From 54efcf516c80cf2b76cc727777431bac8d906a81 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Sat, 19 Mar 2022 20:07:08 +0100 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 30 ++----------------- .../AntiMalwareAdGuard.txt | 20 ++----------- .../AntiMalwareAdGuardHome.txt | 20 ++----------- .../AntiMalwareDomains.txt | 15 ++-------- .../AntiMalwareHosts.txt | 15 ++-------- .../AntiMalwarePrivoxy.action | 14 +-------- .../AntiMalwareTPL.tpl | 19 +----------- 7 files changed, 12 insertions(+), 121 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 5b38bf9e5..73f7eb61b 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 16March2022v1 +! Version: 19March2022v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -527,8 +527,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||[2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]^ ||achingpapoosh.cam^ ||achingpapoosh.cam^$popup -||aidgiltreef.casa^ -||aidgiltreef.casa^$popup ||aileddipgird.cam^ ||aileddipgird.cam^$popup ||ailkeyair.com^ @@ -2066,15 +2064,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://safeweb.norton.com/report/show?url=192.3.110.170 ||192.3.110.170^ ||192.3.110.170^$popup -! https://www.virustotal.com/gui/file/0f242e89dd3f1685ace979a248300f7f414932b8a2a75af88585c427f2758c10/community -! https://www.virustotal.com/gui/url/f66829e7fd9e897db874d352ef7c7b46fce80d070bc24917bc7300559d29d014/detection -! https://www.virustotal.com/gui/url/75676a0f8d715afa318f380e214bbe7bc1f7b08c66740a320a888c8912212ad9/detection -||tochmini.mooo.com^ -||tochmini.mooo.com^$popup -! https://www.virustotal.com/gui/url/ce7a42f35eca4072ab018cb7f5f7fbaaa7f17c10f982a2fa2baa24122385a805/detection -! https://www.virustotal.com/gui/url/9324c63cab60da5f60dacb4b2b37a02f5a7e2a5b932d96440415a232da6ec0c2/detection -||leavemylinkpls.mooo.com^ -||leavemylinkpls.mooo.com^$popup ! https://forums.malwarebytes.com/topic/278209-removal-instructions-for-socialsearchconverter/ ||socialsearchconverter.com^ ||install.socialsearchconverter.com^ @@ -2205,8 +2194,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! Relations to the original domain ||192.3.194.242^ ||192.3.194.242^$popup -||fakasafs23asd-adj.ydns.eu^ -||fakasafs23asd-adj.ydns.eu^$popup ||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^ ||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^$popup ||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^ @@ -2217,8 +2204,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||k2ygoods.ydns.eu^$popup ||lefteriskkokkiskikinew.ydns.eu^ ||lefteriskkokkiskikinew.ydns.eu^$popup -||kelasdbadlkafg-uhuy28.ydns.eu^ -||kelasdbadlkafg-uhuy28.ydns.eu^$popup ||nan.ydns.eu^ ||nan.ydns.eu^$popup ||hurricane.ydns.eu^ @@ -2505,16 +2490,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||grub-wa-saya.duckdns.org^$popup ! https://www.virustotal.com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations ||driversupport.com^ -! Copied over from URLHaus -||thehotelshowdev.bitkit.dk^ -||thehotelshowdev.bitkit.dk^$popup -! Domains related to the above -||big5constructnigeria-staging.bitkit.dk^ -||big5constructnigeria-staging.bitkit.dk^$popup -||big5-nigeria.bitkit.dk^ -||big5-nigeria.bitkit.dk^$popup -||bromic-staging.bitkit.dk^ -||bromic-staging.bitkit.dk^$popup ! A PUP and scam website ||mycleanpc.com^ ! Related domains owned by the same company and used for payment (the first is for 'tech support' scams, the second for their 'ID protection') @@ -3019,8 +2994,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||61.52.79.32^ ||61.52.79.32^$popup ! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 -||ups-dk.u1537460.cp.regruhosting.ru^ -||ups-dk.u1537460.cp.regruhosting.ru^$popup +://ups-dk.$denyallow=dk|nu|se|no|fo|gl|ups.com ! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 ||lowseelan.com^ ||lowseelan.com^$popup diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 3e5cd0d1d..9244f5e40 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from 2019 onwards] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 16March2022v1 +! Version: 19March2022v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -489,7 +489,6 @@ zombooru.com##a[href="http://www.hard55.com"] 54.210.193.115$network [2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]$network ||achingpapoosh.cam^$empty,important -||aidgiltreef.casa^$empty,important ||aileddipgird.cam^$empty,important ||ailkeyair.com^$empty,important ||alcidsduffels.cam^$empty,important @@ -1325,13 +1324,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection ! https://safeweb.norton.com/report/show?url=192.3.110.170 192.3.110.170$network -! https://www.virustotal.com/gui/file/0f242e89dd3f1685ace979a248300f7f414932b8a2a75af88585c427f2758c10/community -! https://www.virustotal.com/gui/url/f66829e7fd9e897db874d352ef7c7b46fce80d070bc24917bc7300559d29d014/detection -! https://www.virustotal.com/gui/url/75676a0f8d715afa318f380e214bbe7bc1f7b08c66740a320a888c8912212ad9/detection -||tochmini.mooo.com^$empty,important -! https://www.virustotal.com/gui/url/ce7a42f35eca4072ab018cb7f5f7fbaaa7f17c10f982a2fa2baa24122385a805/detection -! https://www.virustotal.com/gui/url/9324c63cab60da5f60dacb4b2b37a02f5a7e2a5b932d96440415a232da6ec0c2/detection -||leavemylinkpls.mooo.com^$empty,important ! https://forums.malwarebytes.com/topic/278209-removal-instructions-for-socialsearchconverter/ ||socialsearchconverter.com^$document ||install.socialsearchconverter.com^$empty,important @@ -1419,13 +1411,11 @@ zombooru.com##a[href="http://www.hard55.com"] ||aieov.com^$empty,important ! Relations to the original domain 192.3.194.242$network -||fakasafs23asd-adj.ydns.eu^$empty,important ||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^$empty,important ||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^$empty,important ||avira-antivirus.ydns.eu^$empty,important ||k2ygoods.ydns.eu^$empty,important ||lefteriskkokkiskikinew.ydns.eu^$empty,important -||kelasdbadlkafg-uhuy28.ydns.eu^$empty,important ||nan.ydns.eu^$empty,important ||hurricane.ydns.eu^$empty,important ||hjjhjkk.ydns.eu^$empty,important @@ -1598,12 +1588,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||grub-wa-saya.duckdns.org^$empty,important ! https://www.virustotal.com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations ||driversupport.com^$document -! Copied over from URLHaus -||thehotelshowdev.bitkit.dk^$empty,important -! Domains related to the above -||big5constructnigeria-staging.bitkit.dk^$empty,important -||big5-nigeria.bitkit.dk^$empty,important -||bromic-staging.bitkit.dk^$empty,important ! A PUP and scam website ||mycleanpc.com^$document ! Related domains owned by the same company and used for payment (the first is for 'tech support' scams, the second for their 'ID protection') @@ -1907,7 +1891,7 @@ zombooru.com##a[href="http://www.hard55.com"] 115.194.38.143$network 61.52.79.32$network ! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 -||ups-dk.u1537460.cp.regruhosting.ru^$empty,important +://ups-dk.$document,denyallow=dk|nu|se|no|fo|gl|ups.com ! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 ||lowseelan.com^$empty,important ! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 02b5868a6..b2634dd48 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 16March2022v1 +! Version: 19March2022v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -305,7 +305,6 @@ 54.210.193.115 2600:1f18:43d1:2a04:ee05:261e:d408:7ba1 ||achingpapoosh.cam^ -||aidgiltreef.casa^ ||aileddipgird.cam^ ||ailkeyair.com^ ||alcidsduffels.cam^ @@ -1141,13 +1140,6 @@ ! https://www.virustotal.com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection ! https://safeweb.norton.com/report/show?url=192.3.110.170 192.3.110.170 -! https://www.virustotal.com/gui/file/0f242e89dd3f1685ace979a248300f7f414932b8a2a75af88585c427f2758c10/community -! https://www.virustotal.com/gui/url/f66829e7fd9e897db874d352ef7c7b46fce80d070bc24917bc7300559d29d014/detection -! https://www.virustotal.com/gui/url/75676a0f8d715afa318f380e214bbe7bc1f7b08c66740a320a888c8912212ad9/detection -||tochmini.mooo.com^ -! https://www.virustotal.com/gui/url/ce7a42f35eca4072ab018cb7f5f7fbaaa7f17c10f982a2fa2baa24122385a805/detection -! https://www.virustotal.com/gui/url/9324c63cab60da5f60dacb4b2b37a02f5a7e2a5b932d96440415a232da6ec0c2/detection -||leavemylinkpls.mooo.com^ ! https://forums.malwarebytes.com/topic/278209-removal-instructions-for-socialsearchconverter/ ||socialsearchconverter.com^ ||install.socialsearchconverter.com^ @@ -1235,13 +1227,11 @@ ||aieov.com^ ! Relations to the original domain 192.3.194.242 -||fakasafs23asd-adj.ydns.eu^ ||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^ ||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^ ||avira-antivirus.ydns.eu^ ||k2ygoods.ydns.eu^ ||lefteriskkokkiskikinew.ydns.eu^ -||kelasdbadlkafg-uhuy28.ydns.eu^ ||nan.ydns.eu^ ||hurricane.ydns.eu^ ||hjjhjkk.ydns.eu^ @@ -1414,12 +1404,6 @@ ||grub-wa-saya.duckdns.org^ ! https://www.virustotal.com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations ||driversupport.com^ -! Copied over from URLHaus -||thehotelshowdev.bitkit.dk^ -! Domains related to the above -||big5constructnigeria-staging.bitkit.dk^ -||big5-nigeria.bitkit.dk^ -||bromic-staging.bitkit.dk^ ! A PUP and scam website ||mycleanpc.com^ ! Related domains owned by the same company and used for payment (the first is for 'tech support' scams, the second for their 'ID protection') @@ -1723,7 +1707,7 @@ 115.194.38.143 61.52.79.32 ! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 -||ups-dk.u1537460.cp.regruhosting.ru^ +://ups-dk.denyallow=dk|nu|se|no|fo|gl|ups.com ! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 ||lowseelan.com^ ! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index d692ba812..fc182a1fd 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 16March2022v1 +# Version: 19March2022v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -269,7 +269,6 @@ digitalantivirus.org 54.210.193.115 [2600:1f18:43d1:2a04:ee05:261e:d408:7ba1] achingpapoosh.cam -aidgiltreef.casa aileddipgird.cam ailkeyair.com alcidsduffels.cam @@ -1052,8 +1051,6 @@ vm-business.online apple-map.help recover-delivery.com 192.3.110.170 -tochmini.mooo.com -leavemylinkpls.mooo.com socialsearchconverter.com install.socialsearchconverter.com feed.socialsearchconverter.com @@ -1107,13 +1104,11 @@ esetnode32-antiviru.ydns.eu aieov.com # Relations to the original domain 192.3.194.242 -fakasafs23asd-adj.ydns.eu w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu avira-antivirus.ydns.eu k2ygoods.ydns.eu lefteriskkokkiskikinew.ydns.eu -kelasdbadlkafg-uhuy28.ydns.eu nan.ydns.eu hurricane.ydns.eu hjjhjkk.ydns.eu @@ -1262,12 +1257,6 @@ nctylivpwhpby.com phhitgjxsit.com saimission.org driversupport.com -# Copied over from URLHaus -thehotelshowdev.bitkit.dk -# Domains related to the above -big5constructnigeria-staging.bitkit.dk -big5-nigeria.bitkit.dk -bromic-staging.bitkit.dk # A PUP and scam website mycleanpc.com # Related domains owned by the same company and used for payment (the first is for 'tech support' scams, the second for their 'ID protection') @@ -1516,7 +1505,7 @@ bestlifeoffer20.com 171.112.177.90 115.194.38.143 61.52.79.32 -ups-dk.u1537460.cp.regruhosting.ru + lowseelan.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 22de81b69..50b3b0270 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 16March2022v1 +# Version: 19March2022v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -269,7 +269,6 @@ 127.0.0.1 54.210.193.115 :: 2600:1f18:43d1:2a04:ee05:261e:d408:7ba1 127.0.0.1 achingpapoosh.cam -127.0.0.1 aidgiltreef.casa 127.0.0.1 aileddipgird.cam 127.0.0.1 ailkeyair.com 127.0.0.1 alcidsduffels.cam @@ -1052,8 +1051,6 @@ 127.0.0.1 apple-map.help 127.0.0.1 recover-delivery.com 127.0.0.1 192.3.110.170 -127.0.0.1 tochmini.mooo.com -127.0.0.1 leavemylinkpls.mooo.com 127.0.0.1 socialsearchconverter.com 127.0.0.1 install.socialsearchconverter.com 127.0.0.1 feed.socialsearchconverter.com @@ -1107,13 +1104,11 @@ 127.0.0.1 aieov.com # Relations to the original domain 127.0.0.1 192.3.194.242 -127.0.0.1 fakasafs23asd-adj.ydns.eu 127.0.0.1 w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu 127.0.0.1 hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu 127.0.0.1 avira-antivirus.ydns.eu 127.0.0.1 k2ygoods.ydns.eu 127.0.0.1 lefteriskkokkiskikinew.ydns.eu -127.0.0.1 kelasdbadlkafg-uhuy28.ydns.eu 127.0.0.1 nan.ydns.eu 127.0.0.1 hurricane.ydns.eu 127.0.0.1 