This commit is contained in:
Imre Kristoffer Eilertsen
2023-01-22 17:45:28 +01:00
committed by GitHub
parent 54b0edecb9
commit 44ad938de5
7 changed files with 305 additions and 33 deletions
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
! Version: 18January2023v7
! Version: 22January2023v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13293,8 +13293,8 @@ zombooru.com##a[href="http://www.hard55.com"]
||demonia-portugal.net^$popup,~inline-script,~inline-font
||demoniachaussuresparis.fr^
||demoniachaussuresparis.fr^$popup,~inline-script,~inline-font
||demoniacipő.com^
||demoniacipő.com^$popup,~inline-script,~inline-font
||xn--demoniacip-84b.com^
||xn--demoniacip-84b.com^$popup,~inline-script,~inline-font
||demonialaarzenkopen.com^
||demonialaarzenkopen.com^$popup,~inline-script,~inline-font
||demonias-danmark.com^
@@ -13311,8 +13311,8 @@ zombooru.com##a[href="http://www.hard55.com"]
||demoniasshoesgreece.net^$popup,~inline-script,~inline-font
||demoniastopankysk.sk^
||demoniastopankysk.sk^$popup,~inline-script,~inline-font
||demoniatürkiye.com^
||demoniatürkiye.com^$popup,~inline-script,~inline-font
||xn--demoniatrkiye-3ob.com^
||xn--demoniatrkiye-3ob.com^$popup,~inline-script,~inline-font
||diesel-helsinki.com^
||diesel-helsinki.com^$popup,~inline-script,~inline-font
||dmgreece.com^
@@ -14837,8 +14837,8 @@ zombooru.com##a[href="http://www.hard55.com"]
||gorrabogota.com^$popup,~inline-script,~inline-font
||gummistiefelhunter.de^
||gummistiefelhunter.de^$popup,~inline-script,~inline-font
||gummistøvlerhunter.com^
||gummistøvlerhunter.com^$popup,~inline-script,~inline-font
||xn--gummistvlerhunter-60b.com^
||xn--gummistvlerhunter-60b.com^$popup,~inline-script,~inline-font
||hokalopesko.com^
||hokalopesko.com^$popup,~inline-script,~inline-font
||hokanorgeno.com^
@@ -15063,6 +15063,71 @@ zombooru.com##a[href="http://www.hard55.com"]
196.245.52.*$network
196.245.56.*$network
! https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
://rufus.download.$popup
://virtualbox.download.$popup
://vidiq.download.$popup
://gimp.download.$popup
://sublimetext.download.$popup
://java.download.
||blendepr.org^
||blendepr.org^$popup,~inline-script,~inline-font
||blendevr.org^
||blendevr.org^$popup,~inline-script,~inline-font
||blendesr.org^
||blendesr.org^$popup,~inline-script,~inline-font
||afterburner-software.net^
||afterburner-software.net^$popup,~inline-script,~inline-font
||afterburner-software.org^
||afterburner-software.org^$popup,~inline-script,~inline-font
||blender-download.net^
||blender-download.net^$popup,~inline-script,~inline-font
||blender-download.org^
||blender-download.org^$popup,~inline-script,~inline-font
||blender3d-download.
||blender3d-download.$popup,~inline-script,~inline-font
||blender3d-software.
||blender3d-software.$popup,~inline-script,~inline-font
||blender3ds-download.
