mirror of
https://github.com/DandelionSprout/adfilt.git
synced 2026-09-24 21:20:22 +01:00
Add files via upload
This commit is contained in:
Imre Kristoffer Eilertsen
@@ -1,6 +1,6 @@
|
||||
[Adblock Plus 3.6]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
|
||||
! Version: 15November2021v1-Beta
|
||||
! Version: 18November2021v1-Beta
|
||||
! Expires: 5 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -1278,8 +1278,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||zorinetownspiegelman.casa^$popup
|
||||
||ssielearning.com^
|
||||
||ssielearning.com^$popup
|
||||
|
||||
||canhila.tk^$popup
|
||||
||paymetconfirm.com^
|
||||
||paymetconfirm.com^$popup
|
||||
||fasteasyupdates.com^
|
||||
@@ -1633,8 +1631,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
!! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community
|
||||
||35.194.188.37^
|
||||
||35.194.188.37^$popup
|
||||
||nemscnc.ddns.net^
|
||||
||nemscnc.ddns.net^$popup
|
||||
!! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community
|
||||
||hydro-ca.link^
|
||||
||hydro-ca.link^$popup
|
||||
@@ -1870,9 +1866,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
|
||||
||205.185.126.200^
|
||||
||205.185.126.200^$popup
|
||||
! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1
|
||||
||trytogoi.xyz^
|
||||
||trytogoi.xyz^$popup
|
||||
! https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb
|
||||
||apple-technicalsupport-icloud.com^
|
||||
||apple-technicalsupport-icloud.com^$popup
|
||||
@@ -2077,8 +2070,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
|
||||
||85.239.33.9^
|
||||
||85.239.33.9^$popup
|
||||
||leak.serveftp.com^
|
||||
||leak.serveftp.com^$popup
|
||||
! Relations to the domain above
|
||||
||adminsys.serveftp.com^
|
||||
||adminsys.serveftp.com^$popup
|
||||
@@ -2094,8 +2085,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||securd03c-acclogs.serveftp.com^$popup
|
||||
||secure00-account.serveftp.com^
|
||||
||secure00-account.serveftp.com^$popup
|
||||
||numberpresentifhh.serveftp.com^
|
||||
||numberpresentifhh.serveftp.com^$popup
|
||||
||secure-auth01.serveftp.com^
|
||||
||secure-auth01.serveftp.com^$popup
|
||||
||citionlinebk.serveftp.com^
|
||||
@@ -2277,6 +2266,67 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
! https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
|
||||
||198.23.255.14^
|
||||
||198.23.255.14^$popup
|
||||
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075
|
||||
||ether-give21.net^
|
||||
||ether-give21.net^$popup
|
||||
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248
|
||||
||shib-inu.cc^
|
||||
||shib-inu.cc^$popup
|
||||
! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs
|
||||
||freedownloadfiles.org^
|
||||
||freedownloadfiles.org^$popup
|
||||
||fruegelke.xyz^
|
||||
||fruegelke.xyz^$popup
|
||||
||hh3valve.com^
|
||||
||hh3valve.com^$popup
|
||||
||g-localdevice.biz^
|
||||
||g-localdevice.biz^$popup
|
||||
||querahinor.xyz^
|
||||
||querahinor.xyz^$popup
|
||||
||t.gogamec.com^
|
||||
||t.gogamec.com^$popup
|
||||
||gogamec.com^
|
||||
||trumops.com^
|
||||
||server9.trumops.com^
|
||||
||server9.trumops.com^$popup
|
||||
||runmodes.com^
|
||||
||runmodes.com^$popup
|
||||
||charirelay.xyz^
|
||||
||charirelay.xyz^$popup
|
||||
||r3.o.lencr.org^
|
||||
||r3.o.lencr.org^$popup
|
||||
||91.121.67.60^
|
||||
||91.121.67.60^$popup
|
||||
||webdatingcompany.me^
|
||||
||webdatingcompany.me^$popup
|
||||
||gohnot.com^
|
||||
||gohnot.com^$popup
|
||||
||172.67.186.189^
|
||||
||172.67.186.189^$popup
|
||||
! https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111
|
||||
||inconclusive-pyrite-grandparent.glitch.me^
|
||||
||inconclusive-pyrite-grandparent.glitch.me^$popup
|
||||
||delicate-tame-angora.glitch.me^
|
||||
||delicate-tame-angora.glitch.me^$popup
|
||||
||secureinvoice.glitch.me^
|
||||
||secureinvoice.glitch.me^$popup
|
||||
||holy-ruddy-brace.glitch.me^
|
||||
||holy-ruddy-brace.glitch.me^$popup
|
||||
||instagramcomphoto212paaatrk.glitch.me^
|
||||
||instagramcomphoto212paaatrk.glitch.me^$popup
|
||||
||instafollow.glitch.me^
|
||||
||instafollow.glitch.me^$popup
|
||||
||loving-discovered-swordfish.glitch.me^
|
||||
||loving-discovered-swordfish.glitch.me^$popup
|
||||
||aquamarine-cotton-impala.glitch.me^
|
||||
||aquamarine-cotton-impala.glitch.me^$popup
|
||||
||mature-periwinkle-advantage.glitch.me^
|
||||
||mature-periwinkle-advantage.glitch.me^$popup
|
||||
||tough-numerous-lemur.glitch.me^
|
||||
||tough-numerous-lemur.glitch.me^$popup
|
||||
! https://scammer.info/t/mcafee-phish/83725
|
||||
||securefirst.us-east-1.linodeobjects.com^
|
||||
||securefirst.us-east-1.linodeobjects.com^$popup
|
||||
|
||||
! ——— Standard malware that I stumbled upon on my own ———
|
||||
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
|
||||
@@ -11961,10 +12011,6 @@ toorgle.net##.join
|
||||
||akellasport.me^$popup
|
||||
||asstralissteam.org.ru^
|
||||
||asstralissteam.org.ru^$popup
|
||||
||astralis2.org.ru^
|
||||
||astralis2.org.ru^$popup
|
||||
||astrallis.org.ru^
|
||||
||astrallis.org.ru^$popup
|
||||
||astralliscase.org.ru^
|
||||
||astralliscase.org.ru^$popup
|
||||
||astralteam.org.ru^
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
[AdGuard versions from ≥2019]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
|
||||
! Version: 15November2021v1-Beta
|
||||
! Version: 18November2021v1-Beta
|
||||
! Expires: 5 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -891,7 +891,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||shaynefrancklynwynne.site^$empty,important
|
||||
||zorinetownspiegelman.casa^$empty,important
|
||||
||ssielearning.com^$empty,important
|
||||
|
||||
||paymetconfirm.com^$empty,important
|
||||
||fasteasyupdates.com^$empty,important
|
||||
||buyer-remindment.com^$empty,important
|
||||
@@ -1111,7 +1110,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
139.28.37.49$network
|
||||
!! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community
|
||||
35.194.188.37$network
|
||||
||nemscnc.ddns.net^$empty,important
|
||||
!! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community
|
||||
||hydro-ca.link^$empty,important
|
||||
||covid19-ca.link^$empty,important
|
||||
@@ -1256,8 +1254,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
! https://github.com/DandelionSprout/adfilt/pull/298
|
||||
! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
|
||||
205.185.126.200$network
|
||||
! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1
|
||||
||trytogoi.xyz^$empty,important
|
||||
! https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb
|
||||
||apple-technicalsupport-icloud.com^$empty,important
|
||||
! https://www.virustotal.com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community
|
||||
@@ -1377,7 +1373,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
45.148.120.80$network
|
||||
! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
|
||||
85.239.33.9$network
|
||||
||leak.serveftp.com^$empty,important
|
||||
! Relations to the domain above
|
||||
||adminsys.serveftp.com^$empty,important
|
||||
||amazbaidu.serveftp.com^$empty,important
|
||||
@@ -1386,7 +1381,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||identity-auth612.serveftp.com^$empty,important
