diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 8553bcccf..c860596c6 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus and AdBlock) -! Version: 21February2024v1 +! Version: 23February2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -34757,131 +34757,8 @@ zombooru.com##a[href="http://www.hard55.com"] ||54.225.185.110^$popup &lp=not_robot_ &lp=not_robot_$popup -! A fake "GitHub" "job" offer I woke up to in an old issue thread ||githubtalentcommunity. ||githubtalentcommunity.$popup -||csa-github.com^ -||csa-github.com^$popup -||ghaestatus. -||ghaestatus.$popup -||ghconduit. -||ghconduit.$popup -||ghe-cluster.com^ -||ghe-cluster.com^$popup -||ghestatus.com^ -||ghestatus.com^$popup -||ghub.com^ -||ghub.com^$popup -||gisthub.com^ -||gisthub.com^$popup -||git-hub.com^ -||git-hub.com^$popup -||gitgub.com^ -||gitgub.com^$popup -||github-awards. -||github-awards.$popup -||github-camo. -||github-camo.$popup -||github-nel.com^ -||github-nel.com^$popup -||github-servicedesk. -||github-servicedesk.$popup -||github-sso.com^ -||github-sso.com^$popup -||github-staging-lab. -||github-staging-lab.$popup -||githubarchive. -||githubarchive.$popup -||githubazure. -||githubazure.$popup -||githubber. -||githubber.$popup -||githubbrazil.com^ -||githubbrazil.com^$popup -||githubcloud.com^ -||githubcloud.com^$popup -||githubcloudusercontent. -||githubcloudusercontent.$popup -||githubcopilot. -||githubcopilot.$popup -||githubcorp. -||githubcorp.$popup -||githubenterprise. -||githubenterprise.$popup -||githubfi.com^ -||githubfi.com^$popup -||githubfitest. -||githubfitest.$popup -||githubflow.com^ -||githubflow.com^$popup -||githubhot.com^ -||githubhot.com^$popup -||githubinc. -||githubinc.$popup -||githubmaccloud. -||githubmaccloud.$popup -||githubpages. -||githubpages.$popup -||githubpartners. -||githubpartners.$popup -||githubsecurity.com^ -||githubsecurity.com^$popup -||githubway. -||githubway.$popup -||githubwebhooks.com^ -||githubwebhooks.com^$popup -||gitlfs.com^ -||gitlfs.com^$popup -||gitmerge.com^ -||gitmerge.com^$popup -||gitpages.com^ -||gitpages.com^$popup -||gitref. -||gitref.$popup -||gitsmart.com^ -||gitsmart.com^$popup -||gitsplosion.com^ -||gitsplosion.com^$popup -||gittogether. -||gittogether.$popup -||guthub.com^ -||guthub.com^$popup -||hackathonhowto.com^ -||hackathonhowto.com^$popup -||http-npmjs. -||http-npmjs.$popup -||javascriptsurvey.com^ -||javascriptsurvey.com^$popup -||looksgoodtome.com^ -||looksgoodtome.com^$popup -||meetgit.com^ -||meetgit.com^$popup -||nnmjs.info^ -||nnmjs.info^$popup -||nnmjs.net^ -||nnmjs.net^$popup -||nnmjs.org^ -||nnmjs.org^$popup -||npmcamp.com^ -||npmcamp.com^$popup -||npmjs-www. -||npmjs-www.$popup -||npmjs.app^ -||npmjs.app^$popup -||npmjs.site^ -||npmjs.site^$popup -||npmms.com^ -||npmms.com^$popup -||nqmjs.com^ -||nqmjs.com^$popup -||www-npmjs. -||www-npmjs.$popup -||140.82.112.18^ -||140.82.112.18^$popup -||140.82.112.17^ -||140.82.112.17^$popup -||[2a09:8280:1::2b:3bcb:0]^ -||[2a09:8280:1::2b:3bcb:0]^$popup ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 12b7db205..3554e5557 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 21February2024v1 +! Version: 23February2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -17958,69 +17958,7 @@ zombooru.com##a[href="http://www.hard55.com"] 34.195.224.242$network 54.225.185.110$network &lp=not_robot_$all -! A fake "GitHub" "job" offer I woke up to in an old issue thread ||githubtalentcommunity.$all -||csa-github.com^$all -||ghaestatus.$all -||ghconduit.$all -||ghe-cluster.com^$all -||ghestatus.com^$all -||ghub.com^$all -||gisthub.com^$all -||git-hub.com^$all -||gitgub.com^$all -||github-awards.$all -||github-camo.$all -||github-nel.com^$all -||github-servicedesk.$all -||github-sso.com^$all -||github-staging-lab.$all -||githubarchive.$all -||githubazure.$all -||githubber.$all -||githubbrazil.com^$all -||githubcloud.com^$all -||githubcloudusercontent.$all -||githubcopilot.$all -||githubcorp.$all -||githubenterprise.$all -||githubfi.com^$all -||githubfitest.