diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index c84477708..3362df8c6 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: ๐Ÿ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 27November2021v3-Beta +! Version: 01December2021v3-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -13,13 +13,13 @@ ! Gabon ||ga^$domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga ! Mali -||ml^$domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml +||ml^$domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml ! Equatorial Guinea ||gq^$domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq ! Central African Republic ||cf^$domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf ! Palau -||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw +||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^ ||agency^ @@ -112,7 +112,7 @@ bing.com##.b_algo:-abp-has(a[href*=".top/"]:not([href*="corriente.top"], [href*= ||ssl.bblck.me^ ||allblock.net^ ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^ -! Malicious domains found in videogame manuals and title screens +! Malicious or purchaseable domains found in videogame manuals and title screens ||acclaimsports.com^ ||acclaimmaxsports.com^ ||hip-games.com^ @@ -650,7 +650,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||new-message.today^ ||new-notification.live^ ||new-notifications.live^ -||notified-today.com^ ||notified-today.live^ ||notified-today.xyz^ ||stay-notified.com^ @@ -1489,7 +1488,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||37.0.10.83^$popup ||newstepsco.com^ ||newstepsco.com^$popup -||duckdns.org^$domain=~www.duckdns.org +||duckdns.org^$domain=~www.duckdns.org|~checkip.dyndns.com @@://duckdns.org^ ||chse-security-notifications.email^ ||chse-security-notifications.email^$popup @@ -1497,7 +1496,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||secure-0*.ddnss.ch^$popup ||lucdream.com^ ||beastbuying.com^ -||kokotrokot.com^ ||07ca17vejqqej990.inteo.xyz^ ||pesoaniz.com^ ||plarium.com^ @@ -1524,7 +1522,8 @@ zombooru.com##a[href="http://www.hard55.com"] ||secureleadsforever.com^$popup ||renewal-software-update.com^ ||renewal-software-update.com^$popup -||pushmeup.art^ +||pushmeup.art^ +||pushmeup.art^$popup ||covercenter.xyz^ ||covercenter.xyz^$popup ||gettrk.xyz^ @@ -1833,7 +1832,8 @@ zombooru.com##a[href="http://www.hard55.com"] ||safelyonline.net^ ||browse-safe.net^ ||btpnative.com^ -||mybetterdl.com^ +||mybetterdl.com^ +||mybetterdl.com^$popup ||besty-deals.com^ ||besty-deals.com^$popup ||data-px.services^ @@ -1868,8 +1868,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||www.kqzyfj.com^ ||www.kqzyfj.com^$popup ||kqzyfj.com^ -||cj.dotomi.com^ -||cj.dotomi.com^$popup ||mcafee12.tt.omtrdc.net^ ||trolleydrop.info^ ||jaynordan.digital^ @@ -2152,22 +2150,14 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains ||yotube.com^ ||yotube.com^$popup -||mybetterdl.com^ -||mybetterdl.com^$popup -||p185689.mybetterdl.com^ -||p185689.mybetterdl.com^$popup ||r-tb.com^ ||r-tb.com^$popup ||cdn.hoood.info^ ||cdn.hoood.info^$popup -||data-px.services^ -||data-px.services^$popup ||barah-flo.com^ ||barah-flo.com^$popup ||beta-one.net^ ||beta-one.net^$popup -||beastbuying.com^ -||beastbuying.com^$popup ||pisism.com^ ||pisism.com^$popup ||czyzd.xyz^ @@ -2186,8 +2176,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||welcomejohncena.pro^$popup ||security-scanner.xyz^ ||security-scanner.xyz^$popup -||pushmeup.art^ -||pushmeup.art^$popup ||c2egp.xyz^ ||c2egp.xyz^$popup ||ese40.xyz^ @@ -2513,6 +2501,67 @@ zombooru.com##a[href="http://www.hard55.com"] ||163.125.31.46^$popup ||163.179.168.44^ ||163.179.168.44^$popup +! https://github.com/uBlockOrigin/uAssets/pull/10647 +! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md +||updsec.builtfromzero.com^ +||updsec.builtfromzero.com^$popup +||money-mod.com^ument +||gospelchor.info^ument + +||new.bestlifeoffer20.com^ument +||reykijnoac.com^ument +||totalnicefeed.com^ +||totalnicefeed.com^$popup +! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md +||riteupd.mimanduca.co^ +||riteupd.mimanduca.co^$popup +||oaesso.info^ument + +||bestlifeoffer20.com^ument +! https://scammer.info/t/password-stealer/84348 +! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/ +||youtube.com/watch?v=8nY7SnvNxH4^ +||youtube.com/watch?v=8nY7SnvNxH4^$popup +||bit.ly/3p8kN5V^ument +||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/ +||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$popup +||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^ +||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$popup +! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +||110.89.59.135^ +||110.89.59.135^$popup +||113.116.89.1^ +||113.116.89.1^$popup +||119.183.146.191^ +||119.183.146.191^$popup +||153.3.3.226^ +||153.3.3.226^$popup +||182.116.104.6^ +||182.116.104.6^$popup +||60.7.133.200^ +||60.7.133.200^$popup +||122.6.254.201^ +||122.6.254.201^$popup +||110.89.11.167^ +||110.89.11.167^$popup +||171.112.177.90^ +||171.112.177.90^$popup +||115.194.38.143^ +||115.194.38.143^$popup +||61.52.79.32^ +||61.52.79.32^$popup +! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 +||ups-dk.u1537460.cp.regruhosting.ru^ +||ups-dk.u1537460.cp.regruhosting.ru^$popup +! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 +||lowseelan.com^ +||lowseelan.com^$popup +! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community +||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^ +||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^$popup +! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community +||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^ +||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$popup ! โ€”โ€”โ€” Standard malware that I stumbled upon on my own โ€”โ€”โ€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -12315,14 +12364,14 @@ toorgle.net##.join ||discord.foundation^$popup ||discordgift.ru^ ||discordgift.ru^$popup -||discordnitro-steam.ru^ -||discordnitro-steam.ru^$popup +||discordnitro-steam. +||discordnitro-steam.$popup ||discordnitro.space^ ||discordnitro.space^$popup -||discordxgift.xyz^ -||discordxgift.xyz^$popup -||discordxnitro.xyz^ -||discordxnitro.xyz^$popup +||discordxgift. +||discordxgift.$popup +||discordxnitro. +||discordxnitro.$popup ||discorgift.online^ ||discorgift.online^$popup ||discrocl.xyz^ @@ -12379,8 +12428,8 @@ toorgle.net##.join ||free-niltross.ru^$popup ||free-nitlross.ru^ ||free-nitlross.ru^$popup -||freediscordnitro.ru^ -||freediscordnitro.ru^$popup +||freediscordnitro. +||freediscordnitro.$popup ||freeskinsfree.pp.ua^ ||freeskinsfree.pp.ua^$popup ||from-plames.xyz^ @@ -12905,12 +12954,12 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||githubnt.com^ ! โ€”โ€”โ€” Usually used by various groups who buy old domains and display illicit ads on them โ€”โ€”โ€” -://ww4. -://ww5.$domain=~ww5.msu.ac.zw +://ww4.$domain=~ww4.ikea.com +://ww5.$domain=~ww5.ikea.com|~ww5.msu.ac.zw ://ww6.$domain=~ww6.generali.pt ://ww7.$domain=~ww7.be|~ww7.readsnk.com ://ww8.$domain=~ww8.co|~ww8.ikea.com|~ww8.tiki.ne.jp|~ww8.erovoice.us|~ww8.anyanime.com|~ww8.bakushpal.az|~ww8.tokyoghoulre.com -://ww9.$domain=~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br +://ww9.