From 43de64d31d41cfacd57c2761ede07bf135865724 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Fri, 25 Apr 2025 22:03:17 +0200 Subject: [PATCH] Fix #1129 + Part 1/2 for #1128 --- Dandelion Sprout's Anti-Malware List.txt | 36 ++++++++---------------- 1 file changed, 12 insertions(+), 24 deletions(-) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index ee0c12de6..df98f40ab 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 25April2025v1 +! Version: 25April2025v2 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -486,16 +486,7 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ! https://scammer•info/t/discord-nitro-scam-25/87887 ||discorde-nitre.xyz^$all,~inline-font,domain=~fake-malware-version-of-discordapp.com -! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ——— -||netnet44.net^$all,~inline-font -||amanda.*.net^$doc -||sarah.*.net^$doc -||pamela.*.net^$doc -||jessica.*.net^$doc -||katie.*.net^$doc -||emily.*.net^$doc -||54.174.156.141^$doc -*$all,ipaddress=54.174.156.141 +! ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ——— ||lucretius-ada.com^$all,~inline-font ||hippolyte-hag.com^$all,~inline-font ||india-abc.com^$all,~inline-font @@ -527,19 +518,6 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||roamingclicks.com^$all,~inline-font ! Source: desidertNO ||collectfasttracks.com^$all,~inline-font,domain=~malware_redirection_trains.* -! Source: vn-zoomCOM -||ttnrd.com^$all,~inline-font -||amanda.*.com^$doc -||katie.*.com^$doc -||briana.*.com^$doc -||sarah.*.com^$doc -||pamela.*.com^$doc -||54.152.245.247^$doc -*$all,ipaddress=54.152.245.247 -||35.172.40.232^$doc -*$all,ipaddress=35.172.40.232 -||3.90.125.85^$doc -*$all,ipaddress=3.90.125.85 ! Various ex-affiliate links at www•zombooru•com ||track.vcdc.com^$all,~inline-font,domain=~malware_redirection_trains.* ||track.tkbo.com^$all,~inline-font,domain=~malware_redirection_trains.* @@ -26973,6 +26951,8 @@ zombooru.com##a[href$="ttp://www.hard55.com"] *$ipaddress=172.240.41.32 *$ipaddress=172.240.41.64 *$ipaddress=172.240.41.96 +! https://github.com/DandelionSprout/adfilt/issues/1129 +||password-internal.com^ ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -32723,6 +32703,14 @@ www.tumblr.com##div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([hr ||zurc2.com^$all ! Sites linked to by GitHub spambots who create fake issue reports ||modernvison.com^$doc +! https://github.com/DandelionSprout/adfilt/issues/1128 de facto +||casino-lite.net^$doc +||googleapis.info^$doc +||netnet33.net^$all +||netnet44.net^$all +||odintara.com^$doc +||54.174.156.141^$doc +*$all,ipaddress=54.174.156.141 ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^$all