From: Anurag Saini <53658773+anurag-inias@users.noreply.github.com>
Date: Mon, 25 Oct 2021 04:40:55 +0000 (+0530)
Subject: Added crypto domain
X-Git-Tag: aggregated-20250518~294^2~3^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F534%2Fhead;p=thirdparty%2Fblocklistproject%2Flists.git

Added crypto domain

This domain appears in an email spam campaign. The email has gibberish subject and title, and seems to propagate when victim opens the attached `xhtml` file. This file has JS code set on execute on page open and redirects user to `btcminings.site`. The actual url is encoded as base64.
---

diff --git a/crypto.txt b/crypto.txt
index d4a62c4..fc303cb 100644
--- a/crypto.txt
+++ b/crypto.txt
@@ -2357,6 +2357,7 @@
 0.0.0.0 btcg.miningspeed.com
 0.0.0.0 btcguild.com
 0.0.0.0 btchc.pool.mn
+0.0.0.0 btcminings.site
 0.0.0.0 btcnos.com
 0.0.0.0 btcp-api.suprnova.cc
 0.0.0.0 btcp-eu.coinblockers.com