diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index c728482e6..031ecf661 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 10December2021v1-Beta +! Version: 17December2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -2587,8 +2587,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||flash.cn^ ||flash.cn^$popup ! https://www.nrk.no/vestfoldogtelemark/1.15750360 -||cargo.site^ -||cargo.site^$popup ||dundeehills.group^ ||dundeehills.group^$popup !+ NOT_OPTIMIZED @@ -2622,6 +2620,66 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://borsen.dagbladet.no/74020239/ ||poetic-selection.flywheelsites.com^ ||poetic-selection.flywheelsites.com^$popup +! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md +||haxpc.net^ +||haxpc.net^$popup +||meonenlist.xyz^ument +||nogrono.xyz^ument +||52.53.243.52^ +||52.53.243.52^$popup +||hrutruthe.xyz^ument +||34.201.22.10^ +||34.201.22.10^$popup +! https://github.com/iam-py-test/investigations/blob/main/2021/12/12/1.md +||advisorsfox.onlineenglishteacher.co^ +||advisorsfox.onlineenglishteacher.co^$popup +||visamo.info^ument +||impsus.info^ument +! https://scammer.info/t/crypto-scammers-onceagain/85354 +||business.google.com/website/billyandscapedesign^ +||business.google.com/website/billyandscapedesign^$popup +! https://scammer.info/t/amazon-phishing-scam/85343 +||vrifyacpas-managecstomer.cloudns.ph^ +||vrifyacpas-managecstomer.cloudns.ph^$popup +! https://scammer.info/t/i-dont-need-that-bayonet-scam/85314 +||steamtrading.org^ +||steamtrading.org^$popup +! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +||123.10.225.196^ +||123.10.225.196^$popup +||122.192.106.84^ +||122.192.106.84^$popup +||172.88.199.9^ +||172.88.199.9^$popup +||114.38.176.185^ +||114.38.176.185^$popup +||61.52.97.35^ +||61.52.97.35^$popup +||27.206.181.208^ +||27.206.181.208^$popup +||124.163.130.175^ +||124.163.130.175^$popup +||118.75.87.102^ +||118.75.87.102^$popup +! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/2.md +||quizhunter.simplifiedstrategy.co^ +||quizhunter.simplifiedstrategy.co^$popup + +||wxlkdz.middledividehour.top^$popup + +! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md +||onemacusa.net^ +||onemacusa.net^$popup +||pernicrolst.xyz^ +||pernicrolst.xyz^$popup +! https://github.com/DevSpen/links/pull/3 +||discordtotal.net^ +||discordtotal.net^$popup +||d13nu0oomnx5ti.cloudfront.net^ument,frame +||dgu9g3a2kzqx2.cloudfront.net^ument,frame +||d13pxqgp3ixdbh.cloudfront.net^ument,frame +||systemupdatecontrol.com^ +||systemupdatecontrol.com^$popup ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -13005,7 +13063,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||githubus.com^ ||githubu.com^ ||githu.com^ -||rawgithub.com^ ||awgithub.com^ ||wgithub.com^ ||githubuser.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 7b8845003..727af5bdf 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from β‰₯2019] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 10December2021v1-Beta +! Version: 17December2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1688,7 +1688,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/uBlockOrigin/uAssets/pull/10017 ||flash.cn^$empty,important ! https://www.nrk.no/vestfoldogtelemark/1.15750360 -||cargo.site^$empty,important ||dundeehills.group^$empty,important !+ NOT_OPTIMIZED 132.148.220.142$network @@ -1711,6 +1710,45 @@ zombooru.com##a[href="http://www.hard55.com"] ||p-stn.net^$empty,important ! https://borsen.dagbladet.no/74020239/ ||poetic-selection.flywheelsites.com^$empty,important +! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md +||haxpc.net^$empty,important +||meonenlist.xyz^$document +||nogrono.xyz^$document +52.53.243.52$network +||hrutruthe.xyz^$document +34.201.22.10$network +! https://github.com/iam-py-test/investigations/blob/main/2021/12/12/1.md +||advisorsfox.onlineenglishteacher.co^$empty,important +||visamo.info^$document +||impsus.info^$document +! https://scammer.info/t/crypto-scammers-onceagain/85354 +||business.google.com/website/billyandscapedesign^$empty,important +! https://scammer.info/t/amazon-phishing-scam/85343 +||vrifyacpas-managecstomer.cloudns.ph^$empty,important +! https://scammer.info/t/i-dont-need-that-bayonet-scam/85314 +||steamtrading.org^$empty,important +! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +123.10.225.196$network +122.192.106.84$network +172.88.199.9$network +114.38.176.185$network +61.52.97.35$network +27.206.181.208$network +124.163.130.175$network +118.75.87.102$network +! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/2.md +||quizhunter.simplifiedstrategy.co^$empty,important + + +! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md +||onemacusa.net^$empty,important +||pernicrolst.xyz^$empty,important +! https://github.com/DevSpen/links/pull/3 +||discordtotal.net^$empty,important +||d13nu0oomnx5ti.cloudfront.net^$document,frame +||dgu9g3a2kzqx2.cloudfront.net^$document,frame +||d13pxqgp3ixdbh.cloudfront.net^$document,frame +||systemupdatecontrol.com^$empty,important ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6942,7 +6980,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||githubus.com^ ||githubu.com^ ||githu.com^ -||rawgithub.com^ ||awgithub.com^ ||wgithub.com^ ||githubuser.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 24ca48f75..ab4d747f1 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 10December2021v1-Beta +! Version: 17December2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1514,7 +1514,6 @@ ! https://github.com/uBlockOrigin/uAssets/pull/10017 ||flash.cn^ ! https://www.nrk.no/vestfoldogtelemark/1.15750360 -||cargo.site^ ||dundeehills.group^ !+ NOT_OPTIMIZED 132.148.220.142 @@ -1537,6 +1536,45 @@ ||p-stn.net^ ! https://borsen.dagbladet.no/74020239/ ||poetic-selection.flywheelsites.com^ +! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md +||haxpc.net^ +||meonenlist.xyz^$document +||nogrono.xyz^$document +52.53.243.52 +||hrutruthe.xyz^$document +34.201.22.10 +! https://github.com/iam-py-test/investigations/blob/main/2021/12/12/1.md +||advisorsfox.onlineenglishteacher.co^ +||visamo.info^$document +||impsus.info^$document +! https://scammer.info/t/crypto-scammers-onceagain/85354 + +! https://scammer.info/t/amazon-phishing-scam/85343 +||vrifyacpas-managecstomer.cloudns.ph^ +! https://scammer.info/t/i-dont-need-that-bayonet-scam/85314 +||steamtrading.org^ +! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +123.10.225.196 +122.192.106.84 +172.88.199.9 +114.38.176.185 +61.52.97.35 +27.206.181.208 +124.163.130.175 +118.75.87.102 +! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/2.md +||quizhunter.simplifiedstrategy.co^ + + +! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md +||onemacusa.net^ +||pernicrolst.xyz^ +! https://github.com/DevSpen/links/pull/3 +||discordtotal.net^ +||d13nu0oomnx5ti.cloudfront.net^$document,frame +||dgu9g3a2kzqx2.cloudfront.net^$document,frame +||d13pxqgp3ixdbh.cloudfront.net^$document,frame +||systemupdatecontrol.com^ ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6762,7 +6800,6 @@ ||githubus.com^ ||githubu.com^ ||githu.com^ -||rawgithub.com^ ||awgithub.com^ ||wgithub.com^ ||githubuser.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index b795683bc..500e5191d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 10December2021v1-Beta +# Version: 17December2021v1-Beta # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1294,7 +1294,6 @@ daque.cn dabaicai.com qqfzn.com flash.cn -cargo.site dundeehills.group 132.148.220.142 @@ -1310,6 +1309,36 @@ galerijajava.ba hfyjbk.ml p-stn.net poetic-selection.flywheelsites.com +haxpc.net +meonenlist.xyz +nogrono.xyz +52.53.243.52 +hrutruthe.xyz +34.201.22.10 +advisorsfox.onlineenglishteacher.co +visamo.info +impsus.info + +vrifyacpas-managecstomer.cloudns.ph +steamtrading.org +123.10.225.196 +122.192.106.84 +172.88.199.9 +114.38.176.185 +61.52.97.35 +27.206.181.208 +124.163.130.175 +118.75.87.102 +quizhunter.simplifiedstrategy.co +wxlkdz.middledividehour.top +middledividehour.top +onemacusa.net +pernicrolst.xyz +discordtotal.net +d13nu0oomnx5ti.cloudfront.net +dgu9g3a2kzqx2.cloudfront.net +d13pxqgp3ixdbh.cloudfront.net +systemupdatecontrol.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” downloadprovider.me @@ -6523,7 +6552,6 @@ fe18.ru githubus.com githubu.com githu.com -rawgithub.com awgithub.com wgithub.com githubuser.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 16a7a3bac..e6391d866 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 10December2021v1-Alpha +# Version: 17December2021v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1294,7 +1294,6 @@ 127.0.0.1 dabaicai.com 127.0.0.1 qqfzn.com 127.0.0.1 flash.cn -127.0.0.1 cargo.site 127.0.0.1 dundeehills.group 127.0.0.1 132.148.220.142 @@ -1310,6 +1309,36 @@ 127.0.0.1 hfyjbk.ml 127.0.0.1 p-stn.net 127.0.0.1 poetic-selection.flywheelsites.com +127.0.0.1 haxpc.net +127.0.0.1 meonenlist.xyz +127.0.0.1 nogrono.xyz +127.0.0.1 52.53.243.52 +127.0.0.1 hrutruthe.xyz +127.0.0.1 34.201.22.10 +127.0.0.1 advisorsfox.onlineenglishteacher.co +127.0.0.1 visamo.info +127.0.0.1 impsus.info + +127.0.0.1 vrifyacpas-managecstomer.cloudns.ph +127.0.0.1 steamtrading.org +127.0.0.1 123.10.225.196 +127.0.0.1 122.192.106.84 +127.0.0.1 172.88.199.9 +127.0.0.1 114.38.176.185 +127.0.0.1 61.52.97.35 +127.0.0.1 27.206.181.208 +127.0.0.1 124.163.130.175 +127.0.0.1 118.75.87.102 +127.0.0.1 quizhunter.simplifiedstrategy.co +127.0.0.1 wxlkdz.middledividehour.top +127.0.0.1 middledividehour.top +127.0.0.1 onemacusa.net +127.0.0.1 pernicrolst.xyz +127.0.0.1 discordtotal.net +127.0.0.1 d13nu0oomnx5ti.cloudfront.net +127.0.0.1 dgu9g3a2kzqx2.cloudfront.net +127.0.0.1 d13pxqgp3ixdbh.cloudfront.net +127.0.0.1 systemupdatecontrol.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” 127.0.0.1 downloadprovider.me @@ -6523,7 +6552,6 @@ 127.0.0.1 githubus.com 127.0.0.1 githubu.com 127.0.0.1 githu.com -127.0.0.1 rawgithub.com 127.0.0.1 awgithub.com 127.0.0.1 wgithub.com 127.0.0.1 githubuser.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 8b5f1f628..a49642520 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 10December2021v1-Alpha +# Version: 17December2021v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1316,7 +1316,6 @@ - # @@ -1332,6 +1331,36 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + {+block} # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -6563,7 +6592,6 @@ - {+block} # β€”β€”β€” Usually used by various groups who buy old domains and display illicit ads on them β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index d1c56ca16..6102f97aa 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 10December2021v1-Beta +# Version: 17December2021v1-Beta : expires = 5 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1567,7 +1567,6 @@ msFilterList # https://github.com/uBlockOrigin/uAssets/pull/10017 -d flash.cn # https://www.nrk.no/vestfoldogtelemark/1.15750360 --d cargo.site -d dundeehills.group !+ NOT_OPTIMIZED -d 132.148.220.142 @@ -1590,6 +1589,45 @@ msFilterList -d p-stn.net # https://borsen.dagbladet.no/74020239/ -d poetic-selection.flywheelsites.com +# https://github.com/iam-py-test/investigations/blob/main/2021/12 13 1.md +-d haxpc.net +-d meonenlist.xyz +-d nogrono.xyz +-d 52.53.243.52 +-d hrutruthe.xyz +-d 34.201.22.10 +# https://github.com/iam-py-test/investigations/blob/main/2021/12 12 1.md +-d advisorsfox.onlineenglishteacher.co +-d visamo.info +-d impsus.info +# https://scammer.info/t/crypto-scammers-onceagain/85354 +-d business.google.com website billyandscapedesign +# https://scammer.info/t/amazon-phishing-scam/85343 +-d vrifyacpas-managecstomer.cloudns.ph +# https://scammer.info/t/i-dont-need-that-bayonet-scam/85314 +-d steamtrading.org +# https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +-d 123.10.225.196 +-d 122.192.106.84 +-d 172.88.199.9 +-d 114.38.176.185 +-d 61.52.97.35 +-d 27.206.181.208 +-d 124.163.130.175 +-d 118.75.87.102 +# https://github.com/iam-py-test/investigations/blob/main/2021/12 14 2.md +-d quizhunter.simplifiedstrategy.co +-d wxlkdz.middledividehour.top +-d middledividehour.top +# https://github.com/iam-py-test/investigations/blob/main/2021/12 14 1.md +-d onemacusa.net +-d pernicrolst.xyz +# https://github.com/DevSpen/links/pull/3 +-d discordtotal.net +-d d13nu0oomnx5ti.cloudfront.net +-d dgu9g3a2kzqx2.cloudfront.net +-d d13pxqgp3ixdbh.cloudfront.net +-d systemupdatecontrol.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6815,7 +6853,6 @@ msFilterList -d githubus.com -d githubu.com -d githu.com --d rawgithub.com -d awgithub.com -d wgithub.com -d githubuser.com