mirror of
https://github.com/DandelionSprout/adfilt.git
synced 2026-09-24 22:03:36 +01:00
Fix #997
This commit is contained in:
Imre Kristoffer Eilertsen
@@ -1,6 +1,6 @@
|
||||
[Adblock Plus 3.13]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus and AdBlock)
|
||||
! Version: 22January2024v2
|
||||
! Version: 30January2024v1
|
||||
! Expires: 2 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -28,6 +28,8 @@
|
||||
||gdn^$domain=~cst.gdn|~pss.gdn
|
||||
||bid^
|
||||
||ooo^$domain=~toast.ooo
|
||||
! (https://github.com/DandelionSprout/adfilt/issues/999)
|
||||
@@://oo*.ooo/
|
||||
! https://bgp.he.net/AS202492#_prefixes (17/07/2022)
|
||||
!!!||monster^$domain=~egybest.monster|~yts.monster|~cloudcdn.monster|~fedi.monster|~rollenspiel.monster|~tts.monster|~geometry.monster
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
[AdGuard]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
|
||||
! Version: 22January2024v2
|
||||
! Version: 30January2024v1
|
||||
! Expires: 2 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -27,6 +27,8 @@
|
||||
||gdn^$document,domain=~cst.gdn|~pss.gdn
|
||||
||bid^$document
|
||||
||ooo^$document,domain=~toast.ooo
|
||||
! (https://github.com/DandelionSprout/adfilt/issues/999)
|
||||
@@://oo*.ooo/$document
|
||||
! https://bgp.he.net/AS202492#_prefixes (17/07/2022)
|
||||
!!!||monster^$document,domain=~egybest.monster|~yts.monster|~cloudcdn.monster|~fedi.monster|~rollenspiel.monster|~tts.monster|~geometry.monster
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
[Adblock Plus 3.13]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows' DNS filtering, and Pi-Hole FTL ≥5.22)
|
||||
! Version: 22January2024v2
|
||||
! Version: 30January2024v1
|
||||
! Expires: 2 days
|
||||
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -27,6 +27,8 @@
|
||||
||*.gdn^$denyallow=cst.gdn|pss.gdn
|
||||
||*.bid^
|
||||
||*.ooo^$denyallow=toast.ooo
|
||||
! (https://github.com/DandelionSprout/adfilt/issues/999)
|
||||
@@://oo*.ooo/
|
||||
! https://bgp.he.net/AS202492#_prefixes (17/07/2022)
|
||||
!!!||monster^~egybest.monster|yts.monster|cloudcdn.monster|fedi.monster|rollenspiel.monster|tts.monster|geometry.monster
|
||||
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
|
||||
|
||||
@@ -1,31 +1,31 @@
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
|
||||
# Version: 22January2024v2
|
||||
# Version: 30January2024v1
|
||||
# Expires: 2 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
!#if !env_mv3
|
||||
# Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway.
|
||||
|
||||
# ——— Bad top-level domains ———
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
|
||||
# When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted.
|
||||
# Tokelau (Put on break due to too many whitelistings being needed)
|
||||
!!!||tk
|
||||
|
||||
# Mali (Put on break due to too many and too frequent whitelistings being needed)
|
||||
!!!||ml
|
||||
|
||||
# Equatorial Guinea
|
||||
|
||||
# Central African Republic
|
||||
|
||||
# Palau (Put on break due to too many whitelistings being needed)
|
||||
!!!||pw
|
||||
|
||||
# Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever.
|
||||
|
||||
# International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
|
||||
!!!||agency
|
||||
|
||||
|
||||
|
||||
!!!||monster
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -36,21 +36,25 @@
|
||||
|
||||
|
||||
|
||||
!#if !env_mobile
|
||||
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
|
||||
|
||||
|
||||
# ——— You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. ———
|
||||
|
||||
!#endif
|
||||
|
||||
!#if env_mobile
|
||||
|
||||
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (For Google Mobile) ———
|
||||
!#endif
|
||||
|
||||
|
||||
|
||||
# ——— For DuckDuckGo ———
|
||||
|
||||
|
||||
# ——— For Bing ———
|
||||
|
||||
|
||||
# ——— Old dead tech-related domains ———
|
||||
# Domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them.
|
||||
adblock.gjtech.net
|
||||
@@ -279,10 +283,10 @@ discordap.com
|
||||
|
||||
|
||||
|
||||
!#if false
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1131,12 +1135,12 @@ yulanoltunna.store
|
||||
zimmisballet.tech
|
||||
|
||||
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
abbotinexperienced.com
|
||||
abedwithdrawalautograph.com
|
||||
abnegateexcavator.com
|
||||
@@ -3510,12 +3514,12 @@ zealsalts.com
|
||||
zeroclampentice.com
|
||||
zillionable.com
|
||||
zonedummy.com
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
deviuser.com
|
||||
|
||||
|
||||
@@ -3926,7 +3930,7 @@ d2m2wsoho8qq12.cloudfront.net
|
||||
findanswersnow.net
|
||||
gpush.cogocast.net
|
||||
info.leadid.com
|
||||
!!!||listrakbi.com
|
||||
|
||||
partner.mediawallahscript.com
|
||||
signupandturnyourscreenoffsafepowernow.date
|
||||
tag.cogocast.net
|
||||
@@ -4074,7 +4078,7 @@ news-back.org
|
||||
|
||||
|
||||
kokotrokot.com
|
||||
!!!?
|
||||
|
||||
|
||||
mugrikees.com
|
||||
alpha-news.org
|
||||
@@ -4361,11 +4365,11 @@ cpmverdirect.com
|
||||
telemetry-urs-microsoft.com
|
||||
|
||||
winrar-desktop.com
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
trafredirtds.com
|
||||
|
||||
pu020ev.com
|
||||
@@ -4676,7 +4680,6 @@ z-loading.icu
|
||||
z-prize.icu
|
||||
zfcurqe.art
|
||||
zuginmw.art
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
|
||||
@@ -4685,7 +4688,8 @@ zuginmw.art
|
||||
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
85.17.31.152
|
||||
95.211.26.202
|
||||
bzsx.link
|
||||
@@ -4702,9 +4706,9 @@ ujtj.link
|
||||
wznp.link
|
||||
158.247.212.220
|
||||
165.227.168.212
|
||||
!#if !ext_ublock
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
k-yw.com
|
||||
fearconic.com
|
||||
atobunderevenes.com
|
||||
@@ -8212,10 +8216,10 @@ zalesglobaljewelry.com
|
||||
zamberlanireland.com
|
||||
zapatillasvejacl.com
|
||||
zapatosaldochile.org
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -8954,7 +8958,6 @@ tiendadieselchile.com
|
||||
vans-finland.com
|
||||
martensbratislava.sk
|
||||
zapatillasmcqueen.com
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
|
||||
@@ -8963,7 +8966,8 @@ zapatillasmcqueen.com
|
||||
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -9987,9 +9991,9 @@ zelrulte.com
|
||||
zevaimsu.net
|
||||
zewoagoo.com
|
||||
zoozistu.net
|
||||
!#if !ext_ublock
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
academic-information.com
|
||||
academicvast.com
|
||||
amused-ground.com
|
||||
@@ -10586,9 +10590,9 @@ your-survey-services.com
|
||||
moneystartup.live
|
||||
fintechbest.online
|
||||
|
||||
!#if !ext_ublock
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
1000-dollar.cash
|
||||
1000-eur.cash
|
||||
algazira-updates.com
|
||||
@@ -10918,9 +10922,9 @@ usedhutsold.live
|
||||
|
||||
truanet.com
|
||||
rumadel.com
|
||||
!#if !ext_ublock
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
apigroup.xyz
|
||||
apihouse.xyz
|
||||
apiinfo.xyz
|
||||
@@ -11719,9 +11723,9 @@ zzrgab.com
|
||||
[2a02:b48:207:1::6]
|
||||
[2a02:b48:207:1::7]
|
||||
[2a02:b48:207:1::8]
|
||||
!#if !ext_ublock
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