||blender3ds-download.$popup,~inline-script,~inline-font
||desktop-tradingview.org^
||desktop-tradingview.org^$popup,~inline-script,~inline-font
||download-tradingview.net^
||download-tradingview.net^$popup,~inline-script,~inline-font
||overclock-msi.com^
||overclock-msi.com^$popup,~inline-script,~inline-font
||overclock-msi.net^
||overclock-msi.net^$popup,~inline-script,~inline-font
||overclock-msi.org^
||overclock-msi.org^$popup,~inline-script,~inline-font
||project-obs.com^
||project-obs.com^$popup,~inline-script,~inline-font
||project-obs.net^
||project-obs.net^$popup,~inline-script,~inline-font
||project-obs.org^
||project-obs.org^$popup,~inline-script,~inline-font
||studio-obs.com^
||studio-obs.com^$popup,~inline-script,~inline-font
||studio-obs.net^
||studio-obs.net^$popup,~inline-script,~inline-font
||studio-obs.org^
||studio-obs.org^$popup,~inline-script,~inline-font
||tradingview-software.com^
||tradingview-software.com^$popup,~inline-script,~inline-font
||tradingview-software.net^
||tradingview-software.net^$popup,~inline-script,~inline-font
||tradingview-software.org^
||tradingview-software.org^$popup,~inline-script,~inline-font
||unity-download.com^
||unity-download.com^$popup,~inline-script,~inline-font
||unity-download.org^
||unity-download.org^$popup,~inline-script,~inline-font
||webull-download.
||webull-download.$popup,~inline-script,~inline-font
||185.106.94.139^
||45.90.109.196^
||91.229.23.200^
||91.229.23.200^$popup,~inline-script,~inline-font
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -1,6 +1,6 @@
[AdGuard]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
! Version: 18January2023v7
! Version: 22January2023v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -7182,7 +7182,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||danskosaldi.it^$all,~inline-script,~inline-font
||demonia-portugal.net^$all,~inline-script,~inline-font
||demoniachaussuresparis.fr^$all,~inline-script,~inline-font
||demoniacipő.com^$all,~inline-script,~inline-font
||xn--demoniacip-84b.com^$all,~inline-script,~inline-font
||demonialaarzenkopen.com^$all,~inline-script,~inline-font
||demonias-danmark.com^$all,~inline-script,~inline-font
||demonias-portugal.com^$all,~inline-script,~inline-font
@@ -7191,7 +7191,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||demoniasshoesgreece.com^$all,~inline-script,~inline-font
||demoniasshoesgreece.net^$all,~inline-script,~inline-font
||demoniastopankysk.sk^$all,~inline-script,~inline-font
||demoniatürkiye.com^$all,~inline-script,~inline-font
||xn--demoniatrkiye-3ob.com^$all,~inline-script,~inline-font
||diesel-helsinki.com^$all,~inline-script,~inline-font
||dmgreece.com^$all,~inline-script,~inline-font
||docmartens-canada.com^$all,~inline-script,~inline-font
@@ -7954,7 +7954,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||enucuzsuperdry.com^$all,~inline-script,~inline-font
||gorrabogota.com^$all,~inline-script,~inline-font
||gummistiefelhunter.de^$all,~inline-script,~inline-font
||gummistøvlerhunter.com^$all,~inline-script,~inline-font
||xn--gummistvlerhunter-60b.com^$all,~inline-script,~inline-font
||hokalopesko.com^$all,~inline-script,~inline-font
||hokanorgeno.com^$all,~inline-script,~inline-font
||hokaonelopesko.com^$all,~inline-script,~inline-font
@@ -8072,6 +8072,43 @@ zombooru.com##a[href="http://www.hard55.com"]
196.245.52.*$network
196.245.56.*$network
!#endif
! https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