$domain=~ww9.ikea.com|~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br ://ww10. ://ww11. ://ww12. @@ -12969,11 +13018,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne) ! โ€”โ€”โ€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically โ€”โ€”โ€” $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net -! โ€”โ€”โ€” Offline-only apps trying to phone home โ€”โ€”โ€” - -! https://fosspost.org/audacity-is-now-a-spyware/ - - ! โ€”โ€”โ€” Anti-'Malware comments' (Currently Disqus-specific) โ€”โ€”โ€” ! https://myip.ms/info/limitexcess @@ -12982,9 +13026,11 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu| + ! โ€”โ€”โ€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) โ€”โ€”โ€” ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^ + ! โ€”โ€”โ€” Anti-PUP (WIP) โ€”โ€”โ€” ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) ||webadvisorc.rest.gti.mcafee.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 25064f7cd..c8088d5ee 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from โ‰ฅ2019] ! Title: ๐Ÿ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 27November2021v3-Beta +! Version: 01December2021v3-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -13,13 +13,13 @@ ! Gabon ||ga^$document,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga ! Mali -||ml^$document,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml +||ml^$document,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml ! Equatorial Guinea ||gq^$document,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq ! Central African Republic ||cf^$document,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf ! Palau -||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw +||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^$document ||agency^$document @@ -112,7 +112,7 @@ bing.com##.b_algo:has(a[href*=".top/"]:not([href*="corriente.top"], [href*="gdto ||ssl.bblck.me^$document ||allblock.net^$document ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^$document -! Malicious domains found in videogame manuals and title screens +! Malicious or purchaseable domains found in videogame manuals and title screens ||acclaimsports.com^$document ||acclaimmaxsports.com^$document ||hip-games.com^$document @@ -555,7 +555,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||new-message.today^$document ||new-notification.live^$document ||new-notifications.live^$document -||notified-today.com^$document ||notified-today.live^$document ||notified-today.xyz^$document ||stay-notified.com^$document @@ -1020,13 +1019,12 @@ zombooru.com##a[href="http://www.hard55.com"] 212.192.241.72$network 37.0.10.83$network ||newstepsco.com^$empty,important -||duckdns.org^$document,domain=~www.duckdns.org +||duckdns.org^$document,domain=~www.duckdns.org|~checkip.dyndns.com @@://duckdns.org^$document ||chse-security-notifications.email^$empty,important ||secure-0*.ddnss.ch^$empty,important ||lucdream.com^$document ||beastbuying.com^$document -||kokotrokot.com^$document ||07ca17vejqqej990.inteo.xyz^$document ||pesoaniz.com^$document ||plarium.com^$document @@ -1042,7 +1040,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||pro-protection.xyz^$empty,important ||secureleadsforever.com^$empty,important ||renewal-software-update.com^$empty,important -||pushmeup.art^$document +||pushmeup.art^$empty,important ||covercenter.xyz^$empty,important ||gettrk.xyz^$empty,important ||trc.*.co^$document @@ -1235,7 +1233,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||safelyonline.net^$document ||browse-safe.net^$document ||btpnative.com^$document -||mybetterdl.com^$document +||mybetterdl.com^$empty,important ||besty-deals.com^$empty,important ||data-px.services^$document ||newsvot.com^$document @@ -1262,7 +1260,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||army-glo.scrollingsystem.com^$document ||www.kqzyfj.com^$empty,important ||kqzyfj.com^$document -||cj.dotomi.com^$empty,important ||mcafee12.tt.omtrdc.net^$document ||trolleydrop.info^$document ||jaynordan.digital^$document @@ -1432,14 +1429,10 @@ zombooru.com##a[href="http://www.hard55.com"] 159.148.186.228$network ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains ||yotube.com^$empty,important -||mybetterdl.com^$empty,important -||p185689.mybetterdl.com^$empty,important ||r-tb.com^$empty,important ||cdn.hoood.info^$empty,important -||data-px.services^$empty,important ||barah-flo.com^$empty,important ||beta-one.net^$empty,important -||beastbuying.com^$empty,important ||pisism.com^$empty,important ||czyzd.xyz^$empty,important ||r1it6.xyz^$empty,important @@ -1449,7 +1442,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||m6ydd.xyz^$empty,important ||welcomejohncena.pro^$empty,important ||security-scanner.xyz^$empty,important -||pushmeup.art^$empty,important ||c2egp.xyz^$empty,important ||ese40.xyz^$empty,important ||e07wm.xyz^$empty,important @@ -1641,6 +1633,46 @@ zombooru.com##a[href="http://www.hard55.com"] 115.204.119.237$network 163.125.31.46$network 163.179.168.44$network +! https://github.com/uBlockOrigin/uAssets/pull/10647 +! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md +||updsec.builtfromzero.com^$empty,important +||money-mod.com^$document +||gospelchor.info^$document + +||new.bestlifeoffer20.com^$document +||reykijnoac.com^$document +||totalnicefeed.com^$empty,important +! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md +||riteupd.mimanduca.co^$empty,important +||oaesso.info^$document + +||bestlifeoffer20.com^$document +! https://scammer.info/t/password-stealer/84348 +! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/ +||youtube.com/watch?v=8nY7SnvNxH4^$empty,important +||bit.ly/3p8kN5V^$document +||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$empty,important +||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$empty,important +! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +110.89.59.135$network +113.116.89.1$network +119.183.146.191$network +153.3.3.226$network +182.116.104.6$network +60.7.133.200$network +122.6.254.201$network +110.89.11.167$network +171.112.177.90$network +115.194.38.143$network +61.52.79.32$network +! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 +||ups-dk.u1537460.cp.regruhosting.ru^$empty,important +! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 +||lowseelan.com^$empty,important +! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community +||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^$empty,important +! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community +||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$empty,important ! โ€”โ€”โ€” Standard malware that I stumbled upon on my own โ€”โ€”โ€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6563,10 +6595,10 @@ toorgle.net##.join ||discord-spooky.ru^$empty,important ||discord.foundation^$empty,important ||discordgift.ru^$empty,important -||discordnitro-steam.ru^$empty,important +||discordnitro-steam.$empty,important ||discordnitro.space^$empty,important -||discordxgift.xyz^$empty,important -||discordxnitro.xyz^$empty,important +||discordxgift.$empty,important +||discordxnitro.$empty,important ||discorgift.online^$empty,important ||discrocl.xyz^$empty,important ||discrod.gifts^$empty,important @@ -6595,7 +6627,7 @@ toorgle.net##.join ||free-dislcordnitrlos.ru^$empty,important ||free-niltross.ru^$empty,important ||free-nitlross.ru^$empty,important -||freediscordnitro.ru^$empty,important +||freediscordnitro.$empty,important ||freeskinsfree.pp.ua^$empty,important ||from-plames.xyz^$empty,important ||from-sparsei.ru.com^$empty,important @@ -6881,12 +6913,12 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||githubnt.com^ ! โ€”โ€”โ€” Usually used by various groups who buy old domains and display illicit ads on them โ€”โ€”โ€” -://ww4.