From 873ad61c577e1ad18e57503b4c3f74bf82ba6d97 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Tue, 8 Sep 2020 07:59:51 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 3 +- .../AntiMalwareAdGuard.txt | 361 +++++++++--------- .../AntiMalwareAdGuardHome.txt | 3 +- .../AntiMalwareDomains.txt | 3 +- .../AntiMalwareHosts.txt | 3 +- .../AntiMalwarePrivoxy.action | 3 +- .../AntiMalwareTPL.tpl | 3 +- 7 files changed, 193 insertions(+), 186 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 8832b42a7..74e34bffd 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 20August2020v2-Beta +! Version: 28August2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -51,6 +51,7 @@ ||njabl.org^ ||dutchmega.nl^ ||juvander.net^ +||ssl.bblck.me^ ! Malicious domains found in videogame manuals ||acclaimsports.com^ ||acclaimmaxsports.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 6a68f22b7..8709ec373 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard β‰₯6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 20August2020v2-Beta +! Version: 28August2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -9,23 +9,23 @@ ! β€”β€”β€” Bad top-level domains β€”β€”β€” ! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you. ! Tokelau -||tk^$empty,important,domain=~coolcmd.tk|~budterence.tk|~google.tk|~transportnews.tk|~unicorncardlist.tk|~c0d3c.tk|~anonytext.tk|~tokelau-info.tk|~fakaofo.tk|~loljp-wiki.tk|~ninetail.tk|~goshujin.tk|~graph.tk|~haopro.tk|~dls2.pokeacer.tk|~nolfrevival.tk|~coppersurfer.tk +||tk^$doc,domain=~coolcmd.tk|~budterence.tk|~google.tk|~transportnews.tk|~unicorncardlist.tk|~c0d3c.tk|~anonytext.tk|~tokelau-info.tk|~fakaofo.tk|~loljp-wiki.tk|~ninetail.tk|~goshujin.tk|~graph.tk|~haopro.tk|~dls2.pokeacer.tk|~nolfrevival.tk|~coppersurfer.tk ! Gabon -||ga^$empty,important,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga +||ga^$doc,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga ! Mali -||ml^$empty,important,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml +||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml ! Equatorial Guinea -||gq^$empty,important,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq +||gq^$doc,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq ! Central African Republic -||cf^$empty,important,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf +||cf^$doc,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf ! Palau -||pw^$empty,important,domain=~libgen.pw|~petridish.pw|~palaugov.pw +||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. -||loan^$empty,important -||agency^$empty,important -||gdn^$empty,important -||bid^$empty,important -||top^$empty,important +||loan^$doc +||agency^$doc +||gdn^$doc +||bid^$doc +||top^$doc ! β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” google.*##.rc:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="unicorncardlist.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="loljp-wiki.tk"]):not([href*="ninetail.tk"]):not([href*="goshujin.tk"]):not([href*="graph.tk"]):not([href*="haopro.tk"]):not([href*="ps2online.tk"]):not([href*="nolfrevival.tk"]):not([href*="steamroller.tk"])) @@ -60,57 +60,58 @@ google.*#?