From 25bf9d8bffa9b4b26015247524b1265e494c03c4 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 20 Mar 2024 05:39:04 +0100 Subject: [PATCH 1/8] First test of action sort Fixes https://github.com/mitchellkrogza/phishing/issues/43 --- .github/workflows/master.yml | 45 ++++++++++++++++++++++++++++++++++++ requirements.txt | 1 + tools/hierarchical_sort.sh | 8 ++++--- 3 files changed, 51 insertions(+), 3 deletions(-) create mode 100644 .github/workflows/master.yml create mode 100644 requirements.txt diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml new file mode 100644 index 0000000..d3bc346 --- /dev/null +++ b/.github/workflows/master.yml @@ -0,0 +1,45 @@ +name: Sort sources hierarchical + +on: + pull_request: + push: + branches: + - master + - main + +jobs: + build: + runs-on: ubuntu-latest + + permissions: + contents: write + + steps: + - name: Checkout the repo + uses: actions/checkout@main + with: + ref: ${{ github.head_ref }} + + - name: Setup Python 3.11 + uses: actions/setup-python@v5 + with: + python-version: 3.11 + run: | + if [ -f requirements.txt ]; then python3.11 -m pip install + --no-cache-dir -r requirements.txt; fi + + - name: 'Sort the lists hierarchical' + run: | + sh "${{ github.workspace }}/tools/hierarchical_sort.sh" + + - name: Git Status + run: git status + + - name: Set commit tag + run: | + tag=$(date +'day: %j of year %Y %H:%M:%S') + + - name: Commit all changed files back to the repository + uses: stefanzweifel/git-auto-commit-action@v5 + with: + commit_message: "Hierarchical sorted the lists $tag" diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..0327092 --- /dev/null +++ b/requirements.txt @@ -0,0 +1 @@ +mypdns diff --git a/tools/hierarchical_sort.sh b/tools/hierarchical_sort.sh index ddd0ffb..43e6276 100644 --- a/tools/hierarchical_sort.sh +++ b/tools/hierarchical_sort.sh @@ -1,4 +1,4 @@ -#!/usr/bin/env sh +#!/usr/bin/env bash ## This script should be placed in pre-commit-hooks set -xe @@ -7,9 +7,11 @@ GIT_DIR="$(git rev-parse --show-toplevel)" if [ -d "$GIT_DIR" ]; then cd "${GIT_DIR}" || exit 1 - for i in $(git ls-files -m); do + +FILES=('add-domain' 'add-link' 'add-wildcard-domain' 'falsepositive.list' 'falsepositive_regex.list' 'falsepositive_rzd.list') + + for i in "${FILES[@]}"; do python3.11 "$GIT_DIR/tools/domain-sort.py" <"${i}" >"${i}.tmp" && sed "/^$/d" "${i}.tmp" >"${i}" && rm "${i}.tmp" done - fi From 25bc54411df758acd0d18636efd6dc0b95a3e056 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 20 Mar 2024 05:41:49 +0100 Subject: [PATCH 2/8] action test v2 --- .github/workflows/master.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index d3bc346..ba5be74 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -25,8 +25,7 @@ jobs: with: python-version: 3.11 run: | - if [ -f requirements.txt ]; then python3.11 -m pip install - --no-cache-dir -r requirements.txt; fi + if [ -f requirements.txt ]; then python3.11 -m pip install --no-cache-dir -r requirements.txt; fi - name: 'Sort the lists hierarchical' run: | From 759f520d08ba0b803da6ffc3ea32ee6e200a13dd Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 20 Mar 2024 05:44:50 +0100 Subject: [PATCH 3/8] Actions v3 --- .github/workflows/master.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index ba5be74..cc76637 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -24,6 +24,8 @@ jobs: uses: actions/setup-python@v5 with: python-version: 3.11 + + - name: Install requirements run: | if [ -f requirements.txt ]; then python3.11 -m pip install --no-cache-dir -r requirements.txt; fi From 2f1edca2a703a623409cf7e5d760863e6c31b136 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 20 Mar 2024 05:47:41 +0100 Subject: [PATCH 4/8] Actions v4 --- .github/workflows/master.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index cc76637..88f7a2c 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -6,6 +6,7 @@ on: branches: - master - main + - dev-autosort-lists jobs: build: From 1ff146ee3c5d107bf60a5f6ee433e61c365deaa2 Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 20 Mar 2024 05:53:05 +0100 Subject: [PATCH 5/8] Actions v5 --- .github/workflows/master.yml | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index 88f7a2c..a3f1a1d 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -9,7 +9,7 @@ on: - dev-autosort-lists jobs: - build: + sort: runs-on: ubuntu-latest permissions: @@ -18,8 +18,6 @@ jobs: steps: - name: Checkout the repo uses: actions/checkout@main - with: - ref: ${{ github.head_ref }} - name: Setup Python 3.11 uses: actions/setup-python@v5 @@ -28,11 +26,11 @@ jobs: - name: Install requirements run: | - if [ -f requirements.txt ]; then python3.11 -m pip install --no-cache-dir -r