$document -://ww5.$document,domain=~ww5.msu.ac.zw +://ww4.$document,domain=~ww4.ikea.com +://ww5.$document,domain=~ww5.ikea.com|~ww5.msu.ac.zw ://ww6.$document,domain=~ww6.generali.pt ://ww7.$document,domain=~ww7.be|~ww7.readsnk.com ://ww8.$document,domain=~ww8.co|~ww8.ikea.com|~ww8.tiki.ne.jp|~ww8.erovoice.us|~ww8.anyanime.com|~ww8.bakushpal.az|~ww8.tokyoghoulre.com -://ww9.$document,domain=~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br +://ww9.$document,domain=~ww9.ikea.com|~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br ://ww10.$document ://ww11.$document ://ww12.$document @@ -6945,12 +6977,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne) ! โ€”โ€”โ€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically โ€”โ€”โ€” $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net -! โ€”โ€”โ€” Offline-only apps trying to phone home โ€”โ€”โ€” -!#if adguard -! https://fosspost.org/audacity-is-now-a-spyware/ -*$app=audacity.exe|audacity.app -!#endif - ! โ€”โ€”โ€” Anti-'Malware comments' (Currently Disqus-specific) โ€”โ€”โ€” ! https://myip.ms/info/limitexcess *#?#.post-list > .post-content:has-text(/Best girls webcam/i) @@ -6959,8 +6985,10 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu| *#?#script[src*=disquscdn] + #layout .post-content:has-text(We offer unlimited) *#?#script[src*=disquscdn] + #layout .post-content:has-text(.com specialize) +!#if !ext_ublock ! โ€”โ€”โ€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) โ€”โ€”โ€” ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$document +!#endif ! โ€”โ€”โ€” Anti-PUP (WIP) โ€”โ€”โ€” ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 1cc78cb57..31307d6e8 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: ๐Ÿ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 27November2021v3-Beta +! Version: 01December2021v3-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -13,13 +13,13 @@ ! Gabon ||ga^$denyallow=google.ga|filtri-dns.ga|dgdi.ga|voitures.ga|economie-gabon.ga ! Mali -||ml^$denyallow=google.ml|mobili.ml|melody.ml|dcod.ml|info-matin.ml|amap.ml|mastodon.ml|worproject.ml|nothingprivate.ml|lingva.ml|lemmy.ml +||ml^$denyallow=google.ml|mobili.ml|melody.ml|dcod.ml|info-matin.ml|amap.ml|mastodon.ml|worproject.ml|nothingprivate.ml|lingva.ml|lemmy.ml|bittor.ml|noic.ml ! Equatorial Guinea ||gq^$denyallow=deimos.gq|inege.gq|tvgelive.gq|comprarcarros.gq ! Central African Republic ||cf^$denyallow=google.cf|rths.cf|voitures.cf|assembleenationale-rca.cf|cps-rca.cf|acap.cf|miraculousladybug.cf|scrat.cf ! Palau -||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|zikrap.pw +||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|zikrap.pw|demonoid.pw ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^ ||agency^ @@ -63,7 +63,7 @@ ||ssl.bblck.me^ ||allblock.net^ -! Malicious domains found in videogame manuals and title screens +! Malicious or purchaseable domains found in videogame manuals and title screens ||acclaimsports.com^ ||acclaimmaxsports.com^ ||hip-games.com^ @@ -381,7 +381,6 @@ ||new-message.today^ ||new-notification.live^ ||new-notifications.live^ -||notified-today.com^ ||notified-today.live^ ||notified-today.xyz^ ||stay-notified.com^ @@ -846,13 +845,12 @@ 212.192.241.72 37.0.10.83 ||newstepsco.com^ -||duckdns.org^$denyallow=www.duckdns.org +||duckdns.org^$denyallow=www.duckdns.org|checkip.dyndns.com @@://duckdns.org^ ||chse-security-notifications.email^ ||secure-0*.ddnss.ch^ ||lucdream.com^ ||beastbuying.com^ -||kokotrokot.com^ ||07ca17vejqqej990.inteo.xyz^ ||pesoaniz.com^ ||plarium.com^ @@ -1088,7 +1086,6 @@ ||army-glo.scrollingsystem.com^ ||www.kqzyfj.com^ ||kqzyfj.com^ -||cj.dotomi.com^ ||mcafee12.tt.omtrdc.net^ ||trolleydrop.info^ ||jaynordan.digital^ @@ -1258,14 +1255,10 @@ 159.148.186.228 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains ||yotube.com^ -||mybetterdl.com^ -||p185689.mybetterdl.com^ ||r-tb.com^ ||cdn.hoood.info^ -||data-px.services^ ||barah-flo.com^ ||beta-one.net^ -||beastbuying.com^ ||pisism.com^ ||czyzd.xyz^ ||r1it6.xyz^ @@ -1275,7 +1268,6 @@ ||m6ydd.xyz^ ||welcomejohncena.pro^ ||security-scanner.xyz^ -||pushmeup.art^ ||c2egp.xyz^ ||ese40.xyz^ ||e07wm.xyz^ @@ -1467,6 +1459,46 @@ 115.204.119.237 163.125.31.46 163.179.168.44 +! https://github.com/uBlockOrigin/uAssets/pull/10647 +! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md +||updsec.builtfromzero.com^ +||money-mod.com^$document +||gospelchor.info^$document + +||new.bestlifeoffer20.com^$document +||reykijnoac.com^$document +||totalnicefeed.com^ +! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md +||riteupd.mimanduca.co^ +||oaesso.info^$document + +||bestlifeoffer20.com^$document +! https://scammer.info/t/password-stealer/84348 +! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/ + + + + +! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +110.89.59.135 +113.116.89.1 +119.183.146.191 +153.3.3.226 +182.116.104.6 +60.7.133.200 +122.6.254.201 +110.89.11.167 +171.112.177.90 +115.194.38.143 +61.52.79.32 +! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 +||ups-dk.u1537460.cp.regruhosting.ru^ +! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 +||lowseelan.com^ +! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community + +! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community + ! โ€”โ€”โ€” Standard malware that I stumbled upon on my own โ€”โ€”โ€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6387,10 +6419,10 @@ ||discord-spooky.ru^ ||discord.foundation^ ||discordgift.ru^ -||discordnitro-steam.ru^ +||discordnitro-steam. ||discordnitro.space^ -||discordxgift.xyz^ -||discordxnitro.xyz^ +||discordxgift. +||discordxnitro. ||discorgift.online^ ||discrocl.xyz^ ||discrod.gifts^ @@ -6419,7 +6451,7 @@ ||free-dislcordnitrlos.ru^ ||free-niltross.ru^ ||free-nitlross.ru^ -||freediscordnitro.ru^ +||freediscordnitro. ||freeskinsfree.pp.ua^ ||from-plames.xyz^ ||from-sparsei.ru.com^ @@ -6701,12 +6733,12 @@ ||githubnt.com^ ! โ€”โ€”โ€” Usually used by various groups who buy old domains and display illicit ads on them โ€”โ€”โ€” -://ww4. -://ww5.$denyallow=ww5.msu.ac.zw +://ww4.$denyallow=ww4.ikea.com +://ww5.$denyallow=ww5.ikea.com|ww5.msu.ac.zw ://ww6.$denyallow=ww6.generali.pt ://ww7.$denyallow=ww7.be|ww7.readsnk.com ://ww8.$denyallow=ww8.co|ww8.ikea.com|ww8.tiki.ne.jp|ww8.erovoice.us|ww8.anyanime.com|ww8.bakushpal.az|ww8.tokyoghoulre.com -://ww9.$denyallow=ww9.tiki.ne.jp|ww9.sakura.ne.jp|ww9.generali.pt|ww9.itau.com.br +://ww9.$denyallow=ww9.ikea.com|ww9.tiki.ne.jp|ww9.sakura.ne.jp|ww9.generali.pt|ww9.itau.com.br ://ww10. ://ww11. ://ww12. @@ -6759,18 +6791,15 @@ ! โ€”โ€”โ€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically โ€”โ€”โ€” -! โ€”โ€”โ€” Offline-only apps trying to phone home โ€”โ€”โ€” - -! https://fosspost.org/audacity-is-now-a-spyware/ - - ! โ€”โ€”โ€” Anti-'Malware comments' (Currently Disqus-specific) โ€”โ€”โ€” ! https://myip.ms/info/limitexcess ! https://myip.ms/info/memberarea/My_Account.html + ! โ€”โ€”โ€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) โ€”โ€”โ€” ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^ + ! โ€”โ€”โ€” Anti-PUP (WIP) โ€”โ€”โ€” ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) ||webadvisorc.rest.gti.mcafee.