abdoser.co.in
|
||||
acelim.co.in
|
||||
adsos.xyz
|
||||
@@ -19001,9 +19005,9 @@ zzdb5p4upiug.com
|
||||
192.243.59.12
|
||||
192.243.59.13
|
||||
192.243.59.20
|
||||
!#if !ext_ublock
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
# rule34hentai.net when uBlock Filters and AdGuard Base are turned off
|
||||
eivbjsegbino.com
|
||||
jpjmpqaupc.com
|
||||
@@ -19032,7 +19036,6 @@ tradeoffer.com.ru
|
||||
194.226.139.7
|
||||
95.181.157.36
|
||||
95.181.172.204
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
|
||||
@@ -19054,7 +19057,8 @@ tradeoffer.com.ru
|
||||
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
dispositionadverb.com
|
||||
wednesdayexpandingbarb.com
|
||||
broadslippery.com
|
||||
@@ -22164,11 +22168,11 @@ zoqueanbannets.tech
|
||||
zoysiasdossil.live
|
||||
zunianmedici.website
|
||||
zygomasnugify.uno
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
# Fake Gymshark webshops
|
||||
gantdanmark.com
|
||||
gantnorge.com
|
||||
@@ -22342,7 +22346,7 @@ gadgetstwist.com
|
||||
gadgetsfarms.com
|
||||
techorfy.com
|
||||
|
||||
!#if false
|
||||
|
||||
# ——— If you run a webserver of any sort, and you get incoming requests to resolve these domains, that's rarely a good sign for that requestor's intentions ———
|
||||
# If you use AdGuard Home ≥v0.106.3, I warmly recommend manually pasting these entries into Settings → DNS Settings → Disallowed domains
|
||||
version.bind
|
||||
@@ -22353,7 +22357,7 @@ id.server
|
||||
dominiosvision.com
|
||||
hitnslab.info
|
||||
1x1.cz
|
||||
!#endif
|
||||
|
||||
|
||||
# ——— Usually used by various groups who buy old domains and display illicit ads on them ———
|
||||
|
||||
@@ -22404,7 +22408,8 @@ hitnslab.info
|
||||
|
||||
|
||||
|
||||
!!!/\\/$doc
|
||||
|
||||
|
||||
|
||||
# ——— Spam in comment sections across the internet about "working" from "home" ———
|
||||
|
||||
@@ -22413,10 +22418,10 @@ hitnslab.info
|
||||
|
||||
# ——— Anti-'Malware comments' (Currently Disqus-specific) ———
|
||||
|
||||
!#if !ext_ublock
|
||||
|
||||
# ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
|
||||
if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data
|
||||
!#endif
|
||||
|
||||
|
||||
# ——— Anti-PUP (WIP) ———
|
||||
# This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
|
||||
@@ -22431,6 +22436,7 @@ mip.api.mcafeewebadvisor.com
|
||||
|
||||
|
||||
|
||||
|
||||
# All legitimate Pac-Man games would use "pac-man" links with a dash
|
||||
|
||||
|
||||
@@ -22439,9 +22445,6 @@ s.free.fr
|
||||
trmff.wpengine.com
|
||||
212.27.60.108
|
||||
|
||||
!#if !adguard
|
||||
!#include uBO%20list%20extensions/AdGuardSafeBrowsing-ReverseEngineered.txt
|
||||
!#endif
|
||||
|
||||
|
||||
|
||||
@@ -22449,19 +22452,21 @@ trmff.wpengine.com
|
||||
|
||||
|
||||
|
||||
!#if !ext_ublock
|
||||
|
||||
|
||||
|
||||
|
||||
# Brazilian mobsters trying to DDoS Cisco with TXT-type DNS requests
|
||||
!#endif
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
!#endif
|
||||
|
||||
!#if !ext_ublock
|
||||
|
||||
!#endif
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{+block}
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
|
||||
# Version: 22January2024v2-Deprecated
|
||||
# Version: 30January2024v1-Deprecated
|
||||
# Expires: 2 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
msFilterList
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
|
||||
# Version: 22January2024v2-Deprecated
|
||||
# Version: 30January2024v1-Deprecated
|
||||
: expires = 2 days
|
||||
# Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
|
||||
# For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
|
||||
@@ -105,6 +105,8 @@ msFilterList
|
||||
+d pss.gdn
|
||||
|
||||
|
||||
# (https://github.com/DandelionSprout/adfilt/issues/999)
|
||||
@@://oo*.ooo/
|
||||
# https://bgp.he.net/AS202492#_prefixes/(17/07/2022)
|
||||
!!!||monster
|
||||
+d egybest.monster
|
||||
|
||||
Reference in New Issue
Block a user