#*:has(> * > a[oncontextmenu][href*=".php?xxx="]) ! β€”β€”β€” Old dead tech-related domains β€”β€”β€” ! Domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. -||adblock.gjtech.net^$empty,important -||spam404bl.com^$empty,important +||adblock.gjtech.net^$doc +||spam404bl.com^$doc 109.201.135.46$network -||hufilter.hu^$empty,important -||fredfiber.no^$empty,important -||securemecca.com^$empty,important -||1hos.cf^$empty,important -||1hosts.cf^$empty,important -||everythingisnt.com^$empty,important -||vin-plastiks.com^$empty,important -||adblock-listefr.com^$empty,important -||intr0.cf^$empty,important -||njabl.org^$empty,important -||dutchmega.nl^$empty,important -||juvander.net^$empty,important +||hufilter.hu^$doc +||fredfiber.no^$doc +||securemecca.com^$doc +||1hos.cf^$doc +||1hosts.cf^$doc +||everythingisnt.com^$doc +||vin-plastiks.com^$doc +||adblock-listefr.com^$doc +||intr0.cf^$doc +||njabl.org^$doc +||dutchmega.nl^$doc +||juvander.net^$doc +||ssl.bblck.me^$doc ! Malicious domains found in videogame manuals -||acclaimsports.com^$empty,important -||acclaimmaxsports.com^$empty,important -||hip-games.com^$empty,important -||thq.com.au^$empty,important -||gp32.com^$empty,important +||acclaimsports.com^$doc +||acclaimmaxsports.com^$doc +||hip-games.com^$doc +||thq.com.au^$doc +||gp32.com^$doc ! Dead router connection URΔ°s ! To log in to TP-Link routers, use tplinkwifi.net instead. -||tplinklogin.net^$empty,important -||tplinkextender.net^$empty,important +||tplinklogin.net^$doc +||tplinkextender.net^$doc ! Old Linux-related domains ! How these links still remain in Unetbootin, is anyone's guess. -||dreamlinux.com.br^$empty,important -||dreamlinux.net^$empty,important -||dreamlinux.info^$empty,important +||dreamlinux.com.br^$doc +||dreamlinux.net^$doc +||dreamlinux.info^$doc 104.24.117.74$network 104.24.116.74$network [2606:4700:30::6818:754a]$network [2606:4700:30::6818:744a]$network -||hacktolive.org^$empty,important -||mandriva.com^$empty,important +||hacktolive.org^$doc +||mandriva.com^$doc ! Other -||ublock.org^$empty,important +||ublock.org^$doc 138.68.252.54$network ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” -||funeducation.com^$empty,important -||iq-research.info^$empty,important -||iq-test-online.org^$empty,important -||iq-test.co.uk^$empty,important -||iqtest.co.uk^$empty,important -||iqtest.com^$empty,important -||iqtestnow.org^$empty,important -||iqtestonline24.com^$empty,important -||test-iq.org^$empty,important -||officialiqtests.com^$empty,important +||funeducation.com^$doc +||iq-research.info^$doc +||iq-test-online.org^$doc +||iq-test.co.uk^$doc +||iqtest.co.uk^$doc +||iqtest.com^$doc +||iqtestnow.org^$doc +||iqtestonline24.com^$doc +||test-iq.org^$doc +||officialiqtests.com^$doc ! β€”β€”β€” Links to PC "optimising" "tool" PUPs that'll most likely stuff your PC full of nagware and malware β€”β€”β€” ! ReImagePlus (Also added to "uBlock Filters - Badware Risks") @@ -185,53 +186,53 @@ howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer) 2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(SpyHunter) ! Common scam domain patterns -/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party,empty,importantument,domain=icu|life|live -/^https://[a-z]{7,16}[0-9]{1,2}\.live/$empty,importantument,domain=live +/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party,document,domain=icu|life|live +/^https://[a-z]{7,16}[0-9]{1,2}\.live/$document,domain=live ! https://github.com/AdguardTeam/AdguardFilters/issues/58737 -/^https://[0-9a-z]{15}\.fun/kjasdjhqwud\.php.*/$empty,importantument,domain=fun -/^https://www\.namejp0[1-9]\.xyz/$empty,importantument,popup,domain=xyz +/^https://[0-9a-z]{15}\.fun/kjasdjhqwud\.php.*/$document,domain=fun +/^https://www\.namejp0[1-9]\.xyz/$document,popup,domain=xyz ! β€”β€”β€” Banner for "MSN New Tab" β€”β€”β€” msn.com##.irisbanner ! β€”β€”β€” Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) β€”β€”β€” ! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files. -||gamecopyworld.com^$empty,important -||coolrom.com^$empty,important -||freeroms.com^$empty,important -||portalroms.com^$empty,important -||romsmania.com^$empty,important -||loveroms.com^$empty,important -||portableroms.com^$empty,important +||gamecopyworld.com^$doc +||coolrom.com^$doc +||freeroms.com^$doc +||portalroms.com^$doc +||romsmania.com^$doc +||loveroms.com^$doc +||portableroms.com^$doc ! β€”β€”β€” Entries from Β«abuse.ch ZeuS BlocklistΒ», which was discontinued on the 8th of July 2019. β€”β€”β€” -||afobal.cl^$empty,important -||alvoportas.com.br^$empty,important -||blogerjijer.pw^$empty,important -||bright.su^$empty,important -||domnicpeter.in.net^$empty,important -||dzitech.net^$empty,important -||fadzulani.com^$empty,important -||hruner.com^$empty,important -||interlogistics.com.vn^$empty,important -||ivansaru.418.com1.ru^$empty,important -||jangasm.org^$empty,important -||kesikelyaf.com^$empty,important -||ns511849.ip-192-99-19.net^$empty,important -||ns513726.ip-192-99-148.net^$empty,important -||panel.vargakragard.se^$empty,important -||sanyai-love.rmu.ac.th^$empty,important -||servmill.com^$empty,important -||ssl.sinergycosmetics.com^$empty,important -||telefonfiyatlari.org^$empty,important -||update.rifugiopontese.it^$empty,important -||vodahelp.sytes.net^$empty,important -||nikey.cn^$empty,important -||witkey.com^$empty,important +||afobal.cl^$doc +||alvoportas.com.br^$doc +||blogerjijer.pw^$doc +||bright.su^$doc +||domnicpeter.in.net^$doc +||dzitech.net^$doc +||fadzulani.com^$doc +||hruner.com^$doc +||interlogistics.com.vn^$doc +||ivansaru.418.com1.ru^$doc +||jangasm.org^$doc +||kesikelyaf.com^$doc +||ns511849.ip-192-99-19.net^$doc +||ns513726.ip-192-99-148.net^$doc +||panel.vargakragard.se^$doc +||sanyai-love.rmu.ac.th^$doc +||servmill.com^$doc +||ssl.sinergycosmetics.com^$doc +||telefonfiyatlari.org^$doc +||update.rifugiopontese.it^$doc +||vodahelp.sytes.net^$doc +||nikey.cn^$doc +||witkey.com^$doc ! β€”β€”β€” Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains β€”β€”β€” ! https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/ -||incels.co^$empty,important +||incels.co^$doc ! β€”β€”β€” Browser extension store entries for notoriously poor or malicious adblocker forks β€”β€”β€” ! Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions. @@ -265,45 +266,45 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Easy AdBlock) addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker Genius Pro) addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ! Homepages -||adblock.biz^$empty,important -||the1adblocker.com^$empty,important +||adblock.biz^$doc +||the1adblocker.com^$doc ! β€”β€”β€” Wrong suffixes of legitimate sites β€”β€”β€” ! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/ -||dwarffortresswiki.com^$empty,important +||dwarffortresswiki.com^$doc 103.224.212.249$network -||speedtest.com^$empty,important +||speedtest.com^$doc ! β€”β€”β€” Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn β€”β€”β€” -||ppc.netnet44.net^$empty,important -||tncrun.net^$empty,important -||amanda.*.net^$empty,important -||sarah.*.net^$empty,important -||pamela.*.net^$empty,important -||jessica.*.net^$empty,important -||katie.*.net^$empty,important -||emily.*.net^$empty,important +||ppc.netnet44.net^$doc +||tncrun.net^$doc +||amanda.*.net^$doc +||sarah.*.net^$doc +||pamela.*.net^$doc +||jessica.*.net^$doc +||katie.*.net^$doc +||emily.