From fe83a9c3ba2fd0cd88a746b51a45b2b7c649fc75 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Fri, 27 Mar 2026 03:03:38 +0100 Subject: [PATCH] Add files via upload --- .../AntiMalwareABP.txt | 383 +++++++++++++++++- .../AntiMalwareAdGuard.txt | 218 +++++++++- .../AntiMalwareAdGuardHome.txt | 192 ++++++++- .../AntiMalwareDomains.txt | 183 ++++++++- .../AntiMalwareHosts.txt | 183 ++++++++- .../AntiMalwarePrivoxy.action | 189 ++++++++- .../AntiMalwareTPL.tpl | 187 ++++++++- ...and other adblocker lists' IPs for P2P.p2p | 1 + ...out's and other adblocker lists' IPs.ipset | 1 + 9 files changed, 1492 insertions(+), 45 deletions(-) diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt index 4e4732ed1..c138bb4aa 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for Adblock Plus 3.x and Adblock Plus on Firefox) -! Version: 24March2026v1 +! Version: 27March2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -314,10 +314,10 @@ exefiles.com#?#.panel:has([href*="/en/recommended/winthruster/"]) exefiles.com#?#.row:has(a[href*="/recommended/"]) ! Common scam domain patterns -/^https?://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)\d{2,8}\.[a-z-]{5,22}\d{1,8}\.(icu|life|live).*$/$~third-party -/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}.*$/$domain=com|fun|guru|life|online|pw|site|space|top +/^(https?|tcp)://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)\d{2,8}\.[a-z-]{5,22}\d{1,8}\.(icu|life|live).*$/$~third-party +/^(https?|tcp):\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}.*$/$domain=com|fun|guru|life|online|pw|site|space|top ! https://github•com/AdguardTeam/AdguardFilters/issues/58737 -/^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php$/$domain=biz|fun|live +/^(https?|tcp):\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php$/$domain=biz|fun|live ! ——— Banner for "MSN New Tab" ——— msn.com##.irisbanner @@ -1225,9 +1225,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] /scan-update-and-protect-your-browser.html ! https://github.com/AdguardTeam/AdguardFilters/issues/61755 ! https://github.com/AdguardTeam/AdguardFilters/issues/61743 -/^(https?://)?(www\.)?cunt[a-z]{3,8}\.com(/.*)?$/$popup +/^((https?|tcp)://)?(www\.)?cunt[a-z]{3,8}\.com(/.*)?$/$popup ! https://github.com/easylist/easylist/issues/6111 -/^https?://\d\d?\.[a-z0-9-]{1,}\.(club|me)(/.*)?$/ +/^(https?|tcp)://\d\d?\.[a-z0-9-]{1,}\.(club|me)(/.*)?$/ ||best202*-games-web1.com^ ||best202*-games-web1.com^$popup ||bigkick.biz^ @@ -1285,14 +1285,14 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://maldita•es/malditobulo/2020/11/18/no-no-es-cierto-que-amancio-ortega-haya-invertido-100-millones-en-bitcoin-revolution-es-una-web-falsa/ ||starpowders.github.io^ ! https://github.com/AdguardTeam/AdguardFilters/issues/69611 -/^https?://[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/.*)?$/ +/^(https?|tcp)://[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/.*)?$/ ! https://github.com/AdguardTeam/AdguardFilters/issues/71721 ! https://github.com/AdguardTeam/AdguardFilters/issues/71369 ! https://github.com/AdguardTeam/AdguardFilters/issues/73623 ! https://github.com/AdguardTeam/AdguardFilters/issues/73627 -/^https?://([a-z-]{1,})?luck([a-z-]{1,})?\.club(/.*)?$/ +/^(https?|tcp)://([a-z-]{1,})?luck([a-z-]{1,})?\.club(/.*)?$/ ! https://github.com/AdguardTeam/AdguardFilters/issues/73133 -/^(https?://)?\d\d?\.[a-z0-9-]{1,}\.biz(/.*)?$/ +/^((https?|tcp)://)?\d\d?\.[a-z0-9-]{1,}\.biz(/.*)?$/ ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-428333 /bitcoinrevolution/lp.php^ ! https://github.com/DandelionSprout/adfilt/issues/188 @@ -2452,8 +2452,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||198.199.120.251^ ||198.199.120.251^$popup ! https://www•telia•no/kundeservice/mobil/malware-flubot-android/ -!+ NOT_OPTIMIZED -/^https?://(www\.)?[a-z0-9-]{1,}\.[a-z]{2,17}/[a-z0-9]/\?[a-z0-9.-]{8,}$/ +/^(https?|tcp)://(www\.)?[a-z0-9-]{1,}\.[a-z]{2,17}/[a-z0-9]/\?[a-z0-9.-]{8,}$/ ! A Discord conversation I had about Throneful ||datings-club.life^ ||datings-club.life^$popup @@ -20698,6 +20697,364 @@ http://secured21.*.com/|$popup ||trkepcs.com^$popup ||xcvnerui.pro^ ||xcvnerui.pro^$popup +! https://www•tjekdet•dk/fup-og-spam/pas-paa-falske-beskeder-fra-dao-rammer-danmark +||as-dao.icu^ +||as-dao.icu^$popup +||dao-as.cc^ +||dao-as.cc^$popup +||dao-as.com^ +||dao-as.com^$popup +||dao-as.vip^ +||dao-as.vip^$popup +||dao-as.xyz^ +||dao-as.xyz^$popup +||dao-asdk.cc^ +||dao-asdk.cc^$popup +||dao-asdk.vip^ +||dao-asdk.vip^$popup +||dao-ase.cc^ +||dao-ase.cc^$popup +||dao-ase.vip^ +||dao-ase.vip^$popup +||dao-asen.bond^ +||dao-asen.bond^$popup +||dao-asi.cc^ +||dao-asi.cc^$popup +||dao-asi.vip^ +||dao-asi.vip^$popup +||dao-asiiv.icu^ +||dao-asiiv.icu^$popup +||dao-asioiiv.icu^ +||dao-asioiiv.icu^$popup +||dao-asl.vip^ +||dao-asl.vip^$popup +||dao-aso.cc^ +||dao-aso.cc^$popup +||dao-asoi.icu^ +||dao-asoi.icu^$popup +||dao-asoiiv.icu^ +||dao-asoiiv.icu^$popup +||dao-asr.cc^ +||dao-asr.cc^$popup +||dao-asr.vip^ +||dao-asr.vip^$popup +||dao-ass.cc^ +||dao-ass.cc^$popup +||dao-ass.vip^ +||dao-ass.vip^$popup +||dao-assion.icu^ +||dao-assion.icu^$popup +||dao-asuui.icu^ +||dao-asuui.icu^$popup +||dao-asvisu.icu^ +||dao-asvisu.icu^$popup +||dao-post.icu^ +||dao-post.icu^$popup +||daoao.icu^ +||daoao.icu^$popup +||daoas-en.bond^ +||daoas-en.bond^$popup +||daoasa.cyou^ +||daoasa.cyou^$popup +||daoasa.sbs^ +||daoasa.sbs^$popup +||daoiiox.icu^ +||daoiiox.icu^$popup +||daoios.icu^ +||daoios.icu^$popup +||daoipost.icu^ +||daoipost.icu^$popup +||daonevt.com^ +||daonevt.com^$popup +||daoosi.icu^ +||daoosi.icu^$popup +||daopakke.sbs^ +||daopakke.sbs^$popup +||daopst.icu^ +||daopst.icu^$popup +||daosa.cyou^ +||daosa.cyou^$popup +||daosa.shop^ +||daosa.shop^$popup +||daosviz.com^ +||daosviz.com^$popup +||daoteams.com^ +||daoteams.com^$popup +||daovisx.com^ +||daovisx.com^$popup +||daoxo.bond^ +||daoxo.bond^$popup +||dpd-sio.icu^ +||dpd-sio.icu^$popup +||pakke.click^ +||pakke.click^$popup +||postuin.bond^ +||postuin.bond^$popup +||daobo.bond^ +||daobo.bond^$popup +||daodo.bond^ +||daodo.bond^$popup +||daoicom.bond^ +||daoicom.bond^$popup +||aecopetrol.qpon^ +||aecopetrol.qpon^$popup +||araskargo-tr.bond^ +||araskargo-tr.bond^$popup +||araskargotr.bond^ +||araskargotr.bond^$popup +||asxczmv.click^ +||asxczmv.click^$popup +||autostrade.cfd^ +||autostrade.cfd^$popup +||autostrade.cyou^ +||autostrade.cyou^$popup +||autostrade.sbs^ +||autostrade.sbs^$popup +||autostrade.shop^ +||autostrade.shop^$popup +||bahrain-bh.love^ +||bahrain-bh.love^$popup +||cimb2.one^ +||cimb2.one^$popup +||claroiso.cc^ +||claroiso.cc^$popup +||commodits.shop^ +||commodits.shop^$popup +||commoditys.store^ +||commoditys.store^$popup +||dhl-com.bond^ +||dhl-com.bond^$popup +||dhl-commx.^ +||dhl-commx.^$popup +||dhl-commx.bond^ +||dhl-commx.bond^$popup +||dhlse.icu^ +||dhlse.icu^$popup +||dhlse.sbs^ +||dhlse.sbs^$popup +||dhlse.shop^ +||dhlse.shop^$popup +||dpd-aco.icu^ +||dpd-aco.icu^$popup +||dpd-cis.icu^ +||dpd-cis.icu^$popup +||dpd-com.bond^ +||dpd-com.bond^$popup +||dpd-cv.icu^ +||dpd-cv.icu^$popup +||dpd-sa.icu^ +||dpd-sa.icu^$popup +||dpd-verfolge.cc^ +||dpd-verfolge.cc^$popup +||dpd-voi.icu^ +||dpd-voi.icu^$popup +||dpdatd.cyou^ +||dpdatd.cyou^$popup +||dpdatd.icu^ +||dpdatd.icu^$popup +||dpdatd.shop^ +||dpdatd.shop^$popup +||dpdcom.bond^ +||dpdcom.bond^$popup +||dpdcz.my.id^ +||dpdcz.my.id^$popup +||dpddp.cyou^ +||dpddp.cyou^$popup +||dpddpd.biz.id^ +||dpddpd.biz.id^$popup +||dpddpd.sbs^ +||dpddpd.sbs^$popup +||dpdias.bond^ +||dpdias.bond^$popup +||dpdopd.cyou^ +||dpdopd.cyou^$popup +||dpdopd.icu^ +||dpdopd.icu^$popup +||dpdopd.sbs^ +||dpdopd.sbs^$popup +||dpdopd.shop^ +||dpdopd.shop^$popup +||dpdpd.cyou^ +||dpdpd.cyou^$popup +||dpdpd.icu^ +||dpdpd.icu^$popup +||dpdpd.sbs^ +||dpdpd.sbs^$popup +||dpdpd.shop^ +||dpdpd.shop^$popup +||dpdsdd.cfd^ +||dpdsdd.cfd^$popup +||dpdsdd.cyou^ +||dpdsdd.cyou^$popup +||dpdsdd.icu^ +||dpdsdd.icu^$popup +||dpdsdd.sbs^ +||dpdsdd.sbs^$popup +||dpdsdd.shop^ +||dpdsdd.shop^$popup +||dpdsn.cyou^ +||dpdsn.cyou^$popup +||dpdsn.icu^ +||dpdsn.icu^$popup +||dpdsn.sbs^ +||dpdsn.sbs^$popup +||dpdsn.shop^ +||dpdsn.shop^$popup +||dpdspd.cfd^ +||dpdspd.cfd^$popup +||dpdspd.cyou^ +||dpdspd.cyou^$popup +||dpdspd.icu^ +||dpdspd.icu^$popup +||dpdspd.sbs^ +||dpdspd.sbs^$popup +||dpdspd.shop^ +||dpdspd.shop^$popup +||dpduio.bond^ +||dpduio.bond^$popup +||dpdzp.bond^ +||dpdzp.bond^$popup +||egh.me^ +||egh.me^$popup +||egyptpoat.cc^ +||egyptpoat.cc^$popup +||egyptposc.cc^ +||egyptposc.cc^$popup +||egyptposz.cc^ +||egyptposz.cc^$popup +||egyptpoxu.cc^ +||egyptpoxu.cc^$popup +||egyptpoxy.cc^ +||egyptpoxy.cc^$popup +||egyptpsto.cc^ +||egyptpsto.cc^$popup +||ezdrivema-com-vip.bond^ +||ezdrivema-com-vip.bond^$popup +||ezdrivema-com.bond^ +||ezdrivema-com.bond^$popup +||ezdrivemia-com.bond^ +||ezdrivemia-com.bond^$popup +||fancourier-ro.icu^ +||fancourier-ro.icu^$popup +||finessa.icu^ +||finessa.icu^$popup +||finlands.icu^ +||finlands.icu^$popup +||fullcopec-cil.bond^ +||fullcopec-cil.bond^$popup +||gdexpiress.co^ +||gdexpiress.co^$popup +||ghana-post.bond^ +||ghana-post.bond^$popup +||ghanapost.my.id^ +||ghanapost.my.id^$popup +||gls-group-eu.bond^ +||gls-group-eu.bond^$popup +||glssi.biz.id^ +||glssi.biz.id^$popup +||glsso.biz.id^ +||glsso.biz.id^$popup +||glsso.my.id^ +||glsso.my.id^$popup +||ieb.me^ +||ieb.me^$popup +||itale-post.com^ +||itale-post.com^$popup +||italy-poste.biz.id^ +||italy-poste.biz.id^$popup +||italy-poste.my.id^ +||italy-poste.my.id^$popup +||italy-posti.info^ +||italy-posti.info^$popup +||itaypostin.bond^ +||itaypostin.bond^$popup +||jt-egpaeso-eg.cc^ +||jt-egpaeso-eg.cc^$popup +||jt-egpreso-ey.cc^ +||jt-egpreso-ey.cc^$popup +||jt-egypost-ey.cc^ +||jt-egypost-ey.cc^$popup +||kgm-*.bond^ +||kgm-*.bond^$popup +||kgm-govv.icu^ +||kgm-govv.icu^$popup +||kgm-gv.icu^ +||kgm-gv.icu^$popup +||kgmei.bond^ +||kgmei.bond^$popup +||kgmg-ovtr.bond^ +||kgmg-ovtr.bond^$popup +||kgmgiov.bond^ +||kgmgiov.bond^$popup +||kgmgiovtr.bond^ +||kgmgiovtr.bond^$popup +||kgmgo*.bond^ +||kgmgo*.bond^$popup +||kgmic.bond^ +||kgmic.bond^$popup +||kgmim.bond^ +||kgmim.bond^$popup +||kgmit.bond^ +||kgmit.bond^$popup +||magenta-at.help^ +||magenta-at.help^$popup +||maybank2u.mom^ +||maybank2u.mom^$popup +||maybank2u.web.id^ +||maybank2u.web.id^$popup +||plpost.icu^ +||plpost.icu^$popup +||poschat.asia^ +||poschat.asia^$popup +||postahe.biz.id^ +||postahe.biz.id^$popup +||santander.wikaba.com^ +||santander.wikaba.com^$popup +||seurac.bond^ +||seurac.bond^$popup +||seurnu.bond^ +||seurnu.bond^$popup +||t-mobiile-*.bond^ +||t-mobiile-*.bond^$popup +||t-mobile-*.bond^ +||t-mobile-*.bond^$popup +||telceleslareds.dubya.net^ +||telceleslareds.dubya.net^$popup +||telceleslareds.mynetav.net^ +||telceleslareds.mynetav.net^$popup +||telceleslareds.trickip.net^ +||telceleslareds.trickip.net^$popup +||tigo-gt.love^ +||tigo-gt.love^$popup +||tigo-onisu.icu^ +||tigo-onisu.icu^$popup +||tigosv.mrbonus.com^ +||tigosv.mrbonus.com^$popup +||tigosv.toythieves.com^ +||tigosv.toythieves.com^$popup +||trpttgovqs.icu^ +||trpttgovqs.icu^$popup +||very-wonderful.shop^ +||very-wonderful.shop^$popup + +||43.157.122.86^ +||43.157.122.86^$popup +||43.157.46.83^ +||43.157.46.83^$popup +||43.164.196.209^ +||43.164.196.209^$popup +||88.255.216.16^ +||88.255.216.16^$popup +/((https?|tcp)://)?204\.194\.54\.\d{1,3}([:/].*)?$/ +/((https?|tcp)://)?204\.194\.54\.\d{1,3}([:/].*)?$/$popup + + + + + + + + ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -21068,7 +21425,7 @@ toorgle.net##.join ||zdicbpujzjps.com^ ||zdicbpujzjps.com^$popup -/^(https?://)?192\.243\.59\.\d{1,3}(/.*)?$/ +/^((https?|tcp)://)?192\.243\.59\.\d{1,3}(/.*)?$/ ! rule34hentaiNET when uBlock Filters and AdGuard Base are turned off ! Googling Aksel Hennie (Results for prior week) in late July 2021 @@ -21549,7 +21906,7 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||wirexapp.africa.com^$popup ! Google results for «SodaStream site:no cranberry» -/^https?://[a-z0-9.-]{1,}\.([a-z]{3,}|[a-z][a-tv-z]|[a-qs-z][a-z])/.*(go\.php|redirect|url=|\?re=).*\.(xn--p1ai|рф|%D1%80%D1%84)$/$domain=~malware_redirection_results.* +/^(https?|tcp)://[a-z0-9.-]{1,}\.([a-z]{3,}|[a-z][a-tv-z]|[a-qs-z][a-z])/.*(go\.php|redirect|url=|\?re=).*\.(xn--p1ai|рф|%D1%80%D1%84)$/$domain=~malware_redirection_results.* ||adservice.google.*/ddm/clk/$domain=~malware_redirection_results.* /ad_click/q?&url=,domain=~malware_redirection_results.* ! Laughably blatant fraud site diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index 1ae20778b..759a0759d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -1,6 +1,6 @@  ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard) -! Version: 24March2026v1 +! Version: 27March2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -305,10 +305,10 @@ exefiles.com##.panel:has([href*="/en/recommended/winthruster/"]) exefiles.com##.row:has(a[href*="/recommended/"]) ! Common scam domain patterns -/^https?://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)\d{2,8}\.[a-z-]{5,22}\d{1,8}\.(icu|life|live).*$/$~third-party,doc -/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}.*$/$document,match-case,domain=com|fun|guru|life|online|pw|site|space|top +/^(https?|tcp)://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)\d{2,8}\.[a-z-]{5,22}\d{1,8}\.(icu|life|live).*$/$~third-party,doc +/^(https?|tcp):\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}.*$/$document,match-case,domain=com|fun|guru|life|online|pw|site|space|top ! https://github•com/AdguardTeam/AdguardFilters/issues/58737 -/^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php\$/$document,domain=biz|fun|live +/^(https?|tcp):\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php\$/$document,domain=biz|fun|live ! ——— Banner for "MSN New Tab" ——— msn.com##.irisbanner @@ -986,9 +986,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] /scan-update-and-protect-your-browser.html$document ! https://github.com/AdguardTeam/AdguardFilters/issues/61755 ! https://github.com/AdguardTeam/AdguardFilters/issues/61743 -/^(https?://)?(www\.)?cunt[a-z]{3,8}\.com(/.*)?$/$document,popup +/^((https?|tcp)://)?(www\.)?cunt[a-z]{3,8}\.com(/.*)?$/$document,popup ! https://github.com/easylist/easylist/issues/6111 -/^https?://\d\d?\.[a-z0-9-]{1,}\.(club|me)(/.*)?$/$document +/^(https?|tcp)://\d\d?\.[a-z0-9-]{1,}\.(club|me)(/.*)?$/$document ||best202*-games-web1.com^$all ||bigkick.biz^$all ||findmedia.biz^$all @@ -1047,14 +1047,14 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://maldita•es/malditobulo/2020/11/18/no-no-es-cierto-que-amancio-ortega-haya-invertido-100-millones-en-bitcoin-revolution-es-una-web-falsa/ ||starpowders.github.io^ ! https://github.com/AdguardTeam/AdguardFilters/issues/69611 -/^https?://[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/.*)?$/ +/^(https?|tcp)://[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/.*)?$/ ! https://github.com/AdguardTeam/AdguardFilters/issues/71721 ! https://github.com/AdguardTeam/AdguardFilters/issues/71369 ! https://github.com/AdguardTeam/AdguardFilters/issues/73623 ! https://github.com/AdguardTeam/AdguardFilters/issues/73627 -/^https?://([a-z-]{1,})?luck([a-z-]{1,})?\.club(/.*)?$/ +/^(https?|tcp)://([a-z-]{1,})?luck([a-z-]{1,})?\.club(/.*)?$/ ! https://github.com/AdguardTeam/AdguardFilters/issues/73133 -/^(https?://)?\d\d?\.[a-z0-9-]{1,}\.biz(/.*)?$/$document +/^((https?|tcp)://)?\d\d?\.[a-z0-9-]{1,}\.biz(/.*)?$/$document ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-428333 /bitcoinrevolution/lp.php^$document ! https://github.com/DandelionSprout/adfilt/issues/188 @@ -2249,8 +2249,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] !+ NOT_PLATFORM(windows, mac, android, cli) ||198.199.120.251^$all ! https://www•telia•no/kundeservice/mobil/malware-flubot-android/ -!+ NOT_OPTIMIZED -/^https?://(www\.)?[a-z0-9-]{1,}\.[a-z]{2,17}/[a-z0-9]/\?[a-z0-9.-]{8,}\$/$document +/^(https?|tcp)://(www\.)?[a-z0-9-]{1,}\.[a-z]{2,17}/[a-z0-9]/\?[a-z0-9.-]{8,}\$/$document ! A Discord conversation I had about Throneful ||datings-club.life^$all ||findsexy.life^$all @@ -11947,6 +11946,199 @@ http://secured21.*.com/|$all ||trackmedia.site^$all ||trkepcs.com^$all ||xcvnerui.pro^$all +! https://www•tjekdet•dk/fup-og-spam/pas-paa-falske-beskeder-fra-dao-rammer-danmark +||as-dao.icu^$all +||dao-as.cc^$all +||dao-as.com^$all +||dao-as.vip^$all +||dao-as.xyz^$all +||dao-asdk.cc^$all +||dao-asdk.vip^$all +||dao-ase.cc^$all +||dao-ase.vip^$all +||dao-asen.bond^$all +||dao-asi.cc^$all +||dao-asi.vip^$all +||dao-asiiv.icu^$all +||dao-asioiiv.icu^$all +||dao-asl.vip^$all +||dao-aso.cc^$all +||dao-asoi.icu^$all +||dao-asoiiv.icu^$all +||dao-asr.cc^$all +||dao-asr.vip^$all +||dao-ass.cc^$all +||dao-ass.vip^$all +||dao-assion.icu^$all +||dao-asuui.icu^$all +||dao-asvisu.icu^$all +||dao-post.icu^$all +||daoao.icu^$all +||daoas-en.bond^$all +||daoasa.cyou^$all +||daoasa.sbs^$all +||daoiiox.icu^$all +||daoios.icu^$all +||daoipost.icu^$all +||daonevt.com^$all +||daoosi.icu^$all +||daopakke.sbs^$all +||daopst.icu^$all +||daosa.cyou^$all +||daosa.shop^$all +||daosviz.com^$all +||daoteams.com^$all +||daovisx.com^$all +||daoxo.bond^$all +||dpd-sio.icu^$all +||pakke.click^$all +||postuin.bond^$all +||daobo.bond^$all +||daodo.bond^$all +||daoicom.bond^$all +||aecopetrol.qpon^$all +||araskargo-tr.bond^$all +||araskargotr.bond^$all +||asxczmv.click^$all +||autostrade.cfd^$all +||autostrade.cyou^$all +||autostrade.sbs^$all +||autostrade.shop^$all +||bahrain-bh.love^$all +||cimb2.one^$all +||claroiso.cc^$all +||commodits.shop^$all +||commoditys.store^$all +||dhl-com.bond^$all +||dhl-commx.^$all +||dhl-commx.bond^$all +||dhlse.icu^$all +||dhlse.sbs^$all +||dhlse.shop^$all +||dpd-aco.icu^$all +||dpd-cis.icu^$all +||dpd-com.bond^$all +||dpd-cv.icu^$all +||dpd-sa.icu^$all +||dpd-verfolge.cc^$all +||dpd-voi.icu^$all +||dpdatd.cyou^$all +||dpdatd.icu^$all +||dpdatd.shop^$all +||dpdcom.bond^$all +||dpdcz.my.id^$all +||dpddp.cyou^$all +||dpddpd.biz.id^$all +||dpddpd.sbs^$all +||dpdias.bond^$all +||dpdopd.cyou^$all +||dpdopd.icu^$all +||dpdopd.sbs^$all +||dpdopd.shop^$all +||dpdpd.cyou^$all +||dpdpd.icu^$all +||dpdpd.sbs^$all +||dpdpd.shop^$all +||dpdsdd.cfd^$all +||dpdsdd.cyou^$all +||dpdsdd.icu^$all +||dpdsdd.sbs^$all +||dpdsdd.shop^$all +||dpdsn.cyou^$all +||dpdsn.icu^$all +||dpdsn.sbs^$all +||dpdsn.shop^$all +||dpdspd.cfd^$all +||dpdspd.cyou^$all +||dpdspd.icu^$all +||dpdspd.sbs^$all +||dpdspd.shop^$all +||dpduio.bond^$all +||dpdzp.bond^$all +||egh.me^$all +||egyptpoat.cc^$all +||egyptposc.cc^$all +||egyptposz.cc^$all +||egyptpoxu.cc^$all +||egyptpoxy.cc^$all +||egyptpsto.cc^$all +||ezdrivema-com-vip.bond^$all +||ezdrivema-com.bond^$all +||ezdrivemia-com.bond^$all +||fancourier-ro.icu^$all +||finessa.icu^$all +||finlands.icu^$all +||fullcopec-cil.bond^$all +||gdexpiress.co^$all +||ghana-post.bond^$all +||ghanapost.my.id^$all +||gls-group-eu.bond^$all +||glssi.biz.id^$all +||glsso.biz.id^$all +||glsso.my.id^$all +||ieb.me^$all +||itale-post.com^$all +||italy-poste.biz.id^$all +||italy-poste.my.id^$all +||italy-posti.info^$all +||itaypostin.bond^$all +||jt-egpaeso-eg.cc^$all +||jt-egpreso-ey.cc^$all +||jt-egypost-ey.cc^$all +||kgm-*.bond^$all +||kgm-govv.icu^$all +||kgm-gv.icu^$all +||kgmei.bond^$all +||kgmg-ovtr.bond^$all +||kgmgiov.bond^$all +||kgmgiovtr.bond^$all +||kgmgo*.bond^$all +||kgmic.bond^$all +||kgmim.bond^$all +||kgmit.bond^$all +||magenta-at.help^$all +||maybank2u.mom^$all +||maybank2u.web.id^$all +||plpost.icu^$all +||poschat.asia^$all +||postahe.biz.id^$all +||santander.wikaba.com^$all +||seurac.bond^$all +||seurnu.bond^$all +||t-mobiile-*.bond^$all +||t-mobile-*.bond^$all +||telceleslareds.dubya.net^$all +||telceleslareds.mynetav.net^$all +||telceleslareds.trickip.net^$all +||tigo-gt.love^$all +||tigo-onisu.icu^$all +||tigosv.mrbonus.com^$all +||tigosv.toythieves.com^$all +||trpttgovqs.icu^$all +||very-wonderful.shop^$all +!#if !env_firefox +!+ NOT_PLATFORM(windows, mac, android, cli) +||43.157.122.86^$all +!+ NOT_PLATFORM(windows, mac, android, cli) +||43.157.46.83^$all +!+ NOT_PLATFORM(windows, mac, android, cli) +||43.164.196.209^$all +!+ NOT_PLATFORM(windows, mac, android, cli) +||88.255.216.16^$all +/((https?|tcp)://)?204\.194\.54\.\d{1,3}([:/].*)?$/$all +!#endif +!#if env_firefox +!+ PLATFORM(windows, mac, android, cli) +43.157.122.86$network +!+ PLATFORM(windows, mac, android, cli) +43.157.46.83$network +!+ PLATFORM(windows, mac, android, cli) +43.164.196.209$network +!+ PLATFORM(windows, mac, android, cli) +88.255.216.16$network +!+ PLATFORM(windows, mac, android, cli) +204.194.54.*$network +!#endif ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -12144,7 +12336,7 @@ toorgle.net##.join ||yjwtolgjjeky.com^$all ||zdicbpujzjps.com^$all !#if !ext_ublock -/^(https?://)?192\.243\.59\.\d{1,3}(/.*)?$/$document +/^((https?|tcp)://)?192\.243\.59\.\d{1,3}(/.*)?$/$document !#endif ! rule34hentaiNET when uBlock Filters and AdGuard Base are turned off ! Googling Aksel Hennie (Results for prior week) in late July 2021 @@ -12553,7 +12745,7 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||wirexapp.africa.com^$all ! Google results for «SodaStream site:no cranberry» -/^https?://[a-z0-9.-]{1,}\.([a-z]{3,}|[a-z][a-tv-z]|[a-qs-z][a-z])/.*(go\.php|redirect|url=|\?re=).*\.(xn--p1ai|рф|%D1%80%D1%84)\$/$document,domain=~malware_redirection_results.* +/^(https?|tcp)://[a-z0-9.-]{1,}\.([a-z]{3,}|[a-z][a-tv-z]|[a-qs-z][a-z])/.*(go\.php|redirect|url=|\?re=).*\.(xn--p1ai|рф|%D1%80%D1%84)\$/$document,domain=~malware_redirection_results.* ||adservice.google.*/ddm/clk/$document,domain=~malware_redirection_results.* /ad_click/q?&url=$document,domain=~malware_redirection_results.* ! Laughably blatant fraud site diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt index defe0954e..c2f819229 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, AdGuard for Android/Windows/macOS' DNS filtering, and Pi-Hole FTL ≥5.22) -! Version: 24March2026v1 +! Version: 27March2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -115,7 +115,7 @@ ! ¤¤¤ WinThruster ¤¤¤ ||solvusoft.com^ ! Common scam domain patterns -/^https?://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)\d{2,8}\.[a-z-]{5,22}\d{1,8}\.(icu|life|live).*$/ +/^(https?|tcp)://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)\d{2,8}\.[a-z-]{5,22}\d{1,8}\.(icu|life|live).*$/ ! https://github•com/AdguardTeam/AdguardFilters/issues/58737 ! ——— Banner for "MSN New Tab" ——— ! ——— Download sites that felt shoddy to me (Most of which, if not all of which, had real non-ad download links that contained malware exe files) ——— @@ -538,9 +538,9 @@ /scan-update-and-protect-your-browser.html ! https://github.com/AdguardTeam/AdguardFilters/issues/61755 ! https://github.com/AdguardTeam/AdguardFilters/issues/61743 -/^(https?://)?(www\.)?cunt[a-z]{3,8}\.com(/.*)?$/ +/^((https?|tcp)://)?(www\.)?cunt[a-z]{3,8}\.com(/.*)?$/ ! https://github.com/easylist/easylist/issues/6111 -/^https?://\d\d?\.[a-z0-9-]{1,}\.(club|me)(/.*)?$/ +/^(https?|tcp)://\d\d?\.[a-z0-9-]{1,}\.(club|me)(/.*)?$/ ||best202*-games-web1.com^ ||bigkick.biz^ ||findmedia.biz^ @@ -570,14 +570,14 @@ ! https://maldita•es/malditobulo/2020/11/18/no-no-es-cierto-que-amancio-ortega-haya-invertido-100-millones-en-bitcoin-revolution-es-una-web-falsa/ ||starpowders.github.io^ ! https://github.com/AdguardTeam/AdguardFilters/issues/69611 -/^https?://[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/.*)?$/ +/^(https?|tcp)://[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/.*)?$/ ! https://github.com/AdguardTeam/AdguardFilters/issues/71721 ! https://github.com/AdguardTeam/AdguardFilters/issues/71369 ! https://github.com/AdguardTeam/AdguardFilters/issues/73623 ! https://github.com/AdguardTeam/AdguardFilters/issues/73627 -/^https?://([a-z-]{1,})?luck([a-z-]{1,})?\.club(/.*)?$/ +/^(https?|tcp)://([a-z-]{1,})?luck([a-z-]{1,})?\.club(/.*)?$/ ! https://github.com/AdguardTeam/AdguardFilters/issues/73133 -/^(https?://)?\d\d?\.[a-z0-9-]{1,}\.biz(/.*)?$/ +/^((https?|tcp)://)?\d\d?\.[a-z0-9-]{1,}\.biz(/.*)?$/ ! https://github.com/DandelionSprout/adfilt/issues/188 ||gogle.net^ ||best-prizes-202*.com^ @@ -1110,7 +1110,6 @@ ||freeversioncrack.com^ 198.199.120.251 ! https://www•telia•no/kundeservice/mobil/malware-flubot-android/ -!+ NOT_OPTIMIZED ! A Discord conversation I had about Throneful ||datings-club.life^ ||findsexy.life^ @@ -10224,6 +10223,181 @@ http://secured21.*.com/| ||trackmedia.site^ ||trkepcs.com^ ||xcvnerui.pro^ +! https://www•tjekdet•dk/fup-og-spam/pas-paa-falske-beskeder-fra-dao-rammer-danmark +||as-dao.icu^ +||dao-as.cc^ +||dao-as.com^ +||dao-as.vip^ +||dao-as.xyz^ +||dao-asdk.cc^ +||dao-asdk.vip^ +||dao-ase.cc^ +||dao-ase.vip^ +||dao-asen.bond^ +||dao-asi.cc^ +||dao-asi.vip^ +||dao-asiiv.icu^ +||dao-asioiiv.icu^ +||dao-asl.vip^ +||dao-aso.cc^ +||dao-asoi.icu^ +||dao-asoiiv.icu^ +||dao-asr.cc^ +||dao-asr.vip^ +||dao-ass.cc^ +||dao-ass.vip^ +||dao-assion.icu^ +||dao-asuui.icu^ +||dao-asvisu.icu^ +||dao-post.icu^ +||daoao.icu^ +||daoas-en.bond^ +||daoasa.cyou^ +||daoasa.sbs^ +||daoiiox.icu^ +||daoios.icu^ +||daoipost.icu^ +||daonevt.com^ +||daoosi.icu^ +||daopakke.sbs^ +||daopst.icu^ +||daosa.cyou^ +||daosa.shop^ +||daosviz.com^ +||daoteams.com^ +||daovisx.com^ +||daoxo.bond^ +||dpd-sio.icu^ +||pakke.click^ +||postuin.bond^ +||daobo.bond^ +||daodo.bond^ +||daoicom.bond^ +||aecopetrol.qpon^ +||araskargo-tr.bond^ +||araskargotr.bond^ +||asxczmv.click^ +||autostrade.cfd^ +||autostrade.cyou^ +||autostrade.sbs^ +||autostrade.shop^ +||bahrain-bh.love^ +||cimb2.one^ +||claroiso.cc^ +||commodits.shop^ +||commoditys.store^ +||dhl-com.bond^ +||dhl-commx.^ +||dhl-commx.bond^ +||dhlse.icu^ +||dhlse.sbs^ +||dhlse.shop^ +||dpd-aco.icu^ +||dpd-cis.icu^ +||dpd-com.bond^ +||dpd-cv.icu^ +||dpd-sa.icu^ +||dpd-verfolge.cc^ +||dpd-voi.icu^ +||dpdatd.cyou^ +||dpdatd.icu^ +||dpdatd.shop^ +||dpdcom.bond^ +||dpdcz.my.id^ +||dpddp.cyou^ +||dpddpd.biz.id^ +||dpddpd.sbs^ +||dpdias.bond^ +||dpdopd.cyou^ +||dpdopd.icu^ +||dpdopd.sbs^ +||dpdopd.shop^ +||dpdpd.cyou^ +||dpdpd.icu^ +||dpdpd.sbs^ +||dpdpd.shop^ +||dpdsdd.cfd^ +||dpdsdd.cyou^ +||dpdsdd.icu^ +||dpdsdd.sbs^ +||dpdsdd.shop^ +||dpdsn.cyou^ +||dpdsn.icu^ +||dpdsn.sbs^ +||dpdsn.shop^ +||dpdspd.cfd^ +||dpdspd.cyou^ +||dpdspd.icu^ +||dpdspd.sbs^ +||dpdspd.shop^ +||dpduio.bond^ +||dpdzp.bond^ +||egh.me^ +||egyptpoat.cc^ +||egyptposc.cc^ +||egyptposz.cc^ +||egyptpoxu.cc^ +||egyptpoxy.cc^ +||egyptpsto.cc^ +||ezdrivema-com-vip.bond^ +||ezdrivema-com.bond^ +||ezdrivemia-com.bond^ +||fancourier-ro.icu^ +||finessa.icu^ +||finlands.icu^ +||fullcopec-cil.bond^ +||gdexpiress.co^ +||ghana-post.bond^ +||ghanapost.my.id^ +||gls-group-eu.bond^ +||glssi.biz.id^ +||glsso.biz.id^ +||glsso.my.id^ +||ieb.me^ +||itale-post.com^ +||italy-poste.biz.id^ +||italy-poste.my.id^ +||italy-posti.info^ +||itaypostin.bond^ +||jt-egpaeso-eg.cc^ +||jt-egpreso-ey.cc^ +||jt-egypost-ey.cc^ +||kgm-*.bond^ +||kgm-govv.icu^ +||kgm-gv.icu^ +||kgmei.bond^ +||kgmg-ovtr.bond^ +||kgmgiov.bond^ +||kgmgiovtr.bond^ +||kgmgo*.bond^ +||kgmic.bond^ +||kgmim.bond^ +||kgmit.bond^ +||magenta-at.help^ +||maybank2u.mom^ +||maybank2u.web.id^ +||plpost.icu^ +||poschat.asia^ +||postahe.biz.id^ +||santander.wikaba.com^ +||seurac.bond^ +||seurnu.bond^ +||t-mobiile-*.bond^ +||t-mobile-*.bond^ +||telceleslareds.dubya.net^ +||telceleslareds.mynetav.net^ +||telceleslareds.trickip.net^ +||tigo-gt.love^ +||tigo-onisu.icu^ +||tigosv.mrbonus.com^ +||tigosv.toythieves.com^ +||trpttgovqs.icu^ +||very-wonderful.shop^ +43.157.122.86 +43.157.46.83 +43.164.196.209 +88.255.216.16 +/((https?|tcp)://)?204\.194\.54\.\d{1,3}([:/].*)?$/ ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 ||downloadprovider.me^ @@ -10415,7 +10589,7 @@ http://secured21.*.com/| ||y96q29a1fo.com^ ||yjwtolgjjeky.com^ ||zdicbpujzjps.com^ -/^(https?://)?192\.243\.59\.\d{1,3}(/.*)?$/ +/^((https?|tcp)://)?192\.243\.59\.\d{1,3}(/.*)?$/ ! rule34hentaiNET when uBlock Filters and AdGuard Base are turned off ! Googling Aksel Hennie (Results for prior week) in late July 2021 ||okmx.org^ diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt index b1996cd8b..62e8664c7 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version) -# Version: 24March2026v1 +# Version: 27March2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: The very limited syntax available to raw domains lists, considering it's, well, raw, means that outright anti-MV3 measures (which'd as of February 2024 only affect Minus, a project whose name is unworthy of the uBO label; AdGuard browser extensions has no relevant support for raw domains either way) cannot be done. However, at some 20,000 entries, Team Chromium's shameful leaders aren't liking this list anyway. @@ -1638,7 +1638,6 @@ freeversioncrack.com 198.199.120.251 # https://www•telia•no/kundeservice/mobil/malware-flubot-android/ - # A Discord conversation I had about Throneful datings-club.life findsexy.life @@ -10986,6 +10985,186 @@ tjrksciow.pro trackmedia.site trkepcs.com xcvnerui.pro +# https://www•tjekdet•dk/fup-og-spam/pas-paa-falske-beskeder-fra-dao-rammer-danmark +as-dao.icu +dao-as.cc +dao-as.com +dao-as.vip +dao-as.xyz +dao-asdk.cc +dao-asdk.vip +dao-ase.cc +dao-ase.vip +dao-asen.bond +dao-asi.cc +dao-asi.vip +dao-asiiv.icu +dao-asioiiv.icu +dao-asl.vip +dao-aso.cc +dao-asoi.icu +dao-asoiiv.icu +dao-asr.cc +dao-asr.vip +dao-ass.cc +dao-ass.vip +dao-assion.icu +dao-asuui.icu +dao-asvisu.icu +dao-post.icu +daoao.icu +daoas-en.bond +daoasa.cyou +daoasa.sbs +daoiiox.icu +daoios.icu +daoipost.icu +daonevt.com +daoosi.icu +daopakke.sbs +daopst.icu +daosa.cyou +daosa.shop +daosviz.com +daoteams.com +daovisx.com +daoxo.bond +dpd-sio.icu +pakke.click +postuin.bond +daobo.bond +daodo.bond +daoicom.bond +aecopetrol.qpon +araskargo-tr.bond +araskargotr.bond +asxczmv.click +autostrade.cfd +autostrade.cyou +autostrade.sbs +autostrade.shop +bahrain-bh.love +cimb2.one +claroiso.cc +commodits.shop +commoditys.store +dhl-com.bond +dhl-commx. +dhl-commx.bond +dhlse.icu +dhlse.sbs +dhlse.shop +dpd-aco.icu +dpd-cis.icu +dpd-com.bond +dpd-cv.icu +dpd-sa.icu +dpd-verfolge.cc +dpd-voi.icu +dpdatd.cyou +dpdatd.icu +dpdatd.shop +dpdcom.bond +dpdcz.my.id +dpddp.cyou +dpddpd.biz.id +dpddpd.sbs +dpdias.bond +dpdopd.cyou +dpdopd.icu +dpdopd.sbs +dpdopd.shop +dpdpd.cyou +dpdpd.icu +dpdpd.sbs +dpdpd.shop +dpdsdd.cfd +dpdsdd.cyou +dpdsdd.icu +dpdsdd.sbs +dpdsdd.shop +dpdsn.cyou +dpdsn.icu +dpdsn.sbs +dpdsn.shop +dpdspd.cfd +dpdspd.cyou +dpdspd.icu +dpdspd.sbs +dpdspd.shop +dpduio.bond +dpdzp.bond +egh.me +egyptpoat.cc +egyptposc.cc +egyptposz.cc +egyptpoxu.cc +egyptpoxy.cc +egyptpsto.cc +ezdrivema-com-vip.bond +ezdrivema-com.bond +ezdrivemia-com.bond +fancourier-ro.icu +finessa.icu +finlands.icu +fullcopec-cil.bond +gdexpiress.co +ghana-post.bond +ghanapost.my.id +gls-group-eu.bond +glssi.biz.id +glsso.biz.id +glsso.my.id +ieb.me +itale-post.com +italy-poste.biz.id +italy-poste.my.id +italy-posti.info +itaypostin.bond +jt-egpaeso-eg.cc +jt-egpreso-ey.cc +jt-egypost-ey.cc +kgm-govv.icu +kgm-gv.icu +kgmei.bond +kgmg-ovtr.bond +kgmgiov.bond +kgmgiovtr.bond +kgmic.bond +kgmim.bond +kgmit.bond +magenta-at.help +maybank2u.mom +maybank2u.web.id +plpost.icu +poschat.asia +postahe.biz.id +santander.wikaba.com +seurac.bond +seurnu.bond +telceleslareds.dubya.net +telceleslareds.mynetav.net +telceleslareds.trickip.net +tigo-gt.love +tigo-onisu.icu +tigosv.mrbonus.com +tigosv.toythieves.com +trpttgovqs.icu +very-wonderful.shop + +43.157.122.86 +43.157.46.83 +43.164.196.209 +88.255.216.16 + + + + + + + + + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt index f7b20c40f..603f370d7 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt @@ -1,5 +1,5 @@ # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version) -# Version: 24March2026v1 +# Version: 27March2026v1 # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Users of Pi-Hole FTL 5.22 and later can consider switching to the || version at https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt, due to an unconfirmed belief of mine that it allows better wildcarding than the Hosts and raw-domains versions. @@ -1589,7 +1589,6 @@ 127.0.0.1 198.199.120.251 # https://www•telia•no/kundeservice/mobil/malware-flubot-android/ - # A Discord conversation I had about Throneful 127.0.0.1 datings-club.life 127.0.0.1 findsexy.life @@ -10937,6 +10936,186 @@ 127.0.0.1 trackmedia.site 127.0.0.1 trkepcs.com 127.0.0.1 xcvnerui.pro +# https://www•tjekdet•dk/fup-og-spam/pas-paa-falske-beskeder-fra-dao-rammer-danmark +127.0.0.1 as-dao.icu +127.0.0.1 dao-as.cc +127.0.0.1 dao-as.com +127.0.0.1 dao-as.vip +127.0.0.1 dao-as.xyz +127.0.0.1 dao-asdk.cc +127.0.0.1 dao-asdk.vip +127.0.0.1 dao-ase.cc +127.0.0.1 dao-ase.vip +127.0.0.1 dao-asen.bond +127.0.0.1 dao-asi.cc +127.0.0.1 dao-asi.vip +127.0.0.1 dao-asiiv.icu +127.0.0.1 dao-asioiiv.icu +127.0.0.1 dao-asl.vip +127.0.0.1 dao-aso.cc +127.0.0.1 dao-asoi.icu +127.0.0.1 dao-asoiiv.icu +127.0.0.1 dao-asr.cc +127.0.0.1 dao-asr.vip +127.0.0.1 dao-ass.cc +127.0.0.1 dao-ass.vip +127.0.0.1 dao-assion.icu +127.0.0.1 dao-asuui.icu +127.0.0.1 dao-asvisu.icu +127.0.0.1 dao-post.icu +127.0.0.1 daoao.icu +127.0.0.1 daoas-en.bond +127.0.0.1 daoasa.cyou +127.0.0.1 daoasa.sbs +127.0.0.1 daoiiox.icu +127.0.0.1 daoios.icu +127.0.0.1 daoipost.icu +127.0.0.1 daonevt.com +127.0.0.1 daoosi.icu +127.0.0.1 daopakke.sbs +127.0.0.1 daopst.icu +127.0.0.1 daosa.cyou +127.0.0.1 daosa.shop +127.0.0.1 daosviz.com +127.0.0.1 daoteams.com +127.0.0.1 daovisx.com +127.0.0.1 daoxo.bond +127.0.0.1 dpd-sio.icu +127.0.0.1 pakke.click +127.0.0.1 postuin.bond +127.0.0.1 daobo.bond +127.0.0.1 daodo.bond +127.0.0.1 daoicom.bond +127.0.0.1 aecopetrol.qpon +127.0.0.1 araskargo-tr.bond +127.0.0.1 araskargotr.bond +127.0.0.1 asxczmv.click +127.0.0.1 autostrade.cfd +127.0.0.1 autostrade.cyou +127.0.0.1 autostrade.sbs +127.0.0.1 autostrade.shop +127.0.0.1 bahrain-bh.love +127.0.0.1 cimb2.one +127.0.0.1 claroiso.cc +127.0.0.1 commodits.shop +127.0.0.1 commoditys.store +127.0.0.1 dhl-com.bond +127.0.0.1 dhl-commx. +127.0.0.1 dhl-commx.bond +127.0.0.1 dhlse.icu +127.0.0.1 dhlse.sbs +127.0.0.1 dhlse.shop +127.0.0.1 dpd-aco.icu +127.0.0.1 dpd-cis.icu +127.0.0.1 dpd-com.bond +127.0.0.1 dpd-cv.icu +127.0.0.1 dpd-sa.icu +127.0.0.1 dpd-verfolge.cc +127.0.0.1 dpd-voi.icu +127.0.0.1 dpdatd.cyou +127.0.0.1 dpdatd.icu +127.0.0.1 dpdatd.shop +127.0.0.1 dpdcom.bond +127.0.0.1 dpdcz.my.id +127.0.0.1 dpddp.cyou +127.0.0.1 dpddpd.biz.id +127.0.0.1 dpddpd.sbs +127.0.0.1 dpdias.bond +127.0.0.1 dpdopd.cyou +127.0.0.1 dpdopd.icu +127.0.0.1 dpdopd.sbs +127.0.0.1 dpdopd.shop +127.0.0.1 dpdpd.cyou +127.0.0.1 dpdpd.icu +127.0.0.1 dpdpd.sbs +127.0.0.1 dpdpd.shop +127.0.0.1 dpdsdd.cfd +127.0.0.1 dpdsdd.cyou +127.0.0.1 dpdsdd.icu +127.0.0.1 dpdsdd.sbs +127.0.0.1 dpdsdd.shop +127.0.0.1 dpdsn.cyou +127.0.0.1 dpdsn.icu +127.0.0.1 dpdsn.sbs +127.0.0.1 dpdsn.shop +127.0.0.1 dpdspd.cfd +127.0.0.1 dpdspd.cyou +127.0.0.1 dpdspd.icu +127.0.0.1 dpdspd.sbs +127.0.0.1 dpdspd.shop +127.0.0.1 dpduio.bond +127.0.0.1 dpdzp.bond +127.0.0.1 egh.me +127.0.0.1 egyptpoat.cc +127.0.0.1 egyptposc.cc +127.0.0.1 egyptposz.cc +127.0.0.1 egyptpoxu.cc +127.0.0.1 egyptpoxy.cc +127.0.0.1 egyptpsto.cc +127.0.0.1 ezdrivema-com-vip.bond +127.0.0.1 ezdrivema-com.bond +127.0.0.1 ezdrivemia-com.bond +127.0.0.1 fancourier-ro.icu +127.0.0.1 finessa.icu +127.0.0.1 finlands.icu +127.0.0.1 fullcopec-cil.bond +127.0.0.1 gdexpiress.co +127.0.0.1 ghana-post.bond +127.0.0.1 ghanapost.my.id +127.0.0.1 gls-group-eu.bond +127.0.0.1 glssi.biz.id +127.0.0.1 glsso.biz.id +127.0.0.1 glsso.my.id +127.0.0.1 ieb.me +127.0.0.1 itale-post.com +127.0.0.1 italy-poste.biz.id +127.0.0.1 italy-poste.my.id +127.0.0.1 italy-posti.info +127.0.0.1 itaypostin.bond +127.0.0.1 jt-egpaeso-eg.cc +127.0.0.1 jt-egpreso-ey.cc +127.0.0.1 jt-egypost-ey.cc +127.0.0.1 kgm-govv.icu +127.0.0.1 kgm-gv.icu +127.0.0.1 kgmei.bond +127.0.0.1 kgmg-ovtr.bond +127.0.0.1 kgmgiov.bond +127.0.0.1 kgmgiovtr.bond +127.0.0.1 kgmic.bond +127.0.0.1 kgmim.bond +127.0.0.1 kgmit.bond +127.0.0.1 magenta-at.help +127.0.0.1 maybank2u.mom +127.0.0.1 maybank2u.web.id +127.0.0.1 plpost.icu +127.0.0.1 poschat.asia +127.0.0.1 postahe.biz.id +127.0.0.1 santander.wikaba.com +127.0.0.1 seurac.bond +127.0.0.1 seurnu.bond +127.0.0.1 telceleslareds.dubya.net +127.0.0.1 telceleslareds.mynetav.net +127.0.0.1 telceleslareds.trickip.net +127.0.0.1 tigo-gt.love +127.0.0.1 tigo-onisu.icu +127.0.0.1 tigosv.mrbonus.com +127.0.0.1 tigosv.toythieves.com +127.0.0.1 trpttgovqs.icu +127.0.0.1 very-wonderful.shop + +127.0.0.1 43.157.122.86 +127.0.0.1 43.157.46.83 +127.0.0.1 43.164.196.209 +127.0.0.1 88.255.216.16 + + + + + + + + + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action index de7347d3d..3f3e63419 100644 --- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action +++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action @@ -1,6 +1,6 @@ {+block} # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy) -# Version: 24March2026v1-Deprecated +# Version: 27March2026v1-Deprecated # Expires: 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -117,8 +117,8 @@ .solvusoft.com # Common scam domain patterns -/https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}.* -/https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php +/(https?|tcp):\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}.* +/(https?|tcp):\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php {+block} # ——— Banner for "MSN New Tab" ——— @@ -1341,7 +1341,6 @@ .freeversioncrack.com .198.199.120.251 - # A Discord conversation I had about Throneful .datings-club.life .findsexy.life @@ -10608,6 +10607,188 @@ .trackmedia.site .trkepcs.com .xcvnerui.pro +.as-dao.icu +.dao-as.cc +.dao-as.com +.dao-as.vip +.dao-as.xyz +.dao-asdk.cc +.dao-asdk.vip +.dao-ase.cc +.dao-ase.vip +.dao-asen.bond +.dao-asi.cc +.dao-asi.vip +.dao-asiiv.icu +.dao-asioiiv.icu +.dao-asl.vip +.dao-aso.cc +.dao-asoi.icu +.dao-asoiiv.icu +.dao-asr.cc +.dao-asr.vip +.dao-ass.cc +.dao-ass.vip +.dao-assion.icu +.dao-asuui.icu +.dao-asvisu.icu +.dao-post.icu +.daoao.icu +.daoas-en.bond +.daoasa.cyou +.daoasa.sbs +.daoiiox.icu +.daoios.icu +.daoipost.icu +.daonevt.com +.daoosi.icu +.daopakke.sbs +.daopst.icu +.daosa.cyou +.daosa.shop +.daosviz.com +.daoteams.com +.daovisx.com +.daoxo.bond +.dpd-sio.icu +.pakke.click +.postuin.bond +.daobo.bond +.daodo.bond +.daoicom.bond +.aecopetrol.qpon +.araskargo-tr.bond +.araskargotr.bond +.asxczmv.click +.autostrade.cfd +.autostrade.cyou +.autostrade.sbs +.autostrade.shop +.bahrain-bh.love +.cimb2.one +.claroiso.cc +.commodits.shop +.commoditys.store +.dhl-com.bond +.dhl-commx. +.dhl-commx.bond +.dhlse.icu +.dhlse.sbs +.dhlse.shop +.dpd-aco.icu +.dpd-cis.icu +.dpd-com.bond +.dpd-cv.icu +.dpd-sa.icu +.dpd-verfolge.cc +.dpd-voi.icu +.dpdatd.cyou +.dpdatd.icu +.dpdatd.shop +.dpdcom.bond +.dpdcz.my.id +.dpddp.cyou +.dpddpd.biz.id +.dpddpd.sbs +.dpdias.bond +.dpdopd.cyou +.dpdopd.icu +.dpdopd.sbs +.dpdopd.shop +.dpdpd.cyou +.dpdpd.icu +.dpdpd.sbs +.dpdpd.shop +.dpdsdd.cfd +.dpdsdd.cyou +.dpdsdd.icu +.dpdsdd.sbs +.dpdsdd.shop +.dpdsn.cyou +.dpdsn.icu +.dpdsn.sbs +.dpdsn.shop +.dpdspd.cfd +.dpdspd.cyou +.dpdspd.icu +.dpdspd.sbs +.dpdspd.shop +.dpduio.bond +.dpdzp.bond +.egh.me +.egyptpoat.cc +.egyptposc.cc +.egyptposz.cc +.egyptpoxu.cc +.egyptpoxy.cc +.egyptpsto.cc +.ezdrivema-com-vip.bond +.ezdrivema-com.bond +.ezdrivemia-com.bond +.fancourier-ro.icu +.finessa.icu +.finlands.icu +.fullcopec-cil.bond +.gdexpiress.co +.ghana-post.bond +.ghanapost.my.id +.gls-group-eu.bond +.glssi.biz.id +.glsso.biz.id +.glsso.my.id +.ieb.me +.itale-post.com +.italy-poste.biz.id +.italy-poste.my.id +.italy-posti.info +.itaypostin.bond +.jt-egpaeso-eg.cc +.jt-egpreso-ey.cc +.jt-egypost-ey.cc +.kgm-*.bond +.kgm-govv.icu +.kgm-gv.icu +.kgmei.bond +.kgmg-ovtr.bond +.kgmgiov.bond +.kgmgiovtr.bond +.kgmgo*.bond +.kgmic.bond +.kgmim.bond +.kgmit.bond +.magenta-at.help +.maybank2u.mom +.maybank2u.web.id +.plpost.icu +.poschat.asia +.postahe.biz.id +.santander.wikaba.com +.seurac.bond +.seurnu.bond +.t-mobiile-*.bond +.t-mobile-*.bond +.telceleslareds.dubya.net +.telceleslareds.mynetav.net +.telceleslareds.trickip.net +.tigo-gt.love +.tigo-onisu.icu +.tigosv.mrbonus.com +.tigosv.toythieves.com +.trpttgovqs.icu +.very-wonderful.shop + +.43.157.122.86 +.43.157.46.83 +.43.164.196.209 +.88.255.216.16 + + + + + + + + {+block} # ——— Standard malware that I stumbled upon on my own ——— diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl index 4dc32adae..88a9fb006 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl +++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl @@ -1,6 +1,6 @@ msFilterList # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL) -# Version: 24March2026v1-Deprecated +# Version: 27March2026v1-Deprecated : expires = 1 day # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. # Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -1611,7 +1611,6 @@ -d 198.199.120.251 # https://www•telia•no/kundeservice/mobil/malware-flubot-android/ - # A Discord conversation I had about Throneful -d datings-club.life -d findsexy.life @@ -10992,6 +10991,190 @@ ay.pay.pay. -d trackmedia.site -d trkepcs.com -d xcvnerui.pro +# https://www•tjekdet•dk/fup-og-spam/pas-paa-falske-beskeder-fra-dao-rammer-danmark +-d as-dao.icu +-d dao-as.cc +-d dao-as.com +-d dao-as.vip +-d dao-as.xyz +-d dao-asdk.cc +-d dao-asdk.vip +-d dao-ase.cc +-d dao-ase.vip +-d dao-asen.bond +-d dao-asi.cc +-d dao-asi.vip +-d dao-asiiv.icu +-d dao-asioiiv.icu +-d dao-asl.vip +-d dao-aso.cc +-d dao-asoi.icu +-d dao-asoiiv.icu +-d dao-asr.cc +-d dao-asr.vip +-d dao-ass.cc +-d dao-ass.vip +-d dao-assion.icu +-d dao-asuui.icu +-d dao-asvisu.icu +-d dao-post.icu +-d daoao.icu +-d daoas-en.bond +-d daoasa.cyou +-d daoasa.sbs +-d daoiiox.icu +-d daoios.icu +-d daoipost.icu +-d daonevt.com +-d daoosi.icu +-d daopakke.sbs +-d daopst.icu +-d daosa.cyou +-d daosa.shop +-d daosviz.com +-d daoteams.com +-d daovisx.com +-d daoxo.bond +-d dpd-sio.icu +-d pakke.click +-d postuin.bond +-d daobo.bond +-d daodo.bond +-d daoicom.bond +-d aecopetrol.qpon +-d araskargo-tr.bond +-d araskargotr.bond +-d asxczmv.click +-d autostrade.cfd +-d autostrade.cyou +-d autostrade.sbs +-d autostrade.shop +-d bahrain-bh.love +-d cimb2.one +-d claroiso.cc +-d commodits.shop +-d commoditys.store +-d dhl-com.bond +-d dhl-commx. +-d dhl-commx.bond +-d dhlse.icu +-d dhlse.sbs +-d dhlse.shop +-d dpd-aco.icu +-d dpd-cis.icu +-d dpd-com.bond +-d dpd-cv.icu +-d dpd-sa.icu +-d dpd-verfolge.cc +-d dpd-voi.icu +-d dpdatd.cyou +-d dpdatd.icu +-d dpdatd.shop +-d dpdcom.bond +-d dpdcz.my.id +-d dpddp.cyou +-d dpddpd.biz.id +-d dpddpd.sbs +-d dpdias.bond +-d dpdopd.cyou +-d dpdopd.icu +-d dpdopd.sbs +-d dpdopd.shop +-d dpdpd.cyou +-d dpdpd.icu +-d dpdpd.sbs +-d dpdpd.shop +-d dpdsdd.cfd +-d dpdsdd.cyou +-d dpdsdd.icu +-d dpdsdd.sbs +-d dpdsdd.shop +-d dpdsn.cyou +-d dpdsn.icu +-d dpdsn.sbs +-d dpdsn.shop +-d dpdspd.cfd +-d dpdspd.cyou +-d dpdspd.icu +-d dpdspd.sbs +-d dpdspd.shop +-d dpduio.bond +-d dpdzp.bond +-d egh.me +-d egyptpoat.cc +-d egyptposc.cc +-d egyptposz.cc +-d egyptpoxu.cc +-d egyptpoxy.cc +-d egyptpsto.cc +-d ezdrivema-com-vip.bond +-d ezdrivema-com.bond +-d ezdrivemia-com.bond +-d fancourier-ro.icu +-d finessa.icu +-d finlands.icu +-d fullcopec-cil.bond +-d gdexpiress.co +-d ghana-post.bond +-d ghanapost.my.id +-d gls-group-eu.bond +-d glssi.biz.id +-d glsso.biz.id +-d glsso.my.id +-d ieb.me +-d itale-post.com +-d italy-poste.biz.id +-d italy-poste.my.id +-d italy-posti.info +-d itaypostin.bond +-d jt-egpaeso-eg.cc +-d jt-egpreso-ey.cc +-d jt-egypost-ey.cc + +-d kgm-govv.icu +-d kgm-gv.icu +-d kgmei.bond +-d kgmg-ovtr.bond +-d kgmgiov.bond +-d kgmgiovtr.bond + +-d kgmic.bond +-d kgmim.bond +-d kgmit.bond +-d magenta-at.help +-d maybank2u.mom +-d maybank2u.web.id +-d plpost.icu +-d poschat.asia +-d postahe.biz.id +-d santander.wikaba.com +-d seurac.bond +-d seurnu.bond + + +-d telceleslareds.dubya.net +-d telceleslareds.mynetav.net +-d telceleslareds.trickip.net +-d tigo-gt.love +-d tigo-onisu.icu +-d tigosv.mrbonus.com +-d tigosv.toythieves.com +-d trpttgovqs.icu +-d very-wonderful.shop + +-d 43.157.122.86 +-d 43.157.46.83 +-d 43.164.196.209 +-d 88.255.216.16 + + + + + + + + + # ——— Standard malware that I stumbled upon on my own ——— # http://www•toorgle•net/results•php?q=fetishkitsch&security=666 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p index de52eadd7..8130c74a7 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs for P2P.p2p @@ -570,6 +570,7 @@ F:185.53.178.51-185.53.178.51 F:185.53.178.52-185.53.178.52 F:185.53.178.53-185.53.178.53 F:185.53.178.54-185.53.178.54 +F:185.176.220.31-185.176.220.31 F:1.14.61.188-1.14.61.188 F:3.248.18.175-3.248.18.175 F:5.39.217.206-5.39.217.206 diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index de542cc51..601620c00 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -607,6 +607,7 @@ 185.53.178.52 185.53.178.53 185.53.178.54 +185.176.220.31 1.14.61.188 3.248.18.175 5.39.217.206