diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 6eaf917e4..28eb3a5d3 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Adblock Plus and AdBlock) -! Version: 15May2023v1 +! Version: 22May2023v4 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -7536,12 +7536,24 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection ||foodin.site^ ||foodin.site^$popup -! https://github.com/AdguardTeam/AdguardFilters/issues/90947 -! https://www.virustotal.com/gui/file/f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b/community -! https://www.virustotal.com/gui/url/cea7b7ccd54fabd22b14cff5521f13b9dca4fd06d47d0bc2119dac6b77ecc04d/detection ! https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 ||totalav.com^ ||totalav.com^$popup +! owned by the same people +||totalwebshield.com^ +||totalwebshield.com^$popup +||scanguard.com^ +||scanguard.com^$popup +||pcprotect.com^ +||pcprotect.com^$popup +||protected.net^ +||protected.net^$popup +||totaladblock.com^ +||totaladblock.com^$popup +||totaladblocker.xyz^ +||totaladblocker.xyz^$popup +||totalwebshield.xyz^ +||totalwebshield.xyz^$popup ! https://www.virustotal.com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community ! https://www.virustotal.com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection ! https://www.virustotal.com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection @@ -20756,6 +20768,107 @@ zombooru.com##a[href="http://www.hard55.com"] ||34.200.46.148^$popup ! https://www.adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull ||sitey.me^ +! https://github.com/AdguardTeam/AdguardFilters/issues/151479 +||agazpeppily.live^ +||agazpeppily.live^$popup +||agraffesalps.com^ +||agraffesalps.com^$popup +||banteryquartin.com^ +||banteryquartin.com^$popup +||bijouremudas.space^ +||bijouremudas.space^$popup +||blanksuppoint.com^ +||blanksuppoint.com^$popup +||blitzespanamas.store^ +||blitzespanamas.store^$popup +||britanyculvert.website^ +||britanyculvert.website^$popup +||bronzerkevil.com^ +||bronzerkevil.com^$popup +||burgledgypsums.uno^ +||burgledgypsums.uno^$popup +||caketteemblem.uno^ +||caketteemblem.uno^$popup +||canangafierier.uno^ +||canangafierier.uno^$popup +||casernbeings.com^ +||casernbeings.com^$popup +||chandoowitumki.guru^ +||chandoowitumki.guru^$popup +||chinkerdough.com^ +||chinkerdough.com^$popup +||citronsstealed.website^ +||citronsstealed.website^$popup +||corkiteihp.website^ +||corkiteihp.website^$popup +||coxziptwo.com^ +||coxziptwo.com^$popup +||coynyebch.website^ +||coynyebch.website^$popup +||dereunsin.uno^ +||dereunsin.uno^$popup +||funoriblithe.space^ +||funoriblithe.space^$popup +||fussytarbet.space^ +||fussytarbet.space^$popup +||goleeairable.com^ +||goleeairable.com^$popup +||hisurnhuh.com^ +||hisurnhuh.com^$popup +||iberiavihuela.guru^ +||iberiavihuela.guru^$popup +||irkantyip.com^ +||irkantyip.com^$popup +||jutishskerry.uno^ +||jutishskerry.uno^$popup +||kanawhadonnot.website^ +||kanawhadonnot.website^$popup +||kiutletilapia.com^ +||kiutletilapia.com^$popup +||minimviolone.life^ +||minimviolone.life^$popup +||nonfattoplike.com^ +||nonfattoplike.com^$popup +||oafsevasive.com^ +||oafsevasive.com^$popup +||oleariaalgenib.com^ +||oleariaalgenib.com^$popup +||patriotapelles.com^ +||patriotapelles.com^$popup +||propugnwhelms.digital^ +||propugnwhelms.digital^$popup +||proximepectin.com^ +||proximepectin.com^$popup +||quiaresp.com^ +||quiaresp.com^$popup +||rainierem.com^ +||rainierem.com^$popup +||rodderacetose.store^ +||rodderacetose.store^$popup +||rodentscommise.life^ +||rodentscommise.life^$popup +||sawflyacoela.com^ +||sawflyacoela.com^$popup +||scraichchoroid.com^ +||scraichchoroid.com^$popup +||shereeflivish.com^ +||shereeflivish.com^$popup +||situatebullied.com^ +||situatebullied.com^$popup +||skinkersorbol.digital^ +||skinkersorbol.digital^$popup +||sylvatealonely.com^ +||sylvatealonely.com^$popup +||tannahokerly.com^ +||tannahokerly.com^$popup +||teflonterreen.com^ +||teflonterreen.com^$popup +||tempuracubbies.life^ +||tempuracubbies.life^$popup +||toluatebrazee.com^ +||toluatebrazee.com^$popup +||uppilequavers.website^ +||uppilequavers.website^$popup ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -27601,6 +27714,7 @@ www.microsoft.com##a[data-pfns][href*=endless-running] www.microsoft.com##a[data-pfns][href*=princess-runner] www.microsoft.com##a[data-pfns][href*=poppyes] www.microsoft.com##a[data-pfns][href*=preganat] +www.microsoft.com##a[data-pfns][href*=baby-hazel] www.microsoft.com##.card[data-bi-cn*=imposter i] www.microsoft.com##.card[data-bi-cn*=impostor i] www.microsoft.com##.card[data-bi-cn*="super bob" i] @@ -27689,6 +27803,61 @@ www.microsoft.com##.card[data-bi-cn*="endless running" i] www.microsoft.com##.card[data-bi-cn*="princess runner" i] www.microsoft.com##.card[data-bi-cn*=poppyes i] www.microsoft.com##.card[data-bi-cn*=preganat i] +www.microsoft.com##.card[data-bi-cn*="baby hazel" i] +www.microsoft.com##.card[data-bi-cn*="city car " i] +www.microsoft.com##.card[data-bi-cn*=vegas i][data-bi-cn*=driving i] +www.microsoft.com##.card[data-bi-cn*="ro blox" i] +www.microsoft.com##.card[data-bi-cn^=amogus i] +www.microsoft.com##.card[data-bi-cn*=granny i][data-bi-cn*=escape i] +www.microsoft.com##.card[data-bi-cn*=" city driv" i] +www.microsoft.com##.card[data-bi-cn*=driving i][data-bi-cn*=multiplayer i] +www.microsoft.com##.card[data-bi-cn*=" car " i][data-bi-cn*=" real simulat" i] +www.microsoft.com##.card[data-bi-cn*="racing city" i] +www.microsoft.com##.card[data-bi-cn*="fly car " i] +www.microsoft.com##.card[data-bi-cn^="noob " i] +www.microsoft.com##.card[data-bi-cn*="driver simulat" i] +www.microsoft.com##.card[data-bi-cn*="truck sim " i] +www.microsoft.com##.card[data-bi-cn*="bus parking" i] +www.microsoft.com##.card[data-bi-cn*=bike i][data-bi-cn*=stunt i] +www.microsoft.com##.card[data-bi-cn*="simulator driv" i] +www.microsoft.com##.card[data-bi-cn*=stick i][data-bi-cn*=nether i] +www.microsoft.com##.card[data-bi-cn*=stick i][data-bi-cn*=parkour i] +www.microsoft.com##.card[data-bi-cn*=" cargo truck " i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn$=" z" i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=gun i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=shoot i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=survival i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=armageddon i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=craft i] +www.microsoft.com##.card[data-bi-cn*="baby taylor" i] +www.microsoft.com##.card[data-bi-cn*=craft i][data-bi-cn*=parkour i] +www.microsoft.com##.card[data-bi-cn*="burn racing" i] +www.microsoft.com##.card[data-bi-cn*=car i][data-bi-cn*=robot i] +www.microsoft.com##.card[data-bi-cn*=stick i][data-bi-cn*=shoot i] +www.microsoft.com##.card[data-bi-cn*="paintbal " i] +www.microsoft.com##.card[data-bi-cn*="runnig " i] +www.microsoft.com##.card[data-bi-cn*=sccoer i] +www.microsoft.com##.card[data-bi-cn*=fly i][data-bi-cn*=driv i] +www.microsoft.com##.card[data-bi-cn*="car chase" i][data-bi-cn*=racing i] +www.microsoft.com##.card[data-bi-cn*=city i][data-bi-cn*=truck i] +www.microsoft.com##.card[data-bi-cn*=block i][data-bi-cn*=parkour i] +www.microsoft.com##.card[data-bi-cn*=hand i][data-bi-cn*=doctor i] +www.microsoft.com##.card[data-bi-cn*=hand i][data-bi-cn*=hospital i] +www.microsoft.com##.card[data-bi-cn^="bus racing" i] +www.microsoft.com##.card[data-bi-cn^="ice princess " i] +www.microsoft.com##.card[data-bi-cn^="bus " i][data-bi-cn*=simulation i] +www.microsoft.com##.card[data-bi-cn*=noob i][data-bi-cn*=hacker i] +www.microsoft.com##.card[data-bi-cn*=noob i][data-bi-cn*=push i] +www.microsoft.com##.card[data-bi-cn^="miner" i][data-bi-cn*=" craft " i] +www.microsoft.com##.card[data-bi-cn*=parking i][data-bi-cn*="3d" i] +www.microsoft.com##.card[data-bi-cn*=parkour i][data-bi-cn*="3d" i] +www.microsoft.com##.card[data-bi-cn*=noob i][data-bi-cn*=blox i] +www.microsoft.com##.card[data-bi-cn*=noob i][data-bi-cn*=war i] +www.microsoft.com##.card[data-bi-cn*=sky i][data-bi-cn*=drive i][data-bi-cn*=car i] +www.microsoft.com##.card[data-bi-cn^=stick i][data-bi-cn*="3d" i] +www.microsoft.com##.card[data-bi-cn*="truck fire" i] +www.microsoft.com##.card[data-bi-cn*="driving service" i] +www.microsoft.com##.card[data-bi-cn*=" vs zombies" i]:not([data-bi-cn*=plant i]) www.microsoft.com##a[data-pfns][data-pfns*=pedriapps] www.microsoft.com##a[data-pfns][data-pfns*=gameboxstudios] www.microsoft.com##a[data-pfns][data-pfns*=singleton] diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 181c2bd17..6e765e29d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 15May2023v1 +! Version: 22May2023v4 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -4095,11 +4095,16 @@ zombooru.com##a[href="http://www.hard55.com"] ||wcf.seven1029.com^$all ! https://www.virustotal.com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection ||foodin.site^$all -! https://github.com/AdguardTeam/AdguardFilters/issues/90947 -! https://www.virustotal.com/gui/file/f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b/community -! https://www.virustotal.com/gui/url/cea7b7ccd54fabd22b14cff5521f13b9dca4fd06d47d0bc2119dac6b77ecc04d/detection ! https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 ||totalav.com^$all +! owned by the same people +||totalwebshield.com^$all +||scanguard.com^$all +||pcprotect.com^$all +||protected.net^$all +||totaladblock.com^$all +||totaladblocker.xyz^$all +||totalwebshield.xyz^$all ! https://www.virustotal.com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community ! https://www.virustotal.com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection ! https://www.virustotal.com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection @@ -10917,6 +10922,57 @@ zombooru.com##a[href="http://www.hard55.com"] 34.200.46.148$network ! https://www.adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull ||sitey.me^$document +! https://github.com/AdguardTeam/AdguardFilters/issues/151479 +||agazpeppily.live^$all +||agraffesalps.com^$all +||banteryquartin.com^$all +||bijouremudas.space^$all +||blanksuppoint.com^$all +||blitzespanamas.store^$all +||britanyculvert.website^$all +||bronzerkevil.com^$all +||burgledgypsums.uno^$all +||caketteemblem.uno^$all +||canangafierier.uno^$all +||casernbeings.com^$all +||chandoowitumki.guru^$all +||chinkerdough.com^$all +||citronsstealed.website^$all +||corkiteihp.website^$all +||coxziptwo.com^$all +||coynyebch.website^$all +||dereunsin.uno^$all +||funoriblithe.space^$all +||fussytarbet.space^$all +||goleeairable.com^$all +||hisurnhuh.com^$all +||iberiavihuela.guru^$all +||irkantyip.com^$all +||jutishskerry.uno^$all +||kanawhadonnot.website^$all +||kiutletilapia.com^$all +||minimviolone.life^$all +||nonfattoplike.com^$all +||oafsevasive.com^$all +||oleariaalgenib.com^$all +||patriotapelles.com^$all +||propugnwhelms.digital^$all +||proximepectin.com^$all +||quiaresp.com^$all +||rainierem.com^$all +||rodderacetose.store^$all +||rodentscommise.life^$all +||sawflyacoela.com^$all +||scraichchoroid.com^$all +||shereeflivish.com^$all +||situatebullied.com^$all +||skinkersorbol.digital^$all +||sylvatealonely.com^$all +||tannahokerly.com^$all +||teflonterreen.com^$all +||tempuracubbies.life^$all +||toluatebrazee.com^$all +||uppilequavers.website^$all ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -14536,6 +14592,7 @@ www.microsoft.com##a[data-pfns][href*=endless-running] www.microsoft.com##a[data-pfns][href*=princess-runner] www.microsoft.com##a[data-pfns][href*=poppyes] www.microsoft.com##a[data-pfns][href*=preganat] +www.microsoft.com##a[data-pfns][href*=baby-hazel] www.microsoft.com##.card[data-bi-cn*=imposter i] www.microsoft.com##.card[data-bi-cn*=impostor i] www.microsoft.com##.card[data-bi-cn*="super bob" i] @@ -14624,6 +14681,61 @@ www.microsoft.com##.card[data-bi-cn*="endless running" i] www.microsoft.com##.card[data-bi-cn*="princess runner" i] www.microsoft.com##.card[data-bi-cn*=poppyes i] www.microsoft.com##.card[data-bi-cn*=preganat i] +www.microsoft.com##.card[data-bi-cn*="baby hazel" i] +www.microsoft.com##.card[data-bi-cn*="city car " i] +www.microsoft.com##.card[data-bi-cn*=vegas i][data-bi-cn*=driving i] +www.microsoft.com##.card[data-bi-cn*="ro blox" i] +www.microsoft.com##.card[data-bi-cn^=amogus i] +www.microsoft.com##.card[data-bi-cn*=granny i][data-bi-cn*=escape i] +www.microsoft.com##.card[data-bi-cn*=" city driv" i] +www.microsoft.com##.card[data-bi-cn*=driving i][data-bi-cn*=multiplayer i] +www.microsoft.com##.card[data-bi-cn*=" car " i][data-bi-cn*=" real simulat" i] +www.microsoft.com##.card[data-bi-cn*="racing city" i] +www.microsoft.com##.card[data-bi-cn*="fly car " i] +www.microsoft.com##.card[data-bi-cn^="noob " i] +www.microsoft.com##.card[data-bi-cn*="driver simulat" i] +www.microsoft.com##.card[data-bi-cn*="truck sim " i] +www.microsoft.com##.card[data-bi-cn*="bus parking" i] +www.microsoft.com##.card[data-bi-cn*=bike i][data-bi-cn*=stunt i] +www.microsoft.com##.card[data-bi-cn*="simulator driv" i] +www.microsoft.com##.card[data-bi-cn*=stick i][data-bi-cn*=nether i] +www.microsoft.com##.card[data-bi-cn*=stick i][data-bi-cn*=parkour