From 9bf9e86df428d44929dff9bed283cd9b9c17554a Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Wed, 24 Feb 2021 00:46:33 +0100 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 4 +- .../AntiMalwareAdGuard.txt | 41 ++++++++++--------- .../AntiMalwareAdGuardHome.txt | 13 +++--- .../AntiMalwareDomains.txt | 5 ++- .../AntiMalwareHosts.txt | 5 ++- .../AntiMalwarePrivoxy.action | 8 ++-- .../AntiMalwareTPL.tpl | 7 ++-- 7 files changed, 45 insertions(+), 38 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 2107c5856..b9b7f7855 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus) -! Version: 04February2021v1-Beta +! Version: 15February2021v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -107,7 +107,7 @@ google.ac,google.ad,google.ae,google.af,google.ag,google.ai,google.al,google.am, ||useragentswitch.com^ ||dev-nano.com^ -/socket.io^ +/socket.io/? ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 35b34a829..60c1d5352 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard versions from β‰₯2019] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 30January2021v3-Beta +! Version: 15February2021v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -28,22 +28,22 @@ ||top^$document ! β€”β€”β€” Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) β€”β€”β€” -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="loljp-wiki.tk"]):not([href*="ninetail.tk"]):not([href*="goshujin.tk"]):not([href*="graph.tk"]):not([href*="haopro.tk"]):not([href*="nolfrevival.tk"]):not([href*="coppersurfer.tk"])) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".ga/"]:not([href*="google.ga"]):not([href*="filtri-dns.ga"]):not([href*="anpigabon.ga"]):not([href*="dgdi.ga"]):not([href*="voitures.ga"]):not([href*="economie-gabon.ga"])) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="dcod.ml"]):not([href*="info-matin.ml"]):not([href*="amap.ml"])) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*="tvgelive.gq"]):not([href*="comprarcarros.gq"])) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".cf/"]:not([href*="google.cf"]):not([href*="rths.cf"]):not([href*="voitures.cf"]):not([href*="assembleenationale-rca.cf"]):not([href*="cps-rca.cf"]):not([href*="acap.cf"]):not([href*="miraculousladybug.cf"])) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]):not([href*="dpc.pw"])) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".loan/"]) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".agency/"]) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".gdn/"]) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".bid/"]) -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".top/"]) +google.*##.g:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="loljp-wiki.tk"]):not([href*="ninetail.tk"]):not([href*="goshujin.tk"]):not([href*="graph.tk"]):not([href*="haopro.tk"]):not([href*="nolfrevival.tk"]):not([href*="coppersurfer.tk"])) +google.*##.g:has(a[href*=".ga/"]:not([href*="google.ga"]):not([href*="filtri-dns.ga"]):not([href*="anpigabon.ga"]):not([href*="dgdi.ga"]):not([href*="voitures.ga"]):not([href*="economie-gabon.ga"])) +google.*##.g:has(a[href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="dcod.ml"]):not([href*="info-matin.ml"]):not([href*="amap.ml"])) +google.*##.g:has(a[href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*="tvgelive.gq"]):not([href*="comprarcarros.gq"])) +google.*##.g:has(a[href*=".cf/"]:not([href*="google.cf"]):not([href*="rths.cf"]):not([href*="voitures.cf"]):not([href*="assembleenationale-rca.cf"]):not([href*="cps-rca.cf"]):not([href*="acap.cf"]):not([href*="miraculousladybug.cf"])) +google.*##.g:has(a[href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]):not([href*="dpc.pw"])) +google.*##.g:has(a[href*=".loan/"]) +google.*##.g:has(a[href*=".agency/"]) +google.*##.g:has(a[href*=".gdn/"]) +google.*##.g:has(a[href*=".bid/"]) +google.*##.g:has(a[href*=".top/"]) ! β€”β€”β€” You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. β€”β€”β€” -google.*##div[data-async-context^="query:"] > .g:has(a[href*=".php?xxx="]) -google.*##div[data-async-context^="query:"] > .g:has(cite:has-text(/^[a-z]{2,4}\.[a-z0-9-]{6,27}\.it β€Ί /)):has(a[href*="-"][href$=".html"]) -google.*##div[data-async-context^="query:"] > .g:has(a[href^="https://books.google."]) +google.*##.g:has(a[href*=".php?xxx="]) +google.*##.g:has(cite:has-text(/(^|/)[a-z]{2,4}\.[a-z0-9-]{6,27}\.it β€Ί /)):has(a[href*="-"][href$=".html"]) +google.*##.g:has(a[href^="https://books.google."]) ! β€”β€”β€” For Google Mobile β€”β€”β€” ! I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile. @@ -79,7 +79,7 @@ google.*#?#*:has(> * > a[oncontextmenu][href^="https://books.google."]) ||dutchmega.nl^$document ||juvander.net^$document ||ssl.bblck.me^$document -! Malicious domains found in videogame manuals +! Malicious domains found in videogame manuals and title screens ||acclaimsports.com^$document ||acclaimmaxsports.com^$document ||hip-games.com^$document @@ -89,6 +89,7 @@ google.*#?#*:has(> * > a[oncontextmenu][href^="https://books.google."]) ||b-shooter.com^$document ||100-9.com^$document ||cuttherope.ie^$document +||oldgames.4all.cc^$empty,important ! Dead router connection URΔ°s ! To log in to TP-Link routers, use tplinkwifi.net instead. ||tplinklogin.net^$document @@ -106,7 +107,7 @@ google.*#?#*:has(> * > a[oncontextmenu][href^="https://books.google."]) ||useragentswitch.com^$empty,important ||dev-nano.com^$empty,important !#if env_chromium -/socket.io^ +/socket.io/? !#endif ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” @@ -196,9 +197,9 @@ howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer) ! Common scam domain patterns /(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party,doc -/^https://[a-z]{6,}[0-9]{1,2}\.live/[0-9]{10}/$document,domain=live +/^https:\/\/[-a-z]{6,}\d{1,2}\.live\/\d{10}/$document,domain=live ! https://github.com/AdguardTeam/AdguardFilters/issues/58737 -/^https?://[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/$document,domain=fun +/^https?://(www\.)?[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/$document,domain=fun /^https://www\.namejp0[1-9]\.xyz/$document,popup,domain=xyz ! β€”β€”β€” Banner for "MSN New Tab" β€”β€”β€” @@ -492,7 +493,7 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/AdguardTeam/AdguardFilters/issues/71369 ! https://github.com/AdguardTeam/AdguardFilters/issues/73623 ! https://github.com/AdguardTeam/AdguardFilters/issues/73627 -/^(https?://)?([a-z]{1,})?luck([a-z]{1,})?\.club(/|$)/$document +/^(https?://)?([a-z-]{1,})?luck([a-z-]{1,})?\.club(/|$)/$document ! https://github.com/AdguardTeam/AdguardFilters/issues/73133 /^(https?://)?[0-9]{1,2}\.[a-z0-9-]{1,}\.biz(/|$)/$document diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 0e9d261a3..2142a4c53 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.4] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home) -! Version: 30January2021v3-Beta +! Version: 15February2021v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -94,7 +94,7 @@ ||dutchmega.nl^ ||juvander.net^ ||ssl.bblck.me^ -! Malicious domains found in videogame manuals +! Malicious domains found in videogame manuals and title screens ||acclaimsports.com^ ||acclaimmaxsports.com^ ||hip-games.com^ @@ -104,6 +104,7 @@ ||b-shooter.com^ ||100-9.com^ ||cuttherope.ie^ +||oldgames.4all.cc^ ! Dead router connection URΔ°s ! To log in to TP-Link routers, use tplinkwifi.net instead. ||tplinklogin.net^ @@ -121,7 +122,7 @@ ||useragentswitch.com^ ||dev-nano.com^ -/socket.io^ +/socket.io/? ! β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€” @@ -164,9 +165,9 @@ ! Common scam domain patterns /(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/ -/^https://[a-z]{6,}[0-9]{1,2}\.live/[0-9]{10}/ +/^https:\/\/[-a-z]{6,}\d{1,2}\.live\/\d{10}/ ! https://github.com/AdguardTeam/AdguardFilters/issues/58737 -/^https?://[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/ +/^https?://(www\.)?[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/ /^https://www\.namejp0[1-9]\.xyz/ ! β€”β€”β€” Banner for "MSN New Tab" β€”β€”β€” @@ -422,7 +423,7 @@ ! https://github.com/AdguardTeam/AdguardFilters/issues/71369 ! https://github.com/AdguardTeam/AdguardFilters/issues/73623 ! https://github.com/AdguardTeam/AdguardFilters/issues/73627 -/^(https?://)?([a-z]{1,})?luck([a-z]{1,})?\.club(/|$)/ +/^(https?://)?([a-z-]{1,})?luck([a-z-]{1,})?\.club(/|$)/ ! https://github.com/AdguardTeam/AdguardFilters/issues/73133 /^(https?://)?[0-9]{1,2}\.[a-z0-9-]{1,}\.biz(/|$)/ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 7b451e925..3b5d3a136 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 30January2021v3-Beta +# Version: 15February2021v1-Beta # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -48,7 +48,7 @@ njabl.org dutchmega.nl juvander.net ssl.bblck.me -# Malicious domains found in videogame manuals +# Malicious domains found in videogame manuals and title screens acclaimsports.com acclaimmaxsports.com hip-games.com @@ -58,6 +58,7 @@ kidnkid.com b-shooter.com 100-9.com cuttherope.ie +oldgames.4all.cc # Dead router connection URΔ°s # To log in to TP-Link routers, use tplinkwifi.net instead. tplinklogin.net diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index b038e4ca1..b9dd363d3 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 30January2021v3-Alpha +# Version: 15February2021v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -48,7 +48,7 @@ 127.0.0.1 dutchmega.nl 127.0.0.1 juvander.net 127.0.0.1 ssl.bblck.me -# Malicious domains found in videogame manuals +# Malicious domains found in videogame manuals and title screens 127.0.0.1 acclaimsports.com 127.0.0.1 acclaimmaxsports.com 127.0.0.1 hip-games.com @@ -58,6 +58,7 @@ 127.0.0.1 b-shooter.com 127.0.0.1 100-9.com 127.0.0.1 cuttherope.ie +127.0.0.1 oldgames.4all.cc # Dead router connection URΔ°s # To log in to TP-Link routers, use tplinkwifi.net instead. 127.0.0.1 tplinklogin.net diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index dd5648d6e..b1b9e3d41 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 30January2021v3-Alpha +# Version: 15February2021v1-Alpha # Expires: 5 days # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. @@ -54,7 +54,7 @@ .dutchmega.nl .juvander.net .ssl.bblck.me -# Malicious domains found in videogame manuals +# Malicious domains found in videogame manuals and title screens .acclaimsports.com .acclaimmaxsports.com .hip-games.com @@ -64,6 +64,7 @@ .b-shooter.com .100-9.com .cuttherope.ie +.oldgames.4all.cc # Dead router connection URΔ°s # To log in to TP-Link routers, use tplinkwifi.net instead. .tplinklogin.net @@ -81,7 +82,7 @@ .useragentswitch.com .dev-nano.com # -/socket.io +/socket.io/? # {+block} @@ -111,6 +112,7 @@ # Common scam domain patterns /(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/ +/https:\/\/[-a-z]{6,}\d{1,2}\.live\/\d{10}/ {+block} # β€”β€”β€” Banner for "MSN New Tab" β€”β€”β€” diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 8bfa18064..d4ef8c42c 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 30January2021v3-Beta +# Version: 15February2021v1-Beta : expires = 5 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -88,7 +88,7 @@ msFilterList -d dutchmega.nl -d juvander.net -d ssl.bblck.me -# Malicious domains found in videogame manuals +# Malicious domains found in videogame manuals and title screens -d acclaimsports.com -d acclaimmaxsports.com -d hip-games.com @@ -98,6 +98,7 @@ msFilterList -d b-shooter.com -d 100-9.com -d cuttherope.ie +-d oldgames.4all.cc # Dead router connection URΔ°s # To log in to TP-Link routers, use tplinkwifi.net instead. -d tplinklogin.net @@ -115,7 +116,7 @@ msFilterList -d useragentswitch.com -d dev-nano.com -- socket.io +- socket.io ? # β€”β€”β€” IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. β€”β€”β€”