Merge branch 'master' into patch-2

2026-10-05 10:01:09 +01:00 · 2021-12-01 06:57:00 -05:00
parent e0e755bc63 f0467658eb
commit 12fc773529
19 changed files with 443 additions and 209 deletions
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
-! Version: 27November2021v3-Beta
+! Version: 01December2021v3-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,13 +13,13 @@
 ! Gabon
 ||ga^$domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga
 ! Mali
-||ml^$domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml
+||ml^$domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml
 ! Equatorial Guinea
 ||gq^$domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
 ! Central African Republic
 ||cf^$domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf
 ! Palau
-||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw
+||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw
 ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 ||loan^
 ||agency^
@@ -112,7 +112,7 @@ bing.com##.b_algo:-abp-has(a[href*=".top/"]:not([href*="corriente.top"], [href*=
 ||ssl.bblck.me^
 ||allblock.net^
 ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^
-! Malicious domains found in videogame manuals and title screens
+! Malicious or purchaseable domains found in videogame manuals and title screens
 ||acclaimsports.com^
 ||acclaimmaxsports.com^
 ||hip-games.com^
@@ -650,7 +650,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||new-message.today^
 ||new-notification.live^
 ||new-notifications.live^
-||notified-today.com^
 ||notified-today.live^
 ||notified-today.xyz^
 ||stay-notified.com^
@@ -1489,7 +1488,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||37.0.10.83^$popup
 ||newstepsco.com^
 ||newstepsco.com^$popup
-||duckdns.org^$domain=~www.duckdns.org
+||duckdns.org^$domain=~www.duckdns.org|~checkip.dyndns.com
@@://duckdns.org^
 ||chse-security-notifications.email^
 ||chse-security-notifications.email^$popup
@@ -1497,7 +1496,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||secure-0*.ddnss.ch^$popup
 ||lucdream.com^
 ||beastbuying.com^
-||kokotrokot.com^
 ||07ca17vejqqej990.inteo.xyz^
 ||pesoaniz.com^
 ||plarium.com^
@@ -1524,7 +1522,8 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||secureleadsforever.com^$popup
 ||renewal-software-update.com^
 ||renewal-software-update.com^$popup
-||pushmeup.art^
+||pushmeup.art^
+||pushmeup.art^$popup
 ||covercenter.xyz^
 ||covercenter.xyz^$popup
 ||gettrk.xyz^
@@ -1833,7 +1832,8 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||safelyonline.net^
 ||browse-safe.net^
 ||btpnative.com^
-||mybetterdl.com^
+||mybetterdl.com^
+||mybetterdl.com^$popup
 ||besty-deals.com^
 ||besty-deals.com^$popup
 ||data-px.services^
@@ -1868,8 +1868,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||www.kqzyfj.com^
 ||www.kqzyfj.com^$popup
 ||kqzyfj.com^
-||cj.dotomi.com^
-||cj.dotomi.com^$popup
 ||mcafee12.tt.omtrdc.net^
 ||trolleydrop.info^
 ||jaynordan.digital^
@@ -2152,22 +2150,14 @@ zombooru.com##a[href="http://www.hard55.com"]
 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains
 ||yotube.com^
 ||yotube.com^$popup
-||mybetterdl.com^
-||mybetterdl.com^$popup
-||p185689.mybetterdl.com^
-||p185689.mybetterdl.com^$popup
 ||r-tb.com^
 ||r-tb.com^$popup
 ||cdn.hoood.info^
 ||cdn.hoood.info^$popup
-||data-px.services^
-||data-px.services^$popup
 ||barah-flo.com^
 ||barah-flo.com^$popup
 ||beta-one.net^
 ||beta-one.net^$popup
-||beastbuying.com^
-||beastbuying.com^$popup
 ||pisism.com^
 ||pisism.com^$popup
 ||czyzd.xyz^
@@ -2186,8 +2176,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||welcomejohncena.pro^$popup
 ||security-scanner.xyz^
 ||security-scanner.xyz^$popup
-||pushmeup.art^
-||pushmeup.art^$popup
 ||c2egp.xyz^
 ||c2egp.xyz^$popup
 ||ese40.xyz^
@@ -2513,6 +2501,67 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||163.125.31.46^$popup
 ||163.179.168.44^
 ||163.179.168.44^$popup
+! https://github.com/uBlockOrigin/uAssets/pull/10647
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
+||updsec.builtfromzero.com^
+||updsec.builtfromzero.com^$popup
+||money-mod.com^ument
+||gospelchor.info^ument
+
+||new.bestlifeoffer20.com^ument
+||reykijnoac.com^ument
+||totalnicefeed.com^
+||totalnicefeed.com^$popup
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
+||riteupd.mimanduca.co^
+||riteupd.mimanduca.co^$popup
+||oaesso.info^ument
+
+||bestlifeoffer20.com^ument
+! https://scammer.info/t/password-stealer/84348
+! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
+||youtube.com/watch?v=8nY7SnvNxH4^
+||youtube.com/watch?v=8nY7SnvNxH4^$popup
+||bit.ly/3p8kN5V^ument
+||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/
+||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$popup
+||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^
+||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$popup
+! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
+||110.89.59.135^
+||110.89.59.135^$popup
+||113.116.89.1^
+||113.116.89.1^$popup
+||119.183.146.191^
+||119.183.146.191^$popup
+||153.3.3.226^
+||153.3.3.226^$popup
+||182.116.104.6^
+||182.116.104.6^$popup
+||60.7.133.200^
+||60.7.133.200^$popup
+||122.6.254.201^
+||122.6.254.201^$popup
+||110.89.11.167^
+||110.89.11.167^$popup
+||171.112.177.90^
+||171.112.177.90^$popup
+||115.194.38.143^
+||115.194.38.143^$popup
+||61.52.79.32^
+||61.52.79.32^$popup
+! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
+||ups-dk.u1537460.cp.regruhosting.ru^
+||ups-dk.u1537460.cp.regruhosting.ru^$popup
+! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
+||lowseelan.com^
+||lowseelan.com^$popup
+! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
+||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^
+||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^$popup
+! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
+||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^
+||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$popup

 ! ——— Standard malware that I stumbled upon on my own ———
 ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -12315,14 +12364,14 @@ toorgle.net##.join
 ||discord.foundation^$popup
 ||discordgift.ru^
 ||discordgift.ru^$popup
-||discordnitro-steam.ru^
-||discordnitro-steam.ru^$popup
+||discordnitro-steam.
+||discordnitro-steam.$popup
 ||discordnitro.space^
 ||discordnitro.space^$popup
-||discordxgift.xyz^
-||discordxgift.xyz^$popup
-||discordxnitro.xyz^
-||discordxnitro.xyz^$popup
+||discordxgift.
+||discordxgift.$popup
+||discordxnitro.
+||discordxnitro.$popup
 ||discorgift.online^
 ||discorgift.online^$popup
 ||discrocl.xyz^
@@ -12379,8 +12428,8 @@ toorgle.net##.join
 ||free-niltross.ru^$popup
 ||free-nitlross.ru^
 ||free-nitlross.ru^$popup
-||freediscordnitro.ru^
-||freediscordnitro.ru^$popup
+||freediscordnitro.
+||freediscordnitro.$popup
 ||freeskinsfree.pp.ua^
 ||freeskinsfree.pp.ua^$popup
 ||from-plames.xyz^
@@ -12905,12 +12954,12 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
 ||githubnt.com^

 ! ——— Usually used by various groups who buy old domains and display illicit ads on them ———
-://ww4.
-://ww5.$domain=~ww5.msu.ac.zw
+://ww4.$domain=~ww4.ikea.com
+://ww5.$domain=~ww5.ikea.com|~ww5.msu.ac.zw
 ://ww6.$domain=~ww6.generali.pt
 ://ww7.$domain=~ww7.be|~ww7.readsnk.com
 ://ww8.$domain=~ww8.co|~ww8.ikea.com|~ww8.tiki.ne.jp|~ww8.erovoice.us|~ww8.anyanime.com|~ww8.bakushpal.az|~ww8.tokyoghoulre.com
-://ww9.$domain=~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br
+://ww9.$domain=~ww9.ikea.com|~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br
 ://ww10.
 ://ww11.
 ://ww12.
@@ -12969,11 +13018,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne)
 ! ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net

