From e7622a856a77a3188c2935b12d8cf06463a480c7 Mon Sep 17 00:00:00 2001 From: sugarcanehyena Date: Wed, 10 Apr 2024 23:03:02 +0100 Subject: [PATCH] Block a new version of `Keyzetsu` a clipboard clipper malware used to hijack crypto transfers --- src/blacklists/free-dns-hosting/hosts.txt | 3 ++- src/blacklists/free-dns-hosting/list.txt | 3 ++- src/blacklists/free-dns-hosting/nomalware.txt | 3 ++- src/blacklists/free-dns-hosting/regex.txt | 2 +- src/blacklists/hosts.txt | 4 +++- src/blacklists/ip.txt | 3 ++- src/blacklists/nomalware-beta.txt | 4 +++- src/blacklists/nomalware-full.txt | 4 +++- src/blacklists/nomalware-lite.txt | 4 +++- src/blacklists/nomalware-mega.txt | 4 +++- 10 files changed, 24 insertions(+), 10 deletions(-) diff --git a/src/blacklists/free-dns-hosting/hosts.txt b/src/blacklists/free-dns-hosting/hosts.txt index 669c6ed..f310592 100644 --- a/src/blacklists/free-dns-hosting/hosts.txt +++ b/src/blacklists/free-dns-hosting/hosts.txt @@ -6,7 +6,7 @@ # Contribute: https://github.com/chartingshow/crypto-firewall/issues # License: GPL-3.0 license # -# Last modified: 23 February 2024 +# Last modified: 10 April 2024 # # Block Free dns and hosting @@ -81,6 +81,7 @@ 0.0.0.0 jetos.com 0.0.0.0 jumpingcrab.com 0.0.0.0 keenetic.link +0.0.0.0 keenetic.pro 0.0.0.0 kozow.com 0.0.0.0 kro.kr 0.0.0.0 linkpc.net diff --git a/src/blacklists/free-dns-hosting/list.txt b/src/blacklists/free-dns-hosting/list.txt index ba14d29..c4ef227 100644 --- a/src/blacklists/free-dns-hosting/list.txt +++ b/src/blacklists/free-dns-hosting/list.txt @@ -7,7 +7,7 @@ # Contribute: https://github.com/chartingshow/crypto-firewall/issues # License: GPL-3.0 license # -# Last modified: 23 February 2024 +# Last modified: 10 April 2024 # # Domains @@ -82,6 +82,7 @@ ix.tc jetos.com jumpingcrab.com keenetic.link +keenetic.pro kozow.com kro.kr linkpc.net diff --git a/src/blacklists/free-dns-hosting/nomalware.txt b/src/blacklists/free-dns-hosting/nomalware.txt index 1c09f47..175b38a 100644 --- a/src/blacklists/free-dns-hosting/nomalware.txt +++ b/src/blacklists/free-dns-hosting/nomalware.txt @@ -1,7 +1,7 @@ [Adblock Plus 2.0] ! Title: Crypto Firewall ! Expires: 7 days (update frequency) -! Last modified: 23 February 2024 +! Last modified: 10 April 2024 ! Homepage: https://github.com/chartingshow/crypto-firewall/ ! Contribute: https://github.com/chartingshow/crypto-firewall/issues ! License: GPL-3.0 license @@ -80,6 +80,7 @@ ||jetos.com^$third-party ||jumpingcrab.com^$third-party ||keenetic.link^$third-party +||keenetic.pro^$third-party ||kozow.com^$third-party ||kro.kr^$third-party ||linkpc.net^$third-party diff --git a/src/blacklists/free-dns-hosting/regex.txt b/src/blacklists/free-dns-hosting/regex.txt index 3f217c7..254cae8 100644 --- a/src/blacklists/free-dns-hosting/regex.txt +++ b/src/blacklists/free-dns-hosting/regex.txt @@ -1 +1 @@ -(2waky.com|3utilities.com|access.ly|accesscam.org|airvpn.org|anondns.net|beget.tech|biz.ua|blogsyte.com|bo-ip.biz|bounceme.net|buyshouses.net|cable-modem.org|camdvr.org|casacam.net|cew.hu|changeip.net|chickenkiller.com|chiguserver.ml|codns.com|con-ip.com|crabdance.com|ddns.com|ddns.me|ddns.net|ddnsfree.com|ddnsgeek.com|ddnsguru.com|ddnsking.com|dnsabr.com|dnsalias.com|dnsdojo.com|dnsdyn.net|duckdns.org|duia.ro|dvrlists.com|dynamic-dns.net|dyndns-at-home.com|dyndns-remote.com|dyndns-server.com|dyndns-web.com|dyndns-wiki.com|dyndns.biz|dyndns.org|dyndns1.de|dynu.com|dynu.net|dynuddns.net|firewall-gateway.com|freeddns.org|freedynamicdns.org|freemyip.com|from-de.com|from-ms.com|geekgalaxy.com|giize.com|gleeze.com|gotdns.ch|hacked.jp|here-for-more.info|home-webserver.de|homelinux.net|hopto.org|hoptp.org|ignorelist.com|ipq.co|is-a-doctor.com|ix.tc|jetos.com|jumpingcrab.com|keenetic.link|kozow.com|kro.kr|linkpc.net|loca.lt|loseyourip.com|mefound.com|misecure.com|mooo.com|mybluehost.me|myddns.me|myddns.rocks|myftp.biz|myftp.org|myiphost.com|mypsx.net|myvnc.com|mywire.org|n-e.kr|nerdpol.ovh|net-freaks.com|ngrok.io|no-ip.biz|no-ip.ca|no-ip.com|no-ip.info|no-ip.net|no-ip.org|no_ip.biz|noip.com|noip.me|noip.pl|ns01.info|nsupdate.info|onthewifi.com|ooguy.com|p-e.kr|portmap.host|portmap.io|publicvm.com|redirectme.net|rootlayer.net|scienceontheweb.net|selfhost.de|selfhost.tk|servebbs.net|servebbs.org|servebeer.com|servecounterstrike.com|serveftp.com|serveftp.org|servegame.com|servegame.org|servehalflife.com|servehttp.com|serveirc.com|serveminecraft.net|servemp3.com|servep2p.com|servepics.com|servequake.com|sinsincity.com|softcom.net|spdns.eu|strangled.net|swtest.ru|sytes.net|thddns.net|theworkpc.com|thruhere.net|tiscali.it|twilightparadox.com|viewdns.net|web-hosting.com|webhop.info|webhop.me|webhop.org|webredirect.org|x10.bz|ydns.eu|zapto.org|zyns.com|zz.am) +(2waky.com|3utilities.com|access.ly|accesscam.org|airvpn.org|anondns.net|beget.tech|biz.ua|blogsyte.com|bo-ip.biz|bounceme.net|buyshouses.net|cable-modem.org|camdvr.org|casacam.net|cew.hu|changeip.net|chickenkiller.com|chiguserver.ml|codns.com|con-ip.com|crabdance.com|ddns.com|ddns.me|ddns.net|ddnsfree.com|ddnsgeek.com|ddnsguru.com|ddnsking.com|dnsabr.com|dnsalias.com|dnsdojo.com|dnsdyn.net|duckdns.org|duia.ro|dvrlists.com|dynamic-dns.net|dyndns-at-home.com|dyndns-remote.com|dyndns-server.com|dyndns-web.com|dyndns-wiki.com|dyndns.biz|dyndns.org|dyndns1.de|dynu.com|dynu.net|dynuddns.net|firewall-gateway.com|freeddns.org|freedynamicdns.org|freemyip.com|from-de.com|from-ms.com|geekgalaxy.com|giize.com|gleeze.com|gotdns.ch|hacked.jp|here-for-more.info|home-webserver.de|homelinux.net|hopto.org|hoptp.org|ignorelist.com|ipq.co|is-a-doctor.com|ix.tc|jetos.com|jumpingcrab.com|keenetic.link|keenetic.pro|kozow.com|kro.kr|linkpc.net|loca.lt|loseyourip.com|mefound.com|misecure.com|mooo.com|mybluehost.me|myddns.me|myddns.rocks|myftp.biz|myftp.org|myiphost.com|mypsx.net|myvnc.com|mywire.org|n-e.kr|nerdpol.ovh|net-freaks.com|ngrok.io|no-ip.biz|no-ip.ca|no-ip.com|no-ip.info|no-ip.net|no-ip.org|no_ip.biz|noip.com|noip.me|noip.pl|ns01.info|nsupdate.info|onthewifi.com|ooguy.com|p-e.kr|portmap.host|portmap.io|publicvm.com|redirectme.net|rootlayer.net|scienceontheweb.net|selfhost.de|selfhost.tk|servebbs.net|servebbs.org|servebeer.com|servecounterstrike.com|serveftp.com|serveftp.org|servegame.com|servegame.org|servehalflife.com|servehttp.com|serveirc.com|serveminecraft.net|servemp3.com|servep2p.com|servepics.com|servequake.com|sinsincity.com|softcom.net|spdns.eu|strangled.net|swtest.ru|sytes.net|thddns.net|theworkpc.com|thruhere.net|tiscali.it|twilightparadox.com|viewdns.net|web-hosting.com|webhop.info|webhop.me|webhop.org|webredirect.org|x10.bz|ydns.eu|zapto.org|zyns.com|zz.am) diff --git a/src/blacklists/hosts.txt b/src/blacklists/hosts.txt index 4da8933..bfc38bf 100644 --- a/src/blacklists/hosts.txt +++ b/src/blacklists/hosts.txt @@ -4,7 +4,7 @@ # Contribute: https://github.com/chartingshow/crypto-firewall/issues # License: GPL-3.0 license # -# Last modified: 30 March 2024 +# Last modified: 10 April 2024 # # Extras (comment out if needed) @@ -11148,6 +11148,7 @@ 0.0.0.0 passportlogin.top 0.0.0.0 password-new-confirm.no 0.0.0.0 pastas.top +0.0.0.0 paste.fo 0.0.0.0 pastepast.net 0.0.0.0 pathwayfvvm.com 0.0.0.0 patiennerrhe.com @@ -12230,6 +12231,7 @@ 0.0.0.0 renovatiomarketing.com 0.0.0.0 rentacarinlahore.com.pk 0.0.0.0 renthomeflorida.com +0.0.0.0 rentry.co 0.0.0.0 rentverify.net 0.0.0.0 renyoua.com 0.0.0.0 repairhive.shop diff --git a/src/blacklists/ip.txt b/src/blacklists/ip.txt index ece866f..3178a28 100644 --- a/src/blacklists/ip.txt +++ b/src/blacklists/ip.txt @@ -5,7 +5,7 @@ # Contribute: https://github.com/chartingshow/crypto-firewall/issues # License: GPL-3.0 license # -# Last modified: 5 April 2024 +# Last modified: 10 April 2024 # 1.234.2.232 @@ -720,6 +720,7 @@ 187.108.32.133 187.63.160.88 187.84.80.182 +188.113.132.109 188.114.96.2 188.114.97.2 188.114.97.3 diff --git a/src/blacklists/nomalware-beta.txt b/src/blacklists/nomalware-beta.txt index e490a91..2892ae2 100644 --- a/src/blacklists/nomalware-beta.txt +++ b/src/blacklists/nomalware-beta.txt @@ -1,7 +1,7 @@ [Adblock Plus 2.0] ! Title: Crypto Firewall (Beta Version) ! Expires: 7 days (update frequency) -! Last modified: 30 March 2024 +! Last modified: 10 April 2024 ! Homepage: https://github.com/chartingshow/crypto-firewall/ ! Contribute: https://github.com/chartingshow/crypto-firewall/issues ! License: GPL-3.0 license @@ -11160,6 +11160,7 @@ ||passportlogin.top^$third-party ||password-new-confirm.no^$third-party ||pastas.top^$third-party +||paste.fo^$third-party ||pastepast.net^$third-party ||pathwayfvvm.com^$third-party ||patiennerrhe.com^$third-party @@ -12223,6 +12224,7 @@ ||renovatiomarketing.com^$third-party ||rentacarinlahore.com.pk^$third-party ||renthomeflorida.com^$third-party +||rentry.co^$third-party ||rentverify.net^$third-party ||renyoua.com^$third-party ||repairhive.shop^$third-party diff --git a/src/blacklists/nomalware-full.txt b/src/blacklists/nomalware-full.txt