From 8bb28343d368794ab9b4c465bfa80db1f1cced43 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Sat, 2 Oct 2021 00:37:50 +0200 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 132 ++++++++++++++---- .../AntiMalwareAdGuard.txt | 96 +++++++++---- .../AntiMalwareAdGuardHome.txt | 96 +++++++++---- .../AntiMalwareDomains.txt | 40 +++++- .../AntiMalwareHosts.txt | 40 +++++- .../AntiMalwarePrivoxy.action | 40 +++++- .../AntiMalwareTPL.tpl | 42 +++++- ...out's and other adblocker lists' IPs.ipset | 3 +- 8 files changed, 400 insertions(+), 89 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index a075c7a8d..2c1138898 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 01October2021v2-Beta +! Version: 02October2021v2-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -100,12 +100,12 @@ bing.com##.b_algo:-abp-has(a[href*=".top/"]) ||hufilter.hu^ ||fredfiber.no^ ||securemecca.com^ -||1hos.cf^ -||1hosts.cf^ + + ||everythingisnt.com^ ||vin-plastiks.com^ ||adblock-listefr.com^ -||intr0.cf^ + ||njabl.org^ ||dutchmega.nl^ ||juvander.net^ @@ -260,7 +260,7 @@ msn.com##.irisbanner ! β€”β€”β€” Entries from Β«abuse.ch ZeuS BlocklistΒ», which was discontinued on the 8th of July 2019. β€”β€”β€” ||afobal.cl^ ||alvoportas.com.br^ -||blogerjijer.pw^ + ||bright.su^ ||domnicpeter.in.net^ ||dzitech.net^ @@ -1020,13 +1020,13 @@ zombooru.com##a[href="http://www.hard55.com"] ||googleanalytics.cyou^$popup ||googleanalytics.monster^ ||googleanalytics.monster^$popup -||googleanalytics.top^ + ||googleanalytics.top^$popup ||googleshopanalytic.icu^ ||googleshopanalytic.icu^$popup ||googletagmanager.cyou^ ||googletagmanager.cyou^$popup -||googletagmanager.top^ + ||googletagmanager.top^$popup ||gstatic.club^ ||gstatic.club^$popup @@ -1084,7 +1084,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||albumzips.xyz^$popup ||aleinvest.xyz^ ||aleinvest.xyz^$popup -||bitminer.ga^ + ||bitminer.ga^$popup ||camillesanz.com^ ||camillesanz.com^$popup @@ -1257,7 +1257,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||zorinetownspiegelman.casa^$popup ||ssielearning.com^ ||ssielearning.com^$popup -||canhila.tk^ + ||canhila.tk^$popup ||paymetconfirm.com^ ||paymetconfirm.com^$popup @@ -1306,11 +1306,11 @@ zombooru.com##a[href="http://www.hard55.com"] ||server1.2makestorage.com^$popup ||vrthcobj.com^ ||vrthcobj.com^$popup -||moregy07.top^ + ||moregy07.top^$popup -||lopxep10.top^ + ||lopxep10.top^$popup -||xeihqe72.top^ + ||xeihqe72.top^$popup ||qoisocrldvnesni.ru^ ||qoisocrldvnesni.ru^$popup @@ -1327,7 +1327,7 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/DandelionSprout/adfilt/issues/244 ||rblxexploits.net^ ||rblxexploits.net^$popup -||youneerdmo.top^ + ||youneerdmo.top^$popup ||image-find.com^ ||image-find.com^$popup @@ -1357,7 +1357,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||discordapp.cam^$popup ||nanorgin.ydns.eu^ ||nanorgin.ydns.eu^$popup -||astdg.top^ + ||astdg.top^$popup ||thefreshstuffs.at^ ||thefreshstuffs.at^$popup @@ -1575,7 +1575,7 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/AdguardTeam/AdguardFilters/issues/90947 ! https://www.virustotal.com/gui/file/f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b/community ! https://www.virustotal.com/gui/url/cea7b7ccd54fabd22b14cff5521f13b9dca4fd06d47d0bc2119dac6b77ecc04d/detection -||serrtjw256jw565w.gq^ + ||serrtjw256jw565w.gq^$popup ! https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 ||totalav.com^ @@ -1722,6 +1722,82 @@ zombooru.com##a[href="http://www.hard55.com"] ||jsontdsexit.com^$popup ||therewardboost.com^ ||therewardboost.com^$popup +! https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931753495 +||agkn.com^ +||agkn.com^$popup +||best-prizes.life^ +||best-prizes.life^$popup +||cakecdn.com^ +||cakecdn.com^$popup +||cdn925.com^ +||cdn925.com^$popup +||clickagy.com^ +||clickagy.com^$popup +||clicken.us^ +||clicken.us^$popup +||cloud-storage.store^ +||cloud-storage.store^$popup +||cpmstatsart.com^ +||cpmstatsart.com^$popup +||d.clarity.ms^ +||d.clarity.ms^$popup +||d2m2wsoho8qq12.cloudfront.net^ +||d2m2wsoho8qq12.cloudfront.net^$popup +||data.deduce.com^ +||data.deduce.com^$popup +||findanswersnow.net^ +||findanswersnow.net^$popup +||gogle.net^ +||gogle.net^$popup +||gpush.cogocast.net^ +||gpush.cogocast.net^$popup +||info.leadid.com^ +||info.leadid.com^$popup +||lijit.com^ +||lijit.com^$popup +||listrakbi.com^ +||listrakbi.com^$popup +||partner.mediawallahscript.com^$popup +||pippio.com^ +||pippio.com^$popup +||retailproductsusa.com^ +||retailproductsusa.com^$popup +||rlcdn.com^ +||rlcdn.com^$popup +||signupandturnyourscreenoffsafepowernow.date^ +||signupandturnyourscreenoffsafepowernow.date^$popup +||static.imghst-de.com^ +||static.imghst-de.com^$popup +||static.traversedlp.com^ +||static.traversedlp.com^$popup +||tag.cogocast.net^ +||tag.cogocast.net^$popup +||tag.yieldoptimizer.com^$popup +||traversedlp.com^ +||traversedlp.com^$popup +||trueleadid.com^ +||trueleadid.com^$popup +||trustedform.com^ +||trustedform.com^$popup +||cpmstatsart.com^ +||cpmstatsart.com^$popup +! https://github.com/DandelionSprout/adfilt/issues/287 +||youtuba.com^ +||youtuba.com^$popup +||polyhymnia-mar.com^ +||polyhymnia-mar.com^$popup +||trktrk.club^ +||trktrk.club^$popup +||virpropcnow.xyz^ +||virpropcnow.xyz^$popup +||betacdn.xyz^ +||betacdn.xyz^$popup +||avprotectionoverview.com^ +||avprotectionoverview.com^$popup +||tkqlhce.com^ +||tkqlhce.com^$popup +||emjcd.com^ +||emjcd.com^$popup ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -1867,7 +1943,7 @@ toorgle.net##.join ||0byv9mgbn0.com^$popup ||0eijh8996i.com^ ||0eijh8996i.com^$popup -||0gctp5ht.top^ + ||0gctp5ht.top^$popup ||0h6djpk8fn.com^ ||0h6djpk8fn.com^$popup @@ -1975,7 +2051,7 @@ toorgle.net##.join ||3i1cx7b9nupt.com^$popup ||3npsgv2sx5.com^ ||3npsgv2sx5.com^$popup -||3r1kwxcd.top^ + ||3r1kwxcd.top^$popup ||3rpagb7k11.com^ ||3rpagb7k11.com^$popup @@ -2173,7 +2249,7 @@ toorgle.net##.join ||9purdfe9xg.com^$popup ||9tumza4dp4o9.com^ ||9tumza4dp4o9.com^$popup -||9utwbj08.top^ + ||9utwbj08.top^$popup ||9xeqynu3gt7c.com^ ||9xeqynu3gt7c.com^$popup @@ -4767,7 +4843,7 @@ toorgle.net##.join ||easygoingtouchybribe.com^$popup ||eavesdroppingsickleemotionally.com^ ||eavesdroppingsickleemotionally.com^$popup -||eawp2ra7.top^ + ||eawp2ra7.top^$popup ||ebonyrecognize.com^ ||ebonyrecognize.com^$popup @@ -4839,7 +4915,7 @@ toorgle.net##.join ||ejectsurvivalfollower.com^$popup ||ejurzsax.com^ ||ejurzsax.com^$popup -||ektmvpwa.top^ + ||ektmvpwa.top^$popup ||elbowcasualtyapprove.com^ ||elbowcasualtyapprove.com^$popup @@ -5585,7 +5661,7 @@ toorgle.net##.join ||futilereposerefreshments.com^$popup ||fvbcxlwarfjg.com^ ||fvbcxlwarfjg.com^$popup -||fw5e8yga.top^ + ||fw5e8yga.top^$popup ||fwrrcnkzn5ik.com^ ||fwrrcnkzn5ik.com^$popup @@ -6275,7 +6351,7 @@ toorgle.net##.join ||hzr0dm28m17c.com^$popup ||i0s26ol9.com^ ||i0s26ol9.com^$popup -||i4rsrcj6.top^ + ||i4rsrcj6.top^$popup ||i4tvy8vk9f74.com^ ||i4tvy8vk9f74.com^$popup @@ -9951,7 +10027,7 @@ toorgle.net##.join ||springcorridorworking.com^$popup ||springmild.com^ ||springmild.com^$popup -||sprm4xcn.top^ + ||sprm4xcn.top^$popup ||sproutstarbarnacle.com^ ||sproutstarbarnacle.com^$popup @@ -10975,7 +11051,7 @@ toorgle.net##.join ||w3plywbd72pf.com^$popup ||w5e8rg3ptq.com^ ||w5e8rg3ptq.com^$popup -||wa4etw9l.top^ + ||wa4etw9l.top^$popup ||wafflesgenuine.com^ ||wafflesgenuine.com^$popup @@ -11235,7 +11311,7 @@ toorgle.net##.join ||x9b05t5jsqje.com^$popup ||xg084mgkfsfk.com^ ||xg084mgkfsfk.com^$popup -||xgrwjbui.top^ + ||xgrwjbui.top^$popup ||xhzz3moj1dsd.com^ ||xhzz3moj1dsd.com^$popup @@ -11279,7 +11355,7 @@ toorgle.net##.join ||yeastwrinklefatigue.com^$popup ||yg592gpmrh0q.com^ ||yg592gpmrh0q.com^$popup -||yim3eyv5.top^ + ||yim3eyv5.top^$popup ||yjwtolgjjeky.com^ ||yjwtolgjjeky.com^$popup @@ -11438,7 +11514,7 @@ toorgle.net##.join ||box-surprisebynavi.net.ru^$popup ||bruteclub.ru^ ||bruteclub.ru^$popup -||cabura.loan^ + ||cabura.loan^$popup ||case-give.com^ ||case-give.com^$popup @@ -11744,7 +11820,7 @@ toorgle.net##.join ||rocketleague-drops.com^$popup ||rocketleague-give.ru.com^ ||rocketleague-give.ru.com^$popup -||roll-skins.tk^ + ||roll-skins.tk^$popup ||rollskin.ru^ ||rollskin.ru^$popup diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index b95addde0..67e311cfa 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from β‰₯2019] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 01October2021v2-Beta +! Version: 02October2021v2-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -100,12 +100,12 @@ bing.com##.b_algo:has(a[href*=".top/"]) ||hufilter.hu^$document ||fredfiber.no^$document ||securemecca.com^$document -||1hos.cf^$document -||1hosts.cf^$document + + ||everythingisnt.com^$document ||vin-plastiks.com^$document ||adblock-listefr.com^$document -||intr0.cf^$document + ||njabl.org^$document ||dutchmega.nl^$document ||juvander.net^$document @@ -257,7 +257,7 @@ msn.com##.irisbanner ! β€”β€”β€” Entries from Β«abuse.ch ZeuS BlocklistΒ», which was discontinued on the 8th of July 2019. β€”β€”β€” ||afobal.cl^$document ||alvoportas.com.br^$document -||blogerjijer.pw^$document + ||bright.su^$document ||domnicpeter.in.net^$document ||dzitech.net^$document @@ -747,10 +747,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||googleanalytics.buzz^$empty,important ||googleanalytics.cyou^$empty,important ||googleanalytics.monster^$empty,important -||googleanalytics.top^$empty,important + ||googleshopanalytic.icu^$empty,important ||googletagmanager.cyou^$empty,important -||googletagmanager.top^$empty,important + ||gstatic.club^$empty,important ||gstatic.cyou^$empty,important ||hihihi.cyou^$empty,important @@ -779,7 +779,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||zerr.club^$empty,important ||albumzips.xyz^$empty,important ||aleinvest.xyz^$empty,important -||bitminer.ga^$empty,important + ||camillesanz.com^$empty,important ||fblaster.com^$empty,important ||googleanalytics.icu^$empty,important @@ -867,7 +867,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||shaynefrancklynwynne.site^$empty,important ||zorinetownspiegelman.casa^$empty,important ||ssielearning.com^$empty,important -||canhila.tk^$empty,important + ||paymetconfirm.com^$empty,important ||fasteasyupdates.com^$empty,important ||buyer-remindment.com^$empty,important @@ -895,9 +895,9 @@ zombooru.com##a[href="http://www.hard55.com"] ||qwertys.info^$empty,important ||server1.2makestorage.com^$empty,important ||vrthcobj.com^$empty,important -||moregy07.top^$empty,important -||lopxep10.top^$empty,important -||xeihqe72.top^$empty,important + + + ||qoisocrldvnesni.ru^$empty,important ||xawsnngjljanxof.su^$empty,important ||bdvwidxfiextwof.ru^$empty,important @@ -906,7 +906,7 @@ zombooru.com##a[href="http://www.hard55.com"] ||vloxaloyfmdqxti.ru^$empty,important ! https://github.com/DandelionSprout/adfilt/issues/244 ||rblxexploits.net^$empty,important -||youneerdmo.top^$empty,important + ||image-find.com^$empty,important ||planduringe.fun^$empty,important ://linkvertise.com/23001/OxygenU^$document @@ -924,7 +924,7 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/DandelionSprout/adfilt/issues/251#issue-974102211 ||discordapp.cam^$empty,important ||nanorgin.ydns.eu^$empty,important -||astdg.top^$empty,important + ||thefreshstuffs.at^$empty,important ||thefreshstuffs.mu^$empty,important ||cocinasintonterias.com^$empty,important @@ -1058,7 +1058,7 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/AdguardTeam/AdguardFilters/issues/90947 ! https://www.virustotal.com/gui/file/f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b/community ! https://www.virustotal.com/gui/url/cea7b7ccd54fabd22b14cff5521f13b9dca4fd06d47d0bc2119dac6b77ecc04d/detection -||serrtjw256jw565w.gq^$empty,important + ! https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 ||totalav.com^$empty,important ! https://www.virustotal.com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community @@ -1149,6 +1149,46 @@ zombooru.com##a[href="http://www.hard55.com"] ||natnlconsmrctr.com^$empty,important ||jsontdsexit.com^$empty,important ||therewardboost.com^$empty,important +! https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931753495 +||agkn.com^$empty,important +||best-prizes.life^$empty,important +||cakecdn.com^$empty,important +||cdn925.com^$empty,important +||clickagy.com^$empty,important +||clicken.us^$empty,important +||cloud-storage.store^$empty,important +||cpmstatsart.com^$empty,important +||d.clarity.ms^$empty,important +||d2m2wsoho8qq12.cloudfront.net^$empty,important +||data.deduce.com^$empty,important +||findanswersnow.net^$empty,important +||gogle.net^$empty,important +||gpush.cogocast.net^$empty,important +||info.leadid.com^$empty,important +||lijit.com^$empty,important +||listrakbi.com^$empty,important +||partner.mediawallahscript.com^$document,popup +||pippio.com^$empty,important +||retailproductsusa.com^$empty,important +||rlcdn.com^$empty,important +||signupandturnyourscreenoffsafepowernow.date^$empty,important +||static.imghst-de.com^$empty,important +||static.traversedlp.com^$empty,important +||tag.cogocast.net^$empty,important +||tag.yieldoptimizer.com^$document,popup +||traversedlp.com^$empty,important +||trueleadid.com^$empty,important +||trustedform.com^$empty,important +||cpmstatsart.com^$empty,important +! https://github.com/DandelionSprout/adfilt/issues/287 +||youtuba.com^$empty,important +||polyhymnia-mar.com^$empty,important +||trktrk.club^$empty,important +||virpropcnow.xyz^$empty,important +||betacdn.xyz^$empty,important +||avprotectionoverview.com^$empty,important +||tkqlhce.com^$empty,important +||emjcd.com^$empty,important ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -1235,7 +1275,7 @@ toorgle.net##.join ||0azx1.com^$empty,important ||0byv9mgbn0.com^$empty,important ||0eijh8996i.com^$empty,important -||0gctp5ht.top^$empty,important + ||0h6djpk8fn.com^$empty,important ||0i56tboc6j5i.com^$empty,important ||0klxjejyxak3.com^$empty,important @@ -1289,7 +1329,7 @@ toorgle.net##.join ||3e61gdwn1r.com^$empty,important ||3i1cx7b9nupt.com^$empty,important ||3npsgv2sx5.com^$empty,important -||3r1kwxcd.top^$empty,important + ||3rpagb7k11.com^$empty,important ||3sk7d418al8u.com^$empty,important ||3svrio4adbdb.com^$empty,important @@ -1388,7 +1428,7 @@ toorgle.net##.join ||9lkkb7t18a2z.com^$empty,important ||9purdfe9xg.com^$empty,important ||9tumza4dp4o9.com^$empty,important -||9utwbj08.top^$empty,important + ||9xeqynu3gt7c.com^$empty,important ||a40hd1mh5deq.com^$empty,important ||a8rm1m4msbbh.com^$empty,important @@ -2685,7 +2725,7 @@ toorgle.net##.join ||easygoinghomesickimprobable.com^$empty,important ||easygoingtouchybribe.com^$empty,important ||eavesdroppingsickleemotionally.com^$empty,important -||eawp2ra7.top^$empty,important + ||ebonyrecognize.com^$empty,important ||ebookspaniardglossary.com^$empty,important ||echorefillundertaking.com^$empty,important @@ -2721,7 +2761,7 @@ toorgle.net##.join ||ejectfeudburly.com^$empty,important ||ejectsurvivalfollower.com^$empty,important ||ejurzsax.com^$empty,important -||ektmvpwa.top^$empty,important + ||elbowcasualtyapprove.com^$empty,important ||elbowlullworn.com^$empty,important ||eldergale.com^$empty,important @@ -3094,7 +3134,7 @@ toorgle.net##.join ||furrowrobbery.com^$empty,important ||futilereposerefreshments.com^$empty,important ||fvbcxlwarfjg.com^$empty,important -||fw5e8yga.top^$empty,important + ||fwrrcnkzn5ik.com^$empty,important ||fz5akngy5o6r.com^$empty,important ||g1dxj6q1qfl2.com^$empty,important @@ -3439,7 +3479,7 @@ toorgle.net##.join ||hypothesisalternate.com^$empty,important ||hzr0dm28m17c.com^$empty,important ||i0s26ol9.com^$empty,important -||i4rsrcj6.top^$empty,important + ||i4tvy8vk9f74.com^$empty,important ||i5iog3mlrw.com^$empty,important ||i7ece0xrg4nx.com^$empty,important @@ -5277,7 +5317,7 @@ toorgle.net##.join ||spreadingmulticultural.com^$empty,important ||springcorridorworking.com^$empty,important ||springmild.com^$empty,important -||sprm4xcn.top^$empty,important + ||sproutstarbarnacle.com^$empty,important ||sproutunfairprovisions.com^$empty,important ||spruceatom.com^$empty,important @@ -5789,7 +5829,7 @@ toorgle.net##.join ||w3mx0k35ho.com^$empty,important ||w3plywbd72pf.com^$empty,important ||w5e8rg3ptq.com^$empty,important -||wa4etw9l.top^$empty,important + ||wafflesgenuine.com^$empty,important ||wagerestrictedrebuild.com^$empty,important ||waggonerchildrensurly.com^$empty,important @@ -5919,7 +5959,7 @@ toorgle.net##.join ||x7xirtzmot.com^$empty,important ||x9b05t5jsqje.com^$empty,important ||xg084mgkfsfk.com^$empty,important -||xgrwjbui.top^$empty,important + ||xhzz3moj1dsd.com^$empty,important ||xmlterra.com^$empty,important ||xo28pclotovi.com^$empty,important @@ -5941,7 +5981,7 @@ toorgle.net##.join ||ye185hcamw.com^$empty,important ||yeastwrinklefatigue.com^$empty,important ||yg592gpmrh0q.com^$empty,important -||yim3eyv5.top^$empty,important + ||yjwtolgjjeky.com^$empty,important ||ylwu7xm3a1wv.com^$empty,important ||yogascaldhighjack.com^$empty,important @@ -6028,7 +6068,7 @@ toorgle.net##.join ||bigesports.ru^$empty,important ||box-surprisebynavi.net.ru^$empty,important ||bruteclub.ru^$empty,important -||cabura.loan^$empty,important + ||case-give.com^$empty,important ||cawanmei.ru^$empty,important ||cis-rankig.ru^$empty,important @@ -6181,7 +6221,7 @@ toorgle.net##.join ||rocket-tradings.com^$empty,important ||rocketleague-drops.com^$empty,important ||rocketleague-give.ru.com^$empty,important -||roll-skins.tk^$empty,important + ||rollskin.ru^$empty,important ||rust-chest.com^$empty,important ||rust-get.com^$empty,important diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 1194863dc..70fc07e44 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.6] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering) -! Version: 01October2021v2-Beta +! Version: 02October2021v2-Beta ! Expires: 5 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -101,12 +101,12 @@ ||hufilter.hu^ ||fredfiber.no^ ||securemecca.com^ -||1hos.cf^ -||1hosts.cf^ + + ||everythingisnt.com^ ||vin-plastiks.com^ ||adblock-listefr.com^ -||intr0.cf^ + ||njabl.org^ ||dutchmega.nl^ ||juvander.net^ @@ -209,7 +209,7 @@ ! β€”β€”β€” Entries from Β«abuse.ch ZeuS BlocklistΒ», which was discontinued on the 8th of July 2019. β€”β€”β€” ||afobal.cl^ ||alvoportas.com.br^ -||blogerjijer.pw^ + ||bright.su^ ||domnicpeter.in.net^ ||dzitech.net^ @@ -662,10 +662,10 @@ ||googleanalytics.buzz^ ||googleanalytics.cyou^ ||googleanalytics.monster^ -||googleanalytics.top^ + ||googleshopanalytic.icu^ ||googletagmanager.cyou^ -||googletagmanager.top^ + ||gstatic.club^ ||gstatic.cyou^ ||hihihi.cyou^ @@ -694,7 +694,7 @@ ||zerr.club^ ||albumzips.xyz^ ||aleinvest.xyz^ -||bitminer.ga^ + ||camillesanz.com^ ||fblaster.com^ ||googleanalytics.icu^ @@ -782,7 +782,7 @@ ||shaynefrancklynwynne.site^ ||zorinetownspiegelman.casa^ ||ssielearning.com^ -||canhila.tk^ + ||paymetconfirm.com^ ||fasteasyupdates.com^ ||buyer-remindment.com^ @@ -810,9 +810,9 @@ ||qwertys.info^ ||server1.2makestorage.com^ ||vrthcobj.com^ -||moregy07.top^ -||lopxep10.top^ -||xeihqe72.top^ + + + ||qoisocrldvnesni.ru^ ||xawsnngjljanxof.su^ ||bdvwidxfiextwof.ru^ @@ -821,7 +821,7 @@ ||vloxaloyfmdqxti.ru^ ! https://github.com/DandelionSprout/adfilt/issues/244 ||rblxexploits.net^ -||youneerdmo.top^ + ||image-find.com^ ||planduringe.fun^ ://linkvertise.com/23001/OxygenU^ @@ -839,7 +839,7 @@ ! https://github.com/DandelionSprout/adfilt/issues/251#issue-974102211 ||discordapp.cam^ ||nanorgin.ydns.eu^ -||astdg.top^ + ||thefreshstuffs.at^ ||thefreshstuffs.mu^ ||cocinasintonterias.com^ @@ -974,7 +974,7 @@ ! https://github.com/AdguardTeam/AdguardFilters/issues/90947 ! https://www.virustotal.com/gui/file/f29908da1b8065356704e746f9e282378a7e5ae65c753e2e9fe02b214b5b792b/community ! https://www.virustotal.com/gui/url/cea7b7ccd54fabd22b14cff5521f13b9dca4fd06d47d0bc2119dac6b77ecc04d/detection -||serrtjw256jw565w.gq^ + ! https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849 ||totalav.com^ ! https://www.virustotal.com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community @@ -1065,6 +1065,46 @@ ||natnlconsmrctr.com^ ||jsontdsexit.com^ ||therewardboost.com^ +! https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931753495 +||agkn.com^ +||best-prizes.life^ +||cakecdn.com^ +||cdn925.com^ +||clickagy.com^ +||clicken.us^ +||cloud-storage.store^ +||cpmstatsart.com^ +||d.clarity.ms^ +||d2m2wsoho8qq12.cloudfront.net^ +||data.deduce.com^ +||findanswersnow.net^ +||gogle.net^ +||gpush.cogocast.net^ +||info.leadid.com^ +||lijit.com^ +||listrakbi.com^ +||partner.mediawallahscript.com^ +||pippio.com^ +||retailproductsusa.com^ +||rlcdn.com^ +||signupandturnyourscreenoffsafepowernow.date^ +||static.imghst-de.com^ +||static.traversedlp.com^ +||tag.cogocast.net^ +||tag.yieldoptimizer.com^ +||traversedlp.com^ +||trueleadid.com^ +||trustedform.com^ +||cpmstatsart.com^ +! https://github.com/DandelionSprout/adfilt/issues/287 +||youtuba.com^ +||polyhymnia-mar.com^ +||trktrk.club^ +||virpropcnow.xyz^ +||betacdn.xyz^ +||avprotectionoverview.com^ +||tkqlhce.com^ +||emjcd.com^ ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -1149,7 +1189,7 @@ ||0azx1.com^ ||0byv9mgbn0.com^ ||0eijh8996i.com^ -||0gctp5ht.top^ + ||0h6djpk8fn.com^ ||0i56tboc6j5i.com^ ||0klxjejyxak3.com^ @@ -1203,7 +1243,7 @@ ||3e61gdwn1r.com^ ||3i1cx7b9nupt.com^ ||3npsgv2sx5.com^ -||3r1kwxcd.top^ + ||3rpagb7k11.com^ ||3sk7d418al8u.com^ ||3svrio4adbdb.com^ @@ -1302,7 +1342,7 @@ ||9lkkb7t18a2z.com^ ||9purdfe9xg.com^ ||9tumza4dp4o9.com^ -||9utwbj08.top^ + ||9xeqynu3gt7c.com^ ||a40hd1mh5deq.com^ ||a8rm1m4msbbh.com^ @@ -2599,7 +2639,7 @@ ||easygoinghomesickimprobable.com^ ||easygoingtouchybribe.com^ ||eavesdroppingsickleemotionally.com^ -||eawp2ra7.top^ + ||ebonyrecognize.com^ ||ebookspaniardglossary.com^ ||echorefillundertaking.com^ @@ -2635,7 +2675,7 @@ ||ejectfeudburly.com^ ||ejectsurvivalfollower.com^ ||ejurzsax.com^ -||ektmvpwa.top^ + ||elbowcasualtyapprove.com^ ||elbowlullworn.com^ ||eldergale.com^ @@ -3008,7 +3048,7 @@ ||furrowrobbery.com^ ||futilereposerefreshments.com^ ||fvbcxlwarfjg.com^ -||fw5e8yga.top^ + ||fwrrcnkzn5ik.com^ ||fz5akngy5o6r.com^ ||g1dxj6q1qfl2.com^ @@ -3353,7 +3393,7 @@ ||hypothesisalternate.com^ ||hzr0dm28m17c.com^ ||i0s26ol9.com^ -||i4rsrcj6.top^ + ||i4tvy8vk9f74.com^ ||i5iog3mlrw.com^ ||i7ece0xrg4nx.com^ @@ -5191,7 +5231,7 @@ ||spreadingmulticultural.com^ ||springcorridorworking.com^ ||springmild.com^ -||sprm4xcn.top^ + ||sproutstarbarnacle.com^ ||sproutunfairprovisions.com^ ||spruceatom.com^ @@ -5703,7 +5743,7 @@ ||w3mx0k35ho.com^ ||w3plywbd72pf.com^ ||w5e8rg3ptq.com^ -||wa4etw9l.top^ + ||wafflesgenuine.com^ ||wagerestrictedrebuild.com^ ||waggonerchildrensurly.com^ @@ -5833,7 +5873,7 @@ ||x7xirtzmot.com^ ||x9b05t5jsqje.com^ ||xg084mgkfsfk.com^ -||xgrwjbui.top^ + ||xhzz3moj1dsd.com^ ||xmlterra.com^ ||xo28pclotovi.com^ @@ -5855,7 +5895,7 @@ ||ye185hcamw.com^ ||yeastwrinklefatigue.com^ ||yg592gpmrh0q.com^ -||yim3eyv5.top^ + ||yjwtolgjjeky.com^ ||ylwu7xm3a1wv.com^ ||yogascaldhighjack.com^ @@ -5942,7 +5982,7 @@ ||bigesports.ru^ ||box-surprisebynavi.net.ru^ ||bruteclub.ru^ -||cabura.loan^ + ||case-give.com^ ||cawanmei.ru^ ||cis-rankig.ru^ @@ -6095,7 +6135,7 @@ ||rocket-tradings.com^ ||rocketleague-drops.com^ ||rocketleague-give.ru.com^ -||roll-skins.tk^ + ||rollskin.ru^ ||rust-chest.com^ ||rust-get.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 3e705f73e..d8cc6b655 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 01October2021v2-Beta +# Version: 02October2021v2-Beta # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -883,6 +883,44 @@ spnccrzone.com natnlconsmrctr.com jsontdsexit.com therewardboost.com +agkn.com +best-prizes.life +cakecdn.com +cdn925.com +clickagy.com +clicken.us +cloud-storage.store +cpmstatsart.com +d.clarity.ms +d2m2wsoho8qq12.cloudfront.net +data.deduce.com +findanswersnow.net +gogle.net +gpush.cogocast.net +info.leadid.com +lijit.com +listrakbi.com +partner.mediawallahscript.com +pippio.com +retailproductsusa.com +rlcdn.com +signupandturnyourscreenoffsafepowernow.date +static.imghst-de.com +static.traversedlp.com +tag.cogocast.net +tag.yieldoptimizer.com +traversedlp.com +trueleadid.com +trustedform.com +cpmstatsart.com +youtuba.com +polyhymnia-mar.com +trktrk.club +virpropcnow.xyz +betacdn.xyz +avprotectionoverview.com +tkqlhce.com +emjcd.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 0b584fc78..663f8a564 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 01October2021v2-Alpha +# Version: 02October2021v2-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -883,6 +883,44 @@ 127.0.0.1 natnlconsmrctr.com 127.0.0.1 jsontdsexit.com 127.0.0.1 therewardboost.com +127.0.0.1 agkn.com +127.0.0.1 best-prizes.life +127.0.0.1 cakecdn.com +127.0.0.1 cdn925.com +127.0.0.1 clickagy.com +127.0.0.1 clicken.us +127.0.0.1 cloud-storage.store +127.0.0.1 cpmstatsart.com +127.0.0.1 d.clarity.ms +127.0.0.1 d2m2wsoho8qq12.cloudfront.net +127.0.0.1 data.deduce.com +127.0.0.1 findanswersnow.net +127.0.0.1 gogle.net +127.0.0.1 gpush.cogocast.net +127.0.0.1 info.leadid.com +127.0.0.1 lijit.com +127.0.0.1 listrakbi.com +127.0.0.1 partner.mediawallahscript.com +127.0.0.1 pippio.com +127.0.0.1 retailproductsusa.com +127.0.0.1 rlcdn.com +127.0.0.1 signupandturnyourscreenoffsafepowernow.date +127.0.0.1 static.imghst-de.com +127.0.0.1 static.traversedlp.com +127.0.0.1 tag.cogocast.net +127.0.0.1 tag.yieldoptimizer.com +127.0.0.1 traversedlp.com +127.0.0.1 trueleadid.com +127.0.0.1 trustedform.com +127.0.0.1 cpmstatsart.com +127.0.0.1 youtuba.com +127.0.0.1 polyhymnia-mar.com +127.0.0.1 trktrk.club +127.0.0.1 virpropcnow.xyz +127.0.0.1 betacdn.xyz +127.0.0.1 avprotectionoverview.com +127.0.0.1 tkqlhce.com +127.0.0.1 emjcd.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” 127.0.0.1 downloadprovider.me diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 66a0aac68..b308a6bb2 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 01October2021v2-Alpha +# Version: 02October2021v2-Alpha # Expires: 5 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -910,6 +910,44 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + {+block} # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 64052ab35..628d689ab 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 01October2021v2-Beta +# Version: 02October2021v2-Beta : expires = 5 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -1055,6 +1055,46 @@ msFilterList -d natnlconsmrctr.com -d jsontdsexit.com -d therewardboost.com +# https://github.com/DandelionSprout/adfilt/issues/188#issuecomment-931753495 +-d agkn.com +-d best-prizes.life +-d cakecdn.com +-d cdn925.com +-d clickagy.com +-d clicken.us +-d cloud-storage.store +-d cpmstatsart.com +-d d.clarity.ms +-d d2m2wsoho8qq12.cloudfront.net +-d data.deduce.com +-d findanswersnow.net +-d gogle.net +-d gpush.cogocast.net +-d info.leadid.com +-d lijit.com +-d listrakbi.com +-d partner.mediawallahscript.com +-d pippio.com +-d retailproductsusa.com +-d rlcdn.com +-d signupandturnyourscreenoffsafepowernow.date +-d static.imghst-de.com +-d static.traversedlp.com +-d tag.cogocast.net +-d tag.yieldoptimizer.com +-d traversedlp.com +-d trueleadid.com +-d trustedform.com +-d cpmstatsart.com +# https://github.com/DandelionSprout/adfilt/issues/287 +-d youtuba.com +-d polyhymnia-mar.com +-d trktrk.club +-d virpropcnow.xyz +-d betacdn.xyz +-d avprotectionoverview.com +-d tkqlhce.com +-d emjcd.com # β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 880a61069..8f036722c 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -1,5 +1,5 @@ # Title: Dandelion Sprout's and other adblocker lists' IPs -# Version: 25September2021v4-Beta +# Version: 01October2021v2-Beta # Expires: 5 days # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish. # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -85,6 +85,7 @@ 190.238.183.5 27.220.253.78 192.3.194.242 +# Copied from Β«uBlock Filters - Badware RisksΒ» because it has proven to be a very good entry 192.243.59.12 192.243.59.13 192.243.59.20