From 26ed32a07c6bd78f0f08c9a1684ef0b5b18ef035 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Wed, 26 Aug 2026 02:50:12 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 82 ++++++++++++++++++- .../AntiMalwareAdGuard.txt | 52 +++++++++++- .../AntiMalwareAdGuardHome.txt | 43 +++++++++- .../AntiMalwareDomains.txt | 44 +++++++++- .../AntiMalwareHosts.txt | 44 +++++++++- .../AntiMalwarePrivoxy.action | 42 +++++++++- .../AntiMalwareTPL.tpl | 46 ++++++++++- 7 files changed, 343 insertions(+), 10 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index b57bb05cb..076b2d746 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 13August2026v1 +! Version: 23August2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -9,7 +9,7 @@ ! As of June 2023, Pi-Hole FTL ≥5.22 users should rather use https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, which is a ||-type list version designed specifically for DNS tools. ! Legitimate use is almost non-existent, but has a tiny userbase in Japan and among upstart coding experiments. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||top^$domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top|~to|~yggtorrent.top|~yggleak.top|~asiaon.top|~voxel.top|~passt.top|~polar.top|~rifton.top|~rugaming.top|~doubledouble.top|~hedon-haven.top|~outlands.top|~tk-web.top|~qpmegathread.top|~qmk.top|~mgytr.top|~girlskissing.top|~luxferre.top|~adderly.top|~supremecloud.top|~tooru.top +||top^$domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top|~to|~yggtorrent.top|~yggleak.top|~asiaon.top|~voxel.top|~passt.top|~polar.top|~rifton.top|~rugaming.top|~doubledouble.top|~hedon-haven.top|~outlands.top|~tk-web.top|~qpmegathread.top|~qmk.top|~mgytr.top|~girlskissing.top|~luxferre.top|~adderly.top|~supremecloud.top|~cldev.top|~medoed.top|~tooru.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^ @@/^.*(tech|project|linux).*\.top(/[a-z0-9_-]?.*)?$/ @@ -20766,6 +20766,41 @@ http://secured21.*.com/|$popup ! According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its ||posthog.$all,domain=gov|loveisaskill.cloudflareaccess.com +! https://github.com/AdguardTeam/AdguardFilters/issues/238795 +||ad-growth.it.com^ +||ad-growth.it.com^$popup +||alertkitflare.org^ +||alertkitflare.org^$popup +||bestyofr.store^ +||bestyofr.store^$popup +||clouding17.com^ +||clouding17.com^$popup +||energieadvimail.nl^ +||energieadvimail.nl^$popup +||freeflowducts.com^ +||freeflowducts.com^$popup +||inboxthrust.org^ +||inboxthrust.org^$popup +||kajaland.net^ +||kajaland.net^$popup +||newslettersstream.com^ +||newslettersstream.com^$popup +||notification-redirection-link.com^ +||notification-redirection-link.com^$popup +||notificationredirectionlink.com^ +||notificationredirectionlink.com^$popup +||puravivex.best^ +||puravivex.best^$popup +||trackallnotifrewa.com^ +||trackallnotifrewa.com^$popup +||trustus-eu.uk^ +||trustus-eu.uk^$popup +||103.29.182.53^ +||103.29.182.53^$popup +||13.140.171.211^ +||13.140.171.211^$popup + + ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -25593,6 +25628,28 @@ drvhub.net##.driver-item__install -mac-install.github.io/.github/home.html|,popup -windows-download.github.io/.github/home.html|,popup .github.io/.github/?offer=,popup +||disk-director.github.io^ +||disk-director.github.io^$popup +||zaffersnouty.com^ +||zaffersnouty.com^$popup +||sannapacewiczxgogi.github.io^ +||sannapacewiczxgogi.github.io^$popup +||core-steady-pack.github.io^ +||core-steady-pack.github.io^$popup +||cootercredit.com^ +||cootercredit.com^$popup +||flowrdo.com^ +||flowrdo.com^$popup +||softgot.net^ +||softgot.net^$popup +||techrxv.com^ +||techrxv.com^$popup +-director-data-recovery.github.io/.github^ +-director-data-recovery.github.io/.github^$popup +||katukaposole.com^ +||katukaposole.com^$popup +||fleecykobird.com^ +||fleecykobird.com^$popup ||151.243.18.53^ ||151.243.18.53^$popup @@ -25653,6 +25710,27 @@ drvhub.net##.driver-item__install +! https://github.com/DandelionSprout/adfilt/issues/1275 +||tgdrive.app^ +||tgdrive.app^$popup +||tg-drive-bx4f.onrender.com^ +||tg-drive-bx4f.onrender.com^$popup +! E-mail spammers +||austinpoolservices.com^ +||austinpoolservices.com^$popup +||desernk.me^ +||desernk.me^$popup +||qed.uk.com^ +||qed.uk.com^$popup +||resultsfastfind.com^ +||resultsfastfind.com^$popup +||resultsfinderonline.com^ +||resultsfinderonline.com^$popup +/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/ +/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/$popup +||199.168.185.4^ +||199.168.185.4^$popup + ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 9b3c22898..90fb656ad 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@  ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 13August2026v1 +! Version: 23August2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -8,7 +8,7 @@ ! Homepage: https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#-english ! Legitimate use is almost non-existent, but has a tiny userbase in Japan and among upstart coding experiments. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||top^$document,domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top|~to|~yggtorrent.top|~yggleak.top|~asiaon.top|~voxel.top|~passt.top|~polar.top|~rifton.top|~rugaming.top|~doubledouble.top|~hedon-haven.top|~outlands.top|~tk-web.top|~qpmegathread.top|~qmk.top|~mgytr.top|~girlskissing.top|~luxferre.top|~adderly.top|~supremecloud.top|~tooru.top +||top^$document,domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top|~to|~yggtorrent.top|~yggleak.top|~asiaon.top|~voxel.top|~passt.top|~polar.top|~rifton.top|~rugaming.top|~doubledouble.top|~hedon-haven.top|~outlands.top|~tk-web.top|~qpmegathread.top|~qmk.top|~mgytr.top|~girlskissing.top|~luxferre.top|~adderly.top|~supremecloud.top|~cldev.top|~medoed.top|~tooru.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^$document @@/^.*(tech|project|linux).*\.top(/[a-z0-9_-]?.*)?$/$document @@ -12002,6 +12002,29 @@ http://secured21.*.com/|$all !#endif ! According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its ||posthog.$all,domain=gov|loveisaskill.cloudflareaccess.com +! https://github.com/AdguardTeam/AdguardFilters/issues/238795 +||ad-growth.it.com^$all +||alertkitflare.org^$all +||bestyofr.store^$all +||clouding17.com^$all +||energieadvimail.nl^$all +||freeflowducts.com^$all +||inboxthrust.org^$all +||kajaland.net^$all +||newslettersstream.com^$all +||notification-redirection-link.com^$all +||notificationredirectionlink.com^$all +||puravivex.best^$all +||trackallnotifrewa.com^$all +||trustus-eu.uk^$all +!+ NOT_PLATFORM(windows, mac, android, cli) +||103.29.182.53^$all +!+ NOT_PLATFORM(windows, mac, android, cli) +||13.140.171.211^$all +!+ PLATFORM(windows, mac, android, cli) +103.29.182.53$network +!+ PLATFORM(windows, mac, android, cli) +13.140.171.211$network ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -15069,6 +15092,17 @@ drvhub.net##.driver-item__install -mac-install.github.io/.github/home.html|$document,popup -windows-download.github.io/.github/home.html|$document,popup .github.io/.github/?offer=$document,popup +||disk-director.github.io^$all +||zaffersnouty.com^$all +||sannapacewiczxgogi.github.io^$all +||core-steady-pack.github.io^$all +||cootercredit.com^$all +||flowrdo.com^$all +||softgot.net^$all +||techrxv.com^$all +-director-data-recovery.github.io/.github^$all +||katukaposole.com^$all +||fleecykobird.com^$all !