mirror of
https://github.com/DandelionSprout/adfilt.git
synced 2026-09-24 22:03:36 +01:00
Add files via upload
This commit is contained in:
Imre Kristoffer Eilertsen
@@ -1,300 +1,304 @@
|
||||
[Adblock Plus 3.4]␍
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)␍
|
||||
! Version: 15February2020v1-Beta␍
|
||||
! Expires: 5 days␍
|
||||
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.␍
|
||||
! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english␍
|
||||
␍
|
||||
! ——— Country domains ———␍
|
||||
! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.␍
|
||||
! Tokelau␍
|
||||
||.tk^$domain=~coolcmd.tk|~budterence.tk|~google.tk|~transportnews.tk|~unicorncardlist.tk|~c0d3c.tk|~anonytext.tk|~tokelau-info.tk|~fakaofo.tk|~loljp-wiki.tk|~ninetail.tk|~goshujin.tk|~graph.tk|~haopro.tk|~dls2.pokeacer.tk|~ps2online.tk|~nolfrevival.tk|~steamroller.tk␍
|
||||
! Gabon␍
|
||||
||.ga^$domain=~google.ga|~filtri-dns.ga|~anpigabon.ga|~dgdi.ga|~voitures.ga␍
|
||||
! Mali␍
|
||||
||.ml^$domain=~google.ml|~mobili.ml|~melody.ml|~ps2online.tk␍
|
||||
! Equatorial Guinea␍
|
||||
||.gq^$domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq␍
|
||||
! Central African Republic␍
|
||||
||.cf^$domain=~intr0.cf|~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf␍
|
||||
! Palau␍
|
||||
||.pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw␍
|
||||
␍
|
||||
! ——— Topical domains ———␍
|
||||
! These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.␍
|
||||
! Presumably fake loans␍
|
||||
||.loan^␍
|
||||
||.agency^␍
|
||||
||.gdn^␍
|
||||
||.bid^␍
|
||||
␍
|
||||
! ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———␍
|
||||
␍
|
||||
! ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———␍
|
||||
␍
|
||||
! ——— For Google Mobile ———␍
|
||||
! Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.␍
|
||||
␍
|
||||
! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
||adblock.gjtech.net^␍
|
||||
||spam404bl.com^␍
|
||||
||109.201.135.46^␍
|
||||
||hufilter.hu^␍
|
||||
||fredfiber.no^␍
|
||||
||securemecca.com^␍
|
||||
||1hos.cf^␍
|
||||
||1hosts.cf^␍
|
||||
||everythingisnt.com^␍
|
||||
␍
|
||||
! ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———␍
|
||||
! To log in to TP-Link routers, use tplinkwifi.net instead.␍
|
||||
||tplinklogin.net^␍
|
||||
||tplinkextender.net^␍
|
||||
||ublock.org^␍
|
||||
||138.68.252.54^␍
|
||||
␍
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———␍
|
||||
||funeducation.com^␍
|
||||
||iq-research.info^␍
|
||||
||iq-test-online.org^␍
|
||||
||iq-test.co.uk^␍
|
||||
||iqtest.co.uk^␍
|
||||
||iqtest.com^␍
|
||||
||iqtestnow.org^␍
|
||||
||iqtestonline24.com^␍
|
||||
||test-iq.org^␍
|
||||
||officialiqtests.com^␍
|
||||
␍
|
||||
! ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———␍
|
||||
! How these links still remain in Unetbootin, is anyone's guess.␍
|
||||
||dreamlinux.com.br^␍
|
||||
||dreamlinux.net^␍
|
||||
||dreamlinux.info^␍
|
||||
||104.24.117.74^␍
|
||||
||104.24.116.74^␍
|
||||
||[2606:4700:30::6818:754a]^␍
|
||||
||[2606:4700:30::6818:744a]^␍
|
||||
||hacktolive.org^␍
|
||||
||mandriva.com^␍
|
||||
␍
|
||||
! ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
! https://windowsreport.com/extend-windows-laptop-battery-life/␍
|
||||
windowsreport.com##.code-block␍
|
||||
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/␍
|
||||
appuals.com##.info.box␍
|
||||
appuals.com##.appua-reimage-top␍
|
||||
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##div.attention-button-box-green␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.sidebar_download_inner␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.primary_download␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download_button_info_texts␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.js-download_button_additional_links␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#.ga-download:-abp-contains(/^Reimage$/)␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download-button-offer-header␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i)␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i) + p␍
|
||||
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10␍
|
||||
thewindowsclub.com#?#.entry-content > div > strong:-abp-contains(find & fix Windows error)␍
|
||||
thewindowsclub.com##div[style^="float: none; margin:10px "]␍
|
||||
! https://www.majorgeeks.com/files/details/patch_my_pc.html␍
|
||||
majorgeeks.com#?#b:-abp-has(a[target^="reimage"])␍
|
||||
||majorgeeks.com/images/icons/red_icon_18x17px.png$image␍
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.attention-button-wrap:-abp-contains(Reimage)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box):not(.colorbg-grey)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/) + td␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.js-download_button_offer␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.primary_download␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-placeholder␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.nfc-bottom-right:-abp-contains(Reimage)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(Reimage)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text␍
|
||||
␍
|
||||
! ——— ScanUtilities links ———␍
|
||||
! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/␍
|
||||
bynarycodes.com##div[class^="bynar-content_"]␍
|
||||
bynarycodes.com#?#.panel:-abp-contains(a[href*="scanutilities.com"])␍
|
||||
␍
|
||||
! ——— Driver Easy links ———␍
|
||||
! https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/␍
|
||||
drivereasy.com#?#.pakb-content ol:-abp-contains(Download and install Driver Easy)␍
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(Driver Easy)␍
|
||||
drivereasy.com#?#.pakb-content div.info.note:-abp-contains(drivereasy.com)␍
|
||||
! https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/␍
|
||||
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 80"]␍
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(the FREE version)␍
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(the Pro version)␍
|
||||
! https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/␍
|
||||
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 79"]␍
|
||||
drivereasy.com#?#.pakb-content span[id^="i-"]:-abp-contains(Automatically update your)␍
|
||||
drivereasy.com#?#.pakb-content li:-abp-has(a[href="#automatically"])␍
|
||||
! https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/␍
|
||||
drivereasy.com#?#.pakb-content span[id^="i-"]:-abp-contains(Update drivers with Driver Easy)␍
|
||||
drivereasy.com#?#.pakb-content figcaption:-abp-contains(for free if you like)␍
|
||||
drivereasy.com#?#.pakb-content li:-abp-has(a:-abp-contains(Update drivers with Driver Easy))␍
|
||||
! https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/␍
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(click Update All)␍
|
||||
␍
|
||||
! ——— Slimware DriverUpdate links ———␍
|
||||
! https://forums.windowscentral.com/␍
|
||||
forums.windowscentral.com###navbar_notice_33␍
|
||||
␍
|
||||
! ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———␍
|
||||
||google-analytics.com^$domain=sdi-tool.org␍
|
||||
␍
|
||||
! ——— SpyHunter links ———␍
|
||||
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/␍
|
||||
howtoremove.guide##div[style^="border:2px"]␍
|
||||
howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer)␍
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(SpyHunter)␍
|
||||
␍
|
||||
! ——— Sites that fraudulently claim you've won a new phone ———␍
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/$~third-party␍
|
||||
␍
|
||||
! ——— Banner for "MSN New Tab" ———␍
|
||||
msn.com##.irisbanner␍
|
||||
␍
|
||||
! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———␍
|
||||
! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.␍
|
||||
||gamecopyworld.com^␍
|
||||
||coolrom.com^␍
|
||||
||freeroms.com^␍
|
||||
||portalroms.com^␍
|
||||
||romsmania.com^␍
|
||||
||loveroms.com^␍
|
||||
||portableroms.com^␍
|
||||
␍
|
||||
! ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———␍
|
||||
||afobal.cl^␍
|
||||
||alvoportas.com.br^␍
|
||||
||blogerjijer.pw^␍
|
||||
||bright.su^␍
|
||||
||domnicpeter.in.net^␍
|
||||
||dzitech.net^␍
|
||||
||fadzulani.com^␍
|
||||
||hotelavalon.org^␍
|
||||
||hruner.com^␍
|
||||
||interlogistics.com.vn^␍
|
||||
||ivansaru.418.com1.ru^␍
|
||||
||jangasm.org^␍
|
||||
||kesikelyaf.com^␍
|
||||
||luenhinpearl.com^␍
|
||||
||ns511849.ip-192-99-19.net^␍
|
||||
||ns513726.ip-192-99-148.net^␍
|
||||
||panel.vargakragard.se^␍
|
||||
||projects.globaltronics.net^␍
|
||||
||prtscrinsertcn.net^␍
|
||||
||sanyai-love.rmu.ac.th^␍
|
||||
||server.bovine-mena.com^␍
|
||||
||servmill.com^␍
|
||||
||ssl.sinergycosmetics.com^␍
|
||||
||telefonfiyatlari.org^␍
|
||||
||update.rifugiopontese.it^␍
|
||||
||vodahelp.sytes.net^␍
|
||||
||nikey.cn^␍
|
||||
||witkey.com^␍
|
||||
␍
|
||||
! ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———␍
|
||||
! https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/␍
|
||||
||incels.co^␍
|
||||
␍
|
||||
! ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———␍
|
||||
! Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.␍
|
||||
! Chrome Web Store␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(www.ublock.org)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Plus Adblocker)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker for )␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Plus)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genesis Plus)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker HARDLINE)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Pro)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADZbuzz uBlock)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker DEFENSE)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Professional)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker CRM)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlocker)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdFilter)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdBlock Inc.)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genius PRO)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Easy AdBlock)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(radventsolutions)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains( & AdBlock)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblock for WebSites)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADBlock)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker.Global)␍
|
||||
! Mozilla Add-ons␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(uBlock, LLC)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker for Firefox)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(AdsBlocker)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Easy AdBlock)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker Genius Pro)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)␍
|
||||
! Homepages␍
|
||||
||adblock.biz^␍
|
||||
||stop-reklama.com^␍
|
||||
||the1adblocker.com^␍
|
||||
␍
|
||||
! ——— Wrong suffixes of legitimate sites ———␍
|
||||
! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/␍
|
||||
||dwarffortresswiki.com^␍
|
||||
||103.224.212.249^␍
|
||||
||speedtest.com^␍
|
||||
␍
|
||||
! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———␍
|
||||
||ppc.netnet44.net^␍
|
||||
||tncrun.net^␍
|
||||
||54.174.156.141^␍
|
||||
||lucretius-ada.com^␍
|
||||
||tango-deg.com^␍
|
||||
||ezekiel-sam.com^␍
|
||||
||franciscus-ful.com^␍
|
||||
||hippolyte-hag.com^␍
|
||||
||india-abc.com^␍
|
||||
||leontius-eli.com^␍
|
||||
||loukianos-euk.com^␍
|
||||
||mohini-ger.com^␍
|
||||
||nethaneel-has.com^␍
|
||||
||odtsseus-nua.com^␍
|
||||
||ortrun-adi.com^␍
|
||||
||paramonos-oha.com^␍
|
||||
||paula-secundinus.com^␍
|
||||
||photios-raj.com^␍
|
||||
||proserpina-zeb.com^␍
|
||||
||ieronimus-kay.com^␍
|
||||
||fredagty.com^␍
|
||||
||lordagty.com^␍
|
||||
||madagty.com^␍
|
||||
||onsdagty.com^␍
|
||||
||zeroredirect5.com^␍
|
||||
||54.209.22.226^␍
|
||||
||54.91.125.197^␍
|
||||
||52.202.53.245^␍
|
||||
||35.175.38.64^␍
|
||||
||35.168.147.213^␍
|
||||
||34.230.160.215^␍
|
||||
||3.226.8.132^␍
|
||||
||3.216.243.46^␍
|
||||
! Source: demonoid.pw␍
|
||||
||veremund-hon.com^␍
|
||||
␍
|
||||
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315␍
|
||||
||deviuser.com^␍
|
||||
␍
|
||||
! Malicious domains found in videogame manuals␍
|
||||
||acclaimsports.com^␍
|
||||
||acclaimmaxsports.com^␍
|
||||
||hip-games.com^␍
|
||||
||thq.com.au^␍
|
||||
␍
|
||||
! Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones␍
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.␍
|
||||
||unofficialtwrp.com^␍
|
||||
||androidweblog.com^␍
|
||||
||hardreset.info^␍
|
||||
␍
|
||||
! Placeholder line for alternate list versions␍
|
||||
[Adblock Plus 3.4]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
|
||||
! Version: 06March2020v2-Beta
|
||||
! Expires: 5 days
|
||||
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
|
||||
! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
|
||||
|
||||
! ——— Country domains ———
|
||||
! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
|
||||
! Tokelau
|
||||
||.tk^$domain=~coolcmd.tk|~budterence.tk|~google.tk|~transportnews.tk|~unicorncardlist.tk|~c0d3c.tk|~anonytext.tk|~tokelau-info.tk|~fakaofo.tk|~loljp-wiki.tk|~ninetail.tk|~goshujin.tk|~graph.tk|~haopro.tk|~dls2.pokeacer.tk|~ps2online.tk|~nolfrevival.tk|~steamroller.tk|~coppersurfer.tk
|
||||
! Gabon
|
||||
||.ga^$domain=~google.ga|~filtri-dns.ga|~anpigabon.ga|~dgdi.ga|~voitures.ga
|
||||
! Mali
|
||||
||.ml^$domain=~google.ml|~mobili.ml|~melody.ml|~ps2online.tk
|
||||
! Equatorial Guinea
|
||||
||.gq^$domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
|
||||
! Central African Republic
|
||||
||.cf^$domain=~intr0.cf|~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf
|
||||
! Palau
|
||||
||.pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw
|
||||
|
||||
! ——— Topical domains ———
|
||||
! These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
! Presumably fake loans
|
||||
||.loan^
|
||||
||.agency^
|
||||
||.gdn^
|
||||
||.bid^
|
||||
||.top^
|
||||
|
||||
! ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
|
||||
|
||||
! ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———
|
||||
|
||||
! ——— For Google Mobile ———
|
||||
! Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.
|
||||
|
||||
! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———
|
||||
||adblock.gjtech.net^
|
||||
||spam404bl.com^
|
||||
||109.201.135.46^
|
||||
||hufilter.hu^
|
||||
||fredfiber.no^
|
||||
||securemecca.com^
|
||||
||1hos.cf^
|
||||
||1hosts.cf^
|
||||
||everythingisnt.com^
|
||||
|
||||
! ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———
|
||||
! To log in to TP-Link routers, use tplinkwifi.net instead.
|
||||
||tplinklogin.net^
|
||||
||tplinkextender.net^
|
||||
||ublock.org^
|
||||
||138.68.252.54^
|
||||
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
||funeducation.com^
|
||||
||iq-research.info^
|
||||
||iq-test-online.org^
|
||||
||iq-test.co.uk^
|
||||
||iqtest.co.uk^
|
||||
||iqtest.com^
|
||||
||iqtestnow.org^
|
||||
||iqtestonline24.com^
|
||||
||test-iq.org^
|
||||
||officialiqtests.com^
|
||||
|
||||
! ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———
|
||||
! How these links still remain in Unetbootin, is anyone's guess.
|
||||
||dreamlinux.com.br^
|
||||
||dreamlinux.net^
|
||||
||dreamlinux.info^
|
||||
||104.24.117.74^
|
||||
||104.24.116.74^
|
||||
||[2606:4700:30::6818:754a]^
|
||||
||[2606:4700:30::6818:744a]^
|
||||
||hacktolive.org^
|
||||
||mandriva.com^
|
||||
|
||||
! ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———
|
||||
! https://windowsreport.com/extend-windows-laptop-battery-life/
|
||||
windowsreport.com##.code-block
|
||||
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
|
||||
appuals.com##.info.box
|
||||
appuals.com##.appua-reimage-top
|
||||
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##div.attention-button-box-green
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.sidebar_download_inner
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.primary_download
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download_button_info_texts
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.js-download_button_additional_links
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#.ga-download:-abp-contains(/^Reimage$/)
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download-button-offer-header
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i)
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i) + p
|
||||
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
|
||||
thewindowsclub.com#?#.entry-content > div > strong:-abp-contains(find & fix Windows error)
|
||||
thewindowsclub.com##div[style^="float: none; margin:10px "]
|
||||
! https://www.majorgeeks.com/files/details/patch_my_pc.html
|
||||
majorgeeks.com#?#b:-abp-has(a[target^="reimage"])
|
||||
||majorgeeks.com/images/icons/red_icon_18x17px.png$image
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.attention-button-wrap:-abp-contains(Reimage)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box):not(.colorbg-grey)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/) + td
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.js-download_button_offer
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.primary_download
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-placeholder
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.nfc-bottom-right:-abp-contains(Reimage)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(Reimage)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text
|
||||
|
||||
! ——— ScanUtilities links ———
|
||||
! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/
|
||||
bynarycodes.com##div[class^="bynar-content_"]
|
||||
bynarycodes.com#?#.panel:-abp-contains(a[href*="scanutilities.com"])
|
||||
|
||||
! ——— Driver Easy links ———
|
||||
! https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
|
||||
drivereasy.com#?#.pakb-content ol:-abp-contains(Download and install Driver Easy)
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(Driver Easy)
|
||||
drivereasy.com#?#.pakb-content div.info.note:-abp-contains(drivereasy.com)
|
||||
! https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
|
||||
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 80"]
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(the FREE version)
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(the Pro version)
|
||||
! https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/
|
||||
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 79"]
|
||||
drivereasy.com#?#.pakb-content span[id^="i-"]:-abp-contains(Automatically update your)
|
||||
drivereasy.com#?#.pakb-content li:-abp-has(a[href="#automatically"])
|
||||
! https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
|
||||
drivereasy.com#?#.pakb-content span[id^="i-"]:-abp-contains(Update drivers with Driver Easy)
|
||||
drivereasy.com#?#.pakb-content figcaption:-abp-contains(for free if you like)
|
||||
drivereasy.com#?#.pakb-content li:-abp-has(a:-abp-contains(Update drivers with Driver Easy))
|
||||
! https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(click Update All)
|
||||
|
||||
! ——— Slimware DriverUpdate links ———
|
||||
! https://forums.windowscentral.com/
|
||||
forums.windowscentral.com###navbar_notice_33
|
||||
|
||||
! ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———
|
||||
||google-analytics.com^$domain=sdi-tool.org
|
||||
|
||||
! ——— SpyHunter links ———
|
||||
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
|
||||
howtoremove.guide##div[style^="border:2px"]
|
||||
howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer)
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(SpyHunter)
|
||||
|
||||
! ——— Sites that fraudulently claim you've won a new phone ———
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/$~third-party
|
||||
|
||||
! ——— Banner for "MSN New Tab" ———
|
||||
msn.com##.irisbanner
|
||||
|
||||
! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
|
||||
! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.
|
||||
||gamecopyworld.com^
|
||||
||coolrom.com^
|
||||
||freeroms.com^
|
||||
||portalroms.com^
|
||||
||romsmania.com^
|
||||
||loveroms.com^
|
||||
||portableroms.com^
|
||||
|
||||
! ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———
|
||||
||afobal.cl^
|
||||
||alvoportas.com.br^
|
||||
||blogerjijer.pw^
|
||||
||bright.su^
|
||||
||domnicpeter.in.net^
|
||||
||dzitech.net^
|
||||
||fadzulani.com^
|
||||
||hotelavalon.org^
|
||||
||hruner.com^
|
||||
||interlogistics.com.vn^
|
||||
||ivansaru.418.com1.ru^
|
||||
||jangasm.org^
|
||||
||kesikelyaf.com^
|
||||
||luenhinpearl.com^
|
||||
||ns511849.ip-192-99-19.net^
|
||||
||ns513726.ip-192-99-148.net^
|
||||
||panel.vargakragard.se^
|
||||
||projects.globaltronics.net^
|
||||
||prtscrinsertcn.net^
|
||||
||sanyai-love.rmu.ac.th^
|
||||
||server.bovine-mena.com^
|
||||
||servmill.com^
|
||||
||ssl.sinergycosmetics.com^
|
||||
||telefonfiyatlari.org^
|
||||
||update.rifugiopontese.it^
|
||||
||vodahelp.sytes.net^
|
||||
||nikey.cn^
|
||||
||witkey.com^
|
||||
|
||||
! ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———
|
||||
! https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/
|
||||
||incels.co^
|
||||
|
||||
! ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———
|
||||
! Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.
|
||||
! Chrome Web Store
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(www.ublock.org)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Plus Adblocker)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker for )
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Plus)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genesis Plus)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker HARDLINE)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Pro)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADZbuzz uBlock)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker DEFENSE)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Professional)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker CRM)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlocker)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdFilter)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdBlock Inc.)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genius PRO)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Easy AdBlock)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(radventsolutions)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains( & AdBlock)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblock for WebSites)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADBlock)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker.Global)
|
||||
! Mozilla Add-ons
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(uBlock, LLC)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker for Firefox)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(AdsBlocker)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Easy AdBlock)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker Genius Pro)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
|
||||
! Homepages
|
||||
||adblock.biz^
|
||||
||stop-reklama.com^
|
||||
||the1adblocker.com^
|
||||
|
||||
! ——— Wrong suffixes of legitimate sites ———
|
||||
! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/
|
||||
||dwarffortresswiki.com^
|
||||
||103.224.212.249^
|
||||
||speedtest.com^
|
||||
|
||||
! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
|
||||
||ppc.netnet44.net^
|
||||
||tncrun.net^
|
||||
||54.174.156.141^
|
||||
||lucretius-ada.com^
|
||||
||tango-deg.com^
|
||||
||ezekiel-sam.com^
|
||||
||franciscus-ful.com^
|
||||
||hippolyte-hag.com^
|
||||
||india-abc.com^
|
||||
||leontius-eli.com^
|
||||
||loukianos-euk.com^
|
||||
||mohini-ger.com^
|
||||
||nethaneel-has.com^
|
||||
||odtsseus-nua.com^
|
||||
||ortrun-adi.com^
|
||||
||paramonos-oha.com^
|
||||
||paula-secundinus.com^
|
||||
||photios-raj.com^
|
||||
||proserpina-zeb.com^
|
||||
||ieronimus-kay.com^
|
||||
||fredagty.com^
|
||||
||lordagty.com^
|
||||
||madagty.com^
|
||||
||onsdagty.com^
|
||||
||zeroredirect5.com^
|
||||
||54.209.22.226^
|
||||
||54.91.125.197^
|
||||
||52.202.53.245^
|
||||
||35.175.38.64^
|
||||
||35.168.147.213^
|
||||
||34.230.160.215^
|
||||
||3.226.8.132^
|
||||
||3.216.243.46^
|
||||
||maowaotodowoo.net^
|
||||
! Source: demonoid.pw
|
||||
||veremund-hon.com^
|
||||
! Source: desidert.no
|
||||
||collectfasttracks.com^
|
||||
|
||||
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
|
||||
||deviuser.com^
|
||||
|
||||
! Malicious domains found in videogame manuals
|
||||
||acclaimsports.com^
|
||||
||acclaimmaxsports.com^
|
||||
||hip-games.com^
|
||||
||thq.com.au^
|
||||
|
||||
! Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
||unofficialtwrp.com^
|
||||
||androidweblog.com^
|
||||
||hardreset.info^
|
||||
|
||||
! Placeholder line for alternate list versions
|
||||
|
||||
@@ -1,322 +1,328 @@
|
||||
[AdGuard ≥6]␍
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)␍
|
||||
! Version: 15February2020v1-Beta␍
|
||||
! Expires: 5 days␍
|
||||
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.␍
|
||||
! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english␍
|
||||
␍
|
||||
! ——— Country domains ———␍
|
||||
! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.␍
|
||||
! Tokelau␍
|
||||
||.tk^$empty,important,domain=~coolcmd.tk|~budterence.tk|~google.tk|~transportnews.tk|~unicorncardlist.tk|~c0d3c.tk|~anonytext.tk|~tokelau-info.tk|~fakaofo.tk|~loljp-wiki.tk|~ninetail.tk|~goshujin.tk|~graph.tk|~haopro.tk|~dls2.pokeacer.tk|~ps2online.tk|~nolfrevival.tk|~steamroller.tk␍
|
||||
! Gabon␍
|
||||
||.ga^$empty,important,domain=~google.ga|~filtri-dns.ga|~anpigabon.ga|~dgdi.ga|~voitures.ga␍
|
||||
! Mali␍
|
||||
||.ml^$empty,important,domain=~google.ml|~mobili.ml|~melody.ml|~ps2online.tk␍
|
||||
! Equatorial Guinea␍
|
||||
||.gq^$empty,important,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq␍
|
||||
! Central African Republic␍
|
||||
||.cf^$empty,important,domain=~intr0.cf|~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf␍
|
||||
! Palau␍
|
||||
||.pw^$empty,important,domain=~libgen.pw|~petridish.pw|~palaugov.pw␍
|
||||
␍
|
||||
! ——— Topical domains ———␍
|
||||
! These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.␍
|
||||
! Presumably fake loans␍
|
||||
||.loan^$empty,important␍
|
||||
||.agency^$empty,important␍
|
||||
||.gdn^$empty,important␍
|
||||
||.bid^$empty,important␍
|
||||
␍
|
||||
! ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———␍
|
||||
google.*##.rc:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="unicorncardlist.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="loljp-wiki.tk"]):not([href*="ninetail.tk"]):not([href*="goshujin.tk"]):not([href*="graph.tk"]):not([href*="haopro.tk"]):not([href*="ps2online.tk"]):not([href*="nolfrevival.tk"]):not([href*="steamroller.tk"]))␍
|
||||
google.*##.rc:has(a[href*=".ga/"]:not([href*="google.ga"]):not([href*="filtri-dns.ga"]):not([href*="anpigabon.ga"]):not([href*="dgdi.ga"]):not([href*="voitures.ga"]))␍
|
||||
google.*##.rc:has(a[href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="ps2online.ml"]))␍
|
||||
google.*##.rc:has(a[href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*="tvgelive.gq"]):not([href*="comprarcarros.gq"]))␍
|
||||
google.*##.rc:has(a[href*=".cf/"]:not([href*="intr0.cf"]):not([href*="google.cf"]):not([href*="rths.cf"]):not([href*="voitures.cf"]):not([href*="assembleenationale-rca.cf"]):not([href*="cps-rca.cf"]):not([href*="acap.cf"]))␍
|
||||
google.*##.rc:has(a[href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]))␍
|
||||
google.*##.rc:has(a[href*=".loan/"])␍
|
||||
google.*##.rc:has(a[href*=".agency/"])␍
|
||||
google.*##.rc:has(a[href*=".gdn/"])␍
|
||||
google.*##.rc:has(a[href*=".bid/"])␍
|
||||
␍
|
||||
! ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———␍
|
||||
google.*##.rc:has(a[href*=".php?xxx="])␍
|
||||
␍
|
||||
! ——— For Google Mobile ———␍
|
||||
! Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".tk/"]:not([href*=coolcmd]):not([href*=budterence]):not([href*="google.tk"]):not([href*=transportnews]):not([href*=unicorncardlist]):not([href*=c0d3c]):not([href*=anonytext]):not([href*=tokelau-info]):not([href*=fakaofo]):not([href*=loljp-wiki]):not([href*=ninetail]):not([href*=goshujin]):not([href*="graph.tk"]):not([href*=haopro]):not([href*="ps2online.tk"]):not([href*=nolfrevival]):not([href*="steamroller.tk"]))␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".ga/"]:not([href*="google.ga"]):not([href*=filtri-dns]):not([href*=anpigabon]):not([href*="dgdi.ga"]):not([href*=voitures]))␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="ps2online.ml"]))␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*=tvgelive]):not([href*=comprarcarros]))␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".cf/"]:not([href*="intr0.cf"]):not([href*="google.cf"]):not([href*="rths.cf"]):not([href*=voitures]):not([href*=assembleenationale-rca]):not([href*=cps-rca]):not([href*="acap.cf"]))␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]))␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".loan/"])␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".agency/"])␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".gdn/"])␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".bid/"])␍
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".php?xxx="])␍
|
||||
␍
|
||||
! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
||adblock.gjtech.net^$empty,important␍
|
||||
||spam404bl.com^$empty,important␍
|
||||
109.201.135.46$network␍
|
||||
||hufilter.hu^$empty,important␍
|
||||
||fredfiber.no^$empty,important␍
|
||||
||securemecca.com^$empty,important␍
|
||||
||1hos.cf^$empty,important␍
|
||||
||1hosts.cf^$empty,important␍
|
||||
||everythingisnt.com^$empty,important␍
|
||||
␍
|
||||
! ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———␍
|
||||
! To log in to TP-Link routers, use tplinkwifi.net instead.␍
|
||||
||tplinklogin.net^$empty,important␍
|
||||
||tplinkextender.net^$empty,important␍
|
||||
||ublock.org^$empty,important␍
|
||||
138.68.252.54$network␍
|
||||
␍
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———␍
|
||||
||funeducation.com^$empty,important␍
|
||||
||iq-research.info^$empty,important␍
|
||||
||iq-test-online.org^$empty,important␍
|
||||
||iq-test.co.uk^$empty,important␍
|
||||
||iqtest.co.uk^$empty,important␍
|
||||
||iqtest.com^$empty,important␍
|
||||
||iqtestnow.org^$empty,important␍
|
||||
||iqtestonline24.com^$empty,important␍
|
||||
||test-iq.org^$empty,important␍
|
||||
||officialiqtests.com^$empty,important␍
|
||||
␍
|
||||
! ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———␍
|
||||
! How these links still remain in Unetbootin, is anyone's guess.␍
|
||||
||dreamlinux.com.br^$empty,important␍
|
||||
||dreamlinux.net^$empty,important␍
|
||||
||dreamlinux.info^$empty,important␍
|
||||
104.24.117.74$network␍
|
||||
104.24.116.74$network␍
|
||||
[2606:4700:30::6818:754a]$network␍
|
||||
[2606:4700:30::6818:744a]$network␍
|
||||
||hacktolive.org^$empty,important␍
|
||||
||mandriva.com^$empty,important␍
|
||||
␍
|
||||
! ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
! https://windowsreport.com/extend-windows-laptop-battery-life/␍
|
||||
windowsreport.com##.code-block␍
|
||||
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/␍
|
||||
appuals.com##.info.box␍
|
||||
appuals.com##.appua-reimage-top␍
|
||||
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##div.attention-button-box-green␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.sidebar_download_inner␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.primary_download␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download_button_info_texts␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.js-download_button_additional_links␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#.ga-download:-abp-contains(/^Reimage$/)␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download-button-offer-header␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i)␍
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i) + p␍
|
||||
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10␍
|
||||
thewindowsclub.com#?#.entry-content > div > strong:-abp-contains(find & fix Windows error)␍
|
||||
thewindowsclub.com##div[style^="float: none; margin:10px "]␍
|
||||
! https://www.majorgeeks.com/files/details/patch_my_pc.html␍
|
||||
majorgeeks.com#?#b:-abp-has(a[target^="reimage"])␍
|
||||
||majorgeeks.com/images/icons/red_icon_18x17px.png$image␍
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.attention-button-wrap:-abp-contains(Reimage)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box):not(.colorbg-grey)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/) + td␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.js-download_button_offer␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.primary_download␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-placeholder␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.nfc-bottom-right:-abp-contains(Reimage)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(Reimage)␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text␍
|
||||
␍
|
||||
! ——— ScanUtilities links ———␍
|
||||
! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/␍
|
||||
bynarycodes.com##div[class^="bynar-content_"]␍
|
||||
bynarycodes.com#?#.panel:-abp-contains(a[href*="scanutilities.com"])␍
|
||||
␍
|
||||
! ——— Driver Easy links ———␍
|
||||
! https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/␍
|
||||
drivereasy.com#?#.pakb-content ol:-abp-contains(Download and install Driver Easy)␍
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(Driver Easy)␍
|
||||
drivereasy.com#?#.pakb-content div.info.note:-abp-contains(drivereasy.com)␍
|
||||
! https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/␍
|
||||
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 80"]␍
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(the FREE version)␍
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(the Pro version)␍
|
||||
! https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/␍
|
||||
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 79"]␍
|
||||
drivereasy.com#?#.pakb-content span[id^="i-"]:-abp-contains(Automatically update your)␍
|
||||
drivereasy.com#?#.pakb-content li:-abp-has(a[href="#automatically"])␍
|
||||
! https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/␍
|
||||
drivereasy.com#?#.pakb-content span[id^="i-"]:-abp-contains(Update drivers with Driver Easy)␍
|
||||
drivereasy.com#?#.pakb-content figcaption:-abp-contains(for free if you like)␍
|
||||
drivereasy.com#?#.pakb-content li:-abp-has(a:-abp-contains(Update drivers with Driver Easy))␍
|
||||
! https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/␍
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(click Update All)␍
|
||||
␍
|
||||
! ——— Slimware DriverUpdate links ———␍
|
||||
! https://forums.windowscentral.com/␍
|
||||
forums.windowscentral.com###navbar_notice_33␍
|
||||
␍
|
||||
! ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———␍
|
||||
||google-analytics.com^$domain=sdi-tool.org␍
|
||||
␍
|
||||
! ——— SpyHunter links ———␍
|
||||
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/␍
|
||||
howtoremove.guide##div[style^="border:2px"]␍
|
||||
howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer)␍
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description␍
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(SpyHunter)␍
|
||||
␍
|
||||
! ——— Sites that fraudulently claim you've won a new phone ———␍
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/$~third-party,empty,important␍
|
||||
␍
|
||||
! ——— Banner for "MSN New Tab" ———␍
|
||||
msn.com##.irisbanner␍
|
||||
␍
|
||||
! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———␍
|
||||
! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.␍
|
||||
||gamecopyworld.com^$empty,important␍
|
||||
||coolrom.com^$empty,important␍
|
||||
||freeroms.com^$empty,important␍
|
||||
||portalroms.com^$empty,important␍
|
||||
||romsmania.com^$empty,important␍
|
||||
||loveroms.com^$empty,important␍
|
||||
||portableroms.com^$empty,important␍
|
||||
␍
|
||||
! ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———␍
|
||||
||afobal.cl^$empty,important␍
|
||||
||alvoportas.com.br^$empty,important␍
|
||||
||blogerjijer.pw^$empty,important␍
|
||||
||bright.su^$empty,important␍
|
||||
||domnicpeter.in.net^$empty,important␍
|
||||
||dzitech.net^$empty,important␍
|
||||
||fadzulani.com^$empty,important␍
|
||||
||hotelavalon.org^$empty,important␍
|
||||
||hruner.com^$empty,important␍
|
||||
||interlogistics.com.vn^$empty,important␍
|
||||
||ivansaru.418.com1.ru^$empty,important␍
|
||||
||jangasm.org^$empty,important␍
|
||||
||kesikelyaf.com^$empty,important␍
|
||||
||luenhinpearl.com^$empty,important␍
|
||||
||ns511849.ip-192-99-19.net^$empty,important␍
|
||||
||ns513726.ip-192-99-148.net^$empty,important␍
|
||||
||panel.vargakragard.se^$empty,important␍
|
||||
||projects.globaltronics.net^$empty,important␍
|
||||
||prtscrinsertcn.net^$empty,important␍
|
||||
||sanyai-love.rmu.ac.th^$empty,important␍
|
||||
||server.bovine-mena.com^$empty,important␍
|
||||
||servmill.com^$empty,important␍
|
||||
||ssl.sinergycosmetics.com^$empty,important␍
|
||||
||telefonfiyatlari.org^$empty,important␍
|
||||
||update.rifugiopontese.it^$empty,important␍
|
||||
||vodahelp.sytes.net^$empty,important␍
|
||||
||nikey.cn^$empty,important␍
|
||||
||witkey.com^$empty,important␍
|
||||
␍
|
||||
! ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———␍
|
||||
! https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/␍
|
||||
||incels.co^$empty,important␍
|
||||
␍
|
||||
! ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———␍
|
||||
! Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.␍
|
||||
! Chrome Web Store␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(www.ublock.org)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Plus Adblocker)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker for )␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Plus)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genesis Plus)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker HARDLINE)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Pro)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADZbuzz uBlock)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker DEFENSE)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Professional)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker CRM)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlocker)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdFilter)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdBlock Inc.)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genius PRO)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Easy AdBlock)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(radventsolutions)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains( & AdBlock)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblock for WebSites)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADBlock)␍
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker.Global)␍
|
||||
! Mozilla Add-ons␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(uBlock, LLC)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker for Firefox)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(AdsBlocker)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Easy AdBlock)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker Genius Pro)␍
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)␍
|
||||
! Homepages␍
|
||||
||adblock.biz^$empty,important␍
|
||||
||stop-reklama.com^$empty,important␍
|
||||
||the1adblocker.com^$empty,important␍
|
||||
␍
|
||||
! ——— Wrong suffixes of legitimate sites ———␍
|
||||
! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/␍
|
||||
||dwarffortresswiki.com^$empty,important␍
|
||||
103.224.212.249$network␍
|
||||
||speedtest.com^$empty,important␍
|
||||
␍
|
||||
! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———␍
|
||||
||ppc.netnet44.net^$empty,important␍
|
||||
||tncrun.net^$empty,important␍
|
||||
54.174.156.141$network␍
|
||||
||lucretius-ada.com^$empty,important␍
|
||||
||tango-deg.com^$empty,important␍
|
||||
||ezekiel-sam.com^$empty,important␍
|
||||
||franciscus-ful.com^$empty,important␍
|
||||
||hippolyte-hag.com^$empty,important␍
|
||||
||india-abc.com^$empty,important␍
|
||||
||leontius-eli.com^$empty,important␍
|
||||
||loukianos-euk.com^$empty,important␍
|
||||
||mohini-ger.com^$empty,important␍
|
||||
||nethaneel-has.com^$empty,important␍
|
||||
||odtsseus-nua.com^$empty,important␍
|
||||
||ortrun-adi.com^$empty,important␍
|
||||
||paramonos-oha.com^$empty,important␍
|
||||
||paula-secundinus.com^$empty,important␍
|
||||
||photios-raj.com^$empty,important␍
|
||||
||proserpina-zeb.com^$empty,important␍
|
||||
||ieronimus-kay.com^$empty,important␍
|
||||
||fredagty.com^$empty,important␍
|
||||
||lordagty.com^$empty,important␍
|
||||
||madagty.com^$empty,important␍
|
||||
||onsdagty.com^$empty,important␍
|
||||
||zeroredirect5.com^$empty,important␍
|
||||
54.209.22.226$network␍
|
||||
54.91.125.197$network␍
|
||||
52.202.53.245$network␍
|
||||
35.175.38.64$network␍
|
||||
35.168.147.213$network␍
|
||||
34.230.160.215$network␍
|
||||
3.226.8.132$network␍
|
||||
3.216.243.46$network␍
|
||||
! Source: demonoid.pw␍
|
||||
||veremund-hon.com^$empty,important␍
|
||||
␍
|
||||
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315␍
|
||||
||deviuser.com^$empty,important␍
|
||||
␍
|
||||
! Malicious domains found in videogame manuals␍
|
||||
||acclaimsports.com^$empty,important␍
|
||||
||acclaimmaxsports.com^$empty,important␍
|
||||
||hip-games.com^$empty,important␍
|
||||
||thq.com.au^$empty,important␍
|
||||
␍
|
||||
! Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones␍
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.␍
|
||||
||unofficialtwrp.com^$empty,important␍
|
||||
||androidweblog.com^$empty,important␍
|
||||
||hardreset.info^$empty,important␍
|
||||
␍
|
||||
! Placeholder line for alternate list versions␍
|
||||
[AdGuard ≥6]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
|
||||
! Version: 06March2020v2-Beta
|
||||
! Expires: 5 days
|
||||
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
|
||||
! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
|
||||
|
||||
! ——— Country domains ———
|
||||
! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
|
||||
! Tokelau
|
||||
||.tk^$empty,important,domain=~coolcmd.tk|~budterence.tk|~google.tk|~transportnews.tk|~unicorncardlist.tk|~c0d3c.tk|~anonytext.tk|~tokelau-info.tk|~fakaofo.tk|~loljp-wiki.tk|~ninetail.tk|~goshujin.tk|~graph.tk|~haopro.tk|~dls2.pokeacer.tk|~ps2online.tk|~nolfrevival.tk|~steamroller.tk|~coppersurfer.tk
|
||||
! Gabon
|
||||
||.ga^$empty,important,domain=~google.ga|~filtri-dns.ga|~anpigabon.ga|~dgdi.ga|~voitures.ga
|
||||
! Mali
|
||||
||.ml^$empty,important,domain=~google.ml|~mobili.ml|~melody.ml|~ps2online.tk
|
||||
! Equatorial Guinea
|
||||
||.gq^$empty,important,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
|
||||
! Central African Republic
|
||||
||.cf^$empty,important,domain=~intr0.cf|~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf
|
||||
! Palau
|
||||
||.pw^$empty,important,domain=~libgen.pw|~petridish.pw|~palaugov.pw
|
||||
|
||||
! ——— Topical domains ———
|
||||
! These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
! Presumably fake loans
|
||||
||.loan^$empty,important
|
||||
||.agency^$empty,important
|
||||
||.gdn^$empty,important
|
||||
||.bid^$empty,important
|
||||
||.top^$empty,important
|
||||
|
||||
! ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
|
||||
google.*##.rc:has(a[href*=".tk/"]:not([href*="coolcmd.tk"]):not([href*="budterence.tk"]):not([href*="google.tk"]):not([href*="transportnews.tk"]):not([href*="unicorncardlist.tk"]):not([href*="c0d3c.tk"]):not([href*="anonytext.tk"]):not([href*="tokelau-info.tk"]):not([href*="fakaofo.tk"]):not([href*="loljp-wiki.tk"]):not([href*="ninetail.tk"]):not([href*="goshujin.tk"]):not([href*="graph.tk"]):not([href*="haopro.tk"]):not([href*="ps2online.tk"]):not([href*="nolfrevival.tk"]):not([href*="steamroller.tk"]))
|
||||
google.*##.rc:has(a[href*=".ga/"]:not([href*="google.ga"]):not([href*="filtri-dns.ga"]):not([href*="anpigabon.ga"]):not([href*="dgdi.ga"]):not([href*="voitures.ga"]))
|
||||
google.*##.rc:has(a[href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="ps2online.ml"]))
|
||||
google.*##.rc:has(a[href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*="tvgelive.gq"]):not([href*="comprarcarros.gq"]))
|
||||
google.*##.rc:has(a[href*=".cf/"]:not([href*="intr0.cf"]):not([href*="google.cf"]):not([href*="rths.cf"]):not([href*="voitures.cf"]):not([href*="assembleenationale-rca.cf"]):not([href*="cps-rca.cf"]):not([href*="acap.cf"]))
|
||||
google.*##.rc:has(a[href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]))
|
||||
google.*##.rc:has(a[href*=".loan/"])
|
||||
google.*##.rc:has(a[href*=".agency/"])
|
||||
google.*##.rc:has(a[href*=".gdn/"])
|
||||
google.*##.rc:has(a[href*=".bid/"])
|
||||
google.*##.rc:has(a[href*=".top/"])
|
||||
|
||||
! ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———
|
||||
google.*##.rc:has(a[href*=".php?xxx="])
|
||||
|
||||
! ——— For Google Mobile ———
|
||||
! Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".tk/"]:not([href*=coolcmd]):not([href*=budterence]):not([href*="google.tk"]):not([href*=transportnews]):not([href*=unicorncardlist]):not([href*=c0d3c]):not([href*=anonytext]):not([href*=tokelau-info]):not([href*=fakaofo]):not([href*=loljp-wiki]):not([href*=ninetail]):not([href*=goshujin]):not([href*="graph.tk"]):not([href*=haopro]):not([href*="ps2online.tk"]):not([href*=nolfrevival]):not([href*="steamroller.tk"]))
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".ga/"]:not([href*="google.ga"]):not([href*=filtri-dns]):not([href*=anpigabon]):not([href*="dgdi.ga"]):not([href*=voitures]))
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".ml/"]:not([href*="google.ml"]):not([href*="mobili.ml"]):not([href*="melody.ml"]):not([href*="ps2online.ml"]))
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".gq/"]:not([href*="deimos.gq"]):not([href*="inege.gq"]):not([href*=tvgelive]):not([href*=comprarcarros]))
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".cf/"]:not([href*="intr0.cf"]):not([href*="google.cf"]):not([href*="rths.cf"]):not([href*=voitures]):not([href*=assembleenationale-rca]):not([href*=cps-rca]):not([href*="acap.cf"]))
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".pw/"]:not([href*="libgen.pw"]):not([href*="petridish.pw"]):not([href*="palaugov.pw"]))
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".loan/"])
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".agency/"])
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".gdn/"])
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".bid/"])
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".top/"])
|
||||
google.*##.srg:has(a[oncontextmenu][href*=".php?xxx="])
|
||||
|
||||
! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———
|
||||
||adblock.gjtech.net^$empty,important
|
||||
||spam404bl.com^$empty,important
|
||||
109.201.135.46$network
|
||||
||hufilter.hu^$empty,important
|
||||
||fredfiber.no^$empty,important
|
||||
||securemecca.com^$empty,important
|
||||
||1hos.cf^$empty,important
|
||||
||1hosts.cf^$empty,important
|
||||
||everythingisnt.com^$empty,important
|
||||
|
||||
! ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———
|
||||
! To log in to TP-Link routers, use tplinkwifi.net instead.
|
||||
||tplinklogin.net^$empty,important
|
||||
||tplinkextender.net^$empty,important
|
||||
||ublock.org^$empty,important
|
||||
138.68.252.54$network
|
||||
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
||funeducation.com^$empty,important
|
||||
||iq-research.info^$empty,important
|
||||
||iq-test-online.org^$empty,important
|
||||
||iq-test.co.uk^$empty,important
|
||||
||iqtest.co.uk^$empty,important
|
||||
||iqtest.com^$empty,important
|
||||
||iqtestnow.org^$empty,important
|
||||
||iqtestonline24.com^$empty,important
|
||||
||test-iq.org^$empty,important
|
||||
||officialiqtests.com^$empty,important
|
||||
|
||||
! ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———
|
||||
! How these links still remain in Unetbootin, is anyone's guess.
|
||||
||dreamlinux.com.br^$empty,important
|
||||
||dreamlinux.net^$empty,important
|
||||
||dreamlinux.info^$empty,important
|
||||
104.24.117.74$network
|
||||
104.24.116.74$network
|
||||
[2606:4700:30::6818:754a]$network
|
||||
[2606:4700:30::6818:744a]$network
|
||||
||hacktolive.org^$empty,important
|
||||
||mandriva.com^$empty,important
|
||||
|
||||
! ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———
|
||||
! https://windowsreport.com/extend-windows-laptop-battery-life/
|
||||
windowsreport.com##.code-block
|
||||
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
|
||||
appuals.com##.info.box
|
||||
appuals.com##.appua-reimage-top
|
||||
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##div.attention-button-box-green
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.sidebar_download_inner
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.primary_download
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download_button_info_texts
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.js-download_button_additional_links
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#.ga-download:-abp-contains(/^Reimage$/)
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download-button-offer-header
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i)
|
||||
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:-abp-contains(/^Repair your Errors automatically$/i) + p
|
||||
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
|
||||
thewindowsclub.com#?#.entry-content > div > strong:-abp-contains(find & fix Windows error)
|
||||
thewindowsclub.com##div[style^="float: none; margin:10px "]
|
||||
! https://www.majorgeeks.com/files/details/patch_my_pc.html
|
||||
majorgeeks.com#?#b:-abp-has(a[target^="reimage"])
|
||||
||majorgeeks.com/images/icons/red_icon_18x17px.png$image
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.attention-button-wrap:-abp-contains(Reimage)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box):not(.colorbg-grey)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#th:-abp-contains(/^Detection$/) + td
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.js-download_button_offer
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.primary_download
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-placeholder
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.nfc-bottom-right:-abp-contains(Reimage)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(Reimage)
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text
|
||||
|
||||
! ——— ScanUtilities links ———
|
||||
! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/
|
||||
bynarycodes.com##div[class^="bynar-content_"]
|
||||
bynarycodes.com#?#.panel:-abp-contains(a[href*="scanutilities.com"])
|
||||
|
||||
! ——— Driver Easy links ———
|
||||
! https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
|
||||
drivereasy.com#?#.pakb-content ol:-abp-contains(Download and install Driver Easy)
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(Driver Easy)
|
||||
drivereasy.com#?#.pakb-content div.info.note:-abp-contains(drivereasy.com)
|
||||
! https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
|
||||
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 80"]
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(the FREE version)
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(the Pro version)
|
||||
! https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/
|
||||
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 79"]
|
||||
drivereasy.com#?#.pakb-content span[id^="i-"]:-abp-contains(Automatically update your)
|
||||
drivereasy.com#?#.pakb-content li:-abp-has(a[href="#automatically"])
|
||||
! https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
|
||||
drivereasy.com#?#.pakb-content span[id^="i-"]:-abp-contains(Update drivers with Driver Easy)
|
||||
drivereasy.com#?#.pakb-content figcaption:-abp-contains(for free if you like)
|
||||
drivereasy.com#?#.pakb-content li:-abp-has(a:-abp-contains(Update drivers with Driver Easy))
|
||||
! https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/
|
||||
drivereasy.com#?#.pakb-content p:-abp-contains(click Update All)
|
||||
|
||||
! ——— Slimware DriverUpdate links ———
|
||||
! https://forums.windowscentral.com/
|
||||
forums.windowscentral.com###navbar_notice_33
|
||||
|
||||
! ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———
|
||||
||google-analytics.com^$domain=sdi-tool.org
|
||||
|
||||
! ——— SpyHunter links ———
|
||||
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
|
||||
howtoremove.guide##div[style^="border:2px"]
|
||||
howtoremove.guide#?#.entry-content > div:-abp-contains(Special Offer)
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description
|
||||
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:-abp-contains(SpyHunter)
|
||||
|
||||
! ——— Sites that fraudulently claim you've won a new phone ———
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/$~third-party,empty,important
|
||||
|
||||
! ——— Banner for "MSN New Tab" ———
|
||||
msn.com##.irisbanner
|
||||
|
||||
! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
|
||||
! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.
|
||||
||gamecopyworld.com^$empty,important
|
||||
||coolrom.com^$empty,important
|
||||
||freeroms.com^$empty,important
|
||||
||portalroms.com^$empty,important
|
||||
||romsmania.com^$empty,important
|
||||
||loveroms.com^$empty,important
|
||||
||portableroms.com^$empty,important
|
||||
|
||||
! ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———
|
||||
||afobal.cl^$empty,important
|
||||
||alvoportas.com.br^$empty,important
|
||||
||blogerjijer.pw^$empty,important
|
||||
||bright.su^$empty,important
|
||||
||domnicpeter.in.net^$empty,important
|
||||
||dzitech.net^$empty,important
|
||||
||fadzulani.com^$empty,important
|
||||
||hotelavalon.org^$empty,important
|
||||
||hruner.com^$empty,important
|
||||
||interlogistics.com.vn^$empty,important
|
||||
||ivansaru.418.com1.ru^$empty,important
|
||||
||jangasm.org^$empty,important
|
||||
||kesikelyaf.com^$empty,important
|
||||
||luenhinpearl.com^$empty,important
|
||||
||ns511849.ip-192-99-19.net^$empty,important
|
||||
||ns513726.ip-192-99-148.net^$empty,important
|
||||
||panel.vargakragard.se^$empty,important
|
||||
||projects.globaltronics.net^$empty,important
|
||||
||prtscrinsertcn.net^$empty,important
|
||||
||sanyai-love.rmu.ac.th^$empty,important
|
||||
||server.bovine-mena.com^$empty,important
|
||||
||servmill.com^$empty,important
|
||||
||ssl.sinergycosmetics.com^$empty,important
|
||||
||telefonfiyatlari.org^$empty,important
|
||||
||update.rifugiopontese.it^$empty,important
|
||||
||vodahelp.sytes.net^$empty,important
|
||||
||nikey.cn^$empty,important
|
||||
||witkey.com^$empty,important
|
||||
|
||||
! ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———
|
||||
! https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/
|
||||
||incels.co^$empty,important
|
||||
|
||||
! ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———
|
||||
! Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.
|
||||
! Chrome Web Store
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(www.ublock.org)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Plus Adblocker)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker for )
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Plus)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genesis Plus)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker HARDLINE)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlock Pro)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADZbuzz uBlock)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker DEFENSE)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Professional)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker CRM)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(uBlocker)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdFilter)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(AdBlock Inc.)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker Genius PRO)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Easy AdBlock)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(radventsolutions)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains( & AdBlock)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblock for WebSites)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(ADBlock)
|
||||
chrome.google.com#?#.webstore-test-wall-tile:-abp-contains(Adblocker.Global)
|
||||
! Mozilla Add-ons
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(uBlock, LLC)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker for Firefox)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(AdsBlocker)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Easy AdBlock)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker Genius Pro)
|
||||
addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
|
||||
! Homepages
|
||||
||adblock.biz^$empty,important
|
||||
||stop-reklama.com^$empty,important
|
||||
||the1adblocker.com^$empty,important
|
||||
|
||||
! ——— Wrong suffixes of legitimate sites ———
|
||||
! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/
|
||||
||dwarffortresswiki.com^$empty,important
|
||||
103.224.212.249$network
|
||||
||speedtest.com^$empty,important
|
||||
|
||||
! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
|
||||
||ppc.netnet44.net^$empty,important
|
||||
||tncrun.net^$empty,important
|
||||
54.174.156.141$network
|
||||
||lucretius-ada.com^$empty,important
|
||||
||tango-deg.com^$empty,important
|
||||
||ezekiel-sam.com^$empty,important
|
||||
||franciscus-ful.com^$empty,important
|
||||
||hippolyte-hag.com^$empty,important
|
||||
||india-abc.com^$empty,important
|
||||
||leontius-eli.com^$empty,important
|
||||
||loukianos-euk.com^$empty,important
|
||||
||mohini-ger.com^$empty,important
|
||||
||nethaneel-has.com^$empty,important
|
||||
||odtsseus-nua.com^$empty,important
|
||||
||ortrun-adi.com^$empty,important
|
||||
||paramonos-oha.com^$empty,important
|
||||
||paula-secundinus.com^$empty,important
|
||||
||photios-raj.com^$empty,important
|
||||
||proserpina-zeb.com^$empty,important
|
||||
||ieronimus-kay.com^$empty,important
|
||||
||fredagty.com^$empty,important
|
||||
||lordagty.com^$empty,important
|
||||
||madagty.com^$empty,important
|
||||
||onsdagty.com^$empty,important
|
||||
||zeroredirect5.com^$empty,important
|
||||
54.209.22.226$network
|
||||
54.91.125.197$network
|
||||
52.202.53.245$network
|
||||
35.175.38.64$network
|
||||
35.168.147.213$network
|
||||
34.230.160.215$network
|
||||
3.226.8.132$network
|
||||
3.216.243.46$network
|
||||
||maowaotodowoo.net^$empty,important
|
||||
! Source: demonoid.pw
|
||||
||veremund-hon.com^$empty,important
|
||||
! Source: desidert.no
|
||||
||collectfasttracks.com^$empty,important
|
||||
|
||||
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
|
||||
||deviuser.com^$empty,important
|
||||
|
||||
! Malicious domains found in videogame manuals
|
||||
||acclaimsports.com^$empty,important
|
||||
||acclaimmaxsports.com^$empty,important
|
||||
||hip-games.com^$empty,important
|
||||
||thq.com.au^$empty,important
|
||||
|
||||
! Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
||unofficialtwrp.com^$empty,important
|
||||
||androidweblog.com^$empty,important
|
||||
||hardreset.info^$empty,important
|
||||
|
||||
! Placeholder line for alternate list versions
|
||||
|
||||
@@ -1,266 +1,271 @@
|
||||
[Adblock Plus 3.4]␍
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home)␍
|
||||
! Version: 15February2020v1-Beta␍
|
||||
! Expires: 5 days␍
|
||||
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.␍
|
||||
! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english␍
|
||||
␍
|
||||
! ——— Country domains ———␍
|
||||
! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.␍
|
||||
! Tokelau␍
|
||||
||*.tk^
|
||||
@@||coolcmd.tk^
|
||||
@@||budterence.tk^
|
||||
@@||google.tk^
|
||||
@@||transportnews.tk^
|
||||
@@||unicorncardlist.tk^
|
||||
@@||c0d3c.tk^
|
||||
@@||anonytext.tk^
|
||||
@@||tokelau-info.tk^
|
||||
@@||fakaofo.tk^
|
||||
@@||loljp-wiki.tk^
|
||||
@@||ninetail.tk^
|
||||
@@||goshujin.tk^
|
||||
@@||graph.tk^
|
||||
@@||haopro.tk^
|
||||
[Adblock Plus 3.4]
|
||||
! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home)
|
||||
! Version: 06March2020v2-Beta
|
||||
! Expires: 5 days
|
||||
! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
|
||||
! For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
|
||||
|
||||
! ——— Country domains ———
|
||||
! You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
|
||||
! Tokelau
|
||||
||*.tk^
|
||||
@@||coolcmd.tk^
|
||||
@@||budterence.tk^
|
||||
@@||google.tk^
|
||||
@@||transportnews.tk^
|
||||
@@||unicorncardlist.tk^
|
||||
@@||c0d3c.tk^
|
||||
@@||anonytext.tk^
|
||||
@@||tokelau-info.tk^
|
||||
@@||fakaofo.tk^
|
||||
@@||loljp-wiki.tk^
|
||||
@@||ninetail.tk^
|
||||
@@||goshujin.tk^
|
||||
@@||graph.tk^
|
||||
@@||haopro.tk^
|
||||
|
||||
@@||ps2online.tk^
|
||||
@@||nolfrevival.tk^
|
||||
@@||steamroller.tk^
|
||||
@@||coppersurfer.tk^
|
||||
! Gabon
|
||||
||*.ga^
|
||||
@@||google.ga^
|
||||
@@||filtri-dns.ga^
|
||||
@@||anpigabon.ga^
|
||||
@@||dgdi.ga^
|
||||
@@||voitures.ga^
|
||||
! Mali
|
||||
||*.ml^
|
||||
@@||google.ml^
|
||||
@@||mobili.ml^
|
||||
@@||melody.ml^
|
||||
@@||ps2online.tk^
|
||||
@@||nolfrevival.tk^
|
||||
@@||steamroller.tk^␍
|
||||
! Gabon␍
|
||||
||*.ga^
|
||||
@@||google.ga^
|
||||
@@||filtri-dns.ga^
|
||||
@@||anpigabon.ga^
|
||||
@@||dgdi.ga^
|
||||
@@||voitures.ga^␍
|
||||
! Mali␍
|
||||
||*.ml^
|
||||
@@||google.ml^
|
||||
@@||mobili.ml^
|
||||
@@||melody.ml^
|
||||
@@||ps2online.tk^␍
|
||||
! Equatorial Guinea␍
|
||||
||*.gq^
|
||||
@@||deimos.gq^
|
||||
@@||inege.gq^
|
||||
@@||tvgelive.gq^
|
||||
@@||comprarcarros.gq^␍
|
||||
! Central African Republic␍
|
||||
||*.cf^
|
||||
@@||intr0.cf^
|
||||
@@||google.cf^
|
||||
@@||rths.cf^
|
||||
@@||voitures.cf^
|
||||
@@||assembleenationale-rca.cf^
|
||||
@@||cps-rca.cf^
|
||||
@@||acap.cf^␍
|
||||
! Palau␍
|
||||
||*.pw^
|
||||
@@||libgen.pw^
|
||||
@@||petridish.pw^
|
||||
@@||palaugov.pw^␍
|
||||
␍
|
||||
! ——— Topical domains ———␍
|
||||
! These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.␍
|
||||
! Presumably fake loans␍
|
||||
||*.loan^␍
|
||||
||*.agency^␍
|
||||
||*.gdn^␍
|
||||
||*.bid^␍
|
||||
␍
|
||||
! ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———␍
|
||||
␍
|
||||
! ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———␍
|
||||
␍
|
||||
! ——— For Google Mobile ———␍
|
||||
! Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.␍
|
||||
␍
|
||||
! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
||adblock.gjtech.net^␍
|
||||
||spam404bl.com^␍
|
||||
109.201.135.46␍
|
||||
||hufilter.hu^␍
|
||||
||fredfiber.no^␍
|
||||
||securemecca.com^␍
|
||||
||1hos.cf^␍
|
||||
||1hosts.cf^␍
|
||||
||everythingisnt.com^␍
|
||||
␍
|
||||
! ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———␍
|
||||
! To log in to TP-Link routers, use tplinkwifi.net instead.␍
|
||||
||tplinklogin.net^␍
|
||||
||tplinkextender.net^␍
|
||||
||ublock.org^␍
|
||||
138.68.252.54␍
|
||||
␍
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———␍
|
||||
||funeducation.com^␍
|
||||
||iq-research.info^␍
|
||||
||iq-test-online.org^␍
|
||||
||iq-test.co.uk^␍
|
||||
||iqtest.co.uk^␍
|
||||
||iqtest.com^␍
|
||||
||iqtestnow.org^␍
|
||||
||iqtestonline24.com^␍
|
||||
||test-iq.org^␍
|
||||
||officialiqtests.com^␍
|
||||
␍
|
||||
! ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———␍
|
||||
! How these links still remain in Unetbootin, is anyone's guess.␍
|
||||
||dreamlinux.com.br^␍
|
||||
||dreamlinux.net^␍
|
||||
||dreamlinux.info^␍
|
||||
104.24.117.74␍
|
||||
104.24.116.74␍
|
||||
2606:4700:30::6818:754a␍
|
||||
2606:4700:30::6818:744a␍
|
||||
||hacktolive.org^␍
|
||||
||mandriva.com^␍
|
||||
␍
|
||||
! ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
! https://windowsreport.com/extend-windows-laptop-battery-life/␍
|
||||
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/␍
|
||||
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/␍
|
||||
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10␍
|
||||
! https://www.majorgeeks.com/files/details/patch_my_pc.html␍
|
||||
||majorgeeks.com/images/icons/red_icon_18x17px.png␍
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
! ——— ScanUtilities links ———␍
|
||||
! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/␍
|
||||
␍
|
||||
! ——— Driver Easy links ———␍
|
||||
! https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/␍
|
||||
! https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/␍
|
||||
! https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/␍
|
||||
! https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/␍
|
||||
! https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/␍
|
||||
␍
|
||||
! ——— Slimware DriverUpdate links ———␍
|
||||
! https://forums.windowscentral.com/␍
|
||||
␍
|
||||
! ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———␍
|
||||
||google-analytics.com^$sdi-tool.org␍
|
||||
␍
|
||||
! ——— SpyHunter links ———␍
|
||||
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/␍
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
! ——— Sites that fraudulently claim you've won a new phone ———␍
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/␍
|
||||
␍
|
||||
! ——— Banner for "MSN New Tab" ———␍
|
||||
␍
|
||||
! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———␍
|
||||
! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.␍
|
||||
||gamecopyworld.com^␍
|
||||
||coolrom.com^␍
|
||||
||freeroms.com^␍
|
||||
||portalroms.com^␍
|
||||
||romsmania.com^␍
|
||||
||loveroms.com^␍
|
||||
||portableroms.com^␍
|
||||
␍
|
||||
! ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———␍
|
||||
||afobal.cl^␍
|
||||
||alvoportas.com.br^␍
|
||||
||blogerjijer.pw^␍
|
||||
||bright.su^␍
|
||||
||domnicpeter.in.net^␍
|
||||
||dzitech.net^␍
|
||||
||fadzulani.com^␍
|
||||
||hotelavalon.org^␍
|
||||
||hruner.com^␍
|
||||
||interlogistics.com.vn^␍
|
||||
||ivansaru.418.com1.ru^␍
|
||||
||jangasm.org^␍
|
||||
||kesikelyaf.com^␍
|
||||
||luenhinpearl.com^␍
|
||||
||ns511849.ip-192-99-19.net^␍
|
||||
||ns513726.ip-192-99-148.net^␍
|
||||
||panel.vargakragard.se^␍
|
||||
||projects.globaltronics.net^␍
|
||||
||prtscrinsertcn.net^␍
|
||||
||sanyai-love.rmu.ac.th^␍
|
||||
||server.bovine-mena.com^␍
|
||||
||servmill.com^␍
|
||||
||ssl.sinergycosmetics.com^␍
|
||||
||telefonfiyatlari.org^␍
|
||||
||update.rifugiopontese.it^␍
|
||||
||vodahelp.sytes.net^␍
|
||||
||nikey.cn^␍
|
||||
||witkey.com^␍
|
||||
␍
|
||||
! ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———␍
|
||||
! https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/␍
|
||||
||incels.co^␍
|
||||
␍
|
||||
! ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———␍
|
||||
! Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.␍
|
||||
! Chrome Web Store␍
|
||||
! Mozilla Add-ons␍
|
||||
! Homepages␍
|
||||
||adblock.biz^␍
|
||||
||stop-reklama.com^␍
|
||||
||the1adblocker.com^␍
|
||||
␍
|
||||
! ——— Wrong suffixes of legitimate sites ———␍
|
||||
! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/␍
|
||||
||dwarffortresswiki.com^␍
|
||||
103.224.212.249␍
|
||||
||speedtest.com^␍
|
||||
␍
|
||||
! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———␍
|
||||
||ppc.netnet44.net^␍
|
||||
||tncrun.net^␍
|
||||
54.174.156.141␍
|
||||
||lucretius-ada.com^␍
|
||||
||tango-deg.com^␍
|
||||
||ezekiel-sam.com^␍
|
||||
||franciscus-ful.com^␍
|
||||
||hippolyte-hag.com^␍
|
||||
||india-abc.com^␍
|
||||
||leontius-eli.com^␍
|
||||
||loukianos-euk.com^␍
|
||||
||mohini-ger.com^␍
|
||||
||nethaneel-has.com^␍
|
||||
||odtsseus-nua.com^␍
|
||||
||ortrun-adi.com^␍
|
||||
||paramonos-oha.com^␍
|
||||
||paula-secundinus.com^␍
|
||||
||photios-raj.com^␍
|
||||
||proserpina-zeb.com^␍
|
||||
||ieronimus-kay.com^␍
|
||||
||fredagty.com^␍
|
||||
||lordagty.com^␍
|
||||
||madagty.com^␍
|
||||
||onsdagty.com^␍
|
||||
||zeroredirect5.com^␍
|
||||
54.209.22.226␍
|
||||
54.91.125.197␍
|
||||
52.202.53.245␍
|
||||
35.175.38.64␍
|
||||
35.168.147.213␍
|
||||
34.230.160.215␍
|
||||
3.226.8.132␍
|
||||
3.216.243.46␍
|
||||
! Source: demonoid.pw␍
|
||||
||veremund-hon.com^␍
|
||||
␍
|
||||
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315␍
|
||||
||deviuser.com^$doc␍
|
||||
␍
|
||||
! Malicious domains found in videogame manuals␍
|
||||
||acclaimsports.com^␍
|
||||
||acclaimmaxsports.com^␍
|
||||
||hip-games.com^␍
|
||||
||thq.com.au^␍
|
||||
␍
|
||||
! Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones␍
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.␍
|
||||
||unofficialtwrp.com^␍
|
||||
||androidweblog.com^␍
|
||||
||hardreset.info^␍
|
||||
␍
|
||||
! Placeholder line for alternate list versions␍
|
||||
! Equatorial Guinea
|
||||
||*.gq^
|
||||
@@||deimos.gq^
|
||||
@@||inege.gq^
|
||||
@@||tvgelive.gq^
|
||||
@@||comprarcarros.gq^
|
||||
! Central African Republic
|
||||
||*.cf^
|
||||
@@||intr0.cf^
|
||||
@@||google.cf^
|
||||
@@||rths.cf^
|
||||
@@||voitures.cf^
|
||||
@@||assembleenationale-rca.cf^
|
||||
@@||cps-rca.cf^
|
||||
@@||acap.cf^
|
||||
! Palau
|
||||
||*.pw^
|
||||
@@||libgen.pw^
|
||||
@@||petridish.pw^
|
||||
@@||palaugov.pw^
|
||||
|
||||
! ——— Topical domains ———
|
||||
! These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
! Presumably fake loans
|
||||
||*.loan^
|
||||
||*.agency^
|
||||
||*.gdn^
|
||||
||*.bid^
|
||||
||*.top^
|
||||
|
||||
! ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
|
||||
|
||||
! ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———
|
||||
|
||||
! ——— For Google Mobile ———
|
||||
! Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.
|
||||
|
||||
! ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———
|
||||
||adblock.gjtech.net^
|
||||
||spam404bl.com^
|
||||
109.201.135.46
|
||||
||hufilter.hu^
|
||||
||fredfiber.no^
|
||||
||securemecca.com^
|
||||
||1hos.cf^
|
||||
||1hosts.cf^
|
||||
||everythingisnt.com^
|
||||
|
||||
! ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———
|
||||
! To log in to TP-Link routers, use tplinkwifi.net instead.
|
||||
||tplinklogin.net^
|
||||
||tplinkextender.net^
|
||||
||ublock.org^
|
||||
138.68.252.54
|
||||
|
||||
! ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
||funeducation.com^
|
||||
||iq-research.info^
|
||||
||iq-test-online.org^
|
||||
||iq-test.co.uk^
|
||||
||iqtest.co.uk^
|
||||
||iqtest.com^
|
||||
||iqtestnow.org^
|
||||
||iqtestonline24.com^
|
||||
||test-iq.org^
|
||||
||officialiqtests.com^
|
||||
|
||||
! ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———
|
||||
! How these links still remain in Unetbootin, is anyone's guess.
|
||||
||dreamlinux.com.br^
|
||||
||dreamlinux.net^
|
||||
||dreamlinux.info^
|
||||
104.24.117.74
|
||||
104.24.116.74
|
||||
2606:4700:30::6818:754a
|
||||
2606:4700:30::6818:744a
|
||||
||hacktolive.org^
|
||||
||mandriva.com^
|
||||
|
||||
! ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———
|
||||
! https://windowsreport.com/extend-windows-laptop-battery-life/
|
||||
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
|
||||
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
|
||||
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
|
||||
! https://www.majorgeeks.com/files/details/patch_my_pc.html
|
||||
||majorgeeks.com/images/icons/red_icon_18x17px.png
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
! ——— ScanUtilities links ———
|
||||
! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/
|
||||
|
||||
! ——— Driver Easy links ———
|
||||
! https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
|
||||
! https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
|
||||
! https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/
|
||||
! https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
|
||||
! https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/
|
||||
|
||||
! ——— Slimware DriverUpdate links ———
|
||||
! https://forums.windowscentral.com/
|
||||
|
||||
! ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———
|
||||
||google-analytics.com^$sdi-tool.org
|
||||
|
||||
! ——— SpyHunter links ———
|
||||
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
|
||||
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
! ——— Sites that fraudulently claim you've won a new phone ———
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/
|
||||
|
||||
! ——— Banner for "MSN New Tab" ———
|
||||
|
||||
! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
|
||||
! If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.
|
||||
||gamecopyworld.com^
|
||||
||coolrom.com^
|
||||
||freeroms.com^
|
||||
||portalroms.com^
|
||||
||romsmania.com^
|
||||
||loveroms.com^
|
||||
||portableroms.com^
|
||||
|
||||
! ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———
|
||||
||afobal.cl^
|
||||
||alvoportas.com.br^
|
||||
||blogerjijer.pw^
|
||||
||bright.su^
|
||||
||domnicpeter.in.net^
|
||||
||dzitech.net^
|
||||
||fadzulani.com^
|
||||
||hotelavalon.org^
|
||||
||hruner.com^
|
||||
||interlogistics.com.vn^
|
||||
||ivansaru.418.com1.ru^
|
||||
||jangasm.org^
|
||||
||kesikelyaf.com^
|
||||
||luenhinpearl.com^
|
||||
||ns511849.ip-192-99-19.net^
|
||||
||ns513726.ip-192-99-148.net^
|
||||
||panel.vargakragard.se^
|
||||
||projects.globaltronics.net^
|
||||
||prtscrinsertcn.net^
|
||||
||sanyai-love.rmu.ac.th^
|
||||
||server.bovine-mena.com^
|
||||
||servmill.com^
|
||||
||ssl.sinergycosmetics.com^
|
||||
||telefonfiyatlari.org^
|
||||
||update.rifugiopontese.it^
|
||||
||vodahelp.sytes.net^
|
||||
||nikey.cn^
|
||||
||witkey.com^
|
||||
|
||||
! ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———
|
||||
! https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/
|
||||
||incels.co^
|
||||
|
||||
! ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———
|
||||
! Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.
|
||||
! Chrome Web Store
|
||||
! Mozilla Add-ons
|
||||
! Homepages
|
||||
||adblock.biz^
|
||||
||stop-reklama.com^
|
||||
||the1adblocker.com^
|
||||
|
||||
! ——— Wrong suffixes of legitimate sites ———
|
||||
! https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/
|
||||
||dwarffortresswiki.com^
|
||||
103.224.212.249
|
||||
||speedtest.com^
|
||||
|
||||
! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
|
||||
||ppc.netnet44.net^
|
||||
||tncrun.net^
|
||||
54.174.156.141
|
||||
||lucretius-ada.com^
|
||||
||tango-deg.com^
|
||||
||ezekiel-sam.com^
|
||||
||franciscus-ful.com^
|
||||
||hippolyte-hag.com^
|
||||
||india-abc.com^
|
||||
||leontius-eli.com^
|
||||
||loukianos-euk.com^
|
||||
||mohini-ger.com^
|
||||
||nethaneel-has.com^
|
||||
||odtsseus-nua.com^
|
||||
||ortrun-adi.com^
|
||||
||paramonos-oha.com^
|
||||
||paula-secundinus.com^
|
||||
||photios-raj.com^
|
||||
||proserpina-zeb.com^
|
||||
||ieronimus-kay.com^
|
||||
||fredagty.com^
|
||||
||lordagty.com^
|
||||
||madagty.com^
|
||||
||onsdagty.com^
|
||||
||zeroredirect5.com^
|
||||
54.209.22.226
|
||||
54.91.125.197
|
||||
52.202.53.245
|
||||
35.175.38.64
|
||||
35.168.147.213
|
||||
34.230.160.215
|
||||
3.226.8.132
|
||||
3.216.243.46
|
||||
||maowaotodowoo.net^
|
||||
! Source: demonoid.pw
|
||||
||veremund-hon.com^
|
||||
! Source: desidert.no
|
||||
||collectfasttracks.com^
|
||||
|
||||
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
|
||||
||deviuser.com^$doc
|
||||
|
||||
! Malicious domains found in videogame manuals
|
||||
||acclaimsports.com^
|
||||
||acclaimmaxsports.com^
|
||||
||hip-games.com^
|
||||
||thq.com.au^
|
||||
|
||||
! Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones
|
||||
! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
||unofficialtwrp.com^
|
||||
||androidweblog.com^
|
||||
||hardreset.info^
|
||||
|
||||
! Placeholder line for alternate list versions
|
||||
|
||||
@@ -1,224 +1,228 @@
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)␍
|
||||
# Version: 15February2020v1-Beta␍
|
||||
# Expires: 5 days␍
|
||||
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.␍
|
||||
# For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english␍
|
||||
␍
|
||||
# ——— Country domains ———␍
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.␍
|
||||
# Tokelau␍
|
||||
␍
|
||||
# Gabon␍
|
||||
␍
|
||||
# Mali␍
|
||||
␍
|
||||
# Equatorial Guinea␍
|
||||
␍
|
||||
# Central African Republic␍
|
||||
␍
|
||||
# Palau␍
|
||||
␍
|
||||
␍
|
||||
# ——— Topical domains ———␍
|
||||
# These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.␍
|
||||
# Presumably fake loans␍
|
||||
␍
|
||||
␍
|
||||
␍
|
||||
␍
|
||||
␍
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———␍
|
||||
␍
|
||||
# ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———␍
|
||||
␍
|
||||
# ——— For Google Mobile ———␍
|
||||
# Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.␍
|
||||
␍
|
||||
# ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
adblock.gjtech.net␍
|
||||
spam404bl.com␍
|
||||
109.201.135.46␍
|
||||
hufilter.hu␍
|
||||
fredfiber.no␍
|
||||
securemecca.com␍
|
||||
1hos.cf␍
|
||||
1hosts.cf␍
|
||||
everythingisnt.com␍
|
||||
␍
|
||||
# ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———␍
|
||||
# To log in to TP-Link routers, use tplinkwifi.net instead.␍
|
||||
tplinklogin.net␍
|
||||
tplinkextender.net␍
|
||||
ublock.org␍
|
||||
138.68.252.54␍
|
||||
␍
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———␍
|
||||
funeducation.com␍
|
||||
iq-research.info␍
|
||||
iq-test-online.org␍
|
||||
iq-test.co.uk␍
|
||||
iqtest.co.uk␍
|
||||
iqtest.com␍
|
||||
iqtestnow.org␍
|
||||
iqtestonline24.com␍
|
||||
test-iq.org␍
|
||||
officialiqtests.com␍
|
||||
␍
|
||||
# ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———␍
|
||||
# How these links still remain in Unetbootin, is anyone's guess.␍
|
||||
dreamlinux.com.br␍
|
||||
dreamlinux.net␍
|
||||
dreamlinux.info␍
|
||||
104.24.117.74␍
|
||||
104.24.116.74␍
|
||||
[2606:4700:30::6818:754a]␍
|
||||
[2606:4700:30::6818:744a]␍
|
||||
hacktolive.org␍
|
||||
mandriva.com␍
|
||||
␍
|
||||
# ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
# https://windowsreport.com/extend-windows-laptop-battery-life/␍
|
||||
# https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/␍
|
||||
# https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/␍
|
||||
# https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10␍
|
||||
# https://www.majorgeeks.com/files/details/patch_my_pc.html␍
|
||||
␍
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
# ——— ScanUtilities links ———␍
|
||||
# https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/␍
|
||||
␍
|
||||
# ——— Driver Easy links ———␍
|
||||
# https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/␍
|
||||
# https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/␍
|
||||
# https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/␍
|
||||
# https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/␍
|
||||
# https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/␍
|
||||
␍
|
||||
# ——— Slimware DriverUpdate links ———␍
|
||||
# https://forums.windowscentral.com/␍
|
||||
␍
|
||||
# ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———␍
|
||||
google-analytics.com␍
|
||||
␍
|
||||
# ——— SpyHunter links ———␍
|
||||
# https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/␍
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
# ——— Sites that fraudulently claim you've won a new phone ———␍
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/$1p,doc,domain=~ Warning displayed due to: Fraudulently claims you have won a new phone.␍
|
||||
␍
|
||||
# ——— Banner for "MSN New Tab" ———␍
|
||||
␍
|
||||
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———␍
|
||||
# If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.␍
|
||||
gamecopyworld.com␍
|
||||
coolrom.com␍
|
||||
freeroms.com␍
|
||||
portalroms.com␍
|
||||
romsmania.com␍
|
||||
loveroms.com␍
|
||||
portableroms.com␍
|
||||
␍
|
||||
# ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———␍
|
||||
afobal.cl␍
|
||||
alvoportas.com.br␍
|
||||
blogerjijer.pw␍
|
||||
bright.su␍
|
||||
domnicpeter.in.net␍
|
||||
dzitech.net␍
|
||||
fadzulani.com␍
|
||||
hotelavalon.org␍
|
||||
hruner.com␍
|
||||
interlogistics.com.vn␍
|
||||
ivansaru.418.com1.ru␍
|
||||
jangasm.org␍
|
||||
kesikelyaf.com␍
|
||||
luenhinpearl.com␍
|
||||
ns511849.ip-192-99-19.net␍
|
||||
ns513726.ip-192-99-148.net␍
|
||||
panel.vargakragard.se␍
|
||||
projects.globaltronics.net␍
|
||||
prtscrinsertcn.net␍
|
||||
sanyai-love.rmu.ac.th␍
|
||||
server.bovine-mena.com␍
|
||||
servmill.com␍
|
||||
ssl.sinergycosmetics.com␍
|
||||
telefonfiyatlari.org␍
|
||||
update.rifugiopontese.it␍
|
||||
vodahelp.sytes.net␍
|
||||
nikey.cn␍
|
||||
witkey.com␍
|
||||
␍
|
||||
# ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———␍
|
||||
# https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/␍
|
||||
incels.co␍
|
||||
␍
|
||||
# ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———␍
|
||||
# Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.␍
|
||||
# Chrome Web Store␍
|
||||
# Mozilla Add-ons␍
|
||||
# Homepages␍
|
||||
adblock.biz␍
|
||||
stop-reklama.com␍
|
||||
the1adblocker.com␍
|
||||
␍
|
||||
# ——— Wrong suffixes of legitimate sites ———␍
|
||||
# https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/␍
|
||||
dwarffortresswiki.com␍
|
||||
103.224.212.249␍
|
||||
speedtest.com␍
|
||||
␍
|
||||
# ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———␍
|
||||
ppc.netnet44.net␍
|
||||
tncrun.net␍
|
||||
54.174.156.141␍
|
||||
lucretius-ada.com␍
|
||||
tango-deg.com␍
|
||||
ezekiel-sam.com␍
|
||||
franciscus-ful.com␍
|
||||
hippolyte-hag.com␍
|
||||
india-abc.com␍
|
||||
leontius-eli.com␍
|
||||
loukianos-euk.com␍
|
||||
mohini-ger.com␍
|
||||
nethaneel-has.com␍
|
||||
odtsseus-nua.com␍
|
||||
ortrun-adi.com␍
|
||||
paramonos-oha.com␍
|
||||
paula-secundinus.com␍
|
||||
photios-raj.com␍
|
||||
proserpina-zeb.com␍
|
||||
ieronimus-kay.com␍
|
||||
fredagty.com␍
|
||||
lordagty.com␍
|
||||
madagty.com␍
|
||||
onsdagty.com␍
|
||||
zeroredirect5.com␍
|
||||
54.209.22.226␍
|
||||
54.91.125.197␍
|
||||
52.202.53.245␍
|
||||
35.175.38.64␍
|
||||
35.168.147.213␍
|
||||
34.230.160.215␍
|
||||
3.226.8.132␍
|
||||
3.216.243.46␍
|
||||
# Source: demonoid.pw␍
|
||||
veremund-hon.com␍
|
||||
␍
|
||||
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315␍
|
||||
deviuser.com␍
|
||||
␍
|
||||
# Malicious domains found in videogame manuals␍
|
||||
acclaimsports.com␍
|
||||
acclaimmaxsports.com␍
|
||||
hip-games.com␍
|
||||
thq.com.au␍
|
||||
␍
|
||||
# Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones␍
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.␍
|
||||
unofficialtwrp.com␍
|
||||
androidweblog.com␍
|
||||
hardreset.info␍
|
||||
␍
|
||||
␍
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
|
||||
# Version: 06March2020v2-Beta
|
||||
# Expires: 5 days
|
||||
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
|
||||
# For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
|
||||
|
||||
# ——— Country domains ———
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
|
||||
# Tokelau
|
||||
|
||||
# Gabon
|
||||
|
||||
# Mali
|
||||
|
||||
# Equatorial Guinea
|
||||
|
||||
# Central African Republic
|
||||
|
||||
# Palau
|
||||
|
||||
|
||||
# ——— Topical domains ———
|
||||
# These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
# Presumably fake loans
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
|
||||
|
||||
# ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———
|
||||
|
||||
# ——— For Google Mobile ———
|
||||
# Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.
|
||||
|
||||
# ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———
|
||||
adblock.gjtech.net
|
||||
spam404bl.com
|
||||
109.201.135.46
|
||||
hufilter.hu
|
||||
fredfiber.no
|
||||
securemecca.com
|
||||
1hos.cf
|
||||
1hosts.cf
|
||||
everythingisnt.com
|
||||
|
||||
# ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———
|
||||
# To log in to TP-Link routers, use tplinkwifi.net instead.
|
||||
tplinklogin.net
|
||||
tplinkextender.net
|
||||
ublock.org
|
||||
138.68.252.54
|
||||
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
funeducation.com
|
||||
iq-research.info
|
||||
iq-test-online.org
|
||||
iq-test.co.uk
|
||||
iqtest.co.uk
|
||||
iqtest.com
|
||||
iqtestnow.org
|
||||
iqtestonline24.com
|
||||
test-iq.org
|
||||
officialiqtests.com
|
||||
|
||||
# ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———
|
||||
# How these links still remain in Unetbootin, is anyone's guess.
|
||||
dreamlinux.com.br
|
||||
dreamlinux.net
|
||||
dreamlinux.info
|
||||
104.24.117.74
|
||||
104.24.116.74
|
||||
[2606:4700:30::6818:754a]
|
||||
[2606:4700:30::6818:744a]
|
||||
hacktolive.org
|
||||
mandriva.com
|
||||
|
||||
# ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———
|
||||
# https://windowsreport.com/extend-windows-laptop-battery-life/
|
||||
# https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
|
||||
# https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
|
||||
# https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
|
||||
# https://www.majorgeeks.com/files/details/patch_my_pc.html
|
||||
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
# ——— ScanUtilities links ———
|
||||
# https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/
|
||||
|
||||
# ——— Driver Easy links ———
|
||||
# https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
|
||||
# https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
|
||||
# https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/
|
||||
# https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
|
||||
# https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/
|
||||
|
||||
# ——— Slimware DriverUpdate links ———
|
||||
# https://forums.windowscentral.com/
|
||||
|
||||
# ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———
|
||||
google-analytics.com
|
||||
|
||||
# ——— SpyHunter links ———
|
||||
# https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
# ——— Sites that fraudulently claim you've won a new phone ———
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/$1p,doc,domain=~ Warning displayed due to: Fraudulently claims you have won a new phone.
|
||||
|
||||
# ——— Banner for "MSN New Tab" ———
|
||||
|
||||
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
|
||||
# If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.
|
||||
gamecopyworld.com
|
||||
coolrom.com
|
||||
freeroms.com
|
||||
portalroms.com
|
||||
romsmania.com
|
||||
loveroms.com
|
||||
portableroms.com
|
||||
|
||||
# ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———
|
||||
afobal.cl
|
||||
alvoportas.com.br
|
||||
blogerjijer.pw
|
||||
bright.su
|
||||
domnicpeter.in.net
|
||||
dzitech.net
|
||||
fadzulani.com
|
||||
hotelavalon.org
|
||||
hruner.com
|
||||
interlogistics.com.vn
|
||||
ivansaru.418.com1.ru
|
||||
jangasm.org
|
||||
kesikelyaf.com
|
||||
luenhinpearl.com
|
||||
ns511849.ip-192-99-19.net
|
||||
ns513726.ip-192-99-148.net
|
||||
panel.vargakragard.se
|
||||
projects.globaltronics.net
|
||||
prtscrinsertcn.net
|
||||
sanyai-love.rmu.ac.th
|
||||
server.bovine-mena.com
|
||||
servmill.com
|
||||
ssl.sinergycosmetics.com
|
||||
telefonfiyatlari.org
|
||||
update.rifugiopontese.it
|
||||
vodahelp.sytes.net
|
||||
nikey.cn
|
||||
witkey.com
|
||||
|
||||
# ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———
|
||||
# https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/
|
||||
incels.co
|
||||
|
||||
# ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———
|
||||
# Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.
|
||||
# Chrome Web Store
|
||||
# Mozilla Add-ons
|
||||
# Homepages
|
||||
adblock.biz
|
||||
stop-reklama.com
|
||||
the1adblocker.com
|
||||
|
||||
# ——— Wrong suffixes of legitimate sites ———
|
||||
# https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/
|
||||
dwarffortresswiki.com
|
||||
103.224.212.249
|
||||
speedtest.com
|
||||
|
||||
# ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
|
||||
ppc.netnet44.net
|
||||
tncrun.net
|
||||
54.174.156.141
|
||||
lucretius-ada.com
|
||||
tango-deg.com
|
||||
ezekiel-sam.com
|
||||
franciscus-ful.com
|
||||
hippolyte-hag.com
|
||||
india-abc.com
|
||||
leontius-eli.com
|
||||
loukianos-euk.com
|
||||
mohini-ger.com
|
||||
nethaneel-has.com
|
||||
odtsseus-nua.com
|
||||
ortrun-adi.com
|
||||
paramonos-oha.com
|
||||
paula-secundinus.com
|
||||
photios-raj.com
|
||||
proserpina-zeb.com
|
||||
ieronimus-kay.com
|
||||
fredagty.com
|
||||
lordagty.com
|
||||
madagty.com
|
||||
onsdagty.com
|
||||
zeroredirect5.com
|
||||
54.209.22.226
|
||||
54.91.125.197
|
||||
52.202.53.245
|
||||
35.175.38.64
|
||||
35.168.147.213
|
||||
34.230.160.215
|
||||
3.226.8.132
|
||||
3.216.243.46
|
||||
maowaotodowoo.net
|
||||
# Source: demonoid.pw
|
||||
veremund-hon.com
|
||||
# Source: desidert.no
|
||||
collectfasttracks.com
|
||||
|
||||
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
|
||||
deviuser.com
|
||||
|
||||
# Malicious domains found in videogame manuals
|
||||
acclaimsports.com
|
||||
acclaimmaxsports.com
|
||||
hip-games.com
|
||||
thq.com.au
|
||||
|
||||
# Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
unofficialtwrp.com
|
||||
androidweblog.com
|
||||
hardreset.info
|
||||
|
||||
|
||||
|
||||
@@ -1,224 +1,228 @@
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)␍
|
||||
# Version: 15February2020v1-Alpha␍
|
||||
# Expires: 5 days␍
|
||||
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.␍
|
||||
# For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english␍
|
||||
␍
|
||||
# ——— Country domains ———␍
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.␍
|
||||
# Tokelau␍
|
||||
␍
|
||||
# Gabon␍
|
||||
␍
|
||||
# Mali␍
|
||||
␍
|
||||
# Equatorial Guinea␍
|
||||
␍
|
||||
# Central African Republic␍
|
||||
␍
|
||||
# Palau␍
|
||||
␍
|
||||
␍
|
||||
# ——— Topical domains ———␍
|
||||
# These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.␍
|
||||
# Presumably fake loans␍
|
||||
␍
|
||||
␍
|
||||
␍
|
||||
␍
|
||||
␍
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———␍
|
||||
␍
|
||||
# ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———␍
|
||||
␍
|
||||
# ——— For Google Mobile ———␍
|
||||
# Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.␍
|
||||
␍
|
||||
# ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
127.0.0.1 adblock.gjtech.net␍
|
||||
127.0.0.1 spam404bl.com␍
|
||||
127.0.0.1 109.201.135.46␍
|
||||
127.0.0.1 hufilter.hu␍
|
||||
127.0.0.1 fredfiber.no␍
|
||||
127.0.0.1 securemecca.com␍
|
||||
127.0.0.1 1hos.cf␍
|
||||
127.0.0.1 1hosts.cf␍
|
||||
127.0.0.1 everythingisnt.com␍
|
||||
␍
|
||||
# ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———␍
|
||||
# To log in to TP-Link routers, use tplinkwifi.net instead.␍
|
||||
127.0.0.1 tplinklogin.net␍
|
||||
127.0.0.1 tplinkextender.net␍
|
||||
127.0.0.1 ublock.org www.ublock.org demo.ublock.org␍
|
||||
127.0.0.1 138.68.252.54␍
|
||||
␍
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———␍
|
||||
127.0.0.1 funeducation.com␍
|
||||
127.0.0.1 iq-research.info␍
|
||||
127.0.0.1 iq-test-online.org␍
|
||||
127.0.0.1 iq-test.co.uk␍
|
||||
127.0.0.1 iqtest.co.uk␍
|
||||
127.0.0.1 iqtest.com␍
|
||||
127.0.0.1 iqtestnow.org␍
|
||||
127.0.0.1 iqtestonline24.com␍
|
||||
127.0.0.1 test-iq.org␍
|
||||
127.0.0.1 officialiqtests.com␍
|
||||
␍
|
||||
# ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———␍
|
||||
# How these links still remain in Unetbootin, is anyone's guess.␍
|
||||
127.0.0.1 dreamlinux.com.br␍
|
||||
127.0.0.1 dreamlinux.net␍
|
||||
127.0.0.1 dreamlinux.info␍
|
||||
127.0.0.1 104.24.117.74␍
|
||||
127.0.0.1 104.24.116.74␍
|
||||
:: 2606:4700:30::6818:754a␍
|
||||
:: 2606:4700:30::6818:744a␍
|
||||
127.0.0.1 hacktolive.org␍
|
||||
127.0.0.1 mandriva.com␍
|
||||
␍
|
||||
# ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
# https://windowsreport.com/extend-windows-laptop-battery-life/␍
|
||||
# https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/␍
|
||||
# https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/␍
|
||||
# https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10␍
|
||||
# https://www.majorgeeks.com/files/details/patch_my_pc.html␍
|
||||
␍
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
# ——— ScanUtilities links ———␍
|
||||
# https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/␍
|
||||
␍
|
||||
# ——— Driver Easy links ———␍
|
||||
# https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/␍
|
||||
# https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/␍
|
||||
# https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/␍
|
||||
# https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/␍
|
||||
# https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/␍
|
||||
␍
|
||||
# ——— Slimware DriverUpdate links ———␍
|
||||
# https://forums.windowscentral.com/␍
|
||||
␍
|
||||
# ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———␍
|
||||
127.0.0.1 google-analytics.com␍
|
||||
␍
|
||||
# ——— SpyHunter links ———␍
|
||||
# https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/␍
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
# ——— Sites that fraudulently claim you've won a new phone ———␍
|
||||
␍
|
||||
␍
|
||||
# ——— Banner for "MSN New Tab" ———␍
|
||||
␍
|
||||
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———␍
|
||||
# If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.␍
|
||||
127.0.0.1 gamecopyworld.com␍
|
||||
127.0.0.1 coolrom.com␍
|
||||
127.0.0.1 freeroms.com␍
|
||||
127.0.0.1 portalroms.com␍
|
||||
127.0.0.1 romsmania.com␍
|
||||
127.0.0.1 loveroms.com␍
|
||||
127.0.0.1 portableroms.com␍
|
||||
␍
|
||||
# ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———␍
|
||||
127.0.0.1 afobal.cl␍
|
||||
127.0.0.1 alvoportas.com.br␍
|
||||
127.0.0.1 blogerjijer.pw␍
|
||||
127.0.0.1 bright.su␍
|
||||
127.0.0.1 domnicpeter.in.net␍
|
||||
127.0.0.1 dzitech.net␍
|
||||
127.0.0.1 fadzulani.com␍
|
||||
127.0.0.1 hotelavalon.org␍
|
||||
127.0.0.1 hruner.com␍
|
||||
127.0.0.1 interlogistics.com.vn␍
|
||||
127.0.0.1 ivansaru.418.com1.ru␍
|
||||
127.0.0.1 jangasm.org␍
|
||||
127.0.0.1 kesikelyaf.com␍
|
||||
127.0.0.1 luenhinpearl.com␍
|
||||
127.0.0.1 ns511849.ip-192-99-19.net␍
|
||||
127.0.0.1 ns513726.ip-192-99-148.net␍
|
||||
127.0.0.1 panel.vargakragard.se␍
|
||||
127.0.0.1 projects.globaltronics.net␍
|
||||
127.0.0.1 prtscrinsertcn.net␍
|
||||
127.0.0.1 sanyai-love.rmu.ac.th␍
|
||||
127.0.0.1 server.bovine-mena.com␍
|
||||
127.0.0.1 servmill.com␍
|
||||
127.0.0.1 ssl.sinergycosmetics.com␍
|
||||
127.0.0.1 telefonfiyatlari.org␍
|
||||
127.0.0.1 update.rifugiopontese.it␍
|
||||
127.0.0.1 vodahelp.sytes.net␍
|
||||
127.0.0.1 nikey.cn␍
|
||||
127.0.0.1 witkey.com␍
|
||||
␍
|
||||
# ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———␍
|
||||
# https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/␍
|
||||
127.0.0.1 incels.co␍
|
||||
␍
|
||||
# ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———␍
|
||||
# Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.␍
|
||||
# Chrome Web Store␍
|
||||
# Mozilla Add-ons␍
|
||||
# Homepages␍
|
||||
127.0.0.1 adblock.biz␍
|
||||
127.0.0.1 stop-reklama.com␍
|
||||
127.0.0.1 the1adblocker.com␍
|
||||
␍
|
||||
# ——— Wrong suffixes of legitimate sites ———␍
|
||||
# https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/␍
|
||||
127.0.0.1 dwarffortresswiki.com␍
|
||||
127.0.0.1 103.224.212.249␍
|
||||
127.0.0.1 speedtest.com␍
|
||||
␍
|
||||
# ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———␍
|
||||
127.0.0.1 ppc.netnet44.net␍
|
||||
127.0.0.1 tncrun.net www.tncrun.net amanda.tncrun.net sarah.tncrun.net pamela.tncrun.net jessica.tncrun.net ics.tncrun.net katie.tncrun.net pbu.tncrun.net emily.tncrun.net␍
|
||||
127.0.0.1 54.174.156.141␍
|
||||
127.0.0.1 lucretius-ada.com␍
|
||||
127.0.0.1 tango-deg.com␍
|
||||
127.0.0.1 ezekiel-sam.com␍
|
||||
127.0.0.1 franciscus-ful.com␍
|
||||
127.0.0.1 hippolyte-hag.com␍
|
||||
127.0.0.1 india-abc.com␍
|
||||
127.0.0.1 leontius-eli.com␍
|
||||
127.0.0.1 loukianos-euk.com␍
|
||||
127.0.0.1 mohini-ger.com␍
|
||||
127.0.0.1 nethaneel-has.com␍
|
||||
127.0.0.1 odtsseus-nua.com␍
|
||||
127.0.0.1 ortrun-adi.com␍
|
||||
127.0.0.1 paramonos-oha.com␍
|
||||
127.0.0.1 paula-secundinus.com␍
|
||||
127.0.0.1 photios-raj.com␍
|
||||
127.0.0.1 proserpina-zeb.com␍
|
||||
127.0.0.1 ieronimus-kay.com␍
|
||||
127.0.0.1 fredagty.com␍
|
||||
127.0.0.1 lordagty.com␍
|
||||
127.0.0.1 madagty.com␍
|
||||
127.0.0.1 onsdagty.com␍
|
||||
127.0.0.1 zeroredirect5.com␍
|
||||
127.0.0.1 54.209.22.226␍
|
||||
127.0.0.1 54.91.125.197␍
|
||||
127.0.0.1 52.202.53.245␍
|
||||
127.0.0.1 35.175.38.64␍
|
||||
127.0.0.1 35.168.147.213␍
|
||||
127.0.0.1 34.230.160.215␍
|
||||
127.0.0.1 3.226.8.132␍
|
||||
127.0.0.1 3.216.243.46␍
|
||||
# Source: demonoid.pw␍
|
||||
127.0.0.1 veremund-hon.com␍
|
||||
␍
|
||||
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315␍
|
||||
127.0.0.1 deviuser.com␍
|
||||
␍
|
||||
# Malicious domains found in videogame manuals␍
|
||||
127.0.0.1 acclaimsports.com␍
|
||||
127.0.0.1 acclaimmaxsports.com␍
|
||||
127.0.0.1 hip-games.com␍
|
||||
127.0.0.1 thq.com.au␍
|
||||
␍
|
||||
# Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones␍
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.␍
|
||||
127.0.0.1 unofficialtwrp.com␍
|
||||
127.0.0.1 androidweblog.com␍
|
||||
127.0.0.1 hardreset.info␍
|
||||
␍
|
||||
␍
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
|
||||
# Version: 06March2020v2-Alpha
|
||||
# Expires: 5 days
|
||||
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
|
||||
# For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
|
||||
|
||||
# ——— Country domains ———
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
|
||||
# Tokelau
|
||||
|
||||
# Gabon
|
||||
|
||||
# Mali
|
||||
|
||||
# Equatorial Guinea
|
||||
|
||||
# Central African Republic
|
||||
|
||||
# Palau
|
||||
|
||||
|
||||
# ——— Topical domains ———
|
||||
# These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
# Presumably fake loans
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
|
||||
|
||||
# ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———
|
||||
|
||||
# ——— For Google Mobile ———
|
||||
# Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.
|
||||
|
||||
# ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———
|
||||
127.0.0.1 adblock.gjtech.net
|
||||
127.0.0.1 spam404bl.com
|
||||
127.0.0.1 109.201.135.46
|
||||
127.0.0.1 hufilter.hu
|
||||
127.0.0.1 fredfiber.no
|
||||
127.0.0.1 securemecca.com
|
||||
127.0.0.1 1hos.cf
|
||||
127.0.0.1 1hosts.cf
|
||||
127.0.0.1 everythingisnt.com
|
||||
|
||||
# ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———
|
||||
# To log in to TP-Link routers, use tplinkwifi.net instead.
|
||||
127.0.0.1 tplinklogin.net
|
||||
127.0.0.1 tplinkextender.net
|
||||
127.0.0.1 ublock.org www.ublock.org demo.ublock.org
|
||||
127.0.0.1 138.68.252.54
|
||||
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
127.0.0.1 funeducation.com
|
||||
127.0.0.1 iq-research.info
|
||||
127.0.0.1 iq-test-online.org
|
||||
127.0.0.1 iq-test.co.uk
|
||||
127.0.0.1 iqtest.co.uk
|
||||
127.0.0.1 iqtest.com
|
||||
127.0.0.1 iqtestnow.org
|
||||
127.0.0.1 iqtestonline24.com
|
||||
127.0.0.1 test-iq.org
|
||||
127.0.0.1 officialiqtests.com
|
||||
|
||||
# ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———
|
||||
# How these links still remain in Unetbootin, is anyone's guess.
|
||||
127.0.0.1 dreamlinux.com.br
|
||||
127.0.0.1 dreamlinux.net
|
||||
127.0.0.1 dreamlinux.info
|
||||
127.0.0.1 104.24.117.74
|
||||
127.0.0.1 104.24.116.74
|
||||
:: 2606:4700:30::6818:754a
|
||||
:: 2606:4700:30::6818:744a
|
||||
127.0.0.1 hacktolive.org
|
||||
127.0.0.1 mandriva.com
|
||||
|
||||
# ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———
|
||||
# https://windowsreport.com/extend-windows-laptop-battery-life/
|
||||
# https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
|
||||
# https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
|
||||
# https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
|
||||
# https://www.majorgeeks.com/files/details/patch_my_pc.html
|
||||
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
# ——— ScanUtilities links ———
|
||||
# https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/
|
||||
|
||||
# ——— Driver Easy links ———
|
||||
# https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
|
||||
# https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
|
||||
# https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/
|
||||
# https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
|
||||
# https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/
|
||||
|
||||
# ——— Slimware DriverUpdate links ———
|
||||
# https://forums.windowscentral.com/
|
||||
|
||||
# ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———
|
||||
127.0.0.1 google-analytics.com
|
||||
|
||||
# ——— SpyHunter links ———
|
||||
# https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
# ——— Sites that fraudulently claim you've won a new phone ———
|
||||
|
||||
|
||||
# ——— Banner for "MSN New Tab" ———
|
||||
|
||||
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
|
||||
# If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.
|
||||
127.0.0.1 gamecopyworld.com
|
||||
127.0.0.1 coolrom.com
|
||||
127.0.0.1 freeroms.com
|
||||
127.0.0.1 portalroms.com
|
||||
127.0.0.1 romsmania.com
|
||||
127.0.0.1 loveroms.com
|
||||
127.0.0.1 portableroms.com
|
||||
|
||||
# ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———
|
||||
127.0.0.1 afobal.cl
|
||||
127.0.0.1 alvoportas.com.br
|
||||
127.0.0.1 blogerjijer.pw
|
||||
127.0.0.1 bright.su
|
||||
127.0.0.1 domnicpeter.in.net
|
||||
127.0.0.1 dzitech.net
|
||||
127.0.0.1 fadzulani.com
|
||||
127.0.0.1 hotelavalon.org
|
||||
127.0.0.1 hruner.com
|
||||
127.0.0.1 interlogistics.com.vn
|
||||
127.0.0.1 ivansaru.418.com1.ru
|
||||
127.0.0.1 jangasm.org
|
||||
127.0.0.1 kesikelyaf.com
|
||||
127.0.0.1 luenhinpearl.com
|
||||
127.0.0.1 ns511849.ip-192-99-19.net
|
||||
127.0.0.1 ns513726.ip-192-99-148.net
|
||||
127.0.0.1 panel.vargakragard.se
|
||||
127.0.0.1 projects.globaltronics.net
|
||||
127.0.0.1 prtscrinsertcn.net
|
||||
127.0.0.1 sanyai-love.rmu.ac.th
|
||||
127.0.0.1 server.bovine-mena.com
|
||||
127.0.0.1 servmill.com
|
||||
127.0.0.1 ssl.sinergycosmetics.com
|
||||
127.0.0.1 telefonfiyatlari.org
|
||||
127.0.0.1 update.rifugiopontese.it
|
||||
127.0.0.1 vodahelp.sytes.net
|
||||
127.0.0.1 nikey.cn
|
||||
127.0.0.1 witkey.com
|
||||
|
||||
# ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———
|
||||
# https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/
|
||||
127.0.0.1 incels.co
|
||||
|
||||
# ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———
|
||||
# Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.
|
||||
# Chrome Web Store
|
||||
# Mozilla Add-ons
|
||||
# Homepages
|
||||
127.0.0.1 adblock.biz
|
||||
127.0.0.1 stop-reklama.com
|
||||
127.0.0.1 the1adblocker.com
|
||||
|
||||
# ——— Wrong suffixes of legitimate sites ———
|
||||
# https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/
|
||||
127.0.0.1 dwarffortresswiki.com
|
||||
127.0.0.1 103.224.212.249
|
||||
127.0.0.1 speedtest.com
|
||||
|
||||
# ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
|
||||
127.0.0.1 ppc.netnet44.net
|
||||
127.0.0.1 tncrun.net www.tncrun.net amanda.tncrun.net sarah.tncrun.net pamela.tncrun.net jessica.tncrun.net ics.tncrun.net katie.tncrun.net pbu.tncrun.net emily.tncrun.net
|
||||
127.0.0.1 54.174.156.141
|
||||
127.0.0.1 lucretius-ada.com
|
||||
127.0.0.1 tango-deg.com
|
||||
127.0.0.1 ezekiel-sam.com
|
||||
127.0.0.1 franciscus-ful.com
|
||||
127.0.0.1 hippolyte-hag.com
|
||||
127.0.0.1 india-abc.com
|
||||
127.0.0.1 leontius-eli.com
|
||||
127.0.0.1 loukianos-euk.com
|
||||
127.0.0.1 mohini-ger.com
|
||||
127.0.0.1 nethaneel-has.com
|
||||
127.0.0.1 odtsseus-nua.com
|
||||
127.0.0.1 ortrun-adi.com
|
||||
127.0.0.1 paramonos-oha.com
|
||||
127.0.0.1 paula-secundinus.com
|
||||
127.0.0.1 photios-raj.com
|
||||
127.0.0.1 proserpina-zeb.com
|
||||
127.0.0.1 ieronimus-kay.com
|
||||
127.0.0.1 fredagty.com
|
||||
127.0.0.1 lordagty.com
|
||||
127.0.0.1 madagty.com
|
||||
127.0.0.1 onsdagty.com
|
||||
127.0.0.1 zeroredirect5.com
|
||||
127.0.0.1 54.209.22.226
|
||||
127.0.0.1 54.91.125.197
|
||||
127.0.0.1 52.202.53.245
|
||||
127.0.0.1 35.175.38.64
|
||||
127.0.0.1 35.168.147.213
|
||||
127.0.0.1 34.230.160.215
|
||||
127.0.0.1 3.226.8.132
|
||||
127.0.0.1 3.216.243.46
|
||||
127.0.0.1 maowaotodowoo.net
|
||||
# Source: demonoid.pw
|
||||
127.0.0.1 veremund-hon.com
|
||||
# Source: desidert.no
|
||||
127.0.0.1 collectfasttracks.com
|
||||
|
||||
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
|
||||
127.0.0.1 deviuser.com
|
||||
|
||||
# Malicious domains found in videogame manuals
|
||||
127.0.0.1 acclaimsports.com
|
||||
127.0.0.1 acclaimmaxsports.com
|
||||
127.0.0.1 hip-games.com
|
||||
127.0.0.1 thq.com.au
|
||||
|
||||
# Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
127.0.0.1 unofficialtwrp.com
|
||||
127.0.0.1 androidweblog.com
|
||||
127.0.0.1 hardreset.info
|
||||
|
||||
|
||||
|
||||
@@ -1,285 +1,289 @@
|
||||
{+block}␍
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)␍
|
||||
# Version: 15February2020v1-Alpha␍
|
||||
# Expires: 5 days␍
|
||||
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.␍
|
||||
# For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Country domains ———␍
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.␍
|
||||
# Tokelau␍
|
||||
.tk␍
|
||||
# Gabon␍
|
||||
.ga␍
|
||||
# Mali␍
|
||||
.ml␍
|
||||
# Equatorial Guinea␍
|
||||
.gq␍
|
||||
# Central African Republic␍
|
||||
.cf␍
|
||||
# Palau␍
|
||||
.pw␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Topical domains ———␍
|
||||
# These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.␍
|
||||
# Presumably fake loans␍
|
||||
.loan␍
|
||||
.agency␍
|
||||
.gdn␍
|
||||
.bid␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— For Google Mobile ———␍
|
||||
# Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
.adblock.gjtech.net␍
|
||||
.spam404bl.com␍
|
||||
.109.201.135.46␍
|
||||
.hufilter.hu␍
|
||||
.fredfiber.no␍
|
||||
.securemecca.com␍
|
||||
.1hos.cf␍
|
||||
.1hosts.cf␍
|
||||
.everythingisnt.com␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———␍
|
||||
# To log in to TP-Link routers, use tplinkwifi.net instead.␍
|
||||
.tplinklogin.net␍
|
||||
.tplinkextender.net␍
|
||||
.ublock.org␍
|
||||
.138.68.252.54␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———␍
|
||||
.funeducation.com␍
|
||||
.iq-research.info␍
|
||||
.iq-test-online.org␍
|
||||
.iq-test.co.uk␍
|
||||
.iqtest.co.uk␍
|
||||
.iqtest.com␍
|
||||
.iqtestnow.org␍
|
||||
.iqtestonline24.com␍
|
||||
.test-iq.org␍
|
||||
.officialiqtests.com␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———␍
|
||||
# How these links still remain in Unetbootin, is anyone's guess.␍
|
||||
.dreamlinux.com.br␍
|
||||
.dreamlinux.net␍
|
||||
.dreamlinux.info␍
|
||||
.104.24.117.74␍
|
||||
.104.24.116.74␍
|
||||
.[2606:4700:30::6818:754a]␍
|
||||
.[2606:4700:30::6818:744a]␍
|
||||
.hacktolive.org␍
|
||||
.mandriva.com␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
# https://windowsreport.com/extend-windows-laptop-battery-life/␍
|
||||
# https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/␍
|
||||
# https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/␍
|
||||
# https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10␍
|
||||
# https://www.majorgeeks.com/files/details/patch_my_pc.html␍
|
||||
.majorgeeks.com/images/icons/red_icon_18x17px.png␍
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— ScanUtilities links ———␍
|
||||
# https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Driver Easy links ———␍
|
||||
# https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/␍
|
||||
# https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/␍
|
||||
# https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/␍
|
||||
# https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/␍
|
||||
# https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Slimware DriverUpdate links ———␍
|
||||
# https://forums.windowscentral.com/␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———␍
|
||||
.google-analytics.com␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— SpyHunter links ———␍
|
||||
# https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/␍
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Sites that fraudulently claim you've won a new phone ———␍
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Banner for "MSN New Tab" ———␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———␍
|
||||
# If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.␍
|
||||
.gamecopyworld.com␍
|
||||
.coolrom.com␍
|
||||
.freeroms.com␍
|
||||
.portalroms.com␍
|
||||
.romsmania.com␍
|
||||
.loveroms.com␍
|
||||
.portableroms.com␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———␍
|
||||
.afobal.cl␍
|
||||
.alvoportas.com.br␍
|
||||
.blogerjijer.pw␍
|
||||
.bright.su␍
|
||||
.domnicpeter.in.net␍
|
||||
.dzitech.net␍
|
||||
.fadzulani.com␍
|
||||
.hotelavalon.org␍
|
||||
.hruner.com␍
|
||||
.interlogistics.com.vn␍
|
||||
.ivansaru.418.com1.ru␍
|
||||
.jangasm.org␍
|
||||
.kesikelyaf.com␍
|
||||
.luenhinpearl.com␍
|
||||
.ns511849.ip-192-99-19.net␍
|
||||
.ns513726.ip-192-99-148.net␍
|
||||
.panel.vargakragard.se␍
|
||||
.projects.globaltronics.net␍
|
||||
.prtscrinsertcn.net␍
|
||||
.sanyai-love.rmu.ac.th␍
|
||||
.server.bovine-mena.com␍
|
||||
.servmill.com␍
|
||||
.ssl.sinergycosmetics.com␍
|
||||
.telefonfiyatlari.org␍
|
||||
.update.rifugiopontese.it␍
|
||||
.vodahelp.sytes.net␍
|
||||
.nikey.cn␍
|
||||
.witkey.com␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———␍
|
||||
# https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/␍
|
||||
.incels.co␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———␍
|
||||
# Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.␍
|
||||
# Chrome Web Store␍
|
||||
# Mozilla Add-ons␍
|
||||
# Homepages␍
|
||||
.adblock.biz␍
|
||||
.stop-reklama.com␍
|
||||
.the1adblocker.com␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Wrong suffixes of legitimate sites ———␍
|
||||
# https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/␍
|
||||
.dwarffortresswiki.com␍
|
||||
.103.224.212.249␍
|
||||
.speedtest.com␍
|
||||
␍
|
||||
{+block}
|
||||
# ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———␍
|
||||
.ppc.netnet44.net␍
|
||||
.tncrun.net␍
|
||||
.54.174.156.141␍
|
||||
.lucretius-ada.com␍
|
||||
.tango-deg.com␍
|
||||
.ezekiel-sam.com␍
|
||||
.franciscus-ful.com␍
|
||||
.hippolyte-hag.com␍
|
||||
.india-abc.com␍
|
||||
.leontius-eli.com␍
|
||||
.loukianos-euk.com␍
|
||||
.mohini-ger.com␍
|
||||
.nethaneel-has.com␍
|
||||
.odtsseus-nua.com␍
|
||||
.ortrun-adi.com␍
|
||||
.paramonos-oha.com␍
|
||||
.paula-secundinus.com␍
|
||||
.photios-raj.com␍
|
||||
.proserpina-zeb.com␍
|
||||
.ieronimus-kay.com␍
|
||||
.fredagty.com␍
|
||||
.lordagty.com␍
|
||||
.madagty.com␍
|
||||
.onsdagty.com␍
|
||||
.zeroredirect5.com␍
|
||||
.54.209.22.226␍
|
||||
.54.91.125.197␍
|
||||
.52.202.53.245␍
|
||||
.35.175.38.64␍
|
||||
.35.168.147.213␍
|
||||
.34.230.160.215␍
|
||||
.3.226.8.132␍
|
||||
.3.216.243.46␍
|
||||
# Source: demonoid.pw␍
|
||||
.veremund-hon.com␍
|
||||
␍
|
||||
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315␍
|
||||
.deviuser.com␍
|
||||
␍
|
||||
# Malicious domains found in videogame manuals␍
|
||||
.acclaimsports.com␍
|
||||
.acclaimmaxsports.com␍
|
||||
.hip-games.com␍
|
||||
.thq.com.au␍
|
||||
␍
|
||||
# Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones␍
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.␍
|
||||
.unofficialtwrp.com␍
|
||||
.androidweblog.com␍
|
||||
.hardreset.info␍
|
||||
␍
|
||||
{-block}
|
||||
# Manually updated Privoxy version of the whitelisted domains from the other versions of this list.
|
||||
.coolcmd.tk
|
||||
.budterence.tk
|
||||
.intr0.tk
|
||||
.google.tk
|
||||
.transportnews.tk
|
||||
.unicorncardlist.tk
|
||||
.c0d3c.tk
|
||||
.loljp-wiki.tk
|
||||
.ninetail.tk
|
||||
.goshujin.tk
|
||||
.graph.tk
|
||||
.google.ga
|
||||
.filtri-dns.ga
|
||||
.google.ml
|
||||
.deimos.gq
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
|
||||
# Version: 06March2020v2-Alpha
|
||||
# Expires: 5 days
|
||||
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
|
||||
# For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
|
||||
|
||||
{+block}
|
||||
# ——— Country domains ———
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
|
||||
# Tokelau
|
||||
.tk
|
||||
# Gabon
|
||||
.ga
|
||||
# Mali
|
||||
.ml
|
||||
# Equatorial Guinea
|
||||
.gq
|
||||
# Central African Republic
|
||||
.cf
|
||||
# Palau
|
||||
.pw
|
||||
|
||||
{+block}
|
||||
# ——— Topical domains ———
|
||||
# These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
# Presumably fake loans
|
||||
.loan
|
||||
.agency
|
||||
.gdn
|
||||
.bid
|
||||
.top
|
||||
|
||||
{+block}
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
|
||||
|
||||
{+block}
|
||||
# ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———
|
||||
|
||||
{+block}
|
||||
# ——— For Google Mobile ———
|
||||
# Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.
|
||||
|
||||
{+block}
|
||||
# ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———
|
||||
.adblock.gjtech.net
|
||||
.spam404bl.com
|
||||
.109.201.135.46
|
||||
.hufilter.hu
|
||||
.fredfiber.no
|
||||
.securemecca.com
|
||||
.1hos.cf
|
||||
.intr0.cf
|
||||
.ivoid.cd
|
||||
.domainvoider.cf
|
||||
.google.cf
|
||||
.rths.cf
|
||||
.anonytext.tk
|
||||
.tokelau-info.tk
|
||||
.fakaofo.tk
|
||||
.nukunonu.tk
|
||||
.anpigabon.ga
|
||||
.dgdi.ga
|
||||
.voitures.ga
|
||||
.mobili.ml
|
||||
.inege.gq
|
||||
.tvgelive.gq
|
||||
.comprarcarros.gq
|
||||
.voitures.cf
|
||||
.assembleenationale-rca.cf
|
||||
.cps-rca.cf
|
||||
.acap.cf␍
|
||||
.1hosts.cf
|
||||
.everythingisnt.com
|
||||
|
||||
{+block}
|
||||
# ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———
|
||||
# To log in to TP-Link routers, use tplinkwifi.net instead.
|
||||
.tplinklogin.net
|
||||
.tplinkextender.net
|
||||
.ublock.org
|
||||
.138.68.252.54
|
||||
|
||||
{+block}
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
.funeducation.com
|
||||
.iq-research.info
|
||||
.iq-test-online.org
|
||||
.iq-test.co.uk
|
||||
.iqtest.co.uk
|
||||
.iqtest.com
|
||||
.iqtestnow.org
|
||||
.iqtestonline24.com
|
||||
.test-iq.org
|
||||
.officialiqtests.com
|
||||
|
||||
{+block}
|
||||
# ——— Old Linux-related domains that have been snapped up for ads, adware, and/or malware. ———
|
||||
# How these links still remain in Unetbootin, is anyone's guess.
|
||||
.dreamlinux.com.br
|
||||
.dreamlinux.net
|
||||
.dreamlinux.info
|
||||
.104.24.117.74
|
||||
.104.24.116.74
|
||||
.[2606:4700:30::6818:754a]
|
||||
.[2606:4700:30::6818:744a]
|
||||
.hacktolive.org
|
||||
.mandriva.com
|
||||
|
||||
{+block}
|
||||
# ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———
|
||||
# https://windowsreport.com/extend-windows-laptop-battery-life/
|
||||
# https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
|
||||
# https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
|
||||
# https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
|
||||
# https://www.majorgeeks.com/files/details/patch_my_pc.html
|
||||
.majorgeeks.com/images/icons/red_icon_18x17px.png
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
{+block}
|
||||
# ——— ScanUtilities links ———
|
||||
# https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/
|
||||
|
||||
{+block}
|
||||
# ——— Driver Easy links ———
|
||||
# https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
|
||||
# https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
|
||||
# https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/
|
||||
# https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
|
||||
# https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/
|
||||
|
||||
{+block}
|
||||
# ——— Slimware DriverUpdate links ———
|
||||
# https://forums.windowscentral.com/
|
||||
|
||||
{+block}
|
||||
# ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———
|
||||
.google-analytics.com
|
||||
|
||||
{+block}
|
||||
# ——— SpyHunter links ———
|
||||
# https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
{+block}
|
||||
# ——— Sites that fraudulently claim you've won a new phone ———
|
||||
/(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)/
|
||||
|
||||
{+block}
|
||||
# ——— Banner for "MSN New Tab" ———
|
||||
|
||||
{+block}
|
||||
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
|
||||
# If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.
|
||||
.gamecopyworld.com
|
||||
.coolrom.com
|
||||
.freeroms.com
|
||||
.portalroms.com
|
||||
.romsmania.com
|
||||
.loveroms.com
|
||||
.portableroms.com
|
||||
|
||||
{+block}
|
||||
# ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———
|
||||
.afobal.cl
|
||||
.alvoportas.com.br
|
||||
.blogerjijer.pw
|
||||
.bright.su
|
||||
.domnicpeter.in.net
|
||||
.dzitech.net
|
||||
.fadzulani.com
|
||||
.hotelavalon.org
|
||||
.hruner.com
|
||||
.interlogistics.com.vn
|
||||
.ivansaru.418.com1.ru
|
||||
.jangasm.org
|
||||
.kesikelyaf.com
|
||||
.luenhinpearl.com
|
||||
.ns511849.ip-192-99-19.net
|
||||
.ns513726.ip-192-99-148.net
|
||||
.panel.vargakragard.se
|
||||
.projects.globaltronics.net
|
||||
.prtscrinsertcn.net
|
||||
.sanyai-love.rmu.ac.th
|
||||
.server.bovine-mena.com
|
||||
.servmill.com
|
||||
.ssl.sinergycosmetics.com
|
||||
.telefonfiyatlari.org
|
||||
.update.rifugiopontese.it
|
||||
.vodahelp.sytes.net
|
||||
.nikey.cn
|
||||
.witkey.com
|
||||
|
||||
{+block}
|
||||
# ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———
|
||||
# https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/
|
||||
.incels.co
|
||||
|
||||
{+block}
|
||||
# ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———
|
||||
# Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.
|
||||
# Chrome Web Store
|
||||
# Mozilla Add-ons
|
||||
# Homepages
|
||||
.adblock.biz
|
||||
.stop-reklama.com
|
||||
.the1adblocker.com
|
||||
|
||||
{+block}
|
||||
# ——— Wrong suffixes of legitimate sites ———
|
||||
# https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/
|
||||
.dwarffortresswiki.com
|
||||
.103.224.212.249
|
||||
.speedtest.com
|
||||
|
||||
{+block}
|
||||
# ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
|
||||
.ppc.netnet44.net
|
||||
.tncrun.net
|
||||
.54.174.156.141
|
||||
.lucretius-ada.com
|
||||
.tango-deg.com
|
||||
.ezekiel-sam.com
|
||||
.franciscus-ful.com
|
||||
.hippolyte-hag.com
|
||||
.india-abc.com
|
||||
.leontius-eli.com
|
||||
.loukianos-euk.com
|
||||
.mohini-ger.com
|
||||
.nethaneel-has.com
|
||||
.odtsseus-nua.com
|
||||
.ortrun-adi.com
|
||||
.paramonos-oha.com
|
||||
.paula-secundinus.com
|
||||
.photios-raj.com
|
||||
.proserpina-zeb.com
|
||||
.ieronimus-kay.com
|
||||
.fredagty.com
|
||||
.lordagty.com
|
||||
.madagty.com
|
||||
.onsdagty.com
|
||||
.zeroredirect5.com
|
||||
.54.209.22.226
|
||||
.54.91.125.197
|
||||
.52.202.53.245
|
||||
.35.175.38.64
|
||||
.35.168.147.213
|
||||
.34.230.160.215
|
||||
.3.226.8.132
|
||||
.3.216.243.46
|
||||
.maowaotodowoo.net
|
||||
# Source: demonoid.pw
|
||||
.veremund-hon.com
|
||||
# Source: desidert.no
|
||||
.collectfasttracks.com
|
||||
|
||||
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
|
||||
.deviuser.com
|
||||
|
||||
# Malicious domains found in videogame manuals
|
||||
.acclaimsports.com
|
||||
.acclaimmaxsports.com
|
||||
.hip-games.com
|
||||
.thq.com.au
|
||||
|
||||
# Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone.
|
||||
.unofficialtwrp.com
|
||||
.androidweblog.com
|
||||
.hardreset.info
|
||||
|
||||
{-block}
|
||||
# Manually updated Privoxy version of the whitelisted domains from the other versions of this list.
|
||||
.coolcmd.tk
|
||||
.budterence.tk
|
||||
.intr0.tk
|
||||
.google.tk
|
||||
.transportnews.tk
|
||||
.unicorncardlist.tk
|
||||
.c0d3c.tk
|
||||
.loljp-wiki.tk
|
||||
.ninetail.tk
|
||||
.goshujin.tk
|
||||
.graph.tk
|
||||
.google.ga
|
||||
.filtri-dns.ga
|
||||
.google.ml
|
||||
.deimos.gq
|
||||
.1hos.cf
|
||||
.intr0.cf
|
||||
.ivoid.cd
|
||||
.domainvoider.cf
|
||||
.google.cf
|
||||
.rths.cf
|
||||
.anonytext.tk
|
||||
.tokelau-info.tk
|
||||
.fakaofo.tk
|
||||
.nukunonu.tk
|
||||
.anpigabon.ga
|
||||
.dgdi.ga
|
||||
.voitures.ga
|
||||
.mobili.ml
|
||||
.inege.gq
|
||||
.tvgelive.gq
|
||||
.comprarcarros.gq
|
||||
.voitures.cf
|
||||
.assembleenationale-rca.cf
|
||||
.cps-rca.cf
|
||||
.acap.cf
|
||||
|
||||
@@ -1,266 +1,271 @@
|
||||
msFilterList␍
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)␍
|
||||
# Version: 15February2020v1-Beta␍
|
||||
: expires = 5␍
|
||||
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.␍
|
||||
# For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english␍
|
||||
␍
|
||||
# ——— Country domains ———␍
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.␍
|
||||
# Tokelau␍
|
||||
- *.tk
|
||||
+d coolcmd.tk
|
||||
+d budterence.tk
|
||||
+d google.tk
|
||||
+d transportnews.tk
|
||||
+d unicorncardlist.tk
|
||||
+d c0d3c.tk
|
||||
+d anonytext.tk
|
||||
+d tokelau-info.tk
|
||||
+d fakaofo.tk
|
||||
+d loljp-wiki.tk
|
||||
+d ninetail.tk
|
||||
+d goshujin.tk
|
||||
+d graph.tk
|
||||
+d haopro.tk
|
||||
+d dls2.pokeacer.tk
|
||||
msFilterList
|
||||
# Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
|
||||
# Version: 06March2020v2-Beta
|
||||
: expires = 5
|
||||
# Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
|
||||
# For more information, details, helpful tools, and other lists that I've made, visit https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
|
||||
|
||||
# ——— Country domains ———
|
||||
# You can expect these domains to have an overwhelming majority of malware domains that have nothing to do with the countries in question. Nevertheless, if you are in a situation where you have to do active business in any of the countries in question, then this list may not be ideal for you.
|
||||
# Tokelau
|
||||
- *.tk
|
||||
+d coolcmd.tk
|
||||
+d budterence.tk
|
||||
+d google.tk
|
||||
+d transportnews.tk
|
||||
+d unicorncardlist.tk
|
||||
+d c0d3c.tk
|
||||
+d anonytext.tk
|
||||
+d tokelau-info.tk
|
||||
+d fakaofo.tk
|
||||
+d loljp-wiki.tk
|
||||
+d ninetail.tk
|
||||
+d goshujin.tk
|
||||
+d graph.tk
|
||||
+d haopro.tk
|
||||
+d dls2.pokeacer.tk
|
||||
+d ps2online.tk
|
||||
+d nolfrevival.tk
|
||||
+d steamroller.tk
|
||||
+d coppersurfer.tk
|
||||
# Gabon
|
||||
- *.ga
|
||||
+d google.ga
|
||||
+d filtri-dns.ga
|
||||
+d anpigabon.ga
|
||||
+d dgdi.ga
|
||||
+d voitures.ga
|
||||
# Mali
|
||||
- *.ml
|
||||
+d google.ml
|
||||
+d mobili.ml
|
||||
+d melody.ml
|
||||
+d ps2online.tk
|
||||
+d nolfrevival.tk
|
||||
+d steamroller.tk␍
|
||||
# Gabon␍
|
||||
- *.ga
|
||||
+d google.ga
|
||||
+d filtri-dns.ga
|
||||
+d anpigabon.ga
|
||||
+d dgdi.ga
|
||||
+d voitures.ga␍
|
||||
# Mali␍
|
||||
- *.ml
|
||||
+d google.ml
|
||||
+d mobili.ml
|
||||
+d melody.ml
|
||||
+d ps2online.tk␍
|
||||
# Equatorial Guinea␍
|
||||
- *.gq
|
||||
+d deimos.gq
|
||||
+d inege.gq
|
||||
+d tvgelive.gq
|
||||
+d comprarcarros.gq␍
|
||||
# Central African Republic␍
|
||||
- *.cf
|
||||
+d intr0.cf
|
||||
+d google.cf
|
||||
+d rths.cf
|
||||
+d voitures.cf
|
||||
+d assembleenationale-rca.cf
|
||||
+d cps-rca.cf
|
||||
+d acap.cf␍
|
||||
# Palau␍
|
||||
- *.pw
|
||||
+d libgen.pw
|
||||
+d petridish.pw
|
||||
+d palaugov.pw␍
|
||||
␍
|
||||
# ——— Topical domains ———␍
|
||||
# These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.␍
|
||||
# Presumably fake loans␍
|
||||
- *.loan␍
|
||||
- *.agency␍
|
||||
- *.gdn␍
|
||||
- *.bid␍
|
||||
␍
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———␍
|
||||
␍
|
||||
# ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———␍
|
||||
␍
|
||||
# ——— For Google Mobile ———␍
|
||||
# Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.␍
|
||||
␍
|
||||
# ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
-d adblock.gjtech.net␍
|
||||
-d spam404bl.com␍
|
||||
-d 109.201.135.46␍
|
||||
-d hufilter.hu␍
|
||||
-d fredfiber.no␍
|
||||
-d securemecca.com␍
|
||||
-d 1hos.cf␍
|
||||
-d 1hosts.cf␍
|
||||
-d everythingisnt.com␍
|
||||
␍
|
||||
# ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———␍
|
||||
# To log in to TP-Link routers, use tplinkwifi.net instead.␍
|
||||
-d tplinklogin.net␍
|
||||
-d tplinkextender.net␍
|
||||
-d ublock.org␍
|
||||
-d 138.68.252.54␍
|
||||
␍
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———␍
|
||||
-d funeducation.com␍
|
||||
-d iq-research.info␍
|
||||
-d iq-test-online.org␍
|
||||
-d iq-test.co.uk␍
|
||||
-d iqtest.co.uk␍
|
||||
-d iqtest.com␍
|
||||
-d iqtestnow.org␍
|
||||
-d iqtestonline24.com␍
|
||||
-d test-iq.org␍
|
||||
-d officialiqtests.com␍
|
||||
␍
|
||||
# ——— Old Linux-related domains that have been snapped up for ads, adware, and or malware. ———␍
|
||||
# How these links still remain in Unetbootin, is anyone's guess.␍
|
||||
-d dreamlinux.com.br␍
|
||||
-d dreamlinux.net␍
|
||||
-d dreamlinux.info␍
|
||||
-d 104.24.117.74␍
|
||||
-d 104.24.116.74␍
|
||||
-d [2606:4700:30::6818:754a]␍
|
||||
-d [2606:4700:30::6818:744a]␍
|
||||
-d hacktolive.org␍
|
||||
-d mandriva.com␍
|
||||
␍
|
||||
# ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———␍
|
||||
# https://windowsreport.com/extend-windows-laptop-battery-life/␍
|
||||
# https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/␍
|
||||
# https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/␍
|
||||
# https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10␍
|
||||
# https://www.majorgeeks.com/files/details/patch_my_pc.html␍
|
||||
-d majorgeeks.com images icons red_icon_18x17px.png␍
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
# ——— ScanUtilities links ———␍
|
||||
# https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/␍
|
||||
␍
|
||||
# ——— Driver Easy links ———␍
|
||||
# https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/␍
|
||||
# https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/␍
|
||||
# https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/␍
|
||||
# https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/␍
|
||||
# https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/␍
|
||||
␍
|
||||
# ——— Slimware DriverUpdate links ———␍
|
||||
# https://forums.windowscentral.com/␍
|
||||
␍
|
||||
# ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———␍
|
||||
-d google-analytics.com␍
|
||||
␍
|
||||
# ——— SpyHunter links ———␍
|
||||
# https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/␍
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html␍
|
||||
␍
|
||||
# ——— Sites that fraudulently claim you've won a new phone ———␍
|
||||
- (apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live) ␍
|
||||
␍
|
||||
# ——— Banner for "MSN New Tab" ———␍
|
||||
␍
|
||||
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———␍
|
||||
# If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.␍
|
||||
-d gamecopyworld.com␍
|
||||
-d coolrom.com␍
|
||||
-d freeroms.com␍
|
||||
-d portalroms.com␍
|
||||
-d romsmania.com␍
|
||||
-d loveroms.com␍
|
||||
-d portableroms.com␍
|
||||
␍
|
||||
# ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———␍
|
||||
-d afobal.cl␍
|
||||
-d alvoportas.com.br␍
|
||||
-d blogerjijer.pw␍
|
||||
-d bright.su␍
|
||||
-d domnicpeter.in.net␍
|
||||
-d dzitech.net␍
|
||||
-d fadzulani.com␍
|
||||
-d hotelavalon.org␍
|
||||
-d hruner.com␍
|
||||
-d interlogistics.com.vn␍
|
||||
-d ivansaru.418.com1.ru␍
|
||||
-d jangasm.org␍
|
||||
-d kesikelyaf.com␍
|
||||
-d luenhinpearl.com␍
|
||||
-d ns511849.ip-192-99-19.net␍
|
||||
-d ns513726.ip-192-99-148.net␍
|
||||
-d panel.vargakragard.se␍
|
||||
-d projects.globaltronics.net␍
|
||||
-d prtscrinsertcn.net␍
|
||||
-d sanyai-love.rmu.ac.th␍
|
||||
-d server.bovine-mena.com␍
|
||||
-d servmill.com␍
|
||||
-d ssl.sinergycosmetics.com␍
|
||||
-d telefonfiyatlari.org␍
|
||||
-d update.rifugiopontese.it␍
|
||||
-d vodahelp.sytes.net␍
|
||||
-d nikey.cn␍
|
||||
-d witkey.com␍
|
||||
␍
|
||||
# ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———␍
|
||||
# https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/␍
|
||||
-d incels.co␍
|
||||
␍
|
||||
# ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———␍
|
||||
# Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.␍
|
||||
# Chrome Web Store␍
|
||||
# Mozilla Add-ons␍
|
||||
# Homepages␍
|
||||
-d adblock.biz␍
|
||||
-d stop-reklama.com␍
|
||||
-d the1adblocker.com␍
|
||||
␍
|
||||
# ——— Wrong suffixes of legitimate sites ———␍
|
||||
# https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/␍
|
||||
-d dwarffortresswiki.com␍
|
||||
-d 103.224.212.249␍
|
||||
-d speedtest.com␍
|
||||
␍
|
||||
# ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———␍
|
||||
-d ppc.netnet44.net␍
|
||||
-d tncrun.net␍
|
||||
-d 54.174.156.141␍
|
||||
-d lucretius-ada.com␍
|
||||
-d tango-deg.com␍
|
||||
-d ezekiel-sam.com␍
|
||||
-d franciscus-ful.com␍
|
||||
-d hippolyte-hag.com␍
|
||||
-d india-abc.com␍
|
||||
-d leontius-eli.com␍
|
||||
-d loukianos-euk.com␍
|
||||
-d mohini-ger.com␍
|
||||
-d nethaneel-has.com␍
|
||||
-d odtsseus-nua.com␍
|
||||
-d ortrun-adi.com␍
|
||||
-d paramonos-oha.com␍
|
||||
-d paula-secundinus.com␍
|
||||
-d photios-raj.com␍
|
||||
-d proserpina-zeb.com␍
|
||||
-d ieronimus-kay.com␍
|
||||
-d fredagty.com␍
|
||||
-d lordagty.com␍
|
||||
-d madagty.com␍
|
||||
-d onsdagty.com␍
|
||||
-d zeroredirect5.com␍
|
||||
-d 54.209.22.226␍
|
||||
-d 54.91.125.197␍
|
||||
-d 52.202.53.245␍
|
||||
-d 35.175.38.64␍
|
||||
-d 35.168.147.213␍
|
||||
-d 34.230.160.215␍
|
||||
-d 3.226.8.132␍
|
||||
-d 3.216.243.46␍
|
||||
# Source: demonoid.pw␍
|
||||
-d veremund-hon.com␍
|
||||
␍
|
||||
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315␍
|
||||
-d deviuser.com␍
|
||||
␍
|
||||
# Malicious domains found in videogame manuals␍
|
||||
-d acclaimsports.com␍
|
||||
-d acclaimmaxsports.com␍
|
||||
-d hip-games.com␍
|
||||
-d thq.com.au␍
|
||||
␍
|
||||
# Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones␍
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone.␍
|
||||
-d unofficialtwrp.com␍
|
||||
-d androidweblog.com␍
|
||||
-d hardreset.info␍
|
||||
␍
|
||||
# Placeholder line for alternate list versions␍
|
||||
# Equatorial Guinea
|
||||
- *.gq
|
||||
+d deimos.gq
|
||||
+d inege.gq
|
||||
+d tvgelive.gq
|
||||
+d comprarcarros.gq
|
||||
# Central African Republic
|
||||
- *.cf
|
||||
+d intr0.cf
|
||||
+d google.cf
|
||||
+d rths.cf
|
||||
+d voitures.cf
|
||||
+d assembleenationale-rca.cf
|
||||
+d cps-rca.cf
|
||||
+d acap.cf
|
||||
# Palau
|
||||
- *.pw
|
||||
+d libgen.pw
|
||||
+d petridish.pw
|
||||
+d palaugov.pw
|
||||
|
||||
# ——— Topical domains ———
|
||||
# These are topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
|
||||
# Presumably fake loans
|
||||
- *.loan
|
||||
- *.agency
|
||||
- *.gdn
|
||||
- *.bid
|
||||
- *.top
|
||||
|
||||
# ——— Attempted removal of Google search result entries that lead to the above top-level domains (Advanced adblockers only) ———
|
||||
|
||||
# ——— You know those ultra-fraudulent websites who clutter up Google searches, who have some seemingly random ".php?" values in their URLs? These entries should remove some of them. ———
|
||||
|
||||
# ——— For Google Mobile ———
|
||||
# Note for Firefox on Android users: I strongly recommend the use of https://addons.mozilla.org/firefox/addon/google-search-fixer/ for use on Firefox for Android, thus the entries are written for the Chrome version of Google Mobile.
|
||||
|
||||
# ——— Dead domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. (Also added to "uBlock Filters - Badware Risks") ———
|
||||
-d adblock.gjtech.net
|
||||
-d spam404bl.com
|
||||
-d 109.201.135.46
|
||||
-d hufilter.hu
|
||||
-d fredfiber.no
|
||||
-d securemecca.com
|
||||
-d 1hos.cf
|
||||
-d 1hosts.cf
|
||||
-d everythingisnt.com
|
||||
|
||||
# ——— Old tech-related domains that have fallen into the hands of questionable new owners. ———
|
||||
# To log in to TP-Link routers, use tplinkwifi.net instead.
|
||||
-d tplinklogin.net
|
||||
-d tplinkextender.net
|
||||
-d ublock.org
|
||||
-d 138.68.252.54
|
||||
|
||||
# ——— IQ test sites that make you waste heaps of time by taking the test, and then try to charge you to see the results. ———
|
||||
-d funeducation.com
|
||||
-d iq-research.info
|
||||
-d iq-test-online.org
|
||||
-d iq-test.co.uk
|
||||
-d iqtest.co.uk
|
||||
-d iqtest.com
|
||||
-d iqtestnow.org
|
||||
-d iqtestonline24.com
|
||||
-d test-iq.org
|
||||
-d officialiqtests.com
|
||||
|
||||
# ——— Old Linux-related domains that have been snapped up for ads, adware, and or malware. ———
|
||||
# How these links still remain in Unetbootin, is anyone's guess.
|
||||
-d dreamlinux.com.br
|
||||
-d dreamlinux.net
|
||||
-d dreamlinux.info
|
||||
-d 104.24.117.74
|
||||
-d 104.24.116.74
|
||||
-d [2606:4700:30::6818:754a]
|
||||
-d [2606:4700:30::6818:744a]
|
||||
-d hacktolive.org
|
||||
-d mandriva.com
|
||||
|
||||
# ——— ReImagePlus links (Also added to "uBlock Filters - Badware Risks") ———
|
||||
# https://windowsreport.com/extend-windows-laptop-battery-life/
|
||||
# https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
|
||||
# https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
|
||||
# https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
|
||||
# https://www.majorgeeks.com/files/details/patch_my_pc.html
|
||||
-d majorgeeks.com images icons red_icon_18x17px.png
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
# ——— ScanUtilities links ———
|
||||
# https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/
|
||||
|
||||
# ——— Driver Easy links ———
|
||||
# https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
|
||||
# https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
|
||||
# https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/
|
||||
# https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
|
||||
# https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/
|
||||
|
||||
# ——— Slimware DriverUpdate links ———
|
||||
# https://forums.windowscentral.com/
|
||||
|
||||
# ——— Driverpack Online links (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ———
|
||||
-d google-analytics.com
|
||||
|
||||
# ——— SpyHunter links ———
|
||||
# https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
|
||||
# https://www.2-spyware.com/remove-redirector-gvt1-com.html
|
||||
|
||||
# ——— Sites that fraudulently claim you've won a new phone ———
|
||||
- (apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(agency|icu|life|live)
|
||||
|
||||
# ——— Banner for "MSN New Tab" ———
|
||||
|
||||
# ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware .exe files) ———
|
||||
# If you're in a situation where you need to torrent something, such as for hard-to-buy or region-locked games, or games that you own for consoles that lack accessible rip tools, you can at least try to use sites that have legit downloads with the actual game files.
|
||||
-d gamecopyworld.com
|
||||
-d coolrom.com
|
||||
-d freeroms.com
|
||||
-d portalroms.com
|
||||
-d romsmania.com
|
||||
-d loveroms.com
|
||||
-d portableroms.com
|
||||
|
||||
# ——— Entries from «abuse.ch ZeuS Blocklist», which was discontinued on the 8th of July 2019. ———
|
||||
-d afobal.cl
|
||||
-d alvoportas.com.br
|
||||
-d blogerjijer.pw
|
||||
-d bright.su
|
||||
-d domnicpeter.in.net
|
||||
-d dzitech.net
|
||||
-d fadzulani.com
|
||||
-d hotelavalon.org
|
||||
-d hruner.com
|
||||
-d interlogistics.com.vn
|
||||
-d ivansaru.418.com1.ru
|
||||
-d jangasm.org
|
||||
-d kesikelyaf.com
|
||||
-d luenhinpearl.com
|
||||
-d ns511849.ip-192-99-19.net
|
||||
-d ns513726.ip-192-99-148.net
|
||||
-d panel.vargakragard.se
|
||||
-d projects.globaltronics.net
|
||||
-d prtscrinsertcn.net
|
||||
-d sanyai-love.rmu.ac.th
|
||||
-d server.bovine-mena.com
|
||||
-d servmill.com
|
||||
-d ssl.sinergycosmetics.com
|
||||
-d telefonfiyatlari.org
|
||||
-d update.rifugiopontese.it
|
||||
-d vodahelp.sytes.net
|
||||
-d nikey.cn
|
||||
-d witkey.com
|
||||
|
||||
# ——— Truly extraordinarily cases of sites so bad that it counts as malware that directly affects human brains ———
|
||||
# https://www.reddit.com/r/insanepeoplefacebook/comments/czvv5i/incel_tracking_down_a_mother_of_a_murdered/
|
||||
-d incels.co
|
||||
|
||||
# ——— Browser extension store entries for notoriously poor or malicious adblocker forks ———
|
||||
# Note: Currently the entries only work properly on AdGuard for Windows/Mac, due to what seems to be limitations placed on browser extensions.
|
||||
# Chrome Web Store
|
||||
# Mozilla Add-ons
|
||||
# Homepages
|
||||
-d adblock.biz
|
||||
-d stop-reklama.com
|
||||
-d the1adblocker.com
|
||||
|
||||
# ——— Wrong suffixes of legitimate sites ———
|
||||
# https://new.reddit.com/r/dwarffortress/comments/e4srco/be_sure_to_use_org_instead_of_com_when_going_to/
|
||||
-d dwarffortresswiki.com
|
||||
-d 103.224.212.249
|
||||
-d speedtest.com
|
||||
|
||||
# ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
|
||||
-d ppc.netnet44.net
|
||||
-d tncrun.net
|
||||
-d 54.174.156.141
|
||||
-d lucretius-ada.com
|
||||
-d tango-deg.com
|
||||
-d ezekiel-sam.com
|
||||
-d franciscus-ful.com
|
||||
-d hippolyte-hag.com
|
||||
-d india-abc.com
|
||||
-d leontius-eli.com
|
||||
-d loukianos-euk.com
|
||||
-d mohini-ger.com
|
||||
-d nethaneel-has.com
|
||||
-d odtsseus-nua.com
|
||||
-d ortrun-adi.com
|
||||
-d paramonos-oha.com
|
||||
-d paula-secundinus.com
|
||||
-d photios-raj.com
|
||||
-d proserpina-zeb.com
|
||||
-d ieronimus-kay.com
|
||||
-d fredagty.com
|
||||
-d lordagty.com
|
||||
-d madagty.com
|
||||
-d onsdagty.com
|
||||
-d zeroredirect5.com
|
||||
-d 54.209.22.226
|
||||
-d 54.91.125.197
|
||||
-d 52.202.53.245
|
||||
-d 35.175.38.64
|
||||
-d 35.168.147.213
|
||||
-d 34.230.160.215
|
||||
-d 3.226.8.132
|
||||
-d 3.216.243.46
|
||||
-d maowaotodowoo.net
|
||||
# Source: demonoid.pw
|
||||
-d veremund-hon.com
|
||||
# Source: desidert.no
|
||||
-d collectfasttracks.com
|
||||
|
||||
# https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
|
||||
-d deviuser.com
|
||||
|
||||
# Malicious domains found in videogame manuals
|
||||
-d acclaimsports.com
|
||||
-d acclaimmaxsports.com
|
||||
-d hip-games.com
|
||||
-d thq.com.au
|
||||
|
||||
# Gobshite copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones
|
||||
# Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone.
|
||||
-d unofficialtwrp.com
|
||||
-d androidweblog.com
|
||||
-d hardreset.info
|
||||
|
||||
# Placeholder line for alternate list versions
|
||||
|
||||
Reference in New Issue
Block a user