From a94e179a73db57ca87c09119313392525aeef720 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Sat, 4 Jan 2025 20:39:41 +0100 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 35 ++++++++++++++++--- .../AntiMalwareAdGuard.txt | 22 +++++++++--- .../AntiMalwareAdGuardHome.txt | 22 +++++++++--- .../AntiMalwareDomains.txt | 20 +++++++++-- .../AntiMalwareHosts.txt | 20 +++++++++-- .../AntiMalwarePrivoxy.action | 20 +++++++++-- .../AntiMalwareTPL.tpl | 21 +++++++++-- ...out's and other adblocker lists' IPs.ipset | 8 ++--- 8 files changed, 140 insertions(+), 28 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 22a737b4a..5b59cba66 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 15December2024v1 +! Version: 31December2024v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -21,7 +21,7 @@ ! Palau (Put on break due to too many whitelistings being needed) !!!||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~gopass.pw|~vost.pw|~core.pw|~bittor.pw|~plutonium.pw|~nitter.pw|~kge.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||top^$domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top +||top^$domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^ @@/^.*(tech|project|linux).*\.top(/[a-z0-9_-]?.*)?$/ @@ -648,10 +648,10 @@ download.cnet.com#?#.c-globalCard:has(a[href*="/AdsCleaner/"]) ||roamingclicks.com^ ||roamingclicks.com^$popup -! Source: desidert•no +! Source: desidertNO ||collectfasttracks.com^ ||collectfasttracks.com^$popup -! Source: vn-zoom•com +! Source: vn-zoomCOM ||ttnrd.com^ ||ttnrd.com^$popup ||amanda.*.com^ @@ -43764,6 +43764,33 @@ www.tumblr.com#?#div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a +||sites.google.com/view/*wincashapp^ +||iuxxx.com^ +||iuxxx.com^$popup +||tuusi.com^ +||tuusi.com^$popup +||messageme.life^ +||messageme.life^$popup +||lonelygirls.life^ +||lonelygirls.life^$popup +||sexcham.com^ +||sexcham.com^$popup +||lonelyones.online^ +||lonelyones.online^$popup +||mastur.life^ +||mastur.life^$popup +||areameye.life^ +||areameye.life^$popup +||happygirls.life^ +||happygirls.life^$popup +||dowemeet.online^ +||dowemeet.online^$popup +||chatly.life^ +||chatly.life^$popup +||invites.life^ +||invites.life^$popup +||girlselfies.online^ +||girlselfies.online^$popup ! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index f605f7bef..339f65335 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 15December2024v1 +! Version: 31December2024v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -20,7 +20,7 @@ ! Palau (Put on break due to too many whitelistings being needed) !!!||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~gopass.pw|~vost.pw|~core.pw|~bittor.pw|~plutonium.pw|~nitter.pw|~kge.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||top^$document,domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top +||top^$document,domain=~caitlin.top|~callmebymygender.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~awavenue.top|~reyhub.top|~iboxs.top|~adrules.top|~hostingowy.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^$document @@/^.*(tech|project|linux).*\.top(/[a-z0-9_-]?.*)?$/$document @@ -573,9 +573,9 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) !+ PLATFORM(windows, mac, android) 3.216.243.46$network ||roamingclicks.com^$all -! Source: desidert•no +! Source: desidertNO ||collectfasttracks.com^$all,~inline-font,domain=~malware-redirection-trains.* -! Source: vn-zoom•com +! Source: vn-zoomCOM ||ttnrd.com^$all ||amanda.*.com^$document ||katie.*.com^$document @@ -23174,6 +23174,20 @@ www.tumblr.com##div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a[ 172.67.158.57$network !+ PLATFORM(windows, mac, android) 198.12.86.90$network +||sites.google.com/view/*wincashapp^$document +||iuxxx.com^$all +||tuusi.com^$all +||messageme.life^$all +||lonelygirls.life^$all +||sexcham.com^$all +||lonelyones.online^$all +||mastur.life^$all +||areameye.life^$all +||happygirls.life^$all +||dowemeet.online^$all +||chatly.life^$all +||invites.life^$all +||girlselfies.online^$all ! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 90913a6b0..c097bb381 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 15December2024v1 +! Version: 31December2024v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -20,7 +20,7 @@ ! Palau (Put on break due to too many whitelistings being needed) !!!||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|buttercup.pw|rezka.pw|darkcrystal.pw|xor.pw|fullhdfilmizlesene.pw|gopass.pw|vost.pw|core.pw|bittor.pw|plutonium.pw|nitter.pw|kge.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||*.top^$dnstype=~CNAME,denyallow=caitlin.top|callmebymygender.top|corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|changlam10.top|changlam11.top|pdcdn1.top|pressplay.top|chillx.top|strims.top|thedesk.top|audioforyou.top|awavenue.top|reyhub.top|iboxs.top|adrules.top +||*.top^$dnstype=~CNAME,denyallow=caitlin.top|callmebymygender.top|corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|changlam10.top|changlam11.top|pdcdn1.top|pressplay.top|chillx.top|strims.top|thedesk.top|audioforyou.top|awavenue.top|reyhub.top|iboxs.top|adrules.top|hostingowy.top ! (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) @@||masto*.top^ @@/^.