From 920c31b91ce3510d584ae2c2cbde831e7a086dc1 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Thu, 21 May 2026 21:10:38 +0200 Subject: [PATCH] Fix https://github.com/hagezi/dns-blocklists/issues/10269. --- .../AntiMalwareABP.txt | 845 ++---------------- .../AntiMalwareAdGuard.txt | 450 ++-------- .../AntiMalwareAdGuardHome.txt | 423 +-------- .../AntiMalwareDomains.txt | 432 +-------- .../AntiMalwareHosts.txt | 432 +-------- .../AntiMalwarePrivoxy.action | 428 +-------- .../AntiMalwareTPL.tpl | 435 +-------- ...and other adblocker lists' IPs for P2P.p2p | 8 +- ...out's and other adblocker lists' IPs.ipset | 8 +- 9 files changed, 307 insertions(+), 3154 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index e53522b26..6f7dd61ee 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 29April2026v1 +! Version: 21May2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -9,7 +9,7 @@ ! As of June 2023, Pi-Hole FTL ≥5.22 users should rather use https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, which is a ||-type list version designed specifically for DNS tools. ! Legitimate use is almost non-existent, but has a tiny userbase in Japan and among upstart coding experiments. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||top^$domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top|~to|~yggtorrent.top|~yggleak.top|~asiaon.top|~voxel.top|~passt.top|~polar.top|~rifton.top|~rugaming.top|~doubledouble.top|~hedon-haven.top|~outlands.top|~tk-web.top|~qpmegathread.top|~qmk.top +||top^$domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top|~to|~yggtorrent.top|~yggleak.top|~asiaon.top|~voxel.top|~passt.top|~polar.top|~rifton.top|~rugaming.top|~doubledouble.top|~hedon-haven.top|~outlands.top|~tk-web.top|~qpmegathread.top|~qmk.top|~mgytr.top|~girlskissing.top|~luxferre.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^ @@/^.*(tech|project|linux).*\.top(/[a-z0-9_-]?.*)?$/ @@ -5949,788 +5949,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://new•reddit•com/r/engrish/comments/10zs6f6/low_budget_scam/ ||54.219.218.169^ -! https://new•reddit•com/r/engrish/comments/10z8r2u/well_you_tried/ -||0365alert.com^ -||0365alert.com^$popup -||0365online.com^ -||0365online.com^$popup -||365-notifcation.com^ -||365-notifcation.com^$popup -||365-notificaution.com^ -||365-notificaution.com^$popup -||accessmyvdi.com^ -||accessmyvdi.com^$popup -||accessyouraccount.com^ -||accessyouraccount.com^$popup -||account-issues.com^ -||account-issues.com^$popup -||account-issues.net^ -||account-issues.net^$popup -||account-management-services.com^ -||account-management-services.com^$popup -||account-terminations.com^ -||account-terminations.com^$popup -||accountsissues.com^ -||accountsissues.com^$popup -||alerte-factures.com^ -||alerte-factures.com^$popup -||allthingssporting.com^ -||allthingssporting.com^$popup -||amazon-fraud-detection.com^ -||amazon-fraud-detection.com^$popup -||amcarebank.com^ -||amcarebank.com^$popup -||app11ee.com^ -||app11ee.com^$popup -||apple-infosec.com^ -||apple-infosec.com^$popup -||assistthechildren.com^ -||assistthechildren.com^$popup -||auction-it-all.com^ -||auction-it-all.com^$popup -||audit-optix.com^ -||audit-optix.com^$popup -||auditoptix.com^ -||auditoptix.com^$popup -||notify-chase.com^ -||notify-chase.com^$popup -||bab-l-phish.com^ -||bab-l-phish.com^$popup -||babbelphish.com^ -||babbelphish.com^$popup -||bablphish.com^ -||bablphish.com^$popup -||badge-services.com^ -||badge-services.com^$popup -||badgingservices.info^ -||badgingservices.info^$popup -||bankingonit.info^ -||bankingonit.info^$popup -||barracuda-security-awareness-training.com^ -||barracuda-security-awareness-training.com^$popup -||barracuda-security-awareness.com^ -||barracuda-security-awareness.com^$popup -||barracuda-security-training.com^ -||barracuda-security-training.com^$popup -||bell-rewards.com^ -||bell-rewards.com^$popup -||benefitsadvisornetwork.com^ -||benefitsadvisornetwork.com^$popup -||benefitsforemployee.com^ -||benefitsforemployee.com^$popup -||bestplacestowork.info^ -||bestplacestowork.info^$popup -||bestworkplacesurvey.com^ -||bestworkplacesurvey.com^$popup -||blackboard-online.com^ -||blackboard-online.com^$popup -||blackfridaydealmakers.com^ -||blackfridaydealmakers.com^$popup -||board-portal.com^ -||board-portal.com^$popup -||building-service.net^ -||building-service.net^$popup -||businessconf03.com^ -||businessconf03.com^$popup -||phishline.com^ -||phishline.com^$popup -||c1mb.com^ -||c1mb.com^$popup -||c1mb.net^ -||c1mb.net^$popup -||c1mb.org^ -||c1mb.org^$popup -||canvas-education.com^ -||canvas-education.com^$popup -||cardinvitenow.com^ -||cardinvitenow.com^$popup -||cardservice-fraud.com^ -||cardservice-fraud.com^$popup -||cardservicesfraud.com^ -||cardservicesfraud.com^$popup -||channeloptix.com^ -||channeloptix.com^$popup -||chase-billing.com^ -||chase-billing.com^$popup -||chasehealthadvanceonline.com^ -||chasehealthadvanceonline.com^$popup -||cheapseatsxpress.com^ -||cheapseatsxpress.com^$popup -||ciimb.com^ -||ciimb.com^$popup -||cimbb.org^ -||cimbb.org^$popup -||clipceteradeals.com^ -||clipceteradeals.com^$popup -||clouddrivestorage.org^ -||clouddrivestorage.org^$popup -||clouddriveuploads.net^ -||clouddriveuploads.net^$popup -||cloudfiledropper.com^ -||cloudfiledropper.com^$popup -||commerceservicecorp.org^ -||commerceservicecorp.org^$popup -||greetingcardforyou.com^ -||greetingcardforyou.com^$popup -||communitybankingtrends.com^ -||communitybankingtrends.com^$popup -||connectmesafe.com^ -||connectmesafe.com^$popup -||corp-erp.com^ -||corp-erp.com^$popup -||corporate-policy-updates.com^ -||corporate-policy-updates.com^$popup -||corporate38dk39.com^ -||corporate38dk39.com^$popup -||corporatefileaccess.com^ -||corporatefileaccess.com^$popup -||corporateintranet.net^ -||corporateintranet.net^$popup -||covid-funding.co^ -||covid-funding.co^$popup -||covid-relief.co^ -||covid-relief.co^$popup -||unitedshipmentservice.com^ -||unitedshipmentservice.com^$popup -||crditcrd.com^ -||crditcrd.com^$popup -||credit-reporting.org^ -||credit-reporting.org^$popup -||credit-sleuth.com^ -||credit-sleuth.com^$popup -||cronwell.co.uk^ -||cronwell.co.uk^$popup -||currentnewsfeed.com^ -||currentnewsfeed.com^$popup -||managedservicesonline.info^ -||managedservicesonline.info^$popup -||dclab-training.com^ -||dclab-training.com^$popup -||desktopaccessvdi.com^ -||desktopaccessvdi.com^$popup -||digitalemailspace.com^ -||digitalemailspace.com^$popup -||discounthandbagz.com^ -||discounthandbagz.com^$popup -||discountwireless.us^ -||discountwireless.us^$popup -||disrictcourt.com^ -||disrictcourt.com^$popup -||doccusigns.com^ -||doccusigns.com^$popup -||documentscanner.info^ -||documentscanner.info^$popup -||donotcallanymore.com^ -||donotcallanymore.com^$popup -||downfinancing.com^ -||downfinancing.com^$popup -||drive-gloogle.com^ -||drive-gloogle.com^$popup -||driveshareconnections.com^ -||driveshareconnections.com^$popup -||dsinergi.net^ -||dsinergi.net^$popup -||earthquake-preparations.com^ -||earthquake-preparations.com^$popup -||einvitesnow.com^ -||einvitesnow.com^$popup -||elltradingcompany.com^ -||elltradingcompany.com^$popup -||email365access.com^ -||email365access.com^$popup -||emailsupp0rt-g00gel.com^ -||emailsupp0rt-g00gel.com^$popup -||emailsupp0rt-g00gle.com^ -||emailsupp0rt-g00gle.com^$popup -||emailupgrade.net^ -||emailupgrade.net^$popup -||emcorgroupp.com^ -||emcorgroupp.com^$popup -||emcour.net^ -||emcour.net^$popup -||emcourgroup.com^ -||emcourgroup.com^$popup -||employbenefitscenter.com^ -||employbenefitscenter.com^$popup -||employeepayrollservices.com^ -||employeepayrollservices.com^$popup -||endtrust.net^ -||endtrust.net^$popup -||enviroptix.com^ -||enviroptix.com^$popup -||erpcorporateaccess.com^ -||erpcorporateaccess.com^$popup -||estaffevents.com^ -||estaffevents.com^$popup -||executivemagazines.com^ -||executivemagazines.com^$popup -||executivespotlight.net^ -||executivespotlight.net^$popup -||express-package.com^ -||express-package.com^$popup -||expresspackageupdates.com^ -||expresspackageupdates.com^$popup -||faceblock-friend.com^ -||faceblock-friend.com^$popup -||fastwiretransfer.com^ -||fastwiretransfer.com^$popup -||fcdex-alerts.com^ -||fcdex-alerts.com^$popup -||federalship.com^ -||federalship.com^$popup -||fedex-alerts.com^ -||fedex-alerts.com^$popup -||filebox-sharing.com^ -||filebox-sharing.com^$popup -||files-storage.com^ -||files-storage.com^$popup -||financebusiness.net^ -||financebusiness.net^$popup -||financeng.net^ -||financeng.net^$popup -||financialbroke.com^ -||financialbroke.com^$popup -||fiveminuteinterviewers.com^ -||fiveminuteinterviewers.com^$popup -||flood-preparations.com^ -||flood-preparations.com^$popup -||flowersbycupid4u.com^ -||flowersbycupid4u.com^$popup -||folder-sharing.com^ -||folder-sharing.com^$popup -||fortunesbest.com^ -||fortunesbest.com^$popup -||fraud-optix.com^ -||fraud-optix.com^$popup -||frauddetected.info^ -||frauddetected.info^$popup -||fraudoptix.com^ -||fraudoptix.com^$popup -||freightinternationalservice.com^ -||freightinternationalservice.com^$popup -||frieghtinternationalservices.com^ -||frieghtinternationalservices.com^$popup -||g00gle-supp0rt.com^ -||g00gle-supp0rt.com^$popup -||gdriveonlinestorage.com^ -||gdriveonlinestorage.com^$popup -||getbestcreditscore.com^ -||getbestcreditscore.com^$popup -||getmysecurefile.com^ -||getmysecurefile.com^$popup -||giftcards-rewards.com^ -||giftcards-rewards.com^$popup -||giftcardwholesalers.com^ -||giftcardwholesalers.com^$popup -||giftonus.com^ -||giftonus.com^$popup -||global-mask-mandate.com^ -||global-mask-mandate.com^$popup -||glowphish.com^ -||glowphish.com^$popup -||gorilla-spreadsheet.com^ -||gorilla-spreadsheet.com^$popup -||gov-delivry.com^ -||gov-delivry.com^$popup -||grcoptix.com^ -||grcoptix.com^$popup -||green-optix.com^ -||green-optix.com^$popup -||greenoptix.com^ -||greenoptix.com^$popup -||hammerphish.com^ -||hammerphish.com^$popup -||hardwarewarehouse.net.au^ -||hardwarewarehouse.net.au^$popup -||hayniecpas-training.com^ -||hayniecpas-training.com^$popup -||health-news-reporting.com^ -||health-news-reporting.com^$popup -||healthadvance-online.net^ -||healthadvance-online.net^$popup -||healthalertadvisory.com^ -||healthalertadvisory.com^$popup -||hnc-vs.co^ -||hnc-vs.co^$popup -||homeofficecommunication.com^ -||homeofficecommunication.com^$popup -||homeofficecommunications.com^ -||homeofficecommunications.com^$popup -||linkedin-web.com^ -||linkedin-web.com^$popup -||hr-benifits.com^ -||hr-benifits.com^$popup -||hrpolicy-update.com^ -||hrpolicy-update.com^$popup -||humanresourceupdates.com^ -||humanresourceupdates.com^$popup -||humanresoursesolutions.com^ -||humanresoursesolutions.com^$popup -||hurricane-preparations.com^ -||hurricane-preparations.com^$popup -||infection-alerts.com^ -||infection-alerts.com^$popup -||instantprivacyupdaters.com^ -||instantprivacyupdaters.com^$popup -||instantremoteconnect.com^ -||instantremoteconnect.com^$popup -||investmentadvisornetwork.com^ -||investmentadvisornetwork.com^$popup -||invoice-alert.com^ -||invoice-alert.com^$popup -||invoice-alerts.com^ -||invoice-alerts.com^$popup -||invoicealerting.com^ -||invoicealerting.com^$popup -||invoiceprocessexpeditors.com^ -||invoiceprocessexpeditors.com^$popup -||ismyinternetfast.com^ -||ismyinternetfast.com^$popup -||it-email-services.com^ -||it-email-services.com^$popup -||it-email-services.com.au^ -||it-email-services.com.au^$popup -||itemailservices.com^ -||itemailservices.com^$popup -||itemailsystem.com^ -||itemailsystem.com^$popup -||itunes-invoice.com^ -||itunes-invoice.com^$popup -||itunes-security.com^ -||itunes-security.com^$popup -||itunesecurity.com^ -||itunesecurity.com^$popup -||jndbmedical.com^ -||jndbmedical.com^$popup -||join-team-meeting.com^ -||join-team-meeting.com^$popup -||joinmyconferenc.com^ -||joinmyconferenc.com^$popup -||jpmc-phishing-test.com^ -||jpmc-phishing-test.com^$popup -||jpmcmailservice.net^ -||jpmcmailservice.net^$popup -||keepmyaccountsecure.com^ -||keepmyaccountsecure.com^$popup -||keysaver-registration.com^ -||keysaver-registration.com^$popup -||kpmorganchase.com^ -||kpmorganchase.com^$popup -||lbfc.com^ -||lbfc.com^$popup -||legalissuereport.com^ -||legalissuereport.com^$popup -||likedin-connect.com^ -||likedin-connect.com^$popup -||link-it.us^ -||link-it.us^$popup -||linkedin-connection.com^ -||linkedin-connection.com^$popup -||linkit-4u.com^ -||linkit-4u.com^$popup -||linkusup.info^ -||linkusup.info^$popup -||m1crosoft.co^ -||m1crosoft.co^$popup -||mail365access.com^ -||mail365access.com^$popup -||mailquarentinereport.com^ -||mailquarentinereport.com^$popup -||mailstorage.co^ -||mailstorage.co^$popup -||marketing38493.com^ -||marketing38493.com^$popup -||massiveweightloss.net^ -||massiveweightloss.net^$popup -||medical-news-reporting.com^ -||medical-news-reporting.com^$popup -||medical-news.co.uk^ -||medical-news.co.uk^$popup -||medical-news.us^ -||medical-news.us^$popup -||messageconversion.com^ -||messageconversion.com^$popup -||messagingconnections.com^ -||messagingconnections.com^$popup -||microsoft-notificaution.com^ -||microsoft-notificaution.com^$popup -||riskimpact.org^ -||riskimpact.org^$popup -||mobile-data-notifications.com^ -||mobile-data-notifications.com^$popup -||mohmalaysia.com^ -||mohmalaysia.com^$popup -||musicalsoundstream.com^ -||musicalsoundstream.com^$popup -||my-joke-ofthe-day.com^ -||my-joke-ofthe-day.com^$popup -||mydrive-sharing.com^ -||mydrive-sharing.com^$popup -||myjokedaily.com^ -||myjokedaily.com^$popup -||mylivingequity.net^ -||mylivingequity.net^$popup -||myloyaltyrewardsnow.com^ -||myloyaltyrewardsnow.com^$popup -||mymedhealthreport.com^ -||mymedhealthreport.com^$popup -||myofficeaccounts.com^ -||myofficeaccounts.com^$popup -||myorderstatus.info^ -||myorderstatus.info^$popup -||myreputationonline.net^ -||myreputationonline.net^$popup -||mysafefax.com^ -||mysafefax.com^$popup -||mytoolkitmail.com^ -||mytoolkitmail.com^$popup -||myvirtualconfernce.com^ -||myvirtualconfernce.com^$popup -||netsharingservices.com^ -||netsharingservices.com^$popup -||networkconnecters.com^ -||networkconnecters.com^$popup -||networkdriveconnectors.com^ -||networkdriveconnectors.com^$popup -||networkdrivesharing.com^ -||networkdrivesharing.com^$popup -||neverclick.net^ -||neverclick.net^$popup -||newpasswordverification.com^ -||newpasswordverification.com^$popup -||noreply-ups.com^ -||noreply-ups.com^$popup -||nothingathissite.com^ -||nothingathissite.com^$popup -||nothingatthisdomain.com^ -||nothingatthisdomain.com^$popup -||officequarentine.com^ -||officequarentine.com^$popup -||onedrive-alert.com^ -||onedrive-alert.com^$popup -||onedriveshare.com^ -||onedriveshare.com^$popup -||onedriveshare.net.au^ -||onedriveshare.net.au^$popup -||onedrop.live^ -||onedrop.live^$popup -||onesdrive.info^ -||onesdrive.info^$popup -||online-connect.net^ -||online-connect.net^$popup -||online-invite.com^ -||online-invite.com^$popup -||onlinedesk-net.com^ -||onlinedesk-net.com^$popup -||onlinediscountflowers.net^ -||onlinediscountflowers.net^$popup -||onlineexchangeprotection.com^ -||onlineexchangeprotection.com^$popup -||onlineflowerdiscounters.com^ -||onlineflowerdiscounters.com^$popup -||onlinemailstorage.com^ -||onlinemailstorage.com^$popup -||onlineprint4me.com^ -||onlineprint4me.com^$popup -||opinonsmattersurvey.com^ -||opinonsmattersurvey.com^$popup -||orderprocessinginfo.com^ -||orderprocessinginfo.com^$popup -||orders-amazon.net^ -||orders-amazon.net^$popup -||ouryammer.net^ -||ouryammer.net^$popup -||overdue-invoice.com^ -||overdue-invoice.com^$popup -||patchingauthority.com^ -||patchingauthority.com^$popup -||patchingerrorreport.com^ -||patchingerrorreport.com^$popup -||payrollexpeditors.com^ -||payrollexpeditors.com^$popup -||petersenbc.com^ -||petersenbc.com^$popup -||phishfactor.com^ -||phishfactor.com^$popup -||phishimpact.com^ -||phishimpact.com^$popup -||phishingspot.com^ -||phishingspot.com^$popup -||phishline-incident-response.com^ -||phishline-incident-response.com^$popup -||phishline-notifications.com^ -||phishline-notifications.com^$popup -||phishline-training-placeholder.com^ -||phishline-training-placeholder.com^$popup -||phishline-training.com^ -||phishline-training.com^$popup -||phishlinetraining.com^ -||phishlinetraining.com^$popup -||phishmetrics.com^ -||phishmetrics.com^$popup -||phishmetrix.com^ -||phishmetrix.com^$popup -||phishsmoker.com^ -||phishsmoker.com^$popup -||phishwarden.com^ -||phishwarden.com^$popup -||phoneoptix.com^ -||phoneoptix.com^$popup -||photofeedsexpress.com^ -||photofeedsexpress.com^$popup -||policyupdater.com^ -||policyupdater.com^$popup -||policyupdater.info^ -||policyupdater.info^$popup -||post-status.com.au^ -||post-status.com.au^$popup -||premiumvispayroll.com^ -||premiumvispayroll.com^$popup -||prepareready.com^ -||prepareready.com^$popup -||preventphishing.com^ -||preventphishing.com^$popup -||preventphishing.org^ -||preventphishing.org^$popup -||primeordertracking.com^ -||primeordertracking.com^$popup -||propertymansystems.com^ -||propertymansystems.com^$popup -||protectionservces.com^ -||protectionservces.com^$popup -||protectionservices.info^ -||protectionservices.info^$popup -||pushrisk.com^ -||pushrisk.com^$popup -||putyourdonation2work.com^ -||putyourdonation2work.com^$popup -||rainforestcoffee.org^ -||rainforestcoffee.org^$popup -||rapidtransportingnow.com^ -||rapidtransportingnow.com^$popup -||regulationreportsnow.com^ -||regulationreportsnow.com^$popup -||remoteaccessservices.net^ -||remoteaccessservices.net^$popup -||remoteemail.net^ -||remoteemail.net^$popup -||remoteworkplaces.net^ -||remoteworkplaces.net^$popup -||retailoffers.net.au^ -||retailoffers.net.au^$popup -||riskpush.com^ -||riskpush.com^$popup -||riskscore.org^ -||riskscore.org^$popup -||sawphish.com^ -||sawphish.com^$popup -||scan-monkey.com^ -||scan-monkey.com^$popup -||scan-monkey.net^ -||scan-monkey.net^$popup -||scanmonkies.com^ -||scanmonkies.com^$popup -||scanmonkies.net^ -||scanmonkies.net^$popup -||scanner-processing.com^ -||scanner-processing.com^$popup -||securebackupsrvice.com^ -||securebackupsrvice.com^$popup -||securefileshared.info^ -||securefileshared.info^$popup -||securemailaccess.com^ -||securemailaccess.com^$popup -||securemailaccess.com.au^ -||securemailaccess.com.au^$popup -||securesharingsite.com^ -||securesharingsite.com^$popup -||securesharingwebsite.com^ -||securesharingwebsite.com^$popup -||security-alerters.info^ -||security-alerters.info^$popup -||security-chase.org^ -||security-chase.org^$popup -||gatepetro.com^ -||gatepetro.com^$popup -||securitycareonline.com^ -||securitycareonline.com^$popup -||securityeducation.info^ -||securityeducation.info^$popup -||selectshop-events.com^ -||selectshop-events.com^$popup -||services-comptes.com^ -||services-comptes.com^$popup -||severe-weather-relief.com^ -||severe-weather-relief.com^$popup -||sf-notificatons.com^ -||sf-notificatons.com^$popup -||sharepointeronline.com^ -||sharepointeronline.com^$popup -||sharepointfiles.info^ -||sharepointfiles.info^$popup -||sharewithmenow.us^ -||sharewithmenow.us^$popup -||shipmentupdates.com^ -||shipmentupdates.com^$popup -||shippingissues.net^ -||shippingissues.net^$popup -||shippingupdates.info^ -||shippingupdates.info^$popup -||shopperloyaltyprogram.com^ -||shopperloyaltyprogram.com^$popup -||shoppingrewardprograms.com^ -||shoppingrewardprograms.com^$popup -||skywordpro.com^ -||skywordpro.com^$popup -||socioptix.com^ -||socioptix.com^$popup -||special-agency.com^ -||special-agency.com^$popup -||special-delivery.net^ -||special-delivery.net^$popup -||sport-world01.com^ -||sport-world01.com^$popup -||sportzles.com^ -||sportzles.com^$popup -||staffeventplanning.com^ -||staffeventplanning.com^$popup -||standardfreightinc.com^ -||standardfreightinc.com^$popup -||supermarket-orders.com.au^ -||supermarket-orders.com.au^$popup -||survey38edk39.net^ -||survey38edk39.net^$popup -||surveyminions.com^ -||surveyminions.com^$popup -||sustoptix.com^ -||sustoptix.com^$popup -||t-ny.us^ -||t-ny.us^$popup -||thejpmorganchases.com^ -||thejpmorganchases.com^$popup -||thephishingreport.com^ -||thephishingreport.com^$popup -||theschoolmessenger.com^ -||theschoolmessenger.com^$popup -||thevoicemessages.com^ -||thevoicemessages.com^$popup -||thisisphishing.info^ -||thisisphishing.info^$popup -||threat-optix.com^ -||threat-optix.com^$popup -||threatoptix.com^ -||threatoptix.com^$popup -||threatsoptix.com^ -||threatsoptix.com^$popup -||ti-ny.co^ -||ti-ny.co^$popup -||ti-ny.us^ -||ti-ny.us^$popup -||tollviolation.org^ -||tollviolation.org^$popup -||tollwayexpresspayments.com^ -||tollwayexpresspayments.com^$popup -||toppaidjobz.com^ -||toppaidjobz.com^$popup -||topsecretshopperz.com^ -||topsecretshopperz.com^$popup -||tornado-preparations.com^ -||tornado-preparations.com^$popup -||trackingforyou.com^ -||trackingforyou.com^$popup -||trackthepkg.com^ -||trackthepkg.com^$popup -||transportingsolutions.com^ -||transportingsolutions.com^$popup -||transportingsolutions.info^ -||transportingsolutions.info^$popup -||travelbargins.net.au^ -||travelbargins.net.au^$popup -||travelling4me.com^ -||travelling4me.com^$popup -||trecbackup.com^ -||trecbackup.com^$popup -||unitedshippersinc.com^ -||unitedshippersinc.com^$popup -||utility-accounts.com^ -||utility-accounts.com^$popup -||utrackthis.com^ -||utrackthis.com^$popup -||vaaderstad.com^ -||vaaderstad.com^$popup -||vaderstaad.com^ -||vaderstaad.com^$popup -||vadrstade.com^ -||vadrstade.com^$popup -||valueweekly.com^ -||valueweekly.com^$popup -||vedastaad.com^ -||vedastaad.com^$popup -||vedastad.com^ -||vedastad.com^$popup -||vehiclecaredeals.com^ -||vehiclecaredeals.com^$popup -||verifyaccounts.us^ -||verifyaccounts.us^$popup -||verifymyaccounts.info^ -||verifymyaccounts.info^$popup -||viewnewstoday.com^ -||viewnewstoday.com^$popup -||voicemessages.us^ -||voicemessages.us^$popup -||vpn-netaccess.com^ -||vpn-netaccess.com^$popup -||wayfaic.com^ -||wayfaic.com^$popup -||wayfaicsale.com^ -||wayfaicsale.com^$popup -||web-access-alerts.com^ -||web-access-alerts.com^$popup -||wedoreservations.com^ -||wedoreservations.com^$popup -||whatitsliketoworkhere.com^ -||whatitsliketoworkhere.com^$popup -||whereishospitality.com^ -||whereishospitality.com^$popup -||wholesalegiftcardoffer.com^ -||wholesalegiftcardoffer.com^$popup -||whydidyouclick.com^ -||whydidyouclick.com^$popup -||whytrustme.net^ -||whytrustme.net^$popup -||wiretransfersondemand.com^ -||wiretransfersondemand.com^$popup -||worldhealthalerts.com^ -||worldhealthalerts.com^$popup -||eltradingcompany.com^ -||eltradingcompany.com^$popup -||encrypteddatastore.com^ -||encrypteddatastore.com^$popup -||humanresourcebenefits.com^ -||humanresourcebenefits.com^$popup -||specialdeliveries.info^ -||specialdeliveries.info^$popup -||xyz8394hexi38.com^ -||xyz8394hexi38.com^$popup -||youhavebeenphished.com^ -||youhavebeenphished.com^$popup -||youorderstatus.com^ -||youorderstatus.com^$popup -||youraccountservices.com^ -||youraccountservices.com^$popup -||yourchance2winit.com^ -||yourchance2winit.com^$popup -||yourencryptedmessages.com^ -||yourencryptedmessages.com^$popup -||yourlivingequity.com^ -||yourlivingequity.com^$popup -||yourticketchance.com^ -||yourticketchance.com^$popup -||yourorderupdate.com^ -||yourorderupdate.com^$popup - -||64.132.201.92^ -||64.132.201.92^$popup ! https://www•adressa•no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener ||jatvpn.softether.net^ ||jatvpn.softether.net^$popup @@ -8524,7 +7742,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||livejasmin.com/*&origin= ! https://github.com/AdguardTeam/AdguardFilters/issues/161364 ! (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) -/^((https?|tcp|udp|i?quic|s?ftp)://|.*\.)?github\.([b-z][a-z]{1,19}|a[a-mo-z][a-z]{0,18})(/.*)?$/$~third-party,domain=github.*|~com|~org|~net|~co|~blog|~community|~host|~io|~microsoft|~office|~uk|~us|~xn--fiqs8s|~dev|~archive.* +/^((https?|tcp|udp|i?quic|s?ftp)://|.*\.)?github\.([abd-z][a-z]{1,19}|c[a-np-z][a-z]{1,18})(/.*)?$/$~third-party,domain=github.*|~com|~org|~net|~co|~blog|~community|~host|~io|~microsoft|~office|~uk|~us|~xn--fiqs8s|~dev|~archive.* ||github.sale^ ||github.sale^$popup ! https://www•tv2•no/nyheter/innenriks/advarer-ikke-klikk-pa-lenken/16040614/ @@ -26088,6 +25306,63 @@ drvhub.net##.driver-item__install ||185.7.99.190^ ||185.7.99.190^$popup +! Various Winget stuff, early May 2026 +||angrybirdsstarwars2.com^ +||angrybirdsstarwars2.com^$popup +||mapmap.info^ +||mapmap.info^$popup +||onlineresultsfinder.com^ +||onlineresultsfinder.com^$popup +||photovariants.com^ +||photovariants.com^$popup +||theritzygypsy.com^ +||theritzygypsy.com^$popup +||thalesbaiao.com^ +||thalesbaiao.com^$popup +||moyendadesigns.com^ +||moyendadesigns.com^$popup +://64.190.63. +://64.190.63.$popup + +://199.191.50. +://199.191.50.$popup + +||michaelrinderle.com^ +||quickfindresults.com^ +||quickfindresults.com^$popup +||smorgasbordet.com^ +||smorgasbordet.com^$popup +||xdelta.org^ + +||23.48.203.140^ +||3.33.130.190^ +||[2a02:26f0:1700:11::b856:6790]^ +/^(.*://)?204\.11\.56\.\d{1,3}(/.*)?$/ +/^(.*://)?204\.11\.56\.\d{1,3}(/.*)?$/$popup +/^(.*://)?208\.91\.197\.\d{1,3}(/.*)?$/ +/^(.*://)?208\.91\.197\.\d{1,3}(/.*)?$/$popup + + + + + + + + +! submitted via email +! https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/ +||grokvarum.com^ +||grokvarum.com^$popup +||groktronum.com^ +||groktronum.com^$popup +||xaidash.app^ +||xaidash.app^$popup +||blogcryptoslate.com^ +||blogcryptoslate.com^$popup +||blogfxempire.com^ +||blogfxempire.com^$popup +||cointelegraphfeed.com^ +||cointelegraphfeed.com^$popup ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 7ba22b6ab..5f1039d3d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@  ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 29April2026v1 +! Version: 21May2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -8,7 +8,7 @@ ! Homepage: https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#-english ! Legitimate use is almost non-existent, but has a tiny userbase in Japan and among upstart coding experiments. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||top^$document,domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top|~to|~yggtorrent.top|~yggleak.top|~asiaon.top|~voxel.top|~passt.top|~polar.top|~rifton.top|~rugaming.top|~doubledouble.top|~hedon-haven.top|~outlands.top|~tk-web.top|~qpmegathread.top|~qmk.top +||top^$document,domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top|~to|~yggtorrent.top|~yggleak.top|~asiaon.top|~voxel.top|~passt.top|~polar.top|~rifton.top|~rugaming.top|~doubledouble.top|~hedon-haven.top|~outlands.top|~tk-web.top|~qpmegathread.top|~qmk.top|~mgytr.top|~girlskissing.top|~luxferre.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^$document @@/^.*(tech|project|linux).*\.top(/[a-z0-9_-]?.*)?$/$document @@ -4194,400 +4194,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"] 54.219.218.169$network !+ NOT_PLATFORM(windows, mac, android, cli) ||54.219.218.169^$document -! https://new•reddit•com/r/engrish/comments/10z8r2u/well_you_tried/ -||0365alert.com^$all -||0365online.com^$all -||365-notifcation.com^$all -||365-notificaution.com^$all -||accessmyvdi.com^$all -||accessyouraccount.com^$all -||account-issues.com^$all -||account-issues.net^$all -||account-management-services.com^$all -||account-terminations.com^$all -||accountsissues.com^$all -||alerte-factures.com^$all -||allthingssporting.com^$all -||amazon-fraud-detection.com^$all -||amcarebank.com^$all -||app11ee.com^$all -||apple-infosec.com^$all -||assistthechildren.com^$all -||auction-it-all.com^$all -||audit-optix.com^$all -||auditoptix.com^$all -||notify-chase.com^$all -||bab-l-phish.com^$all -||babbelphish.com^$all -||bablphish.com^$all -||badge-services.com^$all -||badgingservices.info^$all -||bankingonit.info^$all -||barracuda-security-awareness-training.com^$all -||barracuda-security-awareness.com^$all -||barracuda-security-training.com^$all -||bell-rewards.com^$all -||benefitsadvisornetwork.com^$all -||benefitsforemployee.com^$all -||bestplacestowork.info^$all -||bestworkplacesurvey.com^$all -||blackboard-online.com^$all -||blackfridaydealmakers.com^$all -||board-portal.com^$all -||building-service.net^$all -||businessconf03.com^$all -||phishline.com^$all -||c1mb.com^$all -||c1mb.net^$all -||c1mb.org^$all -||canvas-education.com^$all -||cardinvitenow.com^$all -||cardservice-fraud.com^$all -||cardservicesfraud.com^$all -||channeloptix.com^$all -||chase-billing.com^$all -||chasehealthadvanceonline.com^$all -||cheapseatsxpress.com^$all -||ciimb.com^$all -||cimbb.org^$all -||clipceteradeals.com^$all -||clouddrivestorage.org^$all -||clouddriveuploads.net^$all -||cloudfiledropper.com^$all -||commerceservicecorp.org^$all -||greetingcardforyou.com^$all -||communitybankingtrends.com^$all -||connectmesafe.com^$all -||corp-erp.com^$all -||corporate-policy-updates.com^$all -||corporate38dk39.com^$all -||corporatefileaccess.com^$all -||corporateintranet.net^$all -||covid-funding.co^$all -||covid-relief.co^$all -||unitedshipmentservice.com^$all -||crditcrd.com^$all -||credit-reporting.org^$all -||credit-sleuth.com^$all -||cronwell.co.uk^$all -||currentnewsfeed.com^$all -||managedservicesonline.info^$all -||dclab-training.com^$all -||desktopaccessvdi.com^$all -||digitalemailspace.com^$all -||discounthandbagz.com^$all -||discountwireless.us^$all -||disrictcourt.com^$all -||doccusigns.com^$all -||documentscanner.info^$all -||donotcallanymore.com^$all -||downfinancing.com^$all -||drive-gloogle.com^$all -||driveshareconnections.com^$all -||dsinergi.net^$all -||earthquake-preparations.com^$all -||einvitesnow.com^$all -||elltradingcompany.com^$all -||email365access.com^$all -||emailsupp0rt-g00gel.com^$all -||emailsupp0rt-g00gle.com^$all -||emailupgrade.net^$all -||emcorgroupp.com^$all -||emcour.net^$all -||emcourgroup.com^$all -||employbenefitscenter.com^$all -||employeepayrollservices.com^$all -||endtrust.net^$all -||enviroptix.com^$all -||erpcorporateaccess.com^$all -||estaffevents.com^$all -||executivemagazines.com^$all -||executivespotlight.net^$all -||express-package.com^$all -||expresspackageupdates.com^$all -||faceblock-friend.com^$all -||fastwiretransfer.com^$all -||fcdex-alerts.com^$all -||federalship.com^$all -||fedex-alerts.com^$all -||filebox-sharing.com^$all -||files-storage.com^$all -||financebusiness.net^$all -||financeng.net^$all -||financialbroke.com^$all -||fiveminuteinterviewers.com^$all -||flood-preparations.com^$all -||flowersbycupid4u.com^$all -||folder-sharing.com^$all -||fortunesbest.com^$all -||fraud-optix.com^$all -||frauddetected.info^$all -||fraudoptix.com^$all -||freightinternationalservice.com^$all -||frieghtinternationalservices.com^$all -||g00gle-supp0rt.com^$all -||gdriveonlinestorage.com^$all -||getbestcreditscore.com^$all -||getmysecurefile.com^$all -||giftcards-rewards.com^$all -||giftcardwholesalers.com^$all -||giftonus.com^$all -||global-mask-mandate.com^$all -||glowphish.com^$all -||gorilla-spreadsheet.com^$all -||gov-delivry.com^$all -||grcoptix.com^$all -||green-optix.com^$all -||greenoptix.com^$all -||hammerphish.com^$all -||hardwarewarehouse.net.au^$all -||hayniecpas-training.com^$all -||health-news-reporting.com^$all -||healthadvance-online.net^$all -||healthalertadvisory.com^$all -||hnc-vs.co^$all -||homeofficecommunication.com^$all -||homeofficecommunications.com^$all -||linkedin-web.com^$all -||hr-benifits.com^$all -||hrpolicy-update.com^$all -||humanresourceupdates.com^$all -||humanresoursesolutions.com^$all -||hurricane-preparations.com^$all -||infection-alerts.com^$all -||instantprivacyupdaters.com^$all -||instantremoteconnect.com^$all -||investmentadvisornetwork.com^$all -||invoice-alert.com^$all -||invoice-alerts.com^$all -||invoicealerting.com^$all -||invoiceprocessexpeditors.com^$all -||ismyinternetfast.com^$all -||it-email-services.com^$all -||it-email-services.com.au^$all -||itemailservices.com^$all -||itemailsystem.com^$all -||itunes-invoice.com^$all -||itunes-security.com^$all -||itunesecurity.com^$all -||jndbmedical.com^$all -||join-team-meeting.com^$all -||joinmyconferenc.com^$all -||jpmc-phishing-test.com^$all -||jpmcmailservice.net^$all -||keepmyaccountsecure.com^$all -||keysaver-registration.com^$all -||kpmorganchase.com^$all -||lbfc.com^$all -||legalissuereport.com^$all -||likedin-connect.com^$all -||link-it.us^$all -||linkedin-connection.com^$all -||linkit-4u.com^$all -||linkusup.info^$all -||m1crosoft.co^$all -||mail365access.com^$all -||mailquarentinereport.com^$all -||mailstorage.co^$all -||marketing38493.com^$all -||massiveweightloss.net^$all -||medical-news-reporting.com^$all -||medical-news.co.uk^$all -||medical-news.us^$all -||messageconversion.com^$all -||messagingconnections.com^$all -||microsoft-notificaution.com^$all -||riskimpact.org^$all -||mobile-data-notifications.com^$all -||mohmalaysia.com^$all -||musicalsoundstream.com^$all -||my-joke-ofthe-day.com^$all -||mydrive-sharing.com^$all -||myjokedaily.com^$all -||mylivingequity.net^$all -||myloyaltyrewardsnow.com^$all -||mymedhealthreport.com^$all -||myofficeaccounts.com^$all -||myorderstatus.info^$all -||myreputationonline.net^$all -||mysafefax.com^$all -||mytoolkitmail.com^$all -||myvirtualconfernce.com^$all -||netsharingservices.com^$all -||networkconnecters.com^$all -||networkdriveconnectors.com^$all -||networkdrivesharing.com^$all -||neverclick.net^$all -||newpasswordverification.com^$all -||noreply-ups.com^$all -||nothingathissite.com^$all -||nothingatthisdomain.com^$all -||officequarentine.com^$all -||onedrive-alert.com^$all -||onedriveshare.com^$all -||onedriveshare.net.au^$all -||onedrop.live^$all -||onesdrive.info^$all -||online-connect.net^$all -||online-invite.com^$all -||onlinedesk-net.com^$all -||onlinediscountflowers.net^$all -||onlineexchangeprotection.com^$all -||onlineflowerdiscounters.com^$all -||onlinemailstorage.com^$all -||onlineprint4me.com^$all -||opinonsmattersurvey.com^$all -||orderprocessinginfo.com^$all -||orders-amazon.net^$all -||ouryammer.net^$all -||overdue-invoice.com^$all -||patchingauthority.com^$all -||patchingerrorreport.com^$all -||payrollexpeditors.com^$all -||petersenbc.com^$all -||phishfactor.com^$all -||phishimpact.com^$all -||phishingspot.com^$all -||phishline-incident-response.com^$all -||phishline-notifications.com^$all -||phishline-training-placeholder.com^$all -||phishline-training.com^$all -||phishlinetraining.com^$all -||phishmetrics.com^$all -||phishmetrix.com^$all -||phishsmoker.com^$all -||phishwarden.com^$all -||phoneoptix.com^$all -||photofeedsexpress.com^$all -||policyupdater.com^$all -||policyupdater.info^$all -||post-status.com.au^$all -||premiumvispayroll.com^$all -||prepareready.com^$all -||preventphishing.com^$all -||preventphishing.org^$all -||primeordertracking.com^$all -||propertymansystems.com^$all -||protectionservces.com^$all -||protectionservices.info^$all -||pushrisk.com^$all -||putyourdonation2work.com^$all -||rainforestcoffee.org^$all -||rapidtransportingnow.com^$all -||regulationreportsnow.com^$all -||remoteaccessservices.net^$all -||remoteemail.net^$all -||remoteworkplaces.net^$all -||retailoffers.net.au^$all -||riskpush.com^$all -||riskscore.org^$all -||sawphish.com^$all -||scan-monkey.com^$all -||scan-monkey.net^$all -||scanmonkies.com^$all -||scanmonkies.net^$all -||scanner-processing.com^$all -||securebackupsrvice.com^$all -||securefileshared.info^$all -||securemailaccess.com^$all -||securemailaccess.com.au^$all -||securesharingsite.com^$all -||securesharingwebsite.com^$all -||security-alerters.info^$all -||security-chase.org^$all -||gatepetro.com^$all -||securitycareonline.com^$all -||securityeducation.info^$all -||selectshop-events.com^$all -||services-comptes.com^$all -||severe-weather-relief.com^$all -||sf-notificatons.com^$all -||sharepointeronline.com^$all -||sharepointfiles.info^$all -||sharewithmenow.us^$all -||shipmentupdates.com^$all -||shippingissues.net^$all -||shippingupdates.info^$all -||shopperloyaltyprogram.com^$all -||shoppingrewardprograms.com^$all -||skywordpro.com^$all -||socioptix.com^$all -||special-agency.com^$all -||special-delivery.net^$all -||sport-world01.com^$all -||sportzles.com^$all -||staffeventplanning.com^$all -||standardfreightinc.com^$all -||supermarket-orders.com.au^$all -||survey38edk39.net^$all -||surveyminions.com^$all -||sustoptix.com^$all -||t-ny.us^$all -||thejpmorganchases.com^$all -||thephishingreport.com^$all -||theschoolmessenger.com^$all -||thevoicemessages.com^$all -||thisisphishing.info^$all -||threat-optix.com^$all -||threatoptix.com^$all -||threatsoptix.com^$all -||ti-ny.co^$all -||ti-ny.us^$all -||tollviolation.org^$all -||tollwayexpresspayments.com^$all -||toppaidjobz.com^$all -||topsecretshopperz.com^$all -||tornado-preparations.com^$all -||trackingforyou.com^$all -||trackthepkg.com^$all -||transportingsolutions.com^$all -||transportingsolutions.info^$all -||travelbargins.net.au^$all -||travelling4me.com^$all -||trecbackup.com^$all -||unitedshippersinc.com^$all -||utility-accounts.com^$all -||utrackthis.com^$all -||vaaderstad.com^$all -||vaderstaad.com^$all -||vadrstade.com^$all -||valueweekly.com^$all -||vedastaad.com^$all -||vedastad.com^$all -||vehiclecaredeals.com^$all -||verifyaccounts.us^$all -||verifymyaccounts.info^$all -||viewnewstoday.com^$all -||voicemessages.us^$all -||vpn-netaccess.com^$all -||wayfaic.com^$all -||wayfaicsale.com^$all -||web-access-alerts.com^$all -||wedoreservations.com^$all -||whatitsliketoworkhere.com^$all -||whereishospitality.com^$all -||wholesalegiftcardoffer.com^$all -||whydidyouclick.com^$all -||whytrustme.net^$all -||wiretransfersondemand.com^$all -||worldhealthalerts.com^$all -||eltradingcompany.com^$all -||encrypteddatastore.com^$all -||humanresourcebenefits.com^$all -||specialdeliveries.info^$all -||xyz8394hexi38.com^$all -||youhavebeenphished.com^$all -||youorderstatus.com^$all -||youraccountservices.com^$all -||yourchance2winit.com^$all -||yourencryptedmessages.com^$all -||yourlivingequity.com^$all -||yourticketchance.com^$all -||yourorderupdate.com^$all -!+ PLATFORM(windows, mac, android, cli) -64.132.201.92$network -!+ NOT_PLATFORM(windows, mac, android, cli) -||64.132.201.92^$all ! https://www•adressa•no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener ||jatvpn.softether.net^$all ||jatcraft.com^$all @@ -5618,7 +5224,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||livejasmin.com/*&origin=$document ! https://github.com/AdguardTeam/AdguardFilters/issues/161364 ! (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) -/^((https?|tcp|udp|i?quic|s?ftp)://|.*\.)?github\.([b-z][a-z]{1,19}|a[a-mo-z][a-z]{0,18})(/.*)?$/$document,match-case,~third-party,domain=github.*|~com|~org|~net|~co|~blog|~community|~host|~io|~microsoft|~office|~uk|~us|~xn--fiqs8s|~dev|~archive.* +/^((https?|tcp|udp|i?quic|s?ftp)://|.*\.)?github\.([abd-z][a-z]{1,19}|c[a-np-z][a-z]{1,18})(/.*)?$/$document,match-case,~third-party,domain=github.*|~com|~org|~net|~co|~blog|~community|~host|~io|~microsoft|~office|~uk|~us|~xn--fiqs8s|~dev|~archive.* ||github.sale^$all ! https://www•tv2•no/nyheter/innenriks/advarer-ikke-klikk-pa-lenken/16040614/ ||apple-walletsuspension.$all @@ -15297,7 +14903,55 @@ drvhub.net##.driver-item__install ||flirtenhier.com^$all !+ NOT_PLATFORM(windows, mac, android, cli) ||185.7.99.190^$all -185.7.99.190$all,ipaddress +!+ PLATFORM(windows, mac, android, cli) +185.7.99.190$network +! Various Winget stuff, early May 2026 +||angrybirdsstarwars2.com^$all +||mapmap.info^$all +||onlineresultsfinder.com^$all +||photovariants.com^$all +||theritzygypsy.com^$all +||thalesbaiao.com^$all +||moyendadesigns.com^$all +://64.190.63.$all +!+ PLATFORM(windows, mac, android, cli) +64.190.63.*$network +://199.191.50.$all +!+ PLATFORM(windows, mac, android, cli) +199.191.50.*$network +||michaelrinderle.com^ +||quickfindresults.com^$all +||smorgasbordet.com^$all +||xdelta.org^ +!#if !env_firefox +!+ NOT_PLATFORM(windows, mac, android, cli) +||23.48.203.140^ +!+ NOT_PLATFORM(windows, mac, android, cli) +||3.33.130.190^ +||[2a02:26f0:1700:11::b856:6790]^ +/^(.*://)?204\.11\.56\.\d{1,3}(/.*)?$/$all +/^(.*://)?208\.91\.197\.\d{1,3}(/.*)?$/$all +!#endif +!#if env_firefox +!+ PLATFORM(windows, mac, android, cli) +204.11.56.*$network +!+ PLATFORM(windows, mac, android, cli) +208.91.197.*$network +!+ PLATFORM(windows, mac, android, cli) +23.48.203.140$network +!+ PLATFORM(windows, mac, android, cli) +2a02:26f0:1700:11::b856:6790$network +!+ PLATFORM(windows, mac, android, cli) +3.33.130.190$network +!#endif +! submitted via email +! https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/ +||grokvarum.com^$all +||groktronum.com^$all +||xaidash.app^$all +||blogcryptoslate.com^$all +||blogfxempire.com^$all +||cointelegraphfeed.com^$all ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^$all diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index ccd1cd121..1c4706971 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,12 +1,12 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 29April2026v1 +! Version: 21May2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists ! Legitimate use is almost non-existent, but has a tiny userbase in Japan and among upstart coding experiments. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||*.top^$dnstype=~CNAME,denyallow=caitlin.top|callmebymygender.top|corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|changlam10.top|changlam11.top|pdcdn1.top|pressplay.top|chillx.top|strims.top|thedesk.top|audioforyou.top|awavenue.top|reyhub.top|iboxs.top|adrules.top|hostingowy.top|to|yggtorrent.top|yggleak.top|asiaon.top|voxel.top|passt.top|polar.top|rifton.top|rugaming.top|doubledouble.top|hedon-haven.top|outlands.top|tk-web.top|qpmegathread.top|qmk.top +||*.top^$dnstype=~CNAME,denyallow=caitlin.top|callmebymygender.top|corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|changlam10.top|changlam11.top|pdcdn1.top|pressplay.top|chillx.top|strims.top|thedesk.top|audioforyou.top|awavenue.top|reyhub.top|iboxs.top|adrules.top|hostingowy.top|to|yggtorrent.top|yggleak.top|asiaon.top|voxel.top|passt.top|polar.top|rifton.top|rugaming.top|doubledouble.top|hedon-haven.top|outlands.top|tk-web.top|qpmegathread.top|qmk.top|mgytr.top|girlskissing.top|luxferre.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^ @@/^.*(tech|project|linux).*\.top$/ @@ -2884,397 +2884,6 @@ 194.110.247.242 ! https://new•reddit•com/r/engrish/comments/10zs6f6/low_budget_scam/ 54.219.218.169 -! https://new•reddit•com/r/engrish/comments/10z8r2u/well_you_tried/ -||0365alert.com^ -||0365online.com^ -||365-notifcation.com^ -||365-notificaution.com^ -||accessmyvdi.com^ -||accessyouraccount.com^ -||account-issues.com^ -||account-issues.net^ -||account-management-services.com^ -||account-terminations.com^ -||accountsissues.com^ -||alerte-factures.com^ -||allthingssporting.com^ -||amazon-fraud-detection.com^ -||amcarebank.com^ -||app11ee.com^ -||apple-infosec.com^ -||assistthechildren.com^ -||auction-it-all.com^ -||audit-optix.com^ -||auditoptix.com^ -||notify-chase.com^ -||bab-l-phish.com^ -||babbelphish.com^ -||bablphish.com^ -||badge-services.com^ -||badgingservices.info^ -||bankingonit.info^ -||barracuda-security-awareness-training.com^ -||barracuda-security-awareness.com^ -||barracuda-security-training.com^ -||bell-rewards.com^ -||benefitsadvisornetwork.com^ -||benefitsforemployee.com^ -||bestplacestowork.info^ -||bestworkplacesurvey.com^ -||blackboard-online.com^ -||blackfridaydealmakers.com^ -||board-portal.com^ -||building-service.net^ -||businessconf03.com^ -||phishline.com^ -||c1mb.com^ -||c1mb.net^ -||c1mb.org^ -||canvas-education.com^ -||cardinvitenow.com^ -||cardservice-fraud.com^ -||cardservicesfraud.com^ -||channeloptix.com^ -||chase-billing.com^ -||chasehealthadvanceonline.com^ -||cheapseatsxpress.com^ -||ciimb.com^ -||cimbb.org^ -||clipceteradeals.com^ -||clouddrivestorage.org^ -||clouddriveuploads.net^ -||cloudfiledropper.com^ -||commerceservicecorp.org^ -||greetingcardforyou.com^ -||communitybankingtrends.com^ -||connectmesafe.com^ -||corp-erp.com^ -||corporate-policy-updates.com^ -||corporate38dk39.com^ -||corporatefileaccess.com^ -||corporateintranet.net^ -||covid-funding.co^ -||covid-relief.co^ -||unitedshipmentservice.com^ -||crditcrd.com^ -||credit-reporting.org^ -||credit-sleuth.com^ -||cronwell.co.uk^ -||currentnewsfeed.com^ -||managedservicesonline.info^ -||dclab-training.com^ -||desktopaccessvdi.com^ -||digitalemailspace.com^ -||discounthandbagz.com^ -||discountwireless.us^ -||disrictcourt.com^ -||doccusigns.com^ -||documentscanner.info^ -||donotcallanymore.com^ -||downfinancing.com^ -||drive-gloogle.com^ -||driveshareconnections.com^ -||dsinergi.net^ -||earthquake-preparations.com^ -||einvitesnow.com^ -||elltradingcompany.com^ -||email365access.com^ -||emailsupp0rt-g00gel.com^ -||emailsupp0rt-g00gle.com^ -||emailupgrade.net^ -||emcorgroupp.com^ -||emcour.net^ -||emcourgroup.com^ -||employbenefitscenter.com^ -||employeepayrollservices.com^ -||endtrust.net^ -||enviroptix.com^ -||erpcorporateaccess.com^ -||estaffevents.com^ -||executivemagazines.com^ -||executivespotlight.net^ -||express-package.com^ -||expresspackageupdates.com^ -||faceblock-friend.com^ -||fastwiretransfer.com^ -||fcdex-alerts.com^ -||federalship.com^ -||fedex-alerts.com^ -||filebox-sharing.com^ -||files-storage.com^ -||financebusiness.net^ -||financeng.net^ -||financialbroke.com^ -||fiveminuteinterviewers.com^ -||flood-preparations.com^ -||flowersbycupid4u.com^ -||folder-sharing.com^ -||fortunesbest.com^ -||fraud-optix.com^ -||frauddetected.info^ -||fraudoptix.com^ -||freightinternationalservice.com^ -||frieghtinternationalservices.com^ -||g00gle-supp0rt.com^ -||gdriveonlinestorage.com^ -||getbestcreditscore.com^ -||getmysecurefile.com^ -||giftcards-rewards.com^ -||giftcardwholesalers.com^ -||giftonus.com^ -||global-mask-mandate.com^ -||glowphish.com^ -||gorilla-spreadsheet.com^ -||gov-delivry.com^ -||grcoptix.com^ -||green-optix.com^ -||greenoptix.com^ -||hammerphish.com^ -||hardwarewarehouse.net.au^ -||hayniecpas-training.com^ -||health-news-reporting.com^ -||healthadvance-online.net^ -||healthalertadvisory.com^ -||hnc-vs.co^ -||homeofficecommunication.com^ -||homeofficecommunications.com^ -||linkedin-web.com^ -||hr-benifits.com^ -||hrpolicy-update.com^ -||humanresourceupdates.com^ -||humanresoursesolutions.com^ -||hurricane-preparations.com^ -||infection-alerts.com^ -||instantprivacyupdaters.com^ -||instantremoteconnect.com^ -||investmentadvisornetwork.com^ -||invoice-alert.com^ -||invoice-alerts.com^ -||invoicealerting.com^ -||invoiceprocessexpeditors.com^ -||ismyinternetfast.com^ -||it-email-services.com^ -||it-email-services.com.au^ -||itemailservices.com^ -||itemailsystem.com^ -||itunes-invoice.com^ -||itunes-security.com^ -||itunesecurity.com^ -||jndbmedical.com^ -||join-team-meeting.com^ -||joinmyconferenc.com^ -||jpmc-phishing-test.com^ -||jpmcmailservice.net^ -||keepmyaccountsecure.com^ -||keysaver-registration.com^ -||kpmorganchase.com^ -||lbfc.com^ -||legalissuereport.com^ -||likedin-connect.com^ -||link-it.us^ -||linkedin-connection.com^ -||linkit-4u.com^ -||linkusup.info^ -||m1crosoft.co^ -||mail365access.com^ -||mailquarentinereport.com^ -||mailstorage.co^ -||marketing38493.com^ -||massiveweightloss.net^ -||medical-news-reporting.com^ -||medical-news.co.uk^ -||medical-news.us^ -||messageconversion.com^ -||messagingconnections.com^ -||microsoft-notificaution.com^ -||riskimpact.org^ -||mobile-data-notifications.com^ -||mohmalaysia.com^ -||musicalsoundstream.com^ -||my-joke-ofthe-day.com^ -||mydrive-sharing.com^ -||myjokedaily.com^ -||mylivingequity.net^ -||myloyaltyrewardsnow.com^ -||mymedhealthreport.com^ -||myofficeaccounts.com^ -||myorderstatus.info^ -||myreputationonline.net^ -||mysafefax.com^ -||mytoolkitmail.com^ -||myvirtualconfernce.com^ -||netsharingservices.com^ -||networkconnecters.com^ -||networkdriveconnectors.com^ -||networkdrivesharing.com^ -||neverclick.net^ -||newpasswordverification.com^ -||noreply-ups.com^ -||nothingathissite.com^ -||nothingatthisdomain.com^ -||officequarentine.com^ -||onedrive-alert.com^ -||onedriveshare.com^ -||onedriveshare.net.au^ -||onedrop.live^ -||onesdrive.info^ -||online-connect.net^ -||online-invite.com^ -||onlinedesk-net.com^ -||onlinediscountflowers.net^ -||onlineexchangeprotection.com^ -||onlineflowerdiscounters.com^ -||onlinemailstorage.com^ -||onlineprint4me.com^ -||opinonsmattersurvey.com^ -||orderprocessinginfo.com^ -||orders-amazon.net^ -||ouryammer.net^ -||overdue-invoice.com^ -||patchingauthority.com^ -||patchingerrorreport.com^ -||payrollexpeditors.com^ -||petersenbc.com^ -||phishfactor.com^ -||phishimpact.com^ -||phishingspot.com^ -||phishline-incident-response.com^ -||phishline-notifications.com^ -||phishline-training-placeholder.com^ -||phishline-training.com^ -||phishlinetraining.com^ -||phishmetrics.com^ -||phishmetrix.com^ -||phishsmoker.com^ -||phishwarden.com^ -||phoneoptix.com^ -||photofeedsexpress.com^ -||policyupdater.com^ -||policyupdater.info^ -||post-status.com.au^ -||premiumvispayroll.com^ -||prepareready.com^ -||preventphishing.com^ -||preventphishing.org^ -||primeordertracking.com^ -||propertymansystems.com^ -||protectionservces.com^ -||protectionservices.info^ -||pushrisk.com^ -||putyourdonation2work.com^ -||rainforestcoffee.org^ -||rapidtransportingnow.com^ -||regulationreportsnow.com^ -||remoteaccessservices.net^ -||remoteemail.net^ -||remoteworkplaces.net^ -||retailoffers.net.au^ -||riskpush.com^ -||riskscore.org^ -||sawphish.com^ -||scan-monkey.com^ -||scan-monkey.net^ -||scanmonkies.com^ -||scanmonkies.net^ -||scanner-processing.com^ -||securebackupsrvice.com^ -||securefileshared.info^ -||securemailaccess.com^ -||securemailaccess.com.au^ -||securesharingsite.com^ -||securesharingwebsite.com^ -||security-alerters.info^ -||security-chase.org^ -||gatepetro.com^ -||securitycareonline.com^ -||securityeducation.info^ -||selectshop-events.com^ -||services-comptes.com^ -||severe-weather-relief.com^ -||sf-notificatons.com^ -||sharepointeronline.com^ -||sharepointfiles.info^ -||sharewithmenow.us^ -||shipmentupdates.com^ -||shippingissues.net^ -||shippingupdates.info^ -||shopperloyaltyprogram.com^ -||shoppingrewardprograms.com^ -||skywordpro.com^ -||socioptix.com^ -||special-agency.com^ -||special-delivery.net^ -||sport-world01.com^ -||sportzles.com^ -||staffeventplanning.com^ -||standardfreightinc.com^ -||supermarket-orders.com.au^ -||survey38edk39.net^ -||surveyminions.com^ -||sustoptix.com^ -||t-ny.us^ -||thejpmorganchases.com^ -||thephishingreport.com^ -||theschoolmessenger.com^ -||thevoicemessages.com^ -||thisisphishing.info^ -||threat-optix.com^ -||threatoptix.com^ -||threatsoptix.com^ -||ti-ny.co^ -||ti-ny.us^ -||tollviolation.org^ -||tollwayexpresspayments.com^ -||toppaidjobz.com^ -||topsecretshopperz.com^ -||tornado-preparations.com^ -||trackingforyou.com^ -||trackthepkg.com^ -||transportingsolutions.com^ -||transportingsolutions.info^ -||travelbargins.net.au^ -||travelling4me.com^ -||trecbackup.com^ -||unitedshippersinc.com^ -||utility-accounts.com^ -||utrackthis.com^ -||vaaderstad.com^ -||vaderstaad.com^ -||vadrstade.com^ -||valueweekly.com^ -||vedastaad.com^ -||vedastad.com^ -||vehiclecaredeals.com^ -||verifyaccounts.us^ -||verifymyaccounts.info^ -||viewnewstoday.com^ -||voicemessages.us^ -||vpn-netaccess.com^ -||wayfaic.com^ -||wayfaicsale.com^ -||web-access-alerts.com^ -||wedoreservations.com^ -||whatitsliketoworkhere.com^ -||whereishospitality.com^ -||wholesalegiftcardoffer.com^ -||whydidyouclick.com^ -||whytrustme.net^ -||wiretransfersondemand.com^ -||worldhealthalerts.com^ -||eltradingcompany.com^ -||encrypteddatastore.com^ -||humanresourcebenefits.com^ -||specialdeliveries.info^ -||xyz8394hexi38.com^ -||youhavebeenphished.com^ -||youorderstatus.com^ -||youraccountservices.com^ -||yourchance2winit.com^ -||yourencryptedmessages.com^ -||yourlivingequity.com^ -||yourticketchance.com^ -||yourorderupdate.com^ -64.132.201.92 ! https://www•adressa•no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener ||jatvpn.softether.net^ ||jatcraft.com^ @@ -12847,7 +12456,33 @@ http://secured21.*.com/| ||super-tester.de^ ||flirtenhier.com^ 185.7.99.190 -185.7.99.190$all,ipaddress +! Various Winget stuff, early May 2026 +||angrybirdsstarwars2.com^ +||mapmap.info^ +||onlineresultsfinder.com^ +||photovariants.com^ +||theritzygypsy.com^ +||thalesbaiao.com^ +||moyendadesigns.com^ +://64.190.63. +://199.191.50. +||michaelrinderle.com^ +||quickfindresults.com^ +||smorgasbordet.com^ +||xdelta.org^ +23.48.203.140 +3.33.130.190 +2a02:26f0:1700:11::b856:6790 +/^(.*://)?204\.11\.56\.\d{1,3}(/.*)?$/ +/^(.*://)?208\.91\.197\.\d{1,3}(/.*)?$/ +! submitted via email +! https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/ +||grokvarum.com^ +||groktronum.com^ +||xaidash.app^ +||blogcryptoslate.com^ +||blogfxempire.com^ +||cointelegraphfeed.com^ ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^ ||100conversions.com^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 26e5d6ac4..a96e92b2e 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 29April2026v1 +# Version: 21May2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -3468,398 +3468,6 @@ winpulse.life # https://new•reddit•com/r/engrish/comments/10zs6f6/low_budget_scam/ 54.219.218.169 -# https://new•reddit•com/r/engrish/comments/10z8r2u/well_you_tried/ -0365alert.com -0365online.com -365-notifcation.com -365-notificaution.com -accessmyvdi.com -accessyouraccount.com -account-issues.com -account-issues.net -account-management-services.com -account-terminations.com -accountsissues.com -alerte-factures.com -allthingssporting.com -amazon-fraud-detection.com -amcarebank.com -app11ee.com -apple-infosec.com -assistthechildren.com -auction-it-all.com -audit-optix.com -auditoptix.com -notify-chase.com -bab-l-phish.com -babbelphish.com -bablphish.com -badge-services.com -badgingservices.info -bankingonit.info -barracuda-security-awareness-training.com -barracuda-security-awareness.com -barracuda-security-training.com -bell-rewards.com -benefitsadvisornetwork.com -benefitsforemployee.com -bestplacestowork.info -bestworkplacesurvey.com -blackboard-online.com -blackfridaydealmakers.com -board-portal.com -building-service.net -businessconf03.com -phishline.com -c1mb.com -c1mb.net -c1mb.org -canvas-education.com -cardinvitenow.com -cardservice-fraud.com -cardservicesfraud.com -channeloptix.com -chase-billing.com -chasehealthadvanceonline.com -cheapseatsxpress.com -ciimb.com -cimbb.org -clipceteradeals.com -clouddrivestorage.org -clouddriveuploads.net -cloudfiledropper.com -commerceservicecorp.org -greetingcardforyou.com -communitybankingtrends.com -connectmesafe.com -corp-erp.com -corporate-policy-updates.com -corporate38dk39.com -corporatefileaccess.com -corporateintranet.net -covid-funding.co -covid-relief.co -unitedshipmentservice.com -crditcrd.com -credit-reporting.org -credit-sleuth.com -cronwell.co.uk -currentnewsfeed.com -managedservicesonline.info -dclab-training.com -desktopaccessvdi.com -digitalemailspace.com -discounthandbagz.com -discountwireless.us -disrictcourt.com -doccusigns.com -documentscanner.info -donotcallanymore.com -downfinancing.com -drive-gloogle.com -driveshareconnections.com -dsinergi.net -earthquake-preparations.com -einvitesnow.com -elltradingcompany.com -email365access.com -emailsupp0rt-g00gel.com -emailsupp0rt-g00gle.com -emailupgrade.net -emcorgroupp.com -emcour.net -emcourgroup.com -employbenefitscenter.com -employeepayrollservices.com -endtrust.net -enviroptix.com -erpcorporateaccess.com -estaffevents.com -executivemagazines.com -executivespotlight.net -express-package.com -expresspackageupdates.com -faceblock-friend.com -fastwiretransfer.com -fcdex-alerts.com -federalship.com -fedex-alerts.com -filebox-sharing.com -files-storage.com -financebusiness.net -financeng.net -financialbroke.com -fiveminuteinterviewers.com -flood-preparations.com -flowersbycupid4u.com -folder-sharing.com -fortunesbest.com -fraud-optix.com -frauddetected.info -fraudoptix.com -freightinternationalservice.com -frieghtinternationalservices.com -g00gle-supp0rt.com -gdriveonlinestorage.com -getbestcreditscore.com -getmysecurefile.com -giftcards-rewards.com -giftcardwholesalers.com -giftonus.com -global-mask-mandate.com -glowphish.com -gorilla-spreadsheet.com -gov-delivry.com -grcoptix.com -green-optix.com -greenoptix.com -hammerphish.com -hardwarewarehouse.net.au -hayniecpas-training.com -health-news-reporting.com -healthadvance-online.net -healthalertadvisory.com -hnc-vs.co -homeofficecommunication.com -homeofficecommunications.com -linkedin-web.com -hr-benifits.com -hrpolicy-update.com -humanresourceupdates.com -humanresoursesolutions.com -hurricane-preparations.com -infection-alerts.com -instantprivacyupdaters.com -instantremoteconnect.com -investmentadvisornetwork.com -invoice-alert.com -invoice-alerts.com -invoicealerting.com -invoiceprocessexpeditors.com -ismyinternetfast.com -it-email-services.com -it-email-services.com.au -itemailservices.com -itemailsystem.com -itunes-invoice.com -itunes-security.com -itunesecurity.com -jndbmedical.com -join-team-meeting.com -joinmyconferenc.com -jpmc-phishing-test.com -jpmcmailservice.net -keepmyaccountsecure.com -keysaver-registration.com -kpmorganchase.com -lbfc.com -legalissuereport.com -likedin-connect.com -link-it.us -linkedin-connection.com -linkit-4u.com -linkusup.info -m1crosoft.co -mail365access.com -mailquarentinereport.com -mailstorage.co -marketing38493.com -massiveweightloss.net -medical-news-reporting.com -medical-news.co.uk -medical-news.us -messageconversion.com -messagingconnections.com -microsoft-notificaution.com -riskimpact.org -mobile-data-notifications.com -mohmalaysia.com -musicalsoundstream.com -my-joke-ofthe-day.com -mydrive-sharing.com -myjokedaily.com -mylivingequity.net -myloyaltyrewardsnow.com -mymedhealthreport.com -myofficeaccounts.com -myorderstatus.info -myreputationonline.net -mysafefax.com -mytoolkitmail.com -myvirtualconfernce.com -netsharingservices.com -networkconnecters.com -networkdriveconnectors.com -networkdrivesharing.com -neverclick.net -newpasswordverification.com -noreply-ups.com -nothingathissite.com -nothingatthisdomain.com -officequarentine.com -onedrive-alert.com -onedriveshare.com -onedriveshare.net.au -onedrop.live -onesdrive.info -online-connect.net -online-invite.com -onlinedesk-net.com -onlinediscountflowers.net -onlineexchangeprotection.com -onlineflowerdiscounters.com -onlinemailstorage.com -onlineprint4me.com -opinonsmattersurvey.com -orderprocessinginfo.com -orders-amazon.net -ouryammer.net -overdue-invoice.com -patchingauthority.com -patchingerrorreport.com -payrollexpeditors.com -petersenbc.com -phishfactor.com -phishimpact.com -phishingspot.com -phishline-incident-response.com -phishline-notifications.com -phishline-training-placeholder.com -phishline-training.com -phishlinetraining.com -phishmetrics.com -phishmetrix.com -phishsmoker.com -phishwarden.com -phoneoptix.com -photofeedsexpress.com -policyupdater.com -policyupdater.info -post-status.com.au -premiumvispayroll.com -prepareready.com -preventphishing.com -preventphishing.org -primeordertracking.com -propertymansystems.com -protectionservces.com -protectionservices.info -pushrisk.com -putyourdonation2work.com -rainforestcoffee.org -rapidtransportingnow.com -regulationreportsnow.com -remoteaccessservices.net -remoteemail.net -remoteworkplaces.net -retailoffers.net.au -riskpush.com -riskscore.org -sawphish.com -scan-monkey.com -scan-monkey.net -scanmonkies.com -scanmonkies.net -scanner-processing.com -securebackupsrvice.com -securefileshared.info -securemailaccess.com -securemailaccess.com.au -securesharingsite.com -securesharingwebsite.com -security-alerters.info -security-chase.org -gatepetro.com -securitycareonline.com -securityeducation.info -selectshop-events.com -services-comptes.com -severe-weather-relief.com -sf-notificatons.com -sharepointeronline.com -sharepointfiles.info -sharewithmenow.us -shipmentupdates.com -shippingissues.net -shippingupdates.info -shopperloyaltyprogram.com -shoppingrewardprograms.com -skywordpro.com -socioptix.com -special-agency.com -special-delivery.net -sport-world01.com -sportzles.com -staffeventplanning.com -standardfreightinc.com -supermarket-orders.com.au -survey38edk39.net -surveyminions.com -sustoptix.com -t-ny.us -thejpmorganchases.com -thephishingreport.com -theschoolmessenger.com -thevoicemessages.com -thisisphishing.info -threat-optix.com -threatoptix.com -threatsoptix.com -ti-ny.co -ti-ny.us -tollviolation.org -tollwayexpresspayments.com -toppaidjobz.com -topsecretshopperz.com -tornado-preparations.com -trackingforyou.com -trackthepkg.com -transportingsolutions.com -transportingsolutions.info -travelbargins.net.au -travelling4me.com -trecbackup.com -unitedshippersinc.com -utility-accounts.com -utrackthis.com -vaaderstad.com -vaderstaad.com -vadrstade.com -valueweekly.com -vedastaad.com -vedastad.com -vehiclecaredeals.com -verifyaccounts.us -verifymyaccounts.info -viewnewstoday.com -voicemessages.us -vpn-netaccess.com -wayfaic.com -wayfaicsale.com -web-access-alerts.com -wedoreservations.com -whatitsliketoworkhere.com -whereishospitality.com -wholesalegiftcardoffer.com -whydidyouclick.com -whytrustme.net -wiretransfersondemand.com -worldhealthalerts.com -eltradingcompany.com -encrypteddatastore.com -humanresourcebenefits.com -specialdeliveries.info -xyz8394hexi38.com -youhavebeenphished.com -youorderstatus.com -youraccountservices.com -yourchance2winit.com -yourencryptedmessages.com -yourlivingequity.com -yourticketchance.com -yourorderupdate.com - -64.132.201.92 # https://www•adressa•no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener jatvpn.softether.net jatcraft.com @@ -13907,6 +13515,44 @@ super-tester.de flirtenhier.com 185.7.99.190 +# Various Winget stuff, early May 2026 +angrybirdsstarwars2.com +mapmap.info +onlineresultsfinder.com +photovariants.com +theritzygypsy.com +thalesbaiao.com +moyendadesigns.com + + + + +michaelrinderle.com +quickfindresults.com +smorgasbordet.com +xdelta.org + +23.48.203.140 +3.33.130.190 +[2a02:26f0:1700:11::b856:6790] + + + + + + + + + + +# submitted via email +# https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/ +grokvarum.com +groktronum.com +xaidash.app +blogcryptoslate.com +blogfxempire.com +cointelegraphfeed.com # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— 0network.