lunexmods.io: badware #31391
Description
Prerequisites
- This is NOT a YouTube, Facebook, Twitch or a shortener/hosting site report. These sites MUST be reported by clicking their respective links.
- I read and understand the policy about what is a valid filter issue.
- I verified that this issue is not a duplicate. (Use this button to find out.). Comment in the old issue threads even when they are closed or even if you have a different problem.
- I did not remove any of the default filter lists, or I have verified that the issue was not caused by removing any of the default lists.
- I did not enable additional or non-default filter lists, or I have identified which specific stock list is causing the issue.
- I do not have custom filters/rules, or I have verified that the issue still occurs without custom filters/rules.
- I have verified that the web browser's built-in content blocker/tracking protection, network wide/DNS blocking, or my VPN is not causing the issue.
- I have turned off all other extensions and the issue still persists. (exception "Firefox Multi-Account Containers").
- If this is about a breakage or detection, I have verified that it is caused by uBlock Origin and isn't a site or browser issue.
- I have verified that the browser I am using is up to date with no pending updates.
- I did not answer truthfully to ALL the above checkboxes.
URL address of the web page
https://lunexmods.io/
Category
badware
Description
This website is serving malicious downloads. It is a a "new" domain for the already blocked domain "lunexmods[.]cc"
To view the malicious content it is required to access the website from a residential or cellular connection as VPN's and hostings are shown a fake page to cover up the malicious activity.
Browser name and version
Firefox 146.0.1
Other extensions used
none
Country
No response
Screenshot(s)
https://github.com/user-attachments/assets/aee34e3a-f3b4-405f-b48d-0fbc70cd1d33
https://github.com/user-attachments/assets/71d6c19a-e021-4325-ad93-dffc0c55e045
Screenshot(s)
Configuration
Details
uBlock Origin: 1.68.0
Firefox: 146
filterset (summary):
network: 418129
cosmetic: 268721
scriptlet: 61203
html: 3095
listset (total-discarded, last-updated):
removed:
urlhaus-1: null
added:
https://filters.adtidy.org/extension/ublock/filters/3.txt: 80536-1088, now
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter.txt: 51617-0, 1h.36m
adguard-generic: 91587-531, now
adguard-mobile: 11956-71, now
adguard-spyware-url: 2393-136, now
block-lan: 89-0, now
curben-phishing: 131206-74, 1h.36m
adguard-cookies: 36516-93, now
ublock-cookies-adguard: 5265-75, now
fanboy-cookiemonster: 44988-3653, now
ublock-cookies-easylist: 5265-5265, now
adguard-social: 25507-48, now
[13 lists not shown]: [too many]
default:
user-filters: 11-0, never
ublock-filters: 43900-4990, 36m Δ
ublock-badware: 11024-167, 36m Δ
ublock-privacy: 3562-481, 36m Δ
ublock-unbreak: 2777-155, 36m Δ
ublock-quick-fixes: 459-59, 36m Δ
easylist: 84871-1259, 36m Δ
easyprivacy: 55114-21484, 36m Δ
plowe-0: 3495-1491, now
filterset (user): [array of 11 redacted]
trustedset:
added: [array of 92 redacted]
userSettings: [none]
hiddenSettings: [none]
supportStats:
allReadyAfter: 431 ms (selfie)
maxAssetCacheWait: 165 ms
cacheBackend: indexedDB
popupPanel:
blocked: 0