From eb2668ac7afcddece979d1d5cc82c6df55a90658 Mon Sep 17 00:00:00 2001
From: Nojuuu <84513173+Nojuuu@users.noreply.github.com>
Date: Tue, 30 Nov 2021 14:43:47 +0200
Subject: [PATCH 01/11] Update LegitimateURLShortener.txt

---
 LegitimateURLShortener.txt | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/LegitimateURLShortener.txt b/LegitimateURLShortener.txt
index d7cddba74..43974c1fc 100644
--- a/LegitimateURLShortener.txt
+++ b/LegitimateURLShortener.txt
@@ -1,5 +1,5 @@
 ! Title: ➗ Actually Legitimate URL Shortener Tool
-! Version: 29November2021v2-Beta
+! Version: 30November2021v1-Beta
 ! Expires: 2 days
 ! Description: In a world dominated by bit.ly, adf.ly, and several thousand other malware cover-up tools, this list reduces the length of URLs in a much more legitimate and transparent manner. Essentially, it automatically removes unnecessary $/& values from the URLs, making them easier to copy from the URL bar and pasting elsewhere as links. Enjoy.
 ! Homepage: https://github.com/DandelionSprout/adfilt/discussions/163
@@ -1187,7 +1187,7 @@ $removeparam=tid,domain=comixology.*|gap.com|gapcanada.ca|mintmobile.com|zulily.
 ! https://twitter.com/hashtag/mlpg5?src=hashtag_click (23/04/2021)
 $removeparam=src,domain=thunderbird.net|twitter.com|udemy.com|elastix.org|bluejeans.com|melopero.com|kubii.*|reichelt.*|okdo.com|raspipc.es|tiendatec.es|thepihut.com|cytron.io|buyzero.de|welectron.com|digikey.*|adafruit.com|hinta.fi|3cx.com|ashford.com|bose.*|kennethcole.com|kipling-usa.com|newbalance.com|wondershare.*|investors.com|yahoo.com|engadget.com|mozilla.org|viking-direct.co.uk
 ! No particular example
-$removeparam=source,domain=googleusercontent.com|awd-it.*|ashford.com|asos.com|att.com|barenecessities.com|bedbathandbeyond.com|betterprogramming.pub|boscovs.com|boxboat.com|brownells.*|burkesoutlet.com|choicehotels.com|contabo.com|directv.com|drinkhint.com|edx.org|hammacher.com|hanes.com|hottopic.com|housing.com|hp.com|itnext.io|medium.com|nautica.com|onehanesplace.com|petsupplies.com|phonesoap.com|riteaid.com|sonos.com|squarespace.com|thedailybeast.com|tiktok.com|tommybahama.com|torrid.com|tous.com|webhint.io|wilsonsleather.com|wired.com|ylighting.com|jacquielawson.com|fool.com|fiverr.com|blavity.com|eonline.com|tokopedia.com|community.spiceworks.com|despegar.*|hotspotshield.com|gethotspotshield.com|subscribe.gq.com|bankofamerica.com
+$removeparam=source,domain=googleusercontent.com|awd-it.*|ashford.com|asos.com|att.com|barenecessities.com|bedbathandbeyond.com|betterprogramming.pub|boscovs.com|boxboat.com|brownells.*|burkesoutlet.com|choicehotels.com|contabo.com|directv.com|drinkhint.com|edx.org|hammacher.com|hanes.com|hottopic.com|housing.com|hp.com|itnext.io|medium.com|nautica.com|onehanesplace.com|petsupplies.com|phonesoap.com|riteaid.com|sonos.com|squarespace.com|thedailybeast.com|tiktok.com|tommybahama.com|torrid.com|tous.com|webhint.io|wilsonsleather.com|wired.com|ylighting.com|jacquielawson.com|fool.com|fiverr.com|blavity.com|eonline.com|tokopedia.com|community.spiceworks.com|despegar.*|hotspotshield.com|gethotspotshield.com|subscribe.gq.com|bankofamerica.com|outnorth.fi
 ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-525100
 ! https://github.com/DandelionSprout/adfilt/pull/277
 $removeparam=mod,domain=wsj.com|marketwatch.com|barrons.com|fnlondon.com|dowjones.com|mansionglobal.com|penews.com
@@ -1739,7 +1739,7 @@ $removeparam=report_recomm_player
 ! No particular examples
 $removeparam=app,domain=tiktok.com|music.apple.*
 $removeparam=c,domain=tiktok.com|norton.com|farfetch.com|hepsiburada.com|appsflyer.com|onelink.me|play.google.com
-$removeparam=campaign,domain=blue-tomato.com|sitepoint.com|sportler.com|peterhahn.*
+$removeparam=campaign,domain=blue-tomato.com|sitepoint.com|sportler.com|peterhahn.*|outnorth.fi
 $removeparam=/^pf_rd_/,domain=shopbop.com|amazon.*|imdb.com
 $removeparam=Source,domain=facebook.com|facebookcorewwwi.onion|messenger.com|evga.com
 $removeparam=version,domain=mp.weixin.qq.com|us.norton.com
@@ -1914,7 +1914,7 @@ $removeparam=tag,domain=amazon.*|argos.co.uk|tv2.no
 ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-750434
 ||xbox.com^$removeparam=xr
 ||deepdiscount.com^$removeparam=bid
-$removeparam=medium,domain=deepdiscount.com|eonline.com
+$removeparam=medium,domain=deepdiscount.com|eonline.com|outnorth.fi
 
 ! https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-750307
 $removeparam=rid,domain=giphy.com
@@ -2614,6 +2614,10 @@ $removeparam=mv_pc,domain=fragrancenet.com
 ! https://www.walmart.com/ip/Old-El-Paso-Stand-N-Stuff-Bold-Nacho-Cheese-Flavored-Taco-Dinner-Kit-9-5-oz/38260506?athcpid=38260506&athpgid=AthenaItempage&athcgid=null&athznid=siext&athieid=v0&athstid=CS056&athguid=egnNrMG_5XOxTB0tFsuPZlPSj01v5EdpAUIb&athancid=null&athena=true
 ||walmart.$removeparam=/^ath/
 
+! https://www.outnorth.fi/timberland/women-s-premium-6-waterproof-boot?source=hintaopas.fi&medium=productlinks&campaign=varmfodrade+k%C3%A4ngor&term=Women%27s+Premium+6&quot;+Waterproof+Boot#Black
+$removeparam=term,domain=outnorth.fi
+$removeparam=/^quot;/,domain=outnorth.fi
+
 !#if !env_mobile
 ! ——— Mobile ——— !
 ! ——— Entries mostly dedicated to maximising image sizes (thus poorly suited for phones) ———

From b40d8eda0762f89dc6f0d37315cb610b43bf9431 Mon Sep 17 00:00:00 2001
From: shenzhiming88 <66902050+shenzhiming88@users.noreply.github.com>
Date: Tue, 30 Nov 2021 23:31:48 +0800
Subject: [PATCH 02/11] Update LegitimateURLShortener.txt

---
 LegitimateURLShortener.txt | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/LegitimateURLShortener.txt b/LegitimateURLShortener.txt
index d7cddba74..c49ecad4a 100644
--- a/LegitimateURLShortener.txt
+++ b/LegitimateURLShortener.txt
@@ -1,5 +1,5 @@
 ! Title: ➗ Actually Legitimate URL Shortener Tool
-! Version: 29November2021v2-Beta
+! Version: 30November2021v1-Beta
 ! Expires: 2 days
 ! Description: In a world dominated by bit.ly, adf.ly, and several thousand other malware cover-up tools, this list reduces the length of URLs in a much more legitimate and transparent manner. Essentially, it automatically removes unnecessary $/& values from the URLs, making them easier to copy from the URL bar and pasting elsewhere as links. Enjoy.
 ! Homepage: https://github.com/DandelionSprout/adfilt/discussions/163
@@ -1734,6 +1734,9 @@ $removeparam=nettype
 $removeparam=report_recomm_player
 ! https://github.com/DandelionSprout/adfilt/pull/386
 ||mail.qq.com/cgi-bin/frame_html?$removeparam=r
+! https://github.com/DandelionSprout/adfilt/pull/394
+! https://m.v.qq.com/x/m/play?cid=mzc00200prv7r23&vid=&ptag=cn.bing.com%23v.index.adaptor%232
+||qq.com^$removeparam=ptag
 
 !! ——— Miscellaneous ———
 ! No particular examples

From 04a2612d100a0878f6a11f6247cb7a731ae418df Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Wed, 1 Dec 2021 05:01:55 +0100
Subject: [PATCH 03/11] General maintenance

Turns out Audacity also needs network connectivity to do software updates, and I'm pretty pro-'software updates'.
---
 Dandelion Sprout's Anti-Malware List.txt | 33 +++++++-----------------
 1 file changed, 10 insertions(+), 23 deletions(-)

diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt
index 9636a4131..076f8a46f 100644
--- a/Dandelion Sprout's Anti-Malware List.txt	
+++ b/Dandelion Sprout's Anti-Malware List.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List
-! Version: 30November2021v2-Beta
+! Version: 01December2021v1-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -112,7 +112,7 @@ bing.com##.b_algo:has(a[href*=".top/"]:not([href*="corriente.top"], [href*="gdto
 ||ssl.bblck.me^$doc
 ||allblock.net^$doc
 ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^$doc
-! Malicious domains found in videogame manuals and title screens
+! Malicious or purchaseable domains found in videogame manuals and title screens
 ||acclaimsports.com^$doc
 ||acclaimmaxsports.com^$doc
 ||hip-games.com^$doc
@@ -555,7 +555,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||new-message.today^$doc
 ||new-notification.live^$doc
 ||new-notifications.live^$doc
-||notified-today.com^$doc
 ||notified-today.live^$doc
 ||notified-today.xyz^$doc
 ||stay-notified.com^$doc
@@ -1026,7 +1025,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||secure-0*.ddnss.ch^$all
 ||lucdream.com^$doc
 ||beastbuying.com^$doc
-||kokotrokot.com^$doc
 ||07ca17vejqqej990.inteo.xyz^$doc
 ||pesoaniz.com^$doc
 ||plarium.com^$doc
@@ -1042,7 +1040,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||pro-protection.xyz^$all
 ||secureleadsforever.com^$all
 ||renewal-software-update.com^$all
-||pushmeup.art^$doc
+||pushmeup.art^$all
 ||covercenter.xyz^$all
 ||gettrk.xyz^$all
 ||trc.*.co^$doc
@@ -1235,7 +1233,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||safelyonline.net^$doc
 ||browse-safe.net^$doc
 ||btpnative.com^$doc
-||mybetterdl.com^$doc
+||mybetterdl.com^$all
 ||besty-deals.com^$all
 ||data-px.services^$doc
 ||newsvot.com^$doc
@@ -1262,7 +1260,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||army-glo.scrollingsystem.com^$doc
 ||www.kqzyfj.com^$all
 ||kqzyfj.com^$doc
-||cj.dotomi.com^$all
 ||mcafee12.tt.omtrdc.net^$doc
 ||trolleydrop.info^$doc
 ||jaynordan.digital^$doc
@@ -1432,14 +1429,10 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||159.148.186.228^$all
 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains
 ||yotube.com^$all
-||mybetterdl.com^$all
-||p185689.mybetterdl.com^$all
 ||r-tb.com^$all
 ||cdn.hoood.info^$all
-||data-px.services^$all
 ||barah-flo.com^$all
 ||beta-one.net^$all
-||beastbuying.com^$all
 ||pisism.com^$all
 ||czyzd.xyz^$all
 ||r1it6.xyz^$all
@@ -1449,7 +1442,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||m6ydd.xyz^$all
 ||welcomejohncena.pro^$all
 ||security-scanner.xyz^$all
-||pushmeup.art^$all
 ||c2egp.xyz^$all
 ||ese40.xyz^$all
 ||e07wm.xyz^$all
@@ -1650,7 +1642,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||new.bestlifeoffer20.com^$document
 ||reykijnoac.com^$document
 ||totalnicefeed.com^$all
-||omnatuor.com^$all
 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
 ||riteupd.mimanduca.co^$all
 ||oaesso.info^$document
@@ -6604,10 +6595,10 @@ toorgle.net##.join
 ||discord-spooky.ru^$all
 ||discord.foundation^$all
 ||discordgift.ru^$all
-||discordnitro-steam.ru^$all
+||discordnitro-steam.$all
 ||discordnitro.space^$all
-||discordxgift.xyz^$all
-||discordxnitro.xyz^$all
+||discordxgift.$all
+||discordxnitro.$all
 ||discorgift.online^$all
 ||discrocl.xyz^$all
 ||discrod.gifts^$all
@@ -6636,7 +6627,7 @@ toorgle.net##.join
 ||free-dislcordnitrlos.ru^$all
 ||free-niltross.ru^$all
 ||free-nitlross.ru^$all
-||freediscordnitro.ru^$all
+||freediscordnitro.$all
 ||freeskinsfree.pp.ua^$all
 ||from-plames.xyz^$all
 ||from-sparsei.ru.com^$all
@@ -6986,12 +6977,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne)
 ! ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net
 
-! ——— Offline-only apps trying to phone home ———
-!#if adguard
-! https://fosspost.org/audacity-is-now-a-spyware/
-*$app=audacity.exe|audacity.app
-!#endif
-
 ! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 ! https://myip.ms/info/limitexcess
 *#?#.post-list > .post-content:has-text(/Best girls webcam/i)
@@ -7000,8 +6985,10 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|
 *#?#script[src*=disquscdn] + #layout .post-content:has-text(We offer unlimited)
 *#?#script[src*=disquscdn] + #layout .post-content:has-text(.com specialize)
 
+!#if !ext_ublock
 ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$doc
+!#endif
 
 ! ——— Anti-PUP (WIP) ———
 ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)

From d0bd1a1e258e4218c2b116577ec0833a1287064a Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Wed, 1 Dec 2021 05:20:17 +0100
Subject: [PATCH 04/11] Update AntiAdblockEntries.txt

---
 .../AntiAdblockEntries.txt                                  | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/NorwegianExperimentalList alternate versions/AntiAdblockEntries.txt b/NorwegianExperimentalList alternate versions/AntiAdblockEntries.txt
index 86dc8b483..91c13e62c 100644
--- a/NorwegianExperimentalList alternate versions/AntiAdblockEntries.txt	
+++ b/NorwegianExperimentalList alternate versions/AntiAdblockEntries.txt	
@@ -35,6 +35,10 @@ intrafish.no##.preview-gradient
 lydogbilde.no,lydogbillede.dk##.lbplussinfo
 ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image
 information.dk###paywall:style(margin-top: 0px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important)
 ! dagbladet.no,elbil24.no
 ##.CTA-body-faded
 ! digi.no, tu.no, medier24.no, porten.no
@@ -49,7 +53,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 dagensbyggeri.dk##+js(std, (), 2500)
 eurosport.*##+js(aeld, contextmenu)
 techstart.dk##+js(set, adblock, false)

From bd7142fe72676a9f4e3b7d2112acd69f2630f069 Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Wed, 1 Dec 2021 05:21:12 +0100
Subject: [PATCH 05/11] Add files via upload

---
 .../AntiMalwareABP.txt                        | 114 ++++++++++++------
 .../AntiMalwareAdGuard.txt                    |  78 ++++++++----
 .../AntiMalwareAdGuardHome.txt                |  73 +++++++----
 .../AntiMalwareDomains.txt                    |  56 ++++++---
 .../AntiMalwareHosts.txt                      |  56 ++++++---
 .../AntiMalwarePrivoxy.action                 |  50 +++++---
 .../AntiMalwareTPL.tpl                        |  68 ++++++++---
 ...out's and other adblocker lists' IPs.ipset |  10 +-
 8 files changed, 351 insertions(+), 154 deletions(-)

diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt
index c84477708..03d6e2d64 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
-! Version: 27November2021v3-Beta
+! Version: 01December2021v1-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -112,7 +112,7 @@ bing.com##.b_algo:-abp-has(a[href*=".top/"]:not([href*="corriente.top"], [href*=
 ||ssl.bblck.me^
 ||allblock.net^
 ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^
-! Malicious domains found in videogame manuals and title screens
+! Malicious or purchaseable domains found in videogame manuals and title screens
 ||acclaimsports.com^
 ||acclaimmaxsports.com^
 ||hip-games.com^
@@ -650,7 +650,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||new-message.today^
 ||new-notification.live^
 ||new-notifications.live^
-||notified-today.com^
 ||notified-today.live^
 ||notified-today.xyz^
 ||stay-notified.com^
@@ -1497,7 +1496,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||secure-0*.ddnss.ch^$popup
 ||lucdream.com^
 ||beastbuying.com^
-||kokotrokot.com^
 ||07ca17vejqqej990.inteo.xyz^
 ||pesoaniz.com^
 ||plarium.com^
@@ -1524,7 +1522,8 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||secureleadsforever.com^$popup
 ||renewal-software-update.com^
 ||renewal-software-update.com^$popup
-||pushmeup.art^
+||pushmeup.art^
+||pushmeup.art^$popup
 ||covercenter.xyz^
 ||covercenter.xyz^$popup
 ||gettrk.xyz^
@@ -1833,7 +1832,8 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||safelyonline.net^
 ||browse-safe.net^
 ||btpnative.com^
-||mybetterdl.com^
+||mybetterdl.com^
+||mybetterdl.com^$popup
 ||besty-deals.com^
 ||besty-deals.com^$popup
 ||data-px.services^
@@ -1868,8 +1868,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||www.kqzyfj.com^
 ||www.kqzyfj.com^$popup
 ||kqzyfj.com^
-||cj.dotomi.com^
-||cj.dotomi.com^$popup
 ||mcafee12.tt.omtrdc.net^
 ||trolleydrop.info^
 ||jaynordan.digital^
@@ -2152,22 +2150,14 @@ zombooru.com##a[href="http://www.hard55.com"]
 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains
 ||yotube.com^
 ||yotube.com^$popup
-||mybetterdl.com^
-||mybetterdl.com^$popup
-||p185689.mybetterdl.com^
-||p185689.mybetterdl.com^$popup
 ||r-tb.com^
 ||r-tb.com^$popup
 ||cdn.hoood.info^
 ||cdn.hoood.info^$popup
-||data-px.services^
-||data-px.services^$popup
 ||barah-flo.com^
 ||barah-flo.com^$popup
 ||beta-one.net^
 ||beta-one.net^$popup
-||beastbuying.com^
-||beastbuying.com^$popup
 ||pisism.com^
 ||pisism.com^$popup
 ||czyzd.xyz^
@@ -2186,8 +2176,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||welcomejohncena.pro^$popup
 ||security-scanner.xyz^
 ||security-scanner.xyz^$popup
-||pushmeup.art^
-||pushmeup.art^$popup
 ||c2egp.xyz^
 ||c2egp.xyz^$popup
 ||ese40.xyz^
@@ -2513,6 +2501,67 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||163.125.31.46^$popup
 ||163.179.168.44^
 ||163.179.168.44^$popup
+! https://github.com/uBlockOrigin/uAssets/pull/10647
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
+||updsec.builtfromzero.com^
+||updsec.builtfromzero.com^$popup
+||money-mod.com^ument
+||gospelchor.info^ument
+
+||new.bestlifeoffer20.com^ument
+||reykijnoac.com^ument
+||totalnicefeed.com^
+||totalnicefeed.com^$popup
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
+||riteupd.mimanduca.co^
+||riteupd.mimanduca.co^$popup
+||oaesso.info^ument
+
+||bestlifeoffer20.com^ument
+! https://scammer.info/t/password-stealer/84348
+! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
+||youtube.com/watch?v=8nY7SnvNxH4^
+||youtube.com/watch?v=8nY7SnvNxH4^$popup
+||bit.ly/3p8kN5V^ument
+||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/
+||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$popup
+||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^
+||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$popup
+! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
+||110.89.59.135^
+||110.89.59.135^$popup
+||113.116.89.1^
+||113.116.89.1^$popup
+||119.183.146.191^
+||119.183.146.191^$popup
+||153.3.3.226^
+||153.3.3.226^$popup
+||182.116.104.6^
+||182.116.104.6^$popup
+||60.7.133.200^
+||60.7.133.200^$popup
+||122.6.254.201^
+||122.6.254.201^$popup
+||110.89.11.167^
+||110.89.11.167^$popup
+||171.112.177.90^
+||171.112.177.90^$popup
+||115.194.38.143^
+||115.194.38.143^$popup
+||61.52.79.32^
+||61.52.79.32^$popup
+! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
+||ups-dk.u1537460.cp.regruhosting.ru^
+||ups-dk.u1537460.cp.regruhosting.ru^$popup
+! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
+||lowseelan.com^
+||lowseelan.com^$popup
+! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
+||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^
+||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^$popup
+! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
+||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^
+||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$popup
 
 ! ——— Standard malware that I stumbled upon on my own ———
 ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -12315,14 +12364,14 @@ toorgle.net##.join
 ||discord.foundation^$popup
 ||discordgift.ru^
 ||discordgift.ru^$popup
-||discordnitro-steam.ru^
-||discordnitro-steam.ru^$popup
+||discordnitro-steam.
+||discordnitro-steam.$popup
 ||discordnitro.space^
 ||discordnitro.space^$popup
-||discordxgift.xyz^
-||discordxgift.xyz^$popup
-||discordxnitro.xyz^
-||discordxnitro.xyz^$popup
+||discordxgift.
+||discordxgift.$popup
+||discordxnitro.
+||discordxnitro.$popup
 ||discorgift.online^
 ||discorgift.online^$popup
 ||discrocl.xyz^
@@ -12379,8 +12428,8 @@ toorgle.net##.join
 ||free-niltross.ru^$popup
 ||free-nitlross.ru^
 ||free-nitlross.ru^$popup
-||freediscordnitro.ru^
-||freediscordnitro.ru^$popup
+||freediscordnitro.
+||freediscordnitro.$popup
 ||freeskinsfree.pp.ua^
 ||freeskinsfree.pp.ua^$popup
 ||from-plames.xyz^
@@ -12905,12 +12954,12 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
 ||githubnt.com^
 
 ! ——— Usually used by various groups who buy old domains and display illicit ads on them ———
-://ww4.
-://ww5.$domain=~ww5.msu.ac.zw
+://ww4.$domain=~ww4.ikea.com
+://ww5.$domain=~ww5.ikea.com|~ww5.msu.ac.zw
 ://ww6.$domain=~ww6.generali.pt
 ://ww7.$domain=~ww7.be|~ww7.readsnk.com
 ://ww8.$domain=~ww8.co|~ww8.ikea.com|~ww8.tiki.ne.jp|~ww8.erovoice.us|~ww8.anyanime.com|~ww8.bakushpal.az|~ww8.tokyoghoulre.com
-://ww9.$domain=~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br
+://ww9.$domain=~ww9.ikea.com|~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br
 ://ww10.
 ://ww11.
 ://ww12.
@@ -12969,11 +13018,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne)
 ! ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net
 
-! ——— Offline-only apps trying to phone home ———
-
-! https://fosspost.org/audacity-is-now-a-spyware/
-
-
 ! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 ! https://myip.ms/info/limitexcess
 
@@ -12982,9 +13026,11 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|
 
 
 
