From bc9362bb28cb2130e922d55acbb734c120d10d78 Mon Sep 17 00:00:00 2001
From: iam-py-test <84232764+iam-py-test@users.noreply.github.com>
Date: Tue, 26 Nov 2024 22:14:54 -0500
Subject: [PATCH] Fix https://github.com/mitchellkrogza/phishing/pull/516

---
 antimalware.txt | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/antimalware.txt b/antimalware.txt
index 4645aad8..712559d2 100644
--- a/antimalware.txt
+++ b/antimalware.txt
@@ -7125,6 +7125,22 @@ ostrowlubelski.pl##^responseheader(location)
 ||sale-friday.store^$all
 ||black-sales.cloud^$all
 
+! https://github.com/mitchellkrogza/phishing/pull/516
+||129.226.206.133^$document
+||129.226.206.133^$document
+/^https?:\/\/uspscom-fre[a-zA-Z0-9]*\.top\/track\/?$/$document,domain=top
+/^https?:\/\/uspscom-fre[a-zA-Z0-9]*\.cyou\/track\/?$/$document,domain=cyou
+/^https?:\/\/uspscom-fre[a-zA-Z0-9]*\.icu\/track\/?$/$document
+/^https?:\/\/uspscom-fre[a-zA-Z0-9]*\.cfd\/track\/?$/$document
+/^https?:\/\/uspscom-fre[a-zA-Z0-9]*\.xyz\/track\/?$/$document
+/^https?:\/\/usps\.com-info-add[a-zA-Z0-9]*\.cfd\/[a-zA-Z0-9]\/?$/$document
+/^https:\/\/usps.com-[a-zA-Z].win\//$document
+||examinecheck.com-street-$document
+||information.com-street-$document
+! https://www.virustotal.com/gui/ip-address/129.226.206.133/relations
+||uspscom-upusktum.$document
+||usps.com.*.cfd^$document,domain=cfd
+
 ! ---- Scams ----
 
 ! fails to disclose it's lack of connection to uBlock *Origin*