$all -||githubflow.com^$all -||githubhot.com^$all -||githubinc.$all -||githubmaccloud.$all -||githubpages.$all -||githubpartners.$all -||githubsecurity.com^$all -||githubway.$all -||githubwebhooks.com^$all -||gitlfs.com^$all -||gitmerge.com^$all -||gitpages.com^$all -||gitref.$all -||gitsmart.com^$all -||gitsplosion.com^$all -||gittogether.$all -||guthub.com^$all -||hackathonhowto.com^$all -||http-npmjs.$all -||javascriptsurvey.com^$all -||looksgoodtome.com^$all -||meetgit.com^$all -||nnmjs.info^$all -||nnmjs.net^$all -||nnmjs.org^$all -||npmcamp.com^$all -||npmjs-www.$all -||npmjs.app^$all -||npmjs.site^$all -||npmms.com^$all -||nqmjs.com^$all -||www-npmjs.$all -140.82.112.18$network -140.82.112.17$network -[2a09:8280:1::2b:3bcb:0]$network ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index c7860a2f8..bad3126aa 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 21February2024v1 +! Version: 23February2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -17724,69 +17724,7 @@ 34.195.224.242 54.225.185.110 -! A fake "GitHub" "job" offer I woke up to in an old issue thread ||githubtalentcommunity. -||csa-github.com^ -||ghaestatus. -||ghconduit. -||ghe-cluster.com^ -||ghestatus.com^ -||ghub.com^ -||gisthub.com^ -||git-hub.com^ -||gitgub.com^ -||github-awards. -||github-camo. -||github-nel.com^ -||github-servicedesk. -||github-sso.com^ -||github-staging-lab. -||githubarchive. -||githubazure. -||githubber. -||githubbrazil.com^ -||githubcloud.com^ -||githubcloudusercontent. -||githubcopilot. -||githubcorp. -||githubenterprise. -||githubfi.com^ -||githubfitest. -||githubflow.com^ -||githubhot.com^ -||githubinc. -||githubmaccloud. -||githubpages. -||githubpartners. -||githubsecurity.com^ -||githubway. -||githubwebhooks.com^ -||gitlfs.com^ -||gitmerge.com^ -||gitpages.com^ -||gitref. -||gitsmart.com^ -||gitsplosion.com^ -||gittogether. -||guthub.com^ -||hackathonhowto.com^ -||http-npmjs. -||javascriptsurvey.com^ -||looksgoodtome.com^ -||meetgit.com^ -||nnmjs.info^ -||nnmjs.net^ -||nnmjs.org^ -||npmcamp.com^ -||npmjs-www. -||npmjs.app^ -||npmjs.site^ -||npmms.com^ -||nqmjs.com^ -||www-npmjs. -140.82.112.18 -140.82.112.17 -2a09:8280:1::2b:3bcb:0 ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 237a99409..a37c66761 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 21February2024v1 +# Version: 23February2024v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -17414,69 +17414,7 @@ yvaluationiamcur.com 34.195.224.242 54.225.185.110 -# A fake "GitHub" "job" offer I woke up to in an old issue thread -csa-github.com - - -ghe-cluster.com -ghestatus.com -ghub.com -gisthub.com -git-hub.com -gitgub.com - - -github-nel.com - -github-sso.com - - - - -githubbrazil.com -githubcloud.com - - - - -githubfi.com - -githubflow.com -githubhot.com - - - - -githubsecurity.com - -githubwebhooks.com -gitlfs.com -gitmerge.com -gitpages.com - -gitsmart.com -gitsplosion.com - -guthub.com -hackathonhowto.com - -javascriptsurvey.com -looksgoodtome.com -meetgit.com -nnmjs.info -nnmjs.net -nnmjs.org -npmcamp.com - -npmjs.app -npmjs.site -npmms.com -nqmjs.com - -140.82.112.18 -140.82.112.17 -[2a09:8280:1::2b:3bcb:0] # ——— Standard malware that I stumbled upon on my own ——— downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index a2d1f7484..4bd86ac16 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -17402,68 +17402,6 @@ 127.0.0.1 34.195.224.242 127.0.0.1 54.225.185.110 -# A fake "GitHub" "job" offer I woke up to in an old issue thread - -127.0.0.1 csa-github.com - - -127.0.0.1 ghe-cluster.com -127.0.0.1 ghestatus.com -127.0.0.1 ghub.com -127.0.0.1 gisthub.com -127.0.0.1 git-hub.com -127.0.0.1 gitgub.com - - -127.0.0.1 github-nel.com - -127.0.0.1 github-sso.com - - - - -127.0.0.1 githubbrazil.com -127.0.0.1 githubcloud.com - - - - -127.0.0.1 githubfi.com - -127.0.0.1 githubflow.com -127.0.0.1 githubhot.com - - - - -127.0.0.1 githubsecurity.com - -127.0.0.1 githubwebhooks.com -127.0.0.1 gitlfs.com -127.0.0.1 gitmerge.com -127.0.0.1 gitpages.com - -127.0.0.1 gitsmart.com -127.0.0.1 