+
 ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^
 
+
 ! ——— Anti-PUP (WIP) ———
 ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 ||webadvisorc.rest.gti.mcafee.com^
diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt
index 25064f7cd..50fd4e4ec 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt	
@@ -1,6 +1,6 @@
 [AdGuard versions from ≥2019]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
-! Version: 27November2021v3-Beta
+! Version: 01December2021v1-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -112,7 +112,7 @@ bing.com##.b_algo:has(a[href*=".top/"]:not([href*="corriente.top"], [href*="gdto
 ||ssl.bblck.me^$document
 ||allblock.net^$document
 ||microsoftedge.microsoft.com/addons/detail/allblock/nkllnmjaaifdphkfbmedklkimjmnjeen^$document
-! Malicious domains found in videogame manuals and title screens
+! Malicious or purchaseable domains found in videogame manuals and title screens
 ||acclaimsports.com^$document
 ||acclaimmaxsports.com^$document
 ||hip-games.com^$document
@@ -555,7 +555,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||new-message.today^$document
 ||new-notification.live^$document
 ||new-notifications.live^$document
-||notified-today.com^$document
 ||notified-today.live^$document
 ||notified-today.xyz^$document
 ||stay-notified.com^$document
@@ -1026,7 +1025,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||secure-0*.ddnss.ch^$empty,important
 ||lucdream.com^$document
 ||beastbuying.com^$document
-||kokotrokot.com^$document
 ||07ca17vejqqej990.inteo.xyz^$document
 ||pesoaniz.com^$document
 ||plarium.com^$document
@@ -1042,7 +1040,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||pro-protection.xyz^$empty,important
 ||secureleadsforever.com^$empty,important
 ||renewal-software-update.com^$empty,important
-||pushmeup.art^$document
+||pushmeup.art^$empty,important
 ||covercenter.xyz^$empty,important
 ||gettrk.xyz^$empty,important
 ||trc.*.co^$document
@@ -1235,7 +1233,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||safelyonline.net^$document
 ||browse-safe.net^$document
 ||btpnative.com^$document
-||mybetterdl.com^$document
+||mybetterdl.com^$empty,important
 ||besty-deals.com^$empty,important
 ||data-px.services^$document
 ||newsvot.com^$document
@@ -1262,7 +1260,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||army-glo.scrollingsystem.com^$document
 ||www.kqzyfj.com^$empty,important
 ||kqzyfj.com^$document
-||cj.dotomi.com^$empty,important
 ||mcafee12.tt.omtrdc.net^$document
 ||trolleydrop.info^$document
 ||jaynordan.digital^$document
@@ -1432,14 +1429,10 @@ zombooru.com##a[href="http://www.hard55.com"]
 159.148.186.228$network
 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains
 ||yotube.com^$empty,important
-||mybetterdl.com^$empty,important
-||p185689.mybetterdl.com^$empty,important
 ||r-tb.com^$empty,important
 ||cdn.hoood.info^$empty,important
-||data-px.services^$empty,important
 ||barah-flo.com^$empty,important
 ||beta-one.net^$empty,important
-||beastbuying.com^$empty,important
 ||pisism.com^$empty,important
 ||czyzd.xyz^$empty,important
 ||r1it6.xyz^$empty,important
@@ -1449,7 +1442,6 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||m6ydd.xyz^$empty,important
 ||welcomejohncena.pro^$empty,important
 ||security-scanner.xyz^$empty,important
-||pushmeup.art^$empty,important
 ||c2egp.xyz^$empty,important
 ||ese40.xyz^$empty,important
 ||e07wm.xyz^$empty,important
@@ -1641,6 +1633,46 @@ zombooru.com##a[href="http://www.hard55.com"]
 115.204.119.237$network
 163.125.31.46$network
 163.179.168.44$network
+! https://github.com/uBlockOrigin/uAssets/pull/10647
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
+||updsec.builtfromzero.com^$empty,important
+||money-mod.com^$document
+||gospelchor.info^$document
+
+||new.bestlifeoffer20.com^$document
+||reykijnoac.com^$document
+||totalnicefeed.com^$empty,important
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
+||riteupd.mimanduca.co^$empty,important
+||oaesso.info^$document
+
+||bestlifeoffer20.com^$document
+! https://scammer.info/t/password-stealer/84348
+! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
+||youtube.com/watch?v=8nY7SnvNxH4^$empty,important
+||bit.ly/3p8kN5V^$document
+||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$empty,important
+||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$empty,important
+! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
+110.89.59.135$network
+113.116.89.1$network
+119.183.146.191$network
+153.3.3.226$network
+182.116.104.6$network
+60.7.133.200$network
+122.6.254.201$network
+110.89.11.167$network
+171.112.177.90$network
+115.194.38.143$network
+61.52.79.32$network
+! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
+||ups-dk.u1537460.cp.regruhosting.ru^$empty,important
+! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
+||lowseelan.com^$empty,important
+! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
+||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^$empty,important
+! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
+||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$empty,important
 