requirements.txt; fi + pip install --no-cache-dir -r requirements.txt - name: 'Sort the lists hierarchical' run: | - sh "${{ github.workspace }}/tools/hierarchical_sort.sh" + bash "${{ github.workspace }}/tools/hierarchical_sort.sh" - name: Git Status run: git status From 7fc494dbe47ddec27e1f73ffa8b39ff46ea0f41d Mon Sep 17 00:00:00 2001 From: spirillen Date: Wed, 20 Mar 2024 04:53:21 +0000 Subject: [PATCH 6/8] Hierarchical sorted the lists $tag --- add-link | 42 ++++++++++++++++++++-------------------- add-wildcard-domain | 16 +++++++-------- falsepositive.list | 24 +++++++++++------------ falsepositive_regex.list | 2 +- falsepositive_rzd.list | 2 +- 5 files changed, 43 insertions(+), 43 deletions(-) diff --git a/add-link b/add-link index f57dfb6..507e3e8 100644 --- a/add-link +++ b/add-link @@ -1,34 +1,34 @@ +https://bflyer.app +https://kyc-bltflyer.web.app http://pilatesboutique.com.au/css/commlog/ -https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html -https://storageapi.fleek.co/1feb1999-9414-490f-9fd9-660d6a626ce1-bucket/encrypttwopentttmrrmukart.html -https://storageapi.fleek.co/09995281-88e7-402f-88a9-89d148c049bd-bucket/Mail.html -https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html -https://clt1429508.bmetrack.com/c/l?u=DA1C0F6&e=1419778&c=15D004&t=1&l=7A634C07&email=xtTsItcRrE6F6hSsDwwwCoo0eRwtDrrX&seq=1 -https://storage.cloud.google.com/riltool/karasecondautoindex.html -https://storage.cloud.google.com/indettn/oscman4.html -http://houkadaigakuin.com/css/webmail.konsoleh.co.za/emailSignIn_accountCUST_ID/konsoleh.sign_in/email.user/webmail.konsoleh.login.htm http://l.instagram.com/?miiuzi=0606799630d3b51ee64d27246260be25-65264-12&e=ATPlTOuXv5RBtOon9QKXpcXEHKtsjw9KuONg7G7bEbdqWzwEGUgHYOe7sYfVejExn9deSYgm&s=1&u=http%3A%2F%2Fbusiness.instagram.com%2Fmicro_site%2Furl%2F%3Fevent_type%3Dclick%26site%3Digb%26destination%3Dhttps%253A%252F%252Fwww.facebook.com%252Fads%252Fig_redirect%252F%253Fd%253DAd82Q1UnuDWLEN-6eYNKKGpvC3UkjnR9derS15bU0h782q92mxiH1UYIHey_aAwpOPymKzMsD_bjpowtV9yHm_dewsN6N9XzqEK791KkSALUZqx4UvaQ0H0SlAyjtKnKJkdQgDe5s-Y4VGu887iarNbECodqa7LyCKxG3fXZu6mhx8_ofiyzMGcP5IwSuM1bZ6E%2526a%253D1%2526hash%253DAd_ToTGJmeEcZKSb -https://officelog253.knack.com/customerports -https://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ -http://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ -https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D https://email.em.teachable.com/c/eJw1UEtuhTAMPA3sQPmQQBYsKlXvGsgYUyLlpyS8RU_foLaSLdnjmbFlWrnWctHS6Lk_1l2BYqh7u2opcEFDUuGybFyaU8-LUsLQ1E3MpoGzgQ1c84FPeiQUow2VcgA3erCuv5oDP5kyaM6FmOLTDjOfZtoRaALUvHfrVWsqnfzoxKuFp6EMBa8YnWBjJcALdkcjRt-mqeUJmRr_dVe_lXhnpE5-0rNvcwRH2Z6Scif0w_B02Nv_M_5ABJ_AfoUGP5LWp3pn2jCG02YP1cbQ_1pmQrKpbvZYuWBGciOl6vOarlhje4Kzbxu-EMIbSjty_IYfdv5rpw +https://clt1429508.bmetrack.com/c/l?u=DA1C0F6&e=1419778&c=15D004&t=1&l=7A634C07&email=xtTsItcRrE6F6hSsDwwwCoo0eRwtDrrX&seq=1 +https://officelog253.knack.com/customerports https://tinyurl.com/pcpdecrapifier https://app.waiverelectronic.com/render/templateByRefId/6285d92a4ea2063b0d8e8efe https://www-rooblox.com/users/1657067/profile -https://www.kepeklian.fr/mm.php -https://s.id/newgpt5 +https://main.d1uywey79p2cj9.amplifyapp.com/werrx01USAHTM/?bcda=034956-3836-66 +http://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ +https://muftizainulabideen.com/wp-admin/be/StandardV2/zyjviy2q=/ https://totoko.in/tokoto/methericumes/mthudlsolpamnd/slendgerthadscGt/hUNDFGSTHshssd/xgBNASDRWEm/p0lmjsCbnml/kIDSNETWRODK/pcscGbVCSXgkl/csncdsVgfgcvTSks/weLSHSGthslasgide/TokoshsGiOksuthbamkTHER/wzmp.hp/app/ -https://app.speedywaiver.io/fill/GxsUZ3DNyRqI2KYgzusi +http://houkadaigakuin.com/css/webmail.konsoleh.co.za/emailSignIn_accountCUST_ID/konsoleh.sign_in/email.user/webmail.konsoleh.login.htm +https://storageapi.fleek.co/09995281-88e7-402f-88a9-89d148c049bd-bucket/Mail.html +https://storageapi.fleek.co/1feb1999-9414-490f-9fd9-660d6a626ce1-bucket/encrypttwopentttmrrmukart.html +https://storageapi.fleek.co/9b907c30-dca7-4129-b75f-8cb44e5b5e06-bucket/index.html +https://s3.amazonaws.com/appforest_uf/f1656457024772x767432166634618200/sun.html +https://storage.cloud.google.com/indettn/oscman4.html +https://storage.cloud.google.com/riltool/karasecondautoindex.html https://absorbed-neighborly-lyre.glitch.me/Pay-palsecurealerts.html https://knowing-merciful-toaster.glitch.me/polkghd.html +https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D https://ispsongo.ac.mz/aaheygreaa/PageUpdated/ampt.html?app= https://costa-performance.online/kindex/albuquerqye/yeyrtretr/osbcoinss/malokiyresd/fufazasAzzi.html?id= -https://7i.se/debitreview -https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 -https://service-survey.vip/warranty -https://main.d1uywey79p2cj9.amplifyapp.com/werrx01USAHTM/?bcda=034956-3836-66 -https://kyc-bltflyer.web.app +https://s.id/newgpt5 +https://app.speedywaiver.io/fill/GxsUZ3DNyRqI2KYgzusi https://bitflyerjp.com/ja-login.php -https://bflyer.app +https://www.kepeklian.fr/mm.php +https://7i.se/debitreview https://dpdhuposts.top/track +https://service-survey.vip/warranty +https://autohaus.com.sv/.well-known/zendsdsoskds03212943/DHL-SAZI-AUTO/DHL-SAZI-AUTO/DHL-SAZI-AUTO/dhl/?i=i&0 diff --git a/add-wildcard-domain b/add-wildcard-domain index 4a54cba..ab490bc 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,21 +1,21 @@ -firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list -beastsrandompack.click +wasabiwallet.app +abbotsleigh.nsw.edu.au beastlucyspin.click +beastsrandompack.click besatsrandompacks.click -abbotsleigh.nsw.edu.au ebeyez.com fadpakke.com firebaseio.com linkedinin.com +reltio-apps.com +skimswanp.com +southerninsurs.com +firebaseio.com # NOTE: This is not necessarily an actual domain to become blocked on a wildcard level, its just a random pick from the add-domain list +wasabiwallet.eu linkr.it llcn.link rnws.link robyoc.online -skimswanp.com -southerninsurs.com mhktricks.org -reltio-apps.com -wasabiwallet.app -wasabiwallet.eu wasabiwallet.sh wasabiwallet.uk diff --git a/falsepositive.list b/falsepositive.list index 31a3494..01b59d9 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -1,12 +1,13 @@ # This list is used to match 1 to 1 -xxxxxxxxxx.xxxxxxxxxx.xxxxxxxxxx.test -off---line.com +injective.talis.art +osky.com.au imo.net.au -shortifyme.co existential.audio +shortifyme.co aave.com app.aave.com androidauthority.com +claritysecure.claritycrm.com cognitivzen.com denisemortati.com discordstatus.com @@ -16,8 +17,11 @@ portal.indcomleasing.com www.indcomleasing.com outlook.live.com magloft.com +mailsuite.com nvidia.com +off---line.com forms.office.com +forms.onepagecrm.com pitch.com signin.quicken.com sakthivel.com @@ -26,10 +30,14 @@ trustmary.com form.trustmary.com widget.trustmary.com weareindy.com +quicksign.fr +haproxy-vip.quicksign.fr da.gd han.gl enovation.ie +degree37.io ipfs.io +mailtrack.io ipfs.subutai.io ftp.jaist.ac.jp clover.co.jp @@ -38,13 +46,5 @@ stats.sender.net voicemod.net westandsons.co.nz zenodo.org +xxxxxxxxxx.xxxxxxxxxx.xxxxxxxxxx.test aliexpress.us -degree37.io -quicksign.fr -forms.onepagecrm.com -osky.com.au -claritysecure.claritycrm.com -injective.talis.art -mailsuite.com -mailtrack.io -haproxy-vip.quicksign.fr diff --git a/falsepositive_regex.list b/falsepositive_regex.list index c4c4caa..fe66ff5 100644 --- a/falsepositive_regex.list +++ b/falsepositive_regex.list @@ -1,6 +1,6 @@ # This list will tell the system to explicitly check for the given regex. campaign-statistics.com nvidia.com -rtu.lv surveysparrow.com +rtu.lv vuagame.store diff --git a/falsepositive_rzd.list b/falsepositive_rzd.list index 8c310af..00b10ce 100644 --- a/falsepositive_rzd.list +++ b/falsepositive_rzd.list @@ -1,3 +1,3 @@ -# This list will tell the system to explicitly check for the given # string plus all possible TLD. +# This list will tell the system to explicitly check for the given vodafone.de From 6e3f2777e5f374fa109227669efa76f66e87e1dd Mon Sep 17 00:00:00 2001 From: Spirillen Date: Wed, 20 Mar 2024 06:01:36 +0100 Subject: [PATCH 7/8] Actions v6 --- .github/workflows/master.yml | 6 +----- tools/hierarchical_sort.sh | 2 +- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index a3f1a1d..4d364ea 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -35,11 +35,7 @@ jobs: - name: Git Status run: git status - - name: Set commit tag - run: | - tag=$(date +'day: %j of year %Y %H:%M:%S') - - name: Commit all changed files back to the repository uses: stefanzweifel/git-auto-commit-action@v5 with: - commit_message: "Hierarchical sorted the lists $tag" + commit_message: "Hierarchical sorted the lists" diff --git a/tools/hierarchical_sort.sh b/tools/hierarchical_sort.sh index 43e6276..85b57bc 100644 --- a/tools/hierarchical_sort.sh +++ b/tools/hierarchical_sort.sh @@ -8,7 +8,7 @@ if [ -d "$GIT_DIR" ]; then cd "${GIT_DIR}" || exit 1 -FILES=('add-domain' 'add-link' 'add-wildcard-domain' 'falsepositive.list' 'falsepositive_regex.list' 'falsepositive_rzd.list') +FILES=('add-domain' 'add-wildcard-domain' 'falsepositive.list' 'falsepositive_regex.list' 'falsepositive_rzd.list') for i in "${FILES[@]}"; do python3.11 "$GIT_DIR/tools/domain-sort.py" <"${i}" >"${i}.tmp" && From 7c8795a18f6f3625d37b96178b7453d5ab7746fa Mon Sep 17 00:00:00 2001 From: spirillen Date: Mon, 24 Jun 2024 20:11:55 +0000 Subject: [PATCH 8/8] Hierarchical sorted the lists --- add-domain | 610 +++++++++++++++++++-------------------- add-wildcard-domain | 72 ++--- falsepositive.list | 72 ++--- falsepositive_regex.list | 6 +- 4 files changed, 380 insertions(+), 380 deletions(-) diff --git a/add-domain b/add-domain index d686670..dae48b6 100644 --- a/add-domain +++ b/add-domain @@ -1,7 +1,26 @@ -109.197.125.34.bc.googleusercontent.com -123movies.faith -2020logs.duckdns.org -34-125-197-109.plesk.page +gosuslugi.agency +coronavirus.app +www.coronavirus.app +zc11m.csb.app +documents-download-almeida-3d331c.netlify.app +kyc-bltflyer.web.app +restore637908-coinbase-us.web.app +zttmct-tlemp.web.app +wiiflix.art +gocycle.com.au +urbanandruraldesign.com.au +wiflix.autos +wiiflix.autos +wiiflix.beauty +wiflix.blog +wiflix.boats +coronatec.com.br +coronavirus.cc +covid19tracker.cc +youareanidiot.cc +discord.lossantossanto1.repl.co +socialearn.co +t.co 8vjejn.com 8vpro.com 8vproe.com @@ -11,44 +30,18 @@ 8vprot.com 8vprow.com absenpbz.com -accounts-mail.ru actionagainstcovid19.com -adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev -adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com -adobeli.pages.dev -abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com -adobepewjgronjgnwkengkjwengrj.pythonanywhere.com -adoring-dhawan.45-138-72-99.plesk.page -alili2020.ddns.net +coronavirus.oss-accelerate.aliyuncs.com alphaumi.com -amazing-poitras.34-125-197-109.plesk.page -api.lgin.msa.trafficmanager.net -awesome-wescoff.34-125-197-109.plesk.page -bcryp.net beritapb.com -bigbeans.solutions -bill-overdue.net bitflyer-global.com -bitflyer.sviluppo.host -bold-kalam.34-125-197-109.plesk.page -borsbrietjblrenlgbrlenhjt.pages.dev -borsbrietjblrenlgbrlenhjt.pythonanywhere.com -brave-ramanujan.34-125-197-109.plesk.page business-facebook-covid19.com -cdcgov.org -calm-wave-01c7f9910.5.azurestaticapps.net -charming-satoshi.34-125-197-109.plesk.page cheapcorona.com -choicemonitor.top ciel-goshugi.com -competent-edison.95-181-157-141.plesk.page confirm-snet.com -corona-club.net corona-explained.com -corona-extra.pw corona-power.com corona-ratgeber.com -corona77.vip coronaai.com coronaaway.com coronadetection.com @@ -60,375 +53,382 @@ coronadocreatives.com coronadodirectory.com coronadoo.com coronaperformancemotors.com -coronasushi.com.de -coronatec.com.br -coronavirus-2019.firebaseio.com -coronavirus-266714.firebaseio.com -coronavirus-3ffb2.firebaseio.com -coronavirus-44a93.firebaseio.com -coronavirus-53337.firebaseio.com -coronavirus-54646.firebaseio.com -coronavirus-a600f.firebaseio.com -coronavirus-alert.firebaseio.com -coronavirus-d526b.firebaseio.com -coronavirus-d9a66.firebaseio.com -coronavirus-daily-status.firebaseio.com -coronavirus-eba7a.firebaseio.com coronavirus-map.com coronavirus-monitor.com -coronavirus-monitor.ru -coronavirus-protection-6d180.firebaseio.com coronavirus-realtime.com -coronavirus-statistics-710b6.firebaseio.com coronavirus-testing.com -coronavirus-tracker-api.herokuapp.com -coronavirus-update.ru -coronavirus-update.today -coronavirus.app -coronavirus.cc -coronavirus.oss-accelerate.aliyuncs.com -coronavirus.uno -coronavirus.zone -coronavirusalert.news -coronavirusapp.site coronavirusbabys.com coronaviruscenters.com coronaviruscomms.com coronavirusforgyms.com coronavirushealthclinic.com -coronavirusmap-eb48d.firebaseio.com coronavirusnet.com coronaviruspracticeupdate.com coronavirustechhandbook.com -coronavirustestfinders.net coronavirut.com coronavit.com -correos-update.life -covid-19-6538f.firebaseio.com -covid-19-app.firebaseio.com -covid-19-e9057.firebaseio.com -covid-19-healthlynked.firebaseio.com -covid-19-live-news-statistics.firebaseio.com -covid-19-lk-dev.firebaseio.com -covid-19.media -covid-19.miami -covid19-a71d9.firebaseio.com -covid19-dd7f7.firebaseio.com -covid19-fb3d9.firebaseio.com -covid19.egreen.io -covid19.jp -covid19.media -covid19.tfone.ir covid19defense.com covid19japan.com covid19lascruces.com -covid19map-269302.firebaseio.com covid19mayhem.com covid19proof.com -covid19tracker.cc covid19wny.com -covid19x.solutions -covideo.ru covidquarantine.com -cpanel01wh.bkk1.cloud.z.com -cranky-kalam.34-125-197-109.plesk.page -crazy-pare.34-125-197-109.plesk.page dashenopticians.com -dating4free.us -dating4sex.us +sgp1.digitaloceanspaces.com directmessageviolation.com -disceord.gift -discord.lossantossanto1.repl.co discordsgift.com discqrde.com -discrods.gift -disocrds.gift dispatchweekly.com -documents-download-almeida-3d331c.netlify.app dofus-mmorpg.com -dofus-mmorpg.fr dofusevents.com -dofuspoulesnoobs.fr dofuspourlenoobs.com -dofuspourlenoobs.fr -dofuspourlesnoobs.fr -dofustouch.fr -eager-pare.95-181-157-141.plesk.page +www.irsusa-tax.net.dogfoodkart.com