From b60a400dff292900b9ab1456bf33e6f34084a223 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Sun, 30 Aug 2026 08:38:40 +0200 Subject: [PATCH] FIx #1284. --- .../AntiMalwareABP.txt | 73 ++++++++++--------- .../AntiMalwareAdGuard.txt | 49 +++++++------ .../AntiMalwareAdGuardHome.txt | 28 +++---- .../AntiMalwareDomains.txt | 43 +++++------ .../AntiMalwareHosts.txt | 43 +++++------ .../AntiMalwarePrivoxy.action | 44 +++++------ .../AntiMalwareTPL.tpl | 43 +++++------ ...and other adblocker lists' IPs for P2P.p2p | 3 + ...out's and other adblocker lists' IPs.ipset | 3 + 9 files changed, 171 insertions(+), 158 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 076b2d746..9bdbcd527 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 23August2026v1 +! Version: 30August2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -21647,9 +21647,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||95.214.26.78^ ||95.214.26.78^$popup -! Overly dedicated E-mail spammers -||wirexapp.africa.com^ -||wirexapp.africa.com^$popup ! Google results for «SodaStream site:no cranberry» /^(https?|tcp|iquic)://[a-z0-9.-]{1,}\.([a-z]{3,}|[a-z][a-tv-z]|[a-qs-z][a-z])/.*(go\.php|redirect|url=|\?re=).*\.(xn--p1ai|рф|%D1%80%D1%84)$/$domain=~malware_redirection_results.* @@ -21819,21 +21816,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||77.220.214.153^ ||77.220.214.153^$popup ! More search terms than what can be counted with a supercomputer (11/03/2024) -! Scam E-mails I've got -||googleapis.com/nwfotrac^ -||googleapis.com/nwfotrac^$popup -||googleapis.com/firsttimesolo^ -||googleapis.com/firsttimesolo^$popup -||googleapis.com/trjhrt3j1erh2fghrth^ -||googleapis.com/trjhrt3j1erh2fghrth^$popup -||googleapis.com/realizingcrasis^ -||googleapis.com/realizingcrasis^$popup -||googleapis.com/deasastercreations^ -||googleapis.com/deasastercreations^$popup -||googleapis.com/alphafemale^ -||googleapis.com/alphafemale^$popup -||googleapis.com/beastlyendeavors^ -||googleapis.com/beastlyendeavors^$popup ! Visibly fake item descriptions and prices ! https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ ||empatiya.net^ @@ -25715,21 +25697,6 @@ drvhub.net##.driver-item__install ||tgdrive.app^$popup ||tg-drive-bx4f.onrender.com^ ||tg-drive-bx4f.onrender.com^$popup -! E-mail spammers -||austinpoolservices.com^ -||austinpoolservices.com^$popup -||desernk.me^ -||desernk.me^$popup -||qed.uk.com^ -||qed.uk.com^$popup -||resultsfastfind.com^ -||resultsfastfind.com^$popup -||resultsfinderonline.com^ -||resultsfinderonline.com^$popup -/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/ -/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/$popup -||199.168.185.4^ -||199.168.185.4^$popup ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— @@ -26847,7 +26814,8 @@ www.google.com,ipv6.google.com,google.ac,google.ad,google.ae,google.af,google.ag ! Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) -! Various E-mail spams' links +! ——— Various E-mail spams' links ——— +! Batch A ||statautos.com^ ||statautos.com^$popup /noo/taxx/* @@ -26862,13 +26830,46 @@ www.google.com,ipv6.google.com,google.ac,google.ad,google.ae,google.af,google.ag ||hxzf4er.com^ ||k2krl7zj.com^ ||mcafee.sjv.io^ -||ojrq.net^ ||oninebest.com^ ||ormediao.com^ ||paramatise.com^ ||watchterm.com^ ||185.176.220.31^ +! Batch B +||wirexapp.africa.com^ +||wirexapp.africa.com^$popup +! Batch C +||googleapis.com/nwfotrac^ +||googleapis.com/nwfotrac^$popup +||googleapis.com/firsttimesolo^ +||googleapis.com/firsttimesolo^$popup +||googleapis.com/trjhrt3j1erh2fghrth^ +||googleapis.com/trjhrt3j1erh2fghrth^$popup +||googleapis.com/realizingcrasis^ +||googleapis.com/realizingcrasis^$popup +||googleapis.com/deasastercreations^ +||googleapis.com/deasastercreations^$popup +||googleapis.com/alphafemale^ +||googleapis.com/alphafemale^$popup +||googleapis.com/beastlyendeavors^ +||googleapis.com/beastlyendeavors^$popup +! Batch D +||austinpoolservices.com^ +||austinpoolservices.com^$popup +||desernk.me^ +||desernk.me^$popup +||qed.uk.com^ +||qed.uk.com^$popup +||resultsfastfind.com^ +||resultsfastfind.com^$popup +||resultsfinderonline.com^ +||resultsfinderonline.com^$popup +/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/ +/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/$popup +||199.168.185.4^ +||199.168.185.4^$popup + ! ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 90fb656ad..fa3ea37d5 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@  ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 23August2026v1 +! Version: 30August2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -12627,8 +12627,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] 95.214.26.78$network !+ NOT_PLATFORM(windows, mac, android, cli) ||95.214.26.78^$all -! Overly dedicated E-mail spammers -||wirexapp.africa.com^$all ! Google results for «SodaStream site:no cranberry» /^(https?|tcp|iquic)://[a-z0-9.-]{1,}\.([a-z]{3,}|[a-z][a-tv-z]|[a-qs-z][a-z])/.*(go\.php|redirect|url=|\?re=).*\.(xn--p1ai|рф|%D1%80%D1%84)\$/$document,domain=~malware_redirection_results.* @@ -12734,14 +12732,6 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||77.220.214.153^$all ! More search terms than what can be counted with a supercomputer (11/03/2024) google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) -! Scam E-mails I've got -||googleapis.com/nwfotrac^$all -||googleapis.com/firsttimesolo^$all -||googleapis.com/trjhrt3j1erh2fghrth^$all -||googleapis.com/realizingcrasis^$all -||googleapis.com/deasastercreations^$all -||googleapis.com/alphafemale^$all -||googleapis.com/beastlyendeavors^$all ! Visibly fake item descriptions and prices ! https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ ||empatiya.net^$all @@ -15176,17 +15166,7 @@ drvhub.net##.driver-item__install ! https://github.com/DandelionSprout/adfilt/issues/1275 ||tgdrive.app^$all ||tg-drive-bx4f.onrender.com^$all -! E-mail spammers -||austinpoolservices.com^$all -||desernk.me^$all -||qed.uk.com^$all -||resultsfastfind.com^$all -||resultsfinderonline.com^$all -/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/$all -!+ NOT_PLATFORM(windows, mac, android, cli) -||199.168.185.4^$all -!+ PLATFORM(windows, mac, android, cli) -199.168.185.4$network + ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^$all @@ -16048,7 +16028,8 @@ www.google.*,ipv6.google.com##div[data-attrid^="images "]:has(a[href*=".aspx?cna ! Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) google.*###rso > div[class]:has(h3:has-text(/^.*(H\ow\st\o|fre{2})\s(\instal{2}|d\ownl\oad).*$/i):has-text(/^.*(ph\ot\osh\op|dav\inc\i|\il{2}ustrat\or).*$/i):has-text(/^.*(fre{2}|(cr|h)ack).*$/i)) -! Various E-mail spams' links +! ——— Various E-mail spams' links ——— +! Batch A ||statautos.com^$all /noo/taxx/*$document ||solitanh.site^$document @@ -16062,7 +16043,6 @@ google.*###rso > div[class]:has(h3:has-text(/^.*(H\ow\st\o|fre{2})\s(\instal{2}| ||hxzf4er.com^$document ||k2krl7zj.com^$document ||mcafee.sjv.io^$document -||ojrq.net^$document ||oninebest.com^$document ||ormediao.com^$document ||paramatise.com^$document @@ -16071,6 +16051,27 @@ google.*###rso > div[class]:has(h3:has-text(/^.*(H\ow\st\o|fre{2})\s(\instal{2}| ||185.176.220.31^$document !+ PLATFORM(windows, mac, android, cli) 185.176.220.31$network +! Batch B +||wirexapp.africa.com^$all +! Batch C +||googleapis.com/nwfotrac^$all +||googleapis.com/firsttimesolo^$all +||googleapis.com/trjhrt3j1erh2fghrth^$all +||googleapis.com/realizingcrasis^$all +||googleapis.com/deasastercreations^$all +||googleapis.com/alphafemale^$all +||googleapis.com/beastlyendeavors^$all +! Batch D +||austinpoolservices.com^$all +||desernk.me^$all +||qed.uk.com^$all +||resultsfastfind.com^$all +||resultsfinderonline.com^$all +/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/$all +!+ NOT_PLATFORM(windows, mac, android, cli) +||199.168.185.4^$all +!+ PLATFORM(windows, mac, android, cli) +199.168.185.4$network !#if !ext_ublock ! ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 0ad5b5aad..16c554dcd 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 23August2026v1 +! Version: 30August2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -10710,8 +10710,6 @@ http://secured21.*.com/| ||account-limitato.org^ ||netfiixhungary.net^ 95.214.26.78 -! Overly dedicated E-mail spammers -||wirexapp.africa.com^ ! Google results for «SodaStream site:no cranberry» ! Laughably blatant fraud site ||cosercosplay.com^ @@ -10783,7 +10781,6 @@ http://secured21.*.com/| 69.172.200.185 77.220.214.153 ! More search terms than what can be counted with a supercomputer (11/03/2024) -! Scam E-mails I've got ! Visibly fake item descriptions and prices ! https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ ||empatiya.net^ @@ -12646,14 +12643,6 @@ http://secured21.*.com/| ! https://github.com/DandelionSprout/adfilt/issues/1275 ||tgdrive.app^ ||tg-drive-bx4f.onrender.com^ -! E-mail spammers -||austinpoolservices.com^ -||desernk.me^ -||qed.uk.com^ -||resultsfastfind.com^ -||resultsfinderonline.com^ -/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/ -199.168.185.4 ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^ ||100conversions.com^ @@ -13075,7 +13064,8 @@ http://secured21.*.com/| 185.53.178.54 ! Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO ! Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) -! Various E-mail spams' links +! ——— Various E-mail spams' links ——— +! Batch A ||statautos.com^ ||solitanh.site^ ||floraltepi.site^ @@ -13088,12 +13078,22 @@ http://secured21.*.com/| ||hxzf4er.com^ ||k2krl7zj.com^ ||mcafee.sjv.io^ -||ojrq.net^ ||oninebest.com^ ||ormediao.com^ ||paramatise.com^ ||watchterm.com^ 185.176.220.31 +! Batch B +||wirexapp.africa.com^ +! Batch C +! Batch D +||austinpoolservices.com^ +||desernk.me^ +||qed.uk.com^ +||resultsfastfind.com^ +||resultsfinderonline.com^ +/^(.*[/@])?questionprov\d{5,6}\.com(/.*)?$/ +199.168.185.4 ! ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— ! https://github.com/DandelionSprout/adfilt/pull/395 ! https://www•huorong•cn/info/1531309921141.html diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 6a5162488..d1e5e4538 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 23August2026v1 +# Version: 30August2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -11545,8 +11545,6 @@ account-limitato.org netfiixhungary.net 95.214.26.78 -# Overly dedicated E-mail spammers -wirexapp.africa.com # Google results for «SodaStream site:no cranberry» @@ -11641,14 +11639,6 @@ zeirj14ikqwf.com 69.172.200.185 77.220.214.153 # More search terms than what can be counted with a supercomputer (11/03/2024) -# Scam E-mails I've got - - - - - - - # Visibly fake item descriptions and prices # https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ empatiya.net @@ -13746,14 +13736,6 @@ upperch.site # https://github.com/DandelionSprout/adfilt/issues/1275 tgdrive.app tg-drive-bx4f.onrender.com -# E-mail spammers -austinpoolservices.com -desernk.me -qed.uk.com -resultsfastfind.com -resultsfinderonline.com - -199.168.185.4 # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— @@ -14269,7 +14251,8 @@ yellowdragon.com # Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) -# Various E-mail spams' links +# ——— Various E-mail spams' links ——— +# Batch A statautos.com solitanh.site @@ -14283,13 +14266,31 @@ csstudyhub.com hxzf4er.com k2krl7zj.com mcafee.sjv.io -ojrq.net oninebest.com ormediao.com paramatise.com watchterm.com 185.176.220.31 +# Batch B +wirexapp.africa.com +# Batch C + + + + + + + +# Batch D +austinpoolservices.com +desernk.me +qed.uk.com +resultsfastfind.com +resultsfinderonline.com + +199.168.185.4 + # ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 3d53efe61..2ea3431e8 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 23August2026v1 +# Version: 30August2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later can consider switching to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, due to an unconfirmed belief of mine that it allows better wildcarding than the Hosts and raw-domains versions. @@ -11495,8 +11495,6 @@ 127.0.0.1 netfiixhungary.net 127.0.0.1 95.214.26.78 -# Overly dedicated E-mail spammers -127.0.0.1 wirexapp.africa.com # Google results for «SodaStream site:no cranberry» @@ -11591,14 +11589,6 @@ 127.0.0.1 69.172.200.185 127.0.0.1 77.220.214.153 # More search terms than what can be counted with a supercomputer (11/03/2024) -# Scam E-mails I've got - - - - - - - # Visibly fake item descriptions and prices # https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ 127.0.0.1 empatiya.net @@ -13693,14 +13683,6 @@ # https://github.com/DandelionSprout/adfilt/issues/1275 127.0.0.1 tgdrive.app 127.0.0.1 tg-drive-bx4f.onrender.com -# E-mail spammers -127.0.0.1 austinpoolservices.com -127.0.0.1 desernk.me -127.0.0.1 qed.uk.com -127.0.0.1 resultsfastfind.com -127.0.0.1 resultsfinderonline.com - -127.0.0.1 199.168.185.4 # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— @@ -14201,7 +14183,8 @@ # Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) -# Various E-mail spams' links +# ——— Various E-mail spams' links ——— +# Batch A 127.0.0.1 statautos.com 127.0.0.1 solitanh.site @@ -14215,13 +14198,31 @@ 127.0.0.1 hxzf4er.com 127.0.0.1 k2krl7zj.com 127.0.0.1 mcafee.sjv.io -127.0.0.1 ojrq.net 127.0.0.1 oninebest.com 127.0.0.1 ormediao.com 127.0.0.1 paramatise.com 127.0.0.1 watchterm.com 127.0.0.1 185.176.220.31 +# Batch B +127.0.0.1 wirexapp.africa.com +# Batch C + + + + + + + +# Batch D +127.0.0.1 austinpoolservices.com +127.0.0.1 desernk.me +127.0.0.1 qed.uk.com +127.0.0.1 resultsfastfind.com +127.0.0.1 resultsfinderonline.com + +127.0.0.1 199.168.185.4 + # ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index dbc7ad7c3..6e1788be8 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 23August2026v1-Deprecated +# Version: 30August2026v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -11137,8 +11137,6 @@ .netfiixhungary.net .95.214.26.78 -# Overly dedicated E-mail spammers -.wirexapp.africa.com # Google results for «SodaStream site:no cranberry» .adservice.google.*/ddm/clk/ @@ -11231,14 +11229,6 @@ .69.172.200.185 .77.220.214.153 # More search terms than what can be counted with a supercomputer (11/03/2024) -# Scam E-mails I've got -.googleapis.com/nwfotrac -.googleapis.com/firsttimesolo -.googleapis.com/trjhrt3j1erh2fghrth -.googleapis.com/realizingcrasis -.googleapis.com/deasastercreations -.googleapis.com/alphafemale -.googleapis.com/beastlyendeavors # Visibly fake item descriptions and prices .empatiya.net .vastila.com @@ -13296,14 +13286,6 @@ .tgdrive.app .tg-drive-bx4f.onrender.com -# E-mail spammers -.austinpoolservices.com -.desernk.me -.qed.uk.com -.resultsfastfind.com -.resultsfinderonline.com -/(.*[/@])?questionprov\d{5,6}\.com(/.*)? -.199.168.185.4 .0network.com @@ -13737,7 +13719,9 @@ .to/popconsole.php -# Various E-mail spams' links +{+block} +# ——— Various E-mail spams' links ——— +# Batch A .statautos.com /noo/taxx/* .solitanh.site @@ -13751,13 +13735,31 @@ .hxzf4er.com .k2krl7zj.com .mcafee.sjv.io -.ojrq.net .oninebest.com .ormediao.com .paramatise.com .watchterm.com .185.176.220.31 +# Batch B +.wirexapp.africa.com +# Batch C +.googleapis.com/nwfotrac +.googleapis.com/firsttimesolo +.googleapis.com/trjhrt3j1erh2fghrth +.googleapis.com/realizingcrasis +.googleapis.com/deasastercreations +.googleapis.com/alphafemale +.googleapis.com/beastlyendeavors +# Batch D +.austinpoolservices.com +.desernk.me +.qed.uk.com +.resultsfastfind.com +.resultsfinderonline.com +/(.*[/@])?questionprov\d{5,6}\.com(/.*)? +.199.168.185.4 + {+block} diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 0d67a318c..a4b2d7f64 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 23August2026v1-Deprecated +# Version: 30August2026v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -11561,8 +11561,6 @@ ay.pay.pay. -d netfiixhungary.net -d 95.214.26.78 -# Overly dedicated E-mail spammers --d wirexapp.africa.com # Google results for «SodaStream site:no cranberry» @@ -11657,14 +11655,6 @@ ed.br ?q=artstation- -d 69.172.200.185 -d 77.220.214.153 # More search terms than what can be counted with a supercomputer (11 03 2024) -# Scam E-mails I've got --d googleapis.com nwfotrac --d googleapis.com firsttimesolo --d googleapis.com trjhrt3j1erh2fghrth --d googleapis.com realizingcrasis --d googleapis.com deasastercreations --d googleapis.com alphafemale --d googleapis.com beastlyendeavors # Visibly fake item descriptions and prices # https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ -d empatiya.net @@ -13739,14 +13729,6 @@ ithub.io .github ?offer= # https://github.com/DandelionSprout/adfilt/issues/1275 -d tgdrive.app -d tg-drive-bx4f.onrender.com -# E-mail spammers --d austinpoolservices.com --d desernk.me --d qed.uk.com --d resultsfastfind.com --d resultsfinderonline.com - --d 199.168.185.4 # ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter/——— @@ -14192,7 +14174,8 @@ o popconsole.php # Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) -# Various E-mail spams' links +# ——— Various E-mail spams' links ——— +# Batch A -d statautos.com - noo taxx * -d solitanh.site @@ -14206,13 +14189,31 @@ o popconsole.php -d hxzf4er.com -d k2krl7zj.com -d mcafee.sjv.io --d ojrq.net -d oninebest.com -d ormediao.com -d paramatise.com -d watchterm.com -d 185.176.220.31 +# Batch B +-d wirexapp.africa.com +# Batch C +-d googleapis.com nwfotrac +-d googleapis.com firsttimesolo +-d googleapis.com trjhrt3j1erh2fghrth +-d googleapis.com realizingcrasis +-d googleapis.com deasastercreations +-d googleapis.com alphafemale +-d googleapis.com beastlyendeavors +# Batch D +-d austinpoolservices.com +-d desernk.me +-d qed.uk.com +-d resultsfastfind.com +-d resultsfinderonline.com + +-d 199.168.185.4 + # ——— Entries that are and or were in "uBlock Filters — Ads" and or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p index 7d95854c2..86a913f5e 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p @@ -375,6 +375,8 @@ F:43.164.196.209-43.164.196.209 F:88.255.216.16-88.255.216.16 F:15.204.140.239-15.204.140.239 F:15.204.160.216-15.204.160.216 +F:103.29.182.53-103.29.182.53 +F:13.140.171.211-13.140.171.211 F:194.226.139.121-194.226.139.121 F:194.226.139.7-194.226.139.7 F:95.181.157.36-95.181.157.36 @@ -576,6 +578,7 @@ F:172.232.7.47-172.232.7.47 F:172.234.216.100-172.234.216.100 F:172.237.146.46-172.237.146.46 F:35.71.155.166-35.71.155.166 +F:199.168.185.4-199.168.185.4 F:103.67.200.64-103.67.200.64 F:212.27.60.108-212.27.60.108 F:13.248.148.254-13.248.148.254 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index fa46c3144..4ff49ffea 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -393,6 +393,8 @@ 88.255.216.16 15.204.140.239 15.204.160.216 +103.29.182.53 +13.140.171.211 194.226.139.121 194.226.139.7 95.181.157.36 @@ -613,6 +615,7 @@ 172.234.216.100 172.237.146.46 35.71.155.166 +199.168.185.4 103.67.200.64 [2a00:8860:10d:1::2:b01] 212.27.60.108