://rufus.download.$document,popup
://virtualbox.download.$document,popup
://vidiq.download.$document,popup
://gimp.download.$document,popup
://sublimetext.download.$document,popup
://java.download.$document
||blendepr.org^$all,~inline-script,~inline-font
||blendevr.org^$all,~inline-script,~inline-font
||blendesr.org^$all,~inline-script,~inline-font
||afterburner-software.net^$all,~inline-script,~inline-font
||afterburner-software.org^$all,~inline-script,~inline-font
||blender-download.net^$all,~inline-script,~inline-font
||blender-download.org^$all,~inline-script,~inline-font
||blender3d-download.$all,~inline-script,~inline-font
||blender3d-software.$all,~inline-script,~inline-font
||blender3ds-download.$all,~inline-script,~inline-font
||desktop-tradingview.org^$all,~inline-script,~inline-font
||download-tradingview.net^$all,~inline-script,~inline-font
||overclock-msi.com^$all,~inline-script,~inline-font
||overclock-msi.net^$all,~inline-script,~inline-font
||overclock-msi.org^$all,~inline-script,~inline-font
||project-obs.com^$all,~inline-script,~inline-font
||project-obs.net^$all,~inline-script,~inline-font
||project-obs.org^$all,~inline-script,~inline-font
||studio-obs.com^$all,~inline-script,~inline-font
||studio-obs.net^$all,~inline-script,~inline-font
||studio-obs.org^$all,~inline-script,~inline-font
||tradingview-software.com^$all,~inline-script,~inline-font
||tradingview-software.net^$all,~inline-script,~inline-font
||tradingview-software.org^$all,~inline-script,~inline-font
||unity-download.com^$all,~inline-script,~inline-font
||unity-download.org^$all,~inline-script,~inline-font
||webull-download.$all,~inline-script,~inline-font
185.106.94.139$network
45.90.109.196$network
91.229.23.200$network
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
! Version: 18January2023v7
! Version: 22January2023v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -6990,7 +6990,7 @@
||danskosaldi.it^
||demonia-portugal.net^
||demoniachaussuresparis.fr^
||demoniacipő.com^
||xn--demoniacip-84b.com^
||demonialaarzenkopen.com^
||demonias-danmark.com^
||demonias-portugal.com^
@@ -6999,7 +6999,7 @@
||demoniasshoesgreece.com^
||demoniasshoesgreece.net^
||demoniastopankysk.sk^
||demoniatürkiye.com^
||xn--demoniatrkiye-3ob.com^
||diesel-helsinki.com^
||dmgreece.com^
||docmartens-canada.com^
@@ -7762,7 +7762,7 @@
||enucuzsuperdry.com^
||gorrabogota.com^
||gummistiefelhunter.de^
||gummistøvlerhunter.com^
||xn--gummistvlerhunter-60b.com^
||hokalopesko.com^
||hokanorgeno.com^
||hokaonelopesko.com^
@@ -7880,6 +7880,43 @@
/^196\.245\.52\.[0-9]{1,3}$/
/^196\.245\.56\.[0-9]{1,3}$/
! https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
://rufus.download.popup
://virtualbox.download.popup
://vidiq.download.popup
://gimp.download.popup
://sublimetext.download.popup
://java.download.
||blendepr.org^
||blendevr.org^
||blendesr.org^
||afterburner-software.net^
||afterburner-software.org^
||blender-download.net^
||blender-download.org^
||blender3d-download.
||blender3d-software.
||blender3ds-download.
||desktop-tradingview.org^
||download-tradingview.net^
||overclock-msi.com^
||overclock-msi.net^
||overclock-msi.org^
||project-obs.com^
||project-obs.net^
||project-obs.org^
||studio-obs.com^
||studio-obs.net^
||studio-obs.org^
||tradingview-software.com^
||tradingview-software.net^
||tradingview-software.org^
||unity-download.com^
||unity-download.org^
||webull-download.