-! ——— Offline-only apps trying to phone home ———
-
-! https://fosspost.org/audacity-is-now-a-spyware/
-
-
 ! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 ! https://myip.ms/info/limitexcess

@@ -12982,9 +13026,11 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|



+
 ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^

+
 ! ——— Anti-PUP (WIP) ———
 ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 ||webadvisorc.rest.gti.mcafee.com^
@@ -1,6 +1,6 @@
 [AdGuard versions from ≥2019]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
-! Version: 27November2021v3-Beta
+! Version: 01December2021v3-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,13 +13,13 @@
 ! Gabon
 ||ga^$document,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga
 ! Mali
-||ml^$document,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml
+||ml^$document,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml
 ! Equatorial Guinea
 ||gq^$document,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
 ! Central African Republic
 ||cf^$document,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf
 ! Palau
-||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw
+||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw
 ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 ||loan^$document
 ||agency^$document
@@ -112,7 +112,7 @@ bing.com##.b_algo:has(a[href*=".top/"]:not([href*="corriente.top"], [href*="gdto
 ||ssl.bblck.me^$document
 ||allblock.net^$document
 ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^$document
-! Malicious domains found in videogame manuals and title screens
+! Malicious or purchaseable domains found in videogame manuals and title screens
 ||acclaimsports.com^$document
 ||acclaimmaxsports.com^$document
 ||hip-games.com^$document
@@ -555,7 +555,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||new-message.today^$document
 ||new-notification.live^$document
 ||new-notifications.live^$document
-||notified-today.com^$document
 ||notified-today.live^$document
 ||notified-today.xyz^$document
 ||stay-notified.com^$document
@@ -1020,13 +1019,12 @@ zombooru.com##a[href="http://www.hard55.com"]
 212.192.241.72$network
 37.0.10.83$network
 ||newstepsco.com^$empty,important
-||duckdns.org^$document,domain=~www.duckdns.org
+||duckdns.org^$document,domain=~www.duckdns.org|~checkip.dyndns.com
@@://duckdns.org^$document
 ||chse-security-notifications.email^$empty,important
 ||secure-0*.ddnss.ch^$empty,important
 ||lucdream.com^$document
 ||beastbuying.com^$document
-||kokotrokot.com^$document
 ||07ca17vejqqej990.inteo.xyz^$document
 ||pesoaniz.com^$document
 ||plarium.com^$document
@@ -1042,7 +1040,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||pro-protection.xyz^$empty,important
 ||secureleadsforever.com^$empty,important
 ||renewal-software-update.com^$empty,important
-||pushmeup.art^$document
+||pushmeup.art^$empty,important
 ||covercenter.xyz^$empty,important
 ||gettrk.xyz^$empty,important
 ||trc.*.co^$document
@@ -1235,7 +1233,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||safelyonline.net^$document
 ||browse-safe.net^$document
 ||btpnative.com^$document
-||mybetterdl.com^$document
+||mybetterdl.com^$empty,important
 ||besty-deals.com^$empty,important
 ||data-px.services^$document
 ||newsvot.com^$document
@@ -1262,7 +1260,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||army-glo.scrollingsystem.com^$document
 ||www.kqzyfj.com^$empty,important
 ||kqzyfj.com^$document
-||cj.dotomi.com^$empty,important
 ||mcafee12.tt.omtrdc.net^$document
 ||trolleydrop.info^$document
 ||jaynordan.digital^$document
@@ -1432,14 +1429,10 @@ zombooru.com##a[href="http://www.hard55.com"]
 159.148.186.228$network
 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains
 ||yotube.com^$empty,important
-||mybetterdl.com^$empty,important
-||p185689.mybetterdl.com^$empty,important
 ||r-tb.com^$empty,important
 ||cdn.hoood.info^$empty,important
-||data-px.services^$empty,important
 ||barah-flo.com^$empty,important
 ||beta-one.net^$empty,important
-||beastbuying.com^$empty,important
 ||pisism.com^$empty,important
 ||czyzd.xyz^$empty,important
 ||r1it6.xyz^$empty,important
@@ -1449,7 +1442,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||m6ydd.xyz^$empty,important
 ||welcomejohncena.pro^$empty,important
 ||security-scanner.xyz^$empty,important
-||pushmeup.art^$empty,important
 ||c2egp.xyz^$empty,important
 ||ese40.xyz^$empty,important
 ||e07wm.xyz^$empty,important
@@ -1641,6 +1633,46 @@ zombooru.com##a[href="http://www.hard55.com"]
 115.204.119.237$network
 163.125.31.46$network
 163.179.168.44$network
+! https://github.com/uBlockOrigin/uAssets/pull/10647
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
+||updsec.builtfromzero.com^$empty,important
+||money-mod.com^$document
+||gospelchor.info^$document
+
+||new.bestlifeoffer20.com^$document
+||reykijnoac.com^$document
+||totalnicefeed.com^$empty,important
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
+||riteupd.mimanduca.co^$empty,important
+||oaesso.info^$document
+
+||bestlifeoffer20.com^$document
+! https://scammer.info/t/password-stealer/84348
+! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
+||youtube.com/watch?v=8nY7SnvNxH4^$empty,important
+||bit.ly/3p8kN5V^$document
+||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$empty,important
+||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$empty,important
+! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
+110.89.59.135$network
+113.116.89.1$network
+119.183.146.191$network
+153.3.3.226$network
+182.116.104.6$network
+60.7.133.200$network
+122.6.254.201$network
+110.89.11.167$network
+171.112.177.90$network
+115.194.38.143$network
+61.52.79.32$network
+! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
+||ups-dk.u1537460.cp.regruhosting.ru^$empty,important
+! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
+||lowseelan.com^$empty,important
+! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
+||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^$empty,important
+! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
+||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$empty,important

 ! ——— Standard malware that I stumbled upon on my own ———
 ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6563,10 +6595,10 @@ toorgle.net##.join
 ||discord-spooky.ru^$empty,important
 ||discord.foundation^$empty,important
 ||discordgift.ru^$empty,important
-||discordnitro-steam.ru^$empty,important
+||discordnitro-steam.$empty,important
 ||discordnitro.space^$empty,important
-||discordxgift.xyz^$empty,important
-||discordxnitro.xyz^$empty,important
+||discordxgift.$empty,important
+||discordxnitro.$empty,important
 ||discorgift.online^$empty,important
 ||discrocl.xyz^$empty,important
 ||discrod.gifts^$empty,important
@@ -6595,7 +6627,7 @@ toorgle.net##.join
 ||free-dislcordnitrlos.ru^$empty,important
 ||free-niltross.ru^$empty,important
 ||free-nitlross.ru^$empty,important
-||freediscordnitro.ru^$empty,important
+||freediscordnitro.$empty,important
 ||freeskinsfree.pp.ua^$empty,important
 ||from-plames.xyz^$empty,important
 ||from-sparsei.ru.com^$empty,important
@@ -6881,12 +6913,12 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
 ||githubnt.com^

 ! ——— Usually used by various groups who buy old domains and display illicit ads on them ———
-://ww4.$document
-://ww5.$document,domain=~ww5.msu.ac.zw
+://ww4.$document,domain=~ww4.ikea.com
+://ww5.$document,domain=~ww5.ikea.com|~ww5.msu.ac.zw
 ://ww6.$document,domain=~ww6.generali.pt
 ://ww7.$document,domain=~ww7.be|~ww7.readsnk.com
 ://ww8.$document,domain=~ww8.co|~ww8.ikea.com|~ww8.tiki.ne.jp|~ww8.erovoice.us|~ww8.anyanime.com|~ww8.bakushpal.az|~ww8.tokyoghoulre.com
-://ww9.$document,domain=~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br
+://ww9.$document,domain=~ww9.ikea.com|~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br
 ://ww10.$document
 ://ww11.$document
 ://ww12.$document
@@ -6945,12 +6977,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne)
 ! ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net

