365.weeblysite.com"; classtype:attempted-recon; sid:200000407; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"telstra-109995.weeblysite.com"; classtype:attempted-recon; sid:200000408; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"temp-jledxoxqawgkocyshafr.webadorsite.com"; classtype:attempted-recon; sid:200000409; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tether-app.org"; classtype:attempted-recon; sid:200000410; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tether-zh.org"; classtype:attempted-recon; sid:200000411; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tfggfdfgddhs.weebly.com"; classtype:attempted-recon; sid:200000412; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tg.m-tslegram.top"; classtype:attempted-recon; sid:200000413; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"thofx.top"; classtype:attempted-recon; sid:200000414; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tik-tok.cam"; classtype:attempted-recon; sid:200000415; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiktok897.com"; classtype:attempted-recon; sid:200000416; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tiktokshopmallc.com"; classtype:attempted-recon; sid:200000417; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkbuymarket.xyz"; classtype:attempted-recon; sid:200000418; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tkvipshop.top"; classtype:attempted-recon; sid:200000419; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlktok.me"; classtype:attempted-recon; sid:200000420; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tlktokshop.tw"; classtype:attempted-recon; sid:200000421; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"toinec.net"; classtype:attempted-recon; sid:200000422; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tr.alertsgame.ru"; classtype:attempted-recon; sid:200000423; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trackyourpackageusps.blogspot.de"; classtype:attempted-recon; sid:200000424; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trezzorwallle.azurewebsites.net"; classtype:attempted-recon; sid:200000425; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trxdapbundle.pages.dev"; classtype:attempted-recon; sid:200000426; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"trzure-en-suite.pages.dev"; classtype:attempted-recon; sid:200000427; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ttk169.shop"; classtype:attempted-recon; sid:200000428; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"tyuytrecurrently.weebly.com"; classtype:attempted-recon; sid:200000429; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ui-clone-neon.vercel.app"; classtype:attempted-recon; sid:200000430; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uijkr8f89oerfjncy78fo.weebly.com"; classtype:attempted-recon; sid:200000431; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"ujjewmanskdeoiskedn.weebly.com"; classtype:attempted-recon; sid:200000432; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"unusualaccountcnfrmpages.github.io"; classtype:attempted-recon; sid:200000433; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"updatemymailbox246346253662.weebly.com"; classtype:attempted-recon; sid:200000434; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uqei112ao.top"; classtype:attempted-recon; sid:200000435; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"useridteleku.com"; classtype:attempted-recon; sid:200000436; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tarpocev.top"; classtype:attempted-recon; sid:200000437; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"usps.com-tarpoiev.top"; classtype:attempted-recon; sid:200000438; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsservicetrack.blogspot.de"; classtype:attempted-recon; sid:200000439; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspsservicetrack.blogspot.it"; classtype:attempted-recon; sid:200000440; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspssmartparcellocker.tech"; classtype:attempted-recon; sid:200000441; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"uspssmartparcellockers.tech"; classtype:attempted-recon; sid:200000442; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"utkepp.top"; classtype:attempted-recon; sid:200000443; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"v2-pancakeswap.github.io"; classtype:attempted-recon; sid:200000444; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"vedi.94-141-120-29.cprapid.com"; classtype:attempted-recon; sid:200000445; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"veloxs-invite.com"; classtype:attempted-recon; sid:200000446; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"verify-page-submit-here.vercel.app"; classtype:attempted-recon; sid:200000447; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"voii11cfx.mmm.page"; classtype:attempted-recon; sid:200000448; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"walletconnect-web3.vercel.app"; classtype:attempted-recon; sid:200000449; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"weasdrty.wixsite.com"; classtype:attempted-recon; sid:200000450; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"web-cqxarjotd-uniswap.vercel.app"; classtype:attempted-recon; sid:200000451; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"webdenet.weebly.com"; classtype:attempted-recon; sid:200000452; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"welsfag-blog.vercel.app"; classtype:attempted-recon; sid:200000453; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wesrdtcfdzse5d6tfuvjdtufyi.weebly.com"; classtype:attempted-recon; sid:200000454; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"woodplc.dogfriendlytahoe.com"; classtype:attempted-recon; sid:200000455; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wqsac.icu"; classtype:attempted-recon; sid:200000456; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"www-blockchain-fi-auth.vercel.app"; classtype:attempted-recon; sid:200000457; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"wxltx.com"; classtype:attempted-recon; sid:200000458; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xhrcu.top"; classtype:attempted-recon; sid:200000459; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"xn--mnta-5q5a.network"; classtype:attempted-recon; sid:200000460; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"y06gwc.webwave.dev"; classtype:attempted-recon; sid:200000461; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahpi.com"; classtype:attempted-recon; sid:200000462; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yahpn.com"; classtype:attempted-recon; sid:200000463; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yondasatt.weebly.com"; classtype:attempted-recon; sid:200000464; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yufreittavassu-6526.vercel.app"; classtype:attempted-recon; sid:200000465; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"yusdydsfjuuxx.weebly.com"; classtype:attempted-recon; sid:200000466; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zapqf.top"; classtype:attempted-recon; sid:200000467; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zcytjs.com"; classtype:attempted-recon; sid:200000468; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zecra.top"; classtype:attempted-recon; sid:200000469; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zgyxzggk.top"; classtype:attempted-recon; sid:200000470; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zlip.net"; classtype:attempted-recon; sid:200000471; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.host; content:"zvuhs.top"; classtype:attempted-recon; sid:200000472; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/r/go.php?an=5kpwin&cvs=6.1&cb=&fui=&rt=undef&eid=&pvs=6.0&ev=ins&uc=tos573mrjamdnino&jump=//talentbegins.com/attow/owa-index.html#3mail@b.c"; endswith; nocase; http.host; content:"5kplayer.com"; classtype:attempted-recon; sid:200000473; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/?home=casino&a=x"; endswith; nocase; http.host; content:"838882.com"; classtype:attempted-recon; sid:200000474; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/3s/sjc.hgp.mybluehost.me%2fdbs%2f/bwla/zio5aq/aq/0ec638bc-0952-4618-944f-73740120a333/1/nhcgdhrp7k"; endswith; nocase; http.host; content:"click.pstmrk.it"; classtype:attempted-recon; sid:200000475; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/f7101c3a3pb7f54dea0a99976cfw43ae6306.html"; endswith; nocase; http.host; content:"datagivers.com"; classtype:attempted-recon; sid:200000476; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/hcf4j99"; endswith; nocase; http.host; content:"goo.su"; classtype:attempted-recon; sid:200000477; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ccf9d49ead88074a54h9dfc49c0o673cf425.html%20helpnets.info"; endswith; nocase; http.host; content:"helpnets.info"; classtype:attempted-recon; sid:200000478; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafkreidlec2bka6gte7dvl66mqivaz5kovc4xavxuga7aukprms4vpcjsa"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200000479; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/bafkreieqeeu2ua46eil6yh3nfrhsw6wxmuu3rvggciznuxj4vnnlrjrm6u"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200000480; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmnwb6uzmfyemlxamalditpnspllzyxisuutjdhueup459/dalomanb.html"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200000481; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmnyv2kmgpzcqkplwcylltkt6auyvsdhphoe7hnrs6uxqe/"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200000482; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/ipfs/qmytqhkwat1yxbkj972zsstss4vpgfhzya9fb4vannqnar"; endswith; nocase; http.host; content:"ipfs.io"; classtype:attempted-recon; sid:200000483; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/1nkr0v"; endswith; nocase; http.host; content:"linkr.it"; classtype:attempted-recon; sid:200000484; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/7d0w1hr"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000485; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/gm6cwnp"; endswith; nocase; http.host; content:"rebrand.ly"; classtype:attempted-recon; sid:200000486; rev:1;)
+alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; flow:established,from_client; http.method; content:"GET"; http.uri; content:"/qjjpk"; endswith; nocase; http.host; content:"xurl.es"; classtype:attempted-recon; sid:200000487; rev:1;)
diff --git a/phishing-filter-suricata.rules.br b/phishing-filter-suricata.rules.br
new file mode 100644
index 000000000..bb1f86b4a
Binary files /dev/null and b/phishing-filter-suricata.rules.br differ
diff --git a/phishing-filter-suricata.rules.gz b/phishing-filter-suricata.rules.gz
new file mode 100644
index 000000000..94303eb52
Binary files /dev/null and b/phishing-filter-suricata.rules.gz differ
diff --git a/phishing-filter-unbound.conf b/phishing-filter-unbound.conf
new file mode 100644
index 000000000..b6303ebed
--- /dev/null
+++ b/phishing-filter-unbound.conf
@@ -0,0 +1,478 @@
+# Title: Phishing Domains Unbound Blocklist
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+local-zone: "073202.com" always_nxdomain
+local-zone: "0xugiw6pb.top" always_nxdomain
+local-zone: "11muskansingh.github.io" always_nxdomain
+local-zone: "130365.vip" always_nxdomain
+local-zone: "21403590.cc" always_nxdomain
+local-zone: "2366xyx.com" always_nxdomain
+local-zone: "25v05vtrg.top" always_nxdomain
+local-zone: "365.915sj1.xyz" always_nxdomain
+local-zone: "498291975887803508.weebly.com" always_nxdomain
+local-zone: "5510003.top" always_nxdomain
+local-zone: "5510006.top" always_nxdomain
+local-zone: "551005.me" always_nxdomain
+local-zone: "551008.me" always_nxdomain
+local-zone: "57365ee.cc" always_nxdomain
+local-zone: "657226703365.com" always_nxdomain
+local-zone: "6bet938.com" always_nxdomain
+local-zone: "8904701.cc" always_nxdomain
+local-zone: "909338844400.weebly.com" always_nxdomain
+local-zone: "965009.com" always_nxdomain
+local-zone: "98f63c2a712e05fbeccf379de02ec9a5.88110.co" always_nxdomain
+local-zone: "a0omer.webwave.dev" always_nxdomain
+local-zone: "aaloo.kiwiground.top" always_nxdomain
+local-zone: "abueme-96e1.ehnelacsrralo.workers.dev" always_nxdomain
+local-zone: "accountuserlogin.github.io" always_nxdomain
+local-zone: "accshomecnfrm0log.github.io" always_nxdomain
+local-zone: "adminuser.yw2201.xyz" always_nxdomain
+local-zone: "agenciaancla.com.ar" always_nxdomain
+local-zone: "airbnb-clone-one-chi.vercel.app" always_nxdomain
+local-zone: "allegro-400.com" always_nxdomain
+local-zone: "amazon-clone88.netlify.app" always_nxdomain
+local-zone: "amazonclonebysid.netlify.app" always_nxdomain
+local-zone: "amazons-help-cx-number.pages.dev" always_nxdomain
+local-zone: "anshbotzone.com" always_nxdomain
+local-zone: "anshidmuhmd.github.io" always_nxdomain
+local-zone: "anuarw.kz" always_nxdomain
+local-zone: "app.liquidations-aave.com" always_nxdomain
+local-zone: "app.paxful87.com" always_nxdomain
+local-zone: "app.sandbox.custombrandedboxesbyfedex.com" always_nxdomain
+local-zone: "appeal-solve-violation-review.vercel.app" always_nxdomain
+local-zone: "apri.94-141-120-29.cprapid.com" always_nxdomain
+local-zone: "apwmensdjyeurir.weebly.com" always_nxdomain
+local-zone: "arbnb-clone.vercel.app" always_nxdomain
+local-zone: "arvestcd.embarkdigitalonboarding.com" always_nxdomain
+local-zone: "arvestrewardscard.embarkdigitalonboarding.com" always_nxdomain
+local-zone: "atbdgtehomeupdateform.weebly.com" always_nxdomain
+local-zone: "atftt.weebly.com" always_nxdomain
+local-zone: "atlgnrnewt.weebly.com" always_nxdomain
+local-zone: "atlnes.icu" always_nxdomain
+local-zone: "atmailupdateformeupdaterltdfdinfomailacct.weebly.com" always_nxdomain
+local-zone: "atmailupdateformeupdatesbhtdinfomailacct.weebly.com" always_nxdomain
+local-zone: "att-100081.weeblysite.com" always_nxdomain
+local-zone: "att-102549.weeblysite.com" always_nxdomain
+local-zone: "att-102856.weeblysite.com" always_nxdomain
+local-zone: "att-10386990.weeblysite.com" always_nxdomain
+local-zone: "att-106249.weeblysite.com" always_nxdomain
+local-zone: "att-108680.weeblysite.com" always_nxdomain
+local-zone: "att-109026.weeblysite.com" always_nxdomain
+local-zone: "attadm977222.weebly.com" always_nxdomain
+local-zone: "attcom-105588.weeblysite.com" always_nxdomain
+local-zone: "attcom-107224.weeblysite.com" always_nxdomain
+local-zone: "attconsultint.weebly.com" always_nxdomain
+local-zone: "attflyupdateserver.weebly.com" always_nxdomain
+local-zone: "attglobalwild.weebly.com" always_nxdomain
+local-zone: "attmaill0gin2341.weebly.com" always_nxdomain
+local-zone: "attnationameritechie.weebly.com" always_nxdomain
+local-zone: "attserverupdatedmailbox.weebly.com" always_nxdomain
+local-zone: "attt-107147.weeblysite.com" always_nxdomain
+local-zone: "b.3656240205.vip" always_nxdomain
+local-zone: "b12thgst9.weeblysite.com" always_nxdomain
+local-zone: "b35ppp.com" always_nxdomain
+local-zone: "b35sss.com" always_nxdomain
+local-zone: "b45017.com" always_nxdomain
+local-zone: "b45020.com" always_nxdomain
+local-zone: "bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link" always_nxdomain
+local-zone: "bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link" always_nxdomain
+local-zone: "bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link" always_nxdomain
+local-zone: "bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link" always_nxdomain
+local-zone: "bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link" always_nxdomain
+local-zone: "bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link" always_nxdomain
+local-zone: "bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link" always_nxdomain
+local-zone: "bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link" always_nxdomain
+local-zone: "bancolombia.supportmaven.ai" always_nxdomain
+local-zone: "bansos-2jt.get-regist.com" always_nxdomain
+local-zone: "bbtryr.com" always_nxdomain
+local-zone: "bentdynamicslm.com" always_nxdomain
+local-zone: "bestorrogames.com" always_nxdomain
+local-zone: "bet365ce.com" always_nxdomain
+local-zone: "bet6205365.com" always_nxdomain
+local-zone: "bet63035.com" always_nxdomain
+local-zone: "bet83067.com" always_nxdomain
+local-zone: "blajowet.cyou" always_nxdomain
+local-zone: "braxapressaje-9251.vercel.app" always_nxdomain
+local-zone: "bronm0.wixsite.com" always_nxdomain
+local-zone: "bryfhdjffgc.weebly.com" always_nxdomain
+local-zone: "bt-100831.weeblysite.com" always_nxdomain
+local-zone: "bt-103187.weeblysite.com" always_nxdomain
+local-zone: "bt-107510.weeblysite.com" always_nxdomain
+local-zone: "btinternet-108597.weeblysite.com" always_nxdomain
+local-zone: "btinternet18282.weebly.com" always_nxdomain
+local-zone: "business-meta-center.com" always_nxdomain
+local-zone: "byzhxx.com" always_nxdomain
+local-zone: "c0nfrmpgsacc.github.io" always_nxdomain
+local-zone: "cancel-binance.com" always_nxdomain
+local-zone: "caracoliresidencial.com" always_nxdomain
+local-zone: "cek-voucher.earth.web.id" always_nxdomain
+local-zone: "cernifg359.cyou" always_nxdomain
+local-zone: "chase-bank-one.vercel.app" always_nxdomain
+local-zone: "chilly.makeup" always_nxdomain
+local-zone: "china-link.pages.dev" always_nxdomain
+local-zone: "chinnurpk.github.io" always_nxdomain
+local-zone: "cibcgg.com" always_nxdomain
+local-zone: "cmenvivo.github.io" always_nxdomain
+local-zone: "codapay.events-games.com" always_nxdomain
+local-zone: "coin-bosepro-log.godaddysites.com" always_nxdomain
+local-zone: "coinbase-com-66117.danschaffert66529.workers.dev" always_nxdomain
+local-zone: "communitycasesreviewlist.web.app" always_nxdomain
+local-zone: "conennectakasd.b-cdn.net" always_nxdomain
+local-zone: "conn-twallt.gitbook.io" always_nxdomain
+local-zone: "correctingservicesalakks.pages.dev" always_nxdomain
+local-zone: "credito-prestamos.fra1.zeabur.app" always_nxdomain
+local-zone: "currently4988.weebly.com" always_nxdomain
+local-zone: "currently6510.weebly.com" always_nxdomain
+local-zone: "currently810.weebly.com" always_nxdomain
+local-zone: "currently8711.weebly.com" always_nxdomain
+local-zone: "currentlyatt04.weebly.com" always_nxdomain
+local-zone: "currentlyatt223.weebly.com" always_nxdomain
+local-zone: "currentlyatt468.weebly.com" always_nxdomain
+local-zone: "currentlyatt7891.weebly.com" always_nxdomain
+local-zone: "currentlyatt9854.weebly.com" always_nxdomain
+local-zone: "currentlyattyaho85748.weebly.com" always_nxdomain
+local-zone: "currentlyattyahoo6check.weebly.com" always_nxdomain
+local-zone: "customersupportteam.serveusers.com" always_nxdomain
+local-zone: "cv.geldmagazin.de" always_nxdomain
+local-zone: "cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br" always_nxdomain
+local-zone: "cwgml.top" always_nxdomain
+local-zone: "d551000.cc" always_nxdomain
+local-zone: "dappprompty.pages.dev" always_nxdomain
+local-zone: "datingteles3x.netlify.app" always_nxdomain
+local-zone: "debank-w.github.io" always_nxdomain
+local-zone: "decenlaunchpad.pages.dev" always_nxdomain
+local-zone: "demo.dynamicsolutionit.com" always_nxdomain
+local-zone: "desktoptg.com" always_nxdomain
+local-zone: "dev-0014021997322.pantheonsite.io" always_nxdomain
+local-zone: "dev-102030654785555551.pantheonsite.io" always_nxdomain
+local-zone: "dhl.ijpcr.net.in" always_nxdomain
+local-zone: "dhlexpress.hu" always_nxdomain
+local-zone: "djelp.top" always_nxdomain
+local-zone: "dknrutkslsjf.weebly.com" always_nxdomain
+local-zone: "dkrjjhrjemfkj.weeblysite.com" always_nxdomain
+local-zone: "doccvview.buzz" always_nxdomain
+local-zone: "docu-auth-5775940568.bb-abogados.com" always_nxdomain
+local-zone: "doujeucrumoufau-8054.vercel.app" always_nxdomain
+local-zone: "dropboxubdkw.weebly.com" always_nxdomain
+local-zone: "duysysysh.weebly.com" always_nxdomain
+local-zone: "eagbid.ru.com" always_nxdomain
+local-zone: "ebay.ebayshoo.com" always_nxdomain
+local-zone: "ebdaf.top" always_nxdomain
+local-zone: "ejnapxqitd.cfolks.pl" always_nxdomain
+local-zone: "elitefortnit.github.io" always_nxdomain
+local-zone: "emailnoticeie.weebly.com" always_nxdomain
+local-zone: "enforce-user-guidelines.vercel.app" always_nxdomain
+local-zone: "erdtgyur57t6gyu.weebly.com" always_nxdomain
+local-zone: "error3457uypcold.azurewebsites.net" always_nxdomain
+local-zone: "eryiurgygeyigegh.weeblysite.com" always_nxdomain
+local-zone: "eshop-eu.care.cps-partnersnp.de" always_nxdomain
+local-zone: "ethereum-apple.org" always_nxdomain
+local-zone: "evenstagservices.com" always_nxdomain
+local-zone: "facebook-loginpage-clone.vercel.app" always_nxdomain
+local-zone: "facebook-web.cloudns.be" always_nxdomain
+local-zone: "faenl.top" always_nxdomain
+local-zone: "fb-login-clone.vercel.app" always_nxdomain
+local-zone: "feline-full-stick.glitch.me" always_nxdomain
+local-zone: "fhger75gfg2fff.top" always_nxdomain
+local-zone: "finityrrr.weebly.com" always_nxdomain
+local-zone: "flngf.top" always_nxdomain
+local-zone: "form-policy-appeal-k2d7nf.vercel.app" always_nxdomain
+local-zone: "form-policy-appeal-k2x7nf.vercel.app" always_nxdomain
+local-zone: "free-5476373.webadorsite.com" always_nxdomain
+local-zone: "free-5481257.webadorsite.com" always_nxdomain
+local-zone: "free-5562390.webadorsite.com" always_nxdomain
+local-zone: "freevideomelayu.tme-viral.link" always_nxdomain
+local-zone: "gasbot-demos.vercel.app" always_nxdomain
+local-zone: "ggdhjssu7.wixsite.com" always_nxdomain
+local-zone: "ghaho.vercel.app" always_nxdomain
+local-zone: "gheedfhj.weebly.com" always_nxdomain
+local-zone: "ghshbv.wixsite.com" always_nxdomain
+local-zone: "global-reward.kraftonevent.com" always_nxdomain
+local-zone: "gnaneshwarreddybaitinti.github.io" always_nxdomain
+local-zone: "gnktan.top" always_nxdomain
+local-zone: "goteleg-br.top" always_nxdomain
+local-zone: "gradeis.info" always_nxdomain
+local-zone: "help-manage-center.com" always_nxdomain
+local-zone: "heriodj.shop" always_nxdomain
+local-zone: "hermiovz-bustling-sled.glitch.me" always_nxdomain
+local-zone: "hobitronik.com" always_nxdomain
+local-zone: "home-100383.weeblysite.com" always_nxdomain
+local-zone: "home-100489.weeblysite.com" always_nxdomain
+local-zone: "home-101941.weeblysite.com" always_nxdomain
+local-zone: "home-102517.weeblysite.com" always_nxdomain
+local-zone: "home-104101.weeblysite.com" always_nxdomain
+local-zone: "home-104529.weeblysite.com" always_nxdomain
+local-zone: "home-104657.weeblysite.com" always_nxdomain
+local-zone: "iemnswgehdporlkf.weebly.com" always_nxdomain
+local-zone: "iik-3100-2023-spear-phishing-login-page.vercel.app" always_nxdomain
+local-zone: "imtikem.vip" always_nxdomain
+local-zone: "imtoken-iim.org" always_nxdomain
+local-zone: "institutodentalsante.com.br" always_nxdomain
+local-zone: "interface-beta-eight.vercel.app" always_nxdomain
+local-zone: "it-outlookwebaccess.com" always_nxdomain
+local-zone: "itklkaklkakk.weebly.com" always_nxdomain
+local-zone: "jaiganeshmachinery.com" always_nxdomain
+local-zone: "jdkajsmxncbeuwie.weebly.com" always_nxdomain
+local-zone: "jfnjkfvbhjvdc.weebly.com" always_nxdomain
+local-zone: "jfvfbremdkf50nhfgs.weeblysite.com" always_nxdomain
+local-zone: "jhyuj.weebly.com" always_nxdomain
+local-zone: "jinqiao114.com" always_nxdomain
+local-zone: "join-mywhatsapp-2sa.pages.dev" always_nxdomain
+local-zone: "jttyavc.com" always_nxdomain
+local-zone: "juno-100024.weeblysite.com" always_nxdomain
+local-zone: "juno-102431.square.site" always_nxdomain
+local-zone: "junoytremauilkdfh.weebly.com" always_nxdomain
+local-zone: "jxzipper.com" always_nxdomain
+local-zone: "jzhemuni-logun.godaddysites.com" always_nxdomain
+local-zone: "jzyl669.net" always_nxdomain
+local-zone: "khdny.top" always_nxdomain
+local-zone: "learn-trzor-start.github.io" always_nxdomain
+local-zone: "ledger-com-updatefirmware.aparecidovisentin.com.br" always_nxdomain
+local-zone: "ledger-com-upgrade.gezix.com.tr" always_nxdomain
+local-zone: "ledger-confirm.com" always_nxdomain
+local-zone: "ledgerhardwarehelp.com" always_nxdomain
+local-zone: "ledgersafetyplatform.com" always_nxdomain
+local-zone: "ledqinlv.com" always_nxdomain
+local-zone: "loggmaskemttaa.godaddysites.com" always_nxdomain
+local-zone: "login-midstreams-outlook.us" always_nxdomain
+local-zone: "login.94-141-120-29.cprapid.com" always_nxdomain
+local-zone: "loginhomeinbox.com" always_nxdomain
+local-zone: "loginscreen-att-108245.weeblysite.com" always_nxdomain
+local-zone: "lojer-vohex84.vercel.app" always_nxdomain
+local-zone: "lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br" always_nxdomain
+local-zone: "lttcloudvpn.pages.dev" always_nxdomain
+local-zone: "m-telegrm.cc" always_nxdomain
+local-zone: "m.amazontech.cc" always_nxdomain
+local-zone: "m.key5188.com" always_nxdomain
+local-zone: "mail-admin-102219.weeblysite.com" always_nxdomain
+local-zone: "mail-securities.square.site" always_nxdomain
+local-zone: "mail.apri.94-141-120-29.cprapid.com" always_nxdomain
+local-zone: "mail.spotifyyclonne.freewebhostmost.com" always_nxdomain
+local-zone: "mailboxspheretoday.weebly.com" always_nxdomain
+local-zone: "mailhomebox-8096940.weeblysite.com" always_nxdomain
+local-zone: "mailserverreservoir.weebly.com" always_nxdomain
+local-zone: "malonlineservce12.weebly.com" always_nxdomain
+local-zone: "managementbusinessrequiredaza.weebly.com" always_nxdomain
+local-zone: "manorders.com" always_nxdomain
+local-zone: "marketplace-center-checkitem-supp0rt-now-business.click" always_nxdomain
+local-zone: "megadropclaim.com" always_nxdomain
+local-zone: "met-aa-mass-klog-in.godaddysites.com" always_nxdomain
+local-zone: "metamagskloin.gitbook.io" always_nxdomain
+local-zone: "metamask-web.vercel.app" always_nxdomain
+local-zone: "metameasklin.gitbook.io" always_nxdomain
+local-zone: "metamsk-wallet-3.gitbook.io" always_nxdomain
+local-zone: "metamuscklog.godaddysites.com" always_nxdomain
+local-zone: "metau-maasck-loogiin.godaddysites.com" always_nxdomain
+local-zone: "metawallet-server.vercel.app" always_nxdomain
+local-zone: "metmassk-usalloggies.godaddysites.com" always_nxdomain
+local-zone: "microsofstonline.com" always_nxdomain
+local-zone: "micsoft.phishone.com" always_nxdomain
+local-zone: "midjourneyex.com" always_nxdomain
+local-zone: "mikam76544444.weebly.com" always_nxdomain
+local-zone: "morsaglobal.com" always_nxdomain
+local-zone: "mozp.ubjoubj.shop" always_nxdomain
+local-zone: "multichaintool.netlify.app" always_nxdomain
+local-zone: "myvalue365.com" always_nxdomain
+local-zone: "navi-airbnb.vercel.app" always_nxdomain
+local-zone: "nerve.black" always_nxdomain
+local-zone: "netflix-clone-frontend-flax.vercel.app" always_nxdomain
+local-zone: "netflix-clone-ml.vercel.app" always_nxdomain
+local-zone: "netflix-lite-one.vercel.app" always_nxdomain
+local-zone: "netflix-talarys.vercel.app" always_nxdomain
+local-zone: "netzeero.weebly.com" always_nxdomain
+local-zone: "netzero-webmail-109987.weeblysite.com" always_nxdomain
+local-zone: "netzeroinfo.weebly.com" always_nxdomain
+local-zone: "next-airbnb-clone-sage.vercel.app" always_nxdomain
+local-zone: "nft-lift9.vercel.app" always_nxdomain
+local-zone: "nihaalxz.github.io" always_nxdomain
+local-zone: "nodeconnectdapp.pages.dev" always_nxdomain
+local-zone: "nordicwalkingcadiz.com" always_nxdomain
+local-zone: "notificationcentenooooo.weebly.com" always_nxdomain
+local-zone: "notify-suspicious-activity.vercel.app" always_nxdomain
+local-zone: "nsrocawsso.duckdns.org" always_nxdomain
+local-zone: "ntlworldupdatemail.weebly.com" always_nxdomain
+local-zone: "nuplaqsdmkd.weebly.com" always_nxdomain
+local-zone: "nurnjjdsqs.duckdns.org" always_nxdomain
+local-zone: "o08ofobnw.top" always_nxdomain
+local-zone: "oatt745.wixsite.com" always_nxdomain
+local-zone: "office-techservice.com" always_nxdomain
+local-zone: "ortakoyescortum.site" always_nxdomain
+local-zone: "outlook-loginsecurity.com" always_nxdomain
+local-zone: "outlookcode22.weebly.com" always_nxdomain
+local-zone: "pagedoc65.pages.dev" always_nxdomain
+local-zone: "pay-pay-pay-loop-jp.replit.app" always_nxdomain
+local-zone: "pedidosnozapp.com.br" always_nxdomain
+local-zone: "pianorollcenter.com" always_nxdomain
+local-zone: "pop.spotifycloning1.freewebhostmost.com" always_nxdomain
+local-zone: "privateservicehsb.com" always_nxdomain
+local-zone: "privatroom79.pages.dev" always_nxdomain
+local-zone: "project-delta-brown.vercel.app" always_nxdomain
+local-zone: "pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev" always_nxdomain
+local-zone: "pub-e2c2179ca4e5490390f8741af2335633.r2.dev" always_nxdomain
+local-zone: "pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev" always_nxdomain
+local-zone: "pupstoken-whitelist.pages.dev" always_nxdomain
+local-zone: "purple039053.studio.site" always_nxdomain
+local-zone: "qiyee163.com" always_nxdomain
+local-zone: "qnnbbbfinannnsbannk.vercel.app" always_nxdomain
+local-zone: "quickmailservice331516277272772.weebly.com" always_nxdomain
+local-zone: "qvegy.top" always_nxdomain
+local-zone: "rakindotcom.github.io" always_nxdomain
+local-zone: "rana-renthotel-example.vercel.app" always_nxdomain
+local-zone: "react-netflix-delta.vercel.app" always_nxdomain
+local-zone: "recognition-badge.netlify.app" always_nxdomain
+local-zone: "refundpay.weebly.com" always_nxdomain
+local-zone: "reply-notify-bussiness.com" always_nxdomain
+local-zone: "resilient-cendol-b21196.netlify.app" always_nxdomain
+local-zone: "review-business-case.d1t75tji1kkg4p.amplifyapp.com" always_nxdomain
+local-zone: "reviewpage11.github.io" always_nxdomain
+local-zone: "rgpih.top" always_nxdomain
+local-zone: "rn.airenren.vip" always_nxdomain
+local-zone: "robertvilliardhousing.weebly.com" always_nxdomain
+local-zone: "rosamz123.github.io" always_nxdomain
+local-zone: "saaveiices.weebly.com" always_nxdomain
+local-zone: "safetystaying.homes" always_nxdomain
+local-zone: "salofenushigo.weebly.com" always_nxdomain
+local-zone: "savedfilters.top" always_nxdomain
+local-zone: "sbcgloballane.weebly.com" always_nxdomain
+local-zone: "secure.qqp.zle.temporary.site" always_nxdomain
+local-zone: "securepageatt.weebly.com" always_nxdomain
+local-zone: "securingmyledger.com" always_nxdomain
+local-zone: "seller.shop-line.vip" always_nxdomain
+local-zone: "senmeitefs.com" always_nxdomain
+local-zone: "server.2rk3.com" always_nxdomain
+local-zone: "server.h74w.com" always_nxdomain
+local-zone: "server.n6b8.com" always_nxdomain
+local-zone: "server.wyq6.com" always_nxdomain
+local-zone: "service.santander.de" always_nxdomain
+local-zone: "servicecoinwallet.live" always_nxdomain
+local-zone: "seviiceess.weebly.com" always_nxdomain
+local-zone: "sg3.xbenihime.us.kg" always_nxdomain
+local-zone: "shaerepointt.weebly.com" always_nxdomain
+local-zone: "shaw-101433.weeblysite.com" always_nxdomain
+local-zone: "shaw-102890.weeblysite.com" always_nxdomain
+local-zone: "shaw-104426.weeblysite.com" always_nxdomain
+local-zone: "shaw-105083.weeblysite.com" always_nxdomain
+local-zone: "shaw-105713.weeblysite.com" always_nxdomain
+local-zone: "shaw-105802.weeblysite.com" always_nxdomain
+local-zone: "shaw-105983.weeblysite.com" always_nxdomain
+local-zone: "shaw-106114.weeblysite.com" always_nxdomain
+local-zone: "shaw-107218.weeblysite.com" always_nxdomain
+local-zone: "shaw-107259.weeblysite.com" always_nxdomain
+local-zone: "shawvalidation.weebly.com" always_nxdomain
+local-zone: "shimmering-star-epoch.glitch.me" always_nxdomain
+local-zone: "shopee.gotback9898.cc" always_nxdomain
+local-zone: "shoppingwithdiscount.top" always_nxdomain
+local-zone: "shoptkoo.com" always_nxdomain
+local-zone: "side-revshares.pages.dev" always_nxdomain
+local-zone: "signiatdynamatz.weebly.com" always_nxdomain
+local-zone: "sjc.hgp.mybluehost.me" always_nxdomain
+local-zone: "skybestservice.wixsite.com" always_nxdomain
+local-zone: "skyserviv.weebly.com" always_nxdomain
+local-zone: "smartwalletcoin-sync.pages.dev" always_nxdomain
+local-zone: "smartwebdapp.pages.dev" always_nxdomain
+local-zone: "smtp.spotifyprojectyash.freewebhostmost.com" always_nxdomain
