diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 707c6b937..8de55d12d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 08January2020v1-Beta +! Version: 13January2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -36,15 +36,19 @@ ! β€”β€”β€” Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") β€”β€”β€” ||adblock.gjtech.net^ ||spam404bl.com^ +||109.201.135.46^ ||hufilter.hu^ ||fredfiber.no^ ||securemecca.com^ +||1hos.cf^ +||1hosts.cf^ ! β€”β€”β€” Old tech-related domains that have fallen into the hands of questionable new owners. β€”β€”β€” ! To log in to TP-Link routers, use tplinkwifi.net instead. ||tplinklogin.net^ ||tplinkextender.net^ ||ublock.org^ +||138.68.252.54^ ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^ @@ -63,6 +67,10 @@ ||dreamlinux.com.br^ ||dreamlinux.net^ ||dreamlinux.info^ +||104.24.117.74^ +||104.24.116.74^ +||[2606:4700:30::6818:754a]^ +||[2606:4700:30::6818:744a]^ ||hacktolive.org^ ||mandriva.com^ @@ -230,9 +238,11 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ! β€”β€”β€” https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ β€”β€”β€” ||dwarffortresswiki.com^ +||103.224.212.249^ ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^ -||katie.tncrun.net^ +||tncrun.net^ +||54.174.156.141^ ! Placeholder line for alternate list versions diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 319d42eca..5da9390fa 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard β‰₯6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 08January2020v1-Beta +! Version: 13January2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -56,15 +56,19 @@ google.*##.srg:has(a[oncontextmenu][href*=".php?xxx="]) ! β€”β€”β€” Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") β€”β€”β€” ||adblock.gjtech.net^$empty,important ||spam404bl.com^$empty,important +109.201.135.46$network ||hufilter.hu^$empty,important ||fredfiber.no^$empty,important ||securemecca.com^$empty,important +||1hos.cf^$empty,important +||1hosts.cf^$empty,important ! β€”β€”β€” Old tech-related domains that have fallen into the hands of questionable new owners. β€”β€”β€” ! To log in to TP-Link routers, use tplinkwifi.net instead. ||tplinklogin.net^$empty,important ||tplinkextender.net^$empty,important ||ublock.org^$empty,important +138.68.252.54$network ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^$empty,important @@ -83,6 +87,10 @@ google.*##.srg:has(a[oncontextmenu][href*=".php?xxx="]) ||dreamlinux.com.br^$empty,important ||dreamlinux.net^$empty,important ||dreamlinux.info^$empty,important +104.24.117.74$network +104.24.116.74$network +[2606:4700:30::6818:754a]$network +[2606:4700:30::6818:744a]$network ||hacktolive.org^$empty,important ||mandriva.com^$empty,important @@ -249,10 +257,12 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ||the1adblocker.com^$empty,important ! β€”β€”β€” https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ β€”β€”β€” -||dwarffortresswiki.com^ +||dwarffortresswiki.com^$empty,important +103.224.212.249$network ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^$empty,important -||katie.tncrun.net^$empty,important +||tncrun.net^$empty,important +54.174.156.141$network ! Placeholder line for alternate list versions diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index e4d2d2f74..187687032 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home) -! Version: 08January2020v1-Beta +! Version: 13January2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -70,15 +70,19 @@ ! β€”β€”β€” Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") β€”β€”β€” ||adblock.gjtech.net^ ||spam404bl.com^ +109.201.135.46 ||hufilter.hu^ ||fredfiber.no^ ||securemecca.com^ +||1hos.cf^ +||1hosts.cf^ ! β€”β€”β€” Old tech-related domains that have fallen into the hands of questionable new owners. β€”β€”β€” ! To log in to TP-Link routers, use tplinkwifi.net instead. ||tplinklogin.net^ ||tplinkextender.net^ ||ublock.org^ +138.68.252.54 ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^ @@ -97,6 +101,10 @@ ||dreamlinux.com.br^ ||dreamlinux.net^ ||dreamlinux.info^ +104.24.117.74 +104.24.116.74 +2606:4700:30::6818:754a +2606:4700:30::6818:744a ||hacktolive.org^ ||mandriva.com^ @@ -188,10 +196,12 @@ ||the1adblocker.com^ ! β€”β€”β€” https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ β€”β€”β€” -||dwarffortresswiki.com^ +||dwarffortresswiki.com^$doc +103.224.212.249 ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^ -||katie.tncrun.net^ +||tncrun.net^ +54.174.156.141 ! Placeholder line for alternate list versions diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 60ef56839..b06516e23 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 08January2020v1-Beta +# Version: 13January2020v1-Beta # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -35,15 +35,19 @@ # β€”β€”β€” Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") β€”β€”β€” adblock.gjtech.net spam404bl.com +109.201.135.46 hufilter.hu fredfiber.no securemecca.com +1hos.cf +1hosts.cf # β€”β€”β€” Old tech-related domains that have fallen into the hands of questionable new owners. β€”β€”β€” # To log in to TP-Link routers, use tplinkwifi.net instead. tplinklogin.net tplinkextender.net ublock.org +138.68.252.54 # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” funeducation.com @@ -62,6 +66,10 @@ officialiqtests.com dreamlinux.com.br dreamlinux.net dreamlinux.info +104.24.117.74 +104.24.116.74 +[2606:4700:30::6818:754a] +[2606:4700:30::6818:744a] hacktolive.org mandriva.com @@ -154,9 +162,11 @@ the1adblocker.com # β€”β€”β€” https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ β€”β€”β€” dwarffortresswiki.com +103.224.212.249 # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ppc.netnet44.net -katie.tncrun.net +tncrun.net +54.174.156.141 diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 60c650f2d..ceb6b2f42 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 08January2020v1-Alpha +# Version: 13January2020v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -35,15 +35,19 @@ # β€”β€”β€” Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") β€”β€”β€” 127.0.0.1 adblock.gjtech.net 127.0.0.1 spam404bl.com +127.0.0.1 109.201.135.46 127.0.0.1 hufilter.hu 127.0.0.1 fredfiber.no 127.0.0.1 securemecca.com +127.0.0.1 1hos.cf +127.0.0.1 1hosts.cf # β€”β€”β€” Old tech-related domains that have fallen into the hands of questionable new owners. β€”β€”β€” # To log in to TP-Link routers, use tplinkwifi.net instead. 127.0.0.1 tplinklogin.net 127.0.0.1 tplinkextender.net -127.0.0.1 ublock.org +127.0.0.1 ublock.org www.ublock.org demo.ublock.org +127.0.0.1 138.68.252.54 # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” 127.0.0.1 funeducation.com @@ -62,6 +66,10 @@ 127.0.0.1 dreamlinux.com.br 127.0.0.1 dreamlinux.net 127.0.0.1 dreamlinux.info +127.0.0.1 104.24.117.74 +127.0.0.1 104.24.116.74 +:: 2606:4700:30::6818:754a +:: 2606:4700:30::6818:744a 127.0.0.1 hacktolive.org 127.0.0.1 mandriva.com @@ -95,7 +103,7 @@ # https://www.2-spyware.com/remove-redirector-gvt1-com.html # β€”β€”β€” Sites that fraudulently claim you've won a new phone β€”β€”β€” -/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)\/$1p,doc,domain=~ Warning displayed due to: Fraudulently claims you've won a new phone. + # β€”β€”β€” Banner for "MSN New Tab" β€”β€”β€” @@ -154,9 +162,11 @@ # β€”β€”β€” https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ β€”β€”β€” 127.0.0.1 dwarffortresswiki.com +127.0.0.1 103.224.212.249 # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” 127.0.0.1 ppc.netnet44.net -127.0.0.1 katie.tncrun.net +127.0.0.1 tncrun.net www.tncrun.net amanda.tncrun.net sarah.tncrun.net pamela.tncrun.net jessica.tncrun.net ics.tncrun.net katie.tncrun.net pbu.tncrun.net emily.tncrun.net +127.0.0.1 54.174.156.141 diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index c6c36b2ed..42155e849 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 08January2020v1-Alpha +# Version: 13January2020v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -42,9 +42,12 @@ # β€”β€”β€” Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") β€”β€”β€” .adblock.gjtech.net .spam404bl.com +.109.201.135.46 .hufilter.hu .fredfiber.no .securemecca.com +.1hos.cf +.1hosts.cf {+block} # β€”β€”β€” Old tech-related domains that have fallen into the hands of questionable new owners. β€”β€”β€” @@ -52,6 +55,7 @@ .tplinklogin.net .tplinkextender.net .ublock.org +.138.68.252.54 {+block} # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” @@ -72,6 +76,10 @@ .dreamlinux.com.br .dreamlinux.net .dreamlinux.info +.104.24.117.74 +.104.24.116.74 +.[2606:4700:30::6818:754a] +.[2606:4700:30::6818:744a] .hacktolive.org .mandriva.com @@ -177,11 +185,13 @@ {+block} # β€”β€”β€” https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ β€”β€”β€” .dwarffortresswiki.com +.103.224.212.249 {+block} # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” .ppc.netnet44.net -.katie.tncrun.net +.tncrun.net +.54.174.156.141 {-block} # Manually updated Privoxy version of the whitelisted domains from the other versions of this list. diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 053c384ed..f7de81870 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 08January2020v1-Beta +# Version: 13January2020v1-Beta : expires = 5 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -70,15 +70,19 @@ msFilterList # β€”β€”β€” Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") β€”β€”β€” -d adblock.gjtech.net -d spam404bl.com +-d 109.201.135.46 -d hufilter.hu -d fredfiber.no -d securemecca.com +-d 1hos.cf +-d 1hosts.cf # β€”β€”β€” Old tech-related domains that have fallen into the hands of questionable new owners. β€”β€”β€” # To log in to TP-Link routers, use tplinkwifi.net instead. -d tplinklogin.net -d tplinkextender.net -d ublock.org +-d 138.68.252.54 # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” -d funeducation.com @@ -97,6 +101,10 @@ msFilterList -d dreamlinux.com.br -d dreamlinux.net -d dreamlinux.info +-d 104.24.117.74 +-d 104.24.116.74 +-d [2606:4700:30::6818:754a] +-d [2606:4700:30::6818:744a] -d hacktolive.org -d mandriva.com @@ -189,9 +197,11 @@ msFilterList # β€”β€”β€” https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ β€”β€”β€” -d dwarffortresswiki.com +-d 103.224.212.249 # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” -d ppc.netnet44.net --d katie.tncrun.net +-d tncrun.net +-d 54.174.156.141 # Placeholder line for alternate list versions