|
||||
||securd03c-acclogs.serveftp.com^$empty,important
|
||||
||secure00-account.serveftp.com^$empty,important
|
||||
||numberpresentifhh.serveftp.com^$empty,important
|
||||
||secure-auth01.serveftp.com^$empty,important
|
||||
||citionlinebk.serveftp.com^$empty,important
|
||||
||secure05h-verify.serveftp.com^$empty,important
|
||||
@@ -1488,6 +1482,40 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
183.188.192.55$network
|
||||
! https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
|
||||
198.23.255.14$network
|
||||
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075
|
||||
||ether-give21.net^$empty,important
|
||||
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248
|
||||
||shib-inu.cc^$empty,important
|
||||
! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs
|
||||
||freedownloadfiles.org^$empty,important
|
||||
||fruegelke.xyz^$empty,important
|
||||
||hh3valve.com^$empty,important
|
||||
||g-localdevice.biz^$empty,important
|
||||
||querahinor.xyz^$empty,important
|
||||
||t.gogamec.com^$empty,important
|
||||
||gogamec.com^$document
|
||||
||trumops.com^$document
|
||||
||server9.trumops.com^$empty,important
|
||||
||runmodes.com^$empty,important
|
||||
||charirelay.xyz^$empty,important
|
||||
||r3.o.lencr.org^$empty,important
|
||||
91.121.67.60$network
|
||||
||webdatingcompany.me^$empty,important
|
||||
||gohnot.com^$empty,important
|
||||
172.67.186.189$network
|
||||
! https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111
|
||||
||inconclusive-pyrite-grandparent.glitch.me^$empty,important
|
||||
||delicate-tame-angora.glitch.me^$empty,important
|
||||
||secureinvoice.glitch.me^$empty,important
|
||||
||holy-ruddy-brace.glitch.me^$empty,important
|
||||
||instagramcomphoto212paaatrk.glitch.me^$empty,important
|
||||
||instafollow.glitch.me^$empty,important
|
||||
||loving-discovered-swordfish.glitch.me^$empty,important
|
||||
||aquamarine-cotton-impala.glitch.me^$empty,important
|
||||
||mature-periwinkle-advantage.glitch.me^$empty,important
|
||||
||tough-numerous-lemur.glitch.me^$empty,important
|
||||
! https://scammer.info/t/mcafee-phish/83725
|
||||
||securefirst.us-east-1.linodeobjects.com^$empty,important
|
||||
|
||||
! ——— Standard malware that I stumbled upon on my own ———
|
||||
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
|
||||
@@ -6351,8 +6379,6 @@ toorgle.net##.join
|
||||
||airmake.ru^$empty,important
|
||||
||akellasport.me^$empty,important
|
||||
||asstralissteam.org.ru^$empty,important
|
||||
||astralis2.org.ru^$empty,important
|
||||
||astrallis.org.ru^$empty,important
|
||||
||astralliscase.org.ru^$empty,important
|
||||
||astralteam.org.ru^$empty,important
|
||||
||battiefy.com^$empty,important
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
[Adblock Plus 3.6]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
|
||||
! Version: 15November2021v1-Beta
|
||||
! Version: 18November2021v1-Beta
|
||||
! Expires: 5 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -734,7 +734,6 @@
|
||||
||shaynefrancklynwynne.site^
|
||||
||zorinetownspiegelman.casa^
|
||||
||ssielearning.com^
|
||||
|
||||
||paymetconfirm.com^
|
||||
||fasteasyupdates.com^
|
||||
||buyer-remindment.com^
|
||||
@@ -954,7 +953,6 @@
|
||||
139.28.37.49
|
||||
!! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community
|
||||
35.194.188.37
|
||||
||nemscnc.ddns.net^
|
||||
!! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community
|
||||
||hydro-ca.link^
|
||||
||covid19-ca.link^
|
||||
@@ -1099,8 +1097,6 @@
|
||||