*.net^$doc 54.174.156.141$network -||lucretius-ada.com^$empty,important -||tango-deg.com^$empty,important -||ezekiel-sam.com^$empty,important -||franciscus-ful.com^$empty,important -||hippolyte-hag.com^$empty,important -||india-abc.com^$empty,important -||leontius-eli.com^$empty,important -||mohini-ger.com^$empty,important -||nethaneel-has.com^$empty,important -||ortrun-adi.com^$empty,important -||paramonos-oha.com^$empty,important -||paula-secundinus.com^$empty,important -||photios-raj.com^$empty,important -||proserpina-zeb.com^$empty,important -||ieronimus-kay.com^$empty,important -||fredagty.com^$empty,important -||lordagty.com^$empty,important -||madagty.com^$empty,important -||onsdagty.com^$empty,important -||zeroredirect5.com^$empty,important +||lucretius-ada.com^$doc +||tango-deg.com^$doc +||ezekiel-sam.com^$doc +||franciscus-ful.com^$doc +||hippolyte-hag.com^$doc +||india-abc.com^$doc +||leontius-eli.com^$doc +||mohini-ger.com^$doc +||nethaneel-has.com^$doc +||ortrun-adi.com^$doc +||paramonos-oha.com^$doc +||paula-secundinus.com^$doc +||photios-raj.com^$doc +||proserpina-zeb.com^$doc +||ieronimus-kay.com^$doc +||fredagty.com^$doc +||lordagty.com^$doc +||madagty.com^$doc +||onsdagty.com^$doc +||zeroredirect5.com^$doc 54.209.22.226$network 54.91.125.197$network 52.202.53.245$network @@ -312,37 +313,37 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) 34.230.160.215$network 3.226.8.132$network 3.216.243.46$network -||maowaotodowoo.net^$empty,important -||roamingclicks.com^$empty,important +||maowaotodowoo.net^$doc +||roamingclicks.com^$doc ! Source: demonoid.pw -||veremund-hon.com^$empty,important +||veremund-hon.com^$doc ! Source: desidert.no -||collectfasttracks.com^$empty,important +||collectfasttracks.com^$doc ! Source: vn-zoom.com -||ttnrd.com^$empty,important -||amanda.*.com^$empty,important -||katie.*.com^$empty,important -||briana.*.com^$empty,important -||sarah.*.com^$empty,important -||pamela.*.com^$empty,important +||ttnrd.com^$doc +||amanda.*.com^$doc +||katie.*.com^$doc +||briana.*.com^$doc +||sarah.*.com^$doc +||pamela.*.com^$doc 54.152.245.247$network 35.172.40.232$network 3.90.125.85$network ! β€”β€”β€” Found in random witness reports online β€”β€”β€” ! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315 -||deviuser.com^$empty,important +||deviuser.com^$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/61838 -/scan-update-and-protect-your-browser.html$empty,important +/scan-update-and-protect-your-browser.html$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/61755 ! https://github.com/AdguardTeam/AdguardFilters/issues/61743 /://(www\.)?cunt[a-z]{3,8}\.com(/|$)/ ! β€”β€”β€” Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. -||unofficialtwrp.com^$empty,important -||androidweblog.com^$empty,important -||hardreset.info^$empty,important +||unofficialtwrp.com^$doc +||androidweblog.com^$doc +||hardreset.info^$doc ! β€”β€”β€” If you run a webserver of any sort, and you get incoming requests to resolve these domains, that's rarely a good sign for that requestor's intentions β€”β€”β€” !#if !ext_ublock @@ -356,8 +357,8 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ! β€”β€”β€” Zero-width spaces/hyphens in lookalike domains β€”β€”β€” ! uBO support is removed until https://github.com/uBlockOrigin/uBlock-issues/issues/1146 is resolved !#if !ext_ublock -Β­*$empty,important -​*$empty,important +Β­*$doc +​*$doc !#endif ! β€”β€”β€” These DNS resolver requests lead to localhost and can't ever receive a proper request β€”β€”β€” @@ -376,55 +377,55 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global) ||rgithub.com^ ! β€”β€”β€” Usually used by various groups who buy old domains and display illicit ads on them β€”β€”β€” -://ww5.$empty,important -://ww6.$empty,important -://ww7.$empty,important -://ww8.$empty,important -://ww9.$empty,important -://ww10.$empty,important -://ww11.$empty,important -://ww12.$empty,important -://ww13.$empty,important -://ww14.$empty,important -://ww15.$empty,important -://ww16.$empty,important -://ww17.$empty,important -://ww18.$empty,important -://ww19.$empty,important -://ww20.$empty,important -://ww21.$empty,important -://ww22.$empty,important -://ww23.$empty,important -://ww24.