diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 31e6f6129..89e5f1a1d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 12June2025v1 +! Version: 16June2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -52763,6 +52763,15 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||password-internal.com^$popup ! Though not _inherently_ malware, at least 1 spambot on this repo had direct ties to that site ||eyestore.tebex.io^ +! https://github.com/DandelionSprout/adfilt/issues/1150 +http://secured21.*.com/| +http://secured21.*.com/|$popup +||docssa.online^ +||docssa.online^$popup + +! For the raw domains/hosts list versions +||secured21.elektro-cigerli.com^ + ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 724a7721c..f638923c6 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 12June2025v1 +! Version: 16June2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -27874,6 +27874,13 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||password-internal.com^$all ! Though not _inherently_ malware, at least 1 spambot on this repo had direct ties to that site ||eyestore.tebex.io^$document +! https://github.com/DandelionSprout/adfilt/issues/1150 +http://secured21.*.com/|$all +||docssa.online^$all +!#if false +! For the raw domains/hosts list versions +||secured21.elektro-cigerli.com^ +!#endif ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 7335595ec..29f3ca3ad 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 12June2025v1 +! Version: 16June2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -27110,6 +27110,13 @@ ||password-internal.com^ ! Though not _inherently_ malware, at least 1 spambot on this repo had direct ties to that site ||eyestore.tebex.io^ +! https://github.com/DandelionSprout/adfilt/issues/1150 +http://secured21.*.com/| +||docssa.online^ + +! For the raw domains/hosts list versions +||secured21.elektro-cigerli.com^ + ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index abf2c2f08..9056cc12f 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 12June2025v1 +# Version: 16June2025v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -26950,6 +26950,13 @@ zucoagorsout.com password-internal.com # Though not _inherently_ malware, at least 1 spambot on this repo had direct ties to that site eyestore.tebex.io +# https://github.com/DandelionSprout/adfilt/issues/1150 + +docssa.online + +# For the raw domains/hosts list versions +secured21.elektro-cigerli.com + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index b46e5d0cb..eaff10d1d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 12June2025v1 +# Version: 16June2025v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later, and of AdGuard Home, are STRONGLY RECOMMENDED to switch to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, unless otherwise proven. @@ -26899,6 +26899,13 @@ 127.0.0.1 password-internal.com # Though not _inherently_ malware, at least 1 spambot on this repo had direct ties to that site 127.0.0.1 eyestore.tebex.io +# https://github.com/DandelionSprout/adfilt/issues/1150 + +127.0.0.1 docssa.online + +# For the raw domains/hosts list versions +127.0.0.1 secured21.elektro-cigerli.com + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 626c14bd5..d42a0ce05 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 12June2025v1-Deprecated +# Version: 16June2025v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -26579,6 +26579,11 @@ .password-internal.com # Though not _inherently_ malware, at least 1 spambot on this repo had direct ties to that site .eyestore.tebex.io +.docssa.online + +# For the raw domains/hosts list versions +.secured21.elektro-cigerli.com + {+block} # ——— Standard malware that I stumbled upon on my own ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index ef6c29652..6caa42106 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 12June2025v1-Deprecated +# Version: 16June2025v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -26944,6 +26944,13 @@ icrosoft.com.chrome. -d password-internal.com # Though not _inherently_ malware, at least 1 spambot on this repo had direct ties to that site -d eyestore.tebex.io +# https://github.com/DandelionSprout/adfilt/issues/1150 +http://secured21.*.com/ +-d docssa.online + +# For the raw domains hosts list versions +-d secured21.elektro-cigerli.com + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p index 3609f32a2..3ec82d39e 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p @@ -530,6 +530,7 @@ F:74.208.27.239-74.208.27.239 F:79.143.181.251-79.143.181.251 F-IPv6:[2a14:2d81:0:27::1]-[2a14:2d81:0:27::1] F:139.45.195.9-139.45.195.9 +F:185.53.177.54-185.53.177.54 F:103.67.200.64-103.67.200.64 F:198.134.116.17-198.134.116.17 F:198.134.116.30-198.134.116.30 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index ead967da6..cd24d0831 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -530,6 +530,7 @@ 79.143.181.251 [2a14:2d81:0:27::1] 139.45.195.9 +185.53.177.54 103.67.200.64 198.134.116.17 198.134.116.30