#if !env_firefox !+ NOT_PLATFORM(windows, mac, android, cli) ||151.243.18.53^$all @@ -15139,6 +15173,20 @@ drvhub.net##.driver-item__install !+ PLATFORM(windows, mac, android, cli) 35.71.155.166$network !#endif +! https://github.com/DandelionSprout/adfilt/issues/1275 +||tgdrive.app^$all +||tg-drive-bx4f.onrender.com^$all +! E-mail spammers +||austinpoolservices.com^$all +||desernk.me^$all +||qed.uk.com^$all +||resultsfastfind.com^$all +||resultsfinderonline.com^$all +/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/$all +!+ NOT_PLATFORM(windows, mac, android, cli) +||199.168.185.4^$all +!+ PLATFORM(windows, mac, android, cli) +199.168.185.4$network ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^$all diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 997fe6672..0ad5b5aad 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,12 +1,12 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 13August2026v1 +! Version: 23August2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists ! Legitimate use is almost non-existent, but has a tiny userbase in Japan and among upstart coding experiments. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||*.top^$dnstype=~CNAME,denyallow=caitlin.top|callmebymygender.top|corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|changlam10.top|changlam11.top|pdcdn1.top|pressplay.top|chillx.top|strims.top|thedesk.top|audioforyou.top|awavenue.top|reyhub.top|iboxs.top|adrules.top|hostingowy.top|to|yggtorrent.top|yggleak.top|asiaon.top|voxel.top|passt.top|polar.top|rifton.top|rugaming.top|doubledouble.top|hedon-haven.top|outlands.top|tk-web.top|qpmegathread.top|qmk.top|mgytr.top|girlskissing.top|luxferre.top|adderly.top|supremecloud.top|tooru.top +||*.top^$dnstype=~CNAME,denyallow=caitlin.top|callmebymygender.top|corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|changlam10.top|changlam11.top|pdcdn1.top|pressplay.top|chillx.top|strims.top|thedesk.top|audioforyou.top|awavenue.top|reyhub.top|iboxs.top|adrules.top|hostingowy.top|to|yggtorrent.top|yggleak.top|asiaon.top|voxel.top|passt.top|polar.top|rifton.top|rugaming.top|doubledouble.top|hedon-haven.top|outlands.top|tk-web.top|qpmegathread.top|qmk.top|mgytr.top|girlskissing.top|luxferre.top|adderly.top|supremecloud.top|cldev.top|medoed.top|tooru.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^ @@/^.*(tech|project|linux).*\.top$/ @@ -10251,6 +10251,23 @@ http://secured21.*.com/| ://[2604:2dc0:100:4ed8::]^ ://[2604:2dc0:104:da00::]^ ! According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its +! https://github.com/AdguardTeam/AdguardFilters/issues/238795 +||ad-growth.it.com^ +||alertkitflare.org^ +||bestyofr.store^ +||clouding17.com^ +||energieadvimail.nl^ +||freeflowducts.com^ +||inboxthrust.org^ +||kajaland.net^ +||newslettersstream.com^ +||notification-redirection-link.com^ +||notificationredirectionlink.com^ +||puravivex.best^ +||trackallnotifrewa.com^ +||trustus-eu.uk^ +103.29.182.53 +13.140.171.211 ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 ||downloadprovider.me^ @@ -12596,6 +12613,17 @@ http://secured21.*.com/| ||vmware-workstation-pro-download-tool.github.io^ ||windowtinted.com^ ||zoho-books-windows-app.github.io^ +||disk-director.github.io^ +||zaffersnouty.com^ +||sannapacewiczxgogi.github.io^ +||core-steady-pack.github.io^ +||cootercredit.com^ +||flowrdo.com^ +||softgot.net^ +||techrxv.com^ +-director-data-recovery.github.io/.github^ +||katukaposole.com^ +||fleecykobird.com^ 151.243.18.53 185.100.157.222 185.107.74.103 @@ -12615,6 +12643,17 @@ http://secured21.