starred/adfilt
1
0
Fork 0
mirror of https://github.com/DandelionSprout/adfilt.git synced 2026-10-04 22:04:19 +01:00
Code Issues Packages Projects Releases 4 Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
Imre Kristoffer Eilertsen
2022-02-28 23:42:36 +01:00
committed by GitHub
parent 6623e62931
commit aff0e8dac8
7 changed files with 18 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Alternate versions Anti-Malware List/AntiMalwareABP.txt
+3 -4
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
! Version: 26February2022v1
! Version: 28February2022v2
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -289,7 +289,8 @@ azdll.net##.dllhelper-banner
! Common scam domain patterns
/^http://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party
/^https://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party
/^https:\/\/[-0-9a-z]{12,}\.life\/\?u=[0-9a-z]{7,}&o=[0-9a-z]{7,}&/$domain=life
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/$match-case,domain=com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/$match-case,domain=com|fun|guru|life|online|pw|site|space|top
! https://github.com/AdguardTeam/AdguardFilters/issues/58737
/^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php/$domain=biz|fun|live
@@ -2283,8 +2284,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||gpush.cogocast.net^$popup
||info.leadid.com^
||info.leadid.com^$popup
||lijit.com^
||lijit.com^$popup
||listrakbi.com^
||listrakbi.com^$popup
||partner.mediawallahscript.com^$popup
Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt
+3 -3
View File
@@ -1,6 +1,6 @@
[AdGuard versions from ≥2019]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
! Version: 26February2022v1
! Version: 28February2022v2
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -284,7 +284,8 @@ azdll.net##.dllhelper-banner
! Common scam domain patterns
/^http://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party,doc
/^https://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$~third-party,doc
/^https:\/\/[-0-9a-z]{12,}\.life\/\?u=[0-9a-z]{7,}&o=[0-9a-z]{7,}&/$document,domain=life
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/$document,match-case,domain=com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/$document,match-case,domain=com|fun|guru|life|online|pw|site|space|top
! https://github.com/AdguardTeam/AdguardFilters/issues/58737
/^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php/$document,domain=biz|fun|live
@@ -1459,7 +1460,6 @@ zombooru.com##a[href="http://www.hard55.com"]
||findanswersnow.net^$empty,important
||gpush.cogocast.net^$empty,important
||info.leadid.com^$empty,important
||lijit.com^$empty,important
||listrakbi.com^$empty,important
||partner.mediawallahscript.com^$document,popup
||rlcdn.com^$empty,important
Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt
+3 -3
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.6]
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
! Version: 26February2022v1
! Version: 28February2022v2
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -149,7 +149,8 @@
! Common scam domain patterns
/^http://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/
/^https://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/
/^https:\/\/[-0-9a-z]{12,}\.life\/\?u=[0-9a-z]{7,}&o=[0-9a-z]{7,}&/life
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/match-case,com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/match-case,com|fun|guru|life|online|pw|site|space|top
! https://github.com/AdguardTeam/AdguardFilters/issues/58737
/^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php/biz|fun|live
@@ -1274,7 +1275,6 @@
||findanswersnow.net^
||gpush.cogocast.net^
||info.leadid.com^
||lijit.com^
||listrakbi.com^
||partner.mediawallahscript.com^
||rlcdn.com^
Alternate versions Anti-Malware List/AntiMalwareDomains.txt
+2 -2
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
# Version: 26February2022v1
# Version: 28February2022v2
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -128,6 +128,7 @@ testedforyou.net
# ——— Banner for "MSN New Tab" ———
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
@@ -1140,7 +1141,6 @@ data.deduce.com
findanswersnow.net
gpush.cogocast.net
info.leadid.com
lijit.com
listrakbi.com
partner.mediawallahscript.com
rlcdn.com
Alternate versions Anti-Malware List/AntiMalwareHosts.txt
+2 -2
View File
@@ -1,5 +1,5 @@
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
# Version: 26February2022v1
# Version: 28February2022v2
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -128,6 +128,7 @@
# ——— Banner for "MSN New Tab" ———
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
@@ -1140,7 +1141,6 @@
127.0.0.1 findanswersnow.net
127.0.0.1 gpush.cogocast.net
127.0.0.1 info.leadid.com
127.0.0.1 lijit.com
127.0.0.1 listrakbi.com
127.0.0.1 partner.mediawallahscript.com
127.0.0.1 rlcdn.com
Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action
+3 -3
View File
@@ -1,6 +1,6 @@
{+block}
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
# Version: 26February2022v1
# Version: 28February2022v2
# Expires: 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
@@ -133,7 +133,8 @@
# ¤¤¤ "DLL Helper" ¤¤¤
# Common scam domain patterns
/https:\/\/[-0-9a-z]{12,}\.life\/\?u=[0-9a-z]{7,}&o=[0-9a-z]{7,}&/
/https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/
/https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/
/https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php/
{+block}
@@ -1276,7 +1277,6 @@
# Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin
Alternate versions Anti-Malware List/AntiMalwareTPL.tpl
+2 -2
View File
@@ -1,6 +1,6 @@
msFilterList
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
# Version: 26February2022v1
# Version: 28February2022v2
: expires = 2 days
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -209,6 +209,7 @@ msFilterList
# https://github.com/AdguardTeam/AdguardFilters/issues/58737
@@ -1333,7 +1334,6 @@ msFilterList
-d findanswersnow.net
-d gpush.cogocast.net
-d info.leadid.com
-d lijit.com
-d listrakbi.com
-d partner.mediawallahscript.com
-d rlcdn.com