diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 791471ba3..e8231c446 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 01October2022v1 +! Version: 17October2022v2 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -21,7 +21,7 @@ ! Palau ||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw|~bittor.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~b00k.pw|~gopass.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan -||top^$domain=~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top +||top^$domain=~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^ ||agency^$domain=~battlefield.agency|~shortcut.agency @@ -29,7 +29,9 @@ ||bid^ ||ooo^ ! https://bgp.he.net/AS202492#_prefixes (17/07/2022) -||monster^$domain=~egybest.monster|~yts.monster +||monster^$domain=~egybest.monster|~yts.monster|~cloudcdn.monster +! https://github.com/AdguardTeam/AdguardFilters/issues/131156 +||sbs^ ! Experimental attempt to cover a few hardcore spam ASNs .buzz/*/?*=*&*=*&*=*&*=*&*= .life/*/?*=*&*=*&*=*&*=*&*= @@ -171,6 +173,7 @@ play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:-abp-has([ ||willyousurvive.com^$popup ||underthegarden.com^ ||underthegarden.com^$popup +||fileplanet.com^$popup ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^ @@ -3772,8 +3775,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||acjovut.cyou^$popup ||aebeiw.cyou^ ||aebeiw.cyou^$popup -||aerocarrier.sbs^ -||aerocarrier.sbs^$popup ||affbf6epr.com^ ||affbf6epr.com^$popup ||affil-parners.com^ @@ -3784,8 +3785,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||afrkotdr.com^$popup ||afrmaps.com^ ||afrmaps.com^$popup -||agrimony.sbs^ -||agrimony.sbs^$popup ||ahcgkwj.cyou^ ||ahcgkwj.cyou^$popup ||aix-delivery.icu^ @@ -3820,8 +3819,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||bahisbet24.com^$popup ||ballerspin.com^ ||ballerspin.com^$popup -||barbarian.sbs^ -||barbarian.sbs^$popup ||bb-delivery.icu^ ||bb-delivery.icu^$popup ||bcojuck.art^ @@ -3864,8 +3861,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||click4fun.icu^$popup ||clicklucky.icu^ ||clicklucky.icu^$popup -||conformation.sbs^ -||conformation.sbs^$popup ||connection-update.site^ ||connection-update.site^$popup ||cpae65ir.cyou^ @@ -3880,14 +3875,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||deliv-x.icu^$popup ||deliv.icu^ ||deliv.icu^$popup -||detonation.sbs^ -||detonation.sbs^$popup ||dhdkgbm.cyou^ ||dhdkgbm.cyou^$popup ||disk-fire-dom-wall.red^ ||disk-fire-dom-wall.red^$popup -||distillery.sbs^ -||distillery.sbs^$popup ||diw65ucvq.art^ ||diw65ucvq.art^$popup ||dmkounjqn.com^ @@ -4876,6 +4867,11 @@ zombooru.com##a[href="http://www.hard55.com"] /^http://imgblaze.net/[a-z0-9]{6}$/$popup !+ NOT_OPTIMIZED /^http://imgblaze.net/[a-z0-9]{6}$/$third-party,subdocument +! https://github.com/AdguardTeam/AdguardFilters/issues/131156 +||146.19.169.98^ +||146.19.169.99^ +! https://github.com/AdguardTeam/AdguardFilters/issues/132079 +/pushredirect/? ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -16961,6 +16957,8 @@ tumblr.com#?#div[data-id][tabindex="-1"]:-abp-has(a[href^="https://href.li/?http ! https://scambiofigu.forumcommunity.net/?t=57482915 ||scambiofigu.net^ ||scambiofigu.net^$popup +! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious +apkfab.com##.tip-extension ! Other ||foxsportnetwork.com^ ||foxsportnetwork.com^$popup @@ -16977,6 +16975,15 @@ tumblr.com#?