Phishing domains

[ExtRIELICi]

Prerequisites

• This is NOT a YouTube, Facebook, Twitch or a shortener/hosting site report. These sites MUST be reported by clicking their respective links.
• I read and understand the policy about what is a valid filter issue.
• I verified that this issue is not a duplicate. (Use this button to find out.). Comment in the old issue threads even when they are closed or even if you have a different problem.
• I did not remove any of the default filter lists, or I have verified that the issue was not caused by removing any of the default lists.
• I did not enable additional filter lists, or I have verified that the issue still occurs without enabling additional filter lists.
• I do not have custom filters/rules, or I have verified that the issue still occurs without custom filters/rules.
• I have verified that the web browser's built-in content blocker/tracking protection, network wide/DNS blocking, or my VPN is not causing the issue.
• I have turned off all other extensions and the issue still persists. (exception "Firefox Multi-Account Containers").
• If this is about a breakage or detection, I have verified that it is caused by uBlock Origin and isn't a site or browser issue.
• I did not answer truthfully to ALL the above checkboxes.

URL(s) where the issue occurs.

big-sale-warehouse.com
ebarrels4.store
rozomii.info
lds.xyz
promotion40-form.com
greatoffersnow.com/kotsovolos.gr
bestpriceonline.store

Description

These domains are promoted by bots and hacked accounts on Facebook for supposedly giving away laptops, food and other items. Some of them are advertised.

Browser name

All

Other extensions used

none

Country

Greece

Screenshot(s)

Screenshot(s)

Configuration

Details

[mapx-]

As usual, to classify a page as badware we need concrete evidence, otherwise it's just a waste of time.

[ExtRIELICi]

Here you can find multiple screenshots of these posts and if you can want you can translate them to English. Even their names aren't properly written. @mapx-

https://www.reddit.com/r/greece/comments/1jd8un0/

Even the receipt they use in the images are photoshopped:

[mapx-]

converted in discussion where you can provide solide evidence for every domain / page and why is a badware one

[ExtRIELICi]

Here is a screenshot of a post with:

rozomii.info domain:

ebarrels4.store:

big-sale-warehouse.com, AI generated images from fake profiles:

lds.xyz and promotion40-form.com:

Upon visiting you get this obvious scammy campaign where it makes you put your personal information:

Upon completing it will prompt you to share the following text:

"I just signed up for this... It's amazing that this audiologist is letting you try the device for free! And if you use my recommendation, you'll automatically secure 1 of 500 free trial spots based on pre-selection. If you know someone with hearing loss, they'll be interested. Take a look → https://bit.ly/4dSc2G0"

[stephenhawk8054]

We don't address scam issues. Please just report phishing issues (faking other official entities).

[ExtRIELICi]

No worries at all, thanks for letting me know!

[MasterKia]

@ExtRIELICi Maybe the Greek filterlist will address them?
https://github.com/kargig/greek-adblockplus-filter