From 2128b60ee672de21dfbc95b9ee9e8fc0ec6e99e9 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Wed, 22 Sep 2021 09:45:53 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 60 ++++++++++++++++++- .../AntiMalwareAdGuard.txt | 34 ++++++++++- .../AntiMalwareAdGuardHome.txt | 34 ++++++++++- .../AntiMalwareDomains.txt | 29 ++++++++- .../AntiMalwareHosts.txt | 29 ++++++++- .../AntiMalwarePrivoxy.action | 29 ++++++++- .../AntiMalwareTPL.tpl | 34 ++++++++++- ...out's and other adblocker lists' IPs.ipset | 6 +- 8 files changed, 247 insertions(+), 8 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index a5eb71240..303a95999 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 18September2021v2-Beta +! Version: 20September2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1651,6 +1651,64 @@ zombooru.com##a[href="http://www.hard55.com"] ||varmisende.com^$popup ||103.169.90.205^ ||103.169.90.205^$popup +! https://github.com/DandelionSprout/adfilt/pull/281 +! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community +||125.44.43.45^ +||125.44.43.45^$popup +||182.121.8.240^ +||182.121.8.240^$popup +||42.235.183.74^ +||42.235.183.74^$popup +||78.36.32.242^ +||78.36.32.242^$popup +||115.50.2.119^ +||115.50.2.119^$popup +||115.50.110.163^ +||115.50.110.163^$popup +||119.179.84.145^ +||119.179.84.145^$popup +||188.120.50.98^ +||188.120.50.98^$popup +||190.238.183.5^ +||190.238.183.5^$popup +||27.220.253.78^ +||27.220.253.78^$popup +! ! https://www.virustotal.com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community +||esetnode32-antiviru.ydns.eu^ +||esetnode32-antiviru.ydns.eu^$popup +! https://www.joesandbox.com/analysis/486636/0/html#domains +||aieov.com^ +||aieov.com^$popup +! Relations to the original domain +||192.3.194.242^ +||192.3.194.242^$popup +||fakasafs23asd-adj.ydns.eu^ +||fakasafs23asd-adj.ydns.eu^$popup +||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^ +||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^$popup +||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^ +||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^$popup +||avira-antivirus.ydns.eu^ +||avira-antivirus.ydns.eu^$popup +||k2ygoods.ydns.eu^ +||k2ygoods.ydns.eu^$popup +||lefteriskkokkiskikinew.ydns.eu^ +||lefteriskkokkiskikinew.ydns.eu^$popup +||kelasdbadlkafg-uhuy28.ydns.eu^ +||kelasdbadlkafg-uhuy28.ydns.eu^$popup +||nan.ydns.eu^ +||nan.ydns.eu^$popup +||hurricane.ydns.eu^ +||hurricane.ydns.eu^$popup +||hjjhjkk.ydns.eu^ +||hjjhjkk.ydns.eu^$popup +! https://github.com/blocklistproject/Lists/issues/497 +||tweakbit.com^ +||tweakbit.com^$popup +||static.tweakbit.com^ +||static.tweakbit.com^$popup +||pcspeedup.en.softonic.com^ +||pcspeedup.en.softonic.com^$popup ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index cba8cf664..f3e55c9ea 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from β‰₯2019] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 18September2021v2-Beta +! Version: 20September2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1109,6 +1109,38 @@ zombooru.com##a[href="http://www.hard55.com"] ||fernandomayol.com^$empty,important ||varmisende.com^$empty,important 103.169.90.205$network +! https://github.com/DandelionSprout/adfilt/pull/281 +! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community +125.44.43.45$network +182.121.8.240$network +42.235.183.74$network +78.36.32.242$network +115.50.2.119$network +115.50.110.163$network +119.179.84.145$network +188.120.50.98$network +190.238.183.5$network +27.220.253.78$network +! ! https://www.virustotal.com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community +||esetnode32-antiviru.ydns.eu^$empty,important +! https://www.joesandbox.com/analysis/486636/0/html#domains +||aieov.com^$empty,important +! Relations to the original domain +192.3.194.242$network +||fakasafs23asd-adj.ydns.eu^$empty,important +||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^$empty,important +||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^$empty,important +||avira-antivirus.ydns.eu^$empty,important +||k2ygoods.ydns.eu^$empty,important +||lefteriskkokkiskikinew.ydns.eu^$empty,important +||kelasdbadlkafg-uhuy28.ydns.eu^$empty,important +||nan.ydns.eu^$empty,important +||hurricane.ydns.eu^$empty,important +||hjjhjkk.ydns.eu^$empty,important +! https://github.com/blocklistproject/Lists/issues/497 +||tweakbit.com^$empty,important +||static.tweakbit.com^$empty,important +||pcspeedup.en.softonic.com^$empty,important ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 494f6e5e1..69150d3a6 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 18September2021v2-Beta +! Version: 20September2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1023,6 +1023,38 @@ ||fernandomayol.com^ ||varmisende.com^ 103.169.90.205 +! https://github.com/DandelionSprout/adfilt/pull/281 +! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community +125.44.43.45 +182.121.8.240 +42.235.183.74 +78.36.32.242 +115.50.2.119 +115.50.110.163 +119.179.84.145 +188.120.50.98 +190.238.183.5 +27.220.253.78 +! ! https://www.virustotal.com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community +||esetnode32-antiviru.ydns.eu^ +! https://www.joesandbox.com/analysis/486636/0/html#domains +||aieov.com^ +! Relations to the original domain +192.3.194.242 +||fakasafs23asd-adj.ydns.eu^ +||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^ +||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^ +||avira-antivirus.ydns.eu^ +||k2ygoods.ydns.eu^ +||lefteriskkokkiskikinew.ydns.eu^ +||kelasdbadlkafg-uhuy28.ydns.eu^ +||nan.ydns.eu^ +||hurricane.ydns.eu^ +||hjjhjkk.ydns.eu^ +! https://github.com/blocklistproject/Lists/issues/497 +||tweakbit.com^ +||static.tweakbit.com^ +||pcspeedup.en.softonic.com^ ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 4b4d7045f..50bcf8e49 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 18September2021v2-Beta +# Version: 20September2021v1-Beta # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -848,6 +848,33 @@ godforgiveuss.live fernandomayol.com varmisende.com 103.169.90.205 +125.44.43.45 +182.121.8.240 +42.235.183.74 +78.36.32.242 +115.50.2.119 +115.50.110.163 +119.179.84.145 +188.120.50.98 +190.238.183.5 +27.220.253.78 +esetnode32-antiviru.ydns.eu +aieov.com +# Relations to the original domain +192.3.194.242 +fakasafs23asd-adj.ydns.eu +w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu +hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu +avira-antivirus.ydns.eu +k2ygoods.ydns.eu +lefteriskkokkiskikinew.ydns.eu +kelasdbadlkafg-uhuy28.ydns.eu +nan.ydns.eu +hurricane.ydns.eu +hjjhjkk.ydns.eu +tweakbit.com +static.tweakbit.com +pcspeedup.en.softonic.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index d6c8c9395..64922586c 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 18September2021v2-Alpha +# Version: 20September2021v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -848,6 +848,33 @@ 127.0.0.1 fernandomayol.com 127.0.0.1 varmisende.com 127.0.0.1 103.169.90.205 +127.0.0.1 125.44.43.45 +127.0.0.1 182.121.8.240 +127.0.0.1 42.235.183.74 +127.0.0.1 78.36.32.242 +127.0.0.1 115.50.2.119 +127.0.0.1 115.50.110.163 +127.0.0.1 119.179.84.145 +127.0.0.1 188.120.50.98 +127.0.0.1 190.238.183.5 +127.0.0.1 27.220.253.78 +127.0.0.1 esetnode32-antiviru.ydns.eu +127.0.0.1 aieov.com +# Relations to the original domain +127.0.0.1 192.3.194.242 +127.0.0.1 fakasafs23asd-adj.ydns.eu +127.0.0.1 w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu +127.0.0.1 hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu +127.0.0.1 avira-antivirus.ydns.eu +127.0.0.1 k2ygoods.ydns.eu +127.0.0.1 lefteriskkokkiskikinew.ydns.eu +127.0.0.1 kelasdbadlkafg-uhuy28.ydns.eu +127.0.0.1 nan.ydns.eu +127.0.0.1 hurricane.ydns.eu +127.0.0.1 hjjhjkk.ydns.eu +127.0.0.1 tweakbit.com +127.0.0.1 static.tweakbit.com +127.0.0.1 pcspeedup.en.softonic.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” 127.0.0.1 downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index fff337fe1..d51dd9656 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 18September2021v2-Alpha +# Version: 20September2021v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -865,6 +865,33 @@ + + + + + + + + + + + + + + + + + + + + + +# Relations to the original domain + + + + + diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index b40fef4a7..5ff90e902 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 18September2021v2-Beta +# Version: 20September2021v1-Beta : expires = 5 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1014,6 +1014,38 @@ msFilterList -d fernandomayol.com -d varmisende.com -d 103.169.90.205 +# https://github.com/DandelionSprout/adfilt/pull/281 +# https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community +-d 125.44.43.45 +-d 182.121.8.240 +-d 42.235.183.74 +-d 78.36.32.242 +-d 115.50.2.119 +-d 115.50.110.163 +-d 119.179.84.145 +-d 188.120.50.98 +-d 190.238.183.5 +-d 27.220.253.78 +# ! https://www.virustotal.com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community +-d esetnode32-antiviru.ydns.eu +# https://www.joesandbox.com/analysis/486636/0/html#domains +-d aieov.com +# Relations to the original domain +-d 192.3.194.242 +-d fakasafs23asd-adj.ydns.eu +-d w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu +-d hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu +-d avira-antivirus.ydns.eu +-d k2ygoods.ydns.eu +-d lefteriskkokkiskikinew.ydns.eu +-d kelasdbadlkafg-uhuy28.ydns.eu +-d nan.ydns.eu +-d hurricane.ydns.eu +-d hjjhjkk.ydns.eu +# https://github.com/blocklistproject/Lists/issues/497 +-d tweakbit.com +-d static.tweakbit.com +-d pcspeedup.en.softonic.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 9b13ce076..e6faf6ad7 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -1,5 +1,5 @@ # Title: Dandelion Sprout's and other adblocker lists' IPs -# Version: 06September2021v1-Beta +# Version: 18September2021v2-Beta # Expires: 5 days # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish. # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -70,6 +70,10 @@ 91.241.19.38 45.90.58.90 95.85.89.98 +139.28.37.49 +35.194.188.37 +91.243.121.19 +103.169.90.205 192.243.59.12 192.243.59.13 192.243.59.20