+local-zone: "souwttillupa-4199.vercel.app" always_nxdomain
+local-zone: "soygrupoelite.com" always_nxdomain
+local-zone: "spotify-inspired-music-player-online.freewebhostmost.com" always_nxdomain
+local-zone: "spotify.constantine.dev" always_nxdomain
+local-zone: "spotify7972.freewebhostmost.com" always_nxdomain
+local-zone: "spotifyclonebyrk.freewebhostmost.com" always_nxdomain
+local-zone: "spotifywithyash.freewebhostmost.com" always_nxdomain
+local-zone: "srvamch.in" always_nxdomain
+local-zone: "staemcommunnutty.com" always_nxdomain
+local-zone: "start-trazor-page.github.io" always_nxdomain
+local-zone: "steamcommmuty.com" always_nxdomain
+local-zone: "sukien.pubgm.shop" always_nxdomain
+local-zone: "support-uk-cshelp-personal.getit.ink" always_nxdomain
+local-zone: "systemserveerr.weebly.com" always_nxdomain
+local-zone: "talentbegins.com" always_nxdomain
+local-zone: "tapnm.top" always_nxdomain
+local-zone: "tekbotavi.pro" always_nxdomain
+local-zone: "telagram.vip" always_nxdomain
+local-zone: "telegiramv.fit" always_nxdomain
+local-zone: "telegram--hk.com" always_nxdomain
+local-zone: "telegram-datingfree-sex.pages.dev" always_nxdomain
+local-zone: "telegrambot-rectify.pages.dev" always_nxdomain
+local-zone: "telegrambotsmart-solution.pages.dev" always_nxdomain
+local-zone: "telegramis.work" always_nxdomain
+local-zone: "telegrcm.ing" always_nxdomain
+local-zone: "telergom.vip" always_nxdomain
+local-zone: "tellegram.dmrtaxes.com" always_nxdomain
+local-zone: "telpqgram.bocekilacla.com" always_nxdomain
+local-zone: "telstra-101853.weeblysite.com" always_nxdomain
+local-zone: "telstra-102223.weeblysite.com" always_nxdomain
+local-zone: "telstra-102841.weeblysite.com" always_nxdomain
+local-zone: "telstra-104158.weeblysite.com" always_nxdomain
+local-zone: "telstra-105309.weeblysite.com" always_nxdomain
+local-zone: "telstra-106488.weeblysite.com" always_nxdomain
+local-zone: "telstra-106877.weeblysite.com" always_nxdomain
+local-zone: "telstra-107132.weeblysite.com" always_nxdomain
+local-zone: "telstra-108365.weeblysite.com" always_nxdomain
+local-zone: "telstra-109995.weeblysite.com" always_nxdomain
+local-zone: "temp-jledxoxqawgkocyshafr.webadorsite.com" always_nxdomain
+local-zone: "tether-app.org" always_nxdomain
+local-zone: "tether-zh.org" always_nxdomain
+local-zone: "tfggfdfgddhs.weebly.com" always_nxdomain
+local-zone: "tg.m-tslegram.top" always_nxdomain
+local-zone: "thofx.top" always_nxdomain
+local-zone: "tik-tok.cam" always_nxdomain
+local-zone: "tiktok897.com" always_nxdomain
+local-zone: "tiktokshopmallc.com" always_nxdomain
+local-zone: "tkbuymarket.xyz" always_nxdomain
+local-zone: "tkvipshop.top" always_nxdomain
+local-zone: "tlktok.me" always_nxdomain
+local-zone: "tlktokshop.tw" always_nxdomain
+local-zone: "toinec.net" always_nxdomain
+local-zone: "tr.alertsgame.ru" always_nxdomain
+local-zone: "trackyourpackageusps.blogspot.de" always_nxdomain
+local-zone: "trezzorwallle.azurewebsites.net" always_nxdomain
+local-zone: "trxdapbundle.pages.dev" always_nxdomain
+local-zone: "trzure-en-suite.pages.dev" always_nxdomain
+local-zone: "ttk169.shop" always_nxdomain
+local-zone: "tyuytrecurrently.weebly.com" always_nxdomain
+local-zone: "ui-clone-neon.vercel.app" always_nxdomain
+local-zone: "uijkr8f89oerfjncy78fo.weebly.com" always_nxdomain
+local-zone: "ujjewmanskdeoiskedn.weebly.com" always_nxdomain
+local-zone: "unusualaccountcnfrmpages.github.io" always_nxdomain
+local-zone: "updatemymailbox246346253662.weebly.com" always_nxdomain
+local-zone: "uqei112ao.top" always_nxdomain
+local-zone: "useridteleku.com" always_nxdomain
+local-zone: "usps.com-tarpocev.top" always_nxdomain
+local-zone: "usps.com-tarpoiev.top" always_nxdomain
+local-zone: "uspsservicetrack.blogspot.de" always_nxdomain
+local-zone: "uspsservicetrack.blogspot.it" always_nxdomain
+local-zone: "uspssmartparcellocker.tech" always_nxdomain
+local-zone: "uspssmartparcellockers.tech" always_nxdomain
+local-zone: "utkepp.top" always_nxdomain
+local-zone: "v2-pancakeswap.github.io" always_nxdomain
+local-zone: "vedi.94-141-120-29.cprapid.com" always_nxdomain
+local-zone: "veloxs-invite.com" always_nxdomain
+local-zone: "verify-page-submit-here.vercel.app" always_nxdomain
+local-zone: "voii11cfx.mmm.page" always_nxdomain
+local-zone: "walletconnect-web3.vercel.app" always_nxdomain
+local-zone: "weasdrty.wixsite.com" always_nxdomain
+local-zone: "web-cqxarjotd-uniswap.vercel.app" always_nxdomain
+local-zone: "webdenet.weebly.com" always_nxdomain
+local-zone: "welsfag-blog.vercel.app" always_nxdomain
+local-zone: "wesrdtcfdzse5d6tfuvjdtufyi.weebly.com" always_nxdomain
+local-zone: "woodplc.dogfriendlytahoe.com" always_nxdomain
+local-zone: "wqsac.icu" always_nxdomain
+local-zone: "www-blockchain-fi-auth.vercel.app" always_nxdomain
+local-zone: "wxltx.com" always_nxdomain
+local-zone: "xhrcu.top" always_nxdomain
+local-zone: "xn--mnta-5q5a.network" always_nxdomain
+local-zone: "y06gwc.webwave.dev" always_nxdomain
+local-zone: "yahpi.com" always_nxdomain
+local-zone: "yahpn.com" always_nxdomain
+local-zone: "yondasatt.weebly.com" always_nxdomain
+local-zone: "yufreittavassu-6526.vercel.app" always_nxdomain
+local-zone: "yusdydsfjuuxx.weebly.com" always_nxdomain
+local-zone: "zapqf.top" always_nxdomain
+local-zone: "zcytjs.com" always_nxdomain
+local-zone: "zecra.top" always_nxdomain
+local-zone: "zgyxzggk.top" always_nxdomain
+local-zone: "zlip.net" always_nxdomain
+local-zone: "zvuhs.top" always_nxdomain
diff --git a/phishing-filter-unbound.conf.br b/phishing-filter-unbound.conf.br
new file mode 100644
index 000000000..d5b2fbe5a
Binary files /dev/null and b/phishing-filter-unbound.conf.br differ
diff --git a/phishing-filter-unbound.conf.gz b/phishing-filter-unbound.conf.gz
new file mode 100644
index 000000000..3e97a6cd4
Binary files /dev/null and b/phishing-filter-unbound.conf.gz differ
diff --git a/phishing-filter-vivaldi.txt b/phishing-filter-vivaldi.txt
new file mode 100644
index 000000000..26d4d861c
--- /dev/null
+++ b/phishing-filter-vivaldi.txt
@@ -0,0 +1,493 @@
+! Title: Phishing URL Blocklist (Vivaldi)
+! Updated: 2024-11-22T12:07:59Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+||073202.com$document
+||0xugiw6pb.top$document
+||11muskansingh.github.io$document
+||130365.vip$document
+||21403590.cc$document
+||2366xyx.com$document
+||25v05vtrg.top$document
+||365.915sj1.xyz$document
+||498291975887803508.weebly.com$document
+||5510003.top$document
+||5510006.top$document
+||551005.me$document
+||551008.me$document
+||57365ee.cc$document
+||5kplayer.com/r/go.php?an=5kpwin&cvs=6.1&cb=&fui=&rt=undef&eid=&pvs=6.0&ev=ins&uc=tos573mrjamdnino&jump=//talentbegins.com/attow/owa-index.html#3mail@b.c$document
+||657226703365.com$document
+||6bet938.com$document
+||838882.com/?home=casino&a=x$document
+||8904701.cc$document
+||909338844400.weebly.com$document
+||965009.com$document
+||98f63c2a712e05fbeccf379de02ec9a5.88110.co$document
+||a0omer.webwave.dev$document
+||aaloo.kiwiground.top$document
+||abueme-96e1.ehnelacsrralo.workers.dev$document
+||accountuserlogin.github.io$document
+||accshomecnfrm0log.github.io$document
+||adminuser.yw2201.xyz$document
+||agenciaancla.com.ar$document
+||airbnb-clone-one-chi.vercel.app$document
+||allegro-400.com$document
+||amazon-clone88.netlify.app$document
+||amazonclonebysid.netlify.app$document
+||amazons-help-cx-number.pages.dev$document
+||anshbotzone.com$document
+||anshidmuhmd.github.io$document
+||anuarw.kz$document
+||app.liquidations-aave.com$document
+||app.paxful87.com$document
+||app.sandbox.custombrandedboxesbyfedex.com$document
+||appeal-solve-violation-review.vercel.app$document
+||apri.94-141-120-29.cprapid.com$document
+||apwmensdjyeurir.weebly.com$document
+||arbnb-clone.vercel.app$document
+||arvestcd.embarkdigitalonboarding.com$document
+||arvestrewardscard.embarkdigitalonboarding.com$document
+||atbdgtehomeupdateform.weebly.com$document
+||atftt.weebly.com$document
+||atlgnrnewt.weebly.com$document
+||atlnes.icu$document
+||atmailupdateformeupdaterltdfdinfomailacct.weebly.com$document
+||atmailupdateformeupdatesbhtdinfomailacct.weebly.com$document
+||att-100081.weeblysite.com$document
+||att-102549.weeblysite.com$document
+||att-102856.weeblysite.com$document
+||att-10386990.weeblysite.com$document
+||att-106249.weeblysite.com$document
+||att-108680.weeblysite.com$document
+||att-109026.weeblysite.com$document
+||attadm977222.weebly.com$document
+||attcom-105588.weeblysite.com$document
+||attcom-107224.weeblysite.com$document
+||attconsultint.weebly.com$document
+||attflyupdateserver.weebly.com$document
+||attglobalwild.weebly.com$document
+||attmaill0gin2341.weebly.com$document
+||attnationameritechie.weebly.com$document
+||attserverupdatedmailbox.weebly.com$document
+||attt-107147.weeblysite.com$document
+||b.3656240205.vip$document
+||b12thgst9.weeblysite.com$document
+||b35ppp.com$document
+||b35sss.com$document
+||b45017.com$document
+||b45020.com$document
+||bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link$document
+||bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link$document
+||bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link$document
+||bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link$document
+||bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link$document
+||bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link$document
+||bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link$document
+||bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link$document
+||bancolombia.supportmaven.ai$document
+||bansos-2jt.get-regist.com$document
+||bbtryr.com$document
+||bentdynamicslm.com$document
+||bestorrogames.com$document
+||bet365ce.com$document
+||bet6205365.com$document
+||bet63035.com$document
+||bet83067.com$document
+||blajowet.cyou$document
+||braxapressaje-9251.vercel.app$document
+||bronm0.wixsite.com$document
+||bryfhdjffgc.weebly.com$document
+||bt-100831.weeblysite.com$document
+||bt-103187.weeblysite.com$document
+||bt-107510.weeblysite.com$document
+||btinternet-108597.weeblysite.com$document
+||btinternet18282.weebly.com$document
+||business-meta-center.com$document
+||byzhxx.com$document
+||c0nfrmpgsacc.github.io$document
+||cancel-binance.com$document
+||caracoliresidencial.com$document
+||cek-voucher.earth.web.id$document
+||cernifg359.cyou$document
+||chase-bank-one.vercel.app$document
+||chilly.makeup$document
+||china-link.pages.dev$document
+||chinnurpk.github.io$document
+||cibcgg.com$document
+||click.pstmrk.it/3s/sjc.hgp.mybluehost.me%2fdbs%2f/bwla/zio5aq/aq/0ec638bc-0952-4618-944f-73740120a333/1/nhcgdhrp7k$document
+||cmenvivo.github.io$document
+||codapay.events-games.com$document
+||coin-bosepro-log.godaddysites.com$document
+||coinbase-com-66117.danschaffert66529.workers.dev$document
+||communitycasesreviewlist.web.app$document
+||conennectakasd.b-cdn.net$document
+||conn-twallt.gitbook.io$document
+||correctingservicesalakks.pages.dev$document
+||credito-prestamos.fra1.zeabur.app$document
+||currently4988.weebly.com$document
+||currently6510.weebly.com$document
+||currently810.weebly.com$document
+||currently8711.weebly.com$document
+||currentlyatt04.weebly.com$document
+||currentlyatt223.weebly.com$document
+||currentlyatt468.weebly.com$document
+||currentlyatt7891.weebly.com$document
+||currentlyatt9854.weebly.com$document
+||currentlyattyaho85748.weebly.com$document
+||currentlyattyahoo6check.weebly.com$document
+||customersupportteam.serveusers.com$document
+||cv.geldmagazin.de$document
+||cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br$document
+||cwgml.top$document
+||d551000.cc$document
+||dappprompty.pages.dev$document
+||datagivers.com/f7101c3a3pb7f54dea0a99976cfw43ae6306.html$document
+||datingteles3x.netlify.app$document
+||debank-w.github.io$document
+||decenlaunchpad.pages.dev$document
+||demo.dynamicsolutionit.com$document
+||desktoptg.com$document
+||dev-0014021997322.pantheonsite.io$document
+||dev-102030654785555551.pantheonsite.io$document
+||dhl.ijpcr.net.in$document
+||dhlexpress.hu$document
+||djelp.top$document
+||dknrutkslsjf.weebly.com$document
+||dkrjjhrjemfkj.weeblysite.com$document
+||doccvview.buzz$document
+||docu-auth-5775940568.bb-abogados.com$document
+||doujeucrumoufau-8054.vercel.app$document
+||dropboxubdkw.weebly.com$document
+||duysysysh.weebly.com$document
+||eagbid.ru.com$document
+||ebay.ebayshoo.com$document
+||ebdaf.top$document
+||ejnapxqitd.cfolks.pl$document
+||elitefortnit.github.io$document
+||emailnoticeie.weebly.com$document
+||enforce-user-guidelines.vercel.app$document
+||erdtgyur57t6gyu.weebly.com$document
+||error3457uypcold.azurewebsites.net$document
+||eryiurgygeyigegh.weeblysite.com$document
+||eshop-eu.care.cps-partnersnp.de$document
+||ethereum-apple.org$document
+||evenstagservices.com$document
+||facebook-loginpage-clone.vercel.app$document
+||facebook-web.cloudns.be$document
+||faenl.top$document
+||fb-login-clone.vercel.app$document
+||feline-full-stick.glitch.me$document
+||fhger75gfg2fff.top$document
+||finityrrr.weebly.com$document
+||flngf.top$document
+||form-policy-appeal-k2d7nf.vercel.app$document
+||form-policy-appeal-k2x7nf.vercel.app$document
+||free-5476373.webadorsite.com$document
+||free-5481257.webadorsite.com$document
+||free-5562390.webadorsite.com$document
+||freevideomelayu.tme-viral.link$document
+||gasbot-demos.vercel.app$document
+||ggdhjssu7.wixsite.com$document
+||ghaho.vercel.app$document
+||gheedfhj.weebly.com$document
+||ghshbv.wixsite.com$document
+||global-reward.kraftonevent.com$document
+||gnaneshwarreddybaitinti.github.io$document
+||gnktan.top$document
+||goo.su/hcf4j99$document
+||goteleg-br.top$document
+||gradeis.info$document
+||help-manage-center.com$document
+||helpnets.info/ccf9d49ead88074a54h9dfc49c0o673cf425.html%20helpnets.info$document
+||heriodj.shop$document
+||hermiovz-bustling-sled.glitch.me$document
+||hobitronik.com$document
+||home-100383.weeblysite.com$document
+||home-100489.weeblysite.com$document
+||home-101941.weeblysite.com$document
+||home-102517.weeblysite.com$document
+||home-104101.weeblysite.com$document
+||home-104529.weeblysite.com$document
+||home-104657.weeblysite.com$document
+||iemnswgehdporlkf.weebly.com$document
+||iik-3100-2023-spear-phishing-login-page.vercel.app$document
+||imtikem.vip$document
+||imtoken-iim.org$document
+||institutodentalsante.com.br$document
+||interface-beta-eight.vercel.app$document
+||ipfs.io/ipfs/bafkreidlec2bka6gte7dvl66mqivaz5kovc4xavxuga7aukprms4vpcjsa$document
+||ipfs.io/ipfs/bafkreieqeeu2ua46eil6yh3nfrhsw6wxmuu3rvggciznuxj4vnnlrjrm6u$document
+||ipfs.io/ipfs/qmnwb6uzmfyemlxamalditpnspllzyxisuutjdhueup459/dalomanb.html$document
+||ipfs.io/ipfs/qmnyv2kmgpzcqkplwcylltkt6auyvsdhphoe7hnrs6uxqe/$document
+||ipfs.io/ipfs/qmytqhkwat1yxbkj972zsstss4vpgfhzya9fb4vannqnar$document
+||it-outlookwebaccess.com$document
+||itklkaklkakk.weebly.com$document
+||jaiganeshmachinery.com$document
+||jdkajsmxncbeuwie.weebly.com$document
+||jfnjkfvbhjvdc.weebly.com$document
+||jfvfbremdkf50nhfgs.weeblysite.com$document
+||jhyuj.weebly.com$document
+||jinqiao114.com$document
+||join-mywhatsapp-2sa.pages.dev$document
+||jttyavc.com$document
+||juno-100024.weeblysite.com$document
+||juno-102431.square.site$document
+||junoytremauilkdfh.weebly.com$document
+||jxzipper.com$document
+||jzhemuni-logun.godaddysites.com$document
+||jzyl669.net$document
+||khdny.top$document
+||learn-trzor-start.github.io$document
+||ledger-com-updatefirmware.aparecidovisentin.com.br$document
+||ledger-com-upgrade.gezix.com.tr$document
+||ledger-confirm.com$document
+||ledgerhardwarehelp.com$document
+||ledgersafetyplatform.com$document
+||ledqinlv.com$document
+||linkr.it/1nkr0v$document
+||loggmaskemttaa.godaddysites.com$document
+||login-midstreams-outlook.us$document
+||login.94-141-120-29.cprapid.com$document
+||loginhomeinbox.com$document
+||loginscreen-att-108245.weeblysite.com$document
+||lojer-vohex84.vercel.app$document
+||lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br$document
+||lttcloudvpn.pages.dev$document
+||m-telegrm.cc$document
+||m.amazontech.cc$document
+||m.key5188.com$document
+||mail-admin-102219.weeblysite.com$document
+||mail-securities.square.site$document
+||mail.apri.94-141-120-29.cprapid.com$document
+||mail.spotifyyclonne.freewebhostmost.com$document
+||mailboxspheretoday.weebly.com$document
+||mailhomebox-8096940.weeblysite.com$document
+||mailserverreservoir.weebly.com$document
+||malonlineservce12.weebly.com$document
+||managementbusinessrequiredaza.weebly.com$document
+||manorders.com$document
+||marketplace-center-checkitem-supp0rt-now-business.click$document
+||megadropclaim.com$document
+||met-aa-mass-klog-in.godaddysites.com$document
+||metamagskloin.gitbook.io$document
+||metamask-web.vercel.app$document
+||metameasklin.gitbook.io$document
+||metamsk-wallet-3.gitbook.io$document
+||metamuscklog.godaddysites.com$document
+||metau-maasck-loogiin.godaddysites.com$document
+||metawallet-server.vercel.app$document
+||metmassk-usalloggies.godaddysites.com$document
+||microsofstonline.com$document
+||micsoft.phishone.com$document
+||midjourneyex.com$document
+||mikam76544444.weebly.com$document
+||morsaglobal.com$document
+||mozp.ubjoubj.shop$document
+||multichaintool.netlify.app$document
+||myvalue365.com$document
+||navi-airbnb.vercel.app$document
+||nerve.black$document
+||netflix-clone-frontend-flax.vercel.app$document
+||netflix-clone-ml.vercel.app$document
+||netflix-lite-one.vercel.app$document
+||netflix-talarys.vercel.app$document
+||netzeero.weebly.com$document
+||netzero-webmail-109987.weeblysite.com$document
+||netzeroinfo.weebly.com$document
+||next-airbnb-clone-sage.vercel.app$document
+||nft-lift9.vercel.app$document
+||nihaalxz.github.io$document
+||nodeconnectdapp.pages.dev$document
+||nordicwalkingcadiz.com$document
+||notificationcentenooooo.weebly.com$document
+||notify-suspicious-activity.vercel.app$document
+||nsrocawsso.duckdns.org$document
+||ntlworldupdatemail.weebly.com$document
+||nuplaqsdmkd.weebly.com$document
+||nurnjjdsqs.duckdns.org$document
+||o08ofobnw.top$document
+||oatt745.wixsite.com$document
+||office-techservice.com$document
+||ortakoyescortum.site$document
+||outlook-loginsecurity.com$document
+||outlookcode22.weebly.com$document
+||pagedoc65.pages.dev$document
+||pay-pay-pay-loop-jp.replit.app$document
+||pedidosnozapp.com.br$document
+||pianorollcenter.com$document
+||pop.spotifycloning1.freewebhostmost.com$document
+||privateservicehsb.com$document
+||privatroom79.pages.dev$document
+||project-delta-brown.vercel.app$document
+||pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev$document
+||pub-e2c2179ca4e5490390f8741af2335633.r2.dev$document
+||pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev$document
+||pupstoken-whitelist.pages.dev$document
+||purple039053.studio.site$document
+||qiyee163.com$document
+||qnnbbbfinannnsbannk.vercel.app$document
+||quickmailservice331516277272772.weebly.com$document
+||qvegy.top$document
+||rakindotcom.github.io$document
+||rana-renthotel-example.vercel.app$document
+||react-netflix-delta.vercel.app$document
+||rebrand.ly/7d0w1hr$document
+||rebrand.ly/gm6cwnp$document
+||recognition-badge.netlify.app$document
+||refundpay.weebly.com$document
+||reply-notify-bussiness.com$document
+||resilient-cendol-b21196.netlify.app$document
+||review-business-case.d1t75tji1kkg4p.amplifyapp.com$document
+||reviewpage11.github.io$document
+||rgpih.top$document
+||rn.airenren.vip$document
+||robertvilliardhousing.weebly.com$document
+||rosamz123.github.io$document
+||saaveiices.weebly.com$document
+||safetystaying.homes$document
+||salofenushigo.weebly.com$document
+||savedfilters.top$document
+||sbcgloballane.weebly.com$document
+||secure.qqp.zle.temporary.site$document
+||securepageatt.weebly.com$document
+||securingmyledger.com$document
+||seller.shop-line.vip$document
+||senmeitefs.com$document
+||server.2rk3.com$document
+||server.h74w.com$document
+||server.n6b8.com$document
+||server.wyq6.com$document
+||service.santander.de$document
+||servicecoinwallet.live$document
+||seviiceess.weebly.com$document
+||sg3.xbenihime.us.kg$document
+||shaerepointt.weebly.com$document
+||shaw-101433.weeblysite.com$document
+||shaw-102890.weeblysite.com$document
+||shaw-104426.weeblysite.com$document
+||shaw-105083.weeblysite.com$document
+||shaw-105713.weeblysite.com$document
+||shaw-105802.weeblysite.com$document
+||shaw-105983.weeblysite.com$document
+||shaw-106114.weeblysite.com$document
+||shaw-107218.weeblysite.com$document
+||shaw-107259.weeblysite.com$document
+||shawvalidation.weebly.com$document
+||shimmering-star-epoch.glitch.me$document
+||shopee.gotback9898.cc$document
+||shoppingwithdiscount.top$document
+||shoptkoo.com$document
+||side-revshares.pages.dev$document
+||signiatdynamatz.weebly.com$document
+||sjc.hgp.mybluehost.me$document
+||skybestservice.wixsite.com$document
+||skyserviv.weebly.com$document
+||smartwalletcoin-sync.pages.dev$document
+||smartwebdapp.pages.dev$document
+||smtp.spotifyprojectyash.freewebhostmost.com$document
+||souwttillupa-4199.vercel.app$document
+||soygrupoelite.com$document
+||spotify-inspired-music-player-online.freewebhostmost.com$document
+||spotify.constantine.dev$document
+||spotify7972.freewebhostmost.com$document
+||spotifyclonebyrk.freewebhostmost.com$document
+||spotifywithyash.freewebhostmost.com$document
+||srvamch.in$document
+||staemcommunnutty.com$document
+||start-trazor-page.github.io$document
+||steamcommmuty.com$document
+||sukien.pubgm.shop$document
+||support-uk-cshelp-personal.getit.ink$document
+||systemserveerr.weebly.com$document
+||talentbegins.com$document
+||tapnm.top$document
+||tekbotavi.pro$document
+||telagram.vip$document
+||telegiramv.fit$document
+||telegram--hk.com$document
+||telegram-datingfree-sex.pages.dev$document
+||telegrambot-rectify.pages.dev$document
+||telegrambotsmart-solution.pages.dev$document
+||telegramis.work$document
+||telegrcm.ing$document
+||telergom.vip$document
+||tellegram.dmrtaxes.com$document
+||telpqgram.bocekilacla.com$document
+||telstra-101853.weeblysite.com$document
+||telstra-102223.weeblysite.com$document
+||telstra-102841.weeblysite.com$document
+||telstra-104158.weeblysite.com$document
+||telstra-105309.weeblysite.com$document
+||telstra-106488.weeblysite.com$document
+||telstra-106877.weeblysite.com$document
+||telstra-107132.weeblysite.com$document
+||telstra-108365.weeblysite.com$document
+||telstra-109995.weeblysite.com$document
+||temp-jledxoxqawgkocyshafr.webadorsite.com$document
+||tether-app.org$document
+||tether-zh.org$document
+||tfggfdfgddhs.weebly.com$document
+||tg.m-tslegram.top$document
+||thofx.top$document
+||tik-tok.cam$document
+||tiktok897.com$document
+||tiktokshopmallc.com$document
+||tkbuymarket.xyz$document
+||tkvipshop.top$document
+||tlktok.me$document
+||tlktokshop.tw$document
+||toinec.net$document
+||tr.alertsgame.ru$document
+||trackyourpackageusps.blogspot.de$document
+||trezzorwallle.azurewebsites.net$document
+||trxdapbundle.pages.dev$document
+||trzure-en-suite.pages.dev$document
+||ttk169.shop$document
+||tyuytrecurrently.weebly.com$document
+||ui-clone-neon.vercel.app$document
+||uijkr8f89oerfjncy78fo.weebly.com$document
+||ujjewmanskdeoiskedn.weebly.com$document
+||unusualaccountcnfrmpages.github.io$document
+||updatemymailbox246346253662.weebly.com$document
+||uqei112ao.top$document
+||useridteleku.com$document
+||usps.com-tarpocev.top$document
+||usps.com-tarpoiev.top$document
+||uspsservicetrack.blogspot.de$document
+||uspsservicetrack.blogspot.it$document
+||uspssmartparcellocker.tech$document
+||uspssmartparcellockers.tech$document
+||utkepp.top$document
+||v2-pancakeswap.github.io$document
+||vedi.94-141-120-29.cprapid.com$document
+||veloxs-invite.com$document
+||verify-page-submit-here.vercel.app$document
+||voii11cfx.mmm.page$document
+||walletconnect-web3.vercel.app$document
+||weasdrty.wixsite.com$document
+||web-cqxarjotd-uniswap.vercel.app$document
+||webdenet.weebly.com$document
+||welsfag-blog.vercel.app$document
+||wesrdtcfdzse5d6tfuvjdtufyi.weebly.com$document
+||woodplc.dogfriendlytahoe.com$document
+||wqsac.icu$document
+||www-blockchain-fi-auth.vercel.app$document
+||wxltx.com$document
+||xhrcu.top$document
+||xn--mnta-5q5a.network$document
+||xurl.es/qjjpk$document
+||y06gwc.webwave.dev$document
+||yahpi.com$document
+||yahpn.com$document
+||yondasatt.weebly.com$document
+||yufreittavassu-6526.vercel.app$document
+||yusdydsfjuuxx.weebly.com$document
+||zapqf.top$document
+||zcytjs.com$document
+||zecra.top$document
+||zgyxzggk.top$document
+||zlip.net$document
+||zvuhs.top$document
diff --git a/phishing-filter-vivaldi.txt.br b/phishing-filter-vivaldi.txt.br
new file mode 100644
index 000000000..ff6d0fd88
Binary files /dev/null and b/phishing-filter-vivaldi.txt.br differ
diff --git a/phishing-filter-vivaldi.txt.gz b/phishing-filter-vivaldi.txt.gz
new file mode 100644
index 000000000..642740b91
Binary files /dev/null and b/phishing-filter-vivaldi.txt.gz differ
diff --git a/phishing-filter.tpl b/phishing-filter.tpl
new file mode 100644
index 000000000..025c76b34
--- /dev/null
+++ b/phishing-filter.tpl
@@ -0,0 +1,481 @@
+msFilterList
+# Title: Phishing Hosts Blocklist (IE)
+# Updated: 2024-11-22T12:07:59Z
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/malware-filter/phishing-filter
+# License: https://gitlab.com/malware-filter/phishing-filter#license
+# Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+: Expires=1
+#
+-d 073202.com
+-d 0xugiw6pb.top
+-d 11muskansingh.github.io
+-d 130365.vip
+-d 21403590.cc
+-d 2366xyx.com
+-d 25v05vtrg.top
+-d 365.915sj1.xyz
+-d 498291975887803508.weebly.com
+-d 5510003.top
+-d 5510006.top
+-d 551005.me
+-d 551008.me
+-d 57365ee.cc
+-d 657226703365.com
+-d 6bet938.com
+-d 8904701.cc
+-d 909338844400.weebly.com
+-d 965009.com
+-d 98f63c2a712e05fbeccf379de02ec9a5.88110.co
+-d a0omer.webwave.dev
+-d aaloo.kiwiground.top
+-d abueme-96e1.ehnelacsrralo.workers.dev
+-d accountuserlogin.github.io
+-d accshomecnfrm0log.github.io
+-d adminuser.yw2201.xyz
+-d agenciaancla.com.ar
+-d airbnb-clone-one-chi.vercel.app
+-d allegro-400.com
+-d amazon-clone88.netlify.app
+-d amazonclonebysid.netlify.app
+-d amazons-help-cx-number.pages.dev
+-d anshbotzone.com
+-d anshidmuhmd.github.io
+-d anuarw.kz
+-d app.liquidations-aave.com
+-d app.paxful87.com
+-d app.sandbox.custombrandedboxesbyfedex.com
+-d appeal-solve-violation-review.vercel.app
+-d apri.94-141-120-29.cprapid.com
+-d apwmensdjyeurir.weebly.com
+-d arbnb-clone.vercel.app
+-d arvestcd.embarkdigitalonboarding.com
+-d arvestrewardscard.embarkdigitalonboarding.com
+-d atbdgtehomeupdateform.weebly.com
+-d atftt.weebly.com
+-d atlgnrnewt.weebly.com
+-d atlnes.icu
+-d atmailupdateformeupdaterltdfdinfomailacct.weebly.com
+-d atmailupdateformeupdatesbhtdinfomailacct.weebly.com
+-d att-100081.weeblysite.com
+-d att-102549.weeblysite.com
+-d att-102856.weeblysite.com
+-d att-10386990.weeblysite.com
+-d att-106249.weeblysite.com
+-d att-108680.weeblysite.com
+-d att-109026.weeblysite.com
+-d attadm977222.weebly.com
+-d attcom-105588.weeblysite.com
+-d attcom-107224.weeblysite.com
+-d attconsultint.weebly.com
+-d attflyupdateserver.weebly.com
+-d attglobalwild.weebly.com
+-d attmaill0gin2341.weebly.com
+-d attnationameritechie.weebly.com
+-d attserverupdatedmailbox.weebly.com
+-d attt-107147.weeblysite.com
+-d b.3656240205.vip
+-d b12thgst9.weeblysite.com
+-d b35ppp.com
+-d b35sss.com
+-d b45017.com
+-d b45020.com
+-d bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link
+-d bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link
+-d bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link
+-d bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link
+-d bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link
+-d bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link
+-d bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link
+-d bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link
+-d bancolombia.supportmaven.ai
+-d bansos-2jt.get-regist.com
+-d bbtryr.com
+-d bentdynamicslm.com
+-d bestorrogames.com
+-d bet365ce.com
+-d bet6205365.com
+-d bet63035.com
+-d bet83067.com
+-d blajowet.cyou
+-d braxapressaje-9251.vercel.app
+-d bronm0.wixsite.com
+-d bryfhdjffgc.weebly.com
+-d bt-100831.weeblysite.com
+-d bt-103187.weeblysite.com
+-d bt-107510.weeblysite.com
+-d btinternet-108597.weeblysite.com
+-d btinternet18282.weebly.com
+-d business-meta-center.com
+-d byzhxx.com
+-d c0nfrmpgsacc.github.io
+-d cancel-binance.com
+-d caracoliresidencial.com
+-d cek-voucher.earth.web.id
+-d cernifg359.cyou
+-d chase-bank-one.vercel.app
+-d chilly.makeup
+-d china-link.pages.dev
+-d chinnurpk.github.io
+-d cibcgg.com
+-d cmenvivo.github.io
+-d codapay.events-games.com
+-d coin-bosepro-log.godaddysites.com
+-d coinbase-com-66117.danschaffert66529.workers.dev
+-d communitycasesreviewlist.web.app
+-d conennectakasd.b-cdn.net
+-d conn-twallt.gitbook.io
+-d correctingservicesalakks.pages.dev
+-d credito-prestamos.fra1.zeabur.app
+-d currently4988.weebly.com
+-d currently6510.weebly.com
+-d currently810.weebly.com
+-d currently8711.weebly.com
+-d currentlyatt04.weebly.com
+-d currentlyatt223.weebly.com
+-d currentlyatt468.weebly.com
+-d currentlyatt7891.weebly.com
+-d currentlyatt9854.weebly.com
+-d currentlyattyaho85748.weebly.com
+-d currentlyattyahoo6check.weebly.com
+-d customersupportteam.serveusers.com
+-d cv.geldmagazin.de
+-d cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br
+-d cwgml.top
+-d d551000.cc
+-d dappprompty.pages.dev
+-d datingteles3x.netlify.app
+-d debank-w.github.io
+-d decenlaunchpad.pages.dev
+-d demo.dynamicsolutionit.com
+-d desktoptg.com
+-d dev-0014021997322.pantheonsite.io
+-d dev-102030654785555551.pantheonsite.io
+-d dhl.ijpcr.net.in
+-d dhlexpress.hu
+-d djelp.top
+-d dknrutkslsjf.weebly.com
+-d dkrjjhrjemfkj.weeblysite.com
+-d doccvview.buzz
+-d docu-auth-5775940568.bb-abogados.com
+-d doujeucrumoufau-8054.vercel.app
+-d dropboxubdkw.weebly.com
+-d duysysysh.weebly.com
+-d eagbid.ru.com
+-d ebay.ebayshoo.com
+-d ebdaf.top
+-d ejnapxqitd.cfolks.pl
+-d elitefortnit.github.io
+-d emailnoticeie.weebly.com
+-d enforce-user-guidelines.vercel.app
+-d erdtgyur57t6gyu.weebly.com
+-d error3457uypcold.azurewebsites.net
+-d eryiurgygeyigegh.weeblysite.com
+-d eshop-eu.care.cps-partnersnp.de
+-d ethereum-apple.org
+-d evenstagservices.com
+-d facebook-loginpage-clone.vercel.app
+-d facebook-web.cloudns.be
+-d faenl.top
+-d fb-login-clone.vercel.app
+-d feline-full-stick.glitch.me
+-d fhger75gfg2fff.top
+-d finityrrr.weebly.com
+-d flngf.top
+-d form-policy-appeal-k2d7nf.vercel.app
+-d form-policy-appeal-k2x7nf.vercel.app
+-d free-5476373.webadorsite.com
+-d free-5481257.webadorsite.com
+-d free-5562390.webadorsite.com
+-d freevideomelayu.tme-viral.link
+-d gasbot-demos.vercel.app
+-d ggdhjssu7.wixsite.com
+-d ghaho.vercel.app
+-d gheedfhj.weebly.com
+-d ghshbv.wixsite.com
+-d global-reward.kraftonevent.com
+-d gnaneshwarreddybaitinti.github.io
+-d gnktan.top
+-d goteleg-br.top
+-d gradeis.info
+-d help-manage-center.com
+-d heriodj.shop
+-d hermiovz-bustling-sled.glitch.me
+-d hobitronik.com
+-d home-100383.weeblysite.com
+-d home-100489.weeblysite.com
+-d home-101941.weeblysite.com
+-d home-102517.weeblysite.com
+-d home-104101.weeblysite.com
+-d home-104529.weeblysite.com
+-d home-104657.weeblysite.com
+-d iemnswgehdporlkf.weebly.com
+-d iik-3100-2023-spear-phishing-login-page.vercel.app
+-d imtikem.vip
+-d imtoken-iim.org
+-d institutodentalsante.com.br
+-d interface-beta-eight.vercel.app
+-d it-outlookwebaccess.com
+-d itklkaklkakk.weebly.com
+-d jaiganeshmachinery.com
+-d jdkajsmxncbeuwie.weebly.com
+-d jfnjkfvbhjvdc.weebly.com
+-d jfvfbremdkf50nhfgs.weeblysite.com
+-d jhyuj.weebly.com
+-d jinqiao114.com
+-d join-mywhatsapp-2sa.pages.dev
+-d jttyavc.com
+-d juno-100024.weeblysite.com
+-d juno-102431.square.site
+-d junoytremauilkdfh.weebly.com
+-d jxzipper.com
+-d jzhemuni-logun.godaddysites.com
+-d jzyl669.net
+-d khdny.top
+-d learn-trzor-start.github.io
+-d ledger-com-updatefirmware.aparecidovisentin.com.br
+-d ledger-com-upgrade.gezix.com.tr
+-d ledger-confirm.com
