starred/adfilt
1
0
Fork 0
mirror of https://github.com/DandelionSprout/adfilt.git synced 2026-10-06 08:44:44 +01:00
Code Issues Packages Projects Releases 4 Wiki Activity

Fix #1296 + Other stuff.

Browse Source
This commit is contained in:
Imre Eilertsen
2026-10-04 07:14:07 +02:00
committed by GitHub
parent e549334ecc
commit 3745a7b6b6
9 changed files with 112 additions and 1330 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Alternate versions Anti-Malware List/AntiMalwareABP.txt
+19 -217
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox)
! Version: 19September2026v1
! Version: 04October2026v1
! Expires: 1 day
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted.
@@ -461,9 +461,6 @@ download.cnet.com#?#.c-globalCard:has(a[href*="/AdsCleaner/"])
||173.208.96.42^
||173.208.96.42^$popup
||173.208.96.43^
@@ -479,7 +476,18 @@ download.cnet.com#?#.c-globalCard:has(a[href*="/AdsCleaner/"])
||213.227.149.208^$popup
||213.227.149.211^
||213.227.149.211^$popup
||redddit.com^
||redddit.com^$popup
||redit.com^
||redit.com^$popup
||reditt.com^
||reditt.com^$popup
||reddtt.com^
||reddtt.com^$popup
||reddtit.com^
||reddtit.com^$popup
||mirappe.com^
||mirappe.com^$popup
! ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ———
||ortrun-adi.com^
@@ -501,9 +509,6 @@ download.cnet.com#?#.c-globalCard:has(a[href*="/AdsCleaner/"])
://35.168.147.213^
://35.175.38.64^
||144.76.0.242^
@@ -517,7 +522,6 @@ download.cnet.com#?#.c-globalCard:has(a[href*="/AdsCleaner/"])
||54.91.125.197^
||94.130.185.237^
||94.130.186.231^
! Source: desidertNO
||collectfasttracks.com^$all,domain=~malware_redirection_trains.*
! Various ex-affiliate links at www•zombooru•com
@@ -596,9 +600,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
@@ -644,7 +645,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||54.210.193.115^
||54.85.113.62^
||[2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]^
! https://github.com/DandelionSprout/adfilt/issues/942
||abedwithdrawalautograph.com^
@@ -1263,24 +1263,16 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||134.209.136.174^
||178.128.142.109^
||62.210.11.203^
||62.210.6.153^
||62.210.7.209^
||62.210.9.92^
! https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/
||new-message.email^
||167.99.249.47^
! https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/
! https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/
! https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/
@@ -1314,13 +1306,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||5.8.34.26^
||5.8.47.3^
||103.224.182.251^
! https://github.com/DandelionSprout/adfilt/issues/193
||holescontracting.com^
||holescontracting.com^$popup
@@ -1333,9 +1321,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||178.162.203.202^
||178.162.203.211^
||178.162.203.226^
@@ -1345,7 +1330,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||85.17.31.122^
||85.17.31.82^
||[2a02:1668:1034::2]^
! https://github.com/DandelionSprout/adfilt/issues/195
||logicalrecord.com^
||logicalrecord.com^$popup
@@ -1358,14 +1342,10 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||108.170.31.123^
||108.170.52.156^
||66.85.156.85^
||66.85.156.86^
! https://github.com/DandelionSprout/adfilt/issues/198
! https://www•bleepingcomputer•com/virus-removal/ (18/06/2021)
||toksearches.xyz^
@@ -1454,13 +1434,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||213.227.145.147^
||213.227.149.216^
||95.168.170.165^
! https://twitter•com/adamziaja/status/1252234957679808513
||wow-robotics.xyz^
||wow-robotics.xyz^$popup
@@ -1529,9 +1505,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||185.158.250.239^
||185.158.250.239^$popup
||192.169.69.25^
@@ -1540,7 +1513,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||212.192.241.72^$popup
||37.0.10.83^
||37.0.10.83^$popup
||secure-0*.ddnss.ch^
||secure-0*.ddnss.ch^$popup
||lucdream.com^
@@ -1646,9 +1618,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||125.44.43.45^
||125.44.43.45^$popup
||182.121.8.240^
@@ -1669,7 +1638,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||190.238.183.5^$popup
||27.220.253.78^
||27.220.253.78^$popup
! https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community
! https://www•joesandbox•com/analysis/486636/0/html#domains
||aieov.com^
@@ -1783,9 +1751,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
@@ -1884,7 +1849,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||219.155.26.50^$popup
||221.208.4.56^
||221.208.4.56^$popup
! https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community
||pcae.de^
! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
@@ -1892,9 +1856,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||117.196.49.21^
||117.196.49.21^$popup
||115.55.54.234^
@@ -1903,7 +1864,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||115.52.17.123^$popup
||182.59.69.21^
||182.59.69.21^$popup
! https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community
||chip-secured-download.de^
||chip-secured-download.de^$popup
@@ -2053,9 +2013,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
@@ -2122,7 +2079,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||61.52.99.109^$popup
||68.197.33.124^
||68.197.33.124^$popup
! https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
||198.23.255.14^
@@ -2144,9 +2100,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||39.65.72.211^
||39.65.72.211^$popup
||42.238.151.197^
@@ -2155,7 +2108,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||27.213.60.53^$popup
||115.56.169.134^
||115.56.169.134^$popup
! https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md
||yasir252.com^
||yasir252.com^$popup
@@ -2209,9 +2161,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||58.249.74.79^
||58.249.74.79^$popup
||27.45.14.109^
@@ -2228,7 +2177,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||163.125.31.46^$popup
||163.179.168.44^
||163.179.168.44^$popup
! https://github.com/uBlockOrigin/uAssets/pull/10647
! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
||money-mod.com^
@@ -2255,9 +2203,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||110.89.59.135^
||110.89.59.135^$popup
||113.116.89.1^
@@ -2280,7 +2225,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||115.194.38.143^$popup
||61.52.79.32^
||61.52.79.32^$popup
! https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
://ups-dk.$denyallow=dk|nu|se|no|fo|gl|ups.com,domain=ups-dk.*
! https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
@@ -2346,9 +2290,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||123.10.225.196^
||123.10.225.196^$popup
||122.192.106.84^
@@ -2365,7 +2306,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||124.163.130.175^$popup
||118.75.87.102^
||118.75.87.102^$popup
! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md
! https://github.com/DevSpen/links/pull/3
! https://bazaar•abuse•ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/
@@ -2474,15 +2414,11 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||15.197.244.48^
||96.47.230.67^
||96.47.230.68^
||96.47.230.69^
||96.47.230.70^
! https://securitytrails•com/list/ns/ns1•fastthinkingdns•com
||highercaptcha-settle.
||highercaptcha-settle.$popup
@@ -2495,8 +2431,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
! https://github.com/AdguardTeam/AdguardFilters/issues/121544
||com/landers/iphone*_spin
! https://github.com/AdguardTeam/AdguardFilters/issues/121772
@@ -2733,8 +2667,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||85.17.31.152^
||85.17.31.152^$popup
||95.211.26.202^
@@ -2775,13 +2707,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||51.91.66.125^
||51.178.76.105^
||147.135.253.55^
! https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade)
! https://github.com/AdguardTeam/AdguardFilters/issues/129414
!+ NOT_OPTIMIZED
@@ -5398,13 +5326,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||44.228.230.225^
||50.112.124.170^
||100.20.104.229^
! Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread
||link.sv^$popup
||4.fo^$popup
@@ -5422,14 +5346,10 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||44.236.213.34^
||52.24.156.12^
||52.25.6.134^
||100.20.13.49^
! https://github.com/AdguardTeam/AdguardFilters/issues/139667
||51.68.87.229^
@@ -5890,8 +5810,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
! https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
://rufus.download.$popup
://virtualbox.download.$popup
@@ -5910,14 +5828,10 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||185.106.94.139^
||45.90.109.196^
||91.229.23.200^
||91.229.23.200^$popup
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872
! https://github.com/AdguardTeam/AdguardFilters/issues/144514
||bonusgift.life^
@@ -6004,16 +5918,12 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||208.88.225.116^
||208.88.225.116^$popup
||208.88.225.117^
||208.88.225.117^$popup
||208.88.225.119^
||208.88.225.119^$popup
! https://github.com/AdguardTeam/AdguardFilters/issues/144823
!+ NOT_OPTIMIZED
://landings.*_slots/?partner=
@@ -6068,9 +5978,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||108.61.242.65^
||108.61.242.65^$popup
||146.70.78.43^
@@ -6081,7 +5988,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||45.150.108.213^$popup
||92.204.160.240^
||92.204.160.240^$popup
! https://github.com/AdguardTeam/AdguardFilters/issues/148560
/land/*&afftrack=,domain=~likely_a_malware_redirection.*
! Comments on Slack
@@ -6500,9 +6406,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||185.246.188.124^
||185.246.188.124^$popup
||185.246.188.125^
@@ -6513,7 +6416,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||194.63.143.61^$popup
||194.63.143.96^
||194.63.143.96^$popup
! https://github.com/AdguardTeam/AdguardFilters/issues/152945
&trafficsource=Kadam&
@@ -6709,9 +6611,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||139.45.197.167^
||139.45.197.167^$popup
||139.45.197.245^
@@ -6732,7 +6631,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||192.243.58.124^$popup
||192.243.58.125^
||192.243.58.125^$popup
||[2a02:b48:207:1::2]^
||[2a02:b48:207:1::2]^$popup
||[2a02:b48:207:1::3]^
@@ -6749,8 +6647,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
! https://github.com/AdguardTeam/AdguardFilters/issues/157308
||dest.co.in^
||dest.co.in^$popup
@@ -7091,16 +6987,12 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||5.45.123.44^
||5.45.123.44^$popup
||69.16.230.226^
||69.16.230.226^$popup
||208.91.196.46^
||208.91.196.46^$popup
/page/bouncy.php?