-! ——— Offline-only apps trying to phone home ———
-!#if adguard
-! https://fosspost.org/audacity-is-now-a-spyware/
-*$app=audacity.exe|audacity.app
-!#endif
-
 ! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 ! https://myip.ms/info/limitexcess
 *#?#.post-list > .post-content:has-text(/Best girls webcam/i)
@@ -6959,8 +6985,10 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|
 *#?#script[src*=disquscdn] + #layout .post-content:has-text(We offer unlimited)
 *#?#script[src*=disquscdn] + #layout .post-content:has-text(.com specialize)

+!#if !ext_ublock
 ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$document
+!#endif

 ! ——— Anti-PUP (WIP) ———
 ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
-! Version: 27November2021v3-Beta
+! Version: 01December2021v3-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,13 +13,13 @@
 ! Gabon
 ||ga^$denyallow=google.ga|filtri-dns.ga|dgdi.ga|voitures.ga|economie-gabon.ga
 ! Mali
-||ml^$denyallow=google.ml|mobili.ml|melody.ml|dcod.ml|info-matin.ml|amap.ml|mastodon.ml|worproject.ml|nothingprivate.ml|lingva.ml|lemmy.ml
+||ml^$denyallow=google.ml|mobili.ml|melody.ml|dcod.ml|info-matin.ml|amap.ml|mastodon.ml|worproject.ml|nothingprivate.ml|lingva.ml|lemmy.ml|bittor.ml|noic.ml
 ! Equatorial Guinea
 ||gq^$denyallow=deimos.gq|inege.gq|tvgelive.gq|comprarcarros.gq
 ! Central African Republic
 ||cf^$denyallow=google.cf|rths.cf|voitures.cf|assembleenationale-rca.cf|cps-rca.cf|acap.cf|miraculousladybug.cf|scrat.cf
 ! Palau
-||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|zikrap.pw
+||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|zikrap.pw|demonoid.pw
 ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 ||loan^
 ||agency^
@@ -63,7 +63,7 @@
 ||ssl.bblck.me^
 ||allblock.net^

-! Malicious domains found in videogame manuals and title screens
+! Malicious or purchaseable domains found in videogame manuals and title screens
 ||acclaimsports.com^
 ||acclaimmaxsports.com^
 ||hip-games.com^
@@ -381,7 +381,6 @@
 ||new-message.today^
 ||new-notification.live^
 ||new-notifications.live^
-||notified-today.com^
 ||notified-today.live^
 ||notified-today.xyz^
 ||stay-notified.com^
@@ -846,13 +845,12 @@
 212.192.241.72
 37.0.10.83
 ||newstepsco.com^
-||duckdns.org^$denyallow=www.duckdns.org
+||duckdns.org^$denyallow=www.duckdns.org|checkip.dyndns.com
@@://duckdns.org^
 ||chse-security-notifications.email^
 ||secure-0*.ddnss.ch^
 ||lucdream.com^
 ||beastbuying.com^
-||kokotrokot.com^
 ||07ca17vejqqej990.inteo.xyz^
 ||pesoaniz.com^
 ||plarium.com^
@@ -1088,7 +1086,6 @@
 ||army-glo.scrollingsystem.com^
 ||www.kqzyfj.com^
 ||kqzyfj.com^
-||cj.dotomi.com^
 ||mcafee12.tt.omtrdc.net^
 ||trolleydrop.info^
 ||jaynordan.digital^
@@ -1258,14 +1255,10 @@
 159.148.186.228
 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains
 ||yotube.com^
-||mybetterdl.com^
-||p185689.mybetterdl.com^
 ||r-tb.com^
 ||cdn.hoood.info^
-||data-px.services^
 ||barah-flo.com^
 ||beta-one.net^
-||beastbuying.com^
 ||pisism.com^
 ||czyzd.xyz^
 ||r1it6.xyz^
@@ -1275,7 +1268,6 @@
 ||m6ydd.xyz^
 ||welcomejohncena.pro^
 ||security-scanner.xyz^
-||pushmeup.art^
 ||c2egp.xyz^
 ||ese40.xyz^
 ||e07wm.xyz^
@@ -1467,6 +1459,46 @@
 115.204.119.237
 163.125.31.46
 163.179.168.44
+! https://github.com/uBlockOrigin/uAssets/pull/10647
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
+||updsec.builtfromzero.com^
+||money-mod.com^$document
+||gospelchor.info^$document
+
+||new.bestlifeoffer20.com^$document
+||reykijnoac.com^$document
+||totalnicefeed.com^
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
+||riteupd.mimanduca.co^
+||oaesso.info^$document
+
+||bestlifeoffer20.com^$document
+! https://scammer.info/t/password-stealer/84348
+! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
+
+
+
+
+! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
+110.89.59.135
+113.116.89.1
+119.183.146.191
+153.3.3.226
+182.116.104.6
+60.7.133.200
+122.6.254.201
+110.89.11.167
+171.112.177.90
+115.194.38.143
+61.52.79.32
+! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
+||ups-dk.u1537460.cp.regruhosting.ru^
+! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
+||lowseelan.com^
+! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
+
+! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
+

 ! ——— Standard malware that I stumbled upon on my own ———
 ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6387,10 +6419,10 @@
 ||discord-spooky.ru^
 ||discord.foundation^
 ||discordgift.ru^
-||discordnitro-steam.ru^
+||discordnitro-steam.
 ||discordnitro.space^
-||discordxgift.xyz^
-||discordxnitro.xyz^
+||discordxgift.
+||discordxnitro.
 ||discorgift.online^
 ||discrocl.xyz^
 ||discrod.gifts^
@@ -6419,7 +6451,7 @@
 ||free-dislcordnitrlos.ru^
 ||free-niltross.ru^
 ||free-nitlross.ru^
-||freediscordnitro.ru^
+||freediscordnitro.
 ||freeskinsfree.pp.ua^
 ||from-plames.xyz^
 ||from-sparsei.ru.com^
@@ -6701,12 +6733,12 @@
 ||githubnt.com^

 ! ——— Usually used by various groups who buy old domains and display illicit ads on them ———
-://ww4.
-://ww5.$denyallow=ww5.msu.ac.zw
+://ww4.$denyallow=ww4.ikea.com
+://ww5.$denyallow=ww5.ikea.com|ww5.msu.ac.zw
 ://ww6.$denyallow=ww6.generali.pt
 ://ww7.$denyallow=ww7.be|ww7.readsnk.com
 ://ww8.$denyallow=ww8.co|ww8.ikea.com|ww8.tiki.ne.jp|ww8.erovoice.us|ww8.anyanime.com|ww8.bakushpal.az|ww8.tokyoghoulre.com
-://ww9.$denyallow=ww9.tiki.ne.jp|ww9.sakura.ne.jp|ww9.generali.pt|ww9.itau.com.br
+://ww9.$denyallow=ww9.ikea.com|ww9.tiki.ne.jp|ww9.sakura.ne.jp|ww9.generali.pt|ww9.itau.com.br
 ://ww10.
 ://ww11.
 ://ww12.
@@ -6759,18 +6791,15 @@
 ! ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———


-! ——— Offline-only apps trying to phone home ———
-
-! https://fosspost.org/audacity-is-now-a-spyware/
-
-
 ! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 ! https://myip.ms/info/limitexcess
 ! https://myip.ms/info/memberarea/My_Account.html

+
 ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^

+
 ! ——— Anti-PUP (WIP) ———
 ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 ||webadvisorc.rest.gti.mcafee.com^
@@ -1,5 +1,5 @@
 # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
-# Version: 27November2021v3-Beta
+# Version: 01December2021v3-Beta
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.

