Let's see how well this went

This commit is contained in:
Imre Kristoffer Eilertsen
2023-12-16 20:08:18 +01:00
committed by GitHub
parent 9d5c4788f0
commit 56f197617c
7 changed files with 255 additions and 236 deletions
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus and AdBlock)
! Version: 10December2023v1
! Version: 16December2023v2
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -81,6 +81,8 @@ www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,googl
www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*="&loc=/" i]):has(a[href*=".tk/"], a[href*=".ml/"])
www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*="&orig_url=/" i]):has(a[href*=".tk/"], a[href*=".ml/"])
www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*="=//"]):has(a[href*=".tk/"], a[href*=".ml/"])
www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*=redirect][href*=".%D1%80%D1%84"])
www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*="/go/"][href*=".%D1%80%D1%84"])
@@ -2108,11 +2110,11 @@ zombooru.com##a[href="http://www.hard55.com"]
://adblock-pro-download.
://adblock-pro-download.$popup
://142.91.159.
! https://github.com/DandelionSprout/adfilt/issues/942
://23.109.150.
://23.109.248.
||abbotinexperienced.com^
||abbotinexperienced.com^$popup
@@ -6861,10 +6863,10 @@ zombooru.com##a[href="http://www.hard55.com"]
||zonedummy.com^
||zonedummy.com^$popup
://173.233.137.
://173.233.139.
://192.243.59.
://192.243.61.
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
||deviuser.com^
@@ -8621,9 +8623,9 @@ zombooru.com##a[href="http://www.hard55.com"]
||winrar-desktop.com^
||winrar-desktop.com^$popup
://46.161.27.
://78.128.112.
://179.60.146.
! https://github.com/AdguardTeam/AdguardFilters/issues/121544
||trafredirtds.com^
@@ -9258,13 +9260,13 @@ zombooru.com##a[href="http://www.hard55.com"]
||zuginmw.art^$popup
://178.253.14.
://178.253.15.
://178.253.46.
://178.253.47.
://178.253.54.
||85.17.31.152^
||85.17.31.152^$popup
@@ -9299,7 +9301,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||165.227.168.212^
! https://www.reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/
://162.241.115.
! https://dinside.dagbladet.no/mobil/ikke-la-deg-friste/76730599
||k-yw.com^
@@ -16270,8 +16272,8 @@ zombooru.com##a[href="http://www.hard55.com"]
||zapatosaldochile.org^
||zapatosaldochile.org^$popup
://104.160.10.
://165.231.154.
! https://github.com/DandelionSprout/adfilt/issues/748
||adidas--*
@@ -17773,14 +17775,14 @@ zombooru.com##a[href="http://www.hard55.com"]
||zapatillasmcqueen.com^
||zapatillasmcqueen.com^$popup
://165.231.10.
://165.231.152.
://196.196.52.
://196.196.155.
://196.240.121.
://196.242.179.
://196.245.52.
://196.245.56.
! https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
://rufus.download.$popup
@@ -19828,7 +19830,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||zoozistu.net^
||zoozistu.net^$popup
://139.45.197.
! https://github.com/AdguardTeam/AdguardFilters/issues/143281
||academic-information.com^
@@ -21031,7 +21033,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||fintechbest.online^$popup
&trafficsource=Kadam&
://5.61.60.
! https://github.com/AdguardTeam/AdguardFilters/issues/154701
||1000-dollar.cash^
@@ -21693,7 +21695,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||rumadel.com^
||rumadel.com^$popup
://103.224.182.
! https://github.com/AdguardTeam/AdguardFilters/issues/156487
||apigroup.xyz^
@@ -23294,7 +23296,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||[2a02:b48:207:1::8]^
||[2a02:b48:207:1::8]^$popup
://||192.243.58.
! https://github.com/AdguardTeam/AdguardFilters/issues/157308
||abdoser.co.in^
@@ -33972,6 +33974,22 @@ zombooru.com##a[href="http://www.hard55.com"]
://flow-clck.$popup
://apps-trk.