gitsplosion.com - -127.0.0.1 guthub.com -127.0.0.1 hackathonhowto.com - -127.0.0.1 javascriptsurvey.com -127.0.0.1 looksgoodtome.com -127.0.0.1 meetgit.com -127.0.0.1 nnmjs.info -127.0.0.1 nnmjs.net -127.0.0.1 nnmjs.org -127.0.0.1 npmcamp.com - -127.0.0.1 npmjs.app -127.0.0.1 npmjs.site -127.0.0.1 npmms.com -127.0.0.1 nqmjs.com - -127.0.0.1 140.82.112.18 -127.0.0.1 140.82.112.17 # ——— Standard malware that I stumbled upon on my own ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 79f91aba1..6518dd1d2 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 21February2024v1-Deprecated +# Version: 23February2024v1-Deprecated # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -17382,69 +17382,7 @@ .34.195.224.242 .54.225.185.110 -# A fake "GitHub" "job" offer I woke up to in an old issue thread .githubtalentcommunity. -.csa-github.com -.ghaestatus. -.ghconduit. -.ghe-cluster.com -.ghestatus.com -.ghub.com -.gisthub.com -.git-hub.com -.gitgub.com -.github-awards. -.github-camo. -.github-nel.com -.github-servicedesk. -.github-sso.com -.github-staging-lab. -.githubarchive. -.githubazure. -.githubber. -.githubbrazil.com -.githubcloud.com -.githubcloudusercontent. -.githubcopilot. -.githubcorp. -.githubenterprise. -.githubfi.com -.githubfitest. -.githubflow.com -.githubhot.com -.githubinc. -.githubmaccloud. -.githubpages. -.githubpartners. -.githubsecurity.com -.githubway. -.githubwebhooks.com -.gitlfs.com -.gitmerge.com -.gitpages.com -.gitref. -.gitsmart.com -.gitsplosion.com -.gittogether. -.guthub.com -.hackathonhowto.com -.http-npmjs. -.javascriptsurvey.com -.looksgoodtome.com -.meetgit.com -.nnmjs.info -.nnmjs.net -.nnmjs.org -.npmcamp.com -.npmjs-www. -.npmjs.app -.npmjs.site -.npmms.com -.nqmjs.com -.www-npmjs. -.140.82.112.18 -.140.82.112.17 -.[2a09:8280:1::2b:3bcb:0] {+block} # ——— Standard malware that I stumbled upon on my own ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 1aa2c5cf4..9eaa7c38a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 21February2024v1-Deprecated +# Version: 23February2024v1-Deprecated : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -17792,69 +17792,7 @@ msFilterList -d 34.195.224.242 -d 54.225.185.110 -# A fake "GitHub" "job" offer I woke up to in an old issue thread -d githubtalentcommunity. --d csa-github.com --d ghaestatus. --d ghconduit. --d ghe-cluster.com --d ghestatus.com --d ghub.com --d gisthub.com --d git-hub.com --d gitgub.com --d github-awards. --d github-camo. --d github-nel.com --d github-servicedesk. --d github-sso.com --d github-staging-lab. --d githubarchive. --d githubazure. --d githubber. --d githubbrazil.com --d githubcloud.com --d githubcloudusercontent. --d githubcopilot. --d githubcorp. --d githubenterprise. --d githubfi.com --d githubfitest. --d githubflow.com --d githubhot.com --d githubinc. --d githubmaccloud. --d githubpages. --d githubpartners. --d githubsecurity.com --d githubway. --d githubwebhooks.com --d gitlfs.com --d gitmerge.com --d gitpages.com --d gitref. --d gitsmart.com --d gitsplosion.com --d gittogether. --d guthub.com --d hackathonhowto.com --d http-npmjs. --d javascriptsurvey.com --d looksgoodtome.com --d meetgit.com --d nnmjs.info --d nnmjs.net --d nnmjs.org --d npmcamp.com --d npmjs-www. --d npmjs.app --d npmjs.site --d npmms.com --d nqmjs.com --d www-npmjs. --d 140.82.112.18 --d 140.82.112.17 --d [2a09:8280:1::2b:3bcb:0] # ——— Standard malware that I stumbled upon on my own ——— # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index ab5b213e1..4b9c753cb 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -328,6 +328,11 @@ 93.93.51.223 103.174.102.240 38.180.96.244 +34.195.224.242 +54.225.185.110 +140.82.112.18 +140.82.112.17 +[2a09:8280:1::2b:3bcb:0] 192.243.59.12 192.243.59.13 192.243.59.20 @@ -377,6 +382,11 @@ 172.67.158.57 [2606:4700:3030::6815:5284] [2606:4700:3037::ac43:9e39] +# Fraudulent art thefts for money on Google Image Search, e.g. 'cassandra tangled site:tumblr.com suit' +185.155.184.57 +185.155.186.24 +209.74.107.131 += 212.27.60.108 1.14.61.188 3.248.18.175