mirror of
https://github.com/DandelionSprout/adfilt.git
synced 2026-09-24 22:03:36 +01:00
Add files via upload
This commit is contained in:
Imre Kristoffer Eilertsen
@@ -1,6 +1,6 @@
|
||||
[Adblock Plus 3.13]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
|
||||
! Version: 01October2022v1
|
||||
! Version: 17October2022v2
|
||||
! Expires: 2 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -21,7 +21,7 @@
|
||||
! Palau
|
||||
||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw|~bittor.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~b00k.pw|~gopass.pw
|
||||
! Legitimate use is almost non-existent, but has a tiny userbase in Japan
|
||||
||top^$domain=~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top
|
||||
||top^$domain=~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top
|
||||
! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
||loan^
|
||||
||agency^$domain=~battlefield.agency|~shortcut.agency
|
||||
@@ -29,7 +29,9 @@
|
||||
||bid^
|
||||
||ooo^
|
||||
! https://bgp.he.net/AS202492#_prefixes (17/07/2022)
|
||||
||monster^$domain=~egybest.monster|~yts.monster
|
||||
||monster^$domain=~egybest.monster|~yts.monster|~cloudcdn.monster
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
||sbs^
|
||||
! Experimental attempt to cover a few hardcore spam ASNs
|
||||
.buzz/*/?*=*&*=*&*=*&*=*&*=
|
||||
.life/*/?*=*&*=*&*=*&*=*&*=
|
||||
@@ -171,6 +173,7 @@ play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([
|
||||
||willyousurvive.com^$popup
|
||||
||underthegarden.com^
|
||||
||underthegarden.com^$popup
|
||||
||fileplanet.com^$popup
|
||||
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
||funeducation.com^
|
||||
@@ -3772,8 +3775,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||acjovut.cyou^$popup
|
||||
||aebeiw.cyou^
|
||||
||aebeiw.cyou^$popup
|
||||
||aerocarrier.sbs^
|
||||
||aerocarrier.sbs^$popup
|
||||
||affbf6epr.com^
|
||||
||affbf6epr.com^$popup
|
||||
||affil-parners.com^
|
||||
@@ -3784,8 +3785,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||afrkotdr.com^$popup
|
||||
||afrmaps.com^
|
||||
||afrmaps.com^$popup
|
||||
||agrimony.sbs^
|
||||
||agrimony.sbs^$popup
|
||||
||ahcgkwj.cyou^
|
||||
||ahcgkwj.cyou^$popup
|
||||
||aix-delivery.icu^
|
||||
@@ -3820,8 +3819,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||bahisbet24.com^$popup
|
||||
||ballerspin.com^
|
||||
||ballerspin.com^$popup
|
||||
||barbarian.sbs^
|
||||
||barbarian.sbs^$popup
|
||||
||bb-delivery.icu^
|
||||
||bb-delivery.icu^$popup
|
||||
||bcojuck.art^
|
||||
@@ -3864,8 +3861,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||click4fun.icu^$popup
|
||||
||clicklucky.icu^
|
||||
||clicklucky.icu^$popup
|
||||
||conformation.sbs^
|
||||
||conformation.sbs^$popup
|
||||
||connection-update.site^
|
||||
||connection-update.site^$popup
|
||||
||cpae65ir.cyou^
|
||||
@@ -3880,14 +3875,10 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||deliv-x.icu^$popup
|
||||
||deliv.icu^
|
||||
||deliv.icu^$popup
|
||||
||detonation.sbs^
|
||||
||detonation.sbs^$popup
|
||||
||dhdkgbm.cyou^
|
||||
||dhdkgbm.cyou^$popup
|
||||
||disk-fire-dom-wall.red^
|
||||
||disk-fire-dom-wall.red^$popup
|
||||
||distillery.sbs^
|
||||
||distillery.sbs^$popup
|
||||
||diw65ucvq.art^
|
||||
||diw65ucvq.art^$popup
|
||||
||dmkounjqn.com^
|
||||
@@ -4876,6 +4867,11 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
/^http://imgblaze.net/[a-z0-9]{6}$/$popup
|
||||
!+ NOT_OPTIMIZED
|
||||
/^http://imgblaze.net/[a-z0-9]{6}$/$third-party,subdocument
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
||146.19.169.98^
|
||||
||146.19.169.99^
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/132079
|
||||
/pushredirect/?
|
||||
|
||||
|
||||
! ——— Standard malware that I stumbled upon on my own ———
|
||||
@@ -16961,6 +16957,8 @@ tumblr.com#?#div[data-id][tabindex="-1"]:-abp-has(a[href^="https://href.li/?http
|
||||
! https://scambiofigu.forumcommunity.net/?t=57482915
|
||||
||scambiofigu.net^
|
||||
||scambiofigu.net^$popup
|
||||
! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious
|
||||
apkfab.com##.tip-extension
|
||||
! Other
|
||||
||foxsportnetwork.com^
|
||||
||foxsportnetwork.com^$popup
|
||||
@@ -16977,6 +16975,15 @@ tumblr.com#?#div[data-id][tabindex="-1"]:-abp-has(a[href^="https://href.li/?http
|
||||
||quiremuken.xyz^
|
||||
||quiremuken.xyz^$popup
|
||||
cdburnerxp.se##[href*="/downloadsetup.exe"]
|
||||
||sexy-egirls-leaked.com^
|
||||
||file2share.co^
|
||||
||file2share.co^$popup
|
||||
||erothots.co^
|
||||
||erothots.co^$popup
|
||||
||only2leaked.co^
|
||||
||only4leaked.co^
|
||||
||thotsbay-leaked.com^
|
||||
||cbox.ws^$domain=chicks.cam
|
||||
|
||||
! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
@@ -17186,7 +17193,6 @@ www.microsoft.com##a[data-pfns][data-pfns*=pedriapps]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=gameboxstudios]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=singleton]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=kankygames]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cbgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=adilogames]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=onetapgames]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=deeterstudio]
|
||||
@@ -17203,11 +17209,31 @@ www.microsoft.com##a[data-pfns][data-pfns*="appmediastudio."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="barleygamesstudio."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="braditgamesstudio."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="chandlergamesstudio."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cdgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="ryandev."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="pawpatrol."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=talgliando]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="html5."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cbgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="ccgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cdgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cegame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cfgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cggame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="chgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cigame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cjgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="ckgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="clgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cmgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cngame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cpgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cqgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="crgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="csgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="ctgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cugame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cvgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cwgame."]
|
||||
! All legitimate Pac-Man games would use "pac-man" links with a dash
|
||||
www.microsoft.com##a[data-pfns][href*=pacman]
|
||||
www.microsoft.com##a[data-pfns][href*=pac-men]
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
[AdGuard versions from 2019 onwards]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
|
||||
! Version: 01October2022v1
|
||||
! Version: 17October2022v2
|
||||
! Expires: 2 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -21,7 +21,7 @@
|
||||
! Palau
|
||||
||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw|~bittor.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~b00k.pw|~gopass.pw
|
||||
! Legitimate use is almost non-existent, but has a tiny userbase in Japan
|
||||
||top^$document,domain=~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top
|
||||
||top^$document,domain=~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top
|
||||
! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
||loan^$document
|
||||
||agency^$document,domain=~battlefield.agency|~shortcut.agency
|
||||
@@ -29,7 +29,9 @@
|
||||
||bid^$document
|
||||
||ooo^$document
|
||||
! https://bgp.he.net/AS202492#_prefixes (17/07/2022)
|
||||
||monster^$document,domain=~egybest.monster|~yts.monster
|
||||
||monster^$document,domain=~egybest.monster|~yts.monster|~cloudcdn.monster
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
||sbs^$document
|
||||
! Experimental attempt to cover a few hardcore spam ASNs
|
||||
.buzz/*/?*=*&*=*&*=*&*=*&*=$document
|
||||
.life/*/?*=*&*=*&*=*&*=*&*=$document
|
||||
@@ -165,6 +167,7 @@ play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*
|
||||
||qasirgame.com^$all
|
||||
||willyousurvive.com^$all
|
||||
||underthegarden.com^$all
|
||||
||fileplanet.com^$document,popup
|
||||
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
||funeducation.com^$document
|
||||
@@ -2357,13 +2360,11 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||888starz-3b.bet^$all
|
||||
||acjovut.cyou^$all
|
||||
||aebeiw.cyou^$all
|
||||
||aerocarrier.sbs^$all
|
||||
||affbf6epr.com^$all
|
||||
||affil-parners.com^$all
|
||||
||afrangl.com^$all
|
||||
||afrkotdr.com^$all
|
||||
||afrmaps.com^$all
|
||||
||agrimony.sbs^$all
|
||||
||ahcgkwj.cyou^$all
|
||||
||aix-delivery.icu^$all
|
||||
||alfpyf.cyou^$all
|
||||
@@ -2381,7 +2382,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||bahisbet.live^$all
|
||||
||bahisbet24.com^$all
|
||||
||ballerspin.com^$all
|
||||
||barbarian.sbs^$all
|
||||
||bb-delivery.icu^$all
|
||||
||bcojuck.art^$all
|
||||
||betwinner-ua.com^$all
|
||||
@@ -2403,7 +2403,6 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||cfnfmb.cyou^$all
|
||||
||click4fun.icu^$all
|
||||
||clicklucky.icu^$all
|
||||
||conformation.sbs^$all
|
||||
||connection-update.site^$all
|
||||
||cpae65ir.cyou^$all
|
||||
||cqzgfjjvz.com^$all
|
||||
@@ -2411,10 +2410,8 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
||deliv-s.icu^$all
|
||||
||deliv-x.icu^$all
|
||||
||deliv.icu^$all
|
||||
||detonation.sbs^$all
|
||||
||dhdkgbm.cyou^$all
|
||||
||disk-fire-dom-wall.red^$all
|
||||
||distillery.sbs^$all
|
||||
||diw65ucvq.art^$all
|
||||
||dmkounjqn.com^$all
|
||||
||do-sy6lna.cyou^$all
|
||||
@@ -2938,6 +2935,11 @@ zombooru.com##a[href="http://www.hard55.com"]
|
||||
/^http://imgblaze.net/[a-z0-9]{6}$/$document,popup
|
||||
!+ NOT_OPTIMIZED
|
||||
/^http://imgblaze.net/[a-z0-9]{6}$/$third-party,subdocument
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
146.19.169.98$network
|
||||
146.19.169.99$network
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/132079
|
||||
/pushredirect/?$document
|
||||
|
||||
|
||||
! ——— Standard malware that I stumbled upon on my own ———
|
||||
@@ -9060,6 +9062,8 @@ toorgle.net##.join
|
||||
tumblr.com#?#div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://bit.ly/"])
|
||||
! https://scambiofigu.forumcommunity.net/?t=57482915
|
||||
||scambiofigu.net^$all
|
||||
! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious
|
||||
apkfab.com##.tip-extension
|
||||
! Other
|
||||
||foxsportnetwork.com^$all
|
||||
||pksauniversity.com^$all
|
||||
@@ -9070,6 +9074,13 @@ tumblr.com#?#div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://b
|
||||
||vlcmediadownload.com^$all
|
||||
||quiremuken.xyz^$all
|
||||
cdburnerxp.se##[href*="/downloadsetup.exe"]
|
||||
||sexy-egirls-leaked.com^$document
|
||||
||file2share.co^$all
|
||||
||erothots.co^$all
|
||||
||only2leaked.co^$document
|
||||
||only4leaked.co^$document
|
||||
||thotsbay-leaked.com^$document
|
||||
||cbox.ws^$domain=chicks.cam
|
||||
|
||||
! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
@@ -9281,7 +9292,6 @@ www.microsoft.com##a[data-pfns][data-pfns*=pedriapps]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=gameboxstudios]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=singleton]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=kankygames]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cbgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=adilogames]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=onetapgames]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=deeterstudio]
|
||||
@@ -9298,11 +9308,31 @@ www.microsoft.com##a[data-pfns][data-pfns*="appmediastudio."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="barleygamesstudio."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="braditgamesstudio."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="chandlergamesstudio."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cdgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="ryandev."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="pawpatrol."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*=talgliando]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="html5."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cbgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="ccgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cdgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cegame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cfgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cggame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="chgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cigame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cjgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="ckgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="clgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cmgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cngame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cpgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cqgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="crgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="csgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="ctgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cugame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cvgame."]
|
||||
www.microsoft.com##a[data-pfns][data-pfns*="cwgame."]