/page/bouncy.php?$popup
! https://github.com/AdguardTeam/AdguardFilters/issues/158316
@@ -8166,9 +8058,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||172.240.108.68^
||172.240.108.68^$popup
||172.240.108.76^
@@ -8189,7 +8078,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||192.243.61.225^$popup
||192.243.61.227^
||192.243.61.227^$popup
||abjectpreludeparity.com^
||abjectpreludeparity.com^$popup
||ablecheap.com^
@@ -9471,16 +9359,12 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||185.149.120.161^
||185.149.120.161^$popup
||185.149.120.163^
||185.149.120.163^$popup
||185.149.120.175^
||185.149.120.175^$popup
! https://github.com/AdguardTeam/AdguardFilters/issues/184671
||astrarestaurant.com^
||astrarestaurant.com^$popup
@@ -9578,9 +9462,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||45.202.32.3^
||45.202.32.3^$popup
@@ -9619,7 +9500,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||208.91.189.203^
||208.91.189.203^$popup
://193.143.1.*
! https://github.com/AdguardTeam/AdguardFilters/issues/189905
@@ -18212,7 +18092,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||yourbestonlinefriend.vip^$popup
||yoursweetflirt.online^
||yoursweetflirt.online^$popup
||3.220.51.12^
||3.220.51.12^$popup
||44.223.210.42^
@@ -18246,9 +18125,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
! https://github.com/AdguardTeam/AdguardFilters/issues/202010
||adblockermax.com/land,popup
! Various other reports
@@ -18335,8 +18211,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"]
||abcradilytor.com^
||abcradilytor.com^$popup
||abmagbychan.com^
@@ -19100,7 +18974,6 @@ http://secured21.*.com/|$popup
||whatstapps.com^$popup
||whetcsapp.com^
||whetcsapp.com^$popup
||149.30.232.154^
||149.30.232.154^$popup
||154.204.32.99^
@@ -19113,9 +18986,6 @@ http://secured21.*.com/|$popup
! https://github.com/DandelionSprout/adfilt/issues/1164
||device-checking.com^
||device-checking.com^$popup
@@ -19581,7 +19451,6 @@ http://secured21.*.com/|$popup
||workspace-drive.com^$popup
||your-package-delivery.com^
||your-package-delivery.com^$popup
||158.94.209.86^
||158.94.209.86^$popup
||158.94.209.87^
@@ -19600,9 +19469,6 @@ http://secured21.*.com/|$popup
! https://urlscan.io/result/019a4ffd-885c-7545-816a-3c121d8bdc0d/ (Early November 2025)
/linkresolver.html?url=*p0
! https://github.com/DandelionSprout/adfilt/issues/1197
@@ -20254,7 +20120,6 @@ http://secured21.*.com/|$popup
||trpttgovqs.icu^$popup
||very-wonderful.shop^
||very-wonderful.shop^$popup
||43.157.122.86^
||43.157.122.86^$popup
||43.157.46.83^
@@ -20263,11 +20128,8 @@ http://secured21.*.com/|$popup
||43.164.196.209^$popup
||88.255.216.16^
||88.255.216.16^$popup
/((https?|tcp|iquic)://)?204\.194\.54\.\d{1,3}([:/].*)?$/
/((https?|tcp|iquic)://)?204\.194\.54\.\d{1,3}([:/].*)?$/$popup
/^((https?|tcp|iquic)://)?204\.194\.54\.\d{1,3}([:/].*)?$/
/^((https?|tcp|iquic)://)?204\.194\.54\.\d{1,3}([:/].*)?$/$popup
@@ -20748,7 +20610,6 @@ http://secured21.*.com/|$popup
||z-zip.org^$popup
||zaxbyfeedback.com^
||zaxbyfeedback.com^$popup
://15.204.140.239^
://15.204.140.239^$popup
://15.204.160.216^
@@ -20761,9 +20622,6 @@ http://secured21.*.com/|$popup
! According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its
||posthog.$all,domain=gov|loveisaskill.cloudflareaccess.com
! https://github.com/AdguardTeam/AdguardFilters/issues/238795
@@ -20801,6 +20659,10 @@ http://secured21.*.com/|$popup
||13.140.171.211^$popup
! https://github.com/DandelionSprout/adfilt/issues/1296
||koboldcpp.com^
||koboldcpp.com^$popup
! ——— Standard malware that I stumbled upon on my own ———
! http://www•toorgle•net/results•php?q=fetishkitsch&security=666
@@ -21361,9 +21223,6 @@ apkfab.com##.tip-extension
||51.91.211.94^
||51.91.211.94^$popup
||162.19.71.16^
@@ -21374,7 +21233,6 @@ apkfab.com##.tip-extension
||54.37.5.34^$popup
||54.36.118.105^
||54.36.118.105^$popup
! Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt
||highlandnews.com^
||highlandnews.com^$popup
@@ -21443,9 +21301,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||45.33.2.79^
||45.33.18.44^
||45.33.20.235^
@@ -21458,7 +21313,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||96.126.123.244^
||173.255.194.134^
||198.58.118.167^
! https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/
||777offers.net^
||777offers.net^$popup
@@ -21566,9 +21420,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||34.117.199.78^
||34.117.199.78^$popup
||94.237.103.119^
@@ -21581,7 +21432,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||94.237.99.118^$popup
||139.45.197.249^
||139.45.197.249^$popup
! https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide
||anahitagirted.uno^
||anahitagirted.uno^$popup
@@ -21890,8 +21740,6 @@ www.tumblr.com#?#div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a
||sites.google.com/view/*wincashapp^
||iuxxx.com^
||iuxxx.com^$popup
@@ -23542,7 +23390,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
||85.159.213.158^$popup
! Seemingly mass-generated fake "marketing company" sites that seem to serve no visible purpose (12/05/2025)
||23.170.252.196^
||23.170.252.196^$popup
||23.229.68.43^
@@ -23812,9 +23659,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
@@ -23862,7 +23706,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
! gelbo²ruCOM
||debateobsoletesimply.com^
||debateobsoletesimply.com^$popup
||172.240.41.33^
||172.240.41.33^$popup
||172.240.41.65^
@@ -23875,9 +23718,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
! bdsmx-pornCOM
||6traitors.com^
||6traitors.com^$popup
@@ -23999,7 +23839,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
||trankosty.shop^$popup
||tubecup.org^
||tubecup.org^$popup
||62.122.168.42^
||62.122.168.42^$popup
||109.206.163.112^
@@ -24045,9 +23884,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
||biuqbiu.com^
||biuqbiu.com^$popup
||bmgmb.com^
@@ -24069,8 +23905,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
||03122e72f0.com^
||03122e72f0.com^$popup
||0551acf6ed.com^
@@ -24196,8 +24030,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
||a3ion.com^
||a3ion.com^$popup
||advertrek.com^
@@ -24664,7 +24496,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
||tur-ptt-posen.$popup
||ukpayment.xin^
||ukpayment.xin^$popup
||43.100.125.58^
||43.100.125.58^$popup
||43.159.140.215^
@@ -24686,9 +24517,6 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h
! icepornCOM
/adx_iframe_$third-party
! https://www•drvhub•net/devices/network/asix/ax88178a-usb-2-0-to-gigabit-ethernet-adapter
@@ -25139,7 +24967,6 @@ drvhub.net##.driver-item__install
||trksp2.com^$popup
||trksp3.com^
||trksp3.com^$popup
||157.90.33.79^
||157.90.33.79^$popup
||173.239.53.20^
@@ -25185,9 +25012,6 @@ drvhub.net##.driver-item__install
! https://github.com/iam-py-test/my_filters_001/issues/135
||aipredictdeathcalculator.com^
||deathcalculator.ai^
@@ -25350,8 +25174,6 @@ drvhub.net##.driver-item__install
||smorgasbordet.com^
||smorgasbordet.com^$popup
||xdelta.org^
||23.48.203.140^
||3.33.130.190^
||[2a02:26f0:1700:11::b856:6790]^
/^(.*://)?204\.11\.56\.\d{1,3}(/.*)?$/
@@ -25362,10 +25184,6 @@ drvhub.net##.driver-item__install
! submitted via email
! https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/
||grokvarum.com^
@@ -25632,7 +25450,6 @@ drvhub.net##.driver-item__install
||katukaposole.com^$popup
||fleecykobird.com^
||fleecykobird.com^$popup
||151.243.18.53^
||151.243.18.53^$popup
||185.100.157.222^
@@ -25660,9 +25477,6 @@ drvhub.net##.driver-item__install
! Researching fonts for Taiwanese kana (19/06/2026)
||mojikyo.org^
||mojikyo.org^$popup
@@ -25670,7 +25484,6 @@ drvhub.net##.driver-item__install
||trekpeak.site^$popup
||upperch.site^
||upperch.site^$popup
://172.232.7.47^
://172.232.7.47^$popup
://172.234.216.100^
@@ -25689,9 +25502,6 @@ drvhub.net##.driver-item__install
! https://github.com/DandelionSprout/adfilt/issues/1275
||tgdrive.app^
||tgdrive.app^$popup
@@ -25980,16 +25790,12 @@ drvhub.net##.driver-item__install
||yolkclknu.com^$popup
||yolkdirxl.com^
||yolkdirxl.com^$popup
||103.67.200.64^
||103.67.200.64^$popup
||[2a00:8860:10d:1::2:b01]^
||[2a00:8860:10d:1::2:b01]^$popup
! Extreme amounts of PUP to a comical extent
||driverpack.io^$domain=~has_extreme_amounts_of_pup_in_it.*
! https://github.com/DandelionSprout/adfilt/issues/1124
@@ -26772,7 +26578,6 @@ www.google.com,ipv6.google.com,google.ac,google.ad,google.ae,google.af,google.ag
||yellowdragon.com^
||yellowdragon.com^$popup
! Parking services' IP addresses
||13.248.148.254^
||13.248.148.254^$popup
||185.53.177.50^
@@ -26806,9 +26611,6 @@ www.google.com,ipv6.google.com,google.ac,google.ad,google.ae,google.af,google.ag
! Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO
.to/popconsole.php|
Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt
+12 -218
View File
File diff suppressed because it is too large Load Diff
Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt
+10 -3
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22)
! Version: 19September2026v1
! Version: 04October2026v1
! Expires: 1 day
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted.
@@ -164,6 +164,12 @@
199.59.243.222
213.227.149.208
213.227.149.211
||redddit.com^
||redit.com^
||reditt.com^
||reddtt.com^
||reddtit.com^
||mirappe.com^
! ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ———
||ortrun-adi.com^
||paramonos-oha.com^
@@ -10007,7 +10013,7 @@ http://secured21.*.com/|
43.157.46.83
43.164.196.209
88.255.216.16
/((https?|tcp|iquic)://)?204\.194\.54\.\d{1,3}([:/].*)?$/
/^((https?|tcp|iquic)://)?204\.194\.54\.\d{1,3}([:/].*)?$/
! https://new•reddit•com/r/softwaregore/comments/1spebzh/i_broke_the_antivirus_ad/ (19/04/2026)
||adtng.com^
||anonymity-guardstation.com^
@@ -10268,6 +10274,8 @@ http://secured21.*.com/|
||trustus-eu.uk^
103.29.182.53
13.140.171.211
! https://github.com/DandelionSprout/adfilt/issues/1296
||koboldcpp.com^
! ——— Standard malware that I stumbled upon on my own ———
! http://www•toorgle•net/results•php?q=fetishkitsch&security=666
||downloadprovider.me^
@@ -12484,7 +12492,6 @@ http://secured21.*.com/|
||quickfindresults.com^
||smorgasbordet.com^
||xdelta.org^
23.48.203.140
3.33.130.190
2a02:26f0:1700:11::b856:6790
/^(.*://)?204\.11\.56\.\d{1,3}(/.*)?$/
Alternate versions Anti-Malware List/AntiMalwareDomains.txt
+10 -215
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 19September2026v1
# Version: 04October2026v1
# Expires: 1 day
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway.
@@ -317,9 +317,6 @@ githubt.com
173.208.96.42
173.208.96.43
173.208.96.44
@@ -328,7 +325,12 @@ githubt.com
199.59.243.222
213.227.149.208
213.227.149.211
redddit.com
redit.com
reditt.com
reddtt.com
reddtit.com
mirappe.com
# ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ———
ortrun-adi.com
@@ -347,9 +349,6 @@ roamingclicks.com
35.168.147.213
35.175.38.64
144.76.0.242
@@ -363,7 +362,6 @@ roamingclicks.com
54.91.125.197
94.130.185.237
94.130.186.231
# Source: desidertNO
collectfasttracks.com
# Various ex-affiliate links at www•zombooru•com
@@ -431,9 +429,6 @@ roksit.net
@@ -461,7 +456,6 @@ roksit.net
54.210.193.115
54.85.113.62
[2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]
# https://github.com/DandelionSprout/adfilt/issues/942
abedwithdrawalautograph.com
@@ -781,24 +775,16 @@ whiteclick.biz
134.209.136.174
178.128.142.109
62.210.11.203
62.210.6.153
62.210.7.209
62.210.9.92
# https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/
new-message.email
167.99.249.47
# https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/
# https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/
# https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/
@@ -825,13 +811,9 @@ iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com
5.8.34.26
5.8.47.3
103.224.182.251
# https://github.com/DandelionSprout/adfilt/issues/193
holescontracting.com
@@ -843,9 +825,6 @@ holescontracting.com
178.162.203.202
178.162.203.211
178.162.203.226
@@ -855,7 +834,6 @@ holescontracting.com
85.17.31.122
85.17.31.82
[2a02:1668:1034::2]
# https://github.com/DandelionSprout/adfilt/issues/195
logicalrecord.com
# https://github.com/DandelionSprout/adfilt/issues/196
@@ -865,14 +843,10 @@ emiratenbduae.com
108.170.31.123
108.170.52.156
66.85.156.85
66.85.156.86
# https://github.com/DandelionSprout/adfilt/issues/198
# https://www•bleepingcomputer•com/virus-removal/ (18/06/2021)
toksearches.xyz
@@ -920,13 +894,9 @@ watch-this.live
213.227.145.147
213.227.149.216
95.168.170.165
# https://twitter•com/adamziaja/status/1252234957679808513
wow-robotics.xyz
# https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html
@@ -979,14 +949,10 @@ onesafesoftware.com
185.158.250.239
192.169.69.25
212.192.241.72
37.0.10.83
lucdream.com
pesoaniz.com
# https://github.com/DandelionSprout/adfilt/pull/266
@@ -1068,9 +1034,6 @@ kiff.tech
125.44.43.45
182.121.8.240
42.235.183.74
@@ -1081,7 +1044,6 @@ kiff.tech
188.120.50.98
190.238.183.5
27.220.253.78
# https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community
# https://www•joesandbox•com/analysis/486636/0/html#domains
aieov.com
@@ -1174,9 +1136,6 @@ cd.org
@@ -1228,7 +1187,6 @@ cd.org
219.155.105.98
219.155.26.50
221.208.4.56
# https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community
pcae.de
# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
@@ -1236,14 +1194,10 @@ pcae.de
117.196.49.21
115.55.54.234
115.52.17.123
182.59.69.21
# https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community
chip-secured-download.de
# https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb
@@ -1357,9 +1311,6 @@ mediadlvr.com
@@ -1395,7 +1346,6 @@ mediadlvr.com
45.5.209.75
61.52.99.109
68.197.33.124
# https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
198.23.255.14
@@ -1413,14 +1363,10 @@ securefirst.us-east-1.linodeobjects.com
39.65.72.211
42.238.151.197
27.213.60.53
115.56.169.134
# https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md
yasir252.com
safelink.kadal.club
@@ -1464,9 +1410,6 @@ mygametoa.com
58.249.74.79
27.45.14.109
27.40.101.191
@@ -1475,7 +1418,6 @@ mygametoa.com
115.204.119.237
163.125.31.46
163.179.168.44
# https://github.com/uBlockOrigin/uAssets/pull/10647
# https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
money-mod.com
@@ -1499,9 +1441,6 @@ bestlifeoffer20.com
110.89.59.135
113.116.89.1
119.183.146.191
@@ -1513,7 +1452,6 @@ bestlifeoffer20.com
171.112.177.90
115.194.38.143
61.52.79.32
# https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
# https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
@@ -1563,9 +1501,6 @@ haxpc.net
123.10.225.196
122.192.106.84
172.88.199.9
@@ -1574,7 +1509,6 @@ haxpc.net
27.206.181.208
124.163.130.175
118.75.87.102
# https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md
# https://github.com/DevSpen/links/pull/3
# https://bazaar•abuse•ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/
@@ -1654,15 +1588,11 @@ cpmverdirect.com
15.197.244.48
96.47.230.67
96.47.230.68
96.47.230.69
96.47.230.70
# https://securitytrails•com/list/ns/ns1•fastthinkingdns•com
highercaptcha-settle.com
highercaptchasettle.com
@@ -1670,8 +1600,6 @@ top-captcharesolver.com
# https://github.com/AdguardTeam/AdguardFilters/issues/121544
# https://github.com/AdguardTeam/AdguardFilters/issues/121772
@@ -1799,8 +1727,6 @@ z-prize.icu
85.17.31.152
95.211.26.202
# https://kommunikasjon•ntb•no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583
@@ -1835,13 +1761,9 @@ motherpipe.net
51.91.66.125
51.178.76.105
147.135.253.55
# https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade)
# https://github.com/AdguardTeam/AdguardFilters/issues/129414
@@ -3169,13 +3091,9 @@ uxobx.xyz
44.228.230.225
50.112.124.170
100.20.104.229
# Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread
link.sv
4.fo
@@ -3189,14 +3107,10 @@ sapino.net
44.236.213.34
52.24.156.12
52.25.6.134
100.20.13.49
# https://github.com/AdguardTeam/AdguardFilters/issues/139667
51.68.87.229
@@ -3425,8 +3339,6 @@ zapatillasmcqueen.com
# https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
@@ -3441,13 +3353,9 @@ webull-download.com
185.106.94.139
45.90.109.196
91.229.23.200
# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872
# https://github.com/AdguardTeam/AdguardFilters/issues/144514
bonusgift.life
@@ -3498,13 +3406,9 @@ wooden-comfort.com
208.88.225.116
208.88.225.117
208.88.225.119
# https://github.com/AdguardTeam/AdguardFilters/issues/144823
@@ -3541,15 +3445,11 @@ office-view.com
108.61.242.65
146.70.78.43
87.120.254.39
45.150.108.213
92.204.160.240
# https://github.com/AdguardTeam/AdguardFilters/issues/148560
# Comments on Slack
@@ -3764,15 +3664,11 @@ zirze151uk5d.com
185.246.188.124
185.246.188.125
194.63.140.103
194.63.143.61
194.63.143.96
# https://github.com/AdguardTeam/AdguardFilters/issues/152945
@@ -3882,9 +3778,6 @@ zuhrzf.com
139.45.197.167
139.45.197.245
159.223.137.164
@@ -3895,7 +3788,6 @@ zuhrzf.com
192.243.58.123
192.243.58.124
192.243.58.125
[2a02:b48:207:1::2]
[2a02:b48:207:1::3]
[2a02:b48:207:1::6]
@@ -3907,8 +3799,6 @@ zuhrzf.com
# https://github.com/AdguardTeam/AdguardFilters/issues/157308
dest.co.in
dkeie.co.in
@@ -4082,14 +3972,10 @@ ztomy.com
5.45.123.44
69.16.230.226
208.91.196.46
# https://github.com/AdguardTeam/AdguardFilters/issues/158316
abberantbeefy.com
abominableexhibition.com
@@ -4651,9 +4537,6 @@ avito.avito.www.avito.com
172.240.108.68
172.240.108.76
172.240.108.84
@@ -4664,7 +4547,6 @@ avito.avito.www.avito.com
192.243.59.20
192.243.61.225
192.243.61.227
abjectpreludeparity.com
ablecheap.com
abroadwas.com
@@ -5309,13 +5191,9 @@ zymstr.com
185.149.120.161
185.149.120.163
185.149.120.175
# https://github.com/AdguardTeam/AdguardFilters/issues/184671
astrarestaurant.com
bamasolutions.com
@@ -5374,9 +5252,6 @@ vrsecurego.com
45.202.32.3
45.8.92.138
@@ -5399,7 +5274,6 @@ vrsecurego.com
# https://github.com/AdguardTeam/AdguardFilters/issues/189905
# https://github.com/AdguardTeam/AdguardFilters/issues/196657
@@ -9711,7 +9585,6 @@ xn-9dbq2a.com
xynro.com
yourbestonlinefriend.vip
yoursweetflirt.online
3.220.51.12
44.223.210.42
52.9.43.57
@@ -9734,9 +9607,6 @@ yoursweetflirt.online
# https://github.com/AdguardTeam/AdguardFilters/issues/202010
# Various other reports
@@ -9783,8 +9653,6 @@ zmeso.com
abcradilytor.com
abmagbychan.com
agatorkoaltor.com
@@ -10172,7 +10040,6 @@ whatcsaapp.com
whatcsappwap.com
whatstapps.com
whetcsapp.com
149.30.232.154
154.204.32.99
156.245.23.49
@@ -10181,9 +10048,6 @@ whetcsapp.com
# https://github.com/DandelionSprout/adfilt/issues/1164
device-checking.com
device-cleanup.com
@@ -10422,7 +10286,6 @@ voyage-avantages.org
watch-user-help.com
workspace-drive.com
your-package-delivery.com
158.94.209.86
158.94.209.87
158.94.209.88
@@ -10435,9 +10298,6 @@ your-package-delivery.com
# https://urlscan.io/result/019a4ffd-885c-7545-816a-3c121d8bdc0d/ (Early November 2025)
# https://github.com/DandelionSprout/adfilt/issues/1197
@@ -10758,7 +10618,6 @@ tigosv.mrbonus.com
tigosv.toythieves.com
trpttgovqs.icu
very-wonderful.shop
43.157.122.86
43.157.46.83
43.164.196.209
@@ -10769,9 +10628,6 @@ very-wonderful.shop
# https://new•reddit•com/r/softwaregore/comments/1spebzh/i_broke_the_antivirus_ad/ (19/04/2026)
adtng.com
anonymity-guardstation.com
@@ -11010,7 +10866,6 @@ websysguard.com
webtracksecurity.com
z-zip.org
zaxbyfeedback.com
15.204.140.239
15.204.160.216
://[2604:2dc0:100:4ed8::]
@@ -11019,9 +10874,6 @@ zaxbyfeedback.com
# According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its
# https://github.com/AdguardTeam/AdguardFilters/issues/238795
@@ -11043,6 +10895,9 @@ trustus-eu.uk
