! Title: uBlock₀ filters – Badware risks
! Last modified: Fri, 26 Jul 2024 14:26:40 +0000
! Expires: 5 days
! Description: For sites documented to put users at risk of installing adware/crapware/malware, having login credentials stolen, etc.
! The purpose is to at least ensure a user is warned of the risks ahead.
! License: https://github.com/uBlockOrigin/uAssets/blob/master/LICENSE
! Homepage: https://github.com/uBlockOrigin/uAssets
!
! GitHub issues: https://github.com/uBlockOrigin/uAssets/issues
! GitHub pull requests: https://github.com/uBlockOrigin/uAssets/pulls
!
! Each entry has to be well enough sourced, see the comments above each entry for sources

! Using request of type `document` will cause the whole site to be blocked through
! strict blocking, yet the site will render properly if a user still decides to
! go ahead.

! 2014-10-22: https://assiste.com/01Net.html
! 2013-03-25: https://www.malekal.com/pctutotuto4pc-association-avec-01net/
! 2012-10-31: https://www.journaldunet.com/solutions/dsi/des-malwares-sur-telecharger-com-01net-1012.shtml
! 2012-10-30: https://www.lesnumeriques.com/appli-logiciel/telecharger-depuis-01net-nuit-gravement-a-sante-pc-n26763.html
! 2012-06-17: https://www.malekal.com/01net-pc-optimizer-pour-ne-pas-optimiser-son-pc/
! 2012-02-17: http://neosting.net/logiciels/01net-et-softonic-ajoutent-aussi-un-installeur-publicitaire.html (Dead page)
||01net.com/telecharger/$doc

! 2015-03-11: https://blog.emsisoft.com/en/12678/mind-the-pup-top-download-portals-to-avoid/
! 2015-01-21: https://www.howtogeek.com/207692/yes-every-freeware-download-site-is-serving-crapware-heres-the-proof/
! 2015-01-11: https://www.howtogeek.com/198622/heres-what-happens-when-you-install-the-top-10-download.com-apps/
! 2012-06-27: https://insecure.org/news/download-com-fiasco.html
! 2011-12-05: https://seclists.org/nmap-announce/2011/5
! 2011-08-22: https://www.extremetech.com/computing/93504-download-com-wraps-downloads-in-bloatware-lies-about-motivations
! https://github.com/uBlockOrigin/uAssets/issues/926
! ||download.cnet.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/79
||flexytalk.net^
||quickdomainfwd.com^

! https://github.com/uBlockOrigin/uAssets/issues/1547
||vlc.de^$doc

! https://github.com/uBlockOrigin/uAssets/issues/1738
||audacity.de^$doc

! https://github.com/uBlockOrigin/uAssets/issues/1853
||havenworks.com^$doc

! https://github.com/gorhill/uBlock/wiki/Badware-risks#ublockorg
! ||ublock.org^$doc
~support.ublock.org,ublock.org##main::before:style(content: 'uBlock is unrelated to the well-known uBlock Origin.' !important; font-size: 32px !important; color: red !important; font-weight: bold !important;)
support.ublock.org##div.hero-unit > div.search-box--hero-unit::before:style(content: 'uBlock is unrelated to the well-known uBlock Origin.' !important; font-size: var(--font-size-h2) !important; color: red !important; font-weight: bold !important;)

! https://github.com/uBlockOrigin/uAssets/issues/3060
! https://www.bleepingcomputer.com/news/security/fake-websites-for-keepass-7zip-audacity-others-found-pushing-adware/
! https://www.virustotal.com/#/file/a5616985e92ca7c1df3b132d2da2ef33c64f38ba2dca40445017037473d7d014/detection
! https://twitter.com/certbund/status/1127864403276091393
! https://github.com/uBlockOrigin/uAssets/issues/17880
||7zip.es^$doc
||7zip.fr^$doc
||7zip.it^$doc
||adblock.fr^$doc
||aresgalaxy.es^$doc
||audacity.es^$doc
||audacity.fr^$doc
||audacity.it^$doc
||audacity.pl^$doc
||azureus.es^$doc
||bittorrent.es^$doc
||bleachbit.com^$doc
||blender3d.es^$doc
||blender3d.fr^$doc
||bluestacksdownloads.com^$doc
||calibre.it^$doc
||celestia.es^$doc
||celestia.fr^$doc
||clonezilla.es^$doc
||clonezilla.fr^$doc
||clonezilla.it^$doc
||cyberduck.de^$doc
||cyberduck.es^$doc
||cyberduck.fr^$doc
||cyberduck.it^$doc
||filezilla.es^$doc
||filezilla.fr^$doc
||filezilla.it^$doc
||filezilla.net^$doc
||filezilla.pl^$doc
||freefilesync.com^$doc
||freerapid.fr^$doc
||garagebandforpc.org^$doc
||gimp.es^$doc
||gparted.fr^$doc
||gparted.it^$doc
||greenshot.fr^$doc
||greenshot.org^$doc
||handbrake.es^$doc
||handbrake.it^$doc
||inkscape.es^$doc
||inkscape.fr^$doc
||inkscape.it^$doc
||izarc.fr^$doc
||jdownloader.fr^$doc
||keepass.com^$doc
||keepass.de^$doc
||keepass.es^$doc
||keepass.fr^$doc
||keepass.it^$doc
||keepassxc.com^$doc
||notepad2.com^$doc
||office.org^$doc
||open-office.fr^$doc
||openoffice.de^$doc
||paintnet.es^$doc
||paintnet.fr^$doc
||paintnet.it^$doc
||pdfsam.com^$doc
||peazip.com^$doc
||qbittorrent.com^$doc
||scribus.fr^$doc
||scribus.it^$doc
||senuti.org^$doc
||smplayer.org^$doc
||stellarium.es^$doc
||stellarium.fr^$doc
||truecrypt.fr^$doc
||truecrypt.it^$doc
||truecrypt.pl^$doc
||unetbootin.net^$doc
||unetbootin.org^$doc
||utorrent.it^$doc
||virtualbox.es^$doc
||virtualbox.pl^$doc

! https://github.com/uBlockOrigin/uAssets/issues/3730
! https://blog.sucuri.net/2018/10/malicious-redirects-from-newsharecounts-com-tweet-counter.html
||newsharecounts.s3-us-west-2.amazonaws.com/nsc.js$script

! https://github.com/uBlockOrigin/uAssets/issues/4201
||googlo.co^$doc
! https://github.com/uBlockOrigin/uAssets/issues/4201#issuecomment-458340273
||hentaiplaytime.com^$doc
||viewmypdf.com^$doc

! foxload.com badware
||foxload.com^$doc

! aksia.co badware
! Ref: https://www.bleepingcomputer.com/news/security/phisher-announces-more-attacks-against-hedge-funds-and-financial-firms/
||aksia.co^$doc

! ReImagePlus links
! https://github.com/uBlockOrigin/uAssets/issues/5136
! Ref: https://forums.malwarebytes.com/topic/194200-removal-instructions-for-reimage-repair/
! https://windowsreport.com/extend-windows-laptop-battery-life/
windowsreport.com##.code-block
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
appuals.com##.appua-reimage-top
appuals.com##.info.box
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.download_button_info_texts
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.js-download_button_additional_links
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.primary_download
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.sidebar_download_inner
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##div.attention-button-box-green
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
thewindowsclub.com##.entry-content > div > strong:has-text(find & fix Windows error)
! https://www.majorgeeks.com/files/details/patch_my_pc.html
majorgeeks.com##b:has(a[target^="reimage"])
||majorgeeks.com/images/icons/red_icon_18x17px.png$image
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.attention-button-wrap:has-text(Reimage)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box):not(.colorbg-grey)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##th:has-text(/^Detection$/)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##th:has-text(/^Detection$/) + td
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.js-download_button_offer
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.primary_download
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-placeholder
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.nfc-bottom-right:has-text(Reimage)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##a:has-text(Reimage)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text
! https://windowsloop.com/network-adapters-shortcut/
||reimageplus.com^$doc

! Lapsed domains that once hosted adblock lists, several of whom are now used for bad purposes
! https://github.com/uBlockOrigin/uAssets/issues/5307
||gjtech.net^$doc

! Badware
||kuhoot.it^$doc

! Fake cloudflare screen
! https://github.com/uBlockOrigin/uAssets/issues/5305#issuecomment-484754393
! https://github.com/uBlockOrigin/uAssets/issues/5489#issuecomment-488207423
||gmboxx.com^
||mr.media-bucket.com^

! https://github.com/NanoMeow/QuickReports/issues/965#issuecomment-485274387
||pl.allsports4free.club^
||pl.allsports4u.club^

! https://github.com/uBlockOrigin/uAssets/issues/5409
||discount.s3blog.org^
||s3blog.org^$3p
||dataprovider.biz^

! https://github.com/uBlockOrigin/uAssets/issues/5442
||tplinkextender.net^

! https://github.com/uBlockOrigin/uAssets/issues/4862#issuecomment-486941006
||upload4earn.org^$doc

! https://github.com/uBlockOrigin/uAssets/issues/5805
||newsfile.club^$doc

! https://forums.lanik.us/viewtopic.php?f=62&p=149407#p149406
||buzzadnetwork.com^$all

! https://arstechnica.com/information-technology/2019/08/google-play-app-with-100-million-downloads-executed-secret-payloads/
||abcdserver.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/6381
||americanoverlook.com^
||anonnews.co^
||embols.com^
||endingthefed.com^
||goneleft.com^
||nephef.com^
||newsbreakshere.com^
||rilenews.com^
||thecontroversialfiles.net^
||voxtribune.com^

! https://blog.sucuri.net/2018/08/massive-wordpress-redirect-campaign-targets-vulnerable-tagdiv-themes-and-ultimate-member-plugins.html
||checkisreal.com^
||mysecurify.com^

! https://www.wordfence.com/blog/2019/08/malicious-wordpress-redirect-campaign-attacking-several-plugins/
||developsincelock.com^
||gabriellalovecats.com^
||jackielovedogs.com^
||tomorrowwillbehotmaybe.com^
||wiilberedmodels.com^

! https://github.com/uBlockOrigin/uAssets/issues/6452
||apple.com-*.live^

! redirects
||nextyourcontent.com^$all
||doctopdftech.com^$all
||best2019-games-web4.com^$all
||searchdimension.com^$all
||beqbox.com^
||bblck.me^$all
||glinks.co^$all
/?track=*&key=$all
||getsecuritysuite.com^$all

! SpyHunter links
! Ref: https://blog.malwarebytes.com/detections/pup-optional-spyhunter/
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
howtoremove.guide##div[style^="border:2px"]
howtoremove.guide##.entry-content > div:has-text(Special Offer)
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/ (German version only)
howtoremove.guide###solution_v2_de
howtoremove.guide###alt_content_main_div > p:has-text(SpyHunter)
howtoremove.guide###gray_de
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##a:has-text(SpyHunter)

! https://github.com/uBlockOrigin/uAssets/pull/6757
||tncrun.net^$all

! https://github.com/NanoMeow/QuickReports/issues/2772
||d3125zvx5yi5sj.cloudfront.net^$all

! thepiratebay3 .com bad
thepiratebay3.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/6544#issuecomment-586763083
||procdnvids.net^
||prostream.to^

! https://github.com/NanoMeow/QuickReports/issues/2577
! https://www.reddit.com/r/uBlockOrigin/comments/12nrzng/
||mybestclick.net^$3p

! https://github.com/NanoMeow/QuickReports/issues/3205
||verified-extensions.com^

! https://github.com/NanoMeow/QuickReports/issues/3299
! https://github.com/NanoMeow/QuickReports/issues/3300
||smsiak.pl^$doc
||smsy24.pl^$doc

! redirecting domains / fraud
||video-adblock.com^$all
||vid-adblocker.com^$all
||multiadblock.com^$all
||popsads.link^$all
||adverdirect.com^$all
||bestwinexperience.com^$all
||traffic-go.com^$all
||streamssitesearch.com^$all
||trackertrak.com^$all
||bingstyle.com^$all
||redirekted.com^$all
||blockskipad.com^$all
||adpopblocker.com^$all
||trafficjunction.com^$all
||arclk.net^$all
||btnativenav.com^$all
||1111sale.us^$all
||omgtnc.com^$all
||bestoffer21.info^$all
||n06.biz^$all
||um-bredirect.com^$all
||aff2021.com^$all
||glbltraffic.com^$all
||0redirc.com^$all
||inspirationhistorical.com^$all
||maroohost.online^$all
||amigosdetuciudad.com^$all
||bb-delivery.icu^$all
||praterage-colled.com^$all
||womeniovers.net^$all
||pwrtds.com^$all
||trackbyfast.com^$all
||trfrc.com^$all
||1ts11.top^$all
||dating.hdxvideos.ru^$all
||elevisions.biz^$all
||harzfriends.de^$all
||moviesboys.com/*.shtml$doc
||name0fbestway.com^$all
||sex-is-here.com/*.shtml$doc
||sexall.net/*.shtml$doc
||urtyert.com^$all
||hsrvu.com^$all
||adtr1.com^$all
||axdsz.pro^$all
||datingapp.live^$all
.com/c/*?s1=$doc,domain=com
.net/c/*?s1=$doc,domain=net
/tds/ae?tds_campaign=$doc
||adating.link^$all
||benaughty.com^$all
||bnewsblite.me^$all
||ckre.net^$all
||gotohouse2.cc^$all
||letmessagenow.com^$all
||x-soft.club^$all
||apilond.com^$all
||tracklyfast.com^$all
||pupok.link^$all
||ntvpevnts.com^$all
||aditserve.com^$all
/bdv_rd.dbm?ownid=$doc
?bid=0.*&search_referrer_domain=$doc
||fecebook.com^$all
||festinus.xyz^$all
/apop/redirect/zone/*$doc,popup
/?pl=*&sm=$doc
||fortuneadvert.com^$all
||lalielynaualish.com^$all
||casino-ice.fun^$all

! hacked and abused for redirect
tech4yougadgets.com##^meta[http-equiv="refresh"]
tech4yougadgets.com##^script[src^="data:text/javascript;base64,"]
tech4yougadgets.com##+js(aopr, Notification)
||clicks.affstrack.com^
||weledying-jessed.com^$all
?zoneid=*&cost=0.$doc
/zcredirect?visitid=*&iframeDetected=false|$doc
*/zcvisitor/*?campaignid$doc
||tweitter.com^$all
||mqdownload.com^$all
/pop-click?sid=*&data=$doc
/click?a=*&aff_click_id=$doc
||trwl1.com^$all
||pushmeup.art^$all
||adserver*/?sdomain=$doc,popup
/click.php?data=$doc
&adspot_id=*&cost=0.$doc
||s4f.net^$all
||onlyfreetoonporn.com^$all
||cleardexchange.com^$all
||lone1y.com^$all
||tr1net.com^$all
||usdownload.widost.com^$all
||cpttrcklnk.com^$all
||neighborhoodsluts.com^$all
.xyz/video.php?=*&dating_xyz_0&&0$frame
/click?pid=*&sub1=$doc
! fraud => https://forums.lanik.us/viewtopic.php?f=90&t=45586
||411medias.com^$all
||zedplays.com^$all
||special-update.online^$all
||bookgr8.com^$all
||internetspeedtracker.com^$all
||system-update-new-2021.com^$all
||m7c4d5r7.stackpathcdn.com^$all
||download-app.net^$all
||pu4.biz^$all
||privatesinglesmeet.com^$all
||readytosinglesmeet.com^$all
||cleanphonefast.com^$all
||fastphonebooster.com^$all
||reimageplusminus.me^$all
||luckywinner-web1.com^$all
||theshoparound.com^$all
||loverfuck.com^$all
||onlineplus.click^$all
||trafempire.com^$all
||iamnaughty.com^$all
||iwantu.com^$all
||myhotdates.com^$all
||onenightfriend.com^$doc
||buddygays.com^$all
||localsnapsext.com^$all
||heartmedia.biz^$all
.php?key=*cost=$doc,popup
||totaltopposts.com^$all
||djin.site^$all
||antivirus.landerhd.com^$all
||to6s.biz^$all
||sweetgirls.date^$all
||fast-travel.org^$all
/?clck=*&sid=$doc
||love7date.info^$all
||bestsecretflirt.com^$all
||toplov.com^$all
||gegenhartz.de^$all
||marootrack.co^$all
&dci=*&tds_campaign=$doc
||revpu.sh^$all
||listen-heres.com^$all
/smartlink/?a=$doc
||date.sexpartnercommunity.com/landing/*$doc
/ll/click.php?key=$doc
/?ip=*&uclickhash=$doc
||cheaterboss.com^$all
||cumshots.com^$all
||multiflings.com^$all
||real-women-online.com^$all
/?camp=*&cost=0.$doc
||monglitch.monster^$all
||d13nu0oomnx5ti.cloudfront.net^
||quickdates1.com^$all
||getmackeepersoftpro.xyz^$all
||familysimulator.$all
||adblockfast.com^$all
||bookofsex.com^$all
||mydirtytinders.com^$all
||fuckmore.com^$all
||greengoplatform.com^$all
||transportgoline.com^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/114312
||owlfolk.com^$all
||onlyfreelesbianporn.com^$all
||family-simulators.com^$all
||your-dates-tonight.com^$all
||familysimulatorgame.com^$all
||trackingboost.com^$all
||update-protection.com^$all
||asiaxdate.com^$all
||hotsimulator.com^$all
/aff.php?*&data2=$doc
/tds/ae?*&clickid=$doc
/?clickid=*&ptracker=$doc
||vehicle-insurance-quote.com^$all
^lpkey=*&uclickhash=$doc
||systemupdatesy.life^$all
||d135aysof2oufc.cloudfront.net^$all
/?banner=*&phone=$doc
||advidates.com^$all
||dvjqvdfujjvvkuyvhjqdvbjcmioljbhjmijq.s3.ap-northeast-1.amazonaws.com^$all
/?clickid=*&cost=0.$doc
/index.php?key=*&t1=$doc
||cmprotraf.club^$all
||prelandappslab.com^$all
/registration?theme=*&a_aid=$doc
.top/prize/*.php?c=$doc
||di02.biz^$all
||adultonlineplay.com^$all
||fastandslut.com^$all
&click_price=0.*&click_id=$doc
?brand=*&model=*&lptoken=$doc
?brand=*&fingerprint_=$doc
||familialsimulation.com^$all
/\/(?:[0-9a-z]{7,25}-){9,13}[0-9a-z]{10,15}\/(?:[0-9a-z]+\/)+index\.php/$doc
||imilroshoors.com^$all
||trackhere.pl^$all
||datingformeeting.com^$all
/_dating\d\/index\.html\?aref=/$doc
||familysimulators.$all
^apb=*&ata=mobilemdots^$doc
||uoutube.com^$all
! kkomj.ofchildr.buzz
||0redire.com^$all
||celxkpdir.com^$all
^cep=*&zoneid=$doc
^cep=*&s1=$doc
.top/robot4*&a=$doc,domain=top
||androidnotice.com^$all
||wholenicefeed.com^$all
||updaterlife.com^$all
^s=*&ssk=*&svar=*&z=$doc
/?cid=*&dom=$doc
||totalrecaptcha.top^$all
/?type=*&button=2&clickid=$doc
||valrogrowth.com^$all
^device_model=*&p1=https$doc
||5.61.55.143^
.biz/sw/w1s.js|$script,3p
||mo11.biz^$all
/click.php?key=*&cpc=0&$doc
||37.1.213.100^
/?p=*&sub1=$doc
.xyz/ddos/1tn.html?clickid=$doc
://e.*.top/video/?c=$doc
/?srv_id=*#$doc
||love88.club^$all
.html?cep=*&cost=0.$doc
||familysexsimulators.io^$all
||23.109.87.170^
.live/1*.html?cep=$doc
||edfringe.com/*.php$all
||jmdinfotechs.com^$all
||grakorte.com^$all
/click.php?key=*&zone_id=$doc
/domredirect?visitid=$doc
||smart-redirecting.com^
?adTagId=*&extclickid=$doc
/antibot*/ab.php$xhr,1p
||androiddetection.com^$all
||elooksjustli.one^
||keepsclean.com^$all
||magictrack1.com^
||my-cleaner.info^$all
||news-zolehe.com^$all
||ready-for-download.com^
||rcuacroossonec.com.ua^
||taitlastwebegan.com^$all
||thbstvd.com^
||vpn-connection-security.com^$all
||yourpcnotification.com^$all
/SRC/SRC.php?c=$doc
&tb=redirect&allb=redirect&ob=redirect&href=$doc
||go2click.online^$all
||datingmeetnet.com^$all
||bndl-trp.com^$all
||clean-2-clean.club^$all
||top-official-app.com^$all
||pornonenight.com^$all
||youfindadate.top^$all
?z=*&ymid=$doc
||xypthe.com^
||besluor.com^
/jr.php?gz=$doc
/g?visitorid=*&extra_data2=|$doc
.com/play-2?h=*=eyJ&si1=$doc
/\.com\/proc\.php\?[0-9a-f]{40}$/$doc
||postyourlife.com^$all
||rplnd60.com^$all
||iwinprize.xyz^$all
||shosril.com^
||meetamate.site^
||dm09.biz^$all
/click.php?key=*&dj_placement=$doc
&srv_id=terra#$doc
||ultimate-clean.club^$all
||pcconelove.xyz^$all
||video.redwap.cam^$all
||cractica.xyz^$doc
||beyourxfriend.com^$all
||bybygnom.com^$all
||paderrer.com^$all
||best-site-online.com^
/jump/next.php?r=$doc
||softronline.click^
/?clickid=*&t2=.$doc
||skipalos.xyz^$all
||makenoads.com^$all
||dateclique.life^
||family-simulators.io^$doc
||familyfornicate.com^$doc
||speedtestnow.site^$all
||programprotacol0.com^$all
||lovedatee.net^$all
/dating_lp?keyword=$doc
/bonus/*.php?c=$doc,domain=space|top
||club-gagnant.online^$all
||srengin.com^$all
/common-player-arrow/index.html?var=*&zoneid=$doc
/common-player/index.html?var=*&zoneid=$doc
/not-a-robot/index.html?$doc
||dating.service2u.shop^$all
||amazonaws.com/www.yournewlocalflingfinder7.com/$all
||dirtyfree.games^$all
||familycheaters.net^$all
||register.blissfulltimes.com^$doc
.com/pl?o=$doc
||geheimerseitensprung.com^$all
||matches4you.info^$all
||reifenachbarn.com^$all
/zclkredirect?visitid=$doc
||done-install.com^$all
||felicitakam.ru^$all
||livestreamchatme.com^$all
||livechatlove.store^$all
||naughtymets.com^$all
||linkprotecttrck.com^$all
||www3secure.com^$all
||midnighthookup.today^$all
||padsthai.com^$all
||doppelsbangers.com^$all
||dirtyflirt9.com^$all
||bestvideo.cloud^$all
||bmtracks.com^$all
||doublebangers.com^$all
||laddler.site^$all
||bintrr.top^$all
||tricksygirlw.com^$all
||bustymeets.com^$all
||aht42trk.com^$all
||jasnathvibes.com^$all
||falltes.site^$all
||lewdmilfh22y.com^$all
/mc-test/*/index.php?cid=$doc
||attractivecutiewcx.com^$all
||onecupcoffeereviews.com^$all
||skollett.site^$all
||browserneedupdate.com^
||click-allow.top^
||girlwaityou.com^$all
||feelfllirty.com^$all
||spiendidates.com^$all
||alone-here.online^$all
||meetsworldsm.link^$all
||newonlinedates.com^$all
||tusser.site^$all
/?l=*&ymid=$doc
.com/r2.php?e=$doc
/video_app/adult/*/index.html?*p1=$doc
||apphasten.com^$all
||shinqueen.com^$all
/downloadapp/*/index.html?*p1=$doc
.com/afu.php?zoneid=$doc
||altairaquilae.com^$doc
||himasearch.shop^$doc
||reddriko.site^$all
||mikkerst.com^$all
||sugarfllngs.com^$all
||trripwire.com^$all
||ardentcrackerbo.com^$all
||girlsonlinenow.com^$all
/dating/adult/*/index.html?*p1=$doc
/video-app-default/adult/*/index.html?*p1=$doc
||meetdats.com^$all
||meet-flirts.com^$all
||mltrck.com^$all
||meetshorny.link^$all
||trckoja.com^$all
||trckams.com^$all
||pecuniatrck.com^$all
||smart-tds.com^$all
||nicking-unding.com^$all
||septdate.com^$all
||maturewomenevm5.com^$all
||164.132.74.156^$all
||icetraff.com^$all
||girlsml.com^$all
||pussycat1.online^$all
||hornydateclub.link^$all
||guardlnkcaptcha.com^$all
/gambling/main/default/*/index.html?*p1=$doc
/?p=*5gi3bp*$doc,domain=biz|com
||landings.namapper.com^
||hornysmart.link^$all
||bd4jn7dk9u.com^$all
||throb.fun^$all
||throww.fun^$all
||dattter.shop^$all
||fiverera.click^$all
||imp2.com^$all
||love-places.ru^$all
/click.php?key=*&price=$doc
?click_id=*&tds_cid=$doc
.com/lp*.html?zoneid=$doc
/vpn/adult/*/index.html?*p1=$doc
||fervidpopsyk.com^$all
||dunabear.com^$all
||mialifestyle.com^$all
||miafann.online^$all
||dating365.link^$all
||trckhoul.com^$all
/utility/adult/*/index.html?*p1=$doc
/1/index.html?c=$doc
/2/index.html?c=$doc
||1win-17545.com^
||saucygirls4g.com^$all
||onlysexygirl.com^$all
||binomasia.com^$all
/protectme_new1/index.html?$doc
||nyeeiye2.click^$all
||privatedates.link^$all
||trckotang.com^$all
||ct01.biz^$all
||ehnax.sbs^$all
||mobilerefreshpro.xyz^$all
||rekosx.co.in^$all
||remor.xyz^$all
||github.io/health-records-x-ray$doc
||rusoil24.ru^$all
||adultminglenight.click^$all
||miallafun.com^$all
||derriks.site^$all
||butya.top^$all
||onenightfindertm.com^$all
||datenaughtysingles.click^$all
||flirtyconnection.click^$all
/other/btn/*/index.html?*p1=$doc
||suitablepartner.life^$all
||ohmysweetromancespot.life^$all
||yourdatefind.com^$all
||olosex.pics^$all
||painfont.cyou^$all
||builder.hufs.ac.kr/goLink.jsp?url=xn-$doc
||m.jubilantrefreshingvisit.buzz^$all
||lamilagq.com^$all
/1/index.html?p1=$doc
/fb_video_googleplay/*/index.html?*p1=$doc
! https://github.com/uBlockOrigin/uAssets/issues/24602
! https://www.virustotal.com/gui/url/ce2b833adda2f862d77398203bbe33ea331097ba2a803d1a763492d2ac0d5a60
! https://safeweb.norton.com/report/show?url=discordvip.createsocialcard.top
! https://safeweb.norton.com/report/show?url=discordvip.pages.dev
||mikkim.top^$all
||discordvip.createsocialcard.top^$all
||discordvip.pages.dev^$all
! https://www.virustotal.com/gui/url/e652bc90d72bcda74485e90218143fc41a630b979f72e1659df916e2eb08c28e
^s1=*&click_id=$doc
! https://www.virustotal.com/gui/url/16f860e9177badfbe960f2a9272d652ec0f57898763920b0e039b6292ac3053c
^mh=*&s2=$doc
||onenightchicko.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/68588
! https://github.com/uBlockOrigin/uAssets/issues/8869
! https://github.com/AdguardTeam/AdguardFilters/issues/129112
/^https:\/\/[0-9a-z]{3,}\.[-a-z]{10,}\.(?:li[fv]e|top|xyz)\/[a-z]{8}\/(?:article\d{4}\.doc)?\?utm_campaign=\w{40,}/$doc,match-case,domain=life|live|top|xyz
/^https:\/\/[a-z]{2,3}\d\.biz\/go\/[0-9a-z]{15,18}$/$doc,domain=biz
! fake dating/prize/video sites
! https://github.com/AdguardTeam/AdguardFilters/issues/183117
/^https?:\/\/[0-9a-z]*\.?[-0-9a-z]{4,}\.[a-z]{2,11}\.?[a-z]{0,7}\/(?:[0-9a-z]{6,10}\/)?\/?(?:article\d{4}\.doc)?\?(?:cid=[0-9a-z]+&)?u=[0-9a-z]{7}(?:&t=\d+)?&o=[0-9a-z]{7}/$doc,frame,match-case
! https://github.com/uBlockOrigin/uAssets/commit/df17084b4815e87d420e8adf19bf4959e828e6e5#commitcomment-66510549
/^https?:\/\/[0-9a-z]*\.?[-0-9a-z]{4,}\.[a-z]{2,11}\.?[a-z]{0,7}\/(?:[0-9a-z]{6,10}\/)?\/?(?:article\d{4}\.doc)?\?(?:cid=[0-9a-z]+&)?o=[0-9a-z]{7}(?:&t=\d+)?&u=[0-9a-z]{7}/$doc,frame,match-case
.live/web/?sid=t*~$doc
! https://urlscan.io/result/fb21aa1b-9c79-4ac4-8e82-386403964206/
/?u1=*&o1=*&sid=t*~$doc
! push notification scam
/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?cid=[-_0-9a-zA-Z]{10,36}(?:&qs\d=\S+)?&(?:s|pub)id=[-_0-9a-z{}]{1,32}(?:&s=0\.\d+)?(?:#\S+)?$/$doc,match-case,domain=club|com|info|net|org
/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?(?:pub|s)id=[-_0-9a-z{}]{1,32}(?:&qs\d=\S+)?&cid=[-_0-9a-zA-Z]{10,36}(?:&s=0\.\d+)?(?:#\S+)?$/$doc,match-case,domain=club|com|info|net|org
/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?clickID=[0-9a-f]{32}&sourceID=\d+$/$doc,match-case,domain=club|com|info|net|org