|
||||
! All legitimate Pac-Man games would use "pac-man" links with a dash
|
||||
www.microsoft.com##a[data-pfns][href*=pacman]
|
||||
www.microsoft.com##a[data-pfns][href*=pac-men]
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
[Adblock Plus 3.13]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
|
||||
! Version: 01October2022v1
|
||||
! Version: 17October2022v2
|
||||
! Expires: 2 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -22,7 +22,7 @@
|
||||
! Palau
|
||||
||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|zikrap.pw|demonoid.pw|bittor.pw|buttercup.pw|rezka.pw|darkcrystal.pw|xor.pw|fullhdfilmizlesene.pw|b00k.pw|gopass.pw
|
||||
! Legitimate use is almost non-existent, but has a tiny userbase in Japan
|
||||
||top^$denyallow=corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|techblog.top
|
||||
||top^$denyallow=corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|techblog.top|changlam10.top|changlam11.top
|
||||
! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
||loan^
|
||||
||agency^$denyallow=battlefield.agency|shortcut.agency
|
||||
@@ -30,7 +30,9 @@
|
||||
||bid^
|
||||
||ooo^
|
||||
! https://bgp.he.net/AS202492#_prefixes (17/07/2022)
|
||||
||monster^$denyallow=egybest.monster|yts.monster
|
||||
||monster^$denyallow=egybest.monster|yts.monster|cloudcdn.monster
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
||sbs^
|
||||
! Experimental attempt to cover a few hardcore spam ASNs
|
||||
.buzz/*/?*=*&*=*&*=*&*=*&*=
|
||||
.life/*/?*=*&*=*&*=*&*=*&*=
|
||||
@@ -107,6 +109,7 @@
|
||||
||qasirgame.com^
|
||||
||willyousurvive.com^
|
||||
||underthegarden.com^
|
||||
||fileplanet.com^
|
||||
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
||funeducation.com^
|
||||
@@ -2168,13 +2171,11 @@
|
||||
||888starz-3b.bet^
|
||||
||acjovut.cyou^
|
||||
||aebeiw.cyou^
|
||||
||aerocarrier.sbs^
|
||||
||affbf6epr.com^
|
||||
||affil-parners.com^
|
||||
||afrangl.com^
|
||||
||afrkotdr.com^
|
||||
||afrmaps.com^
|
||||
||agrimony.sbs^
|
||||
||ahcgkwj.cyou^
|
||||
||aix-delivery.icu^
|
||||
||alfpyf.cyou^
|
||||
@@ -2192,7 +2193,6 @@
|
||||
||bahisbet.live^
|
||||
||bahisbet24.com^
|
||||
||ballerspin.com^
|
||||
||barbarian.sbs^
|
||||
||bb-delivery.icu^
|
||||
||bcojuck.art^
|
||||
||betwinner-ua.com^
|
||||
@@ -2214,7 +2214,6 @@
|
||||
||cfnfmb.cyou^
|
||||
||click4fun.icu^
|
||||
||clicklucky.icu^
|
||||
||conformation.sbs^
|
||||
||connection-update.site^
|
||||
||cpae65ir.cyou^
|
||||
||cqzgfjjvz.com^
|
||||
@@ -2222,10 +2221,8 @@
|
||||
||deliv-s.icu^
|
||||
||deliv-x.icu^
|
||||
||deliv.icu^
|
||||
||detonation.sbs^
|
||||
||dhdkgbm.cyou^
|
||||
||disk-fire-dom-wall.red^
|
||||
||distillery.sbs^
|
||||
||diw65ucvq.art^
|
||||
||dmkounjqn.com^
|
||||
||do-sy6lna.cyou^
|
||||
@@ -2749,6 +2746,11 @@
|
||||
/^http://imgblaze.net/[a-z0-9]{6}$/
|
||||
!+ NOT_OPTIMIZED
|
||||
/^http://imgblaze.net/[a-z0-9]{6}$/$third-party,subdocument
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
146.19.169.98
|
||||
146.19.169.99
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/132079
|
||||
/pushredirect/?