@@ -59,7 +59,7 @@ juvander.net
 ssl.bblck.me
 allblock.net

-# Malicious domains found in videogame manuals and title screens
+# Malicious or purchaseable domains found in videogame manuals and title screens
 acclaimsports.com
 acclaimmaxsports.com
 hip-games.com
@@ -339,7 +339,6 @@ new-message.email
 new-message.today
 new-notification.live
 new-notifications.live
-notified-today.com
 notified-today.live
 notified-today.xyz
 stay-notified.com
@@ -770,7 +769,6 @@ newstepsco.com
 chse-security-notifications.email
 lucdream.com
 beastbuying.com
-kokotrokot.com
 07ca17vejqqej990.inteo.xyz
 pesoaniz.com
 plarium.com
@@ -951,7 +949,6 @@ aquariuminn.com
 army-glo.scrollingsystem.com
 www.kqzyfj.com
 kqzyfj.com
-cj.dotomi.com
 mcafee12.tt.omtrdc.net
 trolleydrop.info
 jaynordan.digital
@@ -1088,14 +1085,10 @@ cloud-apps.store
 citationsherbe.at
 159.148.186.228
 yotube.com
-mybetterdl.com
-p185689.mybetterdl.com
 r-tb.com
 cdn.hoood.info
-data-px.services
 barah-flo.com
 beta-one.net
-beastbuying.com
 pisism.com
 czyzd.xyz
 r1it6.xyz
@@ -1105,7 +1098,6 @@ nkb18.xyz
 m6ydd.xyz
 welcomejohncena.pro
 security-scanner.xyz
-pushmeup.art
 c2egp.xyz
 ese40.xyz
 e07wm.xyz
@@ -1266,6 +1258,36 @@ shadyclient.net
 115.204.119.237
 163.125.31.46
 163.179.168.44
+updsec.builtfromzero.com
+money-mod.com
+gospelchor.info
+smwgwa.brownbrothersilver.top
+new.bestlifeoffer20.com
+reykijnoac.com
+totalnicefeed.com
+riteupd.mimanduca.co
+oaesso.info
+abcwkv.naturaloffsteam.top
+bestlifeoffer20.com
+
+
+
+
+110.89.59.135
+113.116.89.1
+119.183.146.191
+153.3.3.226
+182.116.104.6
+60.7.133.200
+122.6.254.201
+110.89.11.167
+171.112.177.90
+115.194.38.143
+61.52.79.32
+ups-dk.u1537460.cp.regruhosting.ru
+lowseelan.com
+
+

 # ——— Standard malware that I stumbled upon on my own ———
 downloadprovider.me
@@ -6176,10 +6198,10 @@ discord-app.net
 discord-spooky.ru
 discord.foundation
 discordgift.ru
-discordnitro-steam.ru
+
 discordnitro.space
-discordxgift.xyz
-discordxnitro.xyz
+
+
 discorgift.online
 discrocl.xyz
 discrod.gifts
@@ -6207,7 +6229,7 @@ fozzytournaments.fun
 free-dislcordnitrlos.ru
 free-niltross.ru
 free-nitlross.ru
-freediscordnitro.ru
+
 freeskinsfree.pp.ua
 from-plames.xyz
 from-sparsei.ru.com
@@ -6544,15 +6566,13 @@ githubnt.com
 # ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———


-# ——— Offline-only apps trying to phone home ———
-
-
-
 # ——— Anti-'Malware comments' (Currently Disqus-specific) ———

+
 # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data

+
 # ——— Anti-PUP (WIP) ———
 # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 webadvisorc.rest.gti.mcafee.com
@@ -1,5 +1,5 @@
 # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
-# Version: 27November2021v3-Alpha
+# Version: 01December2021v3-Alpha
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.

@@ -59,7 +59,7 @@
 127.0.0.1 ssl.bblck.me
 127.0.0.1 allblock.net

-# Malicious domains found in videogame manuals and title screens
+# Malicious or purchaseable domains found in videogame manuals and title screens
 127.0.0.1 acclaimsports.com
 127.0.0.1 acclaimmaxsports.com
 127.0.0.1 hip-games.com
@@ -339,7 +339,6 @@
 127.0.0.1 new-message.today
 127.0.0.1 new-notification.live
 127.0.0.1 new-notifications.live
-127.0.0.1 notified-today.com
 127.0.0.1 notified-today.live
 127.0.0.1 notified-today.xyz
 127.0.0.1 stay-notified.com
@@ -770,7 +769,6 @@
 127.0.0.1 chse-security-notifications.email
 127.0.0.1 lucdream.com
 127.0.0.1 beastbuying.com
-127.0.0.1 kokotrokot.com
 127.0.0.1 07ca17vejqqej990.inteo.xyz
 127.0.0.1 pesoaniz.com
 127.0.0.1 plarium.com
@@ -951,7 +949,6 @@
 127.0.0.1 army-glo.scrollingsystem.com
 127.0.0.1 www.kqzyfj.com
 127.0.0.1 kqzyfj.com
-127.0.0.1 cj.dotomi.com
 127.0.0.1 mcafee12.tt.omtrdc.net
 127.0.0.1 trolleydrop.info
 127.0.0.1 jaynordan.digital
@@ -1088,14 +1085,10 @@
 127.0.0.1 citationsherbe.at
 127.0.0.1 159.148.186.228
 127.0.0.1 yotube.com
-127.0.0.1 mybetterdl.com
-127.0.0.1 p185689.mybetterdl.com
 127.0.0.1 r-tb.com
 127.0.0.1 cdn.hoood.info
-127.0.0.1 data-px.services
 127.0.0.1 barah-flo.com
 127.0.0.1 beta-one.net
-127.0.0.1 beastbuying.com
 127.0.0.1 pisism.com
 127.0.0.1 czyzd.xyz
 127.0.0.1 r1it6.xyz
@@ -1105,7 +1098,6 @@
 127.0.0.1 m6ydd.xyz
 127.0.0.1 welcomejohncena.pro
 127.0.0.1 security-scanner.xyz
-127.0.0.1 pushmeup.art
 127.0.0.1 c2egp.xyz
 127.0.0.1 ese40.xyz
 127.0.0.1 e07wm.xyz
@@ -1266,6 +1258,36 @@
 127.0.0.1 115.204.119.237
 127.0.0.1 163.125.31.46
 127.0.0.1 163.179.168.44
+127.0.0.1 updsec.builtfromzero.com
+127.0.0.1 money-mod.com
+127.0.0.1 gospelchor.info
+127.0.0.1 smwgwa.brownbrothersilver.top
+127.0.0.1 new.bestlifeoffer20.com
+127.0.0.1 reykijnoac.com
+127.0.0.1 totalnicefeed.com
+127.0.0.1 riteupd.mimanduca.co
+127.0.0.1 oaesso.info
+127.0.0.1 abcwkv.naturaloffsteam.top
+127.0.0.1 bestlifeoffer20.com
+
+
+
+
+127.0.0.1 110.89.59.135
+127.0.0.1 113.116.89.1
+127.0.0.1 119.183.146.191
+127.0.0.1 153.3.3.226
+127.0.0.1 182.116.104.6
+127.0.0.1 60.7.133.200
+127.0.0.1 122.6.254.201
+127.0.0.1 110.89.11.167
+127.0.0.1 171.112.177.90
+127.0.0.1 115.194.38.143
+127.0.0.1 61.52.79.32
+127.0.0.1 ups-dk.u1537460.cp.regruhosting.ru
+127.0.0.1 lowseelan.com
+
+

 # ——— Standard malware that I stumbled upon on my own ———
 127.0.0.1 downloadprovider.me
@@ -6176,10 +6198,10 @@
 127.0.0.1 discord-spooky.ru
 127.0.0.1 discord.foundation
 127.0.0.1 discordgift.ru
-127.0.0.1 discordnitro-steam.ru
+
 127.0.0.1 discordnitro.space
-127.0.0.1 discordxgift.xyz
-127.0.0.1 discordxnitro.xyz
+
+
 127.0.0.1 discorgift.online
 127.0.0.1 discrocl.xyz
 127.0.0.1 discrod.gifts
@@ -6207,7 +6229,7 @@
 127.0.0.1 free-dislcordnitrlos.ru
 127.0.0.1 free-niltross.ru
 127.0.0.1 free-nitlross.ru
-127.0.0.1 freediscordnitro.ru
+
 127.0.0.1 freeskinsfree.pp.ua
 127.0.0.1 from-plames.xyz
 127.0.0.1 from-sparsei.ru.com
@@ -6544,15 +6566,13 @@
 # ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———


-# ——— Offline-only apps trying to phone home ———
-
-
-
 # ——— Anti-'Malware comments' (Currently Disqus-specific) ———

+
 # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 127.0.0.1 if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data

+
 # ——— Anti-PUP (WIP) ———
 # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 127.0.0.1 webadvisorc.rest.gti.mcafee.com
@@ -1,6 +1,6 @@
 {+block}
 # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
-# Version: 27November2021v3-Alpha
+# Version: 01December2021v3-Alpha
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.

@@ -67,7 +67,7 @@



-# Malicious domains found in videogame manuals and title screens
+# Malicious or purchaseable domains found in videogame manuals and title screens



@@ -373,7 +373,6 @@



-


 /bitcoinrevolution/lp.php
@@ -877,7 +876,6 @@



-


 # Relations to the original domain
@@ -1038,7 +1036,6 @@



-


 # Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin
@@ -1123,11 +1120,6 @@



-
-
-
-
-



@@ -1265,6 +1257,36 @@



+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+



@@ -6531,18 +6553,14 @@
 # ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———


-{+block}
-# ——— Offline-only apps trying to phone home ———
-#
-#
-#
-
 {+block}
 # ——— Anti-'Malware comments' (Currently Disqus-specific) ———

+#
 {+block}
 # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———

+#

 {+block}
 # ——— Anti-PUP (WIP) ———
@@ -1,6 +1,6 @@
 msFilterList
 # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
-# Version: 27November2021v3-Beta
+# Version: 01December2021v3-Beta
 : expires = 5
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -47,7 +47,9 @@ msFilterList
 +d mastodon.ml
 +d worproject.ml
 +d nothingprivate.ml
-+d lingva.ml~lemmy.ml
+d lingva.ml
+d lemmy.ml
+d bittor.ml~noic.ml
 # Equatorial Guinea
 -d gq
 +d deimos.gq
@@ -67,7 +69,8 @@ msFilterList
 +d libgen.pw
 +d petridish.pw
 +d palaugov.pw
-+d dpc.pw~zikrap.pw
+d dpc.pw
+d zikrap.pw~demonoid.pw
 # International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.


@@ -112,7 +115,7 @@ msFilterList
 -d ssl.bblck.me
 -d allblock.net
 -d microsoftedge.microsoft.com addons detail allblock nkllnmjaaifdphkfbmedklkimjmnjeen
-# Malicious domains found in videogame manuals and title screens
+# Malicious or purchaseable domains found in videogame manuals and title screens
 -d acclaimsports.com
 -d acclaimmaxsports.com
 -d hip-games.com
@@ -430,7 +433,6 @@ msFilterList
 -d new-message.today
 -d new-notification.live
 -d new-notifications.live
-d notified-today.com
 -d notified-today.live
 -d notified-today.xyz
 -d stay-notified.com
@@ -899,7 +901,6 @@ msFilterList

 -d lucdream.com
 -d beastbuying.com
-d kokotrokot.com
 -d 07ca17vejqqej990.inteo.xyz
 -d pesoaniz.com
 -d plarium.com
@@ -1135,7 +1136,6 @@ msFilterList
 -d army-glo.scrollingsystem.com
 -d www.kqzyfj.com
 -d kqzyfj.com
-d cj.dotomi.com
 -d mcafee12.tt.omtrdc.net
 -d trolleydrop.info
 -d jaynordan.digital
@@ -1303,14 +1303,10 @@ msFilterList
 -d 159.148.186.228
 # https://github.com/iam-py-test/investigations/blob/main/2021/10 26 1.md#domains
 -d yotube.com
-d mybetterdl.com
-d p185689.mybetterdl.com
 -d r-tb.com
 -d cdn.hoood.info
-d data-px.services
 -d barah-flo.com
 -d beta-one.net
-d beastbuying.com
 -d pisism.com
 -d czyzd.xyz
 -d r1it6.xyz
@@ -1320,7 +1316,6 @@ msFilterList
 -d m6ydd.xyz
 -d welcomejohncena.pro
 -d security-scanner.xyz
-d pushmeup.art
 -d c2egp.xyz
 -d ese40.xyz
 -d e07wm.xyz
@@ -1512,6 +1507,46 @@ msFilterList
 -d 115.204.119.237
 -d 163.125.31.46
 -d 163.179.168.44
+# https://github.com/uBlockOrigin/uAssets/pull/10647
+# https://github.com/iam-py-test/investigations/blob/main/2021/11 28 1.md
+-d updsec.builtfromzero.com
+-d money-mod.com
+-d gospelchor.info
+-d smwgwa.brownbrothersilver.top
+-d new.bestlifeoffer20.com
+-d reykijnoac.com
+-d totalnicefeed.com
+# https://github.com/iam-py-test/investigations/blob/main/2021/11 28 2.md
+-d riteupd.mimanduca.co
+-d oaesso.info
+-d abcwkv.naturaloffsteam.top
+-d bestlifeoffer20.com
+# https://scammer.info/t/password-stealer/84348
+# https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
+-d youtube.com watch?v=8nY7SnvNxH4
+-d bit.ly 3p8kN5V
+-d mediafire.com file at2tvnao5x6ivdo EngineOwning.rar 
+-d download2264.mediafire.com pnk44f5ci9rg at2tvnao5x6ivdo EngineOwning.rar
+# https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
+-d 110.89.59.135
+-d 113.116.89.1
+-d 119.183.146.191
+-d 153.3.3.226
+-d 182.116.104.6
+-d 60.7.133.200
+-d 122.6.254.201
+-d 110.89.11.167
+-d 171.112.177.90
+-d 115.194.38.143
+-d 61.52.79.32
+# https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
+-d ups-dk.u1537460.cp.regruhosting.ru
+# https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
+-d lowseelan.com
+# https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
+-d dl02.s3.amazonaws.com installers 747947 oi_picasa38-setupexe.exe
+# https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
+-d dl02.s3.amazonaws.com installers 424531 2gzbsoj4gxb.exe

 # ——— Standard malware that I stumbled upon on my own ———
 # http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6431,10 +6466,10 @@ msFilterList
 -d discord-spooky.ru
 -d discord.foundation
 -d discordgift.ru
-d discordnitro-steam.ru
+-d discordnitro-steam.
 -d discordnitro.space
-d discordxgift.xyz
-d discordxnitro.xyz
+-d discordxgift.
+-d discordxnitro.
 -d discorgift.online
 -d discrocl.xyz
 -d discrod.gifts
@@ -6463,7 +6498,7 @@ msFilterList
 -d free-dislcordnitrlos.ru
 -d free-niltross.ru
 -d free-nitlross.ru
-d freediscordnitro.ru
+-d freediscordnitro.
 -d freeskinsfree.pp.ua
 -d from-plames.xyz
 -d from-sparsei.ru.com
@@ -6757,19 +6792,15 @@ msFilterList
 # ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———


-# ——— Offline-only apps trying to phone home ———
-
-# https://fosspost.org/audacity-is-now-a-spyware/
-
-
-
 # ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 # https://myip.ms/info/limitexcess
 # https://myip.ms/info/memberarea/My_Account.html

+
 # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 -d if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data

+
 # ——— Anti-PUP (WIP) ———
 # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 -d webadvisorc.rest.gti.mcafee.com
@@ -1,5 +1,5 @@
 # Title: Dandelion Sprout's and other adblocker lists' IPs
-# Version: 25November2021v1-Beta
+# Version: 01December2021v1-Beta
 # Expires: 5 days
 # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish.
 # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
@@ -184,6 +184,25 @@
 115.56.169.134
 194.87.138.20
 103.167.92.73
+58.249.74.79
+27.45.14.109
+27.40.101.191
+27.45.119.22
+27.47.73.159
+115.204.119.237
+163.125.31.46
+163.179.168.44
+110.89.59.135
+113.116.89.1
+119.183.146.191
+153.3.3.226
+182.116.104.6
+60.7.133.200
+122.6.254.201
+110.89.11.167
+171.112.177.90
+115.194.38.143
+61.52.79.32
 192.243.59.12
 192.243.59.13
 192.243.59.20
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List
-! Version: 30November2021v3-Beta
+! Version: 01December2021v4-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,13 +13,13 @@
 ! Gabon
 ||ga^$doc,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga
 ! Mali
-||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml
+||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml
 ! Equatorial Guinea
 ||gq^$doc,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
 ! Central African Republic
 ||cf^$doc,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf
 ! Palau
-||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw
+||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw
 ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 ||loan^$doc
 ||agency^$doc
@@ -112,7 +112,7 @@ bing.com##.b_algo:has(a[href*=".top/"]:not([href*="corriente.top"], [href*="gdto
 ||ssl.bblck.me^$doc
 ||allblock.net^$doc
 ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^$doc
-! Malicious domains found in videogame manuals and title screens
+! Malicious or purchaseable domains found in videogame manuals and title screens
 ||acclaimsports.com^$doc
 ||acclaimmaxsports.com^$doc
 ||hip-games.com^$doc
@@ -271,7 +271,6 @@ azdll.net##.dllhelper-banner
 /^https?:\/\/[-0-9a-z]*prize[-0-9a-z]+\.li[fv]e\/\?u=[0-9a-z]+&o=[0-9a-z]+/$popup,domain=www.google.*
 ! https://github.com/AdguardTeam/AdguardFilters/issues/58737
 /^https?://(www\.)?[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/$doc,domain=fun
-/^https://www\.namejp0[1-9]\.xyz/$doc,popup,domain=xyz
 ! https://github.com/AdguardTeam/AdguardFilters/issues/78614
 /^https?:\/\/\d{6}\.xyz\/lucky\/[-a-z]+\/\?t=/$doc,popup,domain=xyz
 /^https?:\/\/[a-z]{6}\.vip\/lucky\/[-a-z]+\/\?t=/$doc,popup,domain=vip
@@ -555,7 +554,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||new-message.today^$doc
 ||new-notification.live^$doc
 ||new-notifications.live^$doc
-||notified-today.com^$doc
 ||notified-today.live^$doc
 ||notified-today.xyz^$doc
 ||stay-notified.com^$doc
@@ -1020,13 +1018,12 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||212.192.241.72^$all
 ||37.0.10.83^$all
 ||newstepsco.com^$all
-||duckdns.org^$doc,domain=~www.duckdns.org
+||duckdns.org^$doc,domain=~www.duckdns.org|~checkip.dyndns.com
@@://duckdns.org^$doc
 ||chse-security-notifications.email^$all
 ||secure-0*.ddnss.ch^$all
 ||lucdream.com^$doc
 ||beastbuying.com^$doc
-||kokotrokot.com^$doc
 ||07ca17vejqqej990.inteo.xyz^$doc
 ||pesoaniz.com^$doc
 ||plarium.com^$doc
@@ -1042,7 +1039,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||pro-protection.xyz^$all
 ||secureleadsforever.com^$all
 ||renewal-software-update.com^$all
-||pushmeup.art^$doc
+||pushmeup.art^$all
 ||covercenter.xyz^$all
 ||gettrk.xyz^$all
 ||trc.*.co^$doc
@@ -1235,7 +1232,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||safelyonline.net^$doc
 ||browse-safe.net^$doc
 ||btpnative.com^$doc
-||mybetterdl.com^$doc
+||mybetterdl.com^$all
 ||besty-deals.com^$all
 ||data-px.services^$doc
 ||newsvot.com^$doc
@@ -1262,7 +1259,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||army-glo.scrollingsystem.com^$doc
 ||www.kqzyfj.com^$all
 ||kqzyfj.com^$doc
-||cj.dotomi.com^$all
 ||mcafee12.tt.omtrdc.net^$doc
 ||trolleydrop.info^$doc
 ||jaynordan.digital^$doc
@@ -1432,14 +1428,10 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||159.148.186.228^$all
 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains
 ||yotube.com^$all
-||mybetterdl.com^$all
-||p185689.mybetterdl.com^$all
 ||r-tb.com^$all
 ||cdn.hoood.info^$all
-||data-px.services^$all
 ||barah-flo.com^$all
 ||beta-one.net^$all
-||beastbuying.com^$all
 ||pisism.com^$all
 ||czyzd.xyz^$all
 ||r1it6.xyz^$all
@@ -1449,7 +1441,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||m6ydd.xyz^$all
 ||welcomejohncena.pro^$all
 ||security-scanner.xyz^$all
-||pushmeup.art^$all
 ||c2egp.xyz^$all
 ||ese40.xyz^$all
 ||e07wm.xyz^$all
@@ -1650,7 +1641,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||new.bestlifeoffer20.com^$document
 ||reykijnoac.com^$document
 ||totalnicefeed.com^$all
-||omnatuor.com^$all
 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
 ||riteupd.mimanduca.co^$all
 ||oaesso.info^$document
@@ -6622,10 +6612,10 @@ toorgle.net##.join
 ||discord-spooky.ru^$all
 ||discord.foundation^$all
 ||discordgift.ru^$all
-||discordnitro-steam.ru^$all
+||discordnitro-steam.$all
 ||discordnitro.space^$all
-||discordxgift.xyz^$all
-||discordxnitro.xyz^$all
+||discordxgift.$all
+||discordxnitro.$all
 ||discorgift.online^$all
 ||discrocl.xyz^$all
 ||discrod.gifts^$all
@@ -6654,7 +6644,7 @@ toorgle.net##.join
 ||free-dislcordnitrlos.ru^$all
 ||free-niltross.ru^$all
 ||free-nitlross.ru^$all
-||freediscordnitro.ru^$all
+||freediscordnitro.$all
 ||freeskinsfree.pp.ua^$all
 ||from-plames.xyz^$all
 ||from-sparsei.ru.com^$all
@@ -7004,12 +6994,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne)
 ! ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net

-! ——— Offline-only apps trying to phone home ———
-!#if adguard
-! https://fosspost.org/audacity-is-now-a-spyware/
-*$app=audacity.exe|audacity.app
-!#endif
-
 ! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 ! https://myip.ms/info/limitexcess
 *#?#.post-list > .post-content:has-text(/Best girls webcam/i)
@@ -7018,8 +7002,10 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|
 *#?#script[src*=disquscdn] + #layout .post-content:has-text(We offer unlimited)
 *#?#script[src*=disquscdn] + #layout .post-content:has-text(.com specialize)

+!#if !ext_ublock
 ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$doc
+!#endif

