badmojr / 1Hosts

World's most advanced DNS filter-/blocklists!
https://o0.pages.dev
Mozilla Public License 2.0
1.44k stars 82 forks source link

URL duchessefit.com not blocked yet #1655

Open Alex67693 opened 6 months ago

Alex67693 commented 6 months ago


Submit Form

Get your issue resolved quickly! Fill in the form accurately.

Lists in use:

Client: NextDNS


Domains:

duchessefit.com


Details: Fake phone clean warning, can be found on Google spam results.

Thank you for supporting 1Hosts.

It’s people like you who make these lists great! ❤
spirillen commented 6 months ago

redirects to yahoo

curl -I "https://duchessefit.com"
HTTP/2 302
date: Sat, 06 Jan 2024 20:40:11 GMT
content-type: text/html
location: https://yahoo.com/?
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zrZ5s3m2dObvSNGU7R83jnnMHS7A6Ry%2FBSZ68HgAiIMFcCoCeZEjKPcMDYBBJrA69AoeNxZILkfwcuIduOA%2F80iJKRp9BO9jhDQC9RL2Yjn80GFtjw3IMPKWnZYhQs0QsZ4wX9t2FEC5bcD4c3M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8416c64c1c4840b5-SIN
alt-svc: h3=":443"; ma=86400
Alex67693 commented 6 months ago

redirects to yahoo

curl -I "https://duchessefit.com"
HTTP/2 302
date: Sat, 06 Jan 2024 20:40:11 GMT
content-type: text/html
location: https://yahoo.com/?
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zrZ5s3m2dObvSNGU7R83jnnMHS7A6Ry%2FBSZ68HgAiIMFcCoCeZEjKPcMDYBBJrA69AoeNxZILkfwcuIduOA%2F80iJKRp9BO9jhDQC9RL2Yjn80GFtjw3IMPKWnZYhQs0QsZ4wX9t2FEC5bcD4c3M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8416c64c1c4840b5-SIN
alt-svc: h3=":443"; ma=86400

That's strange, because

https://duchessefit.com/GXzUvWwVRKI_SNxOOWcfPItI87EQavKtfnW6FtK3gkA/?cid=w7d4b8cg4dngm39u2bilfjn8&sid=c119ff56-5479-4467-bbb6-73e3a4037167

redirects to spam.

spirillen commented 6 months ago

Ahh now you are bringing the gold to the table... that generated url is very important piece of evidences and needed to be able to confirm

and then you should have posted the screenshot

image

PS: could you please add back ticks around the link to avoid having innocent people clicking it?