diff --git a/CONTRIBUTORS b/CONTRIBUTORS
index 954d50d94..7f7e5995d 100644
--- a/CONTRIBUTORS
+++ b/CONTRIBUTORS
@@ -1,6 +1,6 @@
      601	Mich                          	block 3 misspelled ppolkastarter scams (#2936)
      575	Frank                         	Update all.json (#3166)
-     550	Tim Janssen                   	Update all.json (#3163)
+     551	Tim Janssen                   	Update all.json (#3167)
      518	Jaco                          	Add r2.dev to allow (Cloudflare bucket) (#3155)
      417	mhusnirizal                   	update all.json (#3160)
       96	michalisFr                    	Added 0 new domains (#2338)
diff --git a/all.json b/all.json
index 2cc08381d..e9d39b754 100644
--- a/all.json
+++ b/all.json
@@ -30,8 +30,6 @@
 	],
 	"deny": [
 		"07e96d43-381a-46a3-9c16-6daf97213efc.co",
-		"winner-crypto.top",
-		"tocx.net",
 		"0vvwvuniswap.top",
 		"0vvwwuniswap.top",
 		"0vwwuniswap.top",
@@ -14085,6 +14083,7 @@
 		"tmiiigratev1tov2.xyz",
 		"tnrustwallet.com",
 		"to-web.site",
+		"tocx.net",
 		"toen.im",
 		"tofunft-home.web.app",
 		"tojen.im",
@@ -17333,6 +17332,7 @@
 		"wilnetly.com",
 		"windeckcolecttion.xyz",
 		"winklebit.net",
+		"winner-crypto.top",
 		"winnerinvestgroup.com",
 		"winsen.network",
 		"winsureconnect.com",
diff --git a/all/net/all.json b/all/net/all.json
index 809a4af0d..7807cbea1 100644
--- a/all/net/all.json
+++ b/all/net/all.json
@@ -768,6 +768,7 @@
 	"thenear.net",
 	"thewalletconnects.net",
 	"theyolkfrat.net",
+	"tocx.net",
 	"token-support.net",
 	"tokencertification.net",
 	"tokendapprotocol.net",
diff --git a/all/top/all.json b/all/top/all.json
index 7ff0ddbba..43b779414 100644
--- a/all/top/all.json
+++ b/all/top/all.json
@@ -96,5 +96,6 @@
 	"walletsolution.top",
 	"walletsupport24.top",
 	"webguru.top",
+	"winner-crypto.top",
 	"wxlivec.top"
 ]
diff --git a/meta/2023-03.json b/meta/2023-03.json
index 830301fce..5adb7d77f 100644
--- a/meta/2023-03.json
+++ b/meta/2023-03.json
@@ -1,4 +1,12 @@
 [
+	{
+		"date": "2023-03-22",
+		"url": "tocx.net"
+	},
+	{
+		"date": "2023-03-22",
+		"url": "winner-crypto.top"
+	},
 	{
 		"date": "2023-03-21",
 		"url": "247mainnetfix.xyz"
diff --git a/package.json b/package.json
index e0a66c189..8318dd6fd 100644
--- a/package.json
+++ b/package.json
@@ -14,9 +14,9 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "0.20.4-14-x",
+  "version": "0.20.4-15-x",
   "versions": {
-    "git": "0.20.4-14-x",
+    "git": "0.20.4-15-x",
     "npm": "0.20.3"
   },
   "workspaces": [
diff --git a/packages/phishing/package.json b/packages/phishing/package.json
index 395591a3a..ecd809912 100644
--- a/packages/phishing/package.json
+++ b/packages/phishing/package.json
@@ -18,7 +18,7 @@
     "./detectPackage.cjs"
   ],
   "type": "module",
-  "version": "0.20.4-14-x",
+  "version": "0.20.4-15-x",
   "main": "index.js",
   "dependencies": {
     "@polkadot/util": "^11.1.1",
diff --git a/packages/phishing/src/packageInfo.ts b/packages/phishing/src/packageInfo.ts
index 8a2e21f6d..e72e626ba 100644
--- a/packages/phishing/src/packageInfo.ts
+++ b/packages/phishing/src/packageInfo.ts
@@ -3,4 +3,4 @@
 
 // Do not edit, auto-generated by @polkadot/dev
 
-export const packageInfo = { name: '@polkadot/phishing', path: 'auto', type: 'auto', version: '0.20.4-14-x' };
+export const packageInfo = { name: '@polkadot/phishing', path: 'auto', type: 'auto', version: '0.20.4-15-x' };