Merge pull request #483 from chartingshow/Vultur

Block `Vultur` banking malware being used on Android devices

src/blacklists/hosts.txt

@@ -4,7 +4,7 @@
 # Contribute: https://github.com/chartingshow/crypto-firewall/issues
 # License: GPL-3.0 license
 #
-# Last modified: 25 March 2024
+# Last modified: 30 March 2024
 #
 
 # Extras (comment out if needed)
@@ -79,11 +79,13 @@
 0.0.0.0 0280678.com
 0.0.0.0 028tnt.com
 0.0.0.0 02w65ijjohr1frm.com
+0.0.0.0 053105.com
 0.0.0.0 07159889-coinbase.com
 0.0.0.0 075a42f94213a494.live
 0.0.0.0 07umut07basla.net
 0.0.0.0 086df9b3b637e40d.info
 0.0.0.0 08grab.com
+0.0.0.0 092877.com
 0.0.0.0 0b125b25007220d9.xyz
 0.0.0.0 0bamandos.ru
 0.0.0.0 0cq.us
@@ -367,6 +369,7 @@
 0.0.0.0 3313v.com
 0.0.0.0 3463forum.cf
 0.0.0.0 352134951-coinbase.com
+0.0.0.0 353934.com
 0.0.0.0 35b98a2504c08951.live
 0.0.0.0 35fbe7fc67cdc20d.top
 0.0.0.0 3635optical.ga
@@ -447,8 +450,12 @@
 0.0.0.0 548848.xyz
 0.0.0.0 56toddhill.com
 0.0.0.0 57197-coinbase.com
+0.0.0.0 581574.com
 0.0.0.0 58176-coinbase.com
+0.0.0.0 582342.com
+0.0.0.0 582630.com
 0.0.0.0 58297-coinbase.com
+0.0.0.0 593942.com
 0.0.0.0 5a8777db35d45d0a.live
 0.0.0.0 5cae.com
 0.0.0.0 5cq.com
@@ -490,6 +497,7 @@
 0.0.0.0 778899aabb.ml
 0.0.0.0 77eb439d6788793e.com
 0.0.0.0 77navi.com
+0.0.0.0 784503.com
 0.0.0.0 7a4edf69ed3d21f9.live
 0.0.0.0 7alangy.com
 0.0.0.0 7c5xek1a1pe7nnn.top
@@ -537,6 +545,7 @@
 0.0.0.0 896pc6x93.gq
 0.0.0.0 8d7c621736f6cb25.xyz
 0.0.0.0 8fx.us
+0.0.0.0 908713.com
 0.0.0.0 909nu3dx3rgk13.com.de
 0.0.0.0 91723-gemini.com
 0.0.0.0 91752-coinbase.com
@@ -550,9 +559,11 @@
 0.0.0.0 92758-coinbase.com
 0.0.0.0 92cf772e294ea095.store
 0.0.0.0 92l.info
+0.0.0.0 930204.com
 0.0.0.0 948122061-coinbase.com
 0.0.0.0 9501dh03.vip
 0.0.0.0 95555cmbchina.com
+0.0.0.0 960232.com
 0.0.0.0 96roafw91vs3hqv.top
 0.0.0.0 97215618426.pw
 0.0.0.0 978941-coinbase.com
@@ -3431,6 +3442,7 @@
 0.0.0.0 cloudivox.info
 0.0.0.0 cloudkknet.pro
 0.0.0.0 cloudmetricsapp.com
+0.0.0.0 cloudmiracle.store
 0.0.0.0 cloudns.nz
 0.0.0.0 cloudns.ph
 0.0.0.0 cloudoption.in
@@ -12574,6 +12586,7 @@
 0.0.0.0 safelyredirecting.com
 0.0.0.0 safelyredirecting.digital
 0.0.0.0 safemotors.co.kr
+0.0.0.0 safetyfactor.online
 0.0.0.0 safewayintltransfer.com
 0.0.0.0 safewayinvestment.com
 0.0.0.0 safewaylimited.net

