starred/adfilt
1
0
Fork 0
mirror of https://github.com/DandelionSprout/adfilt.git synced 2026-10-04 22:04:19 +01:00
Code Issues Packages Projects Releases 4 Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
Imre Kristoffer Eilertsen
2021-10-19 12:41:12 +02:00
committed by GitHub
parent 90b2883272
commit 4f7210cac5
8 changed files with 252 additions and 215 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Alternate versions Anti-Malware List/AntiMalwareABP.txt
+66 -56
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
! Version: 16October2021v1-Beta
! Version: 19October2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -67,17 +67,17 @@ www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,googl
! ——— For DuckDuckGo ———
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".tk"]:not([data-domain*="coolcmd.tk"], [data-domain*="budterence.tk"], [data-domain*="google.tk"], [data-domain*="transportnews.tk"], [data-domain*="c0d3c.tk"], [data-domain*="anonytext.tk"], [data-domain*="tokelau-info.tk"], [data-domain*="fakaofo.tk"], [data-domain*="loljp-wiki.tk"], [data-domain*="ninetail.tk"], [data-domain*="goshujin.tk"], [data-domain*="graph.tk"], [data-domain*="nolfrevival.tk"], [data-domain*="coppersurfer.tk"], [data-domain*="restricted-functions.tk"], [data-domain*="bstweaker.tk"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".ga"]:not([data-domain*="google.ga"], [data-domain*="filtri-dns.ga"], [data-domain*="anpigabon.ga"], [data-domain*="dgdi.ga"], [data-domain*="voitures.ga"], [data-domain*="economie-gabon.ga"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".ml"]:not([data-domain*="google.ml"], [data-domain*="mobili.ml"], [data-domain*="melody.ml"], [data-domain*="dcod.ml"], [data-domain*="info-matin.ml"], [data-domain*="amap.ml"], [data-domain*="mastodon.ml"], [data-domain*="worproject.ml"], [data-domain*="nothingprivate.ml"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".gq"]:not([data-domain*="deimos.gq"], [data-domain*="inege.gq"], [data-domain*="tvgelive.gq"], [data-domain*="comprarcarros.gq"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".cf"]:not([data-domain*="google.cf"], [data-domain*="rths.cf"], [data-domain*="voitures.cf"], [data-domain*="assembleenationale-rca.cf"], [data-domain*="cps-rca.cf"], [data-domain*="acap.cf"], [data-domain*="miraculousladybug.cf"], [data-domain*="scrat.cf"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".pw"]:not([data-domain*="libgen.pw"], [data-domain*="petridish.pw"], [data-domain*="palaugov.pw"], [data-domain*="dpc.pw"], [data-domain*="zikrap.pw"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".loan"]
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".agency"]
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".gdn"]
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".bid"]
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".top"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".tk"]:not([data-domain*="coolcmd.tk"], [data-domain*="budterence.tk"], [data-domain*="google.tk"], [data-domain*="transportnews.tk"], [data-domain*="c0d3c.tk"], [data-domain*="anonytext.tk"], [data-domain*="tokelau-info.tk"], [data-domain*="fakaofo.tk"], [data-domain*="loljp-wiki.tk"], [data-domain*="ninetail.tk"], [data-domain*="goshujin.tk"], [data-domain*="graph.tk"], [data-domain*="nolfrevival.tk"], [data-domain*="coppersurfer.tk"], [data-domain*="restricted-functions.tk"], [data-domain*="bstweaker.tk"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".ga"]:not([data-domain*="google.ga"], [data-domain*="filtri-dns.ga"], [data-domain*="anpigabon.ga"], [data-domain*="dgdi.ga"], [data-domain*="voitures.ga"], [data-domain*="economie-gabon.ga"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".ml"]:not([data-domain*="google.ml"], [data-domain*="mobili.ml"], [data-domain*="melody.ml"], [data-domain*="dcod.ml"], [data-domain*="info-matin.ml"], [data-domain*="amap.ml"], [data-domain*="mastodon.ml"], [data-domain*="worproject.ml"], [data-domain*="nothingprivate.ml"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".gq"]:not([data-domain*="deimos.gq"], [data-domain*="inege.gq"], [data-domain*="tvgelive.gq"], [data-domain*="comprarcarros.gq"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".cf"]:not([data-domain*="google.cf"], [data-domain*="rths.cf"], [data-domain*="voitures.cf"], [data-domain*="assembleenationale-rca.cf"], [data-domain*="cps-rca.cf"], [data-domain*="acap.cf"], [data-domain*="miraculousladybug.cf"], [data-domain*="scrat.cf"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".pw"]:not([data-domain*="libgen.pw"], [data-domain*="petridish.pw"], [data-domain*="palaugov.pw"], [data-domain*="dpc.pw"], [data-domain*="zikrap.pw"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".loan"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".agency"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".gdn"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".bid"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".top"]
! ——— For Bing ———
bing.com##.b_algo:-abp-has(a[href*=".tk/"]:not([href*="coolcmd.tk"], [href*="budterence.tk"], [href*="google.tk"], [href*="transportnews.tk"], [href*="c0d3c.tk"], [href*="anonytext.tk"], [href*="tokelau-info.tk"], [href*="fakaofo.tk"], [href*="loljp-wiki.tk"], [href*="ninetail.tk"], [href*="goshujin.tk"], [href*="graph.tk"], [href*="nolfrevival.tk"], [href*="coppersurfer.tk"], [href*="restricted-functions.tk"], [href*="bstweaker.tk"]))
@@ -110,6 +110,8 @@ bing.com##.b_algo:-abp-has(a[href*=".top/"])
||dutchmega.nl^
||juvander.net^
||ssl.bblck.me^
||allblock.net^
||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^
! Malicious domains found in videogame manuals and title screens
||acclaimsports.com^
||acclaimmaxsports.com^
@@ -516,8 +518,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||lastmedia.me^$popup
||mediabasket.club^
||mediabasket.club^$popup
||namedia.club^
||namedia.club^$popup
||newmode.biz^
||newmode.biz^$popup
||newscart.club^
@@ -581,9 +581,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||62.210.11.203^
||ilo134ulih.com^
||ilo134ulih.com^$popup
||192.243.59.12^
||192.243.59.13^
||192.243.59.20^
||hooligapps.com^
||hooligapps.com^$popup
||best202*-games-web1.com^
@@ -1094,8 +1091,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||googleanalytics.icu^$popup
||ribinski.us^
||ribinski.us^$popup
||security.fblaster.com^
||security.fblaster.com^$popup
||shopstatanalytics.store^
||shopstatanalytics.store^$popup
||sxamp.uno^
@@ -1477,8 +1472,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||pro-protection.xyz^$popup
||secureleadsforever.com^
||secureleadsforever.com^$popup
||antivirus.renewal-software-update.com^
||antivirus.renewal-software-update.com^$popup
||renewal-software-update.com^
||renewal-software-update.com^$popup
||pushmeup.art^
@@ -1541,8 +1534,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||feed.socialsearchconverter.com^$popup
||api.socialsearchconverter.com^
||api.socialsearchconverter.com^$popup
||install1.notify-service.com^
||install1.notify-service.com^$popup
||notify-service.com^
||notify-service.com^$popup
||install.stream-all.com^
@@ -1623,8 +1614,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||hydro-ca.link^$popup
||covid19-ca.link^
||covid19-ca.link^$popup
||sock.godforgiveuss.live^
||sock.godforgiveuss.live^$popup
||godforgiveuss.live^
||godforgiveuss.live^$popup
!! https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community
@@ -1691,8 +1680,6 @@ zombooru.com##a[href="http://www.hard55.com"]
! https://github.com/blocklistproject/Lists/issues/497
||tweakbit.com^
||tweakbit.com^$popup
||static.tweakbit.com^
||static.tweakbit.com^$popup
||pcspeedup.en.softonic.com^
||pcspeedup.en.softonic.com^$popup
! Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry
@@ -1737,8 +1724,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||clicken.us^$popup
||cloud-storage.store^
||cloud-storage.store^$popup
||cpmstatsart.com^
||cpmstatsart.com^$popup
||d.clarity.ms^
||d.clarity.ms^$popup
||d2m2wsoho8qq12.cloudfront.net^
@@ -1747,8 +1732,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||data.deduce.com^$popup
||findanswersnow.net^
||findanswersnow.net^$popup
||gogle.net^
||gogle.net^$popup
||gpush.cogocast.net^
||gpush.cogocast.net^$popup
||info.leadid.com^
@@ -1766,8 +1749,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||signupandturnyourscreenoffsafepowernow.date^$popup
||static.imghst-de.com^
||static.imghst-de.com^$popup
||static.traversedlp.com^
||static.traversedlp.com^$popup
||tag.cogocast.net^
||tag.cogocast.net^$popup
||tag.yieldoptimizer.com^$popup
@@ -1863,7 +1844,6 @@ zombooru.com##a[href="http://www.hard55.com"]
! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
||205.185.126.200^
||205.185.126.200^$popup
||medpro-131.getfoxyproxy.org^
! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1
||trytogoi.xyz^
||trytogoi.xyz^$popup
@@ -2056,16 +2036,62 @@ zombooru.com##a[href="http://www.hard55.com"]
||captcha-smart.top^$popup
||pushbizapi.com^
||pushbizapi.com^$popup
||jsontdsexit.com^
||jsontdsexit.com^$popup
||spnccrzone.com^
||spnccrzone.com^$popup
||therewardboost.com^
||therewardboost.com^$popup
||streamamongcotton.top^$popup
||termquotientbeen.top^$popup
! https://github.com/DandelionSprout/adfilt/pull/303
! https://www.virustotal.com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community
||45.95.169.115^
||45.95.169.115^$popup
! https://www.virustotal.com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community
||45.148.120.80^
||45.148.120.80^$popup
! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
||85.239.33.9^
||85.239.33.9^$popup
||leak.serveftp.com^
||leak.serveftp.com^$popup
! Relations to the domain above
||adminsys.serveftp.com^
||adminsys.serveftp.com^$popup
||amazbaidu.serveftp.com^
||amazbaidu.serveftp.com^$popup
||amazcompute.serveftp.com^
||amazcompute.serveftp.com^$popup
||httpssecure.serveftp.com^
||httpssecure.serveftp.com^$popup
||identity-auth612.serveftp.com^
||identity-auth612.serveftp.com^$popup
||securd03c-acclogs.serveftp.com^
||securd03c-acclogs.serveftp.com^$popup
||secure00-account.serveftp.com^
||secure00-account.serveftp.com^$popup
||numberpresentifhh.serveftp.com^
||numberpresentifhh.serveftp.com^$popup
||secure-auth01.serveftp.com^
||secure-auth01.serveftp.com^$popup
||citionlinebk.serveftp.com^
||citionlinebk.serveftp.com^$popup
||secure05h-verify.serveftp.com^
||secure05h-verify.serveftp.com^$popup
||secure-authlogin5.serveftp.com^
||secure-authlogin5.serveftp.com^$popup
||c4ase-verified9932.serveftp.com^
||c4ase-verified9932.serveftp.com^$popup
||1log-wellsfargo.serveftp.com^
||1log-wellsfargo.serveftp.com^$popup
||eposcardokubo.serveftp.com^
||eposcardokubo.serveftp.com^$popup
! https://www.virustotal.com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community
||107.173.176.183^
||107.173.176.183^$popup
! https://www.virustotal.com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community
||45.148.120.171^
||45.148.120.171^$popup
! http://vxvault.net/ViriFiche.php?ID=44058
||sherence.ru^
||sherence.ru^$popup
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -2127,8 +2153,6 @@ toorgle.net##.join
||aksuu.ru^$popup
||allow-space.com^
||allow-space.com^$popup
||allowandgo.com^
||allowandgo.com^$popup
||clc.zoocenter.ru^
||clc.zoocenter.ru^$popup
||clckask.club^
@@ -2173,8 +2197,6 @@ toorgle.net##.join
! The Jerma985 Discord server
||crazycrabreedville.com^
||crazycrabreedville.com^$popup
||discord-nitro.link^
||discord-nitro.link^$popup
! https://flclever.weebly.com/pixie-hollow-mini-games.html (06/05/2021)
||messium.info^
||messium.info^$popup
@@ -6673,8 +6695,6 @@ toorgle.net##.join
||illuminatelocks.com^$popup
||illustrationmanlypageant.com^
||illustrationmanlypageant.com^$popup
||ilo134ulih.com^
||ilo134ulih.com^$popup
||ilxhsgd.com^
||ilxhsgd.com^$popup
||imglov.com^
@@ -8739,8 +8759,6 @@ toorgle.net##.join
||pitrespite.com^$popup
||pitysuffix.com^
||pitysuffix.com^$popup
||pl3143.puserving.com^
||pl3143.puserving.com^$popup
||plaguealacritytwitter.com^
||plaguealacritytwitter.com^$popup
||plaicenaive.com^
@@ -8885,8 +8903,6 @@ toorgle.net##.join
||poshbeechhoneycomb.com^$popup
||possessedbrute.com^
||possessedbrute.com^$popup
||possessedcrackinghart.com^
||possessedcrackinghart.com^$popup
||possiblytoxic.com^
||possiblytoxic.com^$popup
||postalfranticallyfriendship.com^
@@ -11796,8 +11812,6 @@ toorgle.net##.join
||com-nitro.gifts^$popup
||counter-stricke.ru^
||counter-stricke.ru^$popup
||crazy-soom.org.ru^
||crazy-soom.org.ru^$popup
||cs-activit.xyz^
||cs-activit.xyz^$popup
||cs-riptide.com^
@@ -12022,8 +12036,6 @@ toorgle.net##.join
||keys-dropes.com^$popup
||keysdropes.com^
||keysdropes.com^$popup
||justinstalledpanel.com^
||justinstalledpanel.com^$popup
||magicdropgift.ru^
||magicdropgift.ru^$popup
||magikbrop.xyz^
@@ -12096,8 +12108,6 @@ toorgle.net##.join
||rust-chest.com^$popup
||rust-get.com^
||rust-get.com^$popup
||rust-satchel.com^
||rust-satchel.com^$popup
||rust-skin.com^
||rust-skin.com^$popup
||s-arts.pro^
Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt
+44 -36
View File
@@ -1,6 +1,6 @@
[AdGuard versions from ≥2019]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
! Version: 16October2021v1-Beta
! Version: 19October2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -67,17 +67,17 @@ www.google.*#?#*:has(> * > a[oncontextmenu][href^="https://books.google."])
!#endif
! ——— For DuckDuckGo ———
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".tk"]:not([data-domain*="coolcmd.tk"], [data-domain*="budterence.tk"], [data-domain*="google.tk"], [data-domain*="transportnews.tk"], [data-domain*="c0d3c.tk"], [data-domain*="anonytext.tk"], [data-domain*="tokelau-info.tk"], [data-domain*="fakaofo.tk"], [data-domain*="loljp-wiki.tk"], [data-domain*="ninetail.tk"], [data-domain*="goshujin.tk"], [data-domain*="graph.tk"], [data-domain*="nolfrevival.tk"], [data-domain*="coppersurfer.tk"], [data-domain*="restricted-functions.tk"], [data-domain*="bstweaker.tk"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".ga"]:not([data-domain*="google.ga"], [data-domain*="filtri-dns.ga"], [data-domain*="anpigabon.ga"], [data-domain*="dgdi.ga"], [data-domain*="voitures.ga"], [data-domain*="economie-gabon.ga"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".ml"]:not([data-domain*="google.ml"], [data-domain*="mobili.ml"], [data-domain*="melody.ml"], [data-domain*="dcod.ml"], [data-domain*="info-matin.ml"], [data-domain*="amap.ml"], [data-domain*="mastodon.ml"], [data-domain*="worproject.ml"], [data-domain*="nothingprivate.ml"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".gq"]:not([data-domain*="deimos.gq"], [data-domain*="inege.gq"], [data-domain*="tvgelive.gq"], [data-domain*="comprarcarros.gq"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".cf"]:not([data-domain*="google.cf"], [data-domain*="rths.cf"], [data-domain*="voitures.cf"], [data-domain*="assembleenationale-rca.cf"], [data-domain*="cps-rca.cf"], [data-domain*="acap.cf"], [data-domain*="miraculousladybug.cf"], [data-domain*="scrat.cf"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".pw"]:not([data-domain*="libgen.pw"], [data-domain*="petridish.pw"], [data-domain*="palaugov.pw"], [data-domain*="dpc.pw"], [data-domain*="zikrap.pw"])
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".loan"]
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".agency"]
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".gdn"]
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".bid"]
duckduckgo.com,3g2upl4pq6kufc4m.onion##[data-domain$=".top"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".tk"]:not([data-domain*="coolcmd.tk"], [data-domain*="budterence.tk"], [data-domain*="google.tk"], [data-domain*="transportnews.tk"], [data-domain*="c0d3c.tk"], [data-domain*="anonytext.tk"], [data-domain*="tokelau-info.tk"], [data-domain*="fakaofo.tk"], [data-domain*="loljp-wiki.tk"], [data-domain*="ninetail.tk"], [data-domain*="goshujin.tk"], [data-domain*="graph.tk"], [data-domain*="nolfrevival.tk"], [data-domain*="coppersurfer.tk"], [data-domain*="restricted-functions.tk"], [data-domain*="bstweaker.tk"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".ga"]:not([data-domain*="google.ga"], [data-domain*="filtri-dns.ga"], [data-domain*="anpigabon.ga"], [data-domain*="dgdi.ga"], [data-domain*="voitures.ga"], [data-domain*="economie-gabon.ga"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".ml"]:not([data-domain*="google.ml"], [data-domain*="mobili.ml"], [data-domain*="melody.ml"], [data-domain*="dcod.ml"], [data-domain*="info-matin.ml"], [data-domain*="amap.ml"], [data-domain*="mastodon.ml"], [data-domain*="worproject.ml"], [data-domain*="nothingprivate.ml"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".gq"]:not([data-domain*="deimos.gq"], [data-domain*="inege.gq"], [data-domain*="tvgelive.gq"], [data-domain*="comprarcarros.gq"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".cf"]:not([data-domain*="google.cf"], [data-domain*="rths.cf"], [data-domain*="voitures.cf"], [data-domain*="assembleenationale-rca.cf"], [data-domain*="cps-rca.cf"], [data-domain*="acap.cf"], [data-domain*="miraculousladybug.cf"], [data-domain*="scrat.cf"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".pw"]:not([data-domain*="libgen.pw"], [data-domain*="petridish.pw"], [data-domain*="palaugov.pw"], [data-domain*="dpc.pw"], [data-domain*="zikrap.pw"])
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".loan"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".agency"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".gdn"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".bid"]
duckduckgo.com,3g2upl4pq6kufc4m.onion,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-domain$=".top"]
! ——— For Bing ———
bing.com##.b_algo:has(a[href*=".tk/"]:not([href*="coolcmd.tk"], [href*="budterence.tk"], [href*="google.tk"], [href*="transportnews.tk"], [href*="c0d3c.tk"], [href*="anonytext.tk"], [href*="tokelau-info.tk"], [href*="fakaofo.tk"], [href*="loljp-wiki.tk"], [href*="ninetail.tk"], [href*="goshujin.tk"], [href*="graph.tk"], [href*="nolfrevival.tk"], [href*="coppersurfer.tk"], [href*="restricted-functions.tk"], [href*="bstweaker.tk"]))
@@ -110,6 +110,8 @@ bing.com##.b_algo:has(a[href*=".top/"])
||dutchmega.nl^$document
||juvander.net^$document
||ssl.bblck.me^$document
||allblock.net^$document
||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^$document
! Malicious domains found in videogame manuals and title screens
||acclaimsports.com^$document
||acclaimmaxsports.com^$document
@@ -453,7 +455,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||klickmode.biz^$empty,important
||lastmedia.me^$empty,important
||mediabasket.club^$empty,important
||namedia.club^$empty,important
||newmode.biz^$empty,important
||newscart.club^$empty,important
||newsgate.biz^$empty,important
@@ -489,9 +490,6 @@ zombooru.com##a[href="http://www.hard55.com"]
62.210.9.92$network
62.210.11.203$network
||ilo134ulih.com^$empty,important
192.243.59.12$network
192.243.59.13$network
192.243.59.20$network
||hooligapps.com^$empty,important
||best202*-games-web1.com^$empty,important
||theonlygames.com^$empty,important
@@ -784,7 +782,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||fblaster.com^$empty,important
||googleanalytics.icu^$empty,important