185.106.94.139
45.90.109.196
91.229.23.200
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 18January2023v7
# Version: 22January2023v1
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -6643,7 +6643,7 @@ danskonederland.com
danskosaldi.it
demonia-portugal.net
demoniachaussuresparis.fr
demoniacipő.com
xn--demoniacip-84b.com
demonialaarzenkopen.com
demonias-danmark.com
demonias-portugal.com
@@ -6652,7 +6652,7 @@ demoniashopberlin.de
demoniasshoesgreece.com
demoniasshoesgreece.net
demoniastopankysk.sk
demoniatürkiye.com
xn--demoniatrkiye-3ob.com
diesel-helsinki.com
dmgreece.com
docmartens-canada.com
@@ -7415,7 +7415,7 @@ eccomexicomx.com
enucuzsuperdry.com
gorrabogota.com
gummistiefelhunter.de
gummistøvlerhunter.com
xn--gummistvlerhunter-60b.com
hokalopesko.com
hokanorgeno.com
hokaonelopesko.com
@@ -7526,6 +7526,42 @@ zapatillasmcqueen.com
blendepr.org
blendevr.org
blendesr.org
afterburner-software.net
afterburner-software.org
blender-download.net
blender-download.org
desktop-tradingview.org
download-tradingview.net
overclock-msi.com
overclock-msi.net
overclock-msi.org
project-obs.com
project-obs.net
project-obs.org
studio-obs.com
studio-obs.net
studio-obs.org
tradingview-software.com
tradingview-software.net
tradingview-software.org
unity-download.com
unity-download.org
185.106.94.139
45.90.109.196
91.229.23.200
# ——— Standard malware that I stumbled upon on my own ———
downloadprovider.me
cash93.com
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
# Version: 18January2023v7
# Version: 22January2023v1
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -296,7 +296,7 @@
127.0.0.1 54.85.113.62
127.0.0.1 54.205.83.61
127.0.0.1 54.210.193.115
:: 2600:1f18:43d1:2a04:ee05:261e:d408:7ba1
127.0.0.1 achingpapoosh.cam
127.0.0.1 aileddipgird.cam
127.0.0.1 ailkeyair.com
@@ -1416,7 +1416,7 @@
127.0.0.1 178.162.203.211
127.0.0.1 178.162.203.226
127.0.0.1 178.162.217.107
:: 2a02:1668:1034::2
127.0.0.1 logicalrecord.com
127.0.0.1 secureportal.online
127.0.0.1 accbaus.com
@@ -6643,7 +6643,7 @@
127.0.0.1 danskosaldi.it
127.0.0.1 demonia-portugal.net
127.0.0.1 demoniachaussuresparis.fr
127.0.0.1 demoniacipő.com
127.0.0.1 xn--demoniacip-84b.com
127.0.0.1 demonialaarzenkopen.com
127.0.0.1 demonias-danmark.com
127.0.0.1 demonias-portugal.com
@@ -6652,7 +6652,7 @@
127.0.0.1 demoniasshoesgreece.com
127.0.0.1 demoniasshoesgreece.net
127.0.0.1 demoniastopankysk.sk
127.0.0.1 demoniatürkiye.com
127.0.0.1 xn--demoniatrkiye-3ob.com
127.0.0.1 diesel-helsinki.com
127.0.0.1 dmgreece.com
127.0.0.1 docmartens-canada.com
@@ -7415,7 +7415,7 @@
127.0.0.1 enucuzsuperdry.com
127.0.0.1 gorrabogota.com
127.0.0.1 gummistiefelhunter.de
127.0.0.1 gummistøvlerhunter.com
127.0.0.1 xn--gummistvlerhunter-60b.com
127.0.0.1 hokalopesko.com
127.0.0.1 hokanorgeno.com
127.0.0.1 hokaonelopesko.com
@@ -7526,6 +7526,42 @@
127.0.0.1 blendepr.org
127.0.0.1 blendevr.org
127.0.0.1 blendesr.org
127.0.0.1 afterburner-software.net
127.0.0.1 afterburner-software.org
127.0.0.1 blender-download.net
127.0.0.1 blender-download.org
127.0.0.1 desktop-tradingview.org
127.0.0.1 download-tradingview.net
127.0.0.1 overclock-msi.com
127.0.0.1 overclock-msi.net
127.0.0.1 overclock-msi.org
127.0.0.1 project-obs.com
127.0.0.1 project-obs.net
127.0.0.1 project-obs.org
127.0.0.1 studio-obs.com
127.0.0.1 studio-obs.net
127.0.0.1 studio-obs.org
127.0.0.1 tradingview-software.com
127.0.0.1 tradingview-software.net
127.0.0.1 tradingview-software.org
127.0.0.1 unity-download.com
127.0.0.1 unity-download.org
127.0.0.1 185.106.94.139
127.0.0.1 45.90.109.196
127.0.0.1 91.229.23.200
# ——— Standard malware that I stumbled upon on my own ———
127.0.0.1 downloadprovider.me
127.0.0.1 cash93.com
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 18January2023v7
# Version: 22January2023v1
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -6716,7 +6716,7 @@
.danskosaldi.it
.demonia-portugal.net
.demoniachaussuresparis.fr
.demoniacipő.com
.xn--demoniacip-84b.com
.demonialaarzenkopen.com
.demonias-danmark.com
.demonias-portugal.com
@@ -6725,7 +6725,7 @@
.demoniasshoesgreece.com
.demoniasshoesgreece.net
.demoniastopankysk.sk
.demoniatürkiye.com
.xn--demoniatrkiye-3ob.com
.diesel-helsinki.com
.dmgreece.com
.docmartens-canada.com
@@ -7488,7 +7488,7 @@
.enucuzsuperdry.com
.gorrabogota.com
.gummistiefelhunter.de
.gummistøvlerhunter.com
.xn--gummistvlerhunter-60b.com
.hokalopesko.com
.hokanorgeno.com
.hokaonelopesko.com
@@ -7606,6 +7606,36 @@
196.245.52.*
196.245.56.*
#
.blendepr.org
.blendevr.org
.blendesr.org
.afterburner-software.net
.afterburner-software.org
.blender-download.net
.blender-download.org
.blender3d-download.
.blender3d-software.
.blender3ds-download.
.desktop-tradingview.org
.download-tradingview.net
.overclock-msi.com
.overclock-msi.net
.overclock-msi.org
.project-obs.com
.project-obs.net
.project-obs.org
.studio-obs.com
.studio-obs.net
.studio-obs.org
.tradingview-software.com
.tradingview-software.net
.tradingview-software.org
.unity-download.com
.unity-download.org
.webull-download.
.185.106.94.139
.45.90.109.196
.91.229.23.200
{+block}
# ——— Standard malware that I stumbled upon on my own ———
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 18January2023v7
# Version: 22January2023v1
: expires = 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -7057,7 +7057,7 @@ om landers iphone*_spin
-d danskosaldi.it
-d demonia-portugal.net
-d demoniachaussuresparis.fr
-d demoniacipő.com
-d xn--demoniacip-84b.com
-d demonialaarzenkopen.com
-d demonias-danmark.com
-d demonias-portugal.com
@@ -7066,7 +7066,7 @@ om landers iphone*_spin
-d demoniasshoesgreece.com
-d demoniasshoesgreece.net
-d demoniastopankysk.sk
-d demoniatürkiye.com
-d xn--demoniatrkiye-3ob.com
-d diesel-helsinki.com
-d dmgreece.com
-d docmartens-canada.com
@@ -7829,7 +7829,7 @@ om landers iphone*_spin
-d enucuzsuperdry.com
-d gorrabogota.com
-d gummistiefelhunter.de
-d gummistøvlerhunter.com
-d xn--gummistvlerhunter-60b.com
-d hokalopesko.com
-d hokanorgeno.com
-d hokaonelopesko.com
@@ -7947,6 +7947,37 @@ om landers iphone*_spin
196.245.52.*
196.245.56.*
# https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
-d blendepr.org
-d blendevr.org
-d blendesr.org
-d afterburner-software.net
-d afterburner-software.org
-d blender-download.net
-d blender-download.org
-d blender3d-download.
-d blender3d-software.
-d blender3ds-download.
-d desktop-tradingview.org
-d download-tradingview.net
-d overclock-msi.com
-d overclock-msi.net
-d overclock-msi.org
-d project-obs.com
-d project-obs.net
-d project-obs.org
-d studio-obs.com
-d studio-obs.net
-d studio-obs.org
-d tradingview-software.com
-d tradingview-software.net
-d tradingview-software.org
-d unity-download.com
-d unity-download.org
-d webull-download.
-d 185.106.94.139
-d 45.90.109.196
-d 91.229.23.200
# ——— Standard malware that I stumbled upon on my own ———
# http://www.toorgle.net/results.php?q=fetishkitsch&security=666