i] +www.microsoft.com##.card[data-bi-cn*=" cargo truck " i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn$=" z" i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=gun i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=shoot i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=survival i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=armageddon i] +www.microsoft.com##.card[data-bi-cn*=zombie i][data-bi-cn*=craft i] +www.microsoft.com##.card[data-bi-cn*="baby taylor" i] +www.microsoft.com##.card[data-bi-cn*=craft i][data-bi-cn*=parkour i] +www.microsoft.com##.card[data-bi-cn*="burn racing" i] +www.microsoft.com##.card[data-bi-cn*=car i][data-bi-cn*=robot i] +www.microsoft.com##.card[data-bi-cn*=stick i][data-bi-cn*=shoot i] +www.microsoft.com##.card[data-bi-cn*="paintbal " i] +www.microsoft.com##.card[data-bi-cn*="runnig " i] +www.microsoft.com##.card[data-bi-cn*=sccoer i] +www.microsoft.com##.card[data-bi-cn*=fly i][data-bi-cn*=driv i] +www.microsoft.com##.card[data-bi-cn*="car chase" i][data-bi-cn*=racing i] +www.microsoft.com##.card[data-bi-cn*=city i][data-bi-cn*=truck i] +www.microsoft.com##.card[data-bi-cn*=block i][data-bi-cn*=parkour i] +www.microsoft.com##.card[data-bi-cn*=hand i][data-bi-cn*=doctor i] +www.microsoft.com##.card[data-bi-cn*=hand i][data-bi-cn*=hospital i] +www.microsoft.com##.card[data-bi-cn^="bus racing" i] +www.microsoft.com##.card[data-bi-cn^="ice princess " i] +www.microsoft.com##.card[data-bi-cn^="bus " i][data-bi-cn*=simulation i] +www.microsoft.com##.card[data-bi-cn*=noob i][data-bi-cn*=hacker i] +www.microsoft.com##.card[data-bi-cn*=noob i][data-bi-cn*=push i] +www.microsoft.com##.card[data-bi-cn^="miner" i][data-bi-cn*=" craft " i] +www.microsoft.com##.card[data-bi-cn*=parking i][data-bi-cn*="3d" i] +www.microsoft.com##.card[data-bi-cn*=parkour i][data-bi-cn*="3d" i] +www.microsoft.com##.card[data-bi-cn*=noob i][data-bi-cn*=blox i] +www.microsoft.com##.card[data-bi-cn*=noob i][data-bi-cn*=war i] +www.microsoft.com##.card[data-bi-cn*=sky i][data-bi-cn*=drive i][data-bi-cn*=car i] +www.microsoft.com##.card[data-bi-cn^=stick i][data-bi-cn*="3d" i] +www.microsoft.com##.card[data-bi-cn*="truck fire" i] +www.microsoft.com##.card[data-bi-cn*="driving service" i] +www.microsoft.com##.card[data-bi-cn*=" vs zombies" i]:not([data-bi-cn*=plant i]) www.microsoft.com##a[data-pfns][data-pfns*=pedriapps] www.microsoft.com##a[data-pfns][data-pfns*=gameboxstudios] www.microsoft.com##a[data-pfns][data-pfns*=singleton] diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index fc29fdf72..6c2aeadc3 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 15May2023v1 +! Version: 22May2023v4 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -3943,11 +3943,16 @@ ||wcf.seven1029.com^ ! https://www.virustotal.com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection ||foodin.site^ -! https://github.com/AdguardTeam/AdguardFilters/issues/90947 -! https://www.virustotal.com/gui/file/f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b/community -! https://www.virustotal.com/gui/url/cea7b7ccd54fabd22b14cff5521f13b9dca4fd06d47d0bc2119dac6b77ecc04d/detection ! https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 ||totalav.com^ +! owned by the same people +||totalwebshield.com^ +||scanguard.com^ +||pcprotect.com^ +||protected.net^ +||totaladblock.com^ +||totaladblocker.xyz^ +||totalwebshield.xyz^ ! https://www.virustotal.com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community ! https://www.virustotal.com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection ! https://www.virustotal.com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection @@ -10765,6 +10770,57 @@ 34.200.46.148 ! https://www.adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull ||sitey.me^ +! https://github.com/AdguardTeam/AdguardFilters/issues/151479 +||agazpeppily.live^ +||agraffesalps.com^ +||banteryquartin.com^ +||bijouremudas.space^ +||blanksuppoint.com^ +||blitzespanamas.store^ +||britanyculvert.website^ +||bronzerkevil.com^ +||burgledgypsums.uno^ +||caketteemblem.uno^ +||canangafierier.uno^ +||casernbeings.com^ +||chandoowitumki.guru^ +||chinkerdough.com^ +||citronsstealed.website^ +||corkiteihp.website^ +||coxziptwo.com^ +||coynyebch.website^ +||dereunsin.uno^ +||funoriblithe.space^ +||fussytarbet.space^ +||goleeairable.com^ +||hisurnhuh.com^ +||iberiavihuela.guru^ +||irkantyip.com^ +||jutishskerry.uno^ +||kanawhadonnot.website^ +||kiutletilapia.com^ +||minimviolone.life^ +||nonfattoplike.com^ +||oafsevasive.com^ +||oleariaalgenib.com^ +||patriotapelles.com^ +||propugnwhelms.digital^ +||proximepectin.com^ +||quiaresp.com^ +||rainierem.com^ +||rodderacetose.store^ +||rodentscommise.life^ +||sawflyacoela.com^ +||scraichchoroid.com^ +||shereeflivish.com^ +||situatebullied.com^ +||skinkersorbol.digital^ +||sylvatealonely.com^ +||tannahokerly.com^ +||teflonterreen.com^ +||tempuracubbies.life^ +||toluatebrazee.com^ +||uppilequavers.website^ ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index f7a67d8ec..9159ae16a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 15May2023v1 +# Version: 22May2023v4 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -3772,6 +3772,14 @@ onlinepromotionsusa.com wcf.seven1029.com foodin.site totalav.com +# owned by the same people +totalwebshield.com +scanguard.com +pcprotect.com +protected.net +totaladblock.com +totaladblocker.xyz +totalwebshield.xyz 91.241.19.38 telete.in kiff.tech @@ -10340,6 +10348,56 @@ watchrenewedcompletelyinfo-product.info watchuberdevelopedinfo-product.info 34.200.46.148 sitey.me +agazpeppily.live +agraffesalps.com +banteryquartin.com +bijouremudas.space +blanksuppoint.com +blitzespanamas.store +britanyculvert.website +bronzerkevil.com +burgledgypsums.uno +caketteemblem.uno +canangafierier.uno +casernbeings.com +chandoowitumki.guru +chinkerdough.com +citronsstealed.website +corkiteihp.website +coxziptwo.com +coynyebch.website +dereunsin.uno +funoriblithe.space +fussytarbet.space +goleeairable.com +hisurnhuh.com +iberiavihuela.guru +irkantyip.com +jutishskerry.uno +kanawhadonnot.website +kiutletilapia.com +minimviolone.life +nonfattoplike.com +oafsevasive.com +oleariaalgenib.com +patriotapelles.com +propugnwhelms.digital +proximepectin.com +quiaresp.com +rainierem.com +rodderacetose.store +rodentscommise.life +sawflyacoela.com +scraichchoroid.com +shereeflivish.com +situatebullied.com +skinkersorbol.digital +sylvatealonely.com +tannahokerly.com +teflonterreen.com +tempuracubbies.life +toluatebrazee.com +uppilequavers.website # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 