easytogets.com -ecovida.ru -eloquent-lumiere.34-125-197-109.plesk.page -epic-feynman.34-125-197-109.plesk.page epulze-live.com -f-movie.org +jocoly.esvnpe.com facebooks-copyright.com -fe-by01p-msa.trafficmanager.net feenixlanguage.com -festive-jones.34-125-197-109.plesk.page -flamboyant-curran.52-148-188-66.plesk.page +rxzxssx.fiduciaracking.com +coronavirus-2019.firebaseio.com +coronavirus-266714.firebaseio.com +coronavirus-3ffb2.firebaseio.com +coronavirus-44a93.firebaseio.com +coronavirus-53337.firebaseio.com +coronavirus-54646.firebaseio.com +coronavirus-a600f.firebaseio.com +coronavirus-alert.firebaseio.com +coronavirus-d526b.firebaseio.com +coronavirus-d9a66.firebaseio.com +coronavirus-daily-status.firebaseio.com +coronavirus-eba7a.firebaseio.com +coronavirus-protection-6d180.firebaseio.com +coronavirus-statistics-710b6.firebaseio.com +coronavirusmap-eb48d.firebaseio.com +covid-19-6538f.firebaseio.com +covid-19-app.firebaseio.com +covid-19-e9057.firebaseio.com +covid-19-healthlynked.firebaseio.com +covid-19-live-news-statistics.firebaseio.com +covid-19-lk-dev.firebaseio.com +covid19-a71d9.firebaseio.com +covid19-dd7f7.firebaseio.com +covid19-fb3d9.firebaseio.com +covid19map-269302.firebaseio.com flutter-covid19.firebaseio.com -fmovies-to.me -fmovies-to.online -fmovies.direct -fmovies.email -fmovies.social -fmovies.us.com -fmovies.vet -fmovies2.site -fmovies4.org -fmoviesto.cyou -fmoviesto.gg -fmoviestv.me -focused-swirles.34-125-197-109.plesk.page -gallant-kalam.34-125-197-109.plesk.page +online-coronavirus-268608.firebaseio.com +wuhancoronavirustracker-693c1.firebaseio.com getcoronavirusassistance.com -gocycle.com.au -goofy-lamport.95-181-157-21.plesk.page -gos-uslug.ru -gos-uslugi.info -gos-uslygi.site -gosmslugi.ru +109.197.125.34.bc.googleusercontent.com gosoogi.com -gosrslugi.ru -gossusluggi.ru -gosulgi.ru -gosulsugl.ru -gosulugi-anticovid.ru -gosulugl.ru -gosulugy.ru -gosulvgi.ru -gosushlugi.ru -gosusligu.ru -gosusloogi.ru -gosuslug.info -gosuslugee.ru -gosuslugi-covid-qr.ru -gosuslugi-kultura.ru -gosuslugi-pay.ru -gosuslugi-payment.ru -gosuslugi.agency -gosuslugi.contact -gosuslugi.directory -gosuslugi.express -gosuslugi.life -gosuslugi.live -gosuslugi.network -gosuslugi.page -gosuslugi.shop -gosuslugi.social -gosuslugi.uk -gosuslugi.xyz -gosuslugi2.ru -gosuslugianticovid.ru -gosuslugicovid-cert.ru -gosuslugigov.ru -gosuslugii.online -gosuslugipay.ru -gosuslugji.ru -gosuslugt.ru -gosusluslugi.ru -gosusnugi.ru -gosusrugi.ru -gosusslugi.net -gosyslugi.su -gracious-bardeen.95-181-157-21.plesk.page -great-williamson.34-125-197-109.plesk.page -grosuslugi.ru -happy-antonelli.34-125-197-109.plesk.page -happy-sutherland.34-125-197-109.plesk.page -hellothere.shop help-media.com -hotelsochipark.ru -hovafmd.ddns.net -hu.pokist.otzo.com -hungry-ptolemy.34-125-197-109.plesk.page +coronavirus-tracker-api.herokuapp.com iamcorona.com -iengjwklengkhwebhfceref.pages.dev -iengjwklengkhwebhfceref.pythonanywhere.com -ifmovies.net igobjectionservices.com -igosuslugi.ru -ipv4.login.msa.akadns6.net -jkrngjkernghernhgtehjnhk.pages.dev -jkrngjkernghernhgtehjnhk.pythonanywhere.com -jocoly.esvnpe.com -jolly-keldysh.34-125-197-109.plesk.page -kadina-sidetesusma.net -kind-villani.13-93-165-215.plesk.page krakenlogins.com kuispb.com -kyc-bltflyer.web.app -lgin.msa.trafficmanager.net -lnstagramhelp.hungry-ptolemy.34-125-197-109.plesk.page -lnstagramhelpcenter.hungry-ptolemy.34-125-197-109.plesk.page localcoronavirus.com -lokal-vr.online -loratech.pe lovemachina.com -loving-chatelet.45-138-72-99.plesk.page -lucid-moser.45-156-27-107.plesk.page -magical-kirch.34-125-197-109.plesk.page -materialistic-chain-chicory.glitch.me -me2.do -meldung-vols.online -mi-d1m.pages.dev -micro-service-alertc0277sb-dev-err.pages.dev -micro-service-alertc0277sb-erro.pages.dev -micro-soft-failed-error.pages.dev -micro-soft-virus-alert-warning.pages.dev -microsoft-error-pages-check-errors.pages.dev -microsoft-help-and-services.pages.dev -microsoft-sales-hhgdygfg-asd.pages.dev -microsoft-suppor-number.pages.dev -microsoft-support-alrt-altr-fds.pages.dev -microsoft-support-alrt-altr-fds-098.pages.dev -microsoft-support-alrt-altr87785.pages.dev -microsoft-terms-policyalr.pages.dev -moscow-post.su -naughty-faraday.34-125-197-109.plesk.page newvity.com -nice-curran.34-125-197-109.plesk.page -ns2.brave-ramanujan.34-125-197-109.plesk.page -online-coronavirus-268608.firebaseio.com onlinesupportportal.com -optimistic-wright.34-125-197-109.plesk.page -pcdecrapifier.net -peaceful-carson.34-125-197-109.plesk.page -peaceful-joliot.45-136-204-40.plesk.page -pedantic-feynman.34-125-197-109.plesk.page -pedantic-satoshi.34-125-197-109.plesk.page +hu.pokist.otzo.com penlabuseoribute.com -perfectdating.us -pescaturismocorona.it -pesjidgnojensjgerkhvjefdvs.pythonanywhere.com -plesk.page -plhn.pw -pobreflix.icu -portalpaxum.cokiwe2297.workers.dev -postcovid19.world preview-domain.com psicmaggiecorona.com -r.crazy-pare.34-125-197-109.plesk.page +abobelnejgbeghrbghkbshgbshkfb.pythonanywhere.com +adobebeiownwkjngrjwkenfjkewnf.pythonanywhere.com +adobepewjgronjgnwkengkjwengrj.pythonanywhere.com +borsbrietjblrenlgbrlenhjt.pythonanywhere.com +iengjwklengkhwebhfceref.pythonanywhere.com +jkrngjkernghernhgtehjnhk.pythonanywhere.com +pesjidgnojensjgerkhvjefdvs.pythonanywhere.com reclaim-bittrex.com -rcubebit.bitbucket.io -recursing-perlman.45-156-26-247.plesk.page -restore637908-coinbase-us.web.app rinanft.com rxcovid.com -rxzxssx.fiduciaracking.com -sd-74h.pages.dev -sellskin.shop -serene-shirley.13-93-165-215.plesk.page -sgp1.digitaloceanspaces.com -sharp-kowalevski.34-125-197-109.plesk.page -silly-driscoll.13-93-165-215.plesk.page -sochi-park-otel.ru -sochipark-hotel.ru -socialearn.co -soclaiemx.xyz -souq-deals.website -spiffcoin.net steamcommunitc.com steamcomnnulty.com -stearnconmunity.net -stoic-elion.34-125-197-109.plesk.page -stopcoronavirus.us.org studentschoicedwi.com supportscontact.com surveysparrow.com -suspicious-meninsky.95-181-157-21.plesk.page -t.co -tabitha-cambodia.org the-fmovies.com -thirsty-solomon.13-67-133-60.plesk.page thoughtworkis.com tokenukraine.com tokopb.com -trusting-lumiere.34-125-197-109.plesk.page -ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev -upbeat-elion.34-125-197-109.plesk.page -urbanandruraldesign.com.au -us-psues.top +fmovies.us.com vaccine-coronavirus.com -vahlallha.duckdns.org valoxino.com -verify-gosuslugi.ru -vgosuslugi.ru -vibrant-kirch.95-181-157-21.plesk.page -vietnam.zing.photos -vigilant-fermi.13-93-165-215.plesk.page violationhelp.com -vs.login.msa.akadns6.net vww-roblox.com -wasabiwallet.eu -wasabiwallet.is -water-opaque-expert.glitch.me -wgosuslugi.ru -wiflix.autos -wiflix.blog -wiflix.boats +wsetransport.com +www-dofus.com +www-dofus-touch.com +www-rsblox.com +wwwdofuspourlesnoobs.com +xn--www-ofus-touch-j1b.com +cpanel01wh.bkk1.cloud.z.com +gosuslugi.contact +fmoviesto.cyou wiflix.cyou +coronasushi.com.de +adobe-jhhkwjrnfjadenfrskbgjlsnfgjdfn.pages.dev +adobeli.pages.dev +borsbrietjblrenlgbrlenhjt.pages.dev +iengjwklengkhwebhfceref.pages.dev +jkrngjkernghernhgtehjnhk.pages.dev +mi-d1m.pages.dev +micro-service-alertc0277sb-dev-err.pages.dev +micro-service-alertc0277sb-erro.pages.dev +micro-soft-failed-error.pages.dev +micro-soft-virus-alert-warning.pages.dev +microsoft-error-pages-check-errors.pages.dev +microsoft-help-and-services.pages.dev +microsoft-sales-hhgdygfg-asd.pages.dev +microsoft-suppor-number.pages.dev +microsoft-support-alrt-altr-fds.pages.dev +microsoft-support-alrt-altr-fds-098.pages.dev +microsoft-support-alrt-altr87785.pages.dev +microsoft-terms-policyalr.pages.dev +sd-74h.pages.dev +ueajflnjejdrwklnvkenrwjgnlvrjldf.pages.dev +win-defender-sec-64csvxxvxxvxx0x665.pages.dev +portalpaxum.cokiwe2297.workers.dev +fmovies.direct +gosuslugi.directory +me2.do +fmovies.email +wasabiwallet.eu wiflix.eu +gosuslugi.express +123movies.faith wiflix.fit +dofus-mmorpg.fr +dofuspoulesnoobs.fr +dofuspourlenoobs.fr +dofuspourlesnoobs.fr +dofustouch.fr +www-papycha.fr +zt-za.fr +fmoviesto.gg +disceord.gift +discrods.gift +disocrds.gift wiflix.guru +bitflyer.sviluppo.host +pobreflix.icu wiflix.icu wiflix.in +gos-uslugi.info +gosuslug.info wiflix.info +rcubebit.bitbucket.io +covid19.egreen.io +covid19.tfone.ir +wasabiwallet.is +pescaturismocorona.it +covid19.jp +correos-update.life +gosuslugi.life +gosuslugi.live wiflix.makeup +fmovies-to.me +fmoviestv.me +materialistic-chain-chicory.glitch.me +water-opaque-expert.glitch.me +covid-19.media +covid19.media +covid-19.miami wiflix.motorcycles +ipv4.login.msa.akadns6.net +vs.login.msa.akadns6.net +calm-wave-01c7f9910.5.azurestaticapps.net +bcryp.net +bill-overdue.net +corona-club.net +coronavirustestfinders.net +alili2020.ddns.net +hovafmd.ddns.net +gosusslugi.net +ifmovies.net +kadina-sidetesusma.net +pcdecrapifier.net +spiffcoin.net +stearnconmunity.net +fe-by01p-msa.trafficmanager.net +lgin.msa.trafficmanager.net +api.lgin.msa.trafficmanager.net +xml.lgin.msa.trafficmanager.net +gosuslugi.network wiflix.network +coronavirusalert.news +fmovies-to.online +gosuslugii.online +lokal-vr.online +meldung-vols.online +cdcgov.org +2020logs.duckdns.org +vahlallha.duckdns.org +f-movie.org +fmovies4.org +tabitha-cambodia.org +stopcoronavirus.us.org wiflix.org -wiflix.re -wiflix.tech -wiflix.work -wiflix.xyz -wiflix.yachts -wiiflix.art -wiiflix.autos -wiiflix.beauty -win-defender-sec-64csvxxvxxvxx0x665.pages.dev -wonderful-carver.52-229-21-156.plesk.page -wsetransport.com -wuhancoronavirustracker-693c1.firebaseio.com -www-dofus-touch.com -www-dofus.com -www-gos-uslugi.ru -www-papycha.fr -www-rsblox.com -www.0202.com.tw +gosuslugi.page +plesk.page +thirsty-solomon.13-67-133-60.plesk.page +www.hungry-poitras.13-93-165-215.plesk.page +kind-villani.13-93-165-215.plesk.page +serene-shirley.13-93-165-215.plesk.page +www.serene-shirley.13-93-165-215.plesk.page +silly-driscoll.13-93-165-215.plesk.page +www.silly-driscoll.13-93-165-215.plesk.page +vigilant-fermi.13-93-165-215.plesk.page +34-125-197-109.plesk.page www.adoring-shamir.34-125-197-109.plesk.page +amazing-poitras.34-125-197-109.plesk.page www.amazing-poitras.34-125-197-109.plesk.page +awesome-wescoff.34-125-197-109.plesk.page +bold-kalam.34-125-197-109.plesk.page +brave-ramanujan.34-125-197-109.plesk.page +ns2.brave-ramanujan.34-125-197-109.plesk.page +charming-satoshi.34-125-197-109.plesk.page www.charming-satoshi.34-125-197-109.plesk.page -www.coronavirus.app +cranky-kalam.34-125-197-109.plesk.page +crazy-pare.34-125-197-109.plesk.page +r.crazy-pare.34-125-197-109.plesk.page www.crazy-pare.34-125-197-109.plesk.page +eloquent-lumiere.34-125-197-109.plesk.page +epic-feynman.34-125-197-109.plesk.page +festive-jones.34-125-197-109.plesk.page www.festive-jones.34-125-197-109.plesk.page +focused-swirles.34-125-197-109.plesk.page +gallant-kalam.34-125-197-109.plesk.page www.gallant-moser.34-125-197-109.plesk.page +great-williamson.34-125-197-109.plesk.page www.great-williamson.34-125-197-109.plesk.page +happy-antonelli.34-125-197-109.plesk.page +happy-sutherland.34-125-197-109.plesk.page www.happy-sutherland.34-125-197-109.plesk.page -www.hungry-poitras.13-93-165-215.plesk.page +hungry-ptolemy.34-125-197-109.plesk.page +lnstagramhelp.hungry-ptolemy.34-125-197-109.plesk.page +lnstagramhelpcenter.hungry-ptolemy.34-125-197-109.plesk.page www.hungry-ptolemy.34-125-197-109.plesk.page www.intelligent-gould.34-125-197-109.plesk.page www.jolly-jennings.34-125-197-109.plesk.page +jolly-keldysh.34-125-197-109.plesk.page www.jolly-keldysh.34-125-197-109.plesk.page www.jolly-nightingale.34-125-197-109.plesk.page -www.irsusa-tax.net.dogfoodkart.com +magical-kirch.34-125-197-109.plesk.page www.magical-kirch.34-125-197-109.plesk.page -www.moscow-post.su +naughty-faraday.34-125-197-109.plesk.page +nice-curran.34-125-197-109.plesk.page www.nifty-mahavira.34-125-197-109.plesk.page +optimistic-wright.34-125-197-109.plesk.page www.optimistic-wright.34-125-197-109.plesk.page +peaceful-carson.34-125-197-109.plesk.page +pedantic-feynman.34-125-197-109.plesk.page +pedantic-satoshi.34-125-197-109.plesk.page www.pensive-wing.34-125-197-109.plesk.page www.serene-hertz.34-125-197-109.plesk.page -www.serene-shirley.13-93-165-215.plesk.page +sharp-kowalevski.34-125-197-109.plesk.page www.sharp-kowalevski.34-125-197-109.plesk.page -www.silly-driscoll.13-93-165-215.plesk.page +stoic-elion.34-125-197-109.plesk.page www.suspicious-wilson.34-125-197-109.plesk.page +trusting-lumiere.34-125-197-109.plesk.page www.trusting-lumiere.34-125-197-109.plesk.page -www.youthful-engelbart.34-125-197-109.plesk.page -wwwdofuspourlesnoobs.com +upbeat-elion.34-125-197-109.plesk.page xenodochial-liskov.34-125-197-109.plesk.page -xml.lgin.msa.trafficmanager.net -xn--www-ofus-touch-j1b.com -youareanidiot.cc youthful-engelbart.34-125-197-109.plesk.page -zc11m.csb.app -zt-za.fr -zttmct-tlemp.web.app +www.youthful-engelbart.34-125-197-109.plesk.page +peaceful-joliot.45-136-204-40.plesk.page +adoring-dhawan.45-138-72-99.plesk.page +loving-chatelet.45-138-72-99.plesk.page +recursing-perlman.45-156-26-247.plesk.page +lucid-moser.45-156-27-107.plesk.page +flamboyant-curran.52-148-188-66.plesk.page +wonderful-carver.52-229-21-156.plesk.page +competent-edison.95-181-157-141.plesk.page +eager-pare.95-181-157-141.plesk.page +goofy-lamport.95-181-157-21.plesk.page +gracious-bardeen.95-181-157-21.plesk.page +suspicious-meninsky.95-181-157-21.plesk.page +vibrant-kirch.95-181-157-21.plesk.page +loratech.pe +vietnam.zing.photos +corona-extra.pw +plhn.pw +wiflix.re +accounts-mail.ru +coronavirus-monitor.ru +coronavirus-update.ru +covideo.ru +ecovida.ru +gos-uslug.ru +gosmslugi.ru +gosrslugi.ru +gossusluggi.ru +gosulgi.ru +gosulsugl.ru +gosulugi-anticovid.ru +gosulugl.ru +gosulugy.ru +gosulvgi.ru +gosushlugi.ru +gosusligu.ru +gosusloogi.ru +gosuslugee.ru +gosuslugi-covid-qr.ru +gosuslugi-kultura.ru +gosuslugi-pay.ru +gosuslugi-payment.ru +gosuslugi2.ru +gosuslugianticovid.ru +gosuslugicovid-cert.ru +gosuslugigov.ru +gosuslugipay.ru +gosuslugji.ru +gosuslugt.ru +gosusluslugi.ru +gosusnugi.ru +gosusrugi.ru +grosuslugi.ru +hotelsochipark.ru +igosuslugi.ru +sochi-park-otel.ru +sochipark-hotel.ru +verify-gosuslugi.ru +vgosuslugi.ru +wgosuslugi.ru +www-gos-uslugi.ru +gosuslugi.shop +hellothere.shop +sellskin.shop +coronavirusapp.site +fmovies2.site +gos-uslygi.site +fmovies.social +gosuslugi.social +bigbeans.solutions +covid19x.solutions +gosyslugi.su +moscow-post.su +www.moscow-post.su +wiflix.tech +coronavirus-update.today +choicemonitor.top +us-psues.top +www.0202.com.tw +gosuslugi.uk +coronavirus.uno +dating4free.us +dating4sex.us +perfectdating.us +fmovies.vet +corona77.vip +souq-deals.website +wiflix.work +postcovid19.world +gosuslugi.xyz +soclaiemx.xyz +wiflix.xyz +wiflix.yachts +coronavirus.zone diff --git a/add-wildcard-domain b/add-wildcard-domain index 7ad2377..1215e44 100644 --- a/add-wildcard-domain +++ b/add-wildcard-domain @@ -1,65 +1,65 @@ +wasabiwallet.app abbotsleigh.nsw.edu.au -ajstelecom.com.mx -amarveergroup.com -anjpvv.top -applesforfred.com -azezieldraconous.com +brunotasso.com.br +carnesboinobre.com.br +theaerie.ca beastlucyspin.click beastsrandompack.click -bersowir.org besatsrandompacks.click -bitflyer-ja.free.nf +sxlph.club +amarveergroup.com +applesforfred.com +azezieldraconous.com bkengineersindia.com -brunotasso.com.br cantabriaeventos.com -carnesboinobre.com.br -cbcaps.shop -darnroughonline.top -darntoughfactory.shop -darntoughonline-us.shop -darntoughonline.shop -darntoughsales.shop ebeyez.com englishplusmore.com fadpakke.com -fjwamneg.top foreverfarley.com -hoster-test.ru ijconnects.com iwan2travel.com jestertunes.com linkedinin.com -linkr.it -littleswanaircon.com.sg -llcn.link -mhktricks.org -nico.sa pescacancun.com -phsw.site -race2zerogolf.za.com reltio-apps.com -rnws.link -robyoc.online safecartusa.com skimswanp.com southerninsurs.com steamcommumitry.com steamcommumtiy.com stecmcommunijty.com -sxlph.club -sxlph.site -technowide.com.tr -the-cartel.shop -theaerie.ca -tothedigital.shop toughknifes.com vipbargainhub.com vpdamai.com -wasabiwallet.app +westernautomobileassembly.com +race2zerogolf.za.com wasabiwallet.eu +linkr.it +llcn.link +rnws.link +ajstelecom.com.mx +bitflyer-ja.free.nf +robyoc.online +bersowir.org +mhktricks.org +hoster-test.ru +nico.sa +littleswanaircon.com.sg wasabiwallet.sh +cbcaps.shop +darntoughfactory.shop +darntoughonline.shop +darntoughonline-us.shop +darntoughsales.shop +the-cartel.shop +tothedigital.shop +phsw.site +sxlph.site +yildirim-firsati.store +anjpvv.top +darnroughonline.top +fjwamneg.top +technowide.com.tr wasabiwallet.uk -westernautomobileassembly.com wisbechguide.uk -yildirim-firsati.store -yildirim-firsati.xyz \ No newline at end of file +yildirim-firsati.xyz diff --git a/falsepositive.list b/falsepositive.list index e3a2a3f..3b2fae4 100644 --- a/falsepositive.list +++ b/falsepositive.list @@ -1,55 +1,55 @@ # This list is used to match 1 to 1 +injective.talis.art +lnk.at +osky.com.au +imo.net.au +existential.audio +shortifyme.co aave.com -aliexpress.us -androidauthority.com app.aave.com +androidauthority.com claritysecure.claritycrm.com -clover.co.jp cognitivzen.com -da.gd -degree37.io denisemortati.com discordstatus.com -enovation.ie -ethans.link -existential.audio -form.trustmary.com -forms.office.com -forms.onepagecrm.com -ftp.jaist.ac.jp -han.gl -haproxy-vip.quicksign.fr -imo.net.au +share.hsforms.com indcomleasing.com -injective.talis.art -ipfs.io -ipfs.subutai.io -l-k.io -lnk.at -lp.vp4.me +portal.indcomleasing.com +www.indcomleasing.com +outlook.live.com magloft.com mailsuite.com -mailtrack.io nvidia.com off---line.com -online1.snapsurveys.com -osky.com.au -outlook.live.com +forms.office.com +forms.onepagecrm.com pitch.com -portal.indcomleasing.com -quicksign.fr -s.l-k.io -sakthivel.com -share.hsforms.com -shortifyme.co signin.quicken.com -stats.sender.net +sakthivel.com +online1.snapsurveys.com surreycarsguildford.com surveysparrow.com trustmary.com -voicemod.net +form.trustmary.com +widget.trustmary.com weareindy.com +quicksign.fr +haproxy-vip.quicksign.fr +da.gd +han.gl +enovation.ie +degree37.io +ipfs.io +l-k.io +s.l-k.io +mailtrack.io +ipfs.subutai.io +ftp.jaist.ac.jp +clover.co.jp +ethans.link +lp.vp4.me +stats.sender.net +voicemod.net westandsons.co.nz -widget.trustmary.com -www.indcomleasing.com -zenodo.org \ No newline at end of file +zenodo.org +aliexpress.us diff --git a/falsepositive_regex.list b/falsepositive_regex.list index 562c200..b60a658 100644 --- a/falsepositive_regex.list +++ b/falsepositive_regex.list @@ -1,7 +1,7 @@ campaign-statistics.com -idtech.no nvidia.com -rtu.lv saudi-k.com surveysparrow.com -vuagame.store \ No newline at end of file +rtu.lv +idtech.no +vuagame.store