This commit is contained in:
Imre Kristoffer Eilertsen
2021-12-17 20:52:03 +01:00
committed by GitHub
parent f8a3a21eec
commit 589ea1fa28
7 changed files with 274 additions and 22 deletions
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
! Version: 10December2021v1-Beta
! Version: 17December2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -2587,8 +2587,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||flash.cn^
||flash.cn^$popup
! https://www.nrk.no/vestfoldogtelemark/1.15750360
||cargo.site^
||cargo.site^$popup
||dundeehills.group^
||dundeehills.group^$popup
!+ NOT_OPTIMIZED
@@ -2622,6 +2620,66 @@ zombooru.com##a[href="http://www.hard55.com"]
! https://borsen.dagbladet.no/74020239/
||poetic-selection.flywheelsites.com^
||poetic-selection.flywheelsites.com^$popup
! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md
||haxpc.net^
||haxpc.net^$popup
||meonenlist.xyz^ument
||nogrono.xyz^ument
||52.53.243.52^
||52.53.243.52^$popup
||hrutruthe.xyz^ument
||34.201.22.10^
||34.201.22.10^$popup
! https://github.com/iam-py-test/investigations/blob/main/2021/12/12/1.md
||advisorsfox.onlineenglishteacher.co^
||advisorsfox.onlineenglishteacher.co^$popup
||visamo.info^ument
||impsus.info^ument
! https://scammer.info/t/crypto-scammers-onceagain/85354
||business.google.com/website/billyandscapedesign^
||business.google.com/website/billyandscapedesign^$popup
! https://scammer.info/t/amazon-phishing-scam/85343
||vrifyacpas-managecstomer.cloudns.ph^
||vrifyacpas-managecstomer.cloudns.ph^$popup
! https://scammer.info/t/i-dont-need-that-bayonet-scam/85314
||steamtrading.org^
||steamtrading.org^$popup
! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
||123.10.225.196^
||123.10.225.196^$popup
||122.192.106.84^
||122.192.106.84^$popup
||172.88.199.9^
||172.88.199.9^$popup
||114.38.176.185^
||114.38.176.185^$popup
||61.52.97.35^
||61.52.97.35^$popup
||27.206.181.208^
||27.206.181.208^$popup
||124.163.130.175^
||124.163.130.175^$popup
||118.75.87.102^
||118.75.87.102^$popup
! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/2.md
||quizhunter.simplifiedstrategy.co^
||quizhunter.simplifiedstrategy.co^$popup
||wxlkdz.middledividehour.top^$popup
! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md
||onemacusa.net^
||onemacusa.net^$popup
||pernicrolst.xyz^
||pernicrolst.xyz^$popup
! https://github.com/DevSpen/links/pull/3
||discordtotal.net^
||discordtotal.net^$popup
||d13nu0oomnx5ti.cloudfront.net^ument,frame
||dgu9g3a2kzqx2.cloudfront.net^ument,frame
||d13pxqgp3ixdbh.cloudfront.net^ument,frame
||systemupdatecontrol.com^
||systemupdatecontrol.com^$popup
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -13005,7 +13063,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||githubus.com^
||githubu.com^
||githu.com^
||rawgithub.com^
||awgithub.com^
||wgithub.com^
||githubuser.com^
@@ -1,6 +1,6 @@
[AdGuard versions from ≥2019]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
! Version: 10December2021v1-Beta
! Version: 17December2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1688,7 +1688,6 @@ zombooru.com##a[href="http://www.hard55.com"]
! https://github.com/uBlockOrigin/uAssets/pull/10017
||flash.cn^$empty,important
! https://www.nrk.no/vestfoldogtelemark/1.15750360
||cargo.site^$empty,important
||dundeehills.group^$empty,important
!+ NOT_OPTIMIZED
132.148.220.142$network
@@ -1711,6 +1710,45 @@ zombooru.com##a[href="http://www.hard55.com"]
||p-stn.net^$empty,important
! https://borsen.dagbladet.no/74020239/
||poetic-selection.flywheelsites.com^$empty,important
! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md
||haxpc.net^$empty,important
||meonenlist.xyz^$document
||nogrono.xyz^$document
52.53.243.52$network
||hrutruthe.xyz^$document
34.201.22.10$network
! https://github.com/iam-py-test/investigations/blob/main/2021/12/12/1.md
||advisorsfox.onlineenglishteacher.co^$empty,important
||visamo.info^$document
||impsus.info^$document
! https://scammer.info/t/crypto-scammers-onceagain/85354
||business.google.com/website/billyandscapedesign^$empty,important
