! Title: uBlock₀ filters – Badware risks

! Last modified: Wed, 04 Nov 2026 14:15:44 +0000

! Expires: 5 days

! Description: For sites documented to put users at risk of installing adware/crapware/malware, having login credentials stolen, etc.

! The purpose is to at least ensure a user is warned of the risks ahead.

! License: https://github.com/uBlockOrigin/uAssets/blob/master/LICENSE

! Homepage: https://github.com/uBlockOrigin/uAssets

!

! GitHub issues: https://github.com/uBlockOrigin/uAssets/issues

! GitHub pull requests: https://github.com/uBlockOrigin/uAssets/pulls

!

! Each entry has to be well enough sourced, see the comments above each entry for sources

! Using request of type `document` will cause the whole site to be blocked through

! strict blocking, yet the site will render properly if a user still decides to

! go ahead.

! 2014-10-22: https://assiste.com/01Net.html

! 2013-03-25: https://www.malekal.com/pctutotuto4pc-association-avec-01net/

! 2012-10-31: https://www.journaldunet.com/solutions/dsi/des-malwares-sur-telecharger-com-01net-1012.shtml

! 2012-10-30: https://www.lesnumeriques.com/appli-logiciel/telecharger-depuis-01net-nuit-gravement-a-sante-pc-n26763.html

! 2012-06-17: https://www.malekal.com/01net-pc-optimizer-pour-ne-pas-optimiser-son-pc/

! 2012-02-17: http://neosting.net/logiciels/01net-et-softonic-ajoutent-aussi-un-installeur-publicitaire.html (Dead page)

||01net.com/telecharger/$doc

! 2015-03-11: https://blog.emsisoft.com/en/12678/mind-the-pup-top-download-portals-to-avoid/

! 2015-01-21: https://www.howtogeek.com/207692/yes-every-freeware-download-site-is-serving-crapware-heres-the-proof/

! 2015-01-11: https://www.howtogeek.com/198622/heres-what-happens-when-you-install-the-top-10-download.com-apps/

! 2012-06-27: https://insecure.org/news/download-com-fiasco.html

! 2011-12-05: https://seclists.org/nmap-announce/2011/5

! 2011-08-22: https://www.extremetech.com/computing/93504-download-com-wraps-downloads-in-bloatware-lies-about-motivations

! https://github.com/uBlockOrigin/uAssets/issues/926

! ||download.cnet.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/79

||flexytalk.net^

! https://github.com/uBlockOrigin/uAssets/issues/1547

||vlc.de^$doc

! https://github.com/uBlockOrigin/uAssets/issues/1738

||audacity.de^$doc

! https://github.com/uBlockOrigin/uAssets/issues/1853

||havenworks.com^$doc

! https://github.com/gorhill/uBlock/wiki/Badware-risks#ublockorg

! ||ublock.org^$doc

~support.ublock.org,ublock.org##main::before:style(content: 'uBlock is unrelated to the well-known uBlock Origin.' !important; font-size: 32px !important; color: red !important; font-weight: bold !important;)

support.ublock.org##div.hero-unit > div.search-box--hero-unit::before:style(content: 'uBlock is unrelated to the well-known uBlock Origin.' !important; font-size: var(--font-size-h2) !important; color: red !important; font-weight: bold !important;)

! https://github.com/uBlockOrigin/uAssets/issues/3060

! https://www.bleepingcomputer.com/news/security/fake-websites-for-keepass-7zip-audacity-others-found-pushing-adware/

! https://www.virustotal.com/#/file/a5616985e92ca7c1df3b132d2da2ef33c64f38ba2dca40445017037473d7d014/detection

! https://twitter.com/certbund/status/1127864403276091393

! https://github.com/uBlockOrigin/uAssets/issues/17880

||7zip.es^$doc

||7zip.fr^$doc

||7zip.it^$doc

||adblock.fr^$doc

||aresgalaxy.es^$doc

||audacity.es^$doc

||audacity.fr^$doc

||audacity.it^$doc

||audacity.pl^$doc

||azureus.es^$doc

||bittorrent.es^$doc

||bleachbit.com^$doc

||blender3d.es^$doc

||blender3d.fr^$doc

||bluestacksdownloads.com^$doc

||calibre.it^$doc

||celestia.es^$doc

||celestia.fr^$doc

||clonezilla.es^$doc

||clonezilla.fr^$doc

||clonezilla.it^$doc

||cyberduck.de^$doc

||cyberduck.fr^$doc

||cyberduck.it^$doc

||filezilla.es^$doc

||filezilla.fr^$doc

||filezilla.it^$doc

||filezilla.net^$doc

||filezilla.pl^$doc

||freefilesync.com^$doc

||freerapid.fr^$doc

||garagebandforpc.org^$doc

||gimp.es^$doc

||gparted.fr^$doc

||gparted.it^$doc

||greenshot.fr^$doc

||greenshot.org^$doc

||handbrake.es^$doc

||handbrake.it^$doc

||inkscape.es^$doc

||inkscape.fr^$doc

||inkscape.it^$doc

||izarc.fr^$doc

||jdownloader.fr^$doc

||keepass.com^$doc

||keepass.de^$doc

||keepass.es^$doc

||keepass.fr^$doc

||keepass.it^$doc

||keepassxc.com^$doc

||notepad2.com^$doc

||office.org^$doc

||open-office.fr^$doc

||openoffice.de^$doc

||paintnet.es^$doc

||paintnet.fr^$doc

||paintnet.it^$doc

||pdfsam.com^$doc

||peazip.com^$doc

||qbittorrent.com^$doc

||scribus.fr^$doc

||scribus.it^$doc

||senuti.org^$doc

||smplayer.org^$doc

||stellarium.es^$doc

||stellarium.fr^$doc

||truecrypt.fr^$doc

||unetbootin.net^$doc

||unetbootin.org^$doc

||utorrent.it^$doc

||virtualbox.es^$doc

! https://github.com/uBlockOrigin/uAssets/issues/3730

! https://blog.sucuri.net/2018/10/malicious-redirects-from-newsharecounts-com-tweet-counter.html