hjjhjkk.ydns.eu @@ -1262,12 +1257,6 @@ 127.0.0.1 phhitgjxsit.com 127.0.0.1 saimission.org 127.0.0.1 driversupport.com -# Copied over from URLHaus -127.0.0.1 thehotelshowdev.bitkit.dk -# Domains related to the above -127.0.0.1 big5constructnigeria-staging.bitkit.dk -127.0.0.1 big5-nigeria.bitkit.dk -127.0.0.1 bromic-staging.bitkit.dk # A PUP and scam website 127.0.0.1 mycleanpc.com # Related domains owned by the same company and used for payment (the first is for 'tech support' scams, the second for their 'ID protection') @@ -1516,7 +1505,7 @@ 127.0.0.1 171.112.177.90 127.0.0.1 115.194.38.143 127.0.0.1 61.52.79.32 -127.0.0.1 ups-dk.u1537460.cp.regruhosting.ru + 127.0.0.1 lowseelan.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 96e921655..768b3ebfd 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 16March2022v1 +# Version: 19March2022v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -530,7 +530,6 @@ - /scan-update-and-protect-your-browser.html @@ -1124,8 +1123,6 @@ - - @@ -1141,8 +1138,6 @@ - - # Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry @@ -1288,12 +1283,6 @@ -# Copied over from URLHaus - -# Domains related to the above - - - # A PUP and scam website # Related domains owned by the same company and used for payment (the first is for 'tech support' scams, the second for their 'ID protection') @@ -1539,7 +1528,6 @@ - # ||zhuangjizhuli.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index af820241e..49fe6c68f 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 16March2022v1 +# Version: 19March2022v1 : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -363,7 +363,6 @@ msFilterList -d 54.210.193.115 -d [2600:1f18:43d1:2a04:ee05:261e:d408:7ba1] -d achingpapoosh.cam --d aidgiltreef.casa -d aileddipgird.cam -d ailkeyair.com -d alcidsduffels.cam @@ -1199,13 +1198,6 @@ msFilterList # https://www.virustotal.com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection # https://safeweb.norton.com/report/show?url=192.3.110.170 -d 192.3.110.170 -# https://www.virustotal.com/gui/file/0f242e89dd3f1685ace979a248300f7f414932b8a2a75af88585c427f2758c10/community -# https://www.virustotal.com/gui/url/f66829e7fd9e897db874d352ef7c7b46fce80d070bc24917bc7300559d29d014/detection -# https://www.virustotal.com/gui/url/75676a0f8d715afa318f380e214bbe7bc1f7b08c66740a320a888c8912212ad9/detection --d tochmini.mooo.com -# https://www.virustotal.com/gui/url/ce7a42f35eca4072ab018cb7f5f7fbaaa7f17c10f982a2fa2baa24122385a805/detection -# https://www.virustotal.com/gui/url/9324c63cab60da5f60dacb4b2b37a02f5a7e2a5b932d96440415a232da6ec0c2/detection --d leavemylinkpls.mooo.com # https://forums.malwarebytes.com/topic/278209-removal-instructions-for-socialsearchconverter/ -d socialsearchconverter.com -d install.socialsearchconverter.com @@ -1293,13 +1285,11 @@ msFilterList -d aieov.com # Relations to the original domain -d 192.3.194.242 --d fakasafs23asd-adj.ydns.eu -d w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu -d hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu -d avira-antivirus.ydns.eu -d k2ygoods.ydns.eu -d lefteriskkokkiskikinew.ydns.eu --d kelasdbadlkafg-uhuy28.ydns.eu -d nan.ydns.eu -d hurricane.ydns.eu -d hjjhjkk.ydns.eu @@ -1471,12 +1461,6 @@ msFilterList # https://www.virustotal.com/gui/url/4c2c3cf2e4f5b9ac9765eb9c58f2756d8f0f4632ec707107afe3c111f4749025?nocache=1 # https://www.virustotal.com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations -d driversupport.com -# Copied over from URLHaus --d thehotelshowdev.bitkit.dk -# Domains related to the above --d big5constructnigeria-staging.bitkit.dk --d big5-nigeria.bitkit.dk --d bromic-staging.bitkit.dk # A PUP and scam website -d mycleanpc.com # Related domains owned by the same company and used for payment (the first is for 'tech support' scams, the second for their 'ID protection') @@ -1779,7 +1763,6 @@ msFilterList -d 115.194.38.143 -d 61.52.79.32 # https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 --d ups-dk.u1537460.cp.regruhosting.ru # https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 -d lowseelan.com # https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community