DandelionSprout / adfilt

The place where I, DandelionSprout, store my web filter lists for countless topics, including my Nordic adblock list. As simple as that, really.
Other
1.44k stars 147 forks source link

[NSFW] Scam #262

Closed iam-py-test closed 3 years ago

iam-py-test commented 3 years ago

Which entry/entries are you submitting?

WARNING: These websites contain pornography and scams

lucdream.com$document
beastbuying.com$document
kokotrokot.com$document
07ca17vejqqej990.inteo.xyz$document
! contains porn
pesoaniz.com$document
plarium.com$document
omnatuor.com$all
! Fake popups
rtb-8.novitrk1.com$all
cu27t-evo29lution.xyz$all
sothis-sayers.xyz$all
doneonline.xyz$document
possessedcrackinghart.com$all
typiccor.com$all
apsolutamente.com$all
time4news.net$all
pro-protection.xyz$all
secureleadsforever.com$all
antivirus.renewal-software-update.com$all
renewal-software-update.com$all
pushmeup.art$document
eu.pushmeup.art$document
covercenter.xyz$all
gettrk.xyz$all
trc.artofads.co$document
artofads.co$document
pc-my-protection.xyz$all
beta-news.org$document

A lot of the redirects were too fast for me to get the url, so this list is incomplete.

Which things do they block, hide, or unbreak?

The original url is from https://forums.malwarebytes.com/topic/277965-your-system-is-infected-with-3-viruses/

Screenshots (ignoring NSFW content; also, I started screenshotting too late to catch some of the action): image (The favicon is wrong and the grammar is incorrect) image It then goes into full screen: image image

More notifications: image

Fake captcha: image

Keep in mind this is a fresh VM with nothing but Windows Defender as an antivirus. Real AV scans on the VM: image I looked up the Kaspersky detection, and it is something installed by the website: https://threats.kaspersky.com/en/threat/Trojan.Multi.BroSubsc/ The Hitman Pro detection is just the display driver for the VM, and Norton just detects Kaspersky

Which of my lists are you submitting it to?

Antimalware

Which adblocker(s) and version did you use when writing and testing the entries?

Other(s):

Adblocker version(s): uBlock Origin 1.37.2

Which filterlists did you use? Failing to tell this will temporarily close the report until it has been told.

N/A

(Optional) Which browser(s) and version did you use?

iam-py-test commented 3 years ago

@DandelionSprout thanks!