|
||||
|
||||
|
||||
! ——— Standard malware that I stumbled upon on my own ———
|
||||
@@ -8868,6 +8870,7 @@
|
||||
! Spambot posts on Tumblr (19/09/2022)
|
||||
! https://scambiofigu.forumcommunity.net/?t=57482915
|
||||
||scambiofigu.net^
|
||||
! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious
|
||||
! Other
|
||||
||foxsportnetwork.com^
|
||||
||pksauniversity.com^
|
||||
@@ -8877,6 +8880,13 @@
|
||||
||greaterfiledownload.com^
|
||||
||vlcmediadownload.com^
|
||||
||quiremuken.xyz^
|
||||
||sexy-egirls-leaked.com^
|
||||
||file2share.co^
|
||||
||erothots.co^
|
||||
||only2leaked.co^
|
||||
||only4leaked.co^
|
||||
||thotsbay-leaked.com^
|
||||
||cbox.ws^$chicks.cam
|
||||
|
||||
! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
|
||||
# Version: 01October2022v1
|
||||
# Version: 17October2022v2
|
||||
# Expires: 2 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
|
||||
@@ -26,6 +26,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
# Experimental attempt to cover a few hardcore spam ASNs
|
||||
|
||||
|
||||
@@ -105,6 +106,7 @@ viaarena.com
|
||||
qasirgame.com
|
||||
willyousurvive.com
|
||||
underthegarden.com
|
||||
fileplanet.com
|
||||
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
funeducation.com
|
||||
@@ -1884,13 +1886,11 @@ verif-caseid9871-verizonrview.com
|
||||
888starz-3b.bet
|
||||
acjovut.cyou
|
||||
aebeiw.cyou
|
||||
aerocarrier.sbs
|
||||
affbf6epr.com
|
||||
affil-parners.com
|
||||
afrangl.com
|
||||
afrkotdr.com
|
||||
afrmaps.com
|
||||
agrimony.sbs
|
||||
ahcgkwj.cyou
|
||||
aix-delivery.icu
|
||||
alfpyf.cyou
|
||||
@@ -1908,7 +1908,6 @@ bahisbet.fun
|
||||
bahisbet.live
|
||||
bahisbet24.com
|
||||
ballerspin.com
|
||||
barbarian.sbs
|
||||
bb-delivery.icu
|
||||
bcojuck.art
|
||||
betwinner-ua.com
|
||||
@@ -1930,7 +1929,6 @@ cazinoz.org
|
||||
cfnfmb.cyou
|
||||
click4fun.icu
|
||||
clicklucky.icu
|
||||
conformation.sbs
|
||||
connection-update.site
|
||||
cpae65ir.cyou
|
||||
cqzgfjjvz.com
|
||||
@@ -1938,10 +1936,8 @@ dbfkatqff.com
|
||||
deliv-s.icu
|
||||
deliv-x.icu
|
||||
deliv.icu
|
||||
detonation.sbs
|
||||
dhdkgbm.cyou
|
||||
disk-fire-dom-wall.red
|
||||
distillery.sbs
|
||||
diw65ucvq.art
|
||||
dmkounjqn.com
|
||||
do-sy6lna.cyou
|
||||
@@ -2449,6 +2445,9 @@ bnbdeal.net
|
||||
|
||||
|
||||
|
||||
146.19.169.98
|
||||
146.19.169.99
|
||||
|
||||
|
||||
|
||||
# ——— Standard malware that I stumbled upon on my own ———
|
||||
@@ -8533,6 +8532,7 @@ ppesupplies.xyz
|
||||
ingeniovirtual.com
|
||||
# Spambot posts on Tumblr (19/09/2022)
|
||||
scambiofigu.net
|
||||
# Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious
|
||||
# Other
|
||||
foxsportnetwork.com
|
||||
pksauniversity.com
|
||||
@@ -8542,6 +8542,13 @@ dorderstar.xyz
|
||||
greaterfiledownload.com
|
||||
vlcmediadownload.com
|
||||
quiremuken.xyz
|
||||
sexy-egirls-leaked.com
|
||||
file2share.co
|
||||
erothots.co
|
||||
only2leaked.co
|
||||
only4leaked.co
|
||||
thotsbay-leaked.com
|
||||
cbox.ws
|
||||
|
||||
# ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
|
||||
# Version: 01October2022v1
|
||||
# Version: 17October2022v2
|
||||
# Expires: 2 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
|
||||