src/blacklists/nomalware-beta.txt

@@ -1,7 +1,7 @@
 [Adblock Plus 2.0]
 ! Title: Crypto Firewall (Beta Version)
 ! Expires: 7 days (update frequency)
-! Last modified: 25 March 2024
+! Last modified: 30 March 2024
 ! Homepage: https://github.com/chartingshow/crypto-firewall/
 ! Contribute: https://github.com/chartingshow/crypto-firewall/issues
 ! License: GPL-3.0 license
@@ -76,11 +76,13 @@
 ||0280678.com^$third-party
 ||028tnt.com^$third-party
 ||02w65ijjohr1frm.com^$third-party
+||053105.com^$third-party
 ||07159889-coinbase.com^$third-party
 ||075a42f94213a494.live^$third-party
 ||07umut07basla.net^$third-party
 ||086df9b3b637e40d.info^$third-party
 ||08grab.com^$third-party
+||092877.com^$third-party
 ||0b125b25007220d9.xyz^$third-party
 ||0bamandos.ru^$third-party
 ||0cq.us^$third-party
@@ -371,6 +373,7 @@
 ||35.194.26.233^$third-party
 ||35.239.57.233^$third-party
 ||352134951-coinbase.com^$third-party
+||353934.com^$third-party
 ||35b98a2504c08951.live^$third-party
 ||35fbe7fc67cdc20d.top^$third-party
 ||3635optical.ga^$third-party
@@ -453,8 +456,12 @@
 ||548848.xyz^$third-party
 ||56toddhill.com^$third-party
 ||57197-coinbase.com^$third-party
+||581574.com^$third-party
 ||58176-coinbase.com^$third-party
+||582342.com^$third-party
+||582630.com^$third-party
 ||58297-coinbase.com^$third-party
+||593942.com^$third-party
 ||5a8777db35d45d0a.live^$third-party
 ||5cae.com^$third-party
 ||5cq.com^$third-party
@@ -497,6 +504,7 @@
 ||778899aabb.ml^$third-party
 ||77eb439d6788793e.com^$third-party
 ||77navi.com^$third-party
+||784503.com^$third-party
 ||7a4edf69ed3d21f9.live^$third-party
 ||7alangy.com^$third-party
 ||7c5xek1a1pe7nnn.top^$third-party
@@ -544,6 +552,7 @@
 ||896pc6x93.gq^$third-party
 ||8d7c621736f6cb25.xyz^$third-party
 ||8fx.us^$third-party
+||908713.com^$third-party
 ||909nu3dx3rgk13.com.de^$third-party
 ||91723-gemini.com^$third-party
 ||91752-coinbase.com^$third-party
@@ -557,9 +566,11 @@
 ||92758-coinbase.com^$third-party
 ||92cf772e294ea095.store^$third-party
 ||92l.info^$third-party
+||930204.com^$third-party
 ||948122061-coinbase.com^$third-party
 ||9501dh03.vip^$third-party
 ||95555cmbchina.com^$third-party
+||960232.com^$third-party
 ||96roafw91vs3hqv.top^$third-party
 ||97215618426.pw^$third-party
 ||978941-coinbase.com^$third-party
@@ -3441,6 +3452,7 @@
 ||cloudivox.info^$third-party
 ||cloudkknet.pro^$third-party
 ||cloudmetricsapp.com^$third-party
+||cloudmiracle.store^$third-party
 ||cloudns.nz^$third-party
 ||cloudns.ph^$third-party
 ||cloudoption.in^$third-party
@@ -12555,6 +12567,7 @@
 ||safelyredirecting.com^$third-party
 ||safelyredirecting.digital^$third-party
 ||safemotors.co.kr^$third-party
+||safetyfactor.online^$third-party
 ||safewayintltransfer.com^$third-party
 ||safewayinvestment.com^$third-party
 ||safewaylimited.net^$third-party
@@ -16582,7 +16595,6 @@
 ||iis.uj.ac.za^
 ||images.cjp.mx^
 ||imas.uk.com^
-||incentiveswidget.appspot.com^
 ||inferno.bigpurposebigimpact.com^
 ||interesting-shaw.128-199-202-98.plesk.page^
 ||joke.webproduct.info^
@@ -16892,6 +16904,7 @@ $script,websocket,domain=pirateproxy.ist|pirateproxy.mx|thepiratebay.by|thepirat
 !#include subdomain-filters/5v-pl/nomalware.txt
 !#include subdomain-filters/amazonaws-com/nomalware.txt
 !#include subdomain-filters/appsflyer-com/nomalware.txt
+!#include subdomain-filters/appspot-com/nomalware.txt
 !#include subdomain-filters/at-playit-gg/nomalware.txt
 !#include subdomain-filters/auto-playit-gg/nomalware.txt
 !#include subdomain-filters/azurewebsites-net/nomalware.txt

