diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 7028e7478..edf669b7a 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 06January2025v1 +! Version: 16January2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -229,11 +229,11 @@ drivereasy.com#?#.pakb-content ol:has-text(Download and install Driver Easy) drivereasy.com#?#.pakb-content p:has-text(Driver Easy) drivereasy.com#?#.pakb-content div.info.note:has-text(drivereasy.com) ! https://www•drivereasy•com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/ -drivereasy.com#?#.pakb-content img[sizes^="(max-width: 80"] +drivereasy.com##.pakb-content img[sizes^="(max-width: 80"] drivereasy.com#?#.pakb-content p:has-text(the FREE version) drivereasy.com#?#.pakb-content p:has-text(the Pro version) ! https://www•drivereasy•com/knowledge/download-gigabyte-audio-driver/ -drivereasy.com#?#.pakb-content img[sizes^="(max-width: 79"] +drivereasy.com##.pakb-content img[sizes^="(max-width: 79"] drivereasy.com#?#.pakb-content span[id^=i-]:has-text(Automatically update your) drivereasy.com#?#.pakb-content li:has(a[href="#automatically"]) ! https://www•drivereasy•com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/ @@ -42662,6 +42662,10 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||empatiya.net^$popup ||vastila.com^ ||vastila.com^$popup +! https://github.com/hagezi/dns-blocklists/issues/4907 +! https://cside.dev/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attack +||wp3.xyz^ +||wp3.xyz^$popup ! Tumblr spammers tumblr.com#?#div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://bit.ly/"]) diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index f3a7f1146..89315fb06 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 06January2025v1 +! Version: 16January2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -142,20 +142,20 @@ www.google.*,ipv6.google.com##*:has(> * > a[oncontextmenu][href^="https://books. ||adblocker-app.info^$all ||block-ads-now.com^$document,popup ! Presumed to be fraudulent antivirus extensions on app/extension sites where it's perfectly probable that everyday people could install them. -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=free]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=clean]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=boost]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=boost][href*=clean]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=gratis]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*="201"]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=security]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*="anti.virus"]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*="scanguard"]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=".totalav."]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=adblocker]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=".adblock."]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=adsblock]) -play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href$=".adblock"]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=free]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=clean]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=boost]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=boost][href*=clean]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=gratis]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*="201"]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=antivirus][href*=security]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*="anti.virus"]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*="scanguard"]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=".totalav."]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=adblocker]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=".adblock."]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href*=adsblock]) +play.google.com##div[class$=" "] > div[class*=" "][jscontroller] > *:has([href$=".adblock"]) ! Other ||inside3d.com^$all ||viaarena.com^$all @@ -221,11 +221,11 @@ drivereasy.com#?#.pakb-content ol:has-text(Download and install Driver Easy) drivereasy.com#?#.pakb-content p:has-text(Driver Easy) drivereasy.com#?#.pakb-content div.info.note:has-text(drivereasy.com) ! https://www•drivereasy•com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/ -drivereasy.com#?#.pakb-content img[sizes^="(max-width: 80"] +drivereasy.com##.pakb-content img[sizes^="(max-width: 80"] drivereasy.com#?#.pakb-content p:has-text(the FREE version) drivereasy.com#?#.pakb-content p:has-text(the Pro version) ! https://www•drivereasy•com/knowledge/download-gigabyte-audio-driver/ -drivereasy.com#?#.pakb-content img[sizes^="(max-width: 79"] +drivereasy.com##.pakb-content img[sizes^="(max-width: 79"] drivereasy.com#?#.pakb-content span[id^=i-]:has-text(Automatically update your) drivereasy.com##.pakb-content li:has(a[href="#automatically"]) ! https://www•drivereasy•com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/ @@ -22612,12 +22612,15 @@ google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ! https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ ||empatiya.net^$all ||vastila.com^$all +! https://github.com/hagezi/dns-blocklists/issues/4907 +! https://cside.dev/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attack +||wp3.xyz^$all ! Tumblr spammers tumblr.com##div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://bit.ly/"]) tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has(a[rel=author]:has-text(/^[a-z]{2,6}-[a-z]{2,8}\d{2}$/i)):has-text(/^.*(18|sex|squirt|bo{2}ty).*$/i) tumblr.com#?#:is(.post,div[data-cell-id][style]:not([data-cell-id*=carousel]),div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has-text( click & chat me ):has-text(🔞) -tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) +tumblr.com##div[tabindex][style]:has(a[href*="://cutt.ly/"]) tumblr.com#?#div[tabindex][style]:has(a[href*="tinyurl."]:has-text(_1+8_)) www.tumblr.com##div[style="margin-top: 0px;"][tabindex]:has-text(🔞):has-text(/Insta/i) www.tumblr.com##div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a[target=_blank] > div > div:has-text(/^.*🔞.*insta( |gram).*\n.*$/i)) diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index e0eef9eef..28d07c5f6 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 06January2025v1 +! Version: 16January2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -21999,6 +21999,9 @@ ! https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ ||empatiya.net^ ||vastila.com^ +! https://github.com/hagezi/dns-blocklists/issues/4907 +! https://cside.dev/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attack +||wp3.xyz^ ! Tumblr spammers 104.21.82.132 diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index c6e0127b2..43b6cc242 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 06January2025v1 +# Version: 16January2025v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -22021,6 +22021,9 @@ amaskiphirescotland.co.uk # https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ empatiya.net vastila.com +# https://github.com/hagezi/dns-blocklists/issues/4907 +# https://cside.dev/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attack +wp3.xyz # Tumblr spammers diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 1dcbc0a45..ffcdbb868 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 06January2025v1 +# Version: 16January2025v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later, and of AdGuard Home, are STRONGLY RECOMMENDED to switch to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, unless otherwise proven. @@ -21969,6 +21969,9 @@ # https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ 127.0.0.1 empatiya.net 127.0.0.1 vastila.com +# https://github.com/hagezi/dns-blocklists/issues/4907 +# https://cside.dev/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attack +127.0.0.1 wp3.xyz # Tumblr spammers 127.0.0.1 104.21.82.132 diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 7128597bb..a78ea785b 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 06January2025v1-Deprecated +# Version: 16January2025v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -21593,6 +21593,7 @@ .amaskiphirescotland.co.uk .empatiya.net .vastila.com +.wp3.xyz # Tumblr spammers .104.21.82.132 diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index cde05a34a..8364eddb1 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 06January2025v1-Deprecated +# Version: 16January2025v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -22051,6 +22051,9 @@ ed.br ?q=artstation- # https://walyou•com/gameloft-dungeon-hunter-5-dragon-mania-legends-apple-tv-3029/ -d empatiya.net -d vastila.com +# https://github.com/hagezi/dns-blocklists/issues/4907 +# https://cside.dev/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attack +-d wp3.xyz # Tumblr spammers -d 104.21.82.132