[uBlock Origin; AdGuard]
# Title: Grayware Blocklist
# Updated: 2024-04-04
# Expires: 1 month (update frequency)
# Homepage: https://github.com/VernonStow/Filterlist
# License: https://opensource.org/licenses/0BSD Zero-Clause BSD
# Subscription link: https://github.com/VernonStow/Filterlist/raw/master/Filterlist.txt

# Spam and malware TLDs (courtesy Spamhaus and SURBL)
||surf^$all
||rest^$all
||monster^$all
||icu^$all,domain=~lunar.icu
||cfd^$all
||top^$all
||gq^$all
||cn^$all
||ga^$all
||tk^$all
||cm^$all,domain=~hill.cm|~nyer.cm
||name^$all
||cyou^$all,domain=~hammertime.cyou
||fyi^$all
||haus^$all
||hair^$all
||makeup^$all,domain=~bird.makeup
||zone^$all,denyallow=itch.zone,domain=~blahaj.zone|~froth.zone
||rodeo^$all
||men^$all
||support^$all
||ml^$all
||tattoo^$all
||quest^$all

# High-risk TLDs per Ars Technica https://v.gd/riskyTLD
||zip^$all
||mov^$all

# Tracking
||trackvoluum.com^
pre.footprintpredict.com
appcloudprotected.com
admicro1.vcmedia.vn
images.revtrax.com
kiks.yandex.ru
simg.sinajs.cn
tv.sohu.com

# Miner
||ackng.com^

# Suspicious redirects
||dntrax.com^
click.blendernetworks.com
pushra.bid
popads.net
||jerkvilla.com^
letzonke.com
amanda.tnctrx.com
inclk.com
||rainbow-networks.com^
yotube.com
||bigbangempire.com^
digitalprivacyalert.org
||wizard101.com^
||Iyfbodn.com^
||hard-configurator.com$all

# Used to infect and redirect websites
mcloudjs.com$all
googieapls.com$all
google-analytisc.co.cc$all

# Ransomware
neogenomes.com
# Follina
||coolrat.xyz$all
||download-cdn.com$all

# Twitter spam - see https://is.gd/qBiX4H
||brightii.com^
||bbrt.space^
||freelink.space^
||linkly.space^
||brry.org^
||tapice.net^
||joinchannelnow.net^

# Suspicious websites
||ecpms.net^
||game-geek.pro^
||emsubtitle.com^
||trendingwp.com^
||floralrichardapprentice.com$all
! https://github.com/VernonStow/Filterlist/issues/4
||logicalrecord.com$all
# BitCoin scam
||cham-event.com$all
||bitmaxi.org$all
# Scam domain
1800support.weebly.com$all
# Scareware fake AV
||centralheat.me^
||yugava.xyz^
||pcprotogo.com^
||smartopc.xyz^
! https://www.pcrisk.com/removal-guides/23744-notification-news-com-ads
||notification-news.com^
# Tech support scam per Bleeping Computer
||ondigitalocean.app^
||tissatweb.us^
# Crypto scam per Bleeping Computer
||freedomgiveaway.net
||bitoxies.com 
||moonexio.com 
||altgetxio.com 
||cratopex.com
||revoketokens.io
||revokea.sh

# Fake search engines
||puupnewsapp.com$all
||smartwebfinder.com$all
||myway.com$all
||ctcodeinfo.com$all
||juwakaha.com$all
||get.thesafersearch.com$all
||thesafersearch.com$all
||serasearchtop.com$all
||tryimv3srvsts.com$all
||resultsearch.net$all

# Aggressive ad reinsertion
||d1272serve.xyz^
||viecisystems.com^
trk.viecisystems.com^$important
||dn.srv1272.com^
creative.admjmp.com##.models-list-wrapper
creative.admjmp.com##.widget-container_xh-design.widget-container
||blkditsup.com^
||eu-adsrv.rtbsuperhub.com^
||static-rtb2.firedsp.com/storage^
||bmedia.justservingfiles.net^$image,important
||ads.trafficjunky.net^$important
||sniffies.com^$third-party,important
||www.imglnke.com^$important
||dat.its-up.com/creative/*
www.adpmbtj.com##video
||stivers-ricsovers.com^$image,domain=www.adpmbtj.com,important
||v.vfgte.com/impression/*$image,domain=www.adpmbtj.com,important
||www.adpmbtj.com^$important

# Malware
#https://github.com/VernonStow/Filterlist/issues/2#issue-909917108
gogle.net$all
quatrefeuillepolonaise.xyz$all
extragifis.site$all
captcharesolver.com$all
cpmstatsart.com$all
instantfwding.com$all
goldprize.xyz$all
kmip.net$all
iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com$all
1flchier.com$all
# https://www.urlvoid.com/scan/111bjs.com/
||111bjs.com$all
# https://www.urlvoid.com/scan/proxfree.com/
||proxfree.com$all
||expresswayautopr.com$all
||unpleasantconcrete.com$all
||langhort.com$all
||nitrokod.com$all
||intelserviceupdate.com$all 
||infoamanewonliag.online$all
||winwin.co.th^
||zero2000.com$all
||survey-smiles.com$all

! Fake Keepass sites
||ķeepass.info$all
||keeqass.info$all
||keepasstacking.site^

# Typosquatting
||sniiffies.com^
||virginatlantc.com^
||notepads-plus-plus.org^
||tocproject.com^
||thundersbird.org^
||codevisualstudio.org^
||braves-browsers.org^
||ethersmine.com^
||advenced-ip-scanner.com$all
||wplsummit.com^
||southchinapost.net$all
||caavn.org$all


# Malvertising downloads, per Securelist and Bleeping Computer
||download2392.mediafire.com$all
||blahder3dsoft.store$all
||github.com/sup6724/*
||mynetfoldersip.cfd$all
||mycasemanager.icu$all

# Magnat reported by talosintelligence.com
softstatistic.xyz$all
iisnbnd7723hj.digital$all
sdcdsujnd555w.digital$all
luckydaddy.xyz$all
hssubnsx.xyz$all
0-800-email.com$all

# Bazar trojan per Fortinet
complaintsreport2020.gr8.com$all
app.getresponse.com$all

# Zloader per Sentinel One
websekir.com$all
pornofilmspremium.com$all

# Hermetic Wiper per Zscaler
||kfctm.online$all
||my.mondeychamp.xyz$all

# FFDroider trojan
||download.studymathlive.com$all

# Twitter Phishing
||twitter-safeguard-protection.info^
||account-safety.com^
||security-steps.com^

# Magniber, per 360
||casbin.info$all
||flatis.uno$all
||vocoto.info$all

# Magniber, per HP
||totwo.pw$all
||ittakes.fun$all
||catat.site$all
||tinpick.online$all
||pirlay.fun$all
||buyaims.online$all
||orhung.space$all
||actsred.site$all

# Data wiper, per Bleeping Computer
||nude-girlss.mywire.org$all
||sexyphotos.kozow.com$all
||sexy-photo.online$all
loseyourip.com$all

# Fake Equifax settlement sites, per Brian Krebs
||equifaxbreechsettlement.com^
||equifaxbreachsettlementbreach.com^
||equifaxsettlements.co^

# Phishing, per Bleeping Computer
||microsoft-office.zip$all

# Malware, per Kaspersky https://is.gd/kY70DV
||deb.fdmpkg.org$all

# Redline malware, per Bleeping Computer
||argenferia.com$all
||realvnc.pro$all
||corporatecomf.online$all
||cilrix-corp.pro$all
||thecoopmodel.com$all
||winscp-apps.online$all
||wireshark-app.online$all
||cilrix-corporate.online$all
||workspace-app.online$all

#Fake news sites promoting gambling https://is.gd/SEHkMc
||*newstoday.com

#Parked domains
||stud-center.com