Add files via upload

This commit is contained in:
Imre Kristoffer Eilertsen
2021-01-15 00:19:34 +01:00
committed by GitHub
parent 0fa1925b09
commit 69a0ed53d4
7 changed files with 137 additions and 13 deletions
@@ -1,6 +1,6 @@
[Adblock Plus 3.4]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
! Version: 25December2020v1-Beta
! Version: 14January2021v1-Beta
! Expires: 5 days
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -17,7 +17,7 @@
! Equatorial Guinea
||gq^$domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
! Central African Republic
||cf^$domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf
||cf^$domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf
! Palau
||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw
! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
@@ -304,8 +304,17 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
||54.152.245.247^
||35.172.40.232^
||3.90.125.85^
! Various ex-affiliate links at www.zombooru.com
||track.vcdc.com^
||track.tkbo.com^
zombooru.com##a[href="http://www.boorufurry.com/"]
zombooru.com##a[href="http://www.analbooru.com/"]
zombooru.com##a[href="http://www.hard55.com"]
! ——— Found in random witness reports online ———
! Adblock Plus list maintainer weekly reports
||pinoy-offers.com^
||googleboost.xyz^
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
||deviuser.com^
! https://github.com/AdguardTeam/AdguardFilters/issues/61838
@@ -338,12 +347,20 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
||starpowders.github.io^
! https://github.com/AdguardTeam/AdguardFilters/issues/69611
/(://|^)[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/|$)/
! https://github.com/AdguardTeam/AdguardFilters/issues/71721
||moststraightmoment-10.live^
! https://github.com/AdguardTeam/AdguardFilters/issues/71369
||ordinaryluckrewardextra.club^
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
||downloadprovider.me^
##a[href*=".downloadprovider.me/"]
toorgle.net##.join
! https://www.riverbender.com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877.cfm
||cash93.com^
! Various ex-affiliate links at www.zombooru.com
||allowandgo.com^
! ——— Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
@@ -439,4 +456,12 @@ toorgle.net##.join
! https://github.com/DandelionSprout/adfilt/issues/71
||imgvieweriri.com^
! ——— Spam in comment sections across the internet about "working" from "home" ———
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(↓↓↓↓COPY)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/job online from home/i)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/online work from home/i)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/working from home by doing/i)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/work at home opportunity/i)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne)
! Placeholder line for alternate list versions
@@ -1,6 +1,6 @@
[AdGuard ≥6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
! Version: 25December2020v1-Beta
! Version: 14January2021v1-Beta
! Expires: 5 days
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -17,7 +17,7 @@
! Equatorial Guinea
||gq^$doc,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
! Central African Republic
||cf^$doc,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf
||cf^$doc,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf
! Palau
||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw
! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
@@ -32,7 +32,7 @@ google.*##.rc:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budteren
google.*##.rc:has(a[href*=".ga/"]:not([href*="google.ga"]):not([href*="filtri-dns.ga"]):not([href*="anpigabon.ga"]):not([href*="dgdi.ga"]):not([href*="voitures.ga"]):not([href*="economie-gabon.ga"]))
google.*##.rc:has(a[href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="dcod.ml"]):not([href*="info-matin.ml"]):not([href*="amap.ml"]))
google.*##.rc:has(a[href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*="tvgelive.gq"]):not([href*="comprarcarros.gq"]))
google.*##.rc:has(a[href*=".cf/"]:not([href*="google.cf"]):not([href*="rths.cf"]):not([href*="voitures.cf"]):not([href*="assembleenationale-rca.cf"]):not([href*="cps-rca.cf"]):not([href*="acap.cf"]))
google.*##.rc:has(a[href*=".cf/"]:not([href*="google.cf"]):not([href*="rths.cf"]):not([href*="voitures.cf"]):not([href*="assembleenationale-rca.cf"]):not([href*="cps-rca.cf"]):not([href*="acap.cf"]):not([href*="miraculousladybug.cf"]))
google.*##.rc:has(a[href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]):not([href*="dpc.pw"]))
google.*##.rc:has(a[href*=".loan/"])
google.*##.rc:has(a[href*=".agency/"])
@@ -51,7 +51,7 @@ google.*#?#*:has(> * > a[oncontextmenu][href*=".tk/"]:not([href*=coolcmd]):not([
google.*#?#*:has(> * > a[oncontextmenu][href*=".ga/"]:not([href*="google.ga"]):not([href*=filtri-dns]):not([href*=anpigabon]):not([href*="dgdi.ga"]):not([href*=voitures]):not([href*="economie-gabon.ga"]))
