From 3b3a2c65a4fb36b236b935796b8725bb179e5095 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Wed, 8 Oct 2025 16:02:51 +0200 Subject: [PATCH] Fix #1179 --- .../AntiMalwareABP.txt | 19 ++++++++++++------- .../AntiMalwareAdGuard.txt | 15 +++++++++------ .../AntiMalwareAdGuardHome.txt | 15 +++++++++------ .../AntiMalwareDomains.txt | 15 +++++++++------ .../AntiMalwareHosts.txt | 15 +++++++++------ .../AntiMalwarePrivoxy.action | 12 +++++++----- .../AntiMalwareTPL.tpl | 15 +++++++++------ ...and other adblocker lists' IPs for P2P.p2p | 1 + ...out's and other adblocker lists' IPs.ipset | 1 + 9 files changed, 66 insertions(+), 42 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 0ce2ac5c0..ff690ff7c 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 24September2025v2 +! Version: 08October2025v3 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -103,7 +103,7 @@ www.google.com,ipv6.google.com,google.ac,google.ad,google.ae,google.af,google.ag ||fortevr.com^ ||ps2hd.com^ ! Dead router connection URİs -! To log in to TP-Link routers, use tplinkwifi.net instead. +! To log in to TP-Link routers, use tplinkwifiNET instead. ! Old Linux-related domains ! How these links still remain in Unetbootin, is anyone's guess. ||hacktolive.org^ @@ -335,7 +335,7 @@ exefiles.com#?#.row:has(a[href*="/recommended/"]) ! ——— Banner for "MSN New Tab" ——— msn.com##.irisbanner -! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ——— +! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware exe files) ——— ! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files. ||freeroms.com^ ||portalroms.com^ @@ -2947,7 +2947,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^ ||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$popup ! https://github.com/DandelionSprout/adfilt/pull/395 -! https://www•huorong.cn/info/1618397948649.html - possible malware +! https://www•huorong.cn/info/1618397948649•html - possible malware ! ||zhuangjizhuli.com^ ! ||zhuangjizhuli.com^$popup ! ||zhuangjizhuli.net^ @@ -44513,7 +44513,7 @@ toorgle.net##.join ||scambiofigu.net^$popup ! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious apkfab.com##.tip-extension -! Google results for 'Katy and Bob: Cake Café powerpc' (04/11/2022) +! Google results for 'Katy and Bob：Cake Café powerpc' (04/11/2022) ||xxlmag.com/redirect^ ||xxlmag.com/redirect^$popup ||ultimateclassicrock.com/redirect^ @@ -48953,8 +48953,8 @@ www.tumblr.com#?#div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([h ||camisetas.me^$popup ||campthreview.com^ ||campthreview.com^$popup -||canadaposṯ.com^ -||canadaposṯ.com^$popup +||canadapost.com^ +||canadapost.com^$popup ||cancel.pro^ ||cancel.pro^$popup ||captain.care^ @@ -54293,6 +54293,11 @@ drvhub.net##.driver-item__install ||gitcoin-fund.$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* /^https://gitcoin-[a-z]{1,}\.com/?$/$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* /^https://[a-z]{1,}-gitcoin\.com/?$/$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* +||paradlgm.com^ +||paradlgm.com^$popup +/^http.*\.com//?secureproxy(\.php)?\?e=(ping|/)[a-z_]{0,}$/ +/^http.*\.com//?secureproxy(\.php)?\?e=(ping|/)[a-z_]{0,}$/$popup +|https://undefined/ ! https://news•ycombinator•com/item?id=45308596 ||gitcoin-developers.$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* ||github-foundation.$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 8987a9881..e4be3d2f4 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 24September2025v2 +! Version: 08October2025v3 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -103,7 +103,7 @@ www.google.*,ipv6.google.com##a[oncontextmenu][href^="https://books.google."]:up ||fortevr.com^$document ||ps2hd.com^$document ! Dead router connection URİs -! To log in to TP-Link routers, use tplinkwifi.net instead. +! To log in to TP-Link routers, use tplinkwifiNET instead. ! Old Linux-related domains ! How these links still remain in Unetbootin, is anyone's guess. ||hacktolive.org^$document @@ -323,7 +323,7 @@ exefiles.com##.row:has(a[href*="/recommended/"]) ! ——— Banner for "MSN New Tab" ——— msn.com##.irisbanner -! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ——— +! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware exe files) ——— ! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files. ||freeroms.com^$document ||portalroms.com^$document @@ -2603,7 +2603,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community ||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$all,~inline-font ! https://github.com/DandelionSprout/adfilt/pull/395 -! https://www•huorong.cn/info/1618397948649.html - possible malware +! https://www•huorong.cn/info/1618397948649•html - possible malware ! ||zhuangjizhuli.com^$all,~inline-font ! ||zhuangjizhuli.net^$all,~inline-font ! https://www•huorong•cn/info/1617368984641.html @@ -24173,7 +24173,7 @@ toorgle.net##.join ||scambiofigu.net^$all,~inline-font ! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious apkfab.com##.tip-extension -! Google results for 'Katy and Bob: Cake Café powerpc' (04/11/2022) +! Google results for 'Katy and Bob：Cake Café powerpc' (04/11/2022) ||xxlmag.com/redirect^$all,~inline-font,domain=~malware_redirection_results.* ||ultimateclassicrock.com/redirect^$all,~inline-font,domain=~malware_redirection_results.* ||2y68554.cyou^$all,~inline-font @@ -26616,7 +26616,7 @@ www.tumblr.com##div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([hr ||cambridgedictionary.online^$all ||camisetas.me^$all ||campthreview.com^$all -||canadaposṯ.com^$all +||canadapost.com^$all ||cancel.pro^$all ||captain.care^$all ||captured.online^$all @@ -29737,6 +29737,9 @@ drvhub.net##.driver-item__install ||gitcoin-fund.$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* /^https://gitcoin-[a-z]{1,}\.com/?$/$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* /^https://[a-z]{1,}-gitcoin\.com/?$/$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* +||paradlgm.com^$all +/^http.*\.com//?secureproxy(\.php)?\?e=(ping|/)[a-z_]{0,}\$/$all +|https://undefined/ ! https://news•ycombinator•com/item?id=45308596 ||gitcoin-developers.$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* ||github-foundation.$all,domain=~blatant_scammers_who_have_no_actual_relations_with_github_whatsoever.* diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 0cd0461ff..b09688f3a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 24September2025v2 +! Version: 08October2025v3 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -50,7 +50,7 @@ ||fortevr.com^ ||ps2hd.com^ ! Dead router connection URİs -! To log in to TP-Link routers, use tplinkwifi.net instead. +! To log in to TP-Link routers, use tplinkwifiNET instead. ! Old Linux-related domains ! How these links still remain in Unetbootin, is anyone's guess. ||hacktolive.org^ @@ -124,7 +124,7 @@ ! https://github•com/AdguardTeam/AdguardFilters/issues/58737 /^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php$/domain=biz|fun|live ! ——— Banner for "MSN New Tab" ——— -! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ——— +! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware exe files) ——— ! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files. ||freeroms.com^ ||portalroms.com^ @@ -1167,7 +1167,7 @@ ! https://www•virustotal•com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community ! https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community ! https://github.com/DandelionSprout/adfilt/pull/395 -! https://www•huorong.cn/info/1618397948649.html - possible malware +! https://www•huorong.cn/info/1618397948649•html - possible malware ! ||zhuangjizhuli.com^ ! ||zhuangjizhuli.net^ ! https://www•huorong•cn/info/1617368984641.html @@ -21879,7 +21879,7 @@ http://secured21.*.com/| ! https://scambiofigu•forumcommunity•net/?t=57482915 ||scambiofigu.net^ ! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious -! Google results for 'Katy and Bob: Cake Café powerpc' (04/11/2022) +! Google results for 'Katy and Bob：Cake Café powerpc' (04/11/2022) ||2y68554.cyou^ ||1pwk1j.cyou^ ||986.group^ @@ -24033,7 +24033,7 @@ http://secured21.*.com/| ||cambridgedictionary.online^ ||camisetas.me^ ||campthreview.com^ -||canadaposṯ.com^ +||canadapost.com^ ||cancel.pro^ ||captain.care^ ||captured.online^ @@ -26563,6 +26563,9 @@ http://secured21.*.com/| ||gitcoin-fund. /^https://gitcoin-[a-z]{1,}\.com/?$/ /^https://[a-z]{1,}-gitcoin\.com/?$/ +||paradlgm.com^ +/^http.*\.com//?secureproxy(\.php)?\?e=(ping|/)[a-z_]{0,}$/ +|https://undefined/ ! https://news•ycombinator•com/item?id=45308596 ||gitcoin-developers. ||github-foundation. diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index ca2f0d1bd..bb3bb24f9 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 24September2025v2 +# Version: 08October2025v3 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -92,7 +92,7 @@ marsshooter.org fortevr.com ps2hd.com # Dead router connection URİs -# To log in to TP-Link routers, use tplinkwifi.net instead. +# To log in to TP-Link routers, use tplinkwifiNET instead. # Old Linux-related domains # How these links still remain in Unetbootin, is anyone's guess. hacktolive.org @@ -224,7 +224,7 @@ solvusoft.com # ——— Banner for "MSN New Tab" ——— -# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ——— +# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware exe files) ——— # If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files. freeroms.com portalroms.com @@ -2020,7 +2020,7 @@ bestlifeoffer20.com # https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community # https://github.com/DandelionSprout/adfilt/pull/395 -# https://www•huorong.cn/info/1618397948649.html - possible malware +# https://www•huorong.cn/info/1618397948649•html - possible malware # ||zhuangjizhuli.com # ||zhuangjizhuli.net # https://www•huorong•cn/info/1617368984641.html @@ -23219,7 +23219,7 @@ ingeniovirtual.com # https://scambiofigu•forumcommunity•net/?t=57482915 scambiofigu.net # Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious -# Google results for 'Katy and Bob: Cake Café powerpc' (04/11/2022) +# Google results for 'Katy and Bob：Cake Café powerpc' (04/11/2022) 2y68554.cyou @@ -25546,7 +25546,7 @@ calfutures.com cambridgedictionary.online camisetas.me campthreview.com -canadaposṯ.com +canadapost.com cancel.pro captain.care captured.online @@ -28415,6 +28415,9 @@ github-fund.com gitcoin-fund.com +paradlgm.com + + # https://news•ycombinator•com/item?id=45308596 gitcoin-developers.com github-foundation.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 23cbf0241..96d679aa5 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 24September2025v2 +# Version: 08October2025v3 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later, and of AdGuard Home, are STRONGLY RECOMMENDED to switch to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, unless otherwise proven. @@ -69,7 +69,7 @@ 127.0.0.1 fortevr.com 127.0.0.1 ps2hd.com # Dead router connection URİs -# To log in to TP-Link routers, use tplinkwifi.net instead. +# To log in to TP-Link routers, use tplinkwifiNET instead. # Old Linux-related domains # How these links still remain in Unetbootin, is anyone's guess. 127.0.0.1 hacktolive.org @@ -189,7 +189,7 @@ # ——— Banner for "MSN New Tab" ——— -# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ——— +# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware exe files) ——— # If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files. 127.0.0.1 freeroms.com 127.0.0.1 portalroms.com @@ -1971,7 +1971,7 @@ # https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community # https://github.com/DandelionSprout/adfilt/pull/395 -# https://www•huorong.cn/info/1618397948649.html - possible malware +# https://www•huorong.cn/info/1618397948649•html - possible malware # ||zhuangjizhuli.com # ||zhuangjizhuli.net # https://www•huorong•cn/info/1617368984641.html @@ -23170,7 +23170,7 @@ # https://scambiofigu•forumcommunity•net/?t=57482915 127.0.0.1 scambiofigu.net # Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious -# Google results for 'Katy and Bob: Cake Café powerpc' (04/11/2022) +# Google results for 'Katy and Bob：Cake Café powerpc' (04/11/2022) 127.0.0.1 2y68554.cyou @@ -25493,7 +25493,7 @@ 127.0.0.1 cambridgedictionary.online 127.0.0.1 camisetas.me 127.0.0.1 campthreview.com -127.0.0.1 canadaposṯ.com +127.0.0.1 canadapost.com 127.0.0.1 cancel.pro 127.0.0.1 captain.care 127.0.0.1 captured.online @@ -28362,6 +28362,9 @@ 127.0.0.1 gitcoin-fund.com +127.0.0.1 paradlgm.com + + # https://news•ycombinator•com/item?id=45308596 127.0.0.1 gitcoin-developers.com 127.0.0.1 github-foundation.