badware.txt

! Title: uBlock₀ filters – Badware risks
! Last modified: Tue, 05 May 2026 09:04:52 +0000
! Expires: 5 days
! Description: For sites documented to put users at risk of installing adware/crapware/malware, having login credentials stolen, etc.
! The purpose is to at least ensure a user is warned of the risks ahead.
! License: https://github.com/uBlockOrigin/uAssets/blob/master/LICENSE
! Homepage: https://github.com/uBlockOrigin/uAssets
!
! GitHub issues: https://github.com/uBlockOrigin/uAssets/issues
! GitHub pull requests: https://github.com/uBlockOrigin/uAssets/pulls
!
! Each entry has to be well enough sourced, see the comments above each entry for sources

! Using request of type `document` will cause the whole site to be blocked through
! strict blocking, yet the site will render properly if a user still decides to
! go ahead.

! 2014-10-22: https://assiste.com/01Net.html
! 2013-03-25: https://www.malekal.com/pctutotuto4pc-association-avec-01net/
! 2012-10-31: https://www.journaldunet.com/solutions/dsi/des-malwares-sur-telecharger-com-01net-1012.shtml
! 2012-10-30: https://www.lesnumeriques.com/appli-logiciel/telecharger-depuis-01net-nuit-gravement-a-sante-pc-n26763.html
! 2012-06-17: https://www.malekal.com/01net-pc-optimizer-pour-ne-pas-optimiser-son-pc/
! 2012-02-17: http://neosting.net/logiciels/01net-et-softonic-ajoutent-aussi-un-installeur-publicitaire.html (Dead page)
||01net.com/telecharger/$doc

! 2015-03-11: https://blog.emsisoft.com/en/12678/mind-the-pup-top-download-portals-to-avoid/
! 2015-01-21: https://www.howtogeek.com/207692/yes-every-freeware-download-site-is-serving-crapware-heres-the-proof/
! 2015-01-11: https://www.howtogeek.com/198622/heres-what-happens-when-you-install-the-top-10-download.com-apps/
! 2012-06-27: https://insecure.org/news/download-com-fiasco.html
! 2011-12-05: https://seclists.org/nmap-announce/2011/5
! 2011-08-22: https://www.extremetech.com/computing/93504-download-com-wraps-downloads-in-bloatware-lies-about-motivations
! https://github.com/uBlockOrigin/uAssets/issues/926
! ||download.cnet.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/79
||flexytalk.net^

! https://github.com/uBlockOrigin/uAssets/issues/1547
||vlc.de^$doc

! https://github.com/uBlockOrigin/uAssets/issues/1738
||audacity.de^$doc

! https://github.com/uBlockOrigin/uAssets/issues/1853
||havenworks.com^$doc

! https://github.com/gorhill/uBlock/wiki/Badware-risks#ublockorg
! ||ublock.org^$doc
~support.ublock.org,ublock.org##main::before:style(content: 'uBlock is unrelated to the well-known uBlock Origin.' !important; font-size: 32px !important; color: red !important; font-weight: bold !important;)
support.ublock.org##div.hero-unit > div.search-box--hero-unit::before:style(content: 'uBlock is unrelated to the well-known uBlock Origin.' !important; font-size: var(--font-size-h2) !important; color: red !important; font-weight: bold !important;)

! https://github.com/uBlockOrigin/uAssets/issues/3060
! https://www.bleepingcomputer.com/news/security/fake-websites-for-keepass-7zip-audacity-others-found-pushing-adware/
! https://www.virustotal.com/#/file/a5616985e92ca7c1df3b132d2da2ef33c64f38ba2dca40445017037473d7d014/detection
! https://twitter.com/certbund/status/1127864403276091393
! https://github.com/uBlockOrigin/uAssets/issues/17880
||7zip.es^$doc
||7zip.fr^$doc
||7zip.it^$doc
||adblock.fr^$doc
||aresgalaxy.es^$doc
||audacity.es^$doc
||audacity.fr^$doc
||audacity.it^$doc
||audacity.pl^$doc
||azureus.es^$doc
||bittorrent.es^$doc
||bleachbit.com^$doc
||blender3d.es^$doc
||blender3d.fr^$doc
||bluestacksdownloads.com^$doc
||calibre.it^$doc
||celestia.es^$doc
||celestia.fr^$doc
||clonezilla.es^$doc
||clonezilla.fr^$doc
||clonezilla.it^$doc
||cyberduck.de^$doc
||cyberduck.fr^$doc
||cyberduck.it^$doc
||filezilla.es^$doc
||filezilla.fr^$doc
||filezilla.it^$doc
||filezilla.net^$doc
||filezilla.pl^$doc
||freefilesync.com^$doc
||freerapid.fr^$doc
||garagebandforpc.org^$doc
||gimp.es^$doc
||gparted.fr^$doc
||gparted.it^$doc
||greenshot.fr^$doc
||greenshot.org^$doc
||handbrake.es^$doc
||handbrake.it^$doc
||inkscape.es^$doc
||inkscape.fr^$doc
||inkscape.it^$doc
||izarc.fr^$doc
||jdownloader.fr^$doc
||keepass.com^$doc
||keepass.de^$doc
||keepass.es^$doc
||keepass.fr^$doc
||keepass.it^$doc
||keepassxc.com^$doc
||notepad2.com^$doc
||office.org^$doc
||open-office.fr^$doc
||openoffice.de^$doc
||paintnet.es^$doc
||paintnet.fr^$doc
||paintnet.it^$doc
||pdfsam.com^$doc
||peazip.com^$doc
||qbittorrent.com^$doc
||scribus.fr^$doc
||scribus.it^$doc
||senuti.org^$doc
||smplayer.org^$doc
||stellarium.es^$doc
||stellarium.fr^$doc
||truecrypt.fr^$doc
||unetbootin.net^$doc
||unetbootin.org^$doc
||utorrent.it^$doc
||virtualbox.es^$doc
||virtualbox.pl^$doc

! https://github.com/uBlockOrigin/uAssets/issues/3730
! https://blog.sucuri.net/2018/10/malicious-redirects-from-newsharecounts-com-tweet-counter.html
||newsharecounts.s3-us-west-2.amazonaws.com/nsc.js$script

! https://github.com/uBlockOrigin/uAssets/issues/4201#issuecomment-458340273
||hentaiplaytime.com^$doc

! foxload.com badware
||foxload.com^$doc

! aksia.co badware
! Ref: https://www.bleepingcomputer.com/news/security/phisher-announces-more-attacks-against-hedge-funds-and-financial-firms/
||aksia.co^$doc

! ReImagePlus links
! https://github.com/uBlockOrigin/uAssets/issues/5136
! Ref: https://forums.malwarebytes.com/topic/194200-removal-instructions-for-reimage-repair/
! https://windowsreport.com/extend-windows-laptop-battery-life/
windowsreport.com##.code-block
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
appuals.com##.appua-reimage-top
appuals.com##.info.box
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.download_button_info_texts
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.js-download_button_additional_links
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.primary_download
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##.sidebar_download_inner
pcseguro.es,sauguspc.lt,sichernpc.de,ugetfix.com,wyleczpc.pl##div.attention-button-box-green
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
thewindowsclub.com##.entry-content > div > strong:has-text(find & fix Windows error)
! https://www.majorgeeks.com/files/details/patch_my_pc.html
majorgeeks.com##b:has(a[target^="reimage"])
||majorgeeks.com/images/icons/red_icon_18x17px.png$image
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.attention-button-wrap:has-text(Reimage)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box):not(.colorbg-grey)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##th:has-text(/^Detection$/)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##th:has-text(/^Detection$/) + td
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.js-download_button_offer
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.primary_download
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-placeholder
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.nfc-bottom-right:has-text(Reimage)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##a:has-text(Reimage)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text
! https://windowsloop.com/network-adapters-shortcut/
||reimageplus.com^$doc

! Lapsed domains that once hosted adblock lists, several of whom are now used for bad purposes
! https://github.com/uBlockOrigin/uAssets/issues/5307
||gjtech.net^$doc

! Badware
||kuhoot.it^$doc

! Fake cloudflare screen
! https://github.com/uBlockOrigin/uAssets/issues/5305#issuecomment-484754393
! https://github.com/uBlockOrigin/uAssets/issues/5489#issuecomment-488207423
||gmboxx.com^
||mr.media-bucket.com^

! https://github.com/NanoMeow/QuickReports/issues/965#issuecomment-485274387
||pl.allsports4u.club^

! https://github.com/uBlockOrigin/uAssets/issues/5409
||discount.s3blog.org^
||s3blog.org^$3p

! https://github.com/uBlockOrigin/uAssets/issues/5442
||tplinkextender.net^

! https://github.com/uBlockOrigin/uAssets/issues/4862#issuecomment-486941006
||upload4earn.org^$doc

! https://forums.lanik.us/viewtopic.php?f=62&p=149407#p149406
||buzzadnetwork.com^$all

! https://arstechnica.com/information-technology/2019/08/google-play-app-with-100-million-downloads-executed-secret-payloads/
||abcdserver.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/6381
||embols.com^
||endingthefed.com^
||goneleft.com^
||nephef.com^
||newsbreakshere.com^
||rilenews.com^
||thecontroversialfiles.net^
||voxtribune.com^

! https://blog.sucuri.net/2018/08/massive-wordpress-redirect-campaign-targets-vulnerable-tagdiv-themes-and-ultimate-member-plugins.html
||checkisreal.com^
||mysecurify.com^

! https://www.wordfence.com/blog/2019/08/malicious-wordpress-redirect-campaign-attacking-several-plugins/
||developsincelock.com^
||gabriellalovecats.com^
||jackielovedogs.com^
||tomorrowwillbehotmaybe.com^

! redirects
||nextyourcontent.com^$all
||doctopdftech.com^$all
||searchdimension.com^$all
||beqbox.com^
||bblck.me^$all
/?track=*&key=$all
||getsecuritysuite.com^$all

! SpyHunter links
! Ref: https://blog.malwarebytes.com/detections/pup-optional-spyhunter/
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
howtoremove.guide##div[style^="border:2px"]
howtoremove.guide##.entry-content > div:has-text(Special Offer)
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/ (German version only)
howtoremove.guide###solution_v2_de
howtoremove.guide###alt_content_main_div > p:has-text(SpyHunter)
howtoremove.guide###gray_de
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##a:has-text(SpyHunter)

! https://github.com/uBlockOrigin/uAssets/pull/6757
||tncrun.net^$all

! https://github.com/uBlockOrigin/uAssets/issues/6544#issuecomment-586763083
||procdnvids.net^

! https://github.com/NanoMeow/QuickReports/issues/2577
! https://www.reddit.com/r/uBlockOrigin/comments/12nrzng/
||mybestclick.net^$3p

! https://github.com/NanoMeow/QuickReports/issues/3299
! https://github.com/NanoMeow/QuickReports/issues/3300
||smsiak.pl^$doc
||smsy24.pl^$doc

! redirecting domains / fraud
||video-adblock.com^$all
||vid-adblocker.com^$all
||multiadblock.com^$all
||traffic-go.com^$all
||streamssitesearch.com^$all
||trackertrak.com^$all
||bingstyle.com^$all
||redirekted.com^$all
||adpopblocker.com^$all
||trafficjunction.com^$all
||arclk.net^$all
||um-bredirect.com^$all
||glbltraffic.com^$all
||inspirationhistorical.com^$all
||maroohost.online^$all
||amigosdetuciudad.com^$all
||praterage-colled.com^$all
||pwrtds.com^$all
||trackbyfast.com^$all
||trfrc.com^$all
||1ts11.top^$all
||dating.hdxvideos.ru^$all
||elevisions.biz^$all
||harzfriends.de^$all
||moviesboys.com/*.shtml$doc
||sex-is-here.com/*.shtml$doc
||sexall.net/*.shtml$doc
||urtyert.com^$all
||hsrvu.com^$all
||axdsz.pro^$all
||datingapp.live^$all
.com/c/*?s1=$doc,to=com
.net/c/*?s1=$doc,to=net
/tds/ae?tds_campaign=$doc
||adating.link^$all
||benaughty.com^$all
||ckre.net^$all
||gotohouse2.cc^$all
||letmessagenow.com^$all
||apilond.com^$all
||tracklyfast.com^$all
||pupok.link^$all
||ntvpevnts.com^$all
||aditserve.com^$all
/bdv_rd.dbm?ownid=$doc
?bid=0.*&search_referrer_domain=$doc
||fecebook.com^$all
/apop/redirect/zone/*$doc,popup
/?pl=*&sm=$doc
||fortuneadvert.com^$all
||lalielynaualish.com^$all
||casino-ice.fun^$all
.com/go/*?clickid=$doc

! hacked and abused for redirect
||clicks.affstrack.com^
?zoneid=*&cost=0.$doc
/zcredirect?visitid=*&iframeDetected=false|$doc
*/zcvisitor/*?campaignid$doc
||tweitter.com^$all
||mqdownload.com^$all
/pop-click?sid=*&data=$doc
/click?a=*&aff_click_id=$doc
||trwl1.com^$all
||adserver*/?sdomain=$doc,popup
/click.php?data=$doc
&adspot_id=*&cost=0.$doc
||s4f.net^$all
||cleardexchange.com^$all
||lone1y.com^$all
||tr1net.com^$all
||neighborhoodsluts.com^$all
.xyz/video.php?=*&dating_xyz_0&&0$frame
/click?pid=*&sub1=$doc
||internetspeedtracker.com^$all
||system-update-new-2021.com^$all
||download-app.net^$all
||privatesinglesmeet.com^$all
||readytosinglesmeet.com^$all
||theshoparound.com^$all
||trafempire.com^$all
||iamnaughty.com^$all
||iwantu.com^$all
||buddygays.com^$all
||localsnapsext.com^$all
.php?key=*cost=$doc,popup
||antivirus.landerhd.com^$all
/?clck=*&sid=$doc
||love7date.info^$all
||toplov.com^$all
||gegenhartz.de^$all
||marootrack.co^$all
&dci=*&tds_campaign=$doc
||revpu.sh^$all
/smartlink/?a=$doc
||date.sexpartnercommunity.com/landing/*$doc
/ll/click.php?key=$doc
/?ip=*&uclickhash=$doc
||cheaterboss.com^$all
||cumshots.com^$all
||real-women-online.com^$all
/?camp=*&cost=0.$doc
||monglitch.monster^$all
||d13nu0oomnx5ti.cloudfront.net^
||familysimulator.$all
||adblockfast.com^$all
||bookofsex.com^$all
||fuckmore.com^$all
||greengoplatform.com^$all
||onlyfreelesbianporn.com^$all
||family-simulators.com^$all
||your-dates-tonight.com^$all
||familysimulatorgame.com^$all
||trackingboost.com^$all
||update-protection.com^$all
||asiaxdate.com^$all
||hotsimulator.com^$all
/aff.php?*&data2=$doc
/tds/ae?*&clickid=$doc
/?clickid=*&ptracker=$doc
||vehicle-insurance-quote.com^$all
^lpkey=*&uclickhash=$doc
/?banner=*&phone=$doc
||advidates.com^$all
||dvjqvdfujjvvkuyvhjqdvbjcmioljbhjmijq.s3.ap-northeast-1.amazonaws.com^$all
/?clickid=*&cost=0.$doc
/index.php?key=*&t1=$doc
/click?key=*&t1=$doc
||cmprotraf.club^$all
/registration?theme=*&a_aid=$doc
.top/prize/*.php?c=$doc
||adultonlineplay.com^$all
||fastandslut.com^$all
&click_price=0.*&click_id=$doc
?brand=*&model=*&lptoken=$doc
?brand=*&fingerprint_=$doc
||familialsimulation.com^$all
/\/(?:[0-9a-z]{7,25}-){9,13}[0-9a-z]{10,15}\/(?:[0-9a-z]+\/)+index\.php/$doc
||datingformeeting.com^$all
/_dating\d\/index\.html\?aref=/$doc
||familysimulators.$all
^apb=*&ata=mobilemdots^$doc
||uoutube.com^$all
! kkomj.ofchildr.buzz
||celxkpdir.com^$all
^cep=*&zoneid=$doc
^cep=*&s1=$doc
.top/robot4*&a=$doc,to=top
^s=*&ssk=*&svar=*&z=$doc
^s=*&z=*&svar=*&ssk=$doc
^svar=*&ssk=*&s=*&z=$doc
/?cid=*&dom=$doc
/?type=*&button=2&clickid=$doc
^device_model=*&p1=https$doc
.biz/sw/w1s.js|$script,3p
/click.php?key=*&cpc=0&$doc
||37.1.213.100^
/?p=*&sub1=$doc
.xyz/ddos/1tn.html?clickid=$doc
://e.*.top/video/?c=$doc
/?srv_id=*#$doc
.html?cep=*&cost=0.$doc
||23.109.87.170^
.live/1*.html?cep=$doc
||edfringe.com/*.php$all
/click.php?key=*&zone_id=$doc
/domredirect?visitid=$doc
||smart-redirecting.com^
?adTagId=*&extclickid=$doc
/antibot*/ab.php$script,xhr,1p
||elooksjustli.one^
||keepsclean.com^$all
||magictrack1.com^
||rcuacroossonec.com.ua^
||thbstvd.com^
/SRC/SRC.php?c=$doc
&tb=redirect&allb=redirect&ob=redirect&href=$doc
||datingmeetnet.com^$all
||bndl-trp.com^$all
||clean-2-clean.club^$all
||top-official-app.com^$all
||pornonenight.com^$all
?z=*&ymid=$doc
?z=*&cnv_id=*&sourceid=*&t1=$doc
||besluor.com^
/jr.php?gz=$doc
/g?visitorid=*&extra_data2=|$doc
.com/play-2?h=*=eyJ&si1=$doc
/\.com\/proc\.php\?[0-9a-f]{40}$/$doc
||postyourlife.com^$all
||rplnd60.com^$all
||iwinprize.xyz^$all
||shosril.com^
||meetamate.site^
||dm09.biz^$all
/click.php?key=*&dj_placement=$doc
&srv_id=terra#$doc
||pcconelove.xyz^$all
||video.redwap.cam^$all
||cractica.xyz^$doc
||beyourxfriend.com^$all
||bybygnom.com^$all
||paderrer.com^$all
/jump/next.php?r=$doc
/?clickid=*&t2=$doc
||makenoads.com^$all
||family-simulators.io^$doc
||familyfornicate.com^$doc
||speedtestnow.site^$all
/dating_lp?keyword=$doc
/bonus/*.php?c=$doc,to=space|top
||club-gagnant.online^$all
/common-player-arrow/index.html?var=*&zoneid=$doc
/common-player/index.html?var=*&zoneid=$doc
/not-a-robot/index.html?$doc
||amazonaws.com/www.yournewlocalflingfinder7.com/$all
||familycheaters.net^$all
||register.blissfulltimes.com^$doc
.com/pl?o=$doc
||geheimerseitensprung.com^$all
||matches4you.info^$all
||reifenachbarn.com^$all
/zclkredirect?visitid=$doc
||naughtymets.com^$all
||linkprotecttrck.com^$all
||www3secure.com^$all
||midnighthookup.today^$all
||padsthai.com^$all
||bmtracks.com^$all
||bustymeets.com^$all
||aht42trk.com^$all
/mc-test/*/index.php?cid=$doc
||attractivecutiewcx.com^$all
||newonlinedates.com^$all
/?l=*&ymid=$doc
.com/r2.php?e=$doc
/video_app/adult/*/index.html?$doc
||apphasten.com^$all
||shinqueen.com^$all
/downloadapp/*/index.html?*p1=$doc
.com/afu.php?zoneid=$doc
||altairaquilae.com^$doc
||himasearch.shop^$doc
||trripwire.com^$all
/dating/adult/*/index.html?$doc
/video-app-default/adult/*/index.html?*p1=$doc
||meet-flirts.com^$all
||mltrck.com^$all
||trckams.com^$all
||pecuniatrck.com^$all
||smart-tds.com^$all
||nicking-unding.com^$all
||164.132.74.156^$all
||icetraff.com^$all
||guardlnkcaptcha.com^$all
/gambling/main/default/*/index.html?$doc
/?p=*5gi3bp*$doc,to=biz|com
||landings.namapper.com^
||imp2.com^$all
/click.php?key=*&price=$doc
?click_id=*&tds_cid=$doc
.com/lp*.html?zoneid=$doc
/vpn/adult/*/index.html?$doc
||dunabear.com^$all
||mialifestyle.com^$all
/utility/adult/*/index.html?$doc
/1/index.html?c=$doc
/2/index.html?c=$doc
/protectme_new1/index.html?$doc
||remor.xyz^$all
||github.io/health-records-x-ray$doc
||adultminglenight.click^$all
||derriks.site^$all
||datenaughtysingles.click^$all
||flirtyconnection.click^$all
/other/btn/*/index.html?*p1=$doc
||builder.hufs.ac.kr/goLink.jsp?url=xn-$doc
/1/index.html?p1=$doc
/fb_video_googleplay/*/index.html?$doc
.sbs/c/*?s1=$doc
||lurk-online.com^$all
/click.php?key=*&type=push&$doc
.com/dating/*/index.html?lang=$doc
.info/?key=*&pixel=$doc
/?z=*&syncedCookie=true&rhd=false$doc,popup
||matcher.one^$all
||onlyhotdgirl.com^$all
||playfulmilfs.com^$all
||wooqi.win^$all
||chemiclk.com^$all
||vcnbbtrack.com^$all
||zodertracker.com^$all
||latenightlovers.com^$all
||clickrotate.net^$all
||date2night.b-cdn.net^
||ntfck.com^$all
||malenirt.site^$all
/post/FileRotator_ID*/download.php?subid=$xhr
/bonus/com-*.php?c=$doc
||dekarise.site^$all
://click-v4.*.com/click?$doc
://xml-v4.*.online/click?$doc
.monster/?t=$doc
?a=0&u=*&tracker=$doc
.de/d8323ll?t=$doc
.top/t99b45h?t=$doc
.com/k082rwq?t=$doc
.com/t6pp7e3?t=$doc
||derriar.site^$all
||smartgethub.com^$all
/?utm_source=*&j1=1^$doc
/video_app/new/adult/*/index.html?$doc
/trk?s1=*&type=2&brid=$doc
||pin673.cyou^$all
||alwix.com^$all
||alwix.site^$all
||pixoff.one^$all
||wild-match-network.com^$all
||meetandlovenow.com^$all
||meetfindlove.com^$all
/click.php?key=*&zoneid=$doc
.co.in/01/?cid=$doc
.co/?mlk=$doc
/click.php?key=*&PLACEMENT_ID=$doc
://xml-eu-v4.*.com/click?$doc
||one-new-message.com^$doc
||healthbeviva.com^$doc
||9ty1.com^$doc
||cdn.ourru.com^
||cdn.710k.com^$all
.com/s/*?track=$doc
||cdnservice.ink^$all
.co.in/a0x1/?cid=$doc
&ntw=adsterra_int$doc
/dc?pl=*&click_id=$doc
! https://precheck.dcrtb-pixel.com/dc?pl= park domain redirect
||dcrtb-pixel.com^$doc

! https://github.com/uBlockOrigin/uAssets/discussions/30392
! https://www.virustotal.com/gui/url/e9eb033732965eb6b091627cee5807a9b487e98c21dc70eede1ce8a57b0b2fc9
! https://www.virustotal.com/gui/url/2d84c47a1ddc0d0ed94f0a78b3ff9ea9ee3ed681a482b8ec129fa4a73197ae8a
||vaccination.gov.ng^$doc
||thebook.digital^$all
||pdf-up.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30246
/zclkvisitor/*^campaignid=$doc
||nachhilfeteam.net^$all
||adalh-zcq.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/24602
! https://safeweb.norton.com/report/show?url=discordvip.createsocialcard.top
! https://safeweb.norton.com/report/show?url=discordvip.pages.dev
||discordvip.createsocialcard.top^$all
! https://www.virustotal.com/gui/url/a75fa82a901bdbb46bb9f214d99374495332a876a6d953bbe5c5d1c4217a90f8
||whatsapp-32w.pages.dev^$all
! https://www.virustotal.com/gui/url/e652bc90d72bcda74485e90218143fc41a630b979f72e1659df916e2eb08c28e
^s1=*&click_id=$doc
! https://www.virustotal.com/gui/url/16f860e9177badfbe960f2a9272d652ec0f57898763920b0e039b6292ac3053c
! https://www.virustotal.com/gui/url/16f860e9177badfbe960f2a9272d652ec0f57898763920b0e039b6292ac3053c
! https://github.com/uBlockOrigin/uAssets/issues/24731
##html[lang] > body.ishome > div.adult + main.main
^mh=*&mmid=$doc,script
! https://www.virustotal.com/gui/url/8cf51404736d06441fdd527108bfb65cf97bd4801698e4a3ff91cfc605baded9
||c0nt4ct-me.pages.dev^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/68588
! https://github.com/uBlockOrigin/uAssets/issues/8869
! https://github.com/AdguardTeam/AdguardFilters/issues/129112
/^https:\/\/[0-9a-z]{3,}\.[-a-z]{10,}\.(?:li[fv]e|top|xyz)\/[a-z]{8}\/(?:article\d{4}\.doc)?\?utm_campaign=\w{40,}/$doc,match-case,to=life|live|top|xyz
/^https:\/\/[a-z]{2,3}\d\.biz\/go\/[0-9a-z]{15,18}$/$doc,to=biz
! fake dating/prize/video sites
! https://github.com/AdguardTeam/AdguardFilters/issues/183117
/^https?:\/\/[0-9a-z]*\.?[-0-9a-z]{3,}\.[a-z]{2,11}\.?[a-z]{0,7}\/(?:[0-9a-z]{6,10}\/)?\/?(?:article\d{4}\.doc)?\?(?:cid=[0-9a-z]+&)?u=[0-9a-z]{7}(?:&t=\d+)?&o=[0-9a-z]{7}/$doc,frame,match-case
! https://github.com/uBlockOrigin/uAssets/commit/df17084b4815e87d420e8adf19bf4959e828e6e5#commitcomment-66510549
/^https?:\/\/[0-9a-z]*\.?[-0-9a-z]{3,}\.[a-z]{2,11}\.?[a-z]{0,7}\/(?:[0-9a-z]{6,10}\/)?\/?(?:article\d{4}\.doc)?\?(?:cid=[0-9a-z]+&)?o=[0-9a-z]{7}(?:&t=\d+)?&u=[0-9a-z]{7}/$doc,frame,match-case
.live/web/?sid=t*~$doc
! https://urlscan.io/result/fb21aa1b-9c79-4ac4-8e82-386403964206/
/?u1=*&o1=*&sid=t*~$doc
! push notification scam
/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?cid=[-_0-9a-zA-Z]{10,36}(?:&qs\d=\S+)?&(?:s|pub)id=[-_0-9a-z{}]{1,32}(?:&s=0\.\d+)?(?:#\S+)?$/$doc,match-case,to=club|com|info|net|org
/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?(?:pub|s)id=[-_0-9a-z{}]{1,32}(?:&qs\d=\S+)?&cid=[-_0-9a-zA-Z]{10,36}(?:&s=0\.\d+)?(?:#\S+)?$/$doc,match-case,to=club|com|info|net|org
/^https:\/\/(?:www\d\.)?[-a-z]{6,}\.(?:club|com|info|net|org)\/(?=[-_a-zA-Z]{0,42}\d)(?=[-_0-9a-z]{0,42}[A-Z])[-_0-9a-zA-Z]{43}\/\?clickID=[0-9a-f]{32}&sourceID=\d+$/$doc,match-case,to=club|com|info|net|org

! https://github.com/uBlockOrigin/uAssets/issues/8378
||ogtrk.net^

! https://github.com/uBlockOrigin/uAssets/issues/8466
||91.241.60.117^$all

! https://github.com/uBlockOrigin/uAssets/issues/8630
||mfilecloud.com^$all
||xsharenode.com^$all
||basesfiles.com^$all
||mediafire.com/folder/ofa1qju50ffaz/$doc
||mediafire.com/folder/hh6g372sijmjr/$doc
||www.youtube.com/@pengwincheat/$doc
||www.youtube.com/@melonitysoft/$doc
||www.youtube.com/channel/UCS9ql1ylQmDx7o_6v15X7mw/$doc
||www.youtube.com/channel/UCEMJ0wTeQgvyyvQTil7tteQ/$doc
||www.youtube.com/channel/UCNLgP9j7dK6tvEiZC2wZp5Q/$doc
||www.youtube.com/channel/UCwmnsubfOCTN_xMhg4czo5A/$doc
||sites.google.com/view/hubgames|$doc
||sites.google.com/view/flechh|$doc
||sites.google.com/view/kostsoft|$doc
||sites.google.com/view/projectxx1|$doc
||sites.google.com/view/ex1aucnh3r1/$doc
||sites.google.com/view/exlauncher69/$doc
||sites.google.com/view/lyxnteam/$doc
||sites.google.com/view/drcheats6|$doc
||sites.google.com/view/extnllmm|$doc
||sites.google.com/view/kernelweb|$doc
||sites.google.com/view/robiccv|$doc
||sites.google.com/view/easylaunch|$doc
||gamefree.vip^$doc
||upload.advgroup.ru/mvWwiE4h$all
||games-blacksoft.com^$doc
||freefiles-upload.com^$doc
||projecthygieia.com^$all
||fusionhacks.cc^$doc
||mysoft.rest^$all
||iridia.me^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/69036
.systems/signup?ad_domain=$doc,popup

! fake software updaters /redirections
||atnpx.com^
||webpushcloud.top^
||workerz1.com^
/index.php?uid=*&code=ad^$doc
||koitushinterneinnehmen.s3.eu-central-1.amazonaws.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/84638
||sinder8.com^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/84640
||bigosext69.com^$all

! scam
||trfcbooost.com^$all
||turboadblocker.com^$all
||youtuba.com^$all

! Typosquatting: redirects to scam sites
! https://www.reddit.com/r/uBlockOrigin/comments/12ok014/
! https://www.reddit.com/r/uBlockOrigin/comments/12nrio5/
! https://www.reddit.com/r/uBlockOrigin/comments/1392c8f/
||bestbut.com^$all
||girhub.com^$all
||gmkail.com^$all
||linkefdin.com^
||twitterr.com^$all
||yautube.com^$all
||yourube.com^$all
||youtunbe.com^$all
||youutube.com^$all
||youvetube.com^$all
! https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/WJXUELicBQAJ
! "looks like typo squatting"
||wanderlust.rocks^$all
||messagesafe.net^$all
||msgsafe.net^$all
||best4fuck.com^$all
||bamboairways.com.vn^$all,to=~bambooairways.com
! https://github.com/uBlockOrigin/uAssets/issues/26047

! https://www.huorong.cn/info/1531309921141.html
||kuaizip.com^$all

! https://www.huorong.cn/info/1618397948649.html
! ||zhuangjizhuli.com^$all
! ||zhuangjizhuli.net^$all

! https://github.com/uBlockOrigin/uAssets/pull/9656
||geekotg.com^$all
! https://www.huorong.cn/info/1526627586130.html
||xiaobaixitong.com^$all
! https://www.huorong.cn/info/1577158839403.html
||daque.cn^$all
! https://www.huorong.cn/info/1598957552515.html
||dabaicai.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/9785
||lubuntu.net^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/92466
/^https:\/\/serch\d{2}\.biz\/\?p=/$doc,to=biz

! https://github.com/uBlockOrigin/uAssets/issues/4014 and https://github.com/uBlockOrigin/uAssets/issues/9840
! ||driverfix.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/9848
! https://github.com/uBlockOrigin/uAssets/issues/24729
||gghacks.com^$all
||rewardsgiantusa.com^$doc
||promotionsonlineusa.com^$doc
||displayoptoffers.com^$doc
||qualityhealth.com^$doc
||consumerproductsusa.com^$doc
! https://www.urbeef.de/windows-10-pro-aktivieren-ohne-key/ hacked site
||onlinepromotionsusa.com^$doc
||qsshc.xyz^$all
||ecoedgeinnovations.xyz^$all
##.buttonautocl

! https://github.com/uBlockOrigin/uAssets/issues/9933
||greenadblocker.com^$doc

! https://github.com/uBlockOrigin/uAssets/pull/10017
||flash.cn^$all

! phishing /malicious
||gesas.it^$doc
||techinnsrl.com^$doc
||studiogiamberardino.it^$doc
||eniedu.com^$doc
||gamletaarnhuset.no^$doc
||possessedcrackinghart.com^$all

! phishing /scam /malware
! https://www.virustotal.com/gui/collection/4b1e307754c94e87e17a0c14102b873f17c5d2001f4afa2e58c3a6b98f391710
||dogehype.com^$all
||rblx.land^$all

! https://github.com/uBlockOrigin/uAssets/issues/10181
||rogueleader.org^$all
||suggestive.com/deals/?cid=$doc

! https://github.com/uBlockOrigin/uAssets/issues/10442
||discordap.$all
||discord*.gift^$all,domain=~discord.gift
||discord*.gifts^$all,domain=~discord.gifts
||discord-give.$all
||discord-nitro.$all
||discordgift.$all,domain=~discordgift.site
||dlscord*.$all
||dlscrod*.$all
||freediscordnitro.$all
||updatemobilee.com^$all
||allprizesforme.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/10536
||tw-goldenwinner-57.com^$doc

! https://github.com/iam-py-test/investigations/blob/main/2021/11/25/1.md
! https://github.com/uBlockOrigin/uAssets/pull/10599
||fasterfiles.net^$all

! https://github.com/uBlockOrigin/uAssets/pull/10774
! https://bbs.kafan.cn/thread-2222478-1-1.html
||a1475.com^$all
! https://bbs.kafan.cn/thread-2220230-1-1.html
||ts-group.com^$all
! https://bbs.kafan.cn/thread-2221500-1-1.html
||88btbtt.com^$all

! https://github.com/uBlockOrigin/uAssets/pull/10997
! fake domain
||jinshanduba.org.cn^$all
! https://bbs.kafan.cn/thread-2170747-1-1.html – malicious script
||phpstat.cntcm.com.cn/phpstat/count/abceffgh/abceffgh.js^$script

! https://github.com/uBlockOrigin/uAssets/pull/11041
||cdn.discordapp.com/attachments/916391647955279943/*^$all

! https://github.com/uBlockOrigin/uAssets/issues/11157
||sideload.net^$doc
||stc.tools^$doc
||stcverify.com^$doc
||1980s.click^$doc

! https://github.com/uBlockOrigin/uAssets/issues/11310
! https://github.com/uBlockOrigin/uAssets/issues/14009
! https://github.com/uBlockOrigin/uAssets/issues/24842
installcracks.com,maliksofts.com,crackpropc.com,ayeshapc.com,trycracksoftware.com,organiccrack.com,procrackkey.co,up4pc.com,crackdownload.org,corecrack.com,shanpc.com,torrentfilefree.com,patchcracks.com,newproductkey.com,osproductkey.com,serialkeysfree.org,autocracking.com,greencracks.com,profullversion.com,crackswall.com,rootcracks.org,idmcrackeys.com,crackedhere.com,licensekeysfree.org,assadpc.com,thecrackbox.com,crackproductkey.com,keystool.com,crackedpcs.com,cracksmad.com,licensekeyup.com,chcracked.com,finalcracked.com,activatorpros.com,crackedmod.com,cracksoon.com,boxcracked.com,crackedsoftpc.com,proapkcrack.com,softscracked.com,freeappstorepc.com,usecracked.com,crackedversion.com,aryancrack.com,fultech.org,cracksray.com,pcwarezbox.com,cracksmat.com,startcrack.co,crackbros.com,pcfullversion.com,bypassapp.com,fileserial.com,pc4download.com,freeprocrack.org,upcrack.org,topkeygen.com,crackproduct.com,downloadpirate.com,combpc.pro##center > [class*="buttonPress-"]
lewdgames.to,warezcrack.net,freeprosoftz.com,scracked.com,cyberspc.com,crackintopc.com,crackshere.com,crackdj.com,cracktopc.com,serialsofts.com,zscracked.com,topkeygen.com,procrackerz.com,pcfullcrack.org,downloadcracker.com,piratesfile.com,activatorwin.com,crackproduct.com,crackcan.com,crackit.org,seeratpc.com,activators4windows.com,letcracks.com,latestcracked.com,fullversionforever.com,vlsoft.net,topcracked.com,goharpc.com,freecrackdownload.com,assadpc.com,crackpcsoft.net,excrack.com,mahcrack.com,get4pcs.com,mycrackfree.com,cracksdat.com,licensekeysfree.com,freecrack4u.com,getintomac.net,crackreview.com,activatorskey.com,kuyhaa.cc,cracksmat.com,crackbros.com,pcfullversion.com,game-repack.site,dodi-repacks.download,getpcsofts.net,keystool.com,rootcracks.org,newproductkey.com,greencracks.com,macfiles.org,softzspot.com,hdlicense.org,spaxmedia.net,licensedkey.co,crackedmac.com,getprocrack.net,patchcracks.com,installcracks.com,softwarance.com,hitproversion.com,cracktube.net,abbaspc.net,keygenstore.com,pcfull.net,sjcrack.com,nkcrack.com,filepuma.org,pcsoftsfull.org,licenselink.info##div[class^="code-block code-block-"]
crackkits.com,procrackerz.com,haxmac.cc,cracka2zsoft.com,crackpropc.com,onhax.in,haxpc.net,pcfullcrack.org,karancrack.com##.getox
productkeyfree.org,productkeyforfree.com,wazusoft.com,piratesfile.com,kalicrack.com,sadeempc.com,letcracks.com,topkeygen.com,thepiratecity.co,torrentmac.net,ryuugames.com,pesktop.com,profullversion.com,crackswall.com,proappcrack.com,thecrackbox.com,autocracking.com,zgamespc.com,serialkeysfree.org,torrentfilefree.com,crack11.com,gvnvh.net,pccrackbox.com,pcwarezbox.net,4howcrack.com,softserialkey.com,productkeys.org,crackedsoft.org,licensekeyup.com,activationkey.org,serialkeypatch.org,freeappstorepc.com,crackpro.org##center > a[target="_blank"][rel="nofollow noreferrer noopener"]
cracksoftwaress.net##div[style="float: none; margin:10px 0 10px 0; text-align:center;"]
haxnode.net##[id^="haxno-"]
romsdl.net##a[rel="nofollow noreferrer noopener"][target="_blank"]
zuketcreation.net##.cente-1
onhax.in,igetintopc.info##[class*="buttonPress-"]
kalicrack.com##center > .button-container:has(> #directDownload)
cracka2zsoft.com,ayeshapc.com,trycracksoftware.com,trycracksetup.com,9to5crack.com,crackmak.com,yasir-252.net##center > a
cracksmid.com##div[style=""] > center > center
||xforce-cracks.com^$doc
||fileisready.com^$doc
||sustac.com^$all
||hostt.link^$doc
||ncracked.com^$doc
||dr-community.online^$doc
||fullsetup.click^$doc
||fullsetup.pro^$doc
||akashopc.info^$doc
||nsofthub.info^$doc
||techblogs.cc^$doc
||up-community.wiki^$doc
||kaleempc.info^$doc
||serialsoft.org^$doc
||getprocrack.net^$doc
||crackdo.online^$doc
||upcommunity.click^$doc
||tech-softwares.com^$doc
! https://www.virustotal.com/gui/url/306f66e86e6036d8c7b3d0c6ab8af27385505c969af4f998f75ffe1eae2c19be
.click/track/*?title=*&key=$doc,to=click
! https://github.com/uBlockOrigin/uAssets/issues/27275
||crackingpatching.com^$doc
||patchedfiles.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/15793
! https://github.com/blocklistproject/Lists/issues/933
||filexstorage.site^$all
||worshippers.store^$all
||deliberatelyot.space^$all
||ozycode.cfd^$all
||readyf1.click^$all
||gotmylink.xyz^$all
||clickmydown.xyz^$all
||filefindme.xyz^$all
||host3.live^$all
||host9.link^$all
||sonvupload.xyz^$all
||stupdownloadf.com^$all
||hostingfile.live^$all
||modesoft.org^$all
||mysoftiloria.shop^$all
||yeahmylol.sbs^$all
||tostatess.icu^$all
||anysoftdownload.com^$all
||softdownloadgithub.icu^$all
||newgitgerto.xyz^$all
||mariads.cfd^
||gitfrominstall.com^$all
||instagitkbs.sbs^$all
.click/?s=*&g=*&q=files.zip$doc
.click/*?s=*&g=*&q=$script,3p
.click/?h=*&user=$script,3p
.click/?user=*&h=$script,3p
.click/*/?partner=*&pg=$script,3p
.xyz/*?s=*&g=*&q=$script,3p
.xyz/?h=*&user=45$script,3p
.xyz/*/?partner=*&pg=$script,3p
.cfd/*?s=*&g=*&q=$script,3p
.cfd/?h=*&user=$script,3p
.cfd/?aD*HlwZT1jJnRtcD01JmFkY29kZT0x$script,3p
.cfd/*?p=*&pg=$script,3p
.one/?h=*&user=$script,3p
.info/?h=*&user=$script,3p
.online/?h=*&user=$script,3p
.pro/?h=*&user=$script,3p
.site/?h=*&user=$script,3p
.store/?h=*&user=$script,3p
.shop/?h=*&user=$script,3p
.icu/?h=*&user=$script,3p
%3C?php%20echo%20substr(md5(microtime()),0,rand(10,30));?%3E&$doc
/?*&gkss=$doc,to=cfd|click|pro|world|xyz
^click_id=*&s1=$doc
.com/casino?registration=1&cid=$doc
! https://github.com/uBlockOrigin/uBlock-discussions/discussions/790#discussioncomment-10332718
||cfd/file?ajk=$doc,popup
||cfd/mnllcontent-$popup

! https://github.com/uBlockOrigin/uAssets/issues/11394
||theannoyingsite.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/109902
/vpnupdate/*/index.html?*p1=$doc

! https://github.com/uBlockOrigin/uAssets/issues/5605#issuecomment-1060013521
||smartklick.biz^$all

/bouncy.php?*&inPopUp=$all

! https://github.com/AdguardTeam/AdguardFilters/issues/115960
! https://www.virustotal.com/gui/url/6a4daf9dfa58864522ae7972ab042cf4bab17a48321b96d1952bd384210adcd2
! https://transparencyreport.google.com/safe-browsing/search?url=https:%2F%2Fonpharmvermen.com%2F
||sale24-pills.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/13177
! https://github.com/uBlockOrigin/uAssets/issues/13734
||fullcrack.vn^$all

! https://twitter.com/rarara18181818/status/1530214731608313856
/rtbfeed.php?$image,3p

