From 08cbe6d059c9a6083e31571eadd17eacc6b40c93 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Tue, 10 Dec 2024 21:31:25 +0100 Subject: [PATCH] Centralised the Tumblr entries. --- Dandelion Sprout's Anti-Malware List.txt | 58 ++++++++++++------------ 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index 3c4eb0053..836132c3c 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 08December2024v2 +! Version: 10December2024v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -21037,8 +21037,6 @@ toorgle.net##.join *$all,ipaddress=147.135.16.27 ! https://www•google•no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img ||ingeniovirtual.com^$doc -! Spambot posts on Tumblr (19/09/2022) -tumblr.com##div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://bit.ly/"]) ! https://scambiofigu•forumcommunity•net/?t=57482915 ||scambiofigu.net^$all,~inline-font ! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious @@ -22017,9 +22015,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] *$all,ipaddress=165.231.4.90 ||158.222.7.83^$all,~inline-font *$all,ipaddress=158.222.7.83 -! Spam on W.I.T.C.H. and Winx text search results -tumblr.com#?#div[tabindex][style]:has(a[href*="tinyurl."]:has-text(_1+8_)) -tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) ! A scam SMS I got ||95-214-26-78.plesk.page^$all,~inline-font ||account-limitato.org^$all,~inline-font @@ -22085,18 +22080,7 @@ tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) ! Overly dedicated E-mail spammers ||wirexapp.africa.com^$all ||tachyoniums.eu.com^$all -! Tumblr spambots -||shua999.com^$all -||ybd001.com^$all -tumblr.com#?#:is(.post,div[data-cell-id][style]:not([data-cell-id*=carousel]),div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has-text( click & chat me ):has-text(🔞) -tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has(a[rel=author]:has-text(/^[a-z]{2,6}-[a-z]{2,8}\d{2}$/i)):has-text(/^.*(18|sex|squirt|bo{2}ty).*$/i) -||deltacorriher.best^$all,~inline-font -||104.21.82.132^$doc,popup -*$all,ipaddress=104.21.82.132 -||172.67.158.57^$doc,popup -*$all,ipaddress=172.67.158.57 -||[2606:4700:3030::6815:5284]^$doc,popup -||[2606:4700:3037::ac43:9e39]^$doc,popup + ! Google results for «SodaStream site:no cranberry» /^https?://[a-z0-9.-]{1,}\.([a-z]{3,}|[a-z][a-tv-z]|[a-qs-z][a-z])/.*(go\.php|redirect|url=|\?re=).*\.(xn--p1ai|рф|%D1%80%D1%84)$/$doc,domain=~malware-redirection-results.* ||adservice.google.*/ddm/clk/$doc,domain=~malware-redirection-results.* @@ -22217,9 +22201,24 @@ google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ||agendajacob.com^$all ! Visibly fake item descriptions and prices ||amaskiphirescotland.co.uk^$all +! https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ +||empatiya.net^$all +||vastila.com^$all + ! Tumblr spammers -||tgpdeal.com^$all +tumblr.com##div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://bit.ly/"]) +tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has(a[rel=author]:has-text(/^[a-z]{2,6}-[a-z]{2,8}\d{2}$/i)):has-text(/^.*(18|sex|squirt|bo{2}ty).*$/i) +tumblr.com#?#:is(.post,div[data-cell-id][style]:not([data-cell-id*=carousel]),div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has-text( click & chat me ):has-text(🔞) +tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) +tumblr.com#?#div[tabindex][style]:has(a[href*="tinyurl."]:has-text(_1+8_)) +www.tumblr.com##div[style="margin-top: 0px;"][tabindex]:has-text(🔞):has-text(/Insta/i) +www.tumblr.com##div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a[target=_blank] > div > div:has-text(/^.*🔞.*insta( |gram).*\n.*$/i)) +||104.21.82.132^$doc,popup +||172.67.158.57^$doc,popup +||198.12.86.90^$all ||2024ballondor.shop^$all +||[2606:4700:3030::6815:5284]^$doc,popup +||[2606:4700:3037::ac43:9e39]^$doc,popup ||adhitagency.shop^$all ||advanceddigitalbusiness.com^$all ||ajkalshop.com^$all @@ -22266,6 +22265,7 @@ google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ||cdjdeal.com^$all ||cdkdeal.com^$all ||cdmdeal.com^$all +||cdn32316413.blazingcdn.net^$all ||cdodeal.com^$all ||cdpdeal.com^$all ||cdqdeal.com^$all @@ -22300,11 +22300,14 @@ google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ||ctxdeal.com^$all ||ctydeal.com^$all ||ctzdeal.com^$all +||d1pplo45p828lj.cloudfront.net^$all +||d373n2hi69hqg3.cloudfront.net^$all ||dcndeal.com^$all ||dcpdeal.com^$all ||dcrdeal.com^$all ||dctdeal.com^$all ||dczdeal.com^$all +||deltacorriher.best^$all,~inline-font ||deshnews24bd.com^$all ||dg24m.com^$all ||dgfdeal.com^$all @@ -22377,6 +22380,8 @@ google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ||gzcodes.com^$all ||info24eonline.com^$all ||inspireabithy.com^$all +||kabin.asia^$all +||kalan.asia^$all ||kgadeal.com^$all ||kgcdeal.com^$all ||kgddeal.com^$all @@ -22651,6 +22656,7 @@ google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ||sb24e.com^$all ||sbdeal.com^$all ||shoppernetis.com^$all +||shua999.com^$all ||smartiteam.shop^$all ||smartnews24bd.com^$all ||smartqtm.com^$all @@ -22683,6 +22689,7 @@ google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ||tgmeshop.com^$all ||tgmoffer.com^$all ||tgmselling.com^$all +||tgpdeal.com^$all ||tgqdeal.com^$all ||tgvdeal.com^$all ||tgwdeal.com^$all @@ -22752,17 +22759,10 @@ google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ||vtudeal.com^$all ||vtwdeal.com^$all ||vtydeal.com^$all -||198.12.86.90^$all +||ybd001.com^$all +*$all,ipaddress=104.21.82.132 +*$all,ipaddress=172.67.158.57 *$all,ipaddress=198.12.86.90 -||kalan.asia^$all -||d1pplo45p828lj.cloudfront.net^$all -||kabin.asia^$all -! https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ -||empatiya.net^$all -||vastila.com^$all -! Search results on Tumblr (31/10/2024) -www.tumblr.com##div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a[target=_blank] > div > div:has-text(/^.*🔞.*insta( |gram).*\n.*$/i)) -||cdn32316413.blazingcdn.net^$all ! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.