From bded3ec818b8039e6df1ba42385ae69c0ed58029 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Sun, 30 May 2021 11:51:22 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 27 +++++++++++++++++-- .../AntiMalwareAdGuard.txt | 17 ++++++++++-- .../AntiMalwareAdGuardHome.txt | 17 ++++++++++-- .../AntiMalwareDomains.txt | 17 ++++++++++-- .../AntiMalwareHosts.txt | 17 ++++++++++-- .../AntiMalwarePrivoxy.action | 17 ++++++++++-- .../AntiMalwareTPL.tpl | 17 ++++++++++-- 7 files changed, 115 insertions(+), 14 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 0d41e19f2..fb5a91096 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 27May2021v2-Beta +! Version: 30May2021v2-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -288,12 +288,14 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ||the1adblocker.com^ ||otih-oith.us.to^ -! β€”β€”β€” Wrong suffixes of legitimate sites β€”β€”β€” +! β€”β€”β€” Wrong TLDs of legitimate sites β€”β€”β€” ||ubuntu.org^ ! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ ||dwarffortresswiki.com^ ||103.224.212.249^ ||speedtest.com^ +||kelkoogroup.net^ +||kelkoogroup.net^$popup ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^ @@ -604,8 +606,27 @@ zombooru.com##a[href="http://www.hard55.com"] ||instantfwding.com^$popup ||fwdservice.com^ ||fwdservice.com^$popup +||gamesex.fun^ +||gamesex.fun^$popup +||goldprize.xyz^ +||goldprize.xyz^$popup +||kmip.net^ +||kmip.net^$popup +||0redirc.com^ +||0redirc.com^$popup +||redirekted.com^ +||redirekted.com^$popup +||rebiraert.com^ +||rebiraert.com^$popup +||trkcrpt.com^ +||trkcrpt.com^$popup +||cryptoengine24.com^ +||cryptoengine24.com^$popup +||iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com^ +||iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com^$popup ||5.8.47.3^ ||5.8.34.26^ +||103.224.182.251^ ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -728,6 +749,8 @@ toorgle.net##.join ||messium.info^$popup ! Various Google searches ://hullcitytigers.com^ +! Various search results for 'kelloggs tresor' in Norwegian (30/05/2021) +/pgxhtogrzm- ! β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 0ce2a4aae..8957b6a08 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from β‰₯2019] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 27May2021v2-Beta +! Version: 30May2021v2-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -285,12 +285,13 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ||the1adblocker.com^$document ||otih-oith.us.to^$document -! β€”β€”β€” Wrong suffixes of legitimate sites β€”β€”β€” +! β€”β€”β€” Wrong TLDs of legitimate sites β€”β€”β€” ||ubuntu.org^$document ! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ ||dwarffortresswiki.com^$document 103.224.212.249$network ||speedtest.com^$document +||kelkoogroup.net^$empty,important ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^$document @@ -521,8 +522,18 @@ zombooru.com##a[href="http://www.hard55.com"] ||cpmstatsart.com^$empty,important ||instantfwding.com^$empty,important ||fwdservice.com^$empty,important +||gamesex.fun^$empty,important +||goldprize.xyz^$empty,important +||kmip.net^$empty,important +||0redirc.com^$empty,important +||redirekted.com^$empty,important +||rebiraert.com^$empty,important +||trkcrpt.com^$empty,important +||cryptoengine24.com^$empty,important +||iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com^$empty,important 5.8.47.3$network 5.8.34.26$network +103.224.182.251$network ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -590,6 +601,8 @@ toorgle.net##.join ||messium.info^$empty,important ! Various Google searches ://hullcitytigers.com^$document +! Various search results for 'kelloggs tresor' in Norwegian (30/05/2021) +/pgxhtogrzm-$document ! β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 23ce2f327..426b013e3 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home) -! Version: 27May2021v2-Beta +! Version: 30May2021v2-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -220,12 +220,13 @@ ||the1adblocker.com^ ||otih-oith.us.to^ -! β€”β€”β€” Wrong suffixes of legitimate sites β€”β€”β€” +! β€”β€”β€” Wrong TLDs of legitimate sites β€”β€”β€” ||ubuntu.org^ ! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ ||dwarffortresswiki.com^ 103.224.212.249 ||speedtest.com^ +||kelkoogroup.net^ ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ||ppc.netnet44.net^ @@ -453,8 +454,18 @@ ||cpmstatsart.com^ ||instantfwding.com^ ||fwdservice.com^ +||gamesex.fun^ +||goldprize.xyz^ +||kmip.net^ +||0redirc.com^ +||redirekted.com^ +||rebiraert.com^ +||trkcrpt.com^ +||cryptoengine24.com^ +||iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com^ 5.8.47.3 5.8.34.26 +103.224.182.251 ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -520,6 +531,8 @@ ||messium.info^ ! Various Google searches ://hullcitytigers.com^ +! Various search results for 'kelloggs tresor' in Norwegian (30/05/2021) +/pgxhtogrzm- ! β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index dcc124f4a..36d3cb5ba 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 27May2021v2-Beta +# Version: 30May2021v2-Beta # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -155,11 +155,12 @@ adblock.biz the1adblocker.com otih-oith.us.to -# β€”β€”β€” Wrong suffixes of legitimate sites β€”β€”β€” +# β€”β€”β€” Wrong TLDs of legitimate sites β€”β€”β€” ubuntu.org dwarffortresswiki.com 103.224.212.249 speedtest.com +kelkoogroup.net # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” ppc.netnet44.net @@ -352,8 +353,18 @@ roaddrinkfun.live cpmstatsart.com instantfwding.com fwdservice.com +gamesex.fun +goldprize.xyz +kmip.net +0redirc.com +redirekted.com +rebiraert.com +trkcrpt.com +cryptoengine24.com +iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com 5.8.47.3 5.8.34.26 +103.224.182.251 # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” downloadprovider.me @@ -414,6 +425,8 @@ amoxycillin1st.com crazycrabreedville.com messium.info # Various Google searches +# Various search results for 'kelloggs tresor' in Norwegian (30/05/2021) + # β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index a5ab97373..84bd19b12 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 27May2021v2-Alpha +# Version: 30May2021v2-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -155,11 +155,12 @@ 127.0.0.1 the1adblocker.com 127.0.0.1 otih-oith.us.to -# β€”β€”β€” Wrong suffixes of legitimate sites β€”β€”β€” +# β€”β€”β€” Wrong TLDs of legitimate sites β€”β€”β€” 127.0.0.1 ubuntu.org 127.0.0.1 dwarffortresswiki.com 127.0.0.1 103.224.212.249 127.0.0.1 speedtest.com +127.0.0.1 kelkoogroup.net # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” 127.0.0.1 ppc.netnet44.net @@ -352,8 +353,18 @@ 127.0.0.1 cpmstatsart.com 127.0.0.1 instantfwding.com 127.0.0.1 fwdservice.com +127.0.0.1 gamesex.fun +127.0.0.1 goldprize.xyz +127.0.0.1 kmip.net +127.0.0.1 0redirc.com +127.0.0.1 redirekted.com +127.0.0.1 rebiraert.com +127.0.0.1 trkcrpt.com +127.0.0.1 cryptoengine24.com +127.0.0.1 iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com 127.0.0.1 5.8.47.3 127.0.0.1 5.8.34.26 +127.0.0.1 103.224.182.251 # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” 127.0.0.1 downloadprovider.me @@ -414,6 +425,8 @@ 127.0.0.1 crazycrabreedville.com 127.0.0.1 messium.info # Various Google searches +# Various search results for 'kelloggs tresor' in Norwegian (30/05/2021) + # β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 37b962cd9..e94a3b370 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 27May2021v2-Alpha +# Version: 30May2021v2-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -166,11 +166,12 @@ .otih-oith.us.to {+block} -# β€”β€”β€” Wrong suffixes of legitimate sites β€”β€”β€” +# β€”β€”β€” Wrong TLDs of legitimate sites β€”β€”β€” .ubuntu.org .dwarffortresswiki.com .103.224.212.249 .speedtest.com +.kelkoogroup.net {+block} # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” @@ -373,8 +374,18 @@ .cpmstatsart.com .instantfwding.com .fwdservice.com +.gamesex.fun +.goldprize.xyz +.kmip.net +.0redirc.com +.redirekted.com +.rebiraert.com +.trkcrpt.com +.cryptoengine24.com +.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com .5.8.47.3 .5.8.34.26 +.103.224.182.251 {+block} # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -436,6 +447,8 @@ .crazycrabreedville.com .messium.info # Various Google searches +# Various search results for 'kelloggs tresor' in Norwegian (30/05/2021) +/pgxhtogrzm- {+block} # β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index d014fa24b..563474094 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 27May2021v2-Beta +# Version: 30May2021v2-Beta : expires = 5 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -214,12 +214,13 @@ msFilterList -d the1adblocker.com -d otih-oith.us.to -# β€”β€”β€” Wrong suffixes of legitimate sites β€”β€”β€” +# β€”β€”β€” Wrong TLDs of legitimate sites β€”β€”β€” -d ubuntu.org # https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ -d dwarffortresswiki.com -d 103.224.212.249 -d speedtest.com +-d kelkoogroup.net # β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” -d ppc.netnet44.net @@ -447,8 +448,18 @@ msFilterList -d cpmstatsart.com -d instantfwding.com -d fwdservice.com +-d gamesex.fun +-d goldprize.xyz +-d kmip.net +-d 0redirc.com +-d redirekted.com +-d rebiraert.com +-d trkcrpt.com +-d cryptoengine24.com +-d iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com -d 5.8.47.3 -d 5.8.34.26 +-d 103.224.182.251 # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -513,6 +524,8 @@ msFilterList # https://flclever.weebly.com/pixie-hollow-mini-games.html/(06/05/2021) -d messium.info # Various Google searches +# Various search results for 'kelloggs tresor' in Norwegian (30 05 2021) +- pgxhtogrzm- # β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone.