From e840c3050f3c8cfa5eef60fc695c69ec36f15fe1 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Sun, 9 Nov 2025 01:47:34 +0100 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 4 +- .../AntiMalwareAdGuard.txt | 5 ++- .../AntiMalwareAdGuardHome.txt | 39 +++++++++---------- .../AntiMalwareDomains.txt | 5 ++- .../AntiMalwarePrivoxy.action | 3 +- .../AntiMalwareTPL.tpl | 4 +- ...and other adblocker lists' IPs for P2P.p2p | 15 +++++++ ...out's and other adblocker lists' IPs.ipset | 15 +++++++ 8 files changed, 65 insertions(+), 25 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index db582f0c3..d453c9605 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 06November2025v3 +! Version: 08November2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -33016,6 +33016,8 @@ www.google.com,ipv6.google.com,google.ac,google.ad,google.ae,google.af,google.ag ! Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO .to/popconsole.php| +! Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) + ! ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— ! https://github.com/DandelionSprout/adfilt/pull/395 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 2aa63e68b..c1f874879 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@  ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 06November2025v3 +! Version: 08November2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -19309,6 +19309,9 @@ www.google.*,ipv6.google.com##div[data-attrid^="images "]:has(a[href*=".aspx?cna ! Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO .to/popconsole.php| +! Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) +google.*###rso > div[class]:has(h3:has-text(/^.*(H\ow\st\o|fre{2})\s(\instal{2}|d\ownl\oad).*$/i):has-text(/^.*(ph\ot\osh\op|dav\inc\i|\il{2}ustrat\or).*$/i):has-text(/^.*(fre{2}|(cr|h)ack).*$/i)) + !#if !ext_ublock ! ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— ! https://github.com/DandelionSprout/adfilt/pull/395 diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index 1973fb09b..b71f796be 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 06November2025v3 +! Version: 08November2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -182,8 +182,8 @@ 54.209.22.226 54.91.125.197 52.202.53.245 -://35.175.38.64^ -://35.168.147.213^ +35.175.38.64 +35.168.147.213 34.230.160.215 3.226.8.132 3.216.243.46 @@ -207,7 +207,6 @@ ! https://github.com/DandelionSprout/adfilt/pull/167 ! https://github.com/AdguardTeam/AdguardFilters/issues/124611 ! (https://github.com/DandelionSprout/adfilt/issues/632) -?bemobdata= ! ——— Found in witness reports online ——— ! Adblock Plus list maintainer weekly reports ||pinoy-offers.com^ @@ -852,7 +851,7 @@ !! https://www.virustotal.com/gui/file/da75c85fe037f9ff9ebbbd0b37dd2ff154f5e70a0dc6870286e0d3df6b8f246f/community 139.28.37.49 !! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community -://35.194.188.37^ +35.194.188.37 !! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community !! https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community 91.243.121.19 @@ -931,7 +930,7 @@ 125.120.13.184 120.12.138.133 27.194.115.185 -://104.128.199.228^ +104.128.199.228 183.92.123.145 110.89.8.126 125.43.211.184 @@ -1025,7 +1024,6 @@ ||yotube.com^ ||security-scanner.xyz^ ! https://github.com/iam-py-test/investigations/blob/main/2021/11/1/1.md -?uclickhash= ! https://www•upwork•com/freelance-jobs/apply/Integarte-push-notification-for-chrome_~013c73ed9282225184/ ||mugrikees.com^ ||alpha-news.org^ @@ -12808,7 +12806,7 @@ http://secured21.*.com/| ||only4leaked.co^ ||thotsbay-leaked.com^ ||inuseme.com^ -://104.206.252.90^ +104.206.252.90 ! https://github.com/blocklistproject/Lists/issues/933 ||jNKmS0zFuEh.click^ ! https://app•any•run/tasks/679e9afa-eb19-4414-a086-e280a779a448 and https://tria•ge/230217-xd8nksgc9x/behavioral2 @@ -13090,7 +13088,7 @@ http://secured21.*.com/| ! https://cside.dev/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attack ||wp3.xyz^ ! Tumblr spammers -://104.21.82.132^ +104.21.82.132 172.67.158.57 198.12.86.90 2606:4700:3030::6815:5284 @@ -14178,17 +14176,17 @@ http://secured21.*.com/| 213.202.211.30 213.202.211.38 2a14:2d81:0:27::1 -://216.245.211.18^ -://216.245.216.178^ -://216.245.216.179^ -://216.245.216.180^ -://216.245.216.181^ -://216.245.216.182^ -://216.246.30.80^ -://216.246.30.81^ -://216.246.30.82^ -://216.246.30.83^ -://216.246.30.84^ +216.245.211.18 +216.245.216.178 +216.245.216.179 +216.245.216.180 +216.245.216.181 +216.245.216.182 +216.246.30.80 +216.246.30.81 +216.246.30.82 +216.246.30.83 +216.246.30.84 ||taylorcopies.com^ ||atypicalnorms.com^ ||beastlyendeavors.com^ @@ -15856,6 +15854,7 @@ http://secured21.*.com/| 185.53.178.54 ! Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO .to/popconsole.php| +! Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) ! ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— ! https://github.com/DandelionSprout/adfilt/pull/395 ! https://www•huorong•cn/info/1531309921141.html diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 52ebf321e..78df8be18 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 06November2025v3 +# Version: 08November2025v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -17597,6 +17597,9 @@ yellowdragon.com # Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO +# Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) + + # ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— # https://github.com/DandelionSprout/adfilt/pull/395 diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index 30a4e9d51..f444f0d25 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 06November2025v3-Deprecated +# Version: 08November2025v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -17093,6 +17093,7 @@ .to/popconsole.php + {+block} # ——— Entries that are and/or were in "uBlock Filters — Ads" and/or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— .kuaizip.com diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 0adfe270e..eb2f3a73b 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 06November2025v3-Deprecated +# Version: 08November2025v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -17508,6 +17508,8 @@ sp?url=http://xn--*.xn--p1ai/ # Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO o popconsole.php +# Sus(picious) search results for YouTube videos that claim to have craсks for Adоbe products. (https://github.com/DandelionSprout/adfilt/issues/1197) + # ——— Entries that are and or were in "uBlock Filters — Ads" and or "uBlock Filters — Badware Risks" but which aren't in AdGuard Base or EasyList ——— # https://github.com/DandelionSprout/adfilt/pull/395 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p index cdc6c0975..a6011388a 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p @@ -575,6 +575,21 @@ F:47.76.132.29-47.76.132.29 F:109.230.237.116-109.230.237.116 F:147.93.63.211-147.93.63.211 F:154.223.16.232-154.223.16.232 +F:157.90.33.79-157.90.33.79 +F:173.239.53.20-173.239.53.20 +F:178.63.248.53-178.63.248.53 +F:18.142.131.147-18.142.131.147 +F:18.202.86.139-18.202.86.139 +F:198.134.116.17-198.134.116.17 +F:198.134.116.30-198.134.116.30 +F:37.48.80.112-37.48.80.112 +F:52.72.216.6-52.72.216.6 +F:94.130.197.238-94.130.197.238 +F:63.33.119.172-63.33.119.172 +F:52.207.126.104-52.207.126.104 +F-IPv6:[2604:9e00:1:129::2:b10]-[2604:9e00:1:129::2:b10] +F-IPv6:[2606:4700:3033::6815:5644]-[2606:4700:3033::6815:5644] +F-IPv6:[2a01:4f8:2201:388a::2]-[2a01:4f8:2201:388a::2] F:103.67.200.64-103.67.200.64 F:198.134.116.17-198.134.116.17 F:198.134.116.30-198.134.116.30 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 345cfc824..e63de192c 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -575,6 +575,21 @@ 109.230.237.116 147.93.63.211 154.223.16.232 +157.90.33.79 +173.239.53.20 +178.63.248.53 +18.142.131.147 +18.202.86.139 +198.134.116.17 +198.134.116.30 +37.48.80.112 +52.72.216.6 +94.130.197.238 +63.33.119.172 +52.207.126.104 +[2604:9e00:1:129::2:b10] +[2606:4700:3033::6815:5644] +[2a01:4f8:2201:388a::2] 103.67.200.64 198.134.116.17 198.134.116.30