Skip to content

Instantly share code, notes, and snippets.

@christopheranderton
Last active March 19, 2024 14:17
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save christopheranderton/5c812012a7adc969ffef033a7531c11d to your computer and use it in GitHub Desktop.
Save christopheranderton/5c812012a7adc969ffef033a7531c11d to your computer and use it in GitHub Desktop.
Scratchpad/Notes for digging into the shady business of Wondershare. Not complete (it's a scratchpad after all!)

NOTEPAD : Digging into Wondershare

[See the Host entries at the end of the document]


http://en.0430.com/cn/web86683/

Sharer:	wadmin00126	Category:	software companies
Score:	(59)	PR:	PR:PR:4
Alexa:	Alexa Rank:48202(48202)	Popularity:	11
Clicks:	528 views	Tags:	Nothing
Website:	http://www.wondershare.cn
Summary:	Wanxing software (Wondershare Software), is a global application provides users with industry-leading PC and mobile Internet applications and games product internationalization of software enterprises. Product covers digital media, digital documents, data, mobile applications, games, and many other areas of your sys..

Wanxing software (Wondershare Software), is a global application provides users with industry-leading PC and mobile Internet applications and games product internationalization of software enterprises.
Product covers digital media, digital documents, data, mobile applications, games, and many other areas of your system and provide digital content to generate, edit, convert, share, backup, recovery solution to meet diverse application requirements. Using strong business development skills, Wanxing software users in more than 160 countries and regions, with millions of paying customers group, sales of more than 50% a year compound annual growth rate of rapid development. And in Japan, Europe, the United States established a branch in Shenzhen, Zhuhai, Beijing, Hangzhou, Guangzhou, and other places to establish research and development centers.

Currently has a staff of more than 600 people, developers, more than 70%, is the largest paying customers in mainland China, rich product line, global marketing internationalization of the most powerful software company.

As "national planning layout within focus software enterprise", and "national high-tech enterprise", "2011 Forbes China potential enterprise", continuous three years "de Deloitte hi-tech, and high growth Asia Pacific 500 strong, and China 50 strong enterprise", and "2011 national torch plans focus high-tech enterprise", Wanxing software Yu 2011 again was IDG capital, and Zhejiang Hua Rui over do dollars level strategy investment, gradually growth for competing global software market of China "intellectual" made force.

"Software-driven life" for the mission, relies on a strong innovative research and development team, global marketing systems, and improve the products and services, Wanxing software dedicated to innovative software through global shared wisdom, well-being of consumers driven one by one.
Contact Shenzhen headquarters address: Technology Park, Nanshan District, Shenzhen, 8/f, block a, TCL building, gaoxin South zip: 518,057 Tel: +86-755-8615-8001+86-755-8611-7717 fax: +86-755-8611-7737 pre (domestic customers to purchase Advisory) call: "Shenzhen based phone" + extension 6,620 fax: +86-755-86117737
Email: sales@Wondershare.com business (global software agents, business cooperation, strategic advice) Tel: +86-010-62316638+ ext 2002 fax: +86-755-86117737 email: biz@Wondershare.com technical support service (after-sales technical support, registration, etc) fax: +86-755-86117737 Email: support@Wondershare.com jobs call: "Shenzhen based phone" + extension number-8,877 fax: +86-755-86117737 email: HR@Wondershare.CN

NOTE:. http://www.siteurl.org/cn/86683-website

iSkysoft Studio is the Wondershare development section for the iSkySoft products.
https://uk.linkedin.com/in/jinlei-huo-17185410

”China Key Software Company”

Connections with Digital River:
http://www.businesswire.com/news/home/20120316005745/en/Digital-River-Present-Chinese-Software-Global-Summit

Wondershare Software Receives an Internet Commerce Excellence Award.
http://www.prnewswire.com/news-releases/wondershare-software-receives-an-internet-commerce-excellence-award-151697555.html

CEO/Ownership:

Tobee Wu

Tobee Wu serves as the Chief Executive Officer of Wondershare Software Co., Ltd., the holding company of Spotmau Corporation. http://www.bloomberg.com/research/stocks/private/snapshot.asp?privcapId=131480084

Flickr account (empty): https://www.flickr.com/photos/77775598@N00/

Misc.
http://en.gwc.net/members/wondershare/

http://www.bloomberg.com/research/stocks/private/person.asp?personId=134742498&privcapId=131480084&previousCapId=131480084&previousTitle=Spotmau%20Corporation

CEO was going on:
https://en.wikipedia.org/wiki/Shanghai_Jiao_Tong_University

Jiaoda (Jiao Tong Students) alumni, no matter where they are, are playing a significant role and active part in business, academic and politic circle. Deep in their mind, an inspiring word has already been impressed: "Yesterday I went into Jiaoda with honor; Today I will be an honor to Jiaoda".

Tobee Wu
Mr. Tobee Wu is the general manager and founder of Wondershare Software Co., Ltd., with MBA degree of Shanghai Jiao Tong University. He used to work in some renowned IT corporations in China, such as Neusoft and 21CN. With more than 10 years experience in IT industry, Tobee has been rapidly developing his business from a small company with less than 10 employees to a well-known digital software corporation in just a few years, with hundreds of staff and millions of annual sales revenue.


Wondershare Acquires Acoolsoft Studio to Consolidate the Leadership Position of PowerPoint Converter Software:
http://www.prnewswire.com/news-releases/wondershare-acquires-acoolsoft-studio-to-consolidate-the-leadership-position-of-powerpoint-converter-software-116155364.html

http://www.prnewswire.com/news-releases/wondershare-user-base-tops-75-million-expands-global-reach-to-160-countries-including-north-america-japan-and-germany-300011803.html

"AnyBizSoft, A product brand of Wondershare

Wondershare acquired AnyBizSoft in 2010 and Spotmau Corporation in 2011.[4] The purchase of Spotmau added Windows PC system optimization utilities.[4] In 2011, it also received additional funding through a second round of financing, led by IDG Capital Partners.[2] The company's products include software for mobile phones, photo, video and DVD, computer utilities, and PDF tools.[2] Some its best known products include Dr.Fone, MobileTrans,[7] TunesGo,[8] Video Converter Ultimate,[9] Video Editor,[10] and PowerCam.[11]

*On hand at GMIC SV will be Wondershare's Founder and CEO Tobee Wu, who will be joining a panel discussion of emerging technologies developed in China going global. Wondershare Vice President Summer Qin will also be giving a keynote address. Both executives will be available for pre-reserved meetings during the conference.

Wondershare will be demonstrating its latest piece of mobile pioneering - Dr. FoneTM. Dr. Fone is a revolutionary consumer-friendly data recovery application for iPhone®/iPad/iPod Touch (other platforms coming soon) that is often a users' best chance of recovering mistakenly deleted information. Dr. Fone can scan the low-level idevice memory and the iTunes backup file to detect, preview, and recover deleted pictures, videos, text messages, contacts, memos, and other content. Dr. Fone is compatible with the newly released iPhone 5 and is iOS 6 optimized. This innovative technology that is now available for licensing for telecom operators, mobile device retailers, and other service providers looking to monetize value-added services like data recovery for their end- user customers or resell Dr. Fone.

Media are kindly asked to contact Robert DeMoulin at robert.demoulin@wondershare.com to get on the briefing list and schedule a meeting time*


http://www.macworld.com/article/1153685/web-apps/speaking-spammers.html

Wondershare Launches Slideshow Software Affiliate Program:
http://www.prweb.com/releases/2006/04/prweb371441.htm

https://translate.google.com/translate?sl=zh-CN&tl=en&js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fhome.donews.com%2Fdonews%2Farticle%2F7%2F71794.html&edit-text=


[quote=Nicky|16184][/quote]

Interesting. The company itself, the developers of Disk Clean Pro is like you said, developed by the same ones as TuneupMyMac. 

The company selling Disk Clean Pro is based in Jaipur, Rajasthan, India is named Systweak Inc Ltd and is a well known scam company. Systweak itself is owned by The Phone Support Private Limited (Jaipur, India):
http://site2corp.com/in/the-phone-support-private-limited and is owned by; Shrishail Rana & Nitu Rana. 
Thoose two are connected to a long list of companies. 

Let's start with the ones that like Phone Support Ltd is owned by the dynamic duo of Shrishail Rana & Nitu Rana;
- http://site2corp.com/in/chandrakala-builders-and-promoters-private-limited
- http://site2corp.com/in/macro-colonizers-private-limited
- http://companiesmate.com/1876620/shri_shantinath_bhagwan_software_private_limited/
- http://site2corp.com/in/mangalshri-granites-private-limited
- http://site2corp.com/in/tweaking-technologies-private-limited
- http://site2corp.com/in/snsp-real-estate-private-limited
- http://site2corp.com/in/right-backup-software-private-limited
- http://site2corp.com/in/neeru-buildtech-private-limited
- http://site2corp.com/in/snsp-hotels-private-limited (killed off)
- TUNEUP PRO SOFTWARE SERVICES LLP
- WIN TUNEUP SOFTWARE LLP
- SUPER TUNEUP TECHNOLOGIES LLP

Shrishail Rana:

Ok, you get the picture. They operate a dozen of companies in the areas of Software and Building. So, who is behind the TuneupMyMac software that is to some extent present inside the Disk Clean Pro .app bundle?

With some social ”hacking” i found out that with a high possibility, that his name is: Sunil Dahiy. No surprise. He is also Mac Resolution Expert and Team Leader for the Mac department at The Phone Support Company. He was working at HSBC Banking before this, and is his strenghts (according to himself) is Unix Scripting, Unix Security and Software Deployment Scripting.

In his team he has 14 Mac ”engineers”, and about 20 On the job training people coming from Universities. Looking at his past contributions on places like StackExchange and Indian based developer forums, there are quite a lot questions about hiding and detecting stuff in BSD and other *-Nixes. They seem legit, as the questions asked was more of ”white hat” than ”Darth Vader black hat”.

Ok. What's more about this company? There are plenty of stuff, including direct connections to a crackdown FTC (US) on Tech Support Scams (Hello, this is from the Microsoft Tech Support, we noticed that you have a virus).

But alright. I will end up writing a book about theese guys if i continue. Some fun tidbits however: One of the directors of The Phone Company has worked with, and is a friend with a (now former) bigshot at a Digital River that owns the eSellerate brand. Now. The funny part is that this person has a personal website (while looking like it's from 1997) warning for… ”Unethical Software Monetization Methods” and ”Tech Call Scam” and linking to Malwarebytes reports.

And it don't stop. Here is my favorite… The guy worked for Wondershare[1] back in 2011!

Quote: ”Started the US Educational Channel for Wondershare Established the US Educational Channel for Wondershare exposing their large catalog of software to K-12, universities and colleges. Established relationships with major resellers and distributors in the US Educational space. Established in 2003 and located in Shenzhen, adjacent to the international financial and trade center Hong Kong.”

Links and references (not all, as i would need to sort them):

https://www.theguardian.com/technology/2012/oct/04/ftc-cracks-down-tech-support-scam https://blog.malwarebytes.com/threat-analysis/2016/07/pup-friday-cleaning-up-with-5-star-awards/ https://www.facebook.com/tarunsinghshekhawat https://trademarks.justia.com/owners/khersonsky-corporation-1039725/


Example
Installation of Wondershare Video Converter Ultimate.app (same app as iSkysoft Video Converter .app).

Upon launch it will silently install following items into your user library: Wondershare Helper Compact.app and MediaDownloader.bundle.

The paths created with the added files:

$HOME/Library/Application\ Support/MediaDownloadKit

$HOME/Library/Application\ Support/Helper

and in some cases at: $HOME/Library/Helper and $HOME/Library/Helpers

Removing the files or directories will result that upon the next launch, they will be reinstalled (silently). Also, many of the releases from Wondershare and their OEMs includes XPC Vulnerabilities (the software is using 99% Open Source code, even if they don't give a darn about the licenses).

More
This applies to almost 150 or even more applications from Wondershare, iSkysoft (another brandname for Wondershare), Xillisoft, Aimersoft, Xiisoft, Tenorshare, Aiseesoft, AnyBizSoft, Kigo, Tipard, MacX and plenty of other OEMs (?).

Even if anti-virus or malware scanners don't warn about this, most of these apps are not considered to be trusted. Some apps as example from Wondershare tracks the user, even if you have uninstalled the Wondershare applications in question (as the helper apps are still in place).

Wondershare Locations

~/Library/Application Support/MediaDownloadKit
~/Library/Application Support/Helper
~/Library/Helper
~/Library/Helpers

Example

launchctl list | grep wondershare
launchctl list | grep iskysoft
sudo launchctl list | grep wondershare
sudo launchctl list | grep iskysoft
sudo launchctl remove com.wondershare.mobilegodaemon

LOCATIONS=(
"$HOME/Library/Application Support/wondershare"
"$HOME/Library/Application Support/Wondershare/"
"$HOME/Library/Application Support/iSkysoft/"
"$HOME/Library/Application Support/Aimersoft/"
"$HOME/Library/Application Support/Wondershare/Helper" 
"$HOME/Library/Application Support/Wondershare/Video Converter Ultimate" 
"$HOME/Library/Application Support/Wondershare/Video_Converter_Ultimate" 
"$HOME/Library/Application Support/Wondershare/Video-Converter-Ultimate" 
"$HOME/Library/Application Support/Helper" 
"$HOME/Library/Application Support/Helper/Wondershare Helper Compact.app"
"$HOME/Library/Application Support/Helper/Aimersoft Helper Compact"
"$HOME/Library/Application Support/Helper/iSkysoft Helper Compact.app"
"$HOME/Library/Application Support/MediaDownloadKit"
"$HOME/Library/Application Support/MediaDownloadKit/clients"
"$HOME/Library/Application Support/MediaDownloadKit/Bundles"
"$HOME/Library/Caches/com.wondershare.helper_compact"
"$HOME/Library/Caches/com.wondershare.helper_compact/Cache.db"
"$HOME/Library/Caches/com.iskysoft.helper_compact/Cache.db"
"$HOME/Library/Caches/com.aimersoft.helper_compact/Cache.db"
# /private/var/folders/79/z90d9sd898ds/T/Downloads/wondershare/1588DOA-F314-890F-834C-E804627981E8-366-000AHDJS/Aimersoft Helper Compact.app
 # $HOME/Library/Preferences/com.wondershare.helper_compact.plist and com.Wondershare.Video-Converter-Ultimate.plist
 # $HOME/Library/Preferences/com.Wondershare.Video-Converter-Ultimate.plist
 #$HOME/Library/Saved Application State/com.Wondershare.Video-Converter-Ultimate.savedState
 # /private/var/db/BootCaches/3AEE/-ABFAF-4AAA-819C-666DDDDAAA/app.com.Wondershare.Video-Converter-Ultimate.playlist
# $HOME/Caches/com.Wondershare.Video-Converter-Ultimate