#div[data-id][tabindex="-1"]:-abp-has(a[href^="https://href.li/?http ||quiremuken.xyz^ ||quiremuken.xyz^$popup cdburnerxp.se##[href*="/downloadsetup.exe"] +||sexy-egirls-leaked.com^ +||file2share.co^ +||file2share.co^$popup +||erothots.co^ +||erothots.co^$popup +||only2leaked.co^ +||only4leaked.co^ +||thotsbay-leaked.com^ +||cbox.ws^$domain=chicks.cam ! β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. @@ -17186,7 +17193,6 @@ www.microsoft.com##a[data-pfns][data-pfns*=pedriapps] www.microsoft.com##a[data-pfns][data-pfns*=gameboxstudios] www.microsoft.com##a[data-pfns][data-pfns*=singleton] www.microsoft.com##a[data-pfns][data-pfns*=kankygames] -www.microsoft.com##a[data-pfns][data-pfns*="cbgame."] www.microsoft.com##a[data-pfns][data-pfns*=adilogames] www.microsoft.com##a[data-pfns][data-pfns*=onetapgames] www.microsoft.com##a[data-pfns][data-pfns*=deeterstudio] @@ -17203,11 +17209,31 @@ www.microsoft.com##a[data-pfns][data-pfns*="appmediastudio."] www.microsoft.com##a[data-pfns][data-pfns*="barleygamesstudio."] www.microsoft.com##a[data-pfns][data-pfns*="braditgamesstudio."] www.microsoft.com##a[data-pfns][data-pfns*="chandlergamesstudio."] -www.microsoft.com##a[data-pfns][data-pfns*="cdgame."] www.microsoft.com##a[data-pfns][data-pfns*="ryandev."] www.microsoft.com##a[data-pfns][data-pfns*="pawpatrol."] www.microsoft.com##a[data-pfns][data-pfns*=talgliando] www.microsoft.com##a[data-pfns][data-pfns*="html5."] +www.microsoft.com##a[data-pfns][data-pfns*="cbgame."] +www.microsoft.com##a[data-pfns][data-pfns*="ccgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cdgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cegame."] +www.microsoft.com##a[data-pfns][data-pfns*="cfgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cggame."] +www.microsoft.com##a[data-pfns][data-pfns*="chgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cigame."] +www.microsoft.com##a[data-pfns][data-pfns*="cjgame."] +www.microsoft.com##a[data-pfns][data-pfns*="ckgame."] +www.microsoft.com##a[data-pfns][data-pfns*="clgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cmgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cngame."] +www.microsoft.com##a[data-pfns][data-pfns*="cpgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cqgame."] +www.microsoft.com##a[data-pfns][data-pfns*="crgame."] +www.microsoft.com##a[data-pfns][data-pfns*="csgame."] +www.microsoft.com##a[data-pfns][data-pfns*="ctgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cugame."] +www.microsoft.com##a[data-pfns][data-pfns*="cvgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cwgame."] ! All legitimate Pac-Man games would use "pac-man" links with a dash www.microsoft.com##a[data-pfns][href*=pacman] www.microsoft.com##a[data-pfns][href*=pac-men] diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 9e283b9fd..ba5a3c17d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from 2019 onwards] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 01October2022v1 +! Version: 17October2022v2 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -21,7 +21,7 @@ ! Palau ||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw|~bittor.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~b00k.pw|~gopass.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan -||top^$document,domain=~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top +||top^$document,domain=~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^$document ||agency^$document,domain=~battlefield.agency|~shortcut.agency @@ -29,7 +29,9 @@ ||bid^$document ||ooo^$document ! https://bgp.he.net/AS202492#_prefixes (17/07/2022) -||monster^$document,domain=~egybest.monster|~yts.monster +||monster^$document,domain=~egybest.monster|~yts.monster|~cloudcdn.monster +! https://github.com/AdguardTeam/AdguardFilters/issues/131156 +||sbs^$document ! Experimental attempt to cover a few hardcore spam ASNs .buzz/*/?*=*&*=*&*=*&*=*&*=$document .life/*/?