From 2b11c25347ec681c8af71c12a5e48926079903d3 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Sat, 5 Oct 2024 01:36:43 +0200 Subject: [PATCH] Extremely critical fix for #1062 and #1063 --- .../AntiMalwareHosts.txt | 4 +- ...out's and other adblocker lists' IPs.ipset | 331 ++++++++++++++++++ 2 files changed, 333 insertions(+), 2 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 1c4e77338..58e3489ec 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,8 +1,8 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 05October2024v1 +# Version: 30September2024v2 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. -# Users of Pi-Hole FTL 5.22 and later are STRONGLY RECOMMENDED to switch to the version at https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, unless otherwise proven. +# Users of Pi-Hole FTL 5.22 and later are STRONGLY RECOMMENDED to switch to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, unless otherwise proven. !#if !env_mv3 # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists # Homepage: https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#-english diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index a42adb006..9aa9037e4 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -2,9 +2,42 @@ # Expires: 2 days # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish. # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english +# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists +# Homepage: https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#-english # When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. +# (https://github.com/DandelionSprout/adfilt/issues/999) +# https://bgp.he•net/AS202492#_prefixes (17/07/2022) +# https://github.com/AdguardTeam/AdguardFilters/issues/131156 +# https://github.com/DandelionSprout/adfilt/issues/659 +# https://github.com/AdguardTeam/AdguardFilters/issues/137635 +# https://github.com/AdguardTeam/AdguardFilters/issues/139667 109.201.135.46 138.68.252.54 +# https://windowsreport•com/extend-windows-laptop-battery-life/ +# https://appuals•com/fix-error-0x800701e3-on-windows-7-8-1-10/ +# https://ugetfix•com/ask/how-to-fix-windows-store-error-0x8000ffff/ +# https://www•thewindowsclub•com/fix-windows-update-error-0xc1900130-on-windows-10 +# https://www•majorgeeks•com/files/details/patch_my_pc•html +# https://www•2-spyware•com/remove-redirector-gvt1-com•html +# https://www•bynarycodes•com/fix-windows-10-update-error-0x80070006/ +# https://www•drivereasy•com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/ +# https://www•drivereasy•com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/ +# https://www•drivereasy•com/knowledge/download-gigabyte-audio-driver/ +# https://www•drivereasy•com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/ +# https://www•drivereasy•com/knowledge/solved-this-display-does-not-support-hdcp/ +# https://forums•windowscentral•com/ +# https://howtoremove•guide/redirector-gvt1-com-virus-malware-chrome-removal/ +# https://www•2-spyware•com/remove-redirector-gvt1-com•html +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-968070041 +# https://www•cyclonis•com/how-to-create-gmail-account-without-phone-number/ +# https://www•2-viruses•com/remove-ad-spam-press-allow-to-continue +# https://github.com/iam-py-test/my_filters_001/issues/119 +# https://www•windowsdispatch•com/fix-system-restore-0x81000203-error-code/ +# https://dlldownloads•com/xlive-dll/ +# https://windowsreport•com/find-remove-duplicate-files-windows-10/ +# https://windowsreport•com/how-to-update-roblox/ (08/12/2022) +# https://appuals•com/pr-connect-reset-error/ +# https://github•com/AdguardTeam/AdguardFilters/issues/58737 103.224.212.249 199.59.243.222 173.208.96.42 @@ -14,6 +47,8 @@ 173.208.96.46 213.227.149.208 213.227.149.211 +# https://github.com/DevSpen/links/blob/master/src/links.txt +# https://scammer•info/t/discord-nitro-scam-25/87887 54.174.156.141 54.209.22.226 54.91.125.197 @@ -32,6 +67,9 @@ 144.76.0.242 144.76.1.130 