Malicious domains

[ExtRIELICi]

Prerequisites

• This is NOT a YouTube, Facebook, Twitch or a shortener/hosting site report. These sites MUST be reported by clicking their respective links.
• I read and understand the policy about what is a valid filter issue.
• I verified that this issue is not a duplicate. (Search here to find out.)
• I did not remove any of the default filter lists, or I have verified that the issue was not caused by removing any of the default lists.
• I did not enable additional filter lists, or I have verified that the issue still occurs without enabling additional filter lists.
• I do not have custom filters/rules, or I have verified that the issue still occurs without custom filters/rules.
• I am not using uBlock Origin along with other content blockers.
• I have verified that the web browser's built-in content blocker/tracking protection, network wide/DNS blocking, or my VPN is not causing the issue.
• I have verified that other extensions are not causing the issue.
• If this is about a breakage or detection, I have verified that it is caused by uBlock Origin and isn't a site issue.
• I did not answer truthfully to ALL the above checkboxes.

URL(s) where the issue occurs.

https://7ng6v3lu3c.execute-api.us-east-1.amazonaws.com
https://kra18.com/

Description

Malicious domains, part of a malicious Chrome extension. More info here and here.

Other extensions used

none

Screenshot(s)

Screenshot(s)

Configuration

Details

[Yuki2718]

I don't think uBO can block requests from other extensions, so blocking them would be pointless.

[ExtRIELICi]

kra18.com is commonly associated with affiliate fraud, at least from what I understand, so blocking it would be beneficial overall, as it is likely used in other malicious domains and scams as well.

[Yuki2718]

Also added 7ng6v3lu3c.execute-api.us-east-1.amazonaws.com as EL can be used in network-level.

[stephenhawk8054]

@Yuki2718 uBOL doesn't have strict-blocked unless specified with $all or $doc, so I think it's still better to address in our list with type too.

[Yuki2718]

uBOL doesn't have strict-blocked unless specified with $all or $doc, so I think it's still better to address in our list with type too.

Didn't know that, but I doubt this is intended behavior. Or is it?