diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index b90fa9431..8553bcccf 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus and AdBlock) -! Version: 30January2024v1 +! Version: 21February2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -21,7 +21,7 @@ ! Palau (Put on break due to too many whitelistings being needed) !!!||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~gopass.pw|~vost.pw|~core.pw|~bittor.pw|~plutonium.pw|~nitter.pw|~kge.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||top^$domain=~caitlin.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~mastodon.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top +||top^$domain=~caitlin.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~mastodon.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~pegelinux.top ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^ !!!||agency^$domain=~battlefield.agency|~baam.agency|~robotzebra.agency|~uphotel.agency|~ws.agency (Can't remember the last time I saw it used in a redirection train.) @@ -54,7 +54,7 @@ www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,googl www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"])) www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*=".gdn/"]):not([href*="cst.gdn"], [href*="pss.gdn"]) www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*=".bid/"]) -www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"])) +www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"], [href*="pegelinux.top"])) ! ——— You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. ——— www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws#?#.g:has(a[href*=".php?xxx="]) @@ -96,7 +96,7 @@ www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,googl www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws##*:has(> * > a[oncontextmenu][href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="ws.agency"])) www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws##*:has(> * > a[oncontextmenu][href*=".gdn/"]:not([href*="cst.gdn"], [href*="pss.gdn"])) www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws##*:has(> * > a[oncontextmenu][href*=".bid/"]) -www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws##*:has(> * > a[oncontextmenu][href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"])) +www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws##*:has(> * > a[oncontextmenu][href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"], [href*="pegelinux.top"])) www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws##*:has(> * > a[oncontextmenu][href*=".php?xxx="]) www.google.com,google.ac,google.ad,google.ae,google.af,google.ag,google.al,google.am,google.as,google.at,google.az,google.ba,google.be,google.bf,google.bg,google.bi,google.bj,google.bs,google.bt,google.by,google.ca,google.cat,google.cc,google.cd,google.cf,google.cg,google.ch,google.ci,google.cl,google.cm,google.cn,google.co.ao,google.co.bw,google.co.ck,google.co.cr,google.co.hu,google.co.id,google.co.il,google.co.im,google.co.in,google.co.je,google.co.jp,google.co.ke,google.co.kr,google.co.ls,google.co.ma,google.co.mz,google.co.nz,google.co.th,google.co.tz,google.co.ug,google.co.uk,google.co.uz,google.co.ve,google.co.vi,google.co.za,google.co.zm,google.co.zw,google.com.af,google.com.ag,google.com.ai,google.com.ar,google.com.au,google.com.bd,google.com.bh,google.com.bn,google.com.bo,google.com.br,google.com.by,google.com.bz,google.com.cn,google.com.co,google.com.cu,google.com.cy,google.com.do,google.com.ec,google.com.eg,google.com.et,google.com.fj,google.com.ge,google.com.gh,google.com.gi,google.com.gr,google.com.gt,google.com.hk,google.com.iq,google.com.jm,google.com.jo,google.com.kh,google.com.kw,google.com.lb,google.com.ly,google.com.mm,google.com.mt,google.com.mx,google.com.my,google.com.na,google.com.nf,google.com.ng,google.com.ni,google.com.np,google.com.nr,google.com.om,google.com.pa,google.com.pe,google.com.pg,google.com.ph,google.com.pk,google.com.pl,google.com.pr,google.com.py,google.com.qa,google.com.ru,google.com.sa,google.com.sb,google.com.sg,google.com.sl,google.com.sv,google.com.tj,google.com.tn,google.com.tr,google.com.tw,google.com.ua,google.com.uy,google.com.vc,google.com.ve,google.com.vn,google.cv,google.cz,google.de,google.dj,google.dk,google.dm,google.dz,google.ee,google.es,google.eus,google.fi,google.fm,google.fr,google.frl,google.ga,google.gal,google.ge,google.gg,google.gl,google.gm,google.gp,google.gr,google.gy,google.hk,google.hn,google.hr,google.ht,google.hu,google.ie,google.im,google.in,google.info,google.iq,google.ir,google.is,google.it,google.je,google.jo,google.jp,google.kg,google.ki,google.kz,google.la,google.li,google.lk,google.lt,google.lu,google.lv,google.md,google.me,google.mg,google.mk,google.ml,google.mn,google.ms,google.mu,google.mv,google.mw,google.ne,google.net,google.ng,google.nl,google.no,google.nr,google.nu,google.pk,google.pl,google.pn,google.ps,google.pt,google.ro,google.rs,google.ru,google.rw,google.sc,google.se,google.sh,google.si,google.sk,google.sm,google.sn,google.so,google.sr,google.st,google.td,google.tg,google.tk,google.tl,google.tm,google.tn,google.to,google.tt,google.ua,google.us,google.uz,google.vg,google.vu,google.ws##*:has(> * > a[oncontextmenu][href^="https://books.google."]) @@ -109,7 +109,7 @@ duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[ duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"])) duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".gdn/"]):not([href*="cst.gdn"], [href*="pss.gdn"]) duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".bid/"]) -duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"])) +duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"], [href*="pegelinux.top"])) ! ——— For Bing ——— bing.com#?#.b_algo:has(a[href*=".gq/"]:not([href*="inege.gq"], [href*="tvgelive.gq"], [href*="siteproxy.gq"], [href*="blockly.gq"])) @@ -119,7 +119,7 @@ bing.com#?#.b_algo:has(a[href*=".loan/"]) bing.com#?#.b_algo:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"])) bing.com#?#.b_algo:has(a[href*=".gdn/"]):not([href*="cst.gdn"], [href*="pss.gdn"]) bing.com#?#.b_algo:has(a[href*=".bid/"]) -bing.com#?#.b_algo:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"])) +bing.com#?#.b_algo:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"], [href*="pegelinux.top"])) ! ——— Old dead tech-related domains ——— ! Domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. @@ -489,8 +489,6 @@ play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href$ ||ubuntu.org^$domain=~you-were-likely-looking-for-ubuntu.com ||103.224.212.249^ ||speedtest.com^$domain=~you-were-likely-looking-for-speedtest.net -||kelkoogroup.net^ -||kelkoogroup.net^$popup,~inline-font,domain=~fake-malware-version-of-kelkoogroup.com ||snapchat.cm^$domain=~malware-typo-squatter-of-snapchat.com ||facebook.cm^$domain=~malware-typo-squatter-of-facebook.com ||wix.cm^$domain=~malware-typo-squatter-of-wix.com @@ -34082,6 +34080,808 @@ zombooru.com##a[href="http://www.hard55.com"] ||monetrizer*.$popup ||38.180.96.244^ ||38.180.96.244^$popup +! https://github.com/AdguardTeam/AdguardFilters/issues/172569 +||acareewityjh.com^ +||acareewityjh.com^$popup +||accedenonre.xyz^ +||accedenonre.xyz^$popup +||adeditiontowritingef.net^ +||adeditiontowritingef.net^$popup +||adiingsinspiringt.net^ +||adiingsinspiringt.net^$popup +||adthereis.buzz^ +||adthereis.buzz^$popup +||ajorinryesopert.com^ +||ajorinryesopert.com^$popup +||ajorinryesoperty.com^ +||ajorinryesoperty.com^$popup +||alsoextraorduki.info^ +||alsoextraorduki.info^$popup +||aluationiamcur.com^ +||aluationiamcur.com^$popup +||alukizeiasnin.com^ +||alukizeiasnin.com^$popup +||amwoukrkskillso.com^ +||amwoukrkskillso.com^$popup +||anadthefoaedf.info^ +||anadthefoaedf.info^$popup +||ankingwithear.com^ +||ankingwithear.com^$popup +||aoldosgertyong.info^ +||aoldosgertyong.info^$popup +||ardoqxdinqucirei.info^ +||ardoqxdinqucirei.info^$popup +||arnofourgugtj.info^ +||arnofourgugtj.info^$popup +||arrowabhbtalst.info^ +||arrowabhbtalst.info^$popup +||arrowtoldilim.com^ +||arrowtoldilim.com^$popup +||artistictastesnly.info^ +||artistictastesnly.info^$popup +||asifiwoeryjtyj.info^ +||asifiwoeryjtyj.info^$popup +||asosettoourma.info^ +||asosettoourma.info^$popup +||aspectsofc.hair^ +||aspectsofc.hair^$popup +||asqerongtheco.info^ +||asqerongtheco.info^$popup +||astellihandl.xyz^ +||astellihandl.xyz^$popup + +||atabaseiwo.top^$popup +||atedlittleme.xyz^ +||atedlittleme.xyz^$popup +||ationiamcur.com^ +||ationiamcur.com^$popup +||ationslieemrger.info^ +||ationslieemrger.info^$popup +||atthewon.buzz^ +||atthewon.buzz^$popup +||aukndaspirati.com^ +||aukndaspirati.com^$popup +||aysesuretobea.com^ +||aysesuretobea.com^$popup +||baconaces.pro^ +||baconaces.pro^$popup +||biscussexbug.xyz^ +||biscussexbug.xyz^$popup +||blicatedlittle.xyz^ +||blicatedlittle.xyz^$popup +||bnfgnbheavynuo.info^ +||bnfgnbheavynuo.info^$popup +||britingsynt.xyz^ +||britingsynt.xyz^$popup +||careewituhinlarg.com^ +||careewituhinlarg.com^$popup +||cathyimmediates.xyz^ +||cathyimmediates.xyz^$popup +||cenceevent.club^ +||cenceevent.club^$popup +||choobinoobi.com^ +||choobinoobi.com^$popup +||comfortykive.xyz^ +||comfortykive.xyz^$popup +||compathered.xyz^ +||compathered.xyz^$popup +||connectedithco.com^ +||connectedithco.com^$popup +||consukultingeca.com^ +||consukultingeca.com^$popup +||conversitym.com^ +||conversitym.com^$popup +||councernedasesium.com^ +||councernedasesium.com^$popup +||dblueclaockbro.info^ +||dblueclaockbro.info^$popup +||declinerybelfa.buzz^ +||declinerybelfa.buzz^$popup +||dedalloverwithth.net^ +||dedalloverwithth.net^$popup +||dheircrhnerdgfd.info^ +||dheircrhnerdgfd.info^$popup +||directuklyecon.pics^ +||directuklyecon.pics^$popup +||disguishedbri.com^ +||disguishedbri.com^$popup +||dmanas.buzz^ +||dmanas.buzz^$popup +||dollapsedshe.info^ +||dollapsedshe.info^$popup +||donemileliondol.info^ +||donemileliondol.info^$popup +||dukerationpe.com^ +||dukerationpe.com^$popup +||dwouldmakefe.info^ +||dwouldmakefe.info^$popup +||eamsauknda.com^ +||eamsauknda.com^$popup +||eastfeukufunde.com^ +||eastfeukufunde.com^$popup +||ebelfarewesbegi.com^ +||ebelfarewesbegi.com^$popup +||echildren.buzz^ +||echildren.buzz^$popup +||econsultingcoem.com^ +||econsultingcoem.com^$popup +||ectresultofthep.info^ +||ectresultofthep.info^$popup +||edassiumw.xyz^ +||edassiumw.xyz^$popup +||editiontowrit.info^ +||editiontowrit.info^$popup +||edrubyglo.buzz^ +||edrubyglo.buzz^$popup +||edstevermotorie.com^ +||edstevermotorie.com^$popup +||edverys.buzz^ +||edverys.buzz^$popup +||eesihighlyrec.xyz^ +||eesihighlyrec.xyz^$popup +||efgrghhindhimi.info^ +||efgrghhindhimi.info^$popup +||efvtgbnanddescri.info^ +||efvtgbnanddescri.info^$popup +||ehappy.buzz^ +||ehappy.buzz^$popup +||eighing.space^ +||eighing.space^$popup +||eisasbeau.buzz^ +||eisasbeau.buzz^$popup +||eitcuyjfromthe.info^ +||eitcuyjfromthe.info^$popup +||emydreamsa.com^ +||emydreamsa.com^$popup +||emyresumef.hair^ +||emyresumef.hair^$popup +||endream.buzz^ +||endream.buzz^$popup +||enectedithco.com^ +||enectedithco.com^$popup +||entoftheusysian.com^ +||entoftheusysian.com^$popup +||entsiwoulukdli.com^ +||entsiwoulukdli.com^$popup +||epededonemil.info^ +||epededonemil.info^$popup +||eredhadbeen.xyz^ +||eredhadbeen.xyz^$popup +||eretheseantyjyt.info^ +||eretheseantyjyt.info^$popup +||erpringash.xyz^ +||erpringash.xyz^$popup +||erukentaspectsof.com^ +||erukentaspectsof.com^$popup +||ervantasrelate.info^ +||ervantasrelate.info^$popup +||esterdayauol.info^ +||esterdayauol.info^$popup +||etingefifort.info^ +||etingefifort.info^$popup +||etingplansfo.buzz^ +||etingplansfo.buzz^$popup +||etorealiukzem.com^ +||etorealiukzem.com^$popup +||etyrthonrong.info^ +||etyrthonrong.info^$popup +||eukworektobe.pics^ +||eukworektobe.pics^$popup +||evenuewasadi.xyz^ +||evenuewasadi.xyz^$popup +||everefor.buzz^ +||everefor.buzz^$popup +||evermoto.xyz^ +||evermoto.xyz^$popup +||everwiththinleav.net^ +||everwiththinleav.net^$popup +||ewallowi.buzz^ +||ewallowi.buzz^$popup +||ewmeofmukindwo.com^ +||ewmeofmukindwo.com^$popup +||ewoverth.buzz^ +||ewoverth.buzz^$popup +||ewrevenuewasad.info^ +||ewrevenuewasad.info^$popup +||exibilitukydtea.xyz^ +||exibilitukydtea.xyz^$popup +||forgotteddisgui.com^ +||forgotteddisgui.com^$popup +||fortdaukthw.hair^ +||fortdaukthw.hair^$popup +||fukermalasas.info^ +||fukermalasas.info^$popup +||getnizationedr.info^ +||getnizationedr.info^$popup +||getseavailan.xyz^ +||getseavailan.xyz^$popup +||gettllingovert.info^ +||gettllingovert.info^$popup +||goveragemlz.club^ +||goveragemlz.club^$popup +||gtdjidencenha.info^ +||gtdjidencenha.info^$popup +||gukthwaalsoex.info^ +||gukthwaalsoex.info^$popup +||hableleader.xyz^ +||hableleader.xyz^$popup +||hatwasallokmv.info^ +||hatwasallokmv.info^$popup +||heinndonfgnorh.info^ +||heinndonfgnorh.info^$popup +||heodeidsofhnm.info^ +||heodeidsofhnm.info^$popup +||hereabithec.xyz^ +||hereabithec.xyz^$popup +||himloabercuacroos.info^ +||himloabercuacroos.info^$popup +||historiousmor.xyz^ +||historiousmor.xyz^$popup +||hoisquit.buzz^ +||hoisquit.buzz^$popup +||houldthinkh.buzz^ +||houldthinkh.buzz^$popup +||humanske.space^ +||humanske.space^$popup +||iamcurrently.com^ +||iamcurrently.com^$popup +||iasninancuka.com^ +||iasninancuka.com^$popup +||ibilitukydteamw.com^ +||ibilitukydteamw.com^$popup +||ictastesnly.buzz^ +||ictastesnly.buzz^$popup +||ifefashionismscold.com^ +||ifefashionismscold.com^$popup +||ileesidesu.hair^ +||ileesidesu.hair^$popup +||inarilyhukel.info^ +||inarilyhukel.info^$popup +||ingforanopportu.com^ +||ingforanopportu.com^$popup +||inghesatin.com^ +||inghesatin.com^$popup +||ingspondingco.com^ +||ingspondingco.com^$popup +||iolintohimselfas.info^ +||iolintohimselfas.info^$popup +||ionakasulbackgrou.com^ +||ionakasulbackgrou.com^$popup +||ionscormatio.com^ +||ionscormatio.com^$popup +||iratiotyuknsye.com^ +||iratiotyuknsye.com^$popup +||ishnfguseaches.info^ +||ishnfguseaches.info^$popup +||itearamajo.com^ +||itearamajo.com^$popup +||jhldtogerghottulering.info^ +||jhldtogerghottulering.info^$popup +||jlkladirtlseivi.info^ +||jlkladirtlseivi.info^$popup +||jtffjwecouldle.info^ +||jtffjwecouldle.info^$popup +||kabuukimuuki.com^ +||kabuukimuuki.com^$popup +||kectivetraining.info^ +||kectivetraining.info^$popup +||kefeagreatase.info^ +||kefeagreatase.info^$popup +||kelpmetoreali.com^ +||kelpmetoreali.com^$popup +||kentinedaug.xyz^ +||kentinedaug.xyz^$popup +||kenwellsgrpo.com^ +||kenwellsgrpo.com^$popup +||kitwkuouldhukel.xyz^ +||kitwkuouldhukel.xyz^$popup +||kmodukuleqasfo.info^ +||kmodukuleqasfo.info^$popup +||kmyunderth.com^ +||kmyunderth.com^$popup +||kolpihvfongrou.info^ +||kolpihvfongrou.info^$popup +||krkskillsombin.com^ +||krkskillsombin.com^$popup +||ksehinkitw.hair^ +||ksehinkitw.hair^$popup +||ktobedirectu.xyz^ +||ktobedirectu.xyz^$popup +||ktobedirectuklye.com^ +||ktobedirectuklye.com^$popup +||lattemptaqwe.club^ +||lattemptaqwe.club^$popup +||lemopaserawecas.com^ +||lemopaserawecas.com^$popup +||leqasforsalesrep.info^ +||leqasforsalesrep.info^$popup +||liondolularhene.info^ +||liondolularhene.info^$popup +||liukzemydream.com^ +||liukzemydream.com^$popup +||llsombineukdwit.com^ +||llsombineukdwit.com^$popup +||longmansuchcesu.com^ +||longmansuchcesu.com^$popup +||ltingecauyuksehi.com^ +||ltingecauyuksehi.com^$popup +||lubinoobi.com^ +||lubinoobi.com^$popup +||majorinryes.com^ +||majorinryes.com^$popup +||majorinryesopert.com^ +||majorinryesopert.com^$popup +||manisation.org^ +||manisation.org^$popup +||mcurrentlysearc.com^ +||mcurrentlysearc.com^$popup +||mediatesupervis.com^ +||mediatesupervis.com^$popup +||mementrandingsw.com^ +||mementrandingsw.com^$popup +||mentbradshed.com^ +||mentbradshed.com^$popup +||mentrandingswon.com^ +||mentrandingswon.com^$popup +||mentseconom.xyz^ +||mentseconom.xyz^$popup +||miredindeed.net^ +||miredindeed.net^$popup +||mnndnnbnn.com^ +||mnndnnbnn.com^$popup +||monopolicycr.com^ +||monopolicycr.com^$popup +||mplayeranydw.net^ +||mplayeranydw.net^$popup +||muheodeidsoan.info^ +||muheodeidsoan.info^$popup +||mwoukrkskills.xyz^ +||mwoukrkskills.xyz^$popup +||myxomater.space^ +||myxomater.space^$popup +||mzsdeauxdwh.info^ +||mzsdeauxdwh.info^$popup + +||naborutmyrq.top^$popup +||nahrghhaondb.info^ +||nahrghhaondb.info^$popup +||natallcolumnsto.info^ +||natallcolumnsto.info^$popup +||ncelewasgildeda.net^ +||ncelewasgildeda.net^$popup +||ncukanking.com^ +||ncukanking.com^$popup +||ndandinter.hair^ +||ndandinter.hair^$popup +||ndeedeisasbeautiful.net^ +||ndeedeisasbeautiful.net^$popup +||ndencesch.xyz^ +||ndencesch.xyz^$popup +||ndsragedwithb.info^ +||ndsragedwithb.info^$popup +||nedtolethimbevx.com^ +||nedtolethimbevx.com^$popup +||nereherewetem.info^ +||nereherewetem.info^$popup +||nerewdeerofhi.info^ +||nerewdeerofhi.info^$popup +||nergyflexibilit.pics^ +||nergyflexibilit.pics^$popup +||nerybelfaste.xyz^ +||nerybelfaste.xyz^$popup +||neukdwithmefe.com^ +||neukdwithmefe.com^$popup +||ngswonden.xyz^ +||ngswonden.xyz^$popup +||nkingwitheaam.com^ +||nkingwitheaam.com^$popup +||nkitwkuouldhu.com^ +||nkitwkuouldhu.com^$popup +||nmabigyello.xyz^ +||nmabigyello.xyz^$popup +||nonimoomi.com^ +||nonimoomi.com^$popup +||nopportunitytostar.com^ +||nopportunitytostar.com^$popup +||normaticalaccu.com^ +||normaticalaccu.com^$popup +||notquiteso.buzz^ +||notquiteso.buzz^$popup +||nowledconsideu.com^ +||nowledconsideu.com^$popup +||npracticalwhic.buzz^ +||npracticalwhic.buzz^$popup +||nryesopertyv.com^ +||nryesopertyv.com^$popup +||ntaspectsofcukorp.com^ +||ntaspectsofcukorp.com^$popup +||ntheworldw.buzz^ +||ntheworldw.buzz^$popup +||ntualkentined.xyz^ +||ntualkentined.xyz^$popup +||nverewereal.info^ +||nverewereal.info^$popup +||oathihakennails.info^ +||oathihakennails.info^$popup +||oefanyorbesttn.info^ +||oefanyorbesttn.info^$popup +||ofchildr.buzz^ +||ofchildr.buzz^$popup +||offerentlyport.xyz^ +||offerentlyport.xyz^$popup +||ojapanelm.xyz^ +||ojapanelm.xyz^$popup +||omefukmendat.xyz^ +||omefukmendat.xyz^$popup +||onalhedgelnham.com^ +||onalhedgelnham.com^$popup +||onopolicycr.xyz^ +||onopolicycr.xyz^$popup +||onopolicycreat.com^ +||onopolicycreat.com^$popup +||onsukultingecauy.com^ +||onsukultingecauy.com^$popup +||oratefinaukn.xyz^ +||oratefinaukn.xyz^$popup +||oratefinauknceiwo.com^ +||oratefinauknceiwo.com^$popup +||ordukinarilyhu.info^ +||ordukinarilyhu.info^$popup +||osiextantlyvfhn.info^ +||osiextantlyvfhn.info^$popup +||otheruigfsfohi.info^ +||otheruigfsfohi.info^$popup +||oughtanothingfruitie.net^ +||oughtanothingfruitie.net^$popup +||oukfareputfeablean.com^ +||oukfareputfeablean.com^$popup +||ouldlikukemyfu.com^ +||ouldlikukemyfu.com^$popup +||ourmarketingefi.info^ +||ourmarketingefi.info^$popup +||ovogofteonafterw.info^ +||ovogofteonafterw.info^$popup +||panyinadiingsinspi.com^ +||panyinadiingsinspi.com^$popup +||placugceofres.info^ +||placugceofres.info^$popup +||playeranydwould.info^ +||playeranydwould.info^$popup +||ploddingtotogcb.info^ +||ploddingtotogcb.info^$popup +||pmetorealiukze.xyz^ +||pmetorealiukze.xyz^$popup +||pohsoneche.info^ +||pohsoneche.info^$popup +||precially.space^ +||precially.space^$popup +||pringed.space^ +||pringed.space^$popup +||puldhukelpmet.com^ +||puldhukelpmet.com^$popup +||racterdeilbsweet.info^ +||racterdeilbsweet.info^$popup +||rainingukmod.info^ +||rainingukmod.info^$popup +||ratiotyuknsye.pics^ +||ratiotyuknsye.pics^$popup +||rbiscussexb.xyz^ +||rbiscussexb.xyz^$popup +||reamsan.buzz^ +||reamsan.buzz^$popup +||reckedmane.xyz^ +||reckedmane.xyz^$popup +||rentlysearchin.com^ +||rentlysearchin.com^$popup +||responsidejo.xyz^ +||responsidejo.xyz^$popup +||rgentssep.xyz^ +||rgentssep.xyz^$popup +||rgyflexibilitu.com^ +||rgyflexibilitu.com^$popup +||ricewaterhou.xyz^ +||ricewaterhou.xyz^$popup +||ritingsynther.com^ +||ritingsynther.com^$popup +||rthfeoveukrnme.com^ +||rthfeoveukrnme.com^$popup +||runkingoutinteah.info^ +||runkingoutinteah.info^$popup +||ruralled.space^ +||ruralled.space^$popup +||rurelanderpurgan.com^ +||rurelanderpurgan.com^$popup +||salesrepreswse.info^ +||salesrepreswse.info^$popup +||sandothesooile.info^ +||sandothesooile.info^$popup +||searchforanop.com^ +||searchforanop.com^$popup +||seemyresumefo.com^ +||seemyresumefo.com^$popup +||seinpoundaymid.com^ +||seinpoundaymid.com^$popup +||semblyjustingex.com^ +||semblyjustingex.com^$popup +||seoopersedu.xyz^ +||seoopersedu.xyz^$popup +||shoecamedmghm.info^ +||shoecamedmghm.info^$popup +||sihighlyrecom.xyz^ +||sihighlyrecom.xyz^$popup +||smetotrea.xyz^ +||smetotrea.xyz^$popup +||smurtyards.space^ +||smurtyards.space^$popup +||ssdwellsgrpo.info^ +||ssdwellsgrpo.info^$popup +||starvardsee.xyz^ +||starvardsee.xyz^$popup +||stellihandles.hair^ +||stellihandles.hair^$popup +||subsectivexe.xyz^ +||subsectivexe.xyz^$popup +||sultingcoe.buzz^ +||sultingcoe.buzz^$popup +||swordhilte.buzz^ +||swordhilte.buzz^$popup +||sysianedukera.com^ +||sysianedukera.com^$popup +||taitlastwebegan.com^ +||taitlastwebegan.com^$popup +||tasesetitoefany.info^ +||tasesetitoefany.info^$popup +||tbrohwnmyest.info^ +||tbrohwnmyest.info^$popup +||tebilaterde.xyz^ +||tebilaterde.xyz^$popup +||tedithconsukult.com^ +||tedithconsukult.com^$popup +||tesupervis.hair^ +||tesupervis.hair^$popup +||texcepededo.info^ +||texcepededo.info^$popup +||tfoollowingba.info^ +||tfoollowingba.info^$popup +||tgandmotivat.com^ +||tgandmotivat.com^$popup +||thaitingshos.xyz^ +||thaitingshos.xyz^$popup +||thaoheakolons.info^ +||thaoheakolons.info^$popup +||thegravehthh.info^ +||thegravehthh.info^$popup +||theharityhild.buzz^ +||theharityhild.buzz^$popup +||theparlornextthef.com^ +||theparlornextthef.com^$popup +||thrememboer.info^ +||thrememboer.info^$popup +||ticaframeofm.xyz^ +||ticaframeofm.xyz^$popup +||tionpecialukizei.com^ +||tionpecialukizei.com^$popup +||tivatingotheremplo.com^ +||tivatingotheremplo.com^$popup +||toftheca.buzz^ +||toftheca.buzz^$popup +||tooaastandhei.info^ +||tooaastandhei.info^$popup +||toolsahoulofd.info^ +||toolsahoulofd.info^$popup +||tostaracare.com^ +||tostaracare.com^$popup +||tsapphires.buzz^ +||tsapphires.buzz^$popup +||tuallyenitwasbr.com^ +||tuallyenitwasbr.com^$popup +||tunitytostara.com^ +||tunitytostara.com^$popup +||tureukwore.xyz^ +||tureukwore.xyz^$popup +||tydevelelastic.com^ +||tydevelelastic.com^$popup +||tyyeastfeukufund.com^ +||tyyeastfeukufund.com^$popup +||uadthenborea.info^ +||uadthenborea.info^$popup +||uchadmir.buzz^ +||uchadmir.buzz^$popup +||uewasadirectresu.info^ +||uewasadirectresu.info^$popup +||ughtsustacheds.com^ +||ughtsustacheds.com^$popup +||uinground.com^ +||uinground.com^$popup +||ukelpmetoreali.pics^ +||ukelpmetoreali.pics^$popup +||ukentaspe.xyz^ +||ukentaspe.xyz^$popup +||ukindwouldm.xyz^ +||ukindwouldm.xyz^$popup +||ukrnmentofth.com^ +||ukrnmentofth.com^$popup +||ukseseemyres.xyz^ +||ukseseemyres.xyz^$popup +||uktureukworekto.com^ +||uktureukworekto.com^$popup +||ukwasanasosetet.net^ +||ukwasanasosetet.net^$popup +||ularhenewrev.info^ +||ularhenewrev.info^$popup +||ulyhvfadchos.info^ +||ulyhvfadchos.info^$popup +||umeformorede.xyz^ +||umeformorede.xyz^$popup +||upervisofosev.xyz^ +||upervisofosev.xyz^$popup +||uuksehinkitwkuo.com^ +||uuksehinkitwkuo.com^$popup +||uwledconside.xyz^ +||uwledconside.xyz^$popup +||uytdwhitdoe.info^ +||uytdwhitdoe.info^$popup +||uyuksehinkitwku.com^ +||uyuksehinkitwku.com^$popup +||vbriverafter.xyz^ +||vbriverafter.xyz^$popup +||verwiththinleave.net^ +||verwiththinleave.net^$popup +||wasanasosett.info^ +||wasanasosett.info^$popup +||wasanasset.buzz^ +||wasanasset.buzz^$popup +||wedonhisdhiltew.info^ +||wedonhisdhiltew.info^$popup +||withmefeyauknaly.com^ +||withmefeyauknaly.com^$popup +||wukbgater.buzz^ +||wukbgater.buzz^$popup +||yauknalyticafra.com^ +||yauknalyticafra.com^$popup +||yhukelpfulinot.info^ +||yhukelpfulinot.info^$popup +||yidbyhersle.xyz^ +||yidbyhersle.xyz^$popup +||yremovementxv.com^ +||yremovementxv.com^$popup +||ysearchingfo.xyz^ +||ysearchingfo.xyz^$popup +||yticaframeofm.com^ +||yticaframeofm.com^$popup +||yvaluationiamcur.com^ +||yvaluationiamcur.com^$popup +||34.195.224.242^ +||34.195.224.242^$popup +||54.225.185.110^ +||54.225.185.110^$popup +&lp=not_robot_ +&lp=not_robot_$popup +! A fake "GitHub" "job" offer I woke up to in an old issue thread +||githubtalentcommunity. +||githubtalentcommunity.$popup +||csa-github.com^ +||csa-github.com^$popup +||ghaestatus. +||ghaestatus.$popup +||ghconduit. +||ghconduit.$popup +||ghe-cluster.com^ +||ghe-cluster.com^$popup +||ghestatus.com^ +||ghestatus.com^$popup +||ghub.com^ +||ghub.com^$popup +||gisthub.com^ +||gisthub.com^$popup +||git-hub.com^ +||git-hub.com^$popup +||gitgub.com^ +||gitgub.com^$popup +||github-awards. +||github-awards.$popup +||github-camo. +||github-camo.$popup +||github-nel.com^ +||github-nel.com^$popup +||github-servicedesk. +||github-servicedesk.$popup +||github-sso.com^ +||github-sso.com^$popup +||github-staging-lab. +||github-staging-lab.$popup +||githubarchive. +||githubarchive.$popup +||githubazure. +||githubazure.$popup +||githubber. +||githubber.$popup +||githubbrazil.com^ +||githubbrazil.com^$popup +||githubcloud.com^ +||githubcloud.com^$popup +||githubcloudusercontent. +||githubcloudusercontent.$popup +||githubcopilot. +||githubcopilot.$popup +||githubcorp. +||githubcorp.$popup +||githubenterprise. +||githubenterprise.$popup +||githubfi.com^ +||githubfi.com^$popup +||githubfitest. +||githubfitest.$popup +||githubflow.com^ +||githubflow.com^$popup +||githubhot.com^ +||githubhot.com^$popup +||githubinc. +||githubinc.$popup +||githubmaccloud. +||githubmaccloud.$popup +||githubpages. +||githubpages.$popup +||githubpartners. +||githubpartners.