@@ -26,6 +26,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
# Experimental attempt to cover a few hardcore spam ASNs
|
||||
|
||||
|
||||
@@ -105,6 +106,7 @@
|
||||
127.0.0.1 qasirgame.com
|
||||
127.0.0.1 willyousurvive.com
|
||||
127.0.0.1 underthegarden.com
|
||||
127.0.0.1 fileplanet.com
|
||||
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
127.0.0.1 funeducation.com
|
||||
@@ -1884,13 +1886,11 @@
|
||||
127.0.0.1 888starz-3b.bet
|
||||
127.0.0.1 acjovut.cyou
|
||||
127.0.0.1 aebeiw.cyou
|
||||
127.0.0.1 aerocarrier.sbs
|
||||
127.0.0.1 affbf6epr.com
|
||||
127.0.0.1 affil-parners.com
|
||||
127.0.0.1 afrangl.com
|
||||
127.0.0.1 afrkotdr.com
|
||||
127.0.0.1 afrmaps.com
|
||||
127.0.0.1 agrimony.sbs
|
||||
127.0.0.1 ahcgkwj.cyou
|
||||
127.0.0.1 aix-delivery.icu
|
||||
127.0.0.1 alfpyf.cyou
|
||||
@@ -1908,7 +1908,6 @@
|
||||
127.0.0.1 bahisbet.live
|
||||
127.0.0.1 bahisbet24.com
|
||||
127.0.0.1 ballerspin.com
|
||||
127.0.0.1 barbarian.sbs
|
||||
127.0.0.1 bb-delivery.icu
|
||||
127.0.0.1 bcojuck.art
|
||||
127.0.0.1 betwinner-ua.com
|
||||
@@ -1930,7 +1929,6 @@
|
||||
127.0.0.1 cfnfmb.cyou
|
||||
127.0.0.1 click4fun.icu
|
||||
127.0.0.1 clicklucky.icu
|
||||
127.0.0.1 conformation.sbs
|
||||
127.0.0.1 connection-update.site
|
||||
127.0.0.1 cpae65ir.cyou
|
||||
127.0.0.1 cqzgfjjvz.com
|
||||
@@ -1938,10 +1936,8 @@
|
||||
127.0.0.1 deliv-s.icu
|
||||
127.0.0.1 deliv-x.icu
|
||||
127.0.0.1 deliv.icu
|
||||
127.0.0.1 detonation.sbs
|
||||
127.0.0.1 dhdkgbm.cyou
|
||||
127.0.0.1 disk-fire-dom-wall.red
|
||||
127.0.0.1 distillery.sbs
|
||||
127.0.0.1 diw65ucvq.art
|
||||
127.0.0.1 dmkounjqn.com
|
||||
127.0.0.1 do-sy6lna.cyou
|
||||
@@ -2449,6 +2445,9 @@
|
||||
|
||||
|
||||
|
||||
127.0.0.1 146.19.169.98
|
||||
127.0.0.1 146.19.169.99
|
||||
|
||||
|
||||
|
||||
# ——— Standard malware that I stumbled upon on my own ———
|
||||
@@ -8533,6 +8532,7 @@
|
||||
127.0.0.1 ingeniovirtual.com
|
||||
# Spambot posts on Tumblr (19/09/2022)
|
||||
127.0.0.1 scambiofigu.net
|
||||
# Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious
|
||||
# Other
|
||||
127.0.0.1 foxsportnetwork.com
|
||||
127.0.0.1 pksauniversity.com
|
||||
@@ -8542,6 +8542,13 @@
|
||||
127.0.0.1 greaterfiledownload.com
|
||||
127.0.0.1 vlcmediadownload.com
|
||||
127.0.0.1 quiremuken.xyz
|
||||
127.0.0.1 sexy-egirls-leaked.com
|
||||
127.0.0.1 file2share.co
|
||||
127.0.0.1 erothots.co
|
||||
127.0.0.1 only2leaked.co
|
||||
127.0.0.1 only4leaked.co
|
||||
127.0.0.1 thotsbay-leaked.com
|
||||
127.0.0.1 cbox.ws
|
||||
|
||||
# ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{+block}
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
|
||||
# Version: 01October2022v1
|
||||
# Version: 17October2022v2
|
||||
# Expires: 2 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
|
||||
@@ -28,6 +28,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
# Experimental attempt to cover a few hardcore spam ASNs
|
||||
|
||||
|
||||
@@ -114,6 +115,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
{+block}
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
|
||||
@@ -2178,12 +2180,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -2493,6 +2489,9 @@
|
||||
#
|
||||
|
||||
|
||||
/pushredirect/?