://apps-trk.$popup
! https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7872103
||betzykrisesenter.no^
||citra2010oslo.no^
||digiter.no^
||easydisplay.no^
||kjaerra.no^
||kontrast1.no^
||norskmatkultur.no^
||norskoffroadteknikk.no^
||nyematoghelse.no^
||securmarksykkel.no^
||thecoolgirl.no^
||topshineauto.no^
||vossblues.no^
||yttersiden.no^
://162.214.80.
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -37937,20 +37955,20 @@ toorgle.net##.join
||95.181.172.204^
||95.181.172.204^$popup
://194.226.139.
! AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking)
://5.8.67.
://5.101.45.
://5.188.178.
://5.188.200.
://5.188.203.
://5.189.217.
://5.189.252.
://46.148.113.
://46.148.114.
://46.161.31.
://91.243.41.
://91.243.42.
@@ -44112,9 +44130,9 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||zygomasnugify.uno^
||zygomasnugify.uno^$popup
://172.255.6.
://188.42.84.
://203.195.121.
! Fake Gymshark webshops
||gantdanmark.com^
@@ -1,6 +1,6 @@
[AdGuard]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
! Version: 10December2023v1
! Version: 16December2023v2
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -81,6 +81,8 @@ www.google.*##.g:has(a[href*="/redirect/" i]):has(a[href*=".tk/"], a[href*=".ml/
www.google.*##.g:has(a[href*="&loc=/" i]):has(a[href*=".tk/"], a[href*=".ml/"])
www.google.*##.g:has(a[href*="&orig_url=/" i]):has(a[href*=".tk/"], a[href*=".ml/"])
www.google.*##.g:has(a[href*="=//"]):has(a[href*=".tk/"], a[href*=".ml/"])
www.google.*##.g:has(a[href*=redirect][href*=".%D1%80%D1%84"])
www.google.*##.g:has(a[href*="/go/"][href*=".%D1%80%D1%84"])
!#endif
!#if env_mobile
@@ -1315,11 +1317,11 @@ zombooru.com##a[href="http://www.hard55.com"]
://popupblockergold.$all
://adblock-pro-download.$all
!#if !ext_ublock
142.91.159.*$network
://*$network
! https://github.com/DandelionSprout/adfilt/issues/942
/^172\.255\.6\.([0-9]{1,2}|[12][0-689][0-9]|17[0-689])$/$network
23.109.150.*$network
23.109.248.*$network
://*$network
://*$network
!#endif
||abbotinexperienced.com^$all
||abedwithdrawalautograph.com^$all
@@ -3695,10 +3697,10 @@ zombooru.com##a[href="http://www.hard55.com"]
||zillionable.com^$all
||zonedummy.com^$all
!#if !ext_ublock
173.233.137.*$network
173.233.139.*$network
192.243.59.*$network
192.243.61.*$network
://*$network
://*$network
://*$network
://*$network
!#endif
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
||deviuser.com^$document
@@ -4770,9 +4772,9 @@ zombooru.com##a[href="http://www.hard55.com"]
||top-captcharesolver.$all
||winrar-desktop.com^$all
!#if !ext_ublock
46.161.27.*$network
78.128.112.*$network
179.60.146.*$network
://*$network
://*$network
://*$network
!#endif
! https://github.com/AdguardTeam/AdguardFilters/issues/121544
||trafredirtds.com^$all
@@ -5097,13 +5099,13 @@ zombooru.com##a[href="http://www.hard55.com"]
||zuginmw.art^$all
!#if !ext_ublock
/^178\.253\.[0-7]\.\d{1,3}$/$network
178.253.14.*$network
178.253.15.*$network
://*$network
://*$network
/^178\.253\.2[0145]\\d{1,3}$/$network
/^178\.253\.3[04-7]\.\d{1,3}$/$network
178.253.46.*$network
178.253.47.*$network
178.253.54.*$network
://*$network
://*$network
://*$network
!#endif
85.17.31.152$network
95.211.26.202$network
@@ -5124,7 +5126,7 @@ zombooru.com##a[href="http://www.hard55.com"]
165.227.168.212$network
!#if !ext_ublock
! https://www.reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/
162.241.115.*$network
://*$network
!#endif
! https://dinside.dagbladet.no/mobil/ikke-la-deg-friste/76730599
||k-yw.com^$all
@@ -8652,8 +8654,8 @@ zombooru.com##a[href="http://www.hard55.com"]
||zapatillasvejacl.com^$all
||zapatosaldochile.org^$all
!#if !ext_ublock
104.160.10.*$network
165.231.154.*$network
://*$network
://*$network
!#endif
! https://github.com/DandelionSprout/adfilt/issues/748
||adidas--*$all
@@ -9407,14 +9409,14 @@ zombooru.com##a[href="http://www.hard55.com"]
||martensbratislava.sk^$all
||zapatillasmcqueen.com^$all
!#if !ext_ublock
165.231.10.*$network
165.231.152.*$network
196.196.52.*$network
196.196.155.*$network
196.240.121.*$network
196.242.179.*$network
196.245.52.*$network
196.245.56.*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
!#endif
! https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
://rufus.download.$document,popup
@@ -10448,7 +10450,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||zewoagoo.com^$all
||zoozistu.net^$all
!#if !ext_ublock
139.45.197.*$network
://*$network
!#endif
! https://github.com/AdguardTeam/AdguardFilters/issues/143281
||academic-information.com^$all
@@ -11061,7 +11063,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||fintechbest.online^$all
&trafficsource=Kadam&$document
!#if !ext_ublock
5.61.60.*$network
://*$network
!#endif
! https://github.com/AdguardTeam/AdguardFilters/issues/154701
||1000-dollar.cash^$all
@@ -11396,7 +11398,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||truanet.com^$all
||rumadel.com^$all
!#if !ext_ublock
103.224.182.*$network
://*$network
!#endif
! https://github.com/AdguardTeam/AdguardFilters/issues/156487
||apigroup.xyz^$all
@@ -12200,7 +12202,7 @@ zombooru.com##a[href="http://www.hard55.com"]
[2a02:b48:207:1::7]$network
[2a02:b48:207:1::8]$network
!#if !ext_ublock
||192.243.58.*$network
://||192.243.58.$document
!#endif
! https://github.com/AdguardTeam/AdguardFilters/issues/157308
||abdoser.co.in^$all
@@ -17547,6 +17549,22 @@ zombooru.com##a[href="http://www.hard55.com"]
://ktraks.$all
://flow-clck.$all
://apps-trk.$all
! https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7872103
||betzykrisesenter.no^$document
||citra2010oslo.no^$document
||digiter.no^$document
||easydisplay.no^$document
||kjaerra.no^$document
||kontrast1.no^$document
||norskmatkultur.no^$document
||norskoffroadteknikk.no^$document
||nyematoghelse.no^$document
||securmarksykkel.no^$document
||thecoolgirl.no^$document
||topshineauto.no^$document
||vossblues.no^$document
||yttersiden.no^$document
://*$network
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -19551,20 +19569,20 @@ toorgle.net##.join
95.181.157.36$network
95.181.172.204$network
!#if !ext_ublock
194.226.139.*$network
://*$network
! AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking)
5.8.67.*$network
5.101.45.*$network
5.188.178.*$network
5.188.200.*$network
5.188.203.*$network
5.189.217.*$network
5.189.252.*$network
46.148.113.*$network
46.148.114.*$network
46.161.31.*$network
91.243.41.*$network
91.243.42.*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
://*$network
/^5\.8\.4[4-7]\.\d{1,3}$/$network
/^5\.101\.4[67]\.\d{1,3}$/$network
/^5\.188\.5[01]\.\d{1,3}$/$network
@@ -22703,9 +22721,9 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||zunianmedici.website^$all
||zygomasnugify.uno^$all
!#if !ext_ublock
172.255.6.*$network
188.42.84.*$network
203.195.121.*$network
://*$network
://*$network
://*$network
!#endif
! Fake Gymshark webshops
||gantdanmark.com^$all
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows' DNS filtering, and Pi-Hole FTL ≥5.22)
! Version: 10December2023v1
! Version: 16December2023v2
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1083,11 +1083,11 @@
://popupblockergold.
