uBlockOrigin / uAssets

Resources for uBlock Origin, uMatrix: static filter lists, ready-to-use rulesets, etc.
GNU General Public License v3.0
4.21k stars 777 forks source link

uploadfox.net: badware #26102

Closed ghajini closed 3 hours ago

ghajini commented 3 hours ago

Prerequisites

URL address of the web page

https://uploadfox.net/vfgqcgsqgk9q

Category

badware

Description

this site serves .exe which is malicious when clicked on free download

detection =

https://www.virustotal.com/gui/file/a5db6404a86d083afa17a2929c8c4174d8d9a6e3ef86cc9c2cc68b2f547e778f/summary

https://www.virustotal.com/gui/url/07345eb44c1a7b83afa90024eac5dd831f766524785dfdb3d20528a76ff2889d?nocache=1

it has infected win os opera_aXnelBI8Jp_084259

Other extensions used

none

Screenshot(s)

Screenshot(s)

Configuration

```yaml uBlock Origin: 1.61.0 Firefox Mobile: 134 filterset (summary): network: 139735 cosmetic: 58437 scriptlet: 21447 html: 2144 listset (total-discarded, last-updated): default: user-filters: 16-0, never ublock-filters: 41430-138, 3m Δ ublock-badware: 11857-1, 3m Δ ublock-privacy: 1472-22, 3m Δ ublock-unbreak: 2567-1, 3m Δ ublock-quick-fixes: 214-10, 3m Δ adguard-mobile: 9939-179, 3m easylist: 78978-643, 3m Δ easyprivacy: 53263-697, 3m Δ urlhaus-1: 20325-0, 3m plowe-0: 3537-0, now filterset (user): [array of 17 redacted] userSettings: advancedUserEnabled: true userFiltersTrusted: true hiddenSettings: filterAuthorMode: true trustedListPrefixes: ublock- user- supportStats: allReadyAfter: 699 ms (selfie) maxAssetCacheWait: 171 ms cacheBackend: indexedDB popupPanel: blocked: 4 network: googletagmanager.com: 1 hotjar.com: 1 plausible.io: 2 ```
ghajini commented 3 hours ago

feedback required whether a full website should be blocked or not (like ||uploadfox.net^$all or ||uploadfox.net^$doc) what you guys prefer @gorhill @iam-py-test @Yuki2718