||newsharecounts.s3-us-west-2.amazonaws.com/nsc.js$script

! https://github.com/uBlockOrigin/uAssets/issues/4201#issuecomment-458340273

||hentaiplaytime.com^$doc

! foxload.com badware

||foxload.com^$doc

! aksia.co badware

! Ref: https://www.bleepingcomputer.com/news/security/phisher-announces-more-attacks-against-hedge-funds-and-financial-firms/

||aksia.co^$doc

! ReImagePlus links

! https://github.com/uBlockOrigin/uAssets/issues/5136

! Ref: https://forums.malwarebytes.com/topic/194200-removal-instructions-for-reimage-repair/

! https://windowsreport.com/extend-windows-laptop-battery-life/

windowsreport.com##.code-block

! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/

appuals.com##.appua-reimage-top

appuals.com##.info.box

! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/

pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.download_button_info_texts

pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.js-download_button_additional_links

pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.primary_download

pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.sidebar_download_inner

pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##div.attention-button-box-green

! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10

thewindowsclub.com##.entry-content > div > strong:has-text(find & fix Windows error)

! https://www.majorgeeks.com/files/details/patch_my_pc.html

majorgeeks.com##b:has(a[target^="reimage"])

||majorgeeks.com/images/icons/red_icon_18x17px.png$image

! https://www.2-spyware.com/remove-redirector-gvt1-com.html

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.attention-button-wrap:has-text(Reimage)

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box):not(.colorbg-grey)

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##th:has-text(/^Detection$/)

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##th:has-text(/^Detection$/) + td

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.js-download_button_offer

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.primary_download

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-placeholder

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.nfc-bottom-right:has-text(Reimage)

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##a:has-text(Reimage)

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text

! https://windowsloop.com/network-adapters-shortcut/

||reimageplus.com^$doc

! Lapsed domains that once hosted adblock lists, several of whom are now used for bad purposes

! https://github.com/uBlockOrigin/uAssets/issues/5307

||gjtech.net^$doc

! Badware

||kuhoot.it^$doc

! Fake cloudflare screen

! https://github.com/uBlockOrigin/uAssets/issues/5305#issuecomment-484754393

! https://github.com/uBlockOrigin/uAssets/issues/5489#issuecomment-488207423

||gmboxx.com^

! https://github.com/uBlockOrigin/uAssets/issues/5409

||discount.s3blog.org^

||s3blog.org^$3p

! https://github.com/uBlockOrigin/uAssets/issues/5442

||tplinkextender.net^

! https://github.com/uBlockOrigin/uAssets/issues/4862#issuecomment-486941006

||upload4earn.org^$doc

! https://forums.lanik.us/viewtopic.php?f=62&p=149407#p149406

||buzzadnetwork.com^$all

! https://arstechnica.com/information-technology/2019/08/google-play-app-with-100-million-downloads-executed-secret-payloads/

||abcdserver.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/6381

||embols.com^

||endingthefed.com^

||goneleft.com^

||nephef.com^

||newsbreakshere.com^

||rilenews.com^

||thecontroversialfiles.net^

||voxtribune.com^

! https://blog.sucuri.net/2018/08/massive-wordpress-redirect-campaign-targets-vulnerable-tagdiv-themes-and-ultimate-member-plugins.html

||checkisreal.com^

||mysecurify.com^

! https://www.wordfence.com/blog/2019/08/malicious-wordpress-redirect-campaign-attacking-several-plugins/

||developsincelock.com^

||gabriellalovecats.com^

||tomorrowwillbehotmaybe.com^

! redirects

||nextyourcontent.com^$all

||doctopdftech.com^$all

||searchdimension.com^$all

||beqbox.com^

||bblck.me^$all

/?track=*&key=$all

||getsecuritysuite.com^$all

! SpyHunter links

! Ref: https://blog.malwarebytes.com/detections/pup-optional-spyhunter/

! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/

howtoremove.guide##div[style^="border:2px"]

howtoremove.guide##.entry-content > div:has-text(Special Offer)

! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/ (German version only)

howtoremove.guide###solution_v2_de

howtoremove.guide###alt_content_main_div > p:has-text(SpyHunter)

howtoremove.guide###gray_de

! https://www.2-spyware.com/remove-redirector-gvt1-com.html

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description

2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##a:has-text(SpyHunter)