# Check inside Firefox Profiles: extensions.json

# $HOME/Library/Application Support/Firefox/Profiles/66666vp.default/extensions/{1C177B10-F72F-11E1-A21F-09002828666}

# Contents: __MACOSX (Folder) chrome (Folder) chrome.manifest (File) install.rdf (File) META-INF (Folder) 
# Inside chrome: AnalysterLoader.js, analyster, AppMgr.js, Core.js, img, LAB.js, Main.js
# Inside analyster: common.js, youtube_list.js, youtube.com.js
)
PUP=0

# 	Articles and posts about Wondershare and others:
#
#
#
#
# - Company Overview (Wondershare main company)
#	URL: http://www.bloomberg.com/research/stocks/private/snapshot.asp?privcapId=23093779
#
# - IP Address Owner for Wondershare Software (H.k.)Co. Limited
# https://myip.ms/view/ip_owners/512886/Wondershare_Software_H_k_Co_Limited.html
#
# -	Speaking with spammers by Christopher Breen, Macworld.
#	URL: http://www.macworld.com/article/1153685/web-apps/speaking-spammers.html
#
# -	Blog discussion (Japanese) about the safety of applications from 
#	Wondershare and others available on the official Mac App Store.
#	URL: http://applech2.com/archives/28812089.html
#
# - FYI: Wondershare Casks (and others) #21399. Homebrew Cask Issue about
# 	Wondershare Mac applications installing PUPs in your system without
#	letting the user know. 
#	URL: https://github.com/caskroom/homebrew-cask/issues/21399
#
#
# ----------------------------------------------------------------------
#	Software and Browser Extensions from brands and companies below
#	that most likely is connected to Wondershare:
#
# 	Wondershare, iSkysoft, Xillisoft, Aimersoft, Tuneup360, iStonsoft,
# 	Sidify, MacXDVD, 5k, 4k, ChungwaSoft, Epubor, ePubee, FVD, eTinySoft,
# 	TotalVideo, Xiisoft, ZiioSoft, xy, wontube, Eltima, Trillix, 
# 	Tenorshare, Noteburner, iTube, AnyVideo, AnyMP4, Any(insert name),
# 	Movavi, Enolsoft, AzwSoft, Mac Video Downloader, FlipBuilder,
# 	FlipPDF, Flip, iMobie, Backuptrans, MacGo, Macblurayplayer, Free Media Player
# 	IdealShare, 3herosoft, 4Media, 4videosoft, Aiseesoft, AnyBizSoft,
# 	Aunsoft, Bigasoft, Brorsoft, EffectMatrix, iMacsoft, Joboshare,
# 	Kigo, Macsome, Moyea, Tipard, uSeesoft, WinX, MacX, iFoneBox,
# 	MiniTool, M4VGear, Coolmuster and more
#
# 	Many of these is actually from Wondershare, Wondershare owned brands
# 	or OEMs. The others, is mostly using the same or very similar code
# 	and structure. The most common method is to wrap Open Source libraries
# 	and code in a iPython Wrapper and a slap a GUI on it. 
#	The standard here is to use Open Source Software, but don't respect
#	the various licenses used. 
#	
# 	The Open Source libraries and code used by these developers is 
#	rarely up-to-date, which also means you will find vulnerabilities
# 	that was patched years ago by the original authors.
# ======================================================================