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index bd5102534..68bc30c05 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: ๐Ÿ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 27November2021v3-Beta +# Version: 01December2021v3-Beta # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -59,7 +59,7 @@ juvander.net ssl.bblck.me allblock.net -# Malicious domains found in videogame manuals and title screens +# Malicious or purchaseable domains found in videogame manuals and title screens acclaimsports.com acclaimmaxsports.com hip-games.com @@ -339,7 +339,6 @@ new-message.email new-message.today new-notification.live new-notifications.live -notified-today.com notified-today.live notified-today.xyz stay-notified.com @@ -770,7 +769,6 @@ newstepsco.com chse-security-notifications.email lucdream.com beastbuying.com -kokotrokot.com 07ca17vejqqej990.inteo.xyz pesoaniz.com plarium.com @@ -951,7 +949,6 @@ aquariuminn.com army-glo.scrollingsystem.com www.kqzyfj.com kqzyfj.com -cj.dotomi.com mcafee12.tt.omtrdc.net trolleydrop.info jaynordan.digital @@ -1088,14 +1085,10 @@ cloud-apps.store citationsherbe.at 159.148.186.228 yotube.com -mybetterdl.com -p185689.mybetterdl.com r-tb.com cdn.hoood.info -data-px.services barah-flo.com beta-one.net -beastbuying.com pisism.com czyzd.xyz r1it6.xyz @@ -1105,7 +1098,6 @@ nkb18.xyz m6ydd.xyz welcomejohncena.pro security-scanner.xyz -pushmeup.art c2egp.xyz ese40.xyz e07wm.xyz @@ -1266,6 +1258,36 @@ shadyclient.net 115.204.119.237 163.125.31.46 163.179.168.44 +updsec.builtfromzero.com +money-mod.com +gospelchor.info +smwgwa.brownbrothersilver.top +new.bestlifeoffer20.com +reykijnoac.com +totalnicefeed.com +riteupd.mimanduca.co +oaesso.info +abcwkv.naturaloffsteam.top +bestlifeoffer20.com + + + + +110.89.59.135 +113.116.89.1 +119.183.146.191 +153.3.3.226 +182.116.104.6 +60.7.133.200 +122.6.254.201 +110.89.11.167 +171.112.177.90 +115.194.38.143 +61.52.79.32 +ups-dk.u1537460.cp.regruhosting.ru +lowseelan.com + + # โ€”โ€”โ€” Standard malware that I stumbled upon on my own โ€”โ€”โ€” downloadprovider.me @@ -6176,10 +6198,10 @@ discord-app.net discord-spooky.ru discord.foundation discordgift.ru -discordnitro-steam.ru + discordnitro.space -discordxgift.xyz -discordxnitro.xyz + + discorgift.online discrocl.xyz discrod.gifts @@ -6207,7 +6229,7 @@ fozzytournaments.fun free-dislcordnitrlos.ru free-niltross.ru free-nitlross.ru -freediscordnitro.ru + freeskinsfree.pp.ua from-plames.xyz from-sparsei.ru.com @@ -6544,15 +6566,13 @@ githubnt.com # โ€”โ€”โ€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically โ€”โ€”โ€” -# โ€”โ€”โ€” Offline-only apps trying to phone home โ€”โ€”โ€” - - - # โ€”โ€”โ€” Anti-'Malware comments' (Currently Disqus-specific) โ€”โ€”โ€” + # โ€”โ€”โ€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) โ€”โ€”โ€” if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data + # โ€”โ€”โ€” Anti-PUP (WIP) โ€”โ€”โ€” # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) webadvisorc.rest.gti.mcafee.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 08f370068..e85a2e590 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: ๐Ÿ’Š Dandelion Sprout's Anti-Malware List (ยซhostsยป file version) -# Version: 27November2021v3-Alpha +# Version: 01December2021v3-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -59,7 +59,7 @@ 127.0.0.1 ssl.bblck.me 127.0.0.1 allblock.net -# Malicious domains found in videogame manuals and title screens +# Malicious or purchaseable domains found in videogame manuals and title screens 127.0.0.1 acclaimsports.com 127.0.0.1 acclaimmaxsports.com 127.0.0.1 hip-games.com @@ -339,7 +339,6 @@ 127.0.0.1 new-message.today 127.0.0.1 new-notification.live 127.0.0.1 new-notifications.live -127.0.0.1 notified-today.com 127.0.0.1 notified-today.live 127.0.0.1 notified-today.xyz 127.0.0.1 stay-notified.com @@ -770,7 +769,6 @@ 127.0.0.1 chse-security-notifications.email 127.0.0.1 lucdream.com 127.0.0.1 beastbuying.com -127.0.0.1 kokotrokot.com 127.0.0.1 07ca17vejqqej990.inteo.xyz 127.0.0.1 pesoaniz.com 127.0.0.1 plarium.com @@ -951,7 +949,6 @@ 127.0.0.1 army-glo.scrollingsystem.com 127.0.0.1 www.kqzyfj.com 127.0.0.1 kqzyfj.com -127.0.0.1 cj.dotomi.com 127.0.0.1 mcafee12.tt.omtrdc.net 127.0.0.1 trolleydrop.info 127.0.0.1 jaynordan.digital @@ -1088,14 +1085,10 @@ 127.0.0.1 citationsherbe.at 127.0.0.1 159.148.186.228 127.0.0.1 yotube.com -127.0.0.1 mybetterdl.com -127.0.0.1 p185689.mybetterdl.com 127.0.0.1 r-tb.com 127.0.0.1 cdn.hoood.info -127.0.0.1 data-px.services 127.0.0.1 barah-flo.com 127.0.0.1 beta-one.net -127.0.0.1 beastbuying.com 127.0.0.1 pisism.com 127.0.0.1 czyzd.xyz 127.0.0.1 r1it6.xyz @@ -1105,7 +1098,6 @@ 127.0.0.1 m6ydd.xyz 127.0.0.1 welcomejohncena.pro 127.0.0.1 security-scanner.xyz -127.0.0.1 pushmeup.art 127.0.0.1 c2egp.xyz 127.0.0.1 ese40.xyz 127.0.0.1 e07wm.xyz @@ -1266,6 +1258,36 @@ 127.0.0.1 115.204.119.237 127.0.0.1 163.125.31.46 127.0.0.1 163.179.168.44 +127.0.0.1 updsec.builtfromzero.com +127.0.0.1 money-mod.com +127.0.0.1 gospelchor.info +127.0.0.1 smwgwa.brownbrothersilver.top +127.0.0.1 new.bestlifeoffer20.com +127.0.0.1 reykijnoac.com +127.0.0.1 totalnicefeed.com +127.0.0.1 riteupd.mimanduca.co +127.0.0.1 oaesso.info +127.0.0.1 abcwkv.naturaloffsteam.top +127.0.0.1 bestlifeoffer20.com + + + + +127.0.0.1 110.89.59.135 +127.0.0.1 113.116.89.1 +127.0.0.1 119.183.146.191 +127.0.0.1 153.3.3.226 +127.0.0.1 182.116.104.6 +127.0.0.1 60.7.133.200 +127.0.0.1 122.6.254.201 +127.0.0.1 110.89.11.167 +127.0.0.1 171.112.177.90 +127.0.0.1 115.194.38.143 +127.0.0.1 61.52.79.32 +127.0.0.1 ups-dk.u1537460.cp.regruhosting.ru +127.0.0.1 lowseelan.com + + # โ€”โ€”โ€” Standard malware that I stumbled upon on my own โ€”โ€”โ€” 127.0.0.1 downloadprovider.me @@ -6176,10 +6198,10 @@ 127.0.0.1 discord-spooky.ru 127.0.0.1 discord.foundation 127.0.0.1 discordgift.ru -127.0.0.1 discordnitro-steam.ru + 127.0.0.1 discordnitro.space -127.0.0.1 discordxgift.xyz -127.0.0.1 discordxnitro.xyz + + 127.0.0.1 discorgift.online 127.0.0.1 discrocl.xyz 127.0.0.1 discrod.gifts @@ -6207,7 +6229,7 @@ 127.0.0.1 free-dislcordnitrlos.ru 127.0.0.1 free-niltross.ru 127.0.0.1 free-nitlross.ru -127.0.0.1 freediscordnitro.ru + 127.0.0.1 freeskinsfree.pp.ua 127.0.0.1 from-plames.xyz 127.0.0.1 from-sparsei.ru.com @@ -6544,15 +6566,13 @@ # โ€”โ€”โ€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically โ€”โ€”โ€” -# โ€”โ€”โ€” Offline-only apps trying to phone home โ€”โ€”โ€” - - - # โ€”โ€”โ€” Anti-'Malware comments' (Currently Disqus-specific) โ€”โ€”โ€” + # โ€”โ€”โ€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) โ€”โ€”โ€” 127.0.0.1 if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data + # โ€”โ€”โ€” Anti-PUP (WIP) โ€”โ€”โ€” # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) 127.0.0.1 webadvisorc.rest.gti.mcafee.