From 6b1b6a4439f7d7287380cc49ff8dde3721b57ec8 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Sat, 10 Oct 2020 01:10:49 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 9 ++----- .../AntiMalwareAdGuard.txt | 9 ++----- .../AntiMalwareAdGuardHome.txt | 27 ++++++------------- .../AntiMalwareDomains.txt | 6 +---- .../AntiMalwareHosts.txt | 6 +---- .../AntiMalwarePrivoxy.action | 7 +---- .../AntiMalwareTPL.tpl | 25 +++++------------ 7 files changed, 22 insertions(+), 67 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index daa7636c8..c3a84a5b5 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 08October2020v1-Beta +! Version: 10October2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -162,7 +162,7 @@ howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer) ! Common scam domain patterns /(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party,domain=icu|life|live -/^https://[a-z]{6,17}[0-9]{1,2}\.live/$domain=live +/^https://[a-z]{6,}[0-9]{1,2}\.live/[0-9]{10}/$domain=live ! https://github.com/AdguardTeam/AdguardFilters/issues/58737 /^https?://[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/$domain=fun /^https://www\.namejp0[1-9]\.xyz/$popup,domain=xyz @@ -344,11 +344,6 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ​* -! β€”β€”β€” These DNS resolver requests lead to localhost and can't ever receive a proper request β€”β€”β€” -! https://github.com/AdguardTeam/AdGuardHome/issues/1705 -||0.168.192.in-addr.arpa^ -||1.168.192.in-addr.arpa^ - ! β€”β€”β€” Since I very, very often have to go from "raw.githubusercontent.com" to "github.com" by means of manual address bar highlighting, I feel I could need some kind of protection insurance in case I highlight 2mm off-course one day. β€”β€”β€” ||githubus.com^ ||githubu.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 549cb28c1..94691cdc4 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard β‰₯6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 08October2020v1-Beta +! Version: 10October2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -189,7 +189,7 @@ howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer) ! Common scam domain patterns /(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party,doc,domain=icu|life|live -/^https://[a-z]{6,17}[0-9]{1,2}\.live/$doc,domain=live +/^https://[a-z]{6,}[0-9]{1,2}\.live/[0-9]{10}/$doc,domain=live ! https://github.com/AdguardTeam/AdguardFilters/issues/58737 /^https?://[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/$doc,domain=fun /^https://www\.namejp0[1-9]\.xyz/$doc,popup,domain=xyz @@ -374,11 +374,6 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ​*$doc !#endif -! β€”β€”β€” These DNS resolver requests lead to localhost and can't ever receive a proper request β€”β€”β€” -! https://github.com/AdguardTeam/AdGuardHome/issues/1705 -||0.168.192.in-addr.arpa^ -||1.168.192.in-addr.arpa^ - ! β€”β€”β€” Since I very, very often have to go from "raw.githubusercontent.com" to "github.com" by means of manual address bar highlighting, I feel I could need some kind of protection insurance in case I highlight 2mm off-course one day. β€”β€”β€” ||githubus.com^ ||githubu.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index d04cc57dc..65078c530 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home) -! Version: 08October2020v1-Beta +! Version: 10October2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -25,39 +25,33 @@ @@||graph.tk^ @@||haopro.tk^ -@@||nolfrevival.tk^ -@@||coppersurfer.tk^ +@@||nolfrevival.tk^~coppersurfer.tk ! Gabon ||ga^ @@||google.ga^ @@||filtri-dns.ga^ -@@||dgdi.ga^ -@@||voitures.ga^ +@@||dgdi.ga^~voitures.ga ! Mali ||ml^ @@||google.ml^ @@||mobili.ml^ -@@||melody.ml^ -@@||dcod.ml^ +@@||melody.ml^~dcod.ml ! Equatorial Guinea ||gq^ @@||deimos.gq^ @@||inege.gq^ -@@||tvgelive.gq^ -@@||comprarcarros.gq^ +@@||tvgelive.gq^~comprarcarros.gq ! Central African Republic ||cf^ @@||google.cf^ @@||rths.cf^ @@||voitures.cf^ @@||assembleenationale-rca.cf^ -@@||cps-rca.cf^ -@@||acap.cf^ +@@||cps-rca.cf^~acap.cf ! Palau ||pw^ @@||libgen.pw^ -@@||petridish.pw^ -@@||palaugov.pw^ +@@||petridish.pw^~palaugov.pw ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^ ||agency^ @@ -153,7 +147,7 @@ ! Common scam domain patterns /(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/ -/^https://[a-z]{6,17}[0-9]{1,2}\.live/ +/^https://[a-z]{6,}[0-9]{1,2}\.live/[0-9]{10}/ ! https://github.com/AdguardTeam/AdguardFilters/issues/58737 /^https?://[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/ /^https://www\.namejp0[1-9]\.xyz/ @@ -309,11 +303,6 @@ ​* -! β€”β€”β€” These DNS resolver requests lead to localhost and can't ever receive a proper request β€”β€”β€” -! https://github.com/AdguardTeam/AdGuardHome/issues/1705 -||0.168.192.in-addr.arpa^ -||1.168.192.in-addr.arpa^ - ! β€”β€”β€” Since I very, very often have to go from "raw.githubusercontent.com" to "github.com" by means of manual address bar highlighting, I feel I could need some kind of protection insurance in case I highlight 2mm off-course one day. β€”β€”β€” ||githubus.com^ ||githubu.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 207d8be47..c2c1c2fbb 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 08October2020v1-Beta +# Version: 10October2020v1-Beta # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -230,10 +230,6 @@ hitnslab.xyz -# β€”β€”β€” These DNS resolver requests lead to localhost and can't ever receive a proper request β€”β€”β€” -0.168.192.in-addr.arpa -1.168.192.in-addr.arpa - # β€”β€”β€” Since I very, very often have to go from "raw.githubusercontent.com" to "github.com" by means of manual address bar highlighting, I feel I could need some kind of protection insurance in case I highlight 2mm off-course one day. β€”β€”β€” githubus.com githubu.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index ce407b995..f5fb7c58c 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 08October2020v1-Alpha +# Version: 10October2020v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -230,10 +230,6 @@ -# β€”β€”β€” These DNS resolver requests lead to localhost and can't ever receive a proper request β€”β€”β€” -127.0.0.1 0.168.192.in-addr.arpa -127.0.0.1 1.168.192.in-addr.arpa - # β€”β€”β€” Since I very, very often have to go from "raw.githubusercontent.com" to "github.com" by means of manual address bar highlighting, I feel I could need some kind of protection insurance in case I highlight 2mm off-course one day. β€”β€”β€” 127.0.0.1 githubus.com 127.0.0.1 githubu.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index bf8ae649b..7f1ed0cfc 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 08October2020v1-Alpha +# Version: 10October2020v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -258,11 +258,6 @@ ​* # -{+block} -# β€”β€”β€” These DNS resolver requests lead to localhost and can't ever receive a proper request β€”β€”β€” -.0.168.192.in-addr.arpa -.1.168.192.in-addr.arpa - {+block} # β€”β€”β€” Since I very, very often have to go from "raw.githubusercontent.com" to "github.com" by means of manual address bar highlighting, I feel I could need some kind of protection insurance in case I highlight 2mm off-course one day. β€”β€”β€” .githubus.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 91420ba9d..d1abd8c79 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 08October2020v1-Beta +# Version: 10October2020v1-Beta : expires = 5 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -25,39 +25,33 @@ msFilterList +d graph.tk +d haopro.tk +d dls2.pokeacer.tk -+d nolfrevival.tk -+d coppersurfer.tk ++d nolfrevival.tk~coppersurfer.tk # Gabon -d ga +d google.ga +d filtri-dns.ga -+d dgdi.ga -+d voitures.ga ++d dgdi.ga~voitures.ga # Mali -d ml +d google.ml +d mobili.ml -+d melody.ml -+d dcod.ml ++d melody.ml~dcod.ml # Equatorial Guinea -d gq +d deimos.gq +d inege.gq -+d tvgelive.gq -+d comprarcarros.gq ++d tvgelive.gq~comprarcarros.gq # Central African Republic -d cf +d google.cf +d rths.cf +d voitures.cf +d assembleenationale-rca.cf -+d cps-rca.cf -+d acap.cf ++d cps-rca.cf~acap.cf # Palau -d pw +d libgen.pw -+d petridish.pw -+d palaugov.pw ++d petridish.pw~palaugov.pw # International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. @@ -307,11 +301,6 @@ msFilterList ​* -# β€”β€”β€” These DNS resolver requests lead to localhost and can't ever receive a proper request β€”β€”β€” -# https://github.com/AdguardTeam/AdGuardHome/issues/1705 --d 0.168.192.in-addr.arpa --d 1.168.192.in-addr.arpa - # β€”β€”β€” Since I very, very often have to go from "raw.githubusercontent.com" to "github.com" by means of manual address bar highlighting, I feel I could need some kind of protection insurance in case I highlight 2mm off-course one day. β€”β€”β€” -d githubus.com -d githubu.com