! https://github.com/uBlockOrigin/uAssets/pull/6757

||tncrun.net^$all

! https://github.com/uBlockOrigin/uAssets/issues/6544#issuecomment-586763083

||procdnvids.net^

! https://github.com/NanoMeow/QuickReports/issues/2577

! https://www.reddit.com/r/uBlockOrigin/comments/12nrzng/

||mybestclick.net^$3p

! https://github.com/NanoMeow/QuickReports/issues/3299

! https://github.com/NanoMeow/QuickReports/issues/3300

||smsiak.pl^$doc

||smsy24.pl^$doc

! redirecting domains / fraud

||video-adblock.com^$all

||vid-adblocker.com^$all

||multiadblock.com^$all

||streamssitesearch.com^$all

||trackertrak.com^$all

||redirekted.com^$all

||adpopblocker.com^$all

||trafficjunction.com^$all

||arclk.net^$all

||um-bredirect.com^$all

||glbltraffic.com^$all

||inspirationhistorical.com^$all

||amigosdetuciudad.com^$all

||praterage-colled.com^$all

||pwrtds.com^$all

||trackbyfast.com^$all

||trfrc.com^$all

||1ts11.top^$all

||dating.hdxvideos.ru^$all

||elevisions.biz^$all

||harzfriends.de^$all

||moviesboys.com/*.shtml$doc

||sex-is-here.com/*.shtml$doc

||sexall.net/*.shtml$doc

||urtyert.com^$all

||hsrvu.com^$all

||axdsz.pro^$all

.com/c/*?s1=$doc,to=com

.net/c/*?s1=$doc,to=net

/tds/ae?tds_campaign=$doc

||adating.link^$all

||benaughty.com^$all

||gotohouse2.cc^$all

||letmessagenow.com^$all

||apilond.com^$all

||tracklyfast.com^$all

||pupok.link^$all

||ntvpevnts.com^$all

||aditserve.com^$all

/bdv_rd.dbm?ownid=$doc

?bid=0.*&search_referrer_domain=$doc

||fecebook.com^$all

/apop/redirect/zone/*$doc,popup

/?pl=*&sm=$doc

||fortuneadvert.com^$all

||lalielynaualish.com^$all

.com/go/*?clickid=$doc

! hacked and abused for redirect

||clicks.affstrack.com^

?zoneid=*&cost=0.$doc

/zcredirect?visitid=*&iframeDetected=false|$doc

*/zcvisitor/*?campaignid$doc

||tweitter.com^$all

||mqdownload.com^$all

/pop-click?sid=*&data=$doc

/click?a=*&aff_click_id=$doc

||trwl1.com^$all

||adserver*/?sdomain=$doc,popup

/click.php?data=$doc

&adspot_id=*&cost=0.$doc

||s4f.net^$all

||cleardexchange.com^$all

||lone1y.com^$all

||tr1net.com^$all

||neighborhoodsluts.com^$all

.xyz/video.php?=*&dating_xyz_0&&0$frame

/click?pid=*&sub1=$doc

||internetspeedtracker.com^$all

||system-update-new-2021.com^$all

||download-app.net^$all

||privatesinglesmeet.com^$all

||readytosinglesmeet.com^$all

||theshoparound.com^$all

||trafempire.com^$all

||iamnaughty.com^$all

||iwantu.com^$all

||buddygays.com^$all

||localsnapsext.com^$all

.php?key=*cost=$doc,popup

||antivirus.landerhd.com^$all

/?clck=*&sid=$doc

||love7date.info^$all

||toplov.com^$all

||gegenhartz.de^$all

||marootrack.co^$all

&dci=*&tds_campaign=$doc

||revpu.sh^$all

/smartlink/?a=$doc

||date.sexpartnercommunity.com/landing/*$doc

/ll/click.php?key=$doc

/?ip=*&uclickhash=$doc

||cheaterboss.com^$all

||cumshots.com^$all

||real-women-online.com^$all

/?camp=*&cost=0.$doc

||d13nu0oomnx5ti.cloudfront.net^

||familysimulator.$all

||adblockfast.com^$all

||bookofsex.com^$all

||fuckmore.com^$all

||greengoplatform.com^$all

||onlyfreelesbianporn.com^$all

||family-simulators.com^$all

||your-dates-tonight.com^$all

||familysimulatorgame.com^$all

||trackingboost.com^$all

||update-protection.com^$all

||asiaxdate.com^$all

||hotsimulator.com^$all

/aff.php?*&data2=$doc

/tds/ae?*&clickid=$doc

/?clickid=*&ptracker=$doc

||vehicle-insurance-quote.com^$all

^lpkey=*&uclickhash=$doc

/?banner=*&phone=$doc

||advidates.com^$all

||dvjqvdfujjvvkuyvhjqdvbjcmioljbhjmijq.s3.ap-northeast-1.amazonaws.com^$all

/?clickid=*&cost=0.$doc

/index.php?key=*&t1=$doc

/click?key=*&t1=$doc

/registration?theme=*&a_aid=$doc

.top/prize/*.php?c=$doc

||adultonlineplay.com^$all

||fastandslut.com^$all

&click_price=0.*&click_id=$doc

?brand=*&model=*&lptoken=$doc

?brand=*&fingerprint_=$doc

||familialsimulation.com^$all

/\/(?:[0-9a-z]{7,25}-){9,13}[0-9a-z]{10,15}\/(?:[0-9a-z]+\/)+index\.php/$doc

||datingformeeting.com^$all

/_dating\d\/index\.html\?aref=/$doc

||familysimulators.$all

^apb=*&ata=mobilemdots^$doc

||uoutube.com^$all

! kkomj.ofchildr.buzz

||celxkpdir.com^$all

^cep=*&zoneid=$doc

^cep=*&s1=$doc

.top/robot4*&a=$doc,to=top

^s=*&ssk=*&svar=*&z=$doc

^s=*&z=*&svar=*&ssk=$doc

^svar=*&ssk=*&s=*&z=$doc

/?cid=*&dom=$doc

/?type=*&button=2&clickid=$doc

^device_model=*&p1=https$doc

.biz/sw/w1s.js|$script,3p

/click.php?key=*&cpc=0&$doc

||37.1.213.100^

/?p=*&sub1=$doc

.xyz/ddos/1tn.html?clickid=$doc

://e.*.top/video/?c=$doc

/?srv_id=*#$doc

.html?cep=*&cost=0.$doc

||23.109.87.170^

.live/1*.html?cep=$doc

||edfringe.com/*.php$all

/click.php?key=*&zone_id=$doc

