From 349a67b69fb111242115b2fd4e60e488e13d1420 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Sat, 5 Oct 2024 00:19:53 +0200 Subject: [PATCH] Large syntax overhaul for the Hosts file. Inspired by #1046. --- .../AntiMalwareDomains.txt | 335 ++++++++++++++++ .../AntiMalwareHosts.txt | 368 +++++++++++++++++- 2 files changed, 689 insertions(+), 14 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index e58c454f4..a74828a8a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -3,6 +3,8 @@ # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. +# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists +# Homepage: https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#-english # ——— Bad top-level domains ——— # You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you. @@ -25,16 +27,22 @@ +# (https://github.com/DandelionSprout/adfilt/issues/999) +# https://bgp.he•net/AS202492#_prefixes (17/07/2022) +# https://github.com/AdguardTeam/AdguardFilters/issues/131156 +# https://github.com/DandelionSprout/adfilt/issues/659 +# https://github.com/AdguardTeam/AdguardFilters/issues/137635 # Experimental attempt to cover a few hardcore spam ASNs +# https://github.com/AdguardTeam/AdguardFilters/issues/139667 # ——— You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. ——— @@ -133,7 +141,13 @@ officialiqtests.com # ——— Links to PC "optimising" "tool" PUPs that'll most likely stuff your PC full of nagware and malware ——— # ¤¤¤ ReImagePlus (Also added to "uBlock Filters - Badware Risks") ¤¤¤ +# https://windowsreport•com/extend-windows-laptop-battery-life/ +# https://appuals•com/fix-error-0x800701e3-on-windows-7-8-1-10/ +# https://ugetfix•com/ask/how-to-fix-windows-store-error-0x8000ffff/ +# https://www•thewindowsclub•com/fix-windows-update-error-0xc1900130-on-windows-10 +# https://www•majorgeeks•com/files/details/patch_my_pc•html +# https://www•2-spyware•com/remove-redirector-gvt1-com•html @@ -141,13 +155,26 @@ officialiqtests.com # ¤¤¤ ScanUtilities ¤¤¤ +# https://www•bynarycodes•com/fix-windows-10-update-error-0x80070006/ # ¤¤¤ Driver Easy ¤¤¤ +# https://www•drivereasy•com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/ +# https://www•drivereasy•com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/ +# https://www•drivereasy•com/knowledge/download-gigabyte-audio-driver/ +# https://www•drivereasy•com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/ +# https://www•drivereasy•com/knowledge/solved-this-display-does-not-support-hdcp/ # ¤¤¤ Slimware DriverUpdate ¤¤¤ +# https://forums•windowscentral•com/ # ¤¤¤ Driverpack Online (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ¤¤¤ google-analytics.com # ¤¤¤ SpyHunter links ¤¤¤ +# https://howtoremove•guide/redirector-gvt1-com-virus-malware-chrome-removal/ +# https://www•2-spyware•com/remove-redirector-gvt1-com•html +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-968070041 +# https://www•cyclonis•com/how-to-create-gmail-account-without-phone-number/ +# https://www•2-viruses•com/remove-ad-spam-press-allow-to-continue +# https://github.com/iam-py-test/my_filters_001/issues/119 @@ -165,6 +192,11 @@ google-analytics.com # ¤¤¤ Restoro ¤¤¤ +# https://www•windowsdispatch•com/fix-system-restore-0x81000203-error-code/ +# https://dlldownloads•com/xlive-dll/ +# https://windowsreport•com/find-remove-duplicate-files-windows-10/ +# https://windowsreport•com/how-to-update-roblox/ (08/12/2022) +# https://appuals•com/pr-connect-reset-error/ # ¤¤¤ "Driver" download sites that instead download PUP tools ¤¤¤ driver-soft.com # ¤¤¤ Outbyte ¤¤¤ @@ -182,6 +214,7 @@ solvusoft.com +# https://github•com/AdguardTeam/AdguardFilters/issues/58737 # ——— Banner for "MSN New Tab" ——— @@ -221,6 +254,7 @@ vodahelp.sytes.net witkey.com # ——— Browser extension store entries for notoriously poor or malicious adblocker forks ——— +# Note: Currently the Chrome Web Store entries only work properly for Chrome users on AdGuard for Windows/Mac, due to limitations placed on browser extensions; see https://github.com/gorhill/uBlock/wiki/Privileged-Pages # Chrome Web Store # Mozilla Add-ons # These entries can be used in Firefox with regular browser extensions (uBO|AdGuard Browser Extension|ABP) by opening about:config, removing the "addons.mozilla.com" part from "extensions.webextensions.restrictedDomains", and then creating a new string called "privacy.resistFingerprinting.block_mozAddonManager" (That exact capitalisation must be used) set to (Boolean) true. @@ -263,6 +297,7 @@ wix.cm discordapp.cam discordap.com +# https://github.com/DevSpen/links/blob/master/src/links.txt @@ -323,6 +358,7 @@ wgithub.com githubuser.com rgithub.com githubt.com +# https://scammer•info/t/discord-nitro-scam-25/87887 discorde-nitre.xyz # ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ——— @@ -391,7 +427,10 @@ splitter.microxml.net +# https://github.com/DandelionSprout/adfilt/pull/167 forgoprokick.icu +# https://github.com/AdguardTeam/AdguardFilters/issues/124611 +# (https://github.com/DandelionSprout/adfilt/issues/632) inbluson.com bemobtrcks.com @@ -1196,6 +1235,7 @@ zimmisballet.tech +# https://github.com/DandelionSprout/adfilt/issues/942 @@ -3579,9 +3619,14 @@ zonedummy.com +# https://twitter•com/SUNgoddessOKAMI/status/1221295265195405315 deviuser.com +# https://github.com/AdguardTeam/AdguardFilters/issues/61838 +# https://github.com/AdguardTeam/AdguardFilters/issues/61755 +# https://github.com/AdguardTeam/AdguardFilters/issues/61743 +# https://github.com/easylist/easylist/issues/6111 watch-video.net code-zp1.com fres-news.com @@ -3637,6 +3682,7 @@ worldtxt.club ilo134ulih.com hooligapps.com theonlygames.com +# https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/ notified-today.com antivirus-update.com new-message.cc @@ -3649,16 +3695,28 @@ stay-notified.com stay-notified.xyz 167.99.249.47 +# https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/ +# https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/ moderncomputer.net +# https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/ version.gratis +# https://maldita•es/malditobulo/2020/11/18/no-no-es-cierto-que-amancio-ortega-haya-invertido-100-millones-en-bitcoin-revolution-es-una-web-falsa/ starpowders.github.io +# https://github.com/AdguardTeam/AdguardFilters/issues/69611 +# https://github.com/AdguardTeam/AdguardFilters/issues/71721 +# https://github.com/AdguardTeam/AdguardFilters/issues/71369 +# https://github.com/AdguardTeam/AdguardFilters/issues/73623 +# https://github.com/AdguardTeam/AdguardFilters/issues/73627 +# https://github.com/AdguardTeam/AdguardFilters/issues/73133 +# https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-428333 safe-offers.net +# https://github.com/DandelionSprout/adfilt/issues/188 gogle.net quatrefeuillepolonaise.xyz extragifis.site @@ -3679,6 +3737,7 @@ iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com 103.224.182.251 +# https://github.com/DandelionSprout/adfilt/issues/193 holescontracting.com doggroomingnews.com 5.79.71.205 @@ -3698,7 +3757,9 @@ doggroomingnews.com 178.162.217.107 [2a02:1668:1034::2] +# https://github.com/DandelionSprout/adfilt/issues/195 logicalrecord.com +# https://github.com/DandelionSprout/adfilt/issues/196 secureportal.online accbaus.com aobinternational.com @@ -3715,7 +3776,9 @@ securemailbox.online 108.170.52.156 +# https://github.com/DandelionSprout/adfilt/issues/198 mysecrethoookup.com +# https://www•bleepingcomputer•com/virus-removal/ (18/06/2021) toksearches.xyz smashapps.net smashappsearch.com @@ -3727,6 +3790,7 @@ searchletter.com searchinggood.com searchprivacyplus.com powersmashsearch.com +# https://www•bleepingcomputer•com/virus-removal/remove-please-allow-to-watch-the-video 1000-dollar.cash 1000-eur.cash bokerstars.com @@ -3823,7 +3887,9 @@ weather-forecast.today 213.227.149.216 +# https://twitter•com/adamziaja/status/1252234957679808513 wow-robotics.xyz +# https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html deepe.icu google-analytics.buzz intr0.cyou @@ -3837,7 +3903,9 @@ fblaster.com ribinski.us 5.188.62.36 +# https://github.com/DandelionSprout/adfilt/issues/223 speedupmypcfree.com +# https://github.com/DandelionSprout/adfilt/issues/224 flomongteren.com gedinetuwus.com ikitrenesturi.com @@ -3871,19 +3939,25 @@ ssielearning.com paymetconfirm.com 69.49.231.244 +# https://movsb•0x0•st/users/mia vid.me 5starhdporn.com +# https://github.com/DandelionSprout/adfilt/issues/228 helooworld.us +# https://github.com/DandelionSprout/adfilt/issues/241 vrthcobj.com +# https://github.com/DandelionSprout/adfilt/issues/244 rblxexploits.net youneerdmo.top image-find.com +://linkvertise.com/23001/OxygenU usegetmarketings.com bestappever4you.com thecrs.club +# https://github.com/DandelionSprout/adfilt/issues/251#issue-974102211 nanorgin.ydns.eu cocinasintonterias.com blackpass.info @@ -3894,6 +3968,7 @@ atvcampingtrips.com thegymmum.com pcspeedcat.com auslogics.com +# https://github.com/DandelionSprout/adfilt/issues/253 mediaget.com media-get.com media-get.ru @@ -3908,7 +3983,9 @@ trackwebclick.com 23.111.88.207 +# https://github.com/DandelionSprout/adfilt/issues/254 onesafesoftware.com +# https://github.com/DandelionSprout/adfilt/issues/257 185.158.250.239 192.169.69.25 @@ -3936,15 +4013,24 @@ pushmeup.art artofads.co pc-my-protection.xyz beta-news.org +# https://github.com/DandelionSprout/adfilt/pull/266 +# https://www•virustotal•com/gui/domain/kirstialechulbard•space/relations +# https://www•virustotal•com/gui/ip-address/198•54•117•244/relations dashwoodestates.com +# http://vxvault•net/ViriFiche•php?ID=44013 +# https://www•virustotal•com/gui/url/8066b87ad10ddb5466bc307bb48454139572f6c8c8f80a9734275ac89cf966af/detection +# https://www•virustotal•com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection +# https://safeweb•norton•com/report/show?url=192•3•110•170 192.3.110.170 +# https://forums•malwarebytes•com/topic/278209-removal-instructions-for-socialsearchconverter/ socialsearchconverter.com install.socialsearchconverter.com feed.socialsearchconverter.com api.socialsearchconverter.com notify-service.com install.stream-all.com +# Copied over from https://github.com/uBlockOrigin/uAssets/issues/9848 gghacks.com rewardsgiantusa.com promotionsonlineusa.com @@ -3956,8 +4042,12 @@ www.mediafiire.com mediafiire.com d1xkyo9j4r7vnn.cloudfront.net onlinepromotionsusa.com +# https://securelist•com/apkpure-android-app-store-infected/101845/ +# https://www•virustotal•com/gui/url/866a25343864f03dc5a10105fda523bfbb6ed09c486d07fd31ca2b5306440089/detection wcf.seven1029.com +# https://www•virustotal•com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection foodin.site +# https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 totalav.com # owned by the same people totalwebshield.com @@ -3967,25 +4057,46 @@ protected.net totaladblock.com totaladblocker.xyz totalwebshield.xyz +# https://www•virustotal•com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community +# https://www•virustotal•com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection +# https://www•virustotal•com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection 91.241.19.38 +# https://www•virustotal•com/gui/url/46e095c35d83e2dd0b98df4b5844d3d87948de0c930a618600121020a514c801/detection +# https://safeweb•norton•com/report/show?url=telete•in +# https://www•siteadvisor•com/sitereport•html?url=telete•in telete.in +# https://www•virustotal•com/gui/file/e63b2d03e3fee2d538f8bd721b61dd3641284fa941087d846dea6f15cab40308/community +# https://www•virustotal•com/gui/url/fbbc8a671bff32539bd829a76f6df9f364a21ac2279922e64e3ec494a1669dd3/detection kiff.tech +# https://www•virustotal•com/gui/domain/kiff•tech/relations +# https://www•virustotal•com/gui/url/dc038496b1b5358b97f89440135ec91258b406c40859a2cd95983dc7a81e0cfa/detection 45.90.58.90 +# https://www•virustotal•com/gui/file/e565ba89d034418fd26a5f642f6eeee4d72ee3b8dc69523419b7ca8dfd452730/community +# https://www•virustotal•com/gui/url/e3a9189a1e1256beba8e0fc3abfeab6acb09f7f8cabfd973e22be9f77bb6886f/detection 95.85.89.98 +# https://github.com/DandelionSprout/adfilt/issues/267 tekhacks.net +# https://github.com/DandelionSprout/adfilt/pull/278 +# https://www.virustotal.com/gui/file/da75c85fe037f9ff9ebbbd0b37dd2ff154f5e70a0dc6870286e0d3df6b8f246f/community 139.28.37.49 +# https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community 35.194.188.37 +# https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community hydro-ca.link +# https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community 91.243.121.19 +# https://www.virustotal.com/gui/file/9f154115fa8045aa05f15f7cd1de9623ebe32e8ea400279ecb5dfa3596952e3b/community 103.169.90.205 +# https://github.com/DandelionSprout/adfilt/pull/281 +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 125.44.43.45 182.121.8.240 @@ -4006,7 +4117,9 @@ hydro-ca.link 27.220.253.78 +# https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community esetnode32-antiviru.ydns.eu +# https://www•joesandbox•com/analysis/486636/0/html#domains aieov.com # Relations to the original domain 192.3.194.242 @@ -4018,12 +4131,15 @@ k2ygoods.ydns.eu lefteriskkokkiskikinew.ydns.eu nan.ydns.eu hjjhjkk.ydns.eu +# https://github.com/blocklistproject/Lists/issues/497 tweakbit.com pcspeedup.en.softonic.com # Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry 1redirb.com +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931700117 retailproductsusa.com cloud-repos.store +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931742337 (Initial batch) adtrk18.com jpgtrk.com pnghst.com @@ -4034,6 +4150,7 @@ spnccrzone.com natnlconsmrctr.com jsontdsexit.com therewardboost.com +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931753495 agkn.com best-prizes.life cloud-storage.store @@ -4048,11 +4165,14 @@ tag.cogocast.net tag.yieldoptimizer.com traversedlp.com cpmstatsart.com +# https://github.com/DandelionSprout/adfilt/issues/287 youtuba.com polyhymnia-mar.com virpropcnow.xyz avprotectionoverview.com +# (https://github.com/DandelionSprout/adfilt/issues/904) +# https://github.com/DandelionSprout/adfilt/issues/288 forwrdnow.com 7lyonline.com safelyonline.net @@ -4066,19 +4186,27 @@ adalgard-wol.com trkk4.com hosting-redirect.com +# https://github.com/DandelionSprout/adfilt/pull/289 gogles.com flexroll.online aquariuminn.com army-glo.scrollingsystem.com mcafee12.tt.omtrdc.net trolleydrop.info +# https://www•virustotal•com/gui/ip-address/70•32•1•32/relations cd.org +# https://www•virustotal•com/gui/file/78f490e503c86eaaff5760197b9ff5308ed6e03161af13194a6c1e0cd95422de/community +# https://github.com/DandelionSprout/adfilt/commit/f7f114945c83b339be5cdd848e229680d9918abb#commitcomment-57642875 23.94.26.138 +# https://github.com/DandelionSprout/adfilt/pull/298 +# https://www•virustotal•com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community 205.185.126.200 +# https://www•virustotal•com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community 185.243.56.167 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 123.10.224.135 59.47.187.147 @@ -4173,7 +4301,9 @@ cd.org 112.30.110.58 +# https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community pcae.de +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 117.196.49.21 115.55.54.234 @@ -4182,11 +4312,16 @@ pcae.de 182.59.69.21 +# https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community chip-secured-download.de +# https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb # Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin nctylivpwhpby.com phhitgjxsit.com +# https://www•virustotal•com/gui/url/b2936e74f35940d2f09cabf4e089a0d655e62a5fc08ad32e1fae79a62683683f?nocache=1 saimission.org +# https://www•virustotal•com/gui/url/4c2c3cf2e4f5b9ac9765eb9c58f2756d8f0f4632ec707107afe3c111f4749025?nocache=1 +# https://www•virustotal•com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations driversupport.com # A PUP and scam website mycleanpc.com @@ -4197,18 +4332,27 @@ iolostore.com # The main website for the MyCleanPC company realdefen.se # Vermilion Strike +# https://www•virustotal•com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations 160.202.163.100 +# https://www•virustotal•com/gui/ip-address/160•202•163•100/relations microsoftkernel.com microsofthk.com +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-938167311 machinesalaver.net +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-940500664 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-944612753 pushbizapi.com +# https://github.com/DandelionSprout/adfilt/pull/303 +# https://www•virustotal•com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community 45.95.169.115 +# https://www•virustotal•com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community 45.148.120.80 +# https://www•virustotal•com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community 85.239.33.9 # Relations to the domain above @@ -4226,17 +4370,24 @@ secure-authlogin5.serveftp.com c4ase-verified9932.serveftp.com 1log-wellsfargo.serveftp.com eposcardokubo.serveftp.com +# https://www•virustotal•com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community 107.173.176.183 +# https://www•virustotal•com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community 45.148.120.171 +# https://twitter•com/soranker0/status/1449491402409185283 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 free-softs.net +# https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture cloud-apps.store +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-951321929 159.148.186.228 +# https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains yotube.com r-tb.com cdn.hoood.info @@ -4246,18 +4397,23 @@ pisism.com welcomejohncena.pro security-scanner.xyz news-back.org +# https://github.com/iam-py-test/investigations/blob/main/2021/11/1/1.md kokotrokot.com +# https://www•upwork•com/freelance-jobs/apply/Integarte-push-notification-for-chrome_~013c73ed9282225184/ mugrikees.com alpha-news.org +# https://github.com/iam-py-test/investigations/blob/main/2021/11/3/1.md safejokesearch.com mediadlvr.com youvetube.com youutube.com +# https://github.com/DandelionSprout/adfilt/pull/348 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 39.83.80.247 68.197.33.124 @@ -4320,8 +4476,12 @@ youutube.com 183.188.192.55 +# https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community 198.23.255.14 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs freedownloadfiles.org querahinor.xyz trumops.com @@ -4330,6 +4490,7 @@ runmodes.com 172.67.186.189 +# https://www•virustotal•com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 inconclusive-pyrite-grandparent.glitch.me delicate-tame-angora.glitch.me secureinvoice.glitch.me @@ -4340,7 +4501,9 @@ loving-discovered-swordfish.glitch.me aquamarine-cotton-impala.glitch.me mature-periwinkle-advantage.glitch.me tough-numerous-lemur.glitch.me +# https://scammer•info/t/mcafee-phish/83725 securefirst.us-east-1.linodeobjects.com +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 39.65.72.211 42.238.151.197 @@ -4349,29 +4512,41 @@ securefirst.us-east-1.linodeobjects.com 115.56.169.134 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md yasir252.com safelink.kadal.club bedrapiona.com dozubatan.com toglooman.com ultimate-detection.com +# https://github.com/uBlockOrigin/uAssets/issues/10536 tw-goldenwinner-57.com +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-974886953 e.datingmap.top datingmap.top tonightshookup.com members.tonightshookup.com t.tonightshookup.com yourladiefun.life +# https://www•virustotal•com/gui/url/a2524bba49ae71297d2b408b30d058700d9c80b5b1154924cafe190ec3e605a6/detection newrrb.bid +# https://www•virustotal•com/gui/file/2b2628a50d3b39b0fa2395d487bf62b00e37cdae847ff76ee58399bbe4e9f7b3/community 194.87.138.20 +# https://www•virustotal•com/gui/file/b320bc7a9151d70daca038c4356ca89bfcd4918bcd6f0f73683a27a6a72467ae/community 103.167.92.73 +# https://www•virustotal•com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community bursakulis.com +# https://www•virustotal•com/gui/url/b333c49efa4d399e65c5e2d96a905b380acbca58a3e3052b7bd7cfcb3e0e81ee 610418.selcdn.ru +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-977912975 +# https://www•tv2•no/nyheter/14368524/ alexstewartinternationalltd.rw vps.re +# https://www•tek•no/i/wOVv0o/ 21steditionnaturalgh.com +# https://github.com/iam-py-test/investigations/blob/main/2021/11/24/1.md macsoftwarez.com ec2-3-238-75-201.compute-1.amazonaws.com ec2-54-177-49-112.us-west-1.compute.amazonaws.com @@ -4379,9 +4554,13 @@ krmcean.xyz ec2-44-192-106-88.compute-1.amazonaws.com ec2-52-53-211-120.us-west-1.compute.amazonaws.com mygametoa.com +# https://github.com/iam-py-test/investigations/blob/main/2021/11/25/1.md +# https://github.com/uBlockOrigin/uAssets/pull/10599 fasterfiles.net yunosurveys.com +# https://github.com/uBlockOrigin/uAssets/pull/10620 shadyclient.net +# https://www•virustotal•com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community 58.249.74.79 27.45.14.109 @@ -4398,14 +4577,20 @@ shadyclient.net 163.179.168.44 +# https://github.com/uBlockOrigin/uAssets/pull/10647 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md money-mod.com reykijnoac.com totalnicefeed.com +# https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md bestlifeoffer20.com +# https://scammer•info/t/password-stealer/84348 +# https://bazaar•abuse•ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/ +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 110.89.59.135 113.116.89.1 @@ -4428,38 +4613,61 @@ bestlifeoffer20.com 61.52.79.32 +# https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 +# https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 lowseelan.com +# https://www•virustotal•com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community +# https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community +# https://github.com/DandelionSprout/adfilt/pull/395 +# https://www•huorong.cn/info/1531309921141.html kuaizip.com +# https://www•huorong.cn/info/1618397948649.html - possible malware # ||zhuangjizhuli.com # ||zhuangjizhuli.net +# https://github.com/uBlockOrigin/uAssets/pull/9656 geekotg.com +# https://www•huorong.cn/info/1526627586130.html xiaobaixitong.com +# https://www•huorong.cn/info/1577158839403.html daque.cn +# https://www•huorong.cn/info/1598957552515.html dabaicai.com +# https://www•huorong.cn/info/1617368984641.html qqfzn.com +# https://github.com/uBlockOrigin/uAssets/pull/10017 flash.cn +# https://www•nrk.no/vestfoldogtelemark/1.15750360 dundeehills.group !+ NOT_OPTIMIZED 132.148.220.142 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-986306768 chess-progress.ru ouhastay.net +# https://scammer.info/t/there-are-things-in-the-game-that-will-interest-you-trojan/84908 askara.super.site +# https://scammer.info/t/fake-facebook-login-page/84939 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-988127908 +# https://www•tek.no/i/lVeQAe/ +# https://www•nkom.no/aktuelt/ikke-trykk-pa-lenker-i-sms--for-du-er-helt-sikker/ eccolabgroup.com galerijajava.ba p-stn.net +# https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md haxpc.net 52.53.243.52 34.201.22.10 +# https://scammer.info/t/crypto-scammers-onceagain/85354 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 123.10.225.196 122.192.106.84 @@ -4476,13 +4684,17 @@ haxpc.net 118.75.87.102 +# https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md onemacusa.net +# https://github.com/DevSpen/links/pull/3 systemupdatecontrol.com +# https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ mozicrack.com download-srvr.xyz 134.122.115.190 cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com +# https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 viewty.xyz landing.marketstm.com # fake MediaFire scam domains @@ -4491,6 +4703,7 @@ royaltees.co findes.co +# https://bazaar.abuse.ch/sample/84d93b2fd2597da5d611165cbad0b252569a837c56a94a42849f2bedc8af033a/ freeprosoftz.com @@ -4499,9 +4712,11 @@ lekms.com new-meet-dating.life wellhello.com +# https://github.com/AdguardTeam/AdguardFilters/issues/103475 ru.com 141.8.226.34 +# https://github.com/AdguardTeam/AdguardFilters/issues/108571 ston-app.com # fake human verification scam # start form - reported for abuse @@ -4513,7 +4728,9 @@ dgu9g3a2kzqx2.cloudfront.net d13pxqgp3ixdbh.cloudfront.net # Other crashfixes.com +# https://www•virustotal•com/gui/url/c25fe34c05cc8e9136027a67c277e175a5d6e35af921ee37bad98bdfeea6a2f9/community splendid-fallacious-anaconda.glitch.me +# https://www•virustotal•com/gui/file/9d40ae0439ddc594b2cf64e21ad0fdea9bb440524298e3a6bcfcc1fb417f1ed2/relations 91.240.118.172 # "Press Allow to continue" @@ -4525,17 +4742,22 @@ worldcoolfeed.com lucymods.com gluegames.xyz +# https://twitter•com/iam_py_test/status/1496259425493225472 +# https://github.com/AdguardTeam/AdguardFilters/issues/111970 +# https://bazaar.abuse.ch/sample/d7308dab0110ae3bc79fd15024f5ccfcbd6e676b7c42b27a0112506e8357a6dc/ → https://app.any.run/tasks/bc53e7a9-5fd7-4682-894d-11e48e9ea89a# pccrackworld.com calsign.xyz jwq98u.xyz nhskuhiuscja.xyz +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1074966240 melding.link +# https://twitter•com/MBThreatIntel/status/1509956416311742464 xposednews.xyz tomguide.xyz eronews.xyz @@ -4551,11 +4773,13 @@ hrmaclenews.xyz maanews.xyz newsdeals.xyz dreamdigimedia.blogspot.com +# https://bazaar.abuse.ch/sample/b959fb160dac2a15b8e65c15e2b1738d356c03e13623588bc70aab825c57660a/ activatorwin.com freeversioncrack.com top3hostngc.xyz 198.199.120.251 +# https://www•telia.no/kundeservice/mobil/malware-flubot-android/ !+ NOT_OPTIMIZED # A Discord conversation I had about Throneful @@ -4581,6 +4805,7 @@ cumpussyy.uno 195.201.253.131 +# The bottom download button on https://www•sushichop•com/ installiq.com specgoal.com sandhyapi.online @@ -4608,6 +4833,7 @@ cpmverdirect.com 96.47.230.70 +# https://securitytrails•com/list/ns/ns1•fastthinkingdns•com telemetry-urs-microsoft.com @@ -4618,8 +4844,10 @@ winrar-desktop.com +# https://github.com/AdguardTeam/AdguardFilters/issues/121544 trafredirtds.com +# https://github.com/AdguardTeam/AdguardFilters/issues/121772 pu020ev.com kadam.net kdtrk.net @@ -4645,11 +4873,16 @@ viixes.com viiyhn.com 31.220.27.134 +# https://github.com/AdguardTeam/AdguardFilters/issues/122757 +# https://github.com/AdguardTeam/AdguardFilters/issues/123544 saferedirects.xyz online-guard.com +# https://twitter•com/iam_py_test/status/1545164642346930176 amazon-security-info.lnk.to +# https://github.com/AdguardTeam/AdguardFilters/issues/123968 +# https://github.com/AdguardTeam/AdguardFilters/issues/124620 @@ -4943,6 +5176,7 @@ zuginmw.art 95.211.26.202 +# https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 bzsx.link dfvd.link dsvs.link @@ -4960,9 +5194,12 @@ wznp.link 165.227.168.212 +# https://www•reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/ +# https://dinside.dagbladet.no/mobil/ikke-la-deg-friste/76730599 k-yw.com +# https://github.com/AdguardTeam/AdguardFilters/issues/125285 fearconic.com atobunderevenes.com ferrantrative.com @@ -5004,6 +5241,7 @@ broburchrove.com galantinkoling.com 23.81.64.183 +# https://github.com/AdguardTeam/AdguardFilters/issues/125300 zikroarg.com dooloust.net vooshagy.net @@ -5174,6 +5412,7 @@ vooculok.com mobytrks.com 139.45.197.236 +# https://github.com/AdguardTeam/AdguardFilters/issues/128029 becovi.com becovi.co.uk shopfirststop.com @@ -5206,16 +5445,21 @@ motherpipe.net 147.135.253.55 +# https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade) bnbdeal.net +# https://github.com/AdguardTeam/AdguardFilters/issues/129414 !+ NOT_OPTIMIZED !+ NOT_OPTIMIZED +# https://github.com/AdguardTeam/AdguardFilters/issues/131156 146.19.169.98 146.19.169.99 +# https://github.com/AdguardTeam/AdguardFilters/issues/132079 +# https://github.com/AdguardTeam/AdguardFilters/issues/134355 1000girl.com 1000islandsinfo.com 100blackmenkc.org @@ -6987,12 +7231,14 @@ niderschlagsradar.de 2c236979-b1bb-4c7a-915c-df74dbad0d8c.s3.ap-northeast-2.amazonaws.com 69.162.80.56 +# https://github.com/AdguardTeam/AdguardFilters/issues/134903 smartlink.name # Random Discord servers 162.241.124.200 +# https://github.com/AdguardTeam/AdguardFilters/issues/135815 adsstar.in clickcafe.in earnme.club @@ -7009,6 +7255,7 @@ usanewstoday.club webhostingtips.club 157.90.71.190 +# https://github.com/AdguardTeam/AdguardFilters/issues/135924 abazelfan.com abburmyer.com abyamaskor.com @@ -7246,8 +7493,11 @@ zagtertda.com zoawufoy.net 139.45.197.239 +# https://github.com/AdguardTeam/AdguardFilters/issues/136390 +# https://app.any.run/tasks/67907c11-6877-4c38-932f-2cf09ee4e434 adblock-chrome.net +# https://github.com/AdguardTeam/AdguardFilters/issues/137635 aaolh.icu aboqs.icu acukl.icu @@ -7452,6 +7702,7 @@ zigaahm.icu link.sv 4.fo kckb.st +# https://github.com/AdguardTeam/AdguardFilters/issues/139106 loadingnow.me gsecurecontent.com @@ -7465,11 +7716,13 @@ sapino.net 100.20.13.49 +# https://github.com/AdguardTeam/AdguardFilters/issues/139667 goldmesoil.live 51.68.87.229 f9dle.skin kilpa2017.fi +# https://github.com/DandelionSprout/adfilt/issues/747 2022crucialcatch.store adidascostarica.com adidasencostarica.com @@ -8484,6 +8737,7 @@ zapatosaldochile.org +# https://github.com/DandelionSprout/adfilt/issues/748 @@ -9223,6 +9477,7 @@ zapatillasmcqueen.com +# https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/ @@ -9262,6 +9517,8 @@ unity-download.org 91.229.23.200 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872 +# https://github.com/AdguardTeam/AdguardFilters/issues/144514 attractbestbonuses.life attractbonus.life best-prize.life @@ -9324,11 +9581,13 @@ winmacros.life 194.110.247.242 +# https://new.reddit.com/r/engrish/comments/10zs6f6/low_budget_scam/ ups-addressed.me ups-quote.me meta-whatsapp.me 54.219.218.169 +# https://new.reddit.com/r/engrish/comments/10z8r2u/well_you_tried/ 0365alert.com 0365online.com 365-notifcation.com @@ -9760,6 +10019,7 @@ yourticketchance.com yourorderupdate.com 64.132.201.92 +# https://www•adressa.no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener acessmygov.online centerlinkmygov.com centierssl.us @@ -9782,6 +10042,7 @@ elimef.link 209.141.51.49 post-norway.web.app +# https://github.com/AdguardTeam/AdguardFilters/issues/142955 propellerclick.com abclefabletor.com abgligarchan.com @@ -10256,6 +10517,7 @@ zoozistu.net +# https://github.com/AdguardTeam/AdguardFilters/issues/143281 academic-information.com academicvast.com amused-ground.com @@ -10379,7 +10641,10 @@ zogrepsili.com 208.88.225.119 +# https://github.com/AdguardTeam/AdguardFilters/issues/144823 !+ NOT_OPTIMIZED +:// +# https://github.com/AdguardTeam/AdguardFilters/issues/145513 achilles-par.com adrastos-eli.com aegid-bal.com @@ -10485,6 +10750,8 @@ wulfs-dcm.com 54.204.83.105 +# https://github.com/DandelionSprout/adfilt/issues/808 +# https://www•mandiant.com/resources/blog/tracking-evolution-gootloader-operations (26/01/2023) jonathanbartz.com jp.imonitorsoft.com junk-bros.com @@ -10511,6 +10778,7 @@ i-likefood.co 92.204.160.240 +# https://github.com/AdguardTeam/AdguardFilters/issues/148560 # Comments on Slack antivirussprotection.com @@ -10724,7 +10992,9 @@ wuruclas.co.in zondeucearixes.com 85.17.80.16 +# https://www•adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull sitey.me +# https://github.com/AdguardTeam/AdguardFilters/issues/151479 agazpeppily.live agraffesalps.com banteryquartin.com @@ -10772,6 +11042,7 @@ teflonterreen.com tempuracubbies.life toluatebrazee.com uppilequavers.website +# https://github.com/AdguardTeam/AdguardFilters/issues/152407 topmoneysurvey.com awarded-best-vpn.com best-finance-now.com @@ -10868,12 +11139,14 @@ your-survey-services.com 194.63.143.96 +# https://github.com/AdguardTeam/AdguardFilters/issues/152945 moneystartup.live fintechbest.online +# https://github.com/AdguardTeam/AdguardFilters/issues/154701 algazira-updates.com articles-news-magazine.com bellisimo-news.com @@ -11110,6 +11383,7 @@ updateasap.online 109.206.168.17 +# https://github.com/AdguardTeam/AdguardFilters/issues/155298 cadstoppam.live cottodwin.live cumwaysroe.live @@ -11127,11 +11401,13 @@ usedhutsold.live 57.128.71.215 +# https://github.com/AdguardTeam/AdguardFilters/issues/155936 truanet.com rumadel.com +# https://github.com/AdguardTeam/AdguardFilters/issues/156487 apigroup.xyz apihouse.xyz apiinfo.xyz @@ -11175,7 +11451,9 @@ tebux.info tiujejhexe.click vuegebjexe.click xauhusjexe.click +# https://new.reddit.com/r/engrish/comments/15080hg/a_message_i_just_got_from_a_scammer/ tzn03.me +# https://github.com/AdguardTeam/AdguardFilters/issues/156573 707.su aahdxn.com aaxrge.com @@ -11886,6 +12164,7 @@ zzrgab.com +# https://github.com/AdguardTeam/AdguardFilters/issues/157308 abdoser.co.in acelim.co.in adsos.xyz @@ -12262,6 +12541,7 @@ ztomy.com 208.91.196.46 +# https://github.com/AdguardTeam/AdguardFilters/issues/158316 abashfireworks.com abashinstructor.com abateall.com @@ -16786,6 +17066,8 @@ yowlvernon.com zapdescendant.com zapprecisionadmire.com zealousstraitcommit.com +:// +# https://github.com/AdguardTeam/AdguardFilters/issues/159157 apbbjmp.com apptjmp.com awbbgate.com @@ -16836,8 +17118,11 @@ wmptengate.com 93.93.51.223 +# https://github.com/AdguardTeam/AdguardFilters/issues/161364 +# (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) github.sale +# https://www•tv2.no/nyheter/innenriks/advarer-ikke-klikk-pa-lenken/16040614/ 0nedr1ved0cumentonline.com 88godetailsvc.com amexmobileupdate.cc @@ -17061,6 +17346,7 @@ z2i.tech +# https://new.reddit.com/r/engrish/comments/16lg4i1/seems_legit/ authde.us dc-r.us de-po.us @@ -17085,8 +17371,10 @@ upstr.us 103.174.102.240 +# https://github.com/libre-tube/LibreTube/issues/4409 libretube.app libretube.net +# https://github.com/RPiList/specials/issues/1353 khw6g09fx28k.cfd 49gw5gonj143k.click djxd2ox30l7.click @@ -17190,6 +17478,7 @@ ko04rf8.cfd i3edtgyu.cfd pqlbh88z7.cfd i3s5qfuvs.cfd +# https://github.com/AdguardTeam/AdguardFilters/issues/167667 @@ -17213,6 +17502,7 @@ i3s5qfuvs.cfd +# https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7872103 betzykrisesenter.no citra2010oslo.no digiter.no @@ -17228,9 +17518,11 @@ topshineauto.no vossblues.no yttersiden.no +# https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 38.180.96.244 +# https://github.com/AdguardTeam/AdguardFilters/issues/172569 acareewityjh.com accedenonre.xyz adeditiontowritingef.net @@ -17572,6 +17864,7 @@ yvaluationiamcur.com +# https://github.com/AdguardTeam/AdguardFilters/issues/173925 sweedbank-help.com swedbank-account.com levering-ekspedition.network @@ -17918,6 +18211,7 @@ zigse.com zrl7.com modreminiapk.com +# https://github•com/AdguardTeam/AdguardFilters/issues/176214 basicnetworkhistory.com chainedconnections.com chainworkflow.com @@ -17936,6 +18230,8 @@ systemnetworkroute.com trafficredirectchain.com 108.62.157.10 +# https://github.com/AdguardTeam/FiltersRegistry/issues/925 +# https://github.com/AdguardTeam/FiltersRegistry/pull/927 @@ -17946,6 +18242,7 @@ trafficredirectchain.com +# https://github.com/AdguardTeam/AdguardFilters/issues/179170 172.240.108.68 172.240.108.76 @@ -20942,8 +21239,10 @@ youruntie.com youtrustedprolong.com yydtbpms8tf4.com zipinaccurateoffering.com +# https://github.com/AdguardTeam/AdguardFilters/issues/181966 167.71.252.38 +# https://github.com/AdguardTeam/AdguardFilters/issues/183432 100carbures.com 123ecos.com 1win-k.com @@ -22060,6 +22359,7 @@ zymstr.com 185.149.120.175 +# https://github.com/AdguardTeam/AdguardFilters/issues/184671 2rlive.com afro-melanin.com alatterapistroke.com @@ -22223,6 +22523,7 @@ zglobalindia.com zircontahafuz.com 185.149.120.173 +# https://sol•no/81812194/ / https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-10360231 02helpinfo.com 02rebill-pending.com 0niinebankingrbcroyabank.com @@ -22747,11 +23048,15 @@ youweb-bpm.com 208.91.189.203 +:// +# https://github.com/AdguardTeam/AdguardFilters/issues/189905 # ——— Standard malware that I stumbled upon on my own ——— +# http://www•toorgle•net/results•php?q=fetishkitsch&security=666 downloadprovider.me +# https://www•riverbender•com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877•cfm cash93.com a4alig.com cash03.com @@ -22778,6 +23083,7 @@ push.pipiset.com push.weo.su traffsend.me wwopenclick.club +# Spam comments at https://www•accountkiller•com/en/delete-htcdev-account azhydroxychloroquine.com wisig.org confrancisyalgomas.com @@ -22789,10 +23095,13 @@ jueriy.com amoxycillin1st.com # The Jerma985 Discord server crazycrabreedville.com +# https://flclever.weebly•com/pixie-hollow-mini-games•html (06/05/2021) messium.info # Various Google searches +://hullcitytigers.com # Various search results for 'kelloggs tresor' in Norwegian (30/05/2021) +# https://fx-onlinee•blogspot•com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj # Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) malwarecleanerpro.com @@ -22919,6 +23228,7 @@ adoptpassivepromise.com adorableold.com adornmadeup.com adriftstressful.com +# (https://github.com/DandelionSprout/adfilt/issues/1049) advantagespire.com affableindigestionstruggling.com @@ -24418,6 +24728,7 @@ skinosoda.online +# AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking) @@ -24439,6 +24750,7 @@ skinosoda.online +# https://github.com/AdguardTeam/AdguardFilters/issues/120349 dispositionadverb.com wednesdayexpandingbarb.com broadslippery.com @@ -25025,6 +25337,8 @@ sidenoteconcern.com abnegationbanquet.com 192.243.61.225 +# https://twitter•com/medicinehelp/status/1550250932394409985 +# https://securitytrails•com/list/ip/147•135•16•27 acrx.online acrx.org @@ -25081,8 +25395,10 @@ medicinecoupons.xyz medicinehelp.news 147.135.16.27 +# https://www•google.no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img ingeniovirtual.com # Spambot posts on Tumblr (19/09/2022) +# https://scambiofigu.forumcommunity•net/?t=57482915 scambiofigu.net # Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious # Google results for 'Katy and Bob: Cake Café powerpc' (04/11/2022) @@ -25169,6 +25485,7 @@ onlymetsure.live 54.36.118.105 +# Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt highlandnews.com genuinescansupport.com diverseflowlink.com @@ -25220,6 +25537,7 @@ nuouther.com carpiesi.com 104.206.252.90 +# https://github.com/blocklistproject/Lists/issues/933 jNKmS0zFuEh.click pjljo54uk.click v1asy4ncr.click @@ -25232,12 +25550,19 @@ lrhxz60alkjtik.click tvbxrr4ym3.click 8ebtdbsjsu.click eicxz6jfjaw.click +# https://app.any.run/tasks/679e9afa-eb19-4414-a086-e280a779a448 and https://tria.ge/230217-xd8nksgc9x/behavioral2 ru-torproject.ru +# https://forums•malwarebytes•com/topic/295588-support-scam-supportclientexe-and-screenconnectwindowsclientexe/ (account required) +# https://forums•malwarebytes•com/topic/295605-techsupport-scam/ (account required) +# https://app.any.run/tasks/0f8b5786-177a-45c0-a1de-32e0d68beff2 123secure.org +# https://github.com/RPiList/specials/issues/948#issuecomment-1458739160 yuppdownload.com +# Commonly set as a proxy on hacked devices (https://www.virustotal.com/gui/url/e610e7d09c614529cb8c64185717769946f5c86044ac5c31c6608e604995f577/detection) 34.80.59.191 +# Various domains on https://securitytrails•com/list/ip/72•14•178•174 megabooru.com @@ -25268,6 +25593,7 @@ wh40kart.im 198.58.118.167 +# https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/ 123chance.net 123links4u.net 123prizes.net @@ -25656,6 +25982,7 @@ zebraoffers.net 139.45.197.249 +# https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide acorusinfield.life acridlydebit.live aeneasclosure.website @@ -26179,6 +26506,7 @@ juerfe.buzz yasaracarfenlisesi.com +# https://github.com/AdguardTeam/AdguardFilters/issues/173830 abadfaheff4.com afflat3a2.com afflat3a3.com @@ -26326,6 +26654,7 @@ hitnslab.info +# ——— Temp hotfix for https://github.com/AdguardTeam/AdGuardHome/issues/1835 ——— @@ -26335,6 +26664,8 @@ hitnslab.info # ——— Anti-'Malware comments' (Currently Disqus-specific) ——— +# https://myip•ms/info/limitexcess +# https://myip•ms/info/memberarea/My_Account•html # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— @@ -26345,6 +26676,7 @@ if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-ma # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) webadvisorc.rest.gti.mcafee.com mip.api.mcafeewebadvisor.com +# https://get•adobe•com/no/reader/ # Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») @@ -26357,6 +26689,8 @@ mip.api.mcafeewebadvisor.com # All legitimate Pac-Man games would use "pac-man" links with a dash +# https://eclypsium•com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/ +http://mb.download.gigabyte.com/FileList/Swhttp/LiveUpdate4 # (Presumably anonymous) E-mail tips s.free.fr @@ -26368,6 +26702,7 @@ trmff.wpengine.com +# https://github.com/AdguardTeam/AdguardFilters/issues/145513 diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 7dc40c844..1c4e77338 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,38 +1,49 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) +# Version: 05October2024v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. +# Users of Pi-Hole FTL 5.22 and later are STRONGLY RECOMMENDED to switch to the version at https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, unless otherwise proven. !#if !env_mv3 +# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists +# Homepage: https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#-english # ——— Bad top-level domains ——— # You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you. # When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. # Tokelau (Put on break due to too many whitelistings being needed) -!!!||tk + # Mali (Put on break due to too many and too frequent whitelistings being needed) -!!!||ml + # Equatorial Guinea -!!!||gq + # Central African Republic -!!!||cf + # Palau (Put on break due to too many whitelistings being needed) -!!!||pw + # Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever. # International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. -!!!||agency -!!!||gdn -!!!||ooo -!!!||monster -!!!||sbs -!!!||discount -!!!