starred/adfilt
1
0
Fork 0
mirror of https://github.com/DandelionSprout/adfilt.git synced 2026-10-04 15:41:07 +01:00
Code Issues Packages Projects Releases 4 Wiki Activity

Fix #902

Browse Source
This commit is contained in:
Imre Kristoffer Eilertsen
2023-08-17 17:58:29 +02:00
committed by GitHub
parent 9e315a8c67
commit 7221bab080
1 changed files with 75 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dandelion Sprout's Anti-Malware List.txt
+75 -6
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List
! Version: 16August2023v5
! Version: 17August2023v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -18,7 +18,7 @@
! Central African Republic
||cf^$doc,domain=~google.cf|~rths.cf|~acap.cf
! Palau
||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~gopass.pw|~vost.pw|~core.pw|~bittor.pw|~plutonium.pw|~nitter.pw
||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~gopass.pw|~vost.pw|~core.pw|~bittor.pw|~plutonium.pw|~nitter.pw|~kge.pw
! Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever.
||top^$doc,domain=~caitlin.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~mastodon.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top
! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
@@ -47,7 +47,7 @@
! ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
www.google.*##.g:has(a[href*=".gq/"]:not([href*="inege.gq"], [href*="tvgelive.gq"], [href*="siteproxy.gq"], [href*="blockly.gq"]))
www.google.*##.g:has(a[href*=".cf/"]:not([href*="google.cf"], [href*="rths.cf"], [href*="acap.cf"]))
www.google.*##.g:has(a[href*=".pw/"]:not([href*="libgen.pw"], [href*="petridish.pw"], [href*="palaugov.pw"], [href*="dpc.pw"], [href*="buttercup.pw"], [href*="rezka.pw"], [href*="darkcrystal.pw"], [href*="xor.pw"], [href*="fullhdfilmizlesene.pw"], [href*="gopass.pw"], [href*="vost.pw"], [href*="core.pw"], [href*="bittor.pw"], [href*="plutonium.pw"], [href*="nitter.pw"]))
www.google.*##.g:has(a[href*=".pw/"]:not([href*="libgen.pw"], [href*="petridish.pw"], [href*="palaugov.pw"], [href*="dpc.pw"], [href*="buttercup.pw"], [href*="rezka.pw"], [href*="darkcrystal.pw"], [href*="xor.pw"], [href*="fullhdfilmizlesene.pw"], [href*="gopass.pw"], [href*="vost.pw"], [href*="core.pw"], [href*="bittor.pw"], [href*="plutonium.pw"], [href*="nitter.pw"], [href*="kge.pw"]))
www.google.*##.g:has(a[href*=".loan/"])
www.google.*##.g:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"]))
www.google.*##.g:has(a[href*=".gdn/"])
@@ -88,7 +88,7 @@ www.google.*##.g:has(a[href*="=//"]):has(a[href*=".tk/"], a[href*=".ml/"])
! I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.
www.google.*##a[oncontextmenu][href*=".gq/"]:not([href*="inege.gq"], [href*=tvgelive], [href*="siteproxy.gq"], [href*="blockly.gq"]):upward(2)
www.google.*##a[oncontextmenu][href*=".cf/"]:not([href*="google.cf"], [href*="rths.cf"], [href*="acap.cf"]):upward(2)
www.google.*##a[oncontextmenu][href*=".pw/"]:not([href*="libgen.pw"], [href*="petridish.pw"], [href*="palaugov.pw"], [href*="dpc.pw"], [href*="buttercup.pw"], [href*="rezka.pw"], [href*="darkcrystal.pw"], [href*="xor.pw"], [href*="fullhdfilmizlesene.pw"], [href*="gopass.pw"], [href*="vost.pw"], [href*="core.pw"], [href*="bittor.pw"], [href*="plutonium.pw"], [href*="nitter.pw"]):upward(2)
www.google.*##a[oncontextmenu][href*=".pw/"]:not([href*="libgen.pw"], [href*="petridish.pw"], [href*="palaugov.pw"], [href*="dpc.pw"], [href*="buttercup.pw"], [href*="rezka.pw"], [href*="darkcrystal.pw"], [href*="xor.pw"], [href*="fullhdfilmizlesene.pw"], [href*="gopass.pw"], [href*="vost.pw"], [href*="core.pw"], [href*="bittor.pw"], [href*="plutonium.pw"], [href*="nitter.pw"], [href*="kge.pw"]):upward(2)
www.google.*##a[oncontextmenu][href*=".loan/"]:upward(2)
www.google.*##a[oncontextmenu][href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="ws.agency"]):upward(2)
www.google.*##a[oncontextmenu][href*=".gdn/"]:upward(2)
@@ -101,7 +101,7 @@ www.google.*##a[oncontextmenu][href^="https://books.google."]:upward(2)
! ——— For DuckDuckGo ———
duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".gq/"]:not([href*="inege.gq"], [href*="tvgelive.gq"], [href*="siteproxy.gq"], [href*="blockly.gq"]))
duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".cf/"]:not([href*="google.cf"], [href*="rths.cf"], [href*="acap.cf"]))
duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".pw/"]:not([href*="libgen.pw"], [href*="petridish.pw"], [href*="palaugov.pw"], [href*="dpc.pw"], [href*="buttercup.pw"], [href*="rezka.pw"], [href*="darkcrystal.pw"], [href*="xor.pw"], [href*="fullhdfilmizlesene.pw"], [href*="gopass.pw"], [href*="vost.pw"], [href*="core.pw"], [href*="bittor.pw"], [href*="plutonium.pw"], [href*="nitter.pw"]))
duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".pw/"]:not([href*="libgen.pw"], [href*="petridish.pw"], [href*="palaugov.pw"], [href*="dpc.pw"], [href*="buttercup.pw"], [href*="rezka.pw"], [href*="darkcrystal.pw"], [href*="xor.pw"], [href*="fullhdfilmizlesene.pw"], [href*="gopass.pw"], [href*="vost.pw"], [href*="core.pw"], [href*="bittor.pw"], [href*="plutonium.pw"], [href*="nitter.pw"], [href*="kge.pw"]))
duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".loan/"])
duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"]))
duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".gdn/"])
@@ -111,7 +111,7 @@ duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[
! ——— For Bing ———
bing.com##.b_algo:has(a[href*=".gq/"]:not([href*="inege.gq"], [href*="tvgelive.gq"], [href*="siteproxy.gq"], [href*="blockly.gq"]))
bing.com##.b_algo:has(a[href*=".cf/"]:not([href*="google.cf"], [href*="rths.cf"], [href*="acap.cf"]))
bing.com##.b_algo:has(a[href*=".pw/"]:not([href*="libgen.pw"], [href*="petridish.pw"], [href*="palaugov.pw"], [href*="dpc.pw"], [href*="buttercup.pw"], [href*="rezka.pw"], [href*="darkcrystal.pw"], [href*="xor.pw"], [href*="fullhdfilmizlesene.pw"], [href*="gopass.pw"], [href*="vost.pw"], [href*="core.pw"], [href*="bittor.pw"], [href*="plutonium.pw"], [href*="nitter.pw"]))
bing.com##.b_algo:has(a[href*=".pw/"]:not([href*="libgen.pw"], [href*="petridish.pw"], [href*="palaugov.pw"], [href*="dpc.pw"], [href*="buttercup.pw"], [href*="rezka.pw"], [href*="darkcrystal.pw"], [href*="xor.pw"], [href*="fullhdfilmizlesene.pw"], [href*="gopass.pw"], [href*="vost.pw"], [href*="core.pw"], [href*="bittor.pw"], [href*="plutonium.pw"], [href*="nitter.pw"], [href*="kge.pw"]))
bing.com##.b_algo:has(a[href*=".loan/"])
bing.com##.b_algo:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"]))
bing.com##.b_algo:has(a[href*=".gdn/"])
@@ -22611,6 +22611,75 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||158.222.7.83^$all,~inline-font
! Spam on W.I.T.C.H. and Winx text search results
tumblr.com#?#div[tabindex][style]:has(a[href*="tinyurl."]:has-text(_1+8_))
! A scam SMS I got
||95-214-26-78.plesk.page^$all,~inline-script
||account-limitato.org^$all,~inline-script
||accueil-ameli.ddns.net^$all,~inline-script
||amende-telepaiements.com^$all,~inline-script
||antai-infoo.com^$all,~inline-script
||bank-authenticatorpay.com^$all,~inline-script
||chronopost-incident-colis.com^$all,~inline-script
||colis-centre.fr^$all,~inline-script
||colischronopost-support.info^$all,~inline-script
||contact-delivery-armx.com^$all,~inline-script
||contravention-info.ddns.net^$all,~inline-script
||custom-assisttracking.com^$all,~inline-script
||customers-qa-post.com^$all,~inline-script
||customs-customer-assist.com^$all,~inline-script
||depot-colis.fr^$all,~inline-script
||deutsche-tracking.de^$all,~inline-script
||myaccount-world.com^$all,~inline-script
||duties-support.com^$all,~inline-script
||espace-authentification.fr^$all,~inline-script
||espace-laposte.fr^$all,~inline-script
||expedition-customs-support.com^$all,~inline-script
||info-custom.com^$all,~inline-script
||kosten-support.de^$all,~inline-script
||lieferung-support.com^$all,~inline-script
||livraison-colis-suivi.fr^$all,~inline-script
||monespace-iaposte.fr^$all,~inline-script
||monespacesantéfr.com^$all,~inline-script
||netfiixhungary.net^$all,~inline-script
||myupdate-hu.com^$all,~inline-script
||package-elta-regularization.com^$all,~inline-script
||payout-ups.com^$all,~inline-script
||poczta-polska-pakiet.com^$all,~inline-script
||pocztapoiska.com^$all,~inline-script
||tracking-sk.com^$all,~inline-script
||postacg-track-me.com^$all,~inline-script
||poste-suivi-expedition.fr^$all,~inline-script
||postnl-track-shipping.com^$all,~inline-script
||retardpayement.com^$all,~inline-script
||s-paylibrecup.com^$all,~inline-script
||sante-securite.ddns.net^$all,~inline-script
||secure-connexion.ddns.net^$all,~inline-script
||suivicolischronopost.info^$all,~inline-script
||support-armx-qa.com^$all,~inline-script
||support-taxes.fr^$all,~inline-script
||supportduties.com^$all,~inline-script
||supportnetflix.com^$all,~inline-script
||taxes-custom-track.com^$all,~inline-script
||taxes-shipments-support.com^$all,~inline-script
||trackdhlparcel-pt.com^$all,~inline-script
||tracking-colis.net^$all,~inline-script
||tracking-ups-client.com^$all,~inline-script
||tracking-ups-clients.com^$all,~inline-script
||ups-colislivraison.com^$all,~inline-script
||ups-cutsom.com^$all,~inline-script
||ups-livraisonrestriction.com^$all,~inline-script
||ups-track-shipping.com^$all,~inline-script
||ups-trackingservice.com^$all,~inline-script
||ups-worldtrack.com^$all,~inline-script
||ups-zustellung.de^$all,~inline-script
||deutschetrack.de^$all,~inline-script
||info-antai.services^$all,~inline-script
||meinedatenbestatigen.com^$all,~inline-script
||restricted-account.org^$all,~inline-script
||trackingdhl-dk.com^$all,~inline-script
||your-track-ups.net^$all,~inline-script
||your-ups-track.com^$all,~inline-script
||zoll-pakete-support.com^$all,~inline-script
||95.214.26.78^$all,~inline-script
! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ———
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.