starred/adfilt
1
0
Fork 0
mirror of https://github.com/DandelionSprout/adfilt.git synced 2026-10-06 09:14:46 +01:00
Code Issues Packages Projects Releases 4 Wiki Activity

Making the list come across as less intimidating(?)

Browse Source
This commit is contained in:
Imre Eilertsen
2025-01-18 06:05:31 +01:00
committed by GitHub
parent c59b197fc3
commit 64bec96715
1 changed files with 3 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dandelion Sprout's Anti-Malware List.txt
+3 -28
View File
@@ -1,24 +1,12 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List
! Version: 16January2025v1
! Version: 18January2025v1
! Expires: 1 day
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
! Homepage: https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#-english
! ——— Bad top-level domains ———
! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
! When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted.
! Tokelau (Put on break due to too many whitelistings being needed)
!!!||tk^$doc,domain=~google.tk|~coolcmd.tk|~budterence.tk|~transportnews.tk|~c0d3c.tk|~tokelau-info.tk|~loljp-wiki.tk|~ninetail.tk|~goshujin.tk|~graph.tk|~nolfrevival.tk|~bstweaker.tk|~nbd-media.tk|~gotofap.tk|~coppersurfer.tk|~fakaofo.tk
! Mali (Put on break due to too many and too frequent whitelistings being needed)
!!!||ml^$doc,domain=~google.ml|~melody.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~beatbump.ml|~prompt.ml|~biblioreads.ml
! Equatorial Guinea
!!!||gq^$doc,domain=~inege.gq|~tvgelive.gq|~siteproxy.gq|~blockly.gq
! Central African Republic
!!!||cf^$doc,domain=~google.cf|~rths.cf|~acap.cf|~shorter.cf
! Palau (Put on break due to too many whitelistings being needed)
!!!||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~gopass.pw|~vost.pw|~core.pw|~bittor.pw|~plutonium.pw|~nitter.pw|~kge.pw
! Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever.
||top^$doc,domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top
! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067)
@@ -28,20 +16,7 @@
@@://blog.*.top^$doc
! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
||loan^$doc
!!!||agency^$doc,domain=~battlefield.agency|~baam.agency|~robotzebra.agency|~uphotel.agency|~ws.agency (Can't remember the last time I saw it used in a redirection train.)
!!!||gdn^$doc,domain=~cst.gdn|~pss.gdn
||bid^$doc
!!!||ooo^$doc,domain=~toast.ooo
! (https://github.com/DandelionSprout/adfilt/issues/999)
!!!@@://oo*.ooo/$doc
! https://bgp•he•net/AS202492#_prefixes (17/07/2022)
!!!||monster^$doc,domain=~egybest.monster|~yts.monster|~cloudcdn.monster|~fedi.monster|~rollenspiel.monster|~tts.monster|~geometry.monster
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
!!!||sbs^$doc,domain=~ecopulse.sbs
! https://github.com/DandelionSprout/adfilt/issues/659
!!!||discount^$doc,domain=~real.discount
! https://github.com/AdguardTeam/AdguardFilters/issues/137635
!!!||cfd^$doc,domain=~frcoal.cfd|~freedium.cfd
! Experimental attempt to cover a few hardcore spam ASNs
.buzz/*/?*=*&*=*&*=*&*=*&*=$doc
.life/*/?*=*&*=*&*=*&*=*&*=$doc