diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 5168c0904..d9fda159f 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ ο»Ώ[Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 03February2026v1 +! Version: 11February2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -31580,6 +31580,53 @@ drvhub.net##.driver-item__install ! my analysis: https://tria.ge/260116-d3jafadj81/behavioral1 ! https://infosec.exchange/@iampytest1/115902693235671566 ||gyrovague.com^$all,third-party,domain=archive.* +! https://github.com/blocklistproject/Lists/issues/1586 +||blocklist.site^ +||blocklist.site^$popup +||landr-atlas.com^ +||tagesschau.finance^ +! https://infosec.exchange/@iampytest1/116016048124997625 +||connectgates.co.in^ +||connectgates.co.in^$popup +||d621b48hubcc73aav7l0.connectgates.co.in^ +||d621b48hubcc73aav7l0.connectgates.co.in^$popup +||opredirect.com^ +||solsticea.net^ +||fusionchainedge.com^ +||fusionchainedge.com^$popup +||d621b18hubcc73aav3e0.fusionchainedge.com^ +||d621b18hubcc73aav3e0.fusionchainedge.com^$popup +||watchnowclick.com^ +||watchnowclick.com^$popup +||silverwhitebirds.co^ +||silverwhitebirds.co^$popup +||anthracnosis.lat^ +||anthracnosis.lat^$popup +||bzbiz-crm.com^ +||bzbiz-crm.com^$popup +||voyagewinds.co^ +||voyagewinds.co^$popup + +||newtabsearch.net^ +||ff.newtabsearch.net^ +||addons.newtabsearch.net^ +||telemechanism.cyou^ +||telemechanism.cyou^$popup +||ey43.com^ +||ey43.com^$popup +||resultsfastfind.com^ +! https://github.com/DandelionSprout/adfilt/issues/1223 +! https://tria.ge/260211-16ykvsb12c/behavioral1 +||snowvan.xyz^ +||snowvan.xyz^$popup +||kygens.xyz^ +||kygens.xyz^$popup +||host11m.cfd^ +||host15m.cfd^ +||filehost09.sbs^ +||sharehost06.sbs^ +||getdwnloadss.com^ +||getdwnloadss.com^$popup ! β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 0c81d9e08..67a45d783 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ ο»Ώ ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 03February2026v1 +! Version: 11February2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -18016,6 +18016,38 @@ drvhub.net##.driver-item__install ! my analysis: https://tria.ge/260116-d3jafadj81/behavioral1 ! https://infosec.exchange/@iampytest1/115902693235671566 ||gyrovague.com^$all,third-party,domain=archive.* +! https://github.com/blocklistproject/Lists/issues/1586 +||blocklist.site^$all +||landr-atlas.com^$document +||tagesschau.finance^$document +! https://infosec.exchange/@iampytest1/116016048124997625 +||connectgates.co.in^$all +||d621b48hubcc73aav7l0.connectgates.co.in^$all +||opredirect.com^$document +||solsticea.net^$document +||fusionchainedge.com^$all +||d621b18hubcc73aav3e0.fusionchainedge.com^$all +||watchnowclick.com^$all +||silverwhitebirds.co^$all +||anthracnosis.lat^$all +||bzbiz-crm.com^$all +||voyagewinds.co^$all + +||newtabsearch.net^$document +||ff.newtabsearch.net^$document +||addons.newtabsearch.net^$document +||telemechanism.cyou^$all +||ey43.com^$all +||resultsfastfind.com^$document +! https://github.com/DandelionSprout/adfilt/issues/1223 +! https://tria.ge/260211-16ykvsb12c/behavioral1 +||snowvan.xyz^$all +||kygens.xyz^$all +||host11m.cfd^$document +||host15m.cfd^$document +||filehost09.sbs^$document +||sharehost06.sbs^$document +||getdwnloadss.com^$all ! β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index c1c2e326d..2a40de1cf 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ ο»Ώ[Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL β‰₯5.22) -! Version: 03February2026v1 +! Version: 11February2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -15633,6 +15633,37 @@ ipaddress=198.58.118.167 ! https://social.coop/@eb/115902323900229756 ! my analysis: https://tria.ge/260116-d3jafadj81/behavioral1 ! https://infosec.exchange/@iampytest1/115902693235671566 +! https://github.com/blocklistproject/Lists/issues/1586 +||blocklist.site^ +||landr-atlas.com^ +||tagesschau.finance^ +! https://infosec.exchange/@iampytest1/116016048124997625 +||connectgates.co.in^ +||d621b48hubcc73aav7l0.connectgates.co.in^ +||opredirect.com^ +||solsticea.net^ +||fusionchainedge.com^ +||d621b18hubcc73aav3e0.fusionchainedge.com^ +||watchnowclick.com^ +||silverwhitebirds.co^ +||anthracnosis.lat^ +||bzbiz-crm.com^ +||voyagewinds.co^ +||newtabsearch.net^ +||ff.newtabsearch.net^ +||addons.newtabsearch.net^ +||telemechanism.cyou^ +||ey43.com^ +||resultsfastfind.com^ +! https://github.com/DandelionSprout/adfilt/issues/1223 +! https://tria.ge/260211-16ykvsb12c/behavioral1 +||snowvan.xyz^ +||kygens.xyz^ +||host11m.cfd^ +||host15m.cfd^ +||filehost09.sbs^ +||sharehost06.sbs^ +||getdwnloadss.com^ ! β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. ||unofficialtwrp.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index e7f99a705..e49d50653 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ ο»Ώ# Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 03February2026v1 +# Version: 11February2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -16641,6 +16641,39 @@ doh-gov.ph # https://social.coop/@eb/115902323900229756 # my analysis: https://tria.ge/260116-d3jafadj81/behavioral1 # https://infosec.exchange/@iampytest1/115902693235671566 +gyrovague.com +# https://github.com/blocklistproject/Lists/issues/1586 +blocklist.site +landr-atlas.com +tagesschau.finance +# https://infosec.exchange/@iampytest1/116016048124997625 +connectgates.co.in +d621b48hubcc73aav7l0.connectgates.co.in +opredirect.com +solsticea.net +fusionchainedge.com +d621b18hubcc73aav3e0.fusionchainedge.com +watchnowclick.com +silverwhitebirds.co +anthracnosis.lat +bzbiz-crm.com +voyagewinds.co +quick-scanning.top +newtabsearch.net +ff.newtabsearch.net +addons.newtabsearch.net +telemechanism.cyou +ey43.com +resultsfastfind.com +# https://github.com/DandelionSprout/adfilt/issues/1223 +# https://tria.ge/260211-16ykvsb12c/behavioral1 +snowvan.xyz +kygens.xyz +host11m.cfd +host15m.cfd +filehost09.sbs +sharehost06.sbs +getdwnloadss.com # β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 0fa655062..cb37f2749 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ ο»Ώ# Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 03February2026v1 +# Version: 11February2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later can consider switching to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, due to an unconfirmed belief of mine that it allows better wildcarding than the Hosts and raw-domains versions. @@ -16588,6 +16588,39 @@ # https://social.coop/@eb/115902323900229756 # my analysis: https://tria.ge/260116-d3jafadj81/behavioral1 # https://infosec.exchange/@iampytest1/115902693235671566 +127.0.0.1 gyrovague.com +# https://github.com/blocklistproject/Lists/issues/1586 +127.0.0.1 blocklist.site +127.0.0.1 landr-atlas.com +127.0.0.1 tagesschau.finance +# https://infosec.exchange/@iampytest1/116016048124997625 +127.0.0.1 connectgates.co.in +127.0.0.1 d621b48hubcc73aav7l0.connectgates.co.in +127.0.0.1 opredirect.com +127.0.0.1 solsticea.net +127.0.0.1 fusionchainedge.com +127.0.0.1 d621b18hubcc73aav3e0.fusionchainedge.com +127.0.0.1 watchnowclick.com +127.0.0.1 silverwhitebirds.co +127.0.0.1 anthracnosis.lat +127.0.0.1 bzbiz-crm.com +127.0.0.1 voyagewinds.co +127.0.0.1 quick-scanning.top +127.0.0.1 newtabsearch.net +127.0.0.1 ff.newtabsearch.net +127.0.0.1 addons.newtabsearch.net +127.0.0.1 telemechanism.cyou +127.0.0.1 ey43.com +127.0.0.1 resultsfastfind.com +# https://github.com/DandelionSprout/adfilt/issues/1223 +# https://tria.ge/260211-16ykvsb12c/behavioral1 +127.0.0.1 snowvan.xyz +127.0.0.1 kygens.xyz +127.0.0.1 host11m.cfd +127.0.0.1 host15m.cfd +127.0.0.1 filehost09.sbs +127.0.0.1 sharehost06.sbs +127.0.0.1 getdwnloadss.com # β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index e31eb73bd..e3f301026 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ ο»Ώ{+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 03February2026v1-Deprecated +# Version: 11February2026v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -16205,6 +16205,34 @@ .doh-gov.ph # DDoS script .gyrovague.com +.blocklist.site +.landr-atlas.com +.tagesschau.finance +.connectgates.co.in +.d621b48hubcc73aav7l0.connectgates.co.in +.opredirect.com +.solsticea.net +.fusionchainedge.com +.d621b18hubcc73aav3e0.fusionchainedge.com +.watchnowclick.com +.silverwhitebirds.co +.anthracnosis.lat +.bzbiz-crm.com +.voyagewinds.co +.quick-scanning.top +.newtabsearch.net +.ff.newtabsearch.net +.addons.newtabsearch.net +.telemechanism.cyou +.ey43.com +.resultsfastfind.com +.snowvan.xyz +.kygens.xyz +.host11m.cfd +.host15m.cfd +.filehost09.sbs +.sharehost06.sbs +.getdwnloadss.com {+block} # β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 0f90aac92..20b0bb405 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ ο»ΏmsFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 03February2026v1-Deprecated +# Version: 11February2026v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -16631,6 +16631,38 @@ ed.br ?q=artstation- # my analysis: https://tria.ge/260116-d3jafadj81/behavioral1 # https://infosec.exchange/@iampytest1/115902693235671566 -d gyrovague.com +# https://github.com/blocklistproject/Lists/issues/1586 +-d blocklist.site +-d landr-atlas.com +-d tagesschau.finance +# https://infosec.exchange/@iampytest1/116016048124997625 +-d connectgates.co.in +-d d621b48hubcc73aav7l0.connectgates.co.in +-d opredirect.com +-d solsticea.net +-d fusionchainedge.com +-d d621b18hubcc73aav3e0.fusionchainedge.com +-d watchnowclick.com +-d silverwhitebirds.co +-d anthracnosis.lat +-d bzbiz-crm.com +-d voyagewinds.co +-d quick-scanning.top +-d newtabsearch.net +-d ff.newtabsearch.net +-d addons.newtabsearch.net +-d telemechanism.cyou +-d ey43.com +-d resultsfastfind.com +# https://github.com/DandelionSprout/adfilt/issues/1223 +# https://tria.ge/260211-16ykvsb12c/behavioral1 +-d snowvan.xyz +-d kygens.xyz +-d host11m.cfd +-d host15m.cfd +-d filehost09.sbs +-d sharehost06.sbs +-d getdwnloadss.com # β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone. diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p index b56d3e481..de52eadd7 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p @@ -370,6 +370,7 @@ F:158.94.209.90-158.94.209.90 F:223.29.226.200-223.29.226.200 F:94.156.232.201-94.156.232.201 F:213.209.143.119-213.209.143.119 +F:23.22.126.183-23.22.126.183 F:194.226.139.121-194.226.139.121 F:194.226.139.7-194.226.139.7 F:95.181.157.36-95.181.157.36 @@ -555,9 +556,8 @@ F:52.72.216.6-52.72.216.6 F:94.130.197.238-94.130.197.238 F:63.33.119.172-63.33.119.172 F:52.207.126.104-52.207.126.104 +F:185.7.99.190-185.7.99.190 F:103.67.200.64-103.67.200.64 -F:198.134.116.17-198.134.116.17 -F:198.134.116.30-198.134.116.30 F:212.27.60.108-212.27.60.108 F:13.248.148.254-13.248.148.254 F:185.53.177.50-185.53.177.50 @@ -860,8 +860,6 @@ F:185.149.120.173-185.149.120.173 F:157.90.183.248-157.90.183.248 F:5.61.55.143-5.61.55.143 F:37.1.213.100-37.1.213.100 -F:185.246.188.125-185.246.188.125 -F:185.246.188.124-185.246.188.124 F:154.199.255.184-154.199.255.184 F:88.208.46.222-88.208.46.222 F:103.224.182.210-103.224.182.210 @@ -881,6 +879,8 @@ F:172.240.108.76-172.240.108.76 F:172.240.108.84-172.240.108.84 F:172.240.127.234-172.240.127.234 F:172.240.253.132-172.240.253.132 +F:185.246.188.124-185.246.188.124 +F:185.246.188.125-185.246.188.125 F:192.243.59.12-192.243.59.12 F:192.243.59.13-192.243.59.13 F:192.243.59.20-192.243.59.20 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 346b9dbff..de542cc51 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -388,6 +388,7 @@ 223.29.226.200 94.156.232.201 213.209.143.119 +23.22.126.183 194.226.139.121 194.226.139.7 95.181.157.36 @@ -591,9 +592,8 @@ [2604:9e00:1:129::2:b10] [2606:4700:3033::6815:5644] [2a01:4f8:2201:388a::2] +185.7.99.190 103.67.200.64 -198.134.116.17 -198.134.116.30 [2a00:8860:10d:1::2:b01] 212.27.60.108 13.248.148.254 @@ -901,8 +901,6 @@ 157.90.183.248 5.61.55.143 37.1.213.100 -185.246.188.125 -185.246.188.124 154.199.255.184 88.208.46.222 103.224.182.210 @@ -922,6 +920,8 @@ 172.240.108.84 172.240.127.234 172.240.253.132 +185.246.188.124 +185.246.188.125 192.243.59.12 192.243.59.13 192.243.59.20