||ribinski.us^$empty,important
||security.fblaster.com^$empty,important
||shopstatanalytics.store^$empty,important
||sxamp.uno^$empty,important
||sxbet.uno^$empty,important
@@ -993,7 +990,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||time4news.net^$empty,important
||pro-protection.xyz^$empty,important
||secureleadsforever.com^$empty,important
||antivirus.renewal-software-update.com^$empty,important
||renewal-software-update.com^$empty,important
||pushmeup.art^$document
||covercenter.xyz^$empty,important
@@ -1034,7 +1030,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||install.socialsearchconverter.com^$empty,important
||feed.socialsearchconverter.com^$empty,important
||api.socialsearchconverter.com^$empty,important
||install1.notify-service.com^$empty,important
||notify-service.com^$empty,important
||install.stream-all.com^$empty,important
! copied over from https://github.com/uBlockOrigin/uAssets/issues/9848
@@ -1093,7 +1088,6 @@ zombooru.com##a[href="http://www.hard55.com"]
!! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community
||hydro-ca.link^$empty,important
||covid19-ca.link^$empty,important
||sock.godforgiveuss.live^$empty,important
||godforgiveuss.live^$empty,important
!! https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community
91.243.121.19$network
@@ -1131,7 +1125,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||hjjhjkk.ydns.eu^$empty,important
! https://github.com/blocklistproject/Lists/issues/497
||tweakbit.com^$empty,important
||static.tweakbit.com^$empty,important
||pcspeedup.en.softonic.com^$empty,important
! Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry
||1redirb.com^$empty,important
@@ -1157,12 +1150,10 @@ zombooru.com##a[href="http://www.hard55.com"]
||clickagy.com^$empty,important
||clicken.us^$empty,important
||cloud-storage.store^$empty,important
||cpmstatsart.com^$empty,important
||d.clarity.ms^$empty,important
||d2m2wsoho8qq12.cloudfront.net^$empty,important
||data.deduce.com^$empty,important
||findanswersnow.net^$empty,important
||gogle.net^$empty,important
||gpush.cogocast.net^$empty,important
||info.leadid.com^$empty,important
||lijit.com^$empty,important
@@ -1172,7 +1163,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||rlcdn.com^$empty,important
||signupandturnyourscreenoffsafepowernow.date^$empty,important
||static.imghst-de.com^$empty,important
||static.traversedlp.com^$empty,important
||tag.cogocast.net^$empty,important
||tag.yieldoptimizer.com^$document,popup
||traversedlp.com^$empty,important
@@ -1239,7 +1229,6 @@ zombooru.com##a[href="http://www.hard55.com"]
! https://github.com/DandelionSprout/adfilt/pull/298
! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
205.185.126.200$network
||medpro-131.getfoxyproxy.org^$document
! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1
||trytogoi.xyz^$empty,important
! https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb
@@ -1351,11 +1340,38 @@ zombooru.com##a[href="http://www.hard55.com"]
||apk-top.cloud^$empty,important
||pushbizapi.com^$empty,important
||jsontdsexit.com^$empty,important
||spnccrzone.com^$empty,important
||therewardboost.com^$empty,important
! https://github.com/DandelionSprout/adfilt/pull/303
! https://www.virustotal.com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community
45.95.169.115$network
! https://www.virustotal.com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community
45.148.120.80$network
! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
85.239.33.9$network
||leak.serveftp.com^$empty,important
! Relations to the domain above
||adminsys.serveftp.com^$empty,important
||amazbaidu.serveftp.com^$empty,important
||amazcompute.serveftp.com^$empty,important
||httpssecure.serveftp.com^$empty,important
||identity-auth612.serveftp.com^$empty,important
||securd03c-acclogs.serveftp.com^$empty,important
||secure00-account.serveftp.com^$empty,important
||numberpresentifhh.serveftp.com^$empty,important
||secure-auth01.serveftp.com^$empty,important
||citionlinebk.serveftp.com^$empty,important
||secure05h-verify.serveftp.com^$empty,important
||secure-authlogin5.serveftp.com^$empty,important
||c4ase-verified9932.serveftp.com^$empty,important
||1log-wellsfargo.serveftp.com^$empty,important
||eposcardokubo.serveftp.com^$empty,important
! https://www.virustotal.com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community
107.173.176.183$network
! https://www.virustotal.com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community
45.148.120.171$network
! http://vxvault.net/ViriFiche.php?ID=44058
||sherence.ru^$empty,important
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -1390,7 +1406,6 @@ toorgle.net##.join
||allowandgo.com^$empty,important
||aksuu.ru^$empty,important
||allow-space.com^$empty,important
||allowandgo.com^$empty,important
||clc.zoocenter.ru^$empty,important
||clckask.club^$empty,important
||clickjump.biz^$empty,important
@@ -1414,7 +1429,6 @@ toorgle.net##.join
||amoxycillin1st.com^$empty,important
! The Jerma985 Discord server
||crazycrabreedville.com^$empty,important
||discord-nitro.link^$empty,important
! https://flclever.weebly.com/pixie-hollow-mini-games.html (06/05/2021)
||messium.info^$empty,important
! Various Google searches
@@ -3673,7 +3687,6 @@ toorgle.net##.join
||illuminatekingdomwrist.com^$empty,important
||illuminatelocks.com^$empty,important
||illustrationmanlypageant.com^$empty,important
||ilo134ulih.com^$empty,important
||ilxhsgd.com^$empty,important
||imglov.com^$empty,important
||immersedcopythinking.com^$empty,important
@@ -4706,7 +4719,6 @@ toorgle.net##.join
||pipelydia.com^$empty,important
||pitrespite.com^$empty,important
||pitysuffix.com^$empty,important
||pl3143.puserving.com^$empty,important
||plaguealacritytwitter.com^$empty,important
||plaicenaive.com^$empty,important
||plainlycradlescalp.com^$empty,important
@@ -4779,7 +4791,6 @@ toorgle.net##.join
||portugueseexcessivelygospel.com^$empty,important
||poshbeechhoneycomb.com^$empty,important
||possessedbrute.com^$empty,important
||possessedcrackinghart.com^$empty,important
||possiblytoxic.com^$empty,important
||postalfranticallyfriendship.com^$empty,important
||posterbreaking.com^$empty,important
@@ -6242,7 +6253,6 @@ toorgle.net##.join
||cloud9-gaming.xyz^$empty,important
||com-nitro.gifts^$empty,important
||counter-stricke.ru^$empty,important
||crazy-soom.org.ru^$empty,important
||cs-activit.xyz^$empty,important
||cs-riptide.com^$empty,important
||cs-riptide.ru^$empty,important
@@ -6355,7 +6365,6 @@ toorgle.net##.join
||keydrop.ru.com^$empty,important
||keys-dropes.com^$empty,important
||keysdropes.com^$empty,important
||justinstalledpanel.com^$empty,important
||magicdropgift.ru^$empty,important
||magikbrop.xyz^$empty,important
||market-csgo.ru^$empty,important
@@ -6392,7 +6401,6 @@ toorgle.net##.join
||rollskin.ru^$empty,important
||rust-chest.com^$empty,important
||rust-get.com^$empty,important
||rust-satchel.com^$empty,important
||rust-skin.com^$empty,important
||s-arts.pro^$empty,important
||skinosoda.online^$empty,important
Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt
+33 -25
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
! Version: 16October2021v1-Beta
! Version: 19October2021v1-Beta
! Expires: 5 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -112,6 +112,8 @@
||dutchmega.nl^
||juvander.net^
||ssl.bblck.me^
||allblock.net^
! Malicious domains found in videogame manuals and title screens
||acclaimsports.com^
||acclaimmaxsports.com^
@@ -369,7 +371,6 @@
||klickmode.biz^
||lastmedia.me^
||mediabasket.club^
||namedia.club^
||newmode.biz^
||newscart.club^
||newsgate.biz^
@@ -405,9 +406,6 @@
62.210.9.92
62.210.11.203
||ilo134ulih.com^
192.243.59.12
192.243.59.13
192.243.59.20
||hooligapps.com^
||best202*-games-web1.com^
||theonlygames.com^
@@ -700,7 +698,6 @@
||fblaster.com^
||googleanalytics.icu^
||ribinski.us^
||security.fblaster.com^
||shopstatanalytics.store^
||sxamp.uno^
||sxbet.uno^
@@ -910,7 +907,6 @@
||time4news.net^
||pro-protection.xyz^
||secureleadsforever.com^
||antivirus.renewal-software-update.com^
||renewal-software-update.com^
||pushmeup.art^
||covercenter.xyz^
@@ -951,7 +947,6 @@
||install.socialsearchconverter.com^
||feed.socialsearchconverter.com^
||api.socialsearchconverter.com^
||install1.notify-service.com^
||notify-service.com^
||install.stream-all.com^
! copied over from https://github.com/uBlockOrigin/uAssets/issues/9848
@@ -1010,7 +1005,6 @@
!! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community
||hydro-ca.link^
||covid19-ca.link^
||sock.godforgiveuss.live^
||godforgiveuss.live^
!! https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community
91.243.121.19
@@ -1048,7 +1042,6 @@
||hjjhjkk.ydns.eu^
! https://github.com/blocklistproject/Lists/issues/497
||tweakbit.com^
||static.tweakbit.com^
||pcspeedup.en.softonic.com^
! Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry
||1redirb.com^
@@ -1074,12 +1067,10 @@
||clickagy.com^
||clicken.us^
||cloud-storage.store^
||cpmstatsart.com^
||d.clarity.ms^
||d2m2wsoho8qq12.cloudfront.net^
||data.deduce.com^
||findanswersnow.net^
||gogle.net^
||gpush.cogocast.net^
||info.leadid.com^
||lijit.com^
@@ -1089,7 +1080,6 @@
||rlcdn.com^
||signupandturnyourscreenoffsafepowernow.date^
||static.imghst-de.com^
||static.traversedlp.com^
||tag.cogocast.net^
||tag.yieldoptimizer.com^
||traversedlp.com^
@@ -1156,7 +1146,6 @@
! https://github.com/DandelionSprout/adfilt/pull/298
! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
205.185.126.200
||medpro-131.getfoxyproxy.org^
! https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1
||trytogoi.xyz^
! https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb
@@ -1268,11 +1257,38 @@
||apk-top.cloud^
||pushbizapi.com^
||jsontdsexit.com^
||spnccrzone.com^
||therewardboost.com^
! https://github.com/DandelionSprout/adfilt/pull/303
! https://www.virustotal.com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community
45.95.169.115
! https://www.virustotal.com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community
45.148.120.80
! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
85.239.33.9
||leak.serveftp.com^
! Relations to the domain above
||adminsys.serveftp.com^
||amazbaidu.serveftp.com^
||amazcompute.serveftp.com^
||httpssecure.serveftp.com^
||identity-auth612.serveftp.com^
||securd03c-acclogs.serveftp.com^
||secure00-account.serveftp.com^
||numberpresentifhh.serveftp.com^
||secure-auth01.serveftp.com^
||citionlinebk.serveftp.com^
||secure05h-verify.serveftp.com^
||secure-authlogin5.serveftp.com^
||c4ase-verified9932.serveftp.com^
||1log-wellsfargo.serveftp.com^
||eposcardokubo.serveftp.com^
! https://www.virustotal.com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community
107.173.176.183
! https://www.virustotal.com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community
45.148.120.171
! http://vxvault.net/ViriFiche.php?ID=44058
||sherence.ru^
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -1305,7 +1321,6 @@
||allowandgo.com^
||aksuu.ru^
||allow-space.com^
||allowandgo.com^
||clc.zoocenter.ru^
||clckask.club^
||clickjump.biz^
@@ -1329,7 +1344,6 @@
||amoxycillin1st.com^
! The Jerma985 Discord server
||crazycrabreedville.com^
||discord-nitro.link^
! https://flclever.weebly.com/pixie-hollow-mini-games.html (06/05/2021)
||messium.info^
! Various Google searches
@@ -3588,7 +3602,6 @@
||illuminatekingdomwrist.com^
||illuminatelocks.com^
||illustrationmanlypageant.com^
||ilo134ulih.com^
||ilxhsgd.com^
||imglov.com^
||immersedcopythinking.com^
@@ -4621,7 +4634,6 @@
||pipelydia.com^
||pitrespite.com^
||pitysuffix.com^
||pl3143.puserving.com^
||plaguealacritytwitter.com^
||plaicenaive.com^
||plainlycradlescalp.com^
@@ -4694,7 +4706,6 @@
||portugueseexcessivelygospel.com^
||poshbeechhoneycomb.com^
||possessedbrute.com^
||possessedcrackinghart.com^
||possiblytoxic.com^
||postalfranticallyfriendship.com^
||posterbreaking.com^
@@ -6157,7 +6168,6 @@
||cloud9-gaming.xyz^
||com-nitro.gifts^
||counter-stricke.ru^
||crazy-soom.org.ru^
||cs-activit.xyz^
||cs-riptide.com^
||cs-riptide.ru^
@@ -6270,7 +6280,6 @@
||keydrop.ru.com^
||keys-dropes.com^
||keysdropes.com^
||justinstalledpanel.com^
||magicdropgift.ru^
||magikbrop.xyz^
||market-csgo.ru^
@@ -6307,7 +6316,6 @@
||rollskin.ru^
||rust-chest.com^
||rust-get.com^
||rust-satchel.com^
||rust-skin.com^
||s-arts.pro^
||skinosoda.online^
Alternate versions Anti-Malware List/AntiMalwareDomains.txt
+26 -25
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 16October2021v1-Beta
# Version: 19October2021v1-Beta
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -57,6 +57,8 @@ njabl.org
dutchmega.nl
juvander.net
ssl.bblck.me
allblock.net
# Malicious domains found in videogame manuals and title screens
acclaimsports.com
acclaimmaxsports.com
@@ -279,7 +281,6 @@ goodcode.me
klickmode.biz
lastmedia.me
mediabasket.club
namedia.club
newmode.biz
newscart.club
newsgate.biz
@@ -315,9 +316,6 @@ worldtxt.club
62.210.9.92
62.210.11.203
ilo134ulih.com
192.243.59.12
192.243.59.13
192.243.59.20
hooligapps.com
theonlygames.com
notified-today.com
@@ -583,7 +581,6 @@ camillesanz.com
fblaster.com
googleanalytics.icu
ribinski.us
security.fblaster.com
shopstatanalytics.store
sxamp.uno
sxbet.uno
@@ -777,7 +774,6 @@ apsolutamente.com
time4news.net
pro-protection.xyz
secureleadsforever.com
antivirus.renewal-software-update.com
renewal-software-update.com
pushmeup.art
covercenter.xyz
@@ -804,7 +800,6 @@ socialsearchconverter.com
install.socialsearchconverter.com
feed.socialsearchconverter.com
api.socialsearchconverter.com
install1.notify-service.com
notify-service.com
install.stream-all.com
gghacks.com
@@ -836,7 +831,6 @@ tekhacks.net
nemscnc.ddns.net
hydro-ca.link
covid19-ca.link
sock.godforgiveuss.live
godforgiveuss.live
91.243.121.19
fernandomayol.com
@@ -867,7 +861,6 @@ nan.ydns.eu
hurricane.ydns.eu
hjjhjkk.ydns.eu
tweakbit.com
static.tweakbit.com
pcspeedup.en.softonic.com
# Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry
1redirb.com
@@ -890,12 +883,10 @@ cdn925.com
clickagy.com
clicken.us
cloud-storage.store
cpmstatsart.com
d.clarity.ms
d2m2wsoho8qq12.cloudfront.net
data.deduce.com
findanswersnow.net
gogle.net
gpush.cogocast.net
info.leadid.com
lijit.com
@@ -905,7 +896,6 @@ pippio.com
rlcdn.com
signupandturnyourscreenoffsafepowernow.date
static.imghst-de.com
static.traversedlp.com
tag.cogocast.net
tag.yieldoptimizer.com
traversedlp.com
@@ -963,7 +953,6 @@ cd.org
23.94.26.138
ispco.shop
205.185.126.200
medpro-131.getfoxyproxy.org
trytogoi.xyz
apple-technicalsupport-icloud.com
185.243.56.167
@@ -1058,11 +1047,31 @@ sentencesavedress.top
apk-top.cloud
captcha-smart.top
pushbizapi.com
jsontdsexit.com
spnccrzone.com
therewardboost.com
streamamongcotton.top
termquotientbeen.top
45.95.169.115
45.148.120.80
85.239.33.9
leak.serveftp.com
# Relations to the domain above
adminsys.serveftp.com
amazbaidu.serveftp.com
amazcompute.serveftp.com
httpssecure.serveftp.com
identity-auth612.serveftp.com
securd03c-acclogs.serveftp.com
secure00-account.serveftp.com
numberpresentifhh.serveftp.com
secure-auth01.serveftp.com
citionlinebk.serveftp.com
secure05h-verify.serveftp.com
secure-authlogin5.serveftp.com
c4ase-verified9932.serveftp.com
1log-wellsfargo.serveftp.com
eposcardokubo.serveftp.com
107.173.176.183
45.148.120.171
sherence.ru
# ——— Standard malware that I stumbled upon on my own ———
downloadprovider.me
@@ -1093,7 +1102,6 @@ works79.com
allowandgo.com
aksuu.ru
allow-space.com
allowandgo.com
clc.zoocenter.ru
clckask.club
clickjump.biz
@@ -1116,7 +1124,6 @@ jueriy.com
amoxycillin1st.com
# The Jerma985 Discord server
crazycrabreedville.com
discord-nitro.link
messium.info
# Various Google searches
# Various search results for 'kelloggs tresor' in Norwegian (30/05/2021)
@@ -3372,7 +3379,6 @@ illuminateinconveniencenutrient.com
illuminatekingdomwrist.com
illuminatelocks.com
illustrationmanlypageant.com
ilo134ulih.com
ilxhsgd.com
imglov.com
immersedcopythinking.com
@@ -4405,7 +4411,6 @@ pingdishonest.com
pipelydia.com
pitrespite.com
pitysuffix.com
pl3143.puserving.com
plaguealacritytwitter.com
plaicenaive.com
plainlycradlescalp.com
@@ -4478,7 +4483,6 @@ portscalculateappease.com
portugueseexcessivelygospel.com
poshbeechhoneycomb.com
possessedbrute.com
possessedcrackinghart.com
possiblytoxic.com
postalfranticallyfriendship.com
posterbreaking.com
@@ -5941,7 +5945,6 @@ cis-rankig.ru
cloud9-gaming.xyz
com-nitro.gifts
counter-stricke.ru
crazy-soom.org.ru
cs-activit.xyz
cs-riptide.com
cs-riptide.ru
@@ -6049,7 +6052,6 @@ keydrop.org.ru
keydrop.ru.com
keys-dropes.com
keysdropes.com
justinstalledpanel.com
magicdropgift.ru
magikbrop.xyz
market-csgo.ru
@@ -6082,7 +6084,6 @@ roll-skins.tk
rollskin.ru
rust-chest.com
rust-get.com
rust-satchel.com
rust-skin.com
s-arts.pro
skinosoda.online
Alternate versions Anti-Malware List/AntiMalwareHosts.txt
+26 -25
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
# Version: 16October2021v1-Alpha
# Version: 19October2021v1-Alpha
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -57,6 +57,8 @@
127.0.0.1 dutchmega.nl
127.0.0.1 juvander.net
127.0.0.1 ssl.bblck.me
127.0.0.1 allblock.net
# Malicious domains found in videogame manuals and title screens
127.0.0.1 acclaimsports.com
127.0.0.1 acclaimmaxsports.com
@@ -279,7 +281,6 @@
127.0.0.1 klickmode.biz
127.0.0.1 lastmedia.me
127.0.0.1 mediabasket.club
127.0.0.1 namedia.club
127.0.0.1 newmode.biz
127.0.0.1 newscart.club
127.0.0.1 newsgate.biz
@@ -315,9 +316,6 @@
127.0.0.1 62.210.9.92
127.0.0.1 62.210.11.203
127.0.0.1 ilo134ulih.com
127.0.0.1 192.243.59.12
127.0.0.1 192.243.59.13
127.0.0.1 192.243.59.20
127.0.0.1 hooligapps.com
127.0.0.1 theonlygames.com
127.0.0.1 notified-today.com
@@ -583,7 +581,6 @@
127.0.0.1 fblaster.com
127.0.0.1 googleanalytics.icu
127.0.0.1 ribinski.us
127.0.0.1 security.fblaster.com
