I wonder if there is a way to host known (ideally known-but-disabled) malware, and get the parent frame site on browser blocklists, without getting the sqword d

I wonder if there is a way to host known (ideally known-but-disabled) malware, and get the parent frame site on browser blocklists, without getting the sqword domain blocked? Probably not, but that would be even better than a goatse troll.. actually hit them where it hurts; their ad revenue.