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 19d166d1f..0582191ba 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: ๐Ÿ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 27November2021v3-Alpha +# Version: 01December2021v3-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -67,7 +67,7 @@ -# Malicious domains found in videogame manuals and title screens +# Malicious or purchaseable domains found in videogame manuals and title screens @@ -373,7 +373,6 @@ - /bitcoinrevolution/lp.php @@ -877,7 +876,6 @@ - # Relations to the original domain @@ -1038,7 +1036,6 @@ - # Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin @@ -1123,11 +1120,6 @@ - - - - - @@ -1265,6 +1257,36 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + @@ -6531,18 +6553,14 @@ # โ€”โ€”โ€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically โ€”โ€”โ€” -{+block} -# โ€”โ€”โ€” Offline-only apps trying to phone home โ€”โ€”โ€” -# -# -# - {+block} # โ€”โ€”โ€” Anti-'Malware comments' (Currently Disqus-specific) โ€”โ€”โ€” +# {+block} # โ€”โ€”โ€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) โ€”โ€”โ€” +# {+block} # โ€”โ€”โ€” Anti-PUP (WIP) โ€”โ€”โ€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 2c655682f..03c96c818 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: ๐Ÿ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 27November2021v3-Beta +# Version: 01December2021v3-Beta : expires = 5 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -47,7 +47,9 @@ msFilterList +d mastodon.ml +d worproject.ml +d nothingprivate.ml -+d lingva.ml~lemmy.ml ++d lingva.ml ++d lemmy.ml ++d bittor.ml~noic.ml # Equatorial Guinea -d gq +d deimos.gq @@ -67,7 +69,8 @@ msFilterList +d libgen.pw +d petridish.pw +d palaugov.pw -+d dpc.pw~zikrap.pw ++d dpc.pw ++d zikrap.pw~demonoid.pw # International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. @@ -112,7 +115,7 @@ msFilterList -d ssl.bblck.me -d allblock.net -d microsoftedge.microsoft.com addons detail allblock nkllnmjaaifdphkfbmedklkimjmnjeen -# Malicious domains found in videogame manuals and title screens +# Malicious or purchaseable domains found in videogame manuals and title screens -d acclaimsports.com -d acclaimmaxsports.com -d hip-games.com @@ -430,7 +433,6 @@ msFilterList -d new-message.today -d new-notification.live -d new-notifications.live --d notified-today.com -d notified-today.live -d notified-today.xyz -d stay-notified.com @@ -899,7 +901,6 @@ msFilterList -d lucdream.com -d beastbuying.com --d kokotrokot.com -d 07ca17vejqqej990.inteo.xyz -d pesoaniz.com -d plarium.com @@ -1135,7 +1136,6 @@ msFilterList -d army-glo.scrollingsystem.com -d www.kqzyfj.com -d kqzyfj.com --d cj.dotomi.com -d mcafee12.tt.omtrdc.net -d trolleydrop.info -d jaynordan.digital @@ -1303,14 +1303,10 @@ msFilterList -d 159.148.186.228 # https://github.com/iam-py-test/investigations/blob/main/2021/10 26 1.md#domains -d yotube.com --d mybetterdl.com --d p185689.mybetterdl.com -d r-tb.com -d cdn.hoood.info --d data-px.services -d barah-flo.com -d beta-one.net --d beastbuying.com -d pisism.com -d czyzd.xyz -d r1it6.xyz @@ -1320,7 +1316,6 @@ msFilterList -d m6ydd.xyz -d welcomejohncena.pro -d security-scanner.xyz --d pushmeup.art -d c2egp.xyz -d ese40.xyz -d e07wm.xyz @@ -1512,6 +1507,46 @@ msFilterList -d 115.204.119.237 -d 163.125.31.46 -d 163.179.168.44 +# https://github.com/uBlockOrigin/uAssets/pull/10647 +# https://github.com/iam-py-test/investigations/blob/main/2021/11 28 1.md +-d updsec.builtfromzero.com +-d money-mod.com +-d gospelchor.info +-d smwgwa.brownbrothersilver.top +-d new.bestlifeoffer20.com +-d reykijnoac.com +-d totalnicefeed.com +# https://github.com/iam-py-test/investigations/blob/main/2021/11 28 2.md +-d riteupd.mimanduca.co +-d oaesso.info +-d abcwkv.naturaloffsteam.top +-d bestlifeoffer20.com +# https://scammer.info/t/password-stealer/84348 +# https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/ +-d youtube.com watch?v=8nY7SnvNxH4 +-d bit.ly 3p8kN5V +-d mediafire.com file at2tvnao5x6ivdo EngineOwning.rar +-d download2264.mediafire.com pnk44f5ci9rg at2tvnao5x6ivdo EngineOwning.rar +# https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +-d 110.89.59.135 +-d 113.116.89.1 +-d 119.183.146.191 +-d 153.3.3.226 +-d 182.116.104.6 +-d 60.7.133.200 +-d 122.6.254.201 +-d 110.89.11.167 +-d 171.112.177.90 +-d 115.194.38.143 +-d 61.52.79.32 +# https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 +-d ups-dk.u1537460.cp.regruhosting.ru +# https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 +-d lowseelan.com +# https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community +-d dl02.s3.amazonaws.com installers 747947 oi_picasa38-setupexe.exe +# https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community +-d dl02.s3.amazonaws.com installers 424531 2gzbsoj4gxb.exe # โ€”โ€”โ€” Standard malware that I stumbled upon on my own โ€”โ€”โ€” # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -6431,10 +6466,10 @@ msFilterList -d discord-spooky.ru -d discord.foundation -d discordgift.ru --d discordnitro-steam.ru +-d discordnitro-steam. -d discordnitro.space --d discordxgift.xyz --d discordxnitro.xyz +-d discordxgift. +-d discordxnitro. -d discorgift.online -d discrocl.xyz -d discrod.gifts @@ -6463,7 +6498,7 @@ msFilterList -d free-dislcordnitrlos.ru -d free-niltross.ru -d free-nitlross.ru --d freediscordnitro.ru +-d freediscordnitro. -d freeskinsfree.pp.ua -d from-plames.xyz -d from-sparsei.ru.com @@ -6757,19 +6792,15 @@ msFilterList # โ€”โ€”โ€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically โ€”โ€”โ€” -# โ€”โ€”โ€” Offline-only apps trying to phone home โ€”โ€”โ€” - -# https://fosspost.org/audacity-is-now-a-spyware/ - - - # โ€”โ€”โ€” Anti-'Malware comments' (Currently Disqus-specific) โ€”โ€”โ€” # https://myip.ms/info/limitexcess # https://myip.ms/info/memberarea/My_Account.html + # โ€”โ€”โ€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) โ€”โ€”โ€” -d if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data + # โ€”โ€”โ€” Anti-PUP (WIP) โ€”โ€”โ€” # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) -d webadvisorc.rest.gti.mcafee.com diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 337183cea..593f80762 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -1,5 +1,5 @@ # Title: Dandelion Sprout's and other adblocker lists' IPs -# Version: 25November2021v1-Beta +# Version: 01December2021v1-Beta # Expires: 5 days # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish. # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -184,6 +184,25 @@ 115.56.169.134 194.87.138.20 103.167.92.73 +58.249.74.79 +27.45.14.109 +27.40.101.191 +27.45.119.22 +27.47.73.159 +115.204.119.237 +163.125.31.46 +163.179.168.44 +110.89.59.135 +113.116.89.1 +119.183.146.191 +153.3.3.226 +182.116.104.6 +60.7.133.200 +122.6.254.201 +110.89.11.167 +171.112.177.90 +115.194.38.143 +61.52.79.32 192.243.59.12 192.243.59.13 192.243.59.20 diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index c36e52c8e..d5098cadd 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: ๐Ÿ’Š Dandelion Sprout's Anti-Malware List -! Version: 30November2021v3-Beta +! Version: 01December2021v4-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -13,13 +13,13 @@ ! Gabon ||ga^$doc,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga ! Mali -||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml +||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml ! Equatorial Guinea ||gq^$doc,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq ! Central African Republic ||cf^$doc,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf ! Palau -||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw +||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^$doc ||agency^$doc @@ -112,7 +112,7 @@ bing.com##.b_algo:has(a[href*=".top/"]:not([href*="corriente.top"], [href*="gdto ||ssl.bblck.me^$doc ||allblock.net^$doc ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^$doc -! Malicious domains found in videogame manuals and title screens +! Malicious or purchaseable domains found in videogame manuals and title screens ||acclaimsports.com^$doc ||acclaimmaxsports.com^$doc ||hip-games.com^$doc @@ -271,7 +271,6 @@ azdll.net##.dllhelper-banner /^https?:\/\/[-0-9a-z]*prize[-0-9a-z]+\.li[fv]e\/\?u=[0-9a-z]+&o=[0-9a-z]+/$popup,domain=www.google.* ! https://github.com/AdguardTeam/AdguardFilters/issues/58737 /^https?://(www\.)?