|
||||
|
||||
|
||||
{+block}
|
||||
# ——— Standard malware that I stumbled upon on my own ———
|
||||
|
||||
@@ -8598,6 +8597,7 @@
|
||||
|
||||
# Spambot posts on Tumblr (19/09/2022)
|
||||
|
||||
# Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious
|
||||
# Other
|
||||
|
||||
|
||||
@@ -8608,6 +8608,13 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
{+block}
|
||||
# ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
msFilterList
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
|
||||
# Version: 01October2022v1
|
||||
# Version: 17October2022v2
|
||||
: expires = 2 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -100,7 +100,9 @@ msFilterList
|
||||
+d shucks.top
|
||||
+d 1stream.top
|
||||
+d ambr.top
|
||||
+d techblog.top
|
||||
+d techblog.top
|
||||
+d changlam10.top
|
||||
+d changlam11.top
|
||||
# International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
|
||||
-d agency
|
||||
@@ -112,7 +114,10 @@ msFilterList
|
||||
# https://bgp.he.net/AS202492#_prefixes/(17/07/2022)
|
||||
-d monster
|
||||
+d egybest.monster
|
||||
+d yts.monster
|
||||
+d yts.monster
|
||||
+d cloudcdn.monster
|
||||
# https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
|
||||
# Experimental attempt to cover a few hardcore spam ASNs
|
||||
|
||||
|
||||
@@ -189,6 +194,7 @@ msFilterList
|
||||
-d qasirgame.com
|
||||
-d willyousurvive.com
|
||||
-d underthegarden.com
|
||||
-d fileplanet.com
|
||||
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
-d funeducation.com
|
||||
@@ -2246,13 +2252,11 @@ om landers iphone*_spin
|
||||
-d 888starz-3b.bet
|
||||
-d acjovut.cyou
|
||||
-d aebeiw.cyou
|
||||
-d aerocarrier.sbs
|
||||
-d affbf6epr.com
|
||||
-d affil-parners.com
|
||||
-d afrangl.com
|
||||
-d afrkotdr.com
|
||||
-d afrmaps.com
|
||||
-d agrimony.sbs
|
||||
-d ahcgkwj.cyou
|
||||
-d aix-delivery.icu
|
||||
-d alfpyf.cyou
|
||||
@@ -2270,7 +2274,6 @@ om landers iphone*_spin
|
||||
-d bahisbet.live
|
||||
-d bahisbet24.com
|
||||
-d ballerspin.com
|
||||
-d barbarian.sbs
|
||||
-d bb-delivery.icu
|
||||
-d bcojuck.art
|
||||
-d betwinner-ua.com
|
||||
@@ -2292,7 +2295,6 @@ om landers iphone*_spin
|
||||
-d cfnfmb.cyou
|
||||
-d click4fun.icu
|
||||
-d clicklucky.icu
|
||||
-d conformation.sbs
|
||||
-d connection-update.site
|
||||
-d cpae65ir.cyou
|
||||
-d cqzgfjjvz.com
|
||||
@@ -2300,10 +2302,8 @@ om landers iphone*_spin
|
||||
-d deliv-s.icu
|
||||
-d deliv-x.icu
|
||||
-d deliv.icu
|
||||
-d detonation.sbs
|
||||
-d dhdkgbm.cyou
|
||||
-d disk-fire-dom-wall.red
|
||||
-d distillery.sbs
|
||||
-d diw65ucvq.art
|
||||
-d dmkounjqn.com
|
||||
-d do-sy6lna.cyou
|
||||
@@ -2827,6 +2827,11 @@ om landers iphone*_spin
|
||||
|
||||
!+ NOT_OPTIMIZED
|
||||
|
||||
# https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
-d 146.19.169.98
|
||||
-d 146.19.169.99
|
||||
# https://github.com/AdguardTeam/AdguardFilters/issues/132079
|
||||
- pushredirect ?
|
||||
|
||||
|
||||
# ——— Standard malware that I stumbled upon on my own ———
|
||||
@@ -8945,6 +8950,7 @@ om landers iphone*_spin
|
||||
# Spambot posts on Tumblr (19 09 2022)
|
||||
# https://scambiofigu.forumcommunity.net/?t=57482915
|
||||
-d scambiofigu.net
|
||||
# Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious
|
||||
# Other
|
||||
-d foxsportnetwork.com
|
||||
-d pksauniversity.com
|
||||
@@ -8954,6 +8960,13 @@ om landers iphone*_spin
|
||||
-d greaterfiledownload.com
|
||||
-d vlcmediadownload.com
|
||||
-d quiremuken.xyz
|
||||
-d sexy-egirls-leaked.com
|
||||
-d file2share.co
|
||||
-d erothots.co
|
||||
-d only2leaked.co
|
||||
-d only4leaked.co
|
||||
-d thotsbay-leaked.com
|
||||
-d cbox.ws
|
||||
|
||||
# ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone.
|
||||
|
||||
Reference in New Issue
Block a user