# Category: Common hosts 
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -	- - - - 

# Wondershare, iSkySoft and iTuneup360
# ----------------------------------------------------------------------
0.0.0.0 wondershare.com
0.0.0.0 www.wondershare.com
0.0.0.0 wondershare.net
0.0.0.0 www.wondershare.net
0.0.0.0 interface.wondershare.com
0.0.0.0 datarecovery.wondershare.com
0.0.0.0 lt.wondershare.com
0.0.0.0 ori-www.wondershare.com
0.0.0.0 api.fantashow.wondershare.com
0.0.0.0 us-stats.wondershare.com
0.0.0.0 images2.wondershare.com
0.0.0.0 pdfimages.wondershare.com
0.0.0.0 pdf.wondershare.com				# (Also: anypdftools, pdfelement)
0.0.0.0 resource.wondershare.com
0.0.0.0 filmora.wondershare.com
0.0.0.0 wondershare.cn
0.0.0.0 www.wondershare.cn
0.0.0.0 www.wondershare.com.hk
0.0.0.0 wondershare.com.hk
0.0.0.0 svn.wondershare.com
0.0.0.0 svn.wondershare.cn
0.0.0.0 labs.wondershare.com
0.0.0.0 shop.wondershare.com
0.0.0.0 sell.wondershare.com
0.0.0.0 file.wondershare.com
0.0.0.0 statics.was.wondershare.com
0.0.0.0 images.ru.wondershare.com
0.0.0.0 nl.wondershare.com
0.0.0.0 images.nl.wondershare.com
0.0.0.0 photo.wondershare.com
0.0.0.0 images.player.wondershare.com
0.0.0.0 was-stats.wondershare.com
0.0.0.0 was.wondershare.com
0.0.0.0 mobilego.wondershare.com
0.0.0.0 powercam.wondershare.com
0.0.0.0 rest.wondershare.com
0.0.0.0 res.wondershare.com
0.0.0.0 player.wondershare.com
0.0.0.0 fantashow.wondershare.com
0.0.0.0 ori-download.wondershare.com
0.0.0.0 newaffiliateadownload.wondershare.com
0.0.0.0 newsletters.wondershare.com
0.0.0.0 support.wondershare.com
0.0.0.0 support.wondershare.br
0.0.0.0 support.wondershare.de
0.0.0.0 support.wondershare.es
0.0.0.0 support.wondershare.fr
0.0.0.0 support.wondershare.it
0.0.0.0 store.wondershare.com
0.0.0.0 my.wondershare.com
0.0.0.0 i.wondershare.com
0.0.0.0 newsletter.wondershare.com
0.0.0.0 download-affiliate.wondershare.com
0.0.0.0 blog.wondershare.com
0.0.0.0 free.wondershare.com
0.0.0.0 images.fantashow.wondershare.com
0.0.0.0 images.wondershare.com
0.0.0.0 tw.wondershare.com
0.0.0.0 uk.wondershare.com
0.0.0.0 no.wondershare.com
0.0.0.0 hi.wondershare.com
0.0.0.0 otq.wondershare.com
0.0.0.0 bs.wondershare.com
0.0.0.0 ha.wondershare.com
0.0.0.0 th.wondershare.com
0.0.0.0 iw.wondershare.com
0.0.0.0 ms.wondershare.com
0.0.0.0 dk.wondershare.com
0.0.0.0 id.wondershare.com
0.0.0.0 ro.wondershare.com
0.0.0.0 vi.wondershare.com
0.0.0.0 sr.wondershare.com
0.0.0.0 sk.wondershare.com
0.0.0.0 tr.wondershare.com
0.0.0.0 fi.wondershare.com
0.0.0.0 cs.wondershare.com
0.0.0.0 sa.wondershare.com
0.0.0.0 pl.wondershare.com
0.0.0.0 jp.wondershare.com
0.0.0.0 sv.wondershare.com
0.0.0.0 ru.wondershare.com
0.0.0.0 cbs.wondershare.com			# (Same as cbs.iskysoft.com)
0.0.0.0 cbs.iskysoft.com 
0.0.0.0 api.wondershare.com
0.0.0.0 api.iskysoft.com
0.0.0.0 api.aimersoft.com			# (Same as cbs.iskysoft.com) 
0.0.0.0 i.wondershare.com			# (Same as api.aimersoft.com)
0.0.0.0 i.iskysoft.com				# (Same as api.iskysoft.com)
0.0.0.0 i.aimersoft.com				# (Same as cbs.iskysoft.com)
0.0.0.0 download.iskysoft.com
0.0.0.0 download.iskysoft.com.br
0.0.0.0 download.wondershare.it
0.0.0.0 download.wondershare.fr
0.0.0.0 download.iskysoft.ru
0.0.0.0 download.iskysoft.fr
0.0.0.0 iskysoft.com.br
0.0.0.0 download.iskysoft.us
0.0.0.0 download.iskysoft.de
0.0.0.0 iskysoft.jp
0.0.0.0 macplatform.wondershare.com
0.0.0.0 platform.wondershare.com
0.0.0.0 wondershare.cn.edgesuite.net
0.0.0.0 wondershare.software-couponcode.com
0.0.0.0 ori-mobilego.wondershare.com
0.0.0.0 ori-pdf.wondershare.com
0.0.0.0 ori-download.wondershare.es
0.0.0.0 ori-download.wondershare.com.br
0.0.0.0 ori-download.iskysoft.us
0.0.0.0 insidews.wondershare.com
0.0.0.0 mail.insidews.wondershare.com
0.0.0.0 mail.service.wondershare.com
0.0.0.0 mail.wondershare.com
0.0.0.0 mail.wondershare.jp
0.0.0.0 service.wondershare.com
0.0.0.0 service.wondershare.it	
0.0.0.0 download1.wondershare.com
0.0.0.0 download2.wondershare.com
0.0.0.0 download3.wondershare.com
0.0.0.0 download.wondershare.es
0.0.0.0 download.wondershare.de
0.0.0.0 download.wondershare.com
0.0.0.0 download.wondershare.com.hk
0.0.0.0 download.wondershare.jp
0.0.0.0 download.wondershare.com.br
0.0.0.0 download.wondershare.com.mx
0.0.0.0 download.ru.wondershare.com
0.0.0.0 download.wondershare.net
0.0.0.0 download.nl.wondershare.com
0.0.0.0 download.br.wondershare.com
0.0.0.0 resource.wondershare.com
0.0.0.0 resource.wondershare.com.cdnga.net
0.0.0.0 my.wondershare.com
0.0.0.0 us.wondershare.com
0.0.0.0 pop.wondershare.com
0.0.0.0 rest.wondershare.com
0.0.0.0 rest.iskysoft.com
0.0.0.0 iskysoft.com
0.0.0.0 www.iskysoft.com
0.0.0.0 www.isky.co.kr
0.0.0.0 isky.co.kr
0.0.0.0 support.iskysoft.com
0.0.0.0 us.iskysoft.com
0.0.0.0 filmora.iskysoft.com
0.0.0.0 filmora.iskysoft.cn
0.0.0.0 ppt-to-dvd.com				# (Official Wondershare Software)	
0.0.0.0 www.ppt-to-dvd.com			# (Official Wondershare Software)	
0.0.0.0 download.ppt-to-dvd.com		# (Official Wondershare Software)
0.0.0.0 ppt-to-video.com			# (Official Wondershare Software)
0.0.0.0 www.ppt-to-video.com		# (Official Wondershare Software)

# ----------------------------------------------------------------------
# DRMTips (See NOTES below)
# ----------------------------------------------------------------------
0.0.0.0 www.drmtips.com					
0.0.0.0 drmtips.com	

#	NOTES (drmtips.com)
# -	1. "Proxy" site from Wondershare (AKA iSkysoft and others)
# - 2. The domain is registered by iJoySoft Ltd (Wondershare)
# - 3. HerdProtect Domain Info: https://www.herdprotect.com/domain-drmtips.com.aspx


# ----------------------------------------------------------------------
# tuneup360 (See NOTES below)
# ----------------------------------------------------------------------
0.0.0.0 api.tuneup360.com			# (See NOTES below)
0.0.0.0 96.17.10.24					# (api.tuneup360.com)(Known IP)
0.0.0.0 i.tuneup360.com				# (Same as api.aimersoft.com)

#	NOTES (api.tuneup360.com)
# -	1. Google Safe Browsing (Jul 2015):  Malicious site
# -	2. Google Safe Browsing (Feb 2016):  Safe 
# -	3. Web of Trust WOT (Feb 2016): Poor reputation, scammy behavior,
# 	technical dangers such as malware and other issues. (Feb 2016)
# -	4. Alert: Links to several sites that are known for malware,
# 	adware, tracking and spam. Most notable is download25 
# 	a Romanian download site that is mentioned spreading malware, viruses, 
# 	spam, and different types of cybercrime (other than mentioned).
# 	Also claims to be owned by a non existent company (but the real
# 	owners is Wondershare, and the SW is also signed by Wondershare).


# ----------------------------------------------------------------------
# 74.50.121.136 (See NOTES below)
# ----------------------------------------------------------------------
0.0.0.0 74.50.121.136 	 			# (Used by Wondershare and many others)	
			
#	NOTES (74.50.121.136)
# -	1. Used by multiple Software brands offering similar products. 
# -	2. Lot's of PUPs and warning signs according to VirusTotal:
#		https://www.virustotal.com/en/ip-address/74.50.121.136/information
# - 3. HerdProtect IP Info: http://www.herdprotect.com/ip-address-74.50.121.136.aspx


0.0.0.0 206.51.239.83				# (Web Host IP used by Wondershare and scam sites)
0.0.0.0 206.51.239.77				# (Web Host IP used by Wondershare and scam sites)
0.0.0.0 206.51.239.74				# (Web Host IP used by Wondershare and scam sites)
0.0.0.0 74.50.121.140				# (Web Host IP used by Wondershare and scam sites)
0.0.0.0 203.130.48.6				# (cbs.iskysoft.com)(Known IP)
0.0.0.0 70.39.189.218				# (api.iskysoft.com)(Known IP)
0.0.0.0 96.17.10.41					# (api.wondershare.com)(Known IP)
0.0.0.0 96.17.10.25					# (api.wondershare.com)(Known IP)
0.0.0.0 203.130.48.18				# (macplatform.wondershare.com)(Helper Compact.app) 
0.0.0.0 70.39.189.178				# (Traffic by Helper Compact.app) 
0.0.0.0 205.185.206.155				# (wondershare.cn.edgesuite.net)(Known IP)
0.0.0.0 96.17.10.26					# (wondershare.cn.edgesuite.net)(Known IP)
0.0.0.0 184.173.254.16				# (wondershare.cn.edgesuite.net)(Known IP)
0.0.0.0 184.173.254.16-static.reverse.softlayer.com					# (See above)
0.0.0.0 203.130.48.6-bj-cnc											# (See above)
0.0.0.0 b2.ed.1732.ip4.static.sl-reverse.com		# (Download server used by Wondershare)
0.0.0.0 206-51-239-82.static.hvvc.us 			# (Download server used by Wondershare)
0.0.0.0 74-50-121-136.static.hvvc.us			# (Download server used by Wondershare)
0.0.0.0 a1737.g.akamai.net			# (Associated with Wondershare)
0.0.0.0 203.130.48.18				# (Traffic by Wondershare Compact Helper.app)
0.0.0.0 70.39.189.178				# (Traffic by Wondershare Compact Helper.app)

