forked from iam-py-test/my_filters_001
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathantimalware.txt
15297 lines (13980 loc) · 488 KB
/
antimalware.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
[Adblock Plus 2.0]
! Title: The malicious website blocklist
! Homepage: https://github.com/iam-py-test/my_filters_001
! Expires: 1 day
! Last updated: 2024-8-16
! Version: 2024816.3
! Description: This list aims to protect against scams, phishing, malware, some stalkerware, and potentially unwanted programs (PUPs). It includes a version of vxvault.net's list, modified by me to work in adblockers.
! Special thanks to all of the people who have helped me maintain this list! Check out https://github.com/iam-py-test/my_filters_001/blob/main/CONTRIBUTORS.md
! Issues url: https://github.com/iam-py-test/my_filters_001/issues
! GitLab issues url (not checked as often): https://gitlab.com/iam-py-test/my_filters_001/-/issues
! Note: This list includes a version of VXVault.net's malware distribution url list, formatted for adblockers, which is at https://github.com/iam-py-test/vxvault_filter
! ---- Malware and Phishing ----
! A Facebook phishing website
! https://www.siteadvisor.com/sitereport.html?url=xn--faebook-64a.com
! https://www.fortiguard.com/webfilter?q=xn--faebook-64a.com
! https://virustotal.com/gui/domain/xn--faebook-64a.com/detection
! https://safeweb.norton.com/report/show?url=xn--faebook-64a.com
||xn--faebook-64a.com^$document
! https://www.joesandbox.com/analysis/422872/0/html
! https://www.siteadvisor.com/sitereport.html?url=strawberry6532210.brizy.site
! https://virustotal.com/gui/url/ac7399fe8dda64a75a77ffc107219fcd90dc9bf2af6bc0893bef5d63b348dfe2/detection
! https://virustotal.com/gui/domain/strawberry6532210.brizy.site/detection
! https://transparencyreport.google.com/safe-browsing/search?url=strawberry6532210.brizy.site
! https://www.urlvoid.com/scan/strawberry6532210.brizy.site/
! https://www.fortiguard.com/webfilter?q=strawberry6532210.brizy.site
! https://sitecheck.sucuri.net/results/strawberry6532210.brizy.site
! https://quttera.com/detailed_report/strawberry6532210.brizy.site
! https://www.google.com/s2/favicons?domain=strawberry6532210.brizy.site
||strawberry6532210.brizy.site^$all
! https://quttera.com/detailed_report/strawberry6532210.brizy.site
! https://www.siteadvisor.com/sitereport.html?url=starlangbank.com
! https://transparencyreport.google.com/safe-browsing/search?url=starlangbank.com
! https://quttera.com/detailed_report/starlangbank.com
! https://www.fortiguard.com/webfilter?q=starlangbank.com
! https://virustotal.com/gui/domain/starlangbank.com/detection
||starlangbank.com^$all
! https://www.joesandbox.com/analysis/424179/0/html
! https://virustotal.com/gui/url/7182b03efde39bf8355a8c9e3ab40e9918a799863b51ead503e212c6b56fcbae/detection
! https://virustotal.com/gui/domain/aloha-news.net/detection
! https://www.siteadvisor.com/sitereport.html?url=http%3A%2F%2Faloha-news.net
! https://safeweb.norton.com/report/show?url=http%3A%2F%2Faloha-news.net
! https://sitecheck.sucuri.net/results/aloha-news.net
! https://www.urlvoid.com/scan/aloha-news.net/
! https://www.fortiguard.com/webfilter?q=aloha-news.net
||aloha-news.net^$all
! https://cyberwarzone.com/whatsapp-phishing/
! https://www.fortiguard.com/webfilter?q=cht-whatsappz.zzux.com
! https://www.fortiguard.com/webfilter?q=zzux.com
! https://www.mywot.com/en/scorecard/zzux.com
! https://www.urlvoid.com/scan/zzux.com/
! https://sitecheck.sucuri.net/results/zzux.com
! https://transparencyreport.google.com/safe-browsing/search?url=zzux.com
! https://safeweb.norton.com/report/show?url=zzux.com
! https://virustotal.com/gui/url/993fb0a37ec2e4b3503bac3b38066dabd040f43a3f47ca99c6839df9bf5dd018/detection
! https://safeweb.norton.com/report/show?url=cht-whatsappz.zzux.com
! https://virustotal.com/gui/url/f89e84af4a187e413fd85b2cc7b604ef1b0b5b3e94c18f039ba1539d593eb898/detection
||cht-whatsappz.zzux.com^$all
! https://github.com/uBlockOrigin/uAssets/issues/8466
! https://virustotal.com/gui/ip-address/91.241.60.117/relations
! https://virustotal.com/gui/url/08e979bb4cde20ad8b711920f0fa604de67911559013f0fc60560990fbbad239/detection
! https://www.siteadvisor.com/sitereport.html?url=91.241.60.117
||91.241.60.117^$all
! https://www.reddit.com/r/mildlyinfuriating/comments/nc9zpe/got_a_paypal_or_should_i_say_paypl_phishing_email/
! https://virustotal.com/gui/url/c0e5466cd2843f75d522093d93cf949259ca618ca2f00aa4952e7700cbf59384/detection
||paypl.com^$all
! https://virustotal.com/gui/url/4531df5b01e2c58f9307fabecc9a17b03c6157bafc8e9af736b278e95c182dc5/community
||payapl.com^$all
! https://virustotal.com/gui/url/91aecb78868044183cbe47614fb43a7e5aecd4b4ae89294a215354bdda2c3602/detection
! https://www.fortiguard.com/webfilter?q=paypaI.com
! https://www.mywot.com/en/scorecard/paypaI.com
! https://safeweb.norton.com/report/show?url=paypaI.com
||paypaI.com^$all
! Used to infect and redirect domains
! https://labs.sucuri.net/signatures/sitecheck/malware-rks_injection/
! https://blog.sucuri.net/2011/01/malware-update-co-cc.html
! https://www.fortiguard.com/webfilter?q=http%3A%2F%2Fgoogle-analytisc.co.cc&version=8
! https://safeweb.norton.com/report/show?url=http%3A%2F%2Fgoogle-analytisc.co.cc
! https://virustotal.com/gui/url/6cc9c5dbd531e82102590df163142db0c248de81b831372a35fb281d90a6c768/detection
! https://www.urlvoid.com/scan/google-analytisc.co.cc/
! https://www.mywot.com/en/scorecard/google-analytisc.co.cc
! https://sitecheck.sucuri.net/results/google-analytisc.co.cc
! Appears offline but per https://github.com/uBlock-LLC/uBlock/issues/1839#issuecomment-852183358 adding anyway
||google-analytisc.co.cc^$all
! https://virustotal.com/gui/url/b3565bedd215978dc3f0e60c82e20f600f4b404343d8a4c89dd336986c941c65/community
! https://www.fortiguard.com/webfilter?q=http%3A%2F%2Foiwdd.co.cc&version=8
! https://safeweb.norton.com/report/show?url=http://oiwdd.co.cc
! https://virustotal.com/gui/url/b0ccfa7eaf148df692177674f5aafeb27792399f4b03d1a75951533f6b7e7e52/detection
! https://www.urlvoid.com/scan/oiwdd.co.cc/
! https://www.mywot.com/scorecard/oiwdd.co.cc
||oiwdd.co.cc^$all
! https://www.fortiguard.com/webfilter?q=http%3A%2F%2Fpojdue.co.cc&version=8
! https://virustotal.com/gui/url/2ba73f2605b7dff79153f65cf94aee57f68e476c92234d0b4d46e29d8c4eaa12/detection
! https://virustotal.com/gui/domain/pojdue.co.cc/detection
! https://www.urlvoid.com/scan/pojdue.co.cc/
! https://www.mywot.com/scorecard/pojdue.co.cc
||pojdue.co.cc^$all
! https://labs.sucuri.net/signatures/sitecheck/malware-magento_shoplift-38-1/
! https://virustotal.com/gui/domain/mcloudjs.com/detection
! https://virustotal.com/gui/url/01a9b775e89304d7ebce8e7e5822d730b043868e09994a17786da0a71ec49691/community
! https://www.siteadvisor.com/sitereport.html?url=mcloudjs.com
! https://www.fortiguard.com/webfilter?q=mcloudjs.com
! https://www.urlvoid.com/scan/mcloudjs.com/
! https://safeweb.norton.com/report/show?url=mcloudjs.com
! https://sitecheck.sucuri.net/results/mcloudjs.com
! https://labs.sucuri.net/blacklist/info/?domain=mcloudjs.com
! https://transparencyreport.google.com/safe-browsing/search?url=mcloudjs.com
||mcloudjs.com^$all
! https://labs.sucuri.net/signatures/sitecheck/malware-redkit/
! https://virustotal.com/gui/url/26a7a5909ca372bc57d68df966fc03b887451a7cf8ae58c5cea92639b4ce2594/detection
! https://virustotal.com/gui/url/78eca70299b830e87ed8f6b3d276e231f2147d5c2817a3586b1ceb5310ea89fa/detection
! https://virustotal.com/gui/domain/wherewedev.com/detection
! https://www.fortiguard.com/webfilter?q=wherewedev.com
! https://www.urlvoid.com/scan/wherewedev.com/
! https://www.mywot.com/en/scorecard/wherewedev.com
! https://safeweb.norton.com/report/show?url=wherewedev.com
! https://sitecheck.sucuri.net/results/wherewedev.com
||wherewedev.com^$all
! https://virustotal.com/gui/url/a9e68e1b4cdd0e2f58dadf4cd5a93a9983a79b600f1423f86cc5f68b0fec729f/detection
! https://www.fortiguard.com/webfilter?q=infinitypr.in
! https://sitecheck.sucuri.net/results/infinitypr.in
||infinitypr.in^$third-party
! https://virustotal.com/gui/url/86e9efc17750d2885c940cf6ff08820aee1bf35f23fc0faac71a05467b13c0e3/detection
! https://www.fortiguard.com/webfilter?q=integra-lernwerkstatt.de
! https://www.mywot.com/en/scorecard/integra-lernwerkstatt.de
! https://safeweb.norton.com/report/show?url=integra-lernwerkstatt.de
! https://sitecheck.sucuri.net/results/integra-lernwerkstatt.de
! https://labs.sucuri.net/blacklist/info/?domain=integra-lernwerkstatt.de
! https://labs.sucuri.net/blacklist/details/?domain=integra-lernwerkstatt.de
||integra-lernwerkstatt.de^$all
! https://virustotal.com/gui/file/5e6c167fc70aee2438f92ac0391dcba5905d989a20134dbb4bc9c3c40f805e74/relations
! https://virustotal.com/gui/url/a0fba2a31b88b8e1d6607971bd05440ee43702327e19d93ba91c705f7189c533/detection
! https://virustotal.com/gui/domain/kjwre77638dfqwieuoi.info/detection
! https://virustotal.com/gui/url/7d1b788cd3afd004b36421ad288b17ca4f2c5ad8e37363022b4f8573c7b77e03/detection
||kjwre77638dfqwieuoi.info^$all
! https://virustotal.com/gui/domain/kukutrustnet777.info/detection
||kukutrustnet777.info^$all
! https://virustotal.com/gui/url/38e39cdaa4d595968e55e4bcaa45818c887257e81ae6020bf2cb77c34a2e55be/detection
! https://www.fortiguard.com/webfilter?q=moch.forweb.pl
! https://safeweb.norton.com/report/show?url=moch.forweb.pl
||moch.forweb.pl^$document
! https://www.joesandbox.com/analysis/431924/0/html#domains
! https://virustotal.com/gui/url/254b1fd9f7536ece07cf5a3747aa2adeccc76e61b1f4e5994c0dc683d0a6db03/detection
! https://virustotal.com/gui/url/be44f0113500882e27eb730cfdad7687fe75ad56c8e9d9b2426273a0eb13e201/detection
! https://www.siteadvisor.com/sitereport.html?url=alphastand.win
! https://www.fortiguard.com/webfilter?q=alphastand.win
! https://safeweb.norton.com/report/show?url=alphastand.win
! https://sitecheck.sucuri.net/results/alphastand.win
! https://quttera.com/detailed_report/alphastand.win
||alphastand.win^$all
! https://www.siteadvisor.com/sitereport.html?url=alphastand.trade
! https://www.fortiguard.com/webfilter?q=alphastand.trade
! https://safeweb.norton.com/report/show?url=alphastand.trade
! https://sitecheck.sucuri.net/results/alphastand.trade
! https://virustotal.com/gui/domain/alphastand.trade/detection
||alphastand.trade^$all
! https://www.joesandbox.com/analysis/413824/0/html#domains
! https://virustotal.com/gui/url/9c1f4fd3af06c7eff8fa0c96c0386acdea17225b7202b87044a5e7895d80f694/detection
! https://virustotal.com/gui/domain/saywowshow.com/detection
! https://safeweb.norton.com/report/show?url=saywowshow.com
||saywowshow.com^$all
! https://forum.mywot.com/reputation-discussions-f5/ridiculous-eth-bitcoin-giveaways-or-instant-invest-t86210.html
||btc-promo.czweb.org^$all
||eth24win.co.nf^$all
||giveaway-eth-btc.webz.cz^$all
! https://www.bleepingcomputer.com/news/security/phishing-impersonates-global-recruitment-firm-to-push-malware/
! https://twitter.com/InQuest/status/1385324245891182592
! https://virustotal.com/gui/url/81913a8a7fa758d7476a13ff03395f31f665addf973adf253c5123fbb8a4caf4/detection
! https://virustotal.com/gui/url/cd77c6e39b0ca34cb7bd0106e769f2a4a019b05f96d608582f4ad7693b604f6a/detection
! https://safeweb.norton.com/report/show?url=powerhousetoys.com
! https://www.siteadvisor.com/sitereport.html?url=https://powerhousetoys.com/opp.txt
||powerhousetoys.com^$all
! https://virustotal.com/gui/url/3961877189248724c33e9d6b0e590b9e11607d27de88cd7f130487719c2e8efd/detection
! https://www.fortiguard.com/webfilter?q=crypto-loot.com
! https://www.mywot.com/en/scorecard/crypto-loot.com
! https://safeweb.norton.com/report/show?url=crypto-loot.com
! https://quttera.com/detailed_report/crypto-loot.com
! https://sitecheck.sucuri.net/results/crypto-loot.com
||crypto-loot.com^$all
! https://www.fortiguard.com/webfilter?q=crypto-loot.org
! https://virustotal.com/gui/url/bed5db125302663b090d4dcf170873a5ff60bbe44d72e451801497751e5a78df/detection
! https://safeweb.norton.com/report/show?url=crypto-loot.org
! https://sitecheck.sucuri.net/results/crypto-loot.org
||crypto-loot.org^$all
! https://github.com/webcompat/web-bugs/issues/74703
! https://www.siteadvisor.com/sitereport.html?url=mysecrethoookup.com
! https://www.fortiguard.com/webfilter?q=mysecrethoookup.com&version=8
! https://virustotal.com/gui/url/ad652f0b682616bb75b6ab31ed6be38fddf4c46b2d2405ea738bbee1a80e85c7/detection
! https://safeweb.norton.com/report/show?url=mysecrethoookup.com
! https://sitecheck.sucuri.net/results/mysecrethoookup.com
||mysecrethoookup.com^$all
! https://virustotal.com/gui/ip-address/104.236.14.145/relations
! https://www.mywot.com/en/scorecard/blogsopt.com
! https://virustotal.com/gui/url/6d9e9d347f3578fe8fea973820a40a0ab760165e613af323b4a025dee339c73e/detection
||blogsopt.com^$document
! https://www.urlvoid.com/ip/103.224.212.247/
! https://www.urlvoid.com/scan/dacenete.com/
! https://www.mywot.com/en/scorecard/dacenete.com
! https://virustotal.com/gui/url/1edf1ec0e4f299ec94a3c4cdfc882795a0a0e77031c866f595e8354120bee802/community
! https://www.siteadvisor.com/sitereport.html?url=Dacenete.com
! https://www.fortiguard.com/webfilter?q=Dacenete.com
! https://safeweb.norton.com/report/show?url=Dacenete.com
! https://yandex.com/safety/?l10n=en&url=dacenete.com
! https://sitecheck.sucuri.net/results/Dacenete.com
||dacenete.com^$all
! https://www.siteadvisor.com/sitereport.html?url=Coolstats1.net
! https://www.urlvoid.com/scan/coolstats1.net/
! https://www.fortiguard.com/webfilter?q=Coolstats1.net
! https://www.mywot.com/en/scorecard/Coolstats1.net
! https://virustotal.com/gui/url/44e1091f194808820ef787750737232f95e7e9ecb17d1605246715645573158e/detection
! https://sitecheck.sucuri.net/results/Coolstats1.net
||coolstats1.net^$all
! https://www.siteadvisor.com/sitereport.html?url=http://ww38.coolstats1.net/?subid1=20210616-0828-13e0-974a-e3edd89fe7ec
! https://virustotal.com/gui/url/4b2c524cd265adaccc0bb0a4ec10f84cbb13f1920a9138f12cc7d87c65c5ca63/detection
||ww38.coolstats1.net^$all
! https://www.pcrisk.com/removal-guides/15423-adf-ly-ads
! https://virustotal.com/gui/url/f984d9289494b526bbac5cb57fc5b9edae210a3f980f3d784f6d1fbb80c0bcb5/detection
! https://virustotal.com/gui/url/300f1d4d3cf0782f029aec0af02817906ecc57d30a61e78b2c01c8e8b693f5d7/detection
! https://safeweb.norton.com/report/show?url=eyourcom.fun
! https://www.fortiguard.com/webfilter?q=eyourcom.fun
||eyourcom.fun^$all
||xcrke.eyourcom.fun^$all
! https://virustotal.com/gui/url/8d91b224b62e8002ab9bfa5314717fc61a2cd2c74e228f26093decdd070bfb0a/detection
! https://safeweb.norton.com/report/show?url=blastnotificationx.com
||blastnotificationx.com^$document
! https://virustotal.com/gui/url/f645599a31b833dcebbfec890361e28a5fb14ba86e6f730d74688d11cfe7f52f/details
! https://www.joesandbox.com/analysis/436433/0/html#deviceScreen
! https://www.mywot.com/scorecard/googe.com
! https://safeweb.norton.com/reviews?url=googe.com
||googe.com^$all
! https://virustotal.com/gui/url/9a34eeed10b62d3aa3698efc8a128e6e87f937982bbcd3d03e50a8ab53b27da9/community
! https://www.mywot.com/scorecard/proasdf.com
! https://safeweb.norton.com/report/show_mobile?name=proasdf.com
||proasdf.com^$document
! https://forum.mywot.com/24626-whatsmyipaddress-com
! https://virustotal.com/gui/url/c8bc45a00aeb7be3ccc68a0cf17e4a6175db761393dee57de32a49338b77ca45/detection
! https://www.fortiguard.com/webfilter?q=appple.com&version=8
||appple.com^$all
||ww1.appple.com^$all
! https://blog.sucuri.net/2021/05/woocommerce-credit-card-skimmer.html
! https://blog.sucuri.net/2018/04/malicious-activities-google-tag-manager.html
! https://blog.sucuri.net/2017/09/hacked-websites-mine-crypocurrencies.html
! https://virustotal.com/gui/ip-address/34.98.99.30/community
! https://pastebin.com/FzHDkSW7
! https://www.fortiguard.com/webfilter?q=albumzips.xyz
! https://safeweb.norton.com/report/show?url=albumzips.xyz
! https://sitecheck.sucuri.net/results/albumzips.xyz
! https://virustotal.com/gui/url/cd2a97abe31697bf1822c505ee9ad267772463230a943fe3fb680af2ba74b327/detection
||ww16.albumzips.xyz^$all
! https://sitecheck.sucuri.net/results/camillesanz.com
! https://safeweb.norton.com/report/show?url=camillesanz.com
! https://virustotal.com/gui/url/f542034f339f53a70bbb0c40a662d49cc37806bc112ef403bac8b4a5d1c02b03/detection
||camillesanz.com^$all
||www.camillesanz.com^$all
! https://labs.sucuri.net/blacklist/details/?domain=africangrey.top
! https://virustotal.com/gui/url/d3feabeb546851be8e449074eaddf2c72e687b92754693aba97f3ae27772a796/detection
! https://virustotal.com/gui/url/917d555cce2e2e6791704d64812cbb203c57201bac559478c334c74c8e392330/detection
! https://www.siteadvisor.com/sitereport.html?url=ribinski.us
! https://safeweb.norton.com/report/show?url=ribinski.us
! https://sitecheck.sucuri.net/results/ribinski.us
! https://labs.sucuri.net/blacklist/info/?domain=ribinski.us
||ribinski.us^$all
! https://twitter.com/gorhill/status/1293239879887970305
! - via https://github.com/NanoAdblocker/NanoCore/issues/362#issuecomment-704235803
! https://virustotal.com/gui/url/085d0bd9451920bd97eb099fb14e42b8ceccadf79cdf70da0d29e31900262ce1/detection
! https://www.siteadvisor.com/sitereport.html?url=fly-analytics.com
! https://www.fortiguard.com/webfilter?q=fly-analytics.com
! https://safeweb.norton.com/report/show?url=fly-analytics.com
! https://sitecheck.sucuri.net/results/fly-analytics.com
||fly-analytics.com^$all
! https://virustotal.com/gui/user/Placebo
! https://virustotal.com/gui/file/3ff26dfe049d6ea2d608eaf0914e527a798ae018e3918b9d1f025ca47700cb6f/community
! https://virustotal.com/gui/domain/thoughtplus.in/community
! https://virustotal.com/gui/url/626f2608d12b9bddc0ac5148b653290b192b45a79db85c7243b04f5374cd3e67/detection
! https://www.siteadvisor.com/sitereport.html?url=thoughtplus.in
! https://www.fortiguard.com/webfilter?q=thoughtplus.in
! https://safeweb.norton.com/report/show?url=thoughtplus.in
! https://sitecheck.sucuri.net/results/thoughtplus.in
! https://transparencyreport.google.com/safe-browsing/search?url=thoughtplus.in
||thoughtplus.in^$all
! https://www.bleepingcomputer.com/virus-removal/remove-toksearches.xyz-search-redirect
! https://virustotal.com/gui/url/f6e174e4f27f27f27b5f8c3516fcdbea555d9128d50d6e20f6ca2ca8fbf0d37f/detection
! https://www.fortiguard.com/webfilter?q=toksearches.xyz
||toksearches.xyz^$all
! https://www.bleepingcomputer.com/virus-removal/remove-smashappsearch.com-search-redirect
! https://www.bleepingcomputer.com/virus-removal/remove-smashapps.net-search-redirect
! https://www.bleepingcomputer.com/virus-removal/remove-bipapp-chrome-extension
||smashapps.net^$document
||smashappsearch.com^$document
! https://www.bleepingcomputer.com/virus-removal/remove-please-allow-to-watch-the-video
! https://virustotal.com/gui/url/ef88006f1f5beab8ded6b8786870209c1651db831c19e4f49e5ef829c267cac1/detection
! https://www.siteadvisor.com/sitereport.html?url=new-message.live
! https://www.fortiguard.com/webfilter?q=new-message.live
! https://safeweb.norton.com/report/show?url=new-message.live
! https://sitecheck.sucuri.net/results/new-message.live
||new-message.live^$all
! https://virustotal.com/gui/url/098cc8fed90c43af3a4afb4df0d7da9c68b1b2c8a3c73fb9d4506c7f062547f1/detection
! https://virustotal.com/gui/ip-address/95.168.170.165/relations
! https://virustotal.com/gui/url/6a23b2b07941322f9ad5555d97bfd020c2681264d71b5ed6c621f0a6cad6277c/detection
! https://www.fortiguard.com/webfilter?q=private-message.live
! https://safeweb.norton.com/report/show?url=private-message.live
! https://www.mywot.com/scorecard/private-message.live
||private-message.live^$document
! https://blog.malwarebytes.com/a-week-in-security/2021/06/a-week-in-security-june-21-2021-june-27-2021/
! https://virustotal.com/gui/url/d668d18f1cd3b32eea6d717af4655a7e511d5b92403ed71a66d366a4c971c826/detection
! https://therecord.media/dirtymoe-malware-has-infected-more-than-100000-windows-systems/
! https://decoded.avast.io/martinchlumecky/dirtymoe-1/
! https://www.siteadvisor.com/sitereport.html?url=1qw.us
! https://www.fortiguard.com/webfilter?q=1qw.us
! https://safeweb.norton.com/report/show?url=1qw.us
! https://virustotal.com/gui/url/8e4d54adb8cc9b6fe443f17da6b29ef8e367ca1dacae6ac2cf9b2cc665268bde/detection
||1qw.us^$all
! https://www.siteadvisor.com/sitereport.html?url=rpc.1qw.us
! https://www.fortiguard.com/webfilter?q=rpc.1qw.us
! https://safeweb.norton.com/report/show?url=rpc.1qw.us
! https://virustotal.com/gui/domain/rpc.1qw.us/relations
! https://virustotal.com/gui/url/f21b269b690aac8338399bb40408aa8cefa3591dcc9a3f84f5a911f647c8d2f7/detection
||rpc.1qw.us^$all
! https://www.proofpoint.com/us/blog/threat-insight/purple-fox-ek-adds-exploits-cve-2020-0674-and-cve-2019-1458-its-arsenal
! https://virustotal.com/gui/url/5769102f270c1b16ebdc663ad63010d69de2d159117b3736d562dc59944fc6dc/detection
! https://virustotal.com/gui/url/35e34ac62d1ac12fe3146a8a2d6d60300f7a1b97e2922fedb91154243e950cb1/detection
! https://virustotal.com/gui/url/e88a950b22a8582a4761c8b6a26546cd7e92b3175c16bd32d1dd8f61f45a1c58/detection
! https://virustotal.com/gui/url/2bb2d79e789ba930b36960a8a0fbb008ed5cb594406e89507033832da2668870/detection
! https://virustotal.com/gui/url/326384fb6f6e393f8fde813c9cf2be668b68780c0a036d977fc6482fd6364ca1/detection
! ||raw.githack.xyz/SdTC8df7vmDNIUuV1.jpg$all
! https://www.siteadvisor.com/sitereport.html?url=raw.githack.xyz
! https://www.fortiguard.com/webfilter?q=raw.githack.xyz
! https://safeweb.norton.com/report/show?url=raw.githack.xyz
||raw.githack.xyz^$all
! https://virustotal.com/gui/user/Site.safetychecker
! https://virustotal.com/gui/url/7108cfe6953cab08696ae1f9ab2c777b749fb53e7beb5c003756ea522c880f17/detection
||yotube.com^$all
! https://redirectdetective.com
! https://virustotal.com/gui/url/82e7188109152e27f51a97c1bcb935a1cc302736ed20a41ababa6d9239c7f85d/community
! https://safeweb.norton.com/report/show?url=gloos-ves.com
||gloos-ves.com^$all
! https://virustotal.com/gui/ip-address/54.174.112.67/relations
! https://virustotal.com/gui/url/85e357a917a886c9b2791d0c08199c95cd8a50ad003340a8140c04347777ee74/detection
! https://www.fortiguard.com/webfilter?q=zeroredirect1.com
! https://www.mywot.com/en/scorecard/zeroredirect1.com
! https://safeweb.norton.com/reviews?url=zeroredirect1.com
||zeroredirect1.com^$all
! https://www.bleepingcomputer.com/virus-removal/remove-power-app-chrome-extension
! https://virustotal.com/gui/url/6dd9e3edd772497d3db7f61fa0cbd6b81b888dc1e01f95c693edfb3e696b702e/detection
! https://www.fortiguard.com/webfilter?q=searchpowerapp.com
! https://safeweb.norton.com/report/show?url=searchpowerapp.com
||searchpowerapp.com^$document
! https://virustotal.com/gui/url/4cb33835d45743431d20b4c019e09dd1861953440572bf40dd4b2745cb391082/detection
! https://www.fortiguard.com/webfilter?q=lp.searchdimension.com
! https://safeweb.norton.com/report/show?url=lp.searchdimension.com
! https://www.mywot.com/en/scorecard/lp.searchdimension.com
||lp.searchdimension.com^$all
! https://virustotal.com/gui/url/ac7e2f7f5557d6cac58a5250eedb78e5a647b5be6814d595df6b84bf9687e934/detection
! https://www.fortiguard.com/webfilter?q=searchdimension.com
! https://www.mywot.com/en/scorecard/searchdimension.com
! https://safeweb.norton.com/report/show?url=searchdimension.com
||searchdimension.com^$document
! https://blog.malwarebytes.com/exploits-and-vulnerabilities/2020/04/copycat-criminals-abuse-malwarebytes-brand-in-malvertising-campaign/
! https://virustotal.com/gui/url/8faba8050b38887c13c044743c789d9a8e1795098b2c20250bfae80f5d1d2a4f/detection
! https://www.fortiguard.com/webfilter?q=malwarebytes-free.com
! https://safeweb.norton.com/report/show?url=malwarebytes-free.com
||malwarebytes-free.com^$all
! https://forums.malwarebytes.com/topic/276364-please-help-to-remove-jingermycom/
! https://virustotal.com/gui/url/5538837550b6bf93ad0fd8be30a9061d43b8f2097dcdfb6a7d959eaebf6b92f1/detection
! https://www.fortiguard.com/webfilter?q=jingermy.com
! https://safeweb.norton.com/report/show?url=jingermy.com
||jingermy.com^$all
! https://thehackernews.com/2021/07/hackers-spread-biopass-malware-via.html
! https://virustotal.com/gui/url/97b4ed1e2788217aa186f26dbdd13a36544dde101e53ea3382e6a5aa1b9f4081/detection
! https://virustotal.com/gui/ip-address/47.57.140.149/relations
! https://virustotal.com/gui/url/0025d5ba5569ba2ecc29c39236a9b559a212e3ac7404b9af7be62e143175cf5f/detection
! https://virustotal.com/gui/url/94a7b6d048720fe4e837d6027f5019c775d20e5ea761ad03236f85070f08838a/detection
! https://virustotal.com/gui/url/ade8073339365eed03d142d5e57ec528d54294c40fdac08e71d5363d3ba634d0/detection
||update.flash-installer.com^$all
! https://virustotal.com/gui/url/98962a3086cc694e1d62667a718edd6738b233b2b348b1197c141a8ecb251336/detection
||flash-installer.com^$all
! https://virustotal.com/gui/file/4bf58623f91ff9a19c2893061a2a14660f61b2294f976a9d80ab6b3d023c9892/relations
! https://virustotal.com/gui/url/a21f89ebf6c4835a504a92359d23be518b80b9b7bd5417541087d60751d41694/detection
||paymetconfirm.com^$all
! Tech support scammers
! https://www.youtube.com/watch?v=Ooh6bV8FwTo
! https://virustotal.com/gui/url/02071a7a5b71526d41e0f4547b4912368ee6a0920e7d7aaade16fd3f5ca01a87/detection
! https://safeweb.norton.com/report/show?url=systemini-com.tk
||systemini-com.tk^$all
! https://virustotal.com/gui/url/fb85efbc7bf81b10869ddaddd9b3b9471a916b9f8d820d2ccee48712c3e58b9e/detection
! https://www.siteadvisor.com/sitereport.html?url=micropcsupport.com
||micropcsupport.com^$all
! Browser locker
! https://virustotal.com/gui/url/44f957f9350dfc3d9b8ccac23074301c3c20278a787af25a28edd8e15eacb7e1/detection
! https://github.com/DandelionSprout/adfilt/issues/228
||helooworld.us^$all
! Which redirects to
||www.helooworld.us^$all
! https://virustotal.com/gui/file/081618f7d9c6c92271f8d6bc65c8e13f33dfe9e5022f06aaec95664ee31fead4/relations
! https://virustotal.com/gui/url/efc1177d474e3efe2e9e53fcfbb012c9ae86f64467e38824f6d974d5504647f0/detection
||properlysolutionsco.com^$all
! https://virustotal.com/gui/file/6f236e253720a0b3cf1fdafd111f99ba84e0a2b03ff8453fd747c3d9c8973403/relations
! https://virustotal.com/gui/file/13e8d4557870179e70b7d4f580c9183e9a6eead777af04fc226feb70d9ce76cb/relations
! https://virustotal.com/gui/url/e3fb5d2d13d34c94468df0ecd5825ed28861ccee9f1a1703e4b37a01af2f7caf/detection
! https://safeweb.norton.com/report/show?url=os.telechargercdn.com
! https://www.siteadvisor.com/sitereport.html?url=os.telechargercdn.com
||os.telechargercdn.com^$all
! https://github.com/DandelionSprout/adfilt/issues/244
! The original website
||rblxexploits.net^$all
||www.rblxexploits.net^$all
! Fake notifications
||usegetmarketings.com^$all
||bestappever4you.com^$all
! This was loaded by a malware extension that was installed
||thecrs.club^$all
! https://virustotal.com/gui/file/67b1a7835687bf5851cf29539b2d0ce90ab30d373edfcf9ee54237026c67df33/relations
! https://virustotal.com/gui/url/1912779d4b9bfd7713239cf6e2ede751c40b38541404b21adb0c595b65356c75/detection
! https://www.siteadvisor.com/sitereport.html?url=uehge4g6gh.2ihsfa.com
! https://safeweb.norton.com/report/show?url=uehge4g6gh.2ihsfa.com
! https://metadefender.opswat.com/results/domain/dWVoZ2U0ZzZnaC4yaWhzZmEuY29t/overview?lang=en
||uehge4g6gh.2ihsfa.com^$all
! https://virustotal.com/gui/url/faee0c9a2d3786dda120ce8b99381878ebf05ca2b4d4a4437118ab2ca8ab49bd/detection
! https://www.siteadvisor.com/sitereport.html?url=2ihsfa.com
! https://safeweb.norton.com/report/show?url=2ihsfa.com
||2ihsfa.com^$all
! https://virustotal.com/gui/url/5cfe3add8396356f1757449074e95fab7b77aeabc405ca0fcebab5b699198d7f/detection
! https://www.siteadvisor.com/sitereport.html?url=listincode.com
! https://safeweb.norton.com/report/show?url=listincode.com
||listincode.com^$all
! https://virustotal.com/gui/url/9ac802ac997e44f7daf814ce163a17884ae59e3dd99e0c39432449af195f90b6/detection
||www.listincode.com^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/88280
! https://virustotal.com/gui/url/5ac4b9c907ee714f1163331bcb9840a472f85809e9730edc03dd88e9d706bcbb/detection
! https://safeweb.norton.com/report/show?url=update-portal.com
! https://www.siteadvisor.com/sitereport.html?url=update-portal.com
||update-portal.com^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/88270
! https://safeweb.norton.com/report/show?url=tw-goldenwinner-57.com
! https://virustotal.com/gui/url/ddec939917a016338c34597563962b9baa10080f62ea0320d8e4b8b21156007e/detection
||tw-goldenwinner-57.com^$all
||www.tw-goldenwinner-57.com^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/80390
! https://virustotal.com/gui/url/1b63e3d8a99633582446d6c095e9350b869dc60716187f714bbdb85d9f06122f/detection
! https://safeweb.norton.com/report/show?url=artebythesea.com
||artebythesea.com^$all
! https://virustotal.com/gui/url/16534bfc6c24e0c30dbac08ea5297ae24f9f9ae90411bc3b608659e1767317a7/detection
! https://safeweb.norton.com/report/show?url=microsoftpods.com
||microsoftpods.com^$all
! https://virustotal.com/gui/url/94b361a89a5c3a43d6013fb8f971e40c9bd3493042343a0ee3626375b4552267/detection
! https://safeweb.norton.com/report/show?url=nashvillegems.com
||nashvillegems.com^$all
! https://virustotal.com/gui/url/2dbc2cf61fa22eec22629f31b731c04eeb4cdc86d589ab36c0c7719b26e60ede/detection
! https://safeweb.norton.com/report/show?url=flawlessdrinking.com
||flawlessdrinking.com^$all
! https://virustotal.com/gui/url/2a213601051b43f18c3f6b6faadf5b65b8375f5c9ffe5cb9fe2c18fe13b0bd2a/detection
! https://safeweb.norton.com/report/show?url=findmyautoparts.com
||findmyautoparts.com^$all
! https://virustotal.com/gui/url/fcd7962a77ae7836f84789452b77d293de0e1a47e91ecfe2c2508bead500197b/detection
! https://safeweb.norton.com/report/show?url=grandpaurbanfarm.net
||grandpaurbanfarm.net^$all
! https://safeweb.norton.com/report/show?url=guide4idiots.com
! https://virustotal.com/gui/url/2f9dfbbc3cde41756691a0b741eb605c7ed81d55733f912dc590808f6ec2cb5e/detection
||guide4idiots.com^$all
! https://safeweb.norton.com/report/show?url=identityofplace.com
! https://virustotal.com/gui/url/987c5c40192b3e6049a8c2523a7f4bba374db1ab7a1418f25dccdba7379674c6/detection
||identityofplace.com^$all
! https://virustotal.com/gui/url/6fb68516452024785cbdb664f5363c7e49ed6a9fd88fe0dce79a157560ec0701/detection
! https://safeweb.norton.com/report/show?url=shpwmy.com
||shpwmy.com^$all
! https://github.com/easylist/easylist/pull/6164
! https://github.com/DandelionSprout/adfilt/blob/a0f6bdcc309cab585502c76ebd70c088995a3d17/Dandelion%20Sprout's%20Anti-Malware%20List.txt#L955-L5713
! https://virustotal.com/gui/url/59077166c998073d0f809f35fb035256e8ee263f2136e783c82cd6017aad4029/detection
! https://virustotal.com/gui/ip-address/192.243.59.12/relations
! https://virustotal.com/gui/url/8041adaabbd884df4712bdfa8794bdbcf37dfaa8f06164bbe6df2ba79c2eaa72/detection
! https://www.siteadvisor.com/sitereport.html?url=dustymural.com
! https://safeweb.norton.com/report/show?url=dustymural.com
||dustymural.com^$all
! https://virustotal.com/gui/ip-address/192.243.59.13/community
! https://virustotal.com/gui/url/5eca62948cb380e8b8def8a250d91210df2c7385799fcc3b9f0b0df28b1fdd1b/community
! https://www.siteadvisor.com/sitereport.html?url=disappearanceinspiredscan.com
! https://safeweb.norton.com/report/show?url=disappearanceinspiredscan.com
||disappearanceinspiredscan.com^$all
! https://forums.malwarebytes.com/topic/277965-your-system-is-infected-with-3-viruses/
! https://github.com/DandelionSprout/adfilt/issues/262
||lucdream.com^$all
||beastbuying.com^$all
||kokotrokot.com^$document
! contains porn
||pesoaniz.com^$all
! Fake popups
||rtb-8.novitrk1.com^$all
||cu27t-evo29lution.xyz^$all
||doneonline.xyz^$all
||possessedcrackinghart.com^$all
||typiccor.com^$all
||apsolutamente.com^$all
||time4news.net^$all
||secureleadsforever.com^$all
||pushmeup.art^$all
||eu.pushmeup.art^$all
||trc.artofads.co^$all
||pc-my-protection.xyz^$all
! https://forums.malwarebytes.com/topic/278166-my-website-is-labelled-as-dangerous-by-malwarebytes/
! https://virustotal.com/gui/url/68ccee4530342ae6ea690a0ef786f040a3d9a0d1bfc08c4b857af71ac8e90954/detection
! https://virustotal.com/gui/url/14cfdccc23aac9ffaf051675efcda240f2e83a5cd34403e412f0f2959e42a536/detection
! https://www.siteadvisor.com/sitereport.html?url=serena-west.com
||serena-west.com^$all
||www.serena-west.com^$all
! https://forums.malwarebytes.com/topic/278209-removal-instructions-for-socialsearchconverter/
||socialsearchconverter.com^$all
||install.socialsearchconverter.com^$all
||feed.socialsearchconverter.com^$all
||api.socialsearchconverter.com^$all
||notify-service.com^$all
||install.stream-all.com^$all
||stream-all.com^$all
! Malware - see https://github.com/DandelionSprout/adfilt/issues/267
||codedexchange.com^$all
||trkk4.com^$all
||us1.trkk4.com^$all
! https://www.youtube.com/watch?v=xOw1vct-wHg
! https://virustotal.com/gui/url/95f8db6ff866ba200658f9c25c8a5484ca4f771ae3ac3aba8694129a7f18ec0f/detection
! Dead
||hpprintersupportservice.com^$all
||how.hpprintersupportservice.com^$all
! Not dead yet - https://github.com/uBlockOrigin/uAssets/issues/9933
||1redirb.com^$all
! https://github.com/uBlockOrigin/uAssets/issues/9933#issuecomment-913677276
||greenadblocker.com^$all
! https://github.com/blocklistproject/Lists/issues/456
! https://virustotal.com/gui/url/383e601492df662f7612beea0e02d336a3ee39e864db40d03fe72d4f3fe4c2e4/detection
||discorcl.link^$all
! https://blog.malwarebytes.com/threat-intelligence/2021/09/the-many-tentacles-of-magecart-group-8/
||adaptivestyles.com^$all
||anduansury.com^$all
||bootstrapmag.com^$all
||cdncontainer.com^$all
||fileskeeper.org^$all
||foodandcot.com^$all
||freshdepor.com^$all
||hottrackcdn.com^$all
||mechat.info^$all
||paypaypay.org^$all
||gctatic.com^$all
||googletagmanages.com^$all
||gstaticx.com^$all
||googletagmaneger.com^$document
||googleusescontent.com^$document
||googlutagmanager.com^$document
! https://github.com/AdguardTeam/AdguardFilters/issues/95582
! https://virustotal.com/gui/url/3323920fe31aaa6724441edc7bd395232194c52967480a95039fb35bcb3d7ac2
! https://virustotal.com/gui/url/93011523cfdd4defbccbe5fff351acac2bb6fdddba6420cc69d81cc9f9dd7f61
||discord-give.com^$all
||www.discord-give.com^$all
! https://virustotal.com/gui/url/145c4bdadca86dfb9560668f2cec835f75c248af41b8842687ad89dce8d2aed0
||communitytradeoffer.com.ru^$all
! https://www.siteadvisor.com/sitereport.html?url=dlscord-app.info
||dlscord-app.info^$all
! https://virustotal.com/gui/url/51da56828b0cd9d4d4514feb74038aefb01dc4188da398f1666983766914c156
||steamcommnity.com.ru^$all
! https://virustotal.com/gui/url/83ce8c920a22c9550591e52839fd540ee7a37b941e3419780b17e195fcfb9b28
! https://virustotal.com/gui/url/81880d767bab8515cf71ce37ebe7b56d8448184b96999f6cc4ce70d2b6c68949
||steamdiscord.com^$all
! https://virustotal.com/gui/url/0a8ea816672728b0e9869f65e4788471880746a65f3f8f2215789d0edfe278d3
||discord-app.net^$all
! https://virustotal.com/gui/url/0314bd2bb4874cad7a39346c83c421d87208be4bca6c0dc2f804f0a902b18cfc
||steancommynitu.com^$all
! Copied over from https://github.com/DandelionSprout/adfilt/commit/260f840b773b04d7397c6c40d86cf7e2887768d8 (credit to https://github.com/DandelionSprout)
||cabura.loan^$all
||csgocup.ru^$all
||discord.foundation^$all
||discrod.ru^$all
||eslpro.ru^$all
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-927151458
! https://virustotal.com/gui/url/a7fb846c9f8aefecbe0ffda1aecbb6a3d257f0b31a9b922aa49d494af0f0c112
||findyour-realsex2.com^$all
! https://virustotal.com/gui/url/0680f0ae763476f2aa0b844b6f64a1ca4b6c63e0c7f6880ab5f121ad406b2d2e/detection
||your-dreams-girls2.com^$all
! https://virustotal.com/gui/url/4047b3b1b6af03839835b31cffbc5d52eff7c6f01c23cf3330a1000c61b66c0f
! https://virustotal.com/gui/url/4a2cff70405ed300ad14b2294eb06c9adff5354911f70229085deecc7048637b
||yourbigexplosivewin.life^$all
! https://virustotal.com/gui/url/ff99d9ba468539c01896ef8b380819c07b8af40792d83beccea2d76064ebf781
! https://virustotal.com/gui/url/134a3e4324ca33c19c529aa554ff193a96b48ae6213323a957f5752641a8014e
||bestdatinglocal1.com^$all
! https://virustotal.com/gui/url/385edcca4e25f51083f593a4041f834fee5c903a93f5f66eab50f65df61c811c
||sexcontact-store1.com^$all
! https://virustotal.com/gui/url/7574cd8789b7ac7b78e4efe778ab6228a8b8c79301740247b5738bc62f208883
||superdatenow3.com^$all
! https://virustotal.com/gui/url/a7f1c2d1c02cc824bb93c1ba1d147d9fc1464bb3a4aeb937922d6bbdec84ffff
||findlocalgirlnow.com^$all
! https://virustotal.com/gui/url/c5126c3b175c6fa50d96443ecca99b75c881420248ec020c7cd567715839410a
