Added IP addresses for the most fraudulent domain servers

Dandelion Sprout's Anti-Malware List.txt

@@ -1,6 +1,6 @@
 [Adblock Plus 3.4]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List
-! Version: 08January2020v1-Beta
+! Version: 13January2020v1-Beta
 ! Expires: 5 days
 ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 ! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
@@ -56,15 +56,19 @@ google.*##.srg:has(a[oncontextmenu][href*=".php?xxx="])
 ! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———
 ||adblock.gjtech.net^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and has been picked up by malware pushers.
 ||spam404bl.com^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers.
+||109.201.135.46^$doc,domain=~ Warning displayed due to: Malware pushers.
 ||hufilter.hu^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers.
 ||fredfiber.no^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers.
 ||securemecca.com^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers.
+||1hos.cf^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers.
+||1hosts.cf^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers.
 
 ! ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———
 ! To log in to TP-Link routers, use tplinkwifi.net instead.
 ||tplinklogin.net^$doc,domain=~ Warning displayed due to: TP-Link embarrasingly losing the rights to that router login domain; and it may have been snapped up by malware pushers. Please try tplinkwifi.net instead.
 ||tplinkextender.net^$doc,domain=~ Warning displayed due to: TP-Link embarrasingly losing the rights to that router login domain; and it has been snapped up by malware pushers. Please try tplinkwifi.net instead.
 ||ublock.org^$doc,domain=~ Warning displayed due to: It playing on its old similarities with uBlock Origin to solicit large donations for limited work effort.
+||138.68.252.54^$doc,domain=~ Warning displayed due to: It playing on its old similarities with uBlock Origin to solicit large donations for limited work effort.
 
 ! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
 ||funeducation.com^$doc,domain=~ Warning displayed due to: The IQ test will ask for money at the end to show you your result.
@@ -83,6 +87,10 @@ google.*##.srg:has(a[oncontextmenu][href*=".php?xxx="])
 ||dreamlinux.com.br^$doc,domain=~ Warning displayed due to: Its Linux distro having been discontinued and forfeiting their domains; which may have been snapped up by malware pushers.
 ||dreamlinux.net^$doc,domain=~ Warning displayed due to: Its Linux distro having been discontinued and forfeiting their domains; which may have been snapped up by malware pushers.
 ||dreamlinux.info^$doc,domain=~ Warning displayed due to: Its Linux distro having been discontinued and forfeiting their domains; which may have been snapped up by malware pushers.
+||104.24.117.74^$doc,domain=~ Warning displayed due to: Malware pushers
+||104.24.116.74^$doc,domain=~ Warning displayed due to: Malware pushers
+||[2606:4700:30::6818:754a]^$doc,domain=~ Warning displayed due to: Malware pushers
+||[2606:4700:30::6818:744a]^$doc,domain=~ Warning displayed due to: Malware pushers
 ||hacktolive.org^$doc,domain=~ Warning displayed due to: Its Linux distro having been discontinued and forfeiting their domains; which may have been snapped up by malware pushers.
 ||mandriva.com^$doc,domain=~ Warning displayed due to: Its Linux distro having been discontinued and forfeiting their domains; which may have been snapped up by malware pushers.
 
@@ -249,10 +257,12 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
 ||the1adblocker.com^$doc,domain=~ Warning displayed due to: Low-quality or malicious adblocker.
 
 ! ——— https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ ———
-||dwarffortresswiki.com^
+||dwarffortresswiki.com^$doc
+||103.224.212.249^$doc
 
 ! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
 ||ppc.netnet44.net^$doc,domain=~ Warning displayed due to: A malware redirector used in hacks of otherwise innocuous sites.
-||katie.tncrun.net^$doc,domain=~ Warning displayed due to: A malware redirector used in hacks of otherwise innocuous sites.
+||tncrun.net^$doc,domain=~ Warning displayed due to: A malware redirector used in hacks of otherwise innocuous sites.
+||54.174.156.141^$doc,domain=~ Warning displayed due to: A malware redirector used in hacks of otherwise innocuous sites.
 
 ! Placeholder line for alternate list versions