13.140.171.211
# https://github.com/DandelionSprout/adfilt/issues/1296
koboldcpp.com
# ——— Standard malware that I stumbled upon on my own ———
# http://www•toorgle•net/results•php?q=fetishkitsch&security=666
@@ -11366,15 +11221,11 @@ gacorhub.com
51.91.211.94
162.19.71.16
146.59.240.191
54.37.5.34
54.36.118.105
# Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt
highlandnews.com
pcbasicstrength.com
@@ -11426,9 +11277,6 @@ wh40kart.im
45.33.2.79
45.33.18.44
45.33.20.235
@@ -11441,7 +11289,6 @@ wh40kart.im
96.126.123.244
173.255.194.134
198.58.118.167
# https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/
777offers.net
99linksfortc.com
@@ -11500,16 +11347,12 @@ ym3trk.com
34.117.199.78
94.237.103.119
94.237.84.54
94.237.93.242
94.237.99.118
139.45.197.249
# https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide
anahitagirted.uno
arenitezill.com
@@ -11683,8 +11526,6 @@ vgadeal.com
iuxxx.com
tuusi.com
sexcham.com
@@ -12522,7 +12363,6 @@ xss.my.id
85.159.213.158
# Seemingly mass-generated fake "marketing company" sites that seem to serve no visible purpose (12/05/2025)
23.170.252.196
23.229.68.43
23.229.68.44
@@ -12701,9 +12541,6 @@ xss.my.id
@@ -12741,7 +12578,6 @@ awecrptjmp.com
24hdeepnude.com
# gelbo²ruCOM
debateobsoletesimply.com
172.240.41.33
172.240.41.65
172.240.41.97
@@ -12750,9 +12586,6 @@ debateobsoletesimply.com
# bdsmx-pornCOM
6traitors.com
baimgfroggd.site
@@ -12814,7 +12647,6 @@ slerjinxme.shop
storewbhjkk.shop
trankosty.shop
tubecup.org
62.122.168.42
109.206.163.112
109.206.163.116
@@ -12845,9 +12677,6 @@ tubecup.org
biuqbiu.com
bmgmb.com
onclckbn.com
@@ -12860,8 +12689,6 @@ zivroq.com
03122e72f0.com
0551acf6ed.com
0c5351790d.com
@@ -12926,8 +12753,6 @@ statelinear.com
a3ion.com
advertrek.com
cant3am.com
@@ -13164,7 +12989,6 @@ trackingdeliveries.today
trackingparcel.today
tur-ptt-posen.com
ukpayment.xin
43.100.125.58
43.159.140.215
43.162.119.45
@@ -13179,9 +13003,6 @@ ukpayment.xin
# icepornCOM
# https://www•drvhub•net/devices/network/asix/ax88178a-usb-2-0-to-gigabit-ethernet-adapter
@@ -13419,7 +13240,6 @@ trk-pu.com
trksp1.com
trksp2.com
trksp3.com
157.90.33.79
173.239.53.20
178.63.248.53
@@ -13450,9 +13270,6 @@ trksp3.com
# https://github.com/iam-py-test/my_filters_001/issues/135
aipredictdeathcalculator.com
deathcalculator.ai
@@ -13540,8 +13357,6 @@ michaelrinderle.com
quickfindresults.com
smorgasbordet.com
xdelta.org
23.48.203.140
3.33.130.190
[2a02:26f0:1700:11::b856:6790]
@@ -13550,10 +13365,6 @@ xdelta.org
# submitted via email
# https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/
grokvarum.com
@@ -13691,7 +13502,6 @@ techrxv.com
katukaposole.com
fleecykobird.com
151.243.18.53
185.100.157.222
185.107.74.103
@@ -13710,14 +13520,10 @@ fleecykobird.com
# Researching fonts for Taiwanese kana (19/06/2026)
mojikyo.org
trekpeak.site
upperch.site
172.232.7.47
172.234.216.100
172.237.146.46
@@ -13730,9 +13536,6 @@ upperch.site
# https://github.com/DandelionSprout/adfilt/issues/1275
tgdrive.app
tg-drive-bx4f.onrender.com
@@ -13879,14 +13682,10 @@ xmlppc.net
yeesshh.com
yolkclknu.com
yolkdirxl.com
103.67.200.64
[2a00:8860:10d:1::2:b01]
# Extreme amounts of PUP to a comical extent
driverpack.io
# https://github.com/DandelionSprout/adfilt/issues/1124
@@ -14219,7 +14018,6 @@ wjh.com
woodburn.com.au
yellowdragon.com
# Parking services' IP addresses
13.248.148.254
185.53.177.50
185.53.177.51
@@ -14242,9 +14040,6 @@ yellowdragon.com
# Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO
Alternate versions Anti-Malware List/AntiMalwareHosts.txt
+10 -215
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
# Version: 19September2026v1
# Version: 04October2026v1
# Expires: 1 day
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# Users of Pi-Hole FTL 5.22 and later can consider switching to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, due to an unconfirmed belief of mine that it allows better wildcarding than the Hosts and raw-domains versions.
@@ -268,9 +268,6 @@
127.0.0.1 173.208.96.42
127.0.0.1 173.208.96.43
127.0.0.1 173.208.96.44
@@ -279,7 +276,12 @@
127.0.0.1 199.59.243.222
127.0.0.1 213.227.149.208
127.0.0.1 213.227.149.211
127.0.0.1 redddit.com
127.0.0.1 redit.com
127.0.0.1 reditt.com
127.0.0.1 reddtt.com
127.0.0.1 reddtit.com
127.0.0.1 mirappe.com
# ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ———
127.0.0.1 ortrun-adi.com
@@ -298,9 +300,6 @@
127.0.0.1 35.168.147.213
127.0.0.1 35.175.38.64
127.0.0.1 144.76.0.242
@@ -314,7 +313,6 @@
127.0.0.1 54.91.125.197
127.0.0.1 94.130.185.237
127.0.0.1 94.130.186.231
# Source: desidertNO
127.0.0.1 collectfasttracks.com
# Various ex-affiliate links at www•zombooru•com
@@ -382,9 +380,6 @@
@@ -412,7 +407,6 @@
127.0.0.1 54.210.193.115
127.0.0.1 54.85.113.62
# https://github.com/DandelionSprout/adfilt/issues/942
127.0.0.1 abedwithdrawalautograph.com
@@ -732,24 +726,16 @@
127.0.0.1 134.209.136.174
127.0.0.1 178.128.142.109
127.0.0.1 62.210.11.203
127.0.0.1 62.210.6.153
127.0.0.1 62.210.7.209
127.0.0.1 62.210.9.92
# https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/
127.0.0.1 new-message.email
127.0.0.1 167.99.249.47
# https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/
# https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/
# https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/
@@ -776,13 +762,9 @@
127.0.0.1 5.8.34.26
127.0.0.1 5.8.47.3
127.0.0.1 103.224.182.251
# https://github.com/DandelionSprout/adfilt/issues/193
127.0.0.1 holescontracting.com
@@ -794,9 +776,6 @@
127.0.0.1 178.162.203.202
127.0.0.1 178.162.203.211
127.0.0.1 178.162.203.226
@@ -806,7 +785,6 @@
127.0.0.1 85.17.31.122
127.0.0.1 85.17.31.82
# https://github.com/DandelionSprout/adfilt/issues/195
127.0.0.1 logicalrecord.com
# https://github.com/DandelionSprout/adfilt/issues/196
@@ -816,14 +794,10 @@
127.0.0.1 108.170.31.123
127.0.0.1 108.170.52.156
127.0.0.1 66.85.156.85
127.0.0.1 66.85.156.86
# https://github.com/DandelionSprout/adfilt/issues/198
# https://www•bleepingcomputer•com/virus-removal/ (18/06/2021)
127.0.0.1 toksearches.xyz
@@ -871,13 +845,9 @@
127.0.0.1 213.227.145.147
127.0.0.1 213.227.149.216
127.0.0.1 95.168.170.165
# https://twitter•com/adamziaja/status/1252234957679808513
127.0.0.1 wow-robotics.xyz
# https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html
@@ -930,14 +900,10 @@
127.0.0.1 185.158.250.239
127.0.0.1 192.169.69.25
127.0.0.1 212.192.241.72
127.0.0.1 37.0.10.83
127.0.0.1 lucdream.com
127.0.0.1 pesoaniz.com
# https://github.com/DandelionSprout/adfilt/pull/266
@@ -1019,9 +985,6 @@
127.0.0.1 125.44.43.45
127.0.0.1 182.121.8.240
127.0.0.1 42.235.183.74
@@ -1032,7 +995,6 @@
127.0.0.1 188.120.50.98
127.0.0.1 190.238.183.5
127.0.0.1 27.220.253.78
# https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community
# https://www•joesandbox•com/analysis/486636/0/html#domains
127.0.0.1 aieov.com
@@ -1125,9 +1087,6 @@
@@ -1179,7 +1138,6 @@
127.0.0.1 219.155.105.98
127.0.0.1 219.155.26.50
127.0.0.1 221.208.4.56
# https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community
127.0.0.1 pcae.de
# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
@@ -1187,14 +1145,10 @@
127.0.0.1 117.196.49.21
127.0.0.1 115.55.54.234
127.0.0.1 115.52.17.123
127.0.0.1 182.59.69.21
# https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community
127.0.0.1 chip-secured-download.de
# https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb
@@ -1308,9 +1262,6 @@
@@ -1346,7 +1297,6 @@
127.0.0.1 45.5.209.75
127.0.0.1 61.52.99.109
127.0.0.1 68.197.33.124
# https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
127.0.0.1 198.23.255.14
@@ -1364,14 +1314,10 @@
127.0.0.1 39.65.72.211
127.0.0.1 42.238.151.197
127.0.0.1 27.213.60.53
127.0.0.1 115.56.169.134
# https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md
127.0.0.1 yasir252.com
127.0.0.1 safelink.kadal.club
@@ -1415,9 +1361,6 @@
127.0.0.1 58.249.74.79
127.0.0.1 27.45.14.109
127.0.0.1 27.40.101.191
@@ -1426,7 +1369,6 @@
127.0.0.1 115.204.119.237
127.0.0.1 163.125.31.46
127.0.0.1 163.179.168.44
# https://github.com/uBlockOrigin/uAssets/pull/10647
# https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
127.0.0.1 money-mod.com
@@ -1450,9 +1392,6 @@
127.0.0.1 110.89.59.135
127.0.0.1 113.116.89.1
127.0.0.1 119.183.146.191
@@ -1464,7 +1403,6 @@
127.0.0.1 171.112.177.90
127.0.0.1 115.194.38.143
127.0.0.1 61.52.79.32
# https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
# https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
@@ -1514,9 +1452,6 @@
127.0.0.1 123.10.225.196
127.0.0.1 122.192.106.84
127.0.0.1 172.88.199.9
@@ -1525,7 +1460,6 @@
127.0.0.1 27.206.181.208
127.0.0.1 124.163.130.175
127.0.0.1 118.75.87.102
# https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md
# https://github.com/DevSpen/links/pull/3
# https://bazaar•abuse•ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/
@@ -1605,15 +1539,11 @@
127.0.0.1 15.197.244.48
127.0.0.1 96.47.230.67
127.0.0.1 96.47.230.68
127.0.0.1 96.47.230.69
127.0.0.1 96.47.230.70
# https://securitytrails•com/list/ns/ns1•fastthinkingdns•com
127.0.0.1 highercaptcha-settle.com
