diff --git a/README.md b/README.md index 7ef4e487..741c190f 100644 --- a/README.md +++ b/README.md @@ -27,24 +27,24 @@ A blocklist of phishing websites, curated from [OpenPhish](https://openphish.com/) and [mitchellkrogza/Phishing.Database](https://github.com/mitchellkrogza/Phishing.Database/blob/master/phishing-domains-ACTIVE.txt). Blocklist is updated twice a day. -| Client | mirror 1 | mirror 2 | mirror 3 | mirror 4 | mirror 5 | mirror 6 | -| ------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| uBlock Origin, [IP-based](#ip-based) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter.txt) | [link](https://malware-filter.pages.dev/phishing-filter.txt) | [link](https://phishing-filter.pages.dev/phishing-filter.txt) | -| [Pi-hole](#domain-based) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-domains.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-domains.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-domains.txt) | [link](https://malware-filter.pages.dev/phishing-filter-domains.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-domains.txt) | -| [AdGuard Home](#domain-based-adguard-home) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-agh.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-agh.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-agh.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-agh.txt) | [link](https://malware-filter.pages.dev/phishing-filter-agh.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-agh.txt) | -| [AdGuard (browser extension)](#ip-based-adguard) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-ag.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-ag.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-ag.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-ag.txt) | [link](https://malware-filter.pages.dev/phishing-filter-ag.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-ag.txt) | -| [Vivaldi](#ip-based-vivaldi) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-vivaldi.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-vivaldi.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-vivaldi.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-vivaldi.txt) | [link](https://malware-filter.pages.dev/phishing-filter-vivaldi.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-vivaldi.txt) | -| [Hosts](#hosts-based) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-hosts.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-hosts.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-hosts.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-hosts.txt) | [link](https://malware-filter.pages.dev/phishing-filter-hosts.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-hosts.txt) | -| [Dnsmasq](#dnsmasq) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-dnsmasq.conf) | [link](https://curbengh.github.io/malware-filter/phishing-filter-dnsmasq.conf) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-dnsmasq.conf) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-dnsmasq.conf) | [link](https://malware-filter.pages.dev/phishing-filter-dnsmasq.conf) | [link](https://phishing-filter.pages.dev/phishing-filter-dnsmasq.conf) | -| BIND [zone](#bind) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-bind.conf) | [link](https://curbengh.github.io/malware-filter/phishing-filter-bind.conf) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-bind.conf) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-bind.conf) | [link](https://malware-filter.pages.dev/phishing-filter-bind.conf) | [link](https://phishing-filter.pages.dev/phishing-filter-bind.conf) | -| BIND [RPZ](#response-policy-zone) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-rpz.conf) | [link](https://curbengh.github.io/malware-filter/phishing-filter-rpz.conf) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-rpz.conf) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-rpz.conf) | [link](https://malware-filter.pages.dev/phishing-filter-rpz.conf) | [link](https://phishing-filter.pages.dev/phishing-filter-rpz.conf) | -| [dnscrypt-proxy](#dnscrypt-proxy) | [names.txt](https://malware-filter.gitlab.io/malware-filter/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://malware-filter.gitlab.io/malware-filter/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://curbengh.github.io/malware-filter/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://curbengh.github.io/malware-filter/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://curbengh.github.io/phishing-filter/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://curbengh.github.io/phishing-filter/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://malware-filter.pages.dev/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://malware-filter.pages.dev/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://phishing-filter.pages.dev/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://phishing-filter.pages.dev/phishing-filter-dnscrypt-blocked-ips.txt) | +| Client | mirror 1 | mirror 2 | mirror 3 | mirror 4 | mirror 5 | mirror 6 | +| --- | --- | --- | --- | --- | --- | --- | +| uBlock Origin, [IP-based](#ip-based) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter.txt) | [link](https://malware-filter.pages.dev/phishing-filter.txt) | [link](https://phishing-filter.pages.dev/phishing-filter.txt) | +| [Pi-hole](#domain-based) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-domains.