$popup +||githubsecurity.com^ +||githubsecurity.com^$popup +||githubway. +||githubway.$popup +||githubwebhooks.com^ +||githubwebhooks.com^$popup +||gitlfs.com^ +||gitlfs.com^$popup +||gitmerge.com^ +||gitmerge.com^$popup +||gitpages.com^ +||gitpages.com^$popup +||gitref. +||gitref.$popup +||gitsmart.com^ +||gitsmart.com^$popup +||gitsplosion.com^ +||gitsplosion.com^$popup +||gittogether. +||gittogether.$popup +||guthub.com^ +||guthub.com^$popup +||hackathonhowto.com^ +||hackathonhowto.com^$popup +||http-npmjs. +||http-npmjs.$popup +||javascriptsurvey.com^ +||javascriptsurvey.com^$popup +||looksgoodtome.com^ +||looksgoodtome.com^$popup +||meetgit.com^ +||meetgit.com^$popup +||nnmjs.info^ +||nnmjs.info^$popup +||nnmjs.net^ +||nnmjs.net^$popup +||nnmjs.org^ +||nnmjs.org^$popup +||npmcamp.com^ +||npmcamp.com^$popup +||npmjs-www. +||npmjs-www.$popup +||npmjs.app^ +||npmjs.app^$popup +||npmjs.site^ +||npmjs.site^$popup +||npmms.com^ +||npmms.com^$popup +||nqmjs.com^ +||nqmjs.com^$popup +||www-npmjs. +||www-npmjs.$popup +||140.82.112.18^ +||140.82.112.18^$popup +||140.82.112.17^ +||140.82.112.17^$popup +||[2a09:8280:1::2b:3bcb:0]^ +||[2a09:8280:1::2b:3bcb:0]^$popup ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -44490,6 +45290,69 @@ tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[dat ! Laughably blatant fraud site ||cosercosplay.com^ ||cosercosplay.com^$popup +! Fraudulent art thefts for money on Google Image Search, e.g. 'cassandra tangled site:tumblr.com suit' +*yo.php?cname=*&cid= +*yo.php?cname=*&cid=$popup +.aspx?iid=*&cid= +.aspx?iid=*&cid=$popup +.aspx?cname=*&cid= +.aspx?cname=*&cid=$popup +/shop.php?iid= +/shop.php?iid=$popup +/\.[a-z]{2,18}\/Stars\.php\?/$all +||asptryfa.info^ +||asptryfa.info^$popup +||awpasslong.info^ +||awpasslong.info^$popup +||butheadstar.info^ +||butheadstar.info^$popup +||coxskihem.info^ +||coxskihem.info^$popup +||dealribrisk.info^ +||dealribrisk.info^$popup +||gameguyper.info^ +||gameguyper.info^$popup +||jugfindlie.info^ +||jugfindlie.info^$popup +||kidroleland.info^ +||kidroleland.info^$popup +||seedlogoonce.info^ +||seedlogoonce.info^$popup +||sirdayscare.info^ +||sirdayscare.info^$popup +||slownansuch.info^ +||slownansuch.info^$popup +||185.155.184.57^ +||185.155.184.57^$popup +||185.155.186.24^ +||185.155.186.24^$popup +||usayn.fr^ +||usayn.fr^$popup +||style-js.com^ +||style-js.com^$popup +/a.aspx?cid=*&cname=^ +/a.aspx?cid=*&cname=^$popup +||209.74.107.131^ +||209.74.107.131^$popup +||qidjrsgroup.shop^ +||qidjrsgroup.shop^$popup +/flying.asp?cid= +/flying.asp?cid=$popup +/kjyo.php?cname= +/kjyo.php?cname=$popup +/flying?cid=*&keywords= +/flying?cid=*&keywords=$popup +.php?iid=*&cid= +.asp?iid=*&cid= +||estudioespositoymiguel.com.ar^ +||estudioespositoymiguel.com.ar^$popup +||juerfe.buzz^ +||juerfe.buzz^$popup +.med.br/?q=artstation- +/artstation-*-[fanart]-,domain=~artstation.com +=artstation-*-[fanart]-,domain=~artstation.com +||yasaracarfenlisesi.com^ +||yasaracarfenlisesi.com^$popup ! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index fd675954e..12b7db205 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 30January2024v1 +! Version: 21February2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -20,7 +20,7 @@ ! Palau (Put on break due to too many whitelistings being needed) !!!||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~buttercup.pw|~rezka.pw|~darkcrystal.pw|~xor.pw|~fullhdfilmizlesene.pw|~gopass.pw|~vost.pw|~core.pw|~bittor.pw|~plutonium.pw|~nitter.pw|~kge.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||top^$document,domain=~caitlin.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~mastodon.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top +||top^$document,domain=~caitlin.top|~corriente.top|~gdtot.top|~nicenature.top|~reminder.top|~magocoro.top|~castlevania.top|~suiten.top|~shucks.top|~1stream.top|~ambr.top|~techblog.top|~changlam10.top|~changlam11.top|~pdcdn1.top|~mastodon.top|~pressplay.top|~chillx.top|~strims.top|~thedesk.top|~audioforyou.top|~pegelinux.top ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||loan^$document !!!||agency^$document,domain=~battlefield.agency|~baam.agency|~robotzebra.agency|~uphotel.agency|~ws.agency (Can't remember the last time I saw it used in a redirection train.) @@ -54,7 +54,7 @@ www.google.*##.g:has(a[href*=".loan/"]) www.google.*##.g:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"])) www.google.*##.g:has(a[href*=".gdn/"]):not([href*="cst.gdn"], [href*="pss.gdn"]) www.google.*##.g:has(a[href*=".bid/"]) -www.google.*##.g:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"])) +www.google.*##.g:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"], [href*="pegelinux.top"])) ! ——— You know those ultra-fraudulent auto-generated things that clutter up Google searches? These entries should remove some of them. ——— www.google.*##.g:has(a[href*=".php?xxx="]) @@ -97,7 +97,7 @@ www.google.*##*:has(> * > a[oncontextmenu][href*=".loan/"]) www.google.*##*:has(> * > a[oncontextmenu][href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="ws.agency"])) www.google.*##*:has(> * > a[oncontextmenu][href*=".gdn/"]:not([href*="cst.gdn"], [href*="pss.gdn"])) www.google.*##*:has(> * > a[oncontextmenu][href*=".bid/"]) -www.google.*##*:has(> * > a[oncontextmenu][href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"])) +www.google.*##*:has(> * > a[oncontextmenu][href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"], [href*="pegelinux.top"])) www.google.*##*:has(> * > a[oncontextmenu][href*=".php?xxx="]) www.google.*##*:has(> * > a[oncontextmenu][href^="https://books.google."]) !#endif @@ -110,7 +110,7 @@ duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[ duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"])) duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".gdn/"]):not([href*="cst.gdn"], [href*="pss.gdn"]) duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".bid/"]) -duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"])) +duckduckgo.com,duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion##[data-nrn="result"]:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"], [href*="pegelinux.top"])) ! ——— For Bing ——— bing.com##.b_algo:has(a[href*=".gq/"]:not([href*="inege.gq"], [href*="tvgelive.gq"], [href*="siteproxy.gq"], [href*="blockly.gq"])) @@ -120,7 +120,7 @@ bing.com##.b_algo:has(a[href*=".loan/"]) bing.com##.b_algo:has(a[href*=".agency/"]:not([href*="battlefield.agency"], [href*="baam.agency"], [href*="uphotel.agency"], [href*="robotzebra.agency"], [href*="ws.agency"])) bing.com##.b_algo:has(a[href*=".gdn/"]):not([href*="cst.gdn"], [href*="pss.gdn"]) bing.com##.b_algo:has(a[href*=".bid/"]) -bing.com##.b_algo:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"])) +bing.com##.b_algo:has(a[href*=".top/"]:not([href*="caitlin.top"], [href*="corriente.top"], [href*="gdtot.top"], [href*="nicenature.top"], [href*="reminder.top"], [href*="magocoro.top"], [href*="castlevania.top"], [href*="suiten.top"], [href*="shucks.top"], [href*="1stream.top"], [href*="ambr.top"], [href*="techblog.top"], [href*="mastodon.top"], [href*="pressplay.top"], [href*="strims.top"], [href*="thedesk.top"], [href*="pegelinux.top"])) ! ——— Old dead tech-related domains ——— ! Domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. @@ -474,7 +474,6 @@ play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href$ ||ubuntu.org^$document,domain=~you-were-likely-looking-for-ubuntu.com 103.224.212.249$network ||speedtest.com^$document,domain=~you-were-likely-looking-for-speedtest.net -||kelkoogroup.net^$all,~inline-font,domain=~fake-malware-version-of-kelkoogroup.com ||snapchat.cm^$document,domain=~malware-typo-squatter-of-snapchat.com ||facebook.cm^$document,domain=~malware-typo-squatter-of-facebook.com ||wix.cm^$document,domain=~malware-typo-squatter-of-wix.com @@ -17620,6 +17619,408 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 ||monetrizer*.$all 38.180.96.244$network +! https://github.com/AdguardTeam/AdguardFilters/issues/172569 +||acareewityjh.com^$all +||accedenonre.xyz^$all +||adeditiontowritingef.net^$all +||adiingsinspiringt.net^$all +||adthereis.buzz^$all +||ajorinryesopert.com^$all +||ajorinryesoperty.com^$all +||alsoextraorduki.info^$all +||aluationiamcur.com^$all +||alukizeiasnin.com^$all +||amwoukrkskillso.com^$all +||anadthefoaedf.info^$all +||ankingwithear.com^$all +||aoldosgertyong.info^$all +||ardoqxdinqucirei.info^$all +||arnofourgugtj.info^$all +||arrowabhbtalst.info^$all +||arrowtoldilim.com^$all +||artistictastesnly.info^$all +||asifiwoeryjtyj.info^$all +||asosettoourma.info^$all +||aspectsofc.hair^$all +||asqerongtheco.info^$all +||astellihandl.xyz^$all + +||atedlittleme.xyz^$all +||ationiamcur.com^$all +||ationslieemrger.info^$all +||atthewon.buzz^$all +||aukndaspirati.com^$all +||aysesuretobea.com^$all +||baconaces.pro^$all +||biscussexbug.xyz^$all +||blicatedlittle.xyz^$all +||bnfgnbheavynuo.info^$all +||britingsynt.xyz^$all +||careewituhinlarg.com^$all +||cathyimmediates.xyz^$all +||cenceevent.club^$all +||choobinoobi.com^$all +||comfortykive.xyz^$all +||compathered.xyz^$all +||connectedithco.com^$all +||consukultingeca.com^$all +||conversitym.com^$all +||councernedasesium.com^$all +||dblueclaockbro.info^$all +||declinerybelfa.buzz^$all +||dedalloverwithth.net^$all +||dheircrhnerdgfd.info^$all +||directuklyecon.pics^$all +||disguishedbri.com^$all +||dmanas.buzz^$all +||dollapsedshe.info^$all +||donemileliondol.info^$all +||dukerationpe.com^$all +||dwouldmakefe.info^$all +||eamsauknda.com^$all +||eastfeukufunde.com^$all +||ebelfarewesbegi.com^$all +||echildren.buzz^$all +||econsultingcoem.com^$all +||ectresultofthep.info^$all +||edassiumw.xyz^$all +||editiontowrit.info^$all +||edrubyglo.buzz^$all +||edstevermotorie.com^$all +||edverys.buzz^$all +||eesihighlyrec.xyz^$all +||efgrghhindhimi.info^$all +||efvtgbnanddescri.info^$all +||ehappy.buzz^$all +||eighing.space^$all +||eisasbeau.buzz^$all +||eitcuyjfromthe.info^$all +||emydreamsa.com^$all +||emyresumef.hair^$all +||endream.buzz^$all +||enectedithco.com^$all +||entoftheusysian.com^$all +||entsiwoulukdli.com^$all +||epededonemil.info^$all +||eredhadbeen.xyz^$all +||eretheseantyjyt.info^$all +||erpringash.xyz^$all +||erukentaspectsof.com^$all +||ervantasrelate.info^$all +||esterdayauol.info^$all +||etingefifort.info^$all +||etingplansfo.buzz^$all +||etorealiukzem.com^$all +||etyrthonrong.info^$all +||eukworektobe.pics^$all +||evenuewasadi.xyz^$all +||everefor.buzz^$all +||evermoto.xyz^$all +||everwiththinleav.net^$all +||ewallowi.buzz^$all +||ewmeofmukindwo.com^$all +||ewoverth.buzz^$all +||ewrevenuewasad.info^$all +||exibilitukydtea.xyz^$all +||forgotteddisgui.com^$all +||fortdaukthw.hair^$all +||fukermalasas.info^$all +||getnizationedr.info^$all +||getseavailan.xyz^$all +||gettllingovert.info^$all +||goveragemlz.club^$all +||gtdjidencenha.info^$all +||gukthwaalsoex.info^$all +||hableleader.xyz^$all +||hatwasallokmv.info^$all +||heinndonfgnorh.info^$all +||heodeidsofhnm.info^$all +||hereabithec.xyz^$all +||himloabercuacroos.info^$all +||historiousmor.xyz^$all +||hoisquit.buzz^$all +||houldthinkh.buzz^$all +||humanske.space^$all +||iamcurrently.com^$all +||iasninancuka.com^$all +||ibilitukydteamw.com^$all +||ictastesnly.buzz^$all +||ifefashionismscold.com^$all +||ileesidesu.hair^$all +||inarilyhukel.info^$all +||ingforanopportu.com^$all +||inghesatin.com^$all +||ingspondingco.com^$all +||iolintohimselfas.info^$all +||ionakasulbackgrou.com^$all +||ionscormatio.com^$all +||iratiotyuknsye.com^$all +||ishnfguseaches.info^$all +||itearamajo.com^$all +||jhldtogerghottulering.info^$all +||jlkladirtlseivi.info^$all +||jtffjwecouldle.info^$all +||kabuukimuuki.com^$all +||kectivetraining.info^$all +||kefeagreatase.info^$all +||kelpmetoreali.com^$all +||kentinedaug.xyz^$all +||kenwellsgrpo.com^$all +||kitwkuouldhukel.xyz^$all +||kmodukuleqasfo.info^$all +||kmyunderth.com^$all +||kolpihvfongrou.info^$all +||krkskillsombin.com^$all +||ksehinkitw.hair^$all +||ktobedirectu.xyz^$all +||ktobedirectuklye.com^$all +||lattemptaqwe.club^$all +||lemopaserawecas.com^$all +||leqasforsalesrep.info^$all +||liondolularhene.info^$all +||liukzemydream.com^$all +||llsombineukdwit.com^$all +||longmansuchcesu.com^$all +||ltingecauyuksehi.com^$all +||lubinoobi.com^$all +||majorinryes.com^$all +||majorinryesopert.com^$all +||manisation.org^$all +||mcurrentlysearc.com^$all +||mediatesupervis.com^$all +||mementrandingsw.com^$all +||mentbradshed.com^$all +||mentrandingswon.com^$all +||mentseconom.xyz^$all +||miredindeed.net^$all +||mnndnnbnn.com^$all +||monopolicycr.com^$all +||mplayeranydw.net^$all +||muheodeidsoan.info^$all +||mwoukrkskills.xyz^$all +||myxomater.space^$all +||mzsdeauxdwh.info^$all + +||nahrghhaondb.info^$all +||natallcolumnsto.info^$all +||ncelewasgildeda.net^$all +||ncukanking.com^$all +||ndandinter.hair^$all +||ndeedeisasbeautiful.net^$all +||ndencesch.xyz^$all +||ndsragedwithb.info^$all +||nedtolethimbevx.com^$all +||nereherewetem.info^$all +||nerewdeerofhi.info^$all +||nergyflexibilit.pics^$all +||nerybelfaste.xyz^$all +||neukdwithmefe.com^$all +||ngswonden.xyz^$all +||nkingwitheaam.com^$all +||nkitwkuouldhu.com^$all +||nmabigyello.xyz^$all +||nonimoomi.com^$all +||nopportunitytostar.com^$all +||normaticalaccu.com^$all +||notquiteso.buzz^$all +||nowledconsideu.com^$all +||npracticalwhic.buzz^$all +||nryesopertyv.com^$all +||ntaspectsofcukorp.com^$all +||ntheworldw.buzz^$all +||ntualkentined.xyz^$all +||nverewereal.info^$all +||oathihakennails.info^$all +||oefanyorbesttn.info^$all +||ofchildr.buzz^$all +||offerentlyport.xyz^$all +||ojapanelm.xyz^$all +||omefukmendat.xyz^$all +||onalhedgelnham.com^$all +||onopolicycr.xyz^$all +||onopolicycreat.com^$all +||onsukultingecauy.com^$all +||oratefinaukn.xyz^$all +||oratefinauknceiwo.com^$all +||ordukinarilyhu.info^$all +||osiextantlyvfhn.info^$all +||otheruigfsfohi.info^$all +||oughtanothingfruitie.net^$all +||oukfareputfeablean.com^$all +||ouldlikukemyfu.com^$all +||ourmarketingefi.info^$all +||ovogofteonafterw.info^$all +||panyinadiingsinspi.com^$all +||placugceofres.info^$all +||playeranydwould.info^$all +||ploddingtotogcb.info^$all +||pmetorealiukze.xyz^$all +||pohsoneche.info^$all +||precially.space^$all +||pringed.space^$all +||puldhukelpmet.com^$all +||racterdeilbsweet.info^$all +||rainingukmod.info^$all +||ratiotyuknsye.pics^$all +||rbiscussexb.xyz^$all +||reamsan.buzz^$all +||reckedmane.xyz^$all +||rentlysearchin.com^$all +||responsidejo.xyz^$all +||rgentssep.xyz^$all +||rgyflexibilitu.com^$all +||ricewaterhou.xyz^$all +||ritingsynther.com^$all +||rthfeoveukrnme.com^$all +||runkingoutinteah.info^$all +||ruralled.space^$all +||rurelanderpurgan.com^$all +||salesrepreswse.info^$all +||sandothesooile.info^$all +||searchforanop.com^$all +||seemyresumefo.com^$all +||seinpoundaymid.com^$all +||semblyjustingex.com^$all +||seoopersedu.xyz^$all +||shoecamedmghm.info^$all +||sihighlyrecom.xyz^$all +||smetotrea.xyz^$all +||smurtyards.space^$all +||ssdwellsgrpo.info^$all +||starvardsee.xyz^$all +||stellihandles.hair^$all +||subsectivexe.xyz^$all +||sultingcoe.buzz^$all +||swordhilte.buzz^$all +||sysianedukera.com^$all +||taitlastwebegan.com^$all +||tasesetitoefany.info^$all +||tbrohwnmyest.info^$all +||tebilaterde.xyz^$all +||tedithconsukult.com^$all +||tesupervis.hair^$all +||texcepededo.info^$all +||tfoollowingba.info^$all +||tgandmotivat.com^$all +||thaitingshos.xyz^$all +||thaoheakolons.info^$all +||thegravehthh.info^$all +||theharityhild.buzz^$all +||theparlornextthef.com^$all +||thrememboer.info^$all +||ticaframeofm.xyz^$all +||tionpecialukizei.com^$all +||tivatingotheremplo.com^$all +||toftheca.buzz^$all +||tooaastandhei.info^$all +||toolsahoulofd.info^$all +||tostaracare.com^$all +||tsapphires.buzz^$all +||tuallyenitwasbr.com^$all +||tunitytostara.com^$all +||tureukwore.xyz^$all +||tydevelelastic.com^$all +||tyyeastfeukufund.com^$all +||uadthenborea.info^$all +||uchadmir.buzz^$all +||uewasadirectresu.info^$all +||ughtsustacheds.com^$all +||uinground.com^$all +||ukelpmetoreali.pics^$all +||ukentaspe.xyz^$all +||ukindwouldm.xyz^$all +||ukrnmentofth.com^$all +||ukseseemyres.xyz^$all +||uktureukworekto.com^$all +||ukwasanasosetet.net^$all +||ularhenewrev.info^$all +||ulyhvfadchos.info^$all +||umeformorede.xyz^$all +||upervisofosev.xyz^$all +||uuksehinkitwkuo.com^$all +||uwledconside.xyz^$all +||uytdwhitdoe.info^$all +||uyuksehinkitwku.com^$all +||vbriverafter.xyz^$all +||verwiththinleave.net^$all +||wasanasosett.info^$all +||wasanasset.buzz^$all +||wedonhisdhiltew.info^$all +||withmefeyauknaly.com^$all +||wukbgater.buzz^$all +||yauknalyticafra.com^$all +||yhukelpfulinot.info^$all +||yidbyhersle.xyz^$all +||yremovementxv.com^$all +||ysearchingfo.xyz^$all +||yticaframeofm.com^$all +||yvaluationiamcur.com^$all +34.195.224.242$network +54.225.185.110$network +&lp=not_robot_$all +! A fake "GitHub" "job" offer I woke up to in an old issue thread +||githubtalentcommunity.$all +||csa-github.com^$all +||ghaestatus.$all +||ghconduit.$all +||ghe-cluster.com^$all +||ghestatus.com^$all +||ghub.com^$all +||gisthub.com^$all +||git-hub.com^$all +||gitgub.com^$all +||github-awards.$all +||github-camo.$all +||github-nel.com^$all +||github-servicedesk.$all +||github-sso.com^$all +||github-staging-lab.$all +||githubarchive.$all +||githubazure.$all +||githubber.$all +||githubbrazil.com^$all +||githubcloud.com^$all +||githubcloudusercontent.$all +||githubcopilot.$all +||githubcorp.$all +||githubenterprise.$all +||githubfi.com^$all +||githubfitest.$all +||githubflow.com^$all +||githubhot.com^$all +||githubinc.$all +||githubmaccloud.$all +||githubpages.$all +||githubpartners.$all +||githubsecurity.com^$all +||githubway.$all +||githubwebhooks.com^$all +||gitlfs.com^$all +||gitmerge.com^$all +||gitpages.com^$all +||gitref.$all +||gitsmart.com^$all +||gitsplosion.com^$all +||gittogether.$all +||guthub.com^$all +||hackathonhowto.com^$all +||http-npmjs.$all +||javascriptsurvey.com^$all +||looksgoodtome.com^$all +||meetgit.com^$all +||nnmjs.info^$all +||nnmjs.net^$all +||nnmjs.org^$all +||npmcamp.com^$all +||npmjs-www.$all +||npmjs.app^$all +||npmjs.site^$all +||npmms.com^$all +||nqmjs.com^$all +||www-npmjs.$all +140.82.112.18$network +140.82.112.17$network +[2a09:8280:1::2b:3bcb:0]$network ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -22924,6 +23325,41 @@ tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[dat /ad_click/q?&url=$document,domain=~malware-redirection-results.* ! Laughably blatant fraud site ||cosercosplay.com^$all +! Fraudulent art thefts for money on Google Image Search, e.g. 'cassandra tangled site:tumblr.com suit' +*yo.php?cname=*&cid=$all +.aspx?iid=*&cid=$all +.aspx?cname=*&cid=$all +/shop.php?iid=$all +/\.[a-z]{2,18}\/Stars\.php\?/$match-case,all +||asptryfa.info^$all +||awpasslong.info^$all +||butheadstar.info^$all +||coxskihem.info^$all +||dealribrisk.info^$all +||gameguyper.info^$all +||jugfindlie.info^$all +||kidroleland.info^$all +||seedlogoonce.info^$all +||sirdayscare.info^$all +||slownansuch.info^$all +185.155.184.57$network +185.155.186.24$network +||usayn.fr^$all +||style-js.com^$all +/a.aspx?cid=*&cname=^$all +209.74.107.131$network +||qidjrsgroup.shop^$all +/flying.asp?cid=$all +/kjyo.php?cname=$all +/flying?cid=*&keywords=$all +.php?iid=*&cid=$document +.asp?iid=*&cid=$document +||estudioespositoymiguel.com.ar^$all +||juerfe.buzz^$all +.med.br/?q=artstation-$document +/artstation-*-[fanart]-$document,domain=~artstation.com +=artstation-*-[fanart]-$document,domain=~artstation.com +||yasaracarfenlisesi.com^$all ! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 7be572e99..c7860a2f8 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 30January2024v1 +! Version: 21February2024v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -20,7 +20,7 @@ ! Palau (Put on break due to too many whitelistings being needed) !!!||pw^~libgen.pw|petridish.pw|palaugov.pw|dpc.pw|buttercup.pw|rezka.pw|darkcrystal.pw|xor.pw|fullhdfilmizlesene.pw|gopass.pw|vost.pw|core.pw|bittor.pw|plutonium.pw|nitter.pw|kge.pw ! Legitimate use is almost non-existent, but has a tiny userbase in Japan. Its extreme common-ness in malware redirections means that the entry will be kept forever. -||*.top^$denyallow=caitlin.top|corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|techblog.top|changlam10.top|changlam11.top|pdcdn1.top|mastodon.top|pressplay.top|chillx.top|strims.top|thedesk.top|audioforyou.top +||*.top^$denyallow=caitlin.top|corriente.top|gdtot.top|nicenature.top|reminder.top|magocoro.top|castlevania.top|suiten.top|shucks.top|1stream.top|ambr.top|techblog.top|changlam10.top|changlam11.top|pdcdn1.top|mastodon.top|pressplay.top|chillx.top|strims.top|thedesk.top|audioforyou.top|pegelinux.top ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. ||*.loan^ !!!||agency^~battlefield.agency|baam.agency|robotzebra.agency|uphotel.agency|ws.agency (Can't remember the last time I saw it used in a redirection train.) @@ -243,7 +243,6 @@ ||ubuntu.org^$denyallow=you-were-likely-looking-for-ubuntu.com 103.224.212.249 ||speedtest.com^$denyallow=you-were-likely-looking-for-speedtest.net - ||snapchat.cm^$denyallow=malware-typo-squatter-of-snapchat.com ||facebook.cm^$denyallow=malware-typo-squatter-of-facebook.com ||wix.cm^$denyallow=malware-typo-squatter-of-wix.com @@ -17386,6 +17385,408 @@ ! https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 ||monetrizer*. 38.180.96.244 +! https://github.com/AdguardTeam/AdguardFilters/issues/172569 +||acareewityjh.com^ +||accedenonre.xyz^ +||adeditiontowritingef.net^ +||adiingsinspiringt.net^ +||adthereis.buzz^ +||ajorinryesopert.com^ +||ajorinryesoperty.com^ +||alsoextraorduki.info^ +||aluationiamcur.com^ +||alukizeiasnin.com^ +||amwoukrkskillso.com^ +||anadthefoaedf.info^ +||ankingwithear.com^ +||aoldosgertyong.info^ +||ardoqxdinqucirei.info^ +||arnofourgugtj.info^ +||arrowabhbtalst.info^ +||arrowtoldilim.com^ +||artistictastesnly.info^ +||asifiwoeryjtyj.info^ +||asosettoourma.info^ +||aspectsofc.hair^ +||asqerongtheco.info^ +||astellihandl.xyz^ + +||atedlittleme.xyz^ +||ationiamcur.com^ +||ationslieemrger.info^ +||atthewon.buzz^ +||aukndaspirati.com^ +||aysesuretobea.com^ +||baconaces.pro^ +||biscussexbug.xyz^ +||blicatedlittle.xyz^ +||bnfgnbheavynuo.info^ +||britingsynt.xyz^ +||careewituhinlarg.com^ +||cathyimmediates.xyz^ +||cenceevent.club^ +||choobinoobi.com^ +||comfortykive.xyz^ +||compathered.xyz^ +||connectedithco.com^ +||consukultingeca.com^ +||conversitym.com^ +||councernedasesium.com^ +||dblueclaockbro.info^ +||declinerybelfa.buzz^ +||dedalloverwithth.net^ +||dheircrhnerdgfd.info^ +||directuklyecon.pics^ +||disguishedbri.com^ +||dmanas.buzz^ +||dollapsedshe.info^ +||donemileliondol.info^ +||dukerationpe.com^ +||dwouldmakefe.info^ +||eamsauknda.com^ +||eastfeukufunde.com^ +||ebelfarewesbegi.com^ +||echildren.buzz^ +||econsultingcoem.com^ +||ectresultofthep.info^ +||edassiumw.xyz^ +||editiontowrit.info^ +||edrubyglo.buzz^ +||edstevermotorie.com^ +||edverys.buzz^ +||eesihighlyrec.xyz^ +||efgrghhindhimi.info^ +||efvtgbnanddescri.info^ +||ehappy.buzz^ +||eighing.space^ +||eisasbeau.buzz^ +||eitcuyjfromthe.info^ +||emydreamsa.com^ +||emyresumef.hair^ +||endream.buzz^ +||enectedithco.com^ +||entoftheusysian.com^ +||entsiwoulukdli.com^ +||epededonemil.info^ +||eredhadbeen.xyz^ +||eretheseantyjyt.info^ +||erpringash.xyz^ +||erukentaspectsof.com^ +||ervantasrelate.info^ +||esterdayauol.info^ +||etingefifort.info^ +||etingplansfo.buzz^ +||etorealiukzem.com^ +||etyrthonrong.info^ +||eukworektobe.pics^ +||evenuewasadi.xyz^ +||everefor.buzz^ +||evermoto.xyz^ +||everwiththinleav.net^ +||ewallowi.buzz^ +||ewmeofmukindwo.com^ +||ewoverth.buzz^ +||ewrevenuewasad.info^ +||exibilitukydtea.xyz^ +||forgotteddisgui.com^ +||fortdaukthw.hair^ +||fukermalasas.info^ +||getnizationedr.info^ +||getseavailan.xyz^ +||gettllingovert.info^ +||goveragemlz.club^ +||gtdjidencenha.info^ +||gukthwaalsoex.info^ +||hableleader.xyz^ +||hatwasallokmv.info^ +||heinndonfgnorh.info^ +||heodeidsofhnm.info^ +||hereabithec.xyz^ +||himloabercuacroos.info^ +||historiousmor.xyz^ +||hoisquit.buzz^ +||houldthinkh.buzz^ +||humanske.space^ +||iamcurrently.com^ +||iasninancuka.com^ +||ibilitukydteamw.com^ +||ictastesnly.buzz^ +||ifefashionismscold.com^ +||ileesidesu.hair^ +||inarilyhukel.info^ +||ingforanopportu.com^ +||inghesatin.com^ +||ingspondingco.com^ +||iolintohimselfas.info^ +||ionakasulbackgrou.com^ +||ionscormatio.com^ +||iratiotyuknsye.com^ +||ishnfguseaches.info^ +||itearamajo.com^ +||jhldtogerghottulering.info^ +||jlkladirtlseivi.info^ +||jtffjwecouldle.info^ +||kabuukimuuki.com^ +||kectivetraining.info^ +||kefeagreatase.info^ +||kelpmetoreali.com^ +||kentinedaug.xyz^ +||kenwellsgrpo.com^ +||kitwkuouldhukel.xyz^ +||kmodukuleqasfo.info^ +||kmyunderth.com^ +||kolpihvfongrou.info^ +||krkskillsombin.com^ +||ksehinkitw.hair^ +||ktobedirectu.xyz^ +||ktobedirectuklye.com^ +||lattemptaqwe.club^ +||lemopaserawecas.com^ +||leqasforsalesrep.info^ +||liondolularhene.info^ +||liukzemydream.com^ +||llsombineukdwit.com^ +||longmansuchcesu.com^ +||ltingecauyuksehi.com^ +||lubinoobi.com^ +||majorinryes.com^ +||majorinryesopert.com^ +||manisation.org^ +||mcurrentlysearc.com^ +||mediatesupervis.com^ +||mementrandingsw.com^ +||mentbradshed.com^ +||mentrandingswon.com^ +||mentseconom.xyz^ +||miredindeed.net^ +||mnndnnbnn.com^ +||monopolicycr.com^ +||mplayeranydw.net^ +||muheodeidsoan.info^ +||mwoukrkskills.xyz^ +||myxomater.space^ +||mzsdeauxdwh.info^ + +||nahrghhaondb.info^ +||natallcolumnsto.info^ +||ncelewasgildeda.net^ +||ncukanking.com^ +||ndandinter.hair^ +||ndeedeisasbeautiful.net^ +||ndencesch.xyz^ +||ndsragedwithb.info^ +||nedtolethimbevx.com^ +||nereherewetem.info^ +||nerewdeerofhi.info^ +||nergyflexibilit.pics^ +||nerybelfaste.xyz^ +||neukdwithmefe.com^ +||ngswonden.xyz^ +||nkingwitheaam.com^ +||nkitwkuouldhu.com^ +||nmabigyello.xyz^ +||nonimoomi.com^ +||nopportunitytostar.com^ +||normaticalaccu.com^ +||notquiteso.buzz^ +||nowledconsideu.com^ +||npracticalwhic.buzz^ +||nryesopertyv.com^ +||ntaspectsofcukorp.com^ +||ntheworldw.buzz^ +||ntualkentined.xyz^ +||nverewereal.info^ +||oathihakennails.info^ +||oefanyorbesttn.info^ +||ofchildr.buzz^ +||offerentlyport.xyz^ +||ojapanelm.xyz^ +||omefukmendat.xyz^ +||onalhedgelnham.com^ +||onopolicycr.xyz^ +||onopolicycreat.com^ +||onsukultingecauy.com^ +||oratefinaukn.xyz^ +||oratefinauknceiwo.com^ +||ordukinarilyhu.info^ +||osiextantlyvfhn.info^ +||otheruigfsfohi.info^ +||oughtanothingfruitie.net^ +||oukfareputfeablean.com^ +||ouldlikukemyfu.com^ +||ourmarketingefi.info^ +||ovogofteonafterw.info^ +||panyinadiingsinspi.com^ +||placugceofres.info^ +||playeranydwould.info^ +||ploddingtotogcb.info^ +||pmetorealiukze.xyz^ +||pohsoneche.info^ +||precially.space^ +||pringed.space^ +||puldhukelpmet.com^ +||racterdeilbsweet.info^ +||rainingukmod.info^ +||ratiotyuknsye.pics^ +||rbiscussexb.xyz^ +||reamsan.buzz^ +||reckedmane.xyz^ +||rentlysearchin.com^ +||responsidejo.xyz^ +||rgentssep.xyz^ +||rgyflexibilitu.com^ +||ricewaterhou.xyz^ +||ritingsynther.com^ +||rthfeoveukrnme.com^ +||runkingoutinteah.info^ +||ruralled.space^ +||rurelanderpurgan.com^ +||salesrepreswse.info^ +||sandothesooile.info^ +||searchforanop.com^ +||seemyresumefo.com^ +||seinpoundaymid.com^ +||semblyjustingex.com^ +||seoopersedu.xyz^ +||shoecamedmghm.info^ +||sihighlyrecom.xyz^ +||smetotrea.xyz^ +||smurtyards.space^ +||ssdwellsgrpo.info^ +||starvardsee.xyz^ +||stellihandles.hair^ +||subsectivexe.xyz^ +||sultingcoe.buzz^ +||swordhilte.buzz^ +||sysianedukera.com^ +||taitlastwebegan.com^ +||tasesetitoefany.info^ +||tbrohwnmyest.info^ +||tebilaterde.xyz^ +||tedithconsukult.com^ +||tesupervis.hair^ +||texcepededo.info^ +||tfoollowingba.info^ +||tgandmotivat.com^ +||thaitingshos.xyz^ +||thaoheakolons.info^ +||thegravehthh.info^ +||theharityhild.buzz^ +||theparlornextthef.com^ +||thrememboer.info^ +||ticaframeofm.xyz^ +||tionpecialukizei.com^ +||tivatingotheremplo.com^ +||toftheca.buzz^ +||tooaastandhei.info^ +||toolsahoulofd.info^ +||tostaracare.com^ +||tsapphires.buzz^ +||tuallyenitwasbr.com^ +||tunitytostara.com^ +||tureukwore.xyz^ +||tydevelelastic.com^ +||tyyeastfeukufund.com^ +||uadthenborea.info^ +||uchadmir.buzz^ +||uewasadirectresu.info^ +||ughtsustacheds.com^ +||uinground.com^ +||ukelpmetoreali.pics^ +||ukentaspe.xyz^ +||ukindwouldm.xyz^ +||ukrnmentofth.com^ +||ukseseemyres.xyz^ +||uktureukworekto.com^ +||ukwasanasosetet.net^ +||ularhenewrev.info^ +||ulyhvfadchos.info^ +||umeformorede.xyz^ +||upervisofosev.xyz^ +||uuksehinkitwkuo.com^ +||uwledconside.xyz^ +||uytdwhitdoe.info^ +||uyuksehinkitwku.com^ +||vbriverafter.xyz^ +||verwiththinleave.net^ +||wasanasosett.info^ +||wasanasset.buzz^ +||wedonhisdhiltew.info^ +||withmefeyauknaly.com^ +||wukbgater.buzz^ +||yauknalyticafra.com^ +||yhukelpfulinot.info^ +||yidbyhersle.xyz^ +||yremovementxv.com^ +||ysearchingfo.xyz^ +||yticaframeofm.com^ +||yvaluationiamcur.com^ +34.195.224.242 +54.225.185.110 + +! A fake "GitHub" "job" offer I woke up to in an old issue thread +||githubtalentcommunity. +||csa-github.com^ +||ghaestatus. +||ghconduit. +||ghe-cluster.com^ +||ghestatus.com^ +||ghub.com^ +||gisthub.com^ +||git-hub.com^ +||gitgub.com^ +||github-awards. +||github-camo. +||github-nel.com^ +||github-servicedesk. +||github-sso.com^ +||github-staging-lab. +||githubarchive. +||githubazure. +||githubber. +||githubbrazil.com^ +||githubcloud.com^ +||githubcloudusercontent. +||githubcopilot. +||githubcorp. +||githubenterprise. +||githubfi.com^ +||githubfitest. +||githubflow.com^ +||githubhot.com^ +||githubinc. +||githubmaccloud. +||githubpages. +||githubpartners. +||githubsecurity.com^ +||githubway. +||githubwebhooks.com^ +||gitlfs.com^ +||gitmerge.com^ +||gitpages.com^ +||gitref. +||gitsmart.com^ +||gitsplosion.com^ +||gittogether. +||guthub.com^ +||hackathonhowto.com^ +||http-npmjs. +||javascriptsurvey.com^ +||looksgoodtome.com^ +||meetgit.com^ +||nnmjs.info^ +||nnmjs.net^ +||nnmjs.org^ +||npmcamp.com^ +||npmjs-www. +||npmjs.app^ +||npmjs.site^ +||npmms.com^ +||nqmjs.com^ +||www-npmjs. +140.82.112.18 +140.82.112.17 +2a09:8280:1::2b:3bcb:0 ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -22681,6 +23082,41 @@ ! Laughably blatant fraud site ||cosercosplay.com^ +! Fraudulent art thefts for money on Google Image Search, e.g. 'cassandra tangled site:tumblr.com suit' +*yo.php?cname=*&cid= +.aspx?iid=*&cid= +.aspx?cname=*&cid= + +/\.[a-z]{2,18}\/Stars\.php\?/$match-case,all,~inline-font +||asptryfa.info^ +||awpasslong.info^ +||butheadstar.info^ +||coxskihem.info^ +||dealribrisk.info^ +||gameguyper.info^ +||jugfindlie.info^ +||kidroleland.info^ +||seedlogoonce.info^ +||sirdayscare.info^ +||slownansuch.info^ +185.155.184.57 +185.155.186.24 +||usayn.fr^ +||style-js.com^ + +209.74.107.131 +||qidjrsgroup.shop^ + + + +.php?iid=*&cid= +.asp?iid=*&cid= +||estudioespositoymiguel.com.ar^ +||juerfe.buzz^ +.med.br/?q=artstation- +/artstation-*-[fanart]-~artstation.com +=artstation-*-[fanart]-~artstation.com +||yasaracarfenlisesi.com^ ! ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 5956502e8..237a99409 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 30January2024v1 +# Version: 21February2024v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -233,7 +233,6 @@ the1adblocker.com ubuntu.org 103.224.212.249 speedtest.com -kelkoogroup.net snapchat.cm facebook.cm wix.cm @@ -17077,6 +17076,407 @@ yttersiden.no 38.180.96.244 +acareewityjh.com +accedenonre.xyz +adeditiontowritingef.net +adiingsinspiringt.net +adthereis.buzz +ajorinryesopert.com +ajorinryesoperty.com +alsoextraorduki.info +aluationiamcur.com +alukizeiasnin.com +amwoukrkskillso.com +anadthefoaedf.info +ankingwithear.com +aoldosgertyong.info +ardoqxdinqucirei.info +arnofourgugtj.info +arrowabhbtalst.info +arrowtoldilim.com +artistictastesnly.info +asifiwoeryjtyj.info +asosettoourma.info +aspectsofc.hair +asqerongtheco.info +astellihandl.xyz +atabaseiwo.top +atedlittleme.xyz +ationiamcur.com +ationslieemrger.info +atthewon.buzz +aukndaspirati.com +aysesuretobea.com +baconaces.pro +biscussexbug.xyz +blicatedlittle.xyz +bnfgnbheavynuo.info +britingsynt.xyz +careewituhinlarg.com +cathyimmediates.xyz +cenceevent.club +choobinoobi.com +comfortykive.xyz +compathered.xyz +connectedithco.com +consukultingeca.com +conversitym.com +councernedasesium.com +dblueclaockbro.info +declinerybelfa.buzz +dedalloverwithth.net +dheircrhnerdgfd.info +directuklyecon.pics +disguishedbri.com +dmanas.buzz +dollapsedshe.info +donemileliondol.info +dukerationpe.com +dwouldmakefe.info +eamsauknda.com +eastfeukufunde.com +ebelfarewesbegi.com +echildren.buzz +econsultingcoem.com +ectresultofthep.info +edassiumw.xyz +editiontowrit.info +edrubyglo.buzz +edstevermotorie.com +edverys.buzz +eesihighlyrec.xyz +efgrghhindhimi.info +efvtgbnanddescri.info +ehappy.buzz +eighing.space +eisasbeau.buzz +eitcuyjfromthe.info +emydreamsa.com +emyresumef.hair +endream.buzz +enectedithco.com +entoftheusysian.com +entsiwoulukdli.com +epededonemil.info +eredhadbeen.xyz +eretheseantyjyt.info +erpringash.xyz +erukentaspectsof.com +ervantasrelate.info +esterdayauol.info +etingefifort.info +etingplansfo.buzz +etorealiukzem.com +etyrthonrong.info +eukworektobe.pics +evenuewasadi.xyz +everefor.buzz +evermoto.xyz +everwiththinleav.net +ewallowi.buzz +ewmeofmukindwo.com +ewoverth.buzz +ewrevenuewasad.info +exibilitukydtea.xyz +forgotteddisgui.com +fortdaukthw.hair +fukermalasas.info +getnizationedr.info +getseavailan.xyz +gettllingovert.info +goveragemlz.club +gtdjidencenha.info +gukthwaalsoex.info +hableleader.xyz +hatwasallokmv.info +heinndonfgnorh.info +heodeidsofhnm.info +hereabithec.xyz +himloabercuacroos.info +historiousmor.xyz +hoisquit.buzz +houldthinkh.buzz +humanske.space +iamcurrently.com +iasninancuka.com +ibilitukydteamw.com +ictastesnly.buzz +ifefashionismscold.com +ileesidesu.hair +inarilyhukel.info +ingforanopportu.com +inghesatin.com +ingspondingco.com +iolintohimselfas.info +ionakasulbackgrou.com +ionscormatio.com +iratiotyuknsye.com +ishnfguseaches.info +itearamajo.com +jhldtogerghottulering.info +jlkladirtlseivi.info +jtffjwecouldle.info +kabuukimuuki.com +kectivetraining.info +kefeagreatase.info +kelpmetoreali.com +kentinedaug.xyz +kenwellsgrpo.com +kitwkuouldhukel.xyz +kmodukuleqasfo.info +kmyunderth.com +kolpihvfongrou.info +krkskillsombin.com +ksehinkitw.hair +ktobedirectu.xyz +ktobedirectuklye.com +lattemptaqwe.club +lemopaserawecas.com +leqasforsalesrep.info +liondolularhene.info +liukzemydream.com +llsombineukdwit.com +longmansuchcesu.com +ltingecauyuksehi.com +lubinoobi.com +majorinryes.com +majorinryesopert.com +manisation.org +mcurrentlysearc.com +mediatesupervis.com +mementrandingsw.com +mentbradshed.com +mentrandingswon.com +mentseconom.xyz +miredindeed.net +mnndnnbnn.com +monopolicycr.com +mplayeranydw.net +muheodeidsoan.info +mwoukrkskills.xyz +myxomater.space +mzsdeauxdwh.info +naborutmyrq.top +nahrghhaondb.info +natallcolumnsto.info +ncelewasgildeda.net +ncukanking.com +ndandinter.hair +ndeedeisasbeautiful.net +ndencesch.xyz +ndsragedwithb.info +nedtolethimbevx.com +nereherewetem.info +nerewdeerofhi.info +nergyflexibilit.pics +nerybelfaste.xyz +neukdwithmefe.com +ngswonden.xyz +nkingwitheaam.com +nkitwkuouldhu.com +nmabigyello.xyz +nonimoomi.com +nopportunitytostar.com +normaticalaccu.com +notquiteso.buzz +nowledconsideu.com +npracticalwhic.buzz +nryesopertyv.com +ntaspectsofcukorp.com +ntheworldw.buzz +ntualkentined.xyz +nverewereal.info +oathihakennails.info +oefanyorbesttn.info +ofchildr.buzz +offerentlyport.xyz +ojapanelm.xyz +omefukmendat.xyz +onalhedgelnham.com +onopolicycr.xyz +onopolicycreat.com +onsukultingecauy.com +oratefinaukn.xyz +oratefinauknceiwo.com +ordukinarilyhu.info +osiextantlyvfhn.info +otheruigfsfohi.info +oughtanothingfruitie.net +oukfareputfeablean.com +ouldlikukemyfu.com +ourmarketingefi.info +ovogofteonafterw.info +panyinadiingsinspi.com +placugceofres.info +playeranydwould.info +ploddingtotogcb.info +pmetorealiukze.xyz +pohsoneche.info +precially.space +pringed.space +puldhukelpmet.com +racterdeilbsweet.info +rainingukmod.info +ratiotyuknsye.pics +rbiscussexb.xyz +reamsan.buzz +reckedmane.xyz +rentlysearchin.com +responsidejo.xyz +rgentssep.xyz +rgyflexibilitu.com +ricewaterhou.xyz +ritingsynther.com +rthfeoveukrnme.com +runkingoutinteah.info +ruralled.space +rurelanderpurgan.com +salesrepreswse.info +sandothesooile.info +searchforanop.com +seemyresumefo.com +seinpoundaymid.com +semblyjustingex.com +seoopersedu.xyz +shoecamedmghm.info +sihighlyrecom.xyz +smetotrea.xyz +smurtyards.space +ssdwellsgrpo.info +starvardsee.xyz +stellihandles.hair +subsectivexe.xyz +sultingcoe.buzz +swordhilte.buzz +sysianedukera.com +taitlastwebegan.com +tasesetitoefany.info +tbrohwnmyest.info +tebilaterde.xyz +tedithconsukult.com +tesupervis.hair +texcepededo.info +tfoollowingba.info +tgandmotivat.com +thaitingshos.xyz +thaoheakolons.info +thegravehthh.info +theharityhild.buzz +theparlornextthef.com +thrememboer.info +ticaframeofm.xyz +tionpecialukizei.com +tivatingotheremplo.com +toftheca.buzz +tooaastandhei.info +toolsahoulofd.info +tostaracare.com +tsapphires.buzz +tuallyenitwasbr.com +tunitytostara.com +tureukwore.xyz +tydevelelastic.com +tyyeastfeukufund.com +uadthenborea.info +uchadmir.buzz +uewasadirectresu.info +ughtsustacheds.com +uinground.com +ukelpmetoreali.pics +ukentaspe.xyz +ukindwouldm.xyz +ukrnmentofth.com +ukseseemyres.xyz +uktureukworekto.com +ukwasanasosetet.net +ularhenewrev.info +ulyhvfadchos.info +umeformorede.xyz +upervisofosev.xyz +uuksehinkitwkuo.com +uwledconside.xyz +uytdwhitdoe.info +uyuksehinkitwku.com +vbriverafter.xyz +verwiththinleave.net +wasanasosett.info +wasanasset.buzz +wedonhisdhiltew.info +withmefeyauknaly.com +wukbgater.buzz +yauknalyticafra.com +yhukelpfulinot.info +yidbyhersle.xyz +yremovementxv.com +ysearchingfo.xyz +yticaframeofm.com +yvaluationiamcur.com +34.195.224.242 +54.225.185.110 + +# A fake "GitHub" "job" offer I woke up to in an old issue thread + +csa-github.com + + +ghe-cluster.com +ghestatus.com +ghub.com +gisthub.com +git-hub.com +gitgub.com + + +github-nel.com + +github-sso.com + + + + +githubbrazil.com +githubcloud.com + + + + +githubfi.com + +githubflow.com +githubhot.com + + + + +githubsecurity.com + +githubwebhooks.com +gitlfs.com +gitmerge.com +gitpages.com + +gitsmart.com +gitsplosion.com + +guthub.com +hackathonhowto.com + +javascriptsurvey.com +looksgoodtome.com +meetgit.com +nnmjs.info +nnmjs.net +nnmjs.org +npmcamp.com + +npmjs.app +npmjs.site +npmms.com +nqmjs.com + +140.82.112.18 +140.82.112.17 +[2a09:8280:1::2b:3bcb:0] # ——— Standard malware that I stumbled upon on my own ——— downloadprovider.me @@ -22335,6 +22735,40 @@ deltacorriher.best # Laughably blatant fraud site cosercosplay.com +# Fraudulent art thefts for money on Google Image Search, e.g. 'cassandra tangled site:tumblr.com suit' + + + + +asptryfa.info +awpasslong.info +butheadstar.info +coxskihem.info +dealribrisk.info +gameguyper.info +jugfindlie.info +kidroleland.info +seedlogoonce.info +sirdayscare.info +slownansuch.info +185.155.184.57 +185.155.186.24 +usayn.fr +style-js.com + +209.74.107.131 +qidjrsgroup.shop + + + + + +estudioespositoymiguel.com.ar +juerfe.buzz + + += +yasaracarfenlisesi.com # ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index 4dd817caa..a2d1f7484 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -221,7 +221,6 @@ 127.0.0.1 ubuntu.org 127.0.0.1 103.224.212.249 127.0.0.1 speedtest.com -127.0.0.1 kelkoogroup.net 127.0.0.1 snapchat.cm 127.0.0.1 facebook.cm 127.0.0.1 wix.cm @@ -17065,6 +17064,407 @@ 127.0.0.1 38.180.96.244 +127.0.0.1 acareewityjh.com +127.0.0.1 accedenonre.xyz +127.0.0.1 adeditiontowritingef.net +127.0.0.1 adiingsinspiringt.net +127.0.0.1 adthereis.buzz +127.0.0.1 ajorinryesopert.com +127.0.0.1 ajorinryesoperty.com +127.0.0.1 alsoextraorduki.info +127.0.0.1 aluationiamcur.com +127.0.0.1 alukizeiasnin.com +127.0.0.1 amwoukrkskillso.com +127.0.0.1 anadthefoaedf.info +127.0.0.1 ankingwithear.com +127.0.0.1 aoldosgertyong.info +127.0.0.1 ardoqxdinqucirei.info +127.0.0.1 arnofourgugtj.info +127.0.0.1 arrowabhbtalst.info +127.0.0.1 arrowtoldilim.com +127.0.0.1 artistictastesnly.info +127.0.0.1 asifiwoeryjtyj.info +127.0.0.1 asosettoourma.info +127.0.0.1 aspectsofc.hair +127.0.0.1 asqerongtheco.info +127.0.0.1 astellihandl.xyz +127.0.0.1 atabaseiwo.top +127.0.0.1 atedlittleme.xyz +127.0.0.1 ationiamcur.com +127.0.0.1 ationslieemrger.info +127.0.0.1 atthewon.buzz +127.0.0.1 aukndaspirati.com +127.0.0.1 aysesuretobea.com +127.0.0.1 baconaces.pro +127.0.0.1 biscussexbug.xyz +127.0.0.1 blicatedlittle.xyz +127.0.0.1 bnfgnbheavynuo.info +127.0.0.1 britingsynt.xyz +127.0.0.1 careewituhinlarg.com +127.0.0.1 cathyimmediates.xyz +127.0.0.1 cenceevent.club +127.0.0.1 choobinoobi.com +127.0.0.1 comfortykive.xyz +127.0.0.1 compathered.xyz +127.0.0.1 connectedithco.com +127.0.0.1 consukultingeca.com +127.0.0.1 conversitym.com +127.0.0.1 councernedasesium.com +127.0.0.1 dblueclaockbro.info +127.0.0.1 declinerybelfa.buzz +127.0.0.1 dedalloverwithth.net +127.0.0.1 dheircrhnerdgfd.info +127.0.0.1 directuklyecon.pics +127.0.0.1 disguishedbri.com +127.0.0.1 dmanas.buzz +127.0.0.1 dollapsedshe.info +127.0.0.1 donemileliondol.info +127.0.0.1 dukerationpe.com +127.0.0.1 dwouldmakefe.info +127.0.0.1 eamsauknda.com +127.0.0.1 eastfeukufunde.com +127.0.0.1 ebelfarewesbegi.com +127.0.0.1 echildren.buzz +127.0.0.1 econsultingcoem.com +127.0.0.1 ectresultofthep.info +127.0.0.1 edassiumw.xyz +127.0.0.1 editiontowrit.info +127.0.0.1 edrubyglo.buzz +127.0.0.1 edstevermotorie.com +127.0.0.1 edverys.buzz +127.0.0.1 eesihighlyrec.xyz +127.0.0.1 efgrghhindhimi.info +127.0.0.1 efvtgbnanddescri.info +127.0.0.1 ehappy.buzz +127.0.0.1 eighing.space +127.0.0.1 eisasbeau.buzz +127.0.0.1 eitcuyjfromthe.info +127.0.0.1 emydreamsa.com +127.0.0.1 emyresumef.hair +127.0.0.1 endream.buzz +127.0.0.1 enectedithco.com +127.0.0.1 entoftheusysian.com +127.0.0.1 entsiwoulukdli.com +127.0.0.1 epededonemil.info +127.0.0.1 eredhadbeen.xyz +127.0.0.1 eretheseantyjyt.info +127.0.0.1 erpringash.xyz +127.0.0.1 erukentaspectsof.com +127.0.0.1 ervantasrelate.info +127.0.0.1 esterdayauol.info +127.0.0.1 etingefifort.info +127.0.0.1 etingplansfo.buzz +127.0.0.1 etorealiukzem.com +127.0.0.1 etyrthonrong.info +127.0.0.1 eukworektobe.pics +127.0.0.1 evenuewasadi.xyz +127.0.0.1 everefor.buzz +127.0.0.1 evermoto.xyz +127.0.0.1 everwiththinleav.net +127.0.0.1 ewallowi.buzz +127.0.0.1 ewmeofmukindwo.com +127.0.0.1 ewoverth.buzz +127.0.0.1 ewrevenuewasad.info +127.0.0.1 exibilitukydtea.xyz +127.0.0.1 forgotteddisgui.com +127.0.0.1 fortdaukthw.hair +127.0.0.1 fukermalasas.info +127.0.0.1 getnizationedr.info +127.0.0.1 getseavailan.xyz +127.0.0.1 gettllingovert.info +127.0.0.1 goveragemlz.club +127.0.0.1 gtdjidencenha.info +127.0.0.1 gukthwaalsoex.info +127.0.0.1 hableleader.xyz +127.0.0.1 hatwasallokmv.info +127.0.0.1 heinndonfgnorh.info +127.0.0.1 heodeidsofhnm.info +127.0.0.1 hereabithec.xyz +127.0.0.1 himloabercuacroos.info +127.0.0.1 historiousmor.xyz +127.0.0.1 hoisquit.buzz +127.0.0.1 houldthinkh.buzz +127.0.0.1 humanske.space +127.0.0.1 iamcurrently.com +127.0.0.1 iasninancuka.com +127.0.0.1 ibilitukydteamw.com +127.0.0.1 ictastesnly.buzz +127.0.0.1 ifefashionismscold.com +127.0.0.1 ileesidesu.hair +127.0.0.1 inarilyhukel.info +127.0.0.1 ingforanopportu.com +127.0.0.1 inghesatin.com +127.0.0.1 ingspondingco.com +127.0.0.1 iolintohimselfas.info +127.0.0.1 ionakasulbackgrou.com +127.0.0.1 ionscormatio.com +127.0.0.1 iratiotyuknsye.com +127.0.0.1 ishnfguseaches.info +127.0.0.1 itearamajo.com +127.0.0.1 jhldtogerghottulering.info +127.0.0.1 jlkladirtlseivi.info +127.0.0.1 jtffjwecouldle.info +127.0.0.1 kabuukimuuki.com +127.0.0.1 kectivetraining.info +127.0.0.1 kefeagreatase.info +127.0.0.1 kelpmetoreali.com +127.0.0.1 kentinedaug.xyz +127.0.0.1 kenwellsgrpo.com +127.0.0.1 kitwkuouldhukel.xyz +127.0.0.1 kmodukuleqasfo.info +127.0.0.1 kmyunderth.com +127.0.0.1 kolpihvfongrou.info +127.0.0.1 krkskillsombin.com +127.0.0.1 ksehinkitw.hair +127.0.0.1 ktobedirectu.xyz +127.0.0.1 ktobedirectuklye.com +127.0.0.1 lattemptaqwe.club +127.0.0.1 lemopaserawecas.com +127.0.0.1 leqasforsalesrep.info +127.0.0.1 liondolularhene.info +127.0.0.1 liukzemydream.com +127.0.0.1 llsombineukdwit.com +127.0.0.1 longmansuchcesu.com +127.0.0.1 ltingecauyuksehi.com +127.0.0.1 lubinoobi.com +127.0.0.1 majorinryes.com +127.0.0.1 majorinryesopert.com +127.0.0.1 manisation.org +127.0.0.1 mcurrentlysearc.com +127.0.0.1 mediatesupervis.com +127.0.0.1 mementrandingsw.com +127.0.0.1 mentbradshed.com +127.0.0.1 mentrandingswon.com +127.0.0.1 mentseconom.xyz +127.0.0.1 miredindeed.net +127.0.0.1 mnndnnbnn.com +127.0.0.1 monopolicycr.com +127.0.0.1 mplayeranydw.net +127.0.0.1 muheodeidsoan.info +127.0.0.1 mwoukrkskills.xyz +127.0.0.1 myxomater.space +127.0.0.1 mzsdeauxdwh.info +127.0.0.1 naborutmyrq.top +127.0.0.1 nahrghhaondb.info +127.0.0.1 natallcolumnsto.info +127.0.0.1 ncelewasgildeda.net +127.0.0.1 ncukanking.com +127.0.0.1 ndandinter.hair +127.0.0.1 ndeedeisasbeautiful.net +127.0.0.1 ndencesch.xyz +127.0.0.1 ndsragedwithb.info +127.0.0.1 nedtolethimbevx.com +127.0.0.1 nereherewetem.info +127.0.0.1 nerewdeerofhi.info +127.0.0.1 nergyflexibilit.pics +127.0.0.1 nerybelfaste.xyz +127.0.0.1 neukdwithmefe.com +127.0.0.1 ngswonden.xyz +127.0.0.1 nkingwitheaam.com +127.0.0.1 nkitwkuouldhu.com +127.0.0.1 nmabigyello.xyz +127.0.0.1 nonimoomi.com +127.0.0.1 nopportunitytostar.com +127.0.0.1 normaticalaccu.com +127.0.0.1 notquiteso.buzz +127.0.0.1 nowledconsideu.com +127.0.0.1 npracticalwhic.buzz +127.0.0.1 nryesopertyv.com +127.0.0.1 ntaspectsofcukorp.com +127.0.0.1 ntheworldw.buzz +127.0.0.1 ntualkentined.xyz +127.0.0.1 nverewereal.info +127.0.0.1 oathihakennails.info +127.0.0.1 oefanyorbesttn.info +127.0.0.1 ofchildr.buzz +127.0.0.1 offerentlyport.xyz +127.0.0.1 ojapanelm.xyz +127.0.0.1 omefukmendat.xyz +127.0.0.1 onalhedgelnham.com +127.0.0.1 onopolicycr.xyz +127.0.0.1 onopolicycreat.com +127.0.0.1 onsukultingecauy.com +127.0.0.1 oratefinaukn.xyz +127.0.0.1 oratefinauknceiwo.com +127.0.0.1 ordukinarilyhu.info +127.0.0.1 osiextantlyvfhn.info +127.0.0.1 otheruigfsfohi.info +127.0.0.1 oughtanothingfruitie.net +127.0.0.1 oukfareputfeablean.com +127.0.0.1 ouldlikukemyfu.com +127.0.0.1 ourmarketingefi.info +127.0.0.1 ovogofteonafterw.info +127.0.0.1 panyinadiingsinspi.com +127.0.0.1 placugceofres.info +127.0.0.1 playeranydwould.info +127.0.0.1 ploddingtotogcb.info +127.0.0.1 pmetorealiukze.xyz +127.0.0.1 pohsoneche.info +127.0.0.1 precially.space +127.0.0.1 pringed.space +127.0.0.1 puldhukelpmet.com +127.0.0.1 racterdeilbsweet.info +127.0.0.1 rainingukmod.info +127.0.0.1 ratiotyuknsye.pics +127.0.0.1 rbiscussexb.xyz +127.0.0.1 reamsan.buzz +127.0.0.1 reckedmane.xyz +127.0.0.1 rentlysearchin.com +127.0.0.1 responsidejo.xyz +127.0.0.1 rgentssep.xyz +127.0.0.1 rgyflexibilitu.com +127.0.0.1 ricewaterhou.xyz +127.0.0.1 ritingsynther.com +127.0.0.1 rthfeoveukrnme.com +127.0.0.1 runkingoutinteah.info +127.0.0.1 ruralled.space +127.0.0.1 rurelanderpurgan.com +127.0.0.1 salesrepreswse.info +127.0.0.1 sandothesooile.info +127.0.0.1 searchforanop.com +127.0.0.1 seemyresumefo.com +127.0.0.1 seinpoundaymid.com +127.0.0.1 semblyjustingex.com +127.0.0.1 seoopersedu.xyz +127.0.0.1 shoecamedmghm.info +127.0.0.1 sihighlyrecom.xyz +127.0.0.1 smetotrea.xyz +127.0.0.1 smurtyards.space +127.0.0.1 ssdwellsgrpo.info +127.0.0.1 starvardsee.xyz +127.0.0.1 stellihandles.hair +127.0.0.1 subsectivexe.xyz +127.0.0.1 sultingcoe.buzz +127.0.0.1 swordhilte.buzz +127.0.0.1 sysianedukera.com +127.0.0.1 taitlastwebegan.com +127.0.0.1 tasesetitoefany.info +127.0.0.1 tbrohwnmyest.info +127.0.0.1 tebilaterde.xyz +127.0.0.1 tedithconsukult.com +127.0.0.1 tesupervis.hair +127.0.0.1 texcepededo.info +127.0.0.1 tfoollowingba.info +127.0.0.1 tgandmotivat.com +127.0.0.1 thaitingshos.xyz +127.0.0.1 thaoheakolons.info +127.0.0.1 thegravehthh.info +127.0.0.1 theharityhild.buzz +127.0.0.1 theparlornextthef.com +127.0.0.1 thrememboer.info +127.0.0.1 ticaframeofm.xyz +127.0.0.1 tionpecialukizei.com +127.0.0.1 tivatingotheremplo.com +127.0.0.1 toftheca.buzz +127.0.0.1 tooaastandhei.info +127.0.0.1 toolsahoulofd.info +127.0.0.1 tostaracare.com +127.0.0.1 tsapphires.buzz +127.0.0.1 tuallyenitwasbr.com +127.0.0.1 tunitytostara.com +127.0.0.1 tureukwore.xyz +127.0.0.1 tydevelelastic.com +127.0.0.1 tyyeastfeukufund.com +127.0.0.1 uadthenborea.info +127.0.0.1 uchadmir.buzz +127.0.0.1 uewasadirectresu.info +127.0.0.1 ughtsustacheds.com +127.0.0.1 uinground.com +127.0.0.1 ukelpmetoreali.pics +127.0.0.1 ukentaspe.xyz +127.0.0.1 ukindwouldm.xyz +127.0.0.1 ukrnmentofth.com +127.0.0.1 ukseseemyres.xyz +127.0.0.1 uktureukworekto.com +127.0.0.1 ukwasanasosetet.net +127.0.0.1 ularhenewrev.info +127.0.0.1 ulyhvfadchos.info +127.0.0.1 umeformorede.xyz +127.0.0.1 upervisofosev.xyz +127.0.0.1 uuksehinkitwkuo.com +127.0.0.1 uwledconside.xyz +127.0.0.1 uytdwhitdoe.info +127.0.0.1 uyuksehinkitwku.com +127.0.0.1 vbriverafter.xyz +127.0.0.1 verwiththinleave.net +127.0.0.1 wasanasosett.info +127.0.0.1 wasanasset.buzz +127.0.0.1 wedonhisdhiltew.info +127.0.0.1 withmefeyauknaly.com +127.0.0.1 wukbgater.buzz +127.0.0.1 yauknalyticafra.com +127.0.0.1 yhukelpfulinot.info +127.0.0.1 yidbyhersle.xyz +127.0.0.1 yremovementxv.com +127.0.0.1 ysearchingfo.xyz +127.0.0.1 yticaframeofm.com +127.0.0.1 yvaluationiamcur.com +127.0.0.1 34.195.224.242 +127.0.0.1 54.225.185.110 + +# A fake "GitHub" "job" offer I woke up to in an old issue thread + +127.0.0.1 csa-github.com + + +127.0.0.1 ghe-cluster.com +127.0.0.1 ghestatus.com +127.0.0.1 ghub.com +127.0.0.1 gisthub.com +127.0.0.1 git-hub.com +127.0.0.1 gitgub.com + + +127.0.0.1 github-nel.com + +127.0.0.1 github-sso.com + + + + +127.0.0.1 githubbrazil.com +127.0.0.1 githubcloud.com + + + + +127.0.0.1 githubfi.com + +127.0.0.1 githubflow.com +127.0.0.1 githubhot.com + + + + +127.0.0.1 githubsecurity.com + +127.0.0.1 githubwebhooks.com +127.0.0.1 gitlfs.com +127.0.0.1 gitmerge.com +127.0.0.1 gitpages.com + +127.0.0.1 gitsmart.com +127.0.0.1 gitsplosion.com + +127.0.0.1 guthub.com +127.0.0.1 hackathonhowto.com + +127.0.0.1 javascriptsurvey.com +127.0.0.1 looksgoodtome.com +127.0.0.1 meetgit.com +127.0.0.1 nnmjs.info +127.0.0.1 nnmjs.net +127.0.0.1 nnmjs.org +127.0.0.1 npmcamp.com + +127.0.0.1 npmjs.app +127.0.0.1 npmjs.site +127.0.0.1 npmms.com +127.0.0.1 nqmjs.com + +127.0.0.1 140.82.112.18 +127.0.0.1 140.82.112.17 + # ——— Standard malware that I stumbled upon on my own ——— 127.0.0.1 downloadprovider.me @@ -22323,6 +22723,40 @@ # Laughably blatant fraud site 127.0.0.1 cosercosplay.com +# Fraudulent art thefts for money on Google Image Search, e.g. 'cassandra tangled site:tumblr.com suit' + + + + +127.0.0.1 asptryfa.info +127.0.0.1 awpasslong.info +127.0.0.1 butheadstar.info +127.0.0.1 coxskihem.info +127.0.0.1 dealribrisk.info +127.0.0.1 gameguyper.info +127.0.0.1 jugfindlie.info +127.0.0.1 kidroleland.info +127.0.0.1 seedlogoonce.info +127.0.0.1 sirdayscare.info +127.0.0.1 slownansuch.info +127.0.0.1 185.155.184.57 +127.0.0.1 185.155.186.24 +127.0.0.1 usayn.fr +127.0.0.1 style-js.com + +127.0.0.1 209.74.107.131 +127.0.0.1 qidjrsgroup.shop + + + + + +127.0.0.1 estudioespositoymiguel.com.ar +127.0.0.1 juerfe.buzz + + += +127.0.0.1 yasaracarfenlisesi.com # ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index ceb824169..79f91aba1 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 30January2024v1-Deprecated +# Version: 21February2024v1-Deprecated # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. @@ -223,7 +223,6 @@ .ubuntu.org .103.224.212.249 .speedtest.com -.kelkoogroup.net .snapchat.cm .facebook.cm .wix.cm @@ -17045,6 +17044,407 @@ .yttersiden.no .monetrizer*. .38.180.96.244 +.acareewityjh.com +.accedenonre.xyz +.adeditiontowritingef.net +.adiingsinspiringt.net +.adthereis.buzz +.ajorinryesopert.com +.ajorinryesoperty.com +.alsoextraorduki.info +.aluationiamcur.com +.alukizeiasnin.com +.amwoukrkskillso.com +.anadthefoaedf.info +.ankingwithear.com +.aoldosgertyong.info +.ardoqxdinqucirei.info +.arnofourgugtj.info +.arrowabhbtalst.info +.arrowtoldilim.com +.artistictastesnly.info +.asifiwoeryjtyj.info +.asosettoourma.info +.aspectsofc.hair +.asqerongtheco.info +.astellihandl.xyz +.atabaseiwo.top +.atedlittleme.xyz +.ationiamcur.com +.ationslieemrger.info +.atthewon.buzz +.aukndaspirati.com +.aysesuretobea.com +.baconaces.pro +.biscussexbug.xyz +.blicatedlittle.xyz +.bnfgnbheavynuo.info +.britingsynt.xyz +.careewituhinlarg.com +.cathyimmediates.xyz +.cenceevent.club +.choobinoobi.com +.comfortykive.xyz +.compathered.xyz +.connectedithco.com +.consukultingeca.com +.conversitym.com +.councernedasesium.com +.dblueclaockbro.info +.declinerybelfa.buzz +.dedalloverwithth.net +.dheircrhnerdgfd.info +.directuklyecon.pics +.disguishedbri.com +.dmanas.buzz +.dollapsedshe.info +.donemileliondol.info +.dukerationpe.com +.dwouldmakefe.info +.eamsauknda.com +.eastfeukufunde.com +.ebelfarewesbegi.com +.echildren.buzz +.econsultingcoem.com +.ectresultofthep.info +.edassiumw.xyz +.editiontowrit.info +.edrubyglo.buzz +.edstevermotorie.com +.edverys.buzz +.eesihighlyrec.xyz +.efgrghhindhimi.info +.efvtgbnanddescri.info +.ehappy.buzz +.eighing.space +.eisasbeau.buzz +.eitcuyjfromthe.info +.emydreamsa.com +.emyresumef.hair +.endream.buzz +.enectedithco.com +.entoftheusysian.com +.entsiwoulukdli.com +.epededonemil.info +.eredhadbeen.xyz +.eretheseantyjyt.info +.erpringash.xyz +.erukentaspectsof.com +.ervantasrelate.info +.esterdayauol.info +.etingefifort.info +.etingplansfo.buzz +.etorealiukzem.com +.etyrthonrong.info +.eukworektobe.pics +.evenuewasadi.xyz +.everefor.buzz +.evermoto.xyz +.everwiththinleav.net +.ewallowi.buzz +.ewmeofmukindwo.com +.ewoverth.buzz +.ewrevenuewasad.info +.exibilitukydtea.xyz +.forgotteddisgui.com +.fortdaukthw.hair +.fukermalasas.info +.getnizationedr.info +.getseavailan.xyz +.gettllingovert.info +.goveragemlz.club +.gtdjidencenha.info +.gukthwaalsoex.info +.hableleader.xyz +.hatwasallokmv.info +.heinndonfgnorh.info +.heodeidsofhnm.info +.hereabithec.xyz +.himloabercuacroos.info +.historiousmor.xyz +.hoisquit.buzz +.houldthinkh.buzz +.humanske.space +.iamcurrently.com +.iasninancuka.com +.ibilitukydteamw.com +.ictastesnly.buzz +.ifefashionismscold.com +.ileesidesu.hair +.inarilyhukel.info +.ingforanopportu.com +.inghesatin.com +.ingspondingco.com +.iolintohimselfas.info +.ionakasulbackgrou.com +.ionscormatio.com +.iratiotyuknsye.com +.ishnfguseaches.info +.itearamajo.com +.jhldtogerghottulering.info +.jlkladirtlseivi.info +.jtffjwecouldle.info +.kabuukimuuki.com +.kectivetraining.info +.kefeagreatase.info +.kelpmetoreali.com +.kentinedaug.xyz +.kenwellsgrpo.com +.kitwkuouldhukel.xyz +.kmodukuleqasfo.info +.kmyunderth.com +.kolpihvfongrou.info +.krkskillsombin.com +.ksehinkitw.hair +.ktobedirectu.xyz +.ktobedirectuklye.com +.lattemptaqwe.club +.lemopaserawecas.com +.leqasforsalesrep.info +.liondolularhene.info +.liukzemydream.com +.llsombineukdwit.com +.longmansuchcesu.com +.ltingecauyuksehi.com +.lubinoobi.com +.majorinryes.com +.majorinryesopert.com +.manisation.org +.mcurrentlysearc.com +.mediatesupervis.com +.mementrandingsw.com +.mentbradshed.com +.mentrandingswon.com +.mentseconom.xyz +.miredindeed.net +.mnndnnbnn.com +.monopolicycr.com +.mplayeranydw.net +.muheodeidsoan.info +.mwoukrkskills.xyz +.myxomater.space +.mzsdeauxdwh.info +.naborutmyrq.top +.nahrghhaondb.info +.natallcolumnsto.info +.ncelewasgildeda.net +.ncukanking.com +.ndandinter.hair +.ndeedeisasbeautiful.net +.ndencesch.xyz +.ndsragedwithb.info +.nedtolethimbevx.com +.nereherewetem.info +.nerewdeerofhi.info +.nergyflexibilit.pics +.nerybelfaste.xyz +.neukdwithmefe.com +.ngswonden.xyz +.nkingwitheaam.com +.nkitwkuouldhu.com +.nmabigyello.xyz +.nonimoomi.com +.nopportunitytostar.com +.normaticalaccu.com +.notquiteso.buzz +.nowledconsideu.com +.npracticalwhic.buzz +.nryesopertyv.com +.ntaspectsofcukorp.com +.ntheworldw.buzz +.ntualkentined.xyz +.nverewereal.info +.oathihakennails.info +.oefanyorbesttn.info +.ofchildr.buzz +.offerentlyport.xyz +.ojapanelm.xyz +.omefukmendat.xyz +.onalhedgelnham.com +.onopolicycr.xyz +.onopolicycreat.com +.onsukultingecauy.com +.oratefinaukn.xyz +.oratefinauknceiwo.com +.ordukinarilyhu.info +.osiextantlyvfhn.info +.otheruigfsfohi.info +.oughtanothingfruitie.net +.oukfareputfeablean.com +.ouldlikukemyfu.com +.ourmarketingefi.info +.ovogofteonafterw.info +.panyinadiingsinspi.com +.placugceofres.info +.playeranydwould.info +.ploddingtotogcb.info +.pmetorealiukze.xyz +.pohsoneche.info +.precially.space +.pringed.space +.puldhukelpmet.com +.racterdeilbsweet.info +.rainingukmod.info +.ratiotyuknsye.pics +.rbiscussexb.xyz +.reamsan.buzz +.reckedmane.xyz +.rentlysearchin.com +.responsidejo.xyz +.rgentssep.xyz +.rgyflexibilitu.com +.ricewaterhou.xyz +.ritingsynther.com +.rthfeoveukrnme.com +.runkingoutinteah.info +.ruralled.space +.rurelanderpurgan.com +.salesrepreswse.info +.sandothesooile.info +.searchforanop.com +.seemyresumefo.com +.seinpoundaymid.com +.semblyjustingex.com +.seoopersedu.xyz +.shoecamedmghm.info +.sihighlyrecom.xyz +.smetotrea.xyz +.smurtyards.space +.ssdwellsgrpo.info +.starvardsee.xyz +.stellihandles.hair +.subsectivexe.xyz +.sultingcoe.buzz +.swordhilte.buzz +.sysianedukera.com +.taitlastwebegan.com +.tasesetitoefany.info +.tbrohwnmyest.info +.tebilaterde.xyz +.tedithconsukult.com +.tesupervis.hair +.texcepededo.info +.tfoollowingba.info +.tgandmotivat.com +.thaitingshos.xyz +.thaoheakolons.info +.thegravehthh.info +.theharityhild.buzz +.theparlornextthef.com +.thrememboer.info +.ticaframeofm.xyz +.tionpecialukizei.com +.tivatingotheremplo.com +.toftheca.buzz +.tooaastandhei.info +.toolsahoulofd.info +.tostaracare.com +.tsapphires.buzz +.tuallyenitwasbr.com +.tunitytostara.com +.tureukwore.xyz +.tydevelelastic.com +.tyyeastfeukufund.com +.uadthenborea.info +.uchadmir.buzz +.uewasadirectresu.info +.ughtsustacheds.com +.uinground.com +.ukelpmetoreali.pics +.ukentaspe.xyz +.ukindwouldm.xyz +.ukrnmentofth.com +.ukseseemyres.xyz +.uktureukworekto.com +.ukwasanasosetet.net +.ularhenewrev.info +.ulyhvfadchos.info +.umeformorede.xyz +.upervisofosev.xyz +.uuksehinkitwkuo.com +.uwledconside.xyz +.uytdwhitdoe.info +.uyuksehinkitwku.com +.vbriverafter.xyz +.verwiththinleave.net +.wasanasosett.info +.wasanasset.buzz +.wedonhisdhiltew.info +.withmefeyauknaly.com +.wukbgater.buzz +.yauknalyticafra.com +.yhukelpfulinot.info +.yidbyhersle.xyz +.yremovementxv.com +.ysearchingfo.xyz +.yticaframeofm.com +.yvaluationiamcur.com +.34.195.224.242 +.54.225.185.110 + +# A fake "GitHub" "job" offer I woke up to in an old issue thread +.githubtalentcommunity. +.csa-github.com +.ghaestatus. +.ghconduit. +.ghe-cluster.com +.ghestatus.com +.ghub.com +.gisthub.com +.git-hub.com +.gitgub.com +.github-awards. +.github-camo. +.github-nel.com +.github-servicedesk. +.github-sso.com +.github-staging-lab. +.githubarchive. +.githubazure. +.githubber. +.githubbrazil.com +.githubcloud.com +.githubcloudusercontent. +.githubcopilot. +.githubcorp. +.githubenterprise. +.githubfi.com +.githubfitest. +.githubflow.com +.githubhot.com +.githubinc. +.githubmaccloud. +.githubpages. +.githubpartners. +.githubsecurity.com +.githubway. +.githubwebhooks.com +.gitlfs.com +.gitmerge.com +.gitpages.com +.gitref. +.gitsmart.com +.gitsplosion.com +.gittogether. +.guthub.com +.hackathonhowto.com +.http-npmjs. +.javascriptsurvey.com +.looksgoodtome.com +.meetgit.com +.nnmjs.info +.nnmjs.net +.nnmjs.org +.npmcamp.com +.npmjs-www. +.npmjs.app +.npmjs.site +.npmms.com +.nqmjs.com +.www-npmjs. +.140.82.112.18 +.140.82.112.17 +.[2a09:8280:1::2b:3bcb:0] {+block} # ——— Standard malware that I stumbled upon on my own ——— @@ -22298,6 +22698,41 @@ /ad_click/q?&url= # Laughably blatant fraud site .cosercosplay.com +# Fraudulent art thefts for money on Google Image Search, e.g. 'cassandra tangled site:tumblr.com suit' +*yo.php?cname=*&cid= +.aspx?iid=*&cid= +.aspx?cname=*&cid= +/shop.php?iid= +/\.[a-z]{2,18}\/Stars\.php\?/ +.asptryfa.info +.awpasslong.info +.butheadstar.info +.coxskihem.info +.dealribrisk.info +.gameguyper.info +.jugfindlie.info +.kidroleland.info +.seedlogoonce.info +.sirdayscare.info +.slownansuch.info +.185.155.184.57 +.185.155.186.24 +.usayn.fr +.style-js.com +/a.aspx?cid=*&cname= +.209.74.107.131 +.qidjrsgroup.shop +/flying.asp?cid= +/kjyo.php?cname= +/flying?cid=*&keywords= +.php?iid=*&cid= +.asp?iid=*&cid= +.estudioespositoymiguel.com.ar +.juerfe.buzz +.med.br/?q=artstation- +/artstation-*-[fanart]- +=artstation-*-[fanart]- +.yasaracarfenlisesi.com {+block} # ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 90e70467b..1aa2c5cf4 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 30January2024v1-Deprecated +# Version: 21February2024v1-Deprecated : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -93,6 +93,7 @@ msFilterList +d strims.top +d thedesk.top +d audioforyou.top ++d pegelinux.top # International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent. !!!||agency @@ -345,7 +346,6 @@ msFilterList -d ubuntu.org -d 103.224.212.249 -d speedtest.com --d kelkoogroup.net -d snapchat.cm -d facebook.cm -d wix.cm @@ -17453,6 +17453,408 @@ msFilterList # https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 -d 38.180.96.244 +# https://github.com/AdguardTeam/AdguardFilters/issues/172569 +-d acareewityjh.com +-d accedenonre.xyz +-d adeditiontowritingef.net +-d adiingsinspiringt.net +-d adthereis.buzz +-d ajorinryesopert.com +-d ajorinryesoperty.com +-d alsoextraorduki.info +-d aluationiamcur.com +-d alukizeiasnin.com +-d amwoukrkskillso.com +-d anadthefoaedf.info +-d ankingwithear.com +-d aoldosgertyong.info +-d ardoqxdinqucirei.info +-d arnofourgugtj.info +-d arrowabhbtalst.info +-d arrowtoldilim.com +-d artistictastesnly.info +-d asifiwoeryjtyj.info +-d asosettoourma.info +-d aspectsofc.hair +-d asqerongtheco.info +-d astellihandl.xyz +-d atabaseiwo.top +-d atedlittleme.xyz +-d ationiamcur.com +-d ationslieemrger.info +-d atthewon.buzz +-d aukndaspirati.com +-d aysesuretobea.com +-d baconaces.pro +-d biscussexbug.xyz +-d blicatedlittle.xyz +-d bnfgnbheavynuo.info +-d britingsynt.xyz +-d careewituhinlarg.com +-d cathyimmediates.xyz +-d cenceevent.club +-d choobinoobi.com +-d comfortykive.xyz +-d compathered.xyz +-d connectedithco.com +-d consukultingeca.com +-d conversitym.com +-d councernedasesium.com +-d dblueclaockbro.info +-d declinerybelfa.buzz +-d dedalloverwithth.net +-d dheircrhnerdgfd.info +-d directuklyecon.pics +-d disguishedbri.com +-d dmanas.buzz +-d dollapsedshe.info +-d donemileliondol.info +-d dukerationpe.com +-d dwouldmakefe.info +-d eamsauknda.com +-d eastfeukufunde.com +-d ebelfarewesbegi.com +-d echildren.buzz +-d econsultingcoem.com +-d ectresultofthep.info +-d edassiumw.xyz +-d editiontowrit.info +-d edrubyglo.buzz +-d edstevermotorie.com +-d edverys.buzz +-d eesihighlyrec.xyz +-d efgrghhindhimi.info +-d efvtgbnanddescri.info +-d ehappy.buzz +-d eighing.space +-d eisasbeau.buzz +-d eitcuyjfromthe.info +-d emydreamsa.com +-d emyresumef.hair +-d endream.buzz +-d enectedithco.com +-d entoftheusysian.com +-d entsiwoulukdli.com +-d epededonemil.info +-d eredhadbeen.xyz +-d eretheseantyjyt.info +-d erpringash.xyz +-d erukentaspectsof.com +-d ervantasrelate.info +-d esterdayauol.info +-d etingefifort.info +-d etingplansfo.buzz +-d etorealiukzem.com +-d etyrthonrong.info +-d eukworektobe.pics +-d evenuewasadi.xyz +-d everefor.buzz +-d evermoto.xyz +-d everwiththinleav.net +-d ewallowi.buzz +-d ewmeofmukindwo.com +-d ewoverth.buzz +-d ewrevenuewasad.info +-d exibilitukydtea.xyz +-d forgotteddisgui.com +-d fortdaukthw.hair +-d fukermalasas.info +-d getnizationedr.info +-d getseavailan.xyz +-d gettllingovert.info +-d goveragemlz.club +-d gtdjidencenha.info +-d gukthwaalsoex.info +-d hableleader.xyz +-d hatwasallokmv.info +-d heinndonfgnorh.info +-d heodeidsofhnm.info +-d hereabithec.xyz +-d himloabercuacroos.info +-d historiousmor.xyz +-d hoisquit.buzz +-d houldthinkh.buzz +-d humanske.space +-d iamcurrently.com +-d iasninancuka.com +-d ibilitukydteamw.com +-d ictastesnly.buzz +-d ifefashionismscold.com +-d ileesidesu.hair +-d inarilyhukel.info +-d ingforanopportu.com +-d inghesatin.com +-d ingspondingco.com +-d iolintohimselfas.info +-d ionakasulbackgrou.com +-d ionscormatio.com +-d iratiotyuknsye.com +-d ishnfguseaches.info +-d itearamajo.com +-d jhldtogerghottulering.info +-d jlkladirtlseivi.info +-d jtffjwecouldle.info +-d kabuukimuuki.com +-d kectivetraining.info +-d kefeagreatase.info +-d kelpmetoreali.com +-d kentinedaug.xyz +-d kenwellsgrpo.com +-d kitwkuouldhukel.xyz +-d kmodukuleqasfo.info +-d kmyunderth.com +-d kolpihvfongrou.info +-d krkskillsombin.com +-d ksehinkitw.hair +-d ktobedirectu.xyz +-d ktobedirectuklye.com +-d lattemptaqwe.club +-d lemopaserawecas.com +-d leqasforsalesrep.info +-d liondolularhene.info +-d liukzemydream.com +-d llsombineukdwit.com +-d longmansuchcesu.com +-d ltingecauyuksehi.com +-d lubinoobi.com +-d majorinryes.com +-d majorinryesopert.com +-d manisation.org +-d mcurrentlysearc.com +-d mediatesupervis.com +-d mementrandingsw.com +-d mentbradshed.com +-d mentrandingswon.com +-d mentseconom.xyz +-d miredindeed.net +-d mnndnnbnn.com +-d monopolicycr.com +-d mplayeranydw.net +-d muheodeidsoan.info +-d mwoukrkskills.xyz +-d myxomater.space +-d mzsdeauxdwh.info +-d naborutmyrq.top +-d nahrghhaondb.info +-d natallcolumnsto.info +-d ncelewasgildeda.net +-d ncukanking.com +-d ndandinter.hair +-d ndeedeisasbeautiful.net +-d ndencesch.xyz +-d ndsragedwithb.info +-d nedtolethimbevx.com +-d nereherewetem.info +-d nerewdeerofhi.info +-d nergyflexibilit.pics +-d nerybelfaste.xyz +-d neukdwithmefe.com +-d ngswonden.xyz +-d nkingwitheaam.com +-d nkitwkuouldhu.com +-d nmabigyello.xyz +-d nonimoomi.com +-d nopportunitytostar.com +-d normaticalaccu.com +-d notquiteso.buzz +-d nowledconsideu.com +-d npracticalwhic.buzz +-d nryesopertyv.com +-d ntaspectsofcukorp.com +-d ntheworldw.buzz +-d ntualkentined.xyz +-d nverewereal.info +-d oathihakennails.info +-d oefanyorbesttn.info +-d ofchildr.buzz +-d offerentlyport.xyz +-d ojapanelm.xyz +-d omefukmendat.xyz +-d onalhedgelnham.com +-d onopolicycr.xyz +-d onopolicycreat.com +-d onsukultingecauy.com +-d oratefinaukn.xyz +-d oratefinauknceiwo.com +-d ordukinarilyhu.info +-d osiextantlyvfhn.info +-d otheruigfsfohi.info +-d oughtanothingfruitie.net +-d oukfareputfeablean.com +-d ouldlikukemyfu.com +-d ourmarketingefi.info +-d ovogofteonafterw.info +-d panyinadiingsinspi.com +-d placugceofres.info +-d playeranydwould.info +-d ploddingtotogcb.info +-d pmetorealiukze.xyz +-d pohsoneche.info +-d precially.space +-d pringed.space +-d puldhukelpmet.com +-d racterdeilbsweet.info +-d rainingukmod.info +-d ratiotyuknsye.pics +-d rbiscussexb.xyz +-d reamsan.buzz +-d reckedmane.xyz +-d rentlysearchin.com +-d responsidejo.xyz +-d rgentssep.xyz +-d rgyflexibilitu.com +-d ricewaterhou.xyz +-d ritingsynther.com +-d rthfeoveukrnme.com +-d runkingoutinteah.info +-d ruralled.space +-d rurelanderpurgan.com +-d salesrepreswse.info +-d sandothesooile.info +-d searchforanop.com +-d seemyresumefo.com +-d seinpoundaymid.com +-d semblyjustingex.com +-d seoopersedu.xyz +-d shoecamedmghm.info +-d sihighlyrecom.xyz +-d smetotrea.xyz +-d smurtyards.space +-d ssdwellsgrpo.info +-d starvardsee.xyz +-d stellihandles.hair +-d subsectivexe.xyz +-d sultingcoe.buzz +-d swordhilte.buzz +-d sysianedukera.com +-d taitlastwebegan.com +-d tasesetitoefany.info +-d tbrohwnmyest.info +-d tebilaterde.xyz +-d tedithconsukult.com +-d tesupervis.hair +-d texcepededo.info +-d tfoollowingba.info +-d tgandmotivat.com +-d thaitingshos.xyz +-d thaoheakolons.info +-d thegravehthh.info +-d theharityhild.buzz +-d theparlornextthef.com +-d thrememboer.info +-d ticaframeofm.xyz +-d tionpecialukizei.com +-d tivatingotheremplo.com +-d toftheca.buzz +-d tooaastandhei.info +-d toolsahoulofd.info +-d tostaracare.com +-d tsapphires.buzz +-d tuallyenitwasbr.com +-d tunitytostara.com +-d tureukwore.xyz +-d tydevelelastic.com +-d tyyeastfeukufund.com +-d uadthenborea.info +-d uchadmir.buzz +-d uewasadirectresu.info +-d ughtsustacheds.com +-d uinground.com +-d ukelpmetoreali.pics +-d ukentaspe.xyz +-d ukindwouldm.xyz +-d ukrnmentofth.com +-d ukseseemyres.xyz +-d uktureukworekto.com +-d ukwasanasosetet.net +-d ularhenewrev.info +-d ulyhvfadchos.info +-d umeformorede.xyz +-d upervisofosev.xyz +-d uuksehinkitwkuo.com +-d uwledconside.xyz +-d uytdwhitdoe.info +-d uyuksehinkitwku.com +-d vbriverafter.xyz +-d verwiththinleave.net +-d wasanasosett.info +-d wasanasset.buzz +-d wedonhisdhiltew.info +-d withmefeyauknaly.com +-d wukbgater.buzz +-d yauknalyticafra.com +-d yhukelpfulinot.info +-d yidbyhersle.xyz +-d yremovementxv.com +-d ysearchingfo.xyz +-d yticaframeofm.com +-d yvaluationiamcur.com +-d 34.195.224.242 +-d 54.225.185.110 + +# A fake "GitHub" "job" offer I woke up to in an old issue thread +-d githubtalentcommunity. +-d csa-github.com +-d ghaestatus. +-d ghconduit. +-d ghe-cluster.com +-d ghestatus.com +-d ghub.com +-d gisthub.com +-d git-hub.com +-d gitgub.com +-d github-awards. +-d github-camo. +-d github-nel.com +-d github-servicedesk. +-d github-sso.com +-d github-staging-lab. +-d githubarchive. +-d githubazure. +-d githubber. +-d githubbrazil.com +-d githubcloud.com +-d githubcloudusercontent. +-d githubcopilot. +-d githubcorp. +-d githubenterprise. +-d githubfi.com +-d githubfitest. +-d githubflow.com +-d githubhot.com +-d githubinc. +-d githubmaccloud. +-d githubpages. +-d githubpartners. +-d githubsecurity.com +-d githubway. +-d githubwebhooks.com +-d gitlfs.com +-d gitmerge.com +-d gitpages.com +-d gitref. +-d gitsmart.com +-d gitsplosion.com +-d gittogether. +-d guthub.com +-d hackathonhowto.com +-d http-npmjs. +-d javascriptsurvey.com +-d looksgoodtome.com +-d meetgit.com +-d nnmjs.info +-d nnmjs.net +-d nnmjs.org +-d npmcamp.com +-d npmjs-www. +-d npmjs.app +-d npmjs.site +-d npmms.com +-d nqmjs.com +-d www-npmjs. +-d 140.82.112.18 +-d 140.82.112.17 +-d [2a09:8280:1::2b:3bcb:0] # ——— Standard malware that I stumbled upon on my own ——— # http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -22729,6 +23131,41 @@ msFilterList - ad_click q?&url= # Laughably blatant fraud site -d cosercosplay.com +# Fraudulent art thefts for money on Google Image Search, e.g. 'cassandra tangled site:tumblr.com suit' +*yo.php?cname=*&cid= +spx?iid=*&cid= +spx?cname=*&cid= +- shop.php?iid= + +-d asptryfa.info +-d awpasslong.info +-d butheadstar.info +-d coxskihem.info +-d dealribrisk.info +-d gameguyper.info +-d jugfindlie.info +-d kidroleland.info +-d seedlogoonce.info +-d sirdayscare.info +-d slownansuch.info +-d 185.155.184.57 +-d 185.155.186.24 +-d usayn.fr +-d style-js.com +- a.aspx?cid=*&cname= +-d 209.74.107.131 +-d qidjrsgroup.shop +- flying.asp?cid= +- kjyo.php?cname= +- flying?cid=*&keywords= +hp?iid=*&cid= +sp?iid=*&cid= +-d estudioespositoymiguel.com.ar +-d juerfe.buzz +ed.br ?q=artstation- +- artstation-*-[fanart]- +=artstation-*-[fanart]- +-d yasaracarfenlisesi.com # ——— Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones ——— # Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and or bricking the phone. diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 8e07f7d7b..ab5b213e1 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -378,16 +378,21 @@ [2606:4700:3030::6815:5284] [2606:4700:3037::ac43:9e39] 212.27.60.108 +1.14.61.188 3.248.18.175 +5.39.217.206 +5.39.221.180 13.49.35.236 35.227.231.163 +38.180.96.244 45.58.146.154 51.195.133.131 52.216.146.90 66.206.3.34 +74.119.239.234 82.118.242.69 -82.196.13.38 82.196.7.76 +82.196.13.38 82.221.81.9 85.17.76.181 92.42.104.146 @@ -397,15 +402,20 @@ 138.201.126.227 154.213.16.136 156.236.126.173 +158.247.212.220 +162.241.194.206 +165.227.168.212 167.71.49.177 167.99.196.225 176.58.98.57 178.79.136.45 179.43.189.62 185.13.40.150 +193.148.70.153 195.88.54.21 195.88.55.21 196.196.230.76 +212.27.60.108 104.160.10.0/24 165.231.154.0/24 165.231.10.0/24 @@ -416,10 +426,110 @@ 196.242.179.0/24 196.245.52.0/24 196.245.56.0/24 -142.91.159.0/24 -213.32.115.0/24 -217.182.11.0/24 +5.45.79.15 +5.61.55.143 +5.101.115.170 +23.83.114.131 +23.109.82.0/24 +23.109.82.44 +23.109.82.74 +23.109.82.104 +23.109.82.119 +23.109.82.173 +23.109.82.202 +23.109.82.222 +23.109.87.0/24 +23.109.87.14 +23.109.87.15 +23.109.87.42 +23.109.87.45 +23.109.87.47 +23.109.87.55 +23.109.87.71 +23.109.87.74 +23.109.87.101 +23.109.87.118 +23.109.87.123 +23.109.87.127 +23.109.87.139 +23.109.87.170 +23.109.87.182 +23.109.87.192 +23.109.87.213 +23.109.87.217 +23.109.150.101 +23.109.150.208 +23.109.150.253 +23.109.170.212 +23.109.248.0/24 +23.109.248.14 +23.109.248.20 +23.109.248.29 +23.109.248.125 +23.109.248.129 +23.109.248.130 +23.109.248.135 +23.109.248.139 +23.109.248.149 +23.109.248.174 +23.109.248.183 +23.109.248.229 +23.109.248.247 +23.195.91.195 +34.102.137.201 +35.178.185.67 +35.184.188.211 +35.193.89.147 +35.224.227.218 +35.226.75.50 +35.227.234.222 +35.232.188.118 +35.238.205.163 +37.1.209.213 +37.1.213.100 +51.77.227.96 +51.77.227.97 +51.77.227.98 +51.77.227.99 +51.77.227.100 +51.77.227.101 +51.77.227.102 +51.77.227.103 +51.89.115.13 +51.89.187.136 +51.89.187.137 +51.89.187.138 +51.89.187.139 +51.89.187.140 +51.89.187.141 +51.89.187.142 +51.89.187.143 +51.178.195.171 51.195.31.0/24 +51.195.115.102 +54.229.21.199:3480 +54.246.248.134:3480 +57.128.71.215 +62.109.18.206 +62.212.73.45 +85.114.133.62 +88.42.84.136 +91.204.226.224 +91.241.60.117 +95.213.229.88 +95.213.231.34 +104.155.51.226:443 +104.198.76.219 +117.254.84.212:3000 +130.211.212.60 +139.45.197.151 +139.45.197.152 +139.45.197.153 +139.45.197.154 +141.98.82.232 +142.91.159.0/24 +142.91.159.0/24 +142.91.159.107 142.91.159.127 142.91.159.136 142.91.159.139 @@ -433,10 +543,16 @@ 142.91.159.220 142.91.159.223 142.91.159.244 +143.244.184.39 +146.59.223.83 158.247.208.0/24 158.247.208.115 162.252.214.4 167.99.31.227 +167.206.10.148 +172.255.6.0/24 +172.255.6.2 +172.255.6.59 172.255.6.135 172.255.6.137 172.255.6.139 @@ -444,32 +560,37 @@ 172.255.6.150 172.255.6.152 172.255.6.199 +172.255.6.217 172.255.6.228 172.255.6.248 172.255.6.252 172.255.6.254 -172.255.6.2 -172.255.6.59 +172.255.103.171 +176.31.68.242 +176.114.0.131 +185.147.34.126 +185.161.248.253 +185.246.188.124 +185.246.188.125 +188.42.84.21 +188.42.84.23 188.42.84.110 188.42.84.137 188.42.84.159 188.42.84.160 188.42.84.162 -188.42.84.21 -188.42.84.23 +188.42.84.199 +188.72.219.36 +193.233.132.47 +193.233.132.86 +194.63.140.103 +194.63.143.61 +194.63.143.96 +198.16.64.66 203.195.121.0 -203.195.121.103 -203.195.121.119 -203.195.121.11 -203.195.121.134 -203.195.121.184 -203.195.121.195 +203.195.121.0/24 203.195.121.1 -203.195.121.209 -203.195.121.217 -203.195.121.219 -203.195.121.224 -203.195.121.229 +203.195.121.11 203.195.121.24 203.195.121.28 203.195.121.29 @@ -481,119 +602,16 @@ 203.195.121.72 203.195.121.73 203.195.121.74 -23.109.150.208 -23.109.150.253 -23.109.248.125 -23.109.248.129 -23.109.248.130 -23.109.248.135 -23.109.248.139 -23.109.248.149 -23.109.248.14 -23.109.248.174 -23.109.248.183 -23.109.248.20 -23.109.248.229 -23.109.248.247 -23.109.248.29 -23.109.82.0/24 -23.109.82.119 -23.109.82.173 -23.109.82.202 -23.109.82.44 -23.109.87.0/24 -23.109.87.101 -23.109.87.118 -23.109.87.123 -23.109.87.127 -23.109.87.139 -23.109.87.14 -23.109.87.182 -23.109.87.192 -23.109.87.213 -23.109.87.217 -23.109.87.42 -23.109.87.45 -23.109.87.47 -23.109.87.55 -23.109.87.71 -23.109.87.74 -23.195.91.195 -34.102.137.201 -35.227.234.222 -35.232.188.118 -37.1.209.213 -51.77.227.100 -51.77.227.101 -51.77.227.102 -51.77.227.103 -51.77.227.96 -51.77.227.97 -51.77.227.98 -51.77.227.99 -51.89.187.136 -51.89.187.137 -51.89.187.138 -51.89.187.139 -51.89.187.140 -51.89.187.141 -51.89.187.142 -51.89.187.143 -88.42.84.136 -167.206.10.148 -142.91.159.107 -143.244.184.39 -146.59.223.83 -176.31.68.242 -185.147.34.126 -188.42.84.199 -203.195.121.0/24 -23.109.150.101 -23.109.248.0/24 -23.109.82.104 -23.109.82.74 -23.109.87.15 -5.45.79.15 -51.178.195.171 -51.195.115.102 -51.89.115.13 -35.226.75.50 -35.224.227.218 -35.238.205.163 -5.61.55.143 -37.1.213.100 -23.109.87.170 -91.241.60.117 -185.161.248.253 -188.72.219.36 -117.254.84.212:3000 -185.165.169.108 -57.128.71.215 -185.246.188.125 -185.246.188.124 -194.63.140.103 -194.63.143.61 -194.63.143.96 -104.155.51.226:443 -139.45.197.151 -139.45.197.152 -139.45.197.153 -139.45.197.154 -54.229.21.199:3480 -54.246.248.134:3480 -198.16.64.66 +203.195.121.103 +203.195.121.119 +203.195.121.134 +203.195.121.184 +203.195.121.195 +203.195.121.209 +203.195.121.217 +203.195.121.219 +203.195.121.224 +203.195.121.229 +213.32.115.0/24 213.206.98.70 -23.83.114.131 -172.255.6.0/24 -62.212.73.45 -85.114.133.62 -130.211.212.60 -176.114.0.131 -35.184.188.211 -104.198.76.219 -35.178.185.67 -5.101.115.170 -62.109.18.206 -95.213.229.88 -95.213.231.34 -35.193.89.147 +217.182.11.0/24