127.0.0.1 highercaptchasettle.com
@@ -1621,8 +1551,6 @@
# https://github.com/AdguardTeam/AdguardFilters/issues/121544
# https://github.com/AdguardTeam/AdguardFilters/issues/121772
@@ -1750,8 +1678,6 @@
127.0.0.1 85.17.31.152
127.0.0.1 95.211.26.202
# https://kommunikasjon•ntb•no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583
@@ -1786,13 +1712,9 @@
127.0.0.1 51.91.66.125
127.0.0.1 51.178.76.105
127.0.0.1 147.135.253.55
# https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade)
# https://github.com/AdguardTeam/AdguardFilters/issues/129414
@@ -3120,13 +3042,9 @@
127.0.0.1 44.228.230.225
127.0.0.1 50.112.124.170
127.0.0.1 100.20.104.229
# Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread
127.0.0.1 link.sv
127.0.0.1 4.fo
@@ -3140,14 +3058,10 @@
127.0.0.1 44.236.213.34
127.0.0.1 52.24.156.12
127.0.0.1 52.25.6.134
127.0.0.1 100.20.13.49
# https://github.com/AdguardTeam/AdguardFilters/issues/139667
127.0.0.1 51.68.87.229
@@ -3376,8 +3290,6 @@
# https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
@@ -3392,13 +3304,9 @@
127.0.0.1 185.106.94.139
127.0.0.1 45.90.109.196
127.0.0.1 91.229.23.200
# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872
# https://github.com/AdguardTeam/AdguardFilters/issues/144514
127.0.0.1 bonusgift.life
@@ -3449,13 +3357,9 @@
127.0.0.1 208.88.225.116
127.0.0.1 208.88.225.117
127.0.0.1 208.88.225.119
# https://github.com/AdguardTeam/AdguardFilters/issues/144823
@@ -3492,15 +3396,11 @@
127.0.0.1 108.61.242.65
127.0.0.1 146.70.78.43
127.0.0.1 87.120.254.39
127.0.0.1 45.150.108.213
127.0.0.1 92.204.160.240
# https://github.com/AdguardTeam/AdguardFilters/issues/148560
# Comments on Slack
@@ -3715,15 +3615,11 @@
127.0.0.1 185.246.188.124
127.0.0.1 185.246.188.125
127.0.0.1 194.63.140.103
127.0.0.1 194.63.143.61
127.0.0.1 194.63.143.96
# https://github.com/AdguardTeam/AdguardFilters/issues/152945
@@ -3833,9 +3729,6 @@
127.0.0.1 139.45.197.167
127.0.0.1 139.45.197.245
127.0.0.1 159.223.137.164
@@ -3857,9 +3750,6 @@
# https://github.com/AdguardTeam/AdguardFilters/issues/157308
127.0.0.1 dest.co.in
127.0.0.1 dkeie.co.in
@@ -4033,14 +3923,10 @@
127.0.0.1 5.45.123.44
127.0.0.1 69.16.230.226
127.0.0.1 208.91.196.46
# https://github.com/AdguardTeam/AdguardFilters/issues/158316
127.0.0.1 abberantbeefy.com
127.0.0.1 abominableexhibition.com
@@ -4602,9 +4488,6 @@
127.0.0.1 172.240.108.68
127.0.0.1 172.240.108.76
127.0.0.1 172.240.108.84
@@ -4615,7 +4498,6 @@
127.0.0.1 192.243.59.20
127.0.0.1 192.243.61.225
127.0.0.1 192.243.61.227
127.0.0.1 abjectpreludeparity.com
127.0.0.1 ablecheap.com
127.0.0.1 abroadwas.com
@@ -5260,13 +5142,9 @@
127.0.0.1 185.149.120.161
127.0.0.1 185.149.120.163
127.0.0.1 185.149.120.175
# https://github.com/AdguardTeam/AdguardFilters/issues/184671
127.0.0.1 astrarestaurant.com
127.0.0.1 bamasolutions.com
@@ -5325,9 +5203,6 @@
127.0.0.1 45.202.32.3
127.0.0.1 45.8.92.138
@@ -5350,7 +5225,6 @@
# https://github.com/AdguardTeam/AdguardFilters/issues/189905
# https://github.com/AdguardTeam/AdguardFilters/issues/196657
@@ -9662,7 +9536,6 @@
127.0.0.1 xynro.com
127.0.0.1 yourbestonlinefriend.vip
127.0.0.1 yoursweetflirt.online
127.0.0.1 3.220.51.12
127.0.0.1 44.223.210.42
127.0.0.1 52.9.43.57
@@ -9685,9 +9558,6 @@
# https://github.com/AdguardTeam/AdguardFilters/issues/202010
# Various other reports
@@ -9734,8 +9604,6 @@
127.0.0.1 abcradilytor.com
127.0.0.1 abmagbychan.com
127.0.0.1 agatorkoaltor.com
@@ -10123,7 +9991,6 @@
127.0.0.1 whatcsappwap.com
127.0.0.1 whatstapps.com
127.0.0.1 whetcsapp.com
127.0.0.1 149.30.232.154
127.0.0.1 154.204.32.99
127.0.0.1 156.245.23.49
@@ -10132,9 +9999,6 @@
# https://github.com/DandelionSprout/adfilt/issues/1164
127.0.0.1 device-checking.com
127.0.0.1 device-cleanup.com
@@ -10373,7 +10237,6 @@
127.0.0.1 watch-user-help.com
127.0.0.1 workspace-drive.com
127.0.0.1 your-package-delivery.com
127.0.0.1 158.94.209.86
127.0.0.1 158.94.209.87
127.0.0.1 158.94.209.88
@@ -10386,9 +10249,6 @@
# https://urlscan.io/result/019a4ffd-885c-7545-816a-3c121d8bdc0d/ (Early November 2025)
# https://github.com/DandelionSprout/adfilt/issues/1197
@@ -10709,7 +10569,6 @@
127.0.0.1 tigosv.toythieves.com
127.0.0.1 trpttgovqs.icu
127.0.0.1 very-wonderful.shop
127.0.0.1 43.157.122.86
127.0.0.1 43.157.46.83
127.0.0.1 43.164.196.209
@@ -10720,9 +10579,6 @@
# https://new•reddit•com/r/softwaregore/comments/1spebzh/i_broke_the_antivirus_ad/ (19/04/2026)
127.0.0.1 adtng.com
127.0.0.1 anonymity-guardstation.com
@@ -10961,7 +10817,6 @@
127.0.0.1 webtracksecurity.com
127.0.0.1 z-zip.org
127.0.0.1 zaxbyfeedback.com
127.0.0.1 15.204.140.239
127.0.0.1 15.204.160.216
://[2604:2dc0:100:4ed8::]
@@ -10970,9 +10825,6 @@
# According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its
# https://github.com/AdguardTeam/AdguardFilters/issues/238795
@@ -10994,6 +10846,9 @@
127.0.0.1 13.140.171.211
# https://github.com/DandelionSprout/adfilt/issues/1296
127.0.0.1 koboldcpp.com
# ——— Standard malware that I stumbled upon on my own ———
# http://www•toorgle•net/results•php?q=fetishkitsch&security=666
@@ -11317,15 +11172,11 @@
127.0.0.1 51.91.211.94
127.0.0.1 162.19.71.16
127.0.0.1 146.59.240.191
127.0.0.1 54.37.5.34
127.0.0.1 54.36.118.105
# Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt
127.0.0.1 highlandnews.com
127.0.0.1 pcbasicstrength.com
@@ -11376,9 +11227,6 @@
127.0.0.1 45.33.2.79
127.0.0.1 45.33.18.44
127.0.0.1 45.33.20.235
@@ -11391,7 +11239,6 @@
127.0.0.1 96.126.123.244
127.0.0.1 173.255.194.134
127.0.0.1 198.58.118.167
# https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/
127.0.0.1 777offers.net
127.0.0.1 99linksfortc.com
@@ -11450,16 +11297,12 @@
127.0.0.1 34.117.199.78
127.0.0.1 94.237.103.119
127.0.0.1 94.237.84.54
127.0.0.1 94.237.93.242
127.0.0.1 94.237.99.118
127.0.0.1 139.45.197.249
# https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide
127.0.0.1 anahitagirted.uno
127.0.0.1 arenitezill.com
@@ -11630,8 +11473,6 @@
127.0.0.1 iuxxx.com
127.0.0.1 tuusi.com
127.0.0.1 sexcham.com
@@ -12469,7 +12310,6 @@
127.0.0.1 85.159.213.158
# Seemingly mass-generated fake "marketing company" sites that seem to serve no visible purpose (12/05/2025)
127.0.0.1 23.170.252.196
127.0.0.1 23.229.68.43
127.0.0.1 23.229.68.44
@@ -12648,9 +12488,6 @@
@@ -12688,7 +12525,6 @@
127.0.0.1 24hdeepnude.com
# gelbo²ruCOM
127.0.0.1 debateobsoletesimply.com
127.0.0.1 172.240.41.33
127.0.0.1 172.240.41.65
127.0.0.1 172.240.41.97
@@ -12697,9 +12533,6 @@
# bdsmx-pornCOM
127.0.0.1 6traitors.com
127.0.0.1 baimgfroggd.site
@@ -12761,7 +12594,6 @@
127.0.0.1 storewbhjkk.shop
127.0.0.1 trankosty.shop
127.0.0.1 tubecup.org
127.0.0.1 62.122.168.42
127.0.0.1 109.206.163.112
127.0.0.1 109.206.163.116
@@ -12788,9 +12620,6 @@
@@ -12807,8 +12636,6 @@
127.0.0.1 03122e72f0.com
127.0.0.1 0551acf6ed.com
127.0.0.1 0c5351790d.com
@@ -12873,8 +12700,6 @@
127.0.0.1 a3ion.com
127.0.0.1 advertrek.com
127.0.0.1 cant3am.com
@@ -13111,7 +12936,6 @@
127.0.0.1 trackingparcel.today
127.0.0.1 tur-ptt-posen.com
127.0.0.1 ukpayment.xin
127.0.0.1 43.100.125.58
127.0.0.1 43.159.140.215
127.0.0.1 43.162.119.45
@@ -13126,9 +12950,6 @@
# icepornCOM
# https://www•drvhub•net/devices/network/asix/ax88178a-usb-2-0-to-gigabit-ethernet-adapter
@@ -13366,7 +13187,6 @@
127.0.0.1 trksp1.com
127.0.0.1 trksp2.com
127.0.0.1 trksp3.com
127.0.0.1 157.90.33.79
127.0.0.1 173.239.53.20
127.0.0.1 178.63.248.53
@@ -13396,9 +13216,6 @@
# https://github.com/iam-py-test/my_filters_001/issues/135
127.0.0.1 aipredictdeathcalculator.com
@@ -13487,8 +13304,6 @@
127.0.0.1 quickfindresults.com
127.0.0.1 smorgasbordet.com
127.0.0.1 xdelta.org
127.0.0.1 23.48.203.140
127.0.0.1 3.33.130.190
@@ -13497,10 +13312,6 @@
# submitted via email
# https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/
127.0.0.1 grokvarum.com
@@ -13638,7 +13449,6 @@
127.0.0.1 katukaposole.com
127.0.0.1 fleecykobird.com
127.0.0.1 151.243.18.53
127.0.0.1 185.100.157.222
127.0.0.1 185.107.74.103
@@ -13657,14 +13467,10 @@
# Researching fonts for Taiwanese kana (19/06/2026)
127.0.0.1 mojikyo.org
127.0.0.1 trekpeak.site
127.0.0.1 upperch.site
127.0.0.1 172.232.7.47
127.0.0.1 172.234.216.100
127.0.0.1 172.237.146.46
@@ -13677,9 +13483,6 @@
# https://github.com/DandelionSprout/adfilt/issues/1275
127.0.0.1 tgdrive.app
127.0.0.1 tg-drive-bx4f.onrender.com
@@ -13826,14 +13629,10 @@
127.0.0.1 yeesshh.com
127.0.0.1 yolkclknu.com
127.0.0.1 yolkdirxl.com
127.0.0.1 103.67.200.64
# Extreme amounts of PUP to a comical extent
127.0.0.1 driverpack.io
# https://github.com/DandelionSprout/adfilt/issues/1124
@@ -14152,7 +13951,6 @@
127.0.0.1 woodburn.com.au
127.0.0.1 yellowdragon.com
# Parking services' IP addresses
127.0.0.1 13.248.148.254
127.0.0.1 185.53.177.50
127.0.0.1 185.53.177.51
@@ -14175,9 +13973,6 @@
# Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO
Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action
+9 -215
View File
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 19September2026v1-Deprecated
# Version: 04October2026v1-Deprecated
# Expires: 1 day
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted.
@@ -210,9 +210,6 @@
.173.208.96.42
.173.208.96.43
.173.208.96.44
@@ -221,7 +218,12 @@
.199.59.243.222
.213.227.149.208
.213.227.149.211
.redddit.com
.redit.com
.reditt.com
.reddtt.com
.reddtit.com
.mirappe.com
{+block}
# ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ———
@@ -241,9 +243,6 @@
.144.76.0.242
.144.76.1.130
.195.201.92.254
@@ -255,7 +254,6 @@
.54.91.125.197
.94.130.185.237
.94.130.186.231
# Source: desidertNO
.collectfasttracks.com
# Various ex-affiliate links at www•zombooru•com
@@ -316,9 +314,6 @@
@@ -347,7 +342,6 @@
.54.85.113.62
.[2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]
.abedwithdrawalautograph.com
.abnegateexcavator.com
.acceptablefabric.com
@@ -659,23 +653,15 @@
.134.209.136.174
.178.128.142.109
.62.210.11.203
.62.210.6.153
.62.210.7.209
.62.210.9.92
.new-message.email
.167.99.249.47
.version.gratis
.starpowders.github.io
/bitcoinrevolution/lp.php
@@ -689,13 +675,9 @@
.5.8.34.26
.5.8.47.3
.103.224.182.251
.holescontracting.com
@@ -706,9 +688,6 @@
.178.162.203.202
.178.162.203.211
.178.162.203.226
@@ -718,7 +697,6 @@
.85.17.31.122
.85.17.31.82
.[2a02:1668:1034::2]
.logicalrecord.com
.secureportal.online
.emiratenbduae.com
@@ -726,14 +704,10 @@
.108.170.31.123
.108.170.52.156
.66.85.156.85
.66.85.156.86
.toksearches.xyz
.smashapps.net
.srchus.xyz
@@ -778,13 +752,9 @@
.213.227.145.147
.213.227.149.216
.95.168.170.165
.wow-robotics.xyz
.monk.monster
.albumzips.xyz
@@ -823,14 +793,10 @@
.185.158.250.239
.192.169.69.25
.212.192.241.72
.37.0.10.83
.secure-0*.ddnss.ch
.lucdream.com
.pesoaniz.com
@@ -879,9 +845,6 @@
.125.44.43.45
.182.121.8.240
.42.235.183.74
@@ -892,7 +855,6 @@
.188.120.50.98
.190.238.183.5
.27.220.253.78
.aieov.com
# Relations to the original domain
@@ -969,9 +931,6 @@
@@ -1022,20 +981,15 @@
.219.155.105.98
.219.155.26.50
.221.208.4.56
.pcae.de
.117.196.49.21
.115.55.54.234
.115.52.17.123
.182.59.69.21
.chip-secured-download.de
# Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin
.saimission.org
@@ -1122,9 +1076,6 @@
@@ -1161,7 +1112,6 @@
.61.52.99.109
.68.197.33.124
.198.23.255.14
.trumops.com
.runmodes.com
@@ -1172,14 +1122,10 @@
.39.65.72.211
.42.238.151.197
.27.213.60.53
.115.56.169.134
.yasir252.com
.safelink.kadal.club
.tonightshookup.com
@@ -1207,9 +1153,6 @@
.58.249.74.79
.27.45.14.109
.27.40.101.191
@@ -1218,7 +1161,6 @@
.115.204.119.237
.163.125.31.46
.163.179.168.44
.money-mod.com
.bestlifeoffer20.com
.youtube.com/watch?v=8nY7SnvNxH4
@@ -1236,9 +1178,6 @@
.110.89.59.135
.113.116.89.1
.119.183.146.191
@@ -1250,7 +1189,6 @@
.171.112.177.90
.115.194.38.143
.61.52.79.32
.dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe
.dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe
# ||zhuangjizhuli.com
@@ -1282,9 +1220,6 @@
.123.10.225.196
.122.192.106.84
.172.88.199.9
@@ -1294,7 +1229,6 @@
.124.163.130.175
.118.75.87.102
.134.122.115.190
.cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com
.viewty.xyz
@@ -1355,15 +1289,11 @@
.15.197.244.48
.96.47.230.67
.96.47.230.68
.96.47.230.69
.96.47.230.70
.highercaptcha-settle.
.highercaptchasettle.
.ns*.fastthinkingdns.com
@@ -1371,8 +1301,6 @@
.com/landers/iphone*_spin
.pu020ev.com
.kadam.net
@@ -1496,8 +1424,6 @@
.85.17.31.152
.95.211.26.202
@@ -1526,9 +1452,6 @@
.51.91.66.125
.51.178.76.105
.147.135.253.55
@@ -1536,7 +1459,6 @@
.146.19.169.98
.146.19.169.99
/pushredirect/?
@@ -2847,13 +2769,9 @@
.44.228.230.225
.50.112.124.170
.100.20.104.229
# Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread
.link.sv
.4.fo
@@ -2866,15 +2784,11 @@
.44.236.213.34
.52.24.156.12
.52.25.6.134
.100.20.13.49
.51.68.87.229
.adidascostarica.com
.adulttoysale.top
@@ -3111,8 +3025,6 @@
.blender3d-download.
.blender3d-software.
.blender3ds-download.
@@ -3120,13 +3032,9 @@
.185.106.94.139
.45.90.109.196
.91.229.23.200
.bonusgift.life
.bonusscore.life
.giftaward.life
@@ -3171,14 +3079,10 @@
.208.88.225.116
.208.88.225.117
.208.88.225.119
.adrastos-eli.com
.aslau-cre.info
.balor-ghn.com
@@ -3209,15 +3113,11 @@
.108.61.242.65
.146.70.78.43
.87.120.254.39
.45.150.108.213
.92.204.160.240
/land/*&afftrack=
# Comments on Slack
.34.200.46.148
@@ -3431,9 +3331,6 @@
.185.246.188.124
.185.246.188.125
.194.63.140.103
@@ -3441,7 +3338,6 @@
.194.63.143.96
.bellisimo-news.com
.breal-notifications.com
.celeb-hot-gossip.com
@@ -3542,9 +3438,6 @@
.139.45.197.167
.139.45.197.245
.159.223.137.164
@@ -3555,7 +3448,6 @@
.192.243.58.123
.192.243.58.124
.192.243.58.125
.[2a02:b48:207:1::2]
.[2a02:b48:207:1::3]
.[2a02:b48:207:1::6]
@@ -3567,8 +3459,6 @@
.dest.co.in
.dkeie.co.in
.fastvps-server.com
@@ -3741,13 +3631,9 @@
.5.45.123.44
.69.16.230.226
.208.91.196.46
/page/bouncy.php?
.abberantbeefy.com
.abominableexhibition.com
@@ -4286,9 +4172,6 @@
.172.240.108.68
.172.240.108.76
.172.240.108.84
@@ -4299,7 +4182,6 @@
.192.243.59.20
.192.243.61.225
.192.243.61.227
.abjectpreludeparity.com
.ablecheap.com
.abroadwas.com
@@ -4942,13 +4824,9 @@
.185.149.120.161
.185.149.120.163
.185.149.120.175
.astrarestaurant.com
.bamasolutions.com
.magazinetribune.com
@@ -5005,9 +4883,6 @@
.45.202.32.3
.45.8.92.138
@@ -5029,7 +4904,6 @@
.208.91.189.203
/?nw=1&tb=false&cw=
.aboveaveragefinallycast.com
.acceleratehallucinate.com
@@ -9339,7 +9213,6 @@
.xynro.com
.yourbestonlinefriend.vip
.yoursweetflirt.online
.3.220.51.12
.44.223.210.42
.52.9.43.57
@@ -9362,9 +9235,6 @@
.adblockermax.com/land
# Various other reports
.afsrepair.com
@@ -9410,8 +9280,6 @@
.abcradilytor.com
.abmagbychan.com
.agatorkoaltor.com
@@ -9794,7 +9662,6 @@
.whatcsappwap.com
.whatstapps.com
.whetcsapp.com
.149.30.232.154
.154.204.32.99
.156.245.23.49
@@ -9803,9 +9670,6 @@
.device-checking.com
.device-cleanup.com
.devicenotificationes.com
@@ -10039,7 +9903,6 @@
.watch-user-help.com
.workspace-drive.com
.your-package-delivery.com
.158.94.209.86
.158.94.209.87
.158.94.209.88
@@ -10052,9 +9915,6 @@
/linkresolver.html?url=*p0
.idtsoftware.com
.acrossprotocols.com
@@ -10382,7 +10242,6 @@
.tigosv.toythieves.com
.trpttgovqs.icu
.very-wonderful.shop
.43.157.122.86
.43.157.46.83
.43.164.196.209
@@ -10392,9 +10251,6 @@
.adtng.com
.anonymity-guardstation.com
.anonymity-ninjacloud.com
@@ -10636,10 +10492,6 @@
.posthog.
.ad-growth.it.com
.alertkitflare.org
@@ -10659,6 +10511,8 @@
.13.140.171.211
.koboldcpp.com
{+block}
# ——— Standard malware that I stumbled upon on my own ———
@@ -10964,15 +10818,11 @@
.51.91.211.94
.162.19.71.16
.146.59.240.191
.54.37.5.34
.54.36.118.105
.highlandnews.com
.pcbasicstrength.com
.leantime.bigfi.re
@@ -11011,9 +10861,6 @@
.45.33.2.79
.45.33.18.44
.45.33.20.235
@@ -11026,7 +10873,6 @@
.96.126.123.244
.173.255.194.134
.198.58.118.167
.777offers.net
.99linksfortc.com
.99offrs.com
@@ -11084,16 +10930,12 @@
.34.117.199.78
.94.237.103.119
.94.237.84.54
.94.237.93.242
.94.237.99.118
.139.45.197.249
.anahitagirted.uno
.arenitezill.com
.balneasoucars.website
@@ -11265,8 +11107,6 @@
.sites.google.com/view/*wincashapp
.iuxxx.com
.tuusi.com
@@ -12102,7 +11942,6 @@
.85.159.213.158
# Seemingly mass-generated fake "marketing company" sites that seem to serve no visible purpose (12/05/2025)
.23.170.252.196
.23.229.68.43
.23.229.68.44
@@ -12270,9 +12109,6 @@
@@ -12310,7 +12146,6 @@
.24hdeepnude.com
# gelbo²ruCOM
.debateobsoletesimply.com
.172.240.41.33
.172.240.41.65
.172.240.41.97
@@ -12319,9 +12154,6 @@
# bdsmx-pornCOM
.6traitors.com
.baimgfroggd.site
@@ -12383,7 +12215,6 @@
.storewbhjkk.shop
.trankosty.shop
.tubecup.org
.62.122.168.42
.109.206.163.112
.109.206.163.116
@@ -12414,9 +12245,6 @@
.biuqbiu.com
.bmgmb.com
.onclckbn.com
@@ -12429,8 +12257,6 @@
.03122e72f0.com
.0551acf6ed.com
.0c5351790d.com
@@ -12495,8 +12321,6 @@
.a3ion.com
.advertrek.com
.cant3am.com
@@ -12734,7 +12558,6 @@
.trackingparcel.today
.tur-ptt-posen.
.ukpayment.xin
.43.100.125.58
.43.159.140.215
.43.162.119.45
@@ -12749,9 +12572,6 @@
# icepornCOM
/adx_iframe_
.az-partners.net
@@ -12982,7 +12802,6 @@
.trksp1.com
.trksp2.com
.trksp3.com
.157.90.33.79
.173.239.53.20
.178.63.248.53
@@ -13013,9 +12832,6 @@
.aipredictdeathcalculator.com
.deathcalculator.ai
.life2vecai.com
@@ -13100,18 +12916,12 @@
.quickfindresults.com
.smorgasbordet.com
.xdelta.org
.23.48.203.140
.3.33.130.190
.[2a02:26f0:1700:11::b856:6790]
# submitted via email
.grokvarum.com
.groktronum.com
@@ -13248,7 +13058,6 @@
-director-data-recovery.github.io/.github
.katukaposole.com
.fleecykobird.com
.151.243.18.53
.185.100.157.222
.185.107.74.103
@@ -13267,9 +13076,6 @@
# Researching fonts for Taiwanese kana (19/06/2026)
.mojikyo.org
.trekpeak.site
@@ -13280,10 +13086,6 @@
.tgdrive.app
.tg-drive-bx4f.onrender.com
@@ -13428,14 +13230,10 @@
.yeesshh.com
.yolkclknu.com
.yolkdirxl.com
.103.67.200.64
.[2a00:8860:10d:1::2:b01]
# Extreme amounts of PUP to a comical extent
.driverpack.io
.doh-gov.ph
@@ -13689,7 +13487,6 @@
.woodburn.com.au
.yellowdragon.com
# Parking services' IP addresses
.13.248.148.254
.185.53.177.50
.185.53.177.51
@@ -13712,9 +13509,6 @@
# Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO
.to/popconsole.php
Alternate versions Anti-Malware List/AntiMalwareTPL.tpl
+10 -215
View File
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 19September2026v1-Deprecated
# Version: 04October2026v1-Deprecated
: expires = 1 day
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted.
@@ -309,9 +309,6 @@
-d 173.208.96.42
-d 173.208.96.43
-d 173.208.96.44
@@ -320,7 +317,12 @@
-d 199.59.243.222
-d 213.227.149.208
-d 213.227.149.211
-d redddit.com
-d redit.com
-d reditt.com
-d reddtt.com
-d reddtit.com
-d mirappe.com
# ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ———
-d ortrun-adi.com
@@ -339,9 +341,6 @@
-d 144.76.0.242
-d 144.76.1.130
-d 195.201.92.254
@@ -353,7 +352,6 @@
-d 54.91.125.197
-d 94.130.185.237
-d 94.130.186.231
# Source: desidertNO
-d collectfasttracks.com
# Various ex-affiliate links at www•zombooru•com
@@ -416,9 +414,6 @@
@@ -446,7 +441,6 @@
-d 54.210.193.115
-d 54.85.113.62
-d [2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]
# https://github.com/DandelionSprout/adfilt/issues/942
-d abedwithdrawalautograph.com
@@ -767,24 +761,16 @@
-d 134.209.136.174
-d 178.128.142.109
-d 62.210.11.203
-d 62.210.6.153
-d 62.210.7.209
-d 62.210.9.92
# https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/
-d new-message.email
-d 167.99.249.47
# https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/
# https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/
# https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/
@@ -813,13 +799,9 @@
-d 5.8.34.26
-d 5.8.47.3
-d 103.224.182.251
# https://github.com/DandelionSprout/adfilt/issues/193
-d holescontracting.com
@@ -831,9 +813,6 @@
-d 178.162.203.202
-d 178.162.203.211
-d 178.162.203.226
@@ -843,7 +822,6 @@
-d 85.17.31.122
-d 85.17.31.82
-d [2a02:1668:1034::2]
# https://github.com/DandelionSprout/adfilt/issues/195
-d logicalrecord.com
# https://github.com/DandelionSprout/adfilt/issues/196
@@ -853,14 +831,10 @@
-d 108.170.31.123
-d 108.170.52.156
-d 66.85.156.85
-d 66.85.156.86
# https://github.com/DandelionSprout/adfilt/issues/198
# https://www•bleepingcomputer•com/virus-removal/ (18/06 2021)
-d toksearches.xyz
@@ -908,13 +882,9 @@
-d 213.227.145.147
-d 213.227.149.216
-d 95.168.170.165
# https://twitter•com/adamziaja/status/1252234957679808513
-d wow-robotics.xyz
# https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html
@@ -968,15 +938,11 @@
-d 185.158.250.239
-d 192.169.69.25
-d 212.192.241.72
-d 37.0.10.83
-d lucdream.com
-d pesoaniz.com
@@ -1058,9 +1024,6 @@
-d 125.44.43.45
-d 182.121.8.240
-d 42.235.183.74
@@ -1071,7 +1034,6 @@
-d 188.120.50.98
-d 190.238.183.5
-d 27.220.253.78
# https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community
# https://www•joesandbox•com/analysis/486636/0/html#domains
-d aieov.com
@@ -1165,9 +1127,6 @@
@@ -1218,7 +1177,6 @@
-d 219.155.105.98
-d 219.155.26.50
-d 221.208.4.56
# https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community
-d pcae.de
# https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
@@ -1226,14 +1184,10 @@
-d 117.196.49.21
-d 115.55.54.234
-d 115.52.17.123
-d 182.59.69.21
# https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community
-d chip-secured-download.de
# https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb
@@ -1346,9 +1300,6 @@
@@ -1384,7 +1335,6 @@
-d 45.5.209.75
-d 61.52.99.109
-d 68.197.33.124
# https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
-d 198.23.255.14
@@ -1402,14 +1352,10 @@
-d 39.65.72.211
-d 42.238.151.197
-d 27.213.60.53
-d 115.56.169.134
# https://github.com/iam-py-test/investigations/blob/main/2021/11 21 1.md
-d yasir252.com
-d safelink.kadal.club
@@ -1453,9 +1399,6 @@
-d 58.249.74.79
-d 27.45.14.109
-d 27.40.101.191
@@ -1464,7 +1407,6 @@
-d 115.204.119.237
-d 163.125.31.46
-d 163.179.168.44
# https://github.com/uBlockOrigin/uAssets/pull/10647
# https://github.com/iam-py-test/investigations/blob/main/2021/11 28 1.md
-d money-mod.com
@@ -1488,9 +1430,6 @@
-d 110.89.59.135
-d 113.116.89.1
-d 119.183.146.191
@@ -1502,7 +1441,6 @@
-d 171.112.177.90
-d 115.194.38.143
-d 61.52.79.32
# https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
# https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
# https://www•virustotal•com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
@@ -1551,9 +1489,6 @@
-d 123.10.225.196
-d 122.192.106.84
-d 172.88.199.9
@@ -1562,7 +1497,6 @@
-d 27.206.181.208
-d 124.163.130.175
-d 118.75.87.102
# https://github.com/iam-py-test/investigations/blob/main/2021/12 14 1.md
# https://github.com/DevSpen/links/pull/3
# https://bazaar•abuse•ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/
@@ -1642,15 +1576,11 @@
-d 15.197.244.48
-d 96.47.230.67
-d 96.47.230.68
-d 96.47.230.69
-d 96.47.230.70
# https://securitytrails•com/list/ns/ns1•fastthinkingdns•com
-d highercaptcha-settle.
-d highercaptchasettle.
@@ -1659,8 +1589,6 @@
# https://github.com/AdguardTeam/AdguardFilters/issues/121544
-d com landers iphone*_spin
# https://github.com/AdguardTeam/AdguardFilters/issues/121772
@@ -1791,8 +1719,6 @@
-d 85.17.31.152
-d 95.211.26.202
# https://kommunikasjon•ntb•no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583
@@ -1827,13 +1753,9 @@
-d 51.91.66.125
-d 51.178.76.105
-d 147.135.253.55
# https://github.com/uBlockOrigin/uAssets/issues/14569/→/https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection/(https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade)
# https://github.com/AdguardTeam/AdguardFilters/issues/129414
@@ -3161,13 +3083,9 @@
-d 44.228.230.225
-d 50.112.124.170
-d 100.20.104.229
# Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread
-d link.sv
-d 4.fo
@@ -3181,14 +3099,10 @@
-d 44.236.213.34
-d 52.24.156.12
-d 52.25.6.134
-d 100.20.13.49
# https://github.com/AdguardTeam/AdguardFilters/issues/139667
-d 51.68.87.229
@@ -3429,8 +3343,6 @@
# https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
-d blender3d-download.
-d blender3d-software.
@@ -3439,13 +3351,9 @@
-d 185.106.94.139
-d 45.90.109.196
-d 91.229.23.200
# https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872
# https://github.com/AdguardTeam/AdguardFilters/issues/144514
-d bonusgift.life
@@ -3496,13 +3404,9 @@
-d 208.88.225.116
-d 208.88.225.117
-d 208.88.225.119
# https://github.com/AdguardTeam/AdguardFilters/issues/144823
-d landings.*_slots/?partner=
@@ -3539,15 +3443,11 @@
-d 108.61.242.65
-d 146.70.78.43
-d 87.120.254.39
-d 45.150.108.213
-d 92.204.160.240
# https://github.com/AdguardTeam/AdguardFilters/issues/148560
- land *&afftrack=
# Comments on Slack
@@ -3765,15 +3665,11 @@
-d 185.246.188.124
-d 185.246.188.125
-d 194.63.140.103
-d 194.63.143.61
-d 194.63.143.96
# https://github.com/AdguardTeam/AdguardFilters/issues/152945
@@ -3883,9 +3779,6 @@
-d 139.45.197.167
-d 139.45.197.245
-d 159.223.137.164
@@ -3896,7 +3789,6 @@
-d 192.243.58.123
-d 192.243.58.124
-d 192.243.58.125
-d [2a02:b48:207:1::2]
-d [2a02:b48:207:1::3]
-d [2a02:b48:207:1::6]
@@ -3908,8 +3800,6 @@
# https://github.com/AdguardTeam/AdguardFilters/issues/157308
-d dest.co.in
-d dkeie.co.in
@@ -4083,13 +3973,9 @@
-d 5.45.123.44
-d 69.16.230.226
-d 208.91.196.46
- page bouncy.php?
# https://github.com/AdguardTeam/AdguardFilters/issues/158316
-d abberantbeefy.com
@@ -4662,9 +4548,6 @@ vito.www.booking.
-d 172.240.108.68
-d 172.240.108.76
-d 172.240.108.84
@@ -4675,7 +4558,6 @@ vito.www.booking.
-d 192.243.59.20
-d 192.243.61.225
-d 192.243.61.227
-d abjectpreludeparity.com
-d ablecheap.com
-d abroadwas.com
@@ -5320,13 +5202,9 @@ vito.www.booking.
-d 185.149.120.161
-d 185.149.120.163
-d 185.149.120.175
# https://github.com/AdguardTeam/AdguardFilters/issues/184671
-d astrarestaurant.com
-d bamasolutions.com
@@ -5385,9 +5263,6 @@ vito.www.booking.
-d 45.202.32.3
-d 45.8.92.138
@@ -5409,7 +5284,6 @@ vito.www.booking.
-d 208.91.189.203
# https://github.com/AdguardTeam/AdguardFilters/issues/189905
- ?nw=1&tb=false&cw=
# https://github.com/AdguardTeam/AdguardFilters/issues/196657
@@ -9724,7 +9598,6 @@ icrosoft.com.chrome.
-d xynro.com
-d yourbestonlinefriend.vip
-d yoursweetflirt.online
-d 3.220.51.12
-d 44.223.210.42
-d 52.9.43.57
@@ -9747,9 +9620,6 @@ icrosoft.com.chrome.
# https://github.com/AdguardTeam/AdguardFilters/issues/202010
-d adblockermax.com land
# Various other reports
@@ -9796,8 +9666,6 @@ icrosoft.com.chrome.
-d abcradilytor.com
-d abmagbychan.com
-d agatorkoaltor.com
@@ -10185,7 +10053,6 @@ http://secured21.*.com/
-d whatcsappwap.com
-d whatstapps.com
-d whetcsapp.com
-d 149.30.232.154
-d 154.204.32.99
-d 156.245.23.49
@@ -10194,9 +10061,6 @@ http://secured21.*.com/
# https://github.com/DandelionSprout/adfilt/issues/1164
-d device-checking.com
-d device-cleanup.com
@@ -10435,7 +10299,6 @@ http://secured21.*.com/
-d watch-user-help.com
-d workspace-drive.com
-d your-package-delivery.com
-d 158.94.209.86
-d 158.94.209.87
-d 158.94.209.88
@@ -10448,9 +10311,6 @@ http://secured21.*.com/
# https://urlscan.io/result/019a4ffd-885c-7545-816a-3c121d8bdc0d/ (Early November 2025)
- linkresolver.html?url=*p0
# https://github.com/DandelionSprout/adfilt/issues/1197
@@ -10783,7 +10643,6 @@ ay.pay.pay.
-d tigosv.toythieves.com
-d trpttgovqs.icu
-d very-wonderful.shop
-d 43.157.122.86
-d 43.157.46.83
-d 43.164.196.209
@@ -10794,9 +10653,6 @@ ay.pay.pay.
# https://new•reddit•com/r/softwaregore/comments/1spebzh/i_broke_the_antivirus_ad/ (19 04 2026)
-d adtng.com
-d anonymity-guardstation.com
@@ -11039,10 +10895,6 @@ ay.pay.pay.
# According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its
-d posthog.
# https://github.com/AdguardTeam/AdguardFilters/issues/238795
@@ -11064,6 +10916,9 @@ ay.pay.pay.
-d 13.140.171.211
# https://github.com/DandelionSprout/adfilt/issues/1296
-d koboldcpp.com
# ——— Standard malware that I stumbled upon on my own ———
# http://www•toorgle•net/results•php?q=fetishkitsch&security=666
@@ -11380,15 +11235,11 @@ ay.pay.pay.
-d 51.91.211.94
-d 162.19.71.16
-d 146.59.240.191
-d 54.37.5.34
-d 54.36.118.105
# Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt
-d highlandnews.com
-d pcbasicstrength.com
@@ -11436,9 +11287,6 @@ ay.pay.pay.
-d 45.33.2.79
-d 45.33.18.44
-d 45.33.20.235
@@ -11451,7 +11299,6 @@ ay.pay.pay.
-d 96.126.123.244
-d 173.255.194.134
-d 198.58.118.167
# https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/
-d 777offers.net
-d 99linksfortc.com
@@ -11510,16 +11357,12 @@ ay.pay.pay.
-d 34.117.199.78
-d 94.237.103.119
-d 94.237.84.54
-d 94.237.93.242
-d 94.237.99.118
-d 139.45.197.249
# https://dnpedia•com/tlds/topm•php/bizarrely/listing/"anahitagirted•uno"/as the 622th most visited domain worldwide
-d anahitagirted.uno
-d arenitezill.com
@@ -11697,8 +11540,6 @@ ed.br ?q=artstation-
-d sites.google.com view *wincashapp
-d iuxxx.com
-d tuusi.com
@@ -12536,7 +12377,6 @@ ed.br ?q=artstation-
-d 85.159.213.158
# Seemingly mass-generated fake "marketing company" sites that seem to serve no visible purpose (12 05 2025)
-d 23.170.252.196
-d 23.229.68.43
-d 23.229.68.44
@@ -12704,9 +12544,6 @@ ed.br ?q=artstation-
@@ -12744,7 +12581,6 @@ ed.br ?q=artstation-
-d 24hdeepnude.com
# gelbo²ruCOM
-d debateobsoletesimply.com
-d 172.240.41.33
-d 172.240.41.65
-d 172.240.41.97
@@ -12753,9 +12589,6 @@ ed.br ?q=artstation-
# bdsmx-pornCOM
-d 6traitors.com
-d baimgfroggd.site
@@ -12817,7 +12650,6 @@ ed.br ?q=artstation-
-d storewbhjkk.shop
-d trankosty.shop
-d tubecup.org
-d 62.122.168.42
-d 109.206.163.112
-d 109.206.163.116
@@ -12848,9 +12680,6 @@ ed.br ?q=artstation-
-d biuqbiu.com
-d bmgmb.com
-d onclckbn.com
@@ -12863,8 +12692,6 @@ ed.br ?q=artstation-
-d 03122e72f0.com
-d 0551acf6ed.com
-d 0c5351790d.com
@@ -12929,8 +12756,6 @@ ed.br ?q=artstation-
-d a3ion.com
-d advertrek.com
-d cant3am.com
@@ -13168,7 +12993,6 @@ ed.br ?q=artstation-
-d trackingparcel.today
-d tur-ptt-posen.
-d ukpayment.xin
-d 43.100.125.58
-d 43.159.140.215
-d 43.162.119.45
@@ -13183,9 +13007,6 @@ ed.br ?q=artstation-
# icepornCOM
- adx_iframe_
# https://www•drvhub•net/devices/network/asix/ax88178a-usb-2-0-to-gigabit-ethernet-adapter
@@ -13423,7 +13244,6 @@ ed.br ?q=artstation-
-d trksp1.com
-d trksp2.com
-d trksp3.com
-d 157.90.33.79
-d 173.239.53.20
-d 178.63.248.53
@@ -13454,9 +13274,6 @@ ed.br ?q=artstation-
# https://github.com/iam-py-test/my_filters_001/issues/135
-d aipredictdeathcalculator.com
-d deathcalculator.ai
@@ -13542,8 +13359,6 @@ ed.br ?q=artstation-
-d quickfindresults.com
-d smorgasbordet.com
-d xdelta.org
-d 23.48.203.140
-d 3.33.130.190
-d [2a02:26f0:1700:11::b856:6790]
@@ -13552,10 +13367,6 @@ ed.br ?q=artstation-
# submitted via email
# https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/
-d grokvarum.com
@@ -13693,7 +13504,6 @@ ithub.io .github ?offer=
-director-data-recovery.github.io .github
-d katukaposole.com
-d fleecykobird.com
-d 151.243.18.53
-d 185.100.157.222
-d 185.107.74.103
@@ -13712,9 +13522,6 @@ ithub.io .github ?offer=
# Researching fonts for Taiwanese kana (19 06 2026)
-d mojikyo.org
-d trekpeak.site
@@ -13725,10 +13532,6 @@ ithub.io .github ?offer=
# https://github.com/DandelionSprout/adfilt/issues/1275
-d tgdrive.app
-d tg-drive-bx4f.onrender.com
@@ -13875,14 +13678,10 @@ ithub.io .github ?offer=
-d yeesshh.com
-d yolkclknu.com
-d yolkdirxl.com
-d 103.67.200.64
-d [2a00:8860:10d:1::2:b01]
# Extreme amounts of PUP to a comical extent
-d driverpack.io
# https://github.com/DandelionSprout/adfilt/issues/1124
@@ -14146,7 +13945,6 @@ sp?url=http://xn--*.xn--p1ai/
-d woodburn.com.au
-d yellowdragon.com
# Parking services' IP addresses
-d 13.248.148.254
-d 185.53.177.50
-d 185.53.177.51
@@ -14169,9 +13967,6 @@ sp?url=http://xn--*.xn--p1ai/
# Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO
o popconsole.php
Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p
+16 -16
View File
@@ -917,18 +917,10 @@ F:194.63.140.103-194.63.140.103
F:194.63.143.61-194.63.143.61
F:188.72.219.36-188.72.219.36
F:109.123.233.251-109.123.233.251
F:54.222.186.106-54.222.186.106
F:23.224.199.96-23.224.199.96
F:23.224.199.74-23.224.199.74
F:31.14.252.148-31.14.252.148
F:110.93.143.144-110.93.143.144
F:180.76.2.18-180.76.2.18
F:66.228.52.30-66.228.52.30
F:67.228.151.70-67.228.151.70
F:74.55.82.102-74.55.82.102
F:79.125.117.123-79.125.117.123
F:184.106.248.76-184.106.248.76
F:200.72.40.46-200.72.40.46
F:192.151.218.66-192.151.218.66
F:23.224.89.2-23.224.89.2
F:156.233.32.123-156.233.32.123
F:207.148.44.179-207.148.44.179
F:37.220.26.135-37.220.26.135
F:37.220.26.136-37.220.26.136
F:37.220.26.137-37.220.26.137
@@ -946,7 +938,15 @@ F:62.76.25.27-62.76.25.27
F:62.76.25.28-62.76.25.28
F:45.82.68.79-45.82.68.79
F:94.130.167.163-94.130.167.163
F:192.151.218.66-192.151.218.66
F:23.224.89.2-23.224.89.2
F:156.233.32.123-156.233.32.123
F:207.148.44.179-207.148.44.179
F:54.222.186.106-54.222.186.106
F:23.224.199.96-23.224.199.96
F:23.224.199.74-23.224.199.74
F:31.14.252.148-31.14.252.148
F:184.106.248.76-184.106.248.76
F:200.72.40.46-200.72.40.46
F:110.93.143.144-110.93.143.144
F:180.76.2.18-180.76.2.18
F:66.228.52.30-66.228.52.30
F:67.228.151.70-67.228.151.70
F:74.55.82.102-74.55.82.102
F:79.125.117.123-79.125.117.123
Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset
+16 -16
View File
@@ -959,18 +959,10 @@
194.63.143.61
188.72.219.36
109.123.233.251
54.222.186.106
23.224.199.96
23.224.199.74
31.14.252.148
110.93.143.144
180.76.2.18
66.228.52.30
67.228.151.70
74.55.82.102
79.125.117.123
184.106.248.76
200.72.40.46
192.151.218.66
23.224.89.2
156.233.32.123
207.148.44.179
37.220.26.135
37.220.26.136
37.220.26.137
@@ -988,7 +980,15 @@
62.76.25.28
45.82.68.79
94.130.167.163
192.151.218.66
23.224.89.2
156.233.32.123
207.148.44.179
54.222.186.106
23.224.199.96
23.224.199.74
31.14.252.148
184.106.248.76
200.72.40.46
110.93.143.144
180.76.2.18
66.228.52.30
67.228.151.70
74.55.82.102
79.125.117.123