://adblock-pro-download.
/^142\.91\.159\.[0-9]{1,3}$/
://142.91.159.
! https://github.com/DandelionSprout/adfilt/issues/942
/^172\.255\.6\.([0-9]{1,2}|[12][0-689][0-9]|17[0-689])$/
/^23\.109\.150\.[0-9]{1,3}$/
/^23\.109\.248\.[0-9]{1,3}$/
://23.109.150.
://23.109.248.
||abbotinexperienced.com^
||abedwithdrawalautograph.com^
@@ -3463,10 +3463,10 @@
||zillionable.com^
||zonedummy.com^
/^173\.233\.137\.[0-9]{1,3}$/
/^173\.233\.139\.[0-9]{1,3}$/
/^192\.243\.59\.[0-9]{1,3}$/
/^192\.243\.61\.[0-9]{1,3}$/
://173.233.137.
://173.233.139.
://192.243.59.
://192.243.61.
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
||deviuser.com^
@@ -4538,9 +4538,9 @@
||top-captcharesolver.
||winrar-desktop.com^
/^46\.161\.27\.[0-9]{1,3}$/
/^78\.128\.112\.[0-9]{1,3}$/
/^179\.60\.146\.[0-9]{1,3}$/
://46.161.27.
://78.128.112.
://179.60.146.
! https://github.com/AdguardTeam/AdguardFilters/issues/121544
||trafredirtds.com^
@@ -4865,13 +4865,13 @@
||zuginmw.art^
/^178\.253\.[0-7]\.\d{1,3}$/
/^178\.253\.14\.[0-9]{1,3}$/
/^178\.253\.15\.[0-9]{1,3}$/
://178.253.14.
://178.253.15.
/^178\.253\.2[0145]\\d{1,3}$/
/^178\.253\.3[04-7]\.\d{1,3}$/
/^178\.253\.46\.[0-9]{1,3}$/
/^178\.253\.47\.[0-9]{1,3}$/
/^178\.253\.54\.[0-9]{1,3}$/
://178.253.46.
://178.253.47.
://178.253.54.
85.17.31.152
95.211.26.202
@@ -4892,7 +4892,7 @@
165.227.168.212
! https://www.reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/
/^162\.241\.115\.[0-9]{1,3}$/
://162.241.115.
! https://dinside.dagbladet.no/mobil/ikke-la-deg-friste/76730599
||k-yw.com^
@@ -8420,8 +8420,8 @@
||zapatillasvejacl.com^
||zapatosaldochile.org^
/^104\.160\.10\.[0-9]{1,3}$/
/^165\.231\.154\.[0-9]{1,3}$/
://104.160.10.
://165.231.154.
! https://github.com/DandelionSprout/adfilt/issues/748
||adidas--*
@@ -9175,14 +9175,14 @@
||martensbratislava.sk^
||zapatillasmcqueen.com^
/^165\.231\.10\.[0-9]{1,3}$/
/^165\.231\.152\.[0-9]{1,3}$/
/^196\.196\.52\.[0-9]{1,3}$/
/^196\.196\.155\.[0-9]{1,3}$/
/^196\.240\.121\.[0-9]{1,3}$/
/^196\.242\.179\.[0-9]{1,3}$/
/^196\.245\.52\.[0-9]{1,3}$/
/^196\.245\.56\.[0-9]{1,3}$/
://165.231.10.
://165.231.152.
://196.196.52.
://196.196.155.
://196.240.121.
://196.242.179.
://196.245.52.
://196.245.56.
! https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
://rufus.download.popup
@@ -10216,7 +10216,7 @@
||zewoagoo.com^
||zoozistu.net^
/^139\.45\.197\.[0-9]{1,3}$/
://139.45.197.