index 7faf91c..531e4ef 100644 --- a/src/blacklists/nomalware-full.txt +++ b/src/blacklists/nomalware-full.txt @@ -1,7 +1,7 @@ [Adblock Plus 2.0] ! Title: Crypto Firewall (Full Version) ! Expires: 7 days (update frequency) -! Last modified: 30 March 2024 +! Last modified: 10 April 2024 ! Homepage: https://github.com/chartingshow/crypto-firewall/ ! Contribute: https://github.com/chartingshow/crypto-firewall/issues ! License: GPL-3.0 license @@ -11160,6 +11160,7 @@ ||passportlogin.top^$third-party ||password-new-confirm.no^$third-party ||pastas.top^$third-party +||paste.fo^$third-party ||pastepast.net^$third-party ||pathwayfvvm.com^$third-party ||patiennerrhe.com^$third-party @@ -12223,6 +12224,7 @@ ||renovatiomarketing.com^$third-party ||rentacarinlahore.com.pk^$third-party ||renthomeflorida.com^$third-party +||rentry.co^$third-party ||rentverify.net^$third-party ||renyoua.com^$third-party ||repairhive.shop^$third-party diff --git a/src/blacklists/nomalware-lite.txt b/src/blacklists/nomalware-lite.txt index 34add64..bf4ac7f 100644 --- a/src/blacklists/nomalware-lite.txt +++ b/src/blacklists/nomalware-lite.txt @@ -1,7 +1,7 @@ [Adblock Plus 2.0] ! Title: Crypto Firewall (Lite Version) ! Expires: 7 days (update frequency) -! Last modified: 30 March 2024 +! Last modified: 10 April 2024 ! Homepage: https://github.com/chartingshow/crypto-firewall/ ! Contribute: https://github.com/chartingshow/crypto-firewall/issues ! License: GPL-3.0 license @@ -11160,6 +11160,7 @@ ||passportlogin.top^$third-party ||password-new-confirm.no^$third-party ||pastas.top^$third-party +||paste.fo^$third-party ||pastepast.net^$third-party ||pathwayfvvm.com^$third-party ||patiennerrhe.com^$third-party @@ -12223,6 +12224,7 @@ ||renovatiomarketing.com^$third-party ||rentacarinlahore.com.pk^$third-party ||renthomeflorida.com^$third-party +||rentry.co^$third-party ||rentverify.net^$third-party ||renyoua.com^$third-party ||repairhive.shop^$third-party diff --git a/src/blacklists/nomalware-mega.txt b/src/blacklists/nomalware-mega.txt index a8c0480..be1dd6a 100644 --- a/src/blacklists/nomalware-mega.txt +++ b/src/blacklists/nomalware-mega.txt @@ -1,7 +1,7 @@ [Adblock Plus 2.0] ! Title: Crypto Firewall (Mega Version) ! Expires: 7 days (update frequency) -! Last modified: 30 March 2024 +! Last modified: 10 April 2024 ! Homepage: https://github.com/chartingshow/crypto-firewall/ ! Contribute: https://github.com/chartingshow/crypto-firewall/issues ! License: GPL-3.0 license @@ -11160,6 +11160,7 @@ ||passportlogin.top^$third-party ||password-new-confirm.no^$third-party ||pastas.top^$third-party +||paste.fo^$third-party ||pastepast.net^$third-party ||pathwayfvvm.com^$third-party ||patiennerrhe.com^$third-party @@ -12223,6 +12224,7 @@ ||renovatiomarketing.com^$third-party ||rentacarinlahore.com.pk^$third-party ||renthomeflorida.com^$third-party +||rentry.co^$third-party ||rentverify.net^$third-party ||renyoua.com^$third-party ||repairhive.shop^$third-party