uBlockOrigin / uAssets

Resources for uBlock Origin, uMatrix: static filter lists, ready-to-use rulesets, etc.
GNU General Public License v3.0
4.04k stars 759 forks source link

Scam domains #9848

Closed iam-py-test closed 3 years ago

iam-py-test commented 3 years ago

Prerequisites

I tried to reproduce the issue when...

URL(s) where the issue occurs

||gghacks.com^$all
||rewardsgiantusa.com^$document
||promotionsonlineusa.com^$document
||displayoptoffers.com^$document
||sweepstakesalerts.com^$document
||qualityhealth.com^$document
||consumerproductsusa.com^$document

Describe the issue

These websites are scams

Screenshot(s)

image image image image

uBlock Origin version

1.37.2

Browser name and version

91.0.2

Settings

Same as my last issue report (#9840)

Notes

I tested more than one of the hacks and they all involved this scam Some of these domains are triggered in preforming additional actions than those listed in the screenshots. However, I have not excluded them as that would make the issue report extremely long. I can revisit and take screenshots if needed

iam-py-test commented 3 years ago

@uBlock-user more scam domains with a similar scam: image image Original url: hxxp[:]//www.get-cracked[.]com/tag/minecraft-activation-key/ Filters:

||get-cracked.com^$all
||tinyurl.com/gp84uz2$document
||mediafiire.com^$document
||d1xkyo9j4r7vnn.cloudfront.net^$all
||onlinepromotionsusa.com^$document

VirusTotal scan of the original url and domain: https://www.virustotal.com/gui/url/1671d2b14f2baed1438176929ba9908270f26e41f7b17c0ce0a85bd5e9c20f35/detection https://www.virustotal.com/gui/url/0eca172b2f35f81e0f222dbdf261a100c7897f734c7ba43920b67c4cddd6f8c9/detection One of the scam sites was blocked by Microsoft: image