! https://github.com/AdguardTeam/AdguardFilters/issues/143281
||academic-information.com^
@@ -10829,7 +10829,7 @@
||fintechbest.online^
/^5\.61\.60\.[0-9]{1,3}$/
://5.61.60.
! https://github.com/AdguardTeam/AdguardFilters/issues/154701
||1000-dollar.cash^
@@ -11164,7 +11164,7 @@
||truanet.com^
||rumadel.com^
/^103\.224\.182\.[0-9]{1,3}$/
://103.224.182.
! https://github.com/AdguardTeam/AdguardFilters/issues/156487
||apigroup.xyz^
@@ -11968,7 +11968,7 @@
2a02:b48:207:1::7
2a02:b48:207:1::8
||192.243.58.*$network
://||192.243.58.
! https://github.com/AdguardTeam/AdguardFilters/issues/157308
||abdoser.co.in^
@@ -17315,6 +17315,22 @@
://ktraks.
://flow-clck.
://apps-trk.
! https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7872103
||betzykrisesenter.no^
||citra2010oslo.no^
||digiter.no^
||easydisplay.no^
||kjaerra.no^
||kontrast1.no^
||norskmatkultur.no^
||norskoffroadteknikk.no^
||nyematoghelse.no^
||securmarksykkel.no^
||thecoolgirl.no^
||topshineauto.no^
||vossblues.no^
||yttersiden.no^
://162.214.80.
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -19317,20 +19333,20 @@
95.181.157.36
95.181.172.204
/^194\.226\.139\.[0-9]{1,3}$/
://194.226.139.
! AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking)
/^5\.8\.67\.[0-9]{1,3}$/
/^5\.101\.45\.[0-9]{1,3}$/
/^5\.188\.178\.[0-9]{1,3}$/
/^5\.188\.200\.[0-9]{1,3}$/
/^5\.188\.203\.[0-9]{1,3}$/
/^5\.189\.217\.[0-9]{1,3}$/
/^5\.189\.252\.[0-9]{1,3}$/
/^46\.148\.113\.[0-9]{1,3}$/
/^46\.148\.114\.[0-9]{1,3}$/
/^46\.161\.31\.[0-9]{1,3}$/
/^91\.243\.41\.[0-9]{1,3}$/
/^91\.243\.42\.[0-9]{1,3}$/
://5.8.67.
://5.101.45.
://5.188.178.
://5.188.200.
://5.188.203.
://5.189.217.
://5.189.252.
://46.148.113.
://46.148.114.
://46.161.31.
://91.243.41.
://91.243.42.
/^5\.8\.4[4-7]\.\d{1,3}$/
/^5\.101\.4[67]\.\d{1,3}$/
/^5\.188\.5[01]\.\d{1,3}$/
@@ -22466,9 +22482,9 @@
||zunianmedici.website^
||zygomasnugify.uno^
/^172\.255\.6\.[0-9]{1,3}$/
/^188\.42\.84\.[0-9]{1,3}$/
/^203\.195\.121\.[0-9]{1,3}$/
://172.255.6.
://188.42.84.
://203.195.121.
! Fake Gymshark webshops
||gantdanmark.com^
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 10December2023v1
# Version: 16December2023v2
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -17010,6 +17010,21 @@ i3s5qfuvs.cfd
betzykrisesenter.no
citra2010oslo.no
digiter.no
easydisplay.no
kjaerra.no
kontrast1.no
norskmatkultur.no
norskoffroadteknikk.no
nyematoghelse.no
securmarksykkel.no
thecoolgirl.no
topshineauto.no
vossblues.no
yttersiden.no
# ——— Standard malware that I stumbled upon on my own ———
@@ -17002,6 +17002,21 @@
127.0.0.1 betzykrisesenter.no
127.0.0.1 citra2010oslo.no
127.0.0.1 digiter.no
127.0.0.1 easydisplay.no
127.0.0.1 kjaerra.no
127.0.0.1 kontrast1.no
127.0.0.1 norskmatkultur.no
127.0.0.1 norskoffroadteknikk.no
127.0.0.1 nyematoghelse.no
127.0.0.1 securmarksykkel.no
127.0.0.1 thecoolgirl.no
127.0.0.1 topshineauto.no
127.0.0.1 vossblues.no
127.0.0.1 yttersiden.no
# ——— Standard malware that I stumbled upon on my own ———
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 10December2023v1-Deprecated
# Version: 16December2023v2-Deprecated
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -1062,10 +1062,7 @@
.yulanoltunna.store
.zimmisballet.tech
#
142.91.159.*
/172\.255\.6\.([0-9]{1,2}|[12][0-689][0-9]|17[0-689])
23.109.150.*
23.109.248.*
#
.abbotinexperienced.com
.abedwithdrawalautograph.com
@@ -3441,10 +3438,6 @@
.zillionable.com
.zonedummy.com
#
173.233.137.*
173.233.139.*
192.243.59.*
192.243.61.*
#
.deviuser.com
/scan-update-and-protect-your-browser.html
@@ -4312,9 +4305,6 @@
.top-captcharesolver.
.winrar-desktop.com
#
46.161.27.*
78.128.112.*
179.60.146.*
#
.trafredirtds.com
.com/landers/iphone*_spin
@@ -4631,13 +4621,8 @@
.zuginmw.art
#
/178\.253\.[0-7]\.\d{1,3}
178.253.14.*
178.253.15.*
/178\.253\.2[0145]\\d{1,3}
/178\.253\.3[04-7]\.\d{1,3}
178.253.46.*
178.253.47.*
178.253.54.*
#
.85.17.31.152
.95.211.26.202
@@ -4656,7 +4641,6 @@
.158.247.212.220
.165.227.168.212
#
162.241.115.*
#
.k-yw.com
.fearconic.com
@@ -8164,8 +8148,6 @@
.zapatillasvejacl.com
.zapatosaldochile.org
#
104.160.10.*
165.231.154.*
#
.adidas--*
.adidas-outlet*
@@ -8918,14 +8900,6 @@
.martensbratislava.sk
.zapatillasmcqueen.com
#
165.231.10.*
165.231.152.*
196.196.52.*
196.196.155.*
196.240.121.*
196.242.179.*
196.245.52.*
196.245.56.*
#
.blendepr.org
.blendevr.org
@@ -9945,7 +9919,6 @@
.zewoagoo.com
.zoozistu.net
#
139.45.197.*
#
.academic-information.com
.academicvast.com
@@ -10547,7 +10520,6 @@
.fintechbest.online
#
5.61.60.*
#
.1000-dollar.cash
.1000-eur.cash
@@ -10879,7 +10851,6 @@
.truanet.com
.rumadel.com
#
103.224.182.*
#
.apigroup.xyz
.apihouse.xyz
@@ -11680,7 +11651,6 @@
.[2a02:b48:207:1::7]
.[2a02:b48:207:1::8]
#
.192.243.58.*
#
.abdoser.co.in
.acelim.co.in
@@ -17010,6 +16980,20 @@
.usqtvc.com
.usutnr.top
.204.44.92.187
.betzykrisesenter.no
.citra2010oslo.no
.digiter.no
.easydisplay.no
.kjaerra.no
.kontrast1.no
.norskmatkultur.no
.norskoffroadteknikk.no
.nyematoghelse.no
.securmarksykkel.no
.thecoolgirl.no
.topshineauto.no
.vossblues.no
.yttersiden.no
{+block}
# ——— Standard malware that I stumbled upon on my own ———
@@ -19006,19 +18990,6 @@
.95.181.157.36
.95.181.172.204
#
194.226.139.*
5.8.67.*
5.101.45.*
5.188.178.*
5.188.200.*
5.188.203.*
5.189.217.*
5.189.252.*
46.148.113.*
46.148.114.*
46.161.31.*
91.243.41.*
91.243.42.*
/5\.8\.4[4-7]\.\d{1,3}
/5\.101\.4[67]\.\d{1,3}
/5\.188\.5[01]\.\d{1,3}
@@ -22136,9 +22107,6 @@
.zunianmedici.website
.zygomasnugify.uno
#
172.255.6.*
188.42.84.*
203.195.121.*
#
# Fake Gymshark webshops
.gantdanmark.com
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 10December2023v1-Deprecated
# Version: 16December2023v2-Deprecated
: expires = 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -1184,12 +1184,9 @@ msFilterList
-d yulanoltunna.store
-d zimmisballet.tech
# https://github.com/DandelionSprout/adfilt/issues/942
-d abbotinexperienced.com
-d abedwithdrawalautograph.com
-d abnegateexcavator.com
@@ -3565,10 +3562,6 @@ msFilterList
-d zonedummy.com
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
-d deviuser.com
# https://github.com/AdguardTeam/AdguardFilters/issues/61838
@@ -4637,9 +4630,6 @@ msFilterList
-d winrar-desktop.com
# https://github.com/AdguardTeam/AdguardFilters/issues/121544
-d trafredirtds.com
-d com landers iphone*_spin
@@ -4965,11 +4955,6 @@ msFilterList
-d 85.17.31.152
-d 95.211.26.202
# https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583
@@ -4990,7 +4975,6 @@ msFilterList
# https://www.reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/
# https://dinside.dagbladet.no/mobil/ikke-la-deg-friste/76730599
-d k-yw.com
# https://github.com/AdguardTeam/AdguardFilters/issues/125285
@@ -8518,8 +8502,6 @@ msFilterList
-d zapatosaldochile.org
# https://github.com/DandelionSprout/adfilt/issues/748
-d adidas--*
-d adidas-outlet*
@@ -9273,14 +9255,6 @@ msFilterList
-d zapatillasmcqueen.com
# https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
-d blendepr.org
-d blendevr.org
@@ -10307,7 +10281,6 @@ msFilterList
-d zoozistu.net
# https://github.com/AdguardTeam/AdguardFilters/issues/143281
-d academic-information.com
-d academicvast.com
@@ -10920,7 +10893,6 @@ msFilterList
# https://github.com/AdguardTeam/AdguardFilters/issues/154701
-d 1000-dollar.cash
-d 1000-eur.cash
@@ -11255,7 +11227,6 @@ msFilterList
-d rumadel.com
# https://github.com/AdguardTeam/AdguardFilters/issues/156487
-d apigroup.xyz
-d apihouse.xyz
@@ -12058,7 +12029,6 @@ msFilterList
-d [2a02:b48:207:1::7]
-d [2a02:b48:207:1::8]
-d 192.243.58.*
# https://github.com/AdguardTeam/AdguardFilters/issues/157308
-d abdoser.co.in
@@ -17414,6 +17384,21 @@ msFilterList
-d usqtvc.com
-d usutnr.top
-d 204.44.92.187
# https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7872103
-d betzykrisesenter.no
-d citra2010oslo.no
-d digiter.no
-d easydisplay.no
-d kjaerra.no
-d kontrast1.no
-d norskmatkultur.no
-d norskoffroadteknikk.no
-d nyematoghelse.no
-d securmarksykkel.no
-d thecoolgirl.no
-d topshineauto.no
-d vossblues.no
-d yttersiden.no
# ——— Standard malware that I stumbled upon on my own ———
# http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -19415,7 +19400,6 @@ msFilterList
-d 95.181.157.36
-d 95.181.172.204
# AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530;/currently/specific to tools that support CIDR blocking)
@@ -19425,18 +19409,6 @@ msFilterList
# https://github.com/AdguardTeam/AdguardFilters/issues/120349
-d dispositionadverb.com
@@ -22563,9 +22535,6 @@ msFilterList
-d zygomasnugify.uno
# Fake Gymshark webshops
-d gantdanmark.com
-d gantnorge.com