Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Malware domain #9180

Closed
5 of 7 tasks
iam-py-test opened this issue May 24, 2021 · 10 comments
Closed
5 of 7 tasks

Malware domain #9180

iam-py-test opened this issue May 24, 2021 · 10 comments
Labels

Comments

@iam-py-test
Copy link
Contributor

iam-py-test commented May 24, 2021

Prerequisites

  • This is not a support issue or a question
  • I performed a cursory search of the issue tracker to avoid opening a duplicate issue
  • I tried to reproduce the issue when...
    • uBlock Origin is the only extension
    • uBlock Origin with default lists/settings
    • using a new, unmodified browser profile
  • I am running the latest version of uBlock Origin

URL(s) where the issue occurs

thegay.com

Describe the issue

thegay.com is a malware site I discovered by reading easylist/easylist#7918
It is not blocked by uBlock Origin

Screenshot(s)

N/A

Versions

  • Browser/version: Edge 90.0.818.66
  • uBlock Origin version: uBlock Origin development build v1.35.3b5

Settings

Advanced user mode: On (No relevant rules)

image
image
1

Notes

I would like to see this malware domain blocked by uBlock Origin.
There are no references to it in uBlock Origin badware and URLHaus
This domain is still online according to ping.
Verification:

https://www.fortiguard.com/webfilter?q=thegay.com
https://safeweb.norton.com/report/show?url=thegay.com
https://www.siteadvisor.com/sitereport.html?url=thegay.com
https://quttera.com/detailed_report/thegay.com
https://sitecheck.sucuri.net/results/thegay.com
https://www.mywot.com/en/scorecard/thegay.com
https://www.virustotal.com/gui/url/4c0a08dc7b1e241b3f612b0552784fa5ab4ef9fac76ecb0afa2998ff6c4d3817/detection
https://www.urlvoid.com/scan/thegay.com/
https://github.com/iam-py-test/my_filters_001/commit/c65cac99993208e428221b92094edfe27ffa7e69
https://duckduckgo.com/?q=thegay.com+malware&ia=web
``` (no relevant results)
<!-- [Add here the result of whatever investigation work you have done: please investigate the issues you report -- this prevents burdening other volunteers. This is especially true for issues arising from settings which are very different from default ones.] -->
@uBlock-user
Copy link
Contributor

Adult content !== malware domain

@iam-py-test
Copy link
Contributor Author

iam-py-test commented May 24, 2021

@uBlock-user I did not open this issue because it is porn.
Check the links in the comment:
https://safeweb.norton.com/report/show?url=thegay.com

@iam-py-test
Copy link
Contributor Author

image
image

@iam-py-test
Copy link
Contributor Author

iam-py-test commented May 24, 2021

https://www.urlvoid.com/scan/thegay.com/

@uBlock-user
Copy link
Contributor

uBlock-user commented May 24, 2021

Antiviruses reports don't take uBlock Origin's default filter lists into account when reporting it as possibly "risky".

@iam-py-test
Copy link
Contributor Author

Antiviruses reports don't take uBlock Origin's default filter lists into into account when reporting it as possibly "risky".

Is there is uBlock Origin's default filters that prevents this site from installing malware?
/\/[a-z]{4,13}\/[a-z]{3,6}(\d\.){3}[0-9a-f]{32}\.js$/$script,1p,domain=hclips.com|hdzog.com|hotmovs.com|porn555.com|pornforrelax.com|pornj.com|pornl.com|pornq.com|puporn.com|see.xxx|shemalez.com|sss.xxx|thegay.com|thegay.porn|tubepornclassic.com|tuberel.com|txxx.com|upornia.com|voyeurhit.com?

@uBlock-user
Copy link
Contributor

There is Online Malicious URL Blocklist enabled by default.

@iam-py-test
Copy link
Contributor Author

Should I report it to them then?

@uBlock-user
Copy link
Contributor

Your choice.

@iam-py-test
Copy link
Contributor Author

Ok! Sorry for wasting your time

iam-py-test added a commit to iam-py-test/my_filters_001 that referenced this issue May 24, 2021
iam-py-test added a commit to iam-py-test/my_filters_001 that referenced this issue Jun 12, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants