-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathblocklists-lookout.txt
776 lines (756 loc) · 18.3 KB
/
blocklists-lookout.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
## hosts-blocklists
## domains-ips-hashes
## blocklists-lookout
## https://www.lookout.com/threat-intelligence
# https://www.lookout.com/threat-intelligence/article/cryptochameleon-fcc-phishing-kit
07159889-coinbase.com
2a-coinbase.com
2b-coinbase.com
2c-coinbase.com
2f-coinbase.com
2fas-coinbase.com
2o-coinbase.com
2r-coinbase.com
2s-coinbase.com
2sv-coinbase.com
5247-coinbase.com
10195-coinbase.com
11246-coinbase.com
11247-coinbase.com
11248-coinbase.com
11258-coinbase.com
11259-coinbase.com
11472-coinbase.com
11923-coinbase.com
11957-coinbase.com
12958-coinbase.com
12984-okta.com
12985-coinbase.com
13130-coinbase.com
13247-coinbase.com
13247-icloud.com
13267-coinbase.com
14765-coinbase.com
16590-coinbase.com
17182-coinbase.com
17259-kraken.com
17286-coinbase.com
17614-coinbase.com
17619-coinbase.com
17912-coinbase.com
17914-coinbase.com
17917-coinbase.com
17954-coinbase.com
17958-coinbase.com
18275-gemini.com
18276-coinbase.com
18560-coinbase.com
18571-coinbase.com
18902-coinbase.com
18903-coinbase.com
18952-coinbase.com
19287-binance.com
19572-coinbase.com
19583-coinbase.com
19803-coinbase.com
21158-coinbase.com
21509-coinbase.com
25985-coinbase.com
27699-coinbase.com
28367-coinbase.com
28676-coinbase.com
29185-coinbase.com
29195-coinbase.com
38468-coinbase.com
39590-coinbase.com
41260-coinbase.com
43017-coinbase.com
47562-coinbase.com
50195-coinbase.com
54765-coinbase.com
57197-coinbase.com
58176-coinbase.com
58297-coinbase.com
61250-coinbase.com
61835-coinbase.com
61851-coinbase.com
61937-coinbase.com
71925-coinbase.com
72957-coinbase.com
72985-coinbase.com
74651-coinbase.com
76153-coinbase.com
81758-coinbase.com
81920-coinbase.com
81926-coinbase.com
81958-coinbase.com
83216-coinbase.com
83956-coinbase.com
87157-coinbase.com
87312-coinbase.com
89304-coinbase.com
89375-coinbase.com
91723-gemini.com
91752-coinbase.com
91756-coinbase.com
91782-coinbase.com
91835-coinbase.com
91845-coinbase.com
91923-coinbase.com
92758-coinbase.com
113912-coinbase.com
128147-coinbase.com
146282-coinbase.com
146284-coinbase.com
147260-coinbase.com
158312-coinbase.com
158372-coinbase.com
158702-coinbase.com
162178-coinbase.com
162478-coinbase.com
162782-coinbase.com
162812-coinbase.com
162814-coinbase.com
167285-coinbase.com
172486-coinbase.com
173912-coinbase.com
176284-coinbase.com
178253-coinbase.com
178294-coinbase.com
182043-coinbase.com
182967-coinbase.com
185912-coinbase.com
185914-coinbase.com
189126-coinbase.com
192854-coinbase.com
192856-coinbase.com
195812-coinbase.com
195826-coinbase.com
195827-binance.com
197304-coinbase.com
427883-coinbase.com
826298-coinbase.com
837613-coinbase.com
978941-coinbase.com
1492864-coinbase.com
1751954-coinbase.com
1875290-coinbase.com
1882730-coinbase.com
1958262-coinbase.com
1958297-coinbase.com
14817582-coinbase.com
14871904-coinbase.com
14891902-coinbase.com
16171675-coinbase.com
16171832-coinbase.com
16178234-coinbase.com
16178237-coinbase.com
16178434-coinbase.com
16442580-coinbase.com
16450107-coinbase.com
16450207-coinbase.com
16458207-coinbase.com
16478202-coinbase.com
16594373-coinbase.com
16624831-coinbase.com
16642124-coinbase.com
16642172-coinbase.com
16642580-coinbase.com
16642721-coinbase.com
16642724-coinbase.com
16642871-coinbase.com
16642872-coinbase.com
16712942-coinbase.com
16718672-coinbase.com
16728342-coinbase.com
16728348-coinbase.com
16728442-coinbase.com
16728472-coinbase.com
16729042-coinbase.com
16748272-coinbase.com
16782942-coinbase.com
16827420-coinbase.com
16827423-coinbase.com
16847145-coinbase.com
16893924-coinbase.com
17255030-coinbase.com
17284652-coinbase.com
17334522-coinbase.com
17334522-kraken.com
17384522-coinbase.com
17494976-coinbase.com
17512854-coinbase.com
17512857-coinbase.com
17525030-coinbase.com
17529580-coinbase.com
17618412-coinbase.com
17823920-coinbase.com
18290185-coinbase.com
18592176-coinbase.com
18594162-coinbase.com
18594962-coinbase.com
18597162-coinbase.com
18719562-coinbase.com
19582970-coinbase.com
19582971-coinbase.com
19592653-coinbase.com
19730492-coinbase.com
19764162-coinbase.com
76159869-coinbase.com
146271510-coinbase.com
164872942-coinbase.com
201784289-coinbase.com
210823644-coinbase.com
352134951-coinbase.com
754668948-coinbase.com
948122061-coinbase.com
accountrecovery-coinbase.com
action-shakepay.com
adjust-coinbase.com
admin-kraken.com
applechargebacks.com
authenticate-gemini.com
authorize-gmail.com
binance-okta.com
captcha-coinbase.com
cd-coinbase.com
circular-noon-farmhouse.glitch.me
coinbase-heip.com
coinbase-live.support
coinbase-reject.com
coinbase-ticket.com
coinbaseheip.com
com-2fa.help
com-2fa.support
com-3845.support
com-connect.help
com-fraud.support
com-help.support
com-reset.help
com-reset.net
com-ticket.live
com-ticket.support
contact-nexo.com
convert-coinbase.com
customerservice-coinbase.com
default-coinbase.com
defend-coinbase.com
deny-coinbase.com
dflfmgsdokasdcpl.com
disconnect-coinbase.com
escalate-coinbase.com
establish-coinbase.com
fcc-okta.com
fraudulent-coinbase.com
guard-apple.com
guard-icloud.com
guardian-coinbase.com
guide-gemini.com
help-bitfinex.com
help-shakepay.com
helpdesk-apple.com
helpdesk-gemini.com
helpdesk-icloud.com
identification-coinbase.com
island-placid-bromine.glitch.me
keys-coinbase.com
lockdown-coinbase.com
login-nexo.com
messages-coinbase.com
newpassword-coinbase.com
official-server.com
original-backend.com
prompt-coinbase.com
protect-apple.com
protect-coinbase.com
protect-gmail.com
protect-kraken.com
recoverme-coinbase.com
recoveryportal-coinbase.com
refunds-coinbase.com
reset-okta.com
restore-coinbase.com
return-coinbase.com
reverts-coinbase.com
secure-binance.us
secure-icloud.com
secure-nexo.com
secure-shakepay.com
security-umusic.com
server694590423.tech
session-coinbase.com
signin-kraken.com
startrecovery-coinbase.com
suite-trezor.io
supportportal-coinbase.com
talented-friendly-price.glitch.me
tech-icloud.com
threat-coinbase.com
ticket-apple.com
ticket-coinbase.com
tickets-apple.com
tokens-coinbase.com
unblock-coinbase.com
unlink-coinbase.com
welcome-coinbase.com
www-coinbasewallet.com
www-help-coinbase.com
www-help-gemini.com
your-coinbase.com
# https://www.lookout.com/threat-intelligence/article/badbazaar-surveillanceware-apt15
kuyrfikuhylkjliuyhiuy.nsupdate.info
msgupdate.nsupdate.info
signalplus.org
tibetone.org
tryhrwserf.com
148.251.87.197
02977d77c801136da581864152b80a9d6568651e
047dee43dda8c09c46773d323968886d9af6b49d
1ed74af5ec4c53e1b1090decf2c5c92907ff83ac
1fe3d295c3525b3acb7498df9b72dc80c6ca08f5
1fead5107758b6d284ce908bc221f90e6ac37744
3b18385cf280477c3fb603617eb242d39b6cc248
4e8e5571d60f029ebc2b2017931f4f70279d2036
5b32db300ad7ed54149df3234d7b9782d762c1bd
5b76cd64b3463f7209e3771c131b29f247fa0205
5c04e843f797a08b0754821e17eb773919ec3622
5cefce22565ffb69459fecbeeaea531ce053bd2b
6f9203d950ed18da7251aa6c4257921b04852fb5
8afe90ebb4666565891fcc33e12fad410996d4d1
8bd9825c07f4a4e0e7f537b6ea33ddfa4e1fff49
8c3051e83d2448046443692e070c81d3ba6b7be0
8ff73d504bba6fedf923f5f2f9b54fbdd4c53a22
9a120fce59a51c09d23b5f7274c7c0e22f2747b5
9eafa52a74741bb738c20823d4b78035149ea5e0
13c39737329aa5bb4ed95b38c70b857677949ff3
23c2aa2059487f1960e8bdb0c4cfc8808bc6733b
26b2bf522a6759390a7155250ddb3ee3512bec7a
37cad98b7810d8fa205b3ce901a405a575ce2bc3
38be047b29b3ac19e74b9943f981b00f87a2e141
47c070b0244633536b2731062f22a86238b8d649
55db0f43e9a72431b627c3f9752d24b3d2364555
66b0972bfd0786baa0076575db19b22c56d871ad
69bb842270dcfe777e50b81faf72962a2456062c
75ffd57282d23326430bc3ad789a7f3f4e643027
79fb6f43885df2a058a7aa9d60c88db6b44226dd
91bedfd5bd8f7a071c9024890a699fb6566e9ae5
437f5e0aa400372a6e98de7aca32f6cf916040a0
509cf8ccdd336ede1e8a0dcaafcec3a981c9bf12
724f41af93abcc7c7625a8814e43398ccbbddf2c
8790a91c4dd2870734eb1e7d49d2d5c24a41925f
12097cf566fbc31b94adf2d2a3c25617609faf68
12202d87b30bb92bf3f52eae6e93308a1829f988
16125c5ecd29bb1d359fdbbfc127341cafbae6bf
9541853c7e85cb1789945e4f9f185247d95c202d
166958184998ad53152634cb6a339310ee22d0d8
a443e448416375fb777b2523f5efd4addabc1ab3
aa4eede30b2aa975f691b6d002ca047520f2c86f
ab0248870abf3f2bb750f92e8af3da97b71ca74a
ac235440a738938c2218e2608ea229dd3584701b
be95c5ef09697412f39a7fa85e13e79a21c87826
c57bb036b996d8afdb0c6867b7c65970f69207be
c58ff582349fb8406cb98194c44393c000b0eb1d
d8f360971d04c3b623f1d7296339e1702142f135
dc692fc09316d9af6e299f15f22e5368ffc32a47
df42714a12957d239bc09b2306063a4728cf403f
e825e6f09ff7479d45fc35bbd6e0d662f93e93c7
eab8863ce4a9c9c4fcc02d4ce170bbe2cd6602fb
f0cc8ee3ce1d835a825103672c9fcaf874c3a965
f3ae46ac2465e09b7ff54d55540bd6f0e567759b
f31c0f9cc5b2d31e465d138f928835b5fc9f4daf
f70e6d6240ee8405214d9690c1d9b55c1c7d80c3
f721db78c57993bed75af77e30ba284b314de05c
fac660cb450a39cc1d422323aaf654c2bd23415d
fce2190c1bd0d65d26a134980ab339af160b5880
# https://www.lookout.com/threat-intelligence/article/robin-banks-phishing
02auth-bankofamerica.com
03auth-bankofamerica.com
03secureboalogin1.com
05securedboalogin1a.com
1auth09re-enable-americafirst.my03.com
1bofasecured.us
3login-info.serveusers.com
7a-bankofamerica.com
53-2fa.us
53-signin.com
access-3312t7zr94145.online-case-1b.org
access-6865xia0s8665.verifyhub-19c.cc
account-53rd.com
afcu-onlinebanking01.com
afcu-onlinebanking02.com
afcu.25u.com
aidme-citizensbnk23.com
aidme-santanderbnk.com
alert-authrbfcu.com
alrt-tr3ist.info
americafirst-onlinebanking08c.com