! https://scammer.info/t/amazon-phishing-scam/85343
||vrifyacpas-managecstomer.cloudns.ph^$empty,important
! https://scammer.info/t/i-dont-need-that-bayonet-scam/85314
||steamtrading.org^$empty,important
! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
123.10.225.196$network
122.192.106.84$network
172.88.199.9$network
114.38.176.185$network
61.52.97.35$network
27.206.181.208$network
124.163.130.175$network
118.75.87.102$network
! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/2.md
||quizhunter.simplifiedstrategy.co^$empty,important
! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md
||onemacusa.net^$empty,important
||pernicrolst.xyz^$empty,important
! https://github.com/DevSpen/links/pull/3
||discordtotal.net^$empty,important
||d13nu0oomnx5ti.cloudfront.net^$document,frame
||dgu9g3a2kzqx2.cloudfront.net^$document,frame
||d13pxqgp3ixdbh.cloudfront.net^$document,frame
||systemupdatecontrol.com^$empty,important
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6942,7 +6980,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||githubus.com^
||githubu.com^
||githu.com^
||rawgithub.com^
||awgithub.com^
||wgithub.com^
||githubuser.com^
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
! Version: 10December2021v1-Beta
! Version: 17December2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1514,7 +1514,6 @@
! https://github.com/uBlockOrigin/uAssets/pull/10017
||flash.cn^
! https://www.nrk.no/vestfoldogtelemark/1.15750360
||cargo.site^
||dundeehills.group^
!+ NOT_OPTIMIZED
132.148.220.142
@@ -1537,6 +1536,45 @@
||p-stn.net^
! https://borsen.dagbladet.no/74020239/
||poetic-selection.flywheelsites.com^
! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md
||haxpc.net^
||meonenlist.xyz^$document
||nogrono.xyz^$document
52.53.243.52
||hrutruthe.xyz^$document
34.201.22.10
! https://github.com/iam-py-test/investigations/blob/main/2021/12/12/1.md
||advisorsfox.onlineenglishteacher.co^
||visamo.info^$document
||impsus.info^$document
! https://scammer.info/t/crypto-scammers-onceagain/85354
! https://scammer.info/t/amazon-phishing-scam/85343
||vrifyacpas-managecstomer.cloudns.ph^
! https://scammer.info/t/i-dont-need-that-bayonet-scam/85314
||steamtrading.org^
! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
123.10.225.196
122.192.106.84
172.88.199.9
114.38.176.185
61.52.97.35
27.206.181.208
124.163.130.175
118.75.87.102
! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/2.md
||quizhunter.simplifiedstrategy.co^
! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md
||onemacusa.net^
||pernicrolst.xyz^
! https://github.com/DevSpen/links/pull/3
||discordtotal.net^
||d13nu0oomnx5ti.cloudfront.net^$document,frame
||dgu9g3a2kzqx2.cloudfront.net^$document,frame
||d13pxqgp3ixdbh.cloudfront.net^$document,frame
||systemupdatecontrol.com^
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6762,7 +6800,6 @@
||githubus.com^
||githubu.com^
||githu.com^
||rawgithub.com^
||awgithub.com^
||wgithub.com^
||githubuser.com^
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 10December2021v1-Beta
# Version: 17December2021v1-Beta
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1294,7 +1294,6 @@ daque.cn
dabaicai.com
qqfzn.com
flash.cn
cargo.site
dundeehills.group
132.148.220.142
@@ -1310,6 +1309,36 @@ galerijajava.ba
hfyjbk.ml
p-stn.net
poetic-selection.flywheelsites.com
haxpc.net
meonenlist.xyz
nogrono.xyz
52.53.243.52
hrutruthe.xyz
34.201.22.10
advisorsfox.onlineenglishteacher.co
visamo.info
impsus.info
vrifyacpas-managecstomer.cloudns.ph
steamtrading.org
123.10.225.196
122.192.106.84
172.88.199.9
114.38.176.185
61.52.97.35
27.206.181.208
124.163.130.175
118.75.87.102
quizhunter.simplifiedstrategy.co
wxlkdz.middledividehour.top
middledividehour.top
onemacusa.net
pernicrolst.xyz
discordtotal.net
d13nu0oomnx5ti.cloudfront.net
dgu9g3a2kzqx2.cloudfront.net
d13pxqgp3ixdbh.cloudfront.net
systemupdatecontrol.com
# ——— Standard malware that I stumbled upon on my own ———
downloadprovider.me
@@ -6523,7 +6552,6 @@ fe18.ru
githubus.com
githubu.com
