Manual Blacklist for malware

[JonathanLee]

I wanted to share this with the community. There have been some fake Windows support invasive actors calling around older individuals in our area and I hope this helps others stop the bad guys.

These domains host fake error pages designed to trick users into calling fraudulent support hotlines.
computer-help-desk.com, pc-error-fix.com, windows-support-center.com, apple-care-support.com
microsoft-technical-support.com, call-tech-support.com, pc-security-alert.com, error-windows-alert.com
virus-detected-warning.com, windows-error-support.com, system-virus-alert.com

Full list:

coinhive.com crypto-loot.com coin-hive.com cryptoloot.pro webminepool.com minero.cc jsecoin.com coinhave.com minexmr.com supportxmr.com moneroocean.stream hashvault.pro rig-ek.com magnitude-ek.net fallout-exploit.com neutrino-ek.com spelevo-ek.com purple-fox.net emotet-c2.net trickbot-network.com qakbot-servers.net mirai-botnet.org dridex-network.com bazarloader.net icedid-network.com redline-stealer.com raccoon-stealer.net formbook-c2.com popcash.net popads.net propellerads.com adcash.com clickadu.com hilltopads.com opencandy.com installcore.com amonetize.com softonic.com download.com soft32.com brothersoft.com freewarefiles.com search.conduit.com search.babylon.com delta-homes.com search.ask.com trovi.com mystart.com istartsurf.com safefinder.com searchbaron.com searchmine.net charmsearching.com weknow.ac hola.org unblocker.hola.org client.hola.org ext.hola.org hola.com luminati.io brightdata.com flexispy.com community.flexispy.com support.flexispy.com svlogin.asia thetruthspy.com umobix.com spyfer.info cocospy.com spyzie.com hoverwatch.com spyera.com xnspy.com spybubble.com android007.com spybunker.com malware-filter.gitlab.io urlhaus.abuse.ch phishing.army openphish.com phishtank.org cert-agid.gov.it teamviewer-network.com zepto-pay.com locky-decryptor.com cerber-decryptor.com wannacry-decryptor.com gandcrab-decrypt.com sodinokibi-help.com conti-news.com lockbit-blog.com lockbit3-blog.com blackmatter-decrypt.com revil-blog.com darkside-decrypt.com clop-decrypt.com akira-decryptor.com play-ransomware.com royalransomware.com medusa-blog.com computer-help-desk.com pc-error-fix.com windows-support-center.com apple-care-support.com microsoft-technical-support.com call-tech-support.com pc-security-alert.com error-windows-alert.com virus-detected-warning.com windows-error-support.com system-virus-alert.com nicehash.com pool.minergate.com xmrpool.eu nanopool.org f2pool.com antpool.com viaguard.io miningpoolhub.com cryptonote.universal-pool.com poolmining.org blackhole-ek.com angler-ek.net nuclear-ek.com terror-ek.com grandsoft-ek.com underminer-ek.net underminer-exploit.com kaixin-ek.com azorult-network.com vidar-stealer.net mars-stealer.com arkei-stealer.net predator-stealer.com lokibot-c2.com nanocore-rat.com asyncrat-c2.net remcos-c2.com njrat-network.com darkcomet-c2.net netwire-rat.com agent-tesla.net masslogger-c2.com hawkeye-logger.net alphv-blog.com blackcat-decryptor.com hive-leaks.com ragnarlocker-blog.com vice-society.com everest-ransomware.com avaddon-help.com babuk-locker.com darkradiation.com netwalker-blog.com pysa-blog.com grief-blog.com cuba-ransomware.com lorenz-leaks.com snatch-leaks.com cobalt-strike-c2.com metasploit-c2.net empire-c2.com havoc-c2.net sliver-c2.com brute-ratel.net poshc2-network.com covenant-c2.net mythic-c2.com nighthawk-c2.net gootloader-c2.com ursnif-network.com zloader-c2.com systembc-c2.com socks5systemz.com windows-defender-alert.com microsoft-alert-center.com security-alert-windows.com firewall-error-detected.com trojan-detected-alert.com google-security-warning.com apple-security-alert.com icloud-security-warning.com critical-virus-alert.com browser-security-warning.com mspy.com eyezy.com iKeyMonitor.com clevguard.com pcTattletale.com highstermobile.com spyic.com minspy.com spyine.com neatspy.com safespy.com famisafe.com kidguard.com moniterro.com

if you block DoH:

dns.nextdns.io captnemo.in example.doh.blockerdns.com doh.securedns.eu dns.dns-over-https.com firefox.dns.nextdns.io mozilla.cloudflare-dns.com doh.dns.apple.com i.233py.com opencdn.jomodns.com dns.233py.com edns.233py.com ndns.233py.com sdns.233py.com wdns.233py.com dns-gcp.aaflalo.me dns-nyc.aaflalo.me dns.aaflalo.me doh.abmb.win dns.adguard.com dns-family.adguard.com dns-unfiltered.adguard.com dns.adguard-dns.com family.adguard-dns.com unfiltered.adguard-dns.com doh.nl.ahadns.net doh.in.ahadns.net doh.la.ahadns.net doh.ny.ahadns.net doh.pl.ahadns.net doh.it.ahadns.net doh.es.ahadns.net doh.no.ahadns.net doh.chi.ahadns.net dot.nl.ahadns.net dot.in.ahadns.net dot.la.ahadns.net dot.ny.ahadns.net dot.pl.ahadns.net dot.it.ahadns.net dot.es.ahadns.net dot.no.ahadns.net dot.chi.ahadns.net dnsnl.alekberg.net dnsse.alekberg.net dns.alidns.com doh.appliedprivacy.net doh.applied-privacy.net dot1.applied-privacy.net doh.armadillodns.net dohtrial.att.net doh1.blahdns.com doh2.blahdns.com doh.bortzmeyer.fr dns.brahma.world free.bravedns.com bravedns.com doh.captnemo.in canadianshield.cira.ca family.canadianshield.cira.ca private.canadianshield.cira.ca protected.canadianshield.cira.ca dns.cloudflare.com cloudflare-dns.com 1dot1dot1dot1.cloudflare-dns.com family.cloudflare-dns.com security.cloudflare-dns.com cloudflare-gateway.com doh.cleanbrowsing.org security-filter-dns.cleanbrowsing.org adult-filter-dns.cleanbrowsing.org family-filter-dns.cleanbrowsing.org dns.cmrg.net commons.host dns.containerpi.com doh.crypto.sx jit.ddns.net dns.decloudus.com doh.defaultroutes.de dns.developer.li dns2.developer.li dns.digitale-gesellschaft.ch dns1.digitale-gesellschaft.ch dns2.digitale-gesellschaft.ch doh.disconnect.app ns1.recursive.dnsbycomodo.com ns2.recursive.dnsbycomodo.com dnsforge.de dns.google dns64.dns.google dns.dnshome.de dns1.dnscrypt.ca dns2.dnscrypt.ca doh.dns.sb public-dns-a.dns.sb public-dns-b.dns.sb doh.dnslify.com a.ns.dnslify.com b.ns.dnslify.com a.safe.ns.dnslify.com b.safe.ns.dnslify.com a.family.ns.dnslify.com b.family.ns.dnslify.com dns.dnsoverhttps.net doh.dnswarden.com doh.li doh.ffmuc.net dot.ffmuc.net rdns.faelix.net pdns.faelix.net dns.flatuslifir.is dns.google.com google-public-dns-a.google.com google-public-dns-b.google.com query.hdns.io ordns.he.net dns.hostux.net opennic.i2pd.xyz public.dns.iij.jp jcdns.fun us1.dns.lavate.ch eu1.dns.lavate.ch resolver-eu.lelux.fi doh.libredns.org dot.libredns.gr.com dot.libredns.gr doh.libredns.gr adblock.mydns.network dns.neutopia.org dns.aa.net.uk dns1.nextdns.io dns2.nextdns.io odvr.nic.cz lv1.nixnet.xyz ny1.nixnet.xyz lux1.nixnet.xyz dns.njal.la doh.opendns.com doh.familyshield.opendns.com doh.sandbox.opendns.com resolver1.opendns.com resolver2.opendns.com resolver1-fs.opendns.com resolver2-fs.opendns.com dns.oszx.co a.passcloud.xyz i.passcloud.xyz doh.post-factum.tk doh.powerdns.org rpz-public-resolver1.rrdns.pch.net dns.pumplex.com dns.quad9.net dns9.quad9.net dns10.quad9.net dns11.quad9.net dns12.quad9.net dns13.quad9.net dns-nosec.quad9.net dns.rubyfish.cn ea-dns.rubyfish.cn uw-dns.rubyfish.cn rumpelsepp.org dns1.ryan-palmer.com doh.seby.io doh-2.seby.io dot.seby.io dnsovertls.sinodun.com dnsovertls1.sinodun.com dnsovertls2.sinodun.com dnsovertls3.sinodun.com fi.doh.dns.snopyta.org fi.dot.dns.snopyta.org dns.switch.ch ibksturm.synology.me dns.t53.de dns.therifleman.name doh.tiar.app dot.tiar.app doh.tiarap.org jp.tiar.app jp.tiarap.org dns.twnic.tw dns.wugui.zone dns-asia.wugui.zone adfree.usableprivacy.net doh.xfinity.com dns.sb 8888.google chromium.dns.nextdns.io doh.quickline.ch doh-02.spectrum.com doh-01.spectrum.com dandelionsprout.asuscomm.com basic.rethinkdns.com max.rethinkdns.com anycast.dns.nextdns.io dns.mullvad.net adblock.dns.mullvad.net base.dns.mullvad.net extended.dns.mullvad.net family.dns.mullvad.net all.dns.mullvad.net dns.controld.com freedns.controld.com p0.freedns.controld.com p1.freedns.controld.com p2.freedns.controld.com p3.freedns.controld.com doh.wikimedia.org wikimedia-dns.org doh.pub dns.pub sm2.doh.pub doh.360.cn dns.360.cn doh.dnsfilter.com doh.safedns.com resolver.helvetia.doh.applied-privacy.net doh.norton.com dns.comodo.com resolver1.dns.watch resolver2.dns.watch doh.dns.watch doh.restena.lu dot.restena.lu dns.restena.lu doh.42l.fr doh.sunet.se doh.kraken.systems doh.scheitelpunkt.com doh.nic.fr dns.nic.fr doh.eastas.de dns.eastas.de doh.dns4all.eu dns4all.eu resolver.krojam.com doh.krojam.com doh.cymrucert.net dot.xfinity.com doh.isp.comcast.net dot.isp.comcast.net dns.isp.comcast.net doh.comcast.net doh.centurylink.net doh.cox.net doh.spectrum.net doh.verizon.net dns.verizon.net doh.att.net doh.t-mobile.com dns.t-mobile.com

[planedrop]

This is great, thank you for sharing.

[rawsmr]

@JonathanLee Thanks a lot!