diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index e259dda82..2fa597f75 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -47,18 +47,18 @@ google.*##.rc:has(a[href*=".php?xxx="]) ! ——— For Google Mobile ——— ! Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile. -google.*##a[oncontextmenu][href*=".tk/"]:not([href*=coolcmd]):not([href*=budterence]):not([href*="google.tk"]):not([href*=transportnews]):not([href*=unicorncardlist]):not([href*=c0d3c]):not([href*=anonytext]):not([href*=tokelau-info]):not([href*=fakaofo]):not([href*=loljp-wiki]):not([href*=ninetail]):not([href*=goshujin]):not([href*="graph.tk"]):not([href*=haopro]):not([href*="ps2online.tk"]):not([href*=nolfrevival]):not([href*="steamroller.tk"]):upward(2) -google.*##a[oncontextmenu][href*=".ga/"]:not([href*="google.ga"]):not([href*=filtri-dns]):not([href*=anpigabon]):not([href*="dgdi.ga"]):not([href*=voitures]):upward(2) -google.*##a[oncontextmenu][href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="ps2online.ml"]):upward(2) -google.*##a[oncontextmenu][href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*=tvgelive]):not([href*=comprarcarros]):upward(2) -google.*##a[oncontextmenu][href*=".cf/"]:not([href*="intr0.cf"]):not([href*="google.cf"]):not([href*="rths.cf"]):not([href*=voitures]):not([href*=assembleenationale-rca]):not([href*=cps-rca]):not([href*="acap.cf"]):upward(2) -google.*##a[oncontextmenu][href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]):upward(2) -google.*##a[oncontextmenu][href*=".loan/"]:upward(2) -google.*##a[oncontextmenu][href*=".agency/"]:upward(2) -google.*##a[oncontextmenu][href*=".gdn/"]:upward(2) -google.*##a[oncontextmenu][href*=".bid/"]:upward(2) -google.*##a[oncontextmenu][href*=".top/"]:upward(2) -google.*##a[oncontextmenu][href*=".php?xxx="]:upward(2) +google.*#?#*:has(> * > a[oncontextmenu][href*=".tk/"]:not([href*=coolcmd]):not([href*=budterence]):not([href*="google.tk"]):not([href*=transportnews]):not([href*=unicorncardlist]):not([href*=c0d3c]):not([href*=anonytext]):not([href*=tokelau-info]):not([href*=fakaofo]):not([href*=loljp-wiki]):not([href*=ninetail]):not([href*=goshujin]):not([href*="graph.tk"]):not([href*=haopro]):not([href*="ps2online.tk"]):not([href*=nolfrevival]):not([href*="steamroller.tk"])) +google.*#?#*:has(> * > a[oncontextmenu][href*=".ga/"]:not([href*="google.ga"]):not([href*=filtri-dns]):not([href*=anpigabon]):not([href*="dgdi.ga"]):not([href*=voitures])) +google.*#?#*:has(> * > a[oncontextmenu][href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="ps2online.ml"])) +google.*#?#*:has(> * > a[oncontextmenu][href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*=tvgelive]):not([href*=comprarcarros])) +google.*#?#*:has(> * > a[oncontextmenu][href*=".cf/"]:not([href*="intr0.cf"]):not([href*="google.cf"]):not([href*="rths.cf"]):not([href*=voitures]):not([href*=assembleenationale-rca]):not([href*=cps-rca]):not([href*="acap.cf"])) +google.*#?#*:has(> * > a[oncontextmenu][href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"])) +google.*#?#*:has(> * > a[oncontextmenu][href*=".loan/"]) +google.*#?#*:has(> * > a[oncontextmenu][href*=".agency/"]) +google.*#?#*:has(> * > a[oncontextmenu][href*=".gdn/"]) +google.*#?#*:has(> * > a[oncontextmenu][href*=".bid/"]) +google.*#?#*:has(> * > a[oncontextmenu][href*=".top/"]) +google.*#?#*:has(> * > a[oncontextmenu][href*=".php?xxx="]) ! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ——— ||adblock.gjtech.net^$empty,important diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index c3e5a5dd0..72cf394e9 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -7,26 +7,26 @@ # ——— Country domains ——— # You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you. # Tokelau -tk + # Gabon -ga + # Mali -ml + # Equatorial Guinea -gq + # Central African Republic -cf + # Palau -pw + # ——— Topical domains ——— # These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. # Presumably fake loans -loan -agency -gdn -bid -top + + + + + # ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ——— @@ -108,7 +108,7 @@ google-analytics.com # https://www.2-spyware.com/remove-redirector-gvt1-com.html # ——— Sites that fraudulently claim you've won a new phone ——— -/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/$1p,doc,domain=~ Warning displayed due to: Fraudulently claims you have won a new phone. + # ——— Banner for "MSN New Tab" ——— @@ -226,12 +226,12 @@ androidweblog.com hardreset.info # If you run a webserver of any sort, and you get incoming requests to resolve these domains, that's rarely a good sign for that requestor's intentions -# -# + + version.bind pizzaseo.com -# -# + + # Zero-width spaces/hyphens in lookalike domains diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 3a92c9905..0d6d0bf99 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -7,26 +7,26 @@ # ——— Country domains ——— # You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you. # Tokelau -127.0.0.1 tk + # Gabon -127.0.0.1 ga + # Mali -127.0.0.1 ml + # Equatorial Guinea -127.0.0.1 gq + # Central African Republic -127.0.0.1 cf + # Palau -127.0.0.1 pw + # ——— Topical domains ——— # These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. # Presumably fake loans -127.0.0.1 loan -127.0.0.1 agency -127.0.0.1 gdn -127.0.0.1 bid -127.0.0.1 top + + + + + # ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ——— @@ -226,12 +226,12 @@ 127.0.0.1 hardreset.info # If you run a webserver of any sort, and you get incoming requests to resolve these domains, that's rarely a good sign for that requestor's intentions -# -# + + 127.0.0.1 version.bind 127.0.0.1 pizzaseo.com -# -# + + # Zero-width spaces/hyphens in lookalike domains diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index e25f99deb..9376fd2dd 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -65,11 +65,11 @@ msFilterList # ——— Topical domains ——— # These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. # Presumably fake loans --d loan --d agency --d gdn --d bid --d top + + + + + # ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———