/domredirect?visitid=$doc

?adTagId=*&extclickid=$doc

/antibot*/ab.php$script,xhr,1p

||elooksjustli.one^

||keepsclean.com^$all

||rcuacroossonec.com.ua^

||thbstvd.com^

/SRC/SRC.php?c=$doc

&tb=redirect&allb=redirect&ob=redirect&href=$doc

||datingmeetnet.com^$all

||clean-2-clean.club^$all

||pornonenight.com^$all

?z=*&ymid=$doc

?z=*&cnv_id=*&sourceid=*&t1=$doc

/jr.php?gz=$doc

/g?visitorid=*&extra_data2=|$doc

.com/play-2?h=*=eyJ&si1=$doc

||postyourlife.com^$all

||iwinprize.xyz^$all

||shosril.com^

||meetamate.site^

/click.php?key=*&dj_placement=$doc

&srv_id=terra#$doc

||pcconelove.xyz^$all

||video.redwap.cam^$all

||cractica.xyz^$doc

||beyourxfriend.com^$all

/jump/next.php?r=$doc

/?clickid=*&t2=$doc

||makenoads.com^$all

||family-simulators.io^$doc

||familyfornicate.com^$doc

/dating_lp?keyword=$doc

/bonus/*.php?c=$doc,to=space|top

||club-gagnant.online^$all

/common-player-arrow/index.html?var=*&zoneid=$doc

/common-player/index.html?var=*&zoneid=$doc

/not-a-robot/index.html?$doc

||amazonaws.com/www.yournewlocalflingfinder7.com/$all

||familycheaters.net^$all

||register.blissfulltimes.com^$doc

.com/pl?o=$doc

||geheimerseitensprung.com^$all

||reifenachbarn.com^$all

/zclkredirect?visitid=$doc

||naughtymets.com^$all

||linkprotecttrck.com^$all

||www3secure.com^$all

||padsthai.com^$all

||bmtracks.com^$all

||bustymeets.com^$all

||aht42trk.com^$all

/mc-test/*/index.php?cid=$doc

||attractivecutiewcx.com^$all

||newonlinedates.com^$all

/?l=*&ymid=$doc

.com/r2.php?e=$doc

/video_app/adult/*/index.html?$doc

||apphasten.com^$all

||shinqueen.com^$all

/downloadapp/*/index.html?*p1=$doc

.com/afu.php?zoneid=$doc

||himasearch.shop^$doc

||trripwire.com^$all

/dating/adult/*/index.html?$doc

/video-app-default/adult/*/index.html?*p1=$doc

||meet-flirts.com^$all

||smart-tds.com^$all

||nicking-unding.com^$all

||164.132.74.156^$all

||icetraff.com^$all

||guardlnkcaptcha.com^$all

/gambling/main/default/*/index.html?$doc

/?p=*5gi3bp*$doc,to=biz|com

||landings.namapper.com^

/click.php?key=*&price=$doc

?click_id=*&tds_cid=$doc

.com/lp*.html?zoneid=$doc

/vpn/adult/*/index.html?$doc

||dunabear.com^$all

||mialifestyle.com^$all

/utility/adult/*/index.html?$doc

/1/index.html?c=$doc

/2/index.html?c=$doc

/protectme_new1/index.html?$doc

||remor.xyz^$all

/other/btn/*/index.html?*p1=$doc

||builder.hufs.ac.kr/goLink.jsp?url=xn-$doc

/1/index.html?p1=$doc

/fb_video_googleplay/*/index.html?$doc

.sbs/c/*?s1=$doc

||lurk-online.com^$all

/click.php?key=*&type=push&$doc

.com/dating/*/index.html?lang=$doc

.info/?key=*&pixel=$doc

/?z=*&syncedCookie=true&rhd=false$doc,popup

||matcher.one^$all

||onlyhotdgirl.com^$all

||playfulmilfs.com^$all

||wooqi.win^$all

||chemiclk.com^$all

||vcnbbtrack.com^$all

||zodertracker.com^$all

||latenightlovers.com^$all

||clickrotate.net^$all

||date2night.b-cdn.net^

||ntfck.com^$all

||malenirt.site^$all

/post/FileRotator_ID*/download.php?subid=$xhr

/bonus/com-*.php?c=$doc

://click-v4.*.com/click?$doc

://xml-v4.*.online/click?$doc

.monster/?t=$doc

?a=0&u=*&tracker=$doc

.de/d8323ll?t=$doc

.top/t99b45h?t=$doc

.com/k082rwq?t=$doc

.com/t6pp7e3?t=$doc

/?utm_source=*&j1=1^$doc

/video_app/new/adult/*/index.html?$doc

/trk?s1=*&type=2&brid=$doc

/click.php?key=*&zoneid=$doc

.co.in/01/?cid=$doc

.co/?mlk=$doc

/click.php?key=*&PLACEMENT_ID=$doc

://xml-eu-v4.*.com/click?$doc

||one-new-message.com^$doc

||9ty1.com^$doc

||cdn.710k.com^$all

.com/s/*?track=$doc

||cdnservice.ink^$all

.co.in/a0x1/?cid=$doc

&ntw=adsterra_int$doc

/dc?pl=*&click_id=$doc

/click?key=*&zone=$doc

! https://precheck.dcrtb-pixel.com/dc?pl= park domain redirect

||dcrtb-pixel.com^$doc

.com/af?o=$doc

.net/?fl=m9&m=$doc

! https://github.com/uBlockOrigin/uAssets/discussions/30392

! https://www.virustotal.com/gui/url/e9eb033732965eb6b091627cee5807a9b487e98c21dc70eede1ce8a57b0b2fc9

! https://www.virustotal.com/gui/url/2d84c47a1ddc0d0ed94f0a78b3ff9ea9ee3ed681a482b8ec129fa4a73197ae8a

||vaccination.gov.ng^$doc

! https://github.com/uBlockOrigin/uAssets/issues/30246

/zclkvisitor/*^campaignid=$doc

||adalh-zcq.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/24602

! https://safeweb.norton.com/report/show?url=discordvip.createsocialcard.top

! https://safeweb.norton.com/report/show?url=discordvip.pages.dev

||discordvip.createsocialcard.top^$all

! https://www.virustotal.com/gui/url/a75fa82a901bdbb46bb9f214d99374495332a876a6d953bbe5c5d1c4217a90f8

||whatsapp-32w.pages.dev^$all

! https://www.virustotal.com/gui/url/e652bc90d72bcda74485e90218143fc41a630b979f72e1659df916e2eb08c28e