! https://github.com/uBlockOrigin/uAssets/issues/10075
||the-crypto-genius.net^$all
||www.the-crypto-genius.net^$all
! Redirect
||learning-base.club^$all
! https://github.com/DandelionSprout/adfilt/issues/287#issue-1013759704
||youtuba.com^$all
||polyhymnia-mar.com^$document
||virpropcnow.xyz^$all
||avprotectionoverview.com^$document
! https://virustotal.com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations
! https://virustotal.com/gui/ip-address/160.202.163.100/relations
! https://virustotal.com/gui/url/3818bac5233b17d11c0744005712a5761596f33ac54c23565eb08b5496323d48
||microsoftkernel.com^$all
||update.microsoftkernel.com^$all
! https://virustotal.com/gui/url/7709e9dff92c359c920e31866268a04489a67fc2e415bbc8c20cea8604387121
||hksupd.com^$all
||amazon.hksupd.com^$all
! https://virustotal.com/gui/url/c8da0d48ea7be9444411840955f2a658c3f6fbfd3dcc87df29fe0c13a6b9b604
||microsofthk.com^$all
||update.microsofthk.com^$all
! https://virustotal.com/gui/url/956c451fe61038377026bee53c4eeff67ab3efe69f5c4c6e22b3c1dbde10ced1
! https://virustotal.com/gui/url/8c1e1a8a80c515d411b4e22d36ddb0535427c73f2b7c8b3ae7a672ad208c89b2
! https://virustotal.com/gui/url/681dfdb12bcaa2facfb6eefe51d671387f111134f1661e336d63c5e6b207aa10
||bilalimtyaz.co^$document
! https://virustotal.com/gui/url/efdaf6927a66f267f8e834a1d685e76025f3c8ad29b8d950289ceb43c18a3477
||machinesalaver.net^$all
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-938682090
||eliteexteriorsystems.com^$all
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-940500664
! redirect chain
||captcha-smart.top^$all
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-944642656
||allblock.net^$all
! https://hybrid-analysis.com/sample/691fb304c88929435950c157c1789bc7004e2163a3188cf2fff1124cfa5f00f8/60f6dbfae50e5603767b8f32
! https://virustotal.com/gui/url/b141c859a1246a250183b212cea2e6ed30d90477adc5ae8f3277516f68071396
! https://virustotal.com/gui/url/5b4dc980802a96c630e76148aab4f2cbe7a196d39ffce9a7e3c95bcdc082b64a
||micuenta01.github.io^$all
! https://virustotal.com/gui/url/64babbfb323b40df5b768265183886fbed60ea92234da1a2e4b85acfdceaf0aa
! https://virustotal.com/gui/url/4f827d8be6d25fa88c1ebe74800b6743d7e289b0f904b6f3445486b3ccac2797
||tristreamstv.com^$all
! https://blog.malwarebytes.com/threat-intelligence/2021/10/q-logger-skimmer-keeps-magecart-attacks-going/
||pinokio.online^$all
||sitetraffic.site^$all
||spacecom.site^$all
! https://github.com/uBlockOrigin/uAssets/issues/10181
||nbryb.com^$all
||onemacusa.com^$all
||realnetnews.com^$all
||rogueleader.org^$all
||suggestive.com^$document
! found when searching for "iam-py-test" on Google - starts at hxxpx[:]//google-yandex[.]info[/]iam-py-test
! https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950351144
||google-yandex.info^$all
||cloud-apps.store^$all
! https://virustotal.com/gui/url/2e874f308e1202ce4deb4068d029675c8487bed465f3bd34aeefb4a84c6b767f
! https://virustotal.com/gui/url/859be64d71834dba1693b079ec85f77edcd06124031c65178838555fea31efd7
||dliscord.com^$all
! https://github.com/blocklistproject/Lists/issues/537
! https://github.com/blocklistproject/Lists/issues/538
||gosuslugi.contact^$all
||gosulugl.ru^$all
||gosuslugee.ru^$all
||gosmslugi.ru^$all
||gosuslugji.ru^$all
||gosuslugi.agency^$all
||gosulgi.ru^$all
||gosoogi.com^$all
||gosulvgi.ru^$all
||gosusnugi.ru^$all
||gosuslugi-kultura.ru^$all
||ciel-goshugi.com^$all
||www-gos-uslugi.ru^$all
||gosusluslugi.ru^$all
||gosuslugi.xyz^$all
||gosushlugi.ru^$all
||vgosuslugi.ru^$all
||gos-uslug.ru^$all
||gosuslugigov.ru^$all
||gosuslugi.uk^$all
! https://threatpost.com/chrome-deliver-malware-as-legit-win-10-app/175884/
! https://www.rapid7.com/blog/post/2021/10/28/sneaking-through-windows-infostealer-malware-masquerades-as-windows-application/
||cleancrack.tech^$all
||s4.cleancrack.tech^$all
||clickmatters.biz^$document
! https://forums.malwarebytes.com/topic/280266-removal-instructions-for-search-streamly/
||search-streamly.com^$document
||feed.search-streamly.com^$all
||api.search-streamly.com^$all
! https://virustotal.com/gui/file/574a56656b6cf687d912baeedeeb176f0a7e58ad15ad4ab43c3cd630d9cceab2/relations
! https://virustotal.com/gui/url/8cb8c13da88b7b50a7cae47233a3c385a0208f0dccf119044f775e0a464de3a2
||telegraf.top^$all
! https://github.com/iam-py-test/investigations/blob/main/2021/11/3/1.md#domains
||youutube.com^$all
||youvetube.com^$document
||www.youvetube.com^$all
||mediadlvr.com^$document
||safejokesearch.com^$all
||www.safejokesearch.com^$all
! https://blog.malwarebytes.com/threat-intelligence/2021/11/credit-card-skimmer-evades-virtual-machines/
! https://virustotal.com/gui/url/229181849ae5d036ff997645e9cf708d4fe96337d6e68e780777aee382fdccf1
||webflows.net^$all
||web.webflows.net^$all
||librarysetr.com^$all
||js.rawgit.net^$all
||rawgit.net^$all
||iofrontcloud.com^$all
||alligaturetrack.com^$all
||getambassador.net^$all
||st.adsrvr.biz^$all
! https://virustotal.com/gui/file/f657dd8b99b9fa047c524f055984dfb1f9886cc97c788c8ebb9e63537f327c1a/community
! https://virustotal.com/gui/file/676de5f6ff737af6e73a00caf93767cc9af16e6e6bd50016b5bd03ffa097c373/community
||dl02.s3.amazonaws.com/installers/693123/oi_agree-free-dvd-ripper-platinum.exe$all
||dl02.s3.amazonaws.com/installers/852091/oi_swfdeczip.exe$all
||dl02.s3.amazonaws.com/installers/415643/m1btpwzw9bc.exe$all
||dl02.s3.amazonaws.com/installers/388327/ycf45qdlvsc.exe$all
||dl02.s3.amazonaws.com/installers/848253/InfraRecorder.exe$all
||dl02.s3.amazonaws.com/installers/630249/oi_calctime4f.exe$all
||dl02.s3.amazonaws.com/installers/790203/crazy-ball.exe$all
||dl02.s3.amazonaws.com/installers/760905/tmnttheme.exe$all
||dl02.s3.amazonaws.com/installers/$document
! https://virustotal.com/gui/ip-address/2.56.59.42/relations
||cha1se.my03.com^$document
! https://virustotal.com/gui/file/c465550320e3625e430f8745c8c8b8664a202e24dbe51ed4e5dcd0af25960420/community
||caenet.s3.amazonaws.com/apps/dexway/dexway.setup.msi^$all
! https://virustotal.com/gui/url/a2524bba49ae71297d2b408b30d058700d9c80b5b1154924cafe190ec3e605a6/detection
||newrrb.bid^$all
! https://virustotal.com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community
||bursakulis.com^$all
! https://github.com/iam-py-test/investigations/blob/main/2021/11/24/1.md
||macsoftwarez.com^$all
||namilon.xyz^$document
! C2s
||toa.mygametoa.com^$all
||mygametoa.com^$document
! https://forums.malwarebytes.com/topic/281074-pup-mysearchengineco-firtefox/
! https://virustotal.com/gui/ip-address/172.67.222.254/relations
! https://virustotal.com/gui/url/781a2d763b034c9610ab9832bdc2692aced3d86c6b7296ea72579da7b68dc073
||631e69eb.ainans.com^$all
! https://scammer.info/t/quantum-ad-blocker-trojan/84204
||quantumadblocker.com^$document
! https://github.com/uBlockOrigin/uAssets/pull/10662
||api.crm.duominuo.com^$all
||static.duominuo.com^$all
||wnl.duominuo.com^$all
||duominuo.com^$all
! https://virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635
||lowseelan.com^$all
! https://virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^$all
! https://virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$all
! https://forums.malwarebytes.com/topic/281264-malware-bytes-scam-number-1-315-996-0560/
||tradeford.com/us853558/malwarebytes-customer-service-1-315-996-o56o_p1049357.html^$all
! https://github.com/DandelionSprout/adfilt/pull/395
! https://www.huorong.cn/info/1531309921141.html
||kuaizip.com^$all
! https://www.huorong.cn/info/1618397948649.html
! ||zhuangjizhuli.com^$all
! ||zhuangjizhuli.net^$all
! https://github.com/uBlockOrigin/uAssets/pull/9656
||geekotg.com^$all
||qq789.com.cn^$all
! https://www.huorong.cn/info/1526627586130.html
||xiaobaixitong.com^$all
! https://www.huorong.cn/info/1577158839403.html
||daque.cn^$all
! https://www.huorong.cn/info/1598957552515.html
||dabaicai.com^$all
! https://www.huorong.cn/info/1617368984641.html
||qqfzn.com^$all
! https://github.com/uBlockOrigin/uAssets/pull/10017
||flash.cn^$all
! https://virustotal.com/gui/file/1d29ecde092f21ea0dd05b9f42531be1ed2207d6ebb9b463517f4c9508ff24a7/community
||fire.hypersys-server.com.ar^$all
! https://github.com/uBlockOrigin/uAssets/pull/10774
! https://bbs.kafan.cn/thread-2222478-1-1.html
! https://bbs.kafan.cn/thread-2221903-1-1.html
! https://bbs.kafan.cn/thread-2221781-1-1.html
! https://bbs.kafan.cn/thread-2220230-1-1.html
||ts-group.com^$all
! https://bbs.kafan.cn/thread-2221419-1-1.html
||2345.eyunsou.com^$all
! https://www.huorong.cn/info/1627034201698.html
! https://bbs.kafan.cn/thread-2217785-1-1.html
||win.zjwhr.top^$all
! https://twitter.com/Cryptolaemus1/status/1468266929014157316
||lartmana.com^$all
! https://github.com/blocklistproject/Lists/issues/588
||procrackerz.org^$all
||freeprosoftz.com^$all
||pccrackbox.com^$all
||365crack.com^$all
||cracklabel.com^$all
||keystool.com^$all
||pcwarezbox.com^$all
||installcracks.com^$all
||10crack.com^$all
||reallcrack.com^$all
||hit4crack.com^$all
||crackproductkey.com^$all
||profullversion.com^$all
||vcracks.com^$all
||crackswall.com^$all
||crackthere.com^$all
||crackpcsoft.net^$all
||crackserialkey.co^$all
||keygenfile.net^$all
||maliksofts.com^$all
||proappcrack.com^$all
||flstudiocrack.org^$all
||scracked.com^$all
||crackpropc.com^$all
||crackwinz.com^$all
||cyberspc.com^$all
||crackedpcs.com^$all
||ayeshapc.com^$all
||crackintopc.com^$all
||crackhomes.com^$all
||zslicensekey.com^$all
||cracksmad.com^$all
||iamactivator.com^$all
||crackproduct.com^$all
||excrack.com^$all
||mahcrack.com^$all
||get4pcs.com^$all
||genuineactivator.com^$all
||keygenwin.com^$all
||thiscrack.com^$all
||crackedroot.com^$all
||crackspro.co^$all
||topcracked.com^$all
||mycrackfree.com^$all
||crackfullpro.com^$all
||starcrack.net^$all
||procrackpc.com^$all
||crackknow.com^$all
||crackpro.org^$all
||4howcrack.com^$all
||crackshere.com^$all
||crackdj.com^$all
||cracksray.com^$all
||crackkits.com^$all
||trycracksoftware.com^$all
||fullcrackedpc.com^$all
||cracktopc.com^$all
||crackkey4u.com^$all
||rootcracks.org^$all
||idmfullcrack.info^$all
||fileserialkey.com^$all
||licensekeyup.com^$all
||thecrackbox.com^$all
||rootcracks.co^$all
||cracksway.com^$all
||clevercracks.com^$all
||shahzifpc.com^$all
||idmpatched.com^$all
||getprocrack.co^$all
||autocracking.com^$all
||productkeyfree.org^$all
||chcracked.com^$all
||cracksdat.com^$all
||patchcracks.com^$all
||activationkeys.co^$all
||serialsofts.com^$all
||piratpc.com^$all
||prosoftlink.com^$all
||cracksole.com^$all
||finalcracked.com^$all
||activatorpros.com^$all
||organiccrack.com^$all
||zscracked.com^$all
||abbaspc.org^$all
||allsoftwarekeys.com^$all
||genuineserials.com^$all
||pfcbwp.com^$all
||softwar2crack.com^$all
||xforce-cracks.com^$all
||procracks.net^$all
||productkeyforfree.com^$all
||crackgrid.com^$all
||licensekeysfree.com^$all
||goharpc.com^$all
||crackedmod.com^$all
||crackvip.com^$all
||crackedpc.org^$all
||activatorwin.com^$all
||whitecracked.com^$all
||softwarance.com^$all
||kalicrack.com^$all
||bypassapp.com^$all
||ziapc.org^$all
||zgamespc.com^$all
||cracksoon.com^$all
||boxcracked.com^$all
||procrackkey.co^$all
||activationkey.org^$all
||newproductkey.com^$all
||protoolscrack.net^$all
||download4mac.com^$all
||serialkeypatch.org^$all
||premiumsforum.com^$all
||profreefiles.com^$all
||filespremium.com^$all
! https://github.com/uBlockOrigin/uAssets/pull/10854
||37.1.209.213^$all
! https://forums.malwarebytes.com/topic/281936-malware-campaing-distribuition-malicious-link/
||10dimensions.com^$all
! malware - https://bazaar.abuse.ch/sample/a12d74b1756d49531e21f755fef2049ab6c83626f0834cb945c781c39d40a177/
||crackedable.com^$all
! hxxpx[:]//crackpropc[.]com/winrar-crack/ - https://bazaar.abuse.ch/sample/4f4376563cfc35d3fb0b4f857674729727b5f959235fe39daa928a1d4a28649a/
||wastyuioytryiuoytryiuopuytryuioewr5t678i.s3.amazonaws.com^$all
! https://github.com/uBlockOrigin/uAssets/pull/10997
||jinshanduba.org.cn^$all
||phpstat.cntcm.com.cn/phpstat/count/abceffgh/abceffgh.js^$all
! https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/
||download-srvr.xyz^$all
||cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com^$all