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-domains.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-domains.txt) | [link](https://malware-filter.pages.dev/phishing-filter-domains.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-domains.txt) | +| [AdGuard Home](#domain-based-adguard-home) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-agh.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-agh.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-agh.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-agh.txt) | [link](https://malware-filter.pages.dev/phishing-filter-agh.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-agh.txt) | +| [AdGuard (browser extension)](#ip-based-adguard) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-ag.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-ag.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-ag.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-ag.txt) | [link](https://malware-filter.pages.dev/phishing-filter-ag.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-ag.txt) | +| [Vivaldi](#ip-based-vivaldi) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-vivaldi.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-vivaldi.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-vivaldi.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-vivaldi.txt) | [link](https://malware-filter.pages.dev/phishing-filter-vivaldi.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-vivaldi.txt) | +| [Hosts](#hosts-based) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-hosts.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-hosts.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-hosts.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-hosts.txt) | [link](https://malware-filter.pages.dev/phishing-filter-hosts.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-hosts.txt) | +| [Dnsmasq](#dnsmasq) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-dnsmasq.conf) | [link](https://curbengh.github.io/malware-filter/phishing-filter-dnsmasq.conf) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-dnsmasq.conf) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-dnsmasq.conf) | [link](https://malware-filter.pages.dev/phishing-filter-dnsmasq.conf) | [link](https://phishing-filter.pages.dev/phishing-filter-dnsmasq.conf) | +| BIND [zone](#bind) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-bind.conf) | [link](https://curbengh.github.io/malware-filter/phishing-filter-bind.conf) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-bind.conf) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-bind.conf) | [link](https://malware-filter.pages.dev/phishing-filter-bind.conf) | [link](https://phishing-filter.pages.dev/phishing-filter-bind.conf) | +| BIND [RPZ](#response-policy-zone) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-rpz.conf) | [link](https://curbengh.github.io/malware-filter/phishing-filter-rpz.conf) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-rpz.conf) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-rpz.conf) | [link](https://malware-filter.pages.dev/phishing-filter-rpz.conf) | [link](https://phishing-filter.pages.dev/phishing-filter-rpz.conf) | +| [dnscrypt-proxy](#dnscrypt-proxy) | [names.txt](https://malware-filter.gitlab.io/malware-filter/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://malware-filter.gitlab.io/malware-filter/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://curbengh.github.io/malware-filter/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://curbengh.github.io/malware-filter/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://curbengh.github.io/phishing-filter/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://curbengh.github.io/phishing-filter/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://malware-filter.pages.dev/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://malware-filter.pages.dev/phishing-filter-dnscrypt-blocked-ips.txt) | [names.txt](https://phishing-filter.pages.dev/phishing-filter-dnscrypt-blocked-names.txt), [ips.txt](https://phishing-filter.pages.dev/phishing-filter-dnscrypt-blocked-ips.txt) | | [blocky](#wildcard-asterisk) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-wildcard.txt) | [link](https://curbengh.github.io/malware-filter/phishing-filter-wildcard.txt) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-wildcard.txt) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-wildcard.txt) | [link](https://malware-filter.pages.dev/phishing-filter-wildcard.txt) | [link](https://phishing-filter.pages.dev/phishing-filter-wildcard.txt) | -| [Internet