   


# General 
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -	- - - -

# Lonasoft
# ----------------------------------------------------------------------
0.0.0.0 lonasoft.com
0.0.0.0 www.lonasoft.com

# Amacsoft
# ----------------------------------------------------------------------
0.0.0.0 www.amacsoft.com
0.0.0.0 amacsoft.com

# AiseeSoft
# ----------------------------------------------------------------------
0.0.0.0 aiseesoft.com
0.0.0.0 www.aiseesoft.com

# AimerSoft
# ----------------------------------------------------------------------
0.0.0.0 aimersoft.com
0.0.0.0 www.aimersoft.com
0.0.0.0 download.aimersoft.com
0.0.0.0 download.aimersoft.com.br
0.0.0.0 download.aimersoft.jp
0.0.0.0 download.aimersoft.de
0.0.0.0 download.aimersoft.ru
0.0.0.0 aimersoft.software-couponcode.com

# AVSMedia
# ----------------------------------------------------------------------
0.0.0.0 www.avsmedia.com
0.0.0.0 avsmedia.com

# Aura4you
# ----------------------------------------------------------------------
0.0.0.0 aura4you.com
0.0.0.0 www.aura4you.com

# DaniuSoft (Uses same IP as some of the Wondershare servers)
# ----------------------------------------------------------------------
0.0.0.0 daniusoft.com 
0.0.0.0 www.daniusoft.com
0.0.0.0 download.daniusoft.com
0.0.0.0 cbs.daniusoft.com

## = 4videosoft 
# ----------------------------------------------------------------------
# Most users of software from this brand can 
# be found in USA
# --
# Common Traffic Sources (approximately) for this brand: 
# > 87% Direct hits (Bookmarks, In-App links and others)
# > 11% Google and other search engines (Search Spam)
# ----------------------------------------------------------------------
0.0.0.0 www.4videosoft.com
0.0.0.0 4videosoft.com
0.0.0.0 download.4videosoft.com
0.0.0.0 downloads.4videosoft.com
0.0.0.0 support.4videosoft.com
0.0.0.0 blog.4videosoft.com
0.0.0.0 4videosoft.jp # -> Refferal or Destination
0.0.0.0 www.4videosoft.jp # -> Refferal or Destination
0.0.0.0 4videosoft.fr # -> Refferal or Destination
0.0.0.0 www.4videosoft.fr # -> Refferal or Destination
0.0.0.0 4videosoft.de # -> Refferal or Destination
0.0.0.0 www.4videosoft.de # -> Refferal or Destination
0.0.0.0 4videosoft-screen-capture.en.softonic.com # -> Refferal or Destination


# Abrosoft
# ----------------------------------------------------------------------
0.0.0.0 fantamorph.com
0.0.0.0 www.fantamorph.com
0.0.0.0 www.abrosoft.com
0.0.0.0 abrosoft.com


# Tipard
# ----------------------------------------------------------------------
0.0.0.0 www.tipard.com
0.0.0.0 tipard.com

# 3HeroSoft
# ----------------------------------------------------------------------
0.0.0.0 3herosoft.com
0.0.0.0 www.3herosoft.com

# UseeSoft
# ----------------------------------------------------------------------
0.0.0.0 www.useesoft.com
0.0.0.0 useesoft.com

# Xilisoft
# ----------------------------------------------------------------------
0.0.0.0 xilisoft.com
0.0.0.0 www.xilisoft.com
0.0.0.0 download.xilisoft.com
0.0.0.0 api.xillisoft.com
0.0.0.0 69.172.201.208				# (api.xillisoft.com)(Known IP)

# M4VGear
# ----------------------------------------------------------------------
0.0.0.0 m4vgear.com
0.0.0.0 www.m4vgear.com

# iStonsoft 
# ----------------------------------------------------------------------
0.0.0.0 www.istonsoft.com
0.0.0.0 istonsoft.com

# MacXDVD
# ----------------------------------------------------------------------
0.0.0.0 macxdvd.com
0.0.0.0 www.macxdvd.com
0.0.0.0 macxdvd.com

# 5K Player and other 5K SW
# ----------------------------------------------------------------------
0.0.0.0 www.5kplayer.com
0.0.0.0 5kplayer.com

# ChungwaSoft (Mail Plug-ins and SW)
# ----------------------------------------------------------------------
0.0.0.0 www.chungwasoft.com
0.0.0.0 www.feingeist.io
0.0.0.0 chungwasoft.com
0.0.0.0 feingeist.io

# Epubor Soft (Epubee)
# ----------------------------------------------------------------------
0.0.0.0 chat.epubor.com
0.0.0.0 code.epubor.com
0.0.0.0 download.epubor.com
0.0.0.0 trace.epubor.com
0.0.0.0 epubee.com
0.0.0.0 epubor.com

# AniceSoft (Same as Epubee?)
# ----------------------------------------------------------------------
0.0.0.0 anicesoft.com
0.0.0.0 www.anicesoft.com
0.0.0.0 trace.anicesoft.com
0.0.0.0 download.anicesoft.com
0.0.0.0 code.anicesoft.com

# FVD Show
# ----------------------------------------------------------------------
0.0.0.0 ffdshow-tryout.sourceforge.net
0.0.0.0 ffdshow.sourceforge.net


# -	TotalVideo / EffectMatrix / eTinySoft 
#	ZiioSoft/ Enolsoft / AneeSoft / iFunia
# 	(All of the above brands belongs to one Chinese OEM company?)
# ----------------------------------------------------------------------

## = Aneesoft 
# -----------------------------------------------------
# Most users of software from this brand can 
# be found in USA and India.
# --
# Common Traffic Sources (approximately) for this brand: 
# > 47% Google and other search engines (Search Spam)
# > 27% Direct hits (Bookmarks, In-App links and others)
# > 25% Referrals (Mostly spam: E-Mail, Forums, 
# Review Sites, and others)
# --
# Notes: 
# The name of the company is Hunan Aini Ltd. 
# Enolsoft uses the same codebase (with unaltered "Aneesoft" 
# OEM code from China). They are also listed as
# customers at the Chinese webpage of Hunan Aini/Aneesoft
# along with iFunia. Which means that they are selling
# OEM Code that comes from Wondershare/Similar in
# the first place! Amazing! 
# -----------------------------------------------------
0.0.0.0 aneesoft.com
0.0.0.0 www.aneesoft.com
0.0.0.0 download.aneesoft.com
0.0.0.0 aneesoft.cn
0.0.0.0 www.aneesoft.cn


# EffectMatrix (TotalVideo)
# ----------------------------------------------------------------------
0.0.0.0 effectmatrix.com
0.0.0.0 www.effectmatrix.com

# eTinySoft
# ----------------------------------------------------------------------
0.0.0.0 etinysoft.com
0.0.0.0 license.etinysoft.com
0.0.0.0 update.etinysoft.com
0.0.0.0 www.etinysoft.com

# ZiioSoft
# ----------------------------------------------------------------------
0.0.0.0 ziiosoft.net
0.0.0.0 www.ziiosoft.net
0.0.0.0 updates.ziiosoft.net
0.0.0.0 cdn.ziiosoft.net
0.0.0.0 license.ziiosoft.net

# iFunia
# ----------------------------------------------------------------------
0.0.0.0 www.ifunia.com
0.0.0.0 ifunia.com
0.0.0.0 download.ifunia.com
0.0.0.0 downloads.ifunia.com
0.0.0.0 support.ifunia.com
0.0.0.0 ifunia.cn
0.0.0.0 www.ifunia.cn

# Enolsoft 
# ----------------------------------------------------------------------
0.0.0.0 www.enolsoft.com # (Whois: https://whois.domaintools.com/enolsoft.com)
0.0.0.0 enolsoft.com
0.0.0.0 autoconfig.enolsoft.com
0.0.0.0 ftp.enolsoft.com
0.0.0.0 autodiscover.enolsoft.com
0.0.0.0 50.62.129.237

# Sameshow
# ----------------------------------------------------------------------
0.0.0.0 sameshow.com	
0.0.0.0 www.sameshow.com
0.0.0.0 download.sameshow.com	

# KeepVid
# ----------------------------------------------------------------------
0.0.0.0 keepvid.com
0.0.0.0 download.keepvid.com 			
0.0.0.0 download.keepvid.jp	

# AnyBizSoft / Any* (Mostly Wondershare brands)
# ----------------------------------------------------------------------
0.0.0.0 anypdftools.com				# (pdf.wondershare.com, download.wondershare.com)
0.0.0.0 download.anypdftools.com		# (See above)
0.0.0.0 www.anypdftools.com			# (See above)
0.0.0.0 ori-www.anypdftools.com		# (See above)
0.0.0.0 www.anvsoft.com				# (Any Video Converter Pro and others)
0.0.0.0 anvsoft.com					# (See above)
0.0.0.0 www.any-video-converter.com # (Anvsoft)
0.0.0.0	any-video-converter.com		# (See above)
0.0.0.0 www8.any-video-converter.com	# (See above)
0.0.0.0 any-activity-monitor.com	
0.0.0.0 www.any-activity-monitor.com
0.0.0.0 any-audio-converter.com
0.0.0.0 www.any-audio-converter.com
0.0.0.0 any-dvd-clone.com
0.0.0.0 www.any-dvd-clone.com
0.0.0.0 any-dvd-cloner.com
0.0.0.0 www.any-dvd-cloner.com
0.0.0.0 any-dvd-converter.com
0.0.0.0 www.any-dvd-converter.com
0.0.0.0 any-employee-monitor.com
0.0.0.0 www.any-employee-monitor.com
0.0.0.0 any-video-editor.com
0.0.0.0 www.any-video-editor.com
0.0.0.0 anyvideoconverterhd.com 	# (Registered in Italy)
0.0.0.0 www.anyvideoconverterhd.com # (See above)



# Others
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -	- - - - 


# ----------------------------------------------------------------------
# Enojabletime (Tumblr)(See NOTES below)
# ----------------------------------------------------------------------
0.0.0.0 batathe456us.tumblr.com		 			# (Created by "Amy Lu")	
			
#	NOTES (batathe456us.tumblr.com)
# -	1. Amy Lu blog with "Tips and Tricks", but is really
# 	   used for SEO to get different software brands,
#	   owned by one company, which Amy Lu seems to work for, a better Google Rank.


# ----------------------------------------------------------------------
# Better App Software - Xiao Wei (Mac App Store)(See NOTES below)
# ----------------------------------------------------------------------
#	NOTES (Xiao Wei)
# -	1. Xiao Wei seems to be an independent Chinese developer selling 
#	applications at the Apple Mac App Store (MAS). However, he is using
#	Open Source projects and seems to just recompile them and rebrand them,
#	of course ignoring the licenses used in the Open Source project he is using.
# 	Example of Applications sold at MAS: 
# 		- WAV Converter Pro - Any Audio to WAV
#		- Video Splitter Pro
#		- Audio Edit - ID3 Tag
#		- WMV to Any Pro
#		- WMA Converter Pro
#		- MP3 Converter - Powerful MP3 Encoder
#		- AVI to Any Pro - better AVI Converter
#		- FLAC Converter Pro - Convert Any Audio to FLAC
#		- AudioToiDeveice-flac, wma, ogg, ape, wav, asf, flv converter
#		- FLAC To MP3 Pro
#		- FLAC To AAC - Convert FLAC Into Apple Lossless
#		- Better Video Converter - convert any video (A clone of Miro Video Converter)
#		- Better Music Converter - convert any audio

0.0.0.0 betterappsoftware.com 					
0.0.0.0 www.betterappsoftware.com
# ----------------------------------------------------------------------
0.0.0.0 avclabs.com
0.0.0.0 www.avclabs.com
0.0.0.0 avs4mac.com
0.0.0.0 www.avs4mac.com
0.0.0.0 dvdsmith.com
0.0.0.0 www.dvdsmith.com
0.0.0.0 html5-slideshow-maker.com
0.0.0.0 www.html5-slideshow-maker.com
0.0.0.0 movie-dvd-maker.com
0.0.0.0 www.movie-dvd-maker.com
0.0.0.0 noteburner.com
0.0.0.0 www.noteburner.com
0.0.0.0 photo-dvd-maker.com
0.0.0.0 www.photo-dvd-maker.com
0.0.0.0 photo-dvd-slideshow.com
0.0.0.0 www.photo-dvd-slideshow.com
0.0.0.0 photo-flash-maker.com
0.0.0.0 www.photo-flash-maker.com
0.0.0.0 surveilstar.com
0.0.0.0 www.surveilstar.com
0.0.0.0 sync-droid.com
0.0.0.0 www.sync-droid.com
0.0.0.0 tune4mac.com
0.0.0.0 www.tune4mac.com
0.0.0.0 ultraget.com
0.0.0.0 www.ultraget.com
0.0.0.0 web-flv-player.com
0.0.0.0 www.web-flv-player.com
0.0.0.0	wedding-album-maker.com
0.0.0.0 www.wedding-album-maker.com
0.0.0.0 streamingaudiorecorder.co		
0.0.0.0 www.streamingaudiorecorder.co	
0.0.0.0 www.freedvdburners.com		
0.0.0.0 freedvdburners.com	
0.0.0.0 www.transferphotosfromipadtopc.com	
0.0.0.0 www.usbrecovery.org	
0.0.0.0 usbrecovery.org				
0.0.0.0 www.samsungdatarecovery.net		
0.0.0.0 samsungdatarecovery.net
0.0.0.0 howtotransferpicturesfromiphonetocomputer.com
0.0.0.0 www.howtotransferpicturesfromiphonetocomputer.com
0.0.0.0 www.howtoputmusiconiphonewithoutitunes.com
0.0.0.0 transferphotosfromipadtopc.com
0.0.0.0 howtotransferphotosfromiphonetocomputer.com
0.0.0.0 www.howtotransferphotosfromiphonetocomputer.com
0.0.0.0 howtoputmusiconiphonewithoutitunes.com
0.0.0.0 iphonetoiphone.net
0.0.0.0 recoverdeletednotesiphone.com
0.0.0.0 www.freeaudioeditors.com
0.0.0.0 freeaudioeditors.com
0.0.0.0 pdfkomprimieren.de
0.0.0.0 www.powercam.ws
0.0.0.0 powercam.ws
0.0.0.0 dvdhowtos.com
0.0.0.0 www.dvdhowtos.com
0.0.0.0 applemacvideo.com
0.0.0.0 www.applemacvideo.com
0.0.0.0 images.applemacvideo.com
0.0.0.0 www.acoolsoft.com
0.0.0.0 acoolsoft.com
0.0.0.0 protectdvd.com
0.0.0.0 www.protectdvd.com
0.0.0.0 software-couponcode.com
0.0.0.0 www.software-couponcode.com
0.0.0.0 quiz.sameshow.com

