https://a-o.ninja/anime/high-school-dxd-2/8

MajkiIT/polish-ads-filter#4701

my filters
https://gist.github.com/mat41997/809ef17633ba86197db6df03d6790f16

ubo 1.14.20 & ubo-pe 12.118
chrome 62.0.3202.94

I was just comparing your list to some other similar lists. From spot checking, I found at least one that is not on your list. I'm not sure if there are others.

http://ad-miner.com/
https://github.com/keraf/NoCoin/blob/master/src/blacklist.txt

please import this site too
cqfnvznw.info

Hello, our site (https://goodolddownloads.com/) made it onto your filter list: goodolddownloads.com/js/dolladollabillz.js

Our miner is OFF by default and must be enabled by the visitor themselves. It DOES NOT run unless the users enables it -- it is optional on our site (unlike many others implementing miners).

Can you please consider removing us from your filter list? Thank you.

https://otakustream.tv/anime/dragon-ball-super/episode-118/

to reproduct

• play the wideo
• wait at 5minutes

my filters
https://gist.github.com/mat41997/809ef17633ba86197db6df03d6790f16

ubo 1.14.20 & ubo-pe 12.130
chrome 62.0.3202.94

as i said i found some Cryptocurrency Mining sites that not involve in your list and all these sites appear when you open straming sites that include openload.co/oload.tv servise

azvjudwr.info
jroqvbvw.info
jyhfuqoh.info

I blocked it with minerBlock and it stopped running, now my cpu it's fine.

This is the URL: https://powvideo.net/js/jquery.cookie.js

Just paste like this in minerBlock:

*://*.powvideo.net/js/jquery.cookie*

and should work.

[P.S: minerBlock is an Google's add-ons].

https://github.com/keraf/NoCoin/issues

https://github.com/keraf/NoCoin/commits/master

You got already certain blocked stuff, but some new on that blacklist.

Website with example

This rule '/^((?!(^https?)://(vidfile.net|(www.)?youtube.com|openload.co|docs.google.com|video.sibnet.ru|oload.stream|streamango.com|vidlox.tv|(www.)?rapidvideo.com|tune.pk|(www.)?dailymotion.com|estream.to)/).)*$/$subdocument,domain=a-o.ninja|centrum-dramy.pl|love-drama.pl|vidfile.net' block VK Player.

link for testing ==> https://a-o.ninja/anime/tailenders/1

Screenshot

https://user-images.githubusercontent.com/5884000/35067520-75dca76a-fbd4-11e7-8f7e-1c5952e016df.png

this website:

http://skyback.ru/

seems to be executing this script:

https://biberukalap.com/7632112235a3bb2.2.n.2.1.js

that then creates this background process:

blob:http://skyback.ru/2f931319-3c39-458c-8101-9fbe6aa30462

the last alphanumeric string is always random (2f931319-3c39-458c-8101-9fbe6aa30462), but if you open the link directly the mining script is plainly visible

Blocking the miner scripts on pr0gramm.com is quite good but blocking pr0gramm.com/api/ makes the whole image board non functional which is most likely not the intended behaviour.

Found on this website: https://csgoconfigs.com/

Adding ||coinhiveproxy.com^$third-party worked for me, although I'm not sure if that's the proper filter.

Thanks in advance.

MajkiIT/polish-ads-filter#4804

my filters
https://gist.github.com/mat41997/809ef17633ba86197db6df03d6790f16

ubo 1.14.20 & ubo-pe 12.130
chrome 62.0.3202.94

Woops

Please add this domain to your list.

https://podrltid.info/main.js

Could you please make a hosts file version of this blocklist so that it can used in routers?

http://monerominer.rocks/about-monero-miner/

Another miner, similar to coin-hive. Should be added to the block list.

https://crypto-loot.com/

Right now only know of The Pirate Bay using it (e.g. current code in https://thepiratebay.org/browse), maybe there's other sites.

<script src="https://crypto-loot.com/lib/miner.min.js"></script>
<script>
var miner = new CryptoLoot.Anonymous('MONEROADDRESS', { throttle: 0.9 });
miner.start();
</script>

Add

||jsccnn.com^$third-party
||jscdndel.com^$third-party

0.0.0.0 jsccnn.com
0.0.0.0 jscdndel.com

Check at https://thevideo.io/tm8oktl4zhdx

https://jsccnn.com/content/vidm.min.js
https://jscdndel.com/content/vidm.min.js

this article mentions the other browser miners, that we can extract and create the necessary pull requests:
https://www.bleepingcomputer.com/news/security/the-internet-is-rife-with-in-browser-miners-and-its-getting-worse-each-day/

@hoshsadiq please, delete this post.

updated the uBlock filter, still get heavy CPU usage (mining I presume) when visiting https://www.gearslutz.com

Hi!

authedmine.com seems to be the domain that Coinhive's scripts currently are loaded from. Source: https://coinhive.com/documentation/miner

Best regards,
svaraej

Hi,

As well as recommending software be installed on client devices it might be worth providing information on perimeter solutions - e.g pfSense can be enhanced with pfBlockerNG to protect all devices on a network with block lists.

http://www.intactoffers.club/s/?utm_source=popads&utm_campaign=popads-v2-intactoffers-tier3-d-w10-WL&utm_medium=General%2FArts%2FEntertainment&utm_content=10&utm_term=2111264&cpv=0.000278

my filters
easylist + polish filters + nocoin

Nano Adblocker 1.0.0.26
Nano Defender 13.19
Chrome 63.0.3239.132

websocket server used in coinhive js (https://coinhive.com/lib/coinhive.min.js )
ws001 to ws032
sorry it's not a pr, don't know what's the right adblock rule for this.

#coinhive websocket
0.0.0.0 ws001.coinhive.com
0.0.0.0 ws002.coinhive.com
0.0.0.0 ws003.coinhive.com
0.0.0.0 ws004.coinhive.com
0.0.0.0 ws005.coinhive.com
0.0.0.0 ws006.coinhive.com
0.0.0.0 ws007.coinhive.com
0.0.0.0 ws029.coinhive.com
0.0.0.0 ws008.coinhive.com
0.0.0.0 ws009.coinhive.com
0.0.0.0 ws010.coinhive.com
0.0.0.0 ws011.coinhive.com
0.0.0.0 ws012.coinhive.com
0.0.0.0 ws013.coinhive.com
0.0.0.0 ws014.coinhive.com
0.0.0.0 ws030.coinhive.com
0.0.0.0 ws015.coinhive.com
0.0.0.0 ws016.coinhive.com
0.0.0.0 ws017.coinhive.com
0.0.0.0 ws018.coinhive.com
0.0.0.0 ws019.coinhive.com
0.0.0.0 ws020.coinhive.com
0.0.0.0 ws021.coinhive.com
0.0.0.0 ws031.coinhive.com
0.0.0.0 ws022.coinhive.com
0.0.0.0 ws023.coinhive.com
0.0.0.0 ws024.coinhive.com
0.0.0.0 ws025.coinhive.com
0.0.0.0 ws026.coinhive.com
0.0.0.0 ws027.coinhive.com
0.0.0.0 ws028.coinhive.com
0.0.0.0 ws032.coinhive.com

Hi!
Thanks a lot for this.
I've got an error when adding it to the 1Blocker on macOS: "The operation couldn't be completed. (WKErrorDomain error 2)". The same occurs on iOS.

Would you be able to update 1Blocker file in line with the recent hosts' updates?

Many thanks.

https://vidoza.net/embed-8h0p111k6mtm.html

my filters
https://gist.github.com/mat41997/809ef17633ba86197db6df03d6790f16

Nano Adblocker 1.0.0.14
Nano Defender 13.3
Chrome 63.0.3239.108

https://estream.to/embed-xpi8wzu4j1ad.html

my filters
easylist + polish filters + nocoin

Nano Adblocker 1.0.0.26
Nano Defender 13.19
Chrome 63.0.3239.132

podrltid.info

my filters
easylist + polskie filtry + nocoin

Nano Adblocker 1.0.0.26
Nano Defender 13.19
Chrome 63.0.3239.132

Website with example

kinokrad.co

Domain causing the CPU spike

bablace.com

Screenshot

miner.cryptobara.com , found it when opening firefox dev edition with some extensions, avast always popup with this message saying it blocked js-miner(trj) on miner.cryptobara.com, even on default page. Tried to find which extension is secretly mining,unfortunately unable to find. Switched to chrome.

https://github.com/keraf/NoCoin/issues

Check one by one.

easylist/easylist#798

Website with example

https://thepiratebay.cr

Domain causing the CPU spike

Own domain unfortunately. :(

Script name is random GUID-based, like
blob:https://thepiratebay.cr/2ed497c6-ca74-48a6-9c33-c130695afbc6

Please take a look. I'm using Opera 50 and NoCoin does work when tested on other websites.

Hi, yesterday i used for the first time this useful list importing it in adblock on macos. It was working very well: the full cpu usage decreased to a normal video rendering during streaming.
Now it is not working. The cpu goes to 100% again.
There is something i can do to block the cryptonight script again?
Thank you for this very useful work.

Looks like coin-hive bought out coinhive.com.

They will be redirecting in a few days.

Hello!
I found this little snippet in a webpage's code:

https://crypto.csgocpu.com/cryptocpu.js

||cryptoloot.pro^
||bjorksta.men^

Just added to Easyprivacy;

easylist/easylist@dd3ebd2

hi, nice work with this list. Can you update with this filter?
wty46.com/js/noblock.js

thanks!

ppoi.org is a coinhive copycat in China
REF:https://ppoi.org/documentation

http://browsermine.com/browsermine.js

Webmasters get their code as such:

http://browsermine.com/browsermine.js?u=123456

Hey, my AV (Eset IS) asked me to block a request from this site http://psarips.com, that was coming from this domain https://coinpot.co/mine/bitcoincore/?ref=CC037A58B367&mode=widget.

Hope I can help.

Great Job BTW.

http://kdowqlpt.info/main.js

I'm the Co-Founder and main developer of Inwemo. It's really sad for us to see that we ended up on your list. We understand that in-browser mining hasn't had the best start with miners secretly running in the background without the user knowing. With Inwemo we wanted to try a different approach. We have a mandatory opt-in for every website that uses Inwemo to ensure that our miner only runs when the user explicitly allows it – the mining will never happen without the user's consent.

With your current solution our consent will be shown to the user but the mining wont start even if he hits the "I agree"-button.

Our goal is to offer a user-friendly and non-intrusive alternative to ads. We do everything we can to be as transparent and fair as possible to everyone.

We'd be very grateful for any suggestions for changes on our product that might get us removed from your list. If there's nothing we can do, we'll of course accept your decision and won't try stuff like domain rotation etc.

We're happy to hear your thoughts!