Explorer](#tracking-protection-list-ie) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter.tpl) | [link](https://curbengh.github.io/malware-filter/phishing-filter.tpl) | [link](https://curbengh.github.io/phishing-filter/phishing-filter.tpl) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter.tpl) | [link](https://malware-filter.pages.dev/phishing-filter.tpl) | [link](https://phishing-filter.pages.dev/phishing-filter.tpl) | -| [Snort2](#snort2) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-snort2.rules) | [link](https://curbengh.github.io/malware-filter/phishing-filter-snort2.rules) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-snort2.rules) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-snort2.rules) | [br](https://malware-filter.pages.dev/phishing-filter-snort2.rules.br)/[gz](https://malware-filter.pages.dev/phishing-filter-snort2.rules.gz) | [link](https://phishing-filter.pages.dev/phishing-filter-snort2.rules) | -| [Snort3](#snort3) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-snort3.rules) | [link](https://curbengh.github.io/malware-filter/phishing-filter-snort3.rules) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-snort3.rules) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-snort3.rules) | [br](https://malware-filter.pages.dev/phishing-filter-snort3.rules.br)/[gz](https://malware-filter.pages.dev/phishing-filter-snort3.rules.gz) | [link](https://phishing-filter.pages.dev/phishing-filter-snort3.rules) | -| [Suricata](#suricata) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-suricata.rules) | [link](https://curbengh.github.io/malware-filter/phishing-filter-suricata.rules) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-suricata.rules) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-suricata.rules) | [br](https://malware-filter.pages.dev/phishing-filter-suricata.rules.br)/[gz](https://malware-filter.pages.dev/phishing-filter-suricata.rules.gz) | [link](https://phishing-filter.pages.dev/phishing-filter-suricata.rules) | -| [Splunk](#splunk) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-splunk.csv) | [link](https://curbengh.github.io/malware-filter/phishing-filter-splunk.csv) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-splunk.csv) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-splunk.csv) | [link](https://malware-filter.pages.dev/phishing-filter-splunk.csv) | [link](https://phishing-filter.pages.dev/phishing-filter-splunk.csv) | +| [Internet Explorer](#tracking-protection-list-ie) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter.tpl) | [link](https://curbengh.github.io/malware-filter/phishing-filter.tpl) | [link](https://curbengh.github.io/phishing-filter/phishing-filter.tpl) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter.tpl) | [link](https://malware-filter.pages.dev/phishing-filter.tpl) | [link](https://phishing-filter.pages.dev/phishing-filter.tpl) | +| [Snort2](#snort2) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-snort2.rules) | [link](https://curbengh.github.io/malware-filter/phishing-filter-snort2.rules) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-snort2.rules) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-snort2.rules) | [br](https://malware-filter.pages.dev/phishing-filter-snort2.rules.br)/[gz](https://malware-filter.pages.dev/phishing-filter-snort2.rules.gz) | [link](https://phishing-filter.pages.dev/phishing-filter-snort2.rules) | +| [Snort3](#snort3) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-snort3.rules) | [link](https://curbengh.github.io/malware-filter/phishing-filter-snort3.rules) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-snort3.rules) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-snort3.rules) | [br](https://malware-filter.pages.dev/phishing-filter-snort3.rules.br)/[gz](https://malware-filter.pages.dev/phishing-filter-snort3.rules.gz) | [link](https://phishing-filter.pages.dev/phishing-filter-snort3.rules) | +| [Suricata](#suricata) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-suricata.rules) | [link](https://curbengh.github.io/malware-filter/phishing-filter-suricata.rules) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-suricata.rules) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-suricata.rules) | [br](https://malware-filter.pages.dev/phishing-filter-suricata.rules.br)/[gz](https://malware-filter.pages.dev/phishing-filter-suricata.rules.gz) | [link](https://phishing-filter.pages.dev/phishing-filter-suricata.rules) | +| [Splunk](#splunk) | [link](https://malware-filter.gitlab.io/malware-filter/phishing-filter-splunk.csv) | [link](https://curbengh.github.io/malware-filter/phishing-filter-splunk.csv) | [link](https://curbengh.github.io/phishing-filter/phishing-filter-splunk.csv) | [link](https://malware-filter.gitlab.io/phishing-filter/phishing-filter-splunk.csv) | [link](https://malware-filter.pages.dev/phishing-filter-splunk.csv) | [link](https://phishing-filter.pages.dev/phishing-filter-splunk.csv) | For other programs, see [Compatibility](https://gitlab.com/malware-filter/malware-filter/wikis/compatibility) page in the wiki. @@ -211,9 +211,9 @@ Or use [malware-filter add-on](https://splunkbase.splunk.com/app/6970) to instal Columns: -| host | path | message | updated | -| ------------ | ---------- | ----------------------------------------- | -------------------- | -| example.com | | phishing-filter phishing website detected | 2022-12-21T12:34:56Z | +| host | path | message | updated | +| --- | --- | --- | --- | +| example.com | | phishing-filter phishing website detected | 2022-12-21T12:34:56Z | | example2.com | /some-path | phishing-filter phishing website detected | 2022-12-21T12:34:56Z | ## Compressed version