githu.com
rawgithub.com
awgithub.com
wgithub.com
githubuser.com
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
# Version: 10December2021v1-Alpha
# Version: 17December2021v1-Alpha
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1294,7 +1294,6 @@
127.0.0.1 dabaicai.com
127.0.0.1 qqfzn.com
127.0.0.1 flash.cn
127.0.0.1 cargo.site
127.0.0.1 dundeehills.group
127.0.0.1 132.148.220.142
@@ -1310,6 +1309,36 @@
127.0.0.1 hfyjbk.ml
127.0.0.1 p-stn.net
127.0.0.1 poetic-selection.flywheelsites.com
127.0.0.1 haxpc.net
127.0.0.1 meonenlist.xyz
127.0.0.1 nogrono.xyz
127.0.0.1 52.53.243.52
127.0.0.1 hrutruthe.xyz
127.0.0.1 34.201.22.10
127.0.0.1 advisorsfox.onlineenglishteacher.co
127.0.0.1 visamo.info
127.0.0.1 impsus.info
127.0.0.1 vrifyacpas-managecstomer.cloudns.ph
127.0.0.1 steamtrading.org
127.0.0.1 123.10.225.196
127.0.0.1 122.192.106.84
127.0.0.1 172.88.199.9
127.0.0.1 114.38.176.185
127.0.0.1 61.52.97.35
127.0.0.1 27.206.181.208
127.0.0.1 124.163.130.175
127.0.0.1 118.75.87.102
127.0.0.1 quizhunter.simplifiedstrategy.co
127.0.0.1 wxlkdz.middledividehour.top
127.0.0.1 middledividehour.top
127.0.0.1 onemacusa.net
127.0.0.1 pernicrolst.xyz
127.0.0.1 discordtotal.net
127.0.0.1 d13nu0oomnx5ti.cloudfront.net
127.0.0.1 dgu9g3a2kzqx2.cloudfront.net
127.0.0.1 d13pxqgp3ixdbh.cloudfront.net
127.0.0.1 systemupdatecontrol.com
# ——— Standard malware that I stumbled upon on my own ———
127.0.0.1 downloadprovider.me
@@ -6523,7 +6552,6 @@
127.0.0.1 githubus.com
127.0.0.1 githubu.com
127.0.0.1 githu.com
127.0.0.1 rawgithub.com
127.0.0.1 awgithub.com
127.0.0.1 wgithub.com
127.0.0.1 githubuser.com
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 10December2021v1-Alpha
# Version: 17December2021v1-Alpha
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1316,7 +1316,6 @@
#
@@ -1332,6 +1331,36 @@
{+block}
# ——— Standard malware that I stumbled upon on my own ———
@@ -6563,7 +6592,6 @@
{+block}
# ——— Usually used by various groups who buy old domains and display illicit ads on them ———
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 10December2021v1-Beta
# Version: 17December2021v1-Beta
: expires = 5
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1567,7 +1567,6 @@ msFilterList
# https://github.com/uBlockOrigin/uAssets/pull/10017
-d flash.cn
# https://www.nrk.no/vestfoldogtelemark/1.15750360
-d cargo.site
-d dundeehills.group
!+ NOT_OPTIMIZED
-d 132.148.220.142
@@ -1590,6 +1589,45 @@ msFilterList
-d p-stn.net
# https://borsen.dagbladet.no/74020239/
-d poetic-selection.flywheelsites.com
# https://github.com/iam-py-test/investigations/blob/main/2021/12 13 1.md
-d haxpc.net
-d meonenlist.xyz
-d nogrono.xyz
-d 52.53.243.52
-d hrutruthe.xyz
-d 34.201.22.10
# https://github.com/iam-py-test/investigations/blob/main/2021/12 12 1.md
-d advisorsfox.onlineenglishteacher.co
-d visamo.info
-d impsus.info
# https://scammer.info/t/crypto-scammers-onceagain/85354
-d business.google.com website billyandscapedesign
# https://scammer.info/t/amazon-phishing-scam/85343
-d vrifyacpas-managecstomer.cloudns.ph
# https://scammer.info/t/i-dont-need-that-bayonet-scam/85314
-d steamtrading.org
# https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
-d 123.10.225.196
-d 122.192.106.84
-d 172.88.199.9
-d 114.38.176.185
-d 61.52.97.35
-d 27.206.181.208
-d 124.163.130.175
-d 118.75.87.102
# https://github.com/iam-py-test/investigations/blob/main/2021/12 14 2.md
-d quizhunter.simplifiedstrategy.co
-d wxlkdz.middledividehour.top
-d middledividehour.top
# https://github.com/iam-py-test/investigations/blob/main/2021/12 14 1.md
-d onemacusa.net
-d pernicrolst.xyz
# https://github.com/DevSpen/links/pull/3
-d discordtotal.net
-d d13nu0oomnx5ti.cloudfront.net
-d dgu9g3a2kzqx2.cloudfront.net
-d d13pxqgp3ixdbh.cloudfront.net
-d systemupdatecontrol.com
# ——— Standard malware that I stumbled upon on my own ———
# http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6815,7 +6853,6 @@ msFilterList
-d githubus.com
-d githubu.com
-d githu.com
-d rawgithub.com
-d awgithub.com
-d wgithub.com
-d githubuser.com