 ! ——— Anti-PUP (WIP) ———
 ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
@@ -1,5 +1,5 @@
 ! Title: ➗ Actually Legitimate URL Shortener Tool
-! Version: 29November2021v2-Beta
+! Version: 1December2021v1-Beta
 ! Expires: 2 days
 ! Description: In a world dominated by bit.ly, adf.ly, and several thousand other malware cover-up tools, this list reduces the length of URLs in a much more legitimate and transparent manner. Essentially, it automatically removes unnecessary $/& values from the URLs, making them easier to copy from the URL bar and pasting elsewhere as links. Enjoy.
 ! Homepage: https://github.com/DandelionSprout/adfilt/discussions/163
@@ -1187,7 +1187,7 @@ $removeparam=tid,domain=comixology.*|gap.com|gapcanada.ca|mintmobile.com|zulily.
 ! https://twitter.com/hashtag/mlpg5?src=hashtag_click (23/04/2021)
 $removeparam=src,domain=thunderbird.net|twitter.com|udemy.com|elastix.org|bluejeans.com|melopero.com|kubii.*|reichelt.*|okdo.com|raspipc.es|tiendatec.es|thepihut.com|cytron.io|buyzero.de|welectron.com|digikey.*|adafruit.com|hinta.fi|3cx.com|ashford.com|bose.*|kennethcole.com|kipling-usa.com|newbalance.com|wondershare.*|investors.com|yahoo.com|engadget.com|mozilla.org|viking-direct.co.uk
 ! No particular example
-$removeparam=source,domain=googleusercontent.com|awd-it.*|ashford.com|asos.com|att.com|barenecessities.com|bedbathandbeyond.com|betterprogramming.pub|boscovs.com|boxboat.com|brownells.*|burkesoutlet.com|choicehotels.com|contabo.com|directv.com|drinkhint.com|edx.org|hammacher.com|hanes.com|hottopic.com|housing.com|hp.com|itnext.io|medium.com|nautica.com|onehanesplace.com|petsupplies.com|phonesoap.com|riteaid.com|sonos.com|squarespace.com|thedailybeast.com|tiktok.com|tommybahama.com|torrid.com|tous.com|webhint.io|wilsonsleather.com|wired.com|ylighting.com|jacquielawson.com|fool.com|fiverr.com|blavity.com|eonline.com|tokopedia.com|community.spiceworks.com|despegar.*|hotspotshield.com|gethotspotshield.com|subscribe.gq.com|bankofamerica.com
+$removeparam=source,domain=googleusercontent.com|awd-it.*|ashford.com|asos.com|att.com|barenecessities.com|bedbathandbeyond.com|betterprogramming.pub|boscovs.com|boxboat.com|brownells.*|burkesoutlet.com|choicehotels.com|contabo.com|directv.com|drinkhint.com|edx.org|hammacher.com|hanes.com|hottopic.com|housing.com|hp.com|itnext.io|medium.com|nautica.com|onehanesplace.com|petsupplies.com|phonesoap.com|riteaid.com|sonos.com|squarespace.com|thedailybeast.com|tiktok.com|tommybahama.com|torrid.com|tous.com|webhint.io|wilsonsleather.com|wired.com|ylighting.com|jacquielawson.com|fool.com|fiverr.com|blavity.com|eonline.com|tokopedia.com|community.spiceworks.com|despegar.*|hotspotshield.com|gethotspotshield.com|subscribe.gq.com|bankofamerica.com|outnorth.fi
 ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-525100
 ! https://github.com/DandelionSprout/adfilt/pull/277
 $removeparam=mod,domain=wsj.com|marketwatch.com|barrons.com|fnlondon.com|dowjones.com|mansionglobal.com|penews.com
@@ -1734,12 +1734,15 @@ $removeparam=nettype
 $removeparam=report_recomm_player
 ! https://github.com/DandelionSprout/adfilt/pull/386
 ||mail.qq.com/cgi-bin/frame_html?$removeparam=r
+! https://github.com/DandelionSprout/adfilt/pull/394
+! https://m.v.qq.com/x/m/play?cid=mzc00200prv7r23&vid=&ptag=cn.bing.com%23v.index.adaptor%232
+||qq.com^$removeparam=ptag

 !! ——— Miscellaneous ———
 ! No particular examples
 $removeparam=app,domain=tiktok.com|music.apple.*
 $removeparam=c,domain=tiktok.com|norton.com|farfetch.com|hepsiburada.com|appsflyer.com|onelink.me|play.google.com
-$removeparam=campaign,domain=blue-tomato.com|sitepoint.com|sportler.com|peterhahn.*
+$removeparam=campaign,domain=blue-tomato.com|sitepoint.com|sportler.com|peterhahn.*|outnorth.fi
 $removeparam=/^pf_rd_/,domain=shopbop.com|amazon.*|imdb.com
 $removeparam=Source,domain=facebook.com|facebookcorewwwi.onion|messenger.com|evga.com
 $removeparam=version,domain=mp.weixin.qq.com|us.norton.com
@@ -1914,7 +1917,7 @@ $removeparam=tag,domain=amazon.*|argos.co.uk|tv2.no
 ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-750434
 ||xbox.com^$removeparam=xr
 ||deepdiscount.com^$removeparam=bid
-$removeparam=medium,domain=deepdiscount.com|eonline.com
+$removeparam=medium,domain=deepdiscount.com|eonline.com|outnorth.fi

 ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-750307
 $removeparam=rid,domain=giphy.com
@@ -1944,7 +1947,6 @@ $removeparam=rid,domain=giphy.com
 ||microsoft.com^$removeparam=/^AAAA/
 ||babbel.com^$removeparam=bsc
 ||babbel.com^$removeparam=btp
-||microsoft.com^$removeparam=ru
 ||microsoft.com^$removeparam=destrt

 ! http://www.discshop.fi/?id=116426&ad=hintaseuranta&ad_src=hintaseuranta.fi&ad_content=Nintendo+Switch+Pro+Controller%2c+Nintendo+Switch+-peliohjain&ad_prodid=5179300
@@ -2614,6 +2616,10 @@ $removeparam=mv_pc,domain=fragrancenet.com
 ! https://www.walmart.com/ip/Old-El-Paso-Stand-N-Stuff-Bold-Nacho-Cheese-Flavored-Taco-Dinner-Kit-9-5-oz/38260506?athcpid=38260506&athpgid=AthenaItempage&athcgid=null&athznid=siext&athieid=v0&athstid=CS056&athguid=egnNrMG_5XOxTB0tFsuPZlPSj01v5EdpAUIb&athancid=null&athena=true
 ||walmart.$removeparam=/^ath/

+! https://www.outnorth.fi/timberland/women-s-premium-6-waterproof-boot?source=hintaopas.fi&medium=productlinks&campaign=varmfodrade+k%C3%A4ngor&term=Women%27s+Premium+6&quot;+Waterproof+Boot#Black
+$removeparam=term,domain=outnorth.fi
+$removeparam=/^quot;/,domain=outnorth.fi
+
 !#if !env_mobile
 ! ——— Mobile ——— !
 ! ——— Entries mostly dedicated to maximising image sizes (thus poorly suited for phones) ———
@@ -35,6 +35,10 @@ intrafish.no##.preview-gradient
 lydogbilde.no,lydogbillede.dk##.lbplussinfo
 ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image
 information.dk###paywall:style(margin-top: 0px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important)
 ! dagbladet.no,elbil24.no
 ##.CTA-body-faded
 ! digi.no, tu.no, medier24.no, porten.no
@@ -49,7 +53,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 dagensbyggeri.dk##+js(std, (), 2500)
 eurosport.*##+js(aeld, contextmenu)
 techstart.dk##+js(set, adblock, false)
@@ -952,7 +952,7 @@ msFilterList
 # 🇳🇴 🇩🇰: ——— Anti-anti-reklameblokkering ———
 # 🇮🇸: ——— And-and-auglýsingshindrun ———
 # 🇬🇧: ——— Anti-anti-adblocking ———
-# Last updated: 10November2021v2-Extension
+# Last updated: 01December2021v1-Extension
 -d elderlyscissors.com
 # Also fixed in "uBlock Filters - Privacy", but is added to this list as well, because it serves to remove AAAB notices on various pages (especially when "uBlock Filters" is turned on).
 -d googletagmanager.com gtm.js
@@ -2418,6 +2418,10 @@ intrafish.no##.preview-gradient
 lydogbilde.no,lydogbillede.dk##.lbplussinfo
 ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image
 information.dk###paywall:style(margin-top: 0px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important)
 ! dagbladet.no,elbil24.no
 ##.CTA-body-faded
 ! digi.no, tu.no, medier24.no, porten.no
@@ -2432,7 +2436,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 dagensbyggeri.dk##+js(std, (), 2500)
 eurosport.*##+js(aeld, contextmenu)
 techstart.dk##+js(set, adblock, false)
@@ -192,5 +192,5 @@ in-addr.arpa 193.148.70.153 * allow
 ! Takk til THEtomaso (https://github.com/THEtomaso) for de fleste av disse oppføringene.
 ! Tak til THEtomaso (https://github.com/THEtomaso) for de fleste af disse regler.
 ! Thanks to THEtomaso (https://github.com/THEtomaso) for most of these entries.
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 ! Also fixed in "uBlock Filters - Privacy", but is added to this list as well, because it serves to remove AAAB notices on various pages (especially when "uBlock Filters" is turned on).
@@ -4355,7 +4355,7 @@ whowhatwear.co.uk#@#a[href*="/click.linksynergy"] img
 ! Språknöjtral test för at kolla om ABP-brukarrapporter för YouTube går ner til 0 med den här uppförning / Language-neutral test to see if ABP user reports for YouTube plunge down to 0 with this entry
 ||googlevideo.com/*&ctier=