*.com/| ://[2600:3c06::f03c:95ff:fed9:ce5e]^ ://[2600:3c06::f03c:95ff:fedc:7282]^ 35.71.155.166 +! https://github.com/DandelionSprout/adfilt/issues/1275 +||tgdrive.app^ +||tg-drive-bx4f.onrender.com^ +! E-mail spammers +||austinpoolservices.com^ +||desernk.me^ +||qed.uk.com^ +||resultsfastfind.com^ +||resultsfinderonline.com^ +/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/ +199.168.185.4 ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^ ||100conversions.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 1dbb81b27..6a5162488 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 09July2026v2 +# Version: 23August2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -11024,6 +11024,25 @@ zaxbyfeedback.com # According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its +# https://github.com/AdguardTeam/AdguardFilters/issues/238795 +ad-growth.it.com +alertkitflare.org +bestyofr.store +clouding17.com +energieadvimail.nl +freeflowducts.com +inboxthrust.org +kajaland.net +newslettersstream.com +notification-redirection-link.com +notificationredirectionlink.com +puravivex.best +trackallnotifrewa.com +trustus-eu.uk +103.29.182.53 +13.140.171.211 + + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -13671,6 +13690,17 @@ zoho-books-windows-app.github.io +disk-director.github.io +zaffersnouty.com +sannapacewiczxgogi.github.io +core-steady-pack.github.io +cootercredit.com +flowrdo.com +softgot.net +techrxv.com + +katukaposole.com +fleecykobird.com 151.243.18.53 185.100.157.222 @@ -13713,6 +13743,18 @@ upperch.site +# https://github.com/DandelionSprout/adfilt/issues/1275 +tgdrive.app +tg-drive-bx4f.onrender.com +# E-mail spammers +austinpoolservices.com +desernk.me +qed.uk.com +resultsfastfind.com +resultsfinderonline.com + +199.168.185.4 + # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— 0network.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 6f83458d5..3d53efe61 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 09July2026v2 +# Version: 23August2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later can consider switching to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, due to an unconfirmed belief of mine that it allows better wildcarding than the Hosts and raw-domains versions. @@ -10975,6 +10975,25 @@ # According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its +# https://github.com/AdguardTeam/AdguardFilters/issues/238795 +127.0.0.1 ad-growth.it.com +127.0.0.1 alertkitflare.org +127.0.0.1 bestyofr.store +127.0.0.1 clouding17.com +127.0.0.1 energieadvimail.nl +127.0.0.1 freeflowducts.com +127.0.0.1 inboxthrust.org +127.0.0.1 kajaland.net +127.0.0.1 newslettersstream.com +127.0.0.1 notification-redirection-link.com +127.0.0.1 notificationredirectionlink.com +127.0.0.1 puravivex.best +127.0.0.1 trackallnotifrewa.com +127.0.0.1 trustus-eu.uk +127.0.0.1 103.29.182.53 +127.0.0.1 13.140.171.211 + + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -13618,6 +13637,17 @@ +127.0.0.1 disk-director.github.io +127.0.0.1 zaffersnouty.com +127.0.0.1 sannapacewiczxgogi.github.io +127.0.0.1 core-steady-pack.github.io +127.0.0.1 cootercredit.com +127.0.0.1 flowrdo.com +127.0.0.1 softgot.net +127.0.0.1 techrxv.com + +127.0.0.1 katukaposole.com +127.0.0.1 fleecykobird.com 127.0.0.1 151.243.18.53 127.0.0.1 185.100.157.222 @@ -13660,6 +13690,18 @@ +# https://github.com/DandelionSprout/adfilt/issues/1275 +127.0.0.1 tgdrive.app +127.0.0.1 tg-drive-bx4f.onrender.com +# E-mail spammers +127.0.0.1 austinpoolservices.com +127.0.0.1 desernk.me +127.0.0.1 qed.uk.com +127.0.0.1 resultsfastfind.com +127.0.0.1 resultsfinderonline.com + +127.0.0.1 199.168.185.4 + # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— 127.0.0.1 0network.