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 3fa77234e..ddfa3db35 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 29April2026v1 +# Version: 21May2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later can consider switching to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, due to an unconfirmed belief of mine that it allows better wildcarding than the Hosts and raw-domains versions. @@ -3419,398 +3419,6 @@ # https://new•reddit•com/r/engrish/comments/10zs6f6/low_budget_scam/ 127.0.0.1 54.219.218.169 -# https://new•reddit•com/r/engrish/comments/10z8r2u/well_you_tried/ -127.0.0.1 0365alert.com -127.0.0.1 0365online.com -127.0.0.1 365-notifcation.com -127.0.0.1 365-notificaution.com -127.0.0.1 accessmyvdi.com -127.0.0.1 accessyouraccount.com -127.0.0.1 account-issues.com -127.0.0.1 account-issues.net -127.0.0.1 account-management-services.com -127.0.0.1 account-terminations.com -127.0.0.1 accountsissues.com -127.0.0.1 alerte-factures.com -127.0.0.1 allthingssporting.com -127.0.0.1 amazon-fraud-detection.com -127.0.0.1 amcarebank.com -127.0.0.1 app11ee.com -127.0.0.1 apple-infosec.com -127.0.0.1 assistthechildren.com -127.0.0.1 auction-it-all.com -127.0.0.1 audit-optix.com -127.0.0.1 auditoptix.com -127.0.0.1 notify-chase.com -127.0.0.1 bab-l-phish.com -127.0.0.1 babbelphish.com -127.0.0.1 bablphish.com -127.0.0.1 badge-services.com -127.0.0.1 badgingservices.info -127.0.0.1 bankingonit.info -127.0.0.1 barracuda-security-awareness-training.com -127.0.0.1 barracuda-security-awareness.com -127.0.0.1 barracuda-security-training.com -127.0.0.1 bell-rewards.com -127.0.0.1 benefitsadvisornetwork.com -127.0.0.1 benefitsforemployee.com -127.0.0.1 bestplacestowork.info -127.0.0.1 bestworkplacesurvey.com -127.0.0.1 blackboard-online.com -127.0.0.1 blackfridaydealmakers.com -127.0.0.1 board-portal.com -127.0.0.1 building-service.net -127.0.0.1 businessconf03.com -127.0.0.1 phishline.com -127.0.0.1 c1mb.com -127.0.0.1 c1mb.net -127.0.0.1 c1mb.org -127.0.0.1 canvas-education.com -127.0.0.1 cardinvitenow.com -127.0.0.1 cardservice-fraud.com -127.0.0.1 cardservicesfraud.com -127.0.0.1 channeloptix.com -127.0.0.1 chase-billing.com -127.0.0.1 chasehealthadvanceonline.com -127.0.0.1 cheapseatsxpress.com -127.0.0.1 ciimb.com -127.0.0.1 cimbb.org -127.0.0.1 clipceteradeals.com -127.0.0.1 clouddrivestorage.org -127.0.0.1 clouddriveuploads.net -127.0.0.1 cloudfiledropper.com -127.0.0.1 commerceservicecorp.org -127.0.0.1 greetingcardforyou.com -127.0.0.1 communitybankingtrends.com -127.0.0.1 connectmesafe.com -127.0.0.1 corp-erp.com -127.0.0.1 corporate-policy-updates.com -127.0.0.1 corporate38dk39.com -127.0.0.1 corporatefileaccess.com -127.0.0.1 corporateintranet.net -127.0.0.1 covid-funding.co -127.0.0.1 covid-relief.co -127.0.0.1 unitedshipmentservice.com -127.0.0.1 crditcrd.com -127.0.0.1 credit-reporting.org -127.0.0.1 credit-sleuth.com -127.0.0.1 cronwell.co.uk -127.0.0.1 currentnewsfeed.com -127.0.0.1 managedservicesonline.info -127.0.0.1 dclab-training.com -127.0.0.1 desktopaccessvdi.com -127.0.0.1 digitalemailspace.com -127.0.0.1 discounthandbagz.com -127.0.0.1 discountwireless.us -127.0.0.1 disrictcourt.com -127.0.0.1 doccusigns.com -127.0.0.1 documentscanner.info -127.0.0.1 donotcallanymore.com -127.0.0.1 downfinancing.com -127.0.0.1 drive-gloogle.com -127.0.0.1 driveshareconnections.com -127.0.0.1 dsinergi.net -127.0.0.1 earthquake-preparations.com -127.0.0.1 einvitesnow.com -127.0.0.1 elltradingcompany.com -127.0.0.1 email365access.com -127.0.0.1 emailsupp0rt-g00gel.com -127.0.0.1 emailsupp0rt-g00gle.com -127.0.0.1 emailupgrade.net -127.0.0.1 emcorgroupp.com -127.0.0.1 emcour.net -127.0.0.1 emcourgroup.com -127.0.0.1 employbenefitscenter.com -127.0.0.1 employeepayrollservices.com -127.0.0.1 endtrust.net -127.0.0.1 enviroptix.com -127.0.0.1 erpcorporateaccess.com -127.0.0.1 estaffevents.com -127.0.0.1 executivemagazines.com -127.0.0.1 executivespotlight.net -127.0.0.1 express-package.com -127.0.0.1 expresspackageupdates.com -127.0.0.1 faceblock-friend.com -127.0.0.1 fastwiretransfer.com -127.0.0.1 fcdex-alerts.com -127.0.0.1 federalship.com -127.0.0.1 fedex-alerts.com -127.0.0.1 filebox-sharing.com -127.0.0.1 files-storage.com -127.0.0.1 financebusiness.net -127.0.0.1 financeng.net -127.0.0.1 financialbroke.com -127.0.0.1 fiveminuteinterviewers.com -127.0.0.1 flood-preparations.com -127.0.0.1 flowersbycupid4u.com -127.0.0.1 folder-sharing.com -127.0.0.1 fortunesbest.com -127.0.0.1 fraud-optix.com -127.0.0.1 frauddetected.info -127.0.0.1 fraudoptix.com -127.0.0.1 freightinternationalservice.com -127.0.0.1 frieghtinternationalservices.com -127.0.0.1 g00gle-supp0rt.com -127.0.0.1 gdriveonlinestorage.com -127.0.0.1 getbestcreditscore.com -127.0.0.1 getmysecurefile.com -127.0.0.1 giftcards-rewards.com -127.0.0.1 giftcardwholesalers.com -127.0.0.1 giftonus.com -127.0.0.1 global-mask-mandate.com -127.0.0.1 glowphish.com -127.0.0.1 gorilla-spreadsheet.com -127.0.0.1 gov-delivry.com -127.0.0.1 grcoptix.com -127.0.0.1 green-optix.com -127.0.0.1 greenoptix.com -127.0.0.1 hammerphish.com -127.0.0.1 hardwarewarehouse.net.au -127.0.0.1 hayniecpas-training.com -127.0.0.1 health-news-reporting.com -127.0.0.1 healthadvance-online.net -127.0.0.1 healthalertadvisory.com -127.0.0.1 hnc-vs.co -127.0.0.1 homeofficecommunication.com -127.0.0.1 homeofficecommunications.com -127.0.0.1 linkedin-web.com -127.0.0.1 hr-benifits.com -127.0.0.1 hrpolicy-update.com -127.0.0.1 humanresourceupdates.com -127.0.0.1 humanresoursesolutions.com -127.0.0.1 hurricane-preparations.com -127.0.0.1 infection-alerts.com -127.0.0.1 instantprivacyupdaters.com -127.0.0.1 instantremoteconnect.com -127.0.0.1 investmentadvisornetwork.com -127.0.0.1 invoice-alert.com -127.0.0.1 invoice-alerts.com -127.0.0.1 invoicealerting.com -127.0.0.1 invoiceprocessexpeditors.com -127.0.0.1 ismyinternetfast.com -127.0.0.1 it-email-services.com -127.0.0.1 it-email-services.com.au -127.0.0.1 itemailservices.com -127.0.0.1 itemailsystem.com -127.0.0.1 itunes-invoice.com -127.0.0.1 itunes-security.com -127.0.0.1 itunesecurity.com -127.0.0.1 jndbmedical.com -127.0.0.1 join-team-meeting.com -127.0.0.1 joinmyconferenc.com -127.0.0.1 jpmc-phishing-test.com -127.0.0.1 jpmcmailservice.net -127.0.0.1 keepmyaccountsecure.com -127.0.0.1 keysaver-registration.com -127.0.0.1 kpmorganchase.com -127.0.0.1 lbfc.com -127.0.0.1 legalissuereport.com -127.0.0.1 likedin-connect.com -127.0.0.1 link-it.us -127.0.0.1 linkedin-connection.com -127.0.0.1 linkit-4u.com -127.0.0.1 linkusup.info -127.0.0.1 m1crosoft.co -127.0.0.1 mail365access.com -127.0.0.1 mailquarentinereport.com -127.0.0.1 mailstorage.co -127.0.0.1 marketing38493.com -127.0.0.1 massiveweightloss.net -127.0.0.1 medical-news-reporting.com -127.0.0.1 medical-news.co.uk -127.0.0.1 medical-news.us -127.0.0.1 messageconversion.com -127.0.0.1 messagingconnections.com -127.0.0.1 microsoft-notificaution.com -127.0.0.1 riskimpact.org -127.0.0.1 mobile-data-notifications.com -127.0.0.1 mohmalaysia.com -127.0.0.1 musicalsoundstream.com -127.0.0.1 my-joke-ofthe-day.com -127.0.0.1 mydrive-sharing.com -127.0.0.1 myjokedaily.com -127.0.0.1 mylivingequity.net -127.0.0.1 myloyaltyrewardsnow.com -127.0.0.1 mymedhealthreport.com -127.0.0.1 myofficeaccounts.com -127.0.0.1 myorderstatus.info -127.0.0.1 myreputationonline.net -127.0.0.1 mysafefax.com -127.0.0.1 mytoolkitmail.com -127.0.0.1 myvirtualconfernce.com -127.0.0.1 netsharingservices.com -127.0.0.1 networkconnecters.com -127.0.0.1 networkdriveconnectors.com -127.0.0.1 networkdrivesharing.com -127.0.0.1 neverclick.net -127.0.0.1 newpasswordverification.com -127.0.0.1 noreply-ups.com -127.0.0.1 nothingathissite.com -127.0.0.1 nothingatthisdomain.com -127.0.0.1 officequarentine.com -127.0.0.1 onedrive-alert.com -127.0.0.1 onedriveshare.com -127.0.0.1 onedriveshare.net.au -127.0.0.1 onedrop.live -127.0.0.1 onesdrive.info -127.0.0.1 online-connect.net -127.0.0.1 online-invite.com -127.0.0.1 onlinedesk-net.com -127.0.0.1 onlinediscountflowers.net -127.0.0.1 onlineexchangeprotection.com -127.0.0.1 onlineflowerdiscounters.com -127.0.0.1 onlinemailstorage.com -127.0.0.1 onlineprint4me.com -127.0.0.1 opinonsmattersurvey.com -127.0.0.1 orderprocessinginfo.com -127.0.0.1 orders-amazon.net -127.0.0.1 ouryammer.net -127.0.0.1 overdue-invoice.com -127.0.0.1 patchingauthority.com -127.0.0.1 patchingerrorreport.com -127.0.0.1 payrollexpeditors.com -127.0.0.1 petersenbc.com -127.0.0.1 phishfactor.com -127.0.0.1 phishimpact.com -127.0.0.1 phishingspot.com -127.0.0.1 phishline-incident-response.com -127.0.0.1 phishline-notifications.com -127.0.0.1 phishline-training-placeholder.com -127.0.0.1 phishline-training.com -127.0.0.1 phishlinetraining.com -127.0.0.1 phishmetrics.com -127.0.0.1 phishmetrix.com -127.0.0.1 phishsmoker.com -127.0.0.1 phishwarden.com -127.0.0.1 phoneoptix.com -127.0.0.1 photofeedsexpress.com -127.0.0.1 policyupdater.com -127.0.0.1 policyupdater.info -127.0.0.1 post-status.com.au -127.0.0.1 premiumvispayroll.com -127.0.0.1 prepareready.com -127.0.0.1 preventphishing.com -127.0.0.1 preventphishing.org -127.0.0.1 primeordertracking.com -127.0.0.1 propertymansystems.com -127.0.0.1 protectionservces.com -127.0.0.1 protectionservices.info -127.0.0.1 pushrisk.com -127.0.0.1 putyourdonation2work.com -127.0.0.1 rainforestcoffee.org -127.0.0.1 rapidtransportingnow.com -127.0.0.1 regulationreportsnow.com -127.0.0.1 remoteaccessservices.net -127.0.0.1 remoteemail.net -127.0.0.1 remoteworkplaces.net -127.0.0.1 retailoffers.net.au -127.0.0.1 riskpush.com -127.0.0.1 riskscore.org -127.0.0.1 sawphish.com -127.0.0.1 scan-monkey.com -127.0.0.1 scan-monkey.net -127.0.0.1 scanmonkies.com -127.0.0.1 scanmonkies.net -127.0.0.1 scanner-processing.com -127.0.0.1 securebackupsrvice.com -127.0.0.1 securefileshared.info -127.0.0.1 securemailaccess.com -127.0.0.1 securemailaccess.com.au -127.0.0.1 securesharingsite.com -127.0.0.1 securesharingwebsite.com -127.0.0.1 security-alerters.info -127.0.0.1 security-chase.org -127.0.0.1 gatepetro.com -127.0.0.1 securitycareonline.com -127.0.0.1 securityeducation.info -127.0.0.1 selectshop-events.com -127.0.0.1 services-comptes.com -127.0.0.1 severe-weather-relief.com -127.0.0.1 sf-notificatons.com -127.0.0.1 sharepointeronline.com -127.0.0.1 sharepointfiles.info -127.0.0.1 sharewithmenow.us -127.0.0.1 shipmentupdates.com -127.0.0.1 shippingissues.net -127.0.0.1 shippingupdates.info -127.0.0.1 shopperloyaltyprogram.com -127.0.0.1 shoppingrewardprograms.com -127.0.0.1 skywordpro.com -127.0.0.1 socioptix.com -127.0.0.1 special-agency.com -127.0.0.1 special-delivery.net -127.0.0.1 sport-world01.com -127.0.0.1 sportzles.com -127.0.0.1 staffeventplanning.com -127.0.0.1 standardfreightinc.com -127.0.0.1 supermarket-orders.com.au -127.0.0.1 survey38edk39.net -127.0.0.1 surveyminions.com -127.0.0.1 sustoptix.com -127.0.0.1 t-ny.us -127.0.0.1 thejpmorganchases.com -127.0.0.1 thephishingreport.com -127.0.0.1 theschoolmessenger.com -127.0.0.1 thevoicemessages.com -127.0.0.1 thisisphishing.info -127.0.0.1 threat-optix.com -127.0.0.1 threatoptix.com -127.0.0.1 threatsoptix.com -127.0.0.1 ti-ny.co -127.0.0.1 ti-ny.us -127.0.0.1 tollviolation.org -127.0.0.1 tollwayexpresspayments.com -127.0.0.1 toppaidjobz.com -127.0.0.1 topsecretshopperz.com -127.0.0.1 tornado-preparations.com -127.0.0.1 trackingforyou.com -127.0.0.1 trackthepkg.com -127.0.0.1 transportingsolutions.com -127.0.0.1 transportingsolutions.info -127.0.0.1 travelbargins.net.au -127.0.0.1 travelling4me.com -127.0.0.1 trecbackup.com -127.0.0.1 unitedshippersinc.com -127.0.0.1 utility-accounts.com -127.0.0.1 utrackthis.com -127.0.0.1 vaaderstad.com -127.0.0.1 vaderstaad.com -127.0.0.1 vadrstade.com -127.0.0.1 valueweekly.com -127.0.0.1 vedastaad.com -127.0.0.1 vedastad.com -127.0.0.1 vehiclecaredeals.com -127.0.0.1 verifyaccounts.us -127.0.0.1 verifymyaccounts.info -127.0.0.1 viewnewstoday.com -127.0.0.1 voicemessages.us -127.0.0.1 vpn-netaccess.com -127.0.0.1 wayfaic.com -127.0.0.1 wayfaicsale.com -127.0.0.1 web-access-alerts.com -127.0.0.1 wedoreservations.com -127.0.0.1 whatitsliketoworkhere.com -127.0.0.1 whereishospitality.com -127.0.0.1 wholesalegiftcardoffer.com -127.0.0.1 whydidyouclick.com -127.0.0.1 whytrustme.net -127.0.0.1 wiretransfersondemand.com -127.0.0.1 worldhealthalerts.com -127.0.0.1 eltradingcompany.com -127.0.0.1 encrypteddatastore.com -127.0.0.1 humanresourcebenefits.com -127.0.0.1 specialdeliveries.info -127.0.0.1 xyz8394hexi38.com -127.0.0.1 youhavebeenphished.com -127.0.0.1 youorderstatus.com -127.0.0.1 youraccountservices.com -127.0.0.1 yourchance2winit.com -127.0.0.1 yourencryptedmessages.com -127.0.0.1 yourlivingequity.com -127.0.0.1 yourticketchance.com -127.0.0.1 yourorderupdate.com - -127.0.0.1 64.132.201.92 # https://www•adressa•no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener 127.0.0.1 jatvpn.softether.net 127.0.0.1 jatcraft.com @@ -13854,6 +13462,44 @@ 127.0.0.1 flirtenhier.com 127.0.0.1 185.7.99.190 +# Various Winget stuff, early May 2026 +127.0.0.1 angrybirdsstarwars2.com +127.0.0.1 mapmap.info +127.0.0.1 onlineresultsfinder.com +127.0.0.1 photovariants.com +127.0.0.1 theritzygypsy.com +127.0.0.1 thalesbaiao.com +127.0.0.1 moyendadesigns.com + + + + +127.0.0.1 michaelrinderle.com +127.0.0.1 quickfindresults.com +127.0.0.1 smorgasbordet.com +127.0.0.1 xdelta.org + +127.0.0.1 23.48.203.140 +127.0.0.1 3.33.130.190 + + + + + + + + + + + +# submitted via email +# https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/ +127.0.0.1 grokvarum.com +127.0.0.1 groktronum.com +127.0.0.1 xaidash.app +127.0.0.1 blogcryptoslate.com +127.0.0.1 blogfxempire.com +127.0.0.1 cointelegraphfeed.com # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— 127.0.0.1 0network.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 819e3e63e..d39f6b9ae 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 29April2026v1-Deprecated +# Version: 21May2026v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -3144,397 +3144,6 @@ .194.110.247.242 .54.219.218.169 -.0365alert.com -.0365online.com -.365-notifcation.com -.365-notificaution.com -.accessmyvdi.com -.accessyouraccount.com -.account-issues.com -.account-issues.net -.account-management-services.com -.account-terminations.com -.accountsissues.com -.alerte-factures.com -.allthingssporting.com -.amazon-fraud-detection.com -.amcarebank.com -.app11ee.com -.apple-infosec.com -.assistthechildren.com -.auction-it-all.com -.audit-optix.com -.auditoptix.com -.notify-chase.com -.bab-l-phish.com -.babbelphish.com -.bablphish.com -.badge-services.com -.badgingservices.info -.bankingonit.info -.barracuda-security-awareness-training.com -.barracuda-security-awareness.com -.barracuda-security-training.com -.bell-rewards.com -.benefitsadvisornetwork.com -.benefitsforemployee.com -.bestplacestowork.info -.bestworkplacesurvey.com -.blackboard-online.com -.blackfridaydealmakers.com -.board-portal.com -.building-service.net -.businessconf03.com -.phishline.com -.c1mb.com -.c1mb.net -.c1mb.org -.canvas-education.com -.cardinvitenow.com -.cardservice-fraud.com -.cardservicesfraud.com -.channeloptix.com -.chase-billing.com -.chasehealthadvanceonline.com -.cheapseatsxpress.com -.ciimb.com -.cimbb.org -.clipceteradeals.com -.clouddrivestorage.org -.clouddriveuploads.net -.cloudfiledropper.com -.commerceservicecorp.org -.greetingcardforyou.com -.communitybankingtrends.com -.connectmesafe.com -.corp-erp.com -.corporate-policy-updates.com -.corporate38dk39.com -.corporatefileaccess.com -.corporateintranet.net -.covid-funding.co -.covid-relief.co -.unitedshipmentservice.com -.crditcrd.com -.credit-reporting.org -.credit-sleuth.com -.cronwell.co.uk -.currentnewsfeed.com -.managedservicesonline.info -.dclab-training.com -.desktopaccessvdi.com -.digitalemailspace.com -.discounthandbagz.com -.discountwireless.us -.disrictcourt.com -.doccusigns.com -.documentscanner.info -.donotcallanymore.com -.downfinancing.com -.drive-gloogle.com -.driveshareconnections.com -.dsinergi.net -.earthquake-preparations.com -.einvitesnow.com -.elltradingcompany.com -.email365access.com -.emailsupp0rt-g00gel.com -.emailsupp0rt-g00gle.com -.emailupgrade.net -.emcorgroupp.com -.emcour.net -.emcourgroup.com -.employbenefitscenter.com -.employeepayrollservices.com -.endtrust.net -.enviroptix.com -.erpcorporateaccess.com -.estaffevents.com -.executivemagazines.com -.executivespotlight.net -.express-package.com -.expresspackageupdates.com -.faceblock-friend.com -.fastwiretransfer.com -.fcdex-alerts.com -.federalship.com -.fedex-alerts.com -.filebox-sharing.com -.files-storage.com -.financebusiness.net -.financeng.net -.financialbroke.com -.fiveminuteinterviewers.com -.flood-preparations.com -.flowersbycupid4u.com -.folder-sharing.com -.fortunesbest.com -.fraud-optix.com -.frauddetected.info -.fraudoptix.com -.freightinternationalservice.com -.frieghtinternationalservices.com -.g00gle-supp0rt.com -.gdriveonlinestorage.com -.getbestcreditscore.com -.getmysecurefile.com -.giftcards-rewards.com -.giftcardwholesalers.com -.giftonus.com -.global-mask-mandate.com -.glowphish.com -.gorilla-spreadsheet.com -.gov-delivry.com -.grcoptix.com -.green-optix.com -.greenoptix.com -.hammerphish.com -.hardwarewarehouse.net.au -.hayniecpas-training.com -.health-news-reporting.com -.healthadvance-online.net -.healthalertadvisory.com -.hnc-vs.co -.homeofficecommunication.com -.homeofficecommunications.com -.linkedin-web.com -.hr-benifits.com -.hrpolicy-update.com -.humanresourceupdates.com -.humanresoursesolutions.com -.hurricane-preparations.com -.infection-alerts.com -.instantprivacyupdaters.com -.instantremoteconnect.com -.investmentadvisornetwork.com -.invoice-alert.com -.invoice-alerts.com -.invoicealerting.com -.invoiceprocessexpeditors.com -.ismyinternetfast.com -.it-email-services.com -.it-email-services.com.au -.itemailservices.com -.itemailsystem.com -.itunes-invoice.com -.itunes-security.com -.itunesecurity.com -.jndbmedical.com -.join-team-meeting.com -.joinmyconferenc.com -.jpmc-phishing-test.com -.jpmcmailservice.net -.keepmyaccountsecure.com -.keysaver-registration.com -.kpmorganchase.com -.lbfc.com -.legalissuereport.com -.likedin-connect.com -.link-it.us -.linkedin-connection.com -.linkit-4u.com -.linkusup.info -.m1crosoft.co -.mail365access.com -.mailquarentinereport.com -.mailstorage.co -.marketing38493.com -.massiveweightloss.net -.medical-news-reporting.com -.medical-news.co.uk -.medical-news.us -.messageconversion.com -.messagingconnections.com -.microsoft-notificaution.com -.riskimpact.org -.mobile-data-notifications.com -.mohmalaysia.com -.musicalsoundstream.com -.my-joke-ofthe-day.com -.mydrive-sharing.com -.myjokedaily.com -.mylivingequity.net -.myloyaltyrewardsnow.com -.mymedhealthreport.com -.myofficeaccounts.com -.myorderstatus.info -.myreputationonline.net -.mysafefax.com -.mytoolkitmail.com -.myvirtualconfernce.com -.netsharingservices.com -.networkconnecters.com -.networkdriveconnectors.com -.networkdrivesharing.com -.neverclick.net -.newpasswordverification.com -.noreply-ups.com -.nothingathissite.com -.nothingatthisdomain.com -.officequarentine.com -.onedrive-alert.com -.onedriveshare.com -.onedriveshare.net.au -.onedrop.live -.onesdrive.info -.online-connect.net -.online-invite.com -.onlinedesk-net.com -.onlinediscountflowers.net -.onlineexchangeprotection.com -.onlineflowerdiscounters.com -.onlinemailstorage.com -.onlineprint4me.com -.opinonsmattersurvey.com -.orderprocessinginfo.com -.orders-amazon.net -.ouryammer.net -.overdue-invoice.com -.patchingauthority.com -.patchingerrorreport.com -.payrollexpeditors.com -.petersenbc.com -.phishfactor.com -.phishimpact.com -.phishingspot.com -.phishline-incident-response.com -.phishline-notifications.com -.phishline-training-placeholder.com -.phishline-training.com -.phishlinetraining.com -.phishmetrics.com -.phishmetrix.com -.phishsmoker.com -.phishwarden.com -.phoneoptix.com -.photofeedsexpress.com -.policyupdater.com -.policyupdater.info -.post-status.com.au -.premiumvispayroll.com -.prepareready.com -.preventphishing.com -.preventphishing.org -.primeordertracking.com -.propertymansystems.com -.protectionservces.com -.protectionservices.info -.pushrisk.com -.putyourdonation2work.com -.rainforestcoffee.org -.rapidtransportingnow.com -.regulationreportsnow.com -.remoteaccessservices.net -.remoteemail.net -.remoteworkplaces.net -.retailoffers.net.au -.riskpush.com -.riskscore.org -.sawphish.com -.scan-monkey.com -.scan-monkey.net -.scanmonkies.com -.scanmonkies.net -.scanner-processing.com -.securebackupsrvice.com -.securefileshared.info -.securemailaccess.com -.securemailaccess.com.au -.securesharingsite.com -.securesharingwebsite.com -.security-alerters.info -.security-chase.org -.gatepetro.com -.securitycareonline.com -.securityeducation.info -.selectshop-events.com -.services-comptes.com -.severe-weather-relief.com -.sf-notificatons.com -.sharepointeronline.com -.sharepointfiles.info -.sharewithmenow.us -.shipmentupdates.com -.shippingissues.net -.shippingupdates.info -.shopperloyaltyprogram.com -.shoppingrewardprograms.com -.skywordpro.com -.socioptix.com -.special-agency.com -.special-delivery.net -.sport-world01.com -.sportzles.com -.staffeventplanning.com -.standardfreightinc.com -.supermarket-orders.com.au -.survey38edk39.net -.surveyminions.com -.sustoptix.com -.t-ny.us -.thejpmorganchases.com -.thephishingreport.com -.theschoolmessenger.com -.thevoicemessages.com -.thisisphishing.info -.threat-optix.com -.threatoptix.com -.threatsoptix.com -.ti-ny.co -.ti-ny.us -.tollviolation.org -.tollwayexpresspayments.com -.toppaidjobz.com -.topsecretshopperz.com -.tornado-preparations.com -.trackingforyou.com -.trackthepkg.com -.transportingsolutions.com -.transportingsolutions.info -.travelbargins.net.au -.travelling4me.com -.trecbackup.com -.unitedshippersinc.com -.utility-accounts.com -.utrackthis.com -.vaaderstad.com -.vaderstaad.com -.vadrstade.com -.valueweekly.com -.vedastaad.com -.vedastad.com -.vehiclecaredeals.com -.verifyaccounts.us -.verifymyaccounts.info -.viewnewstoday.com -.voicemessages.us -.vpn-netaccess.com -.wayfaic.com -.wayfaicsale.com -.web-access-alerts.com -.wedoreservations.com -.whatitsliketoworkhere.com -.whereishospitality.com -.wholesalegiftcardoffer.com -.whydidyouclick.com -.whytrustme.net -.wiretransfersondemand.com -.worldhealthalerts.com -.eltradingcompany.com -.encrypteddatastore.com -.humanresourcebenefits.com -.specialdeliveries.info -.xyz8394hexi38.com -.youhavebeenphished.com -.youorderstatus.com -.youraccountservices.com -.yourchance2winit.com -.yourencryptedmessages.com -.yourlivingequity.com -.yourticketchance.com -.yourorderupdate.com - -.64.132.201.92 .jatvpn.softether.net .jatcraft.com @@ -13469,7 +13078,40 @@ .super-tester.de .flirtenhier.com .185.7.99.190 -185.7.99.190 + +# Various Winget stuff, early May 2026 +.angrybirdsstarwars2.com +.mapmap.info +.onlineresultsfinder.com +.photovariants.com +.theritzygypsy.com +.thalesbaiao.com +.moyendadesigns.com + + +.michaelrinderle.com +.quickfindresults.com +.smorgasbordet.com +.xdelta.org + +.23.48.203.140 +.3.33.130.190 +.[2a02:26f0:1700:11::b856:6790] + + + + + + + + +# submitted via email +.grokvarum.com +.groktronum.com +.xaidash.app +.blogcryptoslate.com +.blogfxempire.com +.cointelegraphfeed.com .0network.com .100conversions.