# Movavi
# ----------------------------------------------------------------------
0.0.0.0 files.movavi.com
0.0.0.0 img.movavi.com
0.0.0.0 mip2.movavi.com
0.0.0.0 links.movavi.com
0.0.0.0 movai.com
0.0.0.0 www.movai.com
0.0.0.0 cdn.movai.com


# Browser Extensions like Wontube & xydownloader (Used by Wondershare)
# ----------------------------------------------------------------------
# Browser Extensions Crap from Wondershare and iSkysoft
# Looking inside  Wondershare Video Converter for Mac
# You will find the following entries:
# http://192.168.10.48/WonderShare/Common/MacMediaLib/Trunk/Src/BrowserExtensions/
# ExtensionsCode/Wondershare%20AllMyTube/Wondershare/Firefox/chrome
# http://www.wontube.com/software/allmytube-plugin-mac/Aimersoft_chromeupdate.xml
# http://www.wontube.com/software/allmytube-plugin-mac/AimersoftForVC_chromeupdate.xml
# http://www.wontube.com/software/allmytube-plugin-mac/AllMyTube_chromeupdate.xml
# http://www.wontube.com/software/allmytube-plugin-mac/iskydeluxe_chromeupdate.xml
# http://www.wontube.com/software/allmytube-plugin-mac/iTube_chromeupdate.xml
# http://www.wontube.com/software/allmytube-plugin-mac/Ultimate_chromeupdate.xml
# http://www.wontube.com/software/allmytube-plugin-mac/xydownloader_chromeupdate.xml
# http://www.wontube.com/software/allmytube-plugin-mac/XYDownloader_chromeupdate.xml
# And as bonus:
# A super weird blog URL to a Japanese Sex Monger: http://yckart.com/


0.0.0.0 fvdsuite.com
0.0.0.0 fvd-player.com
0.0.0.0 fvd-converter.com
0.0.0.0 flashvideodownloader.org
0.0.0.0 www.flashvideodownloader.org
0.0.0.0 rp.tadanadanet1.com
0.0.0.0 tadanadanet1.com
0.0.0.0 tadanadanet.com
0.0.0.0 www.flash-video-soft.com
0.0.0.0 wontube.com
0.0.0.0 www.wontube.com 
0.0.0.0 download.wontube.com
0.0.0.0 xydownloader.com
0.0.0.0 www.xydownloader.com
0.0.0.0 www.xydownloader.com
0.0.0.0 download.xydownloader.com
0.0.0.0 www.break.com # -> Most likely to be a content provider of JS inserts
0.0.0.0 break.com # -> See above



# Search Result Spam
# ----------------------------------------------------------------------
# Sites that serves adware, malware and search result
# spam. Use a extension such as "Personal Blocklist (by Google)"
# or other solutions to get rid of the urls in this list.  
# ----------------------------------------------------------------------
## -> Using Personal Blocklist (by Google) for Chrome
# Copy and paste the entries below into a text editor.
# Do a search for "0.0.0.0" and replace results with 
# nothing (delete them). Copy the remaining results into the
# "Import" window in "Personal Blocklist (by Google)".
# --
# Example (use only the domain names!): 
# > software.informer.com
# > aneesoft-free-avi-video-converter.software.informer.com
# > super-video-converter.en.softonic.com
# > softonic.com
# > en.softonic.com
# ----------------------------------------------------------------------