*(tech|project|linux).*\.top(/[a-z0-9_-]?.*)?$/ @@ -354,9 +354,9 @@ 3.216.243.46 ||roamingclicks.com^ -! Source: desidert•no +! Source: desidertNO -! Source: vn-zoom•com +! Source: vn-zoomCOM ||ttnrd.com^ ||amanda.*.com^ ||katie.*.com^ @@ -22552,6 +22552,20 @@ +||iuxxx.com^ +||tuusi.com^ +||messageme.life^ +||lonelygirls.life^ +||sexcham.com^ +||lonelyones.online^ +||mastur.life^ +||areameye.life^ +||happygirls.life^ +||dowemeet.online^ +||chatly.life^ +||invites.life^ +||girlselfies.online^ + ! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. ||unofficialtwrp.com^$denyallow=had-not-updated-their-root-guides-to-reflect-a-b-partition-phones-as-of-2021.* diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 2c0ada518..e92de37d2 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 15December2024v1 +# Version: 31December2024v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -420,9 +420,9 @@ zeroredirect5.com 3.216.243.46 roamingclicks.com -# Source: desidert•no +# Source: desidertNO collectfasttracks.com -# Source: vn-zoom•com +# Source: vn-zoomCOM ttnrd.com 54.152.245.247 @@ -22577,6 +22577,20 @@ ybd001.com +iuxxx.com +tuusi.com +messageme.life +lonelygirls.life +sexcham.com +lonelyones.online +mastur.life +areameye.life +happygirls.life +dowemeet.online +chatly.life +invites.life +girlselfies.online + # ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. unofficialtwrp.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 0079f464b..7a7f3adda 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 15December2024v1 +# Version: 31December2024v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later, and of AdGuard Home, are STRONGLY RECOMMENDED to switch to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, unless otherwise proven. @@ -369,9 +369,9 @@ 127.0.0.1 3.216.243.46 127.0.0.1 roamingclicks.com -# Source: desidert•no +# Source: desidertNO 127.0.0.1 collectfasttracks.com -# Source: vn-zoom•com +# Source: vn-zoomCOM 127.0.0.1 ttnrd.com www.ttnrd.com amanda.ttnrd.com katie.ttnrd.com briana.ttnrd.com sarah.ttnrd.com pamela.ttnrd.com 127.0.0.1 54.152.245.247 @@ -22522,6 +22522,20 @@ +127.0.0.1 iuxxx.com +127.0.0.1 tuusi.com +127.0.0.1 messageme.life +127.0.0.1 lonelygirls.life +127.0.0.1 sexcham.com +127.0.0.1 lonelyones.online +127.0.0.1 mastur.life +127.0.0.1 areameye.life +127.0.0.1 happygirls.life +127.0.0.1 dowemeet.online +127.0.0.1 chatly.life +127.0.0.1 invites.life +127.0.0.1 girlselfies.online + # ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. 127.0.0.1 unofficialtwrp.com diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 14dbc04b3..386ac0bde 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 15December2024v1-Deprecated +# Version: 31December2024v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -319,9 +319,9 @@ .3.216.243.46 .roamingclicks.com -# Source: desidert•no +# Source: desidertNO .collectfasttracks.com -# Source: vn-zoom•com +# Source: vn-zoomCOM .ttnrd.com .amanda.*.com .katie.*.com @@ -22145,6 +22145,20 @@ +.sites.google.com/view/*wincashapp +.iuxxx.com +.tuusi.com +.messageme.life +.lonelygirls.life +.sexcham.com +.lonelyones.online +.mastur.life +.areameye.life +.happygirls.life +.dowemeet.online +.chatly.life +.invites.life +.girlselfies.online {+block} # ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 24c7d16e0..e17883ef1 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 15December2024v1-Deprecated +# Version: 31December2024v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -96,6 +96,7 @@ msFilterList +d reyhub.top +d iboxs.top +d adrules.top ++d hostingowy.top # (Loosely inspired by https://github.com/DandelionSprout/adfilt/issues/1067) +d masto*.top @@ -457,9 +458,9 @@ msFilterList -d 3.216.243.46 -d roamingclicks.com -# Source: desidert•no +# Source: desidertNO -d collectfasttracks.com -# Source: vn-zoom•com +# Source: vn-zoomCOM -d ttnrd.com @@ -22602,6 +22603,20 @@ ed.br ?q=artstation- +-d sites.google.com view *wincashapp +-d iuxxx.com +-d tuusi.com +-d messageme.life +-d lonelygirls.life +-d sexcham.com +-d lonelyones.online +-d mastur.life +-d areameye.life +-d happygirls.life +-d dowemeet.online +-d chatly.life +-d invites.life +-d girlselfies.online # ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone. diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index fc2826e37..9b0b48668 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -412,16 +412,16 @@ 165.231.4.90 158.222.7.83 95.214.26.78 -104.21.82.132 -172.67.158.57 -[2606:4700:3030::6815:5284] -[2606:4700:3037::ac43:9e39] 185.155.184.57 185.155.186.24 209.74.107.131 69.172.200.185 77.220.214.153 +104.21.82.132 +172.67.158.57 198.12.86.90 +[2606:4700:3030::6815:5284] +[2606:4700:3037::ac43:9e39] 212.27.60.108 1.14.61.188 3.248.18.175