[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/$doc,domain=fun -/^https://www\.namejp0[1-9]\.xyz/$doc,popup,domain=xyz ! https://github.com/AdguardTeam/AdguardFilters/issues/78614 /^https?:\/\/\d{6}\.xyz\/lucky\/[-a-z]+\/\?t=/$doc,popup,domain=xyz /^https?:\/\/[a-z]{6}\.vip\/lucky\/[-a-z]+\/\?t=/$doc,popup,domain=vip @@ -555,7 +554,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||new-message.today^$doc ||new-notification.live^$doc ||new-notifications.live^$doc -||notified-today.com^$doc ||notified-today.live^$doc ||notified-today.xyz^$doc ||stay-notified.com^$doc @@ -1020,13 +1018,12 @@ zombooru.com##a[href="http://www.hard55.com"] ||212.192.241.72^$all ||37.0.10.83^$all ||newstepsco.com^$all -||duckdns.org^$doc,domain=~www.duckdns.org +||duckdns.org^$doc,domain=~www.duckdns.org|~checkip.dyndns.com @@://duckdns.org^$doc ||chse-security-notifications.email^$all ||secure-0*.ddnss.ch^$all ||lucdream.com^$doc ||beastbuying.com^$doc -||kokotrokot.com^$doc ||07ca17vejqqej990.inteo.xyz^$doc ||pesoaniz.com^$doc ||plarium.com^$doc @@ -1042,7 +1039,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||pro-protection.xyz^$all ||secureleadsforever.com^$all ||renewal-software-update.com^$all -||pushmeup.art^$doc +||pushmeup.art^$all ||covercenter.xyz^$all ||gettrk.xyz^$all ||trc.*.co^$doc @@ -1235,7 +1232,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||safelyonline.net^$doc ||browse-safe.net^$doc ||btpnative.com^$doc -||mybetterdl.com^$doc +||mybetterdl.com^$all ||besty-deals.com^$all ||data-px.services^$doc ||newsvot.com^$doc @@ -1262,7 +1259,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||army-glo.scrollingsystem.com^$doc ||www.kqzyfj.com^$all ||kqzyfj.com^$doc -||cj.dotomi.com^$all ||mcafee12.tt.omtrdc.net^$doc ||trolleydrop.info^$doc ||jaynordan.digital^$doc @@ -1432,14 +1428,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||159.148.186.228^$all ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains ||yotube.com^$all -||mybetterdl.com^$all -||p185689.mybetterdl.com^$all ||r-tb.com^$all ||cdn.hoood.info^$all -||data-px.services^$all ||barah-flo.com^$all ||beta-one.net^$all -||beastbuying.com^$all ||pisism.com^$all ||czyzd.xyz^$all ||r1it6.xyz^$all @@ -1449,7 +1441,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||m6ydd.xyz^$all ||welcomejohncena.pro^$all ||security-scanner.xyz^$all -||pushmeup.art^$all ||c2egp.xyz^$all ||ese40.xyz^$all ||e07wm.xyz^$all @@ -1650,7 +1641,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||new.bestlifeoffer20.com^$document ||reykijnoac.com^$document ||totalnicefeed.com^$all -||omnatuor.com^$all ! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md ||riteupd.mimanduca.co^$all ||oaesso.info^$document @@ -6622,10 +6612,10 @@ toorgle.net##.join ||discord-spooky.ru^$all ||discord.foundation^$all ||discordgift.ru^$all -||discordnitro-steam.ru^$all +||discordnitro-steam.$all ||discordnitro.space^$all -||discordxgift.xyz^$all -||discordxnitro.xyz^$all +||discordxgift.$all +||discordxnitro.$all ||discorgift.online^$all ||discrocl.xyz^$all ||discrod.gifts^$all @@ -6654,7 +6644,7 @@ toorgle.net##.join ||free-dislcordnitrlos.ru^$all ||free-niltross.ru^$all ||free-nitlross.ru^$all -||freediscordnitro.ru^$all +||freediscordnitro.$all ||freeskinsfree.pp.ua^$all ||from-plames.xyz^$all ||from-sparsei.ru.com^$all @@ -7004,12 +6994,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne) ! โ€”โ€”โ€” Upgrades HTTP requests to HTTPS on sites that don't do it automatically โ€”โ€”โ€” $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net -! โ€”โ€”โ€” Offline-only apps trying to phone home โ€”โ€”โ€” -!#if adguard -! https://fosspost.org/audacity-is-now-a-spyware/ -*$app=audacity.exe|audacity.app -!#endif - ! โ€”โ€”โ€” Anti-'Malware comments' (Currently Disqus-specific) โ€”โ€”โ€” ! https://myip.ms/info/limitexcess *#?#.post-list > .post-content:has-text(/Best girls webcam/i) @@ -7018,8 +7002,10 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu| *#?#script[src*=disquscdn] + #layout .post-content:has-text(We offer unlimited) *#?#script[src*=disquscdn] + #layout .post-content:has-text(.com specialize) +!#if !ext_ublock ! โ€”โ€”โ€” Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) โ€”โ€”โ€” ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$doc +!#endif ! โ€”โ€”โ€” Anti-PUP (WIP) โ€”โ€”โ€” ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) diff --git a/LegitimateURLShortener.txt b/LegitimateURLShortener.txt index d7cddba74..ec5e5c6d3 100644 --- a/LegitimateURLShortener.txt +++ b/LegitimateURLShortener.txt @@ -1,5 +1,5 @@ ! Title: โž— Actually Legitimate URL Shortener Tool -! Version: 29November2021v2-Beta +! Version: 1December2021v1-Beta ! Expires: 2 days ! Description: In a world dominated by bit.ly, adf.ly, and several thousand other malware cover-up tools, this list reduces the length of URLs in a much more legitimate and transparent manner. Essentially, it automatically removes unnecessary $/& values from the URLs, making them easier to copy from the URL bar and pasting elsewhere as links. Enjoy. ! Homepage: https://github.com/DandelionSprout/adfilt/discussions/163 @@ -1187,7 +1187,7 @@ $removeparam=tid,domain=comixology.*|gap.com|gapcanada.ca|mintmobile.com|zulily. ! https://twitter.com/hashtag/mlpg5?src=hashtag_click (23/04/2021) $removeparam=src,domain=thunderbird.net|twitter.com|udemy.com|elastix.org|bluejeans.com|melopero.com|kubii.*|reichelt.*|okdo.com|raspipc.es|tiendatec.es|thepihut.com|cytron.io|buyzero.de|welectron.com|digikey.*|adafruit.com|hinta.fi|3cx.com|ashford.com|bose.*|kennethcole.com|kipling-usa.com|newbalance.com|wondershare.*|investors.com|yahoo.com|engadget.com|mozilla.org|viking-direct.co.uk ! No particular example -$removeparam=source,domain=googleusercontent.com|awd-it.*|ashford.com|asos.com|att.com|barenecessities.com|bedbathandbeyond.com|betterprogramming.pub|boscovs.com|boxboat.com|brownells.*|burkesoutlet.com|choicehotels.com|contabo.com|directv.com|drinkhint.com|edx.org|hammacher.com|hanes.com|hottopic.com|housing.com|hp.com|itnext.io|medium.com|nautica.com|onehanesplace.com|petsupplies.com|phonesoap.com|riteaid.com|sonos.com|squarespace.com|thedailybeast.com|tiktok.com|tommybahama.com|torrid.com|tous.com|webhint.io|wilsonsleather.com|wired.com|ylighting.com|jacquielawson.com|fool.com|fiverr.com|blavity.com|eonline.com|tokopedia.com|community.spiceworks.com|despegar.*|hotspotshield.com|gethotspotshield.com|subscribe.gq.com|bankofamerica.com +$removeparam=source,domain=googleusercontent.com|awd-it.*|ashford.com|asos.com|att.com|barenecessities.com|bedbathandbeyond.com|betterprogramming.pub|boscovs.com|boxboat.com|brownells.*|burkesoutlet.com|choicehotels.com|contabo.com|directv.com|drinkhint.com|edx.org|hammacher.com|hanes.com|hottopic.com|housing.com|hp.com|itnext.io|medium.com|nautica.com|onehanesplace.com|petsupplies.com|phonesoap.com|riteaid.com|sonos.com|squarespace.com|thedailybeast.com|tiktok.com|tommybahama.com|torrid.com|tous.com|webhint.io|wilsonsleather.com|wired.com|ylighting.com|jacquielawson.com|fool.com|fiverr.com|blavity.com|eonline.com|tokopedia.com|community.spiceworks.com|despegar.*|hotspotshield.com|gethotspotshield.com|subscribe.gq.com|bankofamerica.com|outnorth.fi ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-525100 ! https://github.com/DandelionSprout/adfilt/pull/277 $removeparam=mod,domain=wsj.com|marketwatch.com|barrons.com|fnlondon.com|dowjones.com|mansionglobal.com|penews.com @@ -1734,12 +1734,15 @@ $removeparam=nettype $removeparam=report_recomm_player ! https://github.com/DandelionSprout/adfilt/pull/386 ||mail.qq.com/cgi-bin/frame_html?$removeparam=r +! https://github.com/DandelionSprout/adfilt/pull/394 +! https://m.v.qq.com/x/m/play?cid=mzc00200prv7r23&vid=&ptag=cn.bing.com%23v.index.adaptor%232 +||qq.com^$removeparam=ptag !! โ€”โ€”โ€” Miscellaneous โ€”โ€”โ€” ! No particular examples $removeparam=app,domain=tiktok.com|music.apple.* $removeparam=c,domain=tiktok.com|norton.com|farfetch.com|hepsiburada.com|appsflyer.com|onelink.me|play.google.com -$removeparam=campaign,domain=blue-tomato.com|sitepoint.com|sportler.com|peterhahn.* +$removeparam=campaign,domain=blue-tomato.com|sitepoint.com|sportler.com|peterhahn.*|outnorth.fi $removeparam=/^pf_rd_/,domain=shopbop.com|amazon.*|imdb.com $removeparam=Source,domain=facebook.com|facebookcorewwwi.onion|messenger.com|evga.com $removeparam=version,domain=mp.weixin.qq.com|us.norton.com @@ -1914,7 +1917,7 @@ $removeparam=tag,domain=amazon.*|argos.co.uk|tv2.no ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-750434 ||xbox.com^$removeparam=xr ||deepdiscount.com^$removeparam=bid -$removeparam=medium,domain=deepdiscount.com|eonline.com +$removeparam=medium,domain=deepdiscount.com|eonline.com|outnorth.fi ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-750307 $removeparam=rid,domain=giphy.com @@ -1944,7 +1947,6 @@ $removeparam=rid,domain=giphy.com ||microsoft.com^$removeparam=/^AAAA/ ||babbel.com^$removeparam=bsc ||babbel.com^$removeparam=btp -||microsoft.com^$removeparam=ru ||microsoft.com^$removeparam=destrt ! http://www.discshop.fi/?id=116426&ad=hintaseuranta&ad_src=hintaseuranta.fi&ad_content=Nintendo+Switch+Pro+Controller%2c+Nintendo+Switch+-peliohjain&ad_prodid=5179300 @@ -2614,6 +2616,10 @@ $removeparam=mv_pc,domain=fragrancenet.com ! https://www.walmart.com/ip/Old-El-Paso-Stand-N-Stuff-Bold-Nacho-Cheese-Flavored-Taco-Dinner-Kit-9-5-oz/38260506?athcpid=38260506&athpgid=AthenaItempage&athcgid=null&athznid=siext&athieid=v0&athstid=CS056&athguid=egnNrMG_5XOxTB0tFsuPZlPSj01v5EdpAUIb&athancid=null&athena=true ||walmart.$removeparam=/^ath/ +! https://www.outnorth.fi/timberland/women-s-premium-6-waterproof-boot?source=hintaopas.fi&medium=productlinks&campaign=varmfodrade+k%C3%A4ngor&term=Women%27s+Premium+6"+Waterproof+Boot#Black +$removeparam=term,domain=outnorth.fi +$removeparam=/^quot;/,domain=outnorth.fi + !#if !env_mobile ! โ€”โ€”โ€” Mobile โ€”โ€”โ€” ! ! โ€”โ€”โ€” Entries mostly dedicated to maximising image sizes (thus poorly suited for phones) โ€”โ€”โ€” diff --git a/NorwegianExperimentalList alternate versions/AntiAdblockEntries.txt b/NorwegianExperimentalList alternate versions/AntiAdblockEntries.txt index 86dc8b483..91c13e62c 100644 --- a/NorwegianExperimentalList alternate versions/AntiAdblockEntries.txt +++ b/NorwegianExperimentalList alternate versions/AntiAdblockEntries.txt @@ -35,6 +35,10 @@ intrafish.no##.preview-gradient lydogbilde.no,lydogbillede.dk##.lbplussinfo ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image information.dk###paywall:style(margin-top: 0px !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important) ! dagbladet.no,elbil24.no ##.CTA-body-faded ! digi.no, tu.no, medier24.no, porten.no @@ -49,7 +53,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before ! ๐Ÿ‡ณ๐Ÿ‡ด/๐Ÿ‡ฉ๐Ÿ‡ฐ: โ€”โ€”โ€” Anti-anti-reklameblokkering โ€”โ€”โ€” ! ๐Ÿ‡ฎ๐Ÿ‡ธ: โ€”โ€”โ€” And-and-auglรฝsingshindrun โ€”โ€”โ€” ! ๐Ÿ‡ฌ๐Ÿ‡ง: โ€”โ€”โ€” Anti-anti-adblocking โ€”โ€”โ€” -! Last updated: 10November2021v2-Extension +! Last updated: 01December2021v1-Extension dagensbyggeri.dk##+js(std, (), 2500) eurosport.*##+js(aeld, contextmenu) techstart.dk##+js(set, adblock, false) diff --git a/NorwegianExperimentalList alternate versions/DandelionSproutsNorskeFiltre.tpl b/NorwegianExperimentalList alternate versions/DandelionSproutsNorskeFiltre.tpl index 646722604..7755c87d1 100644 --- a/NorwegianExperimentalList alternate versions/DandelionSproutsNorskeFiltre.tpl +++ b/NorwegianExperimentalList alternate versions/DandelionSproutsNorskeFiltre.tpl @@ -952,7 +952,7 @@ msFilterList # ๐Ÿ‡ณ๐Ÿ‡ด ๐Ÿ‡ฉ๐Ÿ‡ฐ: โ€”โ€”โ€” Anti-anti-reklameblokkering โ€”โ€”โ€” # ๐Ÿ‡ฎ๐Ÿ‡ธ: โ€”โ€”โ€” And-and-auglรฝsingshindrun โ€”โ€”โ€” # ๐Ÿ‡ฌ๐Ÿ‡ง: โ€”โ€”โ€” Anti-anti-adblocking โ€”โ€”โ€” -# Last updated: 10November2021v2-Extension +# Last updated: 01December2021v1-Extension -d elderlyscissors.com # Also fixed in "uBlock Filters - Privacy", but is added to this list as well, because it serves to remove AAAB notices on various pages (especially when "uBlock Filters" is turned on). -d googletagmanager.com gtm.js diff --git a/NorwegianExperimentalList alternate versions/NordicFilters-uBOLegacy.txt b/NorwegianExperimentalList alternate versions/NordicFilters-uBOLegacy.txt index f4572b416..ed3dae93d 100644 --- a/NorwegianExperimentalList alternate versions/NordicFilters-uBOLegacy.txt +++ b/NorwegianExperimentalList alternate versions/NordicFilters-uBOLegacy.txt @@ -2418,6 +2418,10 @@ intrafish.no##.preview-gradient lydogbilde.no,lydogbillede.dk##.lbplussinfo ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image information.dk###paywall:style(margin-top: 0px !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important) ! dagbladet.no,elbil24.no ##.CTA-body-faded ! digi.no, tu.no, medier24.no, porten.no @@ -2432,7 +2436,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before ! ๐Ÿ‡ณ๐Ÿ‡ด/๐Ÿ‡ฉ๐Ÿ‡ฐ: โ€”โ€”โ€” Anti-anti-reklameblokkering โ€”โ€”โ€” ! ๐Ÿ‡ฎ๐Ÿ‡ธ: โ€”โ€”โ€” And-and-auglรฝsingshindrun โ€”โ€”โ€” ! ๐Ÿ‡ฌ๐Ÿ‡ง: โ€”โ€”โ€” Anti-anti-adblocking โ€”โ€”โ€” -! Last updated: 10November2021v2-Extension +! Last updated: 01December2021v1-Extension dagensbyggeri.dk##+js(std, (), 2500) eurosport.*##+js(aeld, contextmenu) techstart.dk##+js(set, adblock, false) diff --git a/NorwegianExperimentalList alternate versions/NordicFilters-uMatrixSupplement.txt b/NorwegianExperimentalList alternate versions/NordicFilters-uMatrixSupplement.txt index 109473bf9..9c1915c27 100644 --- a/NorwegianExperimentalList alternate versions/NordicFilters-uMatrixSupplement.txt +++ b/NorwegianExperimentalList alternate versions/NordicFilters-uMatrixSupplement.txt @@ -192,5 +192,5 @@ in-addr.arpa 193.148.70.153 * allow ! Takk til THEtomaso (https://github.com/THEtomaso) for de fleste av disse oppfรธringene. ! Tak til THEtomaso (https://github.com/THEtomaso) for de fleste af disse regler. ! Thanks to THEtomaso (https://github.com/THEtomaso) for most of these entries. -! Last updated: 10November2021v2-Extension +! Last updated: 01December2021v1-Extension ! Also fixed in "uBlock Filters - Privacy", but is added to this list as well, because it serves to remove AAAB notices on various pages (especially when "uBlock Filters" is turned on). diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersABP-Inclusion.txt b/NorwegianExperimentalList alternate versions/NordicFiltersABP-Inclusion.txt index 6b7ed842d..6f62ea1cd 100644 --- a/NorwegianExperimentalList alternate versions/NordicFiltersABP-Inclusion.txt +++ b/NorwegianExperimentalList alternate versions/NordicFiltersABP-Inclusion.txt @@ -4355,7 +4355,7 @@ whowhatwear.co.uk#@#a[href*="/click.linksynergy"] img ! Sprรฅknรถjtral test fรถr at kolla om ABP-brukarrapporter fรถr YouTube gรฅr ner til 0 med den hรคr uppfรถrning / Language-neutral test to see if ABP user reports for YouTube plunge down to 0 with this entry ||googlevideo.com/*&ctier= -! Version: 261120211 +! Version: 301120211 ! Title: Adblock List for Finland ! Description: Finnish adblock list ! Expires: 4 days @@ -4455,7 +4455,9 @@ _mainosnappi. ##[href^="https://tc.tradetracker.net/"] ##[href^="https://www.nettikasinot.org"] ##a[href*="/clickthrgh.asp?"] +##a[href="https://kasinoseta.com/"] ##a[href^="https://app.readpeak.com/ads"] +##a[href^="https://www.kumiukko.fi/ostos?tt="] ##div[class*=element--nativead] ##div[class*=newsFrontAd] ##div[class="ad container-right"] @@ -4770,6 +4772,7 @@ kotiliesi.fi##.article-continues kotiliesi.fi##.nativecarousel.widget kotiliesi.fi##.widget_google-ad-manager kotiliesi.fi##body.category .placeholder +kotiliesi.fi#?