! https://twitter.com/NaomiSuzuki_/status/1536553207299985408 fake chrome
!#if !env_mobile
/^http:\/\/[a-z]{5}\.[a-z]{5}\.com\/[a-z]{10}\.apk$/$doc,match-case,to=com
!#endif

! https://github.com/uBlockOrigin/uAssets/issues/14034
||fetishpartner.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/125147
||facevideosc.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/126480
/?c=propeller&lpid=$all

! https://github.com/uBlockOrigin/uAssets/issues/14588
||geoflix.me^$all

! https://github.com/uBlockOrigin/uAssets/pull/14985
||skymods.net^$all

! torrdroidforpc. com 
||tinyurl.com/setup-full-version$doc

! https://youtu.be/RfE_MreLSIM?t=183
||haxsoft.com^$all

! https://twitter.com/harugasumi/status/1591652561182150656
||nbsfmradio.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/15777
||ngazi.co.tz^$all
||video-watch1.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/15937
! https://www.virustotal.com/gui/url/a70d88ffc974f8d9cc5c3561938e95435d20a12a555e8c10d638d2bee5292165
! https://github.com/uBlockOrigin/uAssets/issues/27036
||neptunclicks.com^
||imgfil.com^$all
||urlcod.com^$all
||tiurll.com^$all
||urlca.com^$all
||psfmi.com^$all
||mciun.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/136693
/axad/?lpkey=$doc

! https://twitter.com/tougei_miryoku/status/1602878676508344320
&t=main9|$doc,to=live
&t=main9ljs|$doc,to=live
&t=main9expsess|$doc,to=live
&t=mono|$doc,to=info

! https://github.com/uBlockOrigin/uAssets/pull/16038
||hypixei.com^$all

! Fake Steam website
! https://github.com/uBlockOrigin/uAssets/pull/16143
||99box.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/16153
||watchadsfree.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/16209
||barlear.ru^$all

! Phishing gathered from Twitter
! https://twitter.com/AP_Zenmashi/status/1614845455271333890
||3utilities.com^$all
! https://twitter.com/defenceability/status/1621446555726385153
||bafybeidzp4sgidm4rvsc32fofkhbz5bdotbekov4mnwzejakvnzhhohysa.ipfs.dweb.link^$all
! https://twitter.com/gorimpthon/status/1622092572188631041
.top/index-install.html|$doc
! https://twitter.com/defenceability/status/1622513282644054016
||r39-g003-h8ig0w-u8f0we8-fgw0rgf-0we880e-rhgth.obs.ap-southeast-2.myhuaweicloud.com^$all
! https://twitter.com/defenceability/status/1622801056379064321
||bafybeiexjty7qmufu5jvbyln5ce5mue2lqw2htafc3api4wwsefxet5k54.ipfs.dweb.link^$all
! https://twitter.com/defenceability/status/1623182946806169600
||chargerlogistics-dot-exceldocsverification.uk.r.appspot.com^$all
! https://twitter.com/defenceability/status/1623546261126402058
||bizerba-dot-azure-projectfiles.uk.r.appspot.com^$all
! https://twitter.com/KesaGataMe0/status/1628158467625349122
||italianlottery.com^$all
! https://twitter.com/harugasumi/status/1633133887047217152
||007itshop.com^$all
! https://twitter.com/ozuma5119/status/1635414656646008833
||e-tax-nta.web.app^$all
! https://twitter.com/ozuma5119/status/1638194144781930496
||blisterlngdate.com^$all
||fapello.xyz^$all
! https://twitter.com/masaomi346/status/1649260359763775488
||bavaria-cup.ru^$all
! https://twitter.com/pingineer_jp/status/1646373106557267968
||honda-law-office.jp/wp-includes/70038/Earthcorejp/|$doc
! https://twitter.com/satontonton/status/1659183900059652098
||itsaol.com^$all
! https://twitter.com/harugasumi/status/1666013629853097984
||qhigh.com^$all
! https://twitter.com/AP_Zenmashi/status/1674082742013755393
||almostmy.com^$all
! https://twitter.com/masaomi346/status/1716272554464473099
||erdfkhxrnanm.top^$all
! https://x.com/JCyberSec_/status/1809231223220236596
! https://www.reddit.com/r/Scams/comments/1grcp9l/text_message_evri_scam/
||ev.ri-*gb.com^$doc,to=~evri.com
! https://x.com/itmedia_news/status/1810495098876215790
||sapjp.com^$doc
! https://x.com/harugasumi/status/1817602306189464046
||toythieves.com^$all
! https://x.com/masaomi346/status/1819876303333700006
||rigidconcrete.ca^$all
! https://x.com/harugasumi/status/1820496420136419512
||sportslevels.com^$all
! https://x.com/harugasumi/status/1830434631294054482
||cqjykj.com^$all
||btemgb.com^$all
! https://x.com/harugasumi/status/1838519663145468074
||ec2-13-230-253-66.ap-northeast-1.compute.amazonaws.com^$all
! https://x.com/masaomi346/status/1874257707567636729
! https://x.com/harugasumi/status/1874798942346760297
||lcskincarecenter.com^$all
! https://x.com/harugasumi/status/1921004076243853818
||trustwallct.cc^$all
! https://x.com/harugasumi/status/1942617559880384742
||modii.xyz^$doc
! https://x.com/masaomi346/status/1954486421697536199
||promotkc.cc^$doc
||amazonaws.com/tk/wl/tk_2025*.apk$doc
! https://x.com/masaomi346/status/1954572030004830232
||app.kamlno.network^$doc
! https://x.com/masaomi346/status/1955105251012513917
||macclear.com^$doc
! https://x.com/KesaGataMe0/status/1956230525649346583
://account.booking.xn--$doc
! https://x.com/masaomi346/status/1959944395609760240
||pichk.myqcloud.com^$doc
! https://x.com/KesaGataMe0/status/1970745260138791254
||gooqlee.com^$all
! https://x.com/KesaGataMe0/status/1971389627438440575
||jsdajp.click^$all
||jsda-check.com^$all
! https://x.com/masaomi346/status/1971571629907189766
||yyqxjp.vip^$all
! https://x.com/masaomi346/status/1973769336650342431
||appvip-download.cc^$all
! https://x.com/masaomi346/status/1981339807889658367
||riseecore.site^$all
! https://x.com/harugasumi/status/1988610400875897157
||hcstore.vip^$all
! https://x.com/masaomi346/status/1990184039429599501
||arzaeterna.com^$all
! https://x.com/masaomi346/status/2005631436217630938
||lixbngx.top^$all
! https://x.com/KesaGataMe0/status/2016770059306488258
||ublcz.cn^$all
! https://x.com/Kdroidwin1/status/2016836856693084413
||ads.twitter.center^$all
! https://x.com/kantei/status/2018989364068704490
||divibase.xyz^$all
! https://x.com/KesaGataMe0/status/2024300912332984486
||kensatsu.top^$all
! https://x.com/_jade_kk/status/2042066546588315966
||lincolnforestlakeproject.com^$all

! scam sites
||webuzz.me^$doc
||coup-ling.net^$all
||gokinjolove.jp^$all
||gokinjolove.net^$all
||hornygirlsinapp.com^$all
||10un.jp^$doc
||3tuhabe.info^$doc
||5dgja.com^$doc
||8senjya.jp^$doc
||ad7mylo.com^$doc
||after-pop-abc.com^$doc
||aiai-talk.com^$doc
||aiaitalk.com^$doc
||alicekdsod.com^$doc
||best-chat.net^$doc
||bestxchat.net^$doc
||car-na.jp^$doc
||cbcdnkyyxubdsrmg.com^$doc
||ch3l.net^$doc
||chl3.net^$doc
||date-app.net^$doc
||days-neighborhood.com^$doc
||di-ana.jp^$doc
||dosukoudo.net^$doc
||drct-match.com^$doc
||drct-match.net^$doc
||dydynight.org^$doc
||en-mu-su-bi.com^$doc
||fapp.work^$doc
||formatch.co.jp^$doc
||fortune-fate.jp^$doc
||fortune-koun.jp^$doc
||fortune-luna.com^$doc
||friendxroom.com^$doc
||g6-gonight.org^$doc
||gabfbnaqodnvfafnj.com^$doc
||girls.a-makeup.com^$doc
||goldenluck.jp^$doc
||happy468.net^$doc
||hi-a-so-bi.net^$doc
||himatalk77.net^$doc
||home4ugoog10you.com^$doc
||hope-for-shiningday.com^$doc
||hori-hori.xyz^$doc
||hp-dy.net^$doc
||hphp-dy.net^$doc
||i.redi-ana.jp^$doc
||i2019.jp^$doc
||irie3.net^$doc
||ivy2241u.jp^$doc
||jamjamjam.biz^$doc
||k-colorful.jp^$doc
||k1wa.jp^$doc
||kaiun-com.com^$doc
||koiroom.net^$doc
||koiroomnotice.net^$doc
||koun-yogen.com^$doc
||l0vekatsu.com^$doc
||lightn5.com^$doc
||lin-link.net^$doc
||link-service.net^$doc
||linkage-linkage.com^$doc
||love-fit.jp^$doc
||love-letter-dm.com^$doc
||love-letter.info^$doc
||loveaholics.com^$doc
||lovemelo.jp^$doc
||luuce.jp^$doc
||machi-match.info^$doc
||madnna.jp^$doc
||madnna.net^$doc
||mangogo.jp^$doc
||mangogo.work^$doc
||match-mate.jp^$doc
||match-mate.net^$doc
||matimati.site^$doc
||maytail.jp^$doc
||meguri-eye.net^$doc
||meguri-y.net^$doc
||moody-night.net^$doc
||my7love.xyz^$doc
||navi-match.net^$doc
||near-s.com^$doc
||on-glamour.xyz^$doc
||one-chan-love.love^$doc
||onega.jp^$doc
||onegaga.jp^$doc
||otonanona.jp^$doc
||otonatime.net^$doc
||oyasu-mi.tokyo^$doc
||piasukai.xyz^$doc
||plati-num.com^$doc
||pr0m.site^$doc
||privatelife.jp^$doc
||r30address.com^$doc
||r30deai.com^$doc
||reverita-t.jp^$doc
||ripiai.com^$doc
||romancetime.jp^$doc
||romancetrain.jp^$doc
||royalclass-dm.com^$doc
||royalclass.info^$doc
||s4fk.destin0.jp^$doc
||salon1999.net^$doc
||salonoshirase.net^$doc
||shells.pairapple.net^$doc
||sns-pair.net^$doc
||space-high.com^$doc
||spirilp3000.com^$doc
||spirituallounge-3000.com^$doc
||sugarboxxx.net^$doc
||sugulove.com^$doc
||sweetmemo.net^$doc
||sweetmemoryy.com^$doc
||t1a.jp^$doc
||tadaapo123.com^$doc
||tadaapomail.com^$doc
||tadamatch.com^$doc
||tumalabo.net^$doc
||u3ig.com^$doc
||vanilla-japan.net^$doc
||verita-t.jp^$doc
||jivo-ce.jp^$doc
||2226wurpatw.tokyo^$doc
||asiansgetnaughty.com^$doc
||blackstunners.com^$doc
||budhump.com^$doc
||eternal.mobius-loop.net^$doc
||fukuinnnokotoba.com^$doc
||humpbuds.com^$doc
||localsgowild.com^$doc
||naughtyfever.com^$doc
||tenseikaiun.com^$doc
||secure-57v.pages.dev^$all
||slb3cr9dx9.jp^$doc
||sukui05.com^$doc
||chocochipu-o.com^$doc
||facebooc.jp^$doc
||gtir5die6sutngr.jpn.com^$doc
||happiness-gate.com^$doc
||iikanjiyanakanjide.wixsite.com^$doc
||makoto-in-room.wixsite.com^$doc
||moira-101.com^$doc
||nitr5eur6fjhtsw.jpn.com^$doc
||okai.work^$doc
||pdss3a1r.jp^$doc
||pfunding-01.com^$doc
||toki-no-irodori.com^$doc
||tomodachixoxo.wixsite.com^$doc
||ukokjxfbdqwffmuvsd.jp^$doc
||vf5rkgirsir8ska.jpn.com^$doc
||vitop7eg5sqwgbk.jpn.com^$doc
||vixii.co^$doc
||wishhoree1890.com^$doc
||xs5rur1she7eyry.jpn.com^$doc
||57zyazmk.jp^$doc
||a.tlineat.jp^$doc
||be-loaded.com^$doc
||doorway-of-guidance.com^$doc
||ed-blissful.com^$doc
||eika-akie220202.com^$doc
||ev-upstart.com^$doc
||for-tg.com^$doc
||for20-coco.com^$doc
||fortune-mooon.com^$doc
||ft-flower.com^$doc
||fukugyou2022.net^$doc
||fukunoha211013.com^$doc
||fukura210317.com^$doc
||future-marvellous.com^$doc
||gogonews.club^$doc
||heart-uranai.com^$doc
||iflirts.com^$doc
||im-excellent.com^$doc
||kaaairoo549kai.com^$doc
||karinaroom.wixsite.com^$doc
||l-chat.jp^$doc
||login-chat.net^$doc
||mintiia.com^$doc
||mio-love2.wixsite.com^$doc
||moon-1light.com^$doc
||moon1234moom.com^$doc
||mystery-forest.com^$doc
||oficialinesp.wixsite.com^$doc
||one-sunnyday.com^$doc
||p-chi.info^$doc
||pairpure.jp^$doc
||pairpure.jp.net^$doc
||poke10ve.com^$doc
||relifemail555.com^$doc
||s-kiseki.jp^$doc
||sebumu28.com^$doc
||sevensmooon.com^$doc
||tada10ve.jp^$doc
||tada1ove.com^$doc
||take.the.n-chapter.jp^$doc
||ultratime.info^$doc
||v-yummy.com^$doc
||vroom24.com^$doc
||vroom24365.com^$doc
||wmw.matchin.jp^$doc
||world.ex-advantage.jp^$doc
||xxa.uji8979erd77.jp^$doc
||y-tradie.com^$doc
||best-web2020.com^$doc
||female-good.work^$doc
||foundate-core.net^$doc
||li-neeee.net^$doc
||make2022.com^$doc
||sbfw.work^$doc
||xxxmake.com^$doc
||1litteno.home-walil1.jp^$doc
||1st-mail.jp^$doc
||777.funnyy.net^$doc
||ai-ne.net^$doc
||ai-tas.com^$doc
||ai3tu.com^$doc
||alch.treas.jp^$doc
||amaenbo.jp^$doc
||amourplace.jp^$doc
||ancient-guidance.jp^$doc
||atchm.net^$doc
||bontruth.com^$doc
||cosdate.jp^$doc
||daisukimatch.jp^$doc
||defendeerrpro.jp^$doc
||diamond-line.net^$doc
||dinosaur-crown.com^$doc
||dreamatch.jp^$doc
||edge-campaign-japan.com^$doc
||equation-of-happiness.com^$doc
||eromatchi.jp^$doc
||fanta-stic.net^$doc
||flirt.com^$doc
||gyakusimei.com^$doc
||h-spe.net^$doc
||hapim.net^$doc
||happy-egg.net^$doc
||happylife-partner.com^$doc
||heartmatch.jp^$doc
||japanhotties.jp^$doc
||jdoasjfojuhod.com^$doc
||koipara.jp^$doc
||lib-333-lib.com^$doc
||local-bang.com^$all
||lovewish.jp^$doc
||lvmeet.net^$doc
||machimatch.jp^$doc
||matchmix.jp^$doc
||mmdem.net^$doc
||mmkat.net^$doc
||mmlnc.net^$doc
||moelove.jp^$doc
||myocean.jp^$doc
||nakayama.chikarakosopower.com^$doc
||netsgram.com^$doc
||nextaex.com^$doc
||otakuplay.jp^$doc
||otakurabu.jp^$doc
||p18d6.hp.peraichi.com^$doc
||pairnavipairnavi.com^$doc
||pakok.net^$doc
||paradise-angel.com^$doc
||peachzone.site^$doc
||plaza-l1o0nni-p1aza.com^$doc
||ptron.net^$doc
||ranch-1and.com^$doc
||richheart.completelifetime.com^$doc
||sfsrch.com^$doc
||sokuh.net^$doc
||sonic-nicehands.com^$doc
||specialapp-sns.com^$doc
||stowers-service.com^$doc
||sxtown.jp^$doc
||syakoba.com^$doc
||upforit.com^$doc
||votteetten.com^$doc
||vqydliiyda.net^$doc
||xn--4dkua4c8143c.jp^$doc
||xn--edkc9m807k.jp^$doc
||xn--n8j0la8wb3547bghe.jp^$doc
||xn--n8jwkyc7fw52nfvd.jp^$doc
||xn--z9j635l1gs.jp^$doc
||xn--z9jzga6u1506a.jp^$doc
||you4love.jp^$doc
||zmaka.net^$doc
||0281.jp^$doc
||0909810.com^$doc
||093093.jp^$doc
||11093.jp^$doc
||19093.jp^$doc
||2349.jp^$doc
||2h1.jp^$doc
||39093.net^$doc
||39093.tv^$doc
||4151.biz^$doc
||4151.tv^$doc
||55093.com^$doc
||55bdsm.com^$doc
||aeru.tv^$doc
||affairdating.com^$doc
||aitai.biz^$doc
||amantssexy.com^$doc
||askme4date.com^$doc
||b-7.jp^$doc
||babaroa.net^$doc
||bbs-7.jp^$doc
||bbsdx.jp^$doc
||benbbs.net^$doc
||bnbn.jp^$doc
||c-y.jp^$doc
||celcol.jp^$doc
||celebri.jp^$doc
||chy.jp^$doc
||cjok.net^$doc
||crostol.com^$doc
||datenabi.com^$doc
||doem.jp^$doc
||ebifri.com^$doc
||eraberu.jp^$doc
||erocm.com^$doc
||flirtanu.com^$doc
||flirtmoms.com^$doc
||freedom-garden.com^$doc
||freesexmatch.com^$doc
||geh.jp^$doc
||getnaughty.com^$doc
||gofun.jp^$doc
||gspo.jp^$doc
||guj.jp^$doc
||guw.jp^$doc
||h093.net^$doc
||hipma.jp^$doc
||hmai.jp^$doc
||hmhm.jp^$doc
||hoct.cc^$doc
||hxh.jp^$doc
||igetnaughty.com^$doc
||irha.jp^$doc
||jnjn.jp^$doc
||jukcha.com^$doc
||jukuana.net^$doc
||jyk.jp^$doc
||kadak.jp^$doc
||kanbbs.net^$doc
||kokanjo.net^$doc
||koubi.jp^$doc
||koy.jp^$doc
||ksds.jp^$doc
||linblog.info^$doc
||linguette.net^$doc
||locals.dating^$doc
||loveju.net^$doc
||mamak.jp^$doc
||matchx2.com^$doc
||meetdatekiss.com^$doc
||meetpie.net^$doc
||mejp.net^$doc
||mgirl.jp^$doc
||mland.jp^$doc
||mmnav.jp^$doc
||moecoco.com^$doc
||mymymy.net^$doc
||naughtydate.com^$doc
||newhoney.jp^$doc
||nuide.net^$doc
||oneisan.net^$doc
||oolontya.com^$doc
||pair-pair.com^$doc
||panacota.net^$doc
||piparelli.net^$doc
||pirikitos.com^$doc
||pmew.jp^$doc
||pnav.jp^$doc
||quickflirt.com^$doc
||ricopin.com^$doc
||scnv.jp^$doc
||serev.net^$doc
||sfg.jp^$doc
||sfge.jp^$doc
||singles50.jp^$doc
||smab.jp^$doc
||smism.jp^$doc
||smmax.jp^$doc
||soha.jp^$doc
||sok8.net^$doc
||stomatico.com^$doc
||suguaitaina.com^$doc
||suguao.net^$doc
||sumatuma.com^$doc
||sxe.jp^$doc
||syasei.com^$doc
||tapi2.jp^$doc
||tarto.net^$doc
||tendermeetonline.com^$doc
||tendermeets.com^$doc
||tinql.com^$doc
||together.com^$doc
||maturedating.com^$doc
||topg.jp^$doc
||tubakinohimitsu.amebaownd.com^$doc
||tugonoyoi.com^$doc
||twowife.com^$doc
||txtx.jp^$doc
||ulla.com^$doc
||uniformdating.com^$doc
||wantubad.com^$doc
||wildmeets.com^$doc
||xgal.jp^$doc
||xzo.jp^$doc
||yceleb.com^$doc
||yourskiss.com^$doc
||life-is-luminous.com^$doc
||00ebjdbagyqwt.club^$doc
||0didjsgheje.club^$doc
||after-7.net^$doc
||aikatuz.jp^$doc
||always-happy-fortune.com^$doc
||alwayslike.safestspot.jp^$doc
||apppleheaddd.jp^$doc
||browser9182.web.fc2.com^$doc
||catchmetalk.com^$doc
||charecttorr.jp^$doc
||charm-n.com^$doc
||chesscheckersvariation.com^$doc
||club-house.link^$doc
||cocoro-liberty.com^$doc
||during-the-holiday.com^$doc
||every-bisque.com^$doc
||every-blanched.com^$doc
||every-cute.com^$doc
||every-dark.com^$doc
||every-enjoy.com^$doc
||every-salmon.com^$doc
||experiencedlawsuit.com^$doc
||febdd.info^$doc
||fortune-yakata.com^$doc
||gnan.jp^$doc
||gnchag.com^$doc
||gran-danker.jp^$doc
||gyakunan.net^$doc
||igazre.com^$doc
||mamagathering.org^$doc
||mc-aoyama.com^$doc
||miracle-door.com^$doc
||okanekasegeru.com^$doc
||online-777.jp^$doc
||p-mel.net^$doc
||part-ner01.jp^$doc
||peachcafe.net^$doc
||poison-idea.com^$doc
||polaris-775.com^$doc
||rosaca-nina.net^$doc
||s-space.jp^$doc
||spiritual-leading.com^$doc
||sugusagasu.com^$doc
||sukui01.com^$doc
||sukui02.com^$doc
||sukui03.com^$doc
||sukui04.com^$doc
||sukuinote.jp^$doc
||sumsmsp.info^$doc
||szddbxyumfcf.net^$doc
||telet.me^$doc
||tomikuji.com^$doc
||ugfdwmausxfy.net^$doc
||uranai-hit.com^$doc
||web.fe-vrier.com^$doc
||whpbrmdss.com^$doc
||wkdk.jp^$doc
||dwoetbarcrooplsloiwh.com^$doc
||ytjon-d2s1ah.com^$doc
||lets-tip315.com^$doc
||loveri.net^$doc
||lvli.jp^$doc
||m2sg.jp^$doc
||mamasg.net^$doc
||mcbien.net^$doc
||sgua.jp^$doc
||spilov.net^$doc
||splv.jp^$doc
||suguap.net^$doc
||vien.jp^$doc
||eternal-station.jp^$doc
||friends-connect.com^$doc
||kinun-2023.com^$doc
||madonnaoasis.com^$doc
||msg.metamessen.net^$doc
||o-cean-fortune.biz^$doc
||o-cean-fortune.com^$doc
||secondary-with.com^$doc
||fure-ai.com^$doc
||rea-love.net^$doc
||natu.natural-natural-pure.com^$doc
||btc8228.com^$all
||btc9339.com^$all
||celezma.net^$doc
||loveru.jp^$doc
||t1amo.jp^$doc
||pair-seat.net^$doc
||pairseat.net^$doc
||sez.jp^$doc
||kira-kira.blue^$doc
||p-chi.tech^$doc
||vanilla-japan.love^$doc
||jtybleua.jp^$doc
||mai-tel.jp^$doc
||sfc.bz^$doc
||sfget.jp^$doc
||download-campaign.com^$doc
||fine-cloud.net^$doc
||float-next.com^$doc
||matomenever.com^$doc
||mid-round.com^$doc
||otonanojikan13579.net^$doc
||up-loop.net^$doc
||videochat-fan.com^$doc
||mamamour.net^$doc
||2chlovers.web.fc2.com^$doc
||lovez.jp^$doc
||moremorelove.net^$doc
||after-noon.jp^$doc
||chatchu.jp^$doc
||cupid-chat.net^$doc
||nanroom.net^$doc
||nowtuma.net^$doc
||pastelism02.jpn.com^$doc
||wifekai.net^$doc
||zerocha.jp^$doc
||chat-search.com^$doc
||hhh.u3se3jg3gae.com^$doc
||lmoox5.net^$doc
||hn-mizuki.com^$doc
||urara02032023.com^$doc
||gloria-divination.$doc
||otomachi.jp^$doc
||amazonlogistics.jp^$all
||fukusenkan.com^$doc
||koi-chat.net^$doc
||sachikru.com^$doc
||sachikru1.com^$doc
||sachikru3.com^$doc
||sachikru4.com^$doc
||sachikru5.com^$doc
||sachikru7.com^$doc
||sachikru8.com^$doc
||koundayori.com^$doc
||second-love-love.jp^$doc
||kokocha.site^$doc
||san-dast.net^$doc
||dedestin0.jp^$doc
||legamee.jp^$doc
||miraiah.jp^$doc
||sen8senjya.jp^$doc
||happy-matome.com^$doc
||fukuroou.jp^$doc
||7wbb.com^$doc
||recruit-gold.com^$doc
||emoti-on.com^$doc
||jinsei-undesu.com^$doc
||spiritual-jp.com^$doc
||xdpiwrx7ub.net^$doc
||go-ld-li-ne.site^$doc
||gold-line.online^$doc
||cloudmax.jp^$doc
||mamakatu42.blogspot.com^$doc
||vivian.jp.net^$doc
||cha-nce.net^$doc
||mirusiru.online^$doc
||mirusiru.site^$doc
||mobileverify.net^$doc
||grabgiftcard.net^$doc
||appxfree.com^$doc
||kounnomichishirube.net^$doc
||lucksignpost0804.org^$doc
||lightning02s.com^$doc
||lightning0707.com^$doc
||silversex.com^$doc
||flirttime.com^$doc
||ma-rry.net^$doc
||ma-rry.site^$doc
||altdorfer-niklaus.com^$doc
||lucky-star8.com^$doc
||koinik.net^$doc
||yurizono.com^$doc
||cit-rine.com^$doc
||ctn-ctn.com^$doc
||holy-kantei.com^$doc
||unki-max.com^$doc
||the-match.jp^$doc
||gtex3.com^$doc
||nice.par-even.com^$doc
||pr-0m.link^$doc
||wa-nago-wagona.com^$doc
||chi-yo-1807chiyo.com^$doc
||globalreward77.com^$doc
||jukukoi.jp^$doc
||jukukoi.me^$doc
||lovely-lovely.com^$doc
||shareno1wish.net^$doc
||d-position.com^$doc
||d-position.shop^$doc
||kaiunnookite.com^$doc
||bs-03-6743-2266.net^$doc
||love2-mail.com^$doc
||gokinjoscreen.com^$doc
||koun-wa.com^$doc
||mariage-inc.com^$doc
||tenmei-michibiki.com^$doc
||a-ro-ma.com^$doc
||a1tai7.jp^$doc
||atchao.jp^$doc
||bestchat-chat.com^$doc
||brs.bi09aso-yo.xyz^$doc
||brs.vacat81-best.tokyo^$doc
||chu-chu.jp^$doc
||enenkatukatumail.com^$doc
||enjoylife2001.net^$doc
||ffr548tyfhe.jp^$doc
||k0k0cha.link^$doc
||ir0d0r1.jp^$doc
||lovemelo.net^$doc
||ma-t-chy.link^$doc
||maiwa12.jp^$doc
||mat-chy.site^$doc
||me08mo.com^$doc
||meltiest.jp^$doc
||meltylove.jp^$doc
||mem44.com^$doc
||merukore.jp^$doc
||moremoremail.net^$doc
||p-pure.jp^$doc
||p0cket1ove.jp^$doc
||p0rte.site^$doc
||pairife.jp^$doc
||platinumpla2023.com^$doc
||riarialuvluv2023.com^$doc
||romance-time.net^$doc
||sez-pr.com^$doc
||soklove.net^$doc
||sugulove777.com^$doc
||ta1kcall.site^$doc
||tada-love.jp^$doc
||tokimekitaine.net^$doc
||tokimekimaildesu.net^$doc
||tokumeichat135.net^$doc
||tokumeichatmail.net^$doc
||tsumatsuma.xyz^$doc
||olive-ft.jp^$doc
||az-l.com^$doc
||sm-bt.net^$doc
||sm-heaven.com^$doc
||smdotcom.com^$doc
||seselagi.com^$doc
||recipe000.tokyo^$doc
||www.academicsingles.jp^$doc
||ado.wish-best.com^$doc
||keiunkan.com^$doc
||falsettoy.click^$doc
||pc.mt3sys.com^$doc
||as25ap.com^$doc
||asap15.com^$doc
||sm8787.com^$doc
||keenchimairaanthem.com^$doc
||ccappu-ccinno.com^$doc
||ccappuccinno.com^$doc
||daddyclub.net^$doc
||papamagic.net^$doc
||hoshi-no-michibiki.com^$doc
||hoshi-no-michibiki.jp^$doc
||miracle.magic-connect.net^$doc
||fun-uranai.com^$doc
||hrt-hrt.com^$doc
||uranai-su-ki.com^$doc
||million-vita128.com^$doc
||eb-nav.com^$doc
||global-riward77.com^$doc
||essence-one.net^$doc
||himegoto-time.com^$doc
||himegoto-time.jp^$doc
||happiness-app.net^$doc
||matching364.com^$doc
||dr5rmdxa.com^$doc
||pktbuu.morau.top^$doc
||iris-making.com^$doc
||lm-mousey-happy.com^$doc
||speeds5-mmiliked.com^$doc
||blackknocckk.jp^$doc
||finelucckyy.jp^$doc
||nokiseitjnemnew.jp^$doc
||vi.violleet.com^$doc
||gg.garrnnet.com^$doc
||fl.floriittee.com^$doc
||ll.liberrttyy.com^$doc
||6kk2a4t.com^$doc
||eujsiyajep.niigata.jp^$doc
||success-dream.jp^$doc
||lovetwipaco.com^$doc
||sharesharemail.net^$doc
||high-incomes.com^$doc
||line-channel-info.com^$doc
||line-special-information.com^$doc
||safety-line-message.com^$doc
||secure-line-network.com^$doc
||side-joblp.com^$doc
||71l0b.com^$doc
||fc67x.com^$doc
||everydaykennsyou.com^$doc
||king-sweepstakes.com^$doc
||qaghoz.com^$doc
||resort-life7.com^$doc
||mmnn.jp^$doc
||mamatech.pepper.jp^$doc
||manpuku-ja.com^$doc
||manpuku-ja.jp^$doc
||ms-lounge.net^$doc
||sm-sl.net^$doc
||enchantedfruit.com^$doc
||meltsweetbite.com^$doc
||ce0oil1ibu.com^$doc
||ezg-iy.com^$doc
||hjr-wq.com^$doc
||olt-nw.com^$doc
||iinfssspoipo.com^$doc
||mugen-online.com^$doc
||layer-pj.com^$doc
||du0.jp^$doc
||hapinet.net^$doc
||kiseki.com^$doc
||fukutoku-miyako.com^$doc
||ka73-urara.club^$doc
||uraaka.net^$doc
||peraichi.com/landing_pages/view/s8j8k/$doc
||gmatch.jp^$doc
||majiainc.com^$doc
||meet-up.jp^$doc
||9npze.com^$doc
||gsi3t.com^$doc
||n43vr.com^$doc
||qf6tm5ug.com^$doc
||candycandypop.com^$doc
||showa-klub.com^$doc
||xczzfvxknafgoawjtv.com^$doc
||lshyodrgehlnyswsjq.com^$doc
||yy4rhgzd.com^$doc
||colorfulromance.com^$doc
||gmatch.jp^$doc
||blue-uranai.com^$doc
||bm-bluemoon.com^$doc
||kin-un2023.com^$doc
||kinun-777.com^$doc
||kousenkan.com^$doc
||aikotoba2020.com^$doc
||ainokotoba1515.com^$doc
||yunekon2taxiy.jp^$doc
||midnighteaparty.com^$doc
||nav1.jp^$doc
||gamojinsegesegeas.com^$doc
||ml.ml.wawahrsdfrhfsdfh.com^$doc
||up.ch3m1stry.com^$doc
||wawahrsdfrhfsdfh.com^$doc
||hoshiyomi-yakata.com^$doc
||hoshiyomi-yakata.jp^$doc
||mimiray-k.jp^$doc
||miray-k.jp^$doc
||luna-ria.jp^$doc
||msiv5.com^$doc
||free-ren.jp^$doc
||free-ren.com^$doc
||fortune-crystal.com^$doc
||fab-inst.com^$doc
||ai-mono.jp^$doc
||again-agreement.com^$doc
||birth-bravery.com^$doc
||cross-customer.com^$doc
||desk-dictionary.com^$doc
||event-experiment.com^$doc
||final-future.com^$doc
||ai-referee.com^$doc
||hfykmfd1.com^$doc
||lien-lienam.com^$doc
||rune-luna-moon.com^$doc
||blue-could.com^$doc
||ombrewa.space^$doc
||chosentalladvanced.com^$doc
||methodsbillboardssurface.com^$doc
||li-ke-lo-ve.com^$doc
||like-love.net^$doc
||m-eteor.com^$doc
||m-eteor.shop^$doc
||b-cdn.net/human-verify-system.html$doc
||b-cdn.net/verify-captcha-$doc
||r2.dev/human-verify-system.html$doc
||yy8j.com^$doc
||reductioncarnival.com^$doc
||bride1be.com^$doc
||cheri-sh.jp^$doc
||cheri-sh.net^$doc
||e-c.tokyo^$doc
||iroha-oran24.com^$doc
||jp.rian-rian.com^$doc
||kaigan-kaiun-fortune.com^$doc
||rokuseikantei.com^$doc
||match-member.com^$doc
||tu-tu.jp^$doc
||uusshmhmba.com^$doc
||jg5y2nkdg.com^$doc
||vip-salon.net^$doc
||voicehp.com^$doc
||j9q8dmk6.com^$doc
||kas6mjgmxhn5.com^$doc
||zjjgbuiy.com^$doc
||jkoi.jp^$doc
||light678o.fun^$doc
||bibian4k.com^$doc
||bacchuss.net^$doc
||sg1first-syspro.jp^$doc
||ssgalaxy-sysgold.jp^$doc
||foryouswk.jp^$doc
||bell-02.com^$doc
||bell-03.com^$doc
||mirai-jc.jp^$doc
||herebyintentionally.com^$doc
||m-ateria.com^$doc
||hhll.app^$doc
||l-partner.jp^$doc
||lpartner.jp^$doc
||peace-77place.com^$doc
||peach-next.info^$doc
||profileclub.info^$doc
||freeshot.info^$doc
||orga29.com^$doc
||the-latest-version.com^$doc
||book234h.fun^$doc
||litlink.site^$doc
||nyancokuji.xyz^$doc
||star789h.fun^$doc
||g5chat.com^$doc
||matchtap.site^$doc
||call-chieftain.com^$doc
||deep-dealings.com^$doc
||easy-elation.com^$doc
||u-to--u.com^$doc
||u-to-u.com^$doc
||u--to-u.com^$doc
||aibeautia1.jp^$doc
||loto7-diamond-club.com^$doc
||lotochance.hp.peraichi.com^$doc
||lotochance-vip.com^$doc
||scrutinizeordealscrutinize.com^$doc
||story-story.life^$doc
||mcdonal.fujicandy-balibalione.net^$doc
||soul-of-compass.com^$doc
||e-manager-kanri.com^$doc
||info-top-letter.com^$doc
||noi9va4ewa.com^$doc
||thanksgift-special.com^$doc
||mailtherapyask.com^$doc
||xs525890.xsrv.jp^$doc
||echi-echi-time.org^$all
||f-fri.com^$doc
||f-fri.net^$doc
||active-achieve.com^$doc
||awesome-meeting.jp^$doc
||basic-bank.com^$doc
||chief-child.com^$doc
||deliver-departure.com^$doc
||kneelmodernism.com^$doc
||tour375.com^$doc
||trr59rrt.com^$doc
||akuto23.com^$doc
||ntc69oia.com^$doc
||rken104.com^$doc
||rkn71nkr.com^$doc
||o-rakuenn.com^$doc
||honeyline.co.jp^$doc
||honeyline.net^$doc
||l-senior.com^$doc
||lovevoice.net^$doc
||image-play.net^$doc
||bijinkadan.com^$doc
||9888.st^$doc
||6969-chat.tv^$doc
||1919-chat.tv^$doc
||acttas.com^$doc
||t4hsalk.com^$doc
||luvmee.com^$doc
||luvmlp.com^$doc
||luvmsite.com^$doc
||matchxxx.jp^$doc
||getma.tech^$doc
||matchzzz.jp^$doc
||uly-sses8888.com^$doc
||another2020.net^$doc
||colorone.jp^$doc
||elephant-904.com^$doc
||yoitoki.jp^$doc
||play.google.com/store/apps/details?id=com.ola.yoitoki^$doc
||tenkeifa.com^$doc
||tenkeiya.com^$doc
||tenkeiza.com^$doc
||datelove.cc^$doc
||loto-4x.com^$doc
||epicpotec.com^$doc
||nxishctcjccry.com^$doc
||duskspire-horizon.com^$doc
||daily-description.com^$doc
||divine.alegria-verte.com^$doc
||jolly.treasure-pleasure.com^$doc
||reveur-voyance.jp^$doc
||aura-and-color.com^$doc
||destinyholy.net^$doc
||fortune-moon.net^$doc
||hoshinokouranai.com^$doc
||irene-fortuna.com^$doc
||eight85.com^$doc
||sws.smart-brain555.com^$doc
||baby-match.com^$doc
||p-e-a-c-h-p-e-a-c-h.com^$doc
||play.google.com/store/apps/details?id=com.juku_para^$doc
||opportunityforeigntoward.com^$doc
||dressedunlessround.com^$doc
||roundopportunityunless.com^$doc
||coc-gov.com^$doc
||michiakari.com^$doc
||michiakagi.com^$doc
||michiakaza.com^$doc
||momentary.link^$doc
||bitgetnextlevel666.com^$doc
||fukucenter.com^$doc
||destined-meeting.com^$doc
||luminous-encounter.com^$doc
||luminous-encounter.biz^$doc
||luminous-encounter.info^$doc
||luminous-encounter.net^$doc
||luminous-encounter.org^$doc
||teninorashinban.com^$doc
||covert-messaging.com^$doc
||discreet-discussions.com^$doc
||silent-messaging.com^$doc
||undercover-chats.com^$doc
||sub.astroline.today^$doc
||ant.spica-telescope.com^$doc
||future-future55.com^$doc
||amazing.mirage-road.com^$doc
||aeru365.jp^$doc
||k0ikana.com^$doc
||b-withyou.com^$doc
||w1thy0u.com^$doc
||yuriyuri-yurayura.com^$doc
||celestica-premium.com^$doc
||egwj-ossi.com^$doc
||fsis-karw.com^$doc
||gbg.ty2s-pqv7.com^$doc
||kygt-tpnr.com^$doc
||pacr-fjhs.com^$doc
||pgk.te1p-a4ir.com^$doc
||qloi-jjcl.com^$doc
||vsno-wdmg.com^$doc
||uid.pmi4-g8sd.com^$doc
||akgi45sas.jp^$doc
||dfr.bubu88yjt.jp^$doc
||g5h.gfd7414uytr.jp^$doc
||sed.kjh69sa99.jp^$doc
||wse.yts248ds.jp^$doc
||abc.luxe5321.com^$doc
||kaiun-blue.com^$doc
||mn-meiun.com^$doc
||kaiunraw.com^$doc
||lss.site-lfss.com^$doc
||msx.hope-321d.com^$doc
||mantra-7-teach.net^$doc
||mantra-7teaching.com^$doc
||mantra-7.net^$doc
||mantra-7teach.com^$doc
||mantra7.net^$doc
||mantra77.jp^$doc
||icha-kurakura.biz^$doc
||p67-kuku4e.xyz^$doc
||free-community.club^$doc
||hm99-free7apo.gift^$doc
||tadaapo.gift^$doc
||tadadeai.weebly.com^$doc
||play.google.com/store/apps/details?id=gift.tadaapo.tadadeai&$doc
||improveyourhand.online^$doc
||next.official7-frkoi.net^$doc
||irrigation085.com^$doc
||atlier-ad.jp^$doc
||atelier-goo.com^$doc
||atelier-goo.net^$doc
||atelier-happiness.co.jp^$doc
||atelier-hp.jp^$doc
||atelier-post.com^$doc
||atelier-post.net^$doc
||atelier-s2.com^$doc
||atelier-s2.net^$doc
||atelier-tokyo.net^$doc
||atelier-toukyo.com^$doc
||atelier-www.com^$doc
||atelier-www.net^$doc
||chloe-77le.com^$doc
||jyuku-kan.tokyo^$doc
||deq.frt-87rtyt1.jp^$doc
||ytk.jra-ikkr.jp^$doc
||last-love.com^$doc
||tada-mail.com^$doc
||tada-mail.net^$doc
||soltp1de.user.webaccel.jp^$doc
||play.google.com/store/apps/details?id=com.tadamailmatching.app^$doc
||tadade-navi.com^$doc
||plus-x4-alpha.com^$doc
||lovee-idol.tokyo^$doc
||high-loveit.com^$doc
||lot.luck-fortune.com^$doc
||adoredaffection.com^$doc
||bastionbeneficial.com^$doc
||capricecaretaker.com^$doc
||deal-defeat.com^$doc
||easygoingecology.com^$doc
||bhtuukgrerzjmchn.com^$doc
||av-master.org^$all
||together2night.com^$doc
||dmlqidmx8frkz90.ywufsjhc4.jp^$doc
||pairing0-0.net^$doc
||pairingmailmail.com^$doc
||areallrea.com^$doc
||arealrea.com^$doc
||rearealrea.com^$doc
||nontymontylle.jp^$doc
||brilliant.ohana-pilina.com^$doc
||pinehollow-glade.com^$doc
||tg525.com^$doc
||ins7ki.com^$doc
||linez7820.com^$doc
||jp84434.com^$doc
||ghtzqkwm.sbs^$doc
||gok.iumgs654s.com^$doc
||pfj.anbilip4.com^$doc
||plkssl-7.com^$doc
||ap.appl-er.com^$doc
||hougen-talk.com^$doc
||honeytalkgroup.com^$doc
||tomodachiproject.com^$doc
||official.treasure-fan.com^$doc
||587jtu3.com^$doc
||cvfr74t.com^$doc
||dok47ws1.com^$doc
||e5r6e9u.com^$doc
||jump-hi-quality55.com^$doc
||jump-hi-quality77.com^$doc
||sparkle-sparkle.net^$doc
||spiritual-stargate.com^$doc
||spiritual-stargate.jp^$doc
||spiritual-stargate.net^$doc
||stargate-spiritual.com^$doc
||stargate-spiritual.net^$doc
||starrgate-sp.net^$doc
||starrgate.co.jp^$doc
||barian-therd.com^$doc
||fantasia-menard.com^$doc
||ofyou-beautiful.com^$doc
||saro-nelmng.com^$doc
||soijoy-sence.com^$doc
||success-bloom.com^$doc
||vortex-comger.com^$doc
||official.step-up-line.com^$doc
||smatch-love.app^$doc
||tr53vs.com^$doc
||mihayume.com^$doc
||lvrc.jp^$doc
||nogruptexn.com^$doc
||ralphclothing-jp.com^$doc
||abuse-faint.com^$doc
||champion-place77.com^$doc
||grand-minor.com^$doc
||pouch-rider.com^$doc
||route-since.com^$doc
||inspirationwillingviagiant.com^$doc
||8yy-ca-w-i9-z.com^$doc
||r-a3-jk-xyh-d.com^$doc
||zp-gzs2-yts-a.com^$doc
||net.redroses.top^$doc
||sdnlq.site^$doc
||sdnlt.site^$doc
||sdnlx.site^$doc
||zs.peachparadise.vip^$doc
||alex-kor.com^$doc
||xaysjypt.com^$doc
||kimikoi8.com^$doc
||l0ve-zer0.com^$doc
||zer0-l0ve.com^$doc
||belongirreplaceabletwice.com^$doc
||unableirreplaceablegaze.com^$doc
||0uj6.com^$doc
||6n5d.com^$doc
||7sb3.com^$doc
||yr-root.com^$doc
||mightembarrassedlaw.com^$doc
||lustsexloveclub.vip^$doc
||passionsex.vip^$doc
||brillante-etoile.com^$doc
||lamp-keeper-tomori.com^$doc
||journey-of-truth.com^$doc
||cf67ahu-mkooh.com^$doc
||kikon-match.co.jp^$doc
||pure-ppre-r.com^$doc
||dasikmonnb9.sbs^$doc
||jjiu3sqw.sbs^$doc
||kardon-rsa.com^$doc
||kvgp201er.sbs^$doc
||osjdd4d.sbs^$doc
||w0sqoketsl.sbs^$doc
||glitter-2025.com^$doc
||alor1-j6g2t.com^$doc
||ik-v60jh3j.com^$doc
||mn6q-6tw4h.com^$doc
||phm-2g.com^$doc
||r9-2an.com^$doc
||coupletime2525.com^$doc
||aaxr.shop^$doc
||rosarios.cloud^$doc
||sefrail.com^$doc
||tsukiyomian.com^$doc
||jukuen-club.com^$doc
||yoloo-jp.com^$doc
||yoloo-official.zendesk.com^$doc
||lottery37-fct.com^$doc
||fortuneletter.com^$doc
||fortuneqr-letter.com^$doc
||lucky-letter.com^$doc
||typicallydiscrimination.com^$doc
||amoredate.com^$doc
||friend-match.net^$doc
||ainu-syaman.frenchkiss.jp^$doc
||sanka.fun^$doc
||www.black-magic.jp^$doc
||www.onmyo.jp^$doc
||www.spiritualheal.net^$doc
||www.urami.net^$doc
||www.whitemagic.jp^$doc
||tadakyun.jp^$doc
||tadakyun.net^$doc
||tadaqyun.net^$doc
||5187.jp^$doc
||587.jp^$doc
||app-aplell.com^$doc
||u65erdf-gre.com^$doc
||gentete.com^$doc
||fine-days.net^$doc
||abjp6579.tokyo^$doc
||sukebeisu.com^$doc
||can2025.click^$doc
||do2512.com^$doc
||ot2512.com^$doc
||pc2512.com^$doc
||w-chat25.com^$doc
||wewe.web-chatgptt.com^$doc
||cpa.8na4zpze.com^$doc
||linelife.home-chat.jp^$doc
||remote-jp.jp^$doc
||pairs-jp.karakuri.ai^$doc
||abxchzpgqdvoahrbzk.com^$doc
||bkxdlsivyfsjapsokq.com^$doc
||cszavakjlvtlhojrui.com^$doc
||go2go.bkxdlsivyfsjapsokq.com^$doc
||kyrmtjxzbdzszrrkgt.com^$doc
||your.happy-strike.com^$doc
||any864jagged53.com^$doc
||attack-stance321.com^$doc
||castle384before12.com^$doc
||disk-redial.com^$doc
||halt789-enraged1.com^$doc
||nicely888wooden222.com^$doc
||lancerjp.com^$doc
||indeedlikewise-342.com^$doc
||shredgadzooks-428.com^$doc
||spacha2026.com^$doc
||whetherprovided-485.com^$doc
||whilegadzooks-242.com^$doc
||7clover.net^$doc
||7leaf-clover.net^$doc
||clover-seven.com^$doc
||dragomquesi.com^$doc
||pairry.jp^$doc
||qole-oracle.jp^$doc
||aurorra-fortune.com^$doc
||aurorra.net^$doc
||beckoning-whitecat.com^$doc
||juku-ai-club.com^$doc
||juku-ai-club.fun^$doc
||juku-ai-club.pics^$doc
||jp24tv.live^$all
||0spot.online^$doc
||lovespot.online^$doc
||assetmalnutrition.com^$doc
||ballet-bandage.com^$doc
||beloved.noemi-mia.com^$doc
||boundarynight.com^$doc
||caller-calculus.com^$doc
||chatoxygen.com^$doc
||dangle-daring.com^$doc
||earnest-economist.com^$doc
||faintly-fairness.com^$doc
||habitantvillage.com^$doc
||ignorezest.net^$doc
||color10color.com^$doc
||color10color.jp^$doc
||elegance-love.net^$doc
||elegance.spryest.com^$doc
||sabito.kamadonezuko.com^$doc
||fortune-gate-open.com^$doc
||kibou-no-hane.com^$doc
||z52r-hm7c3-e8qx.com^$doc
||riundoor.com^$doc
||supirichua.com^$doc
||zeroclu6.com^$doc
||njkgrwk-37hgw.com^$doc
||esrzqibdfpah-xeb.com^$doc
||xcvk.connectiamay-naat.com^$doc
||fanforus.com^$doc
||nhqueen.com^$doc
||asiavibe.com^$doc
||callyourdate.com^$doc
||japansdates.com^$doc
||kikon-link.com^$doc
||air-look-send.com^$doc
||air-we4.com^$doc
||care-rtu.com^$doc
||yus-air.com^$doc
||anatomicallylaborer.com^$doc
||anthemlazy.com^$doc
||approximatelylimitation.com^$doc
||capricious-chosen.com^$doc
||cowardprotest.com^$doc
||externalsuffice.com^$doc
||fervortactic.com^$doc
||forever.luna-malina.com^$doc
||fortunatetransformation.com^$doc
||fragranttransport.com^$doc
||hypocrisyyard.com^$doc
||michibiki-mori.com^$doc
||rainbow-road.com^$doc
||ritz-club.net^$doc
||sakura-fund.com^$doc
||m.midamarkets.cc^$doc
||mpy.thesun-messa.com^$doc
||sukimadate.com^$doc
||dating4lover.com^$doc
||datewhirl.com^$doc
||meetheage.com^$doc
||miaromance.com^$doc
||wingtalks.com^$doc
||shinpisaido.com^$doc
||suzuri.jp/kinunhado^$doc
||tokujiro.base.shop^$doc
||tokujirou.stores.jp^$doc
||uranai1111.base.shop^$doc
||youtube.com/@kinun-ryujin^$doc
||youtube.com/@kinunhadou^$doc
||youtube.com/@ryujin_miko^$doc
||youtube.com/@tokujiro7kinun^$doc
||youtube.com/@%E7%99%BD%E8%9B%87%E5%BC%81%E8%B2%A1%E5%A4%A9%E7%A5%9E%E5%B7%AB^$doc
||youtube.com/@%E9%87%91%E9%81%8B%E5%BC%81%E8%B2%A1%E5%A4%A9^$doc
||lvluvlabo.jp^$doc
||luvlabo.jp^$doc
||revju.jp^$doc
||yumemoba.jp^$doc
||hapiapplp.com^$doc
||happylapp.com^$doc
||k-cobain.com^$doc
||lilac-fortune.com^$doc
||senshinsu.com^$doc
||sonshinus.com^$doc
||etrna.jp^$doc
||permanan.com^$doc
||rebetrna.jp^$doc
||lux-the-destiny.com^$doc
||misstooth456central.com^$doc
||whitenoise554popular.com^$doc
||worldwide012mental.com^$doc
||plan-smlp.com^$doc
||fortune-dojo.com^$doc
||fortunedojo.net^$doc
||kaiun-dojo.com^$doc
||ogamiya.info^$doc
||ogamiya.stores.jp^$doc
||ballot-vivid.com^$doc
||build-exert.com^$doc
||caress-fussy.com^$doc
||decade-orbit.com^$doc
||exceed-curio.com^$doc
||fable-smile.com^$doc
||glad-uplifting.com^$doc
||grace-achieve.jp^$doc
||inborn-awash.com^$doc
||namely-evoke.com^$doc
||nimble-synth.com^$doc
||ethics-whisk.com^$doc
||please-zebra.com^$doc
||rating-shave.com^$doc
||saving-guard.com^$doc
||thrive-one.jp^$doc
||viewer-howdy.com^$doc
||k1nd-talk.com^$doc
||m1xm1x-real.com^$doc
||mixmix-real.com^$doc
||matchingitv.com^$doc
||ialoop.net^$doc
||amo.topescort.jp^$doc
||swlife.jp^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/142492
||webogram.ru^$all
||xn--80affa3aj0al.xn--80asehdb^$all
||telegr.am/user_mgt/login$all
||tgram.ru^$all
||telegramm.site^$all
||web-telegram.net^$all

