Add 45.131.215.16 - stealc - malware (Phishing-Database#735)

* add 45.131.215.16 - stealc - malware * add domains and URIs for 45.131.215.16 - stealc - malware * add 154.216.20.246 - stealc - malware
g0d33p3rsec · Feb 1, 2025 · 921aa33 · 921aa33
1 parent 9935e97
commit 921aa33
Show file tree

Hide file tree

Showing 6 changed files with 19 additions and 0 deletions.
diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa
@@ -34,6 +34,7 @@
 32.154.197.137.79
 32.156.180.51.49
 32.157.99.153.43
+32.16.215.131.45
 32.16.40.130.43
 32.160.0.153.43
 32.160.1.143.193
@@ -85,6 +86,7 @@
 32.243.18.142.192
 32.243.242.51.49
 32.246.146.159.43
+32.246.20.216.154
 32.248.156.141.45
 32.249.228.253.47
 32.251.222.62.162

diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list
@@ -4,6 +4,7 @@
 142.171.209.174/32
 147.45.44.131/32
 154.205.139.231/32
+154.216.20.246/32
 156.244.41.195/32
 156.244.41.57/32
 162.62.222.251/32
@@ -66,6 +67,7 @@
 43.159.146.246/32
 43.159.152.131/32
 43.166.138.67/32
+45.131.215.16/32
 45.137.190.202/32
 45.141.156.114/32
 45.141.156.248/32

diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa
@@ -34,6 +34,7 @@
 154.197.137.79
 156.180.51.49
 157.99.153.43
+16.215.131.45
 16.40.130.43
 160.0.153.43
 160.1.143.193
@@ -83,6 +84,7 @@
 240.115.120.87
 243.18.142.192
 243.242.51.49
+246.20.216.154
 248.156.141.45
 249.228.253.47
 251.222.62.162

diff --git a/IP-addr.list b/IP-addr.list
@@ -4,6 +4,7 @@
 142.171.209.174
 147.45.44.131
 154.205.139.231
+154.216.20.246
 156.244.41.195
 156.244.41.57
 162.62.222.251
@@ -65,6 +66,7 @@
 43.159.146.246
 43.159.152.131
 43.166.138.67
+45.131.215.16
 45.137.190.202
 45.141.156.114
 45.141.156.248

diff --git a/add-link b/add-link
@@ -1786,6 +1786,8 @@ https://0.fres-news.com/
 https://172.245.123.21/xampp/swee/maybegetbestresultsforfreshfruitskissingaroundtheglobalforyou.hta
 https://2m.ma/ar/
 https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D
+https://45.131.215.16/encrypthub/stealc/stealc.exe
+https://45.131.215.16/login.php
 https://61f0r.r.ah.d.sendibm4.com/mk/cl/f/P4c6noeIW31hDASG9uhJPK1qjzYrNXTcbnOstxUYKsIbiLznkLiPZBx9NrkbmmHSlK-yL25tLbHqPxu5gjciHqr10x8IJ_ciLkEO2CEwa_p4haEWnnFmQvzDDFqtk-EL-Qlb49d7koD9-1yLWv9WAx-DbdT6T4t7f0Az8SuK4nkJd-MdRg
 https://7i.se/debitreview
 https://80.76.51.231/Kompass-4.1.2.exe
@@ -1870,6 +1872,8 @@ https://binance.com12772.key-protector-case14752.support/m-login/2fa/
 https://bitcoinwellet.teachable.com/p/home
 https://bitflyerjp.com/ja-login.php
 https://bitpecta.com/secure/MWEBFIBREMAILPORTAL/
+https://blackangel.dev/encrypthub/stealc/stealc.exe
+https://blackangel.dev/login.php
 https://bohlepropiedades.com/M00wMzhtM2I3dzNTNU0=
 https://bohlepropiedades.com/M042dDV6M0M1Vzc0M00=
 https://bohlepropiedades.com/M081VTBtMW80VTZsNDg= 
@@ -1938,6 +1942,8 @@ https://cl.ly/18f8fe9933e2/UX1x6L.html
 https://clt1429508.bmetrack.com/c/l?u=DA1C0F6&e=1419778&c=15D004&t=1&l=7A634C07&email=xtTsItcRrE6F6hSsDwwwCoo0eRwtDrrX&seq=1
 https://cointracker-support.teachable.com/p/home
 https://comman-ledger-com-start.teachable.com/p/home
+https://concur.net.co/encrypthub/stealc/stealc.exe
+https://concur.net.co/login.php
 https://connect-en-ledger.teachable.com/p/home
 https://connect-help-en-cdn-ledger-en-us.teachable.com/p/home
 https://consultedigital.com/M002YTNBNmE0bTk1NDc=
@@ -2178,6 +2184,8 @@ https://firststeps-ledger-cdn.teachable.com/p/home
 https://foreverfarley.com/M08yODZmOEwyZDBxOXA=
 https://gevra908.wixsite.com/my-site-1
 https://gitelt.net/serv-luno-act%20/luno/
+https://global-protect.net/encrypthub/stealc/stealc.exe
+https://global-protect.net/login.php
 https://graficasutileza.com.br/redirect/index.php?email=
 https://grow-help-ledger.teachable.com/p/home
 https://guardianviewer.com/docu/Form%20I-19.pdf.lnk

diff --git a/add-wildcard-domain b/add-wildcard-domain
@@ -35,6 +35,7 @@ besatsrandompacks.click
 bitflyer-ja.free.nf
 bkengineersindia.com
 bkskhcil.top
+blackangel.dev
 blueevolution.it
 bohlepropiedades.com
 bowigarp.xyz
@@ -2121,6 +2122,7 @@ com-zzh5.xin
 combo-koleo-glutto.sbs
 commodityprocess.top
 communitybrowserpowered.com
+concur.net.co
 confession-best.ru
 consultedigital.com
 consulter-mon-amende.com
@@ -2353,6 +2355,7 @@ gerlia.shop
 getkmspico.com
 gliujoi.xyz
 glkjliim.xyz
+global-protect.net
 gloomcutter.shop
 gomlaner.xyz
 grike.shop