diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 84040b6a0..b90fa9431 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus and AdBlock) -! Version: 22January2024v2 +! Version: 30January2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -28,6 +28,8 @@ ||gdn^$domain=~cst.gdn|~pss.gdn ||bid^ ||ooo^$domain=~toast.ooo +! (https://github.com/DandelionSprout/adfilt/issues/999) +@@://oo*.ooo/ ! https://bgp.he.net/AS202492#_prefixes (17/07/2022) !!!||monster^$domain=~egybest.monster|~yts.monster|~cloudcdn.monster|~fedi.monster|~rollenspiel.monster|~tts.monster|~geometry.monster ! https://github.com/AdguardTeam/AdguardFilters/issues/131156 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 2f5d73492..fd675954e 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 22January2024v2 +! Version: 30January2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -27,6 +27,8 @@ ||gdn^$document,domain=~cst.gdn|~pss.gdn ||bid^$document ||ooo^$document,domain=~toast.ooo +! (https://github.com/DandelionSprout/adfilt/issues/999) +@@://oo*.ooo/$document ! https://bgp.he.net/AS202492#_prefixes (17/07/2022) !!!||monster^$document,domain=~egybest.monster|~yts.monster|~cloudcdn.monster|~fedi.monster|~rollenspiel.monster|~tts.monster|~geometry.monster ! https://github.com/AdguardTeam/AdguardFilters/issues/131156 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 1b4e76849..7be572e99 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 22January2024v2 +! Version: 30January2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -27,6 +27,8 @@ ||*.gdn^$denyallow=cst.gdn|pss.gdn ||*.bid^ ||*.ooo^$denyallow=toast.ooo +! (https://github.com/DandelionSprout/adfilt/issues/999) +@@://oo*.ooo/ ! https://bgp.he.net/AS202492#_prefixes (17/07/2022) !!!||monster^~egybest.monster|yts.monster|cloudcdn.monster|fedi.monster|rollenspiel.monster|tts.monster|geometry.monster ! https://github.com/AdguardTeam/AdguardFilters/issues/131156 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 9d5c58f7a..0f6378268 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,31 +1,31 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 22January2024v2 +# Version: 30January2024v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. -!#if !env_mv3 +# Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. # ——— Bad top-level domains ——— # You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you. # When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. # Tokelau (Put on break due to too many whitelistings being needed) -!!!||tk + # Mali (Put on break due to too many and too frequent whitelistings being needed) -!!!||ml + # Equatorial Guinea # Central African Republic # Palau (Put on break due to too many whitelistings being needed) -!!!||pw + # Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever. # International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. -!!!||agency -!!!||monster + + @@ -36,21 +36,25 @@ -!#if !env_mobile + # ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ——— + # ——— You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. ——— -!#endif -!#if env_mobile + + # ——— Attempted removal of Google search result entries that lead to the above top-level domains (For Google Mobile) ——— -!#endif + + # ——— For DuckDuckGo ——— + # ——— For Bing ——— + # ——— Old dead tech-related domains ——— # Domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. adblock.gjtech.net @@ -279,10 +283,10 @@ discordap.com -!#if false -!#endif + + @@ -1131,12 +1135,12 @@ yulanoltunna.store zimmisballet.tech -!#if !ext_ublock -!#endif + + abbotinexperienced.com abedwithdrawalautograph.com abnegateexcavator.com @@ -3510,12 +3514,12 @@ zealsalts.com zeroclampentice.com zillionable.com zonedummy.com -!#if !ext_ublock -!#endif + + deviuser.com @@ -3926,7 +3930,7 @@ d2m2wsoho8qq12.cloudfront.net findanswersnow.net gpush.cogocast.net info.leadid.com -!!!||listrakbi.com + partner.mediawallahscript.com signupandturnyourscreenoffsafepowernow.date tag.cogocast.net @@ -4074,7 +4078,7 @@ news-back.org kokotrokot.com -!!!? + mugrikees.com alpha-news.org @@ -4361,11 +4365,11 @@ cpmverdirect.com telemetry-urs-microsoft.com winrar-desktop.com -!#if !ext_ublock -!#endif + + trafredirtds.com pu020ev.com @@ -4676,7 +4680,6 @@ z-loading.icu z-prize.icu zfcurqe.art zuginmw.art -!#if !ext_ublock @@ -4685,7 +4688,8 @@ zuginmw.art -!#endif + + 85.17.31.152 95.211.26.202 bzsx.link @@ -4702,9 +4706,9 @@ ujtj.link wznp.link 158.247.212.220 165.227.168.212 -!#if !ext_ublock -!#endif + + k-yw.com fearconic.com atobunderevenes.com @@ -8212,10 +8216,10 @@ zalesglobaljewelry.com zamberlanireland.com zapatillasvejacl.com zapatosaldochile.org -!#if !ext_ublock -!#endif + + @@ -8954,7 +8958,6 @@ tiendadieselchile.com vans-finland.com martensbratislava.sk zapatillasmcqueen.com -!#if !ext_ublock @@ -8963,7 +8966,8 @@ zapatillasmcqueen.com -!#endif + + @@ -9987,9 +9991,9 @@ zelrulte.com zevaimsu.net zewoagoo.com zoozistu.net -!#if !ext_ublock -!#endif + + academic-information.com academicvast.com amused-ground.com @@ -10586,9 +10590,9 @@ your-survey-services.com moneystartup.live fintechbest.online -!#if !ext_ublock -!#endif + + 1000-dollar.cash 1000-eur.cash algazira-updates.com @@ -10918,9 +10922,9 @@ usedhutsold.live truanet.com rumadel.com -!#if !ext_ublock -!#endif + + apigroup.xyz apihouse.xyz apiinfo.xyz @@ -11719,9 +11723,9 @@ zzrgab.com [2a02:b48:207:1::6] [2a02:b48:207:1::7] [2a02:b48:207:1::8] -!#if !ext_ublock -!#endif + + abdoser.co.in acelim.co.in adsos.xyz @@ -19001,9 +19005,9 @@ zzdb5p4upiug.com 192.243.59.12 192.243.59.13 192.243.59.20 -!#if !ext_ublock -!#endif + + # rule34hentai.net when uBlock Filters and AdGuard Base are turned off eivbjsegbino.com jpjmpqaupc.com @@ -19032,7 +19036,6 @@ tradeoffer.com.ru 194.226.139.7 95.181.157.36 95.181.172.204 -!#if !ext_ublock @@ -19054,7 +19057,8 @@ tradeoffer.com.ru -!#endif + + dispositionadverb.com wednesdayexpandingbarb.com broadslippery.com @@ -22164,11 +22168,11 @@ zoqueanbannets.tech zoysiasdossil.live zunianmedici.website zygomasnugify.uno -!#if !ext_ublock -!#endif + + # Fake Gymshark webshops gantdanmark.com gantnorge.com @@ -22342,7 +22346,7 @@ gadgetstwist.com gadgetsfarms.com techorfy.com -!#if false + # ——— If you run a webserver of any sort, and you get incoming requests to resolve these domains, that's rarely a good sign for that requestor's intentions ——— # If you use AdGuard Home ≥v0.106.3, I warmly recommend manually pasting these entries into Settings → DNS Settings → Disallowed domains version.bind @@ -22353,7 +22357,7 @@ id.server dominiosvision.com hitnslab.info 1x1.cz -!#endif + # ——— Usually used by various groups who buy old domains and display illicit ads on them ——— @@ -22404,7 +22408,8 @@ hitnslab.info -!!!/\\/$doc + + # ——— Spam in comment sections across the internet about "working" from "home" ——— @@ -22413,10 +22418,10 @@ hitnslab.info # ——— Anti-'Malware comments' (Currently Disqus-specific) ——— -!#if !ext_ublock + # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ——— if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data -!#endif + # ——— Anti-PUP (WIP) ——— # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine) @@ -22431,6 +22436,7 @@ mip.api.mcafeewebadvisor.com + # All legitimate Pac-Man games would use "pac-man" links with a dash @@ -22439,9 +22445,6 @@ s.free.fr trmff.wpengine.com 212.27.60.108 -!#if !adguard -!#include uBO%20list%20extensions/AdGuardSafeBrowsing-ReverseEngineered.txt -!#endif @@ -22449,19 +22452,21 @@ trmff.wpengine.com -!#if !ext_ublock + + + + # Brazilian mobsters trying to DDoS Cisco with TXT-type DNS requests -!#endif -!#endif -!#if !ext_ublock -!#endif + + + diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index debfccfed..ceb824169 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 22January2024v2-Deprecated +# Version: 30January2024v1-Deprecated # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index ba57a6c52..90e70467b 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 22January2024v2-Deprecated +# Version: 30January2024v1-Deprecated : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -105,6 +105,8 @@ msFilterList +d pss.gdn +# (https://github.com/DandelionSprout/adfilt/issues/999) +@@://oo*.ooo/ # https://bgp.he.net/AS202492#_prefixes/(17/07/2022) !!!||monster +d egybest.monster