! https://app.any.run/tasks/679e9afa-eb19-4414-a086-e280a779a448 and https://tria.ge/230217-xd8nksgc9x/behavioral2
||anapatformacion.org/modules/file/tor/tor-browser.zip^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/143447#issuecomment-1438352020
||a-new86.com^$all
||koi2ru.com^$all
||room2021.net^$all
||roomoshirase.net^$all
||smore91.net^$all
||som419.net^$all
||touchoshirase.net^$all
||touchtacchi.net^$all
||wswsnews.net^$all

! https://www.reddit.com/r/uBlockOrigin/comments/11s92xa/
! https://www.virustotal.com/gui/url/e1d9aadb5c1f979f0c83a54015cf84cda2da0fa9c4b452c6dabe62deeb70add5/detection
||s3.amazonaws.com/extpro/speed4.html$all

! https://www.reddit.com/r/uBlockOrigin/comments/11s92xa/badware_risks_page_request_malware/jceopse/?context
! https://pastebin.com/t3z1m0tN
! https://www.virustotal.com/gui/url/2fb57656f55db6d335696767de2d73693a31148429ef6b51b97c01e43563a8ee
! https://www.virustotal.com/gui/url/7f8f874b486a656948944aa205c75fc490cff1235f1114e067f161e69f0bcbb9
||imgfarm.com/images/dlp2/prod$3p
||myway.com^$all
/anemone-*.min.js$script,1p

! techsupport scam
/?{BV_SRCID}&$doc
/werrx01/^$doc
/merrx01/^$doc
||ondigitalocean.app/*^phone=+1-$doc
||plesk.page/*?phone=$doc
/W*ity0*00Er00*/index.$doc
||s3.ap-northeast-1.amazonaws.com/tedex.com/*/index.html$all
||smarttvnew.vercel.app^$all
/systemerror-mac/?$doc
/Win0SecurityEr0CH0700Err0rSt/index.html$doc
/werrx01/index.html$doc
||activexsportswear.com^$all
||besttreasurecoastroofing.com^$all
||eharmonysingle.online^$all
||errorordufhwe.s3.ap-south-1.amazonaws.com^$all
||s3.ap-northeast-2.amazonaws.com/%*!!%*/index.html$doc
||s3.amazonaws.com/securityfotrus.1.13/index.html$all
||s3.eu-west-2.amazonaws.com/675.88.u6.8878/index.html$all
||s3.us-west-1.amazonaws.com/security.uni.firewall.$all
/Win00Security07/index.html$doc
/Er0Wind0fsd0Security087/index.html$doc
||websafety.online^$all
||mct-niger.com^$all
||stb-media.xyz^$all
||theweddingmahotsav.com^$all
||hodllane.com^$all
||pushlandings.b-cdn.net^$all
||fastndio.s3.eu-central-1.amazonaws.com^$all
||pub-77106c9273be4f3fbec6b6d6c3c51b7f.r2.dev^$all
||s3.ap-northeast-1.amazonaws.com/ongoing.com/aanoitmessure/index.html^$all
||setkuttina.pages.dev^$all
||xbasugigqiuegiwqdbsx.s3.ap-northeast-1.amazonaws.com^$all
||uwqghwfdwqywetqwfghewqeqweig.s3.ap-southeast-2.amazonaws.com^$all
||fantastic-salamander-c721cb.netlify.app^$all
||ondigitalocean.app/*/index.php?cezp=$doc
||amazonaws.com/*.*.*.*.*.*.*.*/*/index*.html$doc
||germanytechsupport.pages.dev^$all
||systemsupport.pages.dev^$all
||techsupport-ev2.pages.dev^$all
||pub-3b4d978c14114185847089b100168c84.r2.dev^$all
||tingtang.pages.dev^$all
||tomtom.pages.dev^$all
||adolphusisomlycyou.pages.dev^$all
||blob.core.windows.net/$web/*index.html$doc
||windows.net/*?bcda=$doc
/index.html?ph0n=1-$doc
||technosoft35.ru^$all
||pages.dev/Wi0n0erAry0mpAlert048/$all
||netlify.app/errox01/?$all
||seishinyoga.com^$all
||microchromejapan.b-cdn.net^$all
/^https:\/\/[a-z]{16,}\.s3\.[-a-z]+1\.amazonaws\.com\/[a-z]{66,}(?:\/[a-z]{45})?\.html/$doc,match-case,to=amazonaws.com
/^https:\/\/[-a-z]{16,}\.z\d{2}\.web\.core\.windows\.net\/[a-z]{70,}(\/[a-z]{40,})?\.html/$doc,match-case,to=web.core.windows.net
||web.core.windows.net/?zpbid=$doc
||watchdjav.online^$all
||amplifyapp.com/Win*/index.html$doc
||windows.net/Win*/index.html$doc
||windows.net/Mac*/index.html$doc
||web.core.windows.net/chrmac/index.html$doc
||web.core.windows.net/macx/index.html$doc
/index.html?Aniph=1-$doc
/index.html?ph0nq=$doc
/?pnoorg=1^$doc
||multiyogaoffer.jp.net^$all
||childernplay.online^$all
||pc1968.onrender.com^$all
.com/link?z=$doc
||b-cdn.net/Mac*/?phone=$doc
||donghocotatan.com^$all
||goldendoghotel.com^$all
/^https:\/\/[a-z]{12,15}\.com\/\?p=[0-9a-f]{32}&u=[0-9a-f]{138}\b/$doc,match-case
/?ph0nq=1-$doc
/?ph0nq=+1-$doc
||heattercer.com^$all
||web.core.windows.net/?_event=$doc
||pages.dev/ai2.mp3$doc
/Win08ShDMeEr0887x/*$doc
||storage.googleapis.com/my*server/*/index.html$doc
||canadacentral-01.azurewebsites.net/index1.html$doc
||windows.net/?tk=$doc
||windows.net/*/index.html?clickid=$doc
/index.html?Anph=$doc
||girlsmakeithard.monster^$all
||web.core.windows.net/?call=*&code=$doc
.amazonaws.com/*.*.*.*.*.*.denied/$doc,domain=amazonaws.com|github.io
/^https:\/\/[0-9a-z]{30,}\.s3\.[-a-z]+\d+\.backblazeb2\.com\/W[0-9A-Za-z]*in0[0-9A-Za-z]*Er0[0-9A-Za-z]*\/index\.html/$doc,match-case,domain=backblazeb2.com
||ondigitalocean.app/*/?bcda=$doc
||grootcam.shop^$all
||z13.web.core.windows.net/*/?clickid=$doc
||viruswarning*.web.core.windows.net^$all
://message1*.z13.web.core.windows.net^$doc
^Anph=(0101)-$doc
/^https:\/\/[a-z]{5,20}-[0-9a-z]{16}\.z03\.azurefd\.net\/[0-9A-Za-z]+0[0-9A-Za-z]+\/index\.html/$doc,match-case,domain=z03.azurefd.net
||azurefd.net/?bcda=$doc
?Kuph=1-$doc
!://main.d*.amplifyapp.com/?$doc
!
! https://github.com/uBlockOrigin/uBlock-discussions/discussions/302#discussioncomment-10338866
||pages.dev/*/Fm7-alert.wav
||pages.dev/*/ai2.mp3
||pages.dev/*_Fm7-alert.mp3
||pages.dev/0wa0rni0ng0.mp3
||pages.dev/al1.mp3
||pages.dev/yaketsuku.mp3
||pages.dev/esc.js
||pages.dev/fulls.js
||pages.dev/fullscreen.js
||pages.dev/media/alert.mp3
||pages.dev/nvidia.js
||pages.dev/js/esc.js
||pages.dev/js/flscn.js
||pages.dev/js/nvidia.js
||pages.dev/jupiter.js
||pages.dev/noir.js
||pages.dev/*/alertmicrosoft.mp3
||pages.dev/webs.mp4
||r2.dev/_Fm7-alert.mp3
||r2.dev/media/_Fm7-alert.mp3
||windows.net/*/bxsafe.js
||windows.net*/esc.js
||windows.net/*/flscn.js
||windows.net/js/jsd1.js
||windows.net/js/jsd2.js
||windows.net/*/jupiter.js
||windows.net/*/noir.js
||windows.net/*/nvidia.js
||windows.net/media/beep.mp3
||windows.net/*/media/beep.mp3
||windows.net/*_Fm7-alert.mp3
||windows.net/js/fulls.js
||windows.net/media/yaketsuku.mp3
||b-cdn.net/jupiter.js
||b-cdn.net/noir.js
||b-cdn.net/nvidia.js
||windows.net/js/customone.js
||windows.net/js/customtwo.js
||windows.net/media/apked.mp4
.online/js/esc.js
.online/js/flscn.js
.online/js/full.js
.online/js/mouse.js
.online/js/muse.js
.online/js/noir.js
.online/js/script2.js
.online/js/script3.js
.online/js/script5.js
.online/js/script6.js
.online/js/script7.js
.online/media/webs.mp4
.xyz/js/esc.js
.xyz/js/noir.js
||amplifyapp.com/*/js/esc.js
||amplifyapp.com/*/js/flscn.js
||core.windows.net/takashi.mp3
||core.windows.net/yaketsuku.mp3
||core.windows.net/haruto.js
||core.windows.net/itsuki.js
||core.windows.net*/js/leave.js
||core.windows.net*/js/mouse.js
||core.windows.net*/js/fuscn.js
||core.windows.net/media/chrm.mp3
||core.windows.net/js/full.js
||core.windows.net/media/webs.mp4
||core.windows.net/js/lvs.js
||core.windows.net/js/muse.js
||core.windows.net/js/script2.js
||core.windows.net/js/script3.js
||core.windows.net/js/script5.js
||core.windows.net/js/script6.js
||core.windows.net/js/script7.js
||core.windows.net/*/js/js5.js
||core.windows.net/*/js/js6.js
||core.windows.net/crypto-js.min.js
||ipwho.is^$xhr,domain=web.core.windows.net
||web.core.windows.net/beep.mp3
||web.core.windows.net/eng.mp3
||voicesforsocialjustice.store/hotjar.php
||web.core.windows.net/media/ados.mp3
||web.core.windows.net/media/msc.mp3
||vercel.app/js/esc.js
||vercel.app/js/flscn.js
||storage.googleapis.com/*/media/webs.mp4
||storage.googleapis.com/*/esc.js
||storage.googleapis.com/*/full.js
||storage.googleapis.com/*/lvs.js
||storage.googleapis.com/*/mouse.js
||storage.googleapis.com/*/muse.js
||storage.googleapis.com/*/noir.js
||storage.googleapis.com/*/script2.js
||storage.googleapis.com/*/script3.js
||storage.googleapis.com/*/script5.js
||storage.googleapis.com/*/script6.js
||storage.googleapis.com/*/script7.js
||azurewebsites.net/alertmicrosoft.mp3
||azureedge.net/*/esc.js
||azureedge.net/*/flscn.js
/text_tel.js$domain=app|dev|fit|me|page|site|github.io
||github.io/my-new-app/text.js$1p
/a0ler0tm0s.mp3$domain=dev|online|shop
||github.io/iossupport/$doc
||web.core.windows.net/vault/stack-vendor.mp3
||github.io/*/js/esc.js
||github.io/*/js/flscn.js
||github.io/*/media/beep.mp3
||azurefd.net/media/beep.mp3
||azurefd.net/fullscreen.js
||azurefd.net/js/esc.js
||azurefd.net/js/flscn.js
||azurefd.net/js/customone.js
||azurefd.net/js/customtwo.js
||azurefd.net/media/msc.mp3
||amazonaws.com/_Fm7-alert.mp3
||on-forge.com/win*/alert-en.wav
!
! https://github.com/uBlockOrigin/uAssets/issues/29718
z13.web.core.windows.net##+js(aeld, DOMContentLoaded, fullscreenEnabled)

! ClickFix
! https://urlscan.io/result/01988455-c1dc-758e-ad77-aed867027098/
! https://urlscan.io/result/01989b3c-4c33-716c-a270-179fa905579f/
/?js*&f=*&t=$xhr,redirect=noop.txt
/submit.php?i=*&t=$xhr
/^https:\/\/api\.[a-z]{2,}\.[a-z]{2,}\/\?[a-z]{2,3}=[0-9a-f]{32}$/$doc,match-case
://api.*/?zrs=$doc
://api.*/?zqs=$doc
! https://urlscan.io/result/0199e302-e034-76b8-8df7-4e03082f5ca7/
||bsc-testnet.bnbchain.org^$xhr
!
||xpoalswwkjddsljsy.com^$all

! https://www.reddit.com/r/uBlockOrigin/comments/12ng4o8/
! https://www.virustotal.com/gui/url/fe6b4bc7a258a92a97ad3216c85d159857ccd581df9b31a50a308ca49f967e34
! https://www.virustotal.com/gui/url/0d491da362effc08d2b026f32242046d174165e7995abbde6917ef7864a7556c
||cracksway.com^$all

! https://www.reddit.com/r/uBlockOrigin/comments/12r255v/gamingnewsanalystcom_badware/
! https://github.com/uBlockOrigin/uAssets/pull/17655
||gamingnewsanalyst.com^$all
||gamingdebates.com^$all

! https://www.reddit.com/r/uBlockOrigin/comments/12vi0jy/
! https://www.virustotal.com/gui/url/e705e6e86261849df50f80f32db2bb74abb1f69fd2681a370c5013be27c9daf0
! https://www.virustotal.com/gui/file/f1e859d99072e35f20e172d8458e3ea1baf8ba86c8c9e311a0debcd2acd5d0fc
||bonzi.link^$all

! https://github.com/uBlockOrigin/uAssets/issues/17947
! https://www.virustotal.com/gui/domain/pccdirect.site
! https://safeweb.norton.com/report/show?url=pccdirect.site
||pccdirect.site^$all

! https://github.com/uBlockOrigin/uAssets/issues/17960
! https://malwaretips.com/blogs/remove-template-search-newtab/
! https://www.virustotal.com/gui/domain/templatesearch.org
||templatesearch.org^$all

! https://www.reddit.com/r/uBlockOrigin/comments/13a95k2/
! https://www.virustotal.com/gui/url/dfe9c3f9bf87d003c70fecae8012b9fe4858a3922e6218b05a672fd3fe7f140e
! https://safeweb.norton.com/report/show?url=f-i-n-d.onlyfuns.win
! https://sitecheck.sucuri.net/results/f-i-n-d.onlyfuns.win
||f-i-n-d.onlyfuns.win^$all
! https://safeweb.norton.com/report/show?url=search-journal.onlyfuns.win
! https://urlscan.io/result/826671e6-126b-4113-82e3-24d96469bd93/
! https://sitecheck.sucuri.net/results/https/search-journal.onlyfuns.win/ydt
! https://www.virustotal.com/gui/domain/search-journal.onlyfuns.win
! https://www.virustotal.com/gui/domain/ftx.onlyfuns.win
||search-journal.onlyfuns.win^$all
||ftx.onlyfuns.win^$all
! https://www.virustotal.com/gui/domain/adultpics.wiki
||adultpics.wiki^$all

! https://github.com/uBlockOrigin/uAssets/issues/18103
! https://www.virustotal.com/gui/file/1f4f7b787ee329059e4de4487ba5c17c7c6ca3be95b72c9873fc9380632fa1f9/
! https://www.virustotal.com/gui/domain/d2r3dgsh5nr4kg.cloudfront.net
! https://www.virustotal.com/gui/domain/gamefabrique.com
! https://otx.alienvault.com/indicator/domain/gamefabrique.com
! https://opentip.kaspersky.com/gamefabrique.com
! https://safeweb.norton.com/report/show?url=gamefabrique.com
! https://www.urlvoid.com/scan/gamefabrique.com/
||gamefabrique.com^$all
||d2r3dgsh5nr4kg.cloudfront.net/installer/$all

! https://www.virustotal.com/gui/domain/mopiez.com
||mopiez.com^$all

! https://github.com/DandelionSprout/adfilt/discussions/779#discussioncomment-6298369
.com/api/users*^pii=&in=false^$doc
.com/api/users*^in=false&pii=$doc
.com/api/users*^in=false&token=$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/158317
.com/bot-captcha-1?h=$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/159825
/^https:\/\/[a-z]{5,7}\.[0-9a-z]{12}\.top\/[0-9a-f]{32}\/[0-9-a-f]{32}\/$/$doc,match-case,to=top
/\/[0-9a-f]{32}\/maq\/$/$doc,match-case,to=com|top
/antivirus/main/cleaner-default/*$doc

! Copycat and fake sites
! FitGirl Repacks - Official site: fitgirl-repacks.site
! https://old.reddit.com/r/FitGirlRepack/
! https://old.reddit.com/r/PiratedGames/comments/drlx3r/does_anyone_know_the_official_website_for_fitgirl/
! https://old.reddit.com/r/CrackWatch/comments/wl7nfb/dream_cycle_v209_release_fitgirl_repack_158_gb/?context=3
! https://github.com/uBlockOrigin/uAssets/issues/15085
! https://github.com/uBlockOrigin/uAssets/pull/15850
||fitgirl-repacks.*^$all,domain=~fitgirl-repacks.site,to=~fitgirl-repacks.site
||fitgirl-repack.*^$all,domain=~fitgirl-repacks.site
||fitgirlrepacks.*^$all,domain=~fitgirl-repacks.site
||fitgirlrepack.*^$all,domain=~fitgirl-repacks.site
||fitgirls-repack.*^$all,domain=~fitgirl-repacks.site
||fitgirl-repacks-site.org^$doc,domain=~fitgirl-repacks.site
! https://github.com/uBlockOrigin/uAssets/issues/18205
||fitgirlrepacksite.com^$all,domain=~fitgirl-repacks.site
! https://github.com/uBlockOrigin/uAssets/issues/18206
||fitgirl.cc^$all,domain=~fitgirl-repacks.site
! https://github.com/uBlockOrigin/uAssets/issues/21658
||fitgirlrepackz.*^$all,domain=~fitgirl-repacks.site
! https://github.com/uBlockOrigin/uAssets/pull/22532
||fitgirltorrent.*^$all,domain=~fitgirl-repacks.site
! Magisk manager - Official site: https://github.com/topjohnwu/Magisk
! https://xda-developers.com/psa-magiskmanager-com-not-official-website-magisk/
! https://forum.xda-developers.com/t/downloaded-a-fake-magisk.4581461/
! https://old.reddit.com/r/Android/comments/7r346t/psa_magiskmanagercom_is_not_the_official_website/
! https://github.com/topjohnwu/Magisk/issues/3435
! https://github.com/hagezi/dns-blocklists/issues/1744
||magiskmanager.com^$all
||magisk.me^$all
||magiskapp.com^$all
||magiskroot.com^$all
||magiskroot.net^$all
||magisks.com^$all
||themagisk.com^$all
||magiskzip.*^$all,domain=~magiskzip.com,to=~magiskzip.com
||magiskmodule.com^$all
! LibreTube - Official site: libretube.dev
! https://github.com/libre-tube/LibreTube/issues/4409
||libretube.*^$all,domain=~libretube.dev,to=~libretube.dev
||libretubeapk.com^$all,domain=~libretube.dev
! ReVanced - Official site: revanced.app
! https://old.reddit.com/r/revancedapp/comments/1327o38/list_of_fake_revanced_sites_download_sites/
! https://old.reddit.com/r/AfterVanced/comments/wf4ov1/the_raftervanced_faq_frequently_asked_questions/
! https://github.com/revanced/revanced-discussions/discussions/854#discussioncomment-4565731
! https://safeweb.norton.com/report/show?url=revanced.io
! https://sitecheck.sucuri.net/results/revanced.io
! https://github.com/uBlockOrigin/uAssets/pull/17469
! https://github.com/uBlockOrigin/uAssets/issues/18857
! https://github.com/uBlockOrigin/uAssets/pull/19580
! https://github.com/hagezi/dns-blocklists/issues/2288
||revanced.$all,from=~revanced.app,to=~revanced.app
||revancedapk.$all,domain=~revanced.app
||revancedapp.$all,domain=~revanced.app
||ytvancedpro.com^$all,domain=~revanced.app
||youtubevanced.$all,domain=~revanced.app
||youtuberevanced.*^$all,domain=~revanced.app
||revancedmusic.com^$all,domain=~revanced.app
||revancedyoutube.org^$all,domain=~revanced.app
||revancedextended.$all,domain=~revanced.app
||revanced-extended.com^$all,domain=~revanced.app
||ytrevanced.$all,domain=~revanced.app
||vanced-official.com^$all,domain=~revanced.app
||vanced.pro^$all,domain=~revanced.app
||vancedmanager.$all,domain=~revanced.app
||revancedapps.$all,domain=~revanced.app
! LuckyPatcher - Official site: luckypatchers.com
! https://old.reddit.com/r/luckypatcher/comments/rawq9f/what_is_the_official_website/
! https://old.reddit.com/r/luckypatcher/comments/aln5tj/official_download_for_lucky_patcher/
||luckypatcher.*^$all,domain=~luckypatchers.com
||luckypatchers.*^$all,domain=~luckypatchers.com,to=~luckypatchers.com
||luckypatcherwin.com^$all,domain=~luckypatchers.com
! Balena Etcher - Official site: etcher.balena.io
! https://forums.balena.io/t/counterfeit-etcher-websites/274606/5
||etcher.net^$all,domain=~etcher.balena.io
||etcher.download^$all,domain=~etcher.balena.io
||balenaetcher.$all,domain=~etcher.balena.io
! Vencord - Official site: vencord.dev
! https://github.com/uBlockOrigin/uAssets/pull/19359
! NewPipe - Official site: newpipe.net
! https://github.com/uBlockOrigin/uAssets/pull/22134
! https://github.com/TeamNewPipe/NewPipe/issues/539
||newpipe.*^$all,domain=~newpipe.net,to=~newpipe.net
! Z-Library - Official sites: singlelogin.se, singlelogin.re, z-library.se, zlibrary-global.se, go-to-zlibrary.se
! https://www.reddit.com/r/zlibrary/comments/16xtm67/if_you_cannot_download_any_books_then_youre_on/
! https://github.com/uBlockOrigin/uAssets/pull/22998
||z-lib.io^$all
||z-lib.id^$all
||zlibrary.to^$all
||zlibrary-global.com^$all
||zlib-official.com^$all
||z-library-proxy.com^$all
||go-to-zlibrary.com^$all
! ProtonGE - Official site: https://github.com/GloriousEggroll/proton-ge-custom
! https://github.com/GloriousEggroll/proton-ge-custom#myself-gloriouseggroll-and-this-project-proton-ge-are-not-affiliated-with-httpsprotongecom-that-is-a-spamfake-website-there-is-no-existing-website-for-proton-ge-other-than-this-github-repository-proton-ge-does-not-collect-any-user-data-what-so-ever-and-is-not-a-company-or-organization-of-any-type
||protonge.com^$all
! Bloxstrap - Official site: bloxstraplabs.com
! https://github.com/uBlockOrigin/uAssets/issues/24123
! https://github.com/uBlockOrigin/uAssets/pull/24408
! https://github.com/bloxstraplabs/bloxstrap/blob/main/README.md
||bloxstrap.*^$doc,domain=~bloxstraplabs.com,to=~bloxstrap.pizzaboxer.xyz

! https://github.com/DandelionSprout/adfilt/discussions/779#discussioncomment-7137675
||akyr3h9x5mb.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/20036
! https://tria.ge/231010-1rdl5sfg68/behavioral1
||s8bet.com^$doc
||imagebet.ph^$all
||googleeplay.com^$all
||mingvip.com^$all
||t89ll.com^$doc
||kbkb.bet^$doc
||04tips.com^$all
||cdn.jsdelivr.net/gh/cnmseo/LookMother$3p
||urjump.com^$doc
|http://playing.io/?inviteCode=1000631|$doc
|http://playing.io/?inviteCode=1000632|$doc
||ttt777.com^$doc
www.cambe.pr.gov.br##+js(noeval-if, tigervip2)

! https://tria.ge/231024-3lc5jace3w/behavioral1 & https://tria.ge/231024-3s7ygsbg39/behavioral1
! https://github.com/uBlockOrigin/uAssets/pull/20272
||newupdatesnow.com^$all
||thefinanceadvice.com^$all
||fralstamp-genglyric.icu^$all

! https://github.com/uBlockOrigin/uAssets/issues/20335
||ilil.in^$all

! https://github.com/uBlockOrigin/uAssets/issues/20400
||ets2.gr^$all

! https://github.com/uBlockOrigin/uAssets/pull/21315
! https://bbs.kafan.cn/thread-2258753-1-1.html
||chromegoogle.cn^$all

! Cryptocurrency Scams
||muskusa.com^$all
||sunperp.icu^$doc
||aster-dex.run^$doc
||optimism-lab.network^$doc
! https://github.com/uBlockOrigin/uAssets/issues/26056
||stage3-last.$doc,to=~edu|~gov
||stage2024.$doc,to=~edu|~gov
! https://github.com/uBlockOrigin/uAssets/issues/26174
||presale-friday.$doc,to=~edu|~gov
||sale-friday.$doc,to=~edu|~gov
||stage3sale.$doc,to=~edu|~gov
||stage3sale2024.$doc,to=~edu|~gov
||black-sales.$doc,to=~edu|~gov

! xai scams
! https://www.reddit.com/r/CryptoScams/comments/1h9yrl7/xai62f_presale_scam/
||xaiofficial.ai^$all

||0x00000000000.substack.com^$all
||etharticles.substack.com^$all
||publicationgroup.substack.com^$all
||teamproject.substack.com^$all
||tradestrategy.substack.com^$all
||uniproject.substack.com^$all
||web3projects.substack.com^$all
||webpublic.substack.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/22129
||primeleech.com^$all

! https://github.com/uBlockOrigin/uAssets/discussions/23094
! https://blog.sucuri.net/2024/02/web3-crypto-malware-angel-drainer.html
! https://www.virustotal.com/gui/url/2bf2e7500e2b15877f866b0a782436df8621b2c20f81e3d66f51e394f6ff6f30
/cachingjs/settings.js
/cachingjs/turboturbo.js
/config?key=6922a2c8-d1e9-43be-b201-749543d28fe1
/config?key=d35e161b-abb4-4949-b523-003165d250bb

! https://blog.sucuri.net/2023/08/from-google-dns-to-tech-support-scam-sites-unmasking-the-malware-trail.html
||dns.google/resolve?name=*.host-stats.io&type=txt|$xhr,3p

! https://blog.sucuri.net/2024/03/new-malware-campaign-found-exploiting-stored-xss-in-popup-builder-4-2-3.html
! https://www.virustotal.com/gui/domain/ttincoming.traveltraffic.cc/detection
! https://www.virustotal.com/gui/domain/host.cloudsonicwave.com
||traveltraffic.cc^$all
||cloudsonicwave.com^$all

! https://infosec.exchange/@InfobloxThreatIntel/111947476473623155
! https://malwaretips.com/blogs/re-captha-version-3-55-top/
||re-captha-version-$all
! https://github.com/uBlockOrigin/uAssets/issues/24944
||valid-check-tl-$all
! https://github.com/uBlockOrigin/uAssets/issues/25858
! https://www.virustotal.com/gui/url/346513820edf167da7ee220fef88802fcc6568b8c7d42802d6c47796a455abc2
! https://blog.sucuri.net/2024/05/mal-metrica-redirects-users-to-scam-sites.html
! http://teluguodu.com/om-bheem-bush-movie-review/ - example site
||psh-static.b-cdn.net^
||check-tl-$all
||tech4u.app^$all
.com/?news&s|$popup
||cloud.tnewstraffic.com^$all
||cache.cloudswiftcdn.com^$all
||cdn.metricastats.com^$all
||cloud.edgerapidcdn.com^$all
||content.gorapidcdn.com^$all
||content.streamfastcdn.com^$all
||fast.quickcontentnetwork.com^$all
||ga.cdzanalytics.com^$all
||gll.metricaga.com^$all
||host.gsslcloud.com^$all
||metrics.gocloudmaps.com^$all
||secure.gdcstatic.com^$all
||secure.globalultracdn.com^$all
||static.rapidglobalorbit.com^$all
||synd.edgecdnc.com^$all
||syndication.gcdnanalytics.com^$all
! https://www.reddit.com/r/uBlockOrigin/comments/1cane2z/clients_website_is_getting_blocked/l0tvbkp/
||mygeomanager.org^$all
||livedashboardkit.info^$all
/^https:\/\/[a-z]{10,}\.[a-z]{3,4}\/(?:engine|track)-[a-f0-9]{8}\.js$/$script,3p,to=~edu|~gov,header=vary:/^referer\,accept-encoding/i

! https://securelist.com/trojanized-text-editor-apps/112167/
! https://www.virustotal.com/gui/url/dce13fec61cd1b81b55c8d126b99266efbb6166d1a0bba02d4b8482ed53401b1
||vnote-*.myqcloud.com^$all

! phishing
||clickhereecraigslist.tripod.com^$all
||mymokki.ru^$all
||socgeneralist.firebaseapp.com^$all
||testra*-covid.weebly.com^$all
||telus.signup.clik2pay.com^$all
||mercado-livre.produtos.usacomment.com^$all
||bitkub.onrender.com^$all
||adguardvpnnew.biz^$all
||flow.page/foxhills.co.uk^$all
||jemi.so/correo-24-ar^$all
! https://infosec.exchange/@urldna/112143355675099806
! https://www.virustotal.com/gui/url/38ad38ba67efdd42656b489e4df678ee065cad109cd1c9dbacf4632d356250d9
/^https:\/\/vietg[a-z]v[0-9]*\.cc\//$doc,to=cc
! https://infosec.exchange/@urldna/112471179848866488
||codeanyapp.com/neta/*/pay-method.php$doc
! https://infosec.exchange/@urldna/112467877238803859
||mybluehost.me/*Recibir_paquete.php$doc
! https://infosec.exchange/@urldna/112511051868588218
||codeanyapp.com/klarna/$doc
! https://infosec.exchange/@urldna/112551867657605910
||mybluehost.me/*/dir/ca/pay/$doc
! https://urldna.io/scan/66a7ef78c6cd731d9e58537d
! https://www.virustotal.com/gui/url/56f91ca466c57869495ae334a9cf3c9e783adaca073f3c9c3ea2c79e4eb34659
||pub-*.r2.dev/gsecondcheck.html^$doc
! https://www.virustotal.com/gui/url/03b24f614a52c8027b4e82187175cafec7914b2f1b36e1f8ecf1a34ef72f5b7d
||uwelldeutschland.com^$all
! https://urldna.io/scan/672f9abd700a5d3457075fca
! https://www.virustotal.com/gui/url/ecbf475713f97228a59e6e5e79b9ba9609a09c22a1f5dedcd5c16d25f96eb07b
||user.fm/files/*/AbsaOnlinePop.html^$doc
! https://urldna.io/scan/67324b5a3803a830facf48a3
! https://www.virustotal.com/gui/url/abffa191cb33c38b1f9d5122904b940a7363a665c8ccee108aba6bf28549f497
||user.fm/files/*/ProofOfPayment.HTML^$doc
! https://www.virustotal.com/gui/url/6f952ec0d0f90125a00e86bd4e4597558f5c4cbdbdac197d715476ddb423b15a
/^https?:\/\/server\.[a-z0-9]{4}\.com\/invite\/\d+\b/$doc,match-case,to=com
! https://www.virustotal.com/gui/url/9e831405bb6fa517e0f6a8108bebf9feb0bd1a7c48684615aa34f558fd6bacc3
! https://urldna.io/scan/677eac1ec065f0f7026d1acc
/^https:\/\/[a-z0-9]{3,}\.[a-z]{8,10}\.ru\/[a-zA-Z0-9]{6,8}\/#[A-Z][a-z]{5,}@[a-z]+\.com$/$doc,match-case,to=ru
/t2dolalrwe/*$doc
##html[lang] > body:not([class]):not([id]):not([style]) > div.background-container > div.container > div.captcha-box
! https://urldna.io/scan/6785470b9c7014f0037a59ef
! https://www.virustotal.com/gui/url/3e3980788d2f902a650614287373abff2e8a52d707e2eb18dd56b1398922b45f
||melbournedistillery.com^$all
! https://urldna.io/scan/6787ea54ff48f1c3edd44b8d
! https://www.virustotal.com/gui/url/9362994a4404b8b59c426bb8a4637c10a17b298283aa728233c02ca5f48b9ca6
||koenig.cx^$all,to=~dropbox.com
! https://urldna.io/scan/679555cbdaf027101ea6a79f
! https://www.virustotal.com/gui/url/ee23a4af12effb7c10d2708f5d91541de414f547ce10ac39ad91c147fc1a9976
||eden.com.mx/support/juno/$all
! https://urldna.io/scan/67ac1e22fe8ca5effcab48a2
! https://www.virustotal.com/gui/url/2cf961c2a0441b4015603b2657d2db13692dc21008f1a78463f15a4cd4d558be
||emta-ee-authst.firebaseapp.com^$all
||firebaseapp.com/Autentimine^$doc
! https://urldna.io/scan/68182bea3b7750000bd8ed3f
! https://www.virustotal.com/gui/url/55c5ffd59c444ba589877c477521ae2d28ef0f98daef58a0b3ac2456b068d332
||dailyprizehub.com^$all
! https://urldna.io/scan/6810cfa63b7750001041d5a1
! https://www.virustotal.com/gui/url/431593176d4b5b9c6869ed9dd1809a08cbdb3f8687437d149719d774b532de77
||singtelmyconnect.com^$all
! https://www.virustotal.com/gui/url/2fc292fa96412fa0b8dddcafd6f86408b74dc26c12054f302268698ff0335a6f
||pormota-coop-ee.com^$all
! https://www.virustotal.com/gui/url/38c95e309babdbc72adc01a57586e088bf0f097098b6b4eaa271fddea4e022eb
/^https?:\/\/[a-z0-9]{6,7}\.lat\/[A-Z0-9]{5}$/$doc,match-case,to=lat

