From 1bda4110b34a3f630e4608ddedea06a695e18fce Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Tue, 2 Jun 2026 22:03:15 +0200 Subject: [PATCH] Add files via upload --- Alternate versions Anti-Malware List/AntiMalwareABP.txt | 7 +++---- .../AntiMalwareAdGuard.txt | 8 +++----- .../AntiMalwareAdGuardHome.txt | 4 ++-- .../AntiMalwareDomains.txt | 6 +++--- Alternate versions Anti-Malware List/AntiMalwareHosts.txt | 6 +++--- .../AntiMalwarePrivoxy.action | 5 ++--- Alternate versions Anti-Malware List/AntiMalwareTPL.tpl | 6 +++--- ...on Sprout's and other adblocker lists' IPs for P2P.p2p | 3 ++- ...andelion Sprout's and other adblocker lists' IPs.ipset | 4 +++- 9 files changed, 24 insertions(+), 25 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 6f7dd61ee..641cfbdaf 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 21May2026v1 +! Version: 30May2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -2133,11 +2133,8 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||runmodes.com^ ||runmodes.com^$popup - ||91.121.67.60^ ||91.121.67.60^$popup -||172.67.186.189^ -||172.67.186.189^$popup ! https://scammer•info/t/mcafee-phish/83725 ||securefirst.us-east-1.linodeobjects.com^ ||securefirst.us-east-1.linodeobjects.com^$popup @@ -20766,6 +20763,8 @@ http://secured21.*.com/|$popup +! According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its +||posthog.$all,domain=gov|loveisaskill.cloudflareaccess.com ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 5f1039d3d..4014ba872 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@  ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 21May2026v1 +! Version: 30May2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -1935,12 +1935,8 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||runmodes.com^$all !+ PLATFORM(windows, mac, android, cli) 91.121.67.60$network -!+ PLATFORM(windows, mac, android, cli) -172.67.186.189$network !+ NOT_PLATFORM(windows, mac, android, cli) ||91.121.67.60^$all -!+ NOT_PLATFORM(windows, mac, android, cli) -||172.67.186.189^$all ! https://scammer•info/t/mcafee-phish/83725 ||securefirst.us-east-1.linodeobjects.com^$all ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community @@ -12003,6 +11999,8 @@ http://secured21.*.com/|$all !+ PLATFORM(windows, mac, android, cli) 2604:2dc0:104:da00::$network !#endif +! According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its +||posthog.$all,domain=gov|loveisaskill.cloudflareaccess.com ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 1c4706971..e8ac73678 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 21May2026v1 +! Version: 30May2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -966,7 +966,6 @@ ||trumops.com^ ||runmodes.com^ 91.121.67.60 -172.67.186.189 ! https://scammer•info/t/mcafee-phish/83725 ||securefirst.us-east-1.linodeobjects.com^ ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community @@ -10251,6 +10250,7 @@ http://secured21.*.com/| 15.204.160.216 ://[2604:2dc0:100:4ed8::]^ ://[2604:2dc0:104:da00::]^ +! According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 ||downloadprovider.me^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index a96e92b2e..0c77bd384 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 21May2026v1 +# Version: 30May2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -1405,9 +1405,7 @@ mediadlvr.com trumops.com runmodes.com - 91.121.67.60 -172.67.186.189 # https://scammer•info/t/mcafee-phish/83725 securefirst.us-east-1.linodeobjects.com # https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community @@ -11024,6 +11022,8 @@ zaxbyfeedback.com +# According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index ddfa3db35..8e91dc871 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 21May2026v1 +# Version: 30May2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later can consider switching to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, due to an unconfirmed belief of mine that it allows better wildcarding than the Hosts and raw-domains versions. @@ -1356,9 +1356,7 @@ 127.0.0.1 trumops.com 127.0.0.1 runmodes.com - 127.0.0.1 91.121.67.60 -127.0.0.1 172.67.186.189 # https://scammer•info/t/mcafee-phish/83725 127.0.0.1 securefirst.us-east-1.linodeobjects.com # https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community @@ -10975,6 +10973,8 @@ +# According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index d39f6b9ae..ca5fbde7f 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 21May2026v1-Deprecated +# Version: 30May2026v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -1166,9 +1166,7 @@ .trumops.com .runmodes.com - .91.121.67.60 -.172.67.186.189 .securefirst.us-east-1.linodeobjects.com @@ -10642,6 +10640,7 @@ +.posthog. {+block} # ——— Standard malware that I stumbled upon on my own ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index a057d3542..1585401c5 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 21May2026v1-Deprecated +# Version: 30May2026v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -1386,9 +1386,7 @@ -d trumops.com -d runmodes.com - -d 91.121.67.60 --d 172.67.186.189 # https://scammer•info/t/mcafee-phish/83725 -d securefirst.us-east-1.linodeobjects.com # https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community @@ -11037,6 +11035,8 @@ ay.pay.pay. +# According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its +-d posthog. # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p index a50d1e202..12b59ba7f 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p @@ -268,7 +268,6 @@ F:91.229.23.200-91.229.23.200 F:185.155.184.98-185.155.184.98 F:194.110.247.242-194.110.247.242 F:54.219.218.169-54.219.218.169 -F:64.132.201.92-64.132.201.92 F:209.141.51.49-209.141.51.49 F:208.88.225.116-208.88.225.116 F:208.88.225.117-208.88.225.117 @@ -563,6 +562,8 @@ F:94.130.197.238-94.130.197.238 F:63.33.119.172-63.33.119.172 F:52.207.126.104-52.207.126.104 F:185.7.99.190-185.7.99.190 +F:23.48.203.140-23.48.203.140 +F:3.33.130.190-3.33.130.190 F:103.67.200.64-103.67.200.64 F:212.27.60.108-212.27.60.108 F:13.248.148.254-13.248.148.254 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 8ee00f64f..04e63ede3 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -276,7 +276,6 @@ 185.155.184.98 194.110.247.242 54.219.218.169 -64.132.201.92 209.141.51.49 208.88.225.116 208.88.225.117 @@ -599,6 +598,9 @@ [2606:4700:3033::6815:5644] [2a01:4f8:2201:388a::2] 185.7.99.190 +23.48.203.140 +3.33.130.190 +[2a02:26f0:1700:11::b856:6790] 103.67.200.64 [2a00:8860:10d:1::2:b01] 212.27.60.108