-! Version: 261120211
+! Version: 301120211
 ! Title: Adblock List for Finland
 ! Description: Finnish adblock list
 ! Expires: 4 days
@@ -4455,7 +4455,9 @@ _mainosnappi.
 ##[href^="https://tc.tradetracker.net/"]
 ##[href^="https://www.nettikasinot.org"]
 ##a[href*="/clickthrgh.asp?"]
+##a[href="https://kasinoseta.com/"]
 ##a[href^="https://app.readpeak.com/ads"]
+##a[href^="https://www.kumiukko.fi/ostos?tt="]
 ##div[class*=element--nativead]
 ##div[class*=newsFrontAd]
 ##div[class="ad container-right"]
@@ -4770,6 +4772,7 @@ kotiliesi.fi##.article-continues
 kotiliesi.fi##.nativecarousel.widget
 kotiliesi.fi##.widget_google-ad-manager
 kotiliesi.fi##body.category .placeholder
+kotiliesi.fi#?#article[class^="grid__item_"]:-abp-has(.template-item_nativead)
 kotimikro.fi##.campaign-teaser-show
 kotimikro.fi##b > [href^="https://tilaus.kotimikro.fi/brand/kotimikro/"]
 kotimikro.fi#?#div.themebox.widget:-abp-has(> div > div > div > div#cx_4217c66c223ecb55cb7b1d49afa884837bfccda9)
@@ -4895,6 +4898,7 @@ mvlehti.net##[href="https://www.halvinlaina.fi/"]
 mvlehti.net##[href^="https://www.kasinot.org/"]
 mvlehti.net##a[href*="tarjousproffa.com"]
 mvlehti.net##a[href="https://kasinot.org"]
+mvlehti.net##a[href="https://loistehammasharja.com/"]
 mvlehti.net##a[href="https://www.kippis.net/"]
 mvlehti.net#?#.aligncenter:has(a[href*="tarjousproffa.com"])
 mvlehti.net#?#.entry-content > h3:-abp-contains(kasino)
@@ -5042,18 +5046,21 @@ tekniikkatalous.fi#?#div#skyscraper-height-div > aside > div > div > a:-abp-cont
 tekniikkatalous.fi#?#div#skyscraper-height-div > section > div > a:-abp-contains(Kaupallinen yhteistyö)
 tekniikkatalous.fi#?#.article-body > div[class]:-abp-has(> span:-abp-contains(KAUPALLINEN YHTEISTYÖ) + a[href^="https://koulutus.almatalent.fi/"])
 tekniikkatalous.fi,tivi.fi#?#[width]:-abp-has(.lazyload-wrapper)
+tekniikkatalous.fi##a[href^="/tyopaikat/kumppanisisalto-tyopaikat/"]
+tekniikkatalous.fi##aside > div[class] > a[href^="https://www.tekniikkatalous.fi/kumppanisisallot"]
+tekniikkatalous.fi##div[class][width="980"]
 telsu.fi###pb_bottom2
 telsu.fi###pb_bottom3
 telsu.fi##.cmore.ch
 tennis.fi##.ad-blocks
-tekniikkatalous.fi##a[href^="/tyopaikat/kumppanisisalto-tyopaikat/"]
-tekniikkatalous.fi##aside > div[class] > a[href^="https://www.tekniikkatalous.fi/kumppanisisallot"]
-tekniikkatalous.fi##div[class][width="980"]
 tervareitti.fi##.advertisement-banner-row
 tervareitti.fi#?#.article-container.shadow-sm.col:-abp-has(img[alt^="Oma tilausmainos"])
 terve.fi##div[class|=ProductRecommendationCarousel__CarouselContainer]
 terve.fi#?#div[class^=PageElementFeedItem__Container]:-abp-contains(Mainos)
 terve.fi#?#div[class^=transitionSlot__component][class*=layout__container]:-abp-contains(KAUPALLINEN YHTEISTYÖ)
+terveydenasialla.com##a[href^="https://on.vallila.fi/"]
+terveydenasialla.com##p a[href^="https://related.iittala.com/"]
+terveydenasialla.com#?#p:-abp-has(strong):-abp-has(a[href="http://www.curaofsweden.com/fi"])
 ticketmaster.fi##div[id^=ad-slot-]
 ticketmaster.fi#?#div:-abp-has(> [id|=ad-slot])
 tiede.fi#?#.views-row:-abp-has(.is-commercial)
@@ -5216,6 +5223,7 @@ yrittajat.fi##div[class$=kaupallinen-yhteistyo]
 ||kinuskikissa.fi/wp-content/uploads/*kumppani_*.gif$image
 ||kiuruvesilehti.fi/wp-content/uploads/*kampanja_banneri.png$image
 ||kotikarjala.fi/eneo?tem=ndap_ilmoitus&$xmlhttprequest,domain=kotikarjala.fi
+||kotiliesi.fi/upotukset/hintaopas/*$domain=tekniikanmaailma.fi
 ||kuvake.net/js/bannerloader.js$script,domain=kuvake.net
 ||laitilansanomat.fi^*/gallery/mainos*/$image,domain=laitilansanomat.fi
 ||lbaanijakuva.fi/test/*?template=prisjakt$domain=lbaanijakuva.fi
@@ -5410,3 +5418,10 @@ iltalehti.fi#@#.ad-placement

 ! https://github.com/easylist/easylist/pull/9343
@@||almamedia.fi/almacmp/$script
+
+! https://github.com/easylist/easylist/pull/9900
+mustijamirri.fi#@##cookie_consent
+mustijamirri.fi#@#.cookie_body
+mustijamirri.fi#@##cookieform
+mustijamirri.fi#@#.cookie_info
+mustijamirri.fi#@#.cookie_check
@@ -2325,7 +2325,7 @@ vg.no##div[data-test-tag=timestamp] + p + div::before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 tv2.no#$#abort-current-inline-script adblockDetector
 ||elderlyscissors.com^
 ||vg.no/cnp-assets/src/sites/vg/components/AdblockModal$script,~third-party
@@ -2417,6 +2417,10 @@ intrafish.no##.preview-gradient
 lydogbilde.no,lydogbillede.dk##.lbplussinfo
 ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image
 information.dk###paywall:style(margin-top: 0px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important)
 ! dagbladet.no,elbil24.no
 ##.CTA-body-faded
 ! digi.no, tu.no, medier24.no, porten.no
@@ -2431,7 +2435,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 dagensbyggeri.dk##+js(std, (), 2500)
 eurosport.*##+js(aeld, contextmenu)
 techstart.dk##+js(set, adblock, false)
@@ -2417,6 +2417,10 @@ intrafish.no##.preview-gradient
 lydogbilde.no,lydogbillede.dk##.lbplussinfo
 ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image
 information.dk###paywall:style(margin-top: 0px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important)
 ! dagbladet.no,elbil24.no
 ##.CTA-body-faded
 ! digi.no, tu.no, medier24.no, porten.no
@@ -2431,7 +2435,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 dagensbyggeri.dk##+js(std, (), 2500)
 eurosport.*##+js(aeld, contextmenu)
 techstart.dk##+js(set, adblock, false)
@@ -1286,7 +1286,7 @@
 # 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 # 🇮🇸: ——— And-and-auglýsingshindrun ———
 {+block{🇬🇧: ——— Anti-anti-adblocking ———}}
-# Last updated: 10November2021v2-Extension
+# Last updated: 01December2021v1-Extension
 .elderlyscissors.com
 {+block}
 .vg.no/cnp-assets/src/sites/vg/components/AdblockModal