127.0.0.1 shopstatanalytics.store
127.0.0.1 sxamp.uno
127.0.0.1 sxbet.uno
@@ -777,7 +774,6 @@
127.0.0.1 time4news.net
127.0.0.1 pro-protection.xyz
127.0.0.1 secureleadsforever.com
127.0.0.1 antivirus.renewal-software-update.com
127.0.0.1 renewal-software-update.com
127.0.0.1 pushmeup.art
127.0.0.1 covercenter.xyz
@@ -804,7 +800,6 @@
127.0.0.1 install.socialsearchconverter.com
127.0.0.1 feed.socialsearchconverter.com
127.0.0.1 api.socialsearchconverter.com
127.0.0.1 install1.notify-service.com
127.0.0.1 notify-service.com
127.0.0.1 install.stream-all.com
127.0.0.1 gghacks.com
@@ -836,7 +831,6 @@
127.0.0.1 nemscnc.ddns.net
127.0.0.1 hydro-ca.link
127.0.0.1 covid19-ca.link
127.0.0.1 sock.godforgiveuss.live
127.0.0.1 godforgiveuss.live
127.0.0.1 91.243.121.19
127.0.0.1 fernandomayol.com
@@ -867,7 +861,6 @@
127.0.0.1 hurricane.ydns.eu
127.0.0.1 hjjhjkk.ydns.eu
127.0.0.1 tweakbit.com
127.0.0.1 static.tweakbit.com
127.0.0.1 pcspeedup.en.softonic.com
# Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry
127.0.0.1 1redirb.com
@@ -890,12 +883,10 @@
127.0.0.1 clickagy.com
127.0.0.1 clicken.us
127.0.0.1 cloud-storage.store
127.0.0.1 cpmstatsart.com
127.0.0.1 d.clarity.ms
127.0.0.1 d2m2wsoho8qq12.cloudfront.net
127.0.0.1 data.deduce.com
127.0.0.1 findanswersnow.net
127.0.0.1 gogle.net
127.0.0.1 gpush.cogocast.net
127.0.0.1 info.leadid.com
127.0.0.1 lijit.com
@@ -905,7 +896,6 @@
127.0.0.1 rlcdn.com
127.0.0.1 signupandturnyourscreenoffsafepowernow.date
127.0.0.1 static.imghst-de.com
127.0.0.1 static.traversedlp.com
127.0.0.1 tag.cogocast.net
127.0.0.1 tag.yieldoptimizer.com
127.0.0.1 traversedlp.com
@@ -963,7 +953,6 @@
127.0.0.1 23.94.26.138
127.0.0.1 ispco.shop
127.0.0.1 205.185.126.200
127.0.0.1 medpro-131.getfoxyproxy.org
127.0.0.1 trytogoi.xyz
127.0.0.1 apple-technicalsupport-icloud.com
127.0.0.1 185.243.56.167
@@ -1058,11 +1047,31 @@
127.0.0.1 apk-top.cloud
127.0.0.1 captcha-smart.top
127.0.0.1 pushbizapi.com
127.0.0.1 jsontdsexit.com
127.0.0.1 spnccrzone.com
127.0.0.1 therewardboost.com
127.0.0.1 streamamongcotton.top
127.0.0.1 termquotientbeen.top
127.0.0.1 45.95.169.115
127.0.0.1 45.148.120.80
127.0.0.1 85.239.33.9
127.0.0.1 leak.serveftp.com
# Relations to the domain above
127.0.0.1 adminsys.serveftp.com
127.0.0.1 amazbaidu.serveftp.com
127.0.0.1 amazcompute.serveftp.com
127.0.0.1 httpssecure.serveftp.com
127.0.0.1 identity-auth612.serveftp.com
127.0.0.1 securd03c-acclogs.serveftp.com
127.0.0.1 secure00-account.serveftp.com
127.0.0.1 numberpresentifhh.serveftp.com
127.0.0.1 secure-auth01.serveftp.com
127.0.0.1 citionlinebk.serveftp.com
127.0.0.1 secure05h-verify.serveftp.com
127.0.0.1 secure-authlogin5.serveftp.com
127.0.0.1 c4ase-verified9932.serveftp.com
127.0.0.1 1log-wellsfargo.serveftp.com
127.0.0.1 eposcardokubo.serveftp.com
127.0.0.1 107.173.176.183
127.0.0.1 45.148.120.171
127.0.0.1 sherence.ru
# ——— Standard malware that I stumbled upon on my own ———
127.0.0.1 downloadprovider.me
@@ -1093,7 +1102,6 @@
127.0.0.1 allowandgo.com
127.0.0.1 aksuu.ru
127.0.0.1 allow-space.com
127.0.0.1 allowandgo.com
127.0.0.1 clc.zoocenter.ru
127.0.0.1 clckask.club
127.0.0.1 clickjump.biz
@@ -1116,7 +1124,6 @@
127.0.0.1 amoxycillin1st.com
# The Jerma985 Discord server
127.0.0.1 crazycrabreedville.com
127.0.0.1 discord-nitro.link
127.0.0.1 messium.info
# Various Google searches
# Various search results for 'kelloggs tresor' in Norwegian (30/05/2021)
@@ -3372,7 +3379,6 @@
127.0.0.1 illuminatekingdomwrist.com
127.0.0.1 illuminatelocks.com
127.0.0.1 illustrationmanlypageant.com
127.0.0.1 ilo134ulih.com
127.0.0.1 ilxhsgd.com
127.0.0.1 imglov.com
127.0.0.1 immersedcopythinking.com
@@ -4405,7 +4411,6 @@
127.0.0.1 pipelydia.com
127.0.0.1 pitrespite.com
127.0.0.1 pitysuffix.com
127.0.0.1 pl3143.puserving.com
127.0.0.1 plaguealacritytwitter.com
127.0.0.1 plaicenaive.com
127.0.0.1 plainlycradlescalp.com
@@ -4478,7 +4483,6 @@
127.0.0.1 portugueseexcessivelygospel.com
127.0.0.1 poshbeechhoneycomb.com
127.0.0.1 possessedbrute.com
127.0.0.1 possessedcrackinghart.com
127.0.0.1 possiblytoxic.com
127.0.0.1 postalfranticallyfriendship.com
127.0.0.1 posterbreaking.com
@@ -5941,7 +5945,6 @@
127.0.0.1 cloud9-gaming.xyz
127.0.0.1 com-nitro.gifts
127.0.0.1 counter-stricke.ru
127.0.0.1 crazy-soom.org.ru
127.0.0.1 cs-activit.xyz
127.0.0.1 cs-riptide.com
127.0.0.1 cs-riptide.ru
@@ -6049,7 +6052,6 @@
127.0.0.1 keydrop.ru.com
127.0.0.1 keys-dropes.com
127.0.0.1 keysdropes.com
127.0.0.1 justinstalledpanel.com
127.0.0.1 magicdropgift.ru
127.0.0.1 magikbrop.xyz
127.0.0.1 market-csgo.ru
@@ -6082,7 +6084,6 @@
127.0.0.1 rollskin.ru
127.0.0.1 rust-chest.com
127.0.0.1 rust-get.com
127.0.0.1 rust-satchel.com
127.0.0.1 rust-skin.com
127.0.0.1 s-arts.pro
127.0.0.1 skinosoda.online
Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action
+23 -22
View File
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 16October2021v1-Alpha
# Version: 19October2021v1-Alpha
# Expires: 5 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -65,6 +65,8 @@
# Malicious domains found in videogame manuals and title screens
@@ -360,10 +362,6 @@
@@ -871,10 +869,6 @@
@@ -894,7 +888,6 @@
# Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry
@@ -1038,10 +1031,6 @@
@@ -1092,6 +1081,26 @@
# Relations to the domain above
{+block}
# ——— Standard malware that I stumbled upon on my own ———
@@ -1140,13 +1149,11 @@
# The Jerma985 Discord server
# Various Google searches
# Various search results for 'kelloggs tresor' in Norwegian (30/05/2021)
/pgxhtogrzm-
@@ -5914,9 +5921,6 @@
@@ -6281,9 +6285,6 @@
Alternate versions Anti-Malware List/AntiMalwareTPL.tpl
+33 -25
View File
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 16October2021v1-Beta
# Version: 19October2021v1-Beta
: expires = 5
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -105,6 +105,8 @@ msFilterList
-d dutchmega.nl
-d juvander.net
-d ssl.bblck.me
-d allblock.net
-d microsoftedge.microsoft.com addons detail allblock nkllnmjaaifdphkfbmedklkimjmnjeen
# Malicious domains found in videogame manuals and title screens
-d acclaimsports.com
-d acclaimmaxsports.com
@@ -362,7 +364,6 @@ msFilterList
-d klickmode.biz
-d lastmedia.me
-d mediabasket.club
-d namedia.club
-d newmode.biz
-d newscart.club
-d newsgate.biz
@@ -398,9 +399,6 @@ msFilterList
-d 62.210.9.92
-d 62.210.11.203
-d ilo134ulih.com
-d 192.243.59.12
-d 192.243.59.13
-d 192.243.59.20
-d hooligapps.com
-d best202*-games-web1.com
-d theonlygames.com
@@ -693,7 +691,6 @@ msFilterList
-d fblaster.com
-d googleanalytics.icu
-d ribinski.us
-d security.fblaster.com
-d shopstatanalytics.store
-d sxamp.uno
-d sxbet.uno
@@ -900,7 +897,6 @@ msFilterList
-d time4news.net
-d pro-protection.xyz
-d secureleadsforever.com
-d antivirus.renewal-software-update.com
-d renewal-software-update.com
-d pushmeup.art
-d covercenter.xyz
@@ -941,7 +937,6 @@ msFilterList
-d install.socialsearchconverter.com
-d feed.socialsearchconverter.com
-d api.socialsearchconverter.com
-d install1.notify-service.com
-d notify-service.com
-d install.stream-all.com
# copied over from https://github.com/uBlockOrigin/uAssets/issues/9848
@@ -1000,7 +995,6 @@ msFilterList
# https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community
-d hydro-ca.link
-d covid19-ca.link
-d sock.godforgiveuss.live
-d godforgiveuss.live
# https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community
-d 91.243.121.19
@@ -1038,7 +1032,6 @@ msFilterList
-d hjjhjkk.ydns.eu
# https://github.com/blocklistproject/Lists/issues/497
-d tweakbit.com
-d static.tweakbit.com
-d pcspeedup.en.softonic.com
# Copied from «uBlock Filters - Badware Risks» because it has proven to be a very good entry
-d 1redirb.com
@@ -1064,12 +1057,10 @@ msFilterList
-d clickagy.com
-d clicken.us
-d cloud-storage.store
-d cpmstatsart.com
-d d.clarity.ms
-d d2m2wsoho8qq12.cloudfront.net
-d data.deduce.com
-d findanswersnow.net
-d gogle.net
-d gpush.cogocast.net
-d info.leadid.com
-d lijit.com
@@ -1079,7 +1070,6 @@ msFilterList
-d rlcdn.com
-d signupandturnyourscreenoffsafepowernow.date
-d static.imghst-de.com
-d static.traversedlp.com
-d tag.cogocast.net
-d tag.yieldoptimizer.com
-d traversedlp.com
@@ -1146,7 +1136,6 @@ msFilterList
# https://github.com/DandelionSprout/adfilt/pull/298
# https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
-d 205.185.126.200
-d medpro-131.getfoxyproxy.org
# https://www.virustotal.com/gui/url/337dd5e5c53558dc7d6c8910b5ebe14a7390a78e13830b367363465b85ca8dd6?nocache=1
-d trytogoi.xyz
# https://www.virustotal.com/gui/url/0f8791a82ee4d2c229ccbe3328092cdb2135027439778c280f1d2d3b0fdba1bb
@@ -1257,11 +1246,38 @@ msFilterList
-d apk-top.cloud
-d captcha-smart.top
-d pushbizapi.com
-d jsontdsexit.com
-d spnccrzone.com
-d therewardboost.com
-d streamamongcotton.top
-d termquotientbeen.top
# https://github.com/DandelionSprout/adfilt/pull/303
# https://www.virustotal.com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community
-d 45.95.169.115
# https://www.virustotal.com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community
-d 45.148.120.80
# https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
-d 85.239.33.9
-d leak.serveftp.com
# Relations to the domain above
-d adminsys.serveftp.com
-d amazbaidu.serveftp.com
-d amazcompute.serveftp.com
-d httpssecure.serveftp.com
-d identity-auth612.serveftp.com
-d securd03c-acclogs.serveftp.com
-d secure00-account.serveftp.com
-d numberpresentifhh.serveftp.com
-d secure-auth01.serveftp.com
-d citionlinebk.serveftp.com
-d secure05h-verify.serveftp.com
-d secure-authlogin5.serveftp.com
-d c4ase-verified9932.serveftp.com
-d 1log-wellsfargo.serveftp.com
-d eposcardokubo.serveftp.com
# https://www.virustotal.com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community
-d 107.173.176.183
# https://www.virustotal.com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community
-d 45.148.120.171
# http://vxvault.net/ViriFiche.php?ID=44058
-d sherence.ru
# ——— Standard malware that I stumbled upon on my own ———
# http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -1294,7 +1310,6 @@ msFilterList
-d allowandgo.com
-d aksuu.ru
-d allow-space.com
-d allowandgo.com
-d clc.zoocenter.ru
-d clckask.club
-d clickjump.biz
@@ -1318,7 +1333,6 @@ msFilterList
-d amoxycillin1st.com
# The Jerma985 Discord server
-d crazycrabreedville.com
-d discord-nitro.link
# https://flclever.weebly.com/pixie-hollow-mini-games.html/(06/05/2021)
-d messium.info
# Various Google searches
@@ -3576,7 +3590,6 @@ msFilterList
-d illuminatekingdomwrist.com
-d illuminatelocks.com
-d illustrationmanlypageant.com
-d ilo134ulih.com
-d ilxhsgd.com
-d imglov.com
-d immersedcopythinking.com
@@ -4609,7 +4622,6 @@ msFilterList
-d pipelydia.com
-d pitrespite.com
-d pitysuffix.com
-d pl3143.puserving.com
-d plaguealacritytwitter.com
-d plaicenaive.com
-d plainlycradlescalp.com
@@ -4682,7 +4694,6 @@ msFilterList
-d portugueseexcessivelygospel.com
-d poshbeechhoneycomb.com
-d possessedbrute.com
-d possessedcrackinghart.com
-d possiblytoxic.com
-d postalfranticallyfriendship.com
-d posterbreaking.com
@@ -6145,7 +6156,6 @@ msFilterList
-d cloud9-gaming.xyz
-d com-nitro.gifts
-d counter-stricke.ru
-d crazy-soom.org.ru
-d cs-activit.xyz
-d cs-riptide.com
-d cs-riptide.ru
@@ -6258,7 +6268,6 @@ msFilterList
-d keydrop.ru.com
-d keys-dropes.com
-d keysdropes.com
-d justinstalledpanel.com
-d magicdropgift.ru
-d magikbrop.xyz
-d market-csgo.ru
@@ -6295,7 +6304,6 @@ msFilterList
-d rollskin.ru
-d rust-chest.com
-d rust-get.com
-d rust-satchel.com
-d rust-skin.com
-d s-arts.pro
-d skinosoda.online
Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset
+1 -1
View File
@@ -1,5 +1,5 @@
# Title: Dandelion Sprout's and other adblocker lists' IPs
# Version: 14October2021v1-Beta
# Version: 16October2021v1-Beta
# Expires: 5 days
# Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish.
# For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english