$empty,important -://ww25.$empty,important -://ww26.$empty,important -://ww27.$empty,important -://ww28.$empty,important -://ww29.$empty,important -://ww30.$empty,important -://ww31.$empty,important -://ww32.$empty,important -://ww33.$empty,important -://ww34.$empty,important -://ww35.$empty,important -://ww36.$empty,important -://ww37.$empty,important -://ww38.$empty,important -://ww39.$empty,important -://ww40.$empty,important -://ww41.$empty,important -://ww42.$empty,important -://ww43.$empty,important -://ww44.$empty,important -://ww45.$empty,important -://ww46.$empty,important -://ww47.$empty,important -://ww48.$empty,important -://ww49.$empty,important -://ww50.$empty,important +://ww5.$doc +://ww6.$doc +://ww7.$doc +://ww8.$doc +://ww9.$doc +://ww10.$doc +://ww11.$doc +://ww12.$doc +://ww13.$doc +://ww14.$doc +://ww15.$doc +://ww16.$doc +://ww17.$doc +://ww18.$doc +://ww19.$doc +://ww20.$doc +://ww21.$doc +://ww22.$doc +://ww23.$doc +://ww24.$doc +://ww25.$doc +://ww26.$doc +://ww27.$doc +://ww28.$doc +://ww29.$doc +://ww30.$doc +://ww31.$doc +://ww32.$doc +://ww33.$doc +://ww34.$doc +://ww35.$doc +://ww36.$doc +://ww37.$doc +://ww38.$doc +://ww39.$doc +://ww40.$doc +://ww41.$doc +://ww42.$doc +://ww43.$doc +://ww44.$doc +://ww45.$doc +://ww46.$doc +://ww47.$doc +://ww48.$doc +://ww49.$doc +://ww50.$doc ! β€”β€”β€” Temp hotfix for https://github.com/AdguardTeam/AdGuardHome/issues/1835 β€”β€”β€” -/\\/$empty,important +/\\/$doc ! Oddly enough, there seems to be no need to couple it with "@@/:\\/", since web browsers convert Windows filenames from backwards to forwards slashes. ! β€”β€”β€” User-submitted entries β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index d9f619717..9f447da8d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home) -! Version: 20August2020v2-Beta +! Version: 28August2020v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -89,6 +89,7 @@ ||njabl.org^ ||dutchmega.nl^ ||juvander.net^ +||ssl.bblck.me^ ! Malicious domains found in videogame manuals ||acclaimsports.com^ ||acclaimmaxsports.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index e1ae875ca..e5960e7e9 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 20August2020v2-Beta +# Version: 28August2020v1-Beta # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -47,6 +47,7 @@ intr0.cf njabl.org dutchmega.nl juvander.net +ssl.bblck.me # Malicious domains found in videogame manuals acclaimsports.com acclaimmaxsports.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 97905757f..746523d5e 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 20August2020v2-Alpha +# Version: 28August2020v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -47,6 +47,7 @@ 127.0.0.1 njabl.org 127.0.0.1 dutchmega.nl 127.0.0.1 juvander.net +127.0.0.1 ssl.bblck.me # Malicious domains found in videogame manuals 127.0.0.1 acclaimsports.com 127.0.0.1 acclaimmaxsports.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 74e28ab4e..db261f1a6 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 20August2020v2-Alpha +# Version: 28August2020v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -53,6 +53,7 @@ .njabl.org .dutchmega.nl .juvander.net +.ssl.bblck.me # Malicious domains found in videogame manuals .acclaimsports.com .acclaimmaxsports.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 87809e442..1f77f5e21 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 20August2020v2-Beta +# Version: 28August2020v1-Beta : expires = 5 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -89,6 +89,7 @@ msFilterList -d njabl.org -d dutchmega.nl -d juvander.net +-d ssl.bblck.me # Malicious domains found in videogame manuals -d acclaimsports.com -d acclaimmaxsports.com