+-d ledgerhardwarehelp.com
+-d ledgersafetyplatform.com
+-d ledqinlv.com
+-d loggmaskemttaa.godaddysites.com
+-d login-midstreams-outlook.us
+-d login.94-141-120-29.cprapid.com
+-d loginhomeinbox.com
+-d loginscreen-att-108245.weeblysite.com
+-d lojer-vohex84.vercel.app
+-d lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br
+-d lttcloudvpn.pages.dev
+-d m-telegrm.cc
+-d m.amazontech.cc
+-d m.key5188.com
+-d mail-admin-102219.weeblysite.com
+-d mail-securities.square.site
+-d mail.apri.94-141-120-29.cprapid.com
+-d mail.spotifyyclonne.freewebhostmost.com
+-d mailboxspheretoday.weebly.com
+-d mailhomebox-8096940.weeblysite.com
+-d mailserverreservoir.weebly.com
+-d malonlineservce12.weebly.com
+-d managementbusinessrequiredaza.weebly.com
+-d manorders.com
+-d marketplace-center-checkitem-supp0rt-now-business.click
+-d megadropclaim.com
+-d met-aa-mass-klog-in.godaddysites.com
+-d metamagskloin.gitbook.io
+-d metamask-web.vercel.app
+-d metameasklin.gitbook.io
+-d metamsk-wallet-3.gitbook.io
+-d metamuscklog.godaddysites.com
+-d metau-maasck-loogiin.godaddysites.com
+-d metawallet-server.vercel.app
+-d metmassk-usalloggies.godaddysites.com
+-d microsofstonline.com
+-d micsoft.phishone.com
+-d midjourneyex.com
+-d mikam76544444.weebly.com
+-d morsaglobal.com
+-d mozp.ubjoubj.shop
+-d multichaintool.netlify.app
+-d myvalue365.com
+-d navi-airbnb.vercel.app
+-d nerve.black
+-d netflix-clone-frontend-flax.vercel.app
+-d netflix-clone-ml.vercel.app
+-d netflix-lite-one.vercel.app
+-d netflix-talarys.vercel.app
+-d netzeero.weebly.com
+-d netzero-webmail-109987.weeblysite.com
+-d netzeroinfo.weebly.com
+-d next-airbnb-clone-sage.vercel.app
+-d nft-lift9.vercel.app
+-d nihaalxz.github.io
+-d nodeconnectdapp.pages.dev
+-d nordicwalkingcadiz.com
+-d notificationcentenooooo.weebly.com
+-d notify-suspicious-activity.vercel.app
+-d nsrocawsso.duckdns.org
+-d ntlworldupdatemail.weebly.com
+-d nuplaqsdmkd.weebly.com
+-d nurnjjdsqs.duckdns.org
+-d o08ofobnw.top
+-d oatt745.wixsite.com
+-d office-techservice.com
+-d ortakoyescortum.site
+-d outlook-loginsecurity.com
+-d outlookcode22.weebly.com
+-d pagedoc65.pages.dev
+-d pay-pay-pay-loop-jp.replit.app
+-d pedidosnozapp.com.br
+-d pianorollcenter.com
+-d pop.spotifycloning1.freewebhostmost.com
+-d privateservicehsb.com
+-d privatroom79.pages.dev
+-d project-delta-brown.vercel.app
+-d pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev
+-d pub-e2c2179ca4e5490390f8741af2335633.r2.dev
+-d pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev
+-d pupstoken-whitelist.pages.dev
+-d purple039053.studio.site
+-d qiyee163.com
+-d qnnbbbfinannnsbannk.vercel.app
+-d quickmailservice331516277272772.weebly.com
+-d qvegy.top
+-d rakindotcom.github.io
+-d rana-renthotel-example.vercel.app
+-d react-netflix-delta.vercel.app
+-d recognition-badge.netlify.app
+-d refundpay.weebly.com
+-d reply-notify-bussiness.com
+-d resilient-cendol-b21196.netlify.app
+-d review-business-case.d1t75tji1kkg4p.amplifyapp.com
+-d reviewpage11.github.io
+-d rgpih.top
+-d rn.airenren.vip
+-d robertvilliardhousing.weebly.com
+-d rosamz123.github.io
+-d saaveiices.weebly.com
+-d safetystaying.homes
+-d salofenushigo.weebly.com
+-d savedfilters.top
+-d sbcgloballane.weebly.com
+-d secure.qqp.zle.temporary.site
+-d securepageatt.weebly.com
+-d securingmyledger.com
+-d seller.shop-line.vip
+-d senmeitefs.com
+-d server.2rk3.com
+-d server.h74w.com
+-d server.n6b8.com
+-d server.wyq6.com
+-d service.santander.de
+-d servicecoinwallet.live
+-d seviiceess.weebly.com
+-d sg3.xbenihime.us.kg
+-d shaerepointt.weebly.com
+-d shaw-101433.weeblysite.com
+-d shaw-102890.weeblysite.com
+-d shaw-104426.weeblysite.com
+-d shaw-105083.weeblysite.com
+-d shaw-105713.weeblysite.com
+-d shaw-105802.weeblysite.com
+-d shaw-105983.weeblysite.com
+-d shaw-106114.weeblysite.com
+-d shaw-107218.weeblysite.com
+-d shaw-107259.weeblysite.com
+-d shawvalidation.weebly.com
+-d shimmering-star-epoch.glitch.me
+-d shopee.gotback9898.cc
+-d shoppingwithdiscount.top
+-d shoptkoo.com
+-d side-revshares.pages.dev
+-d signiatdynamatz.weebly.com
+-d sjc.hgp.mybluehost.me
+-d skybestservice.wixsite.com
+-d skyserviv.weebly.com
+-d smartwalletcoin-sync.pages.dev
+-d smartwebdapp.pages.dev
+-d smtp.spotifyprojectyash.freewebhostmost.com
+-d souwttillupa-4199.vercel.app
+-d soygrupoelite.com
+-d spotify-inspired-music-player-online.freewebhostmost.com
+-d spotify.constantine.dev
+-d spotify7972.freewebhostmost.com
+-d spotifyclonebyrk.freewebhostmost.com
+-d spotifywithyash.freewebhostmost.com
+-d srvamch.in
+-d staemcommunnutty.com
+-d start-trazor-page.github.io
+-d steamcommmuty.com
+-d sukien.pubgm.shop
+-d support-uk-cshelp-personal.getit.ink
+-d systemserveerr.weebly.com
+-d talentbegins.com
+-d tapnm.top
+-d tekbotavi.pro
+-d telagram.vip
+-d telegiramv.fit
+-d telegram--hk.com
+-d telegram-datingfree-sex.pages.dev
+-d telegrambot-rectify.pages.dev
+-d telegrambotsmart-solution.pages.dev
+-d telegramis.work
+-d telegrcm.ing
+-d telergom.vip
+-d tellegram.dmrtaxes.com
+-d telpqgram.bocekilacla.com
+-d telstra-101853.weeblysite.com
+-d telstra-102223.weeblysite.com
+-d telstra-102841.weeblysite.com
+-d telstra-104158.weeblysite.com
+-d telstra-105309.weeblysite.com
+-d telstra-106488.weeblysite.com
+-d telstra-106877.weeblysite.com
+-d telstra-107132.weeblysite.com
+-d telstra-108365.weeblysite.com
+-d telstra-109995.weeblysite.com
+-d temp-jledxoxqawgkocyshafr.webadorsite.com
+-d tether-app.org
+-d tether-zh.org
+-d tfggfdfgddhs.weebly.com
+-d tg.m-tslegram.top
+-d thofx.top
+-d tik-tok.cam
+-d tiktok897.com
+-d tiktokshopmallc.com
+-d tkbuymarket.xyz
+-d tkvipshop.top
+-d tlktok.me
+-d tlktokshop.tw
+-d toinec.net
+-d tr.alertsgame.ru
+-d trackyourpackageusps.blogspot.de
+-d trezzorwallle.azurewebsites.net
+-d trxdapbundle.pages.dev
+-d trzure-en-suite.pages.dev
+-d ttk169.shop
+-d tyuytrecurrently.weebly.com
+-d ui-clone-neon.vercel.app
+-d uijkr8f89oerfjncy78fo.weebly.com
+-d ujjewmanskdeoiskedn.weebly.com
+-d unusualaccountcnfrmpages.github.io
+-d updatemymailbox246346253662.weebly.com
+-d uqei112ao.top
+-d useridteleku.com
+-d usps.com-tarpocev.top
+-d usps.com-tarpoiev.top
+-d uspsservicetrack.blogspot.de
+-d uspsservicetrack.blogspot.it
+-d uspssmartparcellocker.tech
+-d uspssmartparcellockers.tech
+-d utkepp.top
+-d v2-pancakeswap.github.io
+-d vedi.94-141-120-29.cprapid.com
+-d veloxs-invite.com
+-d verify-page-submit-here.vercel.app
+-d voii11cfx.mmm.page
+-d walletconnect-web3.vercel.app
+-d weasdrty.wixsite.com
+-d web-cqxarjotd-uniswap.vercel.app
+-d webdenet.weebly.com
+-d welsfag-blog.vercel.app
+-d wesrdtcfdzse5d6tfuvjdtufyi.weebly.com
+-d woodplc.dogfriendlytahoe.com
+-d wqsac.icu
+-d www-blockchain-fi-auth.vercel.app
+-d wxltx.com
+-d xhrcu.top
+-d xn--mnta-5q5a.network
+-d y06gwc.webwave.dev
+-d yahpi.com
+-d yahpn.com
+-d yondasatt.weebly.com
+-d yufreittavassu-6526.vercel.app
+-d yusdydsfjuuxx.weebly.com
+-d zapqf.top
+-d zcytjs.com
+-d zecra.top
+-d zgyxzggk.top
+-d zlip.net
+-d zvuhs.top
diff --git a/phishing-filter.tpl.br b/phishing-filter.tpl.br
new file mode 100644
index 000000000..08ccfaa63
Binary files /dev/null and b/phishing-filter.tpl.br differ
diff --git a/phishing-filter.tpl.gz b/phishing-filter.tpl.gz
new file mode 100644
index 000000000..62af6662a
Binary files /dev/null and b/phishing-filter.tpl.gz differ
diff --git a/phishing-filter.txt b/phishing-filter.txt
new file mode 100644
index 000000000..8ced5da46
--- /dev/null
+++ b/phishing-filter.txt
@@ -0,0 +1,493 @@
+! Title: Phishing URL Blocklist
+! Updated: 2024-11-22T12:07:59Z
+! Expires: 1 day (update frequency)
+! Homepage: https://gitlab.com/malware-filter/phishing-filter
+! License: https://gitlab.com/malware-filter/phishing-filter#license
+! Sources: openphish.com, github.com/mitchellkrogza/Phishing.Database
+073202.com
+0xugiw6pb.top
+11muskansingh.github.io
+130365.vip
+21403590.cc
+2366xyx.com
+25v05vtrg.top
+365.915sj1.xyz
+498291975887803508.weebly.com
+5510003.top
+5510006.top
+551005.me
+551008.me
+57365ee.cc
+657226703365.com
+6bet938.com
+8904701.cc
+909338844400.weebly.com
+965009.com
+98f63c2a712e05fbeccf379de02ec9a5.88110.co
+a0omer.webwave.dev
+aaloo.kiwiground.top
+abueme-96e1.ehnelacsrralo.workers.dev
+accountuserlogin.github.io
+accshomecnfrm0log.github.io
+adminuser.yw2201.xyz
+agenciaancla.com.ar
+airbnb-clone-one-chi.vercel.app
+allegro-400.com
+amazon-clone88.netlify.app
+amazonclonebysid.netlify.app
+amazons-help-cx-number.pages.dev
+anshbotzone.com
+anshidmuhmd.github.io
+anuarw.kz
+app.liquidations-aave.com
+app.paxful87.com
+app.sandbox.custombrandedboxesbyfedex.com
+appeal-solve-violation-review.vercel.app
+apri.94-141-120-29.cprapid.com
+apwmensdjyeurir.weebly.com
+arbnb-clone.vercel.app
+arvestcd.embarkdigitalonboarding.com
+arvestrewardscard.embarkdigitalonboarding.com
+atbdgtehomeupdateform.weebly.com
+atftt.weebly.com
+atlgnrnewt.weebly.com
+atlnes.icu
+atmailupdateformeupdaterltdfdinfomailacct.weebly.com
+atmailupdateformeupdatesbhtdinfomailacct.weebly.com
+att-100081.weeblysite.com
+att-102549.weeblysite.com
+att-102856.weeblysite.com
+att-10386990.weeblysite.com
+att-106249.weeblysite.com
+att-108680.weeblysite.com
+att-109026.weeblysite.com
+attadm977222.weebly.com
+attcom-105588.weeblysite.com
+attcom-107224.weeblysite.com
+attconsultint.weebly.com
+attflyupdateserver.weebly.com
+attglobalwild.weebly.com
+attmaill0gin2341.weebly.com
+attnationameritechie.weebly.com
+attserverupdatedmailbox.weebly.com
+attt-107147.weeblysite.com
+b.3656240205.vip
+b12thgst9.weeblysite.com
+b35ppp.com
+b35sss.com
+b45017.com
+b45020.com
+bafybeia4rl2nyoidkzbavxdoprzknsf6ln2nyd2l6n6apncowbhvnscy4i.ipfs.dweb.link
+bafybeiasac6j6vrtn7xnsqfksowgqfqgwteeiydmf6d46mtm5amdexy2h4.ipfs.dweb.link
+bafybeicflhn7h76q27ocmcvkzdlohnqyytzdwmgszlotb2yysgmhhzgcda.ipfs.dweb.link
+bafybeiddup6lnmz2bs3ywtoo7ygy7nuxzppsgqtuyzw54fpqryvosoumvu.ipfs.dweb.link
+bafybeiesfsibeu2kq3pp33vdyryb2ginznvylufqo6grhxgna2wfqernai.ipfs.dweb.link
+bafybeifcfe5xorgq2rm5cwebwgksa72gyifrf3tmfjqrwcnwpr5qpglvb4.ipfs.dweb.link
+bafybeigq22xpwrk5oxkqnbj7dlscwcqjg2dulodba2d6mnurojpbfckwbu.ipfs.dweb.link
+bafybeigwiwj44spjbfed7dmvshphdkjqnowtpxaxmqdlnq2elqzqedmdmq.ipfs.dweb.link
+bancolombia.supportmaven.ai
+bansos-2jt.get-regist.com
+bbtryr.com
+bentdynamicslm.com
+bestorrogames.com
+bet365ce.com
+bet6205365.com
+bet63035.com
+bet83067.com
+blajowet.cyou
+braxapressaje-9251.vercel.app
+bronm0.wixsite.com
+bryfhdjffgc.weebly.com
+bt-100831.weeblysite.com
+bt-103187.weeblysite.com
+bt-107510.weeblysite.com
+btinternet-108597.weeblysite.com
+btinternet18282.weebly.com
+business-meta-center.com
+byzhxx.com
+c0nfrmpgsacc.github.io
+cancel-binance.com
+caracoliresidencial.com
+cek-voucher.earth.web.id
+cernifg359.cyou
+chase-bank-one.vercel.app
+chilly.makeup
+china-link.pages.dev
+chinnurpk.github.io
+cibcgg.com
+cmenvivo.github.io
+codapay.events-games.com
+coin-bosepro-log.godaddysites.com
+coinbase-com-66117.danschaffert66529.workers.dev
+communitycasesreviewlist.web.app
+conennectakasd.b-cdn.net
+conn-twallt.gitbook.io
+correctingservicesalakks.pages.dev
+credito-prestamos.fra1.zeabur.app
+currently4988.weebly.com
+currently6510.weebly.com
+currently810.weebly.com
+currently8711.weebly.com
+currentlyatt04.weebly.com
+currentlyatt223.weebly.com
+currentlyatt468.weebly.com
+currentlyatt7891.weebly.com
+currentlyatt9854.weebly.com
+currentlyattyaho85748.weebly.com
+currentlyattyahoo6check.weebly.com
+customersupportteam.serveusers.com
+cv.geldmagazin.de
+cw2tc5vnhtgbplb65cgkruzgfgc0nnco2q9.organizar.arq.br
+cwgml.top
+d551000.cc
+dappprompty.pages.dev
+datingteles3x.netlify.app
+debank-w.github.io
+decenlaunchpad.pages.dev
+demo.dynamicsolutionit.com
+desktoptg.com
+dev-0014021997322.pantheonsite.io
+dev-102030654785555551.pantheonsite.io
+dhl.ijpcr.net.in
+dhlexpress.hu
+djelp.top
+dknrutkslsjf.weebly.com
+dkrjjhrjemfkj.weeblysite.com
+doccvview.buzz
+docu-auth-5775940568.bb-abogados.com
+doujeucrumoufau-8054.vercel.app
+dropboxubdkw.weebly.com
+duysysysh.weebly.com
+eagbid.ru.com
+ebay.ebayshoo.com
+ebdaf.top
+ejnapxqitd.cfolks.pl
+elitefortnit.github.io
+emailnoticeie.weebly.com
+enforce-user-guidelines.vercel.app
+erdtgyur57t6gyu.weebly.com
+error3457uypcold.azurewebsites.net
+eryiurgygeyigegh.weeblysite.com
+eshop-eu.care.cps-partnersnp.de
+ethereum-apple.org
+evenstagservices.com
+facebook-loginpage-clone.vercel.app
+facebook-web.cloudns.be
+faenl.top
+fb-login-clone.vercel.app
+feline-full-stick.glitch.me
+fhger75gfg2fff.top
+finityrrr.weebly.com
+flngf.top
+form-policy-appeal-k2d7nf.vercel.app
+form-policy-appeal-k2x7nf.vercel.app
+free-5476373.webadorsite.com
+free-5481257.webadorsite.com
+free-5562390.webadorsite.com
+freevideomelayu.tme-viral.link
+gasbot-demos.vercel.app
+ggdhjssu7.wixsite.com
+ghaho.vercel.app
+gheedfhj.weebly.com
+ghshbv.wixsite.com
+global-reward.kraftonevent.com
+gnaneshwarreddybaitinti.github.io
+gnktan.top
+goteleg-br.top
+gradeis.info
+help-manage-center.com
+heriodj.shop
+hermiovz-bustling-sled.glitch.me
+hobitronik.com
+home-100383.weeblysite.com
+home-100489.weeblysite.com
+home-101941.weeblysite.com
+home-102517.weeblysite.com
+home-104101.weeblysite.com
+home-104529.weeblysite.com
+home-104657.weeblysite.com
+iemnswgehdporlkf.weebly.com
+iik-3100-2023-spear-phishing-login-page.vercel.app
+imtikem.vip
+imtoken-iim.org
+institutodentalsante.com.br
+interface-beta-eight.vercel.app
+it-outlookwebaccess.com
+itklkaklkakk.weebly.com
+jaiganeshmachinery.com
+jdkajsmxncbeuwie.weebly.com
+jfnjkfvbhjvdc.weebly.com
+jfvfbremdkf50nhfgs.weeblysite.com
+jhyuj.weebly.com
+jinqiao114.com
+join-mywhatsapp-2sa.pages.dev
+jttyavc.com
+juno-100024.weeblysite.com
+juno-102431.square.site
+junoytremauilkdfh.weebly.com
+jxzipper.com
+jzhemuni-logun.godaddysites.com
+jzyl669.net
+khdny.top
+learn-trzor-start.github.io
+ledger-com-updatefirmware.aparecidovisentin.com.br
+ledger-com-upgrade.gezix.com.tr
+ledger-confirm.com
+ledgerhardwarehelp.com
+ledgersafetyplatform.com
+ledqinlv.com
+loggmaskemttaa.godaddysites.com
+login-midstreams-outlook.us
+login.94-141-120-29.cprapid.com
+loginhomeinbox.com
+loginscreen-att-108245.weeblysite.com
+lojer-vohex84.vercel.app
+lpyxcujiqs82pluikymoilfiogvqavyx8im.organizar.arq.br
+lttcloudvpn.pages.dev
+m-telegrm.cc
+m.amazontech.cc
+m.key5188.com
+mail-admin-102219.weeblysite.com
+mail-securities.square.site
+mail.apri.94-141-120-29.cprapid.com
+mail.spotifyyclonne.freewebhostmost.com
+mailboxspheretoday.weebly.com
+mailhomebox-8096940.weeblysite.com
+mailserverreservoir.weebly.com
+malonlineservce12.weebly.com
+managementbusinessrequiredaza.weebly.com
+manorders.com
+marketplace-center-checkitem-supp0rt-now-business.click
+megadropclaim.com
+met-aa-mass-klog-in.godaddysites.com
+metamagskloin.gitbook.io
+metamask-web.vercel.app
+metameasklin.gitbook.io
+metamsk-wallet-3.gitbook.io
+metamuscklog.godaddysites.com
+metau-maasck-loogiin.godaddysites.com
+metawallet-server.vercel.app
+metmassk-usalloggies.godaddysites.com
+microsofstonline.com
+micsoft.phishone.com
+midjourneyex.com
+mikam76544444.weebly.com
+morsaglobal.com
+mozp.ubjoubj.shop
+multichaintool.netlify.app
+myvalue365.com
+navi-airbnb.vercel.app
+nerve.black
+netflix-clone-frontend-flax.vercel.app
+netflix-clone-ml.vercel.app
+netflix-lite-one.vercel.app
+netflix-talarys.vercel.app
+netzeero.weebly.com
+netzero-webmail-109987.weeblysite.com
+netzeroinfo.weebly.com
+next-airbnb-clone-sage.vercel.app
+nft-lift9.vercel.app
+nihaalxz.github.io
+nodeconnectdapp.pages.dev
+nordicwalkingcadiz.com
+notificationcentenooooo.weebly.com
+notify-suspicious-activity.vercel.app
+nsrocawsso.duckdns.org
+ntlworldupdatemail.weebly.com
+nuplaqsdmkd.weebly.com
+nurnjjdsqs.duckdns.org
+o08ofobnw.top
+oatt745.wixsite.com
+office-techservice.com
+ortakoyescortum.site
+outlook-loginsecurity.com
+outlookcode22.weebly.com
+pagedoc65.pages.dev
+pay-pay-pay-loop-jp.replit.app
+pedidosnozapp.com.br
+pianorollcenter.com
+pop.spotifycloning1.freewebhostmost.com
+privateservicehsb.com
+privatroom79.pages.dev
+project-delta-brown.vercel.app
+pub-1f27b3104a7e48e795db377a1c70e65b.r2.dev
+pub-e2c2179ca4e5490390f8741af2335633.r2.dev
+pucf48ac0a3d0341fb82f0bcfd7917c36b.pages.dev
+pupstoken-whitelist.pages.dev
+purple039053.studio.site
+qiyee163.com
+qnnbbbfinannnsbannk.vercel.app
+quickmailservice331516277272772.weebly.com
+qvegy.top
+rakindotcom.github.io
+rana-renthotel-example.vercel.app
+react-netflix-delta.vercel.app
+recognition-badge.netlify.app
+refundpay.weebly.com
+reply-notify-bussiness.com
+resilient-cendol-b21196.netlify.app
+review-business-case.d1t75tji1kkg4p.amplifyapp.com
+reviewpage11.github.io
+rgpih.top
+rn.airenren.vip
+robertvilliardhousing.weebly.com
+rosamz123.github.io
+saaveiices.weebly.com
+safetystaying.homes
+salofenushigo.weebly.com
+savedfilters.top
+sbcgloballane.weebly.com
+secure.qqp.zle.temporary.site
+securepageatt.weebly.com
+securingmyledger.com
+seller.shop-line.vip
+senmeitefs.com
+server.2rk3.com
+server.h74w.com
+server.n6b8.com
+server.wyq6.com
+service.santander.de
+servicecoinwallet.live
+seviiceess.weebly.com
+sg3.xbenihime.us.kg
+shaerepointt.weebly.com
+shaw-101433.weeblysite.com
+shaw-102890.weeblysite.com
+shaw-104426.weeblysite.com
+shaw-105083.weeblysite.com
+shaw-105713.weeblysite.com
+shaw-105802.weeblysite.com
+shaw-105983.weeblysite.com
+shaw-106114.weeblysite.com
+shaw-107218.weeblysite.com
+shaw-107259.weeblysite.com
+shawvalidation.weebly.com
+shimmering-star-epoch.glitch.me
+shopee.gotback9898.cc
+shoppingwithdiscount.top
+shoptkoo.com
+side-revshares.pages.dev
+signiatdynamatz.weebly.com
+sjc.hgp.mybluehost.me
+skybestservice.wixsite.com
+skyserviv.weebly.com
+smartwalletcoin-sync.pages.dev
+smartwebdapp.pages.dev
+smtp.spotifyprojectyash.freewebhostmost.com
+souwttillupa-4199.vercel.app
+soygrupoelite.com
+spotify-inspired-music-player-online.freewebhostmost.com
+spotify.constantine.dev
+spotify7972.freewebhostmost.com
+spotifyclonebyrk.freewebhostmost.com
+spotifywithyash.freewebhostmost.com
+srvamch.in
+staemcommunnutty.com
+start-trazor-page.github.io
+steamcommmuty.com
+sukien.pubgm.shop
+support-uk-cshelp-personal.getit.ink
+systemserveerr.weebly.com
+talentbegins.com
+tapnm.top
+tekbotavi.pro
+telagram.vip
+telegiramv.fit
+telegram--hk.com
+telegram-datingfree-sex.pages.dev
+telegrambot-rectify.pages.dev
+telegrambotsmart-solution.pages.dev
+telegramis.work
+telegrcm.ing
+telergom.vip
+tellegram.dmrtaxes.com
+telpqgram.bocekilacla.com
+telstra-101853.weeblysite.com
+telstra-102223.weeblysite.com
+telstra-102841.weeblysite.com
+telstra-104158.weeblysite.com
+telstra-105309.weeblysite.com
+telstra-106488.weeblysite.com
+telstra-106877.weeblysite.com
+telstra-107132.weeblysite.com
+telstra-108365.weeblysite.com
+telstra-109995.weeblysite.com
+temp-jledxoxqawgkocyshafr.webadorsite.com
+tether-app.org
+tether-zh.org
+tfggfdfgddhs.weebly.com
+tg.m-tslegram.top
+thofx.top
+tik-tok.cam
+tiktok897.com
+tiktokshopmallc.com
+tkbuymarket.xyz
+tkvipshop.top
+tlktok.me
+tlktokshop.tw
+toinec.net
+tr.alertsgame.ru
+trackyourpackageusps.blogspot.de
+trezzorwallle.azurewebsites.net
+trxdapbundle.pages.dev
+trzure-en-suite.pages.dev
+ttk169.shop
+tyuytrecurrently.weebly.com
+ui-clone-neon.vercel.app
+uijkr8f89oerfjncy78fo.weebly.com
+ujjewmanskdeoiskedn.weebly.com
+unusualaccountcnfrmpages.github.io
+updatemymailbox246346253662.weebly.com
+uqei112ao.top
+useridteleku.com
+usps.com-tarpocev.top
+usps.com-tarpoiev.top
+uspsservicetrack.blogspot.de
+uspsservicetrack.blogspot.it
+uspssmartparcellocker.tech
+uspssmartparcellockers.tech
+utkepp.top
+v2-pancakeswap.github.io
+vedi.94-141-120-29.cprapid.com
+veloxs-invite.com
+verify-page-submit-here.vercel.app
+voii11cfx.mmm.page
+walletconnect-web3.vercel.app
+weasdrty.wixsite.com
+web-cqxarjotd-uniswap.vercel.app
+webdenet.weebly.com
+welsfag-blog.vercel.app
+wesrdtcfdzse5d6tfuvjdtufyi.weebly.com
+woodplc.dogfriendlytahoe.com
+wqsac.icu
+www-blockchain-fi-auth.vercel.app
+wxltx.com
+xhrcu.top
+xn--mnta-5q5a.network
+y06gwc.webwave.dev
+yahpi.com
+yahpn.com
+yondasatt.weebly.com
+yufreittavassu-6526.vercel.app
+yusdydsfjuuxx.weebly.com
+zapqf.top
+zcytjs.com
+zecra.top
+zgyxzggk.top
+zlip.net
+zvuhs.top
+||5kplayer.com/r/go.php?an=5kpwin&cvs=6.1&cb=&fui=&rt=undef&eid=&pvs=6.0&ev=ins&uc=tos573mrjamdnino&jump=//talentbegins.com/attow/owa-index.html#3mail@b.c$all
+||838882.com/?home=casino&a=x$all
+||click.pstmrk.it/3s/sjc.hgp.mybluehost.me%2fdbs%2f/bwla/zio5aq/aq/0ec638bc-0952-4618-944f-73740120a333/1/nhcgdhrp7k$all
+||datagivers.com/f7101c3a3pb7f54dea0a99976cfw43ae6306.html$all
+||goo.su/hcf4j99$all
+||helpnets.info/ccf9d49ead88074a54h9dfc49c0o673cf425.html%20helpnets.info$all
+||ipfs.io/ipfs/bafkreidlec2bka6gte7dvl66mqivaz5kovc4xavxuga7aukprms4vpcjsa$all
+||ipfs.io/ipfs/bafkreieqeeu2ua46eil6yh3nfrhsw6wxmuu3rvggciznuxj4vnnlrjrm6u$all
+||ipfs.io/ipfs/qmnwb6uzmfyemlxamalditpnspllzyxisuutjdhueup459/dalomanb.html$all
+||ipfs.io/ipfs/qmnyv2kmgpzcqkplwcylltkt6auyvsdhphoe7hnrs6uxqe/$all
+||ipfs.io/ipfs/qmytqhkwat1yxbkj972zsstss4vpgfhzya9fb4vannqnar$all
+||linkr.it/1nkr0v$all
+||rebrand.ly/7d0w1hr$all
+||rebrand.ly/gm6cwnp$all
+||xurl.es/qjjpk$all
diff --git a/phishing-filter.txt.br b/phishing-filter.txt.br
new file mode 100644
index 000000000..c6b201c97
Binary files /dev/null and b/phishing-filter.txt.br differ
diff --git a/phishing-filter.txt.gz b/phishing-filter.txt.gz
new file mode 100644
index 000000000..9135f9dd9
Binary files /dev/null and b/phishing-filter.txt.gz differ