0.0.0.0 software.informer.com
0.0.0.0 informer.com
0.0.0.0 softonic.com
0.0.0.0 www.informer.com
0.0.0.0 www.softonic.com
0.0.0.0 en.softonic.com
0.0.0.0 macdownload.informer.com
0.0.0.0 www.uptodown.com
0.0.0.0 uptodown.com
0.0.0.0 en.uptodown.com
0.0.0.0 www.soft32.com
0.0.0.0 soft32.com
0.0.0.0 aneesoft-free-avi-video-converter.software.informer.com
0.0.0.0 super-video-converter.en.softonic.com
0.0.0.0 aneesoft-free-youtube-downloader.software.informer.com
0.0.0.0 aneesoft-youtube-converter.software.informer.com
0.0.0.0 aneesoft-3d-flash-gallery.software.informer.com
0.0.0.0 aneesoft-dvd-creator.software.informer.com
0.0.0.0 aneesoft-video-converter-pro.software.informer.com
0.0.0.0 aneesoft-free-flv-video-converter.software.informer.com
0.0.0.0 iskysoft-video-converter-ultimate.software.informer.com
0.0.0.0 total-video-converter-mac-free.en.softonic.com
0.0.0.0 total-video-converter.en.softonic.com
0.0.0.0 total-video-converter-mac.en.softonic.com
0.0.0.0 bigasoft-total-video-converter-for-mac.en.softonic.com
0.0.0.0 bigasoft-total-video-converter.en.softonic.com
0.0.0.0 total-video-converter.en.uptodown.com
0.0.0.0 total-video-converter-lite-for-mac.soft32.com
0.0.0.0 mac-video-converter-review.toptenreviews.com
0.0.0.0 toptenreviews.com
0.0.0.0 www.toptenreviews.com
0.0.0.0 aiseesoft-mac-video-converter.en.softonic.com
0.0.0.0 total-video-downloader-for-mac.en.softonic.com
0.0.0.0 total-video-converter-mac.softonic.com
0.0.0.0 www.mac-videoconverter.com
0.0.0.0 mac-videoconverter.com
0.0.0.0 alternativeto.net
0.0.0.0 www.snowfoxsoft.com
0.0.0.0 snowfoxsoft.com
0.0.0.0 giveawayoftheday.com
0.0.0.0 www.giveawayoftheday.com
0.0.0.0 asandl.com
0.0.0.0 urlmetryka.pl
0.0.0.0 www.anedia.pl
0.0.0.0 anedia.pl
0.0.0.0 www.androidauthority.com
0.0.0.0 androidauthority.com
0.0.0.0 usercoupon.com
0.0.0.0 www.usercoupon.com
0.0.0.0 www.360couponcodes.com
0.0.0.0 360couponcodes.com
0.0.0.0 couponschloe.com
0.0.0.0 www.couponschloe.com
0.0.0.0 www.couponsock.com
0.0.0.0 couponsock.com
0.0.0.0 downloadcentral.dk
0.0.0.0 www.downloadcentral.dk
0.0.0.0 programmer.downloadcentral.dk
0.0.0.0 nefd.com
0.0.0.0 www.nefd.com
0.0.0.0 liveinternet.ru
0.0.0.0 www.liveinternet.ru
0.0.0.0 www.softsea.com
0.0.0.0 softsea.com
0.0.0.0 thinstallsoft.com
0.0.0.0 www.thinstallsoft.com
0.0.0.0 software-discount.tk
0.0.0.0 www.software-discount.tk
0.0.0.0 skacat.com
0.0.0.0 www.skacat.com
0.0.0.0 www.lakii.com
0.0.0.0 lakii.com
0.0.0.0 www.81fuenf.de
0.0.0.0 81fuenf.de
0.0.0.0 www.downloadcrew.com
0.0.0.0 downloadcrew.com
0.0.0.0 w3bin.com
0.0.0.0 www.w3bin.com
0.0.0.0 taiwanheart.ning.com
0.0.0.0 www.maikel8mobileandroide.com
0.0.0.0 maikel8mobileandroide.com
0.0.0.0 www.keycode.asia
0.0.0.0 keycode.asia
0.0.0.0 f1f1f.com
0.0.0.0 www.f1f1f.com
0.0.0.0 tricks-collections.com
0.0.0.0 stakeweb.com
0.0.0.0 ipad-review.ru
0.0.0.0 www.ipad-review.ru
0.0.0.0 download.cristianls.com
0.0.0.0 cristianls.com
0.0.0.0 titulsoft.com
0.0.0.0 www.titulsoft.com
0.0.0.0 tfile.co
0.0.0.0 www.tfile.co # .co not .com
0.0.0.0 giveaway.ht95.net
0.0.0.0 ht95.net
0.0.0.0 www.ht95.net
0.0.0.0 www.brothergiveaway.com
0.0.0.0 brothergiveaway.com
0.0.0.0 rsdown.cn
0.0.0.0 www.rsdown.cn
0.0.0.0 www.supershareware.com
0.0.0.0 supershareware.com
0.0.0.0 windows.podnova.com
0.0.0.0 podnova.com
0.0.0.0 www.gilsmethod.com
0.0.0.0 gilsmethod.com
0.0.0.0 mmaxwellassoc.com
0.0.0.0 www.mmaxwellassoc.com
0.0.0.0 sunshou0912.typepad.com
0.0.0.0 www.appolicious.com
0.0.0.0 appolicious.com
0.0.0.0 gamingthrill.weebly.com
0.0.0.0 rutracker.org
0.0.0.0 www.verycd.com
0.0.0.0 verycd.com
0.0.0.0 downloads.tomsguide.com
0.0.0.0 tomsguide.com
0.0.0.0 www.taringa.net
0.0.0.0 taringa.net
0.0.0.0 2-macuninstaller.com


# Misc Collected by Scanning hardcoded URLs inside the Apps
# ----------------------------------------------------------------------

0.0.0.0 fontframe.com # Serves adware
0.0.0.0 www.fontframe.com # Serves adware
0.0.0.0 www.divxity.com # Affilate
0.0.0.0 divxity.com # Affilate
0.0.0.0 www.loronix.com # Intelligence Solutions
0.0.0.0 loronix.com # Intelligence Solutions
0.0.0.0 video-converter.jp
0.0.0.0 www.video-converter.jp


# ----------------------------------------------------------------------
# Chinese IPs used in known attacks that targets Wondershare/Others
# Applications.  Disable if there is legit use.
# ----------------------------------------------------------------------
0.0.0.0 59.175.104.125
0.0.0.0 59.175.109.66
0.0.0.0 59.175.109.69
0.0.0.0 59.175.119.235
0.0.0.0 59.175.130.116
0.0.0.0 59.175.130.176
0.0.0.0 59.175.130.54
0.0.0.0 59.175.132.102
0.0.0.0 59.175.134.18
0.0.0.0 59.175.134.20
0.0.0.0 59.175.135.166
0.0.0.0 59.175.137.247
0.0.0.0 59.175.137.254
0.0.0.0 59.175.137.531
0.0.0.0 59.175.137.69
0.0.0.0 59.175.142.170
0.0.0.0 59.175.142.173
0.0.0.0 59.175.142.190
0.0.0.0 59.175.142.24
0.0.0.0 59.175.142.29
0.0.0.0 59.175.142.34
0.0.0.0 59.175.142.38
0.0.0.0 59.175.142.40
0.0.0.0 59.175.142.50
0.0.0.0 59.175.144.110
0.0.0.0 59.175.144.123
0.0.0.0 59.175.144.42
0.0.0.0 59.175.144.85
0.0.0.0 59.175.144.87
0.0.0.0 59.175.145.102
0.0.0.0 59.175.145.116
0.0.0.0 59.175.145.124
0.0.0.0 59.175.145.132
0.0.0.0 59.175.145.154
0.0.0.0 59.175.145.156
0.0.0.0 59.175.145.166
0.0.0.0 59.175.145.179
0.0.0.0 59.175.145.200
0.0.0.0 59.175.145.5
0.0.0.0 59.175.147.82
0.0.0.0 59.175.148.300
0.0.0.0 59.175.148.34
0.0.0.0 59.175.148.5
0.0.0.0 59.175.148.59
0.0.0.0 59.175.148.66
0.0.0.0 59.175.148.79
0.0.0.0 59.175.153.106
0.0.0.0 59.175.153.150
0.0.0.0 59.175.153.20
0.0.0.0 59.175.153.27
0.0.0.0 59.175.153.45
0.0.0.0 59.175.153.51
0.0.0.0 59.175.160.42
0.0.0.0 59.175.180.18
0.0.0.0 59.175.181.243
0.0.0.0 59.175.181.247
0.0.0.0 59.175.181.251
0.0.0.0 59.175.182.146
0.0.0.0 59.175.188.165
0.0.0.0 59.175.188.82
0.0.0.0 59.175.195.220
0.0.0.0 59.175.201.152
0.0.0.0 59.175.201.226
0.0.0.0 59.175.213.67
0.0.0.0 59.175.214.3
0.0.0.0 59.175.218.126
0.0.0.0 59.175.218.195
0.0.0.0 59.175.230.59
0.0.0.0 59.175.233.118
0.0.0.0 59.175.238.11
0.0.0.0 59.175.238.117
0.0.0.0 59.175.238.122
0.0.0.0 59.175.238.16
0.0.0.0 59.175.238.19
0.0.0.0 59.175.238.39
0.0.0.0 59.175.238.68
0.0.0.0 59.175.238.95
0.0.0.0 59.175.238.977
0.0.0.0 59.175.32.231
0.0.0.0 59.175.37.80
0.0.0.0 180.97.106.162
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment