From d0978f7d16bddf52c784be013bb8db01ac6b7c21 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Mon, 2 Sep 2019 10:26:37 +0200 Subject: [PATCH] Added 3 whitelistings --- Dandelion Sprout's Anti-Malware List.txt | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index c7e706978..10963b0cf 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.2] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 08August2019v1-Beta +! Version: 02September2019v1-Beta ! Expires: 5 days ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover. ! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english @@ -8,7 +8,7 @@ ! ——— Country domains ——— ! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you. ! Tokelau -||.tk^$doc,domain=~coolcmd.tk|~budterence.tk|~intr0.tk|~google.tk|~transportnews.tk|~unicorncardlist.tk|~c0d3c.tk|~anonytext.tk|~tokelau-info.tk|~fakaofo.tk|~nukunonu.tk|~ Warning displayed due to: It's a top-level domain that allows free website registration; which made it abused by scammers. +||.tk^$doc,domain=~coolcmd.tk|~budterence.tk|~intr0.tk|~google.tk|~transportnews.tk|~unicorncardlist.tk|~c0d3c.tk|~anonytext.tk|~tokelau-info.tk|~fakaofo.tk|~nukunonu.tk|~loljp-wiki.tk|~ninetail.tk|~goshujin.tk|~ Warning displayed due to: It's a top-level domain that allows free website registration; which made it abused by scammers. ! Gabon ||.ga^$doc,domain=~google.ga|~filtri-dns.ga|~anpigabon.ga|~dgdi.ga|~voitures.ga|~ Warning displayed due to: It's a top-level domain that allows free website registration; which made it abused by scammers. ! Mali @@ -26,7 +26,7 @@ ||.bid^$doc,domain=~ Warning displayed due to: Being a very frequently abused .bid in EasyList entries. ! ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ——— -google.*##.rc:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="intr0.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="unicorncardlist.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="nukunonu.tk"])) +google.*##.rc:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="intr0.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="unicorncardlist.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="nukunonu.tk"])):not([href*="loljp-wiki.tk"]):not([href*="ninetail.tk"]):not([href*="goshujin.tk"]) google.*##.rc:has(a[href*=".ga/"]:not([href*="google.ga"]):not([href*="filtri-dns.ga"]):not([href*="anpigabon.ga"]):not([href*="dgdi.ga"]):not([href*="voitures.ga"])) google.*##.rc:has(a[href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"])) google.*##.rc:has(a[href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*="tvgelive.gq"]):not([href*="comprarcarros.gq"])) @@ -40,7 +40,7 @@ google.*##.rc:has(a[href*=".php?xxx="]) ! ——— For Google Mobile ——— ! Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile. -google.*##div[data-hveid]:has(:scope > div > div > a[onmousedown][href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="intr0.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="unicorncardlist.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="nukunonu.tk"])) +google.*##div[data-hveid]:has(:scope > div > div > a[onmousedown][href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="intr0.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="unicorncardlist.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="nukunonu.tk"]):not([href*="loljp-wiki.tk"]):not([href*="ninetail.tk"]):not([href*="goshujin.tk"])) google.*##div[data-hveid]:has(:scope > div > div > a[onmousedown][href*=".ga/"]:not([href*="google.ga"]):not([href*="filtri-dns.ga"]):not([href*="anpigabon.ga"]):not([href*="dgdi.ga"]):not([href*="voitures.ga"])) google.*##div[data-hveid]:has(:scope > div > div > a[onmousedown][href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"])) google.*##div[data-hveid]:has(:scope > div > div > a[onmousedown][href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*="tvgelive.gq"]):not([href*="comprarcarros.gq"])) @@ -51,7 +51,7 @@ google.*##div[data-hveid]:has(:scope > div > div > a[onmousedown][href*=".bid/"] google.*##div[data-hveid]:has(:scope > div > div > a[onmousedown][href*=".php?xxx="]) ! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks", except for startshop.no) ——— -||adblock.gjtech.net^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers. +||adblock.gjtech.net^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and has been picked up by malware pushers. ||spam404bl.com^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers. ||hufilter.hu^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers. ||fredfiber.no^$doc,domain=~ Warning displayed due to: That site does no longer host adblock lists and may have been picked up by malware pushers.