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 00c37acba..baba414d0 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 24September2025v2-Deprecated +# Version: 08October2025v3-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -61,7 +61,7 @@ .fortevr.com .ps2hd.com # Dead router connection URİs -# To log in to TP-Link routers, use tplinkwifi.net instead. +# To log in to TP-Link routers, use tplinkwifiNET instead. # Old Linux-related domains # How these links still remain in Unetbootin, is anyone's guess. .hacktolive.org @@ -134,7 +134,7 @@ # ——— Banner for "MSN New Tab" ——— {+block} -# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ——— +# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware exe files) ——— # If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files. .freeroms.com .portalroms.com @@ -22822,7 +22822,7 @@ .ingeniovirtual.com .scambiofigu.net # Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious -# Google results for 'Katy and Bob: Cake Café powerpc' (04/11/2022) +# Google results for 'Katy and Bob：Cake Café powerpc' (04/11/2022) .xxlmag.com/redirect .ultimateclassicrock.com/redirect .2y68554.cyou @@ -25135,7 +25135,7 @@ .cambridgedictionary.online .camisetas.me .campthreview.com -.canadaposṯ.com +.canadapost.com .cancel.pro .captain.care .captured.online @@ -28000,6 +28000,8 @@ .passport-gitcoin. .github-fund. .gitcoin-fund. +.paradlgm.com +/http.*\.com//?secureproxy(\.php)?\?e=(ping|/)[a-z_]{0,} .gitcoin-developers. .github-foundation. .gitcoin-grants. diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 802eedef1..76f01900a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 24September2025v2-Deprecated +# Version: 08October2025v3-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -100,7 +100,7 @@ msFilterList -d fortevr.com -d ps2hd.com # Dead router connection URİs -# To log in to TP-Link routers, use tplinkwifi.net instead. +# To log in to TP-Link routers, use tplinkwifiNET instead. # Old Linux-related domains # How these links still remain in Unetbootin, is anyone's guess. -d hacktolive.org @@ -210,7 +210,7 @@ msFilterList # ——— Banner for "MSN New Tab" ——— -# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ——— +# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware exe files) ——— # If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files. -d freeroms.com -d portalroms.com @@ -1994,7 +1994,7 @@ msFilterList # https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community -d dl02.s3.amazonaws.com installers 424531 2gzbsoj4gxb.exe # https://github.com/DandelionSprout/adfilt/pull/395 -# https://www•huorong.cn/info/1618397948649.html/-/possible/malware +# https://www•huorong.cn/info/1618397948649•html/-/possible/malware # ||zhuangjizhuli.com # ||zhuangjizhuli.net # https://www•huorong•cn/info/1617368984641.html @@ -23213,7 +23213,7 @@ dvancedhosters.com$doc,domain= # https://scambiofigu•forumcommunity•net/?t=57482915 -d scambiofigu.net # Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious -# Google results for 'Katy and Bob: Cake Café powerpc' (04 11 2022) +# Google results for 'Katy and Bob：Cake Café powerpc' (04 11 2022) -d xxlmag.com redirect -d ultimateclassicrock.com redirect -d 2y68554.cyou @@ -25543,7 +25543,7 @@ ed.br ?q=artstation- -d cambridgedictionary.online -d camisetas.me -d campthreview.com --d canadaposṯ.com +-d canadapost.com -d cancel.pro -d captain.care -d captured.online @@ -28412,6 +28412,9 @@ ed.br ?q=artstation- -d gitcoin-fund. +-d paradlgm.com + +-d https://undefined/ # https://news•ycombinator•com/item?id=45308596 -d gitcoin-developers. -d github-foundation. diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p index 946644414..1c13f1b85 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p @@ -637,6 +637,7 @@ F:43.162.119.45-43.162.119.45 F:47.76.132.29-47.76.132.29 F:212.224.107.120-212.224.107.120 F:196.251.85.197-196.251.85.197 +F:158.94.209.89-158.94.209.89 F:104.160.10.0-104.160.10.255 F:165.231.154.0-165.231.154.255 F:165.231.10.0-165.231.10.255 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 44251c3af..e2b5e4981 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -637,6 +637,7 @@ 47.76.132.29 212.224.107.120 196.251.85.197 +158.94.209.89 104.160.10.0/24 165.231.154.0/24 165.231.10.0/24