infinitytec/blocklists

A collection of hosts files and filter lists to make the world a better place.

blocklists's Issues

1mg.com (False positive)

This is a legit website. This is been included in the ( Medical Pseudoscience list )

How should I implement wildcards?

With the release of Pi-hole FTL 5.22, we can now use Adblock Plus-style filters to block subdomains!

Pretty neat, and I intend on implementing this in some way.

Some possible ways this can be done:

1. Simplify the lists using ABP formats as much as possible. Remove as many subdomains as possible from the lists. This would make lists a lot smaller, which could improve performance. However this may make lists incompatible with blockers other than Pi-hole, uBlock Origin, and Adblock Plus.
2. Create new lists specifically for wildcards. I would probably only create it for domains that frequently create tons of subdomains. The domain lists would continue as they currently are. A possible problem with this is adoption being slower if people are unaware of these new files.
3. Add the wildcards to the lists. This would offer the best of both worlds at the expense of slightly larger lists and possibly throwing some errors in some blockers. I know that Pi-hole will typically just throw out malformed lines, but I don't know about any other blockers, which could cause problems.

I'm leaning towards the second option, as it offers the greatest resiliency against breakage. I'd love to get some feedback from users as to how this should be handled.

Ensure blocking

Make sure www.domain.com and domain.com are both blocked.

Report: new malware/phishing site

https://imgvieweriri.com/g/?5678565867953463634566=f7&look=mypal_hal&ure=https://instagram.fbkk9-2.fna.fbcdn.net/v/t51.2885-19/s150x150/69013703_644272702749406_7283768718696382464_n.jpg?_nc_ht=instagram.fbkk9-2.fna.fbcdn.net&_nc_ohc=yxXDm260USwAX9txkHS&oh=7171c70463001c681263dbb34948ac91&oe=5EF54B98

The above is a newly registered domain (NRD) that tries to get the user to enter their Instagram credentials. Used in hacked Instagram accounts. Please add to your list :)

false positive in mecialpseudoscience.txt: additudemag.com

as you can see here: https://en.wikipedia.org/wiki/ADDitude

false: backscatterer.org listed in scams-and-phishing.txt

Not sure why backscatterer.org should be listed in scams-and-phishing.txt, since its just the opposite (that is, its for fighting against the spam/phish/scam).

Youtube-Handling do not work

Hello,

since google changed the design, the annoyance-blocklist doesnt handle the youtube-banners correctly.
YT ask you if you want to sign in to an account. The blocklist just suppresses that notice. Without answering the notice, you cannot play a video.

please fix this.

Thanks.

Several non-domain entries

Hi, there are at least 5 domains on the Scams and Fishing list that can not be domains:

• groupm.è.to
• qzzjf.u
• www. groupm.è.to
• www.qzzjf.u
• www.è.to

Don’t block t-online.de since this blocks the infrastructure of the German Corona Warn App

On my Android phone I now use RethinkDNS to block trackers and other domains. Today I observed that the domain svc90.main.px.t-online.de is blocked. The RethinkDNS app told me that the responsible block list was inifinitytec (scam and phishing).

This domain is used to by the German Corona Warn App to help people to get warned when they met an infected person. It’s very likely that the domain is used to communicate with infrastructure of other Corona Apps in Europe. The app and its infrastructure are completely open source and anonymized. There are no problems with privacy at all.

Official Website: https://www.coronawarn.app/en/
German Federal Government: https://www.bundesregierung.de/breg-de/themen/corona-warn-app/corona-warn-app-englisch
GitHub: https://github.com/corona-warn-app
Bug report on GitHub: corona-warn-app/cwa-app-android#574 (svc90.main.px.t-online.de is blocked)
Wikipedia: https://en.wikipedia.org/wiki/Corona-Warn-App
Google Play: https://play.google.com/store/apps/details?id=de.rki.coronawarnapp
F-Droid: https://f-droid.org/de/packages/de.corona.tracing/ (degoogled fork)
Apple App Store: https://apps.apple.com/de/app/corona-warn-app/id1512595757

Some background

The website “T-Online is Germany's biggest news portal, owned and published by digital multi-channel media company Ströer” (Wikipedia). The domain t-online.de itself belongs to Deutsche Telekom AG, which “is a German telecommunications company headquartered in Bonn and by revenue the largest telecommunications provider in Europe” (Wikipedia). T-Online was a German ISP owned by Deutsche Telekom. In 2006, it was re-integrated into Deutsche Telekom. The only thing left is the news portal they sold to Ströer.

The domain t-online.de is still used by Deutsche Telekom, T-Systems and maybe their mobile ISP, formerly known as T-Mobile. Deutsche Telekom also owns T-Mobile US.

Neither www.t-online.de nor t-online.de and all its subdomains are a scam or have anything to do with phishing. Please unblock these because it creates inconveniences for people living in Germany.

Malformed line in scams-and-phising.txt

Hi,

as of today, the scams-and-phising.txt list contains one line with white-space in-between two domain names. I assume these should have gone on two lines?

blocklists/scams-and-phishing.txt

Line 4862 in 0d97cfa

www.dealarcher.com yugster.com

Cheers,

Timo

False positive: A-GPS domain xtrapath2.izatcloud.net

https://github.com/infinitytec/blocklists/blob/fd4f9585e9e7e51a6bb39d049171a526ae880bc9/ads-and-trackers.txt#L52450

GPS-radios made by Qualcomm download assistance data from the domains xtrapath{1,2,3}.izatcloud.net, these are neither ads nor trackers.

Verify possible hosts

If anyone has any information regarding any entries on the possible hosts list, please inform me here, so I can either add it to the appropriate list or remove it as a false positive.