diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 845344520..90dcf5642 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 15November2021v1-Beta +! Version: 18November2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1278,8 +1278,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||zorinetownspiegelman.casa^$popup ||ssielearning.com^ ||ssielearning.com^$popup - -||canhila.tk^$popup ||paymetconfirm.com^ ||paymetconfirm.com^$popup ||fasteasyupdates.com^ @@ -1633,8 +1631,6 @@ zombooru.com##a[href="http://www.hard55.com"] !! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community ||35.194.188.37^ ||35.194.188.37^$popup -||nemscnc.ddns.net^ -||nemscnc.ddns.net^$popup !! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community ||hydro-ca.link^ ||hydro-ca.link^$popup @@ -1870,9 +1866,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community ||205.185.126.200^ ||205.185.126.200^$popup -! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1 -||trytogoi.xyz^ -||trytogoi.xyz^$popup ! https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb ||apple-technicalsupport-icloud.com^ ||apple-technicalsupport-icloud.com^$popup @@ -2077,8 +2070,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community ||85.239.33.9^ ||85.239.33.9^$popup -||leak.serveftp.com^ -||leak.serveftp.com^$popup ! Relations to the domain above ||adminsys.serveftp.com^ ||adminsys.serveftp.com^$popup @@ -2094,8 +2085,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||securd03c-acclogs.serveftp.com^$popup ||secure00-account.serveftp.com^ ||secure00-account.serveftp.com^$popup -||numberpresentifhh.serveftp.com^ -||numberpresentifhh.serveftp.com^$popup ||secure-auth01.serveftp.com^ ||secure-auth01.serveftp.com^$popup ||citionlinebk.serveftp.com^ @@ -2277,6 +2266,67 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community ||198.23.255.14^ ||198.23.255.14^$popup +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 +||ether-give21.net^ +||ether-give21.net^$popup +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 +||shib-inu.cc^ +||shib-inu.cc^$popup +! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs +||freedownloadfiles.org^ +||freedownloadfiles.org^$popup +||fruegelke.xyz^ +||fruegelke.xyz^$popup +||hh3valve.com^ +||hh3valve.com^$popup +||g-localdevice.biz^ +||g-localdevice.biz^$popup +||querahinor.xyz^ +||querahinor.xyz^$popup +||t.gogamec.com^ +||t.gogamec.com^$popup +||gogamec.com^ +||trumops.com^ +||server9.trumops.com^ +||server9.trumops.com^$popup +||runmodes.com^ +||runmodes.com^$popup +||charirelay.xyz^ +||charirelay.xyz^$popup +||r3.o.lencr.org^ +||r3.o.lencr.org^$popup +||91.121.67.60^ +||91.121.67.60^$popup +||webdatingcompany.me^ +||webdatingcompany.me^$popup +||gohnot.com^ +||gohnot.com^$popup +||172.67.186.189^ +||172.67.186.189^$popup +! https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 +||inconclusive-pyrite-grandparent.glitch.me^ +||inconclusive-pyrite-grandparent.glitch.me^$popup +||delicate-tame-angora.glitch.me^ +||delicate-tame-angora.glitch.me^$popup +||secureinvoice.glitch.me^ +||secureinvoice.glitch.me^$popup +||holy-ruddy-brace.glitch.me^ +||holy-ruddy-brace.glitch.me^$popup +||instagramcomphoto212paaatrk.glitch.me^ +||instagramcomphoto212paaatrk.glitch.me^$popup +||instafollow.glitch.me^ +||instafollow.glitch.me^$popup +||loving-discovered-swordfish.glitch.me^ +||loving-discovered-swordfish.glitch.me^$popup +||aquamarine-cotton-impala.glitch.me^ +||aquamarine-cotton-impala.glitch.me^$popup +||mature-periwinkle-advantage.glitch.me^ +||mature-periwinkle-advantage.glitch.me^$popup +||tough-numerous-lemur.glitch.me^ +||tough-numerous-lemur.glitch.me^$popup +! https://scammer.info/t/mcafee-phish/83725 +||securefirst.us-east-1.linodeobjects.com^ +||securefirst.us-east-1.linodeobjects.com^$popup ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -11961,10 +12011,6 @@ toorgle.net##.join ||akellasport.me^$popup ||asstralissteam.org.ru^ ||asstralissteam.org.ru^$popup -||astralis2.org.ru^ -||astralis2.org.ru^$popup -||astrallis.org.ru^ -||astrallis.org.ru^$popup ||astralliscase.org.ru^ ||astralliscase.org.ru^$popup ||astralteam.org.ru^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 5cf838c3e..2fde2f282 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from β‰₯2019] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 15November2021v1-Beta +! Version: 18November2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -891,7 +891,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||shaynefrancklynwynne.site^$empty,important ||zorinetownspiegelman.casa^$empty,important ||ssielearning.com^$empty,important - ||paymetconfirm.com^$empty,important ||fasteasyupdates.com^$empty,important ||buyer-remindment.com^$empty,important @@ -1111,7 +1110,6 @@ zombooru.com##a[href="http://www.hard55.com"] 139.28.37.49$network !! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community 35.194.188.37$network -||nemscnc.ddns.net^$empty,important !! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community ||hydro-ca.link^$empty,important ||covid19-ca.link^$empty,important @@ -1256,8 +1254,6 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/DandelionSprout/adfilt/pull/298 ! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community 205.185.126.200$network -! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1 -||trytogoi.xyz^$empty,important ! https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb ||apple-technicalsupport-icloud.com^$empty,important ! https://www.virustotal.com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community @@ -1377,7 +1373,6 @@ zombooru.com##a[href="http://www.hard55.com"] 45.148.120.80$network ! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community 85.239.33.9$network -||leak.serveftp.com^$empty,important ! Relations to the domain above ||adminsys.serveftp.com^$empty,important ||amazbaidu.serveftp.com^$empty,important @@ -1386,7 +1381,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||identity-auth612.serveftp.com^$empty,important ||securd03c-acclogs.serveftp.com^$empty,important ||secure00-account.serveftp.com^$empty,important -||numberpresentifhh.serveftp.com^$empty,important ||secure-auth01.serveftp.com^$empty,important ||citionlinebk.serveftp.com^$empty,important ||secure05h-verify.serveftp.com^$empty,important @@ -1488,6 +1482,40 @@ zombooru.com##a[href="http://www.hard55.com"] 183.188.192.55$network ! https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community 198.23.255.14$network +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 +||ether-give21.net^$empty,important +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 +||shib-inu.cc^$empty,important +! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs +||freedownloadfiles.org^$empty,important +||fruegelke.xyz^$empty,important +||hh3valve.com^$empty,important +||g-localdevice.biz^$empty,important +||querahinor.xyz^$empty,important +||t.gogamec.com^$empty,important +||gogamec.com^$document +||trumops.com^$document +||server9.trumops.com^$empty,important +||runmodes.com^$empty,important +||charirelay.xyz^$empty,important +||r3.o.lencr.org^$empty,important +91.121.67.60$network +||webdatingcompany.me^$empty,important +||gohnot.com^$empty,important +172.67.186.189$network +! https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 +||inconclusive-pyrite-grandparent.glitch.me^$empty,important +||delicate-tame-angora.glitch.me^$empty,important +||secureinvoice.glitch.me^$empty,important +||holy-ruddy-brace.glitch.me^$empty,important +||instagramcomphoto212paaatrk.glitch.me^$empty,important +||instafollow.glitch.me^$empty,important +||loving-discovered-swordfish.glitch.me^$empty,important +||aquamarine-cotton-impala.glitch.me^$empty,important +||mature-periwinkle-advantage.glitch.me^$empty,important +||tough-numerous-lemur.glitch.me^$empty,important +! https://scammer.info/t/mcafee-phish/83725 +||securefirst.us-east-1.linodeobjects.com^$empty,important ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6351,8 +6379,6 @@ toorgle.net##.join ||airmake.ru^$empty,important ||akellasport.me^$empty,important ||asstralissteam.org.ru^$empty,important -||astralis2.org.ru^$empty,important -||astrallis.org.ru^$empty,important ||astralliscase.org.ru^$empty,important ||astralteam.org.ru^$empty,important ||battiefy.com^$empty,important diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 8a6af6114..d39441ea6 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 15November2021v1-Beta +! Version: 18November2021v1-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -734,7 +734,6 @@ ||shaynefrancklynwynne.site^ ||zorinetownspiegelman.casa^ ||ssielearning.com^ - ||paymetconfirm.com^ ||fasteasyupdates.com^ ||buyer-remindment.com^ @@ -954,7 +953,6 @@ 139.28.37.49 !! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community 35.194.188.37 -||nemscnc.ddns.net^ !! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community ||hydro-ca.link^ ||covid19-ca.link^ @@ -1099,8 +1097,6 @@ ! https://github.com/DandelionSprout/adfilt/pull/298 ! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community 205.185.126.200 -! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1 -||trytogoi.xyz^ ! https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb ||apple-technicalsupport-icloud.com^ ! https://www.virustotal.com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community @@ -1220,7 +1216,6 @@ 45.148.120.80 ! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community 85.239.33.9 -||leak.serveftp.com^ ! Relations to the domain above ||adminsys.serveftp.com^ ||amazbaidu.serveftp.com^ @@ -1229,7 +1224,6 @@ ||identity-auth612.serveftp.com^ ||securd03c-acclogs.serveftp.com^ ||secure00-account.serveftp.com^ -||numberpresentifhh.serveftp.com^ ||secure-auth01.serveftp.com^ ||citionlinebk.serveftp.com^ ||secure05h-verify.serveftp.com^ @@ -1331,6 +1325,40 @@ 183.188.192.55 ! https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community 198.23.255.14 +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 +||ether-give21.net^ +! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 +||shib-inu.cc^ +! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs +||freedownloadfiles.org^ +||fruegelke.xyz^ +||hh3valve.com^ +||g-localdevice.biz^ +||querahinor.xyz^ +||t.gogamec.com^ +||gogamec.com^ +||trumops.com^ +||server9.trumops.com^ +||runmodes.com^ +||charirelay.xyz^ +||r3.o.lencr.org^ +91.121.67.60 +||webdatingcompany.me^ +||gohnot.com^ +172.67.186.189 +! https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 +||inconclusive-pyrite-grandparent.glitch.me^ +||delicate-tame-angora.glitch.me^ +||secureinvoice.glitch.me^ +||holy-ruddy-brace.glitch.me^ +||instagramcomphoto212paaatrk.glitch.me^ +||instafollow.glitch.me^ +||loving-discovered-swordfish.glitch.me^ +||aquamarine-cotton-impala.glitch.me^ +||mature-periwinkle-advantage.glitch.me^ +||tough-numerous-lemur.glitch.me^ +! https://scammer.info/t/mcafee-phish/83725 +||securefirst.us-east-1.linodeobjects.com^ ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6192,8 +6220,6 @@ ||airmake.ru^ ||akellasport.me^ ||asstralissteam.org.ru^ -||astralis2.org.ru^ -||astrallis.org.ru^ ||astralliscase.org.ru^ ||astralteam.org.ru^ ||battiefy.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 5fe5a1f34..a4bf6cb06 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 15November2021v1-Beta +# Version: 18November2021v1-Beta # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -666,7 +666,6 @@ shannonmanfredoctave.site shaynefrancklynwynne.site zorinetownspiegelman.casa ssielearning.com -canhila.tk paymetconfirm.com fasteasyupdates.com buyer-remindment.com @@ -833,7 +832,6 @@ tekhacks.net 139.28.37.49 35.194.188.37 -nemscnc.ddns.net hydro-ca.link covid19-ca.link godforgiveuss.live @@ -958,7 +956,6 @@ cd.org 23.94.26.138 ispco.shop 205.185.126.200 -trytogoi.xyz apple-technicalsupport-icloud.com 185.243.56.167 123.10.224.135 @@ -1058,7 +1055,6 @@ termquotientbeen.top 45.95.169.115 45.148.120.80 85.239.33.9 -leak.serveftp.com # Relations to the domain above adminsys.serveftp.com amazbaidu.serveftp.com @@ -1067,7 +1063,6 @@ httpssecure.serveftp.com identity-auth612.serveftp.com securd03c-acclogs.serveftp.com secure00-account.serveftp.com -numberpresentifhh.serveftp.com secure-auth01.serveftp.com citionlinebk.serveftp.com secure05h-verify.serveftp.com @@ -1154,6 +1149,35 @@ youutube.com 103.233.216.77 183.188.192.55 198.23.255.14 +ether-give21.net +shib-inu.cc +freedownloadfiles.org +fruegelke.xyz +hh3valve.com +g-localdevice.biz +querahinor.xyz +t.gogamec.com +gogamec.com +trumops.com +server9.trumops.com +runmodes.com +charirelay.xyz +r3.o.lencr.org +91.121.67.60 +webdatingcompany.me +gohnot.com +172.67.186.189 +inconclusive-pyrite-grandparent.glitch.me +delicate-tame-angora.glitch.me +secureinvoice.glitch.me +holy-ruddy-brace.glitch.me +instagramcomphoto212paaatrk.glitch.me +instafollow.glitch.me +loving-discovered-swordfish.glitch.me +aquamarine-cotton-impala.glitch.me +mature-periwinkle-advantage.glitch.me +tough-numerous-lemur.glitch.me +securefirst.us-east-1.linodeobjects.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” downloadprovider.me @@ -6009,8 +6033,6 @@ airdrop-discord.ru airmake.ru akellasport.me asstralissteam.org.ru -astralis2.org.ru -astrallis.org.ru astralliscase.org.ru astralteam.org.ru battiefy.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 03b61abe8..e919ba840 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 15November2021v1-Alpha +# Version: 18November2021v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -666,7 +666,6 @@ 127.0.0.1 shaynefrancklynwynne.site 127.0.0.1 zorinetownspiegelman.casa 127.0.0.1 ssielearning.com -127.0.0.1 canhila.tk 127.0.0.1 paymetconfirm.com 127.0.0.1 fasteasyupdates.com 127.0.0.1 buyer-remindment.com @@ -833,7 +832,6 @@ 127.0.0.1 139.28.37.49 127.0.0.1 35.194.188.37 -127.0.0.1 nemscnc.ddns.net 127.0.0.1 hydro-ca.link 127.0.0.1 covid19-ca.link 127.0.0.1 godforgiveuss.live @@ -958,7 +956,6 @@ 127.0.0.1 23.94.26.138 127.0.0.1 ispco.shop 127.0.0.1 205.185.126.200 -127.0.0.1 trytogoi.xyz 127.0.0.1 apple-technicalsupport-icloud.com 127.0.0.1 185.243.56.167 127.0.0.1 123.10.224.135 @@ -1058,7 +1055,6 @@ 127.0.0.1 45.95.169.115 127.0.0.1 45.148.120.80 127.0.0.1 85.239.33.9 -127.0.0.1 leak.serveftp.com # Relations to the domain above 127.0.0.1 adminsys.serveftp.com 127.0.0.1 amazbaidu.serveftp.com @@ -1067,7 +1063,6 @@ 127.0.0.1 identity-auth612.serveftp.com 127.0.0.1 securd03c-acclogs.serveftp.com 127.0.0.1 secure00-account.serveftp.com -127.0.0.1 numberpresentifhh.serveftp.com 127.0.0.1 secure-auth01.serveftp.com 127.0.0.1 citionlinebk.serveftp.com 127.0.0.1 secure05h-verify.serveftp.com @@ -1154,6 +1149,35 @@ 127.0.0.1 103.233.216.77 127.0.0.1 183.188.192.55 127.0.0.1 198.23.255.14 +127.0.0.1 ether-give21.net +127.0.0.1 shib-inu.cc +127.0.0.1 freedownloadfiles.org +127.0.0.1 fruegelke.xyz +127.0.0.1 hh3valve.com +127.0.0.1 g-localdevice.biz +127.0.0.1 querahinor.xyz +127.0.0.1 t.gogamec.com +127.0.0.1 gogamec.com +127.0.0.1 trumops.com +127.0.0.1 server9.trumops.com +127.0.0.1 runmodes.com +127.0.0.1 charirelay.xyz +127.0.0.1 r3.o.lencr.org +127.0.0.1 91.121.67.60 +127.0.0.1 webdatingcompany.me +127.0.0.1 gohnot.com +127.0.0.1 172.67.186.189 +127.0.0.1 inconclusive-pyrite-grandparent.glitch.me +127.0.0.1 delicate-tame-angora.glitch.me +127.0.0.1 secureinvoice.glitch.me +127.0.0.1 holy-ruddy-brace.glitch.me +127.0.0.1 instagramcomphoto212paaatrk.glitch.me +127.0.0.1 instafollow.glitch.me +127.0.0.1 loving-discovered-swordfish.glitch.me +127.0.0.1 aquamarine-cotton-impala.glitch.me +127.0.0.1 mature-periwinkle-advantage.glitch.me +127.0.0.1 tough-numerous-lemur.glitch.me +127.0.0.1 securefirst.us-east-1.linodeobjects.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” 127.0.0.1 downloadprovider.me @@ -6009,8 +6033,6 @@ 127.0.0.1 airmake.ru 127.0.0.1 akellasport.me 127.0.0.1 asstralissteam.org.ru -127.0.0.1 astralis2.org.ru -127.0.0.1 astrallis.org.ru 127.0.0.1 astralliscase.org.ru 127.0.0.1 astralteam.org.ru 127.0.0.1 battiefy.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 4fcb865e6..4acb4c100 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 15November2021v1-Alpha +# Version: 18November2021v1-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -870,8 +870,6 @@ - - @@ -1034,7 +1032,6 @@ - # Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin @@ -1082,7 +1079,6 @@ - # Relations to the domain above @@ -1129,7 +1125,6 @@ - /mcafeedirect.jsp @@ -1157,6 +1152,35 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + @@ -6359,8 +6383,6 @@ - - diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index adf6b1196..fc30452a2 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 15November2021v1-Beta +# Version: 18November2021v1-Beta : expires = 5 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -781,7 +781,6 @@ msFilterList -d shaynefrancklynwynne.site -d zorinetownspiegelman.casa -d ssielearning.com --d canhila.tk -d paymetconfirm.com -d fasteasyupdates.com -d buyer-remindment.com @@ -999,7 +998,6 @@ msFilterList -d 139.28.37.49 # https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community -d 35.194.188.37 --d nemscnc.ddns.net # https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community -d hydro-ca.link -d covid19-ca.link @@ -1144,8 +1142,6 @@ msFilterList # https://github.com/DandelionSprout/adfilt/pull/298 # https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community -d 205.185.126.200 -# https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1 --d trytogoi.xyz # https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb -d apple-technicalsupport-icloud.com # https://www.virustotal.com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community @@ -1264,7 +1260,6 @@ msFilterList -d 45.148.120.80 # https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community -d 85.239.33.9 --d leak.serveftp.com # Relations to the domain above -d adminsys.serveftp.com -d amazbaidu.serveftp.com @@ -1273,7 +1268,6 @@ msFilterList -d identity-auth612.serveftp.com -d securd03c-acclogs.serveftp.com -d secure00-account.serveftp.com --d numberpresentifhh.serveftp.com -d secure-auth01.serveftp.com -d citionlinebk.serveftp.com -d secure05h-verify.serveftp.com @@ -1374,6 +1368,40 @@ msFilterList -d 183.188.192.55 # https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community -d 198.23.255.14 +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 +-d ether-give21.net +# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 +-d shib-inu.cc +# https://github.com/iam-py-test/investigations/blob/main/2021/11 15 1.md#iocs +-d freedownloadfiles.org +-d fruegelke.xyz +-d hh3valve.com +-d g-localdevice.biz +-d querahinor.xyz +-d t.gogamec.com +-d gogamec.com +-d trumops.com +-d server9.trumops.com +-d runmodes.com +-d charirelay.xyz +-d r3.o.lencr.org +-d 91.121.67.60 +-d webdatingcompany.me +-d gohnot.com +-d 172.67.186.189 +# https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 +-d inconclusive-pyrite-grandparent.glitch.me +-d delicate-tame-angora.glitch.me +-d secureinvoice.glitch.me +-d holy-ruddy-brace.glitch.me +-d instagramcomphoto212paaatrk.glitch.me +-d instafollow.glitch.me +-d loving-discovered-swordfish.glitch.me +-d aquamarine-cotton-impala.glitch.me +-d mature-periwinkle-advantage.glitch.me +-d tough-numerous-lemur.glitch.me +# https://scammer.info/t/mcafee-phish/83725 +-d securefirst.us-east-1.linodeobjects.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6234,8 +6262,6 @@ msFilterList -d airmake.ru -d akellasport.me -d asstralissteam.org.ru --d astralis2.org.ru --d astrallis.org.ru -d astralliscase.org.ru -d astralteam.org.ru -d battiefy.com diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index b6d9f6510..50f755ef2 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -1,5 +1,5 @@ # Title: Dandelion Sprout's and other adblocker lists' IPs -# Version: 05November2021v1-Beta +# Version: 15November2021v1-Beta # Expires: 5 days # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish. # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -144,6 +144,38 @@ 107.173.176.183 45.148.120.171 159.148.186.228 +39.83.80.247 +68.197.33.124 +219.157.21.37 +182.123.141.17 +125.47.243.187 +182.122.196.203 +182.117.231.182 +112.31.211.135 +125.106.63.93 +115.59.197.46 +122.159.29.192 +171.40.0.127 +171.80.219.160 +123.10.65.201 +168.90.205.46 +125.47.205.109 +39.80.147.239 +45.224.171.130 +45.5.209.75 +116.17.210.157 +27.45.103.240 +110.167.64.171 +39.81.117.73 +183.15.90.156 +119.113.248.74 +175.0.95.85 +61.52.99.109 +222.142.183.194 +106.86.172.194 +103.233.216.77 +183.188.192.55 +198.23.255.14 192.243.59.12 192.243.59.13 192.243.59.20