! https://github.com/uBlockOrigin/uAssets/issues/8378
||ogtrk.net^

! https://github.com/uBlockOrigin/uAssets/issues/8466
||91.241.60.117^$all

! https://github.com/uBlockOrigin/uAssets/issues/8630
||mfilecloud.com^$all
||xsharenode.com^$all
||yuppdownload.com^$doc
||drop-cloud.com^$all
||drop-cloud.org^$all
||sharpfiledownload.com^$all
||link-ii.info^$all
||thepcworld.net^$all
||one-click.cc^$all
||descarga.pw^$doc
||soft-lab.pw^$doc
||cheats.ink^$doc
||cheat-world.site^$doc
||clc-link.me^$all
||soft-portal.me^$doc
||app.mediafire.com/qtz1ifx0uetl4$doc
||mediafire.com/folder/10ejpiwio2gfh/$doc
||mediafire.com/folder/47ccu44v3b5sq/$doc
||mediafire.com/folder/s5k8d836a2xwr/$doc
||mediafire.com/folder/atuqt39mahs1x/$doc
||mediafire.com/folder/upkvl96lgm82i/$doc
||mediafire.com/folder/n2cwlepl4zeov/$doc
||mediafire.com/folder/cybqk7ulnmptm/$doc
||mediafire.com/folder/dsnn4gpdlnig4/$doc
||mediafire.com/folder/6q6psz38mqj7b/$doc
||mediafire.com/folder/d36tcrxj403tj/$doc
||www.youtube.com/channel/UCuHeiORKwgjZ5-n8xoq_zVA/$doc
||www.youtube.com/channel/UCCmzcphyrH6Br5eNUnQR2mw/$doc
||www.youtube.com/@pengwincheat/$doc
||sites.google.com/view/amamsoft|$doc
||sites.google.com/view/hubgames|$doc
||sites.google.com/view/ulpackmnn|$doc
||sites.google.com/view/externalcheats-game|$doc
||sites.google.com/view/zxcmell|$doc
||gamefree.vip^$doc
||gocrazy.gg^$doc
||murhack.com^$doc
||mi-hack.com^$doc
||spacecheats.site^$doc
||wow-site.site^$doc
||cheatworld.site^$doc
||sssrust.com^$doc
||softport.fun^$all
||cheat.sierramercado.com^$doc
||upload.advgroup.ru/mvWwiE4h$all
||blazehack.top^$doc
||fusionhacks.pro^$doc
||gameggss.site^$all
||cheatify.co^$doc
! https://cloud-folder.org/KRvjWueEcl/
||cloud-folder.org^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/69036
.systems/signup?ad_domain=$doc,popup

! fake software updaters /redirections
||1perpersqe1.com^$all
||atnpx.com^
||best-winplace.life^$all
||checkup08.biz^
||mfroute.com^
||webpushcloud.top^
||workerz1.com^
||xpayperinstx2.com^
||zvideo-live.com^
/index.php?uid=*&code=ad^$doc
||koitushinterneinnehmen.s3.eu-central-1.amazonaws.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/84632
! https://github.com/AdguardTeam/AdguardFilters/issues/84633
||my-hookup-clubs1.com^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/84634
! https://github.com/AdguardTeam/AdguardFilters/issues/84639
||localsexfinderxxx4.com^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/84638
||sinder8.com^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/84640
||bigosext69.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/9344
||captcharesolving-universe.com^$all

! scam
||trfcbooost.com^$all
||turboadblocker.com^$all
||mysearchflow.com^$all
||youtuba.com^$all
||polyhymnia-mar.com^$all

! Typosquatting: redirects to scam sites
! https://www.reddit.com/r/uBlockOrigin/comments/12ok014/
! https://www.reddit.com/r/uBlockOrigin/comments/12nrio5/
! https://www.reddit.com/r/uBlockOrigin/comments/1392c8f/
||bestbut.com^$all
||girhub.com^$all
||gmkail.com^$all
||goglle.com^$all
||linkefdin.com^
||twitterr.com^$all
||yautube.com^$all
||yourube.com^$all
||youtubee.com^$all
||youtunbe.com^$all
||youutube.com^$all
||youvetube.com^$all
! https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/WJXUELicBQAJ
! "looks like typo squatting"
||wanderlust.rocks^$all
||harmlessmessage.com^$all
||hushemail.net^$all
||hushmailservice.com^$all
||lavaboom.net^$all
||privacyharbor.net^$all
||privacyharbors.com^$all
||prontonmailpro.com^$all
||protonmails.com^$all
||protonmails.net^$all
||safemessagesystems.com^$all
||silencemail.com^$all
||tutamail.net^$all
||tutanoto.com^$all
||messagesafe.net^$all
||msgsafe.net^$all
||best4fuck.com^$all
||aeeonmaill.com^$all
||bamboairways.com.vn^$all,to=~bambooairways.com
||schbnwabh.com^$all,to=~schwab.com

! https://www.huorong.cn/info/1531309921141.html
||kuaizip.com^$all

! https://www.huorong.cn/info/1618397948649.html
! ||zhuangjizhuli.com^$all
! ||zhuangjizhuli.net^$all

! https://www.huorong.cn/info/1627034201698.html
! https://bbs.kafan.cn/thread-2217785-1-1.html
||win.zjwhr.top^$all

! https://github.com/uBlockOrigin/uAssets/pull/9656
||geekotg.com^$all
! https://www.huorong.cn/info/1526627586130.html
||xiaobaixitong.com^$all
! https://www.huorong.cn/info/1577158839403.html
||daque.cn^$all
! https://www.huorong.cn/info/1598957552515.html
||dabaicai.com^$all

! https://www.huorong.cn/info/1617368984641.html
||qqfzn.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/9785
||lubuntu.net^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/92466
/^https:\/\/serch\d{2}\.biz\/\?p=/$doc,domain=biz

! https://github.com/uBlockOrigin/uAssets/issues/4014 and https://github.com/uBlockOrigin/uAssets/issues/9840
! ||driverfix.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/9848
||gghacks.com^$all
||rewardsgiantusa.com^$doc
||promotionsonlineusa.com^$doc
||displayoptoffers.com^$doc
||sweepstakesalerts.com^$doc
||qualityhealth.com^$doc
||consumerproductsusa.com^$doc
||get-cracked.com^$all
||tinyurl.com/gp84uz2$doc
||mediafiire.com^$doc
||onlinepromotionsusa.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/9933
||greenadblocker.com^$doc

! https://github.com/uBlockOrigin/uAssets/pull/10017
||flash.cn^$all

! https://github.com/uBlockOrigin/uAssets/issues/10116
||hentai-tube.me^$doc

! https://github.com/uBlockOrigin/uAssets/commit/5832dfebb4021c639b90c2973946ff7638c2290f#commitcomment-57642161
||foxmods.xyz^$doc

! phishing /malicious
||gesas.it^$doc
||techinnsrl.com^$doc
||studiogiamberardino.it^$doc
||eniedu.com^$doc
||gamletaarnhuset.no^$doc
||possessedcrackinghart.com^$all
||reepratic.com^$all
||5vcjzwb1tsnd82g.caflu87p1d.ru^$all

! phishing /scam /malware
! https://www.virustotal.com/gui/collection/4b1e307754c94e87e17a0c14102b873f17c5d2001f4afa2e58c3a6b98f391710
||dogehype.com^$all
||rblx.land^$all
||csnegotiable.com^$all
||connect-csgo.com^$all
||events-csgo.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/10181
||nbryb.com^$all
||onemacusa.com^$all
||realnetnews.com^$all
||rogueleader.org^$all
||suggestive.com/deals/?cid=$doc

! https://github.com/uBlockOrigin/uAssets/issues/10442
||discordap.$all
||discord*.gift^$all,domain=~discord.gift
||discord*.gifts^$all,domain=~discord.gifts
||discord-give.$all
||discord-nitro.$all
||discordgift.$all,domain=~discordgift.site
||dlscord*.$all
||dlscrod*.$all
||freediscordnitro.$all
||updatemobilee.com^$all
||supreme-ad-blocker.info^$all
||allprizesforme.com^$all
! https://github.com/uBlockOrigin/uAssets/issues/23655
||hypernitro.ru^$all
||nitrohunt.com^$all

! https://github.com/DandelionSprout/adfilt/issues/267
||tekhacks.net^$all

! https://github.com/uBlockOrigin/uAssets/pull/10503
||freedownloadfiles.org^$all

! https://github.com/uBlockOrigin/uAssets/issues/10536
||tw-goldenwinner-57.com^$doc

! https://github.com/iam-py-test/investigations/blob/main/2021/11/25/1.md
! https://github.com/uBlockOrigin/uAssets/pull/10599
||fasterfiles.net^$all
||yunosurveys.com^$all

! https://github.com/uBlockOrigin/uAssets/pull/10774
! https://bbs.kafan.cn/thread-2222478-1-1.html
||a1475.com^$all
! https://bbs.kafan.cn/thread-2220230-1-1.html
||ts-group.com^$all
! https://bbs.kafan.cn/thread-2221500-1-1.html
||88btbtt.com^$all

! https://github.com/uBlockOrigin/uAssets/pull/10997
! fake domain
||jinshanduba.org.cn^$all
! https://bbs.kafan.cn/thread-2170747-1-1.html – malicious script
||phpstat.cntcm.com.cn/phpstat/count/abceffgh/abceffgh.js^$script

! https://github.com/uBlockOrigin/uAssets/pull/11041
||cdn.discordapp.com/attachments/916391647955279943/*^$all

! https://github.com/uBlockOrigin/uAssets/issues/11157
||sideload.net^$doc
||stc.tools^$doc
||stcverify.com^$doc
||1980s.click^$doc

! https://github.com/uBlockOrigin/uAssets/issues/11310
! https://github.com/uBlockOrigin/uAssets/issues/14009
goharpc.com,pccrackbox.com,cracklabel.com,pcwarezbox.com,10crack.com,crackproductkey.com,crackpcsoft.net,crackwinz.com,genuineactivator.com,topcracked.com,fullcrackedpc.com,idmfullcrack.info,idmpatched.com,productkeyfree.org,patchcracks.com,cracksole.com,allsoftwarekeys.com,softwar2crack.com,productkeyforfree.com,wazusoft.com,rootscrack.com,activators4windows.com,procrackhere.com,proproductkey.com,freelicensekey.org,pcsoftz.net,freecrackdownload.com,f4file.com,serialkey360.com,zuketcreation.net,filedownloads.store##[onclick*="open"]
serialkey89.com,installcracks.com,crackserialkey.co,maliksofts.com,crackpropc.com,ayeshapc.com,crackhomes.com,crackspro.co,crackknow.com,4howcrack.com,trycracksoftware.com,getprocrack.co,activationkeys.co,organiccrack.com,softwarance.com,procrackkey.co,download4mac.com,freeactivationkeys.org,explorecrack.com,okproductkey.com,downloadpc.net,up4pc.com,hitproversion.com,cracktube.net,abbaspc.net,crackdownload.org,crackdownload.me,corecrack.com,windowsactivator.info,keygenstore.com,procrackpc.co,getmacos.org,latestproductkey.co,shanpc.com,crackpckey.com,torrentfilefree.com,patchcracks.com,idmfullversion.com,wareskey.com,crackbell.com,newproductkey.com,osproductkey.com,serialkeysfree.org,autocracking.com,crackzoom.com,greencracks.com,profullversion.com,crackswall.com,rootcracks.org,licensekeys.org,softserialkey.com,free4pc.org,productkeys.org,crackedfine.com,idmcrackeys.com,crackedhere.com,licensekeysfree.org,trycracksetup.com,crackedsoft.org,assadpc.com,thecrackbox.com,crackproductkey.com,cracklabel.com,keystool.com,crackedpcs.com,cracksmad.com,licensekeyup.com,chcracked.com,finalcracked.com,activatorpros.com,crackedmod.com,whitecracked.com,cracksoon.com,boxcracked.com,activationkey.org,serialkeypatch.org,crackedsoftpc.com,proapkcrack.com,softscracked.com,freeappstorepc.com,reallpccrack.com,crackfullkey.net,hmzapc.com,zcracked.com,usecracked.com,crackedversion.com,aryancrack.com,piratespc.net,reallcrack.com,fultech.org,crackpro.org,cracksray.com,pcwarezbox.com,cracksmat.com,crackxpoint.com,startcrack.co,crackbros.com,pcfullversion.com,sjcrack.com,repack-games.com,bypassapp.com,crackfury.com,9to5crack.com##center > [class*="buttonPress-"]
free4pc.org,warezcrack.net,freeprosoftz.com,vcracks.com,crackthere.com,keygenfile.net,scracked.com,cyberspc.com,softzcrack.com,crackintopc.com,zslicensekey.com,procrackpc.com,crackshere.com,crackdj.com,cracktopc.com,serialsofts.com,prosoftlink.com,zscracked.com,crackvip.com,windowcrack.com,softsnew.com,licensecrack.net,vstpatch.net,newcrack.info,topkeygen.com,vsthomes.com,vstserial.com,procrackerz.com,pcfullcrack.org,keygenpc.com,bicfic.com,ikcrack.com,downloadcracker.com,karancrack.com,piratesfile.com,activatorwin.com,starcrack.net,crackproduct.com,dgkcrack.com,crackglobal.com,crackcan.com,keygendownloads.com,crackpatched.com,windowsactivators.org,serialsoft.org,crackit.org,productscrack.com,crackurl.info,crackroot.net,crackmak.com,seeratpc.com,crackmix.com,piratepc.me,activators4windows.com,letcracks.com,latestcracked.com,proproductkey.com,fullversionforever.com,vlsoft.net,topcracked.com,goharpc.com,crackeado.net,freecrackdownload.com,assadpc.com,fileoye.com,f4file.com,crackpcsoft.net,crackwinz.com,excrack.com,mahcrack.com,get4pcs.com,keygenwin.com,mycrackfree.com,crackfullpro.com,crackkey4u.com,fileserialkey.com,cracksdat.com,crackgrid.com,licensekeysfree.com,crackkeymac.com,freecrack4u.com,getintomac.net,crackreview.com,activatorskey.com,kuyhaa.cc,cracktel.com,up4crack.com,cracksmat.com,crackbros.com,pcfullversion.com,crackcut.com,game-repack.site,dodi-repacks.download,yasir-252.net,getpcsofts.net,keystool.com,rootcracks.org,procracks.net,newproductkey.com,greencracks.com,zeemalcrack.com##div[class^="code-block code-block-"]
crackkits.com,crackwatch.org,origincrack.com,procrackerz.com,crackhub.org,crackrules.com,zeemalcrack.com,haxmac.cc,cracka2zsoft.com,clevercracks.com,crackpropc.com,crackspro.co,crackknow.com,onhax.in,haxpc.net##.getox
alicracks.com,win-crack.com,productkeyfree.org,productkeyforfree.com,wazusoft.com,piratesfile.com,kalicrack.com,sadeempc.com,letcracks.com,topkeygen.com,thepiratecity.co,torrentmac.net,ryuugames.com,rootscrack.com,pesktop.com,profullversion.com,crackswall.com,proappcrack.com,thecrackbox.com,autocracking.com,zgamespc.com,serialkeysfree.org,torrentfilefree.com,crack11.com##center > a
cracksoftwaress.net##div[style="float: none; margin:10px 0 10px 0; text-align:center;"]
haxnode.net##[id^="haxno-"]
romsdl.net##a[rel="nofollow noreferrer noopener"][target="_blank"]
zuketcreation.net##.cente-1
xcloud.mom##.ads-btns
onhax.in##[class*="buttonPress-"]
cracka2zsoft.com##center > a
origincrack.com##center > button
||xforce-cracks.com^$doc
||fileisready.com^$doc
||coronasfapps.net^$doc
||sustac.com^$all
||thefreesoft.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/15793
! https://github.com/blocklistproject/Lists/issues/933
||sbjjzdwqg41ps.click^$all
||vgfrrtc.click^$all
||vablecable.click^$all
||mcteirx.click^$all
||igluumars.click^$all
||poixtre.click^$all
||ygabgga.click^$all
||browimeto.click^$all
||ambrkx.click^$all
||kcmcbc.click^$all
||ovgtt9j87tgh.world^$all
||wisoper.click^$all
||steamrip.click^$all
||swiftflare.click^$all
||rarz-uploader.com^$all
||rarz-loader.com^$doc
||uploader-rars.com^$doc
||fileexpert.xyz^$all
||securefiles.pro^$all
||filedomain.click^$all
||ewuipld.pro^$all
||dhux7ijh.click^$all
||lokasjc.cfd^$all
||sertyuurs.xyz^$all
||u87yuo9ojh.world^$all
||theipfire.co^$all
||securecracked.info^$all
||sushilprajapati.com^$all
.click/?s=*&g=*&q=files.zip$doc
.click/*?s=*&g=*&q=$script,3p
.click/?h=*&user=$script,3p
.click/?user=*&h=$script,3p
.click/*/?partner=*&pg=$script,3p
.xyz/*?s=*&g=*&q=$script,3p
.xyz/?h=*&user=45$script,3p
.xyz/*/?partner=*&pg=$script,3p
.cfd/?h=*&user=$script,3p
.cfd/?aD*HlwZT1jJnRtcD01JmFkY29kZT0x$script,3p
.one/?h=*&user=$script,3p
.online/?h=*&user=$script,3p
.pro/?h=*&user=$script,3p
%3C?php%20echo%20substr(md5(microtime()),0,rand(10,30));?%3E&$doc
/?*&gkss=$doc,domain=click|pro|xyz|cfd|world

! https://github.com/uBlockOrigin/uAssets/issues/11394
||theannoyingsite.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/109902
/vpnupdate/*/index.html?*p1=$doc

! https://github.com/uBlockOrigin/uAssets/issues/5605#issuecomment-1060013521
||smartklick.biz^$all

! https://github.com/uBlockOrigin/uAssets/issues/12117
||zoosk.online^$all

! https://github.com/uBlockOrigin/uAssets/issues/12194
||fulptube.org^$all

*/bouncy.php?*&inPopUp=$all

! https://github.com/AdguardTeam/AdguardFilters/issues/115960
! https://www.virustotal.com/gui/url/6a4daf9dfa58864522ae7972ab042cf4bab17a48321b96d1952bd384210adcd2
! https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fonpharmvermen.com%2F
||onpharmvermen.com^$doc
||sale24-pills.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/12934
! https://malwaretips.com/blogs/remove-hdvideosnet-com/
||hdvideosnet.com^

! https://github.com/uBlockOrigin/uAssets/issues/13177
! https://github.com/uBlockOrigin/uAssets/issues/13734
||fullcrack.vn^$all

! https://twitter.com/rarara18181818/status/1530214731608313856
/rtbfeed.php?$image,3p

! https://twitter.com/NaomiSuzuki_/status/1536553207299985408 fake chrome
!#if !env_mobile
/^http:\/\/[a-z]{5}\.[a-z]{5}\.com\/[a-z]{10}\.apk$/$doc,match-case,domain=com
!#endif

! https://github.com/uBlockOrigin/uAssets/issues/14034
||fetishpartner.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/125147
||facevideosc.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/126480
/?c=propeller&lpid=$all

! https://github.com/uBlockOrigin/uAssets/issues/14588
||geoflix.me^$all

! https://github.com/uBlockOrigin/uAssets/pull/14985
||skymods.net^$all

! https://github.com/uBlockOrigin/uAssets/pull/15061
||hypixelstorexyz.pages.dev^$all

! torrdroidforpc. com 
||slugmefilehos.xyz^$all
||tinyurl.com/setup-full-version$doc
torrdroidforpc.com##[href^="http://slugmefilehos.xyz/"]

! https://youtu.be/RfE_MreLSIM?t=183
||haxsoft.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/15368
||zenlytrade.com^$all

! https://shahrsakhtafzar.com/fa/news/security/42227-google-play-rubika-app-spy-users-personal-information
! https://farnet.io/1401/08/324594/rubika-is-detected-as-malware/
||rubika.ir^$all,domain=~web.rubika.ir|~m.rubika.ir

! https://twitter.com/chaberi/status/1591139355628044288
||luckypapa.top^$all
! https://twitter.com/harugasumi/status/1591652561182150656
||nbsfmradio.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/15777
||ngazi.co.tz^$all
||video-watch1.com^$all
||musicinmysoul.biz^$all
||choseoffhandsight.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/15937
! https://www.virustotal.com/gui/url/a70d88ffc974f8d9cc5c3561938e95435d20a12a555e8c10d638d2bee5292165
||melodydownloader.com^$all
||flymylife.info^$all
||kochava.com^
||neptunclicks.com^
||arakusus.com^$all
||imgfil.com^$all
||urlcod.com^$all
||tiurll.com^$all
||urlca.com^$all
||lomogd.com^$all
||voutew.com^$all
||abukss.com^$all
||kiknu.com^$all
||konmm.com^$all
||xiuty.com^$all
||pejik.com^$all
||oyndr.com^$all
||lpoms.com^$all
||psfmi.com^$all
||gftet.com^$all
||fwern.com^$all
||ytomb.com^$all
||gghut.com^$all
||nkmoo.com^$all
||nnjou.com^$all
||foilf.com^$all
||vlyyg.com^$all
||pimlm.com^$all
||mciun.com^$all
||sanff.com^$all
||gghhe.com^$all
||ooppnm.com^$all
||vnomm.com^$all
||nnggo.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/136693
/axad/?lpkey=$doc

! https://github.com/uBlockOrigin/uAssets/issues/15990
||vlcdownloads.com^$all

! https://twitter.com/tougei_miryoku/status/1602878676508344320
&t=main9|$doc,domain=live
&t=main9ljs|$doc,domain=live
&t=main9expsess|$doc,domain=live
&t=mono|$doc,domain=info


! https://github.com/uBlockOrigin/uAssets/pull/16038
||hypixei.com^$all

! Fake Steam website
! https://github.com/uBlockOrigin/uAssets/pull/16143
||99box.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/16153
||ezadblocker.com^$all
||watchadsfree.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/16156
||discordoauthverification.onrender.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/16209
||barlear.ru^$all

! https://github.com/uBlockOrigin/uAssets/issues/16257
||kaminarisubs.net^$all

! https://github.com/uBlockOrigin/uAssets/pull/16283
||galeden.cn^$all

! Phishing gathered from Twitter
! https://twitter.com/AP_Zenmashi/status/1614845455271333890
||3utilities.com^$all
! https://twitter.com/defenceability/status/1621446555726385153
||bafybeidzp4sgidm4rvsc32fofkhbz5bdotbekov4mnwzejakvnzhhohysa.ipfs.dweb.link^$all
! https://twitter.com/gorimpthon/status/1622092572188631041
.top/index-install.html|$doc
! https://twitter.com/defenceability/status/1622513282644054016
||r39-g003-h8ig0w-u8f0we8-fgw0rgf-0we880e-rhgth.obs.ap-southeast-2.myhuaweicloud.com^$all
! https://twitter.com/defenceability/status/1622801056379064321
||bafybeiexjty7qmufu5jvbyln5ce5mue2lqw2htafc3api4wwsefxet5k54.ipfs.dweb.link^$all
! https://twitter.com/harugasumi/status/1622816085157511168
||jlydxj.com^$all
! https://twitter.com/defenceability/status/1623182946806169600
||chargerlogistics-dot-exceldocsverification.uk.r.appspot.com^$all
! https://twitter.com/defenceability/status/1623546261126402058
||bizerba-dot-azure-projectfiles.uk.r.appspot.com^$all
! https://twitter.com/harugasumi/status/1627983624447627265
||aajdrp.com^$all
! https://twitter.com/KesaGataMe0/status/1628158467625349122
||italianlottery.com^$all
! https://twitter.com/harugasumi/status/1628577192212066304
||metamasek.cc^$all
! https://twitter.com/KesaGataMe0/status/1629253647212363777
||theexpressiveteacher.com^$all
! https://twitter.com/harugasumi/status/1631096887519608834
||qhyhw.com^$all
! https://twitter.com/harugasumi/status/1633133887047217152
||007itshop.com^$all
! https://twitter.com/harugasumi/status/1634924831564242944
||tonghongad.com^$all
! https://twitter.com/KesaGataMe0/status/1635333975672762369
||thndg.com^$all
! https://twitter.com/ozuma5119/status/1635414656646008833
||e-tax-nta.web.app^$all
! https://twitter.com/harugasumi/status/1637678100594176000
||dinglike.com^$all
! https://twitter.com/ozuma5119/status/1638194144781930496
||blisterlngdate.com^$all
||fapello.xyz^$all
! https://twitter.com/harugasumi/status/1640263282845188098
||pf0755.cn^$all
! https://twitter.com/harugasumi/status/1640690554156507139
||hohshops.com^$all
! https://twitter.com/harugasumi/status/1642524464838762496
||yanrefael.com^$all
! https://twitter.com/masaomi346/status/1649260359763775488
||bavaria-cup.ru^$all
! https://twitter.com/harugasumi/status/1650103143118835712
||patriothomestore.com^$all
! https://twitter.com/harugasumi/status/1650353873218068480
||ameixosszpxpass.top^$all
! https://twitter.com/harugasumi/status/1652527826455908354
||techguykev.com^$all
! https://twitter.com/harugasumi/status/1653330173381734400
||anzenns.com^$all
! https://twitter.com/harugasumi/status/1654108853389393923
||paekatcerd.com^$all
! https://twitter.com/KesaGataMe0/status/1654365174701383681
||pppfgz.wiki^$all
! https://twitter.com/8614miyauchi/status/1654845878933557248
||luckypapa.xyz^$doc
! https://twitter.com/harugasumi/status/1655470724377907200
||manage-fpw-my-sakura-fpw-jp-fpw.impulsion.mu^$all
! https://twitter.com/pingineer_jp/status/1646373106557267968
||honda-law-office.jp/wp-includes/70038/Earthcorejp/|$doc
! https://twitter.com/harugasumi/status/1658279518224764928
||metamasktoken.cc^$all
! https://twitter.com/satontonton/status/1659183900059652098
||itsaol.com^$all
! https://twitter.com/mojito1960/status/1664132222105051138
||tokyu-dept.site^$all
! https://twitter.com/harugasumi/status/1666013629853097984
||qhigh.com^$all
! https://twitter.com/harugasumi/status/1666436001953136641
||yoinst.com^$doc
! https://twitter.com/yuusultultu/status/1668185343907237888
||shindaan.com^$doc
! https://twitter.com/AP_Zenmashi/status/1674082742013755393
||almostmy.com^$all
! https://twitter.com/harugasumi/status/1684166951575359494
||mkwlejfnaklglkasdjg.com^$all
! https://anond.hatelabo.jp/20230726175726
||caponefx.com^$all
! https://twitter.com/harugasumi/status/1687086629230653445
||ifavoritebuy.com^$all
! https://twitter.com/NaomiSuzuki_/status/1687388567738404864
||jpzone.vip^$all
! https://twitter.com/harugasumi/status/1695040230204801514
||aeonhelp.org^$all
! https://twitter.com/masaomi346/status/1696821001785635127
||tokyobag.shop^$all
! https://twitter.com/masaomi346/status/1716272554464473099
||erdfkhxrnanm.top^$all
! https://twitter.com/harugasumi/status/1716678388210180592
||tfehmsag.xyz^$all
! https://twitter.com/AP_Zenmashi/status/1716806757299933372
||authority-uspser.top^$all
! https://twitter.com/AP_Zenmashi/status/1716769008245182549
||www.uspertest.vip^$all
! https://twitter.com/AP_Zenmashi/status/1718671548025077812
||xqfefdkey.xyz^$all
! https://twitter.com/harugasumi/status/1719947641818411189
||aeonasco.com^$all
! https://twitter.com/harugasumi/status/1734701589292597496
||tokyo-waters.com^$all
! https://twitter.com/NaomiSuzuki_/status/1737749366520291403
||app-bitbanlk-cc.weebly.com^$all
||www-bitbenk-app.com^$all
! https://twitter.com/harugasumi/status/1737471939759772024
||artenthusiastany.sa.com^$all
! https://twitter.com/masaomi346/status/1738583074194276633
||oioi-tokye.top^$all
! https://twitter.com/harugasumi/status/1738949406211387713
||tpoint-sites.com^$all
! https://twitter.com/NaomiSuzuki_/status/1740725999845920943
||cordialhoist.top^$all
! https://twitter.com/sm_hn/status/1744607746400621030
||app.stocksj.xyz^
! https://twitter.com/taku888infinity/status/1744992280384360850
||oioi-store.vip^$all
! https://twitter.com/tss_0101/status/1745387976585281810
||totalpcsecure.com^$all
! https://twitter.com/harugasumi/status/1757410796089594078
||gczxaczixzierxzier.com^$all
! https://twitter.com/harugasumi/status/1759907722391408993
||zhikunux.com^$all
! https://twitter.com/harugasumi/status/1767190281139671246
||myetherwalletet.org^$all
! https://twitter.com/KesaGataMe0/status/1770987190379823577
||smart-ex-jp.top^$all
! https://x.com/masa_katahage/status/1791325878129234223
||luckvote.top^$all
! https://x.com/ukaji3/status/1792117912385585331
||aofengniu.com^$all
! https://x.com/harugasumi/status/1792344876081889322
||kuronekoyamato-jp.com^$all
! https://x.com/NaomiSuzuki_/status/1792961735412031777
||appleidliy.com^$all
! https://x.com/catnap707/status/1805416728119361741
||jp-kensatsu.com^$all
! https://x.com/kobefs/status/1806948628831060287
||saichengbs.com^$all
! https://x.com/NaomiSuzuki_/status/1808400909782995443
||npajp.icu^$all
! https://x.com/_3xsun_/status/1809119839036006478
||web-telegvm.org^$all
! https://x.com/ryu_tan_0317/status/1809130556090953765
||m-k-r-5.com^$all
||if-eku3a-fp.com^$all
! https://x.com/masaomi346/status/1809392837009797363
||ilar.cn^$all
! https://x.com/JCyberSec_/status/1809231223220236596
://ev.ri-*gb.com/home/home.php$doc
! https://x.com/masaomi346/status/1810444367792140346
||lunarserver.cn^$all
! https://x.com/itmedia_news/status/1810495098876215790
||sapjp.com^$doc
! https://x.com/masaomi346/status/1812854359463723034
||t-pia.me^$all

! https://onijima.jp/?p=54165
||pocket-888.com^$all

! scam sites
||webuzz.me^$doc
||coup-ling.net^$all
||coup-ling-dm.net^$all
||gokinjolove.jp^$all
||gokinjolove.net^$all
||hornygirlsinapp.com^$all
||id001.jp^$all
||10un.jp^$doc
||3tuhabe.info^$doc
||4256-on.biz^$doc
||5dgja.com^$doc
||6aqr9j.com^$doc
||8senjya.jp^$doc
||a-divination.com^$doc
||ad7mylo.com^$doc
||advice-obtrusive.com^$doc
||after-pop-abc.com^$doc
||aiai-talk.com^$doc
||aiaitalk.com^$doc
||alicekdsod.com^$doc
||amusementpalacegonow.com^$doc
||any2st777fhy.com^$doc
||applaud-acclaim.com^$doc
||aqmessage.jp^$doc
||armed-postulation.com^$doc
||asetpun.com^$doc
||astraeus-star.site^$doc
||best-chat.net^$doc
||best-friendd.net^$doc
||best-friendd2022.net^$doc
||bestxchat.net^$doc
||bluew-web.com^$doc
||car-na.jp^$doc
||cbcdnkyyxubdsrmg.com^$doc
||cdypsqghdgrw.com^$doc
||ch3l.net^$doc
||chl3.net^$doc
||clubfukugyou.work^$doc
||cosmos01.com^$doc
||date-app.net^$doc
||days-neighborhood.com^$doc
||decided-decision.com^$doc
||determinatioon.jp^$doc
||di-ana.jp^$doc
||dosukoudo.net^$doc
||dot-acc.xyz^$doc
||drct-match.com^$doc
||drct-match.net^$doc
||dydynight.org^$doc
||eag1eag1e.com^$doc
||en-kakuri.biz^$doc
||en-mu-su-bi.com^$doc
||entertainment-undamped.net^$doc
||eyes-luv-u.com^$doc
||fapp.work^$doc
||fl-0wer685hjdp300.com^$doc
||fle652.net^$doc
||flk41.com^$doc
||formatch.co.jp^$doc
||fortune-fate.jp^$doc
||fortune-koun.jp^$doc
||fortune-luna.com^$doc
||friendxroom.com^$doc
||ft-sou.com^$doc
||fukumaneki-888.com^$doc
||fukumaneki2211.com^$doc
||g6-gonight.org^$doc
||gabfbnaqodnvfafnj.com^$doc
||gandestin0.jp^$doc
||girls.a-makeup.com^$doc
||gokusenn.jp^$doc
||goldenluck.jp^$doc
||happy468.net^$doc
||happymethod55.com^$doc
||hi-a-so-bi.net^$doc
||himatalk77.net^$doc
||himichat999.net^$doc
||home4ugoog10you.com^$doc
||homeseventen.com^$doc
||hope-for-shiningday.com^$doc
||hori-hori.xyz^$doc
||hp-dy.net^$doc
||hphp-dy.net^$doc
||i.redi-ana.jp^$doc
||i2019.jp^$doc
||indiscerptible-provisionally.jp^$doc
||indi-ana.jp^$doc
||ir0d0ri.jp^$doc
||iri195.net^$doc
||irie3.net^$doc
||ivy2241u.jp^$doc
||jamjamjam.biz^$doc
||k-colorful.jp^$doc
||k-smilegallery.com^$doc
||k1wa.jp^$doc
||kaiun-com.com^$doc
||kaiun-park.jp^$doc
||keep.secret-ace.com^$doc
||koifull.jp^$doc
||koiroom.net^$doc
||koiroomnotice.net^$doc
||koun-yogen.com^$doc
||l-one-one.com^$doc
||l-thr-thr.com^$doc
||l-two-two.com^$doc
||l0vekatsu.com^$doc
||lightn5.com^$doc
||lin-link.net^$doc
||line-line-biz.com^$doc
||link-service.net^$doc
||linkage-linkage.com^$doc
||log.xi-cascade.com^$doc
||love-fit.jp^$doc
||love-letter-dm.com^$doc
||love-letter.info^$doc
||love.sweet199.com^$doc
||loveaholics.com^$doc
||lovemelo.jp^$doc
||lover-stream.com^$doc
||luuce.jp^$doc
||lzogdlorkfssui.net^$doc
||machi-match.info^$doc
||madnna.jp^$doc
||madnna.net^$doc
||mangogo.jp^$doc
||mangogo.work^$doc
||match-mate.jp^$doc
||match-mate.net^$doc
||matimati.site^$doc
||maytail.jp^$doc
||meguri-eye.net^$doc
||meguri-y.net^$doc
||meltiness.jp^$doc
||mobaapo.net^$doc
||moody-night.net^$doc
||moogle-set.space^$doc
||moogle-set.website^$doc
||muhamed-online.com^$doc
||my7love.xyz^$doc
||mystic-wonder.com^$doc
||naja59jg.com^$doc
||navi-match.net^$doc
||near-s.com^$doc
||nearing.jp^$doc
||neverthelessadvertising.com^$doc
||new.hpk0fu9.jp^$doc
||newencounter.pw^$doc
||nydlaepytwuekwhfyvivsf.com^$doc
||on-glamour.xyz^$doc
||one-chan-love.love^$doc
||one-match01.com^$doc
||onega.jp^$doc
||onegaga.jp^$doc
||oprirgreifeuprdlojeocg.com^$doc
||originatepour.com^$doc
||osubstancenasubstitute.com^$doc
||otona-nona.biz^$doc
||otonanona.jp^$doc
||otonatime.net^$doc
||oyasu-mi.tokyo^$doc
||paesbeaqerdrsheuboapyh.com^$doc
||pair-online.jp^$doc
||piasukai.xyz^$doc
||pinkredwhitereef.greenreef.net^$doc
||plati-num.com^$doc
||pr0m.site^$doc
||privatelife.jp^$doc
||psg.make9-salon.com^$doc
||purpleiyvf.com^$doc
||r30address.com^$doc
||r30deai.com^$doc
||reddishpurple.com^$doc
||reverita-t.jp^$doc
||rhsrthrtjhe.com^$doc
||ripiai.com^$doc
||romancetime.jp^$doc
||romancetrain.jp^$doc
||royalclass-dm.com^$doc
||royalclass.info^$doc
||s4fk.destin0.jp^$doc
||salon1999.net^$doc
||salonoshirase.net^$doc
||sen-no-y-t.com^$doc
||shells.pairapple.net^$doc
||slow-piercer.com^$doc
||sns-pair.net^$doc
||soul-ft.com^$doc
||space-high.com^$doc
||spirilp3000.com^$doc
||spirituallounge-3000.com^$doc
||sugarboxxx.net^$doc
||sugulove.com^$doc
||sun.kgi5fgwpp8.com^$doc
||sweetmemo.net^$doc
||sweetmemoryy.com^$doc
||t1a.jp^$doc
||tadaapo123.com^$doc
||tadaapomail.com^$doc
||tadamatch.com^$doc
||tenluuce.jp^$doc
||terinron.com^$doc
||tsumalabo.jp^$doc
||tttt.star095.com^$doc
||tumalabo.net^$doc
||tyotto.jp^$doc
||tyotyo.biz^$doc
||u3ig.com^$doc
||undetermined-whitish.com^$doc
||ura-nai-best.com^$doc
||vanilla-japan.net^$doc
||verita-t.jp^$doc
||very.bes-tplay.com^$doc
||with.2-on-line.com^$doc
||yu0287tk.com^$doc
||yumajhsbsff.com^$doc
||apple22cd.com^$doc
||cherry.mermaid77c.com^$doc
||jivo-ce.jp^$doc
||online2022-shopping.com^$doc
||whimsicalrain.com^$doc
||merachatkaghar.xyz^$all
||myjapanonlineshop.xyz^$all
||mynameserverok.xyz^$all
||slapcleaner.com^$all
||tatikhale.xyz^$all
||2226wurpatw.tokyo^$doc
||app.plum375ap.com^$doc
||asiansgetnaughty.com^$doc
||blackstunners.com^$doc
||budhump.com^$doc
||connect-wp.net^$doc
||electro-magneticwave.com^$doc
||eternal.mobius-loop.net^$doc
||fukuinnnokotoba.com^$doc
||humpbuds.com^$doc
||line-bs.com^$doc
||localsgowild.com^$doc
||naughtyfever.com^$doc
||oo.opaall.com^$doc
||sldg02.com^$doc
||sll-lp1f.com^$doc
||smart-chat.info^$doc
||tenseikaiun.com^$doc
||v1v-g1ft-o7.com^$doc
||woman-busi.com^$doc
||secure-57v.pages.dev^$all
||ll-m-work-2020.com^$doc
||slb3cr9dx9.jp^$doc
||sukui05.com^$doc
||36vv-ssj.com^$doc
||4miracle4.jp^$doc
||7nwa.cxiujudffaitd.jp^$doc
||abc.youtus7216.com^$doc
||amari-ama.com^$doc
||ank.vop-95jszkk.jp^$doc
||axd.jp^$doc
||bambam-bi.com^$doc
||c-al-e1nder.com^$doc
||chocochipu-o.com^$doc
||chumsline.jp^$doc
||cosmos-metatrade.com^$doc
||dandelion-horsetail.work^$doc
||dddiey-s1d2.com^$doc
||ddeityy.com^$doc
||deaimatch.jp^$doc
||facebooc.jp^$doc
||ff-dai.net^$doc
||friendmatch.jp^$doc
||ganesha0910.com^$doc
||ganesha52697.com^$doc
||gtir5die6sutngr.jpn.com^$doc
||happiness-gate.com^$doc
||happy-h0ur.jp^$doc
||heart-s2.com^$doc
||iikanjiyanakanjide.wixsite.com^$doc
||kisekichikara.com^$doc
||l1nefree.com^$doc
||loto-chance.com^$doc
||makoto-in-room.wixsite.com^$doc
||moira-101.com^$doc
||nem0phila000.com^$doc
||nitr5eur6fjhtsw.jpn.com^$doc
||npo-government.jp^$doc
||okai.work^$doc
||p3s18f1d0.com^$doc
||pa-ir.net^$doc
||pdss3a1r.jp^$doc
||pfunding-01.com^$doc
||pororin081.com^$doc
||primal.premium-prism.net^$doc
||rainbow-fortune.biz^$doc
||rainbow-fortune.com^$doc
||rainbow-fortune.jp^$doc
||sall.etchat.jp^$doc
||som7ebb3.com^$doc
||somatryui53.com^$doc
||star-fortune.com^$doc
||supp0.jp^$doc
||toki-no-irodori.com^$doc
||tokyo-get-business.jp^$doc
||tomodachixoxo.wixsite.com^$doc
||triangle123.com^$doc
||trust-tarade.net^$doc
||ukokjxfbdqwffmuvsd.jp^$doc
||umjditpwlb4f.com^$doc
||unmei-kaika.com^$doc
||very10.com^$doc
||vf5rkgirsir8ska.jpn.com^$doc
||vitop7eg5sqwgbk.jpn.com^$doc
||vixii.co^$doc
||wishhoree1890.com^$doc
||with-with.net^$doc
||xs5rur1she7eyry.jpn.com^$doc
||you.y-uh9k7n5y.tokyo^$doc
||57zyazmk.jp^$doc
||a.tlineat.jp^$doc
||abc.lemon2023.com^$doc
||angelchance.com^$doc
||b2ujcm.com^$doc
||be-loaded.com^$doc
||clarinet20.com^$doc
||coralnov.jp^$doc
||deai.amour-site.com^$doc
||deaisaito.jp^$doc
||dia-lover.com^$doc
||doorway-of-guidance.com^$doc
||ed-blissful.com^$doc
||eika-akie220202.com^$doc
||eternalfame461.com^$doc
||ev-upstart.com^$doc
||for-tg.com^$doc
||for20-coco.com^$doc
||fortune-gluck.com^$doc
||fortune-mooon.com^$doc
||ft-flower.com^$doc
||fukugyou2022.net^$doc
||fukukomachi-220513.com^$doc
||fukunoha211013.com^$doc
||fukura210317.com^$doc
||future-marvellous.com^$doc
||gluck-happy.com^$doc
||gluck-fortune.com^$doc
||gluck-happyuranai.com^$doc
||gluck-horoscope.com^$doc
||gluck-luckyuranai.com^$doc
||gluck-miracleuranai.com^$doc
||gluck-secreturanai.com^$doc
||gluck-uranai-gluck.com^$doc
||gluck-uranaisalon.com^$doc
||gogonews.club^$doc
||happiness-sign.com^$doc
||happy-gluck.com^$doc
||happyuranai-gluck.com^$doc
||heart-uranai.com^$doc
||holydivination.com^$doc
||honnkaku-uranai-gluck.com^$doc
||horoscope-gluck.com^$doc
||iflirts.com^$doc
||im-excellent.com^$doc
||infomessagehappy.com^$doc
||iris-808.com^$doc
||jdig56po.com^$doc
||kaaairoo549kai.com^$doc
||kahimeyuki.jp^$doc
||kantan-uranai.com^$doc
||karinaroom.wixsite.com^$doc
||keitai-uranai.com^$doc
||l-chat.jp^$doc
||login-chat.net^$doc
||lovekatsu2277.com^$doc
||luckyuranai-gluck.com^$doc
||match1ng.com^$doc
||mintiia.com^$doc
||mio-love2.wixsite.com^$doc
||miracleuranai-gluck.com^$doc
||moon-1light.com^$doc
||moon1234moom.com^$doc
||mttk2020.jp^$doc
||mystery-forest.com^$doc
||mr-benjamin.com^$doc
||oficialinesp.wixsite.com^$doc
||one-sunnyday.com^$doc
||online-gluck.com^$doc
||onlineuranai-gluck.com^$doc
||p-chi.info^$doc
||pairpure.jp^$doc
||pairpure.jp.net^$doc
||photo-gallery-picture2398.com^$doc
||pinponpaipan.com^$doc
||poke10ve.com^$doc
||pocketlove.jp^$doc
||pos.tnsd-apsq.com^$doc
||ppo.re9t-hmd0.com^$doc
||pulp-days.jp^$doc
||pwo.wane-jctl.com^$doc
||relife0001.com^$doc
||relifemail555.com^$doc
||s-kiseki.jp^$doc
||sebumu28.com^$doc
||secreturanai-gluck.com^$doc
||sevensmooon.com^$doc
||smartphone-uranai.com^$doc
||su-hisenjutu.com^$doc
||suhi-senjutsu.com^$doc
||suhi-sejutsuexpert.com^$doc
||tada10ve.jp^$doc
||tada1ove.com^$doc
||take.the.n-chapter.jp^$doc
||tkmailgirl.xyz^$doc
||toxic-ventilate.com^$doc
||ultratime.info^$doc
||uranai-gluck.com^$doc
||uranai-keitai.com^$doc
||uranai-smartphone.com^$doc
||uranaikantei-gluck.com^$doc
||uranaionline-gluck.com^$doc
||uranaisalon-gluck.com^$doc
||uu-charisma.jp^$doc
||v-yummy.com^$doc
||vroom24.com^$doc
||vroom24365.com^$doc
||webdeai.jp^$doc
||wmw.matchin.jp^$doc
||wn56y7ve57j12zuv7tyj.com^$doc
||woman-good-job.work^$doc
||world.ex-advantage.jp^$doc
||xxa.uji8979erd77.jp^$doc
||y-tradie.com^$doc
||zaitaku-baito.com^$doc
||action0120.com^$doc
||alphabet0120.com^$doc
||best-web2020.com^$doc
||computer0120.com^$doc
||cyber0120.com^$doc
||degmq5l23.jp^$doc
||dosudosuo.com^$doc
||fanfande.net^$doc
||female-good.work^$doc
||forum0120.com^$doc
||foundate-core.net^$doc
||intern0120.com^$doc
||kasegeru-rank.com^$doc
||li-neeee.net^$doc
||linemail.work^$doc
||make2022.com^$doc
||positive0120.com^$doc
||protein0120.com^$doc
||ol2ewq989.jp^$doc
||openhouse0120.com^$doc
||salon.beauty202201.com^$doc
||sbfw.work^$doc
||sma-talk.com^$doc
||smile-4u-2u.com^$doc
||sokkinjobmasu.work^$doc
||tim.time-time-zyunizi.com^$doc
||xxxmake.com^$doc
||yours-mail.com^$doc
||1litteno.home-walil1.jp^$doc
||1st-mail.jp^$doc
||2507u35ia6mk1.com^$doc
||2qpk150djf0ri.jp^$doc
||56fv2z8bfv9.com^$doc
||5jd2tj2idrool.com^$doc
||777.funnyy.net^$doc
||ai-ne.net^$doc
||ai-tas.com^$doc
||ai3tu.com^$doc
||alch.treas.jp^$doc
||amaenbo.jp^$doc
||amourplace.jp^$doc
||ancient-guidance.jp^$doc
||apple012.com^$doc
||ataru-loto.com^$doc
||atchm.net^$doc
||bontruth.com^$doc
||c.onnect.jp^$doc
||c930lhsivns1b.jp^$doc
||chat111room-09.com^$doc
||confidencial-uniq.com^$doc
||connect-jumbo.com^$doc
||cosdate.jp^$doc
||cxbvnmyeruw.com^$doc
||d-hiyori.com^$doc
||daisukimatch.jp^$doc
||defendeerrpro.jp^$doc
||diamond-line.net^$doc
||dinosaur-crown.com^$doc
||dreamatch.jp^$doc
||edge-campaign-japan.com^$doc
||eiqnnmxvun5ge97.com^$doc
||en5wr67sag3.com^$doc
||equation-of-happiness.com^$doc
||eromatchi.jp^$doc
||ev.every-every-happy.com^$doc
||fanta-stic.net^$doc
||flirt.com^$doc
||fx-protrade.net^$doc
||ggcake.tindersplus.net^$doc
||glitter-girls.net^$doc
||gokuhuku.jp^$doc
||gyakusimei.com^$doc
||h-spe.net^$doc
||hapim.net^$doc
||happy-egg.net^$doc
||happylife-partner.com^$doc
||heartmatch.jp^$doc
||hho.yes-hhoyf.com^$doc
||home-22-time.com^$doc
||hy4ied3d.com^$doc
||i5h56ozira7l6.jp^$doc
||ii-earth.com^$doc
||imvcenuietfmw.net^$doc
||jack-roaddinc.jp^$doc
||japanhotties.jp^$doc
||jdoasjfojuhod.com^$doc
||kaiunmegami.jp^$doc
||kaiunrecipe.com^$doc
||koipara.jp^$doc
||lib-333-lib.com^$doc
||local-bang.com^$all
||lovedotto.net^$doc
||lovewish.jp^$doc
||lvmeet.net^$doc
||machimatch.jp^$doc
||matchmix.jp^$doc
||mem.wakuwa98.com^$doc
||mmdem.net^$doc
||mmkat.net^$doc
||mmlnc.net^$doc
||moelove.jp^$doc
||mustwork.work^$doc
||myocean.jp^$doc
||nakayama.chikarakosopower.com^$doc
||netsgram.com^$doc
||nextaex.com^$doc
||one.thx-birthday.com^$doc
||one-two-up.jp^$doc
||one1-day.com^$doc
||otakuplay.jp^$doc
||otakurabu.jp^$doc
||p18d6.hp.peraichi.com^$doc
||pairnavipairnavi.com^$doc
||pakok.net^$doc
||paradise-angel.com^$doc
||peaces-ign.com^$doc
||peachzone.site^$doc
||plaza-l1o0nni-p1aza.com^$doc
||ps-sns0girls.com^$doc
||ptron.net^$doc
||pxk.jp^$doc
||ranch-1and.com^$doc
||removerted.com^$doc
||rexsvj8omabse.jp^$doc
||richheart.completelifetime.com^$doc
||s908b9n62w53u.jp^$doc
||sard1.com^$doc
||sca-letter.com^$doc
||sdhjak.com^$doc
||sea-into-53426l1.com^$doc
||sfsrch.com^$doc
||sns.smle.mobi^$doc
||sokudeai.jp^$doc
||sokuh.net^$doc
||sonic-nicehands.com^$doc
||specialapp-sns.com^$doc
||stowers-service.com^$doc
||sxtown.jp^$doc
||syakoba.com^$doc
||teamwork-project.com^$doc
||tennshinomitibiki01.com^$doc
||tenshinomitibiki.com^$doc
||unafei-kokusai.com^$doc
||upforit.com^$doc
||uptoest.com^$doc
||vhills.net^$doc
||votteetten.com^$doc
||vqydliiyda.net^$doc
||wbpb9.com^$doc
||whim-w.net^$doc
||xn--4dkua4c8143c.jp^$doc
||xn--edkc9m807k.jp^$doc
||xn--n8j0la8wb3547bghe.jp^$doc
||xn--n8jwkyc7fw52nfvd.jp^$doc
||xn--z9j635l1gs.jp^$doc
||xn--z9jzga6u1506a.jp^$doc
||xyg.application-sns.com^$doc
||you4love.jp^$doc
||zmaka.net^$doc
||0281.jp^$doc
||0909810.com^$doc
||093093.jp^$doc
||11093.jp^$doc
||19093.jp^$doc
||2349.jp^$doc
||2h1.jp^$doc
||39093.net^$doc
||39093.tv^$doc
||4151.biz^$doc
||4151.tv^$doc
||55093.com^$doc
||55bdsm.com^$doc
||aeru.tv^$doc
||affairdating.com^$doc
||aitai.biz^$doc
||amantssexy.com^$doc
||askme4date.com^$doc
||b-7.jp^$doc
||babaroa.net^$doc
||bbs-7.jp^$doc
||bbsdx.jp^$doc
||benbbs.net^$doc
||bnbn.jp^$doc
||c-y.jp^$doc
||celcol.jp^$doc
||celebri.jp^$doc
||choucreme.com^$doc
||chy.jp^$doc
||cjok.net^$doc
||crostol.com^$doc
||datenabi.com^$doc
||doem.jp^$doc
||ebifri.com^$doc
||eraberu.jp^$doc
||erocm.com^$doc
||flirtanu.com^$doc
||flirtmoms.com^$doc
||freedom-garden.com^$doc
||freesexmatch.com^$doc
||geh.jp^$doc
||getnaughty.com^$doc
||gofun.jp^$doc
||gspo.jp^$doc
||guj.jp^$doc
||guw.jp^$doc
||h093.net^$doc
||hipma.jp^$doc
||hmai.jp^$doc
||hmhm.jp^$doc
||hoct.cc^$doc
||hxh.jp^$doc
||igetnaughty.com^$doc
||irha.jp^$doc
||jnjn.jp^$doc
||jukcha.com^$doc
||jukuana.net^$doc
||jyk.jp^$doc
||kadak.jp^$doc
||kanbbs.net^$doc
||kokanjo.net^$doc
||koubi.jp^$doc
||koy.jp^$doc
||ksds.jp^$doc
||linblog.info^$doc
||linguette.net^$doc
||locals.dating^$doc
||loveju.net^$doc
||mamak.jp^$doc
||matchx2.com^$doc
||meetdatekiss.com^$doc
||meetpie.net^$doc
||mejp.net^$doc
||mgirl.jp^$doc
||mland.jp^$doc
||mmnav.jp^$doc
||moecoco.com^$doc
||mymymy.net^$doc
||natadecoco.net^$doc
||naughtydate.com^$doc
||newhoney.jp^$doc
||nuide.net^$doc
||oneisan.net^$doc
||oolontya.com^$doc
||pair-pair.com^$doc
||panacota.net^$doc
||piparelli.net^$doc
||pirikitos.com^$doc
||pmew.jp^$doc
||pnav.jp^$doc
||quickflirt.com^$doc
||ricopin.com^$doc
||scnv.jp^$doc
||serev.net^$doc
||sfg.jp^$doc
||sfge.jp^$doc
||singles50.jp^$doc
||smab.jp^$doc
||smism.jp^$doc
||smmax.jp^$doc
||soha.jp^$doc
||sok8.net^$doc
||stomatico.com^$doc
||suguaitaina.com^$doc
||suguao.net^$doc
||sumatuma.com^$doc
||sxe.jp^$doc
||syasei.com^$doc
||tapi2.jp^$doc
||tarto.net^$doc
||tendermeetonline.com^$doc
||tendermeets.com^$doc
||tinql.com^$doc
||together.com^$doc
||maturedating.com^$doc
||topg.jp^$doc
||tubakinohimitsu.amebaownd.com^$doc
||tugonoyoi.com^$doc
||twowife.com^$doc
||txtx.jp^$doc
||ulla.com^$doc
||uniformdating.com^$doc
||wantubad.com^$doc
||wildmeets.com^$doc
||xgal.jp^$doc
||xzo.jp^$doc
||yceleb.com^$doc
||yourskiss.com^$doc
||life-is-luminous.com^$doc
||00ebjdbagyqwt.club^$doc
||0didjsgheje.club^$doc
||5050.fm^$doc
||6xtpke4.com^$doc
||8xpamp5fxd.com^$doc
||aberration-0000000001.com^$doc
||adoptmeantranslate.com^$doc
||after-7.net^$doc
||aikatuz.jp^$doc
||all-time-domain.com^$doc
||always-happy-fortune.com^$doc
||alwayslike.safestspot.jp^$doc
||anau6stg6y.com^$doc
||andyou2.com^$doc
||aphrodite-astrology.net^$doc
||apppleheaddd.jp^$doc
||bestcosme.jp^$doc
||browser9182.web.fc2.com^$doc
||burmesterone.jp^$doc
||catchmetalk.com^$doc
||charecttorr.jp^$doc
||charm-n.com^$doc
||chesscheckersvariation.com^$doc
||circle7-bd.com^$doc
||club-house.link^$doc
||cocoro-liberty.com^$doc
||coin-of-fate.jp^$doc
||d-sr.net^$doc
||d-will.net^$doc
||daylighteel.com^$doc
||ddxdda.unusualdate.com^$doc
||digital-mail.jp^$doc
||divination-truth.com^$doc
||during-the-holiday.com^$doc
||e-d-en.com^$doc
||every-au.com^$doc
||every-bisque.com^$doc
||every-blanched.com^$doc
||every-cute.com^$doc
||every-dark.com^$doc
||every-dodo.com^$doc
||every-enjoy.com^$doc
||every-isb.com^$doc
||every-line1.com^$doc
||every-line2.com^$doc
||every-nejp.com^$doc
||every-pcpc.com^$doc
||every-salmon.com^$doc
||every-super.com^$doc
||every-toroku1.com^$doc
||every-toroku2.com^$doc
||every-toroku3.com^$doc
||experiencedlawsuit.com^$doc
||febdd.info^$doc
||fortune-yakata.com^$doc
||gate-1-spiritual.com^$doc
||gnan.jp^$doc
||gnchag.com^$doc
||gran-danker.jp^$doc
||gyakunan.net^$doc
||happiness-gate01.com^$doc
||higher-mainnd.jp^$doc
||igazre.com^$doc
||jinsei-uranai2023.com^$doc
||just1ce.net^$doc
||kantei-oracle.com^$doc
||kinhako-m02.com^$doc
||lover-c.com^$doc
||mamagathering.org^$doc
||match007.jp^$doc
||mc-aoyama.com^$doc
||miracle-door.com^$doc
||mother-sku.jp^$doc
||okanekasegeru.com^$doc
||online-777.jp^$doc
||p-mel.net^$doc
||part-ner01.jp^$doc
||peachcafe.net^$doc
||poison-idea.com^$doc
||polaris-775.com^$doc
||pollutionsatisfyadopt.com^$doc
||prophecy-of-fate.com^$doc
||rosaca-nina.net^$doc
||s-space.jp^$doc
||sokuai.jp^$doc
||sp-gt-meet.com^$doc
||spring-sealion.com^$doc
||spiritual-gt.com^$doc
||spiritual-leading.com^$doc
||sta.star-star777.com^$doc
||star-superstar-yellow.com^$doc
||sugusagasu.com^$doc
||sukui01.com^$doc
||sukui02.com^$doc
||sukui03.com^$doc
||sukui04.com^$doc
||sukuinote.jp^$doc
||sumsmsp.info^$doc
||szddbxyumfcf.net^$doc
||tarot2fs.com^$doc
||telet.me^$doc
||tomikuji.com^$doc
||ugfdwmausxfy.net^$doc
||unmei2023.com^$doc
||uranai-hit.com^$doc
||uranai-like.com^$doc
||utugmz93sr.com^$doc
||wastearguewasteill.com^$doc
||web.fe-vrier.com^$doc
||whpbrmdss.com^$doc
||will-kantei.com^$doc
||wkdk.jp^$doc
||6xy-zg.com^$doc
||cwa-2020.com^$doc
||dwoetbarcrooplsloiwh.com^$doc
||gargar.making-garden.com^$doc
||happy-popice.com^$doc
||kronos2022.com^$doc
||like-baloon-leaf.com^$doc
||mor.chance-10dayful.com^$doc
||octagongon.com^$doc
||s.meru.jp^$doc
||ts7nept8.com^$doc
||vcrwv.monster^$doc
||x-yz6asktoi.com^$doc
||x-yzn6.com^$doc
||x6-yz-kzyx0.com^$doc
||x6-yzk.com^$doc
||xy-z6goo-xyz.com^$doc
||xy-z6x.com^$doc
||ytjon-d2s1ah.com^$doc
||lets-tip315.com^$doc
||loveri.net^$doc
||lvli.jp^$doc
||m2sg.jp^$doc
||mamasg.net^$doc
||mcbien.net^$doc
||mlaligms205s.com^$doc
||rollfa.net^$doc
||rollin-12fate.com^$doc
||rollin-fat1e.com^$doc
||sgua.jp^$doc
||spilov.net^$doc
||splv.jp^$doc
||suguap.net^$doc
||vien.jp^$doc
||a-power.jp^$doc
||eternal-station.jp^$doc
||friends-connect.com^$doc
||kinun-2023.com^$doc
||madonnaoasis.com^$doc
||msg.metamessen.net^$doc
||o-cean-fortune.biz^$doc
||o-cean-fortune.com^$doc
||secondary-with.com^$doc
||fure-ai.com^$doc
||fure-ai.site^$doc
||happy-classic.com^$doc
||rea-love.net^$doc
||natu.natural-natural-pure.com^$doc
||btc8228.com^$all
||btc9339.com^$all
||abacus-prefix.com^$doc
||celezma.net^$doc
||dismay-sacred.com^$doc
||loveru.jp^$doc
||morale-yellow.com^$doc
||t1amo.jp^$doc
||uggstore.online^$doc
||fair.alivio-platform.com^$doc
||pair-seat.net^$doc
||pairseat.net^$doc
||sez.jp^$doc
||matching-go.jp^$doc
||kira-kira.blue^$doc
||p-chi.tech^$doc
||rearea2022.com^$doc
||vanilla-japan.love^$doc
||jtybleua.jp^$doc
||mai-tel.jp^$doc
||sfc.bz^$doc
||sfget.jp^$doc
||download-campaign.com^$doc
||fine-cloud.net^$doc
||float-next.com^$doc
||matomenever.com^$doc
||mid-round.com^$doc
||otonanojikan13579.net^$doc
||up-loop.net^$doc
||videochat-fan.com^$doc
||mamamour.net^$doc
||2chlovers.web.fc2.com^$doc
||lovez.jp^$doc
||moremorelove.net^$doc
||after-noon.jp^$doc
||bse.bb64bb8.com^$doc
||chatchu.jp^$doc
||cupid-chat.net^$doc
||docommo.com^$doc
||doconno.com^$doc
||f9ng8gb.com^$doc
||fx640b4a8v2n.net^$doc
||grace-pot.com^$doc
||leaf.lau-rier.com^$doc
||maiwai2.jp^$doc
||moon1hit.com^$doc
||moonlight-ebbandflow.com^$doc
||nanroom.net^$doc
||nowtuma.net^$doc
||p39ztyx.com^$doc
||pastelism02.jpn.com^$doc
||pineapplecake-yummy.com^$doc
||ssq.spofbd99.com^$doc
||t26dmg9.com^$doc
||tokuyama-kaiun.com^$doc
||vy8monlf1t.com^$doc
||wifekai.net^$doc
||yummy-yuy.com^$doc
||yummy2-yuy.com^$doc
||zerocha.jp^$doc
||catchato10.com^$doc
||chat-search.com^$doc
||happy.pp99adad.com^$doc
||hhh.u3se3jg3gae.com^$doc
||hzalwkcjbudom.info^$doc
||ii.iriiss.com^$doc
||let.attract1v3.com^$doc
||lmoox5.net^$doc
||mchynxqpiswuj.info^$doc
||mtl.metel-x-x-x.com^$doc
||panlcake.net^$doc
||paradise.shine-site.com^$doc
||s21aabb6.com^$doc
||sstt22free5.com^$doc
||utg.ri64-pdmv.com^$doc
||venus-uranainoizumi.com^$doc
||vgwkhaujofqxe.info^$doc
||whuaqdsfjktgr.info^$doc
||vegansweeets.jp^$doc
||getmatch.jp^$doc
||hn-mizuki.com^$doc
||urara02032023.com^$doc
||ang.el-mail.online^$doc
||atre-frer6.com^$doc
||berate-expressive.com^$doc
||comcom0511.com^$doc
||gloria-divination.$doc
||mothersmilk.jp^$doc
||otomachi.jp^$doc
||smoothie-smoothie.jp^$doc
||suffix-consignment.com^$doc
||amazonlogistics.jp^$all
||fukusenkan.com^$doc
||koi-chat.net^$doc
||sachikru.com^$doc
||sachikru1.com^$doc
||sachikru3.com^$doc
||sachikru4.com^$doc
||sachikru5.com^$doc
||sachikru6.com^$doc
||sachikru7.com^$doc
||sachikru8.com^$doc
||bookblack5208w.com^$doc
||freest200look.com^$doc
||leterthe-gese.com^$doc
||off-wiloeese.com^$doc
||the-style-free.info^$doc
||weekenddogkeep.com^$doc
||koundayori.com^$doc
||second-love-love.jp^$doc
||deaiai55.com^$doc
||kokocha.site^$doc
||hjytu75fro0.jp^$doc
||secssnetplan.jp^$doc
||68a9i9w.com^$doc
||988s82r.com^$doc
||efzhm85.com^$doc
||rhyprua.com^$doc
||tui8s2e.com^$doc
||emyqsvk7zw.com^$doc
||evqhubkfh8.com^$doc
||jinuja5zgm.com^$doc
||ljqq93npbr.com^$doc
||n9zxgxpdu6.com^$doc
||pnw0kbzjtt.com^$doc
||sdlbtwi3lr.com^$doc
||tvngrq6yat.com^$doc
||vjybuykaxz4.com^$doc
||willgood-will.com^$doc
||y2sysagetf.com^$doc
||san-dast.net^$doc
||dedestin0.jp^$doc
||fortune-fortuna.com^$doc
||legamee.jp^$doc
||miraiah.jp^$doc
||sen8senjya.jp^$doc
||happy-matome.com^$doc
||fukuroou.jp^$doc
||kennsaku.jp^$doc
||matchingsite.jp^$doc
||for.life-thrones.com^$doc
||7wbb.com^$doc
||me-ru.jp^$doc
||byoep.moustachespontaneous.com^$doc
||categorywrench.com^$doc
||moustachespontaneous.com^$doc
||waterproofvile.com^$doc
||ht54s-grf.com^$doc
||hyop-ed12.com^$doc
||ss7-yhw0-wk.com^$doc
||w-dbl.com^$doc
||recruit-gold.com^$doc
||tokimake.site^$doc
||tokimeku.xyz^$doc
||6q5c53c6sg4z9vkkpqnc.com^$doc
||emoti-on.com^$doc
||jinsei-undesu.com^$doc
||sftqg7t9cyzjaw0b.com^$doc
||spiritual-jp.com^$doc
||unki-josho.com^$doc
||xdpiwrx7ub.net^$doc
||feve-r.com^$doc
||ma-tching.com^$doc
||mugicom.live^$doc
||romanc-e.com^$doc
||sns3615.com^$doc
||talkthattalkllc.com^$doc
||go-ld-li-ne.site^$doc
||gold-line.click^$doc
||gold-line.online^$doc
||cloudmax.jp^$doc
||mama-piece.com^$doc
||mamakatu42.blogspot.com^$doc
||princess2022.com^$doc
||vivian.jp.net^$doc
||cha-nce.net^$doc
||mirusiru.online^$doc
||mirusiru.site^$doc
||mobileverify.net^$doc
||grabgiftcard.net^$doc
||giftcardhero.net^$doc
||ewapps.top^$all
||awapps.cfd^$all
||awapp.store^$doc
||cleansoft.online^$doc
||softlab.fun^$doc
||appxfree.com^$doc
||appxfree.top^$doc
||vbucks.buzz^$doc
||vbucks.cloud^$doc
||absent-pretty.net^$doc
||ahmrispfewmkhbwz.com^$doc
||every0028.jp^$doc
||flash0007.jp^$doc
||grasshoppermirro.com^$doc
||nuts.sugar1105.com^$doc
||tatuieaawtkjnxzj.com^$doc
||vacuumcleanerani.com^$doc
||prc.pr-e-c-i-o-us.com^$doc
||vghe0-ed7-d.com^$doc
||kounnomichishirube.net^$doc
||lucksignpost0804.org^$doc
||lightning02s.com^$doc
||lightning0707.com^$doc
||jkytd-rd3.com^$doc
||le.tter99.com^$doc
||silversex.com^$doc
||flirttime.com^$doc
||eyesput55.com^$doc
||scene7goal3.work^$doc
||all-friends0817.com^$doc
||ma-rry.net^$doc
||ma-rry.site^$doc
||altdorfer-niklaus.com^$doc
||eliminateabyss.com^$doc
||lucky-star69.com^$doc
||lucky-star8.com^$doc
||tulip-tulip.net^$doc
||koinik.net^$doc
||ukylcim.top^$doc
||gallery-sight.com^$doc
||yurizono.com^$doc
||9gcpz8hu.com^$doc
||bobonheur.com^$doc
||cit-rine.com^$doc
||ctn-ctn.com^$doc
||holy-kantei.com^$doc
||sk3-renew.com^$doc
||unki-max.com^$doc
||boost6182ll.com^$doc
||eir.tdhg7ppa.com^$doc
||grea-fd12dr.com^$doc
||cpd.ipllo4ys.com^$doc
||htjrs-fgds.com^$doc
||recklessdroughtburglar.com^$doc
||the-match.jp^$doc
||gekkei-jyu-gekkei-jyu.com^$doc
||gekkeijyu-gekkeijyu.com^$doc
||lemonadebb.net^$doc
||naruf4253090.com^$doc
||ev4ev.biz^$doc
||evkakuri2308.click^$doc
||gtex3.com^$doc
||nice.par-even.com^$doc
||pr-0m.link^$doc
||wa-nago-wagona.com^$doc
||chi-yo-1807chiyo.com^$doc
||fd-2.shop^$doc
||cuddle.koi-ba-na.com^$doc
||globalreward77.com^$doc
||jukukoi.jp^$doc
||jukukoi.me^$doc
||buono2023-web.com^$doc
||a3-1089115.com^$doc
||cloud3-3679244.com^$doc
||d3-8692227.com^$doc
||ic-05lion.com^$doc
||m3-8498263.com^$doc
||michi-fortune.jp^$doc
||miemashita.jp^$doc
||p3-5723935.com^$doc
||s3-8388725.com^$doc
||x3-001-8103.com^$doc
||x3-228-1713.com^$doc
||lovely-lovely.com^$doc
||shareno1wish.net^$doc
||cue-find.com^$doc
||d-position.com^$doc
||d-position.shop^$doc
||kaiunnookite.com^$doc
||bs-03-6743-2266.net^$doc
||love2-mail.com^$doc
||gokinjoscreen.com^$doc
||koun-wa.com^$doc
||koto-dama-kin.com^$doc
||one----talk.com^$doc
||pc.deainobasyo.jp^$doc
||ewfwetqfbhmlodz.com^$doc
||wkcs.onesmbg-login.com^$doc
||mariage-inc.com^$doc
||tenmei-michibiki.com^$doc
||10vekatu.jp^$doc
||a-ro-ma.com^$doc
||a1tai7.jp^$doc
||atchao.jp^$doc
||bestchat-chat.com^$doc
||brs.bi09aso-yo.xyz^$doc
||brs.vacat81-best.tokyo^$doc
||chu-chu.jp^$doc
||deai-labo.site^$doc
||enenkatukatumail.com^$doc
||enjoylife2001.net^$doc
||ffr548tyfhe.jp^$doc
||fure-i.site^$doc
||k0k0cha.link^$doc
||ir0d0r1.jp^$doc
||lovelyhappy.jp^$doc
||lovemelo.net^$doc
||ma-t-chy.link^$doc
||maiwa12.jp^$doc
||mat-chy.site^$doc
||me08mo.com^$doc
||media-matchinggo.com^$doc
||meltiest.jp^$doc
||meltylove.jp^$doc
||mem44.com^$doc
||merukore.jp^$doc
||moremoremail.net^$doc
||p-pure.jp^$doc
||p0cket1ove.jp^$doc
||p0rte.site^$doc
||pairife.jp^$doc
||platinumpla2023.com^$doc
||riarialuvluv2023.com^$doc
||romance-time.net^$doc
||sez-pr.com^$doc
||soklove.net^$doc
||sugulove777.com^$doc
||ta0dal0ve.com/^$doc
||ta1kcall.site^$doc
||tada-love.jp^$doc
||tokimekitaine.net^$doc
||tokimekimaildesu.net^$doc
||tokumeichat135.net^$doc
||tokumeichatmail.net^$doc
||tsumatsuma.xyz^$doc
||olive-ft.jp^$doc
||fortuna-destiny.com^$doc
||fountain-unmei.com^$doc
||happylife-10uanai.com^$doc
||holy-12seizaholy.com^$doc
||shiawasenokotae.com^$doc
||super-spfortune.com^$doc
||welcome-happyroad.com^$doc
||az-l.com^$doc
||luna-t.net^$doc
||sm-bt.net^$doc
||sm-heaven.com^$doc
||smdotcom.com^$doc
||seselagi.com^$doc
||nc2.site^$doc
||recipe000.tokyo^$doc
||5y4-hters-765.jp^$doc
||h5t4rsw-htrs.jp^$doc
||h6t4sw-nhytd.jp^$doc
||neyr5s-e45f.jp^$doc
||uj6y5defg.jp^$doc
||y54wdrg.com^$doc
||peach2023.net^$doc
||gokinjo---hot.com^$doc
||iwish.ltd^$doc
||matchin.site^$doc
||metalepsa.me^$doc
||nysoctieotion.tech^$doc
||peroiramus.me^$doc
||www.academicsingles.jp^$doc
||ado.wish-best.com^$doc
||ga6jkbl.jp^$doc
||keiunkan.com^$doc
||matching-search.jp^$doc
||matching-searchh.jp^$doc
||falsettoy.click^$doc
||on-li-ne.net^$doc
||rayon-mid.com^$doc
||pc.mt3sys.com^$doc
||as25ap.com^$doc
||asap15.com^$doc
||sm8787.com^$doc
||pc.line-center.jp^$doc
||pc.peach1ink.jp^$doc
||felicitaline.com^$doc
||foretheure.jp^$doc
||alt.com^$doc
||keenchimairaanthem.com^$doc
||pc.h1ma.jp^$doc
||pc.ta1k.jp^$doc
||63jehxd5vfi6.jp^$doc
||imiqmcyj4wjj.jp^$doc
||kev8ffh2n9a8.jp^$doc
||qeucuzpbv6jq.jp^$doc
||ccappu-ccinno.com^$doc
||ccappuccinno.com^$doc
||happiness-road.net^$doc
||daddyclub.net^$doc
||papamagic.net^$doc
||hoshi-no-michibiki.com^$doc
||hoshi-no-michibiki.jp^$doc
||miracle.magic-connect.net^$doc
||shinoriori2023.jp^$doc
||book-aerkeep.com^$doc
||libiro-aree22.com^$doc
||look302se.com^$doc
||premium-2023.click^$doc
||premium-2023.info^$doc
||premium-lucky.com^$doc
||fun-uranai.com^$doc
||hrt-hrt.com^$doc
||uranai-su-ki.com^$doc
||million-vita128.com^$doc
||eb-nav.com^$doc
||global-riward77.com^$doc
||x9mw.com^$doc
||essence-one.net^$doc
||himegoto-time.com^$doc
||himegoto-time.jp^$doc
||happiness-app.net^$doc
||happyhappylovely.jp^$doc
||lovelylovelyhappy.jp^$doc
||matching364.com^$doc
||pc.maleana.jp^$doc
||dr5rmdxa.com^$doc
||efmg29.com^$doc
||executiveclub-x3.com^$doc
||kinkyu-desuku-27.com^$doc
||pktbuu.morau.top^$doc
||qxb0v.com^$doc
||w0o.eu^$doc
||zj5c3.com^$doc
||e-summer.top^$doc
||ehxp.e-flo.top^$doc
||getchance.top^$doc
||ilovu.store^$doc
||in-sight.top^$doc
||moneyget.top^$doc
||millionget.top^$doc
||premiers.top^$doc
||sugukasegu.top^$doc
||tbotb.top^$doc
||tyfto.friendmap.top^$doc
||wdujqj.repaymen.top^$doc
||iris-making.com^$doc
||lm-mousey-happy.com^$doc
||speeds5-mmiliked.com^$doc
||blackknocckk.jp^$doc
||finelucckyy.jp^$doc
||nokiseitjnemnew.jp^$doc
||vi.violleet.com^$doc
||gg.garrnnet.com^$doc
||scmhubffttnnu.jp^$doc
||super-grander.jp^$doc
||dznufijtjbgyi.jp^$doc
||fl.floriittee.com^$doc
||ll.liberrttyy.com^$doc
||6kk2a4t.com^$doc
||eujsiyajep.niigata.jp^$doc
||fnebvr1a.com^$doc
||humane-urgent.com^$doc
||kantanemusuu.jp^$doc
||nextgenpeacety.jp^$doc
||sp-ciro-gov.com^$doc
||startwork-introduce.com^$doc
||success-dream.jp^$doc
||super-express-f.com^$doc
||lovetwipaco.com^$doc
||sharesharemail.net^$doc
||high-incomes.com^$doc
||line-channel-info.com^$doc
||line-special-information.com^$doc
||pretty-topspace.com^$doc
||safety-line-message.com^$doc
||secure-line-network.com^$doc
||fun-comu.click^$doc
||fun-comu.space^$doc
||make-money-happy.site^$doc
||money-present.com^$doc
||rich-cash.fun^$doc
||t-gotousen.fun^$doc
||t-gotousen.site^$doc
||t-haihukikaku.site^$doc
||take-money-happy.fun^$doc
||take-money-happy.site^$doc
||tw-happy.space^$doc
||tw-lucky.site^$doc
||luxury-dream.site^$doc
||make-money-happy.online^$doc
||t-haihukikaku.online^$doc
||t-present.online^$doc
||rich-cash.site^$doc
||fr4aj87j.com^$doc
||island-vanity.com^$doc
||side-joblp.com^$doc
||32k987.com^$doc
||71l0b.com^$doc
||ajv06.com^$doc
||f8dt6.com^$doc
||i7fq6o.com^$doc
||m65ln.com^$doc
||mphb0.com^$doc
||sj74is.com^$doc
||e-chat1.com^$doc
||fc67x.com^$doc
||benefit-billion.com^$doc
||condemn-fearful.com^$doc
||heading-towards.net^$doc
||search-happiness.jp^$doc
||5hjd9t.com^$doc
||cd7z7b.com^$doc
||d8yfr7.com^$doc
||everydaykennsyou.com^$doc
||king-sweepstakes.com^$doc
||qaghoz.com^$doc
||rjwc95.com^$doc
||xhictk.com^$doc
||64ws9x.com^$doc
||npdptp.com^$doc
||resort-life7.com^$doc
||friendmap.top^$doc
||moraeru.top^$doc
||mmnn.jp^$doc
||pxmmm23.net^$doc
||lutherinfo2.com^$doc
||mamatech.pepper.jp^$doc
||manpuku-ja.com^$doc
||manpuku-ja.jp^$doc
||ms-lounge.net^$doc
||sm-sl.net^$doc
||ssr1000.com^$doc
||sslovexxxrr.com^$doc
||st-art.life^$doc
||ten-un.com^$doc
||xanadu-du.com^$doc
||z9iq6vt.com^$doc
||yuppie-yuppie.com^$doc
||enchantedfruit.com^$doc
||meltsweetbite.com^$doc
||okanekubari.site^$doc
||4kx3a.com^$doc
||ce0oil1ibu.com^$doc
||ezg-iy.com^$doc
||hjr-wq.com^$doc
||olt-nw.com^$doc
||abrhsuoamrnrx.com^$doc
||agqycbadbofog.com^$doc
||awagbbxlyqoys.com^$doc
||blfeiywbthjom.com^$doc
||brwasnlipggqq.com^$doc
||bvwozybuqztvg.com^$doc
||cqcwalvjljddvrebl.com^$doc
||efljiccdztabg.com^$doc
||fbgajrlmjiotb.com^$doc
||hneeeixuyivwg.com^$doc
||hrzonvohdppab.com^$doc
||iinfssspoipo.com^$doc
||jjvkbzdungkop.com^$doc
||jqbwhhxvcytgh.com^$doc
||jvuihhlzixawx.com^$doc
||khrbuumwcntfx.com^$doc
||kmnvwjrbskybh.com^$doc
||kswrkbdsejqpm.com^$doc
||lwjrudzmzygol.com^$doc
||motsrgidyzoaz.com^$doc
||nlfhtxehjzeti.com^$doc
||ptgt.monuone-present.com^$doc
||rsgyndxlwfurm.com^$doc
||sfxmgzhaeeguq.com^$doc
||txczlzcskwozcjcptvvyz.com^$doc
||zekhauukqrqwx.com^$doc
||mugen-online.com^$doc
||pnieair.cloud^$doc
||shiny-up.com^$doc
||unlock-the-bg2.com^$doc
||yl-0-wf.com^$doc
||auto.giz-store.com^$doc
||heat.tsu-bas.com^$doc
||hapihapi24.com^$doc
||layer-pj.com^$doc
||xn--gmqz9af0r9srup0c.com^$doc
||shop22.fishkillbaptistnurseryschool.org^$all
||a-labyrinth.com^$doc
||du0.jp^$doc
||hapinet.net^$doc
||kiseki.com^$doc
||b.eeaach.com^$doc
||gre.green-g-r-ee-n.com^$doc
||msdjdhj-tyq.com^$doc
||fukutoku-miyako.com^$doc
||ka73-urara.club^$doc
||uraaka.net^$doc
||peraichi.com/landing_pages/view/s8j8k/$doc
||lovelove-on-line.site^$doc
||gmatch.jp^$doc
||gppw5cm4.com^$doc
||mai1b0x.com^$doc
||majiainc.com^$doc
||m4x8ndwhed9.com^$doc
||meet-up.jp^$doc
||torquetrove.com^$doc
||getm.site^$doc
||kuronekoyamzyato.top^$all
||9npze.com^$doc
||gsi3t.com^$doc
||support-e-n.com^$doc
||n43vr.com^$doc
||qf6tm5ug.com^$doc
||azbzcz.com^$doc
||candycandypop.com^$doc
||fate-15.com^$doc
||loveste.cc^$doc
||marketingcareer.jp^$doc
||showa-klub.com^$doc
||lines.fxmwjjeusmulsjf.com^$doc
||new.deeper-start.com^$doc
||xczzfvxknafgoawjtv.com^$doc
||lover.new-n-e-x-u-s.com^$doc
||lines.hdaprocqxmthax.com^$doc
||lshyodrgehlnyswsjq.com^$doc
||lum-i0e0r0e.com^$doc
||himitumatch.com^$doc
||a9gcq7sc.com^$doc
||yy4rhgzd.com^$doc
||fallenscfwqy2pbin0.jp^$doc
||genetick4zwtf6c8mh5.jp^$doc
||harmfuleqwrj14xnvdc.jp^$doc
||marginz03nx1oe.jp^$doc
||nextb5vzysjcq8d0.jp^$doc
||outdoorvzk6la39o7r8.jp^$doc
||political7450163928.jp^$doc
||reasonable5786mi4n3srxq.jp^$doc
||supervision6912305847.jp^$doc
||tender9041257836.jp^$doc
||veryverythanks1123.jp^$doc
||brotherorgan.com^$doc
||familymusicman.com^$doc
||motherguitar.com^$doc
||swe.sweet-sweet-sweets.com^$doc
||vqsrz.ctwyrs2aki6zyggj.com^$doc
||webworks-plus.jp^$doc
||colorfulromance.com^$doc
||gmatch.jp^$doc
||me-l-t1.com^$doc
||blue-uranai.com^$doc
||bluemoon-uranai.com^$doc
||bm-bluemoon.com^$doc
||kin-un2023.com^$doc
||kinun-777.com^$doc
||kousenkan.com^$doc
||aikotoba2020.com^$doc
||ainokotoba1515.com^$doc
||yunekon2taxiy.jp^$doc
||midnighteaparty.com^$doc
||nav1.jp^$doc
||gamojinsegesegeas.com^$doc
||jalaobrsdrgssdrgrs.com^$doc
||ml.ml.wawahrsdfrhfsdfh.com^$doc
||up.ch3m1stry.com^$doc
||wawahrsdfrhfsdfh.com^$doc
||hoshiyomi-yakata.com^$doc
||hoshiyomi-yakata.jp^$doc
||admin-matching-pair.jp^$doc
||matching-pair.jp^$doc
||media-matching-pair.jp^$doc
||mimiray-k.jp^$doc
||miray-k.jp^$doc
||kaimiray-k.jp^$doc
||luna-ria.jp^$doc
||ms88sv.com^$doc
||msiv5.com^$doc
||free-ren.jp^$doc
||free-ren.com^$doc
||zeroappointment.com^$doc
||zeroapo.com^$doc
||zeroendeapo.com^$doc
||fortune-crystal.com^$doc
||ctl.ultima.fun^$doc
||fab-inst.com^$doc
||ube71ki83.com^$doc
||ai-mono.jp^$doc
||again-agreement.com^$doc
||birth-bravery.com^$doc
||cross-customer.com^$doc
||desk-dictionary.com^$doc
||event-experiment.com^$doc
||final-future.com^$doc
||t-uraaka.site^$doc
||jap.cookingsboss.com^
||jap.cookinggenuine.com^

! https://twitter.com/1ZRR4H/status/1623067548781539339
||soft-pro.site^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/142492
||apkmirror.co^$all
||webogram.org^$all
||webogram.ru^$all
||xn--80affa3aj0al.xn--80asehdb^$all
||telegr.am/user_mgt/login$all
||tgram.ru^$all
||telegramm.site^$all
||web-telegram.net^$all

! https://github.com/uBlockOrigin/uAssets/pull/16764#issuecomment-1431353276
!#if !env_mobile
||n.fcd.su^$all
!#endif

! https://app.any.run/tasks/679e9afa-eb19-4414-a086-e280a779a448 and https://tria.ge/230217-xd8nksgc9x/behavioral2
||ru-torproject.ru^$all
||anapatformacion.org/modules/file/tor/tor-browser.zip^$all

! https://github.com/uBlockOrigin/uAssets/issues/16397
/^https:\/\/[a-z]+\.com\/away\.php\?url=[%0-9A-z]{100,}$/$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/143447#issuecomment-1438352020
||a-new86.com^$all
||ane102.net^$all
||honey888.love^$all
||ima55notice.biz^$all
||infozoomplus.biz^$all
||koi2ru.com^$all
||likechat33.net^$all
||likechat33call.net^$all
||pair55.net^$all
||pair55call.net^$all
||room2021.net^$all
||roomoshirase.net^$all
||smore91.net^$all
||som419.net^$all
||touchoshirase.net^$all
||touchtacchi.net^$all
||wsws1234.net^$all
||wswsnews.net^$all

! https://www.reddit.com/r/uBlockOrigin/comments/11s92xa/
! https://www.virustotal.com/gui/url/e1d9aadb5c1f979f0c83a54015cf84cda2da0fa9c4b452c6dabe62deeb70add5/detection
||s3.amazonaws.com/extpro/speed4.html$all

! https://www.reddit.com/r/uBlockOrigin/comments/11s92xa/badware_risks_page_request_malware/jceopse/?context
! https://pastebin.com/t3z1m0tN
! https://www.virustotal.com/gui/url/2fb57656f55db6d335696767de2d73693a31148429ef6b51b97c01e43563a8ee
! https://www.virustotal.com/gui/url/7f8f874b486a656948944aa205c75fc490cff1235f1114e067f161e69f0bcbb9
||imgfarm.com/images/dlp2/prod$3p
||myway.com^$all
/anemone-*.min.js$script,1p

! https://www.reddit.com/r/uBlockOrigin/comments/1212vbf/
! https://www.virustotal.com/gui/file/001724988888ce452750961d9f0d6249945c42cf7d511467bcb57f2eec4fd9c9
||tor-browser-rus.ru^$all

! techsupport scam
/?{BV_SRCID}&$doc
/werrx01/^$doc
/merrx01/^$doc
||ondigitalocean.app/*^phone=+1-$doc
||plesk.page/*?phone=$doc
/W*ity0*00Er00*/index.$doc
||s3.ap-northeast-1.amazonaws.com/tedex.com/*/index.html$all
||smarttvnew.vercel.app^$all
/systemerror-mac/?$doc
/Win0SecurityEr0CH0700Err0rSt/index.html$doc
/werrx01/index.html$doc
||activexsportswear.com^$all
||besttreasurecoastroofing.com^$all
||eharmonysingle.online^$all
||errorordufhwe.s3.ap-south-1.amazonaws.com^$all
||microsoftsupportservices.com^$all
||teszoom.com^$all
||tiffanyandtoke.com^$all
||s3.ap-northeast-2.amazonaws.com/%*!!%*/index.html$doc
||s3.amazonaws.com/securityfotrus.1.13/index.html$all
||s3.eu-west-2.amazonaws.com/675.88.u6.8878/index.html$all
||s3.us-west-1.amazonaws.com/security.uni.firewall.$all
/Win00Security07/index.html$document
||varchardetection777.site^$all
||xngqoc.com^$all
/Er0Wind0fsd0Security087/index.html$doc
||chuberanetto.tech^$all
||starglaxyheritez.tech^$all
||websafety.online^$all
||chuibesumeru.shop^$all
||windwserror.com^$all
||popts.site^$all
||cnctddot.com^$all
||woocommerce-sagepayments.com^$all
||mct-niger.com^$all
||klinikmrc.com^$all
||govimpot.com^$all
||hrmntrimagukeazctesto.shop^$all
||stb-media.xyz^$all
||compass-holding.com^$all
||pguilford.com^$all
||theweddingmahotsav.com^$all
||xac2gjx.autos^$all
||detailsreceipts.com^$all
||hodllane.com^$all
||hiddenamonghearts.com^$all
||stowesupperclub.com^$all
||185.161.248.253^$all
||auditedmicros.website^$all
||checkedservices.website^$all
||chutkeliye.online^$all
||golovanov.net^$all
||lucasmrahman.xyz^$all
||processprivate.website^$all
||tobyaburton.xyz^$all
||votuporn.cfd^$all
||yaravoyara.online^$all
||microagent.site^$all
||165-227-173-120.plesk.page^$all
||horporn.cfd^$all
||dare2life.click^$all
||pushlandings.b-cdn.net^$all
||ssupp2.site^$all
||webaudhar.online^$all
||asian-maturedates.click^$all
||flextd.shop^$all
||64-226-126-114.plesk.page^$all
||boomdates.online^$all
||erroarwasuppoto.world^$all
||fastndio.s3.eu-central-1.amazonaws.com^$all
||ikiped.online^$all
||pub-77106c9273be4f3fbec6b6d6c3c51b7f.r2.dev^$all
||hosterunozxxxna.shop^$all
||dbslfqowejd.b-cdn.net^$all
||ghrthryh.b-cdn.net^$all
||sok-rev.b-cdn.net^$all
||erroarwasuppoto.life^$all
||saludoads.com^$all
||janganhackya.com^$all
||viewmerit.info^$all
||blexad.shop^$all
||xoty55.cfd^$all
||dumbabd.online^$all
||alewis.sbs^$all
||edeyk.sbs^$all
||edfzh.sbs^$all
||tanhes.sbs^$all
||tansxv.sbs^$all
||tanvoa.sbs^$all
||tanwmv.sbs^$all
||kosbqn.sbs^$all
||taniqj.sbs^$all
||ahmxgv.sbs^$all
||edluv.sbs^$all
||koskdd.sbs^$all
||liqftt.sbs^$all
||s3.ap-northeast-1.amazonaws.com/ongoing.com/aanoitmessure/index.html^$all
||foodhereandnow.com^$all
||setkuttina.pages.dev^$all
||liq27qbf.monster^$all
||certificate-certificate.gettrials.com^$all
||vasafreight.com/ajax.php?
||thin-skinned-cost.000webhostapp.com^$all
||boring-tesla.149-102-231-176.plesk.page^$all
||happy-diwali-sabhiko-shubhkamneyen.b-cdn.net^$all
||qwudbhasdwq9h.sa.com^$all
/^https:\/\/[0-9a-z]{12,16}\.azureedge\.net\/\d{4}\//$doc
||fcukxxx.com^$all
||xbasugigqiuegiwqdbsx.s3.ap-northeast-1.amazonaws.com^$all
||popworldservice.com^$all
||perutzxrqe.ru.com^$all
||qwudbhasdwq8h.sa.com^$all
||uwqghwfdwqywetqwfghewqeqweig.s3.ap-southeast-2.amazonaws.com^$all
||baattakkkk.online^$all
||assitechnique.net^$all
||kelectricalservices.com^$all
||fantastic-salamander-c721cb.netlify.app^$all
||shishimishi.shop^$all
||track7.online^$all
||ondigitalocean.app/*/index.php?cezp=$doc
||amazonaws.com/*.*.*.*.*.*.*.*/*/index*.html$doc
||jp-helplineweb-chrsmjinfgtizonedswebs-01.s3.ap-southeast-2.amazonaws.com^$all
||germanytechsupport.pages.dev^$all
||systemsupport.pages.dev^$all
||techsupport-ev2.pages.dev^$all
||pub-3b4d978c14114185847089b100168c84.r2.dev^$all
||31snowmeprona.ru.com^$all
||9wqjkdisaodjwqd.sa.com^$all
||tingtang.pages.dev^$all
||tomtom.pages.dev^$all
||wertyhjuhg.online^$all
||adolphusisomlycyou.pages.dev^$all
||lianashepard.autos^$all
||nihongirl.online^$all
||blob.core.windows.net/$web/index.html$doc
||windows.net/*?bcda=$doc
/index.html?ph0n=1-$doc
||technosoft35.ru^$all
||tube-dvm.com^$all

! https://twitter.com/genegene1234561/status/1647164176438280192
||japanonlinebroadcast.live^$all

! https://www.reddit.com/r/uBlockOrigin/comments/12ng4o8/
! https://www.virustotal.com/gui/url/fe6b4bc7a258a92a97ad3216c85d159857ccd581df9b31a50a308ca49f967e34
! https://www.virustotal.com/gui/url/0d491da362effc08d2b026f32242046d174165e7995abbde6917ef7864a7556c
||crackedpc.org^$all
||cracksway.com^$all

! https://www.reddit.com/r/uBlockOrigin/comments/12r255v/gamingnewsanalystcom_badware/
! https://github.com/uBlockOrigin/uAssets/pull/17655
||gamingnewsanalyst.com^$all
||gamingdebates.com^$all

! https://www.reddit.com/r/uBlockOrigin/comments/12vi0jy/
! https://www.virustotal.com/gui/url/e705e6e86261849df50f80f32db2bb74abb1f69fd2681a370c5013be27c9daf0
! https://www.virustotal.com/gui/file/f1e859d99072e35f20e172d8458e3ea1baf8ba86c8c9e311a0debcd2acd5d0fc
||bonzi.link^$all

! https://www.reddit.com/r/uBlockOrigin/comments/1314r3d/
! https://www.virustotal.com/gui/url/23a6e05b5c2005b085b2cb41f35cddf2e689d72797448dd8c7399f7f929507e0
||bestgames-2022.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/17869
||videoadblocker.pro^$all

! https://github.com/uBlockOrigin/uAssets/issues/17947
! https://www.virustotal.com/gui/domain/pccdirect.site
! https://safeweb.norton.com/report/show?url=pccdirect.site
||pccdirect.site^$all

! https://github.com/uBlockOrigin/uAssets/issues/17960
! https://malwaretips.com/blogs/remove-template-search-newtab/
! https://www.virustotal.com/gui/domain/templatesearch.org
||templatesearch.org^$all

! https://www.reddit.com/r/uBlockOrigin/comments/13a95k2/
! https://www.virustotal.com/gui/url/dfe9c3f9bf87d003c70fecae8012b9fe4858a3922e6218b05a672fd3fe7f140e
! https://safeweb.norton.com/report/show?url=f-i-n-d.onlyfuns.win
! https://sitecheck.sucuri.net/results/f-i-n-d.onlyfuns.win
||f-i-n-d.onlyfuns.win^$all
! https://safeweb.norton.com/report/show?url=search-journal.onlyfuns.win
! https://urlscan.io/result/826671e6-126b-4113-82e3-24d96469bd93/
! https://sitecheck.sucuri.net/results/https/search-journal.onlyfuns.win/ydt
! https://www.virustotal.com/gui/domain/search-journal.onlyfuns.win
! https://www.virustotal.com/gui/domain/ftx.onlyfuns.win
||search-journal.onlyfuns.win^$all
||ftx.onlyfuns.win^$all
! https://www.virustotal.com/gui/domain/adultpics.wiki
||adultpics.wiki^$all

! https://github.com/uBlockOrigin/uAssets/issues/18103
! https://www.virustotal.com/gui/file/1f4f7b787ee329059e4de4487ba5c17c7c6ca3be95b72c9873fc9380632fa1f9/
! https://www.virustotal.com/gui/domain/d2r3dgsh5nr4kg.cloudfront.net
! https://www.virustotal.com/gui/domain/gamefabrique.com
! https://otx.alienvault.com/indicator/domain/gamefabrique.com
! https://opentip.kaspersky.com/gamefabrique.com
! https://safeweb.norton.com/report/show?url=gamefabrique.com
! https://www.urlvoid.com/scan/gamefabrique.com/
||gamefabrique.com^$all
||d2r3dgsh5nr4kg.cloudfront.net/installer/$all

! https://github.com/uBlockOrigin/uAssets/issues/18141
||skytils.net^$all
||skyblockmaniacs.net^$all
||fragbots.net^$all

! https://github.com/uBlockOrigin/uAssets/issues/18208
||hard-configurator.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/18332
! https://github.com/uBlockOrigin/uAssets/issues/18333
||filmshngjbzix.blogspot.com^
! https://www.virustotal.com/gui/domain/mopiez.com
||mopiez.com^
! https://www.virustotal.com/gui/domain/goglel.com
||goglel.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/18353
||easylist.club^$all

! https://github.com/uBlockOrigin/uAssets/issues/18380
||bestextensionegde.com^$all

! https://github.com/DandelionSprout/adfilt/discussions/779#discussioncomment-6298369
.com/api/users*uuid=&pii=&in=false^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/158317
||asdmcm.com^$all
.com/bot-captcha-1?h=$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/159825
/^https:\/\/[a-z]{5,7}\.[0-9a-z]{12}\.top\/[0-9a-f]{32}\/[0-9-a-f]{32}\/$/$doc,match-case,domain=top
/\/[0-9a-f]{32}\/maq\/$/$doc,match-case,domain=com|top
/antivirus/main/cleaner-default/*$doc

! Copycat and fake sites
! FitGirl Repacks - Official site: fitgirl-repacks.site
! https://old.reddit.com/r/FitGirlRepack/
! https://old.reddit.com/r/PiratedGames/comments/drlx3r/does_anyone_know_the_official_website_for_fitgirl/
! https://old.reddit.com/r/CrackWatch/comments/wl7nfb/dream_cycle_v209_release_fitgirl_repack_158_gb/?context=3
! https://github.com/uBlockOrigin/uAssets/issues/15085
! https://github.com/uBlockOrigin/uAssets/pull/15850
||fitgirl-repacks.*^$all,domain=~fitgirl-repacks.site,to=~fitgirl-repacks.site
||fitgirl-repack.*^$all,domain=~fitgirl-repacks.site
||fitgirlrepacks.*^$all,domain=~fitgirl-repacks.site
||fitgirlrepack.*^$all,domain=~fitgirl-repacks.site
||fitgirls-repack.*^$all,domain=~fitgirl-repacks.site
||fitgirl-repacks-site.org^$doc,domain=~fitgirl-repacks.site
! https://github.com/uBlockOrigin/uAssets/issues/18205
||fitgirlrepacksite.com^$all,domain=~fitgirl-repacks.site
! https://github.com/uBlockOrigin/uAssets/issues/18206
||fitgirl.cc^$all,domain=~fitgirl-repacks.site
! https://github.com/uBlockOrigin/uAssets/issues/21658
||fitgirlrepackz.*^$all,domain=~fitgirl-repacks.site
! https://github.com/uBlockOrigin/uAssets/pull/22532
||fitgirltorrent.*^$all,domain=~fitgirl-repacks.site
! Magisk manager - Official site: https://github.com/topjohnwu/Magisk
! https://xda-developers.com/psa-magiskmanager-com-not-official-website-magisk/
! https://forum.xda-developers.com/t/downloaded-a-fake-magisk.4581461/
! https://old.reddit.com/r/Android/comments/7r346t/psa_magiskmanagercom_is_not_the_official_website/
! https://github.com/topjohnwu/Magisk/issues/3435
! https://github.com/hagezi/dns-blocklists/issues/1744
||magiskmanager.com^$all
||magisk.me^$all
||magiskapp.com^$all
||magiskroot.com^$all
||magiskroot.net^$all
||magisks.com^$all
||themagisk.com^$all
||magiskzip.*^$all
||magiskmodule.com^$all
||magiskmanagerroot.com^$all
||magisk.download^$all
||magisk.info^$all
! LibreTube - Official site: libretube.dev
! https://github.com/libre-tube/LibreTube/issues/4409
||libretube.*^$all,domain=~libretube.dev,to=~libretube.dev
||libretubeapk.com^$all,domain=~libretube.dev
! ReVanced - Official site: revanced.app
! https://old.reddit.com/r/revancedapp/comments/1327o38/list_of_fake_revanced_sites_download_sites/
! https://old.reddit.com/r/AfterVanced/comments/wf4ov1/the_raftervanced_faq_frequently_asked_questions/
! https://github.com/revanced/revanced-discussions/discussions/854#discussioncomment-4565731
! https://safeweb.norton.com/report/show?url=revanced.io
! https://sitecheck.sucuri.net/results/revanced.io
! https://github.com/uBlockOrigin/uAssets/pull/17469
! https://github.com/uBlockOrigin/uAssets/issues/18857
! https://github.com/uBlockOrigin/uAssets/pull/19580
! https://github.com/hagezi/dns-blocklists/issues/2288
||revanced.$all,from=~revanced.app,to=~revanced.app
||revancedapk.$all,domain=~revanced.app
||revancedapp.$all,domain=~revanced.app
||ytvancedpro.com^$all,domain=~revanced.app
||youtubevanced.$all,domain=~revanced.app
||youtuberevanced.*^$all,domain=~revanced.app
||re-vanced.com^$all,domain=~revanced.app
||revanceddl.com^$all,domain=~revanced.app
||revancedmusic.com^$all,domain=~revanced.app
||revancedyoutube.org^$all,domain=~revanced.app
||revancedextend.com^$all,domain=~revanced.app
||revancedextended.$all,domain=~revanced.app
||revanced-extended.com^$all,domain=~revanced.app
||extendedrevanced.com^$all,domain=~revanced.app
||youtuberevancedextended.com^$all,domain=~revanced.app
||ytrevanced.$all,domain=~revanced.app
||tuberevanced.com^$all,domain=~revanced.app
||vanced-official.com^$all,domain=~revanced.app
||vanced.pro^$all,domain=~revanced.app
||vancedmanager.$all,domain=~revanced.app
||revancedapps.$all,domain=~revanced.app
! LuckyPatcher - Official site: luckypatchers.com
! https://old.reddit.com/r/luckypatcher/comments/rawq9f/what_is_the_official_website/
! https://old.reddit.com/r/luckypatcher/comments/aln5tj/official_download_for_lucky_patcher/
||luckypatcher.*^$all,domain=~luckypatchers.com
||luckypatchers.*^$all,domain=~luckypatchers.com,to=~luckypatchers.com
||luckypatcherwin.com^$all,domain=~luckypatchers.com
! Balena Etcher - Official site: etcher.balena.io
! https://forums.balena.io/t/counterfeit-etcher-websites/274606/5
||etcher.net^$all,domain=~etcher.balena.io
||etcher.download^$all,domain=~etcher.balena.io
||balenaetcher.$all,domain=~etcher.balena.io
||balena-etcher.com^$all,domain=~etcher.balena.io
! Vencord - Official site: vencord.dev
! https://github.com/uBlockOrigin/uAssets/pull/19359
||vencord.app^$all,domain=~vencord.dev
! NewPipe - Official site: newpipe.net
! https://github.com/uBlockOrigin/uAssets/pull/22134
||newpipe.app^$all,domain=~newpipe.net
! Z-Library - Official sites: singlelogin.se, singlelogin.re, z-library.se, zlibrary-global.se, go-to-zlibrary.se
! https://www.reddit.com/r/zlibrary/comments/16xtm67/if_you_cannot_download_any_books_then_youre_on/
! https://github.com/uBlockOrigin/uAssets/pull/22998
||z-lib.io^$all
||z-lib.id^$all
||zlibrary.to^$all
||z-lib.ee^$all
||z-lib.tf^$all
||z-lib.wf^$all
||z-lib.yt^$all
||z-lib.lol^$all
||zlibrary-global.com^$all
||zlib-official.com^$all
||zlibrary.lol^$all
||z-library.live^$all
||z-library.wiki^$all
||z-library.blog^$all
||z-library-proxy.com^$all
||go-to-zlibrary.com^$all

! phishing https://www.virustotal.com/gui/url/8521a1e5b4269111fb1e98f2142739dad1d6fb42ddf5198597c68abfea395f7f/detection
||reink2.top^

! https://github.com/DandelionSprout/adfilt/discussions/779#discussioncomment-7137675
||86pmafno21mst.com^$all
||akyr3h9x5mb.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/20036
! https://tria.ge/231010-1rdl5sfg68/behavioral1
||tiger.qnews.media^$3p
||s8bet.com^$doc
/\.br\/(?:[a-z]{4,8}\/){1,2}\?(?:app|patt|videos?)=\S+\.shtml$/$doc,match-case,domain=gov.br
c0c9d.cmi.rj.gov.br,cambe.pr.gov.br##^responseheader(location)
||azure.z97z.com/go.html$doc
||sites.uft.edu.br/topama/news.php$doc
||imagebet.ph^$all
||googleeplay.com^$all
||mingvip.com^$all
||t89ll.com^$doc
||brkbk.202226.net/jump/index.html$doc
||kbkb.bet^$doc
||bet55h.com^$doc
||officefonts-clo.com^$all
||lazycaht.pro^$all
||bxtongji.cc^$all
||04tips.com^$all

! https://www.virustotal.com/gui/ip-address/192.227.206.89/relations
||dhotelzao.com^$all
||tamilislamgate.com^$all

! https://tria.ge/231024-3lc5jace3w/behavioral1 & https://tria.ge/231024-3s7ygsbg39/behavioral1
! https://github.com/uBlockOrigin/uAssets/pull/20272
||adblock1.com^$all
||newupdatesnow.com^$all
||thefinanceadvice.com^$all
||fralstamp-genglyric.icu^$all

! https://github.com/uBlockOrigin/uAssets/issues/20335
||ilil.in^$all

! https://github.com/uBlockOrigin/uAssets/issues/20389
||ruiukp.top^$all

! https://github.com/uBlockOrigin/uAssets/issues/20400
||ets2.gr^$all

! https://github.com/uBlockOrigin/uAssets/pull/21315
! https://bbs.kafan.cn/thread-2258753-1-1.html
||chromegoogle.cn^$all

! https://github.com/uBlockOrigin/uAssets/pull/21316
! https://bbs.kafan.cn/thread-2262861-1-1.html
||mk90.shop^$all

! https://github.com/uBlockOrigin/uAssets/pull/21539
||stalkforx.ru^$all
||stalktoolss.ru^$all
||stalkanalysis.ru^$all

! Cryptocurrency Scams
||mevtime.com^$all
||musk-project.com^$doc
||muskusa.com^$doc
||cealits.com^$all
||pepzk-community.xyz^$all
||earth-ling.org^$doc
||pacmoonn.icu^$doc

||arbitragebot.team^$all
||arbitrageinstruction.media^$all
||arbitrageproject.blog^$all
||autotradeguide.pro^$all
||botarbitrages.pro^$all
||ethmevbot.com^$all
||ethmevsetup.group^$all
||guidesetup.pro^$all
||mevfrontbot.info^$all
||mevsetup.site^$all
||publicbot.pro^$all
||setupbot.info^$all
||strategyarbitrages.pro^$all
||tradingstart.pro^$all
||uni-setup.media^$all
||uni-trading.pro^$all
||uniguide.media^$all
||unisettings.pro^$all
||uniswapbot.team^$all
||uproject.team^$all
||web-instruction.team^$all
||webarbitraging.pro^$all
||0x00000000000.substack.com^$all
||etharticles.substack.com^$all
||publicationgroup.substack.com^$all
||teamproject.substack.com^$all
||tradestrategy.substack.com^$all
||uniproject.substack.com^$all
||web3projects.substack.com^$all
||webpublic.substack.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/24296
! https://www.virustotal.com/gui/url/95c95990e40d0859a1766b2da6047f64d2faecee65d74669243d443c7c185ebf
! https://www.urlvoid.com/scan/teslafond.io/
||teslafond.io^$doc
! https://github.com/uBlockOrigin/uAssets/issues/24590
||teslacore.io^$doc

! https://www.reddit.com/r/uBlockOrigin/comments/1eavbzp/block_domain_crypto_scam/
! https://www.virustotal.com/gui/url/86ca88185325798e9fd033a05ecbeb52c1064ba3abb5f17e8a013744a5ae680a
||crypto-drop24.com^$all

! Phishing - See https://bbs.kafan.cn/thread-2264505-1-1.html
! https://github.com/uBlockOrigin/uAssets/pull/21759
||counter-strike2-official.net^$all

! https://transparencyreport.google.com/safe-browsing/search?url=http:%2F%2Fapp0w.ltd%2F
! http://telegram.app0w.ltd/?rcd=c61d5 - Scam telegram
||app0w.ltd^$all

! https://github.com/uBlockOrigin/uAssets/issues/22129
||primeleech.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/22200
||privacyguides.io^$all

! https://github.com/uBlockOrigin/uAssets/issues/22268
||skinboxs.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/22690
||informations-clients.info^$all

! https://github.com/RPiList/specials/issues/1492
||okun.shop^$doc

! https://github.com/uBlockOrigin/uAssets/discussions/23094
! https://blog.sucuri.net/2024/02/web3-crypto-malware-angel-drainer.html
! https://www.virustotal.com/gui/url/2bf2e7500e2b15877f866b0a782436df8621b2c20f81e3d66f51e394f6ff6f30
||hostpdf.co^$all
||billlionair.app^$all,to=~billionair.com
||cdn-npmjs.com^$all
||cdnjs-storage.com^$all
||browsersjsfiles.com^$all
/cachingjs/settings.js
/cachingjs/turboturbo.js
/config?key=6922a2c8-d1e9-43be-b201-749543d28fe1
/config?key=d35e161b-abb4-4949-b523-003165d250bb

! https://blog.sucuri.net/2023/08/from-google-dns-to-tech-support-scam-sites-unmasking-the-malware-trail.html
||dns.google/resolve?name=*.host-stats.io&type=txt|$xhr,3p

! https://www.reddit.com/r/Picocrypt/comments/196479k/psa_picocryptorg_is_a_fake_website/
! https://www.virustotal.com/gui/url/5424f4cf2ec78fd959d88b88f9fc14e990aea181a7da47c0ce48791b4887d53a
||picocrypt.org^$doc

! https://blog.sucuri.net/2024/03/new-malware-campaign-found-exploiting-stored-xss-in-popup-builder-4-2-3.html
! https://www.virustotal.com/gui/domain/ttincoming.traveltraffic.cc/detection
! https://www.virustotal.com/gui/domain/host.cloudsonicwave.com
||traveltraffic.cc^$all
||cloudsonicwave.com^$all

! https://www.malwarebytes.com/blog/threat-intelligence/2024/03/fakebat-delivered-via-several-active-malvertising-campaigns
! https://www.virustotal.com/gui/url/1429f749760b6d69d16234f394be11fc61f48df2e1956ecc37f556621abad7e7
||obs-software.cc^$all
||bandi-cam.cc^$all
||breavas.app^$all
||open-project.org^$all
||onenote-download.com^$all
||epicgames-store.org^$all
||blcnder.org^$all
||trelconf.com^$all
||trelconf.net^$all
||noitons.net^$all
||bezynet.com^$all
||church-notes.com^$all
||avr-energie.com^$all

! https://www.malwarebytes.com/blog/uncategorized/2024/03/tax-scammer-goes-after-small-business-owners-and-self-employed-people
! https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Firs-ein-gov.us%2F
! https://safeweb.norton.com/report/show?url=https:%2F%2Firs-ein-gov.us%2F
! https://www.virustotal.com/gui/domain/irs-ein-gov.us
||irs-ein-gov.us^$all

! https://blog.sucuri.net/2024/03/sign1-malware-analysis-campaign-history-indicators-of-compromise.html
/^https:\/\/[a-z]+\.[-a-z0-9]+\.[a-z]{3,7}\/[a-z]{2,6}\.(?:[a-z]{1,8}\.)?17\d{8}\.js\?(?:revision|sr?c?|ve?r?)=6[a-f0-9]{7}$/$script,3p,match-case,to=~edu|~gov
/^https:\/\/[a-z]+\.[-a-z0-9]+\.[a-z]{3,7}\/17\d{8}\/em\.js\?(?:revision|sr?c?|ve?r?)=6[a-f0-9]{7}$/$script,3p,match-case,to=~edu|~gov
||schema-forms.org^$all
||stickloader.info^$all
||fueltypebel.info^$all
! https://infosec.exchange/@InfobloxThreatIntel/111947476473623155
! https://malwaretips.com/blogs/re-captha-version-3-55-top/
||re-captha-version-$all
! https://blog.sucuri.net/2024/05/mal-metrica-redirects-users-to-scam-sites.html
! http://teluguodu.com/om-bheem-bush-movie-review/ - example site
||check-tl-ver-$all
||gemfowls.com^$all
||tech4u.app^$all
.com/?news&s|$popup
||cloud.tnewstraffic.com^$all
||cache.cloudswiftcdn.com^$all
||cdn.metricastats.com^$all
||cloud.edgerapidcdn.com^$all
||content.gorapidcdn.com^$all
||content.streamfastcdn.com^$all
||fast.quickcontentnetwork.com^$all
||ga.cdzanalytics.com^$all
||gll.metricaga.com^$all
||go.syndcloud.com^$all
||host.cloudsonicwave.com^$all
||host.gsslcloud.com^$all
||metrics.gocloudmaps.com^$all
||secure.gdcstatic.com^$all
||secure.globalultracdn.com^$all
||static.rapidglobalorbit.com^$all
||synd.edgecdnc.com^$all
||syndication.gcdnanalytics.com^$all
! https://www.reddit.com/r/uBlockOrigin/comments/1cane2z/clients_website_is_getting_blocked/l0tvbkp/
||mygeomanager.org^$all
||livedashboardkit.info^$all
/^https:\/\/[a-z]{10,}\.[a-z]{3,4}\/(?:engine|track)-[a-f0-9]{8}\.js$/$script,3p,to=~edu|~gov,header=vary:/^referer\,accept-encoding/i

! https://www.gdatasoftware.com/blog/2024/03/37885-risepro-stealer-campaign-github
! https://www.virustotal.com/gui/url/b47accf6e1261a50564f6520e8c3c56d6225054a95fe9a48c5e9e47e4ee7d120
||digitalxnetwork.com^$all

! https://securelist.com/trojanized-text-editor-apps/112167/
! https://www.virustotal.com/gui/url/dce13fec61cd1b81b55c8d126b99266efbb6166d1a0bba02d4b8482ed53401b1
||vnote-*.myqcloud.com^$all

! phishing
! https://infosec.exchange/@urldna/112143355675099806
! https://www.virustotal.com/gui/url/38ad38ba67efdd42656b489e4df678ee065cad109cd1c9dbacf4632d356250d9
/^https:\/\/vietg[a-z]v[0-9]*\.cc\//$doc,domain=cc
||clickhereecraigslist.tripod.com^$all
||thriveinclusion.com^$all,to=~web.de
||talktalk0.godaddysites.com^$all,to=~talktalk.co.uk
||unclepigva.com^$all,to=~chase.com
||ee-billing-recovery.web.app^$all,to=~ee.co.uk
||final-ua.eu/vasilisa/votings$all
||roycamining.com/pdeb/Untitled/$all,to=~docusign.com
||flow.page/foxhills.co.uk^$all,to=~foxhills.co.uk
! https://infosec.exchange/@urldna/112471179848866488
||codeanyapp.com/neta/*/pay-method.php$doc
! https://infosec.exchange/@urldna/112469056606126055
||otomoto-h229.net^$all,to=~otomoto.pl
! https://infosec.exchange/@urldna/112467877238803859
||mybluehost.me/*Recibir_paquete.php$doc,domain=~correos.es
! https://infosec.exchange/@urldna/112511051868588218
||codeanyapp.com/klarna/$doc,domain=~klarna.com
! https://infosec.exchange/@urldna/112551867657605910
||mybluehost.me/*/dir/ca/pay/$doc,domain=~canadapost-postescanada.ca
! https://urldna.io/scan/667943cc29ba1734141d8259
! https://www.virustotal.com/gui/url/1c06c8642929ec694e92e57586aede2c6c1a3b2f095801206bf6a5270095b60a
||21cpromotions.com/logs/postch/$all,to=~laposte.fr
! https://urldna.io/scan/667943bc2be64cd320d157ea
! https://www.virustotal.com/gui/url/dba2c7e8aea300617bb5ff717517494fd34aad2b46773140b734e624176503d6
! https://www.virustotal.com/gui/url/b0b352b0fb8fd401314b3c03d457183902393f5e090c91e46a18923d15beb539
||inner.website/*.html^$all
/^https:\/\/www\.[a-z]{4,5}\.[a-z]{3,7}\/[a-z0-9]{36}\.html\b/$doc,match-case,domain=com|info|website|~edu|~gov|~google.com
! https://urldna.io/scan/668e5ba75fe5b9ab4b45f704
! https://www.virustotal.com/gui/url/007a4ccc75ffdfd5d383246e92f374a55244b4bc909b43feda099d70c45a5126
||colegiovilamilitar.com.br/*/linkedin_^$all,to=~linkedin.com
! https://urldna.io/scan/6691a7694c7663c24c140091
! https://www.virustotal.com/gui/url/ac43f39d914e0e7121c999f26b7bac7beceaa932f7478d68c4ce7df6dc78ed07
||hand-to-hand.cfolks.pl^$all,to=~ram.co.za
! https://urldna.io/scan/66a0d0d33b59511de9602564
! https://www.virustotal.com/gui/url/e9af3245273512c1cff602c7f7155b0f02559d3ea71eb1ef71050987ab097a08
||mybluehost.me/intesasanpaolo/$doc,domain=~intesasanpaolo.com

! snapchat
||snapchatplus.fr^$all,to=~snapchat.com
||snapscrttm.serv00.net^$all,to=~snapchat.com

! shopify
||1234854.com^$all,to=~shopify.com
||suoncopbaonk.com^$all,to=~shopify.com

! paypal
||paypal-complete.com^$all
! https://www.virustotal.com/gui/url/cef8e619ca51273786cf72dab8a9d2daea04ce6fee978f0a42522fe10709785d
||prizegift.top^$all

! jio
! https://www.virustotal.com/gui/url/04af5fcfd24d55b81b2c1b6559a04fb30e7d12a11d0a83a280641d51cfb28572
! https://www.virustotal.com/gui/url/20fefdda4be34a69e4d12b7335bec5c512f4413e0834b461ff7195486558d001
/\/recharge\d?\.(?:html|php)\?mobile=\d{10}\b/$doc,match-case,domain=~jio.com|~edu|~gov
! https://www.virustotal.com/gui/url/b759b9b84ad608c657b38f5df4ef20d316bfd542abba02fd18d3d0503132ca2c
/offer.php?rechargenumber=$doc,domain=~jio.com|~edu|~gov
! https://www.virustotal.com/gui/url/4e4606f961466924894ce9d9dc3d41a151ff9dbaee68143b77f3a1db6a7ca972
/offer.html?rechargenumber=$doc,domain=~jio.com|~edu|~gov
! https://urldna.io/scan/66a0d0c94f0acec29ff98592
! https://www.virustotal.com/gui/url/5208705dcb34cb93ae64eb4b4f11d20610a50cf6bf60c0190a67eac6a3a17355
/\/offer\.(?:html|php)\?(?:mobile|rechargenumber)=\d{10}\b/$doc,match-case,domain=~jio.com|~edu|~gov

! apple
! https://www.virustotal.com/gui/url/52cb5de2af70a3d65f41e0b63911d971ee27634d69160988ed7c8235c55c79e8
! https://www.virustotal.com/gui/url/dd2190d5505e9f0b1a79583c85dee20f6214b8bf614bf2a65187b1c9b5bd01df
||com/isignesp.php^$doc,domain=com|~apple.com
||help/isignesp.php^$doc,domain=help|~apple.com

! ourtime
||login-ourtime.members-datings.workers.dev^$all,domain=~ourtime.com
! https://www.virustotal.com/gui/url/8caad65d38a5f6df0e322dad6e4576fe0f42d2a9c4a4672d5959f5c53cb59632
||profile-ourtime.*.workers.dev^$doc,domain=~ourtime.com

! tiktok
! https://www.virustotal.com/gui/url/8fd29e49e539b6bab6c0a55c1d15321b7df02367fe1a9049c94fbf0b3aea1af8
/^https:\/\/(?:[a-z]{4,6}\.)?tiktok\d{2,5}\.com\//$doc,domain=com|~tiktok.com
! https://www.virustotal.com/gui/url/bd11af06bb1ed081ae7b373bd79e5601c17e0664be6856d922a92f771b24aee0
/^https:\/\/(?:[a-z]{4,6}\.)?tiktok\d{2,5}\.cc\//$doc,domain=cc|~tiktok.com
/\/wap\/api\/(?:activity\/)?[a-zA-Z]+![-_a-zA-Z]+\.action\?/$xhr,1p,strict1p,match-case

! made-in-china.com
! https://infosec.exchange/@urldna/112553754973872125
||griffithdds.com/*/madeinchina.com/$all,to=~made-in-china.com
! https://urldna.io/scan/6696ed798f10cc579169ad67
! https://www.virustotal.com/gui/url/28ebe44abd659de808f562259dd899943c574ff82716856bfb76d218f64531b7
||oortech.com/mic.shtml^$doc,domain=~made-in-china.com

! fedex
! https://www.virustotal.com/gui/url/3236050c1e12c8c10e6b905c61d2ed45f5a8fa393f560a96f98383565e57e78f
||fedexridn.com^$all
! https://urldna.io/scan/66827e317916e72307d71798
! https://www.virustotal.com/gui/url/e07282a856d5388690c95a8f55eca0d2d1d33f9d47c0f290b33cfb972e699e26
||yellowjacket.co.nz^$all,to=~fedex.com
! https://www.virustotal.com/gui/url/1700ffed1e41abcd1bd21f518f42d75c7d2d972d2e64fdfe6b54f4337cc2c51a
||bookingtool.azurewebsites.net^$all,to=~fedex.com
! https://www.virustotal.com/gui/url/0e767ec2a47d546a330606bb8d3ecfa70c21622eb5f05d58b0cfa2c9e64355ad
||saham.hugaf.dev^$all,to=~fedex.com

! booking.com
! https://www.virustotal.com/gui/url/5fef6bafac49c64dc9e0ca06339967aa2ba2936745a57ca2c47aa3606def1707
/^https:\/\/(?:[a-z]+\.)?hotel-(?:id)?\d{3,8}\.eu\//$doc,domain=eu|~booking.com
/^https:\/\/(?:[a-z]+\.)?hotel-(?:id)?\d{3,8}\.com\//$doc,domain=com|~booking.com
! https://www.virustotal.com/gui/url/5e3b5d680bc6c90219ddbb2524f7d6d8a58716399b4da91a06c027774d908e81
/^https:\/\/hotels-\d{6}\.eu\//$doc,domain=eu|~booking.com
! https://urldna.io/scan/6692504801266863891e9011
! https://www.virustotal.com/gui/url/128f76d5853dacd7b1fac73d64a4078adde3c900b65bc23dc15bad5f629b446b
/^https:\/\/booking\.[a-z]{3,}-(?:id)?\d{3,8}\.eu\//$doc,domain=eu|~booking.com
! airbnb
||air-bnb.check-$doc
||conf1rm.ru^$all
||abnbclaim.com^$all,to=~airbnb.com
! https://www.virustotal.com/gui/url/8cdc4c3ca9313a9cdd27dc03d855105f37aebe9abac62265ea45993121cf7b31
! https://www.virustotal.com/gui/url/235683db58069cf98a6e1aa5719dd5cb941d669225f828b875f21d54dd3ad1c6
! https://www.virustotal.com/gui/url/ca2d5df746dc848767d695b04a59af02042fd44ac1829daa4df2da6acdf9834e
/^https?:\/\/([a-z]{4,}\.)?support-\d{1,2}\.ru\//$doc,domain=ru

! labanquepostale
||oasisministries.com/fr/postale/$all,to=~labanquepostale.fr
||group-postban.firebaseapp.com^$all,to=~labanquepostale.fr

! adobe
||adobecloud5xpo.yolasite.com^$all,to=~adobe.com
! https://www.virustotal.com/gui/url/a952ec269dd32deeb54f19f9b0b1f70d4e1cd72a176c1adc02dbdeab37eb0024
||socalthesyndicate.com/*/adobefud/$all,to=~adobe.com

! gazprom
/^https:\/\/[a-z0-9]{5}\.shop\/l\/gaz\//$1p,strict1p,match-case,domain=shop
/^https:\/\/[a-z0-9]{5}\.shop\/uniq$/$xhr,1p,strict1p,match-case,method=get,domain=shop
/^https:\/\/[a-z0-9]{5}\.shop\/lead$/$doc,1p,strict1p,match-case,method=post,domain=shop
||k8cxh.shop^$all,to=~gazprom.ru
||c2bm9.shop^$all,to=~gazprom.ru
||cz4sb.shop^$all,to=~gazprom.ru
||v5hhx.shop^$all,to=~gazprom.ru
||pe4hk.shop^$all,to=~gazprom.ru
||g1vm6.shop^$all,to=~gazprom.ru

! netflix
! https://urldna.io/scan/6675f810a0a139921a350afd
! https://www.virustotal.com/gui/url/9377fb4aca4525f2725505be1fa956898fe427deb060f273f48ed5f7fe05684b
||mybluehost.me/*/netflix/net/login.php$doc
! https://www.virustotal.com/gui/url/f4d836eca8bb2ce50a96dac7d031502d47c0a6ce85af040b911bf9883fbe157a
||mybluehost.me/watch/a/flix/$doc
! https://urldna.io/scan/66789b18c766226ae8d6e3ee
! https://www.virustotal.com/gui/url/30bc6d0ab3c42c34c0317e50e0b24db16a8996394bb39f6c959464bc4557fbb3
||floridavacationrentalsbyowners.com/*/Info/page_settings/account.php^$all
! https://www.virustotal.com/gui/url/d45b4424eb572378e0f5546d86502ac626c12404c5b2169e60088d1be6433031
||loginnetflixleiojfioje.blogspot.$all

! allegro
||allegrostore.cc^$all
||allegrostu.com^$all
||allegrocolombia.com^$all
||allegrocx.com^$all
||allegrocns.com^$all
||allegro-005.com^$all
||allegro-online.ru^$all
! https://www.virustotal.com/gui/url/86713b42ead067bb3d7f886acc11fd60a254ce8f744258d2ff2e01c0702b620d
/^https:\/\/allegro[a-z]{2,}\.shop\//$doc,domain=shop
||allegroshop.shop^$all
||allegrocn.shop^$all

! rackspace
||racks.pages.dev^$all,to=~rackspace.com
! https://infosec.exchange/@urldna/112506923054085191
||rackweb-----support*.weebly.com^$all,to=~rackspace.com

! dana
||dana-indone*.id^$doc,domain=my.id|web.id|~dana.id
! biz.id
-dna-log-*.biz.id^$doc,domain=biz.id|~dana.id
||xxtl-v1.biz.id^$doc,domain=~dana.id
||xlink-dna-log-new.xxtl-v1.biz.id^$all,to=~dana.id
||hadiah-dana2024.beviz.biz.id^$all,to=~dana.id
||kelim-kaget-dana.masuk.biz.id^$all,to=~dana.id
||aktivasi-danaid.resmi7752.biz.id^$all,to=~dana.id
||customer-service-danaid.dankyz.biz.id^$all,to=~dana.id
! https://www.virustotal.com/gui/url/25ea3b137e3e120f11920e532029e5573b9de746a9c6a0a45ae2d961ccd5f435
||danaxspaylaterr.biz.id^$all,to=~dana.id
! my.id
||xcxcx.my.id^$doc,domain=~dana.id
||pemesanan*.glowz.my.id^$doc,domain=~dana.id
||pemesanan-marrket-lpg-pertaminaa.glowz.my.id^$all,to=~dana.id
||pemesanann-lpg-pertamina-market-deliveryy.glowz.my.id^$all,to=~dana.id
||penerimaan-hadiah-giveaway-10juta.clau.my.id^$all,to=~dana.id
||pemulihan.akun-dana-24.system-online.my.id^$all,to=~dana.id
! others
||gdnapqmhbs.1myall.com^$all,to=~dana.id
||ambiil-hadiaa4h.cs-resmi.com^$all,to=~dana.id
||danadigital2024.cs-zx.top^$all,to=~dana.id

! orange.fr
||orange53.yolasite.com^$all,to=~orange.fr
||dev-7614646544.pantheonsite.io^$all,to=~orange.fr
||smsmmsernorepls.wixsite.com^$all,to=~orange.fr
||orange234.wixsite.com^$all,to=~orange.fr
||exbtengineers.com/o/$all,to=~orange.fr
||enjoymatic.com/landings/es-avengers/$all,to=~orange.es
! https://infosec.exchange/@urldna/112456905938157006
||servicemailorange25.wixsite.com^$all,to=~orange.fr
! https://infosec.exchange/@urldna/112467287033433289
||assistancesosh.wixsite.com^$all,to=~orange.fr
! https://www.virustotal.com/gui/url/a667c0159708b76fce759d1b9f8230d44c1db8bbff82ea62e170df08f5673d4b
/or/.espace-.client/(;authentication.htm^$doc,domain=~orange.fr
! https://www.virustotal.com/gui/url/f7a5efd0b25ad492328edf9bff729a32fafc839554c6b5de2bb0e64307667534
||tw1.ru/Orange/$doc,domain=~orange.fr

! amazon
||amazon-*.shop^$doc
||amazon-shopping.shop^$all
||amazonl3.com^$all
||tepoty.com^$all
||daroznel.com^$all
||ecommrce-web-amazon.netlify.app^$all
||etisalat-amazonprime.com^$all,to=~etisalat.ae
||shop73.online^$all
||syae3289.top^$all
||ww26mb8.top^$all
! https://infosec.exchange/@urldna/112483094476417201
||mybluehost.me/wp-admin/amz/$doc

! ebay
||c.vn-ebayn.vip^$all
||vn-ebay.quxlpuj.cn^$all
||ebayasean.com^$all
||vilbuy.com^$all
||ebaydw.com^$all
||ebayhelpre.org^$all
||ebay-european.com^$all
||show.naturecircle.shop^$all
! https://www.reddit.com/r/Scams/comments/1cux08b/whatsapp_telegram_instagram_work_from_home_posts/
||51eabay.com^$all
! https://infosec.exchange/@urldna/112476252310873324
||135buy.com^$all
! https://www.virustotal.com/gui/url/8b2c822dc9c9130367597b14aa848cfacdd6022ad474c0af8c244856e30ee6ae
||ebaydw.cc^$all
! https://www.virustotal.com/gui/url/9f1eac2069c48d297e1f284ede655f9d7b8f4d4b5aec91d934147db7d9ec4e16
||pages.dev/errors/validateCaptcha^$doc

! alibaba
||topmarifle.life^$all,to=~alibaba.com
! https://www.virustotal.com/gui/url/8ee2dacea4476d9971ccde03ffc968c6d2401e08c5273b8945dba4ea9c03069d
||shopvip-alibaba.com^$all,to=~alibaba.com

! AT&T
||wixsite.com/att-support/$doc
||diwapa3051.wixsite.com^$all
||idhnochalter.wixsite.com^$all
||cajewar736.wixsite.com^$all
||loginaccount6.wixsite.com^$all
||ruthah9.wixsite.com^$all
||iirrrrrrii.wixsite.com^$all
||ewueuweudsjdjsdjjd.weeblysite.com^$all
||maiil-myatt.weeblysite.com^$all
||rtm-att.directly.com^$all
||keepo.io/KJOUYHUBU799BH/$all
||keepo.io/loginatt/$all
||dlhessell.wixsite.com/att-support/$all
! https://www.virustotal.com/gui/url/b78d7c493e891ae1dbc5b9ea30d22c50792b6d5a55104e33f5ba37e78ab658a1
||dones9.wixsite.com^$all
! https://infosec.exchange/@urldna/112465871317727388
||alisongaudino992.wixsite.com^$all
! https://infosec.exchange/@urldna/112564843620859575
||deenveerww.wixsite.com^$all
! https://urldna.io/scan/6693a1b55395ffdd02f65177
! https://www.virustotal.com/gui/url/b8064a06e570bfccdd2a896b02734c2282e5e0d51ebd0b6324c694d87b57b7e8
||att5h6.wixsite.com^$all
! https://urldna.io/scan/669ae204eaef0a7aabce0e9b
! https://www.virustotal.com/gui/url/1011eb8688635267bf06cc2b5783d0a01cbeafb99dbf483c2101e4375061d56e
||wixstudio.io/mysiteattmail940940^$doc
! https://www.virustotal.com/gui/url/8b95f575d0f421cbd9710ad5047527b048ca3bc2cedc6ba85718832f2dcd5438
||f.digital-*.com/igit/$doc
! BT
||homelogginbbt.weebly.com^$all,to=~bt.com
||boardband.univer.se^$all,to=~bt.com

! gov phishing site
||thanhtrapcrt.online^$all,to=~thanhtra.gov.vn
||seeproc.com.br^$all,to=~my.gov.au
! gov.tr
! https://www.virustotal.com/gui/url/19c07d4e7c627a1f83900c509ce73b828247b3bb932713383e5569e7e2671882
||pttgov-*.top^$all,to=top|~ptt.gov.tr
! gov.uk
||liveflo.qxlva.io^$all,to=~gov.uk
||approvaltool.bdukinternal.net^$all,to=~gov.uk
! https://www.virustotal.com/gui/url/ebc39394f30c18e781a2c98f035fa14897aba199d104977f4978e0af200df544
||smartaromas.com/income-individual_service_tax-gg-check-hm/$all,to=~gov.uk
! gouv.fr
! https://infosec.exchange/@urldna/112442514480319184
||mybluehost.me/*/impo/$doc,domain=~impots.gouv.fr
! https://urldna.io/scan/6683cfb811bd32bf9fb75226
! https://www.virustotal.com/gui/url/859290e1ef7e809193a135a360942b6cb1c3938ca26fb3643461ab43c312079d
||speedtest.gr/*/Amendes-gouv-fr/$all,to=~amendes.gouv.fr
! https://www.virustotal.com/gui/url/64d74ef6d37b2f855960f77fd99ee0ca35c86ea86f6f0a29818c6f2c9a98df21
||contactsupport.10ffc20.wcomhost.com^$all
||wcomhost.com/amendes-gouv/$doc,domain=~amendes.gouv.fr
! https://urldna.io/scan/6690fec498efb38aa8b5fff8
! https://www.virustotal.com/gui/url/cf94732269e10553a3e945c3a3a6d96e1975f5bffd600d475248ba54f099bdf0
! https://www.virustotal.com/gui/url/bb37ef477fce261197eddc9c970d8cab9c3e9f2e33578752d7c29e9eb227af9f
! https://urldna.io/scan/66a222314305e9e5c9e85eff
! https://www.virustotal.com/gui/url/65d14490d3b1373b618e79ad0f10356a30d7d5be39a211a0c6a107131b6a8967
||wcomhost.com/*/am/3dsece.php^$doc,domain=~amendes.gouv.fr
/am/*.php^$doc,domain=arubabusiness.it|mybluehost.me|wcomhost.com|~amendes.gouv.fr
! https://www.virustotal.com/gui/url/3970b40a9d9fcb5813cd3229e940e2df14c3f0e2b27db104085845f6bc6ced4a
! https://www.virustotal.com/gui/url/5dd0e94a8ea4348bc9dddc26ae0bb40f2710bb2b885d6ac2876303549ed6a211
||fi/a/Amendes/*.php^$doc,domain=fi|~amendes.gouv.fr
||fi/part/Amendes/*.php^$doc,domain=fi|~amendes.gouv.fr
! https://urldna.io/scan/66a17973cf69aaa3408529d8
! https://www.virustotal.com/gui/url/59f573968e59b6b2f4f09ca26a81608992b83aaef9e7200b29529e10d7641d24
||mybluehost.me/wp-content/12/*.php^$doc,domain=~amendes.gouv.fr

! bank
||chamsocthekhachhang-$doc,domain=~edu|~gov|~edu.vn|~gov.vn
||sotuyenvcb.vietcombanker.com^$all,to=~vietcombank.com.vn
||vdbank.com.vn^$all,to=~vdb.gov.vn
||conveyancingportal.com^$all
||tinchapshinhan.online^$all,to=~shinhan.com.vn
||canhantpb.com^$all,to=~tpb.vn
||mbdk99.com^$all,to=~mbbank.com.vn
||bmoreferral.com^$all,to=~bmo.com
||personas.devbam.com^$all,to=~bam.com.gt
||negociebra.com.br^$all,to=~banco.bradesco
||lloyd-group.com^$all,to=~lloydsbank.com
||itaconsorciodigital.com.br^$all,to=~itau.com.br
||americanexpressempresas.com^$all,to=~americanexpress.com
||wizardpayroll.com.ar^$all,to=~hsbc.com
||spareb1.com^$all,to=~sparebank1.no
||amigosdelasfinanzas.com^$all,to=~bancocajasocial.com
||e-cmv.ph^$all,to=~grupobancolombia.com
||recompensaszurichsantander.com.mx^$all
||upsdelivery-nl.com^$all,to=~bancosantander.es
||santander.cf.sandbox.motrada.ch^$all,to=~santanderbank.com|~santander.co.uk
||anz.brandkit.io^$all,to=~anz.co.nz
! https://www.virustotal.com/gui/url/00add93cbd2bfeb6889f013c449afcc9ea4ae801cf40c41adf484e0948777c67
||bnz-secure.publicvm.com^$all,to=~bnz.co.nz
/^https:\/\/tpbank\.[-a-z0-9]{5,}\.[a-z]{3}(?:\.vn)?\//$doc,domain=~edu|~gov|~gov.vn|~tpb.vn
! https://infosec.exchange/@urldna/112451361935970416
||sparkasse-oberhessen.info^$all,to=~sparkasse.de
! https://infosec.exchange/@urldna/112496070441371886
||mybluehost.me/service/*/nkl-log.php$doc,domain=~nickel.eu
! https://urldna.io/scan/667e89c3520dc059da434dfd
! https://www.virustotal.com/gui/url/a5574806b7e5097c37ca641585a1f2cf0d12abbbaec62a32fe01962c1304e26c
||turkiyecumhuriyetiziraatbankasi.com^$all,to=~ziraatbank.com.tr
! https://www.virustotal.com/gui/url/d9fe8e546ae632891bf53e189191c8d66f00ad6ae27322e6fa5c8fb20f9cd1a1
||c1.is/BRI/$doc,domain=~bri.co.id
! https://www.virustotal.com/gui/url/e776c7ece9f9bf00cda51a44d3cb5c37a32d05f98fed00f2b8963da4244b3151
||facilitycond.protectorsistemas.com.br/--/*/Login.html^$all,to=~vrb-niederschlesien.de
! https://www.virustotal.com/gui/url/c7b5088a8bb8a08b8df81c311e88524e9c7c5e5db8e8482973950f2f337aa021
||ewp.live/*/pages/region.php^$doc
! https://urldna.io/scan/668d0a422e28bacaabda96ab
! https://www.virustotal.com/gui/url/2edf261ddd989aea3a11b6e92775153dcdb8b3e4380b834b416b2bf9ab3b45a1
||glitch.me/*/nationwide^$doc,domain=~nationwide.co.uk
! https://www.virustotal.com/gui/url/90fc0532ce482014c579919d1b23d03b0d77fb7b31f3a313e7f17ed9886718f3
||mybluehost.me/ameli/$doc,domain=~ameli.fr
! https://www.virustotal.com/gui/url/c69b4c8bd6c92857d6e1e40f48ef8830c19d1da98e2c1f16ed7867c58d4b2f63
/28kxhS^$doc,domain=online|shop|top|~sberbank.ru
! https://www.virustotal.com/gui/url/f8aff688f04724ec969bccbc5c87fab27425e949590f94006b8ad5ffc8280353
||xyz/akbank/$doc,domain=xyz|~akbank.com
! https://www.virustotal.com/gui/url/6e922be515e2e7eeeb976591a4208f47d8505271963e968093f7290bc9114c96
||artecafe.eu/html/postde/pst/$all,to=~postbank.de
! https://www.virustotal.com/gui/url/47030aa07787d8246511284f00cf6a2fba1bea6974f8227f0828794b7b8493f5
/views/choice/*/start.php^$doc

! DHL
||dhl.*.potabox.com^$doc,domain=~dhl.com
||dhl-event.app^$all,to=~dhl.com
||dhexpress.weebly.com^$all,to=~dhl.com
||delivery.attempt.failure.ebbs.co.za^$all,to=~dhl.com
||sites.google.com/view/expressdhl^$all,to=~dhl.com
||xn--d1aqfkf.xn--p1ai/bitrix/.../GlobalSources/$all,to=~dhl.com
||app.farmaciadelmonestironline.com/SER/dnkdl/$all,to=~dhl.com
! https://infosec.exchange/@urldna/112362770153826421
||solutionfun.info^$all
! https://www.virustotal.com/gui/url/991fe449cae5b7f070cba12bf8b7ab0f9058c8d1a0c5857cee1f5f1ec775d1a8
||leatherqueen.shop^$all
! https://urldna.io/scan/66983ef62ca5c5af9410c6d6
! https://www.virustotal.com/gui/url/e894b4e45cf6086f3c110bb89db761073b96134cfb330d375e0170ea248a8cb4
||dhl-express-ppd.infanion.com^$all,to=~dhl.com
! https://www.virustotal.com/gui/url/c40564d42e6b3d2cb9f3d9b2485c32e3446fb516d05ffd441d3c14be61027e97
||elementor.cloud/*/ENGHUY645/$doc,domain=~dhl.com
! https://www.virustotal.com/gui/url/e6fde9752f33f20c2f5ff157816c2edc1c4f6de7c89103edd3ed05cca44d0d46
||mybluehost.me/*/phpmailer/src/dh/$doc,domain=~dhl.com

! whatsapp
||ann.tess1.top^$all
! https://urldna.io/scan/66a0280430f40d4a2e1cdbfd
! https://www.virustotal.com/gui/url/dd581161abc02c436e7f1d3096ebc651b98bf4ff3eeea81cff8ba76b6b9ca277
||play.funfourmob.com^$all
! instagram
||instagram-mail.net^$all
! https://www.virustotal.com/gui/url/8fb4a3808af3e2dc52bb055171b6750d8141871cd7e7a1e8bb3457294ddd5437
||privrendom.com^$all
! facebook
||mait.inhhome.top^$all
! /^https:\/\/[vw]ww-[a-z]?facebook[a-z]?([.-]com)?\.vn\//$doc,domain=vn
||notificationbyfacebook.$doc
||notificationbyfacebook.firebaseapp.com^$all
||notificationbyfacebook.web.app^$all
||business-facebook-*.pages.dev^$all
||unusualaccountcnfrmpages.github.io^$all
||review-your-page.000.pe^$all
||facebook.prantiksoft.com^$all
||facebook-guidelines.com^$all
||www-mfacebook.$doc
||www-facebooks.$doc
||www-facebook-$doc
||www-facebook.$doc
||vww-facebook.$doc
! https://infosec.exchange/@urldna/112476842252816959
||www-mfacebook.vn^$all
! https://infosec.exchange/@urldna/112560479201333529
||www-facebook-com.vn^$all
! https://urldna.io/scan/666037369f1ea64bf06cebf2
! https://www.virustotal.com/gui/url/668171c7e2792344e6f1258ad7c1ab14e94b6192dfa1a1e98fb798c938244caa
||vww-facebook.com.vn^$all
! https://www.virustotal.com/gui/url/381b8a23c755c95909382d1b4dc80bfd4e4c89b0f1c0e48ef626c16723ff88c1
||www-facebooks.com.vn^$all
! https://www.virustotal.com/gui/url/0fc06063de6c8a1043ba44c5cfd52f894d9f2d54784817f64223440e4aab8afe
||facabook.vn^$all
! https://www.virustotal.com/gui/url/a24e6d09475f940801ec755023c330f6d299e652b2806ef764e1bb2d29ff8adb
||facebooks-com.vn^$all
! https://www.virustotal.com/gui/url/62cf2706dfcd1c711c43e9005635631a02d6d8529603f0b700ff8e1b9eafd932
||ifbsmetaiidentiityconfirms.com^$all
! https://www.virustotal.com/gui/url/e5632b7ebd4d9ef4899155af4a8cf218797bd59972c231a7897b603b32ccccb1
||govern-assessment-validation-*.vercel.app^$all
! https://www.virustotal.com/gui/url/54cb07a8f7961f2a9b2e5aac8c8a7a3f7a3f816f56f799382b672929fabc32b4
! https://www.virustotal.com/gui/url/75b18ea12b5b20f2e824df4443cc6d3458ca214b738ff390f319a6bf6290a4d0
||support-center-for-*.vercel.app^$all
! https://www.virustotal.com/gui/url/6091a6693b5581524198c73b1f84c58e9272f1b100d7e68d7ed5fae7d05a06e2
||request-page-violation-*.surge.sh^$all
! https://www.virustotal.com/gui/url/a9ef0c410c76df46d4871a247df980ac912b93df02d7c7012477107171c78964
||violation-*.surge.sh^$doc
! https://www.virustotal.com/gui/url/6eeee02278ccbecd060a66c9948c69d98b79c249876e03f7ff410180fa4b4057
||copyrights-*.surge.sh^$doc
! https://www.virustotal.com/gui/url/19c07d4e7c627a1f83900c509ce73b828247b3bb932713383e5569e7e2671882
||fan-page-*.surge.sh^$doc
! https://www.virustotal.com/gui/url/d8475ddede9ae4d82634b3b67f477e08dac8e9ed1f71e217485c81e64b325440
||content-voilation-$doc
! https://www.virustotal.com/gui/url/740e678d35aa4d230791e3e9bc98d3be1d94c5269a72b35892676c606e64c326
||appeal-account-copyright-case-review.$doc
! https://www.virustotal.com/gui/url/d67ee76e5dee301886e8acf659a38d3489da3815c63592ae63659fae81242a41
||community-flagged-$doc
! https://www.virustotal.com/gui/url/19c07d4e7c627a1f83900c509ce73b828247b3bb932713383e5569e7e2671882
||help-for-work-*.pages.dev^$doc
! https://www.virustotal.com/gui/url/727aea44e0ab1a53aa0f6471b838d7391f6b4404c388b308ad3add44e5b5d65c
||metabussines.com^$all
! https://urldna.io/scan/66983eea0498ab650fb7f81a
! https://www.virustotal.com/gui/url/24b304e37ceace8f0b2d4ed4587af156618393eabecad1eb1aa1809b9876ceb0
||transparency-business.com^$all
! https://urldna.io/scan/6698e7c8b88a5a4f7f81c078
! https://www.virustotal.com/gui/url/0fb1eb85ae5a83bbbf012fc401f663011ee27042d4fc1fd43c3d6ec9bbed1dbe
||http://marketplace-item-details-*.zya.me^$all
! https://www.virustotal.com/gui/url/b6f1e13d46854c206f4126ba98691ffc00f511d4567c65ec4ea95626c39a85c2
! https://www.virustotal.com/gui/url/9651e3fa25ad8bbcd3a771acd5f4658d8dc598dc2c53ea2640cfc3c8c6257044
/^https:\/\/business\.[a-z]+confirm\.com\/meta-community-standard\d{15}\/?/$doc,match-case,domain=com
! https://www.virustotal.com/gui/url/a9999feede5fb57166172d17ee75655b19d1a006d440aa6180f1cba3197edf13
! https://www.virustotal.com/gui/url/3272577275331ff6f7774d392e4e6189b8dc914c16777d24eb691b4830c5ef17
/\.(?:pages\.dev|surge\.sh)\/help\/contact\/\d{14,19}\b/$doc,match-case,domain=pages.dev|surge.sh|~facebook.com
||business-help-temp-$doc
! https://www.virustotal.com/gui/url/ebc994d35635bdfa408c42209bb66ca8de3180dfe60c1c90386ca5bb2bd0c5cd
/\.cfd\/contract\/\d{14,19}\b/$doc,match-case,domain=cfd|~facebook.com
||business-center-$doc
||instructions-video.vercel.app/detailed_video.mp4$media

! shopping sites
/api/user/do_login|$xhr,1p,to=com|info,method=post,header=access-control-allow-headers:/authorization\,content-type\,if-match\,if-modified-since\,if-none-match\,if-unmodified-since\,x-requested-with/i
/api/user/do_login|$xhr,1p,to=com|info,method=post,header=Access-Control-Allow-Headers:/authorization\,content-type\,if-match\,if-modified-since\,if-none-match\,if-unmodified-since\,x-requested-with/i
/api/webapi/login|$xhr,3p,to=online|vip,method=post,header=access-control-allow-headers:Origin, X-Requested-With, Content-Type, Accept, Authorization
||lazada.bbc6666.com^$all
||tuyendungtiki2024.vn^$all,to=~tiki.vn
! shopee
/^https:\/\/sp\d{2,3}88(?:vn)?\.com\//$doc,domain=com|~shopee.vn
||vivanoticiando.com^$all
||mez.ink/reademcashbackshopee.1.1^$all
||virtualnoticiasaqui.com^$all
! sendo
||vnsendo.*^$all,to=info|shop|vip|~sendo.vn
||sendotv.com^$all,to=~sendo.vn
! dienmayxanh
||mayxanhsupport.com^$all,to=~dienmayxanh.com
||trungtam-dienmayxanh.com^$all,to=~dienmayxanh.com

! steam
||steamproxy.*^$all,to=steamproxy.cc|steamproxy.net|steamproxy.vip
||sp.aircsgo.com^$all
||st.aircsgo.com^$all
||steamfiller.ru^$all
||11steam.com^$all
||st-invite.com^$all
||gtm.you1.cn^$all
||steamxiazai.cn^$all
||steamcommunitylog.chez.com^$all
||steam.workshop*.com^$doc
/^https:\/\/stea[a-z]{1,4}o[mn][a-z]{4,7}y[a-z]?\.com\//$doc,domain=com|~steamcommunity.com
/^https:\/\/steam\.(?:community)?workshop-?[a-z]+\.com\//$doc,domain=com|~steamcommunity.com
! https://www.virustotal.com/gui/url/d16f07ca49e9334d080d427294630f22f10d8925de8ae73df2128e0bdbd434a9
||steam.communityart-work.com^$all
! https://www.virustotal.com/gui/url/23b9eb25910fe02ba6a4ec93e795203205afff1cb784ff265f41711dacb95755
||stearnccommunity.com^$all
! https://www.virustotal.com/gui/url/193529305a403b318c68513d9ca0bbf9869ab475004de21dd79b9746a98fc1d2
||steamcomuniry.com^$all
! https://urldna.io/scan/66925047e932af39c4d83b2e
! https://www.virustotal.com/gui/url/372d127253dfec7b8877a319c8b206cbe78cd073fb6aa63827b8e8f374b11d96
||steamcommunlyt.com^$all
! https://www.virustotal.com/gui/url/885e8a2414fc94eee924e9314140c217481c85a60f5583a11054d8eb6d25b07e
||steemcommuntiy.com^$all
! https://www.virustotal.com/gui/url/28226552d878b39c489818a56485ec98402b7f3d1937efe5b21ae398ae17d8c8
||steemcoonmmunjty.com^$all
! https://www.virustotal.com/gui/url/1d3c51b7f66596f170bda0228690f145fb2fdc9a10be670ad503b356b18d045d
||sceancoonmmunjty.com^$all
! https://www.virustotal.com/gui/url/ca2d5df746dc848767d695b04a59af02042fd44ac1829daa4df2da6acdf9834e
||steam.workshopstyle.com^$all
! https://www.virustotal.com/gui/url/ce3d17a9e4612fac947fb2562ae1a65792b5d2decd2cae8c84bc447e81c47e86
||steam.communitybrowserpowered.com^$all
! https://www.virustotal.com/gui/url/bcbbfae046e7d8b62418da2234556524170cf156f2ac5c9d25f1b7fb4bfc64e1
||workshop-users.com^$all

! game sites
||battlegrounds-bgmi-reward.events-games.com^$all
! garena
! https://infosec.exchange/@urldna/112226284936503649
! https://infosec.exchange/@urldna/112354748681058897
||rewards-ff-garenaa.ru^$all
||tes.lkowi.cfd^$all
/^https:\/\/(?:www\.)?(?:ff[-.])?member[-.]gare[a-z]+a(?:\.pro)?\.vn\//$doc,domain=vn|~garena.vn
/^https:\/\/(?:www\.)?(?:ff[-.])?men?mber[-.]garena\.vn\//$doc,domain=vn|~garena.vn
||garerna.vn^$all,to=~garena.vn
||gareza.vn^$all,to=~garena.vn
||garena.pro.vn^$all,to=~garena.vn
||ff-menmber-garena.vn^$all,to=~garena.vn
! https://urldna.io/scan/668c617231870afb8051862d
! https://www.virustotal.com/gui/url/58cfcbac7307b433fa5f749b7ec520a80ad2d9f3e6cf2ca23d82f13642b10920
||gaerana.io.vn^$all,to=~garena.vn
! https://www.virustotal.com/gui/url/f723578b1d245750ca20505afffccbb5c7dd7f8a5fa3173622a34a0316d9c13e
||gareana.vn^$all,to=~garena.vn
! https://www.virustotal.com/gui/url/c998e9fdb9fa0dd19da052a536973c793ff587d9e92aa8ece634369014c338d1
||doivangfreefiregarena.io.vn^$all,to=~garena.vn
! https://www.virustotal.com/gui/url/c65a4eafd1e4f9e816ff13d111c915d14cda3a642fe5e9554bc1ae03c38d613b
||garane.io.vn^$all,to=~garena.vn
! https://www.virustotal.com/gui/url/a0cf7242353e4b571489ff50296cfa28f32ea71ca3d5a19a1a385b08cada19cf
||garcna.vn^$all,to=~garena.vn
! pubg
||pubg-arena.top^$all
||register-turnamen.free.nf^$all
||pubgm-zing-vn.com^$all
||sukien-pubg.io.vn^$all
||napthepubg.mobi^$all
! mobile legends
||mobilelegendsmycode.com^$all
||eventdmkuning.brenn.biz.id^$all

! google
||bxzxenzidrmrksu.jiongcao.cn^$all
||google-stare.com^$all
||confirmktk.com^$all
! https://infosec.exchange/@urldna/112294350751277558
||datahub.center^$all
! https://infosec.exchange/@urldna/112435554388872743
||channelhub.info^$all

! microsoft
||microsoft*.dfautomotive.de^$doc
||microsoft.dfautomotive.de^$all
||microsoft.account.dfautomotive.de^$all
||whfdny.org^$all
||outlook-office.zapier.app^$all
||infos4.yolasite.com^$all
||policija64.wixsite.com^$all
||outlook20239.wixsite.com^$all
||microsoftupdate67.wixsite.com^$all
||exchange.add-solution.de^$all
||activarhotmail.weebly.com^$all
||exceklcmicrosftprotection.pages.dev^$all
||microsoft-datamaturity.noisehq.nl^$all
||graettingerlaw.com^$all
||hab-sharepoint.weebly.com^$all
||iamnew.powerappsportals.com^$all
||post.nationalrent.ru^$all
||hyuiko.live^$all
||gocolonial.local-user.com^$all
||cashum.unam.mx/wp-content/backups-dup-pro/imports/index.htm$all
||od.atami.no/one_drive.html$all
! https://www.virustotal.com/gui/url/20d6a5b64d26edeb2e5caae3aa19c00ebd83a6d4dac9e41486c823751e875030
||johnhstngs4.wixsite.com^$all
! https://infosec.exchange/@urldna/112186648791862292
||acir.postofficeweb.com/grupoacir/$all
! https://infosec.exchange/@urldna/112377161728125627
||storageapi-new.fleek.co/*/yss/ind.html$all
! https://urldna.io/scan/667d384ad611a65623a4c272
! https://www.virustotal.com/gui/url/08c0a664528400e7f69613f0d67cd32eaa27c172e61b59729af5fd808fb52737
||wwwservicemsnlive-*.hubspotpagebuilder.com^$all
! https://www.virustotal.com/gui/url/b434ef1646001aeffd5a32021dc365e17f38b4ca73cbd06e237fa29749e5ae05
||conohawing.com/*/outlook-$doc
! https://www.virustotal.com/gui/url/6842be99947bd0db1671500f4ab7774846e34f7d951b190be9e58b9e84536f39
||hergunavantaj.com.tr^$all
! https://www.virustotal.com/gui/url/121614b7a02a5f9bfe0df6bea30184ef2c28a03df07b6ae41c489de241554344
||irrigationservices.co^$all
! https://www.virustotal.com/gui/url/a718d596ee202aef01133915018feedcb6b3402730a4246dd4c7329d60729faf
||adobesecurequotelink.ru^$all
! https://www.virustotal.com/gui/url/4c3fa27636d4439e79b4f6a05f2c3859897425727bf985a5afe5047266e462ff
||copynet.com.mx/Message%20Centre/$all
! https://www.virustotal.com/gui/url/64fb53355d445fd7b50685886e43e364285a48a660701a553cfbfd925c1a371c
||msnoauth*.com/office-$all
! https://www.virustotal.com/gui/url/564a9ce8f29f1fe3e951fc11865e27ed1f3280a512afbd110e2733634106510b
||sites.google.com/l0gin-microsoftwebonlne.app/$all
! https://www.virustotal.com/gui/url/51ddf7de3e21e346563a713d62f1a3221afda66b9681ab2b5989da7d901a3935
||monogonzalez.com^$all
! https://www.virustotal.com/gui/url/8b37f3914c5fdc4a3631e8ea45b8cd1a09f2769b4397fe143d3ab4f103f20c82
||athenasbaklava.com^$all
! https://www.virustotal.com/gui/url/37be040cc57eda84deb5ccc8d246092d6e5dd68e848389c51672aec90c521d63
||mail.sorbeadindias.com^$all
! https://www.virustotal.com/gui/url/19c07d4e7c627a1f83900c509ce73b828247b3bb932713383e5569e7e2671882
||pages.dev/smart89/$doc
! https://urldna.io/scan/669b8ab77cf5beafb5dbcf99
! https://www.virustotal.com/gui/url/1092dfb23e71f252516b56e8d516e92df4233b5d7e7a5178393f7a1ae02b9ff3
||microsofthotmailsi1.wixsite.com^$all
! https://www.virustotal.com/gui/url/d0a30d63d6975b69762e024ddb89c252a8f2822bddb8b4d171bf3495261dc479
||supplieradvisor.ciamlogin.com^$all
! https://www.virustotal.com/gui/url/6586411fdd055f472911a7507ed78ed2eabab30a79d2caf3402525f119dd8e66
||e-messsage.com^$all
! https://www.virustotal.com/gui/url/8f1d11e2386cb995b30ec481a6b28acd4903283450f034a426927648956578a2
||supp0rt.co.za^$all
! https://www.virustotal.com/gui/url/80a4ef21bdad71086be4131d0781e1578b59f2d3565ac48cd5d30aa7e2b2e398
||ariabcon.com^$all
! https://www.virustotal.com/gui/url/b1351123c5563546b0841861e21e71593f0eca917057ac3c9f497303160053e4
||vkcs.cloud/owa.html^$doc
! https://www.virustotal.com/gui/url/38b0cc10ec3ff351fb8688c6386834152abda6e018c63e8be60272b2ffb6c3b1
||ocalam.com:8443/impact^$doc

! telegram
||telegramhcn.com^$all
||web.telegram.data-bees.cn^$all
||haveplentymusic.com^$all
||sozdor9s.com^$all
||newappmssg.ru^$all
||teleagram.icu^$all
||telesgram.work^$all
||telegrambotsolution.pages.dev^$all
/^https:\/\/www\.telegramk[a-z]\.com\//$domain=com|~telegram.org
||telegramkv.com^$all
! https://www.virustotal.com/gui/url/06c0aafaca0d59712ddd82ceeacef7b4bb31ecf44fb43584a45fd400416aa913
! https://bazaar.abuse.ch/sample/bdb84b702752c4065fa36f7c6f7038eed2bfda6d09c32d69512896077b66c097/
||telegramkp.com^$all
||cdn-telegram.com^$all
! https://www.virustotal.com/gui/url/696c0e59cdfe8b6eb634f93187fac9886fe3f2b1925df6890f4292c734eb675d
! https://www.virustotal.com/gui/file/fd1e8e0dfcb553cae96a6ab8869e2d8de9a67ffcbf3492d4a2e1c26ce02b82e1
||telegramkd.com^$all
||telegram-zhongwen.com^$all
! https://www.virustotal.com/gui/url/dfc0c0423f0e994148d39d8458893a35bb024fdeeabfd7a82dd0d4e50ce68ace
||rr.nu^$doc

! usps
||uspsparcels.net^$all,to=~usps.com
! https://infosec.exchange/@urldna/112224043535026915
! https://infosec.exchange/@urldna/112244333356436954
/^https:\/\/usps\.[-a-z]{6,}\.(?:com|top)\/(?:address\.html|information|verify)\b/$doc,domain=com|top|~usps.com
/^https:\/\/ur[cex][a-z]{2,4}\.com\/(?:address\.html|information|verify)\b/$doc,domain=com|~usps.com
.top/pg?do=$doc,domain=top
||wrc-gh.org/redelivery$doc
! https://www.virustotal.com/gui/url/42539b15d452c49ed504ad45697d8aa74ef2ca4165b4562801c794a74abe3cff
||uszq.iafedoec.top^$all
! https://infosec.exchange/@urldna/112560597065106850
||mybluehost.me/2us/verification/$doc
! https://urldna.io/scan/6683cfb811bd32bf9fb75225
! https://www.virustotal.com/gui/url/25aea0e999fad6210accce6965b498b4794ae442233ece87290293486f17d432
||zxb.bgd.mybluehost.me^$all
||mybluehost.me/uspshome/$doc
! https://urldna.io/scan/668915c66ba77bfb3cacea3c
! https://www.virustotal.com/gui/url/2cffc82255b1724b4e9083c350c2c3d73ff9366ee6ab15d6c0bc37ab6c7b8066
||mybluehost.me/us/post/$doc

! weebly/square phishing
/^https:\/\/(?:[a-z0-9]{2,}-)+10\d{4}\.weeblysite\.com\//$doc,domain=weeblysite.com
/^https:\/\/(?:[a-z0-9]{2,}-)+10\d{4}\.square\.site\//$doc,domain=square.site

! spotify
! https://community.spotify.com/t5/Accounts/Phishing-Email/td-p/5877600
/^https:\/\/[^.]+\.codeanyapp\.com\/wp-content\/.+\/spo[a-z]{2}i\//$doc,domain=codeanyapp.com
||codeanyapp.com/*/spotii/$all
||codeanyapp.com/*/spoofi/$all
||mybluehost.me/*/MitID/$doc
||airpos.co.kr/.well-known/pki-validation/*/MitID/$doc
||autolocksmithpro.com/spt/$all
! https://www.virustotal.com/gui/url/5f5d2e941e3e44e01a4ec88d3732113195e2afdef511d3635fbd291495f82f4f
||mybluehost.me/spot/Account/$doc
! https://www.virustotal.com/gui/url/e12ae2bc0550053fb14c5626719115d304edc007040499a44cb4113cd9e41d0e
||mybluehost.me/dse/main/$doc

! swisspass
||swiss-passapp.web.app^$all,to=~swisspass.ch
||mybluehost.me/CFF/$doc,domain=~swisspass.ch
||mybluehost.me/--/SBBCFF$doc,domain=~swisspass.ch
||mybluehost.me/SBB.CH/$doc,domain=~swisspass.ch
! https://www.virustotal.com/gui/url/92187fec54723b98e4a67ce247dfcc2a18d6fe2ad425c9ef8d926abd8fac9a10
||mybluehost.me/*/swisspass/$doc,domain=~swisspass.ch
! https://www.virustotal.com/gui/url/1b04ebdcbc185c83d58b89b7f5d0220f440aa8ef7652138a1ba30bf981e841f4
||mybluehost.me/Konto/SBB/$doc,domain=~swisspass.ch
! https://urldna.io/scan/6677f243e02f8fe8990a0417
! https://www.virustotal.com/gui/url/0fec438409b71ba8f28fd33e31a13227836fc644467d625aa2b98986ba21ce3a
||mybluehost.me/sbb-ch/$doc,domain=~swisspass.ch
! https://infosec.exchange/@urldna/112428358456633497
||mybluehost.me/pass/index/$doc,domain=~swisspass.ch
! https://infosec.exchange/@urldna/112316881794824268
||mybluehost.me/*/CHFINAL/$doc,domain=~swisspass.ch
||acconsult.info/*/CHFINAL/$doc,domain=~swisspass.ch
! https://infosec.exchange/@urldna/112441688955721080
||sviluppo.host/sbb-chf-id/$doc,domain=~swisspass.ch
! https://infosec.exchange/@urldna/112439801316174846
||wcomhost.com/spass/$doc,domain=~swisspass.ch
! https://infosec.exchange/@urldna/112658035861531160
||altitudesim.ca/*/CHFINAL/$doc,domain=~swisspass.ch
! https://www.virustotal.com/gui/url/536c73948a6fb646afe3bbd0a06889b9e4bb377eec397600321961e3d366805c
||codeanyapp.com/Swissp/$doc,domain=~swisspass.ch

! swisscom
||secureserver.net/myswisscom$doc,domain=~swisscom.ch
||codeanyapp.com/Swiss_com/$doc,domain=~swisscom.ch
! https://infosec.exchange/@urldna/112546087270319031
||codeanyapp.com/info/cc.php^$doc,domain=~swisscom.ch
! https://infosec.exchange/@urldna/112474128904326825
||mybluehost.me/neww/$doc,domain=~swisscom.ch
! https://www.virustotal.com/gui/url/dc05982c117efe86a9230d707df6f72a81c98251949428004e8c154bd578d717
||mybluehost.me/*/csom/$doc,domain=~swisscom.ch
! https://infosec.exchange/@urldna/112485099916668793
||secureserver.net/ruckstantung907921/$doc,domain=~swisscom.ch
! https://www.virustotal.com/gui/url/10d8d5cb68cf0f03cb48b3c5000af376e656858a0722bbf8d95cb0935086ed33
||sviluppo.host/df/pass.php^$doc,domain=~swisscom.ch
! https://www.virustotal.com/gui/url/b125bd6b92439b436f012c539b1601915c8146703187c0b86119a4fe0c8d8e82
||mybluehost.me/sssssssssssssss/$doc,domain=~swisscom.ch
! https://www.virustotal.com/gui/url/aaaf519966c47df9632c128df1d10e6d85ba70f07a5dc2843b2c091dfbe25a73
||codeanyapp.com/swiss-login/$doc

! swisspost
||swisspost.web.app^$all,to=~post.ch
! upc
! https://urldna.io/scan/66789b05c766226ae8d6e379
! https://www.virustotal.com/gui/url/94fdcf815a75d8182fee65b9f90fcbdd03498c33f6200e0c951a1a5874b2ad1d
||wcomhost.com/ch/upc/$all,to=~upc.ch

||exodusrt.azurewebsites.net^$all,to=~exodus.com
||ledgerwallive.com^$all,to=~ledger.com
||mantanetworkcn.com^$all,to=~manta.network
||interface-git-parallel-cypress-uniswap.vercel.app^$doc,domain=~uniswap.org
||sei-io.web.app^$all,to=~sei.io
||web3mainnetdapp.pages.dev^$all
||web3connectfix.pages.dev^$all
||clinitex.fr/META5KYC/$doc,domain=~metamask.io
||syncwallet.pages.dev^$all,to=~walletconnect.com
! https://infosec.exchange/@urldna/112379049102904534
||azuki-*.vercel.app^$all,to=~azuki.com
! https://infosec.exchange/@urldna/112246221074509842
||base-swap-frontend-*.vercel.app^$doc
! https://www.virustotal.com/gui/url/7ef12f181e0c1d09475f2fd51b19b06ff393f4c686abfb89b312cd47447ac7bf
||metamask*.webflow.io^$doc
! coinbase
||baseguardauth.net^$all,to=~coinbase.com
! https://www.virustotal.com/gui/url/35ca5ae411511f7c68dd4297ac19551e0dc2d562572c35234539516970135d61
! https://www.virustotal.com/gui/url/dd9c66a2684e320439e385a424e13d2384752504242d385ed7bd3fa55fd57f97
||cbnotifser.top^$all,to=~coinbase.com
||cbnotif.top^$all,to=~coinbase.com
! imtoken
||imtoken.org.cn^$all,to=~token.im
||tokenap.app^$all,to=~token.im
||imcosom.com^$all,to=~token.im
! opensea
||opensea-nft.web.app^$all,to=~opensea.io
||paslanmazspider.org/bin/$all,to=~opensea.io
! pancakeswap
/^https:\/\/pancake(?:dro|swa)pclick\d+\.vercel\.app\//$doc,domain=vercel.app|~pancakeswap.finance
||pancakeswap-*.vercel.app^$doc,domain=vercel.app|~pancakeswap.finance
||pancake-swap*.vercel.app^$doc,domain=vercel.app|~pancakeswap.finance
||pancake-nft*.vercel.app^$doc,domain=vercel.app|~pancakeswap.finance
! https://www.virustotal.com/gui/url/432acafd8495280c7de7cc30703cb321464c8b519579fb0741e89f544c08193a
||pancakeswap.finance.expolorer.im^$all,to=~pancakeswap.finance

! openphish
||air.bnb-id*.com^$all,to=~airbnb.com
||pakket-bpost-be.web.app^$all,to=~bpost.be
||mmitalianbeef.square.site^$all,to=~mmitalianbeef.com
||bigbauer.com^$all,to=~gmx.com
||sacredtreespirit.com^$all,to=~ups.com
||lkmw88.com^$all,to=~mercadolibre.com
||hologramid.cn^$all,to=~alibaba.com
||seguro.serasaexperian.site^$all,to=~serasa.com.br
||beluxrepm.followme.fr/FolloWMe$all,to=~realestate.bnpparibas.com
||mybluehost.me/Cope346/$all
||tesakom.com/aa/index.html^$all,to=~ebestsec.co.kr
||glitch.me/pdf.html?email=$doc
! https://www.virustotal.com/gui/url/51313f8d841a87fbda4029330b190c9e5f4bd4c70646f2a73b10771d677a8ab2
||cursorltd.com^$doc
! https://www.virustotal.com/gui/url/5ff91c73c62cc4bd5af699518d73ecffe9bdd0830c4052e4da1405568495c4df
||cprapid.com^$doc
! https://www.virustotal.com/gui/url/0fded7ccb337703e58ddc34b8a7c89f87fdcb102a543136e434b4f1783d37935
||utahpolicetraining.*.mybluehost.me^$all
! https://www.virustotal.com/gui/url/7d2852015c759596a7be24edf4043c58dc246bfb027a625a4de4d24ed1a81fbc
||mybluehost.me/*/choronopost/$doc,domain=~chronopost.fr
! https://www.virustotal.com/gui/url/9f231accf3d50c30fce7fce728a16d934814f1bd3256dcaacc115ef1e9a3b13a
||dropbox*.weebly.com^$doc
! https://www.virustotal.com/gui/url/dd422322662ef1547afcc735850a4a4ee1ae601cb1502701174730f24f4e9ac0
! https://www.virustotal.com/gui/url/5b84e52dfe110a03f08cf7165bd70e003bb45de1a0f0440a0b370b2e2de55421
/^https:\/\/([a-z]-){10,15}[a-z]\.(?:com|net|org)\.tr\//$doc,domain=com.tr|net.tr|org.tr
! https://www.virustotal.com/gui/url/ef4d71bf92ccca6f4079f06f4c519e9d21bc45e240ea32a42561b5684a2305da
/views/go/start.php^$doc
! https://www.virustotal.com/gui/url/09b11b4c345be67d2e7659fa2f1d1c07a000bc3cebbbbed17e891865a355d07e
/^https:\/\/pub-[a-f0-9]{32}\.r2\.dev/be[a0-9]\d{2,3}\.html\b/$doc,match-case,domain=r2.dev
! https://www.virustotal.com/gui/url/770ffdec12527b6af696bf4a7dde6fcaa484544ef932c438964f013b4a7c673f
||pub-*.r2.dev/adobe2024.html^$doc
! https://www.virustotal.com/gui/url/526d0f017cf0af2b63746d39c742afe6d6d827cc1142d49fff26467f57d64c22
||pub-*.r2.dev/owa.html^$doc

! docusign.com
! https://www.virustotal.com/gui/url/6e9187f7fd43794da064ee58f10f92f1f2b43dd968fcc3f5b915b680f5f61d07
||pub-*.r2.dev/alt_type.html^$doc,domain=~docusign.com
||pub-*.r2.dev/doc_start.html^$doc,domain=~docusign.com
||pub-*.r2.dev/dse_sign.html^$doc,domain=~docusign.com
||pub-*.r2.dev/secure_response.html^$doc,domain=~docusign.com
||pub-*.r2.dev/utility_base.html^$doc,domain=~docusign.com

! https://khonggianmang.vn/uploads/2023_CBT_48_4807790772.pdf
||tin-dung-$doc
||khcn-tindung-$doc
||viettelgroup.com^$all,to=~viettel.com.vn

! https://khonggianmang.vn/uploads/2023_CBT_50_f8da1fd477.pdf
||khach-hang-the-$doc

! https://khonggianmang.vn/uploads/2024_CBT_03_4aa7fe1b3c.pdf
||lazada.gg^$all

! https://khonggianmang.vn/uploads/2024_CBT_09_4c59decfba.pdf
||chamsockhachhang-$doc

! https://khonggianmang.vn/uploads/20240412_BCT_03_2024_V1_f9a4a7619c.PDF
! /^https:\/\/hdsaison-?[a-z]{2,}\.(?:cc|com|vip)\//$doc,domain=cc|com|vip|~hdsaison.com.vn
/^https?:\/\/dienmayxanh[-a-z0-9]+\.com\//$doc,domain=com|~dienmayxanh.com
/^https:\/\/dich-vu(?:-[a-z0-9]+){2,3}\.com\//$doc,domain=com
/^https:\/\/zla\d{3}\.top\//$doc,domain=top|~tiki.vn
||cskh-vib-$doc
||cskh-vib.$doc
||chamsockhachang-$doc
||chamsocthekhachang-$doc
||nang-cap-$doc
||ho-tro-tin-dung-ca-nhan.com^$all
||hdsaison-$doc,domain=cc|vip|~hdsaison.com.vn
||dichvucong.$doc,domain=~gov.vn
||tikimall.$doc,domain=tikimall.*|~tiki.vn
||taikhoanvps.com.vn^$all,to=~vps.com.vn
||motaikhoanchungkhoanvps.com^$all,to=~vps.com.vn
||zla963.top^$all,to=~tiki.vn
||zla653.top^$all,to=~tiki.vn
||tah0a.com^$all,to=~tiki.vn
! https://www.virustotal.com/gui/url/ec441402cb46c89cffe59f9e3dd856b406dbf7b2e4ff043c6a4bdbd47a94d1f6
||shopeesmarket.com^$all,to=~shopee.vn

! https://khonggianmang.vn/uploads/2024_CBT_15_e8dc0f11bc.pdf
! https://www.virustotal.com/gui/url/afcc9dee2cd3022d8cdfab4de96b74a19f82a82c17348cdfb57add76aad130a2
||dailyssshopee.com^$all,to=~shopee.vn

! https://khonggianmang.vn/uploads/20240502_BCT_04_2024_V2_1_a0c95c1f96.pdf
||clzl.pro^$all,to=~momo.vn

! https://khonggianmang.vn/uploads/2024_CBT_21_c7d8f95f66.pdf
||tpbankvn.workplace.com^$all,to=~tpb.vn

! https://khonggianmang.vn/uploads/2024_CBT_22_26eef5509b.pdf
/^https:\/\/da\d{4}\.com\//$doc,domain=com|~lazada.vn
/^https:\/\/tdk[det]0[0-9]\.com\//$doc,domain=com|~tiki.vn
||da6555.com^$all,to=~lazada.vn
||soppe68.$all,to=~shopee.vn

! https://khonggianmang.vn/uploads/2024_CBT_23_cdbc1a35e4.pdf
/^https:\/\/sp\d{4,5}p\.com\//$doc,domain=com|~shopee.vn

! https://khonggianmang.vn/uploads/2024_CBT_25_32ceacddc3.pdf
||vib-*.com^$doc,domain=com|~vib.com.vn
||vib-*.shop^$doc,domain=shop|~vib.com.vn
||vssidgov.com^$all
||nappthe.vn^$all,to=~napthe.vn
||binhchoncuocthivetranhsinhvien2024.weebly.com^$all

! https://khonggianmang.vn/uploads/2024_CBT_26_3710292cc3.pdf
||vn156475p.com^$all
! https://www.virustotal.com/gui/url/123740a27716c295d40eeacd7842a176603d2aa9e6ad9a5030cc95361e5c191b
||seleeashopee.com^$all,to=~shopee.vn

! https://khonggianmang.vn/uploads/2024_CBT_28_97c3eaa00a.pdf
||icchanoi.net^$all,to=~icchanoi.vn
||centralmarketing.online^$all,to=~worldbank.org
||nze98582s.com^$all,to=~shopee.vn
||tdke00.com^$all,to=~tiki.vn

! https://khonggianmang.vn/uploads/20240701_BCT_06_2024_V4_48f8dba76d.PDF
||uudai-tructuyen-$doc

! https://khonggianmang.vn/uploads/2024_CBT_27_5b8aa10967.pdf
||uudaikhachhang-$doc
||nang-hang-$doc
||tikijaj2.com^$all,to=~tiki.vn
||tikt88.com^$all,to=~tiki.vn
||businesseventskp.top^$all,to=~tiki.vn
||mojgov.weebly.com^$all,to=~moj.gov.vn
||chinhphu.cc^$all,to=~chinhphu.vn
||hangtietkiem.com^$all,to=~giaohangtietkiem.vn
||tcvnhomefic.com^$all,to=~mbbank.com.vn
||lapdatinternet.net^$all,to=~sctv.com.vn

! https://khonggianmang.vn/uploads/2024_CBT_29_32b001d150.pdf
||hethongnhanvien.com^$all,to=~lazada.vn
||lazadaevent.com^$all,to=~lazada.vn
||vntiki.vip^$all,to=~tiki.vn
||baovietcom.vip^$all,to=~baovietbank.vn
||mcqdvn.com^$all,to=~mbbank.com.vn
||hethongvaynhanh247.com^$all
||bethivetranh2024.weebly.com^$all
! https://www.virustotal.com/gui/url/163549472907cf1ddbe51b3f4722fd076d7ca8bc820c64a0d033e95c71706b15?nocache=1
||ebaymall168.shop^$all
||tikifreeship.vip^$all,to=~tiki.vn
! https://www.virustotal.com/gui/url/7f02e45eca07e7e20dc88acf94a0403f02c5096f1ad128fd111c50e19bb63d76
! https://www.virustotal.com/gui/url/9877777ec7e5bfbd2db6f7459a33d7c8c4507b777ec108eeb1b2fbdab485fbd6
||flikois.com^$all
||f997.sbs^$all
||371j.xyz^$all
||momoshopvip.com^$all,to=~momo.vn

! https://www.malwarebytes.com/blog/threat-intelligence/2024/03/new-go-loader-pushes-rhadamanthys
! https://safeweb.norton.com/report/show?url=https:%2F%2Farnaudpairoto.com%2F
! https://otx.alienvault.com/indicator/domain/arnaudpairoto.com
! https://www.virustotal.com/gui/url/ec3d5edf4b9db60d4a4057757d820361c850dd355dd21e929c57bc55e54f7517?nocache=1
||puttyconnect.info^$all
||astrosphere.world^$all

! https://www.reddit.com/r/Scams/comments/1bv6nyh/is_this_a_real_facebook_link/
! https://www.virustotal.com/gui/url/dec6d9d61fd01d20623f190e52acccf2bef004ec1cd11324efa93e70d417a1b5
! https://www.urlvoid.com/scan/marketplace-item-352983165488.000.pe/
||marketplace-item-*.000.pe^$doc

! https://www.bitdefender.com/blog/labs/ai-meets-next-gen-info-stealers-in-social-media-malvertising-campaigns/
! https://www.reddit.com/r/uBlockOrigin/comments/1dcnc7u/my_website_is_flagged_as_badware_risks_by_ubo/
! https://github.com/uBlockOrigin/uAssets/issues/24134
! /^https:\/\/(?:ai|art|get)?-?midjourney(?:s|ai)[^\/]+\//$doc,domain=~midjourney.com|~edu|~gov
/^https:\/\/(?:ai|art|get)-?midjourney[^\/]+\//$doc,domain=~midjourney.com|~edu|~gov
/^https:\/\/mid-journey\.[a-z]+\//$doc,domain=~midjourney.com|~edu|~gov
||midjourney.co^$all

! https://blog.talosintelligence.com/coralraider-targets-socialmedia-accounts/
! https://www.virustotal.com/gui/url/4084d02e0b9a73221be4a32e853f87471ca45c5a80f8c7e461e640e025503512
! https://safeweb.norton.com/report/show?url=runningapplications-b7dae-default-rtdb.firebaseio.com
! https://otx.alienvault.com/indicator/domain/runningapplications-b7dae-default-rtdb.firebaseio.com
||runningapplications-b7dae-default-rtdb.firebaseio.com^$all

! https://www.fortinet.com/blog/threat-research/scrubcrypt-deploys-venomrat-with-arsenal-of-plugins
! https://github.com/uBlockOrigin/uAssets/issues/23464
||kisanbethak.com^$all

! https://www.malwarebytes.com/blog/threat-intelligence/2024/04/active-nitrogen-campaign-delivered-via-malicious-ads-for-putty-filezilla
||kunalicon.com^$all
||inzerille.com^$all
||recovernj.com^$all
||pputy.com^$all
||file-zilla-projectt.org^$all

! https://baochinhphu.vn/canh-bao-mot-so-website-gia-mao-lua-dao-nguoi-dung-internet-can-tranh-102240219171043932.htm
||vuabem.com^$all

! https://lsvn.vn/cong-bo-danh-sach-cac-website-duong-link-gia-mao-1689820821.html
! https://www.facebook.com/LYNVietnam/photos/a.367113197050114/1391216614639762/
||lynstore.net^$all,to=~lynvn.com

! https://github.com/uBlockOrigin/uAssets/issues/23559
||wasabiwallet.is^$doc

! https://www.virustotal.com/gui/url/5df7c4ecaa01f24d8ccfdac5be4c0eb09a0a49c705e6b1bcfebd50f261fa5174
! https://www.virustotal.com/gui/url/70b03a18e67dfc8ae8b93c16e69c0046223cf8e312aa8f4f655e6e1498797493
! https://safeweb.norton.com/report/show?url=magicslimnhatban.com
! https://safeweb.norton.com/report/show?url=giamcannhatban.com
! https://www.urlvoid.com/scan/magicslimnhatban.com/
||magicslimnhatban.com^$all
||giamcannhatban.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/23674
||examated.co.in^$doc

! https://www.virustotal.com/gui/file/cbc37be64bbe194d3e06da6048f0db712bf8f323f78222f4265604d609fee325
! https://www.virustotal.com/gui/file/d5a0a28b2a8e97c24f12595833a0663e904e750149eb64b8b9a17f9758a5c966
! https://www.virustotal.com/gui/file/ca6d7147f4d2489bb06c9b6590ee9939c3c65165c2d584f1881d00a587fc4ce4
||github.com/linarweloper/Blumfarmbot^$doc

! https://www.cyberdaily.au/security/10614-vigilante-hacks-scam-call-centre-proceeds-to-warn-victims
||waredot.com^$doc
||waredot.us^$doc

! https://github.com/uBlockOrigin/uAssets/issues/24107
||meltedpleasandtws.shop^$all

! https://www.reddit.com/r/uBlockOrigin/comments/1djhn6p/ubo_lite_missed_some_ads/
/l/DMP_captcha_for_vpn?$all

! https://github.com/uBlockOrigin/uAssets/issues/24189
||kms-full.com^$doc
||kmspico.ws^$doc
||kmspico.io^$doc
||kmsauto.uno^$doc
||kms-tool.com^$doc
||kmsauto.tech^$doc
||kmsautodown.space^$doc
||gpstracker.site^$all
||kmsauto.org^$doc
||furykms.com^$doc
||kmspico-official.org^$doc

! https://github.com/uBlockOrigin/uAssets/pull/18388
! https://github.com/uBlockOrigin/uAssets/pull/23643
! https://www.forbes.com/sites/jacksonweimer/2021/04/10/that-twitter-family-tree-trend-is-secretly-following-random-accounts--without-your-consent
||roundyearfun.org^$all
||roundyearfun.com^$all
||anyplacehere.me^$all
||funaroundy.click^$all
||anyplacehere.live^$all
||funtwitter.games^$all
||twitter-circle.com^$all
||funroundy.click^$all
||twitterfun.games^$all
||funxgames.site^$all
||funroundy.online^$all
||funxgames.me^$all
||anyplacehere.store^$all
||infinitytweet.me^$all
||infinitweet.com^$all
||infinitytweet.com^$all
||infinityweet.me^$all
||infinityweet.com^$all
||anyplacehere.online^$all

! https://github.com/uBlockOrigin/uAssets/pull/24255
! https://sansec.io/research/polyfill-supply-chain-attack
! https://www.bleepingcomputer.com/news/security/polyfillio-javascript-supply-chain-attack-impacts-over-100k-sites/
! https://www.bleepingcomputer.com/news/security/polyfillio-bootcdn-bootcss-staticfile-attack-traced-to-1-operator/
||googie-anaiytics.com^$all
||bootcdn.net^$all
||bootcss.com^$all
||staticfile.net^$all
||staticfile.org^$all
||unionadjs.com^$all
||xhsbpza.com^$all
||union.macoms.la^$all
||newcrbpc.com^$all

! https://github.com/uBlockOrigin/uAssets/pull/24272
! https://www.bleepingcomputer.com/news/security/polyfill-claims-it-has-been-defamed-returns-after-domain-shut-down/
||polyfill.com^$all
! https://x.com/Polyfill_Global/status/1809122842145141114
! https://github.com/uBlockOrigin/uAssets/pull/24434
||polyfill.top^$all

! https://github.com/uBlockOrigin/uAssets/issues/24248
||veilcurtin.world^$doc
||yikesgroto.com^$doc
||midnightsociety-x.com^$doc
||2d45b3cf2299d8ba038f45cb38aca4f2ecfbcb8d264ba28432ae5c51.com^$doc

! https://github.com/GloriousEggroll/proton-ge-custom#myself-gloriouseggroll-and-this-project-proton-ge-are-not-affiliated-with-httpsprotongecom-that-is-a-spamfake-website-there-is-no-existing-website-for-proton-ge-other-than-this-github-repository-proton-ge-does-not-collect-any-user-data-what-so-ever-and-is-not-a-company-or-organization-of-any-type
||protonge.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/24262
||get-express-vpn.online^$all,to=~expressvpn.com
! https://www.virustotal.com/gui/file/94587b41a0eb5e2c592976fa283b0bfc0ef2e2c5cec24bba298cda0eb67270de
||chromnius.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/24283
||premium-x-notes.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/24123
! https://github.com/pizzaboxer/bloxstrap/blob/main/README.md
||bloxstrap.*^$doc,domain=~bloxstrap.pizzaboxer.xyz,to=~bloxstrap.pizzaboxer.xyz
||bloxstrapmenu.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/24323
! https://www.virustotal.com/gui/url/f355d4d12f50be515284fc97096bad1f093194efe21fd7420c4446ae20def74a
! https://transparencyreport.google.com/safe-browsing/search?url=joannclearances.com
! https://safeweb.norton.com/report/show?url=joannclearances.com
! https://www.urlvoid.com/scan/joannclearances.com/
! https://www.scamadviser.com/check-website/joannclearances.com
! https://www.scam-detector.com/validator/joannclearances-com-review/
||joannclearances.com^$all,to=~joann.com

! https://github.com/uBlockOrigin/uAssets/issues/24390
! https://github.com/hagezi/dns-blocklists/issues/3163#issuecomment-2229056638
||pcapp.store^$doc
||convertwithwave.com^$doc
||withsecurify.com^
||securifyguard.com^
||getsecurify.com^

! https://github.com/uBlockOrigin/uAssets/issues/24421
||highwaycpmrevenue.social-previews.top^$all,to=~image.io
||clicksocialimage.top^$all,to=~image.io

! https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/facebook-malvertising-epidemic-unraveling-a-persistent-threat-sys01/
! https://www.virustotal.com/gui/file/02b336b42d4d80ed17bf255536ecdf3d28db51bc81cc17926dee458e61f092e5
! https://www.virustotal.com/gui/url/ff01e9e3d9b91835d34ba457e2714f407acca9bf14b486b55fd9e6d6c27286f0
! https://www.virustotal.com/gui/url/14cc314140e3441870cfc94908ca49175f70bd7eca6781cd8041b16889d21452
||blue-softs.com^$all
||softs-download.com^$all
||iemcan.com^$all
||hvacpartstechnician.com^$all
||pmequebeclic.com^$all
||sirokataldea.com^$all
||senmendai.net^$all
||download-ai.top^$all
||sites.google.com/view/blue-softs^$all
||sites.google.com/view/xtaskbar-themes^$all
||sites.google.com/view/newtaskbar-themes^$all
||sites.google.com/view/awesome-themes-desktop^$all
||sites.google.com/view/taskbar-themes^$all
||sites.google.com/view/ai-image-3d^$all
||sites.google.com/view/taskbar-themess^$all
||sites.google.com/view/softs-download^$all
||sites.google.com/view/sora-ai-v2^$all
/^https:\/\/[a-z]{6,19}\.(?:com|net)\/js\?t=[_a-z0-9]+&ns=[a-z]{2}$/$script,3p,strict3p,match-case,to=com|net
/^https:\/\/[a-z]{6,19}\.(?:com|net)\/(?:static_)?file\/\?t=[_a-z0-9]+&ns=[a-z]{2}$/$frame,popup,3p,strict3p,match-case,to=com|net
/^https:\/\/[a-z]{6,19}\.(?:com|net)\/(?:static_)?file\/\?t=[_a-z0-9]+&ns=[a-z]{2}$/$doc,match-case,domain=com|net

! https://github.com/uBlockOrigin/uAssets/issues/24522
||shy-boat-90ce.jiko728928922.workers.dev^$doc,domain=~uniswap.org
||uniwspapp.com^$all,to=~uniswap.org

! https://community.bolster.ai/t/crowdstrike-look-alike-domains-list/217
||crowdstrike-helpdesk.com^$doc
||crowdstrikebluescreen.com^$doc
||crowdstrike0day.com^$doc
||crowdstrikedoomsday.com^$doc
||crowdstriketoken.com^$doc
||bsodsm8r.xamzgjedu.com^$doc
||crowdstrike-cloudtrail-storage-bb-126d5e.s3.us-west-1.amazonaws.com^$doc
||crowdstrikeoutage.info^$doc
||microsoftcrowdstrike.com^$doc
||crowdpass.live^$doc
||crowdstrike.life^$doc
||crowdstrikeupdate.com^$doc
||mecrowdstrikesnowstandalone.azurewebsites.net^$doc
||crowdstrikereposify.net^$doc
||crowdstrike-falcon.online^$doc
||crowdstrike-solutions.nl^$doc
||crowdstrikeclaim.com^$doc
||crowdstrokeme.me^$doc
||crowdstrikeoutage.com^$doc
||crowdstrikefix.zip^$doc
||crowdstuck.com^$doc
! https://www.bleepingcomputer.com/news/security/fake-crowdstrike-fixes-target-companies-with-malware-data-wipers/
||portalintranetgrupobbva.com^$all
||dropbox.com/*/crowdstrike-hotfix.zip^$all

! https://blog.sucuri.net/2024/07/attackers-abuse-swap-file-to-steal-credit-cards.html
||amazon-analytic.com^$all

! https://www.fortinet.com/blog/threat-research/dark-web-shows-cybercriminals-ready-for-olympics
||eventstickets.club^$all,to=~tickets.paris2024.org
||tickets.website.com.se^$all,to=~tickets.paris2024.org
||ticketsparis24.com^$all,to=~tickets.paris2024.org
||tickets-paris24.com^$all,to=~tickets.paris2024.org
||ticket-paris24.com^$all,to=~tickets.paris2024.org

! https://www.gdatasoftware.com/blog/2024/06/37947-badspace-backdoor
! https://x.com/GroupIB_TI/status/1790230873285242992
||elamoto.com^$all
||kongtuke.com^$all
||egisela.com^$all
||uhsee.com^$all