^s1=*&click_id=$doc

! https://www.virustotal.com/gui/url/16f860e9177badfbe960f2a9272d652ec0f57898763920b0e039b6292ac3053c

! https://www.virustotal.com/gui/url/16f860e9177badfbe960f2a9272d652ec0f57898763920b0e039b6292ac3053c

! https://github.com/uBlockOrigin/uAssets/issues/24731

##html[lang] > body.ishome > div.adult + main.main

^mh=*&mmid=$doc,script

! https://www.virustotal.com/gui/url/8cf51404736d06441fdd527108bfb65cf97bd4801698e4a3ff91cfc605baded9

||c0nt4ct-me.pages.dev^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/68588

! https://github.com/uBlockOrigin/uAssets/issues/8869

! https://github.com/AdguardTeam/AdguardFilters/issues/129112

/^https:\/\/[0-9a-z]{3,}\.[-a-z]{10,}\.(?:li[fv]e|top|xyz)\/[a-z]{8}\/(?:article\d{4}\.doc)?\?utm_campaign=\w{40,}/$doc,match-case,to=life|live|top|xyz

/^https:\/\/[a-z]{2,3}\d\.biz\/go\/[0-9a-z]{15,18}$/$doc,to=biz

! fake dating/prize/video sites

! https://github.com/AdguardTeam/AdguardFilters/issues/183117

/^https?:\/\/[0-9a-z]*\.?[-0-9a-z]{3,}\.[a-z]{2,11}\.?[a-z]{0,7}\/(?:[0-9a-z]{6,10}\/)?\/?(?:article\d{4}\.doc)?\?(?:cid=[0-9a-z]+&)?u=[0-9a-z]{7}(?:&t=\d+)?&o=[0-9a-z]{7}/$doc,frame,match-case

! https://github.com/uBlockOrigin/uAssets/commit/df17084b4815e87d420e8adf19bf4959e828e6e5#commitcomment-66510549

/^https?:\/\/[0-9a-z]*\.?[-0-9a-z]{3,}\.[a-z]{2,11}\.?[a-z]{0,7}\/(?:[0-9a-z]{6,10}\/)?\/?(?:article\d{4}\.doc)?\?(?:cid=[0-9a-z]+&)?o=[0-9a-z]{7}(?:&t=\d+)?&u=[0-9a-z]{7}/$doc,frame,match-case

! https://urlscan.io/result/fb21aa1b-9c79-4ac4-8e82-386403964206/

/?u1=*&o1=*&sid=t*~$doc

! push notification scam

/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?cid=[-_0-9a-zA-Z]{10,36}(?:&qs\d=\S+)?&(?:s|pub)id=[-_0-9a-z{}]{1,32}(?:&s=0\.\d+)?(?:#\S+)?$/$doc,match-case,to=club|com|info|net|org

/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?(?:pub|s)id=[-_0-9a-z{}]{1,32}(?:&qs\d=\S+)?&cid=[-_0-9a-zA-Z]{10,36}(?:&s=0\.\d+)?(?:#\S+)?$/$doc,match-case,to=club|com|info|net|org

/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?clickID=[0-9a-f]{32}&sourceID=\d+$/$doc,match-case,to=club|com|info|net|org

! https://github.com/uBlockOrigin/uAssets/issues/8378

||ogtrk.net^

! https://github.com/uBlockOrigin/uAssets/issues/8466

||91.241.60.117^$all

! https://github.com/uBlockOrigin/uAssets/issues/8630

||mfilecloud.com^$all

||xsharenode.com^$all

||basesfiles.com^$all

||mediafire.com/folder/ofa1qju50ffaz/$doc

||mediafire.com/folder/hh6g372sijmjr/$doc

||www.youtube.com/@pengwincheat/$doc

||www.youtube.com/@melonitysoft/$doc

||www.youtube.com/channel/UCS9ql1ylQmDx7o_6v15X7mw/$doc

||www.youtube.com/channel/UCEMJ0wTeQgvyyvQTil7tteQ/$doc

||www.youtube.com/channel/UCNLgP9j7dK6tvEiZC2wZp5Q/$doc

||www.youtube.com/channel/UCwmnsubfOCTN_xMhg4czo5A/$doc

||sites.google.com/view/hubgames|$doc

||sites.google.com/view/flechh|$doc

||sites.google.com/view/kostsoft|$doc

||sites.google.com/view/projectxx1|$doc

||sites.google.com/view/ex1aucnh3r1/$doc

||sites.google.com/view/exlauncher69/$doc

||sites.google.com/view/lyxnteam/$doc

||sites.google.com/view/drcheats6|$doc

||sites.google.com/view/extnllmm|$doc

||sites.google.com/view/kernelweb|$doc

||sites.google.com/view/robiccv|$doc

||sites.google.com/view/easylaunch|$doc

||gamefree.vip^$doc

||upload.advgroup.ru/mvWwiE4h$all

||games-blacksoft.com^$doc

||freefiles-upload.com^$doc

||projecthygieia.com^$all

||iridia.me^$doc

! fake software updaters /redirections

||atnpx.com^

||webpushcloud.top^

/index.php?uid=*&code=ad^$doc

||koitushinterneinnehmen.s3.eu-central-1.amazonaws.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/84638

||sinder8.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/84640

||bigosext69.com^$all

! scam

||trfcbooost.com^$all

||turboadblocker.com^$all

||youtuba.com^$all

! Typosquatting: redirects to scam sites

! https://www.reddit.com/r/uBlockOrigin/comments/12ok014/

! https://www.reddit.com/r/uBlockOrigin/comments/12nrio5/

! https://www.reddit.com/r/uBlockOrigin/comments/1392c8f/

||bestbut.com^$all

||girhub.com^$all

||linkefdin.com^

||twitterr.com^$all

||yautube.com^$all

||yourube.com^$all

||youtunbe.com^$all

||youutube.com^$all

||youvetube.com^$all

! https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/WJXUELicBQAJ

! "looks like typo squatting"

||wanderlust.rocks^$all

||messagesafe.net^$all

||msgsafe.net^$all

||best4fuck.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/26047

! https://www.huorong.cn/info/1531309921141.html

||kuaizip.com^$all

! https://www.huorong.cn/info/1618397948649.html

! ||zhuangjizhuli.com^$all

! ||zhuangjizhuli.net^$all

! https://github.com/uBlockOrigin/uAssets/pull/9656

||geekotg.com^$all

! https://www.huorong.cn/info/1526627586130.html

||xiaobaixitong.com^$all

! https://www.huorong.cn/info/1577158839403.html

||daque.cn^$all

! https://www.huorong.cn/info/1598957552515.html

||dabaicai.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/9785

||lubuntu.net^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/92466

/^https:\/\/serch\d{2}\.biz\/\?p=/$doc,to=biz

! https://github.com/uBlockOrigin/uAssets/issues/4014 and https://github.com/uBlockOrigin/uAssets/issues/9840

! ||driverfix.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/9848

! https://github.com/uBlockOrigin/uAssets/issues/24729

||rewardsgiantusa.com^$doc

||promotionsonlineusa.com^$doc

||displayoptoffers.com^$doc

||qualityhealth.com^$doc

||consumerproductsusa.com^$doc

! https://www.urbeef.de/windows-10-pro-aktivieren-ohne-key/ hacked site

||onlinepromotionsusa.com^$doc

||ecoedgeinnovations.xyz^$all

##.buttonautocl

! https://github.com/uBlockOrigin/uAssets/issues/9933

||greenadblocker.com^$doc

! https://github.com/uBlockOrigin/uAssets/pull/10017

||flash.cn^$all

! phishing /malicious

||gesas.it^$doc

||techinnsrl.com^$doc

||studiogiamberardino.it^$doc

||eniedu.com^$doc

||gamletaarnhuset.no^$doc

||possessedcrackinghart.com^$all

! phishing /scam /malware

! https://www.virustotal.com/gui/collection/4b1e307754c94e87e17a0c14102b873f17c5d2001f4afa2e58c3a6b98f391710

||dogehype.com^$all

||rblx.land^$all

! https://github.com/uBlockOrigin/uAssets/issues/10181

||rogueleader.org^$all

||suggestive.com/deals/?cid=$doc

! https://github.com/uBlockOrigin/uAssets/issues/10442

||discordap.$all

||discord*.gift^$all,domain=~discord.gift

||discord*.gifts^$all,domain=~discord.gifts

||discord-give.$all

||discord-nitro.$all

||discordgift.$all,domain=~discordgift.site

||dlscord*.$all

||dlscrod*.$all

||freediscordnitro.$all

||updatemobilee.com^$all

||allprizesforme.com^$all

! https://github.com/iam-py-test/investigations/blob/main/2021/11/25/1.md

! https://github.com/uBlockOrigin/uAssets/pull/10599

||fasterfiles.net^$all

! https://github.com/uBlockOrigin/uAssets/pull/10774

! https://bbs.kafan.cn/thread-2222478-1-1.html

||a1475.com^$all

! https://bbs.kafan.cn/thread-2220230-1-1.html

||ts-group.com^$all

! https://bbs.kafan.cn/thread-2221500-1-1.html

||88btbtt.com^$all

! https://github.com/uBlockOrigin/uAssets/pull/10997

! fake domain

||jinshanduba.org.cn^$all

! https://bbs.kafan.cn/thread-2170747-1-1.html – malicious script

||phpstat.cntcm.com.cn/phpstat/count/abceffgh/abceffgh.js^$script

! https://github.com/uBlockOrigin/uAssets/pull/11041

||cdn.discordapp.com/attachments/916391647955279943/*^$all

! https://github.com/uBlockOrigin/uAssets/issues/11157

||sideload.net^$doc

||stc.tools^$doc

||stcverify.com^$doc

||1980s.click^$doc

! https://github.com/uBlockOrigin/uAssets/issues/11310

! https://github.com/uBlockOrigin/uAssets/issues/14009

! https://github.com/uBlockOrigin/uAssets/issues/24842

ziperto.com,installcracks.com,maliksofts.com,crackpropc.com,ayeshapc.com,trycracksoftware.com,organiccrack.com,procrackkey.co,up4pc.com,crackdownload.org,corecrack.com,shanpc.com,torrentfilefree.com,patchcracks.com,newproductkey.com,osproductkey.com,serialkeysfree.org,autocracking.com,greencracks.com,profullversion.com,crackswall.com,rootcracks.org,idmcrackeys.com,crackedhere.com,licensekeysfree.org,assadpc.com,thecrackbox.com,crackproductkey.com,keystool.com,crackedpcs.com,cracksmad.com,licensekeyup.com,chcracked.com,finalcracked.com,activatorpros.com,crackedmod.com,cracksoon.com,boxcracked.com,crackedsoftpc.com,proapkcrack.com,softscracked.com,freeappstorepc.com,usecracked.com,crackedversion.com,aryancrack.com,fultech.org,cracksray.com,pcwarezbox.com,cracksmat.com,startcrack.co,crackbros.com,pcfullversion.com,bypassapp.com,fileserial.com,pc4download.com,freeprocrack.org,upcrack.org,topkeygen.com,crackproduct.com,downloadpirate.com,combpc.pro##center > [class*="buttonPress-"]

lewdgames.to,warezcrack.net,freeprosoftz.com,scracked.com,cyberspc.com,crackintopc.com,crackshere.com,crackdj.com,cracktopc.com,serialsofts.com,zscracked.com,topkeygen.com,procrackerz.com,pcfullcrack.org,downloadcracker.com,piratesfile.com,activatorwin.com,crackproduct.com,crackcan.com,crackit.org,seeratpc.com,activators4windows.com,letcracks.com,latestcracked.com,fullversionforever.com,vlsoft.net,topcracked.com,goharpc.com,freecrackdownload.com,assadpc.com,crackpcsoft.net,excrack.com,mahcrack.com,get4pcs.com,mycrackfree.com,cracksdat.com,licensekeysfree.com,freecrack4u.com,getintomac.net,crackreview.com,activatorskey.com,kuyhaa.cc,cracksmat.com,crackbros.com,pcfullversion.com,game-repack.site,dodi-repacks.download,getpcsofts.net,keystool.com,rootcracks.org,newproductkey.com,greencracks.com,macfiles.org,softzspot.com,hdlicense.org,spaxmedia.net,licensedkey.co,crackedmac.com,getprocrack.net,patchcracks.com,installcracks.com,softwarance.com,hitproversion.com,cracktube.net,abbaspc.net,keygenstore.com,pcfull.net,sjcrack.com,nkcrack.com,filepuma.org,pcsoftsfull.org,licenselink.info##div[class^="code-block code-block-"]

crackkits.com,procrackerz.com,haxmac.cc,cracka2zsoft.com,crackpropc.com,onhax.in,haxpc.net,pcfullcrack.org,karancrack.com##.getox

productkeyfree.org,productkeyforfree.com,wazusoft.com,piratesfile.com,kalicrack.com,sadeempc.com,letcracks.com,topkeygen.com,thepiratecity.co,torrentmac.net,ryuugames.com,pesktop.com,profullversion.com,crackswall.com,proappcrack.com,thecrackbox.com,autocracking.com,zgamespc.com,serialkeysfree.org,torrentfilefree.com,crack11.com,gvnvh.net,pccrackbox.com,pcwarezbox.net,4howcrack.com,softserialkey.com,productkeys.org,crackedsoft.org,licensekeyup.com,activationkey.org,serialkeypatch.org,freeappstorepc.com,crackpro.org##center > a[target="_blank"][rel="nofollow noreferrer noopener"]

cracksoftwaress.net##div[style="float: none; margin:10px 0 10px 0; text-align:center;"]

haxnode.net##[id^="haxno-"]

romsdl.net##a[rel="nofollow noreferrer noopener"][target="_blank"]

zuketcreation.net##.cente-1

onhax.in,igetintopc.info##[class*="buttonPress-"]

kalicrack.com##center > .button-container:has(> #directDownload)

cracka2zsoft.com,ayeshapc.com,trycracksoftware.com,trycracksetup.com,9to5crack.com,crackmak.com,yasir-252.net##center > a

cracksmid.com##div[style=""] > center > center

||xforce-cracks.com^$doc

||fileisready.com^$doc

||sustac.com^$all

||hostt.link^$doc

||ncracked.com^$doc

||fullsetup.pro^$doc

||akashopc.info^$doc

||techblogs.cc^$doc

||up-community.wiki^$doc

||serialsoft.org^$doc

||getprocrack.net^$doc

||crackdo.online^$doc

! https://www.virustotal.com/gui/url/306f66e86e6036d8c7b3d0c6ab8af27385505c969af4f998f75ffe1eae2c19be

.click/track/*?title=*&key=$doc,to=click

! https://github.com/uBlockOrigin/uAssets/issues/27275

||crackingpatching.com^$doc

||patchedfiles.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/15793

! https://github.com/blocklistproject/Lists/issues/933

||filexstorage.site^$all

||worshippers.store^$all

||readyf1.click^$all

||filefindme.xyz^$all

||host9.link^$all

||modesoft.org^$all

||newgitgerto.xyz^$all

.click/?s=*&g=*&q=files.zip$doc

.click/*?s=*&g=*&q=$script,3p

.click/?h=*&user=$script,3p

.click/?user=*&h=$script,3p

.click/*/?partner=*&pg=$script,3p

.xyz/*?s=*&g=*&q=$script,3p

.xyz/?h=*&user=45$script,3p

.xyz/*/?partner=*&pg=$script,3p

.cfd/*?s=*&g=*&q=$script,3p

.cfd/?h=*&user=$script,3p

.cfd/?aD*HlwZT1jJnRtcD01JmFkY29kZT0x$script,3p

.cfd/*?p=*&pg=$script,3p

.one/?h=*&user=$script,3p

.info/?h=*&user=$script,3p

.online/?h=*&user=$script,3p

.pro/?h=*&user=$script,3p

.site/?h=*&user=$script,3p

.store/?h=*&user=$script,3p

.shop/?h=*&user=$script,3p

.icu/?h=*&user=$script,3p

.net/?h=*&user=$script,3p

%3C?php%20echo%20substr(md5(microtime()),0,rand(10,30));?%3E&$doc

/?*&gkss=$doc,to=cfd|click|pro|world|xyz

^click_id=*&s1=$doc

.com/casino?registration=1&cid=$doc

! https://github.com/uBlockOrigin/uBlock-discussions/discussions/790#discussioncomment-10332718

||cfd/file?ajk=$doc,popup

||cfd/mnllcontent-$popup

! https://github.com/uBlockOrigin/uAssets/issues/11394

||theannoyingsite.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/34397

||ptoszek.pl^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/109902

/vpnupdate/*/index.html?*p1=$doc

! https://github.com/uBlockOrigin/uAssets/issues/5605#issuecomment-1060013521

||smartklick.biz^$all

/bouncy.php?*&inPopUp=$all

! https://github.com/AdguardTeam/AdguardFilters/issues/115960

! https://www.virustotal.com/gui/url/6a4daf9dfa58864522ae7972ab042cf4bab17a48321b96d1952bd384210adcd2