! https://github.com/DandelionSprout/adfilt/pull/298
|
||||
! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
|
||||
205.185.126.200
|
||||
! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1
|
||||
||trytogoi.xyz^
|
||||
! https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb
|
||||
||apple-technicalsupport-icloud.com^
|
||||
! https://www.virustotal.com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community
|
||||
@@ -1220,7 +1216,6 @@
|
||||
45.148.120.80
|
||||
! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
|
||||
85.239.33.9
|
||||
||leak.serveftp.com^
|
||||
! Relations to the domain above
|
||||
||adminsys.serveftp.com^
|
||||
||amazbaidu.serveftp.com^
|
||||
@@ -1229,7 +1224,6 @@
|
||||
||identity-auth612.serveftp.com^
|
||||
||securd03c-acclogs.serveftp.com^
|
||||
||secure00-account.serveftp.com^
|
||||
||numberpresentifhh.serveftp.com^
|
||||
||secure-auth01.serveftp.com^
|
||||
||citionlinebk.serveftp.com^
|
||||
||secure05h-verify.serveftp.com^
|
||||
@@ -1331,6 +1325,40 @@
|
||||
183.188.192.55
|
||||
! https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
|
||||
198.23.255.14
|
||||
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075
|
||||
||ether-give21.net^
|
||||
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248
|
||||
||shib-inu.cc^
|
||||
! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs
|
||||
||freedownloadfiles.org^
|
||||
||fruegelke.xyz^
|
||||
||hh3valve.com^
|
||||
||g-localdevice.biz^
|
||||
||querahinor.xyz^
|
||||
||t.gogamec.com^
|
||||
||gogamec.com^
|
||||
||trumops.com^
|
||||
||server9.trumops.com^
|
||||
||runmodes.com^
|
||||
||charirelay.xyz^
|
||||
||r3.o.lencr.org^
|
||||
91.121.67.60
|
||||
||webdatingcompany.me^
|
||||
||gohnot.com^
|
||||
172.67.186.189
|
||||
! https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111
|
||||
||inconclusive-pyrite-grandparent.glitch.me^
|
||||
||delicate-tame-angora.glitch.me^
|
||||
||secureinvoice.glitch.me^
|
||||
||holy-ruddy-brace.glitch.me^
|
||||
||instagramcomphoto212paaatrk.glitch.me^
|
||||
||instafollow.glitch.me^
|
||||
||loving-discovered-swordfish.glitch.me^
|
||||
||aquamarine-cotton-impala.glitch.me^
|
||||
||mature-periwinkle-advantage.glitch.me^
|
||||
||tough-numerous-lemur.glitch.me^
|
||||
! https://scammer.info/t/mcafee-phish/83725
|
||||
||securefirst.us-east-1.linodeobjects.com^
|
||||
|
||||
! ——— Standard malware that I stumbled upon on my own ———
|
||||
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
|
||||
@@ -6192,8 +6220,6 @@
|
||||
||airmake.ru^
|
||||
||akellasport.me^
|
||||
||asstralissteam.org.ru^
|
||||
||astralis2.org.ru^
|
||||
||astrallis.org.ru^
|
||||
||astralliscase.org.ru^
|
||||
||astralteam.org.ru^
|
||||
||battiefy.com^
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
|
||||
# Version: 15November2021v1-Beta
|
||||
# Version: 18November2021v1-Beta
|
||||
# Expires: 5 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
|
||||
@@ -666,7 +666,6 @@ shannonmanfredoctave.site
|
||||
shaynefrancklynwynne.site
|
||||
zorinetownspiegelman.casa
|
||||
ssielearning.com
|
||||
canhila.tk
|
||||
paymetconfirm.com
|
||||
fasteasyupdates.com
|
||||
buyer-remindment.com
|
||||
@@ -833,7 +832,6 @@ tekhacks.net
|
||||
|
||||
139.28.37.49
|
||||
35.194.188.37
|
||||
nemscnc.ddns.net
|
||||
hydro-ca.link
|
||||
covid19-ca.link
|
||||
godforgiveuss.live
|
||||
@@ -958,7 +956,6 @@ cd.org
|
||||
23.94.26.138
|
||||
ispco.shop
|
||||
205.185.126.200
|
||||
trytogoi.xyz
|
||||
apple-technicalsupport-icloud.com
|
||||
185.243.56.167
|
||||
123.10.224.135
|
||||
@@ -1058,7 +1055,6 @@ termquotientbeen.top
|
||||
45.95.169.115
|
||||
45.148.120.80
|
||||
85.239.33.9
|
||||
leak.serveftp.com
|
||||
# Relations to the domain above
|
||||
adminsys.serveftp.com
|
||||
amazbaidu.serveftp.com
|
||||
@@ -1067,7 +1063,6 @@ httpssecure.serveftp.com
|
||||
identity-auth612.serveftp.com
|
||||
securd03c-acclogs.serveftp.com
|
||||
secure00-account.serveftp.com
|
||||
numberpresentifhh.serveftp.com
|
||||
secure-auth01.serveftp.com
|
||||
citionlinebk.serveftp.com
|
||||
secure05h-verify.serveftp.com
|
||||
@@ -1154,6 +1149,35 @@ youutube.com
|
||||
103.233.216.77
|
||||
183.188.192.55
|
||||
198.23.255.14
|
||||
ether-give21.net
|
||||
shib-inu.cc
|
||||
freedownloadfiles.org
|
||||
fruegelke.xyz
|
||||
hh3valve.com
|
||||
g-localdevice.biz
|
||||
querahinor.xyz
|
||||
t.gogamec.com
|
||||
gogamec.com
|
||||
trumops.com
|
||||
server9.trumops.com
|
||||
runmodes.com
|
||||
charirelay.xyz
|
||||
r3.o.lencr.org
|
||||
91.121.67.60
|
||||
webdatingcompany.me
|
||||
gohnot.com
|
||||
172.67.186.189
|
||||
inconclusive-pyrite-grandparent.glitch.me
|
||||
delicate-tame-angora.glitch.me
|
||||
secureinvoice.glitch.me
|
||||
holy-ruddy-brace.glitch.me
|
||||
instagramcomphoto212paaatrk.glitch.me
|
||||
instafollow.glitch.me
|
||||
loving-discovered-swordfish.glitch.me
|
||||
aquamarine-cotton-impala.glitch.me
|
||||
mature-periwinkle-advantage.glitch.me
|
||||
tough-numerous-lemur.glitch.me
|
||||
securefirst.us-east-1.linodeobjects.com
|
||||
|
||||
# ——— Standard malware that I stumbled upon on my own ———
|
||||
downloadprovider.me
|
||||
@@ -6009,8 +6033,6 @@ airdrop-discord.ru
|
||||
airmake.ru
|
||||
akellasport.me
|
||||
asstralissteam.org.ru
|
||||
astralis2.org.ru
|
||||
astrallis.org.ru
|
||||
astralliscase.org.ru
|
||||
astralteam.org.ru
|
||||
battiefy.com
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
|
||||
# Version: 15November2021v1-Alpha
|
||||
# Version: 18November2021v1-Alpha
|
||||
# Expires: 5 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
|
||||
@@ -666,7 +666,6 @@
|
||||
127.0.0.1 shaynefrancklynwynne.site
|
||||
127.0.0.1 zorinetownspiegelman.casa
|
||||
127.0.0.1 ssielearning.com
|
||||
127.0.0.1 canhila.tk
|
||||
127.0.0.1 paymetconfirm.com
|
||||
127.0.0.1 fasteasyupdates.com
|
||||
127.0.0.1 buyer-remindment.com
|
||||
@@ -833,7 +832,6 @@
|
||||
|
||||
127.0.0.1 139.28.37.49
|
||||
127.0.0.1 35.194.188.37
|
||||
127.0.0.1 nemscnc.ddns.net
|
||||
127.0.0.1 hydro-ca.link
|
||||
127.0.0.1 covid19-ca.link
|
||||
127.0.0.1 godforgiveuss.live
|
||||
@@ -958,7 +956,6 @@
|
||||
127.0.0.1 23.94.26.138
|
||||
127.0.0.1 ispco.shop
|
||||
127.0.0.1 205.185.126.200
|
||||
127.0.0.1 trytogoi.xyz
|
||||
127.0.0.1 apple-technicalsupport-icloud.com
|
||||
127.0.0.1 185.243.56.167
|
||||
127.0.0.1 123.10.224.135
|
||||
@@ -1058,7 +1055,6 @@
|
||||
127.0.0.1 45.95.169.115
|
||||
127.0.0.1 45.148.120.80
|
||||
127.0.0.1 85.239.33.9
|
||||
127.0.0.1 leak.serveftp.com
|
||||
# Relations to the domain above
|
||||
127.0.0.1 adminsys.serveftp.com
|
||||
127.0.0.1 amazbaidu.serveftp.com
|
||||
@@ -1067,7 +1063,6 @@
|
||||
127.0.0.1 identity-auth612.serveftp.com
|
||||
127.0.0.1 securd03c-acclogs.serveftp.com
|
||||
127.0.0.1 secure00-account.serveftp.com
|
||||
127.0.0.1 numberpresentifhh.serveftp.com
|
||||
127.0.0.1 secure-auth01.serveftp.com
|
||||
127.0.0.1 citionlinebk.serveftp.com
|
||||
127.0.0.1 secure05h-verify.serveftp.com
|
||||
@@ -1154,6 +1149,35 @@
|
||||
127.0.0.1 103.233.216.77
|
||||
127.0.0.1 183.188.192.55
|
||||
127.0.0.1 198.23.255.14
|
||||
127.0.0.1 ether-give21.net
|
||||
127.0.0.1 shib-inu.cc
|
||||
127.0.0.1 freedownloadfiles.org
|
||||
127.0.0.1 fruegelke.xyz
|
||||
127.0.0.1 hh3valve.com
|
||||
127.0.0.1 g-localdevice.biz
|
||||
127.0.0.1 querahinor.xyz
|
||||
127.0.0.1 t.gogamec.com
|
||||
127.0.0.1 gogamec.com
|
||||
127.0.0.1 trumops.com
|
||||
127.0.0.1 server9.trumops.com
|
||||
127.0.0.1 runmodes.com
|
||||
127.0.0.1 charirelay.xyz
|
||||
127.0.0.1 r3.o.lencr.org
|
||||
127.0.0.1 91.121.67.60
|
||||
127.0.0.1 webdatingcompany.me
|
||||
127.0.0.1 gohnot.com
|
||||
127.0.0.1 172.67.186.189
|
||||
127.0.0.1 inconclusive-pyrite-grandparent.glitch.me
|
||||
127.0.0.1 delicate-tame-angora.glitch.me
|
||||
127.0.0.1 secureinvoice.glitch.me
|
||||
127.0.0.1 holy-ruddy-brace.glitch.me
|
||||
127.0.0.1 instagramcomphoto212paaatrk.glitch.me
|
||||
127.0.0.1 instafollow.glitch.me
|
||||
127.0.0.1 loving-discovered-swordfish.glitch.me
|
||||
127.0.0.1 aquamarine-cotton-impala.glitch.me
|
||||
127.0.0.1 mature-periwinkle-advantage.glitch.me
|
||||
127.0.0.1 tough-numerous-lemur.glitch.me
|
||||
127.0.0.1 securefirst.us-east-1.linodeobjects.com
|
||||
|
||||
# ——— Standard malware that I stumbled upon on my own ———
|
||||
127.0.0.1 downloadprovider.me
|
||||
@@ -6009,8 +6033,6 @@
|
||||
127.0.0.1 airmake.ru
|
||||
127.0.0.1 akellasport.me
|
||||
127.0.0.1 asstralissteam.org.ru
|
||||
127.0.0.1 astralis2.org.ru
|
||||
127.0.0.1 astrallis.org.ru
|
||||
127.0.0.1 astralliscase.org.ru
|
||||
127.0.0.1 astralteam.org.ru
|
||||
127.0.0.1 battiefy.com
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{+block}
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
|
||||
# Version: 15November2021v1-Alpha
|
||||
# Version: 18November2021v1-Alpha
|
||||
# Expires: 5 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
|
||||
@@ -870,8 +870,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1034,7 +1032,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
# Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin
|
||||
@@ -1082,7 +1079,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
# Relations to the domain above
|
||||
|
||||
|
||||
@@ -1129,7 +1125,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
/mcafeedirect.jsp
|
||||
@@ -1157,6 +1152,35 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -6359,8 +6383,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
msFilterList
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
|
||||
# Version: 15November2021v1-Beta
|
||||
# Version: 18November2021v1-Beta
|
||||
: expires = 5
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -781,7 +781,6 @@ msFilterList
|
||||
-d shaynefrancklynwynne.site
|
||||
-d zorinetownspiegelman.casa
|
||||
-d ssielearning.com
|
||||
-d canhila.tk
|
||||
-d paymetconfirm.com
|
||||
-d fasteasyupdates.com
|
||||
-d buyer-remindment.com
|
||||
@@ -999,7 +998,6 @@ msFilterList
|
||||
-d 139.28.37.49
|
||||
# https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community
|
||||
-d 35.194.188.37
|
||||
-d nemscnc.ddns.net
|
||||
# https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community
|
||||
-d hydro-ca.link
|
||||
-d covid19-ca.link
|
||||
@@ -1144,8 +1142,6 @@ msFilterList
|
||||
# https://github.com/DandelionSprout/adfilt/pull/298
|
||||
# https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
|
||||
-d 205.185.126.200
|
||||
# https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1
|
||||
-d trytogoi.xyz
|
||||
# https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb
|
||||
-d apple-technicalsupport-icloud.com
|
||||
# https://www.virustotal.com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community
|
||||
@@ -1264,7 +1260,6 @@ msFilterList
|
||||
