[uBlock Origin; AdGuard]
# Title: Grayware Blocklist
# Updated: 2025-02-08
# Expires: 1 month (update frequency)
# Homepage: https://github.com/VernonStow/Filterlist
# License: https://opensource.org/licenses/0BSD Zero-Clause BSD
# Subscription link: https://github.com/VernonStow/Filterlist/raw/master/Filterlist.txt

# Spam and malware TLDs (courtesy Spamhaus and SURBL)
||top^$all
||cn^$all
||cm^$all,domain=~hill.cm|~nyer.cm
||pizza^$all,domain=~tux.pizza
||loan^$all
||loans^$all
||wang^$all
||pink^$all
||today^$all,domain=~archive.today
||pictures^$all
||xin^$all
||poker^$all
||auction^$all
||gdn^$all
||town^$all
||qpon^$all
||locker^$all
||pet^$all
||vip^$all
||bid^$all
||one^$all,domain=~maxibestof.one|~historyvisit.one
||academy^$all
||plus^$all
||lgbt^$all,domain=~tech.lgbt|~mint.lgbt
||icu^$all,domain=~lunar.icu
||cfd^$all
||lifestyle^$all
||cyou^$all
||click^$all

# High-risk TLDs per Ars Technica https://v.gd/riskyTLD
||zip^$all
||mov^$all
# Bad similar TLD per Spamhaus
||mobi^$all

# Tracking
||trackvoluum.com^
pre.footprintpredict.com
appcloudprotected.com
admicro1.vcmedia.vn
images.revtrax.com
kiks.yandex.ru
simg.sinajs.cn
tv.sohu.com

# Miner
||ackng.com^

# Suspicious redirects
||dntrax.com^
click.blendernetworks.com
pushra.bid
popads.net
||jerkvilla.com^
letzonke.com
amanda.tnctrx.com
inclk.com
||rainbow-networks.com^
yotube.com
||bigbangempire.com^
digitalprivacyalert.org
||wizard101.com^
||Iyfbodn.com^
||textfonts.net^
||oalibrary.org^
||blogzilla.info^

# Used to infect and redirect websites
mcloudjs.com$all
googieapls.com$all
google-analytisc.co.cc$all

# Ransomware
neogenomes.com
# Follina
||coolrat.xyz$all
||download-cdn.com$all

# Twitter spam - see https://is.gd/qBiX4H
||brightii.com^
||bbrt.space^
||freelink.space^
||linkly.space^
||brry.org^
||tapice.net^
||joinchannelnow.net^

# Suspicious websites
||ecpms.net^
||game-geek.pro^
||emsubtitle.com^
||trendingwp.com^
||floralrichardapprentice.com$all
! https://github.com/VernonStow/Filterlist/issues/4
||logicalrecord.com$all
||plainproxies.com$all
||huyx.cc$all

# BitCoin scam
||cham-event.com$all
||bitmaxi.org$all

# Scam domain
1800support.weebly.com$all
||hard-configurator.com$all
||simplewall.org$all

# Scareware fake AV
||centralheat.me^
||yugava.xyz^
||pcprotogo.com^
||smartopc.xyz^
! https://www.pcrisk.com/removal-guides/23744-notification-news-com-ads
||notification-news.com^
||safesplitpro.com$all

# Tech support scam per Bleeping Computer
||ondigitalocean.app^
||tissatweb.us^

# Crypto scam per Bleeping Computer
||freedomgiveaway.net
||bitoxies.com 
||moonexio.com 
||altgetxio.com 
||cratopex.com
||revoketokens.io
||revokea.sh

# Fake search engines
||puupnewsapp.com$all
||smartwebfinder.com$all
||myway.com$all
||ctcodeinfo.com$all
||juwakaha.com$all
||get.thesafersearch.com$all
||thesafersearch.com$all
||serasearchtop.com$all
||tryimv3srvsts.com$all
||resultsearch.net$all

# Malware
#https://github.com/VernonStow/Filterlist/issues/2#issue-909917108
gogle.net$all
quatrefeuillepolonaise.xyz$all
extragifis.site$all
captcharesolver.com$all
cpmstatsart.com$all
instantfwding.com$all
goldprize.xyz$all
kmip.net$all
iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com$all
1flchier.com$all
# https://www.urlvoid.com/scan/111bjs.com/
||111bjs.com$all
# https://www.urlvoid.com/scan/proxfree.com/
||proxfree.com$all
||expresswayautopr.com$all
||unpleasantconcrete.com$all
||langhort.com$all
||nitrokod.com$all
||intelserviceupdate.com$all 
||infoamanewonliag.online$all
||winwin.co.th^
||zero2000.com$all
||survey-smiles.com$all
||nativlang.com$all
||trial-uploader.store
||unknow.com$all
||iyfhshsp.com$all

! Fake Keepass sites
||ķeepass.info$all
||keeqass.info$all
||keepasstacking.site^
||keeppaswrd.com$all

# Typosquatting
||sniiffies.com^
||virginatlantc.com^
||notepads-plus-plus.org^
||tocproject.com^
||thundersbird.org^
||codevisualstudio.org^
||braves-browsers.org^
||ethersmine.com^
||advenced-ip-scanner.com$all
||wplsummit.com^
||southchinapost.net$all
||caavn.org$all

# Malvertising downloads, per Securelist and Bleeping Computer
||download2392.mediafire.com$all
||blahder3dsoft.store$all
||github.com/sup6724/*
||mynetfoldersip.cfd$all
||mycasemanager.icu$all
||aenys.com$all

# Magnat reported by talosintelligence.com
softstatistic.xyz$all
iisnbnd7723hj.digital$all
sdcdsujnd555w.digital$all
luckydaddy.xyz$all
hssubnsx.xyz$all
0-800-email.com$all

# Bazar trojan per Fortinet
complaintsreport2020.gr8.com$all
app.getresponse.com$all

# Zloader per Sentinel One
websekir.com$all
pornofilmspremium.com$all

# Hermetic Wiper per Zscaler
||kfctm.online$all
||my.mondeychamp.xyz$all

# FFDroider trojan
||download.studymathlive.com$all

# Twitter Phishing
||twitter-safeguard-protection.info^
||account-safety.com^
||security-steps.com^
spotify.h0pz.top^

# Magniber, per 360
||casbin.info$all
||flatis.uno$all
||vocoto.info$all

# Magniber, per HP
||totwo.pw$all
||ittakes.fun$all
||catat.site$all
||tinpick.online$all
||pirlay.fun$all
||buyaims.online$all
||orhung.space$all
||actsred.site$all

# Data wiper, per Bleeping Computer
||nude-girlss.mywire.org$all
||sexyphotos.kozow.com$all
||sexy-photo.online$all
loseyourip.com$all

# Fake Equifax settlement sites, per Brian Krebs
||equifaxbreechsettlement.com^
||equifaxbreachsettlementbreach.com^
||equifaxsettlements.co^

# Phishing, per Bleeping Computer
||microsoft-office.zip$all

# Malware, per Kaspersky https://is.gd/kY70DV
||deb.fdmpkg.org$all

# Redline malware, per Bleeping Computer
||argenferia.com$all
||realvnc.pro$all
||corporatecomf.online$all
||cilrix-corp.pro$all
||thecoopmodel.com$all
||winscp-apps.online$all
||wireshark-app.online$all
||cilrix-corporate.online$all
||workspace-app.online$all

#Fake news sites promoting gambling https://is.gd/SEHkMc
||*newstoday.com,domain=~www.medicalnewstoday.com

#Parked or abandoned domains
||stud-center.com
||cslmotorcycleparts.com
||chuckmasterson.com
||seitan-ayoub.lol
||searxng.ch
||dropcatch.com
||gitloaf.com

#Dating scam, per Bleeping Computer https://is.gd/jTCS1d
||gdahglobal.com^$all

#Fake Google Authenticcator, per Bleeping Computer
||authenticcator-descktop.com
||chromstore-authentificator.com
||authentificator-gogle.com

#Cryptocurrency stealer, per Bleeping Computer
||editproai.pro
||editproai.org
||proai.club
||MetaChain.cash
||cryptos-satoshi.github.io

#Fake YouTube downloaders
||y2meta.tube
||/y2mate.lol

#Fake file converters, per Bleeping Computer https://is.gd/8FJoJP
||docu-flex.com$all
||pdfixers.com$all
||pdfdocx.com$all
||pdf-online-tools.com$all

#Possible phishing
||seemyphone.com$all
||circleboom.com$all
||atplink.com$all

#Financial scam
||safety-govel.cfd$all

#Suspicious per Krebs on Security
||lospollos.com$all
||tacoloco.co$all

#Akira ransomware
||opmanager.pro$all

# Click Fix Malware
||mein-lonos-cloude.de
||access-ssa-gov.es
||binancepizza.info
||applemacios.com/getrur
||tesra.shop
||cqsf.live
||panel-spectrum.net
||guildmerger.co/verify/eminem
||files.catbox.moe/snenal.bat