From 69a1831fbf8ffa9619047db71c73836895f5198a Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Wed, 3 Aug 2022 18:28:20 +0200 Subject: [PATCH] Fix #632 --- .../AntiMalwareABP.txt | 13 +++---------- .../AntiMalwareAdGuard.txt | 10 +++------- .../AntiMalwareAdGuardHome.txt | 10 +++------- .../AntiMalwareDomains.txt | 9 ++------- .../AntiMalwareHosts.txt | 9 ++------- .../AntiMalwarePrivoxy.action | 7 +------ .../AntiMalwareTPL.tpl | 10 +++------- ...on Sprout's and other adblocker lists' IPs.ipset | 2 -- 8 files changed, 17 insertions(+), 53 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 830d9c511..775d5b7bf 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 31July2022v1 +! Version: 03August2022v2 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -535,8 +535,8 @@ zombooru.com##a[href="http://www.hard55.com"] ||discordaap. ||discordaap.$popup ! https://github.com/AdguardTeam/AdguardFilters/issues/124611 -||ondigitalocean.app^ -||ondigitalocean.app^$popup +! (https://github.com/DandelionSprout/adfilt/issues/632) +.ondigitalocean.app^$dnstype=~CNAME ?bemobdata= ?bemobdata=$popup ||inbluson.com^ @@ -3258,9 +3258,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/DevSpen/links/pull/3 ||discordtotal.net^ ||discordtotal.net^$popup -||d13nu0oomnx5ti.cloudfront.net^$frame -||dgu9g3a2kzqx2.cloudfront.net^$frame -||d13pxqgp3ixdbh.cloudfront.net^$frame ||systemupdatecontrol.com^ ||systemupdatecontrol.com^$popup ! https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ @@ -11941,8 +11938,6 @@ toorgle.net##.join ||rof77skt5zo0.com^$popup ||roguefairfaxeminent.com^ ||roguefairfaxeminent.com^$popup -||roksit.net^ -||roksit.net^$popup ||rolerompchalked.com^ ||rolerompchalked.com^$popup ||rollersadnessstranded.com^ @@ -14021,8 +14016,6 @@ toorgle.net##.join ||jpjmpqaupc.com^$popup ||xhrxmbqixobk.com^ ||xhrxmbqixobk.com^$popup -||qocvicklgcgr.com^ -||qocvicklgcgr.com^$popup ||qrclevrfjw.com^ ||qrclevrfjw.com^$popup ||ijwtkojhc.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index c1a5e6f21..f30573b7e 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from 2019 onwards] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 31July2022v1 +! Version: 03August2022v2 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -494,7 +494,8 @@ zombooru.com##a[href="http://www.hard55.com"] ||discorrapp.$all ||discordaap.$all ! https://github.com/AdguardTeam/AdguardFilters/issues/124611 -||ondigitalocean.app^$all +! (https://github.com/DandelionSprout/adfilt/issues/632) +.ondigitalocean.app^$document,dnstype=~CNAME ?bemobdata=$all ||inbluson.com^$all ||bemobtrcks.com^$all @@ -2052,9 +2053,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||pernicrolst.xyz^$all ! https://github.com/DevSpen/links/pull/3 ||discordtotal.net^$all -||d13nu0oomnx5ti.cloudfront.net^$document,frame -||dgu9g3a2kzqx2.cloudfront.net^$document,frame -||d13pxqgp3ixdbh.cloudfront.net^$document,frame ||systemupdatecontrol.com^$all ! https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ ||mozicrack.com^$all @@ -6463,7 +6461,6 @@ toorgle.net##.join ||rockynoderearrange.com^$all ||rof77skt5zo0.com^$all ||roguefairfaxeminent.com^$all -||roksit.net^$all ||rolerompchalked.com^$all ||rollersadnessstranded.com^$all ||rookmemorizevoluntary.com^$all @@ -7506,7 +7503,6 @@ toorgle.net##.join ||mczahprdql.com^$all ||jpjmpqaupc.com^$all ||xhrxmbqixobk.com^$all -||qocvicklgcgr.com^$all ||qrclevrfjw.com^$all ||ijwtkojhc.com^$all ! Googling Aksel Hennie (Results for prior week) in late July 2021 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index d7f281c6e..5ab9f987a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 31July2022v1 +! Version: 03August2022v2 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -304,7 +304,8 @@ ||discorrapp. ||discordaap. ! https://github.com/AdguardTeam/AdguardFilters/issues/124611 -||ondigitalocean.app^ +! (https://github.com/DandelionSprout/adfilt/issues/632) +.ondigitalocean.app^$dnstype=~CNAME ?bemobdata= ||inbluson.com^ ||bemobtrcks.com^ @@ -1862,9 +1863,6 @@ ||pernicrolst.xyz^ ! https://github.com/DevSpen/links/pull/3 ||discordtotal.net^ -||d13nu0oomnx5ti.cloudfront.net^frame -||dgu9g3a2kzqx2.cloudfront.net^frame -||d13pxqgp3ixdbh.cloudfront.net^frame ||systemupdatecontrol.com^ ! https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ ||mozicrack.com^ @@ -6271,7 +6269,6 @@ ||rockynoderearrange.com^ ||rof77skt5zo0.com^ ||roguefairfaxeminent.com^ -||roksit.net^ ||rolerompchalked.com^ ||rollersadnessstranded.com^ ||rookmemorizevoluntary.com^ @@ -7314,7 +7311,6 @@ ||mczahprdql.com^ ||jpjmpqaupc.com^ ||xhrxmbqixobk.com^ -||qocvicklgcgr.com^ ||qrclevrfjw.com^ ||ijwtkojhc.com^ ! Googling Aksel Hennie (Results for prior week) in late July 2021 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 3b7825ac7..274e1b143 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 31July2022v1 +# Version: 03August2022v2 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -265,7 +265,7 @@ forgoprokick.icu -ondigitalocean.app + inbluson.com bemobtrcks.com @@ -1629,9 +1629,6 @@ middledividehour.top onemacusa.net pernicrolst.xyz discordtotal.net -d13nu0oomnx5ti.cloudfront.net -dgu9g3a2kzqx2.cloudfront.net -d13pxqgp3ixdbh.cloudfront.net systemupdatecontrol.com mozicrack.com download-srvr.xyz @@ -5985,7 +5982,6 @@ rockforesee.com rockynoderearrange.com rof77skt5zo0.com roguefairfaxeminent.com -roksit.net rolerompchalked.com rollersadnessstranded.com rookmemorizevoluntary.com @@ -7027,7 +7023,6 @@ eivbjsegbino.com mczahprdql.com jpjmpqaupc.com xhrxmbqixobk.com -qocvicklgcgr.com qrclevrfjw.com ijwtkojhc.com # Googling Aksel Hennie (Results for prior week) in late July 2021 diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index e6d142d4e..655bc002b 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 31July2022v1 +# Version: 03August2022v2 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -265,7 +265,7 @@ -127.0.0.1 ondigitalocean.app + 127.0.0.1 inbluson.com 127.0.0.1 bemobtrcks.com @@ -1629,9 +1629,6 @@ 127.0.0.1 onemacusa.net 127.0.0.1 pernicrolst.xyz 127.0.0.1 discordtotal.net -127.0.0.1 d13nu0oomnx5ti.cloudfront.net -127.0.0.1 dgu9g3a2kzqx2.cloudfront.net -127.0.0.1 d13pxqgp3ixdbh.cloudfront.net 127.0.0.1 systemupdatecontrol.com 127.0.0.1 mozicrack.com 127.0.0.1 download-srvr.xyz @@ -5985,7 +5982,6 @@ 127.0.0.1 rockynoderearrange.com 127.0.0.1 rof77skt5zo0.com 127.0.0.1 roguefairfaxeminent.com -127.0.0.1 roksit.net 127.0.0.1 rolerompchalked.com 127.0.0.1 rollersadnessstranded.com 127.0.0.1 rookmemorizevoluntary.com @@ -7027,7 +7023,6 @@ 127.0.0.1 mczahprdql.com 127.0.0.1 jpjmpqaupc.com 127.0.0.1 xhrxmbqixobk.com -127.0.0.1 qocvicklgcgr.com 127.0.0.1 qrclevrfjw.com 127.0.0.1 ijwtkojhc.com # Googling Aksel Hennie (Results for prior week) in late July 2021 diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 5b4f8562d..8b86b6913 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 31July2022v1 +# Version: 03August2022v2 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -1654,9 +1654,6 @@ - - - @@ -7050,7 +7047,6 @@ - 192.243.59.* @@ -7061,7 +7057,6 @@ - # Googling Aksel Hennie (Results for prior week) in late July 2021 diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 239e1193f..7dec69f26 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 31July2022v1 +# Version: 03August2022v2 : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -383,7 +383,8 @@ msFilterList -d discorrapp. -d discordaap. # https://github.com/AdguardTeam/AdguardFilters/issues/124611 --d ondigitalocean.app +# (https://github.com/DandelionSprout/adfilt/issues/632) +ndigitalocean.app -d inbluson.com -d bemobtrcks.com @@ -1938,9 +1939,6 @@ msFilterList -d pernicrolst.xyz # https://github.com/DevSpen/links/pull/3 -d discordtotal.net --d d13nu0oomnx5ti.cloudfront.net --d dgu9g3a2kzqx2.cloudfront.net --d d13pxqgp3ixdbh.cloudfront.net -d systemupdatecontrol.com # https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ -d mozicrack.com @@ -6345,7 +6343,6 @@ om landers iphone*_spin -d rockynoderearrange.com -d rof77skt5zo0.com -d roguefairfaxeminent.com --d roksit.net -d rolerompchalked.com -d rollersadnessstranded.com -d rookmemorizevoluntary.com @@ -7388,7 +7385,6 @@ om landers iphone*_spin -d mczahprdql.com -d jpjmpqaupc.com -d xhrxmbqixobk.com --d qocvicklgcgr.com -d qrclevrfjw.com -d ijwtkojhc.com # Googling Aksel Hennie (Results for prior week) in late July 2021 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 3ac57185d..46a305850 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -264,8 +264,6 @@ 5.189.218.0/23 31.184.200.0/22 185.238.152.0/22 -192.243.59.13 -192.243.59.20 192.243.61.225 147.135.16.27 # Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)