-d 45.148.120.80
|
||||
# https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
|
||||
-d 85.239.33.9
|
||||
-d leak.serveftp.com
|
||||
# Relations to the domain above
|
||||
-d adminsys.serveftp.com
|
||||
-d amazbaidu.serveftp.com
|
||||
@@ -1273,7 +1268,6 @@ msFilterList
|
||||
-d identity-auth612.serveftp.com
|
||||
-d securd03c-acclogs.serveftp.com
|
||||
-d secure00-account.serveftp.com
|
||||
-d numberpresentifhh.serveftp.com
|
||||
-d secure-auth01.serveftp.com
|
||||
-d citionlinebk.serveftp.com
|
||||
-d secure05h-verify.serveftp.com
|
||||
@@ -1374,6 +1368,40 @@ msFilterList
|
||||
-d 183.188.192.55
|
||||
# https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
|
||||
-d 198.23.255.14
|
||||
# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075
|
||||
-d ether-give21.net
|
||||
# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248
|
||||
-d shib-inu.cc
|
||||
# https://github.com/iam-py-test/investigations/blob/main/2021/11 15 1.md#iocs
|
||||
-d freedownloadfiles.org
|
||||
-d fruegelke.xyz
|
||||
-d hh3valve.com
|
||||
-d g-localdevice.biz
|
||||
-d querahinor.xyz
|
||||
-d t.gogamec.com
|
||||
-d gogamec.com
|
||||
-d trumops.com
|
||||
-d server9.trumops.com
|
||||
-d runmodes.com
|
||||
-d charirelay.xyz
|
||||
-d r3.o.lencr.org
|
||||
-d 91.121.67.60
|
||||
-d webdatingcompany.me
|
||||
-d gohnot.com
|
||||
-d 172.67.186.189
|
||||
# https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111
|
||||
-d inconclusive-pyrite-grandparent.glitch.me
|
||||
-d delicate-tame-angora.glitch.me
|
||||
-d secureinvoice.glitch.me
|
||||
-d holy-ruddy-brace.glitch.me
|
||||
-d instagramcomphoto212paaatrk.glitch.me
|
||||
-d instafollow.glitch.me
|
||||
-d loving-discovered-swordfish.glitch.me
|
||||
-d aquamarine-cotton-impala.glitch.me
|
||||
-d mature-periwinkle-advantage.glitch.me
|
||||
-d tough-numerous-lemur.glitch.me
|
||||
# https://scammer.info/t/mcafee-phish/83725
|
||||
-d securefirst.us-east-1.linodeobjects.com
|
||||
|
||||
# ——— Standard malware that I stumbled upon on my own ———
|
||||
# http://www.toorgle.net/results.php?q=fetishkitsch&security=666
|
||||
@@ -6234,8 +6262,6 @@ msFilterList
|
||||
-d airmake.ru
|
||||
-d akellasport.me
|
||||
-d asstralissteam.org.ru
|
||||
-d astralis2.org.ru
|
||||
-d astrallis.org.ru
|
||||
-d astralliscase.org.ru
|
||||
-d astralteam.org.ru
|
||||
-d battiefy.com
|
||||
|
||||
+33
-1
@@ -1,5 +1,5 @@
|
||||
# Title: Dandelion Sprout's and other adblocker lists' IPs
|
||||
# Version: 05November2021v1-Beta
|
||||
# Version: 15November2021v1-Beta
|
||||
# Expires: 5 days
|
||||
# Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish.
|
||||
# For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
|
||||
@@ -144,6 +144,38 @@
|
||||
107.173.176.183
|
||||
45.148.120.171
|
||||
159.148.186.228
|
||||
39.83.80.247
|
||||
68.197.33.124
|
||||
219.157.21.37
|
||||
182.123.141.17
|
||||
125.47.243.187
|
||||
182.122.196.203
|
||||
182.117.231.182
|
||||
112.31.211.135
|
||||
125.106.63.93
|
||||
115.59.197.46
|
||||
122.159.29.192
|
||||
171.40.0.127
|
||||
171.80.219.160
|
||||
123.10.65.201
|
||||
168.90.205.46
|
||||
125.47.205.109
|
||||
39.80.147.239
|
||||
45.224.171.130
|
||||
45.5.209.75
|
||||
116.17.210.157
|
||||
27.45.103.240
|
||||
110.167.64.171
|
||||
39.81.117.73
|
||||
183.15.90.156
|
||||
119.113.248.74
|
||||
175.0.95.85
|
||||
61.52.99.109
|
||||
222.142.183.194
|
||||
106.86.172.194
|
||||
103.233.216.77
|
||||
183.188.192.55
|
||||
198.23.255.14
|
||||
192.243.59.12
|
||||
192.243.59.13
|
||||
192.243.59.20
|
||||
|
||||
Reference in New Issue
Block a user