*=*&*=*&*=*&*=*&*=$document @@ -165,6 +167,7 @@ play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href* ||qasirgame.com^$all ||willyousurvive.com^$all ||underthegarden.com^$all +||fileplanet.com^$document,popup ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^$document @@ -2357,13 +2360,11 @@ zombooru.com##a[href="http://www.hard55.com"] ||888starz-3b.bet^$all ||acjovut.cyou^$all ||aebeiw.cyou^$all -||aerocarrier.sbs^$all ||affbf6epr.com^$all ||affil-parners.com^$all ||afrangl.com^$all ||afrkotdr.com^$all ||afrmaps.com^$all -||agrimony.sbs^$all ||ahcgkwj.cyou^$all ||aix-delivery.icu^$all ||alfpyf.cyou^$all @@ -2381,7 +2382,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||bahisbet.live^$all ||bahisbet24.com^$all ||ballerspin.com^$all -||barbarian.sbs^$all ||bb-delivery.icu^$all ||bcojuck.art^$all ||betwinner-ua.com^$all @@ -2403,7 +2403,6 @@ zombooru.com##a[href="http://www.hard55.com"] ||cfnfmb.cyou^$all ||click4fun.icu^$all ||clicklucky.icu^$all -||conformation.sbs^$all ||connection-update.site^$all ||cpae65ir.cyou^$all ||cqzgfjjvz.com^$all @@ -2411,10 +2410,8 @@ zombooru.com##a[href="http://www.hard55.com"] ||deliv-s.icu^$all ||deliv-x.icu^$all ||deliv.icu^$all -||detonation.sbs^$all ||dhdkgbm.cyou^$all ||disk-fire-dom-wall.red^$all -||distillery.sbs^$all ||diw65ucvq.art^$all ||dmkounjqn.com^$all ||do-sy6lna.cyou^$all @@ -2938,6 +2935,11 @@ zombooru.com##a[href="http://www.hard55.com"] /^http://imgblaze.net/[a-z0-9]{6}$/$document,popup !+ NOT_OPTIMIZED /^http://imgblaze.net/[a-z0-9]{6}$/$third-party,subdocument +! https://github.com/AdguardTeam/AdguardFilters/issues/131156 +146.19.169.98$network +146.19.169.99$network +! https://github.com/AdguardTeam/AdguardFilters/issues/132079 +/pushredirect/?$document ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -9060,6 +9062,8 @@ toorgle.net##.join tumblr.com#?#div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://bit.ly/"]) ! https://scambiofigu.forumcommunity.net/?t=57482915 ||scambiofigu.net^$all +! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious +apkfab.com##.tip-extension ! Other ||foxsportnetwork.com^$all ||pksauniversity.com^$all @@ -9070,6 +9074,13 @@ tumblr.com#?#div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://b ||vlcmediadownload.com^$all ||quiremuken.xyz^$all cdburnerxp.se##[href*="/downloadsetup.exe"] +||sexy-egirls-leaked.com^$document +||file2share.co^$all +||erothots.co^$all +||only2leaked.co^$document +||only4leaked.co^$document +||thotsbay-leaked.com^$document +||cbox.ws^$domain=chicks.cam ! β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. @@ -9281,7 +9292,6 @@ www.microsoft.com##a[data-pfns][data-pfns*=pedriapps] www.microsoft.com##a[data-pfns][data-pfns*=gameboxstudios] www.microsoft.com##a[data-pfns][data-pfns*=singleton] www.microsoft.com##a[data-pfns][data-pfns*=kankygames] -www.microsoft.com##a[data-pfns][data-pfns*="cbgame."] www.microsoft.com##a[data-pfns][data-pfns*=adilogames] www.microsoft.com##a[data-pfns][data-pfns*=onetapgames] www.microsoft.com##a[data-pfns][data-pfns*=deeterstudio] @@ -9298,11 +9308,31 @@ www.microsoft.com##a[data-pfns][data-pfns*="appmediastudio."] www.microsoft.com##a[data-pfns][data-pfns*="barleygamesstudio."] www.microsoft.com##a[data-pfns][data-pfns*="braditgamesstudio."] www.microsoft.com##a[data-pfns][data-pfns*="chandlergamesstudio."] -www.microsoft.com##a[data-pfns][data-pfns*="cdgame."] www.microsoft.com##a[data-pfns][data-pfns*="ryandev."] www.microsoft.com##a[data-pfns][data-pfns*="pawpatrol."] www.microsoft.com##a[data-pfns][data-pfns*=talgliando] www.microsoft.com##a[data-pfns][data-pfns*="html5."] +www.microsoft.com##a[data-pfns][data-pfns*="cbgame."] +www.microsoft.com##a[data-pfns][data-pfns*="ccgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cdgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cegame."] +www.microsoft.com##a[data-pfns][data-pfns*="cfgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cggame."] +www.microsoft.com##a[data-pfns][data-pfns*="chgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cigame."] +www.microsoft.com##a[data-pfns][data-pfns*="cjgame."] +www.microsoft.com##a[data-pfns][data-pfns*="ckgame."] +www.microsoft.com##a[data-pfns][data-pfns*="clgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cmgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cngame."] +www.microsoft.com##a[data-pfns][data-pfns*="cpgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cqgame."] +www.microsoft.com##a[data-pfns][data-pfns*="crgame."] +www.microsoft.com##a[data-pfns][data-pfns*="csgame."] +www.microsoft.com##a[data-pfns][data-pfns*="ctgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cugame."] +www.microsoft.com##a[data-pfns][data-pfns*="cvgame."] +www.microsoft.com##a[data-pfns][data-pfns*="cwgame."] ! All legitimate Pac-Man games would use "pac-man" links with a dash www.microsoft.com##a[data-pfns][href*=pacman] www.microsoft.com##a[data-pfns][href*=pac-men] diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 15a4a26e5..752555f4a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 01October2022v1 +! Version: 17October2022v2 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -22,7 +22,7 @@ ! Palau ||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|zikrap.pw|demonoid.pw|bittor.pw|buttercup.pw|rezka.pw|darkcrystal.pw|xor.pw|fullhdfilmizlesene.pw|b00k.pw|gopass.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan -||top^$denyallow=corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|techblog.top +||top^$denyallow=corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|techblog.top|changlam10.top|changlam11.top ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^ ||agency^$denyallow=battlefield.agency|shortcut.agency @@ -30,7 +30,9 @@ ||bid^ ||ooo^ ! https://bgp.he.net/AS202492#_prefixes (17/07/2022) -||monster^$denyallow=egybest.monster|yts.monster +||monster^$denyallow=egybest.monster|yts.monster|cloudcdn.monster +! https://github.com/AdguardTeam/AdguardFilters/issues/131156 +||sbs^ ! Experimental attempt to cover a few hardcore spam ASNs .buzz/*/?*=*&*=*&*=*&*=*&*= .life/*/?*=*&*=*&*=*&*=*&*= @@ -107,6 +109,7 @@ ||qasirgame.com^ ||willyousurvive.com^ ||underthegarden.com^ +||fileplanet.com^ ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” ||funeducation.com^ @@ -2168,13 +2171,11 @@ ||888starz-3b.bet^ ||acjovut.cyou^ ||aebeiw.cyou^ -||aerocarrier.sbs^ ||affbf6epr.com^ ||affil-parners.com^ ||afrangl.com^ ||afrkotdr.com^ ||afrmaps.com^ -||agrimony.sbs^ ||ahcgkwj.cyou^ ||aix-delivery.icu^ ||alfpyf.cyou^ @@ -2192,7 +2193,6 @@ ||bahisbet.live^ ||bahisbet24.com^ ||ballerspin.com^ -||barbarian.sbs^ ||bb-delivery.icu^ ||bcojuck.art^ ||betwinner-ua.com^ @@ -2214,7 +2214,6 @@ ||cfnfmb.cyou^ ||click4fun.icu^ ||clicklucky.icu^ -||conformation.sbs^ ||connection-update.site^ ||cpae65ir.cyou^ ||cqzgfjjvz.com^ @@ -2222,10 +2221,8 @@ ||deliv-s.icu^ ||deliv-x.icu^ ||deliv.icu^ -||detonation.sbs^ ||dhdkgbm.cyou^ ||disk-fire-dom-wall.red^ -||distillery.sbs^ ||diw65ucvq.art^ ||dmkounjqn.com^ ||do-sy6lna.cyou^ @@ -2749,6 +2746,11 @@ /^http://imgblaze.net/[a-z0-9]{6}$/ !+ NOT_OPTIMIZED /^http://imgblaze.net/[a-z0-9]{6}$/$third-party,subdocument +! https://github.com/AdguardTeam/AdguardFilters/issues/131156 +146.19.169.98 +146.19.169.99 +! https://github.com/AdguardTeam/AdguardFilters/issues/132079 +/pushredirect/? ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -8868,6 +8870,7 @@ ! Spambot posts on Tumblr (19/09/2022) ! https://scambiofigu.forumcommunity.net/?t=57482915 ||scambiofigu.net^ +! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious ! Other ||foxsportnetwork.com^ ||pksauniversity.com^ @@ -8877,6 +8880,13 @@ ||greaterfiledownload.com^ ||vlcmediadownload.com^ ||quiremuken.xyz^ +||sexy-egirls-leaked.com^ +||file2share.co^ +||erothots.co^ +||only2leaked.co^ +||only4leaked.co^ +||thotsbay-leaked.com^ +||cbox.ws^$chicks.cam ! β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 04d7fbfc1..6c01797b4 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 01October2022v1 +# Version: 17October2022v2 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -26,6 +26,7 @@ + # Experimental attempt to cover a few hardcore spam ASNs @@ -105,6 +106,7 @@ viaarena.com qasirgame.com willyousurvive.com underthegarden.com +fileplanet.com # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” funeducation.com @@ -1884,13 +1886,11 @@ verif-caseid9871-verizonrview.com 888starz-3b.bet acjovut.cyou aebeiw.cyou -aerocarrier.sbs affbf6epr.com affil-parners.com afrangl.com afrkotdr.com afrmaps.com -agrimony.sbs ahcgkwj.cyou aix-delivery.icu alfpyf.cyou @@ -1908,7 +1908,6 @@ bahisbet.fun bahisbet.live bahisbet24.com ballerspin.com -barbarian.sbs bb-delivery.icu bcojuck.art betwinner-ua.com @@ -1930,7 +1929,6 @@ cazinoz.org cfnfmb.cyou click4fun.icu clicklucky.icu -conformation.sbs connection-update.site cpae65ir.cyou cqzgfjjvz.com @@ -1938,10 +1936,8 @@ dbfkatqff.com deliv-s.icu deliv-x.icu deliv.icu -detonation.sbs dhdkgbm.cyou disk-fire-dom-wall.red -distillery.sbs diw65ucvq.art dmkounjqn.com do-sy6lna.cyou @@ -2449,6 +2445,9 @@ bnbdeal.net +146.19.169.98 +146.19.169.99 + # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -8533,6 +8532,7 @@ ppesupplies.xyz ingeniovirtual.com # Spambot posts on Tumblr (19/09/2022) scambiofigu.net +# Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious # Other foxsportnetwork.com pksauniversity.com @@ -8542,6 +8542,13 @@ dorderstar.xyz greaterfiledownload.com vlcmediadownload.com quiremuken.xyz +sexy-egirls-leaked.com +file2share.co +erothots.co +only2leaked.co +only4leaked.co +thotsbay-leaked.com +cbox.ws # β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 9c2f5f91c..d200137b9 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 01October2022v1 +# Version: 17October2022v2 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -26,6 +26,7 @@ + # Experimental attempt to cover a few hardcore spam ASNs @@ -105,6 +106,7 @@ 127.0.0.1 qasirgame.com 127.0.0.1 willyousurvive.com 127.0.0.1 underthegarden.com +127.0.0.1 fileplanet.com # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” 127.0.0.1 funeducation.com @@ -1884,13 +1886,11 @@ 127.0.0.1 888starz-3b.bet 127.0.0.1 acjovut.cyou 127.0.0.1 aebeiw.cyou -127.0.0.1 aerocarrier.sbs 127.0.0.1 affbf6epr.com 127.0.0.1 affil-parners.com 127.0.0.1 afrangl.com 127.0.0.1 afrkotdr.com 127.0.0.1 afrmaps.com -127.0.0.1 agrimony.sbs 127.0.0.1 ahcgkwj.cyou 127.0.0.1 aix-delivery.icu 127.0.0.1 alfpyf.cyou @@ -1908,7 +1908,6 @@ 127.0.0.1 bahisbet.live 127.0.0.1 bahisbet24.com 127.0.0.1 ballerspin.com -127.0.0.1 barbarian.sbs 127.0.0.1 bb-delivery.icu 127.0.0.1 bcojuck.art 127.0.0.1 betwinner-ua.com @@ -1930,7 +1929,6 @@ 127.0.0.1 cfnfmb.cyou 127.0.0.1 click4fun.icu 127.0.0.1 clicklucky.icu -127.0.0.1 conformation.sbs 127.0.0.1 connection-update.site 127.0.0.1 cpae65ir.cyou 127.0.0.1 cqzgfjjvz.com @@ -1938,10 +1936,8 @@ 127.0.0.1 deliv-s.icu 127.0.0.1 deliv-x.icu 127.0.0.1 deliv.icu -127.0.0.1 detonation.sbs 127.0.0.1 dhdkgbm.cyou 127.0.0.1 disk-fire-dom-wall.red -127.0.0.1 distillery.sbs 127.0.0.1 diw65ucvq.art 127.0.0.1 dmkounjqn.com 127.0.0.1 do-sy6lna.cyou @@ -2449,6 +2445,9 @@ +127.0.0.1 146.19.169.98 +127.0.0.1 146.19.169.99 + # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -8533,6 +8532,7 @@ 127.0.0.1 ingeniovirtual.com # Spambot posts on Tumblr (19/09/2022) 127.0.0.1 scambiofigu.net +# Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious # Other 127.0.0.1 foxsportnetwork.com 127.0.0.1 pksauniversity.com @@ -8542,6 +8542,13 @@ 127.0.0.1 greaterfiledownload.com 127.0.0.1 vlcmediadownload.com 127.0.0.1 quiremuken.xyz +127.0.0.1 sexy-egirls-leaked.com +127.0.0.1 file2share.co +127.0.0.1 erothots.co +127.0.0.1 only2leaked.co +127.0.0.1 only4leaked.co +127.0.0.1 thotsbay-leaked.com +127.0.0.1 cbox.ws # β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 7c77ac3e4..17872135c 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 01October2022v1 +# Version: 17October2022v2 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -28,6 +28,7 @@ + # Experimental attempt to cover a few hardcore spam ASNs @@ -114,6 +115,7 @@ + {+block} # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” @@ -2178,12 +2180,6 @@ - - - - - - @@ -2493,6 +2489,9 @@ # +/pushredirect/? + + {+block} # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -8598,6 +8597,7 @@ # Spambot posts on Tumblr (19/09/2022) +# Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious # Other @@ -8608,6 +8608,13 @@ + + + + + + + {+block} # β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index dacac49f5..1c18bcbcb 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 01October2022v1 +# Version: 17October2022v2 : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -100,7 +100,9 @@ msFilterList +d shucks.top +d 1stream.top +d ambr.top -+d techblog.top ++d techblog.top ++d changlam10.top ++d changlam11.top # International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. -d agency @@ -112,7 +114,10 @@ msFilterList # https://bgp.he.net/AS202492#_prefixes/(17/07/2022) -d monster +d egybest.monster -+d yts.monster ++d yts.monster ++d cloudcdn.monster +# https://github.com/AdguardTeam/AdguardFilters/issues/131156 + # Experimental attempt to cover a few hardcore spam ASNs @@ -189,6 +194,7 @@ msFilterList -d qasirgame.com -d willyousurvive.com -d underthegarden.com +-d fileplanet.com # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” -d funeducation.com @@ -2246,13 +2252,11 @@ om landers iphone*_spin -d 888starz-3b.bet -d acjovut.cyou -d aebeiw.cyou --d aerocarrier.sbs -d affbf6epr.com -d affil-parners.com -d afrangl.com -d afrkotdr.com -d afrmaps.com --d agrimony.sbs -d ahcgkwj.cyou -d aix-delivery.icu -d alfpyf.cyou @@ -2270,7 +2274,6 @@ om landers iphone*_spin -d bahisbet.live -d bahisbet24.com -d ballerspin.com --d barbarian.sbs -d bb-delivery.icu -d bcojuck.art -d betwinner-ua.com @@ -2292,7 +2295,6 @@ om landers iphone*_spin -d cfnfmb.cyou -d click4fun.icu -d clicklucky.icu --d conformation.sbs -d connection-update.site -d cpae65ir.cyou -d cqzgfjjvz.com @@ -2300,10 +2302,8 @@ om landers iphone*_spin -d deliv-s.icu -d deliv-x.icu -d deliv.icu --d detonation.sbs -d dhdkgbm.cyou -d disk-fire-dom-wall.red --d distillery.sbs -d diw65ucvq.art -d dmkounjqn.com -d do-sy6lna.cyou @@ -2827,6 +2827,11 @@ om landers iphone*_spin !+ NOT_OPTIMIZED +# https://github.com/AdguardTeam/AdguardFilters/issues/131156 +-d 146.19.169.98 +-d 146.19.169.99 +# https://github.com/AdguardTeam/AdguardFilters/issues/132079 +- pushredirect ? # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” @@ -8945,6 +8950,7 @@ om landers iphone*_spin # Spambot posts on Tumblr (19 09 2022) # https://scambiofigu.forumcommunity.net/?t=57482915 -d scambiofigu.net +# Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious # Other -d foxsportnetwork.com -d pksauniversity.com @@ -8954,6 +8960,13 @@ om landers iphone*_spin -d greaterfiledownload.com -d vlcmediadownload.com -d quiremuken.xyz +-d sexy-egirls-leaked.com +-d file2share.co +-d erothots.co +-d only2leaked.co +-d only4leaked.co +-d thotsbay-leaked.com +-d cbox.ws # β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone.