From 205d315239c110978af22c071cd5d9e4c47abbc5 Mon Sep 17 00:00:00 2001
From: Ming Di Leom <2809763-curben@users.noreply.gitlab.com>
Date: Sun, 18 Jul 2021 10:15:33 +0000
Subject: [PATCH] feat: dnscrypt-proxy blocklists

- support names and IPs
- https://github.com/DNSCrypt/dnscrypt-proxy
---
 README.md                                  |  36 ++
 dist/pup-filter-dnscrypt-blocked-names.txt | 586 +++++++++++++++++++++
 src/script.sh                              |  15 +
 3 files changed, 637 insertions(+)
 create mode 100644 dist/pup-filter-dnscrypt-blocked-names.txt

diff --git a/README.md b/README.md
index 7d30141..de5fac3 100644
--- a/README.md
+++ b/README.md
@@ -13,6 +13,7 @@ There are multiple formats available, refer to the appropriate section according
 - [Dnsmasq](#dnsmasq)
 - BIND -> BIND [zone](#bind) or [RPZ](#response-policy-zone)
 - [Unbound](#unbound)
+- [dnscrypt-proxy](#dnscrypt-proxy)
 - Internet Explorer -> [Tracking Protection List (IE)](#tracking-protection-list-ie)
 - [Snort2](#snort2)
 - [Snort3](#snort3)
@@ -274,6 +275,41 @@ printf '\n  include: "/usr/local/etc/unbound/pup-filter-unbound.conf"\n' >> /etc
 
 </details>
 
+## dnscrypt-proxy
+
+### Install
+
+```
+# Create a new folder to store the blocklist
+mkdir -p /etc/dnscrypt-proxy/
+
+# Create a new cron job for daily update
+printf '#!/bin/sh\ncurl -L "https://curben.gitlab.io/malware-filter/pup-filter-dnscrypt-blocked-names.txt" -o "/etc/dnscrypt-proxy/pup-filter-dnscrypt-blocked-names.txt"\n' > /etc/cron.daily/pup-filter
+
+# cron job requires execution permission
+chmod 755 /etc/cron.daily/pup-filter
+```
+
+Configure dnscrypt-proxy to use the blocklist:
+
+``` diff
+[blocked_names]
++  blocked_names_file = '/etc/dnscrypt-proxy/pup-filter-dnscrypt-blocked-names.txt'
+```
+
+- https://curben.gitlab.io/malware-filter/pup-filter-dnscrypt-blocked-names.txt
+
+<details>
+<summary>Mirrors</summary>
+
+- https://cdn.statically.io/gl/curben/pup-filter/master/dist/pup-filter-dnscrypt-blocked-names.txt
+- https://glcdn.githack.com/curben/pup-filter/raw/master/dist/pup-filter-dnscrypt-blocked-names.txt
+- https://raw.githubusercontent.com/curbengh/pup-filter/master/dist/pup-filter-dnscrypt-blocked-names.txt
+- https://cdn.statically.io/gh/curbengh/pup-filter/master/dist/pup-filter-dnscrypt-blocked-names.txt
+- https://gitcdn.xyz/repo/curbengh/pup-filter/master/dist/pup-filter-dnscrypt-blocked-names.txt
+- https://cdn.jsdelivr.net/gh/curbengh/pup-filter/dist/pup-filter-dnscrypt-blocked-names.txt
+</details>
+
 ## Tracking Protection List (IE)
 
 This blocklist includes domains only.
diff --git a/dist/pup-filter-dnscrypt-blocked-names.txt b/dist/pup-filter-dnscrypt-blocked-names.txt
new file mode 100644
index 0000000..79b1d49
--- /dev/null
+++ b/dist/pup-filter-dnscrypt-blocked-names.txt
@@ -0,0 +1,586 @@
+# Title: PUP Names Blocklist
+# Description: Block domains that host potentially unwanted programs (PUP)
+# Updated: Sun, 18 Jul 2021 10:09:57 +0000
+# Expires: 1 day (update frequency)
+# Homepage: https://gitlab.com/curben/pup-filter
+# License: https://gitlab.com/curben/pup-filter#license
+# Source: https://github.com/zhouhanc/malware-discoverer
+123news.website
+1browser.co
+20patogh.com
+2kddbl.club
+321movies.xyz
+4upgradingstablesafe.work
+abeah-security.xyz
+adguard-vpn.com
+adrondespi.top
+akb48wrapup.com
+altcasino.info
+amateurxporn.com
+apptool.me
+armorprovpn.me
+ashtdi.cn
+asufij.xyz
+atprofessor.fun
+atwater.org
+auto-lawyer.site
+baseofmp3.com
+bestappland.me
+bestvideoplayerupgrades.work
+bettercleanplayers.info
+betterfreedownloadplayer.info
+betterfreedownloadplayers.info
+bigcbd.info
+bigdaycasino.info
+bigwin-online-free-congrats.cyou
+bigwinonlinefreecongrats.cyou
+bitcoinjunction.club
+bittrend.com
+blockchain-com.email
+bodyamaze.club
+bodyselfcare.info
+boot-upcompletely-bestprecisefile.best
+boot-upcompletely-bestsophisticatedfile.best
+boot-upcompletely-bestspeedyfile.best
+boot-upfree-bestuberfile.best
+boot-upoverly-bestadvancedfile.best
+boot-uprefined-bestcompletelyfile.best
+boot-upuber-bestfreefile.best
+breaking-news.digital
+browse-privately.net
+btcinvesting.info
+bulley.shop
+cabins-r-us.com
+calledbellc.fun
+care-connection.info
+careerconnecthub.com
+celebseven.com
+centrodeartigos.com
+check-your-profitzone.life
+cloudmedia.casa
+cloudmedia.cyou
+cloudmedia.fun
+cloudmedia.surf
+collectrewards.net
+comphp.xyz
+conflaqpzc.info
+congrats-lucky-giveaway-smart.cyou
+congratsluckygiveawaysmart.cyou
+connectionapplication.com
+contentgate.cam
+contentgate.club
+contentgate.fun
+contentgate.uno
+cooing.top
+credit-monitor.xyz
+credit-monitoring-360.xyz
+cryptotilt.club
+cryptotradingcourses.net
+cryptounlimited.info
+cselfconnect.com
+curesector.today
+dailymedia.casa
+dailymedia.cyou
+dailymedia.monster
+dailymedia.site
+dailymedia.space
+dailymedia.surf
+dailymedia.work
+dailyrep.net
+darkview.org
+dealmedia.club
+dealmedia.website
+dealmedia.xyz
+defensepro.me
+delightcmain.xyz
+desixxx.cloud
+ditvl.com
+dollarsurvey365.online
+dollarsurvey365.org
+dollarsurvey366.org
+dragonballclub.com
+earlyprogress.info
+elpelades.club
+eproute.info
+eroanimeittyokusen.com
+erotica.live
+extrasafe.xyz
+facebook-sex.com
+fastmapc.xyz
+fastspinc.xyz
+fastspota.xyz
+fastspotb.xyz
+fastwebb.xyz
+fastwebe.xyz
+filmesonlineturbo.net
+films-down.com
+financial-deals.xyz
+findoffers.co
+findperfectplaces2download.work
+findperfectplaces4download.work
+findyourultimateplayersfirst.best
+firststableplayer.work
+fisudauh.top
+fitandstable.club
+fithealthspark.info
+fithealthspot.club
+fitnessdial.club
+flash-rewards.info
+flatbellylife.info
+flexroll.online
+flyfreecostas.live
+flymedia.cam
+flymedia.club
+flymedia.fun
+flymedia.online
+flymedia.uno
+forsalecheap.net
+free-gifts.net
+freenationalsuperworldwide.cyou
+freeperfectupgrade.work
+freeperfectupgrading.work
+freewareappsstreamfast-best.digital
+freewareappsstreamfastall.digital
+funmapd.xyz
+funsiteb.xyz
+fwsxqc.cn
+gainhealth.info
+get-your-score.club
+getmoregirls.net
+girlsnearyou.online
+gladmstreet.xyz
+gladplacespin.xyz
+gladspaceplane.xyz
+global-info.space
+go-x34n7wbcoes-ok.live
+goalmedia.bar
+goalmedia.cam
+goalmedia.club
+goalmedia.monster
+googsistem.live
+govpshosting.com
+graburprize.net
+gramp.xyz
+grandencryptions.me
+growthnetic.club
+hailso.xyz
+happyactive.today
+happymakesite.xyz
+healandgrow.club
+healthdome.info
+healtheezy.info
+healthemerge.info
+healthmanic.info
+healthmarlin.club
+healthneo.club
+healthomega.club
+healthscale.club
+healthschedule.club
+healthspark.today
+healthsupreme.club
+healthtag.club
+healthupper.club
+healthvenue.club
+healthvibe.live
+healthwella.club
+healthyideal.club
+healthylives.today
+healthyspirit.info
+httqzq.vip
+hypezen.info
+ientsillness.fun
+inappropriate.top
+incrediblebuzz.info
+information.casa
+installcompletely-theoriginalfile.best
+iosdfnc.com
+iosrecommendedvpn.com
+ironprovpn.me
+isystemupdate.cloud
+izipik.com
+java-forum.org
+jointingifstrawberry.xyz
+jsrenthouse.com
+jtkszl.vip
+junemedia.bar
+junemedia.xyz
+kad3md.cn
+keepithealthy.info
+ketodietrecipes.org
+ktpyzw.vip
+leeching.net
+legendaryplaceupgrade.info
+legendaryplaceupgrades.info
+legendaryplaceupgrading.info
+legendaryplayerupdates.work
+legendarysiteupgrading.work
+legendaryvideoupgrade.info
+legendaryvideoupgrades.info
+legendaryvideoupgrading.info
+ligamedia.art
+ligamedia.casa
+ligamedia.club
+livehealthcare.today
+livingmighty.club
+loadadvancedextremelythefile.vip
+loaddevelopeduberfile.digital
+loadextremelycurrentthefile.vip
+loadextremelyquickfile.digital
+loadextremelyrecentthefile.vip
+loadfree-bestheavilyfile.best
+loadfreeextremelyfile.digital
+loadgreatly-bestadvancedfile.best
+loadgreatly-bestrenewedfile.best
+loadgreatlynewestthefile.vip
+loadgreatlyoriginalthefile.vip
+loadgreatlyprogressivethefile.vip
+loadgreatlyrenewedthefile.vip
+loadheavily-bestfreefile.best
+loadhighlyadvancedthefile.vip
+loadintenselyquickthefile.vip
+loadintenselyspeedythefile.vip
+loadintenselystrongthefile.vip
+loadintenselyswiftthefile.vip
+loadnewestextremelythefile.vip
+loadnewestgreatlythefile.vip
+loadoriginalextremelythefile.vip
+loadoriginalgreatlythefile.vip
+loadpreciseintenselythefile.vip
+loadpreciseuberfile.digital
+loadprogressivegreatlythefile.vip
+loadquickextremelyfile.digital
+loadrecentextremelythefile.vip
+loadrecentoverlyfile.digital
+loadrefineduberfile.digital
+loadrenewedgreatlythefile.vip
+loadsophisticateduberfile.digital
+loadstreamlaunch.digital
+loadstrongextremelyfile.digital
+loadstrongintenselythefile.vip
+loadswiftintenselythefile.vip
+loaduberprecisefile.digital
+loaduberspeedyfile.digital
+locationtracker.services
+loosefit.info
+louisvillegigs.net
+loveorfun.cc
+lubbockeda.org
+luckymedia.casa
+luckymedia.cyou
+luckymedia.fun
+luckymedia.space
+luckymedia.website
+madpandatv.net
+makemesafeios.com
+managestrong-theuberfile.best
+manageuber-thenewestfile.best
+manageuber-therecentfile.best
+manageuber-thestrongfile.best
+manageuber-theswiftfile.best
+mapopts.top
+matchyourgirl.online
+mathison.io
+mediaevent.club
+mediaevent.uno
+mediagate.casa
+mediagate.club
+mediagate.cyou
+mediagate.fun
+mediagate.surf
+mediaplayer24.ml
+medicomatic.info
+medicreed.club
+medjournalketo.info
+medsjournal.info
+meeryslotspin.xyz
+mindbank.ai
+mindmatch.ai
+mistraffic.me
+mobileluckywinner.site
+modern-security.xyz
+monitoring-credit.xyz
+movievod.me
+my-credit-score.xyz
+mynutriplan.co
+n95o0fxvvw.top
+naughtygirlsshowall.live
+nutrahealth.info
+official-bigwin-national-free.cyou
+official-prize-national-random.cyou
+officialbigwinnationalfree.cyou
+officialprizenationalrandom.cyou
+oldharper.xyz
+olivedinflats.space
+online-prize-super-promotion.cyou
+online-survey.org
+onlinecinema.eu
+onlineprize.cyou
+onlineprizesuperpromotion.cyou
+onlinewinnerluckyrewards.cyou
+operatecompletely-theprecisefile.best
+operategreatly-therefinedfile.best
+operategreatly-theswiftfile.best
+operateprecise-thecompletelyfile.best
+operaterefined-thegreatlyfile.best
+ouldthepat.fun
+patriothealth.today
+pcsecurity-live.xyz
+performcompletely-thelatestfile.best
+performcompletely-thequickfile.best
+performextremely-theprecisefile.best
+performfree-thehighlyfile.best
+performgreatly-thespeedyfile.best
+performheavily-theoriginalfile.best
+performhighly-thefreefile.best
+performhighly-theprecisefile.best
+performhighly-therecentfile.best
+performintensely-thedevelopedfile.best
+performlatest-thecompletelyfile.best
+performlatestoverlyapplication.icu
+performmost-thenewestfile.best
+performmost-therecentfile.best
+performoriginal-theheavilyfile.best
+performoriginal-theuberfile.best
+performoverly-theprogressivefile.best
+performprecise-theextremelyfile.best
+performprecise-thehighlyfile.best
+performprecise-theuberfile.best
+performprogressive-theintenselyfile.best
+performprogressive-theoverlyfile.best
+performquick-thecompletelyfile.best
+performrecent-themostfile.best
+performrefined-theextremelyfile.best
+performrefineduberapplication.icu
+performrenewed-theoverlyfile.best
+performsophisticated-thehighlyfile.best
+performspeedy-thegreatlyfile.best
+performstrong-thegreatlyfile.digital
+performuber-theoriginalfile.best
+performuber-therenewedfile.best
+performuberquickapplication.icu
+playplanete.xyz
+ppploanchoices.site
+premiernursingacademy.org
+preparedforsafeupgrading.work
+primecare.today
+privacykeeper.net
+profitsurvey365.org
+proprotect.me
+prosecurityvpn.me
+protect-connection.com
+protecttool.me
+provpn.me
+provpnsecurity.me
+provpnservice.me
+prtctapp.me
+qh97dkzy20.top
+quantum.work
+rainlonginsect23.life
+random-prize-bigwin-official.cyou
+randomprizebigwinofficial.cyou
+readyhealthgo.today
+recontent.casa
+recontent.cyou
+recontent.fun
+recontent.site
+recontent.surf
+reliablesoftwarevideos.info
+resignation.top
+rewards-promotion-winner-super.cyou
+rewardsluckygiveawayprize.cyou
+rewardspromotionwinnersuper.cyou
+ritaus.org
+roadtoyourhealth.info
+robogarden.io
+rootessential.info
+runadvanced-bestextremelyfile.best
+runcurrent-bestextremelyfile.best
+rundeveloped-bestoverlyfile.best
+runextremely-bestadvancedfile.best
+runextremely-bestcurrentfile.best
+runextremely-bestlatestfile.best
+runextremely-bestrecentfile.best
+runfree-bestoverlyfile.best
+runintensely-bestrenewedfile.best
+runlatest-besthighlyfile.best
+runnewest-bestextremelyfile.best
+runoriginal-bestextremelyfile.best
+runoriginal-bestintenselyfile.best
+runoverly-bestdevelopedfile.best
+runoverly-bestquickfile.best
+runoverly-bestsophisticatedfile.best
+runprogressive-bestmostfile.best
+runrecent-bestextremelyfile.best
+runrecent-besthighlyfile.best
+safest4placeupdate.info
+safest4placeupdates.info
+scoopswoop.info
+score-monitoring.xyz
+searchoffers.info
+seasoned.co
+sec-alert.xyz
+sec-alerts.xyz
+securitevpn.me
+security-made-easy.xyz
+securityvpnpro.me
+seemlast.monster
+service-care.space
+settothereliableupgradingnew.work
+shopnsave.world
+signupandturnyourscreenoffsafepowernow.date
+smartys.link
+sorrectionki.space
+spotmapd.xyz
+springplanetf.xyz
+start-page.one
+stay-notified.cc
+stickr.co
+streamadvanced-bestcompletelyfile.best
+streamadvanced-bestextremelyfile.best
+streamdeveloped-bestoverlyfile.best
+streamextremely-bestlatestfile.best
+streamextremely-bestnewestfile.best
+streamfree-bestmostfile.best
+streamingmadness.net
+streamintensely-bestadvancedfile.best
+streamintensely-bestcurrentfile.best
+streamintensely-bestlatestfile.best
+streamintensely-bestquickfile.best
+streamlatest-bestextremelyfile.best
+streamlatest-bestoverlyfile.best
+streamoverly-bestdevelopedfile.best
+streamoverly-bestrenewedfile.best
+streamprogressive-bestoverlyfile.best
+streamquick-bestmostfile.best
+streamrecent-bestintenselyfile.best
+streamrenewed-bestoverlyfile.best
+streamstrong-bestuberfile.best
+streamuber-bestspeedyfile.best
+streamuber-bestswiftfile.best
+subeamy.pw
+sudoo.net
+sugar-legal-about13.fun
+superplace4upgrade.work
+superplace4upgrading.work
+superplaceforupgrade.info
+superpromotion.cyou
+support-notify.space
+survey-review.club
+syncadvanced-bestuberfile.best
+synccompletely-bestoriginalfile.best
+synccompletely-bestprogressivefile.best
+synccompletely-bestrecentfile.best
+synccurrentmostthefile.vip
+syncgreatly-bestrenewedfile.best
+syncheavily-bestlatestfile.best
+synchighly-bestfreefile.best
+synchighly-bestoriginalfile.best
+synchighly-bestprogressivefile.best
+synchighly-bestrecentfile.best
+synchighly-bestsophisticatedfile.best
+synchighly-bestspeedyfile.best
+syncintensely-bestprogressivefile.best
+synclatest-bestuberfile.best
+synclatestintenselythefile.vip
+syncnewestmostthefile.vip
+syncnewestuberthefile.vip
+syncoriginal-bestcompletelyfile.best
+syncprogressive-bestcompletelyfile.best
+syncprogressive-besthighlyfile.best
+syncrecentintenselythefile.vip
+syncrenewed-bestcompletelyfile.best
+syncstrong-bestextremelyfile.best