src/blacklists/nomalware-full.txt

@@ -1,7 +1,7 @@
 [Adblock Plus 2.0]
 ! Title: Crypto Firewall (Full Version)
 ! Expires: 7 days (update frequency)
-! Last modified: 25 March 2024
+! Last modified: 30 March 2024
 ! Homepage: https://github.com/chartingshow/crypto-firewall/
 ! Contribute: https://github.com/chartingshow/crypto-firewall/issues
 ! License: GPL-3.0 license
@@ -76,11 +76,13 @@
 ||0280678.com^$third-party
 ||028tnt.com^$third-party
 ||02w65ijjohr1frm.com^$third-party
+||053105.com^$third-party
 ||07159889-coinbase.com^$third-party
 ||075a42f94213a494.live^$third-party
 ||07umut07basla.net^$third-party
 ||086df9b3b637e40d.info^$third-party
 ||08grab.com^$third-party
+||092877.com^$third-party
 ||0b125b25007220d9.xyz^$third-party
 ||0bamandos.ru^$third-party
 ||0cq.us^$third-party
@@ -371,6 +373,7 @@
 ||35.194.26.233^$third-party
 ||35.239.57.233^$third-party
 ||352134951-coinbase.com^$third-party
+||353934.com^$third-party
 ||35b98a2504c08951.live^$third-party
 ||35fbe7fc67cdc20d.top^$third-party
 ||3635optical.ga^$third-party
@@ -453,8 +456,12 @@
 ||548848.xyz^$third-party
 ||56toddhill.com^$third-party
 ||57197-coinbase.com^$third-party
+||581574.com^$third-party
 ||58176-coinbase.com^$third-party
+||582342.com^$third-party
+||582630.com^$third-party
 ||58297-coinbase.com^$third-party
+||593942.com^$third-party
 ||5a8777db35d45d0a.live^$third-party
 ||5cae.com^$third-party
 ||5cq.com^$third-party
@@ -497,6 +504,7 @@
 ||778899aabb.ml^$third-party
 ||77eb439d6788793e.com^$third-party
 ||77navi.com^$third-party
+||784503.com^$third-party
 ||7a4edf69ed3d21f9.live^$third-party
 ||7alangy.com^$third-party
 ||7c5xek1a1pe7nnn.top^$third-party
@@ -544,6 +552,7 @@
 ||896pc6x93.gq^$third-party
 ||8d7c621736f6cb25.xyz^$third-party
 ||8fx.us^$third-party
+||908713.com^$third-party
 ||909nu3dx3rgk13.com.de^$third-party
 ||91723-gemini.com^$third-party
 ||91752-coinbase.com^$third-party
@@ -557,9 +566,11 @@
 ||92758-coinbase.com^$third-party
 ||92cf772e294ea095.store^$third-party
 ||92l.info^$third-party
+||930204.com^$third-party
 ||948122061-coinbase.com^$third-party
 ||9501dh03.vip^$third-party
 ||95555cmbchina.com^$third-party
+||960232.com^$third-party
 ||96roafw91vs3hqv.top^$third-party
 ||97215618426.pw^$third-party
 ||978941-coinbase.com^$third-party
@@ -3441,6 +3452,7 @@
 ||cloudivox.info^$third-party
 ||cloudkknet.pro^$third-party
 ||cloudmetricsapp.com^$third-party
+||cloudmiracle.store^$third-party
 ||cloudns.nz^$third-party
 ||cloudns.ph^$third-party
 ||cloudoption.in^$third-party
@@ -12555,6 +12567,7 @@
 ||safelyredirecting.com^$third-party
 ||safelyredirecting.digital^$third-party
 ||safemotors.co.kr^$third-party
+||safetyfactor.online^$third-party
 ||safewayintltransfer.com^$third-party
 ||safewayinvestment.com^$third-party
 ||safewaylimited.net^$third-party
@@ -16582,7 +16595,6 @@
 ||iis.uj.ac.za^
 ||images.cjp.mx^
 ||imas.uk.com^
-||incentiveswidget.appspot.com^
 ||inferno.bigpurposebigimpact.com^
 ||interesting-shaw.128-199-202-98.plesk.page^
 ||joke.webproduct.info^

src/blacklists/nomalware-lite.txt

@@ -1,7 +1,7 @@
 [Adblock Plus 2.0]
 ! Title: Crypto Firewall (Lite Version)
 ! Expires: 7 days (update frequency)
-! Last modified: 25 March 2024
+! Last modified: 30 March 2024
 ! Homepage: https://github.com/chartingshow/crypto-firewall/
 ! Contribute: https://github.com/chartingshow/crypto-firewall/issues
 ! License: GPL-3.0 license
@@ -76,11 +76,13 @@
 ||0280678.com^$third-party
 ||028tnt.com^$third-party
 ||02w65ijjohr1frm.com^$third-party
+||053105.com^$third-party
 ||07159889-coinbase.com^$third-party
 ||075a42f94213a494.live^$third-party
 ||07umut07basla.net^$third-party
 ||086df9b3b637e40d.info^$third-party
 ||08grab.com^$third-party
+||092877.com^$third-party
 ||0b125b25007220d9.xyz^$third-party
 ||0bamandos.ru^$third-party
 ||0cq.us^$third-party
@@ -371,6 +373,7 @@
 ||35.194.26.233^$third-party
 ||35.239.57.233^$third-party
 ||352134951-coinbase.com^$third-party
+||353934.com^$third-party
 ||35b98a2504c08951.live^$third-party
 ||35fbe7fc67cdc20d.top^$third-party
 ||3635optical.ga^$third-party
@@ -453,8 +456,12 @@
 ||548848.xyz^$third-party
 ||56toddhill.com^$third-party
 ||57197-coinbase.com^$third-party
+||581574.com^$third-party
 ||58176-coinbase.com^$third-party
+||582342.com^$third-party
+||582630.com^$third-party
 ||58297-coinbase.com^$third-party
+||593942.com^$third-party
 ||5a8777db35d45d0a.live^$third-party
 ||5cae.com^$third-party
 ||5cq.com^$third-party
@@ -497,6 +504,7 @@
 ||778899aabb.ml^$third-party
 ||77eb439d6788793e.com^$third-party
 ||77navi.com^$third-party
+||784503.com^$third-party
 ||7a4edf69ed3d21f9.live^$third-party
 ||7alangy.com^$third-party
 ||7c5xek1a1pe7nnn.top^$third-party
@@ -544,6 +552,7 @@
 ||896pc6x93.gq^$third-party
 ||8d7c621736f6cb25.xyz^$third-party
 ||8fx.us^$third-party
+||908713.com^$third-party
 ||909nu3dx3rgk13.com.de^$third-party
 ||91723-gemini.com^$third-party
 ||91752-coinbase.com^$third-party
@@ -557,9 +566,11 @@
 ||92758-coinbase.com^$third-party
 ||92cf772e294ea095.store^$third-party
 ||92l.info^$third-party
+||930204.com^$third-party
 ||948122061-coinbase.com^$third-party
 ||9501dh03.vip^$third-party
 ||95555cmbchina.com^$third-party
+||960232.com^$third-party
 ||96roafw91vs3hqv.top^$third-party
 ||97215618426.pw^$third-party
 ||978941-coinbase.com^$third-party
@@ -3441,6 +3452,7 @@
 ||cloudivox.info^$third-party
 ||cloudkknet.pro^$third-party
 ||cloudmetricsapp.com^$third-party
+||cloudmiracle.store^$third-party
 ||cloudns.nz^$third-party
 ||cloudns.ph^$third-party
 ||cloudoption.in^$third-party
@@ -12555,6 +12567,7 @@
 ||safelyredirecting.com^$third-party
 ||safelyredirecting.digital^$third-party
 ||safemotors.co.kr^$third-party
+||safetyfactor.online^$third-party
 ||safewayintltransfer.com^$third-party
 ||safewayinvestment.com^$third-party
 ||safewaylimited.net^$third-party
@@ -16582,7 +16595,6 @@
 ||iis.uj.ac.za^
 ||images.cjp.mx^
 ||imas.uk.com^
-||incentiveswidget.appspot.com^
 ||inferno.bigpurposebigimpact.com^
 ||interesting-shaw.128-199-202-98.plesk.page^
 ||joke.webproduct.info^