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 7161f456a..dbc7ad7c3 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 09July2026v2-Deprecated +# Version: 23August2026v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -10641,6 +10641,24 @@ .posthog. +.ad-growth.it.com +.alertkitflare.org +.bestyofr.store +.clouding17.com +.energieadvimail.nl +.freeflowducts.com +.inboxthrust.org +.kajaland.net +.newslettersstream.com +.notification-redirection-link.com +.notificationredirectionlink.com +.puravivex.best +.trackallnotifrewa.com +.trustus-eu.uk +.103.29.182.53 +.13.140.171.211 + + {+block} # ——— Standard malware that I stumbled upon on my own ——— @@ -13229,6 +13247,17 @@ -mac-install.github.io/.github/home.html -windows-download.github.io/.github/home.html .github.io/.github/?offer= +.disk-director.github.io +.zaffersnouty.com +.sannapacewiczxgogi.github.io +.core-steady-pack.github.io +.cootercredit.com +.flowrdo.com +.softgot.net +.techrxv.com +-director-data-recovery.github.io/.github +.katukaposole.com +.fleecykobird.com .151.243.18.53 .185.100.157.222 @@ -13265,6 +13294,17 @@ +.tgdrive.app +.tg-drive-bx4f.onrender.com +# E-mail spammers +.austinpoolservices.com +.desernk.me +.qed.uk.com +.resultsfastfind.com +.resultsfinderonline.com +/(.*[/@])?questionprov\d{5,6}\.com(/.*)? +.199.168.185.4 + .0network.com .100conversions.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index b09b55409..0d67a318c 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 13August2026v1-Deprecated +# Version: 23August2026v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -54,6 +54,8 @@ +d luxferre.top +d adderly.top +d supremecloud.top ++d cldev.top ++d medoed.top +d tooru.top # (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) +d masto*.top @@ -11040,6 +11042,25 @@ ay.pay.pay. # According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its -d posthog. +# https://github.com/AdguardTeam/AdguardFilters/issues/238795 +-d ad-growth.it.com +-d alertkitflare.org +-d bestyofr.store +-d clouding17.com +-d energieadvimail.nl +-d freeflowducts.com +-d inboxthrust.org +-d kajaland.net +-d newslettersstream.com +-d notification-redirection-link.com +-d notificationredirectionlink.com +-d puravivex.best +-d trackallnotifrewa.com +-d trustus-eu.uk +-d 103.29.182.53 +-d 13.140.171.211 + + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -13668,6 +13689,17 @@ ed.br ?q=artstation- -mac-install.github.io .github home.html -windows-download.github.io .github home.html ithub.io .github ?offer= +-d disk-director.github.io +-d zaffersnouty.com +-d sannapacewiczxgogi.github.io +-d core-steady-pack.github.io +-d cootercredit.com +-d flowrdo.com +-d softgot.net +-d techrxv.com +-director-data-recovery.github.io .github +-d katukaposole.com +-d fleecykobird.com -d 151.243.18.53 -d 185.100.157.222 @@ -13704,6 +13736,18 @@ ithub.io .github ?offer= +# https://github.com/DandelionSprout/adfilt/issues/1275 +-d tgdrive.app +-d tg-drive-bx4f.onrender.com +# E-mail spammers +-d austinpoolservices.com +-d desernk.me +-d qed.uk.com +-d resultsfastfind.com +-d resultsfinderonline.com + +-d 199.168.185.4 + # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter/——— -d 0network.com