search

AdguardTeam / AdguardFilters

AdGuard Content Blocking Filters
https://adguard.com/
GNU General Public License v3.0
3.08k stars 622 forks source link

[blocklist] phishing via whatsapp urgent #78614

Closed scafroglia93 closed 3 years ago

scafroglia93 commented 3 years ago

119910.xyz xbtbxggxz.asia xss.news 145650.xyz chatwhatsapp.today cdn-bimi.akamaized.net www.googles-analytics.com ajax.googlescdn.com

photo_2021-03-27_16-45-11

scafroglia93 commented 3 years ago

https://www.virustotal.com/gui/domain/www.googles-analytics.com/details

Yuki2718 commented 3 years ago

@scafroglia93 Please provide full URLs, just visiting the domain returns error. We check all the issues. And what is the VT result of GA for? I missed s so it's not google-analytics, okay.

scafroglia93 commented 3 years ago

guys, the other domains are used by phishing -> this was extracted from nextdns log

scafroglia93 commented 3 years ago

xss.news -> this site create other domains like this -> 734137.xyz wxlztpg.site xccredit.club tqgcuie.asia 579695.xyz 78657968.xyz

Yuki2718 commented 3 years ago

this was extracted from nextdns log

How you got that screenshot then? Some of the domains just redirect to others in the list or similar, I'll add few more destination pages I confirmed. The rest may be malicious and may be found on VT, that's @lolka4toli 's decision.

scafroglia93 commented 3 years ago

These are all the domains I found for the moment

342694.xyz 579695.xyz 688547.xyz 734137.xyz 739487.xyz 78657968.xyz apqkl.club khdfmb.vip tqgcuie.asia wxlztpg.site xccredit.club ykiznuffn.asia

lolka4toli commented 3 years ago

Blacklisted.