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 5466329d9..a057d3542 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 29April2026v1-Deprecated +# Version: 21May2026v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -49,6 +49,9 @@ +d tk-web.top +d qpmegathread.top +d qmk.top ++d mgytr.top ++d girlskissing.top ++d luxferre.top # (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) +d masto*.top @@ -3455,398 +3458,6 @@ # https://new•reddit•com/r/engrish/comments/10zs6f6/low_budget_scam/ -d 54.219.218.169 -# https://new•reddit•com/r/engrish/comments/10z8r2u/well_you_tried/ --d 0365alert.com --d 0365online.com --d 365-notifcation.com --d 365-notificaution.com --d accessmyvdi.com --d accessyouraccount.com --d account-issues.com --d account-issues.net --d account-management-services.com --d account-terminations.com --d accountsissues.com --d alerte-factures.com --d allthingssporting.com --d amazon-fraud-detection.com --d amcarebank.com --d app11ee.com --d apple-infosec.com --d assistthechildren.com --d auction-it-all.com --d audit-optix.com --d auditoptix.com --d notify-chase.com --d bab-l-phish.com --d babbelphish.com --d bablphish.com --d badge-services.com --d badgingservices.info --d bankingonit.info --d barracuda-security-awareness-training.com --d barracuda-security-awareness.com --d barracuda-security-training.com --d bell-rewards.com --d benefitsadvisornetwork.com --d benefitsforemployee.com --d bestplacestowork.info --d bestworkplacesurvey.com --d blackboard-online.com --d blackfridaydealmakers.com --d board-portal.com --d building-service.net --d businessconf03.com --d phishline.com --d c1mb.com --d c1mb.net --d c1mb.org --d canvas-education.com --d cardinvitenow.com --d cardservice-fraud.com --d cardservicesfraud.com --d channeloptix.com --d chase-billing.com --d chasehealthadvanceonline.com --d cheapseatsxpress.com --d ciimb.com --d cimbb.org --d clipceteradeals.com --d clouddrivestorage.org --d clouddriveuploads.net --d cloudfiledropper.com --d commerceservicecorp.org --d greetingcardforyou.com --d communitybankingtrends.com --d connectmesafe.com --d corp-erp.com --d corporate-policy-updates.com --d corporate38dk39.com --d corporatefileaccess.com --d corporateintranet.net --d covid-funding.co --d covid-relief.co --d unitedshipmentservice.com --d crditcrd.com --d credit-reporting.org --d credit-sleuth.com --d cronwell.co.uk --d currentnewsfeed.com --d managedservicesonline.info --d dclab-training.com --d desktopaccessvdi.com --d digitalemailspace.com --d discounthandbagz.com --d discountwireless.us --d disrictcourt.com --d doccusigns.com --d documentscanner.info --d donotcallanymore.com --d downfinancing.com --d drive-gloogle.com --d driveshareconnections.com --d dsinergi.net --d earthquake-preparations.com --d einvitesnow.com --d elltradingcompany.com --d email365access.com --d emailsupp0rt-g00gel.com --d emailsupp0rt-g00gle.com --d emailupgrade.net --d emcorgroupp.com --d emcour.net --d emcourgroup.com --d employbenefitscenter.com --d employeepayrollservices.com --d endtrust.net --d enviroptix.com --d erpcorporateaccess.com --d estaffevents.com --d executivemagazines.com --d executivespotlight.net --d express-package.com --d expresspackageupdates.com --d faceblock-friend.com --d fastwiretransfer.com --d fcdex-alerts.com --d federalship.com --d fedex-alerts.com --d filebox-sharing.com --d files-storage.com --d financebusiness.net --d financeng.net --d financialbroke.com --d fiveminuteinterviewers.com --d flood-preparations.com --d flowersbycupid4u.com --d folder-sharing.com --d fortunesbest.com --d fraud-optix.com --d frauddetected.info --d fraudoptix.com --d freightinternationalservice.com --d frieghtinternationalservices.com --d g00gle-supp0rt.com --d gdriveonlinestorage.com --d getbestcreditscore.com --d getmysecurefile.com --d giftcards-rewards.com --d giftcardwholesalers.com --d giftonus.com --d global-mask-mandate.com --d glowphish.com --d gorilla-spreadsheet.com --d gov-delivry.com --d grcoptix.com --d green-optix.com --d greenoptix.com --d hammerphish.com --d hardwarewarehouse.net.au --d hayniecpas-training.com --d health-news-reporting.com --d healthadvance-online.net --d healthalertadvisory.com --d hnc-vs.co --d homeofficecommunication.com --d homeofficecommunications.com --d linkedin-web.com --d hr-benifits.com --d hrpolicy-update.com --d humanresourceupdates.com --d humanresoursesolutions.com --d hurricane-preparations.com --d infection-alerts.com --d instantprivacyupdaters.com --d instantremoteconnect.com --d investmentadvisornetwork.com --d invoice-alert.com --d invoice-alerts.com --d invoicealerting.com --d invoiceprocessexpeditors.com --d ismyinternetfast.com --d it-email-services.com --d it-email-services.com.au --d itemailservices.com --d itemailsystem.com --d itunes-invoice.com --d itunes-security.com --d itunesecurity.com --d jndbmedical.com --d join-team-meeting.com --d joinmyconferenc.com --d jpmc-phishing-test.com --d jpmcmailservice.net --d keepmyaccountsecure.com --d keysaver-registration.com --d kpmorganchase.com --d lbfc.com --d legalissuereport.com --d likedin-connect.com --d link-it.us --d linkedin-connection.com --d linkit-4u.com --d linkusup.info --d m1crosoft.co --d mail365access.com --d mailquarentinereport.com --d mailstorage.co --d marketing38493.com --d massiveweightloss.net --d medical-news-reporting.com --d medical-news.co.uk --d medical-news.us --d messageconversion.com --d messagingconnections.com --d microsoft-notificaution.com --d riskimpact.org --d mobile-data-notifications.com --d mohmalaysia.com --d musicalsoundstream.com --d my-joke-ofthe-day.com --d mydrive-sharing.com --d myjokedaily.com --d mylivingequity.net --d myloyaltyrewardsnow.com --d mymedhealthreport.com --d myofficeaccounts.com --d myorderstatus.info --d myreputationonline.net --d mysafefax.com --d mytoolkitmail.com --d myvirtualconfernce.com --d netsharingservices.com --d networkconnecters.com --d networkdriveconnectors.com --d networkdrivesharing.com --d neverclick.net --d newpasswordverification.com --d noreply-ups.com --d nothingathissite.com --d nothingatthisdomain.com --d officequarentine.com --d onedrive-alert.com --d onedriveshare.com --d onedriveshare.net.au --d onedrop.live --d onesdrive.info --d online-connect.net --d online-invite.com --d onlinedesk-net.com --d onlinediscountflowers.net --d onlineexchangeprotection.com --d onlineflowerdiscounters.com --d onlinemailstorage.com --d onlineprint4me.com --d opinonsmattersurvey.com --d orderprocessinginfo.com --d orders-amazon.net --d ouryammer.net --d overdue-invoice.com --d patchingauthority.com --d patchingerrorreport.com --d payrollexpeditors.com --d petersenbc.com --d phishfactor.com --d phishimpact.com --d phishingspot.com --d phishline-incident-response.com --d phishline-notifications.com --d phishline-training-placeholder.com --d phishline-training.com --d phishlinetraining.com --d phishmetrics.com --d phishmetrix.com --d phishsmoker.com --d phishwarden.com --d phoneoptix.com --d photofeedsexpress.com --d policyupdater.com --d policyupdater.info --d post-status.com.au --d premiumvispayroll.com --d prepareready.com --d preventphishing.com --d preventphishing.org --d primeordertracking.com --d propertymansystems.com --d protectionservces.com --d protectionservices.info --d pushrisk.com --d putyourdonation2work.com --d rainforestcoffee.org --d rapidtransportingnow.com --d regulationreportsnow.com --d remoteaccessservices.net --d remoteemail.net --d remoteworkplaces.net --d retailoffers.net.au --d riskpush.com --d riskscore.org --d sawphish.com --d scan-monkey.com --d scan-monkey.net --d scanmonkies.com --d scanmonkies.net --d scanner-processing.com --d securebackupsrvice.com --d securefileshared.info --d securemailaccess.com --d securemailaccess.com.au --d securesharingsite.com --d securesharingwebsite.com --d security-alerters.info --d security-chase.org --d gatepetro.com --d securitycareonline.com --d securityeducation.info --d selectshop-events.com --d services-comptes.com --d severe-weather-relief.com --d sf-notificatons.com --d sharepointeronline.com --d sharepointfiles.info --d sharewithmenow.us --d shipmentupdates.com --d shippingissues.net --d shippingupdates.info --d shopperloyaltyprogram.com --d shoppingrewardprograms.com --d skywordpro.com --d socioptix.com --d special-agency.com --d special-delivery.net --d sport-world01.com --d sportzles.com --d staffeventplanning.com --d standardfreightinc.com --d supermarket-orders.com.au --d survey38edk39.net --d surveyminions.com --d sustoptix.com --d t-ny.us --d thejpmorganchases.com --d thephishingreport.com --d theschoolmessenger.com --d thevoicemessages.com --d thisisphishing.info --d threat-optix.com --d threatoptix.com --d threatsoptix.com --d ti-ny.co --d ti-ny.us --d tollviolation.org --d tollwayexpresspayments.com --d toppaidjobz.com --d topsecretshopperz.com --d tornado-preparations.com --d trackingforyou.com --d trackthepkg.com --d transportingsolutions.com --d transportingsolutions.info --d travelbargins.net.au --d travelling4me.com --d trecbackup.com --d unitedshippersinc.com --d utility-accounts.com --d utrackthis.com --d vaaderstad.com --d vaderstaad.com --d vadrstade.com --d valueweekly.com --d vedastaad.com --d vedastad.com --d vehiclecaredeals.com --d verifyaccounts.us --d verifymyaccounts.info --d viewnewstoday.com --d voicemessages.us --d vpn-netaccess.com --d wayfaic.com --d wayfaicsale.com --d web-access-alerts.com --d wedoreservations.com --d whatitsliketoworkhere.com --d whereishospitality.com --d wholesalegiftcardoffer.com --d whydidyouclick.com --d whytrustme.net --d wiretransfersondemand.com --d worldhealthalerts.com --d eltradingcompany.com --d encrypteddatastore.com --d humanresourcebenefits.com --d specialdeliveries.info --d xyz8394hexi38.com --d youhavebeenphished.com --d youorderstatus.com --d youraccountservices.com --d yourchance2winit.com --d yourencryptedmessages.com --d yourlivingequity.com --d yourticketchance.com --d yourorderupdate.com - --d 64.132.201.92 # https://www•adressa•no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener -d jatvpn.softether.net -d jatcraft.com @@ -4796,7 +4407,7 @@ -d livejasmin.com *&origin= # https://github.com/AdguardTeam/AdguardFilters/issues/161364 # (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) -- ((https?|tcp|udp|i?quic|s?ftp)://|.*\.)?github\.([b-z][a-z]{1,19}|a[a-mo-z][a-z]{0,18})(/.*)?$/$document,match-case, +- ((https?|tcp|udp|i?quic|s?ftp)://|.*\.)?github\.([abd-z][a-z]{1,19}|c[a-np-z][a-z]{1,18})(/.*)?$/$document,match-case, +d third-party,domain=github.* +d com +d org @@ -13900,6 +13511,42 @@ ed.br ?q=artstation- -d flirtenhier.com -d 185.7.99.190 +# Various Winget stuff, early May 2026 +-d angrybirdsstarwars2.com +-d mapmap.info +-d onlineresultsfinder.com +-d photovariants.com +-d theritzygypsy.com +-d thalesbaiao.com +-d moyendadesigns.com + + +-d michaelrinderle.com +-d quickfindresults.com +-d smorgasbordet.com +-d xdelta.org + +-d 23.48.203.140 +-d 3.33.130.190 +-d [2a02:26f0:1700:11::b856:6790] + + + + + + + + + + +# submitted via email +# https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/ +-d grokvarum.com +-d groktronum.com +-d xaidash.app +-d blogcryptoslate.com +-d blogfxempire.com +-d cointelegraphfeed.com # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter/——— -d 0network.com diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p index e5ea6dc37..a50d1e202 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p @@ -375,6 +375,8 @@ F:43.157.122.86-43.157.122.86 F:43.157.46.83-43.157.46.83 F:43.164.196.209-43.164.196.209 F:88.255.216.16-88.255.216.16 +F:15.204.140.239-15.204.140.239 +F:15.204.160.216-15.204.160.216 F:194.226.139.121-194.226.139.121 F:194.226.139.7-194.226.139.7 F:95.181.157.36-95.181.157.36 @@ -806,12 +808,14 @@ F:5.45.79.15-5.45.79.15 F:51.178.195.171-51.178.195.171 F:51.195.115.102-51.195.115.102 F:51.89.115.13-51.89.115.13 -F:35.224.227.218-35.224.227.218 F:35.238.205.163-35.238.205.163 F:88.208.46.222-88.208.46.222 F:103.224.182.210-103.224.182.210 F:188.72.219.36-188.72.219.36 F:109.123.233.251-109.123.233.251 +F:107.148.45.21-107.148.45.21 +F:198.23.198.110-198.23.198.110 +F:185.216.143.121-185.216.143.121 F:154.199.255.184-154.199.255.184 F:193.200.64.30-193.200.64.30 F:193.200.64.31-193.200.64.31 @@ -858,7 +862,6 @@ F:5.101.115.170-5.101.115.170 F:62.109.18.206-62.109.18.206 F:95.213.229.88-95.213.229.88 F:95.213.231.34-95.213.231.34 -F:35.193.89.147-35.193.89.147 F:107.148.45.21-107.148.45.21 F:198.23.198.110-198.23.198.110 F:185.216.143.121-185.216.143.121 @@ -919,6 +922,7 @@ F:88.85.75.147-88.85.75.147 F:88.85.77.92-88.85.77.92 F:91.207.192.31-91.207.192.31 F:95.211.125.226-95.211.125.226 +F:193.200.64.20-193.200.64.20 F:193.200.64.24-193.200.64.24 F:206.54.181.250-206.54.181.250 F:62.76.25.27-62.76.25.27 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index d48123d4c..8ee00f64f 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -393,6 +393,8 @@ 43.157.46.83 43.164.196.209 88.255.216.16 +15.204.140.239 +15.204.160.216 194.226.139.121 194.226.139.7 95.181.157.36 @@ -843,13 +845,15 @@ 51.178.195.171 51.195.115.102 51.89.115.13 -35.224.227.218 35.238.205.163 88.208.46.222 103.224.182.210 188.72.219.36 117.254.84.212:3000 109.123.233.251 +107.148.45.21 +198.23.198.110 +185.216.143.121 154.199.255.184 193.200.64.30 193.200.64.31 @@ -899,7 +903,6 @@ 62.109.18.206 95.213.229.88 95.213.231.34 -35.193.89.147 107.148.45.21 198.23.198.110 185.216.143.121 @@ -960,6 +963,7 @@ 88.85.77.92 91.207.192.31 95.211.125.226 +193.200.64.20 193.200.64.24 206.54.181.250 62.76.25.27