328a9ec9f..5e5243c4d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 15May2023v1 +# Version: 22May2023v4 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -3772,6 +3772,14 @@ 127.0.0.1 wcf.seven1029.com 127.0.0.1 foodin.site 127.0.0.1 totalav.com +# owned by the same people +127.0.0.1 totalwebshield.com +127.0.0.1 scanguard.com +127.0.0.1 pcprotect.com +127.0.0.1 protected.net +127.0.0.1 totaladblock.com +127.0.0.1 totaladblocker.xyz +127.0.0.1 totalwebshield.xyz 127.0.0.1 91.241.19.38 127.0.0.1 telete.in 127.0.0.1 kiff.tech @@ -10340,6 +10348,56 @@ 127.0.0.1 watchuberdevelopedinfo-product.info 127.0.0.1 34.200.46.148 127.0.0.1 sitey.me +127.0.0.1 agazpeppily.live +127.0.0.1 agraffesalps.com +127.0.0.1 banteryquartin.com +127.0.0.1 bijouremudas.space +127.0.0.1 blanksuppoint.com +127.0.0.1 blitzespanamas.store +127.0.0.1 britanyculvert.website +127.0.0.1 bronzerkevil.com +127.0.0.1 burgledgypsums.uno +127.0.0.1 caketteemblem.uno +127.0.0.1 canangafierier.uno +127.0.0.1 casernbeings.com +127.0.0.1 chandoowitumki.guru +127.0.0.1 chinkerdough.com +127.0.0.1 citronsstealed.website +127.0.0.1 corkiteihp.website +127.0.0.1 coxziptwo.com +127.0.0.1 coynyebch.website +127.0.0.1 dereunsin.uno +127.0.0.1 funoriblithe.space +127.0.0.1 fussytarbet.space +127.0.0.1 goleeairable.com +127.0.0.1 hisurnhuh.com +127.0.0.1 iberiavihuela.guru +127.0.0.1 irkantyip.com +127.0.0.1 jutishskerry.uno +127.0.0.1 kanawhadonnot.website +127.0.0.1 kiutletilapia.com +127.0.0.1 minimviolone.life +127.0.0.1 nonfattoplike.com +127.0.0.1 oafsevasive.com +127.0.0.1 oleariaalgenib.com +127.0.0.1 patriotapelles.com +127.0.0.1 propugnwhelms.digital +127.0.0.1 proximepectin.com +127.0.0.1 quiaresp.com +127.0.0.1 rainierem.com +127.0.0.1 rodderacetose.store +127.0.0.1 rodentscommise.life +127.0.0.1 sawflyacoela.com +127.0.0.1 scraichchoroid.com +127.0.0.1 shereeflivish.com +127.0.0.1 situatebullied.com +127.0.0.1 skinkersorbol.digital +127.0.0.1 sylvatealonely.com +127.0.0.1 tannahokerly.com +127.0.0.1 teflonterreen.com +127.0.0.1 tempuracubbies.life +127.0.0.1 toluatebrazee.com +127.0.0.1 uppilequavers.website # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” 127.0.0.1 downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 30c7f645f..a593ea1be 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 15May2023v1-Deprecated +# Version: 22May2023v4-Deprecated # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -3801,6 +3801,14 @@ .wcf.seven1029.com .foodin.site .totalav.com +# owned by the same people +.totalwebshield.com +.scanguard.com +.pcprotect.com +.protected.net +.totaladblock.com +.totaladblocker.xyz +.totalwebshield.xyz .91.241.19.38 .telete.in .kiff.tech @@ -10419,6 +10427,56 @@ .watchuberdevelopedinfo-product.info .34.200.46.148 .sitey.me +.agazpeppily.live +.agraffesalps.com +.banteryquartin.com +.bijouremudas.space +.blanksuppoint.com +.blitzespanamas.store +.britanyculvert.website +.bronzerkevil.com +.burgledgypsums.uno +.caketteemblem.uno +.canangafierier.uno +.casernbeings.com +.chandoowitumki.guru +.chinkerdough.com +.citronsstealed.website +.corkiteihp.website +.coxziptwo.com +.coynyebch.website +.dereunsin.uno +.funoriblithe.space +.fussytarbet.space +.goleeairable.com +.hisurnhuh.com +.iberiavihuela.guru +.irkantyip.com +.jutishskerry.uno +.kanawhadonnot.website +.kiutletilapia.com +.minimviolone.life +.nonfattoplike.com +.oafsevasive.com +.oleariaalgenib.com +.patriotapelles.com +.propugnwhelms.digital +.proximepectin.com +.quiaresp.com +.rainierem.com +.rodderacetose.store +.rodentscommise.life +.sawflyacoela.com +.scraichchoroid.com +.shereeflivish.com +.situatebullied.com +.skinkersorbol.digital +.sylvatealonely.com +.tannahokerly.com +.teflonterreen.com +.tempuracubbies.life +.toluatebrazee.com +.uppilequavers.website {+block} # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index f58cdfbc0..a4d07be6c 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 15May2023v1-Deprecated +# Version: 22May2023v4-Deprecated : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -3974,11 +3974,16 @@ msFilterList -d wcf.seven1029.com # https://www.virustotal.com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection -d foodin.site -# https://github.com/AdguardTeam/AdguardFilters/issues/90947 -# https://www.virustotal.com/gui/file/f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b/community -# https://www.virustotal.com/gui/url/cea7b7ccd54fabd22b14cff5521f13b9dca4fd06d47d0bc2119dac6b77ecc04d/detection # https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 -d totalav.com +# owned by the same people +-d totalwebshield.com +-d scanguard.com +-d pcprotect.com +-d protected.net +-d totaladblock.com +-d totaladblocker.xyz +-d totalwebshield.xyz # https://www.virustotal.com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community # https://www.virustotal.com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection # https://www.virustotal.com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection @@ -10785,6 +10790,57 @@ om landers iphone*_spin -d 34.200.46.148 # https://www.adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull -d sitey.me +# https://github.com/AdguardTeam/AdguardFilters/issues/151479 +-d agazpeppily.live +-d agraffesalps.com +-d banteryquartin.com +-d bijouremudas.space +-d blanksuppoint.com +-d blitzespanamas.store +-d britanyculvert.website +-d bronzerkevil.com +-d burgledgypsums.uno +-d caketteemblem.uno +-d canangafierier.uno +-d casernbeings.com +-d chandoowitumki.guru +-d chinkerdough.com +-d citronsstealed.website +-d corkiteihp.website +-d coxziptwo.com +-d coynyebch.website +-d dereunsin.uno +-d funoriblithe.space +-d fussytarbet.space +-d goleeairable.com +-d hisurnhuh.com +-d iberiavihuela.guru +-d irkantyip.com +-d jutishskerry.uno +-d kanawhadonnot.website +-d kiutletilapia.com +-d minimviolone.life +-d nonfattoplike.com +-d oafsevasive.com +-d oleariaalgenib.com +-d patriotapelles.com +-d propugnwhelms.digital +-d proximepectin.com +-d quiaresp.com +-d rainierem.com +-d rodderacetose.store +-d rodentscommise.life +-d sawflyacoela.com +-d scraichchoroid.com +-d shereeflivish.com +-d situatebullied.com +-d skinkersorbol.digital +-d sylvatealonely.com +-d tannahokerly.com +-d teflonterreen.com +-d tempuracubbies.life +-d toluatebrazee.com +-d uppilequavers.website # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 43a6883b3..0f748e540 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -286,6 +286,7 @@ 87.120.254.39 45.150.108.213 92.204.160.240 +34.200.46.148 192.243.59.12 192.243.59.13 192.243.59.20