google.*#?#*:has(> * > a[oncontextmenu][href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="dcod.ml"]):not([href*="info-matin.ml"]):not([href*="amap.ml"]))
google.*#?#*:has(> * > a[oncontextmenu][href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*=tvgelive]):not([href*=comprarcarros]))
google.*#?#*:has(> * > a[oncontextmenu][href*=".cf/"]:not([href*="google.cf"]):not([href*="rths.cf"]):not([href*=voitures]):not([href*=assembleenationale-rca]):not([href*=cps-rca]):not([href*="acap.cf"]))
google.*#?#*:has(> * > a[oncontextmenu][href*=".cf/"]:not([href*="google.cf"]):not([href*="rths.cf"]):not([href*=voitures]):not([href*=assembleenationale-rca]):not([href*=cps-rca]):not([href*="acap.cf"]):not([href*="miraculousladybug.cf"]))
google.*#?#*:has(> * > a[oncontextmenu][href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]):not([href*="dpc.pw"]))
google.*#?#*:has(> * > a[oncontextmenu][href*=".loan/"])
google.*#?#*:has(> * > a[oncontextmenu][href*=".agency/"])
@@ -331,8 +331,17 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
54.152.245.247$network
35.172.40.232$network
3.90.125.85$network
! Various ex-affiliate links at www.zombooru.com
||track.vcdc.com^$doc
||track.tkbo.com^$doc
zombooru.com##a[href="http://www.boorufurry.com/"]
zombooru.com##a[href="http://www.analbooru.com/"]
zombooru.com##a[href="http://www.hard55.com"]
! ——— Found in random witness reports online ———
! Adblock Plus list maintainer weekly reports
||pinoy-offers.com^
||googleboost.xyz^$doc
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
||deviuser.com^$doc
! https://github.com/AdguardTeam/AdguardFilters/issues/61838
@@ -365,12 +374,20 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
||starpowders.github.io^
! https://github.com/AdguardTeam/AdguardFilters/issues/69611
/(://|^)[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/|$)/
! https://github.com/AdguardTeam/AdguardFilters/issues/71721
||moststraightmoment-10.live^$empty,important
! https://github.com/AdguardTeam/AdguardFilters/issues/71369
||ordinaryluckrewardextra.club^$empty,important
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
||downloadprovider.me^$empty,important
##a[href*=".downloadprovider.me/"]
toorgle.net##.join
! https://www.riverbender.com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877.cfm
||cash93.com^$empty,important
! Various ex-affiliate links at www.zombooru.com
||allowandgo.com^$empty,important
! ——— Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
@@ -468,4 +485,12 @@ toorgle.net##.join
! https://github.com/DandelionSprout/adfilt/issues/71
||imgvieweriri.com^$empty,important
! ——— Spam in comment sections across the internet about "working" from "home" ———
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(↓↓↓↓COPY)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/job online from home/i)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/online work from home/i)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/working from home by doing/i)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(/work at home opportunity/i)
facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne)
! Placeholder line for alternate list versions
@@ -1,6 +1,6 @@
[Adblock Plus 3.4]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home)
! Version: 25December2020v1-Beta
! Version: 14January2021v1-Beta
! Expires: 5 days
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -54,7 +54,8 @@
@@||voitures.cf^
@@||assembleenationale-rca.cf^
@@||cps-rca.cf^
@@||acap.cf^
@@||acap.cf^
@@||miraculousladybug.cf^
! Palau
||pw^
@@||libgen.pw^
@@ -270,8 +271,14 @@
54.152.245.247
35.172.40.232
3.90.125.85
! Various ex-affiliate links at www.zombooru.com
||track.vcdc.com^
||track.tkbo.com^
! ——— Found in random witness reports online ———
! Adblock Plus list maintainer weekly reports
||pinoy-offers.com^
||googleboost.xyz^
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
||deviuser.com^
! https://github.com/AdguardTeam/AdguardFilters/issues/61838
@@ -304,10 +311,18 @@
||starpowders.github.io^
! https://github.com/AdguardTeam/AdguardFilters/issues/69611
/(://|^)[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/|$)/
! https://github.com/AdguardTeam/AdguardFilters/issues/71721
||moststraightmoment-10.live^
! https://github.com/AdguardTeam/AdguardFilters/issues/71369
||ordinaryluckrewardextra.club^
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
||downloadprovider.me^
! https://www.riverbender.com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877.cfm
||cash93.com^
! Various ex-affiliate links at www.zombooru.com
||allowandgo.com^
! ——— Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
@@ -421,4 +436,6 @@
! https://github.com/DandelionSprout/adfilt/issues/71
||imgvieweriri.com^
! ——— Spam in comment sections across the internet about "working" from "home" ———
! Placeholder line for alternate list versions
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 25December2020v1-Beta
# Version: 14January2021v1-Beta
# Expires: 5 days
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
@@ -197,8 +197,14 @@ ttnrd.com
54.152.245.247
35.172.40.232
3.90.125.85
# Various ex-affiliate links at www.zombooru.com
track.vcdc.com
track.tkbo.com
# ——— Found in random witness reports online ———
# Adblock Plus list maintainer weekly reports
pinoy-offers.com
googleboost.xyz
deviuser.com
@@ -217,9 +223,14 @@ moderncomputer.net
version.gratis
starpowders.github.io
moststraightmoment-10.live
ordinaryluckrewardextra.club
# ——— Standard malware that I stumbled upon on my own ———
downloadprovider.me
cash93.com
# Various ex-affiliate links at www.zombooru.com
allowandgo.com
# ——— Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
@@ -263,4 +274,6 @@ rgithub.com
# ——— User-submitted entries ———
imgvieweriri.com
# ——— Spam in comment sections across the internet about "working" from "home" ———
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
# Version: 25December2020v1-Alpha
# Version: 14January2021v1-Alpha
# Expires: 5 days
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
@@ -197,8 +197,14 @@
127.0.0.1 54.152.245.247
127.0.0.1 35.172.40.232
127.0.0.1 3.90.125.85
# Various ex-affiliate links at www.zombooru.com
127.0.0.1 track.vcdc.com
127.0.0.1 track.tkbo.com
# ——— Found in random witness reports online ———
# Adblock Plus list maintainer weekly reports
127.0.0.1 pinoy-offers.com
127.0.0.1 googleboost.xyz
127.0.0.1 deviuser.com
@@ -217,9 +223,14 @@
127.0.0.1 version.gratis
127.0.0.1 starpowders.github.io
127.0.0.1 moststraightmoment-10.live
127.0.0.1 ordinaryluckrewardextra.club
# ——— Standard malware that I stumbled upon on my own ———
127.0.0.1 downloadprovider.me
127.0.0.1 cash93.com
# Various ex-affiliate links at www.zombooru.com
127.0.0.1 allowandgo.com
# ——— Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
@@ -263,4 +274,6 @@
# ——— User-submitted entries ———
127.0.0.1 imgvieweriri.com
# ——— Spam in comment sections across the internet about "working" from "home" ———
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 25December2020v1-Alpha
# Version: 14January2021v1-Alpha
# Expires: 5 days
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
@@ -219,9 +219,15 @@
.54.152.245.247
.35.172.40.232
.3.90.125.85
# Various ex-affiliate links at www.zombooru.com
.track.vcdc.com
.track.tkbo.com
{+block}
# ——— Found in random witness reports online ———
# Adblock Plus list maintainer weekly reports
.pinoy-offers.com
.googleboost.xyz
.deviuser.com
/scan-update-and-protect-your-browser.html
.watch-video.net
@@ -239,10 +245,15 @@
.moderncomputer.net
.version.gratis
.starpowders.github.io
.moststraightmoment-10.live
.ordinaryluckrewardextra.club
{+block}
# ——— Standard malware that I stumbled upon on my own ———
.downloadprovider.me
.cash93.com
# Various ex-affiliate links at www.zombooru.com
.allowandgo.com
{+block}
# ——— Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
@@ -294,6 +305,9 @@
# ——— User-submitted entries ———
.imgvieweriri.com
{+block}
# ——— Spam in comment sections across the internet about "working" from "home" ———
{-block}
# Manually updated Privoxy version of the whitelisted domains from the other versions of this list.
.coolcmd.tk
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 25December2020v1-Beta
# Version: 14January2021v1-Beta
: expires = 5
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -49,7 +49,8 @@ msFilterList
+d rths.cf
+d voitures.cf
+d assembleenationale-rca.cf
+d cps-rca.cf~acap.cf
+d cps-rca.cf
+d acap.cf~miraculousladybug.cf
# Palau
-d pw
+d libgen.pw
@@ -264,8 +265,14 @@ msFilterList
-d 54.152.245.247
-d 35.172.40.232
-d 3.90.125.85
# Various ex-affiliate links at www.zombooru.com
-d track.vcdc.com
-d track.tkbo.com
# ——— Found in random witness reports online ———
# Adblock Plus list maintainer weekly reports
-d pinoy-offers.com
-d googleboost.xyz
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
-d deviuser.com
# https://github.com/AdguardTeam/AdguardFilters/issues/61838
@@ -298,10 +305,18 @@ msFilterList
-d starpowders.github.io
# https://github.com/AdguardTeam/AdguardFilters/issues/69611
- (://|)[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/
# https://github.com/AdguardTeam/AdguardFilters/issues/71721
-d moststraightmoment-10.live
# https://github.com/AdguardTeam/AdguardFilters/issues/71369
-d ordinaryluckrewardextra.club
# ——— Standard malware that I stumbled upon on my own ———
# http://www.toorgle.net/results.php?q=fetishkitsch&security=666
-d downloadprovider.me
# https://www.riverbender.com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877.cfm
-d cash93.com
# Various ex-affiliate links at www.zombooru.com
-d allowandgo.com
# ——— Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone.
@@ -350,4 +365,6 @@ msFilterList
# https://github.com/DandelionSprout/adfilt/issues/71
-d imgvieweriri.com
# ——— Spam in comment sections across the internet about "working" from "home" ———
# Placeholder line for alternate list versions