AdguardTeam / AdguardFilters

AdGuard Content Blocking Filters
https://adguard.com/
GNU General Public License v3.0
3.17k stars 631 forks source link

xxxrapid.com #55305

Closed adguard-bot closed 4 years ago

adguard-bot commented 4 years ago

Issue URL (Ads)

[NSFW] http://xxxrapid.com

Comment

Here are a comprehensive list of verified urls used in Malicious & Phishing campaigns which are used to target users by compromising their devices or credentials.

These should be added as base filter by default in AdguardDNS [Regular as well as FamilyDNS] since these would harm users in following ways :

  1. Tricking users into entering real credentials like creditcard data and passwords into legitimate looking phishing sites
  2. Redirecting users with malware infested sites that contain adult content.
  3. Mining cryptocurrency on infected device without explicit user consent [cryptojacking]
  4. Tricking users into downloading false programs infected with harmful software [Trojan, ransomware and spyware]
  5. Installing backdoor on infected device to turn them into zombies aka Botnet [IoT like Routers, SmartTV, Home Assistance Systems, Smartphones, Smart Appliances]
  6. Causing Spam and generating false ad-revenue, leading to DoS or bogged down system if the device is infected.
  7. Spreading malicious political campaigns and Gore content.

Note that few domains mentioned in the following lists are included in AdguardDNS but not all of them are blacklisted.

Check these out:

[Malicious Urls] Malicious URLs : https://blocklist.site/app/dl/malware Unique URL count : 719,550

[Domains with Infected Files for Download/Malware Campaign] http://vxvault.net/URL_List.php Update Frequency : Daily

[Cryptojacking / Non-consent Hidden Cryptomining/User Resource Abuse] https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/nocoin.txt

[Riskware / Resource Abuse] [Powered by Sophos Antimalware Filters] https://raw.githubusercontent.com/austinheap/sophos-xg-block-lists/master/add-risk.txt

[Spywares And Trojans Spreading URLs - Reported and verified by various communities] https://www.binarydefense.com/banlist.txt https://urlhaus.abuse.ch/downloads/text/

[Ransomware spreading URLs] Ransomware Spreading URLs : https://blocklist.site/app/dl/ransomware Unique URL count : 1903

[Phishing Urls] Phishing URLs : https://blocklist.site/app/dl/phishing Unique URL count : 189,982

[Spam Urls] Spam URLs : https://blocklist.site/app/dl/spam Unique URL count : 1155

[Porn/Gore/Adult Content] https://raw.githubusercontent.com/CyanideBrother/anti-pr0n/master/hosts [Over 300,000 Unique URLs] https://blocklist.site/app/dl/porn [Over 2 Million URL]

[Spam404's List] Malicious URLs : https://raw.githubusercontent.com/Spam404/lists/master/adblock-list.txt Unique Url Count : Not Calculated Yet.

As I Said, Chances are, almost half of domains & IPs in the various above list will be blocked by adguard but other half is missed, which is a huge hole.

I am a huge adguard fan and love its DNS. This contribution towards comunity may help it improve its product. Cheers.

[NSFW] Screenshots

Screenshot 1 [Screenshot 1](https://reports-img.adguard.com/5Rhemwi.png)

System configuration

Information value
Platform: AdguardDNS
Browser: Chrome
Filters: Ad Blocking:
AdGuard Base,
AdGuard Mobile Ads,
EasyList,
Peter Lowe's Blocklist

Privacy:
AdGuard Tracking Protection,
EasyPrivacy

Social Widgets:
AdGuard Social Media

Annoyances:
AdGuard Annoyances,
Adblock Warning Removal List

Security:
Malware Domains Blocklist,
Spam404,
NoCoin Filter List
Alex-302 commented 4 years ago

The most of bad domains are already blocked by DNS.

adguard-bot commented 4 years ago

Issue URL (Ads)

https://www.xxxrapid.com/

Comment

Adult content [phonographic] site that opens when clicked on innocent looking banners. Missed by Adguard DNS Family Protection at the time of reporting.

Screenshots

Screenshot 1 ![Screenshot 1](https://reports-img.adguard.com/z2ceHat.png)

System configuration

Information value
Platform: DNS Family Protection
Browser: Yandex
Filters: Ad Blocking:
AdGuard Base
Alex-302 commented 4 years ago

We need to know the source site.

adguard-bot commented 4 years ago

Issue URL (Ads)

[NSFW] http://xxxrapid.com

Comment

This junk popped up when I clicked on a game icon. I am using Adguard extension on my Google Chrome with Adguard Family DNS. Please fix it. Thanks

[NSFW] Screenshots

Screenshot 1 [Screenshot 1](https://reports-img.adguard.com/O8de76b.png)

System configuration

Information value
Platform: Ext
AdGuard version: 3.4.31
Browser: Chrome
Filters: Ad Blocking:
AdGuard Base,
EasyList,
Peter Lowe's Blocklist

Privacy:
AdGuard Tracking Protection,
EasyPrivacy,
Fanboy's Enhanced Tracking List

Social Widgets:
Fanboy's Social Blocking List

Annoyances:
AdGuard Annoyances,
Adblock Warning Removal List,
I don't care about cookies

Security:
Malware Domains Blocklist,
Spam404,
NoCoin Filter List

Other:
BarbBlock
Other extensions used: BitDefender Internet Security
Alex-302 commented 4 years ago

Hi. We need to know the source site. If redirect or opening of new tab is random, probably your system or browser is infected by adware Please scan your system using AdwCleaner