195.201.92.254 +# https://github.com/DandelionSprout/adfilt/pull/167 +# https://github.com/AdguardTeam/AdguardFilters/issues/124611 +# (https://github.com/DandelionSprout/adfilt/issues/632) 34.204.214.165 54.85.113.62 54.205.83.61 @@ -55,16 +93,36 @@ 23.109.87.208 216.21.13.14 216.21.13.15 +# https://github.com/DandelionSprout/adfilt/issues/942 +# https://twitter•com/SUNgoddessOKAMI/status/1221295265195405315 +# https://github.com/AdguardTeam/AdguardFilters/issues/61838 +# https://github.com/AdguardTeam/AdguardFilters/issues/61755 +# https://github.com/AdguardTeam/AdguardFilters/issues/61743 +# https://github.com/easylist/easylist/issues/6111 178.128.142.109 134.209.136.174 62.210.6.153 62.210.7.209 62.210.9.92 62.210.11.203 +# https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/ 167.99.249.47 +# https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/ +# https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/ +# https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/ +# https://maldita•es/malditobulo/2020/11/18/no-no-es-cierto-que-amancio-ortega-haya-invertido-100-millones-en-bitcoin-revolution-es-una-web-falsa/ +# https://github.com/AdguardTeam/AdguardFilters/issues/69611 +# https://github.com/AdguardTeam/AdguardFilters/issues/71721 +# https://github.com/AdguardTeam/AdguardFilters/issues/71369 +# https://github.com/AdguardTeam/AdguardFilters/issues/73623 +# https://github.com/AdguardTeam/AdguardFilters/issues/73627 +# https://github.com/AdguardTeam/AdguardFilters/issues/73133 +# https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-428333 +# https://github.com/DandelionSprout/adfilt/issues/188 5.8.34.26 5.8.47.3 103.224.182.251 +# https://github.com/DandelionSprout/adfilt/issues/193 5.79.71.205 5.79.71.225 85.17.31.82 @@ -74,30 +132,81 @@ 178.162.203.226 178.162.217.107 [2a02:1668:1034::2] +# https://github.com/DandelionSprout/adfilt/issues/195 +# https://github.com/DandelionSprout/adfilt/issues/196 66.85.156.85 66.85.156.86 108.170.31.123 108.170.52.156 +# https://github.com/DandelionSprout/adfilt/issues/198 +# https://www•bleepingcomputer•com/virus-removal/ (18/06/2021) +# https://www•bleepingcomputer•com/virus-removal/remove-please-allow-to-watch-the-video 95.168.170.165 213.227.145.147 213.227.149.216 +# https://twitter•com/adamziaja/status/1252234957679808513 +# https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html 5.188.62.36 +# https://github.com/DandelionSprout/adfilt/issues/223 +# https://github.com/DandelionSprout/adfilt/issues/224 69.49.231.244 +# https://movsb•0x0•st/users/mia +# https://github.com/DandelionSprout/adfilt/issues/228 +# https://github.com/DandelionSprout/adfilt/issues/241 +# https://github.com/DandelionSprout/adfilt/issues/244 +://linkvertise.com/23001/OxygenU +# https://github.com/DandelionSprout/adfilt/issues/251#issue-974102211 37.34.176.37 +# https://github.com/DandelionSprout/adfilt/issues/253 23.111.31.137 23.111.88.207 +# https://github.com/DandelionSprout/adfilt/issues/254 +# https://github.com/DandelionSprout/adfilt/issues/257 185.158.250.239 192.169.69.25 212.192.241.72 37.0.10.83 +# https://github.com/DandelionSprout/adfilt/pull/266 +# https://www•virustotal•com/gui/domain/kirstialechulbard•space/relations +# https://www•virustotal•com/gui/ip-address/198•54•117•244/relations +# http://vxvault•net/ViriFiche•php?ID=44013 +# https://www•virustotal•com/gui/url/8066b87ad10ddb5466bc307bb48454139572f6c8c8f80a9734275ac89cf966af/detection +# https://www•virustotal•com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection +# https://safeweb•norton•com/report/show?url=192•3•110•170 192.3.110.170 +# https://forums•malwarebytes•com/topic/278209-removal-instructions-for-socialsearchconverter/ +# https://securelist•com/apkpure-android-app-store-infected/101845/ +# https://www•virustotal•com/gui/url/866a25343864f03dc5a10105fda523bfbb6ed09c486d07fd31ca2b5306440089/detection +# https://www•virustotal•com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection +# https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 +# https://www•virustotal•com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community +# https://www•virustotal•com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection +# https://www•virustotal•com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection 91.241.19.38 +# https://www•virustotal•com/gui/url/46e095c35d83e2dd0b98df4b5844d3d87948de0c930a618600121020a514c801/detection +# https://safeweb•norton•com/report/show?url=telete•in +# https://www•siteadvisor•com/sitereport•html?url=telete•in +# https://www•virustotal•com/gui/file/e63b2d03e3fee2d538f8bd721b61dd3641284fa941087d846dea6f15cab40308/community +# https://www•virustotal•com/gui/url/fbbc8a671bff32539bd829a76f6df9f364a21ac2279922e64e3ec494a1669dd3/detection +# https://www•virustotal•com/gui/domain/kiff•tech/relations +# https://www•virustotal•com/gui/url/dc038496b1b5358b97f89440135ec91258b406c40859a2cd95983dc7a81e0cfa/detection 45.90.58.90 +# https://www•virustotal•com/gui/file/e565ba89d034418fd26a5f642f6eeee4d72ee3b8dc69523419b7ca8dfd452730/community +# https://www•virustotal•com/gui/url/e3a9189a1e1256beba8e0fc3abfeab6acb09f7f8cabfd973e22be9f77bb6886f/detection 95.85.89.98 +# https://github.com/DandelionSprout/adfilt/issues/267 +# https://github.com/DandelionSprout/adfilt/pull/278 +# https://www.virustotal.com/gui/file/da75c85fe037f9ff9ebbbd0b37dd2ff154f5e70a0dc6870286e0d3df6b8f246f/community 139.28.37.49 +# https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community 35.194.188.37 +# https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community +# https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community 91.243.121.19 +# https://www.virustotal.com/gui/file/9f154115fa8045aa05f15f7cd1de9623ebe32e8ea400279ecb5dfa3596952e3b/community 103.169.90.205 +# https://github.com/DandelionSprout/adfilt/pull/281 +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 125.44.43.45 182.121.8.240 42.235.183.74 @@ -108,10 +217,27 @@ 188.120.50.98 190.238.183.5 27.220.253.78 +# https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community +# https://www•joesandbox•com/analysis/486636/0/html#domains 192.3.194.242 +# https://github.com/blocklistproject/Lists/issues/497 +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931700117 +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931742337 (Initial batch) +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931753495 +# https://github.com/DandelionSprout/adfilt/issues/287 +# (https://github.com/DandelionSprout/adfilt/issues/904) +# https://github.com/DandelionSprout/adfilt/issues/288 +# https://github.com/DandelionSprout/adfilt/pull/289 +# https://www•virustotal•com/gui/ip-address/70•32•1•32/relations +# https://www•virustotal•com/gui/file/78f490e503c86eaaff5760197b9ff5308ed6e03161af13194a6c1e0cd95422de/community +# https://github.com/DandelionSprout/adfilt/commit/f7f114945c83b339be5cdd848e229680d9918abb#commitcomment-57642875 23.94.26.138 +# https://github.com/DandelionSprout/adfilt/pull/298 +# https://www•virustotal•com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community 205.185.126.200 +# https://www•virustotal•com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community 185.243.56.167 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 123.10.224.135 59.47.187.147 39.68.172.210 @@ -159,17 +285,45 @@ 111.224.199.91 119.250.236.122 112.30.110.58 +# https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 117.196.49.21 115.55.54.234 115.52.17.123 182.59.69.21 +# https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community +# https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb +# https://www•virustotal•com/gui/url/b2936e74f35940d2f09cabf4e089a0d655e62a5fc08ad32e1fae79a62683683f?nocache=1 +# https://www•virustotal•com/gui/url/4c2c3cf2e4f5b9ac9765eb9c58f2756d8f0f4632ec707107afe3c111f4749025?nocache=1 +# https://www•virustotal•com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations +# https://www•virustotal•com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations 160.202.163.100 +# https://www•virustotal•com/gui/ip-address/160•202•163•100/relations +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-938167311 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-940500664 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-944612753 +# https://github.com/DandelionSprout/adfilt/pull/303 +# https://www•virustotal•com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community 45.95.169.115 +# https://www•virustotal•com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community 45.148.120.80 +# https://www•virustotal•com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community 85.239.33.9 +# https://www•virustotal•com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community 107.173.176.183 +# https://www•virustotal•com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community 45.148.120.171 +# https://twitter•com/soranker0/status/1449491402409185283 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 +# https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-951321929 159.148.186.228 +# https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains +# https://github.com/iam-py-test/investigations/blob/main/2021/11/1/1.md +# https://www•upwork•com/freelance-jobs/apply/Integarte-push-notification-for-chrome_~013c73ed9282225184/ +# https://github.com/iam-py-test/investigations/blob/main/2021/11/3/1.md +# https://github.com/DandelionSprout/adfilt/pull/348 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 39.83.80.247 68.197.33.124 219.157.21.37 @@ -201,15 +355,38 @@ 106.86.172.194 103.233.216.77 183.188.192.55 +# https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community 198.23.255.14 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs 91.121.67.60 172.67.186.189 +# https://www•virustotal•com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 +# https://scammer•info/t/mcafee-phish/83725 +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 39.65.72.211 42.238.151.197 27.213.60.53 115.56.169.134 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md +# https://github.com/uBlockOrigin/uAssets/issues/10536 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-974886953 +# https://www•virustotal•com/gui/url/a2524bba49ae71297d2b408b30d058700d9c80b5b1154924cafe190ec3e605a6/detection +# https://www•virustotal•com/gui/file/2b2628a50d3b39b0fa2395d487bf62b00e37cdae847ff76ee58399bbe4e9f7b3/community 194.87.138.20 +# https://www•virustotal•com/gui/file/b320bc7a9151d70daca038c4356ca89bfcd4918bcd6f0f73683a27a6a72467ae/community 103.167.92.73 +# https://www•virustotal•com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community +# https://www•virustotal•com/gui/url/b333c49efa4d399e65c5e2d96a905b380acbca58a3e3052b7bd7cfcb3e0e81ee +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-977912975 +# https://www•tv2•no/nyheter/14368524/ +# https://www•tek•no/i/wOVv0o/ +# https://github.com/iam-py-test/investigations/blob/main/2021/11/24/1.md +# https://github.com/iam-py-test/investigations/blob/main/2021/11/25/1.md +# https://github.com/uBlockOrigin/uAssets/pull/10599 +# https://github.com/uBlockOrigin/uAssets/pull/10620 +# https://www•virustotal•com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community 58.249.74.79 27.45.14.109 27.40.101.191 @@ -218,6 +395,12 @@ 115.204.119.237 163.125.31.46 163.179.168.44 +# https://github.com/uBlockOrigin/uAssets/pull/10647 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md +# https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md +# https://scammer•info/t/password-stealer/84348 +# https://bazaar•abuse•ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/ +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 110.89.59.135 113.116.89.1 119.183.146.191 @@ -229,9 +412,32 @@ 171.112.177.90 115.194.38.143 61.52.79.32 +# https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 +# https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 +# https://www•virustotal•com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community +# https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community +# https://github.com/DandelionSprout/adfilt/pull/395 +# https://www•huorong.cn/info/1531309921141.html +# https://www•huorong.cn/info/1618397948649.html - possible malware +# https://github.com/uBlockOrigin/uAssets/pull/9656 +# https://www•huorong.cn/info/1526627586130.html +# https://www•huorong.cn/info/1577158839403.html +# https://www•huorong.cn/info/1598957552515.html +# https://www•huorong.cn/info/1617368984641.html +# https://github.com/uBlockOrigin/uAssets/pull/10017 +# https://www•nrk.no/vestfoldogtelemark/1.15750360 132.148.220.142 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-986306768 +# https://scammer.info/t/there-are-things-in-the-game-that-will-interest-you-trojan/84908 +# https://scammer.info/t/fake-facebook-login-page/84939 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-988127908 +# https://www•tek.no/i/lVeQAe/ +# https://www•nkom.no/aktuelt/ikke-trykk-pa-lenker-i-sms--for-du-er-helt-sikker/ +# https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md 52.53.243.52 34.201.22.10 +# https://scammer.info/t/crypto-scammers-onceagain/85354 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 123.10.225.196 122.192.106.84 172.88.199.9 @@ -240,74 +446,144 @@ 27.206.181.208 124.163.130.175 118.75.87.102 +# https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md +# https://github.com/DevSpen/links/pull/3 +# https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ 134.122.115.190 +# https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 +# https://bazaar.abuse.ch/sample/84d93b2fd2597da5d611165cbad0b252569a837c56a94a42849f2bedc8af033a/ +# https://github.com/AdguardTeam/AdguardFilters/issues/103475 141.8.226.34 +# https://github.com/AdguardTeam/AdguardFilters/issues/108571 +# https://www•virustotal•com/gui/url/c25fe34c05cc8e9136027a67c277e175a5d6e35af921ee37bad98bdfeea6a2f9/community +# https://www•virustotal•com/gui/file/9d40ae0439ddc594b2cf64e21ad0fdea9bb440524298e3a6bcfcc1fb417f1ed2/relations 91.240.118.172 +# https://twitter•com/iam_py_test/status/1496259425493225472 +# https://github.com/AdguardTeam/AdguardFilters/issues/111970 +# https://bazaar.abuse.ch/sample/d7308dab0110ae3bc79fd15024f5ccfcbd6e676b7c42b27a0112506e8357a6dc/ → https://app.any.run/tasks/bc53e7a9-5fd7-4682-894d-11e48e9ea89a# +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1074966240 +# https://twitter•com/MBThreatIntel/status/1509956416311742464 +# https://bazaar.abuse.ch/sample/b959fb160dac2a15b8e65c15e2b1738d356c03e13623588bc70aab825c57660a/ 198.199.120.251 +# https://www•telia.no/kundeservice/mobil/malware-flubot-android/ 195.201.253.130 195.201.253.131 +# The bottom download button on https://www•sushichop•com/ 15.197.244.48 96.47.230.67 96.47.230.68 96.47.230.69 96.47.230.70 +# https://securitytrails•com/list/ns/ns1•fastthinkingdns•com +# https://github.com/AdguardTeam/AdguardFilters/issues/121544 +# https://github.com/AdguardTeam/AdguardFilters/issues/121772 31.220.27.134 +# https://github.com/AdguardTeam/AdguardFilters/issues/122757 +# https://github.com/AdguardTeam/AdguardFilters/issues/123544 +# https://twitter•com/iam_py_test/status/1545164642346930176 +# https://github.com/AdguardTeam/AdguardFilters/issues/123968 +# https://github.com/AdguardTeam/AdguardFilters/issues/124620 85.17.31.152 95.211.26.202 +# https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 158.247.212.220 165.227.168.212 +# https://www•reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/ +# https://dinside.dagbladet.no/mobil/ikke-la-deg-friste/76730599 +# https://github.com/AdguardTeam/AdguardFilters/issues/125285 23.81.64.183 +# https://github.com/AdguardTeam/AdguardFilters/issues/125300 139.45.197.236 +# https://github.com/AdguardTeam/AdguardFilters/issues/128029 51.91.66.125 51.178.76.105 147.135.253.55 +# https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade) +# https://github.com/AdguardTeam/AdguardFilters/issues/129414 +# https://github.com/AdguardTeam/AdguardFilters/issues/131156 146.19.169.98 146.19.169.99 +# https://github.com/AdguardTeam/AdguardFilters/issues/132079 +# https://github.com/AdguardTeam/AdguardFilters/issues/134355 69.162.80.56 +# https://github.com/AdguardTeam/AdguardFilters/issues/134903 162.241.124.200 +# https://github.com/AdguardTeam/AdguardFilters/issues/135815 157.90.71.190 +# https://github.com/AdguardTeam/AdguardFilters/issues/135924 139.45.197.239 +# https://github.com/AdguardTeam/AdguardFilters/issues/136390 +# https://app.any.run/tasks/67907c11-6877-4c38-932f-2cf09ee4e434 +# https://github.com/AdguardTeam/AdguardFilters/issues/137635 44.228.230.225 50.112.124.170 100.20.104.229 +# https://github.com/AdguardTeam/AdguardFilters/issues/139106 44.236.213.34 52.24.156.12 52.25.6.134 100.20.13.49 +# https://github.com/AdguardTeam/AdguardFilters/issues/139667 51.68.87.229 +# https://github.com/DandelionSprout/adfilt/issues/747 +# https://github.com/DandelionSprout/adfilt/issues/748 +# https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/ 185.106.94.139 45.90.109.196 91.229.23.200 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872 +# https://github.com/AdguardTeam/AdguardFilters/issues/144514 185.155.184.98 194.110.247.242 +# https://new.reddit.com/r/engrish/comments/10zs6f6/low_budget_scam/ 54.219.218.169 +# https://new.reddit.com/r/engrish/comments/10z8r2u/well_you_tried/ 64.132.201.92 +# https://www•adressa.no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener 209.141.51.49 +# https://github.com/AdguardTeam/AdguardFilters/issues/142955 +# https://github.com/AdguardTeam/AdguardFilters/issues/143281 208.88.225.116 208.88.225.117 208.88.225.119 +# https://github.com/AdguardTeam/AdguardFilters/issues/144823 +:// +# https://github.com/AdguardTeam/AdguardFilters/issues/145513 3.231.116.86 54.237.193.255 3.231.137.120 54.204.83.105 +# https://github.com/DandelionSprout/adfilt/issues/808 +# https://www•mandiant.com/resources/blog/tracking-evolution-gootloader-operations (26/01/2023) 108.61.242.65 146.70.78.43 87.120.254.39 45.150.108.213 92.204.160.240 +# https://github.com/AdguardTeam/AdguardFilters/issues/148560 34.200.46.148 85.17.80.16 +# https://www•adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull +# https://github.com/AdguardTeam/AdguardFilters/issues/151479 +# https://github.com/AdguardTeam/AdguardFilters/issues/152407 185.246.188.124 185.246.188.125 194.63.140.103 194.63.143.61 194.63.143.96 +# https://github.com/AdguardTeam/AdguardFilters/issues/152945 +# https://github.com/AdguardTeam/AdguardFilters/issues/154701 37.48.80.112 95.168.170.165 213.227.149.216 109.206.168.16 109.206.168.17 +# https://github.com/AdguardTeam/AdguardFilters/issues/155298 57.128.71.215 +# https://github.com/AdguardTeam/AdguardFilters/issues/155936 +# https://github.com/AdguardTeam/AdguardFilters/issues/156487 +# https://new.reddit.com/r/engrish/comments/15080hg/a_message_i_just_got_from_a_scammer/ +# https://github.com/AdguardTeam/AdguardFilters/issues/156573 37.1.223.231 139.45.197.167 139.45.197.245 @@ -323,16 +599,35 @@ [2a02:b48:207:1::6] [2a02:b48:207:1::7] [2a02:b48:207:1::8] +# https://github.com/AdguardTeam/AdguardFilters/issues/157308 5.45.123.44 69.16.230.226 208.91.196.46 +# https://github.com/AdguardTeam/AdguardFilters/issues/158316 +:// +# https://github.com/AdguardTeam/AdguardFilters/issues/159157 93.93.51.223 +# https://github.com/AdguardTeam/AdguardFilters/issues/161364 +# (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) +# https://www•tv2.no/nyheter/innenriks/advarer-ikke-klikk-pa-lenken/16040614/ +# https://new.reddit.com/r/engrish/comments/16lg4i1/seems_legit/ 103.174.102.240 +# https://github.com/libre-tube/LibreTube/issues/4409 +# https://github.com/RPiList/specials/issues/1353 +# https://github.com/AdguardTeam/AdguardFilters/issues/167667 +# https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7872103 +# https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 38.180.96.244 +# https://github.com/AdguardTeam/AdguardFilters/issues/172569 34.195.224.242 54.225.185.110 +# https://github.com/AdguardTeam/AdguardFilters/issues/173925 91.202.233.143 +# https://github•com/AdguardTeam/AdguardFilters/issues/176214 108.62.157.10 +# https://github.com/AdguardTeam/FiltersRegistry/issues/925 +# https://github.com/AdguardTeam/FiltersRegistry/pull/927 +# https://github.com/AdguardTeam/AdguardFilters/issues/179170 172.240.108.68 172.240.108.76 172.240.108.84 @@ -343,12 +638,16 @@ 192.243.59.20 192.243.61.225 192.243.61.227 +# https://github.com/AdguardTeam/AdguardFilters/issues/181966 167.71.252.38 +# https://github.com/AdguardTeam/AdguardFilters/issues/183432 185.149.120.161 185.149.120.163 185.149.120.173 185.149.120.175 +# https://github.com/AdguardTeam/AdguardFilters/issues/184671 185.149.120.173 +# https://sol•no/81812194/ / https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-10360231 45.202.32.3 45.8.92.138 79.133.46.252 @@ -367,7 +666,16 @@ 193.143.1.214 193.143.1.217 208.91.189.203 +:// +# https://github.com/AdguardTeam/AdguardFilters/issues/189905 +# http://www•toorgle•net/results•php?q=fetishkitsch&security=666 +# https://www•riverbender•com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877•cfm # Various ex-affiliate links at www•zombooru•com +# Spam comments at https://www•accountkiller•com/en/delete-htcdev-account +# https://flclever.weebly•com/pixie-hollow-mini-games•html (06/05/2021) +://hullcitytigers.com +# https://fx-onlinee•blogspot•com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj +# (https://github.com/DandelionSprout/adfilt/issues/1049) 192.243.59.12 192.243.59.13 192.243.59.20 @@ -375,8 +683,14 @@ 194.226.139.7 95.181.157.36 95.181.172.204 +# AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking) +# https://github.com/AdguardTeam/AdguardFilters/issues/120349 192.243.61.225 +# https://twitter•com/medicinehelp/status/1550250932394409985 +# https://securitytrails•com/list/ip/147•135•16•27 147.135.16.27 +# https://www•google.no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img +# https://scambiofigu.forumcommunity•net/?t=57482915 185.87.148.199 45.136.49.35 51.91.211.94 @@ -384,9 +698,18 @@ 146.59.240.191 54.37.5.34 54.36.118.105 +# Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt 159.89.10.102 104.206.252.90 +# https://github.com/blocklistproject/Lists/issues/933 +# https://app.any.run/tasks/679e9afa-eb19-4414-a086-e280a779a448 and https://tria.ge/230217-xd8nksgc9x/behavioral2 +# https://forums•malwarebytes•com/topic/295588-support-scam-supportclientexe-and-screenconnectwindowsclientexe/ (account required) +# https://forums•malwarebytes•com/topic/295605-techsupport-scam/ (account required) +# https://app.any.run/tasks/0f8b5786-177a-45c0-a1de-32e0d68beff2 +# https://github.com/RPiList/specials/issues/948#issuecomment-1458739160 +# Commonly set as a proxy on hacked devices (https://www.virustotal.com/gui/url/e610e7d09c614529cb8c64185717769946f5c86044ac5c31c6608e604995f577/detection) 34.80.59.191 +# Various domains on https://securitytrails•com/list/ip/72•14•178•174 45.33.2.79 45.33.18.44 45.33.20.235 @@ -399,12 +722,14 @@ 96.126.123.244 173.255.194.134 198.58.118.167 +# https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/ 34.117.199.78 94.237.103.119 94.237.84.54 94.237.93.242 94.237.99.118 139.45.197.249 +# https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide 196.196.153.151 158.222.7.116 196.245.152.139 @@ -421,9 +746,15 @@ 185.155.184.57 185.155.186.24 209.74.107.131 +# https://github.com/AdguardTeam/AdguardFilters/issues/173830 69.172.200.185 77.220.214.153 +# https://myip•ms/info/limitexcess +# https://myip•ms/info/memberarea/My_Account•html +# https://get•adobe•com/no/reader/ +# https://eclypsium•com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/ 212.27.60.108 +# https://github.com/AdguardTeam/AdguardFilters/issues/145513 1.14.61.188 3.248.18.175 5.39.217.206