americafirst.secure02ea-authlogon.com
americafirst.secure03ea-authlogon.com
americafirst.secure04ea-authlogon.com
americafirstrouting.misecure.com
amerlca-fcu.com
amzon-service05a.com
approvedsms.online
auth03nfcu.org
auth06-web2access-americafirst.my03.com
auth07cit.com
auth.02bofa.com
auth.bof05.com
auth.nfix.online
authb02f.com
authmobilejp.ddns.net
authsantander1portal.com
authsectd08f.info
authyjpmobile01.ddns.net
autorization.santanderr.co.76t.online
autorization.tdbank.co.1t3.homes
banking.santader.us.76t.online
banking.santandr.co.1t7.online
bankofamerica-activity.com
bankofamerica-mobile02.com
bfcu01a.com
bk.aidme-citizensbnk23.com
bnacr.online
bnk-en.aidme-citizensbnk23.com
boaverifyuser88.com
bofa4cardlogin8m.ddns.net
bofa-administrator01.com
cap88tlluser.com
capitalone-onlinebanking01c.com
capitalone-onlinebanking08a.com
capitalone-verify.com.8nf.site
cfo4huqkbfgh84tqgeg0.aidme-santanderbnk.com
cfo8atikbfgh84ttl6l0.aidme-santanderbnk.com
changes-alerts.live
chase03a-security.com
chase-07secure.com
cirvipe43.dns.army
cit-health.online
citi03auth.com
citiupdate.online
citizens-authorized.ddns.net
citizensbanksecure01.com
client-authrgs.com
client-navyfederal.ddns.net
client-rbfcu.org
coinbase-profile0.com
coinbase-profile00.com
coinbase-usrrecovrg.com
confrimation.santanderr.co.76t.online
confrimation.santanderr.us.76t.online
cufcrb.online
dcuaccount-auth.ddns.net
dcuonline-auth.ddns.net
dcuonline-verify.ddns.net
desa2.cf
desconc.cf
eqfnjefjqjfjn19.misecure.com
fillchase-enquiry.lat
golden1-fcuonline01a.com
golden1-reports01a.com
help-client-prompt.online
helpservicesasb.com
helpservicesiccu.com
hsbc-uk-live01a.com
huntington-online01a.com
improvedaccount8214211.vantechddns.com
iog.authb02f.com
jimmyicon.com
jp-signin-morgan.com
jponetimeauth01.ddns.net
klsnew.php
klssza.php
ldentifyme-rbfcu.com
ldentlfyme-rbfcu.com
login-thebankofamerica.com
macusupport.com
mobiledcuauth01.ddns.net
mobilejpsecure.ddns.net
mobileusbnkauth01.ddns.net
mtbank-us.info
my.capitalone.comm.sncu.us
my.td-bank.comm.5yt.lol
my.td-bank.comm.h9s.online
myusaaclient.ml
navyfederal-auth.ddns.net
navyfederal-protect.ddns.net
navyfederal-safe.ddns.net
netfixsecurity02a.com
netflix-renewsub.com
netflix.ca.nl0.site
nfix.online
online-santander01a.com
online-santander02a.com
online-verlfy.info
onlinebanking01v-americafirst.com
onlinebanking.secbof.com
ourverified-helper.online
partalvsantanderauth2.com
phoneverification-afcu.dns-dns.com
portalv1santanderauth.com
portalv3santanderonline.com
rbbfcu-portal.com
rbfcu-signverify.com
rbfcuverify.in
rbfcuverify.info
rbfcuverifyteam.info
re-gions08a.com
recrovrcoinbase-help.com
review.02-amazon.com
reviewauth-nrbfcu.com
rolbsantanderportalv31.ns01.us
rsnetflix.com
s9845.secure-29s.is
safe02.info
safeams.chbas.info
santander-auth0a.ddns.net
santandercare02a.com
sec0userid.com
sec03hsbc.com
sec05verify-americafirst.my03.com
sec07-authoa.com
sec09auth-2re-enable-america1st.my03.com
sec75-citiauth.com
sec-bofauser02.com
secure01a-chase-onlines1.com
secure01a-chase-onlines2.com
secure02ea-chase-security.com
secure03-1captialverify.com
secure03-user.tk
secure03hsbc.com
secure04ea-chase.com