||cfd + + + +# (https://github.com/DandelionSprout/adfilt/issues/999) + +# https://bgp.he•net/AS202492#_prefixes (17/07/2022) + +# https://github.com/AdguardTeam/AdguardFilters/issues/131156 + +# https://github.com/DandelionSprout/adfilt/issues/659 + +# https://github.com/AdguardTeam/AdguardFilters/issues/137635 + # Experimental attempt to cover a few hardcore spam ASNs +# https://github.com/AdguardTeam/AdguardFilters/issues/139667 # ——— You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. ——— @@ -131,14 +142,33 @@ # ——— Links to PC "optimising" "tool" PUPs that'll most likely stuff your PC full of nagware and malware ——— # ¤¤¤ ReImagePlus (Also added to "uBlock Filters - Badware Risks") ¤¤¤ +# https://windowsreport•com/extend-windows-laptop-battery-life/ +# https://appuals•com/fix-error-0x800701e3-on-windows-7-8-1-10/ +# https://ugetfix•com/ask/how-to-fix-windows-store-error-0x8000ffff/ +# https://www•thewindowsclub•com/fix-windows-update-error-0xc1900130-on-windows-10 +# https://www•majorgeeks•com/files/details/patch_my_pc•html +# https://www•2-spyware•com/remove-redirector-gvt1-com•html # ¤¤¤ ScanUtilities ¤¤¤ +# https://www•bynarycodes•com/fix-windows-10-update-error-0x80070006/ # ¤¤¤ Driver Easy ¤¤¤ +# https://www•drivereasy•com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/ +# https://www•drivereasy•com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/ +# https://www•drivereasy•com/knowledge/download-gigabyte-audio-driver/ +# https://www•drivereasy•com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/ +# https://www•drivereasy•com/knowledge/solved-this-display-does-not-support-hdcp/ # ¤¤¤ Slimware DriverUpdate ¤¤¤ +# https://forums•windowscentral•com/ # ¤¤¤ Driverpack Online (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ¤¤¤ 127.0.0.1 google-analytics.com # ¤¤¤ SpyHunter links ¤¤¤ +# https://howtoremove•guide/redirector-gvt1-com-virus-malware-chrome-removal/ +# https://www•2-spyware•com/remove-redirector-gvt1-com•html +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-968070041 +# https://www•cyclonis•com/how-to-create-gmail-account-without-phone-number/ +# https://www•2-viruses•com/remove-ad-spam-press-allow-to-continue +# https://github.com/iam-py-test/my_filters_001/issues/119 @@ -156,6 +186,11 @@ # ¤¤¤ Restoro ¤¤¤ +# https://www•windowsdispatch•com/fix-system-restore-0x81000203-error-code/ +# https://dlldownloads•com/xlive-dll/ +# https://windowsreport•com/find-remove-duplicate-files-windows-10/ +# https://windowsreport•com/how-to-update-roblox/ (08/12/2022) +# https://appuals•com/pr-connect-reset-error/ # ¤¤¤ "Driver" download sites that instead download PUP tools ¤¤¤ 127.0.0.1 driver-soft.com # ¤¤¤ Outbyte ¤¤¤ @@ -173,6 +208,7 @@ +# https://github•com/AdguardTeam/AdguardFilters/issues/58737 # ——— Banner for "MSN New Tab" ——— @@ -212,6 +248,7 @@ 127.0.0.1 witkey.com # ——— Browser extension store entries for notoriously poor or malicious adblocker forks ——— +# Note: Currently the Chrome Web Store entries only work properly for Chrome users on AdGuard for Windows/Mac, due to limitations placed on browser extensions; see https://github.com/gorhill/uBlock/wiki/Privileged-Pages # Chrome Web Store # Mozilla Add-ons # These entries can be used in Firefox with regular browser extensions (uBO|AdGuard Browser Extension|ABP) by opening about:config, removing the "addons.mozilla.com" part from "extensions.webextensions.restrictedDomains", and then creating a new string called "privacy.resistFingerprinting.block_mozAddonManager" (That exact capitalisation must be used) set to (Boolean) true. @@ -254,6 +291,7 @@ 127.0.0.1 discordapp.cam 127.0.0.1 discordap.com +# https://github.com/DevSpen/links/blob/master/src/links.txt @@ -314,6 +352,7 @@ 127.0.0.1 githubuser.com 127.0.0.1 rgithub.com 127.0.0.1 githubt.com +# https://scammer•info/t/discord-nitro-scam-25/87887 127.0.0.1 discorde-nitre.xyz # ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ——— @@ -382,7 +421,10 @@ +# https://github.com/DandelionSprout/adfilt/pull/167 127.0.0.1 forgoprokick.icu +# https://github.com/AdguardTeam/AdguardFilters/issues/124611 +# (https://github.com/DandelionSprout/adfilt/issues/632) 127.0.0.1 inbluson.com 127.0.0.1 bemobtrcks.com @@ -1187,6 +1229,7 @@ !#if !ext_ublock +# https://github.com/DandelionSprout/adfilt/issues/942 @@ -3570,9 +3613,14 @@ !#endif +# https://twitter•com/SUNgoddessOKAMI/status/1221295265195405315 127.0.0.1 deviuser.com +# https://github.com/AdguardTeam/AdguardFilters/issues/61838 +# https://github.com/AdguardTeam/AdguardFilters/issues/61755 +# https://github.com/AdguardTeam/AdguardFilters/issues/61743 +# https://github.com/easylist/easylist/issues/6111 127.0.0.1 watch-video.net 127.0.0.1 code-zp1.com 127.0.0.1 fres-news.com @@ -3628,6 +3676,7 @@ 127.0.0.1 ilo134ulih.com 127.0.0.1 hooligapps.com 127.0.0.1 theonlygames.com +# https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/ 127.0.0.1 notified-today.com 127.0.0.1 antivirus-update.com 127.0.0.1 new-message.cc @@ -3640,16 +3689,28 @@ 127.0.0.1 stay-notified.xyz 127.0.0.1 167.99.249.47 +# https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/ +# https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/ 127.0.0.1 moderncomputer.net +# https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/ 127.0.0.1 version.gratis +# https://maldita•es/malditobulo/2020/11/18/no-no-es-cierto-que-amancio-ortega-haya-invertido-100-millones-en-bitcoin-revolution-es-una-web-falsa/ 127.0.0.1 starpowders.github.io +# https://github.com/AdguardTeam/AdguardFilters/issues/69611 +# https://github.com/AdguardTeam/AdguardFilters/issues/71721 +# https://github.com/AdguardTeam/AdguardFilters/issues/71369 +# https://github.com/AdguardTeam/AdguardFilters/issues/73623 +# https://github.com/AdguardTeam/AdguardFilters/issues/73627 +# https://github.com/AdguardTeam/AdguardFilters/issues/73133 +# https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-428333 127.0.0.1 safe-offers.net +# https://github.com/DandelionSprout/adfilt/issues/188 127.0.0.1 gogle.net 127.0.0.1 quatrefeuillepolonaise.xyz 127.0.0.1 extragifis.site @@ -3670,6 +3731,7 @@ 127.0.0.1 103.224.182.251 +# https://github.com/DandelionSprout/adfilt/issues/193 127.0.0.1 holescontracting.com 127.0.0.1 doggroomingnews.com 127.0.0.1 5.79.71.205 @@ -3689,7 +3751,9 @@ 127.0.0.1 178.162.217.107 +# https://github.com/DandelionSprout/adfilt/issues/195 127.0.0.1 logicalrecord.com +# https://github.com/DandelionSprout/adfilt/issues/196 127.0.0.1 secureportal.online 127.0.0.1 accbaus.com 127.0.0.1 aobinternational.com @@ -3706,7 +3770,9 @@ 127.0.0.1 108.170.52.156 +# https://github.com/DandelionSprout/adfilt/issues/198 127.0.0.1 mysecrethoookup.com +# https://www•bleepingcomputer•com/virus-removal/ (18/06/2021) 127.0.0.1 toksearches.xyz 127.0.0.1 smashapps.net 127.0.0.1 smashappsearch.com @@ -3718,6 +3784,7 @@ 127.0.0.1 searchinggood.com 127.0.0.1 searchprivacyplus.com 127.0.0.1 powersmashsearch.com +# https://www•bleepingcomputer•com/virus-removal/remove-please-allow-to-watch-the-video 127.0.0.1 1000-dollar.cash 127.0.0.1 1000-eur.cash 127.0.0.1 bokerstars.com @@ -3814,7 +3881,9 @@ 127.0.0.1 213.227.149.216 +# https://twitter•com/adamziaja/status/1252234957679808513 127.0.0.1 wow-robotics.xyz +# https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html 127.0.0.1 deepe.icu 127.0.0.1 google-analytics.buzz 127.0.0.1 intr0.cyou @@ -3828,7 +3897,9 @@ 127.0.0.1 ribinski.us 127.0.0.1 5.188.62.36 +# https://github.com/DandelionSprout/adfilt/issues/223 127.0.0.1 speedupmypcfree.com +# https://github.com/DandelionSprout/adfilt/issues/224 127.0.0.1 flomongteren.com 127.0.0.1 gedinetuwus.com 127.0.0.1 ikitrenesturi.com @@ -3862,19 +3933,25 @@ 127.0.0.1 paymetconfirm.com 127.0.0.1 69.49.231.244 +# https://movsb•0x0•st/users/mia 127.0.0.1 vid.me 127.0.0.1 5starhdporn.com +# https://github.com/DandelionSprout/adfilt/issues/228 127.0.0.1 helooworld.us +# https://github.com/DandelionSprout/adfilt/issues/241 127.0.0.1 vrthcobj.com +# https://github.com/DandelionSprout/adfilt/issues/244 127.0.0.1 rblxexploits.net 127.0.0.1 youneerdmo.top 127.0.0.1 image-find.com +://linkvertise.com/23001/OxygenU 127.0.0.1 usegetmarketings.com 127.0.0.1 bestappever4you.com 127.0.0.1 thecrs.club +# https://github.com/DandelionSprout/adfilt/issues/251#issue-974102211 127.0.0.1 nanorgin.ydns.eu 127.0.0.1 cocinasintonterias.com 127.0.0.1 blackpass.info @@ -3885,6 +3962,7 @@ 127.0.0.1 thegymmum.com 127.0.0.1 pcspeedcat.com 127.0.0.1 auslogics.com +# https://github.com/DandelionSprout/adfilt/issues/253 127.0.0.1 mediaget.com 127.0.0.1 media-get.com 127.0.0.1 media-get.ru @@ -3899,7 +3977,9 @@ 127.0.0.1 23.111.88.207 +# https://github.com/DandelionSprout/adfilt/issues/254 127.0.0.1 onesafesoftware.com +# https://github.com/DandelionSprout/adfilt/issues/257 127.0.0.1 185.158.250.239 127.0.0.1 192.169.69.25 @@ -3927,15 +4007,24 @@ 127.0.0.1 artofads.co 127.0.0.1 pc-my-protection.xyz 127.0.0.1 beta-news.org +# https://github.com/DandelionSprout/adfilt/pull/266 +# https://www•virustotal•com/gui/domain/kirstialechulbard•space/relations +# https://www•virustotal•com/gui/ip-address/198•54•117•244/relations 127.0.0.1 dashwoodestates.com +# http://vxvault•net/ViriFiche•php?ID=44013 +# https://www•virustotal•com/gui/url/8066b87ad10ddb5466bc307bb48454139572f6c8c8f80a9734275ac89cf966af/detection +# https://www•virustotal•com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection +# https://safeweb•norton•com/report/show?url=192•3•110•170 127.0.0.1 192.3.110.170 +# https://forums•malwarebytes•com/topic/278209-removal-instructions-for-socialsearchconverter/ 127.0.0.1 socialsearchconverter.com 127.0.0.1 install.socialsearchconverter.com 127.0.0.1 feed.socialsearchconverter.com 127.0.0.1 api.socialsearchconverter.com 127.0.0.1 notify-service.com 127.0.0.1 install.stream-all.com +# Copied over from https://github.com/uBlockOrigin/uAssets/issues/9848 127.0.0.1 gghacks.com 127.0.0.1 rewardsgiantusa.com 127.0.0.1 promotionsonlineusa.com @@ -3947,8 +4036,12 @@ 127.0.0.1 mediafiire.com 127.0.0.1 d1xkyo9j4r7vnn.cloudfront.net 127.0.0.1 onlinepromotionsusa.com +# https://securelist•com/apkpure-android-app-store-infected/101845/ +# https://www•virustotal•com/gui/url/866a25343864f03dc5a10105fda523bfbb6ed09c486d07fd31ca2b5306440089/detection 127.0.0.1 wcf.seven1029.com +# https://www•virustotal•com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection 127.0.0.1 foodin.site +# https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 127.0.0.1 totalav.com # owned by the same people 127.0.0.1 totalwebshield.com @@ -3958,25 +4051,46 @@ 127.0.0.1 totaladblock.com 127.0.0.1 totaladblocker.xyz 127.0.0.1 totalwebshield.xyz +# https://www•virustotal•com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community +# https://www•virustotal•com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection +# https://www•virustotal•com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection 127.0.0.1 91.241.19.38 +# https://www•virustotal•com/gui/url/46e095c35d83e2dd0b98df4b5844d3d87948de0c930a618600121020a514c801/detection +# https://safeweb•norton•com/report/show?url=telete•in +# https://www•siteadvisor•com/sitereport•html?url=telete•in 127.0.0.1 telete.in +# https://www•virustotal•com/gui/file/e63b2d03e3fee2d538f8bd721b61dd3641284fa941087d846dea6f15cab40308/community +# https://www•virustotal•com/gui/url/fbbc8a671bff32539bd829a76f6df9f364a21ac2279922e64e3ec494a1669dd3/detection 127.0.0.1 kiff.tech +# https://www•virustotal•com/gui/domain/kiff•tech/relations +# https://www•virustotal•com/gui/url/dc038496b1b5358b97f89440135ec91258b406c40859a2cd95983dc7a81e0cfa/detection 127.0.0.1 45.90.58.90 +# https://www•virustotal•com/gui/file/e565ba89d034418fd26a5f642f6eeee4d72ee3b8dc69523419b7ca8dfd452730/community +# https://www•virustotal•com/gui/url/e3a9189a1e1256beba8e0fc3abfeab6acb09f7f8cabfd973e22be9f77bb6886f/detection 127.0.0.1 95.85.89.98 +# https://github.com/DandelionSprout/adfilt/issues/267 127.0.0.1 tekhacks.net +# https://github.com/DandelionSprout/adfilt/pull/278 +# https://www.virustotal.com/gui/file/da75c85fe037f9ff9ebbbd0b37dd2ff154f5e70a0dc6870286e0d3df6b8f246f/community 127.0.0.1 