! https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fonpharmvermen.com%2F

||sale24-pills.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/13177

! https://github.com/uBlockOrigin/uAssets/issues/13734

||fullcrack.vn^$all

! https://twitter.com/rarara18181818/status/1530214731608313856

/rtbfeed.php?$image,3p

! https://twitter.com/NaomiSuzuki_/status/1536553207299985408 fake chrome

!#if !env_mobile

/^http:\/\/[a-z]{5}\.[a-z]{5}\.com\/[a-z]{10}\.apk$/$doc,match-case,to=com

!#endif

! https://github.com/uBlockOrigin/uAssets/issues/14034

||fetishpartner.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/125147

||facevideosc.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/126480

/?c=propeller&lpid=$all

! https://github.com/uBlockOrigin/uAssets/issues/14588

||geoflix.me^$all

! https://github.com/uBlockOrigin/uAssets/pull/14985

||skymods.net^$all

! torrdroidforpc. com

||tinyurl.com/setup-full-version$doc

! https://youtu.be/RfE_MreLSIM?t=183

||haxsoft.com^$all

! https://twitter.com/harugasumi/status/1591652561182150656

||nbsfmradio.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/15777

||ngazi.co.tz^$all

||video-watch1.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/15937

! https://www.virustotal.com/gui/url/a70d88ffc974f8d9cc5c3561938e95435d20a12a555e8c10d638d2bee5292165

! https://github.com/uBlockOrigin/uAssets/issues/27036

||neptunclicks.com^

||imgfil.com^$all

||urlcod.com^$all

||tiurll.com^$all

||urlca.com^$all

||psfmi.com^$all

||mciun.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/136693

/axad/?lpkey=$doc

! https://twitter.com/tougei_miryoku/status/1602878676508344320

&t=main9|$doc,to=live

&t=main9ljs|$doc,to=live

&t=main9expsess|$doc,to=live

&t=mono|$doc,to=info

! Fake Steam website

! https://github.com/uBlockOrigin/uAssets/pull/16143

||99box.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/16153

||watchadsfree.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/16209

||barlear.ru^$all

! Phishing gathered from Twitter

! https://twitter.com/AP_Zenmashi/status/1614845455271333890

||3utilities.com^$all

! https://twitter.com/defenceability/status/1621446555726385153

||bafybeidzp4sgidm4rvsc32fofkhbz5bdotbekov4mnwzejakvnzhhohysa.ipfs.dweb.link^$all

! https://twitter.com/gorimpthon/status/1622092572188631041

.top/index-install.html|$doc

! https://twitter.com/defenceability/status/1622513282644054016

||r39-g003-h8ig0w-u8f0we8-fgw0rgf-0we880e-rhgth.obs.ap-southeast-2.myhuaweicloud.com^$all

! https://twitter.com/defenceability/status/1622801056379064321

||bafybeiexjty7qmufu5jvbyln5ce5mue2lqw2htafc3api4wwsefxet5k54.ipfs.dweb.link^$all

! https://twitter.com/defenceability/status/1623182946806169600

||chargerlogistics-dot-exceldocsverification.uk.r.appspot.com^$all

! https://twitter.com/defenceability/status/1623546261126402058

||bizerba-dot-azure-projectfiles.uk.r.appspot.com^$all

! https://twitter.com/KesaGataMe0/status/1628158467625349122

||italianlottery.com^$all

! https://twitter.com/harugasumi/status/1633133887047217152

||007itshop.com^$all

! https://twitter.com/ozuma5119/status/1635414656646008833

||e-tax-nta.web.app^$all

! https://twitter.com/ozuma5119/status/1638194144781930496

||blisterlngdate.com^$all

||fapello.xyz^$all

! https://twitter.com/masaomi346/status/1649260359763775488

||bavaria-cup.ru^$all

! https://twitter.com/pingineer_jp/status/1646373106557267968

||honda-law-office.jp/wp-includes/70038/Earthcorejp/|$doc

! https://twitter.com/satontonton/status/1659183900059652098

||itsaol.com^$all

! https://twitter.com/harugasumi/status/1666013629853097984

||qhigh.com^$all

! https://twitter.com/AP_Zenmashi/status/1674082742013755393

||almostmy.com^$all

! https://twitter.com/masaomi346/status/1716272554464473099

||erdfkhxrnanm.top^$all

! https://x.com/JCyberSec_/status/1809231223220236596

! https://www.reddit.com/r/Scams/comments/1grcp9l/text_message_evri_scam/

||ev.ri-*gb.com^$doc,to=~evri.com

! https://x.com/itmedia_news/status/1810495098876215790

||sapjp.com^$doc

! https://x.com/harugasumi/status/1817602306189464046

||toythieves.com^$all

! https://x.com/masaomi346/status/1819876303333700006

||rigidconcrete.ca^$all

! https://x.com/harugasumi/status/1820496420136419512

||sportslevels.com^$all

! https://x.com/harugasumi/status/1838519663145468074

||ec2-13-230-253-66.ap-northeast-1.compute.amazonaws.com^$all

! https://x.com/masaomi346/status/1874257707567636729

! https://x.com/harugasumi/status/1874798942346760297

||lcskincarecenter.com^$all

! https://x.com/KesaGataMe0/status/1956230525649346583

://account.booking.xn--$doc

! https://x.com/masaomi346/status/1959944395609760240

||pichk.myqcloud.com^$doc

! https://x.com/KesaGataMe0/status/1971389627438440575

||jsdajp.click^$all

! https://x.com/masaomi346/status/1981339807889658367

||riseecore.site^$all

! https://x.com/harugasumi/status/1988610400875897157

||hcstore.vip^$all

! https://x.com/masaomi346/status/1990184039429599501

||arzaeterna.com^$all

! https://x.com/Kdroidwin1/status/2016836856693084413