secure05hsbc.com
secure05loginbofa.com
secure0675-online-verlfication.info
secure08-wells.online
secure09-americafirst.my03.com
secure4-1capitaloneauth.com
secure4-5chaseauth8.com
secure5-9verifauth.com
secure7-3verifychase.com
secure11-verifauth03.com
secure41-verifauth6.com
secure73chase-auth.com
secure83ea-chase.com
secure84ea-chase.com
secure101ea-chase.com
secure125ea-chase.com
secure153ea-chase.com
secure-06site.tk
secure-53.com
secure-authoo1.com
secure.02bofa.com
secure.04bofa.com
secure.account.nt-ku.online
secure.chase.us.1w11.lol
secure.chase.us.5t7.online
secure.dcu.org.7yt7.online
secure.dcu.us.t7yt.online
secure.santandder.co.tw24.lol
secure.santanderss.co.6ty.lol
secure.santanderss.co.try4.homes
secure.santandrer.us.7y6.online
secure.santandrer.us.76t.online
secure.td.co.t57.lol
secure.td.us.4t3.homes
secure.userbof.com
secure.verf.hb-sc.info
secure.verify.uk.h-bs-c.info
securebofa.x24hr.com
securecitiupdate0.ddns.net
secured01bofa.us
secured016.servehttp.com
securednavyfcu011.ddns.net
securedpnc011.ddns.net
securedportal-confirmationlink.com
secureduserror01.redirectme.net
securee.santanderr.t-d-bk.live
securejpmobile01.ddns.net
securelink-bamkofamerica.com
securemobilejp.hopto.org
securenavy011.myftp.org
secureverify5.com
securewells.in
securex5web.com
securitybofa03e.com
securitybofa-help.com
serv03-user.serveusers.com
server-rbfcuauth.com
servicecreditunion02a.com
servicecu03a.com
servicecu-verif01a.com
signwebin.com
sms-phoneverification.dns-dns.com
smsapproval.online
smsrecovery.online
sslv5prosantanderlvl1.publicvm.com
static-usaa01.com
support.1afcusms.site
support.bellco.0rg.1t4.online
support.chase.us.5t7.online
support.santandrer.us.5tr.online
supportchas-e3n.com
supportl0ginc5.com
supportsmsboa.site
t-d-online01a.com
t-d-online02a.com
t-donline07a.com
td73banksec.serveftp.com
td-alerts.ddns.net
td-onlinebank1.com
td-onlinebanking03s.com
td-security01a.com
td-support01a.com
td.secure03ea-authlogon.com
tdbank-login.secure02ea-authlogon.com
tdbank-online01.com
tdbanksupport01a.com
tdrauth6.info
test.authb02f.com
truist-help.me
uk.payments.netflix.reb-hmcr.site
unlock-bofa.com.
update-info-afcu.com
update.02-amazon.com
usaaarmysecurityaesecurity.com
usaahelp.online
usaauthymobile.ddns.net
user03-login.serveftp.com
userassistance.site
userbof.com
userhelp.site
usr-mfa-coinbse.com
verifcapitalone01a.com
verification.netflix.hmrt.site
verification.netflix.uknet.online
verify.02bofa.com
verify.04bofa.com
verify.dcu.us.t7yt.online
verify.rebate.barclys.online
verify.santadner.5tr.online
verify.santadner.76t.online
verify.secbf.com
verifyandsecure11.ga
verifyauth10.com
web2access-americafirst-support.line.pm
webdirect-rbfcu-verify.my03.com
webphoneverificationsamericafirstcuredirect.xxuz.com
wellauth2.com
wells-access.info
wells-auth091.com
wells-auth092.com
wells-auth093.com
wfntm.online
34.168.100.202
34.168.242.7
34.172.242.32
81.28.6.5
103.212.81.230
109.122.221.135
109.122.221.156
139.59.108.187
167.71.203.211
# https://www.lookout.com/threat-intelligence/article/wyrmspy-dragonegg-surveillanceware-apt41
alxc.tbtianyan.com
andropwn.xyz
dns.win10micros0ft.com
huaxin-bantian.duckdns.org
smiss.imwork.net
update.umisen.com
yxwasec.com
103.43.17.99
116.205.4.18
118.193.39.165
121.42.149.52
121.201.109.98
0b4a9a3f167178054ef9f9a97463cbe31f078c2f
085191fb59d3933f8447610126600754b35697d4
2fbd56b1f3859c6d03dec47f8fcee7e37dc303a1
5c2fc57609ee28753b78a0f33ba7519fc9fbb6f8
5c16637848d6f1eb4aa6c5b2a4928a1144cd2113
6dd20f7b9ccbd961d155fff78452303a54714841
9b6297825a6c00b3af16748684d4de551cc7be75
17e6bbed5e43ec5b8d2821e0145da7ee32a58ea6
53c745956c3501d1daf232aeea5edfb52168c6b4
58cda5e4607557d79bc5e36764b577f17e77af49
85ca8cd21d70668bd2aab9c53163f5e03a0e1a8b
92ddbe438c8c8c1ef82fa5bb02e526db10829736
232b868e36f064b4151e4386835642fc8bf07e0b
331acbdd270acecfa80bc7b4e37629611593de0a
517ec909bc9e308b44d59dfd144188d1e23f57bc
589d88093dad377d46f34415a7f9df11d65b81ed
971f4cd569ad9f84e654b62bffdba3a4aa21d4e9
4405af38c4a6b6130fcf242a11b0ce7963a1be28
5891fa6a3a8232192ebd57a171bad29f53c7598c
81762cfae0bd5585e8c0c86e4fdbbe47d2dd614a
209567f4f28c5c8abcbe56d789e558aa64239534
215847e4c41144365b94cb924d969dbc5e69052b
2438069c43771f0011da2f22b57b8336aaa7562c
a9d2f59b8457c6998b654054084b102adfcf3306
ab560af6bafff8f58ea5bc53c0391501415aed14
b456a61a3e0ac6073a716b06293a3295a261de56
cab70e99516a36ab0f0d3851375adf0740f4bd5e
cc351ffbe748b1db43de6dcd40934fe23986e753
d02f548d354adff645318de6edc45dff23170241
d634a548973c7931e224a41201be0a273d561cff
d713b8b0f3764157cc18d5dc1cb0f9c558067728
dfff9ae245cc0beed8fdf409c00ec758d7d2678f
e514042565ffb2811f780227fee5ed5683925d49
fbda76a2c2834f89d642a72c24b1988a1f56e4b8
# https://www.lookout.com/threat-intelligence/article/iranian-spyware-bouldspy
84.234.96.117
149.56.92.127
192.99.251.49
192.99.251.50
192.99.251.51
192.99.251.54
02ac97b090a6b2a1b14bad839deec7d966f5642c
02c4969c45fd7ac913770f9db075eadf9785d3a7
08fd24e4514793b29b7bd2c29f9e5c15ffc9bada
8afc495b6632ce9ef812a971f71ae82d39d7e7e9
43a92743c8264a8d06724ab80139c0d31e8292ee
43f5506b960914ab76ffaf531cdd51dd86df22f2
63ff362f58c7b6dec8ea365a5dbc6a88ec09dacf
67a3def7ad736df94c8c50947f785c0926142b69
73c93be188f88755ed690266063223e141fdb9ff
75a6c724f43168346b177a60c81ca179a436246f
965d118cb80ccdbc6e95e530a314cb4b85ae1b42
5446e0cf2de0a888571ef1d521b9ada7b34ef33e
7208dc915a800fe5c5eaf599084147a8afeba991
7537ac1658100efaf6558eed4a3f732208b393ab
5168610b73f50661b998e95a74be25bfe749b6ef
69894818ba1dc8bfffe9fb384abf77d991379aaa
af999714aec75a64529c59f1e8de4c669adfa97a
bc826967c90acc08f1f70aa018f5d13f31521b92
da3c0cfd432b53a602ce7dc5165848b88411d9c9
db650b0eaffa21b63ce84d31b2bd09720da9491e
dd66dcb8db678d10f9589a12745ec2e575e4f5eb
f3b135555ae731b5499502f3b69724944ab367d5
# https://www.lookout.com/threat-intelligence/article/singapore-post-singtel-phishing
auspost-au.net
auspost-tracking.cc
new-tracking.com
next-pay.online
next-pay.site
next-pay.xyz
postbank.de.ihre-de.com
postjapan.net
sgpt-update.cc
singpoost.com
singpost-info.shop
singpost-member.com
singpost-sg.online
singpost-sg.site
singpost-sg.xyz
singpost-vip.com
singpost-vip.shop
singpot-mem.net
singpt-info.cc
singpt-update.com
singpt-update.net
singupdate.cc
sxb1plvwcpnl497368.prod.sxb1.secureserver.net
trackingid9175.one
trackpost.me
update-id8154.com
updts.at