139.28.37.49 +# https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community 127.0.0.1 35.194.188.37 +# https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community 127.0.0.1 hydro-ca.link +# https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community 127.0.0.1 91.243.121.19 +# https://www.virustotal.com/gui/file/9f154115fa8045aa05f15f7cd1de9623ebe32e8ea400279ecb5dfa3596952e3b/community 127.0.0.1 103.169.90.205 +# https://github.com/DandelionSprout/adfilt/pull/281 +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 127.0.0.1 125.44.43.45 127.0.0.1 182.121.8.240 @@ -3997,7 +4111,9 @@ 127.0.0.1 27.220.253.78 +# https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community 127.0.0.1 esetnode32-antiviru.ydns.eu +# https://www•joesandbox•com/analysis/486636/0/html#domains 127.0.0.1 aieov.com # Relations to the original domain 127.0.0.1 192.3.194.242 @@ -4009,12 +4125,15 @@ 127.0.0.1 lefteriskkokkiskikinew.ydns.eu 127.0.0.1 nan.ydns.eu 127.0.0.1 hjjhjkk.ydns.eu +# https://github.com/blocklistproject/Lists/issues/497 127.0.0.1 tweakbit.com 127.0.0.1 pcspeedup.en.softonic.com # Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry 127.0.0.1 1redirb.com +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931700117 127.0.0.1 retailproductsusa.com 127.0.0.1 cloud-repos.store +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931742337 (Initial batch) 127.0.0.1 adtrk18.com 127.0.0.1 jpgtrk.com 127.0.0.1 pnghst.com @@ -4025,6 +4144,7 @@ 127.0.0.1 natnlconsmrctr.com 127.0.0.1 jsontdsexit.com 127.0.0.1 therewardboost.com +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931753495 127.0.0.1 agkn.com 127.0.0.1 best-prizes.life 127.0.0.1 cloud-storage.store @@ -4032,18 +4152,21 @@ 127.0.0.1 findanswersnow.net 127.0.0.1 gpush.cogocast.net 127.0.0.1 info.leadid.com -!!!||listrakbi.com + 127.0.0.1 partner.mediawallahscript.com 127.0.0.1 signupandturnyourscreenoffsafepowernow.date 127.0.0.1 tag.cogocast.net 127.0.0.1 tag.yieldoptimizer.com 127.0.0.1 traversedlp.com 127.0.0.1 cpmstatsart.com +# https://github.com/DandelionSprout/adfilt/issues/287 127.0.0.1 youtuba.com 127.0.0.1 polyhymnia-mar.com 127.0.0.1 virpropcnow.xyz 127.0.0.1 avprotectionoverview.com +# (https://github.com/DandelionSprout/adfilt/issues/904) +# https://github.com/DandelionSprout/adfilt/issues/288 127.0.0.1 forwrdnow.com 127.0.0.1 7lyonline.com 127.0.0.1 safelyonline.net @@ -4057,19 +4180,27 @@ 127.0.0.1 trkk4.com 127.0.0.1 hosting-redirect.com +# https://github.com/DandelionSprout/adfilt/pull/289 127.0.0.1 gogles.com 127.0.0.1 flexroll.online 127.0.0.1 aquariuminn.com 127.0.0.1 army-glo.scrollingsystem.com 127.0.0.1 mcafee12.tt.omtrdc.net 127.0.0.1 trolleydrop.info +# https://www•virustotal•com/gui/ip-address/70•32•1•32/relations 127.0.0.1 cd.org +# https://www•virustotal•com/gui/file/78f490e503c86eaaff5760197b9ff5308ed6e03161af13194a6c1e0cd95422de/community +# https://github.com/DandelionSprout/adfilt/commit/f7f114945c83b339be5cdd848e229680d9918abb#commitcomment-57642875 127.0.0.1 23.94.26.138 +# https://github.com/DandelionSprout/adfilt/pull/298 +# https://www•virustotal•com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community 127.0.0.1 205.185.126.200 +# https://www•virustotal•com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community 127.0.0.1 185.243.56.167 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 127.0.0.1 123.10.224.135 127.0.0.1 59.47.187.147 @@ -4164,7 +4295,9 @@ 127.0.0.1 112.30.110.58 +# https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community 127.0.0.1 pcae.de +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 127.0.0.1 117.196.49.21 127.0.0.1 115.55.54.234 @@ -4173,11 +4306,16 @@ 127.0.0.1 182.59.69.21 +# https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community 127.0.0.1 chip-secured-download.de +# https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb # Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin 127.0.0.1 nctylivpwhpby.com 127.0.0.1 phhitgjxsit.com +# https://www•virustotal•com/gui/url/b2936e74f35940d2f09cabf4e089a0d655e62a5fc08ad32e1fae79a62683683f?nocache=1 127.0.0.1 saimission.org +# https://www•virustotal•com/gui/url/4c2c3cf2e4f5b9ac9765eb9c58f2756d8f0f4632ec707107afe3c111f4749025?nocache=1 +# https://www•virustotal•com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations 127.0.0.1 driversupport.com # A PUP and scam website 127.0.0.1 mycleanpc.com @@ -4188,18 +4326,27 @@ # The main website for the MyCleanPC company 127.0.0.1 realdefen.se # Vermilion Strike +# https://www•virustotal•com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations 127.0.0.1 160.202.163.100 +# https://www•virustotal•com/gui/ip-address/160•202•163•100/relations 127.0.0.1 microsoftkernel.com 127.0.0.1 microsofthk.com +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-938167311 127.0.0.1 machinesalaver.net +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-940500664 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-944612753 127.0.0.1 pushbizapi.com +# https://github.com/DandelionSprout/adfilt/pull/303 +# https://www•virustotal•com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community 127.0.0.1 45.95.169.115 +# https://www•virustotal•com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community 127.0.0.1 45.148.120.80 +# https://www•virustotal•com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community 127.0.0.1 85.239.33.9 # Relations to the domain above @@ -4217,17 +4364,24 @@ 127.0.0.1 c4ase-verified9932.serveftp.com 127.0.0.1 1log-wellsfargo.serveftp.com 127.0.0.1 eposcardokubo.serveftp.com +# https://www•virustotal•com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community 127.0.0.1 107.173.176.183 +# https://www•virustotal•com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community 127.0.0.1 45.148.120.171 +# https://twitter•com/soranker0/status/1449491402409185283 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 127.0.0.1 free-softs.net +# https://github.com/iam-py-test/investigations/blob/main/2021/10/24/1.md#html-capture 127.0.0.1 cloud-apps.store +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-951321929 127.0.0.1 159.148.186.228 +# https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains 127.0.0.1 yotube.com 127.0.0.1 r-tb.com 127.0.0.1 cdn.hoood.info @@ -4237,18 +4391,23 @@ 127.0.0.1 welcomejohncena.pro 127.0.0.1 security-scanner.xyz 127.0.0.1 news-back.org +# https://github.com/iam-py-test/investigations/blob/main/2021/11/1/1.md 127.0.0.1 kokotrokot.com +# https://www•upwork•com/freelance-jobs/apply/Integarte-push-notification-for-chrome_~013c73ed9282225184/ 127.0.0.1 mugrikees.com 127.0.0.1 alpha-news.org +# https://github.com/iam-py-test/investigations/blob/main/2021/11/3/1.md 127.0.0.1 safejokesearch.com 127.0.0.1 mediadlvr.com 127.0.0.1 youvetube.com 127.0.0.1 youutube.com +# https://github.com/DandelionSprout/adfilt/pull/348 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 127.0.0.1 39.83.80.247 127.0.0.1 68.197.33.124 @@ -4311,8 +4470,12 @@ 127.0.0.1 183.188.192.55 +# https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community 127.0.0.1 198.23.255.14 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs 127.0.0.1 freedownloadfiles.org 127.0.0.1 querahinor.xyz 127.0.0.1 trumops.com @@ -4321,6 +4484,7 @@ 127.0.0.1 172.67.186.189 +# https://www•virustotal•com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 127.0.0.1 inconclusive-pyrite-grandparent.glitch.me 127.0.0.1 delicate-tame-angora.glitch.me 127.0.0.1 secureinvoice.glitch.me @@ -4331,7 +4495,9 @@ 127.0.0.1 aquamarine-cotton-impala.glitch.me 127.0.0.1 mature-periwinkle-advantage.glitch.me 127.0.0.1 tough-numerous-lemur.glitch.me +# https://scammer•info/t/mcafee-phish/83725 127.0.0.1 securefirst.us-east-1.linodeobjects.com +# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community 127.0.0.1 39.65.72.211 127.0.0.1 42.238.151.197 @@ -4340,29 +4506,41 @@ 127.0.0.1 115.56.169.134 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md 127.0.0.1 yasir252.com 127.0.0.1 safelink.kadal.club 127.0.0.1 bedrapiona.com 127.0.0.1 dozubatan.com 127.0.0.1 toglooman.com 127.0.0.1 ultimate-detection.com +# https://github.com/uBlockOrigin/uAssets/issues/10536 127.0.0.1 tw-goldenwinner-57.com +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-974886953 127.0.0.1 e.datingmap.top 127.0.0.1 datingmap.top 127.0.0.1 tonightshookup.com 127.0.0.1 members.tonightshookup.com 127.0.0.1 t.tonightshookup.com 127.0.0.1 yourladiefun.life +# https://www•virustotal•com/gui/url/a2524bba49ae71297d2b408b30d058700d9c80b5b1154924cafe190ec3e605a6/detection 127.0.0.1 newrrb.bid +# https://www•virustotal•com/gui/file/2b2628a50d3b39b0fa2395d487bf62b00e37cdae847ff76ee58399bbe4e9f7b3/community 127.0.0.1 194.87.138.20 +# https://www•virustotal•com/gui/file/b320bc7a9151d70daca038c4356ca89bfcd4918bcd6f0f73683a27a6a72467ae/community 127.0.0.1 103.167.92.73 +# https://www•virustotal•com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community 127.0.0.1 bursakulis.com +# https://www•virustotal•com/gui/url/b333c49efa4d399e65c5e2d96a905b380acbca58a3e3052b7bd7cfcb3e0e81ee 127.0.0.1 610418.selcdn.ru +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-977912975 +# https://www•tv2•no/nyheter/14368524/ 127.0.0.1 alexstewartinternationalltd.rw 127.0.0.1 vps.re +# https://www•tek•no/i/wOVv0o/ 127.0.0.1 21steditionnaturalgh.com +# https://github.com/iam-py-test/investigations/blob/main/2021/11/24/1.md 127.0.0.1 macsoftwarez.com 127.0.0.1 ec2-3-238-75-201.compute-1.amazonaws.com 127.0.0.1 ec2-54-177-49-112.us-west-1.compute.amazonaws.com @@ -4370,9 +4548,13 @@ 127.0.0.1 ec2-44-192-106-88.compute-1.amazonaws.com 127.0.0.1 ec2-52-53-211-120.us-west-1.compute.amazonaws.com 127.0.0.1 mygametoa.com +# https://github.com/iam-py-test/investigations/blob/main/2021/11/25/1.md +# https://github.com/uBlockOrigin/uAssets/pull/10599 127.0.0.1 fasterfiles.net 127.0.0.1 yunosurveys.com +# https://github.com/uBlockOrigin/uAssets/pull/10620 127.0.0.1 shadyclient.net +# https://www•virustotal•com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community 127.0.0.1 58.249.74.79 127.0.0.1 27.45.14.109 @@ -4389,14 +4571,20 @@ 127.0.0.1 163.179.168.44 +# https://github.com/uBlockOrigin/uAssets/pull/10647 +# https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md 127.0.0.1 money-mod.com 127.0.0.1 reykijnoac.com 127.0.0.1 totalnicefeed.com +# https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md 127.0.0.1 bestlifeoffer20.com +# https://scammer•info/t/password-stealer/84348 +# https://bazaar•abuse•ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/ +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 127.0.0.1 110.89.59.135 127.0.0.1 113.116.89.1 @@ -4419,38 +4607,61 @@ 127.0.0.1 61.52.79.32 +# https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 +# https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 127.0.0.1 lowseelan.com +# https://www•virustotal•com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community +# https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community +# https://github.com/DandelionSprout/adfilt/pull/395 +# https://www•huorong.cn/info/1531309921141.html 127.0.0.1 kuaizip.com +# https://www•huorong.cn/info/1618397948649.html - possible malware # ||zhuangjizhuli.com # ||zhuangjizhuli.net +# https://github.com/uBlockOrigin/uAssets/pull/9656 127.0.0.1 geekotg.com +# https://www•huorong.cn/info/1526627586130.html 127.0.0.1 xiaobaixitong.com +# https://www•huorong.cn/info/1577158839403.html 127.0.0.1 daque.cn +# https://www•huorong.cn/info/1598957552515.html 127.0.0.1 dabaicai.com +# https://www•huorong.cn/info/1617368984641.html 127.0.0.1 qqfzn.com +# https://github.com/uBlockOrigin/uAssets/pull/10017 127.0.0.1 flash.cn +# https://www•nrk.no/vestfoldogtelemark/1.15750360 127.0.0.1 dundeehills.group !+ NOT_OPTIMIZED 127.0.0.1 132.148.220.142 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-986306768 127.0.0.1 chess-progress.ru 127.0.0.1 ouhastay.net +# https://scammer.info/t/there-are-things-in-the-game-that-will-interest-you-trojan/84908 127.0.0.1 askara.super.site +# https://scammer.info/t/fake-facebook-login-page/84939 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-988127908 +# https://www•tek.no/i/lVeQAe/ +# https://www•nkom.no/aktuelt/ikke-trykk-pa-lenker-i-sms--for-du-er-helt-sikker/ 127.0.0.1 eccolabgroup.com 127.0.0.1 galerijajava.ba 127.0.0.1 p-stn.net +# https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md 127.0.0.1 haxpc.net 127.0.0.1 52.53.243.52 127.0.0.1 34.201.22.10 +# https://scammer.info/t/crypto-scammers-onceagain/85354 +# https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community 127.0.0.1 123.10.225.196 127.0.0.1 122.192.106.84 @@ -4467,13 +4678,17 @@ 127.0.0.1 118.75.87.102 +# https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md 127.0.0.1 onemacusa.net +# https://github.com/DevSpen/links/pull/3 127.0.0.1 systemupdatecontrol.com +# https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ 127.0.0.1 mozicrack.com 127.0.0.1 download-srvr.xyz 127.0.0.1 134.122.115.190 127.0.0.1 cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com +# https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 127.0.0.1 viewty.xyz 127.0.0.1 landing.marketstm.com # fake MediaFire scam domains @@ -4482,6 +4697,7 @@ 127.0.0.1 findes.co +# https://bazaar.abuse.ch/sample/84d93b2fd2597da5d611165cbad0b252569a837c56a94a42849f2bedc8af033a/ 127.0.0.1 freeprosoftz.com @@ -4490,9 +4706,11 @@ 127.0.0.1 new-meet-dating.life 127.0.0.1 wellhello.com +# https://github.com/AdguardTeam/AdguardFilters/issues/103475 127.0.0.1 ru.com 127.0.0.1 141.8.226.34 +# https://github.com/AdguardTeam/AdguardFilters/issues/108571 127.0.0.1 ston-app.com # fake human verification scam # start form - reported for abuse @@ -4504,7 +4722,9 @@ 127.0.0.1 d13pxqgp3ixdbh.cloudfront.net # Other 127.0.0.1 crashfixes.com +# https://www•virustotal•com/gui/url/c25fe34c05cc8e9136027a67c277e175a5d6e35af921ee37bad98bdfeea6a2f9/community 127.0.0.1 splendid-fallacious-anaconda.glitch.me +# https://www•virustotal•com/gui/file/9d40ae0439ddc594b2cf64e21ad0fdea9bb440524298e3a6bcfcc1fb417f1ed2/relations 127.0.0.1 91.240.118.172 # "Press Allow to continue" @@ -4516,17 +4736,22 @@ 127.0.0.1 lucymods.com 127.0.0.1 gluegames.xyz +# https://twitter•com/iam_py_test/status/1496259425493225472 +# https://github.com/AdguardTeam/AdguardFilters/issues/111970 +# https://bazaar.abuse.ch/sample/d7308dab0110ae3bc79fd15024f5ccfcbd6e676b7c42b27a0112506e8357a6dc/ → https://app.any.run/tasks/bc53e7a9-5fd7-4682-894d-11e48e9ea89a# 127.0.0.1 pccrackworld.com 127.0.0.1 calsign.xyz 127.0.0.1 jwq98u.xyz 127.0.0.1 nhskuhiuscja.xyz +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1074966240 127.0.0.1 melding.link +# https://twitter•com/MBThreatIntel/status/1509956416311742464 127.0.0.1 xposednews.xyz 127.0.0.1 tomguide.xyz 127.0.0.1 eronews.xyz @@ -4542,11 +4767,13 @@ 127.0.0.1 maanews.xyz 127.0.0.1 newsdeals.xyz 127.0.0.1 dreamdigimedia.blogspot.com +# https://bazaar.abuse.ch/sample/b959fb160dac2a15b8e65c15e2b1738d356c03e13623588bc70aab825c57660a/ 127.0.0.1 activatorwin.com 127.0.0.1 freeversioncrack.com 127.0.0.1 top3hostngc.xyz 127.0.0.1 198.199.120.251 +# https://www•telia.no/kundeservice/mobil/malware-flubot-android/ !+ NOT_OPTIMIZED # A Discord conversation I had about Throneful @@ -4572,6 +4799,7 @@ 127.0.0.1 195.201.253.131 +# The bottom download button on https://www•sushichop•com/ 127.0.0.1 installiq.com 127.0.0.1 specgoal.com 127.0.0.1 sandhyapi.online @@ -4599,6 +4827,7 @@ 127.0.0.1 96.47.230.70 +# https://securitytrails•com/list/ns/ns1•fastthinkingdns•com 127.0.0.1 telemetry-urs-microsoft.com @@ -4609,8 +4838,10 @@ !#endif +# https://github.com/AdguardTeam/AdguardFilters/issues/121544 127.0.0.1 trafredirtds.com +# https://github.com/AdguardTeam/AdguardFilters/issues/121772 127.0.0.1 pu020ev.com 127.0.0.1 kadam.net 127.0.0.1 kdtrk.net @@ -4636,11 +4867,16 @@ 127.0.0.1 viiyhn.com 127.0.0.1 31.220.27.134 +# https://github.com/AdguardTeam/AdguardFilters/issues/122757 +# https://github.com/AdguardTeam/AdguardFilters/issues/123544 127.0.0.1 saferedirects.xyz 127.0.0.1 online-guard.com +# https://twitter•com/iam_py_test/status/1545164642346930176 127.0.0.1 amazon-security-info.lnk.to +# https://github.com/AdguardTeam/AdguardFilters/issues/123968 +# https://github.com/AdguardTeam/AdguardFilters/issues/124620 @@ -4934,6 +5170,7 @@ 127.0.0.1 95.211.26.202 +# https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 127.0.0.1 bzsx.link 127.0.0.1 dfvd.link 127.0.0.1 dsvs.link @@ -4951,9 +5188,12 @@ 127.0.0.1 165.227.168.212 !#if !ext_ublock +# https://www•reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/ !#endif +# https://dinside.dagbladet.no/mobil/ikke-la-deg-friste/76730599 127.0.0.1 k-yw.com +# https://github.com/AdguardTeam/AdguardFilters/issues/125285 127.0.0.1 fearconic.com 127.0.0.1 atobunderevenes.com 127.0.0.1 ferrantrative.com @@ -4995,6 +5235,7 @@ 127.0.0.1 galantinkoling.com 127.0.0.1 23.81.64.183 +# https://github.com/AdguardTeam/AdguardFilters/issues/125300 127.0.0.1 zikroarg.com 127.0.0.1 dooloust.net 127.0.0.1 vooshagy.net @@ -5165,6 +5406,7 @@ 127.0.0.1 mobytrks.com 127.0.0.1 139.45.197.236 +# https://github.com/AdguardTeam/AdguardFilters/issues/128029 127.0.0.1 becovi.com 127.0.0.1 becovi.co.uk 127.0.0.1 shopfirststop.com @@ -5197,16 +5439,21 @@ 127.0.0.1 147.135.253.55 +# https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade) 127.0.0.1 bnbdeal.net +# https://github.com/AdguardTeam/AdguardFilters/issues/129414 !+ NOT_OPTIMIZED !+ NOT_OPTIMIZED +# https://github.com/AdguardTeam/AdguardFilters/issues/131156 127.0.0.1 146.19.169.98 127.0.0.1 146.19.169.99 +# https://github.com/AdguardTeam/AdguardFilters/issues/132079 +# https://github.com/AdguardTeam/AdguardFilters/issues/134355 127.0.0.1 1000girl.com 127.0.0.1 1000islandsinfo.com 127.0.0.1 100blackmenkc.org @@ -6978,12 +7225,14 @@ 127.0.0.1 2c236979-b1bb-4c7a-915c-df74dbad0d8c.s3.ap-northeast-2.amazonaws.com 127.0.0.1 69.162.80.56 +# https://github.com/AdguardTeam/AdguardFilters/issues/134903 127.0.0.1 smartlink.name # Random Discord servers 127.0.0.1 162.241.124.200 +# https://github.com/AdguardTeam/AdguardFilters/issues/135815 127.0.0.1 adsstar.in 127.0.0.1 clickcafe.in 127.0.0.1 earnme.club @@ -7000,6 +7249,7 @@ 127.0.0.1 webhostingtips.club 127.0.0.1 157.90.71.190 +# https://github.com/AdguardTeam/AdguardFilters/issues/135924 127.0.0.1 abazelfan.com 127.0.0.1 abburmyer.com 127.0.0.1 abyamaskor.com @@ -7237,8 +7487,11 @@ 127.0.0.1 zoawufoy.net 127.0.0.1 139.45.197.239 +# https://github.com/AdguardTeam/AdguardFilters/issues/136390 +# https://app.any.run/tasks/67907c11-6877-4c38-932f-2cf09ee4e434 127.0.0.1 adblock-chrome.net +# https://github.com/AdguardTeam/AdguardFilters/issues/137635 127.0.0.1 aaolh.icu 127.0.0.1 aboqs.icu 127.0.0.1 acukl.icu @@ -7443,6 +7696,7 @@ 127.0.0.1 link.sv 127.0.0.1 4.fo 127.0.0.1 kckb.st +# https://github.com/AdguardTeam/AdguardFilters/issues/139106 127.0.0.1 loadingnow.me 127.0.0.1 gsecurecontent.com @@ -7456,11 +7710,13 @@ 127.0.0.1 100.20.13.49 +# https://github.com/AdguardTeam/AdguardFilters/issues/139667 127.0.0.1 goldmesoil.live 127.0.0.1 51.68.87.229 127.0.0.1 f9dle.skin 127.0.0.1 kilpa2017.fi +# https://github.com/DandelionSprout/adfilt/issues/747 127.0.0.1 2022crucialcatch.store 127.0.0.1 adidascostarica.com 127.0.0.1 adidasencostarica.com @@ -8475,6 +8731,7 @@ !#endif +# https://github.com/DandelionSprout/adfilt/issues/748 @@ -9214,6 +9471,7 @@ !#endif +# https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/ @@ -9253,6 +9511,8 @@ 127.0.0.1 91.229.23.200 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872 +# https://github.com/AdguardTeam/AdguardFilters/issues/144514 127.0.0.1 attractbestbonuses.life 127.0.0.1 attractbonus.life 127.0.0.1 best-prize.life @@ -9315,11 +9575,13 @@ 127.0.0.1 194.110.247.242 +# https://new.reddit.com/r/engrish/comments/10zs6f6/low_budget_scam/ 127.0.0.1 ups-addressed.me 127.0.0.1 ups-quote.me 127.0.0.1 meta-whatsapp.me 127.0.0.1 54.219.218.169 +# https://new.reddit.com/r/engrish/comments/10z8r2u/well_you_tried/ 127.0.0.1 0365alert.com 127.0.0.1 0365online.com 127.0.0.1 365-notifcation.com @@ -9751,6 +10013,7 @@ 127.0.0.1 yourorderupdate.com 127.0.0.1 64.132.201.92 +# https://www•adressa.no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener 127.0.0.1 acessmygov.online 127.0.0.1 centerlinkmygov.com 127.0.0.1 centierssl.us @@ -9773,6 +10036,7 @@ 127.0.0.1 209.141.51.49 127.0.0.1 post-norway.web.app +# https://github.com/AdguardTeam/AdguardFilters/issues/142955 127.0.0.1 propellerclick.com 127.0.0.1 abclefabletor.com 127.0.0.1 abgligarchan.com @@ -10247,6 +10511,7 @@ !#if !ext_ublock !#endif +# https://github.com/AdguardTeam/AdguardFilters/issues/143281 127.0.0.1 academic-information.com 127.0.0.1 academicvast.com 127.0.0.1 amused-ground.com @@ -10370,7 +10635,10 @@ 127.0.0.1 208.88.225.119 +# https://github.com/AdguardTeam/AdguardFilters/issues/144823 !+ NOT_OPTIMIZED +:// +# https://github.com/AdguardTeam/AdguardFilters/issues/145513 127.0.0.1 achilles-par.com 127.0.0.1 adrastos-eli.com 127.0.0.1 aegid-bal.com @@ -10476,6 +10744,8 @@ 127.0.0.1 54.204.83.105 +# https://github.com/DandelionSprout/adfilt/issues/808 +# https://www•mandiant.com/resources/blog/tracking-evolution-gootloader-operations (26/01/2023) 127.0.0.1 jonathanbartz.com 127.0.0.1 jp.imonitorsoft.com 127.0.0.1 junk-bros.com @@ -10502,6 +10772,7 @@ 127.0.0.1 92.204.160.240 +# https://github.com/AdguardTeam/AdguardFilters/issues/148560 # Comments on Slack 127.0.0.1 antivirussprotection.com @@ -10715,7 +10986,9 @@ 127.0.0.1 zondeucearixes.com 127.0.0.1 85.17.80.16 +# https://www•adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull 127.0.0.1 sitey.me +# https://github.com/AdguardTeam/AdguardFilters/issues/151479 127.0.0.1 agazpeppily.live 127.0.0.1 agraffesalps.com 127.0.0.1 banteryquartin.com @@ -10763,6 +11036,7 @@ 127.0.0.1 tempuracubbies.life 127.0.0.1 toluatebrazee.com 127.0.0.1 uppilequavers.website +# https://github.com/AdguardTeam/AdguardFilters/issues/152407 127.0.0.1 topmoneysurvey.com 127.0.0.1 awarded-best-vpn.com 127.0.0.1 best-finance-now.com @@ -10859,12 +11133,14 @@ 127.0.0.1 194.63.143.96 +# https://github.com/AdguardTeam/AdguardFilters/issues/152945 127.0.0.1 moneystartup.live 127.0.0.1 fintechbest.online !#if !ext_ublock !#endif +# https://github.com/AdguardTeam/AdguardFilters/issues/154701 127.0.0.1 algazira-updates.com 127.0.0.1 articles-news-magazine.com 127.0.0.1 bellisimo-news.com @@ -11101,6 +11377,7 @@ 127.0.0.1 109.206.168.17 +# https://github.com/AdguardTeam/AdguardFilters/issues/155298 127.0.0.1 cadstoppam.live 127.0.0.1 cottodwin.live 127.0.0.1 cumwaysroe.live @@ -11118,11 +11395,13 @@ 127.0.0.1 57.128.71.215 +# https://github.com/AdguardTeam/AdguardFilters/issues/155936 127.0.0.1 truanet.com 127.0.0.1 rumadel.com !#if !ext_ublock !#endif +# https://github.com/AdguardTeam/AdguardFilters/issues/156487 127.0.0.1 apigroup.xyz 127.0.0.1 apihouse.xyz 127.0.0.1 apiinfo.xyz @@ -11166,7 +11445,9 @@ 127.0.0.1 tiujejhexe.click 127.0.0.1 vuegebjexe.click 127.0.0.1 xauhusjexe.click +# https://new.reddit.com/r/engrish/comments/15080hg/a_message_i_just_got_from_a_scammer/ 127.0.0.1 tzn03.me +# https://github.com/AdguardTeam/AdguardFilters/issues/156573 127.0.0.1 707.su 127.0.0.1 aahdxn.com 127.0.0.1 aaxrge.com @@ -11877,6 +12158,7 @@ !#if !ext_ublock !#endif +# https://github.com/AdguardTeam/AdguardFilters/issues/157308 127.0.0.1 abdoser.co.in 127.0.0.1 acelim.co.in 127.0.0.1 adsos.xyz @@ -12253,6 +12535,7 @@ 127.0.0.1 208.91.196.46 +# https://github.com/AdguardTeam/AdguardFilters/issues/158316 127.0.0.1 abashfireworks.com 127.0.0.1 abashinstructor.com 127.0.0.1 abateall.com @@ -16777,6 +17060,8 @@ 127.0.0.1 zapdescendant.com 127.0.0.1 zapprecisionadmire.com 127.0.0.1 zealousstraitcommit.com +:// +# https://github.com/AdguardTeam/AdguardFilters/issues/159157 127.0.0.1 apbbjmp.com 127.0.0.1 apptjmp.com 127.0.0.1 awbbgate.com @@ -16827,8 +17112,11 @@ 127.0.0.1 93.93.51.223 +# https://github.com/AdguardTeam/AdguardFilters/issues/161364 +# (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) 127.0.0.1 github.sale +# https://www•tv2.no/nyheter/innenriks/advarer-ikke-klikk-pa-lenken/16040614/ 127.0.0.1 0nedr1ved0cumentonline.com 127.0.0.1 88godetailsvc.com 127.0.0.1 amexmobileupdate.cc @@ -17052,6 +17340,7 @@ +# https://new.reddit.com/r/engrish/comments/16lg4i1/seems_legit/ 127.0.0.1 authde.us 127.0.0.1 dc-r.us 127.0.0.1 de-po.us @@ -17076,8 +17365,10 @@ 127.0.0.1 103.174.102.240 +# https://github.com/libre-tube/LibreTube/issues/4409 127.0.0.1 libretube.app 127.0.0.1 libretube.net +# https://github.com/RPiList/specials/issues/1353 127.0.0.1 khw6g09fx28k.cfd 127.0.0.1 49gw5gonj143k.click 127.0.0.1 djxd2ox30l7.click @@ -17181,6 +17472,7 @@ 127.0.0.1 i3edtgyu.cfd 127.0.0.1 pqlbh88z7.cfd 127.0.0.1 i3s5qfuvs.cfd +# https://github.com/AdguardTeam/AdguardFilters/issues/167667 @@ -17204,6 +17496,7 @@ +# https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7872103 127.0.0.1 betzykrisesenter.no 127.0.0.1 citra2010oslo.no 127.0.0.1 digiter.no @@ -17219,9 +17512,11 @@ 127.0.0.1 vossblues.no 127.0.0.1 yttersiden.no +# https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 127.0.0.1 38.180.96.244 +# https://github.com/AdguardTeam/AdguardFilters/issues/172569 127.0.0.1 acareewityjh.com 127.0.0.1 accedenonre.xyz 127.0.0.1 adeditiontowritingef.net @@ -17563,6 +17858,7 @@ +# https://github.com/AdguardTeam/AdguardFilters/issues/173925 127.0.0.1 sweedbank-help.com 127.0.0.1 swedbank-account.com 127.0.0.1 levering-ekspedition.network @@ -17909,6 +18205,7 @@ 127.0.0.1 zrl7.com 127.0.0.1 modreminiapk.com +# https://github•com/AdguardTeam/AdguardFilters/issues/176214 127.0.0.1 basicnetworkhistory.com 127.0.0.1 chainedconnections.com 127.0.0.1 chainworkflow.com @@ -17927,6 +18224,8 @@ 127.0.0.1 trafficredirectchain.com 127.0.0.1 108.62.157.10 +# https://github.com/AdguardTeam/FiltersRegistry/issues/925 +# https://github.com/AdguardTeam/FiltersRegistry/pull/927 @@ -17937,6 +18236,7 @@ +# https://github.com/AdguardTeam/AdguardFilters/issues/179170 127.0.0.1 172.240.108.68 127.0.0.1 172.240.108.76 @@ -20933,8 +21233,10 @@ 127.0.0.1 youtrustedprolong.com 127.0.0.1 yydtbpms8tf4.com 127.0.0.1 zipinaccurateoffering.com +# https://github.com/AdguardTeam/AdguardFilters/issues/181966 127.0.0.1 167.71.252.38 +# https://github.com/AdguardTeam/AdguardFilters/issues/183432 127.0.0.1 100carbures.com 127.0.0.1 123ecos.com 127.0.0.1 1win-k.com @@ -22051,6 +22353,7 @@ 127.0.0.1 185.149.120.175 +# https://github.com/AdguardTeam/AdguardFilters/issues/184671 127.0.0.1 2rlive.com 127.0.0.1 afro-melanin.com 127.0.0.1 alatterapistroke.com @@ -22214,6 +22517,7 @@ 127.0.0.1 zircontahafuz.com 127.0.0.1 185.149.120.173 +# https://sol•no/81812194/ / https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-10360231 127.0.0.1 02helpinfo.com 127.0.0.1 02rebill-pending.com 127.0.0.1 0niinebankingrbcroyabank.com @@ -22738,11 +23042,15 @@ 127.0.0.1 208.91.189.203 !#if !ext_ublock +:// !#endif +# https://github.com/AdguardTeam/AdguardFilters/issues/189905 # ——— Standard malware that I stumbled upon on my own ——— +# http://www•toorgle•net/results•php?q=fetishkitsch&security=666 127.0.0.1 downloadprovider.me +# https://www•riverbender•com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877•cfm 127.0.0.1 cash93.com 127.0.0.1 a4alig.com 127.0.0.1 cash03.com @@ -22769,6 +23077,7 @@ 127.0.0.1 push.weo.su 127.0.0.1 traffsend.me 127.0.0.1 wwopenclick.club +# Spam comments at https://www•accountkiller•com/en/delete-htcdev-account 127.0.0.1 azhydroxychloroquine.com 127.0.0.1 wisig.org 127.0.0.1 confrancisyalgomas.com @@ -22780,10 +23089,13 @@ 127.0.0.1 amoxycillin1st.com # The Jerma985 Discord server 127.0.0.1 crazycrabreedville.com +# https://flclever.weebly•com/pixie-hollow-mini-games•html (06/05/2021) 127.0.0.1 messium.info # Various Google searches +://hullcitytigers.com # Various search results for 'kelloggs tresor' in Norwegian (30/05/2021) +# https://fx-onlinee•blogspot•com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj # Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter) 127.0.0.1 malwarecleanerpro.com @@ -22910,6 +23222,7 @@ 127.0.0.1 adorableold.com 127.0.0.1 adornmadeup.com 127.0.0.1 adriftstressful.com +# (https://github.com/DandelionSprout/adfilt/issues/1049) 127.0.0.1 advantagespire.com 127.0.0.1 affableindigestionstruggling.com @@ -24409,6 +24722,7 @@ !#if !ext_ublock +# AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking) @@ -24430,6 +24744,7 @@ !#endif +# https://github.com/AdguardTeam/AdguardFilters/issues/120349 127.0.0.1 dispositionadverb.com 127.0.0.1 wednesdayexpandingbarb.com 127.0.0.1 broadslippery.com @@ -25016,6 +25331,8 @@ 127.0.0.1 abnegationbanquet.com 127.0.0.1 192.243.61.225 +# https://twitter•com/medicinehelp/status/1550250932394409985 +# https://securitytrails•com/list/ip/147•135•16•27 127.0.0.1 acrx.online 127.0.0.1 acrx.org @@ -25072,8 +25389,10 @@ 127.0.0.1 medicinehelp.news 127.0.0.1 147.135.16.27 +# https://www•google.no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img 127.0.0.1 ingeniovirtual.com # Spambot posts on Tumblr (19/09/2022) +# https://scambiofigu.forumcommunity•net/?t=57482915 127.0.0.1 scambiofigu.net # Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious # Google results for 'Katy and Bob: Cake Café powerpc' (04/11/2022) @@ -25160,6 +25479,7 @@ 127.0.0.1 54.36.118.105 +# Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt 127.0.0.1 highlandnews.com 127.0.0.1 genuinescansupport.com 127.0.0.1 diverseflowlink.com @@ -25211,6 +25531,7 @@ 127.0.0.1 carpiesi.com 127.0.0.1 104.206.252.90 +# https://github.com/blocklistproject/Lists/issues/933 127.0.0.1 jNKmS0zFuEh.click 127.0.0.1 pjljo54uk.click 127.0.0.1 v1asy4ncr.click @@ -25223,12 +25544,19 @@ 127.0.0.1 tvbxrr4ym3.click 127.0.0.1 8ebtdbsjsu.click 127.0.0.1 eicxz6jfjaw.click +# https://app.any.run/tasks/679e9afa-eb19-4414-a086-e280a779a448 and https://tria.ge/230217-xd8nksgc9x/behavioral2 127.0.0.1 ru-torproject.ru +# https://forums•malwarebytes•com/topic/295588-support-scam-supportclientexe-and-screenconnectwindowsclientexe/ (account required) +# https://forums•malwarebytes•com/topic/295605-techsupport-scam/ (account required) +# https://app.any.run/tasks/0f8b5786-177a-45c0-a1de-32e0d68beff2 127.0.0.1 123secure.org +# https://github.com/RPiList/specials/issues/948#issuecomment-1458739160 127.0.0.1 yuppdownload.com +# Commonly set as a proxy on hacked devices (https://www.virustotal.com/gui/url/e610e7d09c614529cb8c64185717769946f5c86044ac5c31c6608e604995f577/detection) 127.0.0.1 34.80.59.191 +# Various domains on https://securitytrails•com/list/ip/72•14•178•174 127.0.0.1 megabooru.com @@ -25259,6 +25587,7 @@ 127.0.0.1 198.58.118.167 +# https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/ 127.0.0.1 123chance.net 127.0.0.1 123links4u.net 127.0.0.1 123prizes.net @@ -25647,6 +25976,7 @@ 127.0.0.1 139.45.197.249 +# https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide 127.0.0.1 acorusinfield.life 127.0.0.1 acridlydebit.live 127.0.0.1 aeneasclosure.website @@ -26170,6 +26500,7 @@ 127.0.0.1 yasaracarfenlisesi.com +# https://github.com/AdguardTeam/AdguardFilters/issues/173830 127.0.0.1 abadfaheff4.com 127.0.0.1 afflat3a2.com 127.0.0.1 afflat3a3.com @@ -26317,7 +26648,9 @@ -!!!/\\/$doc +# ——— Temp hotfix for https://github.com/AdguardTeam/AdGuardHome/issues/1835 ——— + + # ——— Spam in comment sections across the internet about "working" from "home" ——— @@ -26325,6 +26658,8 @@ # ——— Anti-'Malware comments' (Currently Disqus-specific) ——— +# https://myip•ms/info/limitexcess +# https://myip•ms/info/memberarea/My_Account•html !#if !ext_ublock # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— @@ -26335,6 +26670,7 @@ # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) 127.0.0.1 webadvisorc.rest.gti.mcafee.com 127.0.0.1 mip.api.mcafeewebadvisor.com +# https://get•adobe•com/no/reader/ # Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows») @@ -26344,8 +26680,11 @@ + # All legitimate Pac-Man games would use "pac-man" links with a dash +# https://eclypsium•com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/ +127.0.0.1 http://mb.download.gigabyte.com/FileList/Swhttp/LiveUpdate4 # (Presumably anonymous) E-mail tips 127.0.0.1 s.free.fr @@ -26357,6 +26696,7 @@ !#include uBO%20list%20extensions/AdGuardSafeBrowsing-ReverseEngineered.txt !#endif +# https://github.com/AdguardTeam/AdguardFilters/issues/145513