From f97633d277c311fd7a59974b7f496bdafb1fe9d2 Mon Sep 17 00:00:00 2001 From: Imre Kristoffer Eilertsen Date: Sun, 24 Sep 2023 06:31:21 +0200 Subject: [PATCH] Fix https://github.com/AdguardTeam/AdguardFilters/issues/162372 --- .../AntiMalwareABP.txt | 722 +++++++++--------- .../AntiMalwareAdGuard.txt | 4 +- .../AntiMalwareAdGuardHome.txt | 3 +- .../AntiMalwareDomains.txt | 2 +- .../AntiMalwareHosts.txt | 2 +- .../AntiMalwarePrivoxy.action | 2 +- .../AntiMalwareTPL.tpl | 2 +- 7 files changed, 369 insertions(+), 368 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index f5bf3375d..2c07d9c91 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Adblock Plus and AdBlock) -! Version: 22September2023v1 +! Version: 24September2023v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -33,7 +33,7 @@ ! https://github.com/AdguardTeam/AdguardFilters/issues/131156 ||sbs^ ! https://github.com/DandelionSprout/adfilt/issues/659 -||discount^ +||discount^$domain=~real.discount ! https://github.com/AdguardTeam/AdguardFilters/issues/137635 ||cfd^$domain=~frcoal.cfd ! Experimental attempt to cover a few hardcore spam ASNs @@ -33324,600 +33324,600 @@ zombooru.com##a[href="http://www.hard55.com"] ://trk.*.run/ ! https://github.com/AdguardTeam/AdguardFilters/issues/159157 ||apbbjmp.com^ -||apbbjmp.com^$popup,~inline-script +||apbbjmp.com^$popup ||apptjmp.com^ -||apptjmp.com^$popup,~inline-script +||apptjmp.com^$popup ||awbbgate.com^ -||awbbgate.com^$popup,~inline-script +||awbbgate.com^$popup ||awbbjmp.com^ -||awbbjmp.com^$popup,~inline-script +||awbbjmp.com^$popup ||awecrjmp.com^ -||awecrjmp.com^$popup,~inline-script +||awecrjmp.com^$popup ||awecrptjmp.com^ -||awecrptjmp.com^$popup,~inline-script +||awecrptjmp.com^$popup ||awejmp.com^ -||awejmp.com^$popup,~inline-script +||awejmp.com^$popup ||aweptjmp.com^ -||aweptjmp.com^$popup,~inline-script +||aweptjmp.com^$popup ||awptjmp.com^ -||awptjmp.com^$popup,~inline-script +||awptjmp.com^$popup ||bbcrgate.com^ -||bbcrgate.com^$popup,~inline-script +||bbcrgate.com^$popup ||bbentgate.com^ -||bbentgate.com^$popup,~inline-script +||bbentgate.com^$popup ||chryjmp.com^ -||chryjmp.com^$popup,~inline-script +||chryjmp.com^$popup ||click.jasmin.com^ -||click.jasmin.com^$popup,~inline-script +||click.jasmin.com^$popup ||crbbgate.com^ -||crbbgate.com^$popup,~inline-script +||crbbgate.com^$popup ||crbbjmp.com^ -||crbbjmp.com^$popup,~inline-script +||crbbjmp.com^$popup ||crengate.com^ -||crengate.com^$popup,~inline-script +||crengate.com^$popup ||crentexgate.com^ -||crentexgate.com^$popup,~inline-script +||crentexgate.com^$popup ||crentgate.com^ -||crentgate.com^$popup,~inline-script +||crentgate.com^$popup ||crepgate.com^ -||crepgate.com^$popup,~inline-script +||crepgate.com^$popup ||cretgate.com^ -||cretgate.com^$popup,~inline-script +||cretgate.com^$popup ||crjpgate.com^ -||crjpgate.com^$popup,~inline-script +||crjpgate.com^$popup ||crjpingate.com^ -||crjpingate.com^$popup,~inline-script +||crjpingate.com^$popup ||crjugate.com^ -||crjugate.com^$popup,~inline-script +||crjugate.com^$popup ||crmentjg.com^ -||crmentjg.com^$popup,~inline-script +||crmentjg.com^$popup ||crptentry.com^ -||crptentry.com^$popup,~inline-script +||crptentry.com^$popup ||crptgate.com^ -||crptgate.com^$popup,~inline-script +||crptgate.com^$popup ||crtajmp.com^ -||crtajmp.com^$popup,~inline-script +||crtajmp.com^$popup ||crtjmp.com^ -||crtjmp.com^$popup,~inline-script +||crtjmp.com^$popup ||crtmainjmp.com^ -||crtmainjmp.com^$popup,~inline-script +||crtmainjmp.com^$popup ||entjgcr.com^ -||entjgcr.com^$popup,~inline-script +||entjgcr.com^$popup ||jsmcrjmp.com^ -||jsmcrjmp.com^$popup,~inline-script +||jsmcrjmp.com^$popup ||jsmcrptjmp.com^ -||jsmcrptjmp.com^$popup,~inline-script +||jsmcrptjmp.com^$popup ||jsmentry.com^ -||jsmentry.com^$popup,~inline-script +||jsmentry.com^$popup ||jsmjmp.com^ -||jsmjmp.com^$popup,~inline-script +||jsmjmp.com^$popup ||jsmptjmp.com^ -||jsmptjmp.com^$popup,~inline-script +||jsmptjmp.com^$popup ||mptentry.com^ -||mptentry.com^$popup,~inline-script +||mptentry.com^$popup ||mptgate.com^ -||mptgate.com^$popup,~inline-script +||mptgate.com^$popup ||protojsmgw.com^ -||protojsmgw.com^$popup,~inline-script +||protojsmgw.com^$popup ||prtord.com^ -||prtord.com^$popup,~inline-script +||prtord.com^$popup ||ptapjmp.com^ -||ptapjmp.com^$popup,~inline-script +||ptapjmp.com^$popup ||ptbbjmp.com^ -||ptbbjmp.com^$popup,~inline-script +||ptbbjmp.com^$popup ||ptcrwmjmp.com^ -||ptcrwmjmp.com^$popup,~inline-script +||ptcrwmjmp.com^$popup ||ptentry.com^ -||ptentry.com^$popup,~inline-script +||ptentry.com^$popup ||ptosrd.com^ -||ptosrd.com^$popup,~inline-script +||ptosrd.com^$popup ||ptwmbed.com^ -||ptwmbed.com^$popup,~inline-script +||ptwmbed.com^$popup ||ptwmjmp.com^ -||ptwmjmp.com^$popup,~inline-script +||ptwmjmp.com^$popup ||wmptengate.com^ -||wmptengate.com^$popup,~inline-script +||wmptengate.com^$popup ||93.93.51.223^ -||93.93.51.223^$popup,~inline-script +||93.93.51.223^$popup ||livejasmin.com/*&origin= ! https://github.com/AdguardTeam/AdguardFilters/issues/161364 ! (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) /(//|\.|^)github\.[a-z]{2,20}(/|$)/,domain=~com|~org|~net|~co|~blog|~community|~host|~io|~microsoft|~office|~uk|~us|~xn--fiqs8s|~dev ||github.sale^ -||github.sale^$popup,~inline-script +||github.sale^$popup ! https://www.tv2.no/nyheter/innenriks/advarer-ikke-klikk-pa-lenken/16040614/ ||0nedr1ved0cumentonline.com^ -||0nedr1ved0cumentonline.com^$popup,~inline-script +||0nedr1ved0cumentonline.com^$popup ||88godetailsvc.com^ -||88godetailsvc.com^$popup,~inline-script +||88godetailsvc.com^$popup ||amexmobileupdate.cc^ -||amexmobileupdate.cc^$popup,~inline-script +||amexmobileupdate.cc^$popup ||amexrewardsnotification.com^ -||amexrewardsnotification.com^$popup,~inline-script +||amexrewardsnotification.com^$popup ||anydesk-se.com^ -||anydesk-se.com^$popup,~inline-script +||anydesk-se.com^$popup ||apple-walletsuspension. -||apple-walletsuspension.$popup,~inline-script +||apple-walletsuspension.$popup ||audhlredelivery.com^ -||audhlredelivery.com^$popup,~inline-script +||audhlredelivery.com^$popup ||aux0.info^ -||aux0.info^$popup,~inline-script +||aux0.info^$popup ||avantages-lacarte.com^ -||avantages-lacarte.com^$popup,~inline-script +||avantages-lacarte.com^$popup ||aweisongs.com^ -||aweisongs.com^$popup,~inline-script +||aweisongs.com^$popup ||b-ase-wallet.com^ -||b-ase-wallet.com^$popup,~inline-script +||b-ase-wallet.com^$popup ||b1h.online^ -||b1h.online^$popup,~inline-script +||b1h.online^$popup ||b3g.site^ -||b3g.site^$popup,~inline-script +||b3g.site^$popup ||b8h.site^ -||b8h.site^$popup,~inline-script +||b8h.site^$popup ||backup7799.com^ -||backup7799.com^$popup,~inline-script +||backup7799.com^$popup ||bananasgun.io^ -||bananasgun.io^$popup,~inline-script +||bananasgun.io^$popup ||base-wallet-io.com^ -||base-wallet-io.com^$popup,~inline-script +||base-wallet-io.com^$popup ||binance-sverige.com^ -||binance-sverige.com^$popup,~inline-script +||binance-sverige.com^$popup ||blishesiyed.com^ -||blishesiyed.com^$popup,~inline-script +||blishesiyed.com^$popup ||bn4.online^ -||bn4.online^$popup,~inline-script +||bn4.online^$popup ||bn7.site^ -||bn7.site^$popup,~inline-script +||bn7.site^$popup ||bnk1.site^ -||bnk1.site^$popup,~inline-script +||bnk1.site^$popup ||boaaccountmanagment.com^ -||boaaccountmanagment.com^$popup,~inline-script +||boaaccountmanagment.com^$popup ||boi-helpdesk.com^ -||boi-helpdesk.com^$popup,~inline-script +||boi-helpdesk.com^$popup ||box-token.com^ -||box-token.com^$popup,~inline-script +||box-token.com^$popup ||box-token.live^ -||box-token.live^$popup,~inline-script +||box-token.live^$popup ||brugerverificering.com^ -||brugerverificering.com^$popup,~inline-script +||brugerverificering.com^$popup ||bulksmsgakkin.com^ -||bulksmsgakkin.com^$popup,~inline-script +||bulksmsgakkin.com^$popup ||c2d.tech^ -||c2d.tech^$popup,~inline-script +||c2d.tech^$popup ||c2w.site^ -||c2w.site^$popup,~inline-script +||c2w.site^$popup ||carte-avantages.com^ -||carte-avantages.com^$popup,~inline-script +||carte-avantages.com^$popup ||charutboll.com^ -||charutboll.com^$popup,~inline-script +||charutboll.com^$popup ||chaseverifications.com^ -||chaseverifications.com^$popup,~inline-script +||chaseverifications.com^$popup ||cloud-network.online^ -||cloud-network.online^$popup,~inline-script +||cloud-network.online^$popup ||cmcmdirrect.com^ -||cmcmdirrect.com^$popup,~inline-script +||cmcmdirrect.com^$popup ||coltersaidas.com^ -||coltersaidas.com^$popup,~inline-script +||coltersaidas.com^$popup ||com-96-hours.com^ -||com-96-hours.com^$popup,~inline-script +||com-96-hours.com^$popup ||com-96hours.com^ -||com-96hours.com^$popup,~inline-script +||com-96hours.com^$popup ||com-cancel1408.com^ -||com-cancel1408.com^$popup,~inline-script +||com-cancel1408.com^$popup ||com-cancel1408.live^ -||com-cancel1408.live^$popup,~inline-script +||com-cancel1408.live^$popup ||confermareleinformazioni.com^ -||confermareleinformazioni.com^$popup,~inline-script +||confermareleinformazioni.com^$popup ||confirm-eur-fina.info^ -||confirm-eur-fina.info^$popup,~inline-script +||confirm-eur-fina.info^$popup ||corporate-helpcenter.com^ -||corporate-helpcenter.com^$popup,~inline-script +||corporate-helpcenter.com^$popup ||cow-fi.finance^ -||cow-fi.finance^$popup,~inline-script +||cow-fi.finance^$popup ||cow-fi.live^ -||cow-fi.live^$popup,~inline-script +||cow-fi.live^$popup ||cprapid.com^ -||cprapid.com^$popup,~inline-script +||cprapid.com^$popup ||d8u.online^ -||d8u.online^$popup,~inline-script +||d8u.online^$popup ||dhcjcjjdjcjzengkfj.xyz^ -||dhcjcjjdjcjzengkfj.xyz^$popup,~inline-script +||dhcjcjjdjcjzengkfj.xyz^$popup ||dhl-trackng.com^ -||dhl-trackng.com^$popup,~inline-script +||dhl-trackng.com^$popup ||dnb-oppdater. -||dnb-oppdater.$popup,~inline-script +||dnb-oppdater.$popup ||dubbz.app^ -||dubbz.app^$popup,~inline-script +||dubbz.app^$popup ||e-w3sfgo.ws^ -||e-w3sfgo.ws^$popup,~inline-script +||e-w3sfgo.ws^$popup ||e2d.site^ -||e2d.site^$popup,~inline-script +||e2d.site^$popup ||enel-pagamento.net^ -||enel-pagamento.net^$popup,~inline-script +||enel-pagamento.net^$popup ||f2t.tech^ -||f2t.tech^$popup,~inline-script +||f2t.tech^$popup ||f3r.online^ -||f3r.online^$popup,~inline-script +||f3r.online^$popup ||friclusconnect.com^ -||friclusconnect.com^$popup,~inline-script +||friclusconnect.com^$popup ||g1r.site^ -||g1r.site^$popup,~inline-script +||g1r.site^$popup ||g2f.site^ -||g2f.site^$popup,~inline-script +||g2f.site^$popup ||g2h.site^ -||g2h.site^$popup,~inline-script +||g2h.site^$popup ||g2j.site^ -||g2j.site^$popup,~inline-script +||g2j.site^$popup ||g2k.site^ -||g2k.site^$popup,~inline-script +||g2k.site^$popup ||g2t.online^ -||g2t.online^$popup,~inline-script +||g2t.online^$popup ||g2t.tech^ -||g2t.tech^$popup,~inline-script +||g2t.tech^$popup ||g3e.site^ -||g3e.site^$popup,~inline-script +||g3e.site^$popup ||g3t.site^ -||g3t.site^$popup,~inline-script +||g3t.site^$popup ||g4r.site^ -||g4r.site^$popup,~inline-script +||g4r.site^$popup ||g4z.site^ -||g4z.site^$popup,~inline-script +||g4z.site^$popup ||g5r.online^ -||g5r.online^$popup,~inline-script +||g5r.online^$popup ||g6t.site^ -||g6t.site^$popup,~inline-script +||g6t.site^$popup ||g7t.site^ -||g7t.site^$popup,~inline-script +||g7t.site^$popup ||gr-cancel.com^ -||gr-cancel.com^$popup,~inline-script +||gr-cancel.com^$popup ||gr-cancel.live^ -||gr-cancel.live^$popup,~inline-script +||gr-cancel.live^$popup ||gr-verif.live^ -||gr-verif.live^$popup,~inline-script +||gr-verif.live^$popup ||gr-verify.com^ -||gr-verify.com^$popup,~inline-script +||gr-verify.com^$popup ||gr-verify.live^ -||gr-verify.live^$popup,~inline-script +||gr-verify.live^$popup ||gr3.site^ -||gr3.site^$popup,~inline-script +||gr3.site^$popup ||growfindirect.com^ -||growfindirect.com^$popup,~inline-script +||growfindirect.com^$popup ||guetsebas.com^ -||guetsebas.com^$popup,~inline-script +||guetsebas.com^$popup ||guiser-staking.com^ -||guiser-staking.com^$popup,~inline-script +||guiser-staking.com^$popup ||gy9.site^ -||gy9.site^$popup,~inline-script +||gy9.site^$popup ||h1t.site^ -||h1t.site^$popup,~inline-script +||h1t.site^$popup ||h2r.site^ -||h2r.site^$popup,~inline-script +||h2r.site^$popup ||h2z.site^ -||h2z.site^$popup,~inline-script +||h2z.site^$popup ||h3j.tech^ -||h3j.tech^$popup,~inline-script +||h3j.tech^$popup ||h3t.site^ -||h3t.site^$popup,~inline-script +||h3t.site^$popup ||h4r.site^ -||h4r.site^$popup,~inline-script +||h4r.site^$popup ||h4r.tech^ -||h4r.tech^$popup,~inline-script +||h4r.tech^$popup ||h5h.site^ -||h5h.site^$popup,~inline-script +||h5h.site^$popup ||h5r.online^ -||h5r.online^$popup,~inline-script +||h5r.online^$popup ||h5s.site^ -||h5s.site^$popup,~inline-script +||h5s.site^$popup ||h5t.online^ -||h5t.online^$popup,~inline-script +||h5t.online^$popup ||h5t.site^ -||h5t.site^$popup,~inline-script +||h5t.site^$popup ||h7z.online^ -||h7z.online^$popup,~inline-script +||h7z.online^$popup ||http-surfacesso.com^ -||http-surfacesso.com^$popup,~inline-script +||http-surfacesso.com^$popup ||https-evri.com^ -||https-evri.com^$popup,~inline-script +||https-evri.com^$popup ||info-personal-me.com^ -||info-personal-me.com^$popup,~inline-script +||info-personal-me.com^$popup ||iportal-net.com^ -||iportal-net.com^$popup,~inline-script +||iportal-net.com^$popup ||j1r.site^ -||j1r.site^$popup,~inline-script +||j1r.site^$popup ||j2q.tech^ -||j2q.tech^$popup,~inline-script +||j2q.tech^$popup ||j2r.online^ -||j2r.online^$popup,~inline-script +||j2r.online^$popup ||j2y.online^ -||j2y.online^$popup,~inline-script +||j2y.online^$popup ||k2r.site^ -||k2r.site^$popup,~inline-script +||k2r.site^$popup ||k8e.online^ -||k8e.online^$popup,~inline-script +||k8e.online^$popup ||kucoin-mysterybox.com^ -||kucoin-mysterybox.com^$popup,~inline-script +||kucoin-mysterybox.com^$popup ||l2r.site^ -||l2r.site^$popup,~inline-script +||l2r.site^$popup ||laso.cards^ -||laso.cards^$popup,~inline-script +||laso.cards^$popup ||laso.money^ -||laso.money^$popup,~inline-script +||laso.money^$popup ||lendingtree0.com^ -||lendingtree0.com^$popup,~inline-script +||lendingtree0.com^$popup ||likvorators.com^ -||likvorators.com^$popup,~inline-script +||likvorators.com^$popup ||linkednordersalenavigate.com^ -||linkednordersalenavigate.com^$popup,~inline-script +||linkednordersalenavigate.com^$popup ||livechat-business.com^ -||livechat-business.com^$popup,~inline-script +||livechat-business.com^$popup ||livechat-uk.com^ -||livechat-uk.com^$popup,~inline-script +||livechat-uk.com^$popup ||m2r.site^ -||m2r.site^$popup,~inline-script +||m2r.site^$popup ||ma-carteavantages.com^ -||ma-carteavantages.com^$popup,~inline-script +||ma-carteavantages.com^$popup ||mailservices-check.com^ -||mailservices-check.com^$popup,~inline-script +||mailservices-check.com^$popup ||mbpersonal-reregister.com^ -||mbpersonal-reregister.com^$popup,~inline-script +||mbpersonal-reregister.com^$popup ||mdateconnect.com^ -||mdateconnect.com^$popup,~inline-script +||mdateconnect.com^$popup ||microsoft-verif.com^ -||microsoft-verif.com^$popup,~inline-script +||microsoft-verif.com^$popup ||mobiilipaivitys.com^ -||mobiilipaivitys.com^$popup,~inline-script +||mobiilipaivitys.com^$popup ||mobilidentitet.com^ -||mobilidentitet.com^$popup,~inline-script +||mobilidentitet.com^$popup ||mobiltrygheden.com^ -||mobiltrygheden.com^$popup,~inline-script +||mobiltrygheden.com^$popup ||mobilunderskriv.com^ -||mobilunderskriv.com^$popup,~inline-script +||mobilunderskriv.com^$popup ||msggovau.com^ -||msggovau.com^$popup,~inline-script +||msggovau.com^$popup ||msoft-engine.com^ -||msoft-engine.com^$popup,~inline-script +||msoft-engine.com^$popup ||mydashver.com^ -||mydashver.com^$popup,~inline-script +||mydashver.com^$popup ||mygovvsignindirectau.com^ -||mygovvsignindirectau.com^$popup,~inline-script +||mygovvsignindirectau.com^$popup ||mynewed.icu^ -||mynewed.icu^$popup,~inline-script +||mynewed.icu^$popup ||myrevoiut.com^ -||myrevoiut.com^$popup,~inline-script +||myrevoiut.com^$popup ||mysecure-soft.com^ -||mysecure-soft.com^$popup,~inline-script +||mysecure-soft.com^$popup ||myshortlink404.com^ -||myshortlink404.com^$popup,~inline-script +||myshortlink404.com^$popup ||myveridanvcuconnect.com^ -||myveridanvcuconnect.com^$popup,~inline-script +||myveridanvcuconnect.com^$popup ||n2a.online^ -||n2a.online^$popup,~inline-script +||n2a.online^$popup ||n2f.online^ -||n2f.online^$popup,~inline-script +||n2f.online^$popup ||n2l.site^ -||n2l.site^$popup,~inline-script +||n2l.site^$popup ||n2r.tech^ -||n2r.tech^$popup,~inline-script +||n2r.tech^$popup ||n2t.online^ -||n2t.online^$popup,~inline-script +||n2t.online^$popup ||n2w.online^ -||n2w.online^$popup,~inline-script +||n2w.online^$popup ||n2w.site^ -||n2w.site^$popup,~inline-script +||n2w.site^$popup ||n2z.site^ -||n2z.site^$popup,~inline-script +||n2z.site^$popup ||n3z.tech^ -||n3z.tech^$popup,~inline-script +||n3z.tech^$popup ||natwest-helpdesk.com^ -||natwest-helpdesk.com^$popup,~inline-script +||natwest-helpdesk.com^$popup ||nexipaydettagli.com^ -||nexipaydettagli.com^$popup,~inline-script +||nexipaydettagli.com^$popup ||nikaryusav.com^ -||nikaryusav.com^$popup,~inline-script +||nikaryusav.com^$popup ||no-aut.co^ -||no-aut.co^$popup,~inline-script +||no-aut.co^$popup ||no-bekreft.com^ -||no-bekreft.com^$popup,~inline-script +||no-bekreft.com^$popup ||no-confir.com^ -||no-confir.com^$popup,~inline-script +||no-confir.com^$popup ||no-erne.com^ -||no-erne.com^$popup,~inline-script +||no-erne.com^$popup ||no-erne.live^ -||no-erne.live^$popup,~inline-script +||no-erne.live^$popup ||no-nye.live^ -||no-nye.live^$popup,~inline-script +||no-nye.live^$popup ||no-renovere.com^ -||no-renovere.com^$popup,~inline-script +||no-renovere.com^$popup ||no-sikkerhet.com^ -||no-sikkerhet.com^$popup,~inline-script +||no-sikkerhet.com^$popup ||no-update.live^ -||no-update.live^$popup,~inline-script +||no-update.live^$popup ||no-updater.live^ -||no-updater.live^$popup,~inline-script +||no-updater.live^$popup ||offxie3656.com^ -||offxie3656.com^$popup,~inline-script +||offxie3656.com^$popup ||opasklas.com^ -||opasklas.com^$popup,~inline-script +||opasklas.com^$popup ||paywide.cards^ -||paywide.cards^$popup,~inline-script +||paywide.cards^$popup ||promo-carte-avantages.com^ -||promo-carte-avantages.com^$popup,~inline-script +||promo-carte-avantages.com^$popup ||qc1.site^ -||qc1.site^$popup,~inline-script +||qc1.site^$popup ||redirect2url.com^ -||redirect2url.com^$popup,~inline-script +||redirect2url.com^$popup ||revoiut-cy.com^ -||revoiut-cy.com^$popup,~inline-script +||revoiut-cy.com^$popup ||revoke.money^ -||revoke.money^$popup,~inline-script +||revoke.money^$popup ||richiediilrimborso.com^ -||richiediilrimborso.com^$popup,~inline-script +||richiediilrimborso.com^$popup ||s2t.site^ -||s2t.site^$popup,~inline-script +||s2t.site^$popup ||s3cure8onlineauth4w.com^ -||s3cure8onlineauth4w.com^$popup,~inline-script +||s3cure8onlineauth4w.com^$popup ||s3g.site^ -||s3g.site^$popup,~inline-script +||s3g.site^$popup ||s9u.site^ -||s9u.site^$popup,~inline-script +||s9u.site^$popup ||se-godkanna.co^ -||se-godkanna.co^$popup,~inline-script +||se-godkanna.co^$popup ||secure-chatlive.com^ -||secure-chatlive.com^$popup,~inline-script +||secure-chatlive.com^$popup ||secure1verify3wprofile.com^ -||secure1verify3wprofile.com^$popup,~inline-script +||secure1verify3wprofile.com^$popup ||securecase4311bao.com^ -||securecase4311bao.com^$popup,~inline-script +||securecase4311bao.com^$popup ||separaconnect.com^ -||separaconnect.com^$popup,~inline-script +||separaconnect.com^$popup ||seypulch.com^ -||seypulch.com^$popup,~inline-script +||seypulch.com^$popup ||shibavpepe.io^ -||shibavpepe.io^$popup,~inline-script +||shibavpepe.io^$popup ||shorty5io.com^ -||shorty5io.com^$popup,~inline-script +||shorty5io.com^$popup ||spokanemember.com^ -||spokanemember.com^$popup,~inline-script +||spokanemember.com^$popup ||sq5.online^ -||sq5.online^$popup,~inline-script +||sq5.online^$popup ||sq9.online^ -||sq9.online^$popup,~inline-script +||sq9.online^$popup ||sqn1.site^ -||sqn1.site^$popup,~inline-script +||sqn1.site^$popup ||standard-bank-za.com^ -||standard-bank-za.com^$popup,~inline-script +||standard-bank-za.com^$popup ||standard-bankza.live^ -||standard-bankza.live^$popup,~inline-script +||standard-bankza.live^$popup ||standardbank-za.live^ -||standardbank-za.live^$popup,~inline-script +||standardbank-za.live^$popup ||standardbankingza.com^ -||standardbankingza.com^$popup,~inline-script +||standardbankingza.com^$popup ||standardbankza.live^ -||standardbankza.live^$popup,~inline-script +||standardbankza.live^$popup ||start-myaltinn.com^ -||start-myaltinn.com^$popup,~inline-script +||start-myaltinn.com^$popup ||suportslfcu.org^ -||suportslfcu.org^$popup,~inline-script +||suportslfcu.org^$popup ||t2n.site^ -||t2n.site^$popup,~inline-script +||t2n.site^$popup ||t3k.site^ -||t3k.site^$popup,~inline-script +||t3k.site^$popup ||t5e.site^ -||t5e.site^$popup,~inline-script +||t5e.site^$popup ||t6w.site^ -||t6w.site^$popup,~inline-script +||t6w.site^$popup ||tassa-postale.com^ -||tassa-postale.com^$popup,~inline-script +||tassa-postale.com^$popup ||tdstelecommverify.com^ -||tdstelecommverify.com^$popup,~inline-script +||tdstelecommverify.com^$popup ||tide-register.com^ -||tide-register.com^$popup,~inline-script +||tide-register.com^$popup ||tothecarle.com^ -||tothecarle.com^$popup,~inline-script +||tothecarle.com^$popup ||tracparcelservee.com^ -||tracparcelservee.com^$popup,~inline-script +||tracparcelservee.com^$popup ||uae-open.com^ -||uae-open.com^$popup,~inline-script +||uae-open.com^$popup ||ucs0vantagewest.org^ -||ucs0vantagewest.org^$popup,~inline-script +||ucs0vantagewest.org^$popup ||uk-ref628272.app^ -||uk-ref628272.app^$popup,~inline-script +||uk-ref628272.app^$popup ||usaa-xnet.one^ -||usaa-xnet.one^$popup,~inline-script +||usaa-xnet.one^$popup ||usaafsbk.com^ -||usaafsbk.com^$popup,~inline-script +||usaafsbk.com^$popup ||uusitietosi.org^ -||uusitietosi.org^$popup,~inline-script +||uusitietosi.org^$popup ||vault-lock.com^ -||vault-lock.com^$popup,~inline-script +||vault-lock.com^$popup ||vault-support.live^ -||vault-support.live^$popup,~inline-script +||vault-support.live^$popup ||vercuia.com^ -||vercuia.com^$popup,~inline-script +||vercuia.com^$popup ||verdashboard.com^ -||verdashboard.com^$popup,~inline-script +||verdashboard.com^$popup ||verebranch.com^ -||verebranch.com^$popup,~inline-script +||verebranch.com^$popup ||veri02fy.com^ -||veri02fy.com^$popup,~inline-script +||veri02fy.com^$popup ||veridiansenseintech.com^ -||veridiansenseintech.com^$popup,~inline-script +||veridiansenseintech.com^$popup ||votrecarteavantages.com^ -||votrecarteavantages.com^$popup,~inline-script +||votrecarteavantages.com^$popup ||w1w.tech^ -||w1w.tech^$popup,~inline-script +||w1w.tech^$popup ||w3lls3cure4-auth5w.com^ -||w3lls3cure4-auth5w.com^$popup,~inline-script +||w3lls3cure4-auth5w.com^$popup ||w9t.site^ -||w9t.site^$popup,~inline-script +||w9t.site^$popup ||wastemanagementpompano.com^ -||wastemanagementpompano.com^$popup,~inline-script +||wastemanagementpompano.com^$popup ||wise-reregister.com^ -||wise-reregister.com^$popup,~inline-script +||wise-reregister.com^$popup ||xchecz.xyz^ -||xchecz.xyz^$popup,~inline-script +||xchecz.xyz^$popup ||y2w.site^ -||y2w.site^$popup,~inline-script +||y2w.site^$popup ||y3r.site^ -||y3r.site^$popup,~inline-script +||y3r.site^$popup ||z2i.tech^ -||z2i.tech^$popup,~inline-script +||z2i.tech^$popup ||no-forny* ||no-forny*$popup,domain=~no ||my-altinn* ||my-altinn*$popup,domain=~no ||no-oppdatere. -||no-oppdatere.$popup,~inline-script +||no-oppdatere.$popup ||no-oppdatert. ||no-oppdatert.$popup,domain=~no ||179.43.189.62 -||179.43.189.62$popup,~inline-script +||179.43.189.62$popup ! https://new.reddit.com/r/engrish/comments/16lg4i1/seems_legit/ ||authde.us^ -||authde.us^$popup,~inline-script +||authde.us^$popup ||dc-r.us^ -||dc-r.us^$popup,~inline-script +||dc-r.us^$popup ||de-po.us^ -||de-po.us^$popup,~inline-script +||de-po.us^$popup ||fr-p.us^ -||fr-p.us^$popup,~inline-script +||fr-p.us^$popup ||ge-op.us^ -||ge-op.us^$popup,~inline-script +||ge-op.us^$popup ||gr-ui.us^ -||gr-ui.us^$popup,~inline-script +||gr-ui.us^$popup ||irsac.us^ -||irsac.us^$popup,~inline-script +||irsac.us^$popup ||irsad.us^ -||irsad.us^$popup,~inline-script +||irsad.us^$popup ||irsae.us^ -||irsae.us^$popup,~inline-script +||irsae.us^$popup ||irsam.us^ -||irsam.us^$popup,~inline-script +||irsam.us^$popup ||irsat.us^ -||irsat.us^$popup,~inline-script +||irsat.us^$popup ||irsaz.us^ -||irsaz.us^$popup,~inline-script +||irsaz.us^$popup ||irsbh.us^ -||irsbh.us^$popup,~inline-script +||irsbh.us^$popup ||irsdj.us^ -||irsdj.us^$popup,~inline-script +||irsdj.us^$popup ||m-ir.us^ -||m-ir.us^$popup,~inline-script +||m-ir.us^$popup ||mag-er.us^ -||mag-er.us^$popup,~inline-script +||mag-er.us^$popup ||tr-po.us^ -||tr-po.us^$popup,~inline-script +||tr-po.us^$popup ||upsmo.us^ -||upsmo.us^$popup,~inline-script +||upsmo.us^$popup ||upsre.us^ -||upsre.us^$popup,~inline-script +||upsre.us^$popup ||upste.us^ -||upste.us^$popup,~inline-script +||upste.us^$popup ||upstr.us^ -||upstr.us^$popup,~inline-script +||upstr.us^$popup ||reschedule-delivery.ups.com. ||103.174.102.240^ -||103.174.102.240^$popup,~inline-script +||103.174.102.240^$popup ! β€”β€”β€” Standard malware that I stumbled upon on my own β€”β€”β€” ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -44635,141 +44635,141 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] tumblr.com#?#div[tabindex][style]:has(a[href*="tinyurl."]:has-text(_1+8_)) ! A scam SMS I got ||95-214-26-78.plesk.page^ -||95-214-26-78.plesk.page^$popup,~inline-script +||95-214-26-78.plesk.page^$popup ||account-limitato.org^ -||account-limitato.org^$popup,~inline-script +||account-limitato.org^$popup ||accueil-ameli.ddns.net^ -||accueil-ameli.ddns.net^$popup,~inline-script +||accueil-ameli.ddns.net^$popup ||amende-telepaiements.com^ -||amende-telepaiements.com^$popup,~inline-script +||amende-telepaiements.com^$popup ||antai-infoo.com^ -||antai-infoo.com^$popup,~inline-script +||antai-infoo.com^$popup ||bank-authenticatorpay.com^ -||bank-authenticatorpay.com^$popup,~inline-script +||bank-authenticatorpay.com^$popup ||chronopost-incident-colis.com^ -||chronopost-incident-colis.com^$popup,~inline-script +||chronopost-incident-colis.com^$popup ||colis-centre.fr^ -||colis-centre.fr^$popup,~inline-script +||colis-centre.fr^$popup ||colischronopost-support.info^ -||colischronopost-support.info^$popup,~inline-script +||colischronopost-support.info^$popup ||contact-delivery-armx.com^ -||contact-delivery-armx.com^$popup,~inline-script +||contact-delivery-armx.com^$popup ||contravention-info.ddns.net^ -||contravention-info.ddns.net^$popup,~inline-script +||contravention-info.ddns.net^$popup ||custom-assisttracking.com^ -||custom-assisttracking.com^$popup,~inline-script +||custom-assisttracking.com^$popup ||customers-qa-post.com^ -||customers-qa-post.com^$popup,~inline-script +||customers-qa-post.com^$popup ||customs-customer-assist.com^ -||customs-customer-assist.com^$popup,~inline-script +||customs-customer-assist.com^$popup ||depot-colis.fr^ -||depot-colis.fr^$popup,~inline-script +||depot-colis.fr^$popup ||deutsche-tracking.de^ -||deutsche-tracking.de^$popup,~inline-script +||deutsche-tracking.de^$popup ||myaccount-world.com^ -||myaccount-world.com^$popup,~inline-script +||myaccount-world.com^$popup ||duties-support.com^ -||duties-support.com^$popup,~inline-script +||duties-support.com^$popup ||espace-authentification.fr^ -||espace-authentification.fr^$popup,~inline-script +||espace-authentification.fr^$popup ||espace-laposte.fr^ -||espace-laposte.fr^$popup,~inline-script +||espace-laposte.fr^$popup ||expedition-customs-support.com^ -||expedition-customs-support.com^$popup,~inline-script +||expedition-customs-support.com^$popup ||info-custom.com^ -||info-custom.com^$popup,~inline-script +||info-custom.com^$popup ||kosten-support.de^ -||kosten-support.de^$popup,~inline-script +||kosten-support.de^$popup ||lieferung-support.com^ -||lieferung-support.com^$popup,~inline-script +||lieferung-support.com^$popup ||livraison-colis-suivi.fr^ -||livraison-colis-suivi.fr^$popup,~inline-script +||livraison-colis-suivi.fr^$popup ||monespace-iaposte.fr^ -||monespace-iaposte.fr^$popup,~inline-script +||monespace-iaposte.fr^$popup ||xn--monespacesantfr-nnb.com^ -||xn--monespacesantfr-nnb.com^$popup,~inline-script +||xn--monespacesantfr-nnb.com^$popup ||netfiixhungary.net^ -||netfiixhungary.net^$popup,~inline-script +||netfiixhungary.net^$popup ||myupdate-hu.com^ -||myupdate-hu.com^$popup,~inline-script +||myupdate-hu.com^$popup ||package-elta-regularization.com^ -||package-elta-regularization.com^$popup,~inline-script +||package-elta-regularization.com^$popup ||payout-ups.com^ -||payout-ups.com^$popup,~inline-script +||payout-ups.com^$popup ||poczta-polska-pakiet.com^ -||poczta-polska-pakiet.com^$popup,~inline-script +||poczta-polska-pakiet.com^$popup ||pocztapoiska.com^ -||pocztapoiska.com^$popup,~inline-script +||pocztapoiska.com^$popup ||tracking-sk.com^ -||tracking-sk.com^$popup,~inline-script +||tracking-sk.com^$popup ||postacg-track-me.com^ -||postacg-track-me.com^$popup,~inline-script +||postacg-track-me.com^$popup ||poste-suivi-expedition.fr^ -||poste-suivi-expedition.fr^$popup,~inline-script +||poste-suivi-expedition.fr^$popup ||postnl-track-shipping.com^ -||postnl-track-shipping.com^$popup,~inline-script +||postnl-track-shipping.com^$popup ||retardpayement.com^ -||retardpayement.com^$popup,~inline-script +||retardpayement.com^$popup ||s-paylibrecup.com^ -||s-paylibrecup.com^$popup,~inline-script +||s-paylibrecup.com^$popup ||sante-securite.ddns.net^ -||sante-securite.ddns.net^$popup,~inline-script +||sante-securite.ddns.net^$popup ||secure-connexion.ddns.net^ -||secure-connexion.ddns.net^$popup,~inline-script +||secure-connexion.ddns.net^$popup ||suivicolischronopost.info^ -||suivicolischronopost.info^$popup,~inline-script +||suivicolischronopost.info^$popup ||support-armx-qa.com^ -||support-armx-qa.com^$popup,~inline-script +||support-armx-qa.com^$popup ||support-taxes.fr^ -||support-taxes.fr^$popup,~inline-script +||support-taxes.fr^$popup ||supportduties.com^ -||supportduties.com^$popup,~inline-script +||supportduties.com^$popup ||supportnetflix.com^ -||supportnetflix.com^$popup,~inline-script +||supportnetflix.com^$popup ||taxes-custom-track.com^ -||taxes-custom-track.com^$popup,~inline-script +||taxes-custom-track.com^$popup ||taxes-shipments-support.com^ -||taxes-shipments-support.com^$popup,~inline-script +||taxes-shipments-support.com^$popup ||trackdhlparcel-pt.com^ -||trackdhlparcel-pt.com^$popup,~inline-script +||trackdhlparcel-pt.com^$popup ||tracking-colis.net^ -||tracking-colis.net^$popup,~inline-script +||tracking-colis.net^$popup ||tracking-ups-client.com^ -||tracking-ups-client.com^$popup,~inline-script +||tracking-ups-client.com^$popup ||tracking-ups-clients.com^ -||tracking-ups-clients.com^$popup,~inline-script +||tracking-ups-clients.com^$popup ||ups-colislivraison.com^ -||ups-colislivraison.com^$popup,~inline-script +||ups-colislivraison.com^$popup ||ups-cutsom.com^ -||ups-cutsom.com^$popup,~inline-script +||ups-cutsom.com^$popup ||ups-livraisonrestriction.com^ -||ups-livraisonrestriction.com^$popup,~inline-script +||ups-livraisonrestriction.com^$popup ||ups-track-shipping.com^ -||ups-track-shipping.com^$popup,~inline-script +||ups-track-shipping.com^$popup ||ups-trackingservice.com^ -||ups-trackingservice.com^$popup,~inline-script +||ups-trackingservice.com^$popup ||ups-worldtrack.com^ -||ups-worldtrack.com^$popup,~inline-script +||ups-worldtrack.com^$popup ||ups-zustellung.de^ -||ups-zustellung.de^$popup,~inline-script +||ups-zustellung.de^$popup ||deutschetrack.de^ -||deutschetrack.de^$popup,~inline-script +||deutschetrack.de^$popup ||info-antai.services^ -||info-antai.services^$popup,~inline-script +||info-antai.services^$popup ||meinedatenbestatigen.com^ -||meinedatenbestatigen.com^$popup,~inline-script +||meinedatenbestatigen.com^$popup ||restricted-account.org^ -||restricted-account.org^$popup,~inline-script +||restricted-account.org^$popup ||trackingdhl-dk.com^ -||trackingdhl-dk.com^$popup,~inline-script +||trackingdhl-dk.com^$popup ||your-track-ups.net^ -||your-track-ups.net^$popup,~inline-script +||your-track-ups.net^$popup ||your-ups-track.com^ -||your-ups-track.com^$popup,~inline-script +||your-ups-track.com^$popup ||zoll-pakete-support.com^ -||zoll-pakete-support.com^$popup,~inline-script +||zoll-pakete-support.com^$popup ||95.214.26.78^ -||95.214.26.78^$popup,~inline-script +||95.214.26.78^$popup ! β€”β€”β€” Horrendously bad copypasted Android rooting "guides" (often with fake titles) that bricked two of my phones β€”β€”β€” ! Most of the guides haven't even accounted for how modern phones have replaced the recovery environment with an extra boot environment, leading to very critical Fastboot commands not working and/or bricking the phone. diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 89eaaf423..855da1ee2 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@ [AdGuard] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 22September2023v1 +! Version: 24September2023v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -32,7 +32,7 @@ ! https://github.com/AdguardTeam/AdguardFilters/issues/131156 ||sbs^$document ! https://github.com/DandelionSprout/adfilt/issues/659 -||discount^$document +||discount^$document,domain=~real.discount ! https://github.com/AdguardTeam/AdguardFilters/issues/137635 ||cfd^$document,domain=~frcoal.cfd ! Experimental attempt to cover a few hardcore spam ASNs diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index c5e365414..1920868af 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows' DNS filtering, and Pi-Hole FTL β‰₯5.22) -! Version: 22September2023v1 +! Version: 24September2023v1 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists @@ -91,6 +91,7 @@ ||*.sbs^ ! https://github.com/DandelionSprout/adfilt/issues/659 ||*.discount^ +@@||real.discount^ ! https://github.com/AdguardTeam/AdguardFilters/issues/137635 ||*.cfd^ @@||frcoal.cfd^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index 9b759eb70..856e881d6 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 22September2023v1 +# Version: 24September2023v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index ba4fbbc5c..de7001912 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Β«hostsΒ» file version) -# Version: 22September2023v1 +# Version: 24September2023v1 # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index d1119c31c..ab99bc8bf 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 22September2023v1-Deprecated +# Version: 24September2023v1-Deprecated # Expires: 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 1cfa745e7..3dbcc0ed0 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: πŸ’Š Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 22September2023v1-Deprecated +# Version: 24September2023v1-Deprecated : expires = 2 days # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists