Attempted RegEx improvements.

This commit is contained in:
Imre Eilertsen
2024-09-09 01:33:12 +02:00
committed by GitHub
parent 75755105f4
commit defc46b820
+14 -14
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List
! Version: 08September2024v1
! Version: 09September2024v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -269,14 +269,14 @@ cfoc.org##font:has(center:has([href="https://cfoc.org/combocleaner-download-mac/
||sensorstechforum.com/wp-content/uploads/2020/04/SpyHunter-Install-And-Free-Scan-$image
||youtube.com/embed/KbGF_fvsRU4^$all
sensorstechforum.com##tr:has([href="https://sensorstechforum.com/spyhunter-download-and-install-instructions/"])
sensorstechforum.com##center:has([href="https://www.enigmasoftware.com/spyhunter5-eula/"])
sensorstechforum.com##center:has([href$="ttps://www.enigmasoftware.com/spyhunter5-eula/"])
sensorstechforum.com##[href="https://sensorstechforum.com/spyhunter-download-and-install-instructions/"]
sensorstechforum.com##.top_banner_custom
sensorstechforum.com##center:has-text(Click the button below):has-text(SpyHunter for Mac)
sensorstechforum.com##p:has([href="https://sensorstechforum.com/spyhunter-mac-review-advanced-anti-malware/"])
sensorstechforum.com##p:has([src^="https://sensorstechforum.com/wp-content/uploads/2020/04/SpyHunter-Install-And-Free-Scan-"])
sensorstechforum.com##center:has([title="Download SpyHunter for Mac"])
sensorstechforum.com##p:has([src="https://www.youtube.com/embed/KbGF_fvsRU4"])
sensorstechforum.com##p:has([src$="ttps://www.youtube.com/embed/KbGF_fvsRU4"])
sensorstechforum.com###win_top_new_hidden
macsecurity.net##.banner
macsecurity.net##.btn-download.btn-lg.btn
@@ -454,14 +454,14 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"])
||discordapp.cam^$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
||discordap.com^$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
! https://github.com/DevSpen/links/blob/master/src/links.txt
/(^|\.|://)d[il]sc(or|ro)ds?-?g[il]ft[se]?[.-].*/$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
/(^|\.|://)d[il]sc(or|ro)ds?-?n[il]tro[.-].*/$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
/^(.*\.|.*://)?d[il]sc(or|ro)ds?-?g[il]ft[se]?[.-].*$/$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
/^(.*\.|.*://)?d[il]sc(or|ro)ds?-?n[il]tro[.-].*$/$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
||discord-nltro.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
||discord-app.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
||discord-promo*$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
||dlscord.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
||dlscord-app.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
/(^|\.|://)gifts?-?discord\..*/$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
/^(.*\.|.*://)?gifts?-?discord\..*$/$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
||steamcommin*$doc,domain=~likely-a-fake-malware-version-of-steamcommunity.com
||steamcommm*$all,~inline-font,domain=~fake-malware-version-of-steamcommunity.com
||steamcommn*$all,~inline-font,domain=~fake-malware-version-of-steamcommunity.com
@@ -551,9 +551,9 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"])
||3.226.8.132^$doc
||3.216.243.46^$doc
||roamingclicks.com^$all,~inline-font
! Source: desidert.no
! Source: desidert•no
||collectfasttracks.com^$all,~inline-font,domain=~malware-redirection-trains.*
! Source: vn-zoom.com
! Source: vn-zoom•com
||ttnrd.com^$all,~inline-font
||amanda.*.com^$doc
||katie.*.com^$doc
@@ -563,7 +563,7 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"])
||54.152.245.247^$doc
||35.172.40.232^$doc
||3.90.125.85^$doc
! Various ex-affiliate links at www.zombooru.com
! Various ex-affiliate links at www•zombooru•com
||track.vcdc.com^$all,~inline-font,domain=~malware-redirection-trains.*
||track.tkbo.com^$all,~inline-font,domain=~malware-redirection-trains.*
||track.traffic.club^$all,~inline-font,domain=~malware-redirection-trains.*
@@ -676,8 +676,8 @@ zombooru.com##a[href="http://www.hard55.com"]
||zeikvvbobop.com^$all,~inline-font
||216.21.13.14^$all,~inline-font
||216.21.13.15^$all,~inline-font
/\.(xyz|pics)/[a-zA-Z0-9]{130,}/$doc,script,subdocument,image
/\.(cloudfront\.net|xyz|pics)/[a-zA-Z0-9]{20,}/[a-zA-Z0-9]{25,}\+[a-zA-Z0-9+]{90,}$/$doc,script,subdocument,image
/^.*\.(xyz|pics)/[a-zA-Z0-9]{130,}$/$doc,script,subdocument,image
/^.*\.(cloudfront\.net|xyz|pics)/[a-zA-Z0-9]{20,}/[a-zA-Z0-9]{25,}\+[a-zA-Z0-9+]{90,}$/$doc,script,subdocument,image
||abaphosis.guru^$all,~inline-font
||abietichob.live^$all,~inline-font
||abyssusuntouch.guru^$all,~inline-font
@@ -11307,7 +11307,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||showjoinnip.live^$all,~inline-font
||usedhutsold.live^$all,~inline-font
||57.128.71.215^$all,~inline-font
/&[a-z]{1,2}=[a-zA-Z0-9]{0,}%[a-zA-Z0-9%]{1000,}$/$doc
/^.*&[a-z]{1,2}=[a-zA-Z0-9]{0,}%[a-zA-Z0-9%]{1000,}$/$doc
! https://github.com/AdguardTeam/AdguardFilters/issues/155936
||truanet.com^$all,~inline-font
||rumadel.com^$all,~inline-font
@@ -22905,7 +22905,7 @@ zombooru.com##a[href="http://www.hard55.com"]
!#endif
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle•net/results•php?q=fetishkitsch&security=666
! http://www•toorgle•net/results•php?q=fetishkitsch&security=666
||downloadprovider.me^$all,~inline-font
##a[href*=".downloadprovider.me/"]
toorgle.net##.join
@@ -22936,7 +22936,7 @@ toorgle.net##.join
||push.weo.su^$all,~inline-font
||traffsend.me^$all,~inline-font
||wwopenclick.club^$all,~inline-font
! Spam comments at https://www.accountkiller•com/en/delete-htcdev-account
! Spam comments at https://www•accountkiller•com/en/delete-htcdev-account
||azhydroxychloroquine.com^$all,~inline-font
||wisig.org^$all,~inline-font
||confrancisyalgomas.com^$all,~inline-font