+syncuber-bestlatestfile.best
+syncuber-bestoriginalfile.best
+syncuber-bestprecisefile.best
+syncuber-bestprogressivefile.best
+syncuber-bestrefinedfile.best
+syncuber-bestsophisticatedfile.best
+systemupdatit.club
+tackis.xyz
+talskingest.top
+tdstraffic.xyz
+technologypartners.net
+thebettercleanplayer.info
+thecryptomoney.info
+thecryptozone.website
+thefatburner.info
+thefitproject.club
+thehealthcurve.info
+thehealthcycle.club
+thehealthgo.info
+thehealthystyle.info
+thehotshot.info
+thenewjourney.info
+thesafestplayerlinks.work
+thesafestreliablelink.work
+theslotomania.info
+thestablealwayssafeupdates.work
+thestablegreatupdates.work
+thestablegreatupgrades.best
+toolvpn.me
+toovolution.club
+topnotchsports.tips
+track4ast.icu
+trafficbounce.net
+trafficgate.cc
+trafficmind.pro
+trane.fun
+tripleprofit-zone.life
+trktraf.club
+trkvpn.xyz
+trustappstreamsall.digital
+tryoneshot-keto.net
+uclaimrewards.net
+unitehealth.club
+updatefix.xyz
+usepro.me
+useprovpn.me
+usevpnpro.me
+vital-health.club
+vpn-pro.info
+vpn1aprotectplus.com
+vpnprosecurity.me
+vpnsecurity.me
+vpnservice.me
+vpnupdatesnow.com
+watchadvanced-bestgreatlyfile.best
+watchgreatly-bestcurrentfile.best
+watchgreatly-bestlatestfile.best
+watchlatest-bestgreatlyfile.best
+watchprogressive-bestmostfile.best
+websiteforall.work
+websitetoget.work
+webtip.co
+wellnessgram.info
+wellnessplum.info
+winnerbigwingiveawaysuper.cyou
+winnerz.site
+worivo.info
+worldwide-national-claim-free.cyou
+worldwide-prize-giveaway-free.cyou
+worldwideluckypromotionfree.cyou
+worldwidenationalclaimfree.cyou
+worldwideofficialpromotion.cyou
+worldwideofficialrewardssuper.cyou
+worldwideprizegiveawayfree.cyou
+yourbestvideoconnection.info
+yourbestvideoconnections.info
+yourbettercleanplayer.info
+yourbettercleanplayers.info
+yourlegendaryplaceupgrade.info
+yourlegendaryplaceupgrades.info
+yourlegendaryplaceupgrading.work
+yourlegendaryplayerupdate.work
+yourlegendaryplayerupdating.work
+yourlegendarysystemsupgrade.work
+yourlegendaryvideoupgrades.info
+yourlegendaryvideoupgrading.info
+yourlinkplaceupdatingfree.work
+yourluckytoday.club
+yoursafesystemsupdating.work
+yourstablegreatupdate.work
+yourstablegreatupdates.work
+yourtechplaceforupgrades.info
+yourultimateperfectupgrades.work
+youthewinner.net
diff --git a/src/script.sh b/src/script.sh
index db42e6e..d957784 100644
--- a/src/script.sh
+++ b/src/script.sh
@@ -156,6 +156,21 @@ sed '1 i\'"$COMMENT"'' | \
 sed "1s/Blocklist/Unbound Blocklist/" > "../dist/pup-filter-unbound.conf"
 
 
+## dnscrypt-proxy blocklists
+# name-based
+cat "pup-notop-domains.txt" | \
+sed '1 i\'"$COMMENT"'' | \
+sed "1s/Domains/Names/" > "../dist/pup-filter-dnscrypt-blocked-names.txt"
+
+## Currently there are no IP entries
+# # IPv4-based
+# cat "phishing-notop-domains.txt" | \
+# sort | \
+# grep -E "^([0-9]{1,3}[\.]){3}[0-9]{1,3}$" | \
+# sed '1 i\'"$COMMENT"'' | \
+# sed "1s/Domains/IPs/" > "../dist/phishing-filter-dnscrypt-blocked-ips.txt"
+
+
 ## IE blocklist
 COMMENT_IE="msFilterList\n$COMMENT\n: Expires=1\n#"