! viva sorte - https://vivasorteoficial.com.br/
||viva-asorte.com^$all
||sorteiosbrasil.netlify.app^$all

! chase.com
||unclepigva.com^$all
! https://www.virustotal.com/gui/url/aa63af97991d0fdce1c1381bc8c652932c396d7ff90505f6c9b2a78d1a4c8f3d
||mywebsitetransfer.com/chase/auth^$doc
! https://www.virustotal.com/gui/url/1fcacb1bc55a4a1e6e47b11afb1c0b0f165ea9d6ba3a8a558028e4571ecef8a4
||gks-interiors.co.uk/js/ch.html$all

! ameli.fr
! https://urldna.io/scan/673d518d1baadd13b30c1a19
! https://www.virustotal.com/gui/url/0b8c995ec706e68efcf33f1b7c567423285c29d0d3bc5b59f606da0735097e57
||fgt.ive.mybluehost.me^$doc
||mybluehost.me/*/Ameli/$doc

! https://urldna.io/scan/6734b1f69ee995c0b18b4e17
! https://www.virustotal.com/gui/url/fec16443e3fdb3c4112230fd5271044f3eea542efa85be26b8c8c5f5ba7202c3
||rampostsouthafrican-*.codeanyapp.com^$all
||codeanyapp.com/southafrica/*/PAYU^$doc

! wetransfer
||vvetransfer-lo-web-online.glitch.me^$all
! https://www.virustotal.com/gui/url/2dc456580d55d86c4b131ecc5120af4d79439ac3f9be066ce2c2440e4af96581
||vercel.app/magi/olde/saac-wetr-magi.html^$doc
||download-wetransfer-*.vercel.app^$doc
! https://www.virustotal.com/gui/url/9b40e92a4a7347a20f1d85bfe0e7e42622d08878d521db092c66ef9554eac83b
||specific-sample-orderline.vercel.app^$all
! https://www.virustotal.com/gui/url/1adb59400d7153cc8cc5cf42cf25d03fb21f00c04b1bcb888acc526a10640f84
||purring-wood-magnolia.glitch.me^$all
! https://urldna.io/scan/6734cdbe32353732f75caf89
! https://www.virustotal.com/gui/url/f31f3ff52efb6f2ec05f8cdcfd2fbbbe2e5e4fafb370031549d345c586afa947
||bingkasprogram-*.xdbng.com^$all

! https://urldna.io/scan/6790f2df1cf105cd289789cf
! https://www.virustotal.com/gui/url/94f712e987d95edde2259f4f279ff9b3eca8deace265ad25f60f3dbc4387d5f1
||multilocal-leboncoin.com^$all

! linkedin
! https://www.virustotal.com/gui/url/0de3c62f4908d543d129c280ede7df7ad39cb8bdc69a7781aceab7bd9916cacf
||lnkdeka.standard.*.oortech.com^$doc
||oortech.com/loginfromSignIn.pdf-shtml^$doc
! https://www.virustotal.com/gui/url/bfab94c8fdfaab7bd440a6fb9e6a402dca1e7c70bcc0e33c9a9f526f17f1422e
||decorartealuminios.com.br/*/AZ-ULTIMATE-LINKEDIN/$all

! yahoo
! https://www.virustotal.com/gui/url/9fe200d8d5cdd921d387cb91a575532aa256fa85371c62b75c0058938cbcf225
||pages.dev/account/js-reporting^$doc
||iwq.pages.dev^$all
||jss.pages.dev^$all

! webmail
||formspark.rongviet.com.vn^$all
||webmailrupdatekorea.firebaseapp.com^$all
||benpsignin-portal.webflow.io^$all
||mail-cytanet.pages.dev^$all
||webmailupdating.wixsite.com^$all
! https://www.virustotal.com/gui/url/fe60b5ca89346121b165aaaaf2b0305dee777a8aa90c87e3eb656c914ae04e59
||bequettehomes.com/ahost/$all
! https://www.virustotal.com/gui/url/61cc08602b6328ce07535da1068dfc0f3ddd667c0e77849eadcd8ae33edad516
/^https://[a-z]{40,}\.pages\.dev\//$doc,to=pages.dev
! https://www.virustotal.com/gui/url/060b5ecd27e1ea35fa0718a87e73c270ac3c7310ddc4a7aef81b70bb7b89908a
||resisted-amusing-driver.glitch.me^$all
||glitch.me/public/index_CNC.html^$doc
! https://urldna.io/scan/6744075cddfe5e2d403906d8
! https://www.virustotal.com/gui/url/52781cf069e36bf584b588626bdc26e045c1acaf97d0990976ce3ecafe891f93
||r2.dev/Zimbra*.html^$doc
! https://www.virustotal.com/gui/url/db592df8b8bc2b093e6087e6e14f6bfbfe121d6192fdce5f112cff14b294275b
/\/accounts\/19[56]\d{3}\/messages\/\d{1,2}\/clicks\/\d{4,5}\/\d{1,2}\b/$doc,match-case

! webmail.bell.net
||bellsecuredloginfom-net.vercel.app^$all
||hootbio.com/bellmail$all

! webmail.shaw.ca
||shawupdatingservic.wixstudio.io^$all
||shawmailboxservice4.wixsite.com^$all

! ups.com
! https://www.virustotal.com/gui/url/ef9755fcb211a668986b9afc5187577c92fb8c8bf62057bf9d0b59333827a35a
||mybluehost.me/Versan/UPS/$doc
! https://www.virustotal.com/gui/url/491f01fc6219c7c86ab857fe64e7b1d1ae815a7f796cc03cdb2866784ea16022
||preprod.exclusifparis.com/modules/deleteordersfree/$all

! ee.co.uk
/^https:\/\/ee(?:-[a-z]{5,}){1,2}\.web\.app\//$doc,to=web.app|~ee.co.uk
/^https:\/\/ee(?:-[a-z]{5,}){1,2}\.firebaseapp\.com\//$doc,to=firebaseapp.com|~ee.co.uk
||my-ee-*.web.app^$doc
||ee-network.web.app^$all
||ee-billing-recovery.web.app^$all
||ee-payment-issue.web.app^$all
||my-ee-web.web.app^$all
||my-ee-details.web.app^$all
||my-info-ee.web.app^$all
||ee-payment-method-issue.firebaseapp.com^$all
||ee-pending-payment.firebaseapp.com^$all

! bpost.be
||pakket-bpost-be.web.app^$all
! https://urldna.io/scan/66b4cf94823078d8ed5a58d3
! https://www.virustotal.com/gui/url/07643f94058c79d4db0d2a4a5a318e0eca61d62b877d82b790eda32557e1e34a
||crpostbelnk.glitch.me^$all

! intesasanpaolo.com
! https://urldna.io/scan/66a0d0d33b59511de9602564
! https://www.virustotal.com/gui/url/e9af3245273512c1cff602c7f7155b0f02559d3ea71eb1ef71050987ab097a08
! https://www.virustotal.com/gui/url/4b7c8214397f9b60c29d150b5de5f51c00d9ce1a7aa0975d3ab23d8151fbc427
||mybluehost.me/*intesasanpaolo/$doc
! https://www.virustotal.com/gui/url/2c550d7edd2e09bda175859925c4a54491014bd3a6088eb20c6e8f6af8bc1d22
||mybluehost.me/*/itx/it/conto/$doc

! jio
! https://www.virustotal.com/gui/url/04af5fcfd24d55b81b2c1b6559a04fb30e7d12a11d0a83a280641d51cfb28572
! https://www.virustotal.com/gui/url/20fefdda4be34a69e4d12b7335bec5c512f4413e0834b461ff7195486558d001
/\/recharge\d?\.(?:html|php)\?mobile=\d{10}\b/$doc,match-case,to=~jio.com|~edu|~gov
! https://www.virustotal.com/gui/url/b759b9b84ad608c657b38f5df4ef20d316bfd542abba02fd18d3d0503132ca2c
/offer.php?rechargenumber=$doc,to=~jio.com|~edu|~gov
! https://www.virustotal.com/gui/url/4e4606f961466924894ce9d9dc3d41a151ff9dbaee68143b77f3a1db6a7ca972
/offer.html?rechargenumber=$doc,to=~jio.com|~edu|~gov
! https://urldna.io/scan/66a0d0c94f0acec29ff98592
! https://www.virustotal.com/gui/url/5208705dcb34cb93ae64eb4b4f11d20610a50cf6bf60c0190a67eac6a3a17355
/\/offer\.(?:html|php)\?(?:mobile|rechargenumber)=\d{10}\b/$doc,match-case,to=~jio.com|~edu|~gov

! apple
||dbs.applerewardsstore.com^$all
||pulseapp-24x7-service.github.io^$all
||rbchidraulica.com.br/info/verify^$all
! https://www.virustotal.com/gui/url/52cb5de2af70a3d65f41e0b63911d971ee27634d69160988ed7c8235c55c79e8
! https://www.virustotal.com/gui/url/dd2190d5505e9f0b1a79583c85dee20f6214b8bf614bf2a65187b1c9b5bd01df
/isignesp.php^$doc,to=~edu|~gov|~apple.com
! https://www.virustotal.com/gui/url/c9f138a870349b6c5e050bb4122ddf029ce78f1d701399e483656c0d89d2da70
/icloud2022-esp.php^$doc,to=~edu|~gov|~apple.com
! https://urldna.io/scan/6744068e8007f7be43de908c
! https://www.virustotal.com/gui/url/c2f79189f12bde8e6f32e61a4b5d7bf1948f04c8eab5a8a11df8c546b7bda019
||apples-24x7-*.pages.dev^$doc
||apples-24x7-customer-help-line.pages.dev^$all
||apples-24x7-help.pages.dev^$all
! https://www.virustotal.com/gui/url/cbc003929fddfa95032804f8ec9a850e88081ba6ba196c8df9885456e919f9f9
! https://www.virustotal.com/gui/url/82b10b329dc4296787ff7d6a1630a4ffb775d2335033cf4dcd0fb413173b2268
||icloud.apple-*.cn^$doc
/^https?:\/\/icloud\.apple\.[a-z]{6,}\.[a-z]+/$doc,to=co|cn

! ourtime
||login-ourtime.members-datings.workers.dev^$all
||ourtime-assist.members-authenticated.workers.dev^$all
||chat.voice-datings.workers.dev^$all
! https://www.virustotal.com/gui/url/8caad65d38a5f6df0e322dad6e4576fe0f42d2a9c4a4672d5959f5c53cb59632
||profile-ourtime.*.workers.dev^$doc
! https://www.virustotal.com/gui/url/ef9755fcb211a668986b9afc5187577c92fb8c8bf62057bf9d0b59333827a35a
/^https:\/\/ourtime\.[a-z]+-[a-z]+\.workers\.dev\//$doc,to=workers.dev|~ourtime.com
! https://www.virustotal.com/gui/url/82d637d6f547003b3e964cb24cbec41b6e811fdf9207056ee83d2121d60613ca
||voice-ourtime.*.workers.dev^$doc
/^https:\/\/(?:[-a-z0-9]+\.){2}workers\.dev\/v3\/(?:forgotpassword|security|signup)\b/$doc,to=workers.dev

! https://www.virustotal.com/gui/url/8fd29e49e539b6bab6c0a55c1d15321b7df02367fe1a9049c94fbf0b3aea1af8
! https://www.virustotal.com/gui/url/bd11af06bb1ed081ae7b373bd79e5601c17e0664be6856d922a92f771b24aee0
! https://github.com/uBlockOrigin/uAssets/issues/24829
/\/wap\/api\/(?:activity\/)?[a-zA-Z]+![-_a-zA-Z]+\.action\?/$xhr,1p,strict1p,match-case
! https://www.reddit.com/r/Scams/comments/1gg7xif/tiktok_fake_link_i_am_so_anxious_please_help_me/
! https://www.virustotal.com/gui/url/61c96fcfa32698a98f42c8ab0807a22e37d6722087fd478dfb2de71d3ebdbfa9
||wetching.ru^$doc,frame

! made-in-china.com
! https://infosec.exchange/@urldna/112553754973872125
||griffithdds.com/*/madeinchina.com/$all
! https://urldna.io/scan/6696ed798f10cc579169ad67
! https://www.virustotal.com/gui/url/28ebe44abd659de808f562259dd899943c574ff82716856bfb76d218f64531b7
||oortech.com/mic.shtml^$doc
! https://urldna.io/scan/674551863f64e80bf440d336
! https://www.virustotal.com/gui/url/ff4ccfb2b96d99a3cc1d783c835e7a02c5c2f680e93f7c93db403459cd651e22
||r2.dev/made-in-china.com/$doc

! fedex
! https://urldna.io/scan/6810c9343b7750000d4c15c8
! https://www.virustotal.com/gui/url/418c72ee22d7191d7561ed8c669e780eae860b6719d2f5fd69726d9f1a1d29c0
||e-serviceparts.info^$all

! booking.com
! https://www.virustotal.com/gui/url/5fef6bafac49c64dc9e0ca06339967aa2ba2936745a57ca2c47aa3606def1707
/^https:\/\/(?:[a-z]+\.)?hotel-(?:id)?\d{3,8}\.eu\//$doc,to=eu|~booking.com
/^https:\/\/(?:[a-z]+\.)?hotel-(?:id)?\d{3,8}\.com\//$doc,to=com|~booking.com
! https://www.virustotal.com/gui/url/5e3b5d680bc6c90219ddbb2524f7d6d8a58716399b4da91a06c027774d908e81
/^https:\/\/hotels-\d{6}\.eu\//$doc,to=eu|~booking.com
! https://urldna.io/scan/6692504801266863891e9011
! https://www.virustotal.com/gui/url/128f76d5853dacd7b1fac73d64a4078adde3c900b65bc23dc15bad5f629b446b
/^https:\/\/booking\.[a-z]{3,}-(?:id)?\d{3,8}\.eu\//$doc,to=eu|~booking.com
! https://www.virustotal.com/gui/url/73768b7c9bb2d042d06217e7526cc70608bd27ee32faf9df8e6fb251923b0789
/^https:\/\/booking(-[a-z]{3,}){2}\.(?:baby|lat|lol|xyz)\//$doc,to=baby|lat|lol|xyz|~booking.com
! https://www.reddit.com/r/Scams/comments/1mhrvoa/eu_bookingcom_card_verification_scam/
! https://www.virustotal.com/gui/url/0cf885e476e07ad21cad52d74e9ec2527dbcd5b39f40a7a0b658c5182b1cf142
||cardverify*-booking.com^$all

! airbnb
||air-bnb.check-$doc
||air.bnb-id*.com^$all,to=~airbnb.com
||navi-airbnb.vercel.app^$all
||property-rental-seven.vercel.app^$all
||airbnb-pi-three.vercel.app^$all
! https://www.virustotal.com/gui/url/8cdc4c3ca9313a9cdd27dc03d855105f37aebe9abac62265ea45993121cf7b31
! https://www.virustotal.com/gui/url/235683db58069cf98a6e1aa5719dd5cb941d669225f828b875f21d54dd3ad1c6
! https://www.virustotal.com/gui/url/ca2d5df746dc848767d695b04a59af02042fd44ac1829daa4df2da6acdf9834e
/^https?:\/\/([a-z]{4,}\.)?support-\d{1,2}\.ru\//$doc,to=ru

! labanquepostale
||group-postban.firebaseapp.com^$all
||oasisministries.com/fr/postale/$all
! https://www.virustotal.com/gui/url/998365385e6077a4903db356ff23917dc302baf8850fe7a5aab7d48b9f14f65d
||lidarusa.com/*/Bpostale2022/$all
! https://www.virustotal.com/gui/url/e6ac5831557ccbbfd3de207e19710292f62d33b19b6ffe8ad275844dc0cc54dc
||plesk.page/*--_--$doc
! https://www.virustotal.com/gui/url/9c2f302d6b000107ca771ce68c35e4c1c7aa6afb6e00a17b28417c515aaab75a
||vantechdns.com/bpnew/$doc
! https://urldna.io/scan/6746aa4330c5ac705f5b6e7d
! https://www.virustotal.com/gui/url/7c2be5f501582239a5f1b8015617fbcf2fde2a5f3d09b91798c59d69ae07f269
||monamedia.net/CerticodePlus/DSP2/$doc

! adobe
||digitalprocurements.com^$all
||adobecloud5xpo.yolasite.com^$all
! https://www.virustotal.com/gui/url/a952ec269dd32deeb54f19f9b0b1f70d4e1cd72a176c1adc02dbdeab37eb0024
||socalthesyndicate.com/*/adobefud/$all
! https://www.virustotal.com/gui/url/770ffdec12527b6af696bf4a7dde6fcaa484544ef932c438964f013b4a7c673f
||pub-*.r2.dev/adobe2024.html^$doc
! https://www.virustotal.com/gui/url/d894e00a04a1372908b00bd1e710a5297e9a1436f6ec198baca25e9a5789f08e
||adobepd*.glitch.me^$doc
! https://www.virustotal.com/gui/url/6294a9f79f81d7d9ebdcaa85273789747ee60201d9731b89a608346631408b5b
||doc*-order*adobe.glitch.me^$doc
||glitch.me/adobe-auto*.html^$doc
! https://www.virustotal.com/gui/url/e6663516cf34ff162f6c4a5d049c365ee56ab737978fd325a29088850eaa8b0e
||facture-free.com/Adobeverapdf/$all
! https://urldna.io/scan/674558fa3f64e80bf440d485
! https://www.virustotal.com/gui/url/9da22832e59d2b108d0ad6787ced43fe6cb0568e8818eaa504bfb7f73cfc7e2c
||mytemp.website/safetyfileaccess.htm^$doc

! netflix
||vstergioul.sites.sch.gr^$all
||netflix.avdhoothadke.com^$all
! https://urldna.io/scan/6675f810a0a139921a350afd
! https://www.virustotal.com/gui/url/9377fb4aca4525f2725505be1fa956898fe427deb060f273f48ed5f7fe05684b
||mybluehost.me/*/netflix/net/login.php$doc
! https://www.virustotal.com/gui/url/f4d836eca8bb2ce50a96dac7d031502d47c0a6ce85af040b911bf9883fbe157a
||mybluehost.me/watch/a/flix/$doc
! https://www.virustotal.com/gui/url/2dbe6c816822038f39d8d15d47d8bda7ec6f1ae753e2437d3b184b258e17cb7b
||ija.xwi.mybluehost.me^$all
||mybluehost.me/ntcz/$doc
! https://urldna.io/scan/66789b18c766226ae8d6e3ee
! https://www.virustotal.com/gui/url/30bc6d0ab3c42c34c0317e50e0b24db16a8996394bb39f6c959464bc4557fbb3
||floridavacationrentalsbyowners.com/*/Info/page_settings/account.php^$all
! https://www.virustotal.com/gui/url/d45b4424eb572378e0f5546d86502ac626c12404c5b2169e60088d1be6433031
||loginnetflixleiojfioje.blogspot.$all
! https://www.virustotal.com/gui/url/84ac274bbdbd4a67fe10e9bcb47e0f0d64e576888be06536b10d38b049acc2df
||xsph.ru/*/netfi2k/$doc
! https://www.virustotal.com/gui/url/14e936aa825143107ba0c568bab09fa7bcd89e4051ed8530d72808376875fdac
||bulksms.services/*/NetFlxinc/$doc
||bulksms.services/NetFxs/$all
! https://www.virustotal.com/gui/url/d6e9c698c28752894d1dc11a3b4cc9b0ba64976dbec9580abadbf588df977de1
||cpanel12wh.bkk1.cloud.z.com^$all
! https://www.virustotal.com/gui/url/4813b68055aa2c9808ac33189800add6be4989a96fd2266d0226384cdcb1aa94
||codeanyapp.com/NTFLX/$doc

! allegro
||allegro-reinigung.de^$all
! https://www.virustotal.com/gui/url/543264167d2f97257f37e2cb9ae47e5e66fd8016b22bd0382163b4e589103eea
||allegrolokalnie.pl-$doc
||allegrolokalnie.*.shop^$doc

! rackspace
||racks.pages.dev^$all
! https://infosec.exchange/@urldna/112506923054085191
||rackweb-----support*.weebly.com^$all

! dana
||danakagetrsm.vercel.app^$all
||layanan-app.com^$all
||dana-indone*.id^$doc,to=my.id|web.id|~dana.id
! biz.id
-dna-log-*.biz.id^$doc,to=biz.id|~dana.id
! my.id
||pemesanan*.glowz.my.id^$doc
! https://www.virustotal.com/gui/url/c48b20f8825ce00c8ab0ad828ccbc3a587013eccd08f2ce7c45ec4f66e73cc7d
||claiim-hadiahh-danax-$all,to=~dana.id

! orange.fr
||orange53.yolasite.com^$all
||dev-7614646544.pantheonsite.io^$all
||smsmmsernorepls.wixsite.com^$all
||orange234.wixsite.com^$all
||exbtengineers.com/o/$all
! https://infosec.exchange/@urldna/112456905938157006
||servicemailorange25.wixsite.com^$all
! https://infosec.exchange/@urldna/112467287033433289
||assistancesosh.wixsite.com^$all
! https://www.virustotal.com/gui/url/a667c0159708b76fce759d1b9f8230d44c1db8bbff82ea62e170df08f5673d4b
/or/.espace-.client/(;authentication.htm^$doc,to=~orange.fr
! https://www.virustotal.com/gui/url/f7a5efd0b25ad492328edf9bff729a32fafc839554c6b5de2bb0e64307667534
||tw1.ru/Orange/$doc
! https://www.virustotal.com/gui/url/be4cef199b445a60996045837cf7867666318e2b547fdb5f76d3b20aee91f2a0
||messagerie*.godaddysites.com^$doc
||messagerie*.wixsite.com^$doc
||messagerie*.yolasite.com^$doc
! https://www.virustotal.com/gui/url/798cb44c90d1ecc992f9ec37fafa451cddbdbd1a030284aff63c923a9394809e
||app.vision6.com/em/message/email/$all
! https://www.virustotal.com/gui/url/3de6552df663c8ac07fa2e5ea111627d27de960a8c8d185ff0a24d72d0c494da
||payer-ma-acture-*.mystrikingly.com^$all
! https://www.virustotal.com/gui/url/ab73890769129e9638adc3c972d882cd939a3beef82cf678459885f0e982d1d3
||orange-connexion*.godaddysites.com^$all

! amazon
||amazon-*.shop^$doc
||amazon8898.com^$all
||ecommrce-web-amazon.netlify.app^$all
||etisalat-amazonprime.com^$all
! https://infosec.exchange/@urldna/112483094476417201
||mybluehost.me/wp-admin/amz/$doc
! https://www.virustotal.com/gui/url/b495f4257b9f677ea7ec4bfb43469c70a38323aafe741885e43c2b1ca584ba6f
||mytemp.website/amazon-prime-video-com-br/$doc
! https://www.virustotal.com/gui/url/86279ddc548eead6c227e6d493e9cfcf4af0b28ccceae50c2f6420542a8d6fe7
||adswip.com^$all
! https://www.virustotal.com/gui/url/53009a72bcf3a35d6ae8ba145928d964252e7f83e29ab4f80d1165bb9af1831b
||cs-portalintranet.com/pf/$doc
! https://urldna.io/scan/6730b06c22a140cea757d590
! https://www.virustotal.com/gui/url/d8c96426d3a4323f10d8f051e3af8f1a7d60eecb91ab9b1982f45b611252f3b1
||sites.google.com/mwhite55.appquestss.com/$doc
! https://urldna.io/scan/67380f4d415af7ad29e182e7
! https://www.virustotal.com/gui/url/cb24d223760a74a13a95eb93802ac2dba5377f99a40fdb4110ecff3737473f5d
||orders-processed.com^$all
! https://urldna.io/scan/6827b7f03b77500009a52ccb
! https://www.virustotal.com/gui/url/3b0800c285140f91713f445d8757a39cc41f196f8b035ff54f2eeb5b463d2d92
||reviewstudio.com/-/en/gp/mas/your-account/$doc

! ebay
! https://www.reddit.com/r/Scams/comments/1cux08b/whatsapp_telegram_instagram_work_from_home_posts/
||51eabay.com^$all
! https://www.virustotal.com/gui/url/8b2c822dc9c9130367597b14aa848cfacdd6022ad474c0af8c244856e30ee6ae
||ebaydw.$all,to=ebaydw.cc|ebaydw.com
! https://www.virustotal.com/gui/url/9f1eac2069c48d297e1f284ede655f9d7b8f4d4b5aec91d934147db7d9ec4e16
||pages.dev/errors/validateCaptcha^$doc

! alibaba
||hologramid.cn^$all
||jybelinda.com^$all
! https://www.virustotal.com/gui/url/1649712cd78f28d5660fbf0d0de7d475f8cd51105caac04b3b521ecd850234a1
||vetsinthecity.me/*/Alibaba/$doc
! https://urldna.io/scan/6734c98f32353732f75caebe
! https://www.virustotal.com/gui/url/8f2575c66072c227f8e1a60a422e5ff861903bb97f28fb5e3229fa3ec204ae7a
||sanpelmaquinas.com.br^$all
! https://urldna.io/scan/673d3e2485f8a9a88ee40359
! https://www.virustotal.com/gui/url/9e3d8dd56e7c3938332d2f8e74f8a9f31904fcfa1f452772ad4ce91b36d1b28f
||molekinha.com.br/*/alibaba.com/$doc
/alibaba.com/passport.alibaba.com/*$doc,to=~alibaba.com

! AT&T
||wixsite.com/att-support/$doc
||diwapa3051.wixsite.com^$all
||idhnochalter.wixsite.com^$all
||cajewar736.wixsite.com^$all
||loginaccount6.wixsite.com^$all
||ruthah9.wixsite.com^$all
||iirrrrrrii.wixsite.com^$all
||ewueuweudsjdjsdjjd.weeblysite.com^$all
||maiil-myatt.weeblysite.com^$all
||attvip.mx^$all
||olive121407.studio.site^$all
||at-t-admin.daftpage.com^$all
||keepo.io/loginatt/$all
||dlhessell.wixsite.com/att-support/$all
||bio.site/atttt^$all
! https://www.virustotal.com/gui/url/b78d7c493e891ae1dbc5b9ea30d22c50792b6d5a55104e33f5ba37e78ab658a1
||dones9.wixsite.com^$all
! https://infosec.exchange/@urldna/112465871317727388
||alisongaudino992.wixsite.com^$all
! https://infosec.exchange/@urldna/112564843620859575
||deenveerww.wixsite.com^$all
! https://urldna.io/scan/6693a1b55395ffdd02f65177
! https://www.virustotal.com/gui/url/b8064a06e570bfccdd2a896b02734c2282e5e0d51ebd0b6324c694d87b57b7e8
||att5h6.wixsite.com^$all
! https://urldna.io/scan/673ea1444fe8fdf8db4e9294
! https://www.virustotal.com/gui/url/f94b29d8e5114772c3ac5717d625c57295232b759022b97170cb21d1c51cae92
||attonlineservice*.wixstudio.com^$all
! https://urldna.io/scan/669ae204eaef0a7aabce0e9b
! https://www.virustotal.com/gui/url/1011eb8688635267bf06cc2b5783d0a01cbeafb99dbf483c2101e4375061d56e
||wixstudio.io/mysiteattmail940940^$doc
! https://www.virustotal.com/gui/url/8b95f575d0f421cbd9710ad5047527b048ca3bc2cedc6ba85718832f2dcd5438
||f.digital-*.com/igit/$doc
! https://urldna.io/scan/66f3c4afbc383e66ff108ce9
! https://www.virustotal.com/gui/url/6f610568e5af6a3841ade330487906294e9895cd1a17dd0ff428c2a6258ae1bc
||currentlyatt*.weebly.com^$all
! https://www.virustotal.com/gui/url/2ec68ebdc97db155bd29a90d948a1223e9514bb911e91c9e512436ccffabd7e7
||currentlymail*.weebly.com^$all
! https://www.virustotal.com/gui/url/590cfe4f5322e46e1a5db126c1eb4591ddb6fa796fd0f4ed939af5757c86d442
||attmailservice*.weebly.com^$all
! https://urldna.io/scan/678bdf428f2d6f01e81e41e3
! https://www.virustotal.com/gui/url/a4fb0e7b9d9d645300b649e9ad11d36bc2040e0e29fe6e124f8188f241e8bd71
||att-currently-*.weeblysite.com^$all
! https://urldna.io/scan/673e8ad4962aac12d27309a9
! https://www.virustotal.com/gui/url/79485aada1c4e81b7f9282623813436167f110cd09ab9d11b65b6f18133f6b89
||dropbox.com/*/AT-T-YAHOO-MAIL.paper^$doc
! https://www.virustotal.com/gui/url/41c77b844c6c74eae22d614b7f9c6f3ced3fe11f9603a41731d02fc3bb26fc77
||2025*maintenance.weebly.com^$doc
! https://urldna.io/scan/67a0f6a986906883adfc8aaa
! https://www.virustotal.com/gui/url/ff993f76a74c8f64c70e9aaa32583fc2bedca6ca11962bce1408e650f7e26490
||amazonaws.com/anydo-user-uploads/*_ATT_VoiceMail.html^$doc
! https://www.virustotal.com/gui/url/7a6eedd048b5bc52f14fa02858627b01b8d9cff2f99cb5ee62658d9963f18a9d
||plum-binder-*.typedream.app^$doc

! BT
||boardband.univer.se^$all
! https://www.virustotal.com/gui/url/81f393064c4fd485f654fa3cacabf8ee89291ac445ff6e69771d8be4b3119634
||telegra.ph/British-Telecommunication-08-22^$all
! https://urldna.io/scan/66e850137f6f86bb44b4f849
! https://www.virustotal.com/gui/url/09601a67a365df2ad5eb12c9e6d89aaf22f6727c7be2c5fd493b525de9f75bf0
||telegra.ph/BT-Business-Communications-$all
! https://urldna.io/scan/674538ddb8e5f82c396b8d03
! https://www.virustotal.com/gui/url/a59a486bfbd78ca7917ac33413858ec598cf1375477b77c71d85dbe73e041232
||dazzl.ink/btupdate/$all

! gov phishing site
! https://www.virustotal.com/gui/url/19c07d4e7c627a1f83900c509ce73b828247b3bb932713383e5569e7e2671882
! https://www.virustotal.com/gui/url/3184ee7bcf4b3d443307b36cf33e2c1e078747f6618534fc944442ae1b323e4c
||pttgov*.top^$doc,to=top|~ptt.gov.tr
! https://www.virustotal.com/gui/url/3a1d96a6b5701a96f96d438792ee0fa48aaec7bbe65edadecafcb7af7ec75aa8
||irstaxrefunds.$doc,to=~irs.gov
! https://www.virustotal.com/gui/url/50935c6862f65e5b788e0feb5e43a745b52f6f5c93b3b433bc37a711328eb99b
||gov.*.qpon^$all
! gov.gr
! https://urldna.io/scan/6729f08c603012bf64fdc18b
||aitimaforou.web.app^$all
! gov.vn
! https://www.facebook.com/100069376631038/posts/1072988635023681/
! https://www.virustotal.com/gui/url/308342b9728bc041a44564279fd886f70a0a01178477008df5f6dc3fa676c500
||dichvucong*.top^$all

! gov.au
||mygovaus-$doc,to=~my.gov.au
||seeproc.com.br^$all

! gov.uk
||student-finance-auth.firebaseapp.com^$all
||casadosvidrosmt.com.br/wp-admin/csii/$all
! https://www.virustotal.com/gui/url/ebc39394f30c18e781a2c98f035fa14897aba199d104977f4978e0af200df544
||smartaromas.com/income-individual_service_tax-gg-check-hm/$all
! https://www.virustotal.com/gui/url/df772a3d132acedfd317846a7d291c5040650a99f43db6a706b7cc5155b00d50
||insolvency-development.co.uk^$all
! https://www.virustotal.com/gui/url/e7717337c857b14b4f913fc43dee9a607a264d580550a4e61be3e097e004dd88
||dwp-yous*.top^$doc

! impots.gouv.fr
! https://infosec.exchange/@urldna/112442514480319184
! https://www.virustotal.com/gui/url/43dc3482b86f463550c0a163836c4c622e4ec801184ba76f49aca03cf7fb5128
||mybluehost.me/*/impo/$doc
||isz.bqv.mybluehost.me^$doc
! https://urldna.io/scan/6725d792a8bda5a0f5926ac5
! https://www.virustotal.com/gui/url/2ed7817356b844c59b8767582f7b7e484b74f17654e4f3e18ed158db60060262
||polufredsoa.2mydns.net^$all
||2mydns.net/fr-impot-gouv^$doc
! https://urldna.io/scan/6734c7a19ee995c0b18b4fdc
! https://www.virustotal.com/gui/url/6114364912105935ec4264d07368ae3142c6b44dd9ebd68ced4545de317ad44f
/\.temporary\.site\/service\/[a-f0-9]{32}\//$doc,match-case,to=temporary.site|~impots.gouv.fr
||kkg.yaf.temporary.site^$doc

! amendes.gouv.fr
||antai-gouv-fr.troliga.sk^$all
! https://urldna.io/scan/66a17973cf69aaa3408529d8
! https://www.virustotal.com/gui/url/59f573968e59b6b2f4f09ca26a81608992b83aaef9e7200b29529e10d7641d24
||mybluehost.me/wp-content/12/*.php^$doc
! https://www.virustotal.com/gui/url/7418298915cf7e1e60f2fdb5aa9f57ee419434420a10e8e39c92e1bf84429e74
! https://www.virustotal.com/gui/url/dc16d829559d0f800d5c8310b40196e594a84f9d635a75c2bf02a41adf85ded5
||mybluehost.me/*/amendes.org/$doc
||amz.boy.mybluehost.me^$doc
||vmb.wvs.mybluehost.me^$doc
! https://www.virustotal.com/gui/url/50fedc84296b3183d3a4c9cfc17c00b37257e8d04d2f03925863d9ed42aa5a83
||mybluehost.me/*/amendes2024org/$doc
||kby.oqp.mybluehost.me^$doc
! https://urldna.io/scan/6734c56517aed83575750f39
! https://www.virustotal.com/gui/url/817cb23e0959412ed1989ad6ec9ba27b84e09002d8dd0b32477ce39b84ef7b72
||vdv.oqp.mybluehost.me^$doc
||mybluehost.me/*/3dsec.php^$doc
! https://www.virustotal.com/gui/url/64d74ef6d37b2f855960f77fd99ee0ca35c86ea86f6f0a29818c6f2c9a98df21
||wcomhost.com/amendes-gouv/$doc
! https://urldna.io/scan/66cddfb7de9bc8f607153bad
! https://www.virustotal.com/gui/url/8ca3d39fd9aeabe8f038092a8eb013fb5e12c8f0209b728cb7851fb1ce75ef26
||wcomhost.com/impots-gouv/$doc
||impotsgouv.*.wcomhost.com^$doc
! https://urldna.io/scan/6690fec498efb38aa8b5fff8
! https://www.virustotal.com/gui/url/cf94732269e10553a3e945c3a3a6d96e1975f5bffd600d475248ba54f099bdf0
! https://www.virustotal.com/gui/url/bb37ef477fce261197eddc9c970d8cab9c3e9f2e33578752d7c29e9eb227af9f
! https://urldna.io/scan/66a222314305e9e5c9e85eff
! https://www.virustotal.com/gui/url/65d14490d3b1373b618e79ad0f10356a30d7d5be39a211a0c6a107131b6a8967
! https://www.virustotal.com/gui/url/d719ca5cfa674a89ed897f82ba6c5623a51768534823493f6cca6b86885f118e
! https://www.virustotal.com/gui/url/caebb8395e5ee3e8c414f7a4e19182a5be47693ecf9b344db9df543967eb1ba9
! https://www.virustotal.com/gui/url/39bf66d7df4004585841046986e24c782f3554092b44f1792a7e701dc1823bf0
/am/*.php^$doc,to=arubabusiness.it|mybluehost.me|serv00.net|wcomhost.com|~amendes.gouv.fr
! https://www.virustotal.com/gui/url/3970b40a9d9fcb5813cd3229e940e2df14c3f0e2b27db104085845f6bc6ced4a
! https://www.virustotal.com/gui/url/5dd0e94a8ea4348bc9dddc26ae0bb40f2710bb2b885d6ac2876303549ed6a211
||fi/a/Amendes/*.php^$doc,to=fi|~amendes.gouv.fr
||fi/part/Amendes/*.php^$doc,to=fi|~amendes.gouv.fr
! https://urldna.io/scan/66a41c9241da912d9de2fd1b
! https://www.virustotal.com/gui/url/a635704554faa14de0fa04eb1300f1b5c952c5b365a879c425102282f9df5139
||odeal.fi/fr/AMA/*.php^$doc
! https://www.virustotal.com/gui/url/ef9755fcb211a668986b9afc5187577c92fb8c8bf62057bf9d0b59333827a35a
||odeal.fi/amndes/*.php^$doc
! https://urldna.io/scan/66a2cb049156f76f336510fb
! https://www.virustotal.com/gui/url/ac3f9866a6710a1a7689ef3a1ae99fa1a2841e53bb0ae4e40bb4356b2a049c73
||askozvar.sk/*/amendesgouv/$all
! https://www.virustotal.com/gui/url/8b7f0ac19de9cbc97e619c01b07fe153b43df2e1863d9f9e8c3fd52fba0d8b01
||codeanyapp.com/amendes/$doc
! https://www.virustotal.com/gui/url/e3431725fba0f286c2f30e75b80573dd5536c45f40be41764a2c3f6780e95f9d?nocache=1
/12/infospage.php^$doc,to=~amendes.gouv.fr
/12/paiement.php^$doc,to=~amendes.gouv.fr
/12/3dsece.php^$doc,to=~amendes.gouv.fr
/12/3dsec.php^$doc,to=~amendes.gouv.fr
! https://urldna.io/scan/670d775881ebbf691d0aadbf
! https://www.virustotal.com/gui/url/f98d0dfa8176f89c84445e926156cb9c7f2fe999a1d3906513efeda1db663f85
||iglawfirm.com/services/antai-fr/$doc,to=~amendes.gouv.fr
! https://www.virustotal.com/gui/url/3cd91b0073bdde2b905701c3c79bd0fbd6f9edb2702349c9cf05851ae33aca69
/\.codeanyapp\.com\/.+\/(?:3dsece?|infospage|paiement)\.php\b/$doc,match-case,to=codeanyapp.com|~amendes.gouv.fr
||codeanyapp.com/pr/rue/$doc
! https://www.virustotal.com/gui/url/1ac3468cad26ad886a17a86d8b11cc3f50b8983657d8deaac3a4e1020467c1fe
||amandes*.serv00.net^$doc

! id.me
! https://www.virustotal.com/gui/url/f60f6428c1a06204a7d721da7a65d1ae350f341d996bc47d8a2aab7371d172a7
||banque-online.com^$all

! bank
||chamsocthekhachhang-$doc,to=~edu|~gov|~edu.vn|~gov.vn
||uudaikhachhangthe-$doc,to=~edu|~gov|~edu.vn|~gov.vn
||vdbank.com.vn^$all
||conveyancingportal.com^$all
||bmoreferral.com^$all
||personas.devbam.com^$all
||spareb1.com^$all
||amigosdelasfinanzas.com^$all
||anz.brandkit.io^$all
||moonlightproshop.com^$all
||nbtbank.architect-cert.fiservapps.com^$all
||douroweb.eu^$all
||gaoyinjiao.com^$all
||wester-union-u.vercel.app^$all
||vietcombank*.cfd^$all
/^https:\/\/tpbank\.[-a-z0-9]{5,}\.[a-z]{3}(?:\.vn)?\//$doc,to=~edu|~gov|~gov.vn|~tpb.vn
! https://www.virustotal.com/gui/url/c7b5088a8bb8a08b8df81c311e88524e9c7c5e5db8e8482973950f2f337aa021
||ewp.live/*/pages/region.php^$doc
! https://urldna.io/scan/668d0a422e28bacaabda96ab
! https://www.virustotal.com/gui/url/2edf261ddd989aea3a11b6e92775153dcdb8b3e4380b834b416b2bf9ab3b45a1
||glitch.me/*/nationwide^$doc
! https://www.virustotal.com/gui/url/90fc0532ce482014c579919d1b23d03b0d77fb7b31f3a313e7f17ed9886718f3
||mybluehost.me/ameli/$doc
! https://www.virustotal.com/gui/url/c69b4c8bd6c92857d6e1e40f48ef8830c19d1da98e2c1f16ed7867c58d4b2f63
/28kxhS^$doc,to=online|shop|top|~sberbank.ru
! https://www.virustotal.com/gui/url/f8aff688f04724ec969bccbc5c87fab27425e949590f94006b8ad5ffc8280353
||xyz/akbank/$doc
! https://www.virustotal.com/gui/url/47030aa07787d8246511284f00cf6a2fba1bea6974f8227f0828794b7b8493f5
/views/choice/*/start.php^$doc
! https://urldna.io/scan/66a7f011c6cd731d9e585383
! https://www.virustotal.com/gui/url/3e510ffb6fcc82ccf26a1b1d5581e6b2247314d93cd14e6d21be48ed104ee42e
||skylarkspb.ru/raiffeisentwint/$all
! https://www.virustotal.com/gui/url/2f8145946986b2382bd0c7f6e7664d86aff0cea1d59b49fdf0e99b361bd4ba14
||hclsoftware.cloud/*/tdbanknotes^$all
! https://www.virustotal.com/gui/url/6196dc974de02e22d5cae34d2cabd827a4d6260aaefd1f9f8ce5dd82d0d9ad2e
/wp-content/ntww/natwest3/*.php^$doc,to=~natwest.com
! https://www.virustotal.com/gui/url/140f7ba02b72c57a8ee92b662b49d413ee5475aac61b9c766b0e099579aa5ef1
^novobanco.pt-canais-digital/$doc,to=~novobanco.pt
^novobanco.pt-canais-digital-$doc,to=~novobanco.pt
! https://www.virustotal.com/gui/url/008e652bdc8ca70060bec73e3781cb1c9c5e43e88bb672eacb57301c6423e810
||codeanyapp.com/Particuliers/$doc
||espace-documents-authsec-appmovil.codeanyapp.com^$doc
! https://urldna.io/scan/66e03269255cb97803a40a75
! https://www.virustotal.com/gui/url/185e061423dca668ef141b4634bc6860980896d620094b46835d8170b771f00b
||ingresocancelacion.wixsite.com^$all
||wixsite.com/foliobanbajio$doc
! https://www.virustotal.com/gui/url/e003a1dd10861a22dc9a3216294de24775abc73c8ee758cdb1a1ca0f0faaf3a4
||sunnysani.com/lb/$all
! https://urldna.io/scan/674558e03f64e80bf440d47f
! https://www.virustotal.com/gui/url/0e5629f823bd890a8d6a9df1ea35509febb5343e719a4b02bfe98353de7aa76c
||caixa-login-banco-home-login-auth-h.codeanyapp.com^$all
||caixa-*.codeanyapp.com^$doc
||codeanyapp.com/Caixanow/$doc
! https://www.virustotal.com/gui/url/670e9069a2a51a5fb65a940835994da6537ade7848073c8d4a8dada82fe1e916 - bank of america
||cashpro-online-prosollutlion.cc^$all
! https://www.virustotal.com/gui/url/4f30f19f91aaaf3d492b5a3983dff7855a40794365146e93c1f3f75775e0a977 - NG i-bank
||naturesucrefoot.fr^$doc
! https://www.virustotal.com/gui/url/841854384f82201cb2294a0abc217b1b5a9fcde2f34a2f1ae2e8afb232986086
||easybank.abojo.dev^$all

! nickel.eu
! https://infosec.exchange/@urldna/112496070441371886
||mybluehost.me/service/*/nkl-log.php$doc
! https://urldna.io/scan/67590eb30fdec9bca3a30d99
! https://www.virustotal.com/gui/url/618858f254ee0840cdab44ad767602a6621189ac71473fb580d6bab953d00228
||sviluppo.host/dl/NickelTru/$doc
||biblio.sviluppo.host^$doc

! dkb.de
! https://urldna.io/scan/66fa726d7fe4a642f943054f
! https://www.virustotal.com/gui/url/962dc2242a94ea0e5cb302755601e2f9a934fd9f35899dbadd3a6bfd40e17132
||www-winbank-lfremhmida*.codeanyapp.com^$doc
||codeanyapp.com/*/DKB_new/$doc
! https://urldna.io/scan/67541a576d7c656c306bc7bf
! https://www.virustotal.com/gui/url/4f1a30efcd152f58325efa41a866de58560fb7a144c1445b722681b8d64dbea8
||laurenmjackson.serv00.net^$doc
||serv00.net/*/dkb/$doc

! sparkasse.de
! https://infosec.exchange/@urldna/112451361935970416
||sparkasse-oberhessen.info^$all

! itau.com.br
||itaconsorciodigital.com.br^$all
! https://urldna.io/scan/673be7fb998a98c2667f36fb
! https://www.virustotal.com/gui/url/1df98706f4dafb0ed0aa3d809632461ced3ae87efb1978718f9656fd7e743206
||supporthives.com/public/ita/$all

! hype.it
! https://urldna.io/scan/66f56c794bd3fd633b19524a
||freewebhostmost.com/DARKSIDE/hype/$doc
! https://urldna.io/scan/67331affb9d01b2786679042
! https://www.virustotal.com/gui/url/4dbc8a3fd3e95c19ceef8338fcd5a683250f09b9c9ac781ff765b75ff280580d
||td-online-carta.codeanyapp.com^$all
||codeanyapp.com/hype/$doc

! bancolombia
||e-cmv.ph^$all
||somosbancolombia.zeabur.app^$all
||bancolombiaapp.glitch.me^$all
! https://urldna.io/scan/678d137a9c8cb22ff2083a59
! https://www.virustotal.com/gui/url/12684af259fcf151a47c96aaace7682719914c590ee19849efd138a084e1ae73
||cancelaciondeseguros-*.azurewebsites.net^$doc
! https://www.virustotal.com/gui/url/5b3199864209b8be16c487c8e2fdaeed86427bdaa002c13fff50a23d9783664f
/paga-ofertas/bancolombia/*$doc

! Lloyds Bank
! https://www.virustotal.com/gui/url/2c42bd7b61c06bc03e1745f170382dd5aa057fc2beda209a5aefa712bd1e6630
||lbg-calcs.vercel.app^$all

! hypovereinsbank.de
||gohvb-d634f.web.app^$all
||gohvb-*.web.app^$doc

! mbbank
/^https:\/\/mbdk\d+\.com\//$doc,to=com|~mbbank.com.vn

! bbva
||bbvaar.zeabur.app^$all
! https://www.virustotal.com/gui/url/746e7d7310e64b2ecc19a2d26bc053c2a9c54903a53363f05d090a9e490b0652
||programajourney.com^$all

! https://www.virustotal.com/gui/url/1125c38e9f48cabcb0214a0de3c102d760850bf01d4b557ee65c023fa9b40188
||mybluehost.me/meke/cc/clients/$doc

! bancodevenezuela.com
||bdvenlinea*.pages.dev^$doc
||bdvenlineaconfirmate.pages.dev^$all
||bdvenlinea-banvenez-beram.pages.dev^$all

! shinhan
||sites.google.com/view/shinhan-fiinance/^$all

! americanexpress
||americanexpressempresas.com^$all
! https://www.virustotal.com/gui/url/f76b0bf281683cdb6bbc97603b3c69dc096ec72b5a41125b61dab3c8e22adfc0
||r2.dev/blobamexbsatt.html^$doc
! https://www.virustotal.com/gui/url/7ea630410a2e6836c0f0396f0dc4c7295cb0bcb3e5c956605ef42565c4e9b167
||amxprd.com^$doc
! https://www.virustotal.com/gui/url/48406e8b50ea65b8acf74f33d88d25cac7fb1f5b0577db3dcc91401de629987d
/wp-admin/user/americanexpresss-com-login-true-verify.$doc,to=~americanexpress.com
! https://www.virustotal.com/gui/url/d402af7a668be153efc26ed769f693bfc6bc5d1a5e2b824bbb4c331d03632ad6
||hystove.com^$all
/tmp/vmo.html$doc

! santander
||recompensaszurichsantander.com.mx^$all
||santander.*.fino.digital^$all
||santander.cf.sandbox.motrada.ch^$all
! https://urldna.io/scan/67375864415af7ad29e177f6
! https://www.virustotal.com/gui/url/4b0287034559c9ad4cb28be0e557d2e14b745e8f7e59bee9b57a45f46230c9c6
||santanderpod.*.co.uk^$all
! https://www.virustotal.com/gui/url/89a41b2e7ef1de2454410290ef9700e935a7d8917f08bea0024a6e4e868967dc
||webmo.fr/Fi/SP/PANKKI/*/auth/$doc

! DHL
||dhl.*.potabox.com^$doc
||dhl-event.app^$all
||ltlweight.trgr.me^$all
||dhlproductosyservicios.com^$all
||dhl-rpa-portal.infanion.com^$all
||sites.google.com/view/expressdhl^$all
||xn--d1aqfkf.xn--p1ai/bitrix/.../GlobalSources/$all
||app.farmaciadelmonestironline.com/SER/dnkdl/$all
||cricketbettingpro.com/home.html/autoload.html^$all
||itmustbetime.com/content/uploads/products/china/china/index.php^$all
! https://urldna.io/scan/66983ef62ca5c5af9410c6d6
! https://www.virustotal.com/gui/url/e894b4e45cf6086f3c110bb89db761073b96134cfb330d375e0170ea248a8cb4
! uat.dhl-express-ppd.infanion.com
||dhl-express-ppd.infanion.com^$all
! https://www.virustotal.com/gui/url/c40564d42e6b3d2cb9f3d9b2485c32e3446fb516d05ffd441d3c14be61027e97
||elementor.cloud/*/ENGHUY645/$doc
! https://www.virustotal.com/gui/url/e6fde9752f33f20c2f5ff157816c2edc1c4f6de7c89103edd3ed05cca44d0d46
||mybluehost.me/*/phpmailer/src/dh/$doc
||mtm.rnz.mybluehost.me^$doc
! https://www.virustotal.com/gui/url/ef9755fcb211a668986b9afc5187577c92fb8c8bf62057bf9d0b59333827a35a
||mpinsureit.com^$doc
! https://www.virustotal.com/gui/url/ef9755fcb211a668986b9afc5187577c92fb8c8bf62057bf9d0b59333827a35a
||goldsystem.com.br/amds/css/secure/dhlFR^$doc
! https://urldna.io/scan/66b8baab2f59b21da15613c5
! https://www.virustotal.com/gui/url/bc113a7de909bb111ce2d933762fd686c2a0ac924aec049b4e320cee6dca583e
||elementor.cloud/*/ESDHL/$doc
! https://www.virustotal.com/gui/url/b83b967ad9e06240e5bb34fe0fe20604b511c41b7a86902a19dcb4b1f3951bb3
/tracking/fV5EjH/*.php^$doc,to=~dhl.com
! https://www.virustotal.com/gui/url/8370f37d2cbdfe3d1dffb7c5c9a95341a447b725c177e85f66850aeb8b5b3544
! https://delivery-globaldhlauth.github.io/samedaydelivery/`
||delivery-globaldhlauth.github.io^$all
||github.io/samedaydelivery/$doc
! https://www.virustotal.com/gui/url/a37864755cbf39bfac03577856042cde08fd23c91157aa2b5016d135177eeff8
||myjobdhl.earcu.com^$all
! https://urldna.io/scan/673d3de4d80447503bfc9372
! https://www.virustotal.com/gui/url/83f4006efa9dddfb7b6df6dda5a39e9e591906623eab4e0818b145fde7748bee
||cere.network/*-dhlshipmailchecker.shtml^$doc
! https://www.virustotal.com/gui/url/78a9667c1b6380afdc50c5a0f20f2bd228ee2f6e354c8ea6e8acb0325236f6c2
||myjobdhl.earcu.com^$all

! whatsapp
! https://urldna.io/scan/66a0280430f40d4a2e1cdbfd
! https://www.virustotal.com/gui/url/dd581161abc02c436e7f1d3096ebc651b98bf4ff3eeea81cff8ba76b6b9ca277
||play.funfourmob.com^$all
! https://www.virustotal.com/gui/url/a342eef995ebb76a397c7b757f86eefd84229c5b64cb845b428e494066d90575
||fevertime.com/wasop/$all
! https://www.virustotal.com/gui/url/02a47f7abf79b9432d611eb4601015f554c548efad6cf7e9ebd64dd3d5cf8e88
||wathzapp.com^$all
! https://www.virustotal.com/gui/url/a4c7013f5435188514d6f397a43489fa24f2fb6d1c2ed224b7974b847f8a8a00
||wa-groupbebe.pages.dev^$all
||tg.sv/panggahokeee^$all

! instagram
||fr-instagram.com^$all
||igleak.info^$all
||instagram.irancell-10g-free.rf.gd^$all
||businesslnstagram.zya.me^$all
||instagram-nextjs-three.vercel.app^$all
! https://www.virustotal.com/gui/url/acc2a19b715277722ad875b89732cae77f0f223e3160792e197a54a85c3ad679
||instagram0639.blogspot.$doc
! https://www.virustotal.com/gui/url/62c7b31312fe5b60dc0bc5eecb386a37a6a565a5d049b395d45f22dab5d2eb37
||lnstagramsupport.cm^$all
! https://www.virustotal.com/gui/url/857b7a4edf67f54df6b6201d98e3daee0b3a7b273149fd6ea05c01fdae75af50
||instagram-$doc,ipaddress=43.135.101.145
/^https?:\/\/instagram-[a-z]{5,}\.[a-z]{2,4}\//$doc,to=cc|top|help
!#if env_safari
/^https?:\/\/instagram-[a-z][a-z][a-z][a-z][a-z]+\.[a-z]+\//$doc,to=cc|top|help
!#endif

! facebook
! /^https:\/\/[vw]ww-[a-z]?facebook[a-z]?([.-]com)?\.vn\//$doc,to=vn
||notificationbyfacebook.$doc
||notificationbyfacebook.firebaseapp.com^$all
||notificationbyfacebook.web.app^$all
||business-facebook-*.pages.dev^$all
||ads-verification-for-pay.vercel.app^$all
||report.case-referency.com^$all
||certify-issues-details-case.netlify.app^$all
||www-mfacebook.$doc
||www-facebooks.$doc
||www-facebook.$doc
||vww-facebook.$doc
||www-facebook-$doc,to=~translate.goog
! https://urldna.io/scan/666037369f1ea64bf06cebf2
! https://www.virustotal.com/gui/url/668171c7e2792344e6f1258ad7c1ab14e94b6192dfa1a1e98fb798c938244caa
||vww-facebook.com.vn^$all
! https://www.virustotal.com/gui/url/381b8a23c755c95909382d1b4dc80bfd4e4c89b0f1c0e48ef626c16723ff88c1
||www-facebooks.com.vn^$all
! https://www.virustotal.com/gui/url/6213087609a2bfd4a2c285d35ebef2ce5a1e5b74ae61a556b8ed3711909a504f
||faceb00k.com.vn^$all
! https://www.virustotal.com/gui/url/cec2b3b2d51dd750d71030c58ece4f3ae6f69e0b234d094f3fe19c591e2ab31f
||m-facebookk.com.vn^$all
! https://www.virustotal.com/gui/url/1014d77546918719015cacc54e024eb3cf328434de3b08571ecc21c6d582e166
||fakeserhelpsreivew-$doc
! https://www.virustotal.com/gui/url/e5632b7ebd4d9ef4899155af4a8cf218797bd59972c231a7897b603b32ccccb1
||govern-assessment-validation-*.vercel.app^$all
! https://www.virustotal.com/gui/url/54cb07a8f7961f2a9b2e5aac8c8a7a3f7a3f816f56f799382b672929fabc32b4
! https://www.virustotal.com/gui/url/75b18ea12b5b20f2e824df4443cc6d3458ca214b738ff390f319a6bf6290a4d0
||support-center-for-*.vercel.app^$all
! https://www.virustotal.com/gui/url/785093a351dc39ce40732e1fd5980d63943d38e7abc7ac8bb3972dee85e2c33a
||safety-profiles-fb-ads-*.vercel.app^$all
! https://www.virustotal.com/gui/url/6091a6693b5581524198c73b1f84c58e9272f1b100d7e68d7ed5fae7d05a06e2
||request-page-violation-*.surge.sh^$all
! https://www.virustotal.com/gui/url/a9ef0c410c76df46d4871a247df980ac912b93df02d7c7012477107171c78964
||violation-*.surge.sh^$doc
! https://www.virustotal.com/gui/url/6eeee02278ccbecd060a66c9948c69d98b79c249876e03f7ff410180fa4b4057
||copyrights-*.surge.sh^$doc
! https://www.virustotal.com/gui/url/19c07d4e7c627a1f83900c509ce73b828247b3bb932713383e5569e7e2671882
||fan-page-*.surge.sh^$doc
! https://www.virustotal.com/gui/url/d8475ddede9ae4d82634b3b67f477e08dac8e9ed1f71e217485c81e64b325440
||content-voilation-$doc
! https://www.virustotal.com/gui/url/740e678d35aa4d230791e3e9bc98d3be1d94c5269a72b35892676c606e64c326
||appeal-account-copyright-case-review.$doc
! https://www.virustotal.com/gui/url/d67ee76e5dee301886e8acf659a38d3489da3815c63592ae63659fae81242a41
||community-flagged-$doc
! https://www.virustotal.com/gui/url/19c07d4e7c627a1f83900c509ce73b828247b3bb932713383e5569e7e2671882
||help-for-work-*.pages.dev^$doc
! https://urldna.io/scan/6698e7c8b88a5a4f7f81c078
! https://www.virustotal.com/gui/url/0fb1eb85ae5a83bbbf012fc401f663011ee27042d4fc1fd43c3d6ec9bbed1dbe
||marketplace-item-details-*.zya.me^$all
! https://www.virustotal.com/gui/url/0e4de7ac483088234981cd80049c18f2102970271a741b004182aece70bff443
! https://www.virustotal.com/gui/url/087951f6e1cb4f192f3d756c6a8bdef38ff818e02fb2cb0387807eda74f0f518
||info-meta-noreply.com^$all
! https://www.virustotal.com/gui/url/b6f1e13d46854c206f4126ba98691ffc00f511d4567c65ec4ea95626c39a85c2
! https://www.virustotal.com/gui/url/9651e3fa25ad8bbcd3a771acd5f4658d8dc598dc2c53ea2640cfc3c8c6257044
! https://www.virustotal.com/gui/url/163d930050fe67dd41c9a2905fb9c4fa817b75fc96de6c9d71192bfbb3048e5b
! https://www.virustotal.com/gui/url/da2e3aec870053861882f7d6c41257e727e284ecfb573bb62ebe0c1e1c5c7f4f
/^https:\/\/business\.[a-z]+confii?rm\.com\/meta-community-standard\d{14,15}[^\d]?/$doc,match-case,to=com|~facebook.com
! https://www.virustotal.com/gui/url/f591d0bdb853fe252d0d2a6db865b8af34cb562e1a438158efd90f99a972bdfc
/^https:\/\/business-component\.[a-z]+(-[a-z]+){2}\.com\//$doc,to=com|~facebook.com
! https://www.virustotal.com/gui/url/a9999feede5fb57166172d17ee75655b19d1a006d440aa6180f1cba3197edf13
! https://www.virustotal.com/gui/url/3272577275331ff6f7774d392e4e6189b8dc914c16777d24eb691b4830c5ef17
! https://www.virustotal.com/gui/url/09cac60b458f88d9a2f0fa101b5fe1365f0e1786068149bbadfff21b42b165ae
/\.(?:click|pages\.dev|surge\.sh)\/help\/contact\/\d{14,19}\b/$doc,match-case,to=click|pages.dev|surge.sh|~facebook.com
||business-help-temp-$doc
! https://www.virustotal.com/gui/url/ab0017dd6ee56266bf8d8514bf3ed892719deb7f1f1dd40c85e2ee7b1764d116
/\.workers\.dev\/help\/\d{14,19}\b/$doc,to=workers.dev|~facebook.com
||royal-glade-286f.kdsj.workers.dev^$doc
! https://www.virustotal.com/gui/url/ebc994d35635bdfa408c42209bb66ca8de3180dfe60c1c90386ca5bb2bd0c5cd
! https://www.virustotal.com/gui/url/4ed3b862ff18fb1a61b8ecf76583c1f07aa3bb8625fe9bbc4df3dd44a4a14e45
! https://github.com/uBlockOrigin/uAssets/issues/26518
/\.(?:boats|cfd)\/contract\/\d{14,19}\b/$doc,match-case,to=boats|cfd|~facebook.com
! https://www.virustotal.com/gui/url/a7fd00beea3a206574a55ebcc91d1c0c73330e31c5a38d602d6f82e14d646bff
||helps-center-page-number-$doc
! https://www.virustotal.com/gui/url/b0de32c1d69e1c616a08c16fd9df3e6bc63116beaffab23e979588eec9269845
||support-16.ubpages.com^$all
! https://www.virustotal.com/gui/url/d6ccb1aaa8c9c09ee68643561506c91f9ae7e0e744e2fef45132c4b4b419a1b0
||contact-supportbusinessmanager.ubpages.com^$all
! https://www.virustotal.com/gui/url/435f650a4ddb1882f4873af6081429826a4461de7a89d8ebb0ca37a5df14c12e
||facebook-*.ubpages.com^$doc
! https://www.virustotal.com/gui/url/e7726560de588d46e7eff751632d42ab49f745af0fcb8d6e2ddd3418f84861de
! https://www.virustotal.com/gui/url/cd24701c93decf07a0fd0d2e37e819bd355882c488c48cdeb07a02ebecd0171c
/\.(?:pages\.dev|vercel\.app)\/appeal_case_id\b/$doc,to=pages.dev|vercel.app
! https://www.virustotal.com/gui/url/8470f93fe263a78716f67eb89e35fa32d01f418a9aab33d45350940e49004fd2
/^https:\/\/(?:appeal|contact|page)\.[a-z]{15,}\.com\/appeal_case_id\b/$doc,to=com|~facebook.com
! https://urldna.io/scan/6730aa8ee473e50c56ba3f7e
! https://www.virustotal.com/gui/url/5fa27669e116daaa9aa118ffd4f11e797309bf8172129780699603d1d95046d2
/\/contract\/support-case-id=\d{14,19}\b/$doc,match-case,to=~facebook.com
! https://urldna.io/scan/66f3c57b304b035a2881c2bd
! https://www.virustotal.com/gui/url/e1e065ad6355da6ec5c427cb7d991ce90430e275a0b80b2d69a46337b62d55fd
||support-metahelpcenter-id*.netlify.app^$all
||support-metahelpcenter-$doc,to=~facebook.com
||netlify.app/help/support/client_id=$doc
! https://urldna.io/scan/6730aa2daee258c88824ac60
! https://www.virustotal.com/gui/url/58de23eb9a6a00255f5503ad391fd24bf84135a63c6df7d992b0ed1b4bc71511
||reminders-infraction-account.netlify.app^$all
! https://github.com/uBlockOrigin/uAssets/issues/24777
! https://www.virustotal.com/gui/url/c2d401ec0f20e437009573fca481565d05036489406f6bb9bee37365cf4d28f0
||vercel.app/americaplata.com.html^$doc
! https://www.virustotal.com/gui/url/94c89d8875b2ca47a7e312a65c7c2522400759d697ed5678c753f74c5bac1645
||atplink.com/responseandresolutioncenter$all
! https://www.virustotal.com/gui/url/4356eb329ad8473f5db57778ae7b23f588d9de5c1851f7876193aba38ab7703a
/^https:\/\/h5\.[a-z0-9]{4}\.com\//$doc,to=com
! https://www.virustotal.com/gui/url/cb040151df409b4bb2bf62d47bd91b293cc58bda80da9f7a53c6bc4cafa95457
||vercel.app/mixcc.html/$doc
! https://www.virustotal.com/gui/url/26455a14cbf57c4719a05f4fb3f33a42f47cb5850ae67d9859022b719e57110b
||vercel.app/metasp.html^$doc
! https://www.virustotal.com/gui/url/ddf62926e9586f22c559d61eb85d09413166351a04d990f41f79dacac43a671c
||vercel.app/decision&copyright^$doc
! https://www.virustotal.com/gui/url/6c19e403b2f4fac5bb0e1703ed4883ea157525ced4af89a88b66f8c900d37530
/^https?:\/\/[-a-z]{12,}\.vercel\.app\/[^.]+?g_ep=?EgoyMDI/$doc,match-case,to=vercel.app|~facebook.com
! https://www.virustotal.com/gui/url/6d5fd29cbe87f8704cb167b808453b9a8e73edf444acfa7c104aea5a2be7b368
/^https?:\/\/[-a-z]{12,}\.vercel\.app\/[^.]+?=D400e/$doc,match-case,to=vercel.app|~facebook.com
! https://www.virustotal.com/gui/url/216501aaaf110d2ec9e2861d702d4025ba63df702ab46b25da9fb39b57358c46
/^https?:\/\/[-a-z0-9]{25,}\.vercel\.app\/id\/\d{15,17}\.html\b/$doc,match-case,to=vercel.app|~facebook.com
! https://www.virustotal.com/gui/url/73e1280835616a84d8632ff2b4e0944f56d07e3a2653730a433ea6ab9666d9d1
||policycenter-auth-check.vercel.app^$all
! https://www.virustotal.com/gui/url/c9e495ee99c8527051c04a2352d82839b7fbbc1de29b8b11e7bc9d9533539cef
||datasecurity-review-status.vercel.app^$all
! https://urldna.io/scan/673aaa74607ec87001473ba4
! https://www.virustotal.com/gui/url/878182e6093b5987cf46060002e7d7dcda53024fa99885b5d573970f9d7ef535
||live-metasupport.com^$all
! https://www.virustotal.com/gui/url/cc2450d1ea3d6a4d610b156eac3bbfc31eef82a9536e32875ae90f5374387f04
||fb-business.com^$all
! https://www.virustotal.com/gui/url/099177cb27bbed7b0484adf16d9481d2472720c64f8ef0dc274d4c12b99fbe94
||faecbook.vn^$all
! https://www.virustotal.com/gui/url/7580331164d1c54a39003b3472cef1009537bcea87806aa7a1b67083aed0b133
||online-ops.mypasschange.com^$all
! https://urldna.io/scan/681caaf83b775000109ca6ac
! https://www.virustotal.com/gui/url/70870042dc8076c74228be942a6871edb44cfc82d78662e5d32517eca86ebcb3
||page-suspension.com^$all
! https://www.virustotal.com/gui/url/22fa70bd9df284391c97ec0567020a30c9297c61f82f8aa0ce747a4cbd60a6f0
||feacboolk.com^$all
! https://www.virustotal.com/gui/url/10de0d74cde49125b352a5d3afa177214d3d7998268e9a2d46b319d79f01ea35
||meta-for-business-$doc
! https://www.virustotal.com/gui/url/29a47ae1cc0da3ca9415cd7745b91af24d03ce3760374ff1dba8fa5498e026f6
||pages.dev/meta_for_business$doc

! shopee
/^https:\/\/sp\d{2,3}88(?:vn)?\.com\//$doc,to=com|~shopee.vn
! sendo
||vnsendo.*^$all,to=info|shop|vip|~sendo.vn
! dienmayxanh
||mayxanhsupport.com^$all

! steam
||steamproxy.$all,to=steamproxy.cc|steamproxy.net|steamproxy.vip
||steam.zssjsq.com^$all
||steamcommunitylog.chez.com^$all
! https://github.com/uBlockOrigin/uBOL-home/issues/156
! https://github.com/uBlockOrigin/uAssets/issues/27941
/^https:\/\/s[cfntz]y?[ace][acemnu][a-z]{1,4}or?[mn][a-z]{4,8}[iy][a-z]?\.com\//$doc,to=com|~steamcommunity.com|~stauntonandhenry.com|~szentkoronaradio.com
/^https:\/\/s[cfntz]y?[ace][acemnu][a-z]{1,4}or?[mn][a-z]{4,8}[iy][a-z]?\.cc\//$doc,to=cc
/^https:\/\/s[cfntz]y?[ace][acemnu][a-z]{1,4}or?[mn][a-z]{4,8}[iy][a-z]?\.ru\//$doc,to=ru
/^https:\/\/steam\.(?:community)?workshop-?[a-z]+\.com\//$doc,to=com|~steamcommunity.com
! https://www.virustotal.com/gui/url/4aba296c6d702d985b991365bdbe66ee72256a29c46ab9db1dc0dd1f25e0fbbe
||com/p/jcod-ppsr/huasdirjdo^$doc
! https://www.virustotal.com/gui/url/903d84272949895a1b6b839e17d42228ffeb3b76f17603b21df897a0f6d13124
/redeemwalletcode/gift/*$doc,to=~steamcommunity.com|~steampowered.com
! https://www.virustotal.com/gui/url/72c0e8ee73469a559b1fd1947216d05571d49a8206abf7f33400e16c0c2b020e
! https://www.virustotal.com/gui/url/3cfd2e05f7e6129a6278d7f0ab0bce05d021cdf47407f51b5dbe6d975eb5ff56
||steamcommunity.^$doc,to=~steamcommunity.com
! https://github.com/uBlockOrigin/uAssets/issues/27971
||namcards.com^$all
! https://github.com/uBlockOrigin/uAssets/issues/29994
||shengsizhanchang.com^$all

! mobilelegends
||mobilelegendsmycode.com^$all

! pubg
||pubg-arena.top^$all
||register-turnamen.free.nf^$all
||napthepubg.mobi^$all
! https://www.virustotal.com/gui/url/8beafe6d3589893c780dc140b59a7bf70fa4a900381da96faafb8b5d0a508eff
/volt/*?nox=$doc,to=ai|com

! microsoft
||microsoft*.dfautomotive.de^$doc
||microsoft-verify.glitch.me^$all
||validacionesoutlookmailwebadmin.glitch.me^$all
||whfdny.org^$all
||infos4.yolasite.com^$all
||microsoftupdate67.wixsite.com^$all
||exchange.add-solution.de^$all
||exceklcmicrosftprotection.pages.dev^$all
||graettingerlaw.com^$all
||post.nationalrent.ru^$all
||officesoftcn.com^$all
||athenasbaklava.com^$all
||e-outlook-online.com^$all
||serverdata.ch^$all
||nilousplaypen.com^$all
||alarisequity.cyou^$all
||cashum.unam.mx/wp-content/backups-dup-pro/imports/index.htm$all
||cognitoforms.com/FiRe21/EmployeeTeammateQuarterNominationPeriodForMidyear^$all
||santangelo.eng.br/owasetup/$all
||maweresibanda.co.zw/portal.support/$all
! https://www.virustotal.com/gui/url/19c07d4e7c627a1f83900c509ce73b828247b3bb932713383e5569e7e2671882
||pages.dev/smart89/$doc
! https://urldna.io/scan/66e84f51b5b5cf9b2869e00d
! https://www.virustotal.com/gui/url/765e4dd75664d385d04eacaa47e36ed1029f2e42882c843c242b52cfafaf3300
! https://www.virustotal.com/gui/url/d7ef78d959b7cbfc5592321f643f505bc022c221a607a9d41d9d2aa6e41b8df3
/^https:\/\/(?:[a-f0-9]+\.)?[a-f0-9]{58}\.pages\.dev\//$doc,to=pages.dev
! https://infosec.exchange/@urldna/112186648791862292
||acir.postofficeweb.com/grupoacir/$all
! https://infosec.exchange/@urldna/112377161728125627
||storageapi-new.fleek.co/*/yss/ind.html$all
! https://urldna.io/scan/667d384ad611a65623a4c272
! https://www.virustotal.com/gui/url/08c0a664528400e7f69613f0d67cd32eaa27c172e61b59729af5fd808fb52737
||wwwservicemsnlive-*.hubspotpagebuilder.com^$all
! https://www.virustotal.com/gui/url/b434ef1646001aeffd5a32021dc365e17f38b4ca73cbd06e237fa29749e5ae05
||conohawing.com/*/outlook-$doc
! https://www.virustotal.com/gui/url/6842be99947bd0db1671500f4ab7774846e34f7d951b190be9e58b9e84536f39
||hergunavantaj.com.tr^$all
! https://www.virustotal.com/gui/url/121614b7a02a5f9bfe0df6bea30184ef2c28a03df07b6ae41c489de241554344
||irrigationservices.co^$all
! https://www.virustotal.com/gui/url/4c3fa27636d4439e79b4f6a05f2c3859897425727bf985a5afe5047266e462ff
||copynet.com.mx/Message%20Centre/$all
! https://www.virustotal.com/gui/url/64fb53355d445fd7b50685886e43e364285a48a660701a553cfbfd925c1a371c
||msnoauth*.com/office-$all
! https://www.virustotal.com/gui/url/564a9ce8f29f1fe3e951fc11865e27ed1f3280a512afbd110e2733634106510b
||sites.google.com/l0gin-microsoftwebonlne.app/$all
! https://www.virustotal.com/gui/url/51ddf7de3e21e346563a713d62f1a3221afda66b9681ab2b5989da7d901a3935
||monogonzalez.com^$all
! https://urldna.io/scan/669b8ab77cf5beafb5dbcf99
! https://www.virustotal.com/gui/url/1092dfb23e71f252516b56e8d516e92df4233b5d7e7a5178393f7a1ae02b9ff3
||microsofthotmailsi1.wixsite.com^$all
! https://www.virustotal.com/gui/url/d0a30d63d6975b69762e024ddb89c252a8f2822bddb8b4d171bf3495261dc479
||supplieradvisor.ciamlogin.com^$all
! https://www.virustotal.com/gui/url/6586411fdd055f472911a7507ed78ed2eabab30a79d2caf3402525f119dd8e66
||e-messsage.com^$all
! https://www.virustotal.com/gui/url/b1351123c5563546b0841861e21e71593f0eca917057ac3c9f497303160053e4
||vkcs.cloud/owa.html^$doc
! https://www.virustotal.com/gui/url/38b0cc10ec3ff351fb8688c6386834152abda6e018c63e8be60272b2ffb6c3b1
! https://www.virustotal.com/gui/url/c3e6ff6cc703988270f227d9bdd8192f74d795ff8efac3a1f4043049d4db21f8
||ocalam.com:8443/impact^$doc
||indylatinawrds.com:8443/impact^$doc
:8443/impact?impact=$doc
! https://www.virustotal.com/gui/url/526d0f017cf0af2b63746d39c742afe6d6d827cc1142d49fff26467f57d64c22
||pub-*.r2.dev/owa.html^$doc
! https://urldna.io/scan/6739584cde915d9ef3ea248b
! https://www.virustotal.com/gui/url/86d704e6d02054e1fdedfabd848701ee49998448ea66645a89626d274787aeea
||pub-*.r2.dev/owasecure.htm^$doc
! https://urldna.io/scan/66a7f0b018ce9822b681e283
! https://www.virustotal.com/gui/url/ae5b373bf18db6316d0bbae309378ce3f66e6e780682ce8bfdee60a8536c1721
||pub-*.r2.dev/onecode55.html^$doc
! https://www.virustotal.com/gui/url/f231e206ef4cf16012f015b13ca1069cdb1c250e7e6b6ad7533b46866cc62d46
||pub-*.r2.dev/OneDrive.html^$doc
! https://urldna.io/scan/673fdd72901499bb7178108c
! https://www.virustotal.com/gui/url/953665bd31d47d6384f1389967a6321adfe571f078e4f38d4f06cf9670fdff93
||pub-*.r2.dev/auth_type.html^$doc
! https://urldna.io/scan/66a893d548fc8e7672fbf688
! https://www.virustotal.com/gui/url/caa8a01a2f1c8511f8a5e2ac367ec62beaf35db464b564e1ce9450a4a4923fb4
||enexdirecto.com^$all
! https://www.virustotal.com/gui/url/759542b8116836f96e6a4ec604fb9f58b62b348346c3e65e417d649ae50b21b0
||ccefactoring.com.br/ziujhyhtrer/$doc
! https://www.virustotal.com/gui/url/9105be477423bad95f6841a21151289e3dde515febdad09429b0fd030ed95b49
/Message%20Centre/mc.php^$doc
! https://www.virustotal.com/gui/url/823f191614433b0f353b678994fe7399aebddf541c26f7434e630a352da61054
! https://www.virustotal.com/gui/url/bbab15ebcb0f684e6448edf35d469b5c411c6e3c7877387d16666e8a26fc3e8e
/\.com(\.[a-z]{2})?\/wp-includes\/images\/smilies\/images?\/smili?es\/[a-z]{25,35}\.html/$doc
! https://www.virustotal.com/gui/url/aa20e18faa34e87cefdd3540d18ac6f030f17d501460f771e84a70b07e66e8aa
||mlcrosoftonline.com.eu-secured.com^$all
! https://www.virustotal.com/gui/url/2f6b0d76102f8fbfafcc7a42d4768474d58c38079f7ff8a82b836e9649c7f7a5
||carrierzone.com/sharepoint/$doc
! https://www.virustotal.com/gui/url/1ed7b40b8d5a921616df1e5b651f0a8d055766eaa36d3ce73b5823cf6acb01b7
||hr-systemmet.dk^$all
! https://www.virustotal.com/gui/url/649a3b295ad9351627f2539d0671071bb781f0d39c7d2730bb1c10041bd76c76
||bertchou.com/wp-content/languages-old/config^$all
! https://www.virustotal.com/gui/url/faecdd6bdca1b1760f51038578451d7315e2ae074f68175da527f722d873fcf9
/^https:\/\/[a-z]{14}\.azureedge\.net\/\d{4}j\b/$doc,to=azureedge.net
! https://www.virustotal.com/gui/url/2d6508637022abdbe07180d88c2590ccef5de0d255841fdd1aacb4982ffe842c
||microsoft-notifcation.com^$all
! https://www.virustotal.com/gui/url/a9a522e1d2bcaa50c4b0183207998f4d9f6df975701014c953a6cd7669289b05
/^https:\/\/[-a-z]{4,}\.dogfriendlytahoe\.com\//$doc,to=dogfriendlytahoe.com
! https://www.virustotal.com/gui/url/c9edd9d3e4002957c668e0d19002e4175227d7bbbc84059592fc4ab8cbf1a2f0
||docusine.com^$all
! https://www.virustotal.com/gui/url/ba3d635595cc93873b411791c58db6a12e5285cdebf35544afb1ca7350ef4296
||backblazeb2.com/securescriptindustriusfinanceprivate99.HTML^$doc
! https://www.virustotal.com/gui/url/aa14ca779e0ee64809a6698a89e50bd6d60138ee7707116c169fc765bb9baf98
||contoso-travel.com/login^$all
! https://www.virustotal.com/gui/url/89d827b0980847445477131a27a9d58d8ca0e64fd3aa782a508c1c8e01c6291b
||sitio-interno.com^$all
! https://www.virustotal.com/gui/url/c2ec0126a3e06b636368e4ff4c2ade3dbedac9d054db5b470bbf615ea390eb89
||oortech.com/onedrive.-html^$doc
! https://www.virustotal.com/gui/url/29857465da6296cafcf9dd205d78f34ea074a8bdcca2f62adf1b7cf9072ca3ba
||shockaholic.net/jgr/$all
! https://www.virustotal.com/gui/url/b975db4665f554ab571c8a02b8b748500c278347191334a9c6b80abe036f9be4
||user.fm/files/v2-*/Refundnotice.html^$doc
! https://urldna.io/scan/6733148ced64ebd828fccb5b
! https://www.virustotal.com/gui/url/cba35981fd21da4668fb4a935d091677c5abfdb1ce1f00690aa54614f1adf12e
||user.fm/files/*/Proof%20of%20Payment.htm*$doc
! https://www.virustotal.com/gui/url/18f2bace516b40699daddedeecc81c41183f522004ee606ee432323987ba6494
||alnobala.ae/owasetup/$all
! https://www.virustotal.com/gui/url/6e69610c952076b5cf68160d8acba75dae81ad780929e950eb099399f6e6ccea
||authsignonstaff*.softr.app^$all
! https://urldna.io/scan/67324ae225a29e5c04a0cac2
! https://www.virustotal.com/gui/url/32d23c85dd5e4c10a1a7813f935117e236dfe8f914ad882fb302e83eca32f47a
||facture-pdf-secure-*.vercel.app^$all
! https://urldna.io/scan/67380ef58a64bab0b45d0b6b
! https://www.virustotal.com/gui/url/13c5d820504770599d96aa85000d49ed4af09e2191dcff38e8b63e4ec5eaead5
||hkwordpress.com/public/export/SM-ORDER/excelz/$doc
! https://urldna.io/scan/6746ab36d355f8dd0d56dae1
! https://www.virustotal.com/gui/url/6fd52a8f1ed5e9525b44d5c98c19ad9e9e89741153570855475ab19ea88095da
||msoftupdate.*.linodeobjects.com^$all
! https://urldna.io/scan/67869939c6a9b4f17944c786
! https://www.virustotal.com/gui/url/2065cd67be3bf7ac6469c02d033f73c6debf710054d1a5156334dbfe87b527f8
||outloksupportbuzoningreso.glitch.me^$all
||outloksupport*.glitch.me^$doc
! https://www.virustotal.com/gui/url/47205d7cf53b0098a3132b77375d5ed470fde5a7e53f422d9211be24f952f510
||mysign-mircrosoft.com^$all
! https://www.virustotal.com/gui/url/1c4b33c7a1856244d5b6c53487e7c1df98623078f493d907af129787550621bf
||nexprosystems.com^$all
! https://www.virustotal.com/gui/url/c0866e0d37947db3044bb377ae5ac782ccbba00e58558eaf932590b44db7b9c7
||scanlonchiro.com^$all
! https://www.virustotal.com/gui/url/010ec70b6c61ab44ab7babace2ce2dfae1a6d854741e5a1a966b56001ad91c11
*$doc,ipaddress=178.16.53.131

! telegram
||telegramhcn.com^$all
||webtelegram.eu.org^$all
||zhongwen-telegram.com^$all
||telegrambotsolution.pages.dev^$all
||1125telegram.vekira.top^$all
/^https:\/\/www\.telegram[a-z][a-z]\.com\//$doc,to=com|~telegram.org
! https://www.virustotal.com/gui/url/2048958dffb9920086d04fe2b0b93fbe3c0ce180c9456d36b846600c15b1b1f5
||telegram-*.com/login/index.html^$all
! https://www.virustotal.com/gui/url/8f7738fd0cfff7c522802752d6fbdf015b19f8c7e483d01c6fb020854f42ef42
||telezelm-*.icu^$doc
! https://www.virustotal.com/gui/url/e7eea1fe6282dee603a27cc5d34c0c5eee90fd402de80989cf7a939e3e7e1352
||whatsapp*.icu^$doc
! https://www.virustotal.com/gui/url/cb39c3fd6faa42c07328f8e73f8a4d2258523b557b9f4e5a134ef4ec3cf4698c
/^https:\/\/telegram-[a-z]{2}\.[a-z]{2,3}\//$doc,to=~gov|~edu|~com|~net|~org|~telegram.org
! https://www.virustotal.com/gui/url/d69ea33854b1c9f85ec27cee7cd98ecff0e2933c2644e43df657671ebacb003e
/^https:\/\/telegram-[a-z]{3,4}\.com\//$doc,to=com|~telegram.org
! https://www.virustotal.com/gui/url/6f1f98c84a061d10586c11ca7ad04f568724b0853aeb98b5139af1dabbfe3677
! https://www.virustotal.com/gui/url/943c29c6dc0b25ee5badf1810e99e29fe22889cc632f2221b5a6e7c2aeadf05b
/^https?:\/\/web\.t(el)?gram[a-z][a-z][a-z]?\.top\//$doc,to=top
/^https?:\/\/web\.tegr[a-z][a-z][a-z]\.top\//$doc,to=top
||web.*.top^$doc,to=top,ipaddress=206.119.188.100
! https://github.com/AdguardTeam/AdguardFilters/issues/213155
||sbs^$doc,ipaddress=166.117.237.67
||sbs:$doc,ipaddress=166.117.237.67
/^https?:\/\/[a-f0-9]{32}\.[a-z]{7}\.sbs\b/$doc,to=sbs
!#if ext_ubol
/^https?:\/\/[a-f0-9]{29,}\.[a-z]{7}\.sbs\b/$doc,to=sbs
!#endif
!#if env_safari
/^https?:\/\/[a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9]\.[a-z][a-z][a-z][a-z][a-z][a-z][a-z]\.sbs:/$doc,to=sbs
/^https?:\/\/[a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9]\.[a-z][a-z][a-z][a-z][a-z][a-z][a-z]\.sbs\//$doc,to=sbs
!#endif

! usps
||smartparcellockers.tech^$all
! https://infosec.exchange/@urldna/112224043535026915
! https://infosec.exchange/@urldna/112244333356436954
/^https:\/\/usps\.[-a-z]{6,}\.(?:com|top)\/(?:address\.html|information|verify)\b/$doc,to=com|top|~usps.com
.top/pg?do=$doc,to=top
||wrc-gh.org/redelivery$doc
! https://infosec.exchange/@urldna/112560597065106850
||mybluehost.me/2us/verification/$doc
! https://urldna.io/scan/6683cfb811bd32bf9fb75225
! https://www.virustotal.com/gui/url/25aea0e999fad6210accce6965b498b4794ae442233ece87290293486f17d432
||mybluehost.me/uspshome/$doc
! https://urldna.io/scan/668915c66ba77bfb3cacea3c
! https://www.virustotal.com/gui/url/2cffc82255b1724b4e9083c350c2c3d73ff9366ee6ab15d6c0bc37ab6c7b8066
||mybluehost.me/us/post/$doc
! https://www.virustotal.com/gui/url/d8f1aa4bd75eb85e45126053f1e67862e33be37dc3b9064af310cfda1629964b
||mybluehost.me/tracking-mail-delivery/$doc
! https://www.virustotal.com/gui/url/ab9313e89cd1f37e143b6bbfb8e7b43d4484328dda0b5fd287a44fbefce58479
! https://www.virustotal.com/gui/url/3a759ec6ab4192d774c4a40be278da6bdda88cb693995472cf84bf6fb9c3617a
! https://www.virustotal.com/gui/url/cb0992c96c240779edaf3a6b5c7b4c19eecbd983f5621a1b654ced34cb2ad739
||mybluehost.me/*unitess/$doc
||mybluehost.me/UNITEDSTATESPOSTAL/$doc
||yah.ppl.mybluehost.me^$doc
! https://www.virustotal.com/gui/url/876186ad51623f15303e6fc8565e4411545aa92a07d0c118c7cb6e3db91bba85
! https://www.virustotal.com/gui/url/114d0d1abadc10805bd8dbce5fec3d58f73494e989aadca11d0dc8b67f466142
/^https:\/\/transporta[a-z]{8,9}pro\.top\/i\b/$doc,to=top|~usps.com
! https://urldna.io/scan/673d512e85f8a9a88ee409e2
! https://www.virustotal.com/gui/url/39e12c416f93afd6e666595aa1a1856578ea27720677fc8e7f954dd5e3a8f3f7
/^https:\/\/[a-z]\.[a-z]{10,}\.top\/l(?:\/|$)/$doc,to=top|~usps.com
! https://urldna.io/scan/66ac783f3e864409c90271ce
! https://www.virustotal.com/gui/url/839734b93740d77e02daa895fd4ebe200e54e66c6e2d99a844a3b727cad9d6e9
||usps.*.top^$doc,to=top|~usps.com
! https://www.virustotal.com/gui/url/15d93929f279c01081acbaf92154c4705e9ff235e3fe339d330aa4d9937c669f
||wpenginepowered.com/usps/$doc
! https://www.reddit.com/r/phishing/comments/1hc0qiy/is_this_a_scamfake_number/
! https://www.virustotal.com/gui/url/ce425295e72396f58f308fc806facb264bca671c58428ea9b1367fc6e62d2ec8
||usps.*.sbs^$doc
! https://www.virustotal.com/gui/url/1dfeccb4f1210b4a962751e4e0ffc64a224d653e7bd14bda3b1a2e7c252091ae
||informed.delivery*.top^$all
! https://www.virustotal.com/gui/url/91d4560abcb8a03cc50d943bc4534c58935968a2b7c80f0c63cca78a84ce0ddc
||info-tracking*.cc^$all
! https://www.reddit.com/r/phishing/comments/1o2aund/usps_scam/
! https://www.virustotal.com/gui/url/bac5491bc35329d828235f17d53502e03cce35b1bb50cf1b48f2711718831319
||uspost.*.cfd^$all
||cfd^$doc,ipaddress=43.166.238.4

! weebly/square phishing
/^https:\/\/(?:[a-z0-9]{2,}-)+10\d{4}\.weeblysite\.com\//$doc,to=weeblysite.com

! spotify
||keepo.io/opddater-spotifykonto-informas/$all
! https://community.spotify.com/t5/Accounts/Phishing-Email/td-p/5877600
/^https:\/\/[^.]+\.codeanyapp\.com\/wp-content\/.+\/spo[a-z]{2}i\//$doc,to=codeanyapp.com
||codeanyapp.com/*/spotii/$all
||codeanyapp.com/*/spoofi/$all
||mybluehost.me/*/MitID/$doc
||airpos.co.kr/.well-known/pki-validation/*/MitID/$doc
||autolocksmithpro.com/spt/$all
! https://urldna.io/scan/674294bdb5cc598397d25392
! https://www.virustotal.com/gui/url/2afd8fdb0de2cbf5c56ab9480426fd19cc0037d43d1453b19deb28ae60bd78e6
||spoti-safe-support*.codeanyapp.com^$all
||spoti-*.codeanyapp.com^$doc
! https://www.virustotal.com/gui/url/475155b96214f5e3a49c9f6d369879b0858477f84232cc11818d4cea64d5d3d2
||spolify-support-premium.codeanyapp.com^$all
||codeanyapp.com/Issued/settings/$doc
! https://www.virustotal.com/gui/url/5f5d2e941e3e44e01a4ec88d3732113195e2afdef511d3635fbd291495f82f4f
||mybluehost.me/spot/Account/$doc
! https://www.virustotal.com/gui/url/e12ae2bc0550053fb14c5626719115d304edc007040499a44cb4113cd9e41d0e
||mybluehost.me/dse/main/$doc
! https://www.virustotal.com/gui/url/0ceb34c5d826a3c5f8f0c736ffe7b7e65d14b21e331ffeb64a619e894c340f12
||mybluehost.me/MUSIC/SPOTIFY24K/$doc
! https://www.virustotal.com/gui/url/079563d015c00efbca61d80c59f00d19ef06ccbc9922565e1d6d388c99986ba4
||veratv-mtic.vera.com.uy/r/$doc
! https://urldna.io/scan/67507c616f88e161d7e39ff9
! https://www.virustotal.com/gui/url/45fb09e403d0d5908fdc97144ba574cb72b2c909993402d7dd525faae65252bc
||freewebhostmost.com/*/spotify/$doc

! swisspass
||divinedownload.com^$all
||swiss-passapp.web.app^$all
||mybluehost.me/CFF/$doc
||mybluehost.me/--/SBBCFF$doc
||mybluehost.me/SBB.CH/$doc
! https://www.virustotal.com/gui/url/92187fec54723b98e4a67ce247dfcc2a18d6fe2ad425c9ef8d926abd8fac9a10
||mybluehost.me/*/swisspass/$doc
! https://www.virustotal.com/gui/url/1b04ebdcbc185c83d58b89b7f5d0220f440aa8ef7652138a1ba30bf981e841f4
||mybluehost.me/Konto/SBB/$doc
! https://urldna.io/scan/6677f243e02f8fe8990a0417
! https://www.virustotal.com/gui/url/0fec438409b71ba8f28fd33e31a13227836fc644467d625aa2b98986ba21ce3a
||mybluehost.me/sbb-ch/$doc
! https://www.virustotal.com/gui/url/d06025e9a812f7d17e3febbba184c6f7a74904fcec32cd0202fb429b5ceef0e4
||mybluehost.me/SBB/$doc
||the.jxc.mybluehost.me^$doc
! https://infosec.exchange/@urldna/112428358456633497
||mybluehost.me/pass/index/$doc
! https://www.virustotal.com/gui/url/5ca860461f268be334cb25520f39cb73eb4666019b8c095dbb2951124bb8766d
||mybluehost.me/seitech/$doc
! https://www.virustotal.com/gui/url/fdfaee41433e38d0aad765575c0ebd0edea90c19bc028a0d9f6438e563f36cf5
||mybluehost.me/*/swpassfr/$doc
! https://infosec.exchange/@urldna/112316881794824268
||mybluehost.me/*/CHFINAL/$doc
||acconsult.info/*/CHFINAL/$doc
! https://infosec.exchange/@urldna/112441688955721080
||sviluppo.host/sbb-chf-id/$doc
! https://www.virustotal.com/gui/url/6f294b5e73e405ef5a20b9048c6ae8c86925cde499e303dcb7b107f78c9655d9
||sviluppo.host/CHFINAL/$doc
! https://www.virustotal.com/gui/url/e225d606addeced5162fc2f28cb5a6829d9e3dde8986d246c682ba79a5f6e0b0
||sviluppo.host/*/CHFINAL/$doc
! https://infosec.exchange/@urldna/112439801316174846
||wcomhost.com/spass/$doc
! https://infosec.exchange/@urldna/112658035861531160
||altitudesim.ca/*/CHFINAL/$doc
! https://www.virustotal.com/gui/url/536c73948a6fb646afe3bbd0a06889b9e4bb377eec397600321961e3d366805c
||codeanyapp.com/Swissp/$doc
! https://www.virustotal.com/gui/url/925d7839914de2aaffbf139dfb1dff9d8fee9c41b6360aaf01044dcfb491ce50
||suissscomee-correo*.codeanyapp.com^$doc
||codeanyapp.com/Sus/*/sign.php^$doc
! https://urldna.io/scan/66fbdab87023f3006d689f21
! https://www.virustotal.com/gui/url/783d501994049995741eaaa5f34f0be120fdd106eaa7c6bd47446694dff64928
||verwalten-sbb-informationen-managecff-kundenportal-online.codeanyapp.com^$all
||codeanyapp.com/manage-SBB/$doc
! https://urldna.io/scan/66f570a14bd3fd633b195269
! https://www.virustotal.com/gui/url/345b465213187507be93fc705ef0fa4a2cc6c0d458bcf0b29b220a5e1c8742e6
||codeanyapp.com/*/SWISSPASSC/$doc
||cffsbbhost-aniamaria*.codeanyapp.com^$all
! https://www.virustotal.com/gui/url/09ca05326d77f387fef2bd7bd8339221643d939ebcc2c4946ec727536ea849da
||manage-administrere-swisspass-*.codeanyapp.com^$doc
! https://www.virustotal.com/gui/url/88a463b79f93e14c7bfd831ab894e1cd94f75c8bc44b6917854cdf6d71abb2b1
||romacsystems.com/*/CHFINAL/$doc
! https://urldna.io/scan/67043f59c89a9d177fe0c3ad
! https://www.virustotal.com/gui/url/fa720cbffdfb2b9e90eb9e7ff5e989f0b665ae022871a2973c776834c6692e97
||valuge.com.ar/sbb/$doc

! swisscom
||secureserver.net/myswisscom$doc
||codeanyapp.com/Swiss_com/$doc
! https://infosec.exchange/@urldna/112546087270319031
||codeanyapp.com/info/cc.php^$doc
! https://infosec.exchange/@urldna/112474128904326825
||mybluehost.me/neww/$doc
! https://www.virustotal.com/gui/url/dc05982c117efe86a9230d707df6f72a81c98251949428004e8c154bd578d717
||mybluehost.me/*/csom/$doc
! https://infosec.exchange/@urldna/112485099916668793
||secureserver.net/ruckstantung907921/$doc
! https://www.virustotal.com/gui/url/10d8d5cb68cf0f03cb48b3c5000af376e656858a0722bbf8d95cb0935086ed33
||sviluppo.host/df/pass.php^$doc
! https://www.virustotal.com/gui/url/b125bd6b92439b436f012c539b1601915c8146703187c0b86119a4fe0c8d8e82
||mybluehost.me/sssssssssssssss/$doc
! https://www.virustotal.com/gui/url/30b8b4ed87742d205e71d3d8d045cc07108bd46aa060e4bd0cbd788719e06dec
||mybluehost.me/comssss/$doc
! https://www.virustotal.com/gui/url/59261853c67824755221c072c0014f52c675e2f856c26b50dde5065fc7ec5eab
||mybluehost.me/swisscom-login/$doc
||mst.ail.mybluehost.me^$doc
! https://www.virustotal.com/gui/url/dc9f208e3448b0d1db82cfcaf5b4ea6fbf5c1e6da5d95cc7e3fe84fe34bd5909
||mybluehost.me/*/swisscom/$doc
! https://www.virustotal.com/gui/url/aaaf519966c47df9632c128df1d10e6d85ba70f07a5dc2843b2c091dfbe25a73
||codeanyapp.com/swiss-login/$doc
! https://www.virustotal.com/gui/url/cb52891c4aa112bee959dff579cc7f62498eabdbd2070213211f06b1bbd153af
||nxcli.io/pub/swissii/$doc
! https://urldna.io/scan/67a76df2f3c5101e4317697e
! https://www.virustotal.com/gui/url/e24f078d080ca557260399cb9452e3c3984c0a0830e167f2b86494f155f76f44
||cfolks.pl/*/swisscom/$doc

! swisspost
||swisspost.web.app^$all
! upc
! https://urldna.io/scan/66789b05c766226ae8d6e379
! https://www.virustotal.com/gui/url/94fdcf815a75d8182fee65b9f90fcbdd03498c33f6200e0c951a1a5874b2ad1d
||wcomhost.com/ch/upc/$all

||crypto-idx.com^$all
||base-dawgz.web.app^$doc
||whitelist-memefi.com^$doc
||gz-gmy.com^$all
||tpro-airdrop.pages.dev^$doc
||ledger-apparaat.com^$all
||tomarket-rewards.vercel.app^$doc
||tronlink-walletextension.webflow.io^$all
||itrustcapitaalloginn.webflow.io^$all
||secure---sso---robinhood---com-cdn.webflow.io^$doc
||sso--en--cobo--trsuted-auth.webflow.io^$all
||netcoislogin-zone.webflow.io^$all
||biytmartlogine.webflow.io^$all
||pepecoinsuper-airdrop.pages.dev^$doc
||appmemekombatclaim.pages.dev^$doc
||testmyaa.pages.dev^$doc
||claimspaace.pages.dev^$doc
||blastairdropclaims.pages.dev^$doc
||harambetok-eng.pages.dev^$doc
||rarepepewtf.pages.dev^$doc
||miles-plume-network.pages.dev^$all
||agentlayer-xyz.pages.dev^$doc
||pngvnreward.pages.dev^$doc
||trava-dapps.pages.dev^$doc
||web3mainnetdapp.pages.dev^$all
||web3connectfix.pages.dev^$all
||syncwallet.pages.dev^$all
! https://infosec.exchange/@urldna/112379049102904534
||azuki-*.vercel.app^$all
! https://infosec.exchange/@urldna/112246221074509842
||base-swap-frontend-*.vercel.app^$doc
! https://urldna.io/scan/66af69831a242fe968f80145
! https://www.virustotal.com/gui/url/c245ab34fb1e8cf41cba99c1fb61dfbfef60d98044ebac3abc65c1b9a150aea4
||final-claim.pages.dev^$doc
! https://urldna.io/scan/66bb2923fc6db4b70d37ece8
! https://www.virustotal.com/gui/url/6bebec722c703a448f14d1650315b534ee785959080537cebada1d6120883763
! https://www.virustotal.com/gui/url/4e1f0d563a121e484113dcf1582323732ce110451f33e939985911c248f19c31
||alienxchain*.pages.dev^$doc
! https://github.com/uBlockOrigin/uAssets/issues/32047
||tariprotocol.com^$doc

! swan.com
! https://www.reddit.com/r/Scams/comments/1o1muxh/us_has_anyone_ever_heard_of_httpsswan9topassets/
/^https?:\/\/(?:www\.)?swan[0-9]\.[ctv][cio]p?\//$doc,to=cc|top|vip
||cc^$doc,ipaddress=15.207.81.128
||top^$doc,ipaddress=15.207.81.128
||vip^$doc,ipaddress=15.207.81.128

! uphold
! https://www.reddit.com/r/CryptoScams/comments/1o18i71/sketchy_looking_url_to_access_uphold_trading/
/^https?:\/\/qqh[0-9]\.mom\//$doc,to=mom
||bitoranges.com^$all
||hswgs.com^$all
||putrans.com^$all
||qqh4.mom^$all
||qqh5.mom^$all
||snfee.com^$all
||zbzqgm.com^$all
||zykqk.com^$all
||com^$doc,ipaddress=206.82.7.123
||mom^$doc,ipaddress=206.82.7.123

! uniswap
||interface-git-parallel-cypress-uniswap.vercel.app^$doc
||web3-projects-beta.vercel.app^$all

! metamask.io
||clinitex.fr/META5KYC/$doc
! https://www.virustotal.com/gui/url/7ef12f181e0c1d09475f2fd51b19b06ff393f4c686abfb89b312cd47447ac7bf
||metamask*.webflow.io^$doc
! https://urldna.io/scan/67854752459acf9a4783a52c
! https://www.virustotal.com/gui/url/cee662e90d9fc49c35fbab24dab21abd84ccf517379594f35fd525f96ecd102e
||keychron.in/wp-includes/certificates/home^$all
! https://www.facebook.com/VnRebates/posts/pfbid022K3zdFtG46K1Ww8RqRxVXiza83xstsLYz1tTFTwxJZpEKxCtnZH7kY1q4cLGzDH9l
! https://www.virustotal.com/gui/url/2ae5fafa33742cf0501bff96b2c4465569dc5c19619552ec727d7eea69bd0518
||metamask-support.io^$all
||mertamask.com^$all

! bitvavo
! https://www.virustotal.com/gui/url/745c24c2aa94c7f7f499e025206ae5f6b4a924745cdfe5a236f1b2294d205988
! https://www.virustotal.com/gui/url/6d933508beb9ccdb687fbbda485debca1b600b8fa3144bf4c5aabd8192b6f94e
! https://www.virustotal.com/gui/url/ed82c68f48ab8a115fef0919482e5a7757fe01cd40efd82e409cc5c8acea696d
! https://www.virustotal.com/gui/url/ead9cba1887cf0f63e532da6b5cbb77d8efc1b88a713765bf06448d84d3b08e6
/\.(?:cc|com|top|vip)\/index\/index\/lang\/[a-z]{2}-[a-z]{2}\b/$doc,to=cc|com|top|vip
/index/index/*Trade/tradelist^$doc
||bitvavo*.cc^$doc
||bitvavo*.top^$doc
||bitvavo*.vip^$doc
! https://www.virustotal.com/gui/url/2f9becce50774b02440cf2841612005d5f2fad9bc20a59e8b748896290912929
||bitvavo.com.nl.$doc,to=~bitvavo.com

! trustwallet.com
||auth--sso-trust.webflow.io^$all

! binance
||bnbc-onay-sayfasi-global.smtp-host.de^$all
||dendreonlawsuit.com^$all

! https://www.virustotal.com/gui/url/baaec2820a40db4dace37d5955dcb9f9db10ea16337b06b8a4a814bb67c27b13
||pub-*.r2.dev/ledge.html^$doc

! pinksale.finance
||pinksales-pools.pages.dev^$doc
||pink-sales.pages.dev^$doc
||pink-sale.pages.dev^$doc

! coinbase
||coinbaseexnsion.webflow.io^$all
! https://www.virustotal.com/gui/url/35ca5ae411511f7c68dd4297ac19551e0dc2d562572c35234539516970135d61
||e-stata.ru/track/1/$all
! https://www.virustotal.com/gui/url/aad6cef484f8b6f4b186003ec4fe426cf01ea15cea8b668cff7315be7a8f937f
/^https:\/\/(?:[^.]+\.)?\d{6}-coinbase\.com\//$doc,to=com|~coinbase.com
! https://urldna.io/scan/673815d0415af7ad29e1843a
! https://www.virustotal.com/gui/url/e79f7ed84af220f6af9f63754c6802f2d5ba30b0c57199ad159b0626ec1734cb
||llq.rsq.mybluehost.me^$all
||mybluehost.me/wp-admin/maajoun/$doc
! https://www.virustotal.com/gui/url/7ded02cc0d6e76dddd81c80c1ee8acd63d01bfc59f82900632ff8e2fde616881
||mail.*-coinbase.com^$doc
! https://www.virustotal.com/gui/url/593ca31ca3cf2daa19831af584b382d1ff2dd49fcf05abb97a025dca055edf64
||gawavalen.fun^$all
! https://www.virustotal.com/gui/url/4f8a2efde39094ce255277c0b8dabd46f2f663999a137136f68547e6e3c7c27a
||paticableharent.com^$all
! https://www.virustotal.com/gui/url/753d23ebcaae93727778a384ee4d219327436cd5b34262d96c5ab5de652328b2
||lameo.buzz^$all
||bitenve.cc^$all

! imtoken
app##center#yangchen > iframe#external-frame[src="https://im136.mom/"]:not([class])

! pancakeswap
||pancakesswap.top^$all
/^https:\/\/pancake(?:dro|swa)pclick\d+\.vercel\.app\//$doc,to=vercel.app|~pancakeswap.finance
||pancakeswap-*.vercel.app^$doc
||pancake-swap*.vercel.app^$doc
||pancake-nft*.vercel.app^$doc
! https://urldna.io/scan/66a4bc168460353814f6213e
! https://www.virustotal.com/gui/url/7528b31829b0fcc71f1ff78c7f2f57511b5a5bda28523f6bf82b80e92c111b21
||pancakeclaim-*.vercel.app^$doc
! https://urldna.io/scan/674409c3ddfe5e2d40390738
! https://www.virustotal.com/gui/url/33c94f8d107bcdf6bb9c625b3d028193e9727ff537a64887ed092b942bc7b13b
! microsoft.microsoftedge.pancakeswap.finance.expolorer.im
||pancakeswap.finance.expolorer.im^$all
! https://urldna.io/scan/66a4bc858460353814f62149
! https://www.virustotal.com/gui/url/3af2108517176d42953dbd322c5ba1ad071121986debd4dbe38041700b3037fc
||pancake.run^$all
! https://www.virustotal.com/gui/url/ef9755fcb211a668986b9afc5187577c92fb8c8bf62057bf9d0b59333827a35a
||pay8-2v-*-gmailcom.vercel.app^$all

! ndax.io
||sso-nndax-io-auth.webflow.io^$all
||public---sso--ndax--x---cdn.webflow.io^$all
||sso-*.webflow.io^$doc
-sso-*.webflow.io^$doc
-ndax-*.webflow.io^$doc

! openphish
||mmitalianbeef.square.site^$all
||bigbauer.com^$all
||vangphutai.com^$all
||autoscurt24.de^$all
||hk668.cc^$all
||dc.tensgpt.com^$all
||carrefour-enbacktoschool4.pages.dev^$all
||sacolamobile.influenciadormagalu.com.br^$all
||globalgrainsadf.com^$all
||vzla-qr.com^$all
||inmotiongmbh.com^$all
||hausbank-ssk-cuxhaven.de^$all
||vkorg.webservis.ru^$all
||gumeminlogi.webflow.io^$all
||beluxrepm.followme.fr/FolloWMe$all
||mybluehost.me/Cope346/$all
||allbikesputte.be/sumconfirm.php/$all
||glitch.me/pdf.html?email=$doc
! https://www.virustotal.com/gui/url/ac091676a63040d2e855eeaabe9e13cc18eadc5f644bd494763edde0270be742
||chattts-49f1.beszyrecala.workers.dev^$all
! https://www.virustotal.com/gui/url/51313f8d841a87fbda4029330b190c9e5f4bd4c70646f2a73b10771d677a8ab2
||cursorltd.com^$doc
! https://www.virustotal.com/gui/url/0fded7ccb337703e58ddc34b8a7c89f87fdcb102a543136e434b4f1783d37935
||utahpolicetraining.*.mybluehost.me^$all
! https://www.virustotal.com/gui/url/7d2852015c759596a7be24edf4043c58dc246bfb027a625a4de4d24ed1a81fbc
||mybluehost.me/*/choronopost/$doc
! https://www.virustotal.com/gui/url/dd422322662ef1547afcc735850a4a4ee1ae601cb1502701174730f24f4e9ac0
! https://www.virustotal.com/gui/url/5b84e52dfe110a03f08cf7165bd70e003bb45de1a0f0440a0b370b2e2de55421
/^https:\/\/([a-z]-){10,15}[a-z]\.(?:com|net|org)\.tr\//$doc,to=com.tr|net.tr|org.tr
! https://www.virustotal.com/gui/url/ef4d71bf92ccca6f4079f06f4c519e9d21bc45e240ea32a42561b5684a2305da
/views/go/start.php^$doc
! https://www.virustotal.com/gui/url/09b11b4c345be67d2e7659fa2f1d1c07a000bc3cebbbbed17e891865a355d07e
/^https:\/\/pub-[a-f0-9]{32}\.r2\.dev/be[a0-9]\d{2,3}\.html\b/$doc,match-case,to=r2.dev
! https://www.virustotal.com/gui/url/f6313df525470be85c52d6b7ec608c212bd3ec8eda8307f210371b221f24612c
||namecheapsupport-*.codeanyapp.com^$all
! https://www.virustotal.com/gui/url/533a27da14f888f81e8afad084a17a7e1b2dd574cd90b869b21c993283862927
! https://www.virustotal.com/gui/url/f3bf8c53016b9b45de66415c7d948cd79c8f2d83b270e7135b21056fc7479b5d
||mybluehost.me/vcd/$doc
||kvv.jxc.mybluehost.me^$doc
! https://www.virustotal.com/gui/url/484243c62c486e1c6b6544028fa5b1e30c1643fea446e5d89e6912d132e04b22
||web-interface.eu^$doc
! https://www.virustotal.com/gui/url/ec321ee03c2a6081a48bdfb72bd8e3995f8fd79e2a253a5cb8f79026d4c1d940
||mybluehost.me/servizi/assistenza/$doc
! https://www.virustotal.com/gui/url/95d15ded75c863d83ec7a52e0039975f826a95a41e4c9e5f5716e3526c61fb26
||mybluehost.me/wise/number-account-$doc
! https://www.virustotal.com/gui/url/034cc004f078ee24b7f4377283d50d128f547de4339a51c8e29a8f8e36272b13
||smrturl.co/o/*/53458494^$doc
! https://www.virustotal.com/gui/url/e67f0541ea51baa725f5d46407f919246af360cf78bc40e0c17cba5ffbc39764
||agripro-fr-*.com^$doc
! https://www.virustotal.com/gui/url/df55aa990ceb6b188ea2bc71d8c53d5543ef819ff6980441733c47aab107ba03
||notifyhubss.net^$doc
! https://www.virustotal.com/gui/url/1a661786267f134f0db0e0c38c8a943b761fdc3024dfd83292bd92f5b87790db
||aolmaiillogin.blogspot.$doc
! https://www.virustotal.com/gui/url/93d0fd19d0ee6dec3c47f9cb2eea7aae77866dcefe75c4fae0f3a9e6d46a8be7
||afflatus.consulting/deutschepost/$all
! https://www.virustotal.com/gui/url/0342f75ca1638cd23da5969237102207799c8b9d0f27935db9bec3c1e73603fc
||info-espanol-id-configes*.codeanyapp.com^$all
||codeanyapp.com/dgte/$doc
! https://www.virustotal.com/gui/url/9c2f9548f9c46df8806b6fe7f75154fab6ad25508379e762c73c7d1f7d703555
||lcldetecthumainweb*.firebaseapp.com^$all
! https://www.virustotal.com/gui/url/a187aca9b762ddf1572d5049d20892e25b274b3809e0db93b001826d60b3d8dc
||freewebhostmost.com/consegna-pacchi/avviso/$doc
! https://www.virustotal.com/gui/url/d5d4656684e01ec70403cb9623c2045239f3ceccdfaa76d64370fd3ef442e9c5
||appinstallcheck.com^$all
! https://www.virustotal.com/gui/url/489f451f1e42d3bf60b3736cd04d836d6f798cd1adb3232f90fc752d04afd878
||allegro*/aukcja/$doc,to=buzz|icu|shop
! https://www.virustotal.com/gui/url/3ff7013630ec52ca97ead99e456af477f027dbb7fb75a529536c35714d91d8d7
||shop/au/uqmobile^$doc
! https://www.virustotal.com/gui/url/9c79f4b2c668cfb077990b88fd4c79d46cb23a989293d6de5e72fcd4d6e02b48
/^https?:\/\/[-a-z]{4,}\.(?:com|org)[-.][-a-z]{2,}\.(?:cc|top|vip|world|xin)\/pay\b/$doc,match-case,to=cc|top|vip|world|xin
/^https?:\/\/[-a-z]{4,}\.(?:com|org)[-.][-a-z]{2,}\.(?:cc|top|vip|world|xin)\/us\b/$doc,match-case,to=cc|top|vip|world|xin
! https://www.virustotal.com/gui/url/8dacd7644def349c4f653861107b1ae465689e42b2195756e5a7606d27a5f5ae
||secure.*.win/pay^$doc,to=win
! https://www.virustotal.com/gui/url/c9d0ddc98f30109abf93eccb33297b72b1bb87867961ad92ed7b80ebd831d20e
||shimura-china.com^$all
! https://www.virustotal.com/gui/url/18f3f3c6c0ec589769e254f5a5c42101c4b29c04e115ac61f0a57f97ccd51402
||qufu.com.cn^$all
! https://www.virustotal.com/gui/url/7e93bd06882beb5983367612f676d7dddfa9b49211869d84a055205c432617bd
||glitch.me/public/NFCUAccess00.HTML^$doc
! https://www.virustotal.com/gui/url/587cfbef067cd9ca09bb143d90ee56ec56d87dc5bfe5448aaffcd33ce8a35cf7
||gz-plsl.web.app^$all
! https://www.virustotal.com/gui/url/135f1a5f8e135ab5b94d68d0daba31a5b79b8a229b1f4ff7712500c4e16adf2c
||vodafonetopup.com^$all
! https://www.virustotal.com/gui/url/77c234c1e649a27ef9179cf694dd58f6e7e205b4117e7b22eb6781af5941da86
||aliique.fr^$all
! https://www.virustotal.com/gui/url/0cc7740708c3ddf4490501a69f521adda82a218a9f296323756b39cf3fe0d289
||luckygifthk.com^$all

! docusign.com
||signature-rho.vercel.app^$all
! https://urldna.io/scan/66acf1d95524ec1c98282e3f
! https://www.virustotal.com/gui/url/ac02b390f9ea3f865b7fb2148e42c48c7fe0c51b6c7f868ad7f762a44e463a39
||f1nancier.com^$doc
! https://www.virustotal.com/gui/url/6e9187f7fd43794da064ee58f10f92f1f2b43dd968fcc3f5b915b680f5f61d07
||pub-*.r2.dev/alt_type.html^$doc
||pub-*.r2.dev/auth_gen.html^$doc
||pub-*.r2.dev/auth_response.html^$doc
||pub-*.r2.dev/auth_start.html^$doc
||pub-*.r2.dev/DocuSign.html^$doc
||pub-*.r2.dev/doc_start.html^$doc
||pub-*.r2.dev/dse_sign.html^$doc
||pub-*.r2.dev/response_start.html^$doc
||pub-*.r2.dev/response_type.html^$doc
||pub-*.r2.dev/secure_response.html^$doc
||pub-*.r2.dev/traffic.html^$doc
||pub-*.r2.dev/utility_base.html^$doc
||pub-*.r2.dev/docuss_3456787654324567897865433456789.html^$doc
! https://urldna.io/scan/674d19c2f8fa42d3049b4db3
! https://www.virustotal.com/gui/url/a9f87f6daa95d251cf5102e33caedc158d636bb4df8bf1f3009f524b4c2c930b
! https://www.virustotal.com/gui/url/4f19f27cd1a1d6184dae8450a7c39b5b6fbdb0721111bc6d7bd7ae175b2aee46
||pub-*.r2.dev/gatewaymyoffice.html^$doc
||s3.amazonaws.com/*_singlesigninh.html^$doc
! https://www.virustotal.com/gui/url/70e33154f3804e18f2bdf6d6b1be28932f95c099e645249461ff47174c52bc10
||edgeone.app/gotadocsignnewdocsing.*.html$doc

! https://khonggianmang.vn/uploads/2023_CBT_47_01103e7ccb.pdf
||didongvietstore.com^$all

! https://khonggianmang.vn/uploads/2023_CBT_48_4807790772.pdf
||tin-dung-$doc
||khcn-tindung-$doc
||viettelgroup.com^$all

! https://khonggianmang.vn/uploads/2023_CBT_50_f8da1fd477.pdf
||khach-hang-the-$doc

! https://khonggianmang.vn/uploads/2024_CBT_09_4c59decfba.pdf
||chamsockhachhang-$doc

! https://khonggianmang.vn/uploads/20240412_BCT_03_2024_V1_f9a4a7619c.PDF
! /^https:\/\/hdsaison-?[a-z]{2,}\.(?:cc|com|vip)\//$doc,to=cc|com|vip|~hdsaison.com.vn
/^https?:\/\/dienmayxanh[-a-z0-9]+\.com\//$doc,to=com|~dienmayxanh.com
/^https:\/\/dich-vu(?:-[a-z0-9]+){2,3}\.com\//$doc,to=com
/^https:\/\/zla\d{3}\.top\//$doc,to=top|~tiki.vn
||cskh-vib-$doc
||cskh-vib.$doc
||chamsockhachang-$doc
||chamsocthekhachang-$doc
||nang-cap-$doc
||hdsaison-$doc,to=cc|vip|~hdsaison.com.vn
||dichvucong.$doc,to=~dcs.vn|~gov.vn
||tikimall.$doc,to=tikimall.*|~tiki.vn
||taikhoanvps.com.vn^$all
||motaikhoanchungkhoanvps.com^$all

! https://khonggianmang.vn/uploads/2024_CBT_21_c7d8f95f66.pdf
||tpbankvn.workplace.com^$all

! https://khonggianmang.vn/uploads/2024_CBT_22_26eef5509b.pdf
/^https:\/\/tdk[det]0[0-9]\.com\//$doc,to=com|~tiki.vn
||soppe68.$all,to=~shopee.vn

! https://khonggianmang.vn/uploads/2024_CBT_23_cdbc1a35e4.pdf
/^https:\/\/(www\.)?sp\d{4,5}p\.com\//$doc,to=com|~shopee.vn

! https://khonggianmang.vn/uploads/2024_CBT_25_32ceacddc3.pdf
||vib-*.com^$doc,to=com|~vib.com.vn
||vib-*.shop^$doc,to=shop|~vib.com.vn
||binhchoncuocthivetranhsinhvien2024.weebly.com^$all

! https://khonggianmang.vn/uploads/20240701_BCT_06_2024_V4_48f8dba76d.PDF
||uudai-tructuyen-$doc

! https://khonggianmang.vn/uploads/2024_CBT_27_5b8aa10967.pdf
||uudaikhachhang-$doc
||nang-hang-$doc

! https://khonggianmang.vn/uploads/2024_CBT_29_32b001d150.pdf
||hethongvaynhanh247.com^$all

! https://khonggianmang.vn/uploads/2024_CBT_31_7548fefc87.pdf
||baoviet*.vip^$doc

! https://khonggianmang.vn/uploads/2024_CBT_32_7b55a3e3fc.pdf
||hotrokhachhang-$doc
||cham-soc-the-$doc
||vssid.*.cc^$doc

! https://khonggianmang.vn/uploads/2024_CBT_35_86bfef4e1e.pdf
||hethongnoibo.bio.link^$all
||baoviet*.top^$doc
||giaohangtietkiem247.$all,to=giaohangtietkiem247.*|~giaohangtietkiem.vn

! https://khonggianmang.vn/uploads/2024_CBT_41_2e21dc3d54.pdf
||uudauthekhachhanh-$doc
||chamsocthe-$doc

! https://khonggianmang.vn/uploads/2024_CBT_43_c3bec6c039.pdf
/^https:\/\/amazon[a-z]\d\.com\//$doc,to=com
||dienlanhdienmayxanhvn.com^$all

! https://khonggianmang.vn/uploads/2024_CBT_44_c16e3ef30d.pdf
||cskhtructuyen-$doc
||vnairlines.net^$all
||tikione.vip^$all
||tikifreeship.$all

! https://khonggianmang.vn/uploads/2024_CBT_45_94e8b27e5a.pdf
||tiktok-svip*.com^$all

! https://khonggianmang.vn/uploads/2024_CBT_46_3a94e9ec2e.pdf
||khach-hang-$doc
||nhantienquocte*.vercel.app^$doc

! https://khonggianmang.vn/uploads/2024_CBT_47_e86306b303.pdf
/^https:\/\/giaohangtietkiem\w+\.com\//$doc,to=com|~giaohangtietkiem.vn
||khuyenmaidacbiet-$doc
||uudaidacbiet-$doc

! https://khonggianmang.vn/uploads/20250602_BCT_01_2025_v1_5fb3de74c1.pdf
/^https?:\/\/amazo[a-z]{2}\d\.com\//$doc,to=com|~amazon.com
||dienlanhmayxanh.com^$all
||kythuatdmayxanh.com^$all
||khuyenmaithang-$doc
||han-muc-the-$doc
||hotrodacbiet-$doc
||newmall*.cc^$doc
||chinhphu.*.org^$doc
||vienthongviettel.vn^$all
||vincomplaza.*.top^$doc
||westernunion*.wixsite.com^$doc

! https://social.immibis.com/notice/AkopNrn6iDJgMoTPH6
##html[lang] > body.startnew > div#sections > section#section_uname

! https://social.immibis.com/notice/Akt1pxOHSkHXvMrTTk
||datumdellago.com^$all
||clinicaimplantologica3d.com^$all
||gruposabar.com^$all
||xalatlaco.org^$all
! https://www.virustotal.com/gui/url/7761b06fcec8382fade116ee7e4bcfa4f654c42e132629c82a3781ce0640c8cc
||r2.dev/INV-CHKCOPY-Remittance-Overpayment%20Refund$doc

! https://social.immibis.com/notice/AkvRQJ3fGcfeihZGk4
##html[lang] > body:not([style]) > div.captchaBody
||cam/secured/host/*.php|$xhr,3p,domain=r2.dev
||implarededeensino.com.br^$all
||vertiselevadores.com.br^$all
! https://www.virustotal.com/gui/url/0198904efc817234dda14b543a3644473d65939aef0bb7b87c912ca063869f9b
||r2.dev/Outlook%20Secured%20Document$doc

! https://social.immibis.com/notice/AkwoyOsqbfJIjlh7GC
! https://urldna.io/scan/679e4fbadfbd87ce7437f173
! https://www.virustotal.com/gui/url/26646f2c4dcf3184642d13ed89cbf9dfc28b4d09a089ef7b55904ae9c0da9785
! https://www.virustotal.com/gui/url/958a09b666417db11ddeed57e7fd829e19669623cb5ed35e3342e7e6490150bd
/^https:\/\/[a-z0-9]{2,}\.[a-z0-9]{4,11}\.com\/[a-zA-Z0-9]{30,}\?[a-zA-Z0-9]{25,}$/$doc,to=com|~google.com|~microsoft.com
/^https:\/\/[a-z0-9]{2,}\.[a-z0-9]{4,11}\.ru\/[a-zA-Z0-9]{30,}\?[a-zA-Z0-9]{25,}$/$doc,to=ru
/^https:\/\/[a-z0-9]{2,}\.[a-z0-9]{4,11}\.su\/[a-zA-Z0-9]{30,}\?[a-zA-Z0-9]{25,}$/$doc,to=su
! microsoft
||aging3.co^$all

! https://www.reddit.com/r/phishing/comments/1fxvrn0/boys_girls_clubs_of_southeast_virginia_proposal/
/^https:\/\/[a-z0-9]{50,}\.[a-z0-9]{4,11}\.com\/[a-zA-Z0-9]{50,}$/$xhr,3p,method=get,to=com|~google.com|~microsoft.com,from=com|ru|su
/^https:\/\/[a-z0-9]{50,}\.[a-z0-9]{4,11}\.ru\/[a-zA-Z0-9]{50,}$/$xhr,3p,method=get,to=ru,from=com|ru|su
/^https:\/\/[a-z0-9]{50,}\.[a-z0-9]{4,11}\.su\/[a-zA-Z0-9]{50,}$/$xhr,3p,method=get,to=su,from=com|ru|su
|https://*.favoripirlanta.com^$doc

! https://www.reddit.com/r/Scams/comments/1bv6nyh/is_this_a_real_facebook_link/
! https://www.virustotal.com/gui/url/dec6d9d61fd01d20623f190e52acccf2bef004ec1cd11324efa93e70d417a1b5
! https://www.urlvoid.com/scan/marketplace-item-352983165488.000.pe/
||marketplace-item-*.000.pe^$doc

! https://www.bitdefender.com/blog/labs/ai-meets-next-gen-info-stealers-in-social-media-malvertising-campaigns/
! https://www.reddit.com/r/uBlockOrigin/comments/1dcnc7u/my_website_is_flagged_as_badware_risks_by_ubo/
! https://github.com/uBlockOrigin/uAssets/issues/24134
! /^https:\/\/(?:ai|art|get)?-?midjourney(?:s|ai)[^\/]+\//$doc,to=~midjourney.com|~edu|~gov
! /^https:\/\/(?:ai|art|get)-?midjourney[^\/]+\//$doc,to=~midjourney.com|~edu|~gov
! /^https:\/\/(?:ai|art|get)-midjourney[^\/]+\//$doc,to=~midjourney.com|~edu|~gov
||ai-midjourney*.$doc,to=~midjourney.com|~edu|~gov
||art-midjourney.$doc,to=~midjourney.com|~edu|~gov
||get-midjourney.$doc,to=~midjourney.com|~edu|~gov
||mid-journey.$doc,to=~midjourney.com|~edu|~gov
||aimidjourney.$doc,to=~midjourney.com|~edu|~gov
||aimidjourneys.$doc,to=~midjourney.com|~edu|~gov
||getmidjourney.$doc,to=~midjourney.com|~edu|~gov
||midjourneys.$doc,to=~midjourney.com|~edu|~gov
||midjourney.co^$all,to=~midjourney.com

! https://blog.talosintelligence.com/coralraider-targets-socialmedia-accounts/
! https://www.virustotal.com/gui/url/4084d02e0b9a73221be4a32e853f87471ca45c5a80f8c7e461e640e025503512
! https://safeweb.norton.com/report/show?url=runningapplications-b7dae-default-rtdb.firebaseio.com
! https://otx.alienvault.com/indicator/domain/runningapplications-b7dae-default-rtdb.firebaseio.com
||runningapplications-b7dae-default-rtdb.firebaseio.com^$all

! https://www.virustotal.com/gui/url/5df7c4ecaa01f24d8ccfdac5be4c0eb09a0a49c705e6b1bcfebd50f261fa5174
! https://www.virustotal.com/gui/url/70b03a18e67dfc8ae8b93c16e69c0046223cf8e312aa8f4f655e6e1498797493
! https://safeweb.norton.com/report/show?url=magicslimnhatban.com
! https://safeweb.norton.com/report/show?url=giamcannhatban.com
! https://www.urlvoid.com/scan/magicslimnhatban.com/
||magicslimnhatban.com^$all
||giamcannhatban.com^$all

! https://www.virustotal.com/gui/file/cbc37be64bbe194d3e06da6048f0db712bf8f323f78222f4265604d609fee325
! https://www.virustotal.com/gui/file/d5a0a28b2a8e97c24f12595833a0663e904e750149eb64b8b9a17f9758a5c966
! https://www.virustotal.com/gui/file/ca6d7147f4d2489bb06c9b6590ee9939c3c65165c2d584f1881d00a587fc4ce4
||github.com/linarweloper/Blumfarmbot^$doc

! https://www.cyberdaily.au/security/10614-vigilante-hacks-scam-call-centre-proceeds-to-warn-victims
||waredot.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/24189
||kmspico.*^$doc,to=kmspico.*
||kmspico-$doc
||kms-full.com^$doc
||kmspico.io^$doc
||kms-tool.com^$doc
||kmsauto.tech^$doc
||kmsauto.org^$doc
||furykms.com^$doc
||ativadorkmspico.com^$doc
||getkmspico.com^$doc
||kmspico10.com^$doc
||officialkmspico.com^$doc
||oficial-kmspico.com^$doc

! https://github.com/uBlockOrigin/uAssets/pull/24255
! https://sansec.io/research/polyfill-supply-chain-attack
! https://www.bleepingcomputer.com/news/security/polyfillio-javascript-supply-chain-attack-impacts-over-100k-sites/
! https://www.bleepingcomputer.com/news/security/polyfillio-bootcdn-bootcss-staticfile-attack-traced-to-1-operator/
! https://www.v2ex.com/t/950163
! https://www.silentpush.com/blog/triad-nexus-funnull/
||googie-anaiytics.com^$all
||bootcdn.net^$all
||bootcss.com^$all
||staticfile.net^$all
||staticfile.org^$all
||union.macoms.la^$all

! https://x.com/Polyfill_Global/status/1809122842145141114
! https://github.com/uBlockOrigin/uAssets/pull/25087
||polyfill-js.cn^$all

! https://github.com/uBlockOrigin/uAssets/issues/24262
||get-express-vpn.online^$all

! https://github.com/uBlockOrigin/uAssets/issues/24390
! https://github.com/hagezi/dns-blocklists/issues/3163#issuecomment-2229056638
||pcapp.store^$doc
||convertwithwave.com^$doc
||withsecurify.com^
||securifyguard.com^

! https://github.com/uBlockOrigin/uAssets/issues/24421
||highwaycpmrevenue.social-previews.top^$all
||clicksocialimage.top^$all

! https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/facebook-malvertising-epidemic-unraveling-a-persistent-threat-sys01/
! https://www.virustotal.com/gui/file/02b336b42d4d80ed17bf255536ecdf3d28db51bc81cc17926dee458e61f092e5
! https://www.virustotal.com/gui/url/ff01e9e3d9b91835d34ba457e2714f407acca9bf14b486b55fd9e6d6c27286f0
! https://www.virustotal.com/gui/url/14cc314140e3441870cfc94908ca49175f70bd7eca6781cd8041b16889d21452
||blue-softs.com^$all
||pmequebeclic.com^$all
||sirokataldea.com^$all
||sites.google.com/view/blue-softs^$all
||sites.google.com/view/xtaskbar-themes^$all
||sites.google.com/view/newtaskbar-themes^$all
||sites.google.com/view/awesome-themes-desktop^$all
||sites.google.com/view/taskbar-themes^$all
||sites.google.com/view/ai-image-3d^$all
||sites.google.com/view/taskbar-themess^$all
||sites.google.com/view/softs-download^$all
||sites.google.com/view/sora-ai-v2^$all
/^https:\/\/[a-z]{6,19}\.(?:com|net)\/js\?t=[_a-z0-9]+&ns=[a-z]{2}$/$script,3p,strict3p,match-case,to=com|net
/^https:\/\/[a-z]{6,19}\.(?:com|net)\/(?:static_)?file\/\?t=[_a-z0-9]+&ns=[a-z]{2}$/$frame,popup,3p,strict3p,match-case,to=com|net
/^https:\/\/[a-z]{6,19}\.(?:com|net)\/(?:static_)?file\/\?t=[_a-z0-9]+&ns=[a-z]{2}$/$doc,match-case,to=com|net

! https://github.com/uBlockOrigin/uAssets/issues/24522
||shy-boat-90ce.jiko728928922.workers.dev^$doc
||app.corn-staging.com^$all

! https://community.bolster.ai/t/crowdstrike-look-alike-domains-list/217
||crowdstrike0day.com^$doc
||bsodsm8r.xamzgjedu.com^$doc
||crowdstrike-cloudtrail-storage-bb-126d5e.s3.us-west-1.amazonaws.com^$doc
||crowdstrikeoutage.info^$doc
||mecrowdstrikesnowstandalone.azurewebsites.net^$doc
||crowdstrikereposify.net^$doc
||crowdstrike-solutions.nl^$doc
||crowdstrikefix.zip^$doc
! https://www.bleepingcomputer.com/news/security/fake-crowdstrike-fixes-target-companies-with-malware-data-wipers/
||dropbox.com/*/crowdstrike-hotfix.zip^$all

! https://www.fortinet.com/blog/threat-research/dark-web-shows-cybercriminals-ready-for-olympics
||tickets.website.com.se^$all
||ticketsparis24.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/24698
! https://www.virustotal.com/gui/url/3567cf0ebb6ab1f0cd450a21f7ecbe6c21f13f75a4f5cc0a74644b893cb80f33
! https://safeweb.norton.com/report/show?url=freeadd.me
! https://sitecheck.sucuri.net/results/freeadd.me
! https://note.com/gifted_clover95/n/na707692645ce
! https://note.com/comiciz/n/n0cc2743f61b2
||freeadd.me^$doc
||askfollow.us^$doc
||more-followers.com^$doc
||twitob.com^$doc
||twitterfollowers.site^$doc
! https://github.com/brave/brave-core-crx-packager/pull/957
##html[lang] > body#body > * > div.cv-xwrapper > div.cvc > div.cv-inner
##html[lang] > body#body > * > div.cvh.BlockClicksActivityBusy

! https://github.com/AdguardTeam/AdguardFilters/issues/185242
||cartepak.online^$doc

! https://github.com/uBlockOrigin/uAssets/issues/24779
||hkdk.events/8cjknac3yxdqk4^$all

! https://github.com/uBlockOrigin/uAssets/issues/24826
||zebg.top^$all

! https://github.com/uBlockOrigin/uAssets/issues/24916
! https://www.virustotal.com/gui/url/a69ac87c4cb253bc4fdee1874d0980807a24de54b1716022f6ecc8a2056e3d5e
/^https:\/\/help\.[a-z]{3,}-x-[a-z]{3,}\.com\//$doc,to=com|~x.com

! https://github.com/hagezi/dns-blocklists/issues/3514
! https://github.com/uBlockOrigin/uAssets/issues/25036
||onevanilla.click^$all
||bilbocine.com^$doc
||dailysmscollection.org^$doc
||surgecardinfo.click^$doc
||panoramacharter.click^$doc
||mymercy.click^$doc
||direct2hr.click^$doc
||creditcardchase.click^$doc

! https://bbs.kafan.cn/thread-2272310-1-1.html
! https://github.com/uBlockOrigin/uAssets/pull/25058
||iqpoll.cn^$doc

! https://github.com/uBlockOrigin/uAssets/issues/25067
! https://www.reddit.com/r/uBlockOrigin/comments/1f2faj4/where_do_i_send_a_phishing_site_to_be_blocked_by/
! https://www.virustotal.com/gui/url/ce9a8cf37fd8617e96d23832915d7bf2f6b2d32b810cf96b0c82eb649c32c854
||tempisite.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/25353
! https://www.urlvoid.com/scan/feather-wallet.org/
||sparrowwallet.net^$doc
||electrum.is^$doc

! https://unit42.paloaltonetworks.com/rare-phishing-page-delivery-header-refresh/
||tracker.club-os.com^
!||onelink.me/*&af_web_dp=$doc
||guide-orientation.tn/go_page.php?$doc
! https://github.com/uBlockOrigin/uAssets/issues/26798
!#if env_mobile
@@||onelink.me/*://app/$doc
!#endif
! https://github.com/AdguardTeam/AdguardFilters/issues/199381
@@||toss.onelink.me/*service.toss.im$doc,1p

! https://krebsonsecurity.com/2024/09/scam-funeral-streaming-groups-thrive-on-facebook/
||livestreaming24.xyz^$doc
/^https:\/\/(?:www\.)?[-a-z0-9]+\.com\.[-a-z0-9]+\.com\//$doc,to=com,ipaddress=148.251.54.196
/^https:\/\/(?:www\.)?[-a-z0-9]+\.xyz\.[-a-z0-9]+\.com\//$doc,to=com,ipaddress=148.251.54.196

! https://securelist.com/sambaspy-rat-targets-italian-users/113851/
||belliniepecuniaimmobili.$doc,to=belliniepecuniaimmobili.*
||immobilibelliniepecunia.$doc,to=immobilibelliniepecunia.*
||bpecuniaimmobili.$doc,to=bpecuniaimmobili.*
||belliniepecuniaimmobilisrl.$doc,to=belliniepecuniaimmobilisrl.*
||immobiliarebelliniepecunia.$doc,to=immobiliarebelliniepecunia.*

! https://github.com/uBlockOrigin/uAssets/issues/25470
||the-north-face.gr^$all

! https://sansec.io/research/cosmicsting-fallout
! https://sansec.io/research/cosmicsting
! https://sansec.io/research/cosmicsting-cnext-persistent-backdoor
! https://blog.sucuri.net/2024/11/2024-credit-card-theft-season-arrives.html
||forimg.net^$all
crimsonav.com,ngsingleissues.nationalgeographic.com##+js(acs, atob, new Function(atob()
! Group Bobry
/^https:\/\/[a-z]{7,}\.[a-z]{3,}\/get\/\?s=[a-zA-Z0-9]+=*$/$script,3p,match-case,to=~edu|~gov
/^https:\/\/[a-z]{7,}\.[a-z]{3,}\/img\/$/$script,3p,match-case,to=~edu|~gov
||marketiqhub.com^$all
!#if cap_html_filtering
energiasolare100.it,lundracing.com,red17.co.uk,workplace-products.co.uk##^div[onmousemove*=".innerHTML"][onmousemove*="String.fromCharCode"]
!#else
energiasolare100.it,lundracing.com,red17.co.uk,workplace-products.co.uk##+js(trusted-replace-argument, String.prototype.includes, 0, undefined, condition, /^checkout$/)
!#endif
! Group Surki
||cpeciadogfoods.com^$all
||clearnetfab.net^$all
||iconstaff.top^$all
||jquerypackageus.com^$all
||jqueryuslibs.com^$all
||lererikal.org^$all
adrissa.com.co,americansoda.co.uk,casteloforte.com.br,centerfabril.com.br,forqueen.cz,joinusonline.net,jollibee.com.vn,kitapsan.com.tr,mebelinovdom.com,ojworld.it,qualityrental.com,szaszmotorshop.hu,tvojstyl.sk,up-shop.org,yairalon.com.br##+js(acs, WebSocket, event.data)

! https://blog.sekoia.io/mamba-2fa-a-new-contender-in-the-aitm-phishing-ecosystem/
##html#html[sti][vic][lang] > body#allbody
/\/m\/js(?:drive|nom|sp|v)\.js\b/$script,1p,strict1p
/\/n\/js(?:drive|nom|sp|v)\.js\b/$script,1p,strict1p
/\/o\/js(?:drive|nom|sp|v)\.js\b/$script,1p,strict1p

! https://www.mcafee.com/blogs/other-blogs/mcafee-labs/behind-the-captcha-a-clever-gateway-of-malware/
! https://www.virustotal.com/gui/url/cbccfc85c6a35d83fb54471a174148addeddc78879d48a44f12d8d8b9f7055ee
! https://www.virustotal.com/gui/url/d46f89de4ff2b3be786c8973fb700f48fdaaecab6e85f72397133e1bbba6b145
/^https?:\/\/[a-z]{7,}\.com\/go\/[a-f0-9]{8}(-[a-f0-9]{4}){3}-[a-f0-9]{12}\b/$doc,match-case,to=com
/^https?:\/\/[-a-z0-9]{8,}\.ru\/\?load=[a-zA-Z0-9]+(-[a-zA-Z0-9]+)+$/$doc,match-case,to=ru
||com/go/$doc,to=com,ipaddress=3.0.82.215
||com/go/$doc,to=com,ipaddress=3.0.178.139
||com/go/$doc,to=com,ipaddress=2406:da18:3af:9302:6ead:4c78:949:685a
||com/go/$doc,to=com,ipaddress=2406:da18:3af:9302:218a:d776:533b:6b69
||rungamepc.ru^$all
||game02-com.ru^$all
||gameportpc.ru^$all
||downloadstep.com^$all
||runkit.com/wukong/black-myth-wukong-crack-pc^$all
||runkit.com/skylinespc/cities-skylines-ii-crack-pc-full-setup^$all
||runkit.com/masterposte/dying-light-2-crack-on-pc-denuvo-fix^$all
||runkit.com/dz4583276/monster-hunter-rise-crack-codex-pc/1.0.0/clone^$all
||groups.google.com/g/hogwarts-legacy-crack-empress^$all
||r2.dev/CAptcha-Verifications-$doc
/please-verify-z.html^$doc

! https://x.com/Unit42_Intel/status/1829178013423992948
/human-verify-system.html^$doc
/human-captcha-v*.html^$doc
/captcha-verify-v*.html^$doc
/verify-captcha-v*.html^$doc

! https://labs.guard.io/deceptionads-fake-captcha-driving-infostealer-infections-and-a-glimpse-to-the-dark-side-of-0c516f4dc0b6
##html > body > div.container.m-p > #checkbox-window.checkbox-window
||ajmaboxanherulv*.b-cdn.net^$doc
||anti-automation-v*.b-cdn.net^$doc
||bot-check-v*.b-cdn.net^$doc
||dedicloadpgeing*.b-cdn.net^$doc
||file-typ-botcheck*.b-cdn.net^$doc
||izmncdnboxuse*.b-cdn.net^$doc
||newverifyyourself-system*.b-cdn.net^$doc
||nikutjyjgchr*.b-cdn.net^$doc
||verification-module-v*.b-cdn.net^$doc
||verifyyourself-*system.b-cdn.net^$doc
||weoidnet*.b-cdn.net^$doc
||chromeupdates.com^$all
||fingerboarding.com^$all
||odyssey1.to^$all
||zofuk9jvv080425aq6.cfd^$all
||b-cdn.net/get-this-puzzle-solved.html^$doc
||b-cdn.net/Recap-v*.html^$doc
||b-cdn.net/verf-v*.html^$doc
/cf-check.html^$doc
/final-step-to-continue.html^$doc
/dedicated-captcha-page.html^$doc
/hcaptcha-human-check.html^$doc
/IQWJDolx.html^$doc
/JSKADull.html^$doc
/modi-cloudflare-update-new.html^$doc
/prove-human-recaptcha.html^$doc
/RYFTGJcaptchv*.html^$doc
/recaptcha-v*-protocol-$doc
/recaptcha-verification.html^$doc
/recaptcha_verification*.html^$doc
/security-challenge-captcha.html^$doc
/SYNCfuzzv*.html^$doc
/verify-human-recaptcha.html^$doc
/verify-me-first-v*.html^$doc
##.fkrc-verifywin-window
##.fkrc-checkbox-window
! https://github.com/uBlockOrigin/uAssets/discussions/17361#discussioncomment-11692494
##html[lang] > body:not([class]):not([id]):not([style]) > div.container > div.recaptcha-box
/bot-verification-check-re*.html^$doc
! https://github.com/uBlockOrigin/uAssets/issues/27463
/need-to-pass-step.html^$doc
! https://www.virustotal.com/gui/url/5f23b90e771d7fad98131f55700493fbcba615ab41a5b7c3ea7fe985eb5eb2d0
/wp-content/themes/twentynineteen/color/*/captcha.php?$doc

! https://www.reddit.com/r/windows/comments/1gkmlhp/what_does_this_windows_r_command/
! https://www.virustotal.com/gui/url/530e6d106c328dc6334383fd4de29593fc7f4591bab8df517431612c7f0cd4e6
! https://github.com/uBlockOrigin/uAssets/issues/26193
! https://github.com/uBlockOrigin/uAssets/issues/26205
||exo.io/cloudcask/$doc
/cloudflare-v1-getup-*.html^$doc
/modi-cloudflare-update.html^$doc

! https://github.com/uBlockOrigin/uAssets/issues/28950
/wp-assets-optimizer.html^$doc
##body > .security-container[style="opacity: 1; transform: translateY(0px);"]

! https://github.com/hagezi/dns-blocklists/issues/4009
! https://github.com/rustdesk/rustdesk/discussions/9679
||rustdesk.co.nz^$doc
||rustdesk.io^$doc
||rustdesk.pl^$doc
||rustdesk.secure-box.de^$doc

! https://www.netskope.com/blog/attackers-target-crypto-wallets-using-codeless-webflow-phishing-pages
webflow.io##html.w-mod-js:not(.wf-active) > body:not([class]):not([id]) > a[class="w-inline-block"][href^="http"]

! https://github.com/uBlockOrigin/uAssets/issues/25869
||coinomiwallet.cc^$all

! https://github.com/uBlockOrigin/uAssets/issues/25913
/^https:\/\/gov\.[^.]*gr\.[a-z]{2,6}/$doc,to=~gov|~edu|~gov.gr

! https://github.com/uBlockOrigin/uAssets/issues/27155
! https://freesoftwarecreative.com/pages/?f4107d2
! https://d1myn4ixnn41tz.cloudfront.net/public/external/v2/htmlxf.4151823.2951e.0.js
! https://d390icj1ta4x0p.cloudfront.net/public/ct?cpguid=&pr=0&it=4151823&w=1920&h=1080&key=2951e&m=0&r=
! https://github.com/uBlockOrigin/uAssets/issues/28422
/\.cloudfront\.net\/(?=[a-z]{0,6}\d)[a-f0-9]{7}\.js$/$script,3p,match-case,to=~d3dvi1l4i1go4x.cloudfront.net
||freesoftwarecreative.com^$doc
||macgsapptrck.com^$all
||debridleech.com^$doc
||trckkkk.com^$all
||fastorfar.com^$all
||hopgp.com^$all
||fast2cloud.com^$all
||safesendclub.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/25927
! https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-phish-n-ships-fakes-online-shops-to-steal-money-and-credit-card-information
! stage 1
||ntischoolpune.org/*.php?$doc
.php?iid=*&cid=$doc,to=~gov|~edu
.php?cid=*&pnum=$doc,to=~gov|~edu
! stage 2
||jb*img.top^$all,to=top
/\.[a-z]{3,}\/a\.aspx\?cid=/$doc,match-case,to=~com|~net|~org|~gov|~edu
! stage 3
/\.[a-z]{3,}\/products\.aspx\?cname=.+&cid=/$doc,match-case,to=~com|~net|~org|~gov|~edu
/^https:\/\/online\.[a-z]{7,}\.top\//$doc,to=top

! Fake WordPress plugins loading ads/malware
! https://www.godaddy.com/resources/news/threat-actors-push-clickfix-fake-browser-updates-using-stolen-credentials
! https://github.com/AdguardTeam/AdguardFilters/issues/191813
/wp-content/plugins/admin-bar-customizer/abc-script.js
/wp-content/plugins/advanced-user-manager/aum-script.js
/wp-content/plugins/advanced-widget-manage/awm-script.js
/wp-content/plugins/content-blocker/cb-script.js
/wp-content/plugins/custom-css-injector/cci-script.js
/wp-content/plugins/custom-footer-generator/cfg-script.js
/wp-content/plugins/custom-login-styler/cls-script.js
/wp-content/plugins/dynamic-sidebar-manager/dsm-script.js
/wp-content/plugins/easy-themes-manager/script.js
/wp-content/plugins/form-builder-pro/fbp-script.js
/wp-content/plugins/quick-cache-cleaner/qcc-script.js
/wp-content/plugins/responsive-menu-builder/rmb-script.js
/wp-content/plugins/seo-optimizer-pro/sop-script.js
/wp-content/plugins/simple-post-enhancer/spe-script.js
/wp-content/plugins/social-media-integrator/smi-script.js

! https://blog.sucuri.net/2024/11/malware-steals-account-credentials.html
! https://x.com/MBThreatIntel/status/1376662429229142022
! https://x.com/rootprivilege/status/1549799944835371008
||at^$script,xhr,3p,ipaddress=185.215.113.111

! https://github.com/uBlockOrigin/uAssets/issues/25519
! https://github.com/uBlockOrigin/uAssets/issues/26052
! https://github.com/uBlockOrigin/uAssets/issues/27270
! https://github.com/uBlockOrigin/uAssets/issues/28259
! https://github.com/uBlockOrigin/uAssets/issues/31689
||orcaslicer.$doc,to=~orcaslicer.com
||orca-slicer.$doc
||ocraslicer.$doc
||orca3dslicer.$doc
||orcaslice.$doc
||orcaslicer3d.$doc
||orcaslicerdownload.$doc
||orcaslicerofficial.$doc
||orcaslicerr.$doc
||orcaslicers.$doc
||theorcaslicer.$doc
||orcasslicer.$doc

! https://www.techpowerup.com/download/techpowerup-nvcleanstall/
||nvcleanstall.$doc
||nvcleanstal.$doc

! https://github.com/uBlockOrigin/uAssets/issues/26061
/^https:\/\/www\.air-?up-?[a-z]{2,}\.com\//$doc,to=com|~air-up.com
/^https:\/\/www\.xn--airup[a-z]{5,6}-[a-z0-9]{3}\.com\//$doc,to=com|~air-up.com
||airupgreece.net^$doc
||airupfrance.fr^$doc

! https://github.com/uBlockOrigin/uAssets/issues/26058
||ftuapps.io^$doc
||ftuapps.dev^$doc
||farlad.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/26072
||geekupdates.notion.site/Ultra-Security$doc

! https://forum.trezor.io/t/emails-from-trezor-appear-as-a-phishing-attack/13865
! https://forum.trezor.io/t/phishing-email-received-claiming-trezor-firmware-update-required/13929
||uobretailcreditmanagement.$doc
||blockfiupdates.$doc

! https://github.com/uBlockOrigin/uBlock-issues/discussions/3461
||allinoursite.com^$doc
||bteux.com^$doc
||childrenoftheclouds.com^$doc
||dating-express.com^$doc
||emailservicesnetau.com^$doc
||euromaillinnk.com^$doc
||glaters.com^$doc
||mybach.xyz^$doc
||threeneptuneboot.com^$doc
/unsub/unsub^$doc
/unsub_sent.php|$doc,method=post
! https://github.com/uBlockOrigin/uAssets/discussions/32019
/^https?:\/\/www\.[a-z]{9,20}\.com\/o-[a-z]{4}-[a-z]\d{2}-[a-f0-9]{32}\b/$doc,match-case,to=com
!#if env_safari
/^https?:\/\/www\.[a-z][a-z][a-z][a-z][a-z][a-z][a-z][a-z][a-z][a-z]?[a-z]?[a-z]?[a-z]?[a-z]?[a-z]?[a-z]?[a-z]?[a-z]?[a-z]?[a-z]?\.com\/o-[a-z][a-z][a-z][a-z]-[a-z][0-9][0-9]-[a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9]$/$doc,match-case,to=com
!#endif
/^https?:\/\/[a-z]+\.[a-z]{4,}\/oop\/\d+_md(?:\/\d+){5}\b/$doc,match-case
##html > body.hold-transition.theme-primary.bg-img[style^="background-image"][style*="wallpaperaccess.com"][style*="background-repeat"][style*="background-size"]
##html > body > div.container > form#unsubscribe-form[onsubmit="submitUnsubscribeForm(event)"]
##html > body > div.content > dl > dd.dd1 > div.min_sider > form#form1[action="unsubscribe.php"]
##html > body.body > div.container > div.content > form > table.optoutForm

! https://malwaretips.com/blogs/remove-flake-creditcable-info/
! https://www.virustotal.com/gui/url/9c04f6b29c12f7fe981be638719be31d9bcbd5bf504423c12b49d7ce445c9f6d
||creditcable.info^$all

! https://github.com/uBlockOrigin/uAssets/issues/26164
||klingxai.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/26264
||editproai.$all,to=editproai.org|editproai.pro

! https://blog.checkpoint.com/research/navigating-the-evolving-threat-landscape-ahead-of-black-friday/
||longchampblackfriday.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/26280
||igetintopc.com^$all

! https://www.reddit.com/r/Scams/comments/1h4yn23/is_this_a_usps_scam/
! https://www.reddit.com/r/phishing/comments/1h5nqhn/is_this_a_scam/
||usps-packages-*.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/26353
! https://www.bleepingcomputer.com/news/security/eset-partner-breached-to-send-data-wipers-to-israeli-orgs/
||backend.store.eset.co.il/pub/*/ESETUnleashed_*.zip^$all

! https://www.reddit.com/r/CryptoScams/comments/1h9klwr/mexc_global_exchange/
||www.*.icu^$doc,ipaddress=/^(13\.227\.254\.\d{2}|2600:9000:2(00a|1d1):[a-z0-9]{2}00:1[1c]:(7b7c|2741):(1ac|2d0)0:93a1)$/
||www.*.vip^$doc,ipaddress=/^(13\.227\.254\.\d{2}|2600:9000:2(00a|1d1):[a-z0-9]{2}00:1[1c]:(7b7c|2741):(1ac|2d0)0:93a1)$/

! fake cloudflare captcha
||pub-549d59daefd74f7583e1766800fe7b07.r2.dev^
! https://github.com/uBlockOrigin/uAssets/issues/29125
||cdncloud.icu^$all
||wallpaper-engine.pro^$all
||ide.it/wp-content/uploads/siteground-optimizer-assets/siteground-optimizer-combined-js-
/wp-content/uploads/siteground-optimizer-assets/siteground-optimizer-combined-js-0311104f6b606e1ad6e4eaeb8aa6336c.js$script
! https://www.reddit.com/r/antivirus/comments/1m8867c/fake_cloudflare_verification/
||tobias-neller.link^$all
! https://www.reddit.com/r/antivirus/comments/1o4qdsy/they_thought_they_can_trick_medont_go_to_the/
! https://www.virustotal.com/gui/url/a9ce943e3108ab00e2d2792c78d4cd5729c61e9fdb60bf39ec7d35ab46b6a4f2
! https://www.virustotal.com/gui/url/378dcbb81671d233b4654788ae7ebdbf409e7d0897e19e94292ca588661a0009
! https://www.reddit.com/r/antivirus/comments/1q1ic4y/copy_paste_cloudflare_are_they_ever_real/
rapidkil.com.au##+js(aost, XMLHttpRequest, /wp-content)
##html[data-scrapbook-source][data-scrapbook-create][data-scrapbook-title] > body.no-js > div.main-wrapper[role="main"] > div.main-content
||getfix.win^$all
||getalia.org^$all
||goveanrs.org^$all
||govearali.org^$all
/jsrepo?rnd=$script,xhr,3p
*$xhr,3p,method=get,to=org|shop|win,ipaddress=178.16.53.137
||cptchdm.icu^$all
||ncloud.icu^$all
||saocloud.icu^$all
||cptoptious.com^$all
||icu^$doc,frame,ipaddress=94.154.35.152
||icu/captcha.html$doc,frame
/captcha.html$doc,frame,ipaddress=94.154.35.152
/?ref=$doc,frame,ipaddress=94.154.35.152
! https://github.com/uBlockOrigin/uAssets/issues/31543
/captcha-loader.js?

! fake dating
/^https:\/\/[0-9a-z]{7}\.([0-9a-z]{7})\.top\/[0-9a-z]{7}\?t=\1&cid=[0-9a-z]+/$doc,to=top,match-case

! https://github.com/uBlockOrigin/uAssets/issues/26629
||dtioykqj1u8de.cloudfront.net^$all

! https://github.com/uBlockOrigin/uAssets/issues/26660
! https://github.com/uBlockOrigin/uAssets/issues/28690
!?id=*&p1=*&p2=*&p3=*&p4=$doc
||partners-tds.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/26655
! https://www.virustotal.com/gui/url/be76de7311f2989fd8bc3795e76047c8f83cbb9dc990180e985af4824269a3db
||likeyoumakehappy.xyz^$all

! https://github.com/uBlockOrigin/uAssets/issues/26672
||gtrewe.co.in^$all
! https://github.com/uBlockOrigin/uAssets/issues/26708
||fiheos.co.in^$all
! https://www.reddit.com/r/antivirus/comments/1rbascl/i_made_a_typo_in_a_government_html_address_now_i/
||sentinelbotcore.co.in^$all
! https://www.reddit.com/r/antivirus/comments/1re2ox3/im_kinda_dumb_with_technology_in_general_should_i/
||kexornero.co.in^$all
!#if !ext_ubol
/^https?:\/\/[a-z0-9]{10,}\.[a-z]{9,}\.co\.in\//$all,to=co.in
!#endif
! https://www.reddit.com/r/antivirus/comments/1rg9tbc/wife_computer_suddenly/
||vironexta.com^$all
! https://www.youtube.com/watch?v=lyIlrDQs1YQ
||fusionchainedge.com^$all
! https://www.reddit.com/r/antivirus/comments/1siu5bd/jesus_fuck_what_do_i_do/
||jartibbinght.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/26722
||maxsecurityultimate.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/26760
||hotdebrid.com^$doc
||maxdebrid.com^$doc
||anydebrid.com^$doc
||okdebrid.com^$doc

! https://www.reddit.com/r/antivirus/comments/1hzae66/what_is_the_best_thing_to_do_after_clicking_a/
||grass-io.$all,to=cc|vip|~getgrass.io
||inmotionhosting.com/~myapp/grass_air/$doc

! https://www.malwarebytes.com/blog/news/2025/01/the-great-google-ads-heist-criminals-ransack-advertiser-accounts-via-fake-google-ads
! https://github.com/uBlockOrigin/uAssets/issues/26878
||sites.google.com/view/entteraccess^$all
||sites.google.com/view/helpp2k^$all
||adsg00gle-v3.vercel.app^$all
||ads1.google.*.com^$doc,frame

! https://www.reddit.com/r/phishing/comments/1i2gi5r/is_this_legit/
||thetollroads.texas-$all,to=~thetollroads.com
/^https:\/\/thetollroads\.[a-z]+-[a-z]{4}\.[a-z]{3}\//$doc,to=~thetollroads.com

! https://blog.sekoia.io/sneaky-2fa-exposing-a-new-aitm-phishing-as-a-service/
/^https:\/\/(?:[-a-z0-9]{2,}\.){1,2}(?:[a-z]{2,3}|click|online)\/(?:[-a-z0-9]+\/){1,4}[a-zA-Z0-9]{150}\/index\?a=/$doc,xhr,match-case,method=get,to=~edu|~gov
/^https:\/\/(?:[-a-z0-9]{2,}\.){1,2}(?:[a-z]{2,3}|click|online)\/(?:[-a-z0-9]+\/){1,4}[a-zA-Z0-9]{150}\/verify\b/$doc,match-case,method=get,to=~edu|~gov

! https://github.com/uBlockOrigin/uAssets/issues/26912
||edeetion.com^$all
||cleverjumper.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/26941
||teams-live.com^$all

! https://www.bleepingcomputer.com/news/security/hundreds-of-fake-reddit-sites-push-lumma-stealer-malware/
/^https?:\/\/reddit-\d{1,2}\.[a-z]{4}\.(?:net|org|pw)\//$doc,to=net|org|pw|~reddit.com
/^https?:\/\/wettransfer\d{2}\.[a-z]{4}\.(?:net|org|pw)\//$doc,to=net|org|pw|~wetransfer.com

! https://www.reddit.com/r/Scams/comments/1i9q6d9/interact_transfer_website_scam/
! https://www.virustotal.com/gui/url/945ff04832d56ce17157c30a33e1c7f2fc7eea8577a519d7d5837f1864dd6563
||e-interac-*.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/196657
||press-continue.*.top^$all
||com/$doc,ipaddress=/^(172\.240\.(108\.(68|76|84)|127\.234|253\.132)|185\.246\.188\.125|192\.243\.(59\.(1[23]|20)|61.22[57]))$/

! https://x.com/Unit42_Intel/status/1883948928602644785
||duckdns.org/security-check/$doc
||duckdns.org/FAMOUS/Gens/$doc

! https://www.reddit.com/r/Scams/comments/1iif4o4/received_a_text_via_e_mail_from_irs/
||irs.gov.*.com^$doc

! https://www.reddit.com/r/Scams/comments/1iju9t8/can_someone_help_clarify_that_this_is_fake/
||evri.*.xyz^$doc

! https://github.com/uBlockOrigin/uAssets/issues/27109
! https://github.com/uBlockOrigin/uAssets/issues/27172
! https://github.com/uBlockOrigin/uAssets/issues/27583
||sharedrop.io^$all
||snapdrop.net^$all

! https://cyble.com/blog/deepseeks-growing-influence-surge-frauds-phishing-attacks/
||deepseek-aiassistant.com^$all
||usadeepseek.com^$all
! https://x.com/AlvieriD/status/1883450009523282280
! https://www.virustotal.com/gui/url/5059b05b49a57abb1e55efe9e811edae20d620d4fcbdbdfe595c31c16be78aa0
||gg.deepseek.$doc,to=~deepseek.com
||deepseek.$all,to=deepseek.app|deepseek.top|~deepseek.com
! https://x.com/AlvieriD/status/1887092079114817962
||deepseeklogin.com^$all
||deepseeklogins.com^$all
||deepseekapk.download^$all
||deepseekapp.download^$all

! https://www.reddit.com/r/phishing/comments/1iln9ux/is_this_a_new_scam/
! https://www.virustotal.com/gui/url/dd2c16c95013aa1a20b35b50301b1116d582be01d346dc048a894b480fbbee59
||paytoll*.top/ezdrivema^$all

! https://www.reddit.com/r/Scams/comments/1itgp4n/unpaid_toll_booth_scam/
! https://www.reddit.com/r/Scams/comments/1ivvd8u/httpsminnesotaezpasscom_and/
! https://www.reddit.com/r/Scams/comments/1ivruom/my_grandma_sent_a_copy_of_her_bank_check_to_a/
-ez-pass.com^$doc
||thetollroads-$doc,to=top|xin|world

! https://www.reddit.com/r/phishing/comments/1it5lbc/first_time_ive_seen_this_one/
/^https:\/\/help-\d{8}\.[a-z0-9]{6}-\d{2}\.click\//$doc,to=click|~facebook.com

! https://www.reddit.com/r/Scams/comments/1itaq6g/not_sure_if_this_text_from_the_irs_is_a_scam_or/
||irs.gov.*.com^$doc

! https://www.reddit.com/r/Scams/comments/1it0wrf/parking_fine_scam_spoofing_as_the_uk_government/
||govuk.*.top^$doc

! https://www.reddit.com/r/phishing/comments/1irz2ck/bro_really/
||e-navy*.weebly.com^$doc

! https://www.reddit.com/r/uBlockOrigin/comments/1j1hdul/please_add_httpsonlyfansuk_to_the_filter_list/
||only-fans.uk^$all

! https://www.reddit.com/r/antivirus/comments/1iy3ndw/bruh_all_i_was_doing_was_looking_stuff_bc_im/
||apple-protect.com^$all

! https://github.com/AdguardTeam/CoreLibs/issues/1966 Can be removed if it's fixed
!#if ext_ubol
/^https:\/\/(?:[a-z]{3,5}|[ej][ac])\.[a-z]{4,10}\.[a-z]{2,6}\/item-(?:[0-9A-Za-z]{10}|\d{8}|[0-9a-f]{32})\.html$/$doc,match-case,to=art|autos|baby|best|boats|buzz|cards|cfd|click|cyou|eu|fit|fun|guru|hair|homes|ink|lat|lol|mom|my|pics|qpon|quest|rest|sale|sbs|skin|today|top|wiki|work|world|xyz
/^https:\/\/(?:[a-z]{4,5}|[ej][ac])\.[a-z]{4,10}\.[a-z]{2,6}\/item-(?:[0-9A-Za-z]{10}|\d{8}|[0-9a-f]{32})\.html$/$doc,match-case,to=biz|blog|cc|cloud|club|info|life|live|me|one|online|shop|site|space|store
! https://github.com/AdguardTeam/AdguardFilters/commit/e1f80e3244eff4c1688c30947655ebc6f72b47cc
/^https:\/\/([a-vx-z][a-z]{2,}\.)?[0-9a-z-]{3,}\.(com|net|org)\/index\.php\?main_page=product_info(&stl=\d)?&(cPath|products_id)=/$doc
!#endif

! https://www.reddit.com/r/Scams/comments/1iyqpsn/new_digital_fearscam_unlocked_zoom_phishing/
||zoom.us*web.us^$doc

! https://www.reddit.com/r/phishing/comments/1j2yegj/finally_got_one/
||e-zpass.com-$doc

! https://urlscan.io/result/0195c345-b963-7000-8e56-212b7f83bae8/
/n/ax4mqlu25efi/b/*$doc

! https://urlscan.io/result/0195d804-d996-7001-8afc-be76c4caf798/related/
||fly.storage.tigris.dev/completing/default-page.html?X-Amz-Algorithm=$doc
||fly.storage.tigris.dev/pass-this-security-check.html?X-Amz-Algorithm=$doc

! https://hybrid-analysis.com/sample/a86e82991e518f25534e59f857ea156140b083365eadd1ee0d88517c2badf766
! https://urlscan.io/result/0195d81c-3058-7ff5-b149-2cebebf1b331/
/amvn_pops/?keyword=$doc

! https://github.com/uBlockOrigin/uAssets/issues/27800
! https://www.youtube.com/watch?v=SBTH9n6lz9o
||tlauncher.org^$doc
||tlauncher.ru^$doc

! https://www.reddit.com/r/Scams/comments/1j9omrq/ustn_never_thought_id_be_making_a_post_here/
||amezpay.com^$doc

! https://x.com/masaomi346/status/1906988126918295737
! https://urlscan.io/search/#hash%3A09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
/^https:\/\/[a-z]{7,8}\.com\/\?s=[0-9a-z]{13}&q=/$doc,to=com,match-case
/?fingerprint=*&i=$doc
/?id=*&traceId=$doc
=1&id=*&traceId=$doc

! https://github.com/uBlockOrigin/uAssets/issues/27938
||turtleclient.xyz^$all

! https://www.reddit.com/r/phishing/comments/1i6j0m9/surely_this_cant_be_real_right/
||irs.gov-$doc

! https://www.reddit.com/r/Scams/comments/1hmbf58/i_fell_for_a_toll_scam/
! https://www.virustotal.com/gui/url/0a91a618dfb8e3f00196f613b5f73c84f5ff0cfa40e680764ec02e9ad2d62e82
! https://github.com/uBlockOrigin/uAssets/issues/6452
! https://www.reddit.com/r/Scams/comments/1gppxs5/package_is_detained_scam/
! https://www.reddit.com/r/Scams/comments/1gpo2x6/is_this_a_scam_seems_kinda_sketchy/
! https://www.reddit.com/r/Scams/comments/1grey9a/is_this_actually_usps_or_a_scam/
! https://www.virustotal.com/gui/url/7d78e3dd3c6dbb1eeb8a916a3fa87f8235d374691d35d90afc330182a18fc766
! https://www.reddit.com/r/Scams/comments/1hc2p3j/httpsamazoncomcustomstopapsigninopenid/
! https://www.reddit.com/r/Scams/comments/1i29m8t/for_the_first_time_i_almost_fell_for_one/
! https://www.reddit.com/r/phishing/comments/1i2zh8p/nice_try_ive_gotten_3_this_week/
! https://www.reddit.com/r/Scams/comments/1lvdt14/is_it_legit_winter_fuel_text/
/^https?:\/\/[-a-z]{4,}\.com[-.][-a-z0-9]{2,}\.[a-z]{2,6}\//$doc,to=bid|cc|cfd|cyou|icu|live|online|shop|top|vip|win|world|xin
/^https?:\/\/[-a-z]{4,}\.org[-.][-a-z0-9]{2,}\.[a-z]{2,6}\//$doc,to=bid|cc|cfd|cyou|icu|live|online|shop|top|vip|win|world|xin
/^https?:\/\/(?:[-a-z]{4,}\.)?gov[-.][-a-z0-9]{2,}\.[a-z]{2,6}\//$doc,to=bid|cc|cfd|cyou|icu|live|online|shop|top|vip|win|world|xin
!#if env_safari
/^https?:\/\/[-a-z][-a-z][-a-z][-a-z]+\.com[-.][-a-z0-9][-a-z0-9]+\.[a-z]+\//$doc,to=bid|cc|cfd|cyou|icu|live|online|shop|top|vip|win|world|xin
/^https?:\/\/[-a-z][-a-z][-a-z][-a-z]+\.org[-.][-a-z0-9][-a-z0-9]+\.[a-z]+\//$doc,to=bid|cc|cfd|cyou|icu|live|online|shop|top|vip|win|world|xin
/^https?:\/\/[-a-z][-a-z][-a-z][-a-z]+\.gov[-.][-a-z0-9][-a-z0-9]+\.[a-z]+\//$doc,to=bid|cc|cfd|cyou|icu|live|online|shop|top|vip|win|world|xin
/^https?:\/\/gov[-.][-a-z0-9][-a-z0-9]+\.[a-z]+\//$doc,to=bid|cc|cfd|cyou|icu|live|online|shop|top|vip|win|world|xin
!#endif
! https://www.reddit.com/r/phishing/comments/1nk0gvx/is_this_a_scam_or_a_fake_message/
! https://www.virustotal.com/gui/url/b428e461d719401be48bd5a84f976e5a16b09147484379f4c4e43c1bd76dc8bd
||secure.mygov.$doc
! https://unit42.paloaltonetworks.com/global-smishing-campaign/
||dhl.de-$doc,to=store
||org.gov-$doc
||israeipost.co-$doc
||canpost.id-$doc
||anpost.id-$doc
||kveesh6.il-$doc

! https://urlscan.io/search/#hash%3Ac3ddb433947ffba704fab581e16dd5a0d246c9861d169aca184266f7dc2cdff4
/^https:\/\/[0-9a-z]{6,8}\.[a-z]{2,10}\/[!.+,=?@\[][\/0-9a-z]{20,30}\.[-a-z]{2,7}$/$doc,to=agency|art|asia|auction|bar|beauty|beer|best|biz|bond|business|cam|cards|casa|click|cloud|coupons|courses|cv|digital|diy|fashion|food|forum|gay|guru|hair|info|life|live|living|link|ltd|my|ooo|property|pw|qpon|republican|rocks|run|sale|sbs|services|shop|skin|store|studio|support|surf|tattoo|tech|today|top|uno|watch|work,match-case
/door/?ad_campaign_id=$doc

! https://github.com/uBlockOrigin/uAssets/issues/28123
||en-trezor.io^$all
||coiincmi.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/28128
||swap-ether.site^$all
||raydiumx.org^$all
||v4-biswap.com^$all
||io-swap.net^$all
||finance-superchain.net^$all
||helplive-ledger.com^$all
||kodiak-finance.org^$all
||exc-v3.com^$all
||zeddexexchange.live^$all
||rabbltx.xyz^$all
||theuni-swap.com^$all
||us-ledger.io^$all
||en-bitcoin.org^$all
||io-sol.vip^$all
||elcctrum.cc^$all
||ray-sol.net^$all
||en-bitcoin.org^$all
||en-trezor.io^$all
||electrummonero.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/28138
||play-lust.com^$all
||play-lustgoddess.com^$all

! https://app.any.run/tasks/5972a8c5-5b87-4579-9cc5-8bc268abd6c0
://booking.*.com/sign-in?op_token=$doc

! https://x.com/Sh1n0g1/status/1923598004390592625
||windows-line.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/23570
||aurorastore.org^$doc

! https://github.com/uBlockOrigin/uAssets/issues/28402
||deltaexploits.com^$all
||deltaexecutor.io^$all

! https://l.wl.co/l? scams on X
||x_x-askfollow-us.translate.goog^$all
||x_x-freeadd-me.translate.goog^$all
||x_x-more--followers-com.translate.goog^$all
||x_x-twitob-com.translate.goog^$all
||x_x-twitterfollowers-site.translate.goog^$all
||www-askfollow-us.translate.goog^$all
://x_x-*-*.translate.goog/?_x_tr_$doc

! https://github.com/uBlockOrigin/uAssets/issues/28520
! https://www.virustotal.com/gui/file/44a40ddf96e77c305ea479d73555b2f0259c70d0b818eb9162ee62476b36383c
||hardware-gui.su^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/201396
||splendlddate.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/28580
||plotp.mazamob.space^$all

! https://github.com/uBlockOrigin/uAssets/issues/28571
! https://sourceforge.net/p/win32diskimager/blog/2024/12/beware-of-fake-sites/
||win32diskimager.org^$doc

! https://github.com/easylist/easylist/commit/306f423a860eb5c2dafc89b5801a3b8c7e8d7290
weightlossdiet.top##+js(acs, open, executeCode)
.com/redirect-zone/$doc,popup

! https://github.com/uBlockOrigin/uAssets/issues/28928
||havelbeenpwnd.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/29163
||windirstat.org^$all

! https://urlscan.io/result/0197f9ec-bbc5-71dc-a9a4-6935cb0e43d0/
||soubtcevent.com^$all

! https://evalian.co.uk/inside-a-red-bull-themed-recruitment-phishing-campaign/
||apply-to-get-hired.com^$all
||apply-todayjobs.com^$all
||applynow-jobs.com^$all
||applytoday-jobs.com^$all
||charliechaplin7eont.space^$all
||instant-job-apply.com^$all
||instant-job-appply.com^$all
||job-apply-fast.com^$all
||job-apply-now.com^$all
||jobapply-careers.com^$all
||jobs-apply-fast.com^$all
||jobs-apply-now.com^$all
||jobs-apply.com^$all
||join-our-team.com^$all
||schedule-interview.com^$all
||schedule-job-application.com^$all
||socialmedia-careers-office.com^$all
||submit-application-job.com^$all
||submit-job-application.com^$all
||talent-applications.com^$all
||talents-application.com^$all
||com^$doc,ipaddress=38.114.120.167

! https://urlscan.io/search/#hash%3A2c1d6c6bc603efe83d443d7b4c076e37c656f152097717f5cecfcbcd10634508
! https://github.com/uBlockOrigin/uAssets/commit/34f63be2c047998654a6ec7e9556afc92245e9da
/^https:\/\/[a-z]{3,30}\.[a-z]{2,4}\/socket\.io\/socket\.io\.js$/$header=nel:/report_to":"cf-nel/,script,1p,strict1p,match-case,domain=ci|ge|eu|life

! https://github.com/uBlockOrigin/uAssets/issues/29260
||stellar-coin.com^$all
||stellar-stb.com^$all
||stellar-blade.click^$all

! https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490
||npnjs.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/29277
||grupocgcr.com^$all

! https://x.com/x64koichi/status/1947515231103783409
||pastebin.store/js.js

! https://github.com/uBlockOrigin/uAssets/issues/29288
||ncewb8eo.cloud^$all

! https://x.com/BRSUN_game/status/1948308942309699829
||bluereflection-sun.com^$doc

! https://www.reddit.com/r/antivirus/comments/1m8gsqe/mcafee_says_im_not_protected_after_popup_from/
||update-macosx.com^$all

! https://www.facebook.com/share/p/172MPhiL2h/
||cuocthiianhdepthieunhii2025.weebly.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/29380
||carrotsaystopping.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/29515
! https://www.virustotal.com/gui/url/fc99f6b3ef99669275b4b798eb2bc46cdc4f5f7e09b84e57ba1a2238db3b4795
! https://www.virustotal.com/gui/url/b7860c134e76d01fdffdd560436243825a99938f227c62a43f9bf8d1861da9e4
||webnotif.online^$all
||live/click.php?key=$doc

! https://github.com/uBlockOrigin/uAssets/issues/29530
! https://www.virustotal.com/gui/url/5531b225fe88997d81ae992c6eda2242fd9a7a260151dc9a2895386e57cc0f72
||pttavm.*.com.tr^$doc

! https://github.com/uBlockOrigin/uAssets/commit/d8cc5589e63faddede0749b6f8c04a89e30ec22f#commitcomment-163874379
! zlib
||z-lib.ai^$doc
||z-lib.club^$doc
||z-lib.dev^$doc
||z-lib.ink^$doc
||z-lib.li^$doc
||z-lib.nl^$doc
||zlibrary.to^$doc
||z-library.cc^$doc
||z-lib.io^$doc
||z-lib.id^$doc
||z-lib.ws^$doc
||z-lib.lol^$doc
||zlibis.com^$doc
||zlibrary-global.com^$doc
||zlib-official.com^$doc
||zlibrary.st^$doc
||zlibrary.lol^$doc
||z-library.live^$doc
||z-lib.wiki^$doc
||z-library.help^$doc
||z-library-proxy.com^$doc
! windows activator
||activator-kmspico.net^$doc
||ativadorkmspico.com^$doc
||dazactivator.com^$doc
||get-kmspico.com^$doc
||getkmspico.com^$doc
||getkmspico.medium.com^$doc
||km-spico.ru^$doc
||kms-pc.com^$doc
||kms-pico-download.com^$doc
||kmspico-mafia.com^$doc
||kmspico-official.medium.com^$doc
||kmspico-official.xyz^$doc
||kmspico-oficial.com^$doc
||kmspico.blog^$doc
||kmspico.co^$doc
||kmspico.dev^$doc
||kmspico.download^$doc
||kmspico.icu^$doc
||kmspico.io^$doc
||kmspico.micaesoft.com^$doc
||micaesoft.com^$doc
||kmspico10.com^$doc
||kmspicoativador.org^$doc
||kmspicodownloads.com^$doc
||kmspicofficial.pages.dev^$doc
||kmspicoofficial.com^$doc
||massgrav.zapto.org^$doc
||massgrave.hopto.org^$doc
||official-kmspico.co^$doc
||official-kmspico.com^$doc
||official-kmspico.org^$doc
||officialkmspico.com^$doc
||officials-kmspico.com^$doc
||oficial-kmspico.com^$doc

! https://x.com/masaomi346/status/1957964751956504855
.com/assets/index_1.html?theme=$frame,1p

! https://www.virustotal.com/gui/url/f92dc5eab77f86d62c2cfbe190dfc02839719a134fd2c1c729a8eccc9bfb23b0
||sasktel.mmspos.com^$all

! https://x.com/masaomi346/status/1956560061997678621
/^https:\/\/www\.[a-z]{12,}\.com\/[-a-z]*%E[%0-9A-F]{20,}-[-0-9a-z]{3,}%E[-%0-9A-Fa-z]{70,}-p-\d{3,5}\.html$/$doc,match-case
||onepiecegoods.com^$doc
||printslamdunk.com^$doc
||jujutsukaisengoods.com^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/212021
||cractivator.com^$all
||analytiwave.com^$all
||analyticanoden.com^$all
||flaegrudad.com^$all
$doc,ipaddress=185.216.143.121

! https://github.com/AdguardTeam/AdguardFilters/issues/212018
||profullversion.net^$all
||wppanel.icu^$all

! https://github.com/uBlockOrigin/uAssets/issues/29771
||arvest-blank.com^$all
||my-exodus.co.uk^$all
||ledgerr.us^$all
||suite.tem3.io^$all

! https://www.reddit.com/r/antivirus/comments/1n22mas/opened_a_website_and_got_this/
||annonumapp.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/212534
||problems-center.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/29985
||smnewd.com^$all
||33ok.club^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/212910
||protect-myphone.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30022
||hltvorg.com^$all

! https://urlscan.io/result/019950cd-edee-7578-9a4a-4647a972566f/
/^https:\/\/pub-[0-9a-f]{32}\.r2\.dev\/(?=[-%0-9a-z]*[A-Z])[-%0-9A-Za-z]+-\d+\.html$/$doc,domain=r2.dev,match-case

! https://www.reddit.com/r/phishing/comments/1njh1dc/branching_out_arent_they_americans_are_being/
! https://www.virustotal.com/gui/url/53044a78745fc650f95c619a5557e240bb4386a6ec8301fcfebb2d69fa7d800b
||phila.revenue*.cc^$all

! https://www.youtube.com/watch?v=0fpihOP0qJ8
||bitchats.app^$all
||bitchat.pro^$all
||bitchat.live^$all
||myhuaweicloud.com/app/Bitchat_*.apk$all

! https://www.reddit.com/r/CryptoScams/comments/1nmmlla/scam_alert_fake_upbit_sites_targeting_crypto/
! https://www.virustotal.com/gui/url/0db497e9253e0414fb8c66c6498cf51c72b9a2d9cfb5a1d27ae8aece2977d4a6
! https://www.virustotal.com/gui/url/a24806e65d73dabf84b1f733bc0351bb0f803bb5fe2b6ee1afc1dc0f77b71867
||upa1bit.$all
||upbitbr.$all

! https://github.com/uBlockOrigin/uAssets/issues/30148
||y-comblnator.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30153
! https://github.com/uBlockOrigin/uAssets/issues/30149
/^https?:\/\/gitcoin-[a-z]+\.com\//$all,reason="Blatant scammers who are not related to GitHub or Gitcoin whatsoever."
/^https?:\/\/[a-z]+-gitcoin\.com\//$all,reason="Blatant scammers who are not related to GitHub or Gitcoin whatsoever."

! https://safeweb.norton.com/report?url=paradlgm.com
||paradlgm.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30162
-ledger.live^$doc
||guardan.io^$all
||en-ledger-install.com^$all

! https://x.com/masaomi346/status/1971010622897914055
/^https:\/\/[a-z]{5,10}\.[a-z]{5,10}\.[a-z]{3}\/y1\.html$/$doc,match-case,to=com|top|~weebly.com
://www.*.pro/y1.html|$doc

! https://github.com/uBlockOrigin/uAssets/issues/30176
! https://www.virustotal.com/gui/url/4bec3c4503a93685de3997ad2107ecf9108570d08c6b121b29d401a8a18afa35 - tagesschau.de
||nachdiewelt.click^$all
||seloriva.com^$doc
||seloriva.net^$doc

! https://github.com/uBlockOrigin/uAssets/issues/30196
! https://www.virustotal.com/gui/url/4ccf93ccfee5d80e50c41befffe6a3cebd0993a9408b8956139de9df59bf2ad0
||client.*-blockfi.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30216
||v2-app-lido-finance.cc^$all
||app-lido-finance-v2.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30222
||network-jpn.com^$all
||statswpmy.com^$all
||2e-bureau.com^$all
||trackingmyadsas.com^
##.header-fix-tester-container

! https://www.riceluxe.com/, https://www.seraphyning.com/
/^https?:\/\/www\.[a-z]{8,11}\.com\/product\/(?:[0-9a-z]+-)*(?:%[%0-9a-z]{8,}-)+(?:[0-9a-z]+-)*(?:[%0-9a-z]{8,}-)*[%0-9a-z]+\/?$/$doc,match-case,ipaddress=/^173\.2(08|32)\.\d{3}\.\d{3}$/
/^https?:\/\/[a-z]{7}\.[a-z]{8,11}\.com\/products\/(?:[0-9a-z]+-)*(?:%[%0-9A-F]{8,}-)+(?:[0-9a-z]+-)*(?:[%0-9A-F]{8,}-)*[-%0-9A-Fa-z]+\/?$/$doc,match-case,ipaddress=/^23\.2\d{2}\.\d{2}\.\d{2}$/
||serenoirs.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30278
||exoduswallet.at^$all
||ai-atomic.org^$all
||htex-panel.at^$all
||simpleswap.ac^$all
||simpleswap.to^$all
||simpleswap.ltd^$all
||simpleswap.online^$all
||pddeploy.com^$all

! https://www.reddit.com/r/antivirus/comments/1o0qpvg/ios_mcafee_and_other_random_scans_while_scrolling/
||killmalware.click^$all

! https://www.reddit.com/r/antivirus/comments/1o29d2k/computer_virus/
||tring-tring.com^$all
*$doc,ipaddress=54.38.216.75

! https://www.reddit.com.com/r/Scams/comments/1o4eusi/us_how_do_i_report_a_fakescam_website_using_a/
||vero-hr.click^$all

! https://socket.dev/blog/175-malicious-npm-packages-host-phishing-infrastructure
||jackpotmastersdanske.com^$all
||musicboxcr.com^$all
||villasmbuva.co.mz^$all
||fejyhy.com^$all
||fenamu.com^$all
||notwinningbutpartici.com^$all
||elkendinsc.com^$all
||unpkg.com/redirect-*/beamglea.js$script

! https://x.com/masaomi346/status/1977574611656274143
.com/article/auth=$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/215430
||stylexlab.ru^$doc

! https://github.com/AdguardTeam/AdguardFilters/issues/216011
||dogado.net/stadlholz/$doc

! https://github.com/uBlockOrigin/uAssets/issues/30533
pages.dev##html[lang="ja"] > body > .main-container > #landing.auth-container
pages.dev##html[lang="ja"] > body.flex.items-center.min-h-screen > div.w-full.max-w-md.mx-auto > form#login-form
pages.dev##html:not([class]) > body.gradient-bg.min-h-screen.flex.items-center.justify-center > div.glass-card.max-w-md.w-full.text-center > form#loginForm.flex.flex-col
/^https:\/\/blockchecker[0-9]\.pages\.dev\//$doc,to=pages.dev
/^https:\/\/xblock[0-9]+\.pages\.dev\//$doc,to=pages.dev
||xcheckx.pages.dev^$all
||gocheck.pages.dev^$all
||blocchecker*.pages.dev^$all
||lookblock.pages.dev^$all
||xblocklist*.pages.dev^$all
||xsuki*.pages.dev^$all
||bxchx.pages.dev^$all
||xblockchecker*.pages.dev^$all

! https://blog.lastpass.com/posts/possible-cryptochameleon-social-engineering-campaign-targeting-lastpass-customers-and-more
*$doc,ipaddress=82.27.2.198
*$doc,ipaddress=31.59.58.163
||lastpassrecovery.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30584
||kgms.top^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/216474
||arrakis2.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30623
sport.elwatannews.com##+js(aost, Array.prototype.indexOf, isWin)
||gomabalerainc.top^$all

! https://github.com/uBlockOrigin/uAssets/issues/30626
! https://www.virustotal.com/gui/file/32c72703cfef00987245c91f156aa9548f6597035e9c799ff871c0f583223f1d
||gamefiledo6.pages.dev^$all

! https://www.reddit.com/r/Scams/comments/1ofp0sc/uk_spotify_podcast_cohost_voting_link_sent_by/
! https://www.reddit.com/r/isthisascam/comments/1ix2jeb/podstream_global_google_spotify_voting_platform/
! https://www.virustotal.com/gui/url/9afaecf16fdcb8fd4ec7c48741d56c0d9bc70a6795a71cbddc3016f7c18c65eb
! https://www.virustotal.com/gui/url/e6c4db2cce2159724ecb5111d0a4dcde3b5d31b88382e2905c5ea9afc9285ca3
||sportifymore.$doc
||voting-express-tl.$doc
||sportifymore.ct.ws^$all
||voting-express-tl.ct.ws^$all
! https://www.reddit.com/r/cybersecurity_help/comments/1sa1udm/possible_hacker_please_help/
! https://www.virustotal.com/gui/url/3537483454104b6ca3c17317a42640606ddd0ee69965fbdc04c9bbcd0e2ee39f
||spotifyprimeszones-sl.ct.ws^$all
||spotifyprimeszones-$doc
||spotify*.ct.ws^$doc

! https://github.com/uBlockOrigin/uAssets/issues/30713
! https://www.reddit.com/r/SteamScams/comments/1k911so/esl_pro_league_vote_scam/
! https://www.virustotal.com/gui/url/d2e3c3ee350850ef08269cc9286467c9f6c38c481b5b42757246d956b55994e7
||cs2beneluxtour.com^$all
||eplproseason25.com^$all
||eslpromasters.com^$all
||eslplayers.com^$all
||eslplayers25.com^$all
||esportsbenelux.com^$all
||gameseason22.com^$all
||juniorsvote.com^$all
||ligabenelux.com^$all
||proeslgaming.com^$all

! https://www.youtube.com/watch?v=IzKjL16-sgY
! https://www.virustotal.com/gui/url/87ddc1c1fb50020b354013116fef553ec28f6fee28257d7609eabc2926551365
||dmca-security.com^$all

! https://www.reddit.com/r/Scams/comments/1oqfrvy/what_is_the_procedure_to_complain_a_scam_company/
||uniqlo-nz.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/30744
! https://www.virustotal.com/gui/url/6261bce1c1953a6e539f4f69732097de8329cad29f0f98e3d1d545d5f0830dc0
||git44share.quest^$all

! https://survey.dawn .com/MetaMask-Help.html - phishing
||survey.dawn.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/217414
/^https://d[0-9a-z]{19}\.[a-z]{3,4}-[a-z]{7,8}(?:\.[a-z]{2})?\.[a-z]{2,3}\/xm\/xm\d\/\?/$doc,to=co.in|pro|sbs
!#if env_safari
/^https://d[0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z][0-9a-z]\.[a-z][a-z][a-z][a-z]?-[a-z][a-z][a-z][a-z][a-z][a-z][a-z][a-z]?\.[cps][bor][os]?\.?i?n?\/xm\/xm[0-9]\/\?/$doc
!#endif
||expleboted.com^$all
||hoplariumped.com^$all
||dsu-adguard.pro^$all
||ennatcaraposin.com^$all
||antitrojanwalls.live^$all
||prizecloud.sa.com^$all
||myshielstore.xyz^$all

! https://www.reddit.com/r/antivirus/comments/1ouridv/how_do_i_get_rid_of_these_notifications/
||credzium.co.in^$all

! https://imessagegreetins.de/gogtuin/accounts.google/ phishing
||imessagegreetins.de^$all

! https://github.com/uBlockOrigin/uAssets/issues/30817
||outertune.org^$doc,reason="Not the official site"

! https://github.com/uBlockOrigin/uAssets/issues/30863
||popcornpump.xyz^$all

! https://www.reddit.com/r/firefox/comments/1p045q8/should_i_be_worried/
||smartdefend.net^$all

! https://anget-direct.info/Ej0yZ
||anget-direct.info^$all

! https://github.com/uBlockOrigin/uAssets/issues/30947
||ovr-toolkit.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31046
||acrossprotocols.com^$all
||dokopka.icu^$all
||aftop10.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31045
||simpleswap.fi^$doc
||simpleswap-io.at^$doc
||simple-swap.to^$doc
||simpleswap.cyou^$doc
||simplesvvap.lol^$doc
||dualcoin.cfd^$doc
||changelly.casa^$doc
||changelly.cfd^$doc
||changelly.cyou^$doc
||xgram.my^$doc
||swapgate.my^$doc
||xgram.asia^$doc
||simpleswap.casa^$doc
||easybit.club^$doc
||easybit.site^$doc
||easybits.cc^$doc
||ff-exchange.vip^$doc
||ff-exchange.cloud^$doc
||us-aliexpress.com^$doc
||charigelly.com^$doc
||ff-exchange.help^$doc
||cnangelly.online^$doc
||changely.at^$doc
||changeenow.at^$doc
||simpleswap.at^$doc
||charigelly.org^$doc
||ff-exchange.space^$doc
||ff-exchange.me^$doc
||paynote.my^$doc
||fixedfloat.at^$doc
||pancake-exchange.org^$doc
||cosmochanger.club^$doc
||cosmochanger.com^$doc
||simplesvvvap.cyou^$doc
||changeiiy.icu^$doc
||nowchange.cyou^$doc
||shapebtc.my^$doc
||kryptoswap.my^$doc

! https://github.com/uBlockOrigin/uAssets/issues/31028
||fixedfloat.ac^$doc
||fixedfloat.ca^$doc
||v2-camelot-ex.com^$doc
||at0micwallets.com^$doc
||v2-dexscreener.cc^$doc
||trezor.la^$doc
||kodiakfinance-kodiak-finance.org^$doc
||app.uniswaq.org^$doc
||kodiakfinance.net^$doc
||changenow-io.us^$doc
||kodiak-finance-kodiakfinance.com^$doc
||kodiakfinance-kodiak-finance.com^$doc
||exodus-wallets.io^$doc
||sushiswap.to^$doc
||legder.at^$doc
||electrum-data.cc^$doc
||chicavora.com^$doc
||ff-info-online.com^$doc
||ff-exchahge.cyou^$doc
||jfureai.com^$doc
||pi-tarina.com^$doc
||pita-rina.com^$doc
||pitarina.com^$doc
||pitarina.net^$doc
||brs.hg-story.blue^$doc
||heisei-g.pink^$doc
||lovecatcher2025.com^$doc
||wakabairo.net^$doc
||wakayoyo.tokyo^$doc
||fuku-fuku.net^$doc
||fuku-fukuu.com^$doc
||mtes.jp^$doc
||chiyouranai.base.shop^$doc
||enisaflower.com^$doc
||enisaflowersaku.com^$doc
||fukunotsuru.com^$doc
||sb-z-uzou-fukunoturu.discover-news.tokyo^$doc
||cra-ttine.site^$doc
||cra-ttine.tech^$doc

! https://github.com/uBlockOrigin/uAssets/issues/31063
||webexodus.created.app^$doc
||guidance.ghost.io^$doc
||trezorsuite.wasmer.app^$doc
||curve-flnance.com^$doc
||curve.sbs^$doc
||suite-trezor.click^$doc
||washingtonpost-news.com^$doc
||lido-elhereum.net^$doc
||v3-yearn.org^$doc
||v2-solavre.com^$doc
||onchain-debank.com^$doc
||app-defituna.github.io^$doc
||yupoo-dhgate.ru^$doc
||yupoo-husky.ru^$doc
||perfume-yupoo.ru^$doc
||yupooz.com^$doc
||jersey-yupoo.com^$doc
||soccer-jersey-yupoo.com^$doc
||yupoo.site^$doc
||app.zeiron.run^$doc
||www.yupooz.com^$doc
||www.jersey-yupoo.com^$doc
||exodustrading-ai.com^$doc
||yupoonetherlands.ru^$doc
||yupoofrance.ru^$doc
||yupoosunglasses.ru^$doc
||bestyupoo.com^$doc
||jerseyyupoo.com^$doc
||yupooclothes.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/31071
||yupoo.biz^$doc
||ff-excharge.cyou^$doc
||io-kly.com^$doc
||legderhealth.com^$doc
||ff-excharge.icu^$doc
||kraken-exchange.com^$doc
||phnto.com^$doc
||yupooshoes.org^$doc
||yupooclothing.com^$doc
||insurebitbox.com^$doc
||trezordevices.io^$doc
||trezordevicesupport.com^$doc
||helpwithledgerdevice.com^$doc
||scanledgerapi.com^$doc

! https://github.com/uBlockOrigin/uAssets/issues/31058
||grabtrust.icu^

! https://github.com/uBlockOrigin/uAssets/issues/31086
||uniswap.org.in^$all
||kyberswap-kyber-swap.com^$all
||nodegoai.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31099
||app-trust.co.com^$all
||trastwallet.co.com^$all
||trustwallett.co.com^$all
||en-trust.co.com^$all
||trustwallet-app.io^$all

! https://github.com/uBlockOrigin/uAssets/issues/31121
||go-trust.co.com^$all
||simpleswapp.com^$all
||rabby.fi-v2.to^$all
||fusebox-elavon.org^$all
||elevon-payment.com^$all
||suitee-trezorrsuite.com^$all
||trezorsafety.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31134
||matexvotes.ct.ws^$all
! https://github.com/uBlockOrigin/uAssets/issues/31135
||bitboxinsurance.com^$all
||ff-io.cc^$all
||fixfloat.vip^$all
||v3simpleswap.com^$all
||exoduwallet.io^$all
||scanledgerwallet.com^$all
||trezorwalletsupport.com^$all
! https://github.com/uBlockOrigin/uAssets/issues/31153
||face-it.co.com^$all
||buff163.co.com^$all
||skinsmonkye.com^$all
||skinsmnky.com^$all
||skinsmonkey.co.com^$all
||slash-on.co.com^$all
||app-slash.co.com^$all
||slash-ap.co.com^$all
||www-slash.co.com^$all
||www-mechanicsbank.co.com^$all
||spendesk.co.com^$all
||www-mechonics.top^$all
! https://github.com/uBlockOrigin/uAssets/issues/31163
||coinomi.co.com^$all
||trust-download.co.com^$all
||app-phantom.co.com^$all
||app-atomic.co.com^$all
! https://github.com/uBlockOrigin/uAssets/issues/31177
||ray-dium.cyou^$all
! https://github.com/uBlockOrigin/uAssets/issues/31218
||trezosuiteapp.vercel.app^$all
||tfjg-rjgu-egji-zjgi-orjg-rngj.netlify.app^$all
||ldgerlive.us^$all
||trezorsuite.at^$all
||get-treezr-suit-en.framer.media^$all
||app-ledger-desktop.wasmer.app^$all
||ledgerapp.created.app^$all
||ledgersso.created.app^$all
||ledger-wallet.gitlab.io^$all
||sute-trezr.created.app^$all
||tronssan.github.io^$all
||aomicwallet.github.io^$all
||tfjg-rjgu-eeti-zjti-ordg-rfgj.netlify.app^$all
||c066b573.smrta.pages.dev^$all
||webapp.ghost.io^$all
||webassetsapp.ghost.io^$all
||engsuites.ghost.io^$all
||createwebsite.ghost.io^$all
||guide-ledegr.framer.media^$all
! https://github.com/uBlockOrigin/uAssets/issues/31223
||sushi-swap.org^$all
||myprepaidcentre.net^$all
||aterasig.com^$all
||logatera.net^$all
||logatera.work^$all
||useraccount-connect-chainswap.cc^$all
||amcombank.co.com^$all
||galixwallet.co.com^$all
||qroxlwallet.co.com^$all
||ateradata.com^$all
||logtoatera.com^$all
||signalatera.com^$all
||aterasigin.com^$all
||aterapanel.com^$all
||ateratera.com^$all
||lognatera.com^$all
||ateraslog.com^$all
||welatera.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31243
||paytrace-app.co.com^$all
||scotanomect.cc^$all
||scotlacomp.cc^$all
||sparrowwallef.com^$all
||u-tronscan.com^$all
||amehuns.cc^$all
||stinglebom.cc^$all
||hyper-liquid.to^$all
||orca-finance.org^$all
||changenow-swap.org^$all
||changenow-exchange.org^$all
||simplswap.org^$all
||official-ledgrlive.com^$all
||jup-dex.org^$all
||shop-bitboxswiss.de^$all
||bifboxswiss.de^$all
||srvclouds.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31280
||gitcompiler.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31326
||asliceza.org^$all

! https://github.com/uBlockOrigin/uAssets/issues/31351
||designrigoroso.com^$all,reason=malicious

! https://github.com/uBlockOrigin/uAssets/pull/18388
! https://github.com/uBlockOrigin/uAssets/pull/23643
! https://www.forbes.com/sites/jacksonweimer/2021/04/10/that-twitter-family-tree-trend-is-secretly-following-random-accounts--without-your-consent
||roundyearfun.org^$all
||roundyearfun.com^$all
||twitter-circle.com^$all
||funxgames.me^$all
||infinitytweet.me^$all
||infinitytweet.com^$all
||infinityweet.me^$all
||infinityweet.com^$all
||kawaiilabs.org^$all
||degenlabs.org^$all
||anyplacehere.online^$all
||infintytweet.me^$all
||infintytweet.com^$all
||anyplacehere.art^$all
||infinitetweet.me^$all
||infinitetweet.com^$all
||redirecttoplace.online^$all

! https://github.com/uBlockOrigin/uAssets/issues/31381
||crimsonmods.cc^$all

! https://github.com/uBlockOrigin/uAssets/issues/31383
||playtorrio.com^$all

! https://www.bleepingcomputer.com/news/security/clickfix-attack-uses-fake-windows-bsod-screens-to-push-malware/
||low-house.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31424
||sites.google.com/view/newext$doc

! https://github.com/uBlockOrigin/uAssets/issues/31430
||cloudfenceai.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31473
||iploits.com^$all

! https://wizsafe.iij.ad.jp/2026/01/2075/
||7zip.com^$all
||7zip.cloud^$all
! https://github.com/AdguardTeam/AdguardFilters/issues/225045
||7-zip.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31596
||wploits.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31697
! https://info.eisys.co.jp/cien/de28df8064d7974d
||paid-task.com^$all
||invoice-guide.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31731
! https://www.virustotal.com/gui/url/adb9235105a5f16ed33071d4afdb684b8fe21f69a6b623bca09b4210606b3da0
||subscriptionprocess.im^$all

! https://github.com/uBlockOrigin/uAssets/issues/31733
||acc-verification.world^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/224080
! https://www.virustotal.com/gui/url/bfd319106c625dd4f1438c9750927e2fc0b26037f6cf748f73796f1f16bc7004
||rblx-copier.vercel.app^$all
||youtube.com/watch?v=ZsAUT2PmbZk$all
||youtube.com/@rblxtoolz$all

! https://github.com/uBlockOrigin/uAssets/issues/31828
||pc-huorong.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31848
||kervjrfjd.pro^$all

! https://github.com/uBlockOrigin/uAssets/issues/31867
||vexwin.gl^$all

! https://github.com/uBlockOrigin/uAssets/issues/31877
||gamesirs.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/31922
||payout-chatgpt.com^$all

! https://youtube.com/watch?v=jnNwERQCQ3k
||tesseract-ocr.com^$all
||opsecdefcloud.com^$all
||checkpointviewzen.com^$all

! https://github.com/uBlockOrigin/uBlock-discussions/discussions/972
ublockorigin.com##.title::before:style(content: 'This is not the official uBlock Origin site.' !important; font-size: 32px !important; color: red !important; font-weight: bold !important;)
ublockdns.com##main>section>div:first-child::before:style(content: 'Not related to uBlock Origin.' !important; font-size: 32px !important; color: red !important; font-weight: bold !important;)
ublockorigin.app###main::before:style(content: 'This is not the official uBlock Origin site.' !important; font-size: 32px !important; color: red !important; font-weight: bold !important;)

! https://github.com/uBlockOrigin/uAssets/issues/32080
||ryosweb.com^$all

! https://www.malwarebytes.com/blog/threat-intel/2026/03/fake-cleanmymac-site-installs-shub-stealer-and-backdoors-crypto-wallets
||cleanmymacos.org^$all

! https://x.com/masaomi346/status/2030929145740558697
||cdn-server.beer/api/css.js

! https://pushsecurity.com/blog/installfix/
||claude-code-$doc,to=edgeone.app|pages.dev|squarespace.com
! https://www.remove.bg/
||remover-bg.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/32160
||romsns.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/226913
||aiclaude.jp^$all

! https://github.com/uBlockOrigin/uAssets/issues/32153
##body > div[data-captcha-enable="true"] > div.cleanslate[id^="google-captcha-"] > div.captcha-box
||rpcs4.com^$all
||rpcs5.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/32197
||cyrexmods.cc^$all

! https://github.com/uBlockOrigin/uAssets/issues/32206
||audiveris.com^$doc

! phishing emails - https://storage.googleapis.com/hmdbox/hmd_v2.html
||storage.googleapis.com/hmdbox/$doc
||hmdv2.gogomailbali.eu.org^$doc
||hybridglobalnet.com^$doc
/^https?:\/\/[a-z]+\d\.gogomailbali(\.it)?\.eu\.org\/#\?act=/$doc,match-case,to=eu.org
/^https:\/\/storage\.googleapis\.com\/[a-z]{5,}\/[a-z]+_v\d\.html#\?act=/$doc,match-case,to=storage.googleapis.com

! https://github.com/uBlockOrigin/uAssets/issues/32238
||vtg.lol^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/227007
! https://www.virustotal.com/gui/url/e668590b514e62f8af33200c3ef36e33bd7dcf9b4360bf5a7b99768bece566fd
! https://www.virustotal.com/gui/file/c7bd726cbf743c593195ea0945907e9ee15d5c9ad7b7abbf69490fa34e7016dc
||tranyasy.com.cn^$all

! https://youtube.com/watch?v=I17MsVXACto
! https://www.virustotal.com/gui/file/c734d74e40d436cadcc972e542d151d1dcbb44fc3f429ad2ada0ad8a8da4aa64
! https://www.virustotal.com/gui/file/f5181886084854b0ea6eadcc3fc7194bb7245aa30a424f9ef5e5e74760417037
||anysoft.click^$all

! https://www.reddit.com/r/firefox/comments/1rumsyj/how_do_i_get_rid_of_these_popups/
||zeof-defender.pro^$all

! https://www.reddit.com/r/antivirus/comments/1rr7jx4/clicked_on_an_ad_download_button_that_forwarded/
||laptopprivacyado.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/227466
||dyiket.com^$doc

! https://www.reddit.com/r/uBlockOrigin/comments/1s2x6i3/ubo_on_firefox_vs_chrome/
||ourdateideas.com/wp-logo.svg

! https://github.com/uBlockOrigin/uAssets/issues/32334
||plus.rustfacepunch.com^$all

! https://www.virustotal.com/gui/url/8764b4533420b416e4718b0d5190cb7219b88da55814d0f6f746b20de63e0028
||studio-blender.com^$all

! https://www.malwarebytes.com/blog/threat-intel/2026/03/infiniti-stealer-a-new-macos-infostealer-using-clickfix-and-python-nuitka
##div.card > div#cbRow.checkbox-row[onclick="startVerify()"]
||update-check.com^$all

! https://www.reddit.com/r/phishing/comments/1s5lp3i/warning_new_fake_website_offering_fake_keepassxc/
||keepass-xc.com^$all

! https://www.reddit.com/r/Scams/comments/1s74mr8/canada_canadamilksettlementcom_scam_phishing_site/
! https://www.virustotal.com/gui/url/6eec894827df73a622a055d26ca80dcb0d5e6510531941759ff30bbb5b5ca756
##body > div.captcha-container > div.captcha-card
||canadamilksettlement.com^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/228103
||bp-sogou.com.cn^$all
||win-sogou.com^$all
||x-sogou.com^$all
||qishmusic.com.cn^$all
||apps-sougoupinyin.com^$all
||ai-sogou.com.cn^$all
||sogoushurf.com^$all
-sogou.com.cn^$doc,to=com.cn
-sogou.com^$doc,to=com

! https://github.com/AdguardTeam/AdguardFilters/issues/228390
-todesk.com.cn^$doc,to=com.cn
-wegame.com^$doc,to=com
-sogou.cn^$doc,to=cn
||chrome-hl.hl.cn^$all
||a-todesk.com.cn^$all
||todeskk.com^$all
||www-qishiu.com.cn^$all
||qishui-zn.hl.cn^$all
||pc-todesk.com.cn^$all
||go-todesk.hl.cn^$all
||todesk-zh.cn^$all
||todesk-zh.hl.cn^$all
||cn-idm.com^$all
||bandizip.net^$all
||bandizip.pro^$all
||bandisoft.org^$all
||qishuide.com.cn^$all
||ww-sogou.cn^$all
||dl-sogou.com^$all
||shurufa-sogou.org.cn^$all
||tech-sogou.com^$all
||sogou2.com.cn^$all
||f-sogou.com.cn^$all
||q-sogou.com.cn^$all
||q-sogou.com.cn^$all
||sogou-sogou.cn^$all
||sougoupy.com.cn^$all
||qeeyou.cn^$all
||googgle-chrrome.hl.cn^$all
||app-wg.com^$all
||team-wegame.com^$all
||hub-wegame.com^$all
||wegameesport.com^$all
||app-wegame.com^$all
||official-wegame.com^$all
||go-wegame.com^$all
||home-wegame.com^$all
||top-wegame.com^$all
||www-cn-google.org.cn^$all
||bangyoul.cn^$all
||laiwujiaoyu.com^$all
||leigodnn.com^$all
||nnraytheon.com^$all
||leigod.net^$all
||leigodco.com^$all
||google-ch-chrome.com.cn^$all
||of-tencent.com^$all
||meeting-tencent.org^$all
||zh-tenxun.com^$all
||apps-tencent.com^$all
||qishuiie.com^$all
||qishuiit.com^$all
||qishui-yinle.hl.cn^$all
||ggooglle-chrrome.com.cn^$all
||cnzh-google-apps.hl.cn^$all
||google-zhcn-chrome.com.cn^$all
||apps-chrome-zh.hl.cn^$all
||zh-googlle-chrome.hl.cn^$all
||todeskapp.com^$all
||todesk.ac.cn^$all
||todesk.im^$all
||youku.earth^$all
||youkuhonor.com^$all
||youku.tv^$all
||www-office-wps.com.cn^$all
||offiio-wps.com.cn^$all
||wps.ac.cn^$all
||cn-wps-zh.com.cn^$all
||tuba.toolg.cn^$all
||m-i4.cn^$all
||aisi-i4.com^$all
||aisi.nx.cn^$all
||zsi4.com^$all
||aisipc.net^$all
||as-i4.com.cn^$all
||office-wps-hl.hl.cn^$all
||todeskappa.com.cn^$all
||apd-todesk.com.cn^$all
||360cncn.com^$all
||qishui.team^$all
||wps-cnzh.com^$all
||dlworker.top^$all
||360edge.cn^$all
||app-google-zh.hl.cn^$all
||zhcn-googele.hl.cn^$all
||qishuui.com.cn^$all
||ms.kuugo.cc^$all
||baiduwangpan.cc^$all
||chrome-gooogle-zh.hl.cn^$all
||apps-google-hl.hl.cn^$all
||google-chrrome-zh.hl.cn^$all

! https://urlscan.io/result/019d565b-bc34-701b-9e99-226c20300095/
||testio.ecartdev.com^

! https://github.com/AdguardTeam/AdguardFilters/issues/228470
||applot-jp.com^$all

! https://censys.com/blog/technique-based-approach-hunting-web-delivered-malware/
||orcanmedikal.com.tr^$doc

! https://dontusetelega.lol/analysis
! https://habr.com/en/articles/1014144/
! https://kod.ru/telega-fork-telegram
||telega.info^$all
||telega.me^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/228943
||life-certain.jp^$all
||kyrelune.net^$all
||roll-tooth.com^$all
||vultenok.net^$all
||zalenith.com^$all
||prasquinor.jp^$all

! https://www.reddit.com/r/antivirus/comments/1siyee3/what_the_hell_is_this_i_dont_even_go_on_adult/
||cleanguard.tech^$all

! https://www.youtube.com/watch?v=fwJKKrg1OJM
||studio-obs.net^$all

! https://github.com/AdguardTeam/AdguardFilters/issues/230068
||linkbrawlstars.store^$all

! https://github.com/uBlockOrigin/uAssets/issues/32728
||robloxt.cv^$all

! https://github.com/uBlockOrigin/uAssets/issues/32741
||todeske.com^$all
||360guard-360.cn^$all
||360weishi-360.cn^$all

! https://www.youtube.com/watch?v=tp2nQnIHDMc
||www-rarlab.com^$all

! https://github.com/uBlockOrigin/uAssets/issues/32811
||goldbergcoins.com^$all
||erahitopupikloss.com^$all
||asionamedrafter.com^$all