#article[class^="grid__item_"]:-abp-has(.template-item_nativead) kotimikro.fi##.campaign-teaser-show kotimikro.fi##b > [href^="https://tilaus.kotimikro.fi/brand/kotimikro/"] kotimikro.fi#?#div.themebox.widget:-abp-has(> div > div > div > div#cx_4217c66c223ecb55cb7b1d49afa884837bfccda9) @@ -4895,6 +4898,7 @@ mvlehti.net##[href="https://www.halvinlaina.fi/"] mvlehti.net##[href^="https://www.kasinot.org/"] mvlehti.net##a[href*="tarjousproffa.com"] mvlehti.net##a[href="https://kasinot.org"] +mvlehti.net##a[href="https://loistehammasharja.com/"] mvlehti.net##a[href="https://www.kippis.net/"] mvlehti.net#?#.aligncenter:has(a[href*="tarjousproffa.com"]) mvlehti.net#?#.entry-content > h3:-abp-contains(kasino) @@ -5042,18 +5046,21 @@ tekniikkatalous.fi#?#div#skyscraper-height-div > aside > div > div > a:-abp-cont tekniikkatalous.fi#?#div#skyscraper-height-div > section > div > a:-abp-contains(Kaupallinen yhteistyรถ) tekniikkatalous.fi#?#.article-body > div[class]:-abp-has(> span:-abp-contains(KAUPALLINEN YHTEISTYร–) + a[href^="https://koulutus.almatalent.fi/"]) tekniikkatalous.fi,tivi.fi#?#[width]:-abp-has(.lazyload-wrapper) +tekniikkatalous.fi##a[href^="/tyopaikat/kumppanisisalto-tyopaikat/"] +tekniikkatalous.fi##aside > div[class] > a[href^="https://www.tekniikkatalous.fi/kumppanisisallot"] +tekniikkatalous.fi##div[class][width="980"] telsu.fi###pb_bottom2 telsu.fi###pb_bottom3 telsu.fi##.cmore.ch tennis.fi##.ad-blocks -tekniikkatalous.fi##a[href^="/tyopaikat/kumppanisisalto-tyopaikat/"] -tekniikkatalous.fi##aside > div[class] > a[href^="https://www.tekniikkatalous.fi/kumppanisisallot"] -tekniikkatalous.fi##div[class][width="980"] tervareitti.fi##.advertisement-banner-row tervareitti.fi#?#.article-container.shadow-sm.col:-abp-has(img[alt^="Oma tilausmainos"]) terve.fi##div[class|=ProductRecommendationCarousel__CarouselContainer] terve.fi#?#div[class^=PageElementFeedItem__Container]:-abp-contains(Mainos) terve.fi#?#div[class^=transitionSlot__component][class*=layout__container]:-abp-contains(KAUPALLINEN YHTEISTYร–) +terveydenasialla.com##a[href^="https://on.vallila.fi/"] +terveydenasialla.com##p a[href^="https://related.iittala.com/"] +terveydenasialla.com#?#p:-abp-has(strong):-abp-has(a[href="http://www.curaofsweden.com/fi"]) ticketmaster.fi##div[id^=ad-slot-] ticketmaster.fi#?#div:-abp-has(> [id|=ad-slot]) tiede.fi#?#.views-row:-abp-has(.is-commercial) @@ -5216,6 +5223,7 @@ yrittajat.fi##div[class$=kaupallinen-yhteistyo] ||kinuskikissa.fi/wp-content/uploads/*kumppani_*.gif$image ||kiuruvesilehti.fi/wp-content/uploads/*kampanja_banneri.png$image ||kotikarjala.fi/eneo?tem=ndap_ilmoitus&$xmlhttprequest,domain=kotikarjala.fi +||kotiliesi.fi/upotukset/hintaopas/*$domain=tekniikanmaailma.fi ||kuvake.net/js/bannerloader.js$script,domain=kuvake.net ||laitilansanomat.fi^*/gallery/mainos*/$image,domain=laitilansanomat.fi ||lbaanijakuva.fi/test/*?template=prisjakt$domain=lbaanijakuva.fi @@ -5410,3 +5418,10 @@ iltalehti.fi#@#.ad-placement ! https://github.com/easylist/easylist/pull/9343 @@||almamedia.fi/almacmp/$script + +! https://github.com/easylist/easylist/pull/9900 +mustijamirri.fi#@##cookie_consent +mustijamirri.fi#@#.cookie_body +mustijamirri.fi#@##cookieform +mustijamirri.fi#@#.cookie_info +mustijamirri.fi#@#.cookie_check diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersABP.txt b/NorwegianExperimentalList alternate versions/NordicFiltersABP.txt index 8681d0e5c..09a3d898a 100644 --- a/NorwegianExperimentalList alternate versions/NordicFiltersABP.txt +++ b/NorwegianExperimentalList alternate versions/NordicFiltersABP.txt @@ -2325,7 +2325,7 @@ vg.no##div[data-test-tag=timestamp] + p + div::before ! ๐Ÿ‡ณ๐Ÿ‡ด/๐Ÿ‡ฉ๐Ÿ‡ฐ: โ€”โ€”โ€” Anti-anti-reklameblokkering โ€”โ€”โ€” ! ๐Ÿ‡ฎ๐Ÿ‡ธ: โ€”โ€”โ€” And-and-auglรฝsingshindrun โ€”โ€”โ€” ! ๐Ÿ‡ฌ๐Ÿ‡ง: โ€”โ€”โ€” Anti-anti-adblocking โ€”โ€”โ€” -! Last updated: 10November2021v2-Extension +! Last updated: 01December2021v1-Extension tv2.no#$#abort-current-inline-script adblockDetector ||elderlyscissors.com^ ||vg.no/cnp-assets/src/sites/vg/components/AdblockModal$script,~third-party diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersAdGuard.txt b/NorwegianExperimentalList alternate versions/NordicFiltersAdGuard.txt index d45370967..b9d6efd4f 100644 --- a/NorwegianExperimentalList alternate versions/NordicFiltersAdGuard.txt +++ b/NorwegianExperimentalList alternate versions/NordicFiltersAdGuard.txt @@ -2417,6 +2417,10 @@ intrafish.no##.preview-gradient lydogbilde.no,lydogbillede.dk##.lbplussinfo ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image information.dk###paywall:style(margin-top: 0px !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important) ! dagbladet.no,elbil24.no ##.CTA-body-faded ! digi.no, tu.no, medier24.no, porten.no @@ -2431,7 +2435,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before ! ๐Ÿ‡ณ๐Ÿ‡ด/๐Ÿ‡ฉ๐Ÿ‡ฐ: โ€”โ€”โ€” Anti-anti-reklameblokkering โ€”โ€”โ€” ! ๐Ÿ‡ฎ๐Ÿ‡ธ: โ€”โ€”โ€” And-and-auglรฝsingshindrun โ€”โ€”โ€” ! ๐Ÿ‡ฌ๐Ÿ‡ง: โ€”โ€”โ€” Anti-anti-adblocking โ€”โ€”โ€” -! Last updated: 10November2021v2-Extension +! Last updated: 01December2021v1-Extension dagensbyggeri.dk##+js(std, (), 2500) eurosport.*##+js(aeld, contextmenu) techstart.dk##+js(set, adblock, false) diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersPrivacy.txt b/NorwegianExperimentalList alternate versions/NordicFiltersPrivacy.txt index e11077f5f..88238de14 100644 --- a/NorwegianExperimentalList alternate versions/NordicFiltersPrivacy.txt +++ b/NorwegianExperimentalList alternate versions/NordicFiltersPrivacy.txt @@ -2417,6 +2417,10 @@ intrafish.no##.preview-gradient lydogbilde.no,lydogbillede.dk##.lbplussinfo ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image information.dk###paywall:style(margin-top: 0px !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important) +aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important) ! dagbladet.no,elbil24.no ##.CTA-body-faded ! digi.no, tu.no, medier24.no, porten.no @@ -2431,7 +2435,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before ! ๐Ÿ‡ณ๐Ÿ‡ด/๐Ÿ‡ฉ๐Ÿ‡ฐ: โ€”โ€”โ€” Anti-anti-reklameblokkering โ€”โ€”โ€” ! ๐Ÿ‡ฎ๐Ÿ‡ธ: โ€”โ€”โ€” And-and-auglรฝsingshindrun โ€”โ€”โ€” ! ๐Ÿ‡ฌ๐Ÿ‡ง: โ€”โ€”โ€” Anti-anti-adblocking โ€”โ€”โ€” -! Last updated: 10November2021v2-Extension +! Last updated: 01December2021v1-Extension dagensbyggeri.dk##+js(std, (), 2500) eurosport.*##+js(aeld, contextmenu) techstart.dk##+js(set, adblock, false) diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersPrivoxy.action b/NorwegianExperimentalList alternate versions/NordicFiltersPrivoxy.action index 456da0885..1debd1deb 100644 --- a/NorwegianExperimentalList alternate versions/NordicFiltersPrivoxy.action +++ b/NorwegianExperimentalList alternate versions/NordicFiltersPrivoxy.action @@ -1286,7 +1286,7 @@ # ๐Ÿ‡ณ๐Ÿ‡ด/๐Ÿ‡ฉ๐Ÿ‡ฐ: โ€”โ€”โ€” Anti-anti-reklameblokkering โ€”โ€”โ€” # ๐Ÿ‡ฎ๐Ÿ‡ธ: โ€”โ€”โ€” And-and-auglรฝsingshindrun โ€”โ€”โ€” {+block{๐Ÿ‡ฌ๐Ÿ‡ง: โ€”โ€”โ€” Anti-anti-adblocking โ€”โ€”โ€”}} -# Last updated: 10November2021v2-Extension +# Last updated: 01December2021v1-Extension .elderlyscissors.com {+block} .vg.no/cnp-assets/src/sites/vg/components/AdblockModal