 ! ——— Standard malware that I stumbled upon on my own ———
 ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6563,10 +6595,10 @@ toorgle.net##.join
 ||discord-spooky.ru^$empty,important
 ||discord.foundation^$empty,important
 ||discordgift.ru^$empty,important
-||discordnitro-steam.ru^$empty,important
+||discordnitro-steam.$empty,important
 ||discordnitro.space^$empty,important
-||discordxgift.xyz^$empty,important
-||discordxnitro.xyz^$empty,important
+||discordxgift.$empty,important
+||discordxnitro.$empty,important
 ||discorgift.online^$empty,important
 ||discrocl.xyz^$empty,important
 ||discrod.gifts^$empty,important
@@ -6595,7 +6627,7 @@ toorgle.net##.join
 ||free-dislcordnitrlos.ru^$empty,important
 ||free-niltross.ru^$empty,important
 ||free-nitlross.ru^$empty,important
-||freediscordnitro.ru^$empty,important
+||freediscordnitro.$empty,important
 ||freeskinsfree.pp.ua^$empty,important
 ||from-plames.xyz^$empty,important
 ||from-sparsei.ru.com^$empty,important
@@ -6881,12 +6913,12 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
 ||githubnt.com^
 
 ! ——— Usually used by various groups who buy old domains and display illicit ads on them ———
-://ww4.$document
-://ww5.$document,domain=~ww5.msu.ac.zw
+://ww4.$document,domain=~ww4.ikea.com
+://ww5.$document,domain=~ww5.ikea.com|~ww5.msu.ac.zw
 ://ww6.$document,domain=~ww6.generali.pt
 ://ww7.$document,domain=~ww7.be|~ww7.readsnk.com
 ://ww8.$document,domain=~ww8.co|~ww8.ikea.com|~ww8.tiki.ne.jp|~ww8.erovoice.us|~ww8.anyanime.com|~ww8.bakushpal.az|~ww8.tokyoghoulre.com
-://ww9.$document,domain=~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br
+://ww9.$document,domain=~ww9.ikea.com|~ww9.tiki.ne.jp|~ww9.sakura.ne.jp|~ww9.generali.pt|~ww9.itau.com.br
 ://ww10.$document
 ://ww11.$document
 ://ww12.$document
@@ -6945,12 +6977,6 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:-abp-contains(0nl!ne)
 ! ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net
 
-! ——— Offline-only apps trying to phone home ———
-!#if adguard
-! https://fosspost.org/audacity-is-now-a-spyware/
-*$app=audacity.exe|audacity.app
-!#endif
-
 ! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 ! https://myip.ms/info/limitexcess
 *#?#.post-list > .post-content:has-text(/Best girls webcam/i)
@@ -6959,8 +6985,10 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|
 *#?#script[src*=disquscdn] + #layout .post-content:has-text(We offer unlimited)
 *#?#script[src*=disquscdn] + #layout .post-content:has-text(.com specialize)
 
+!#if !ext_ublock
 ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^$document
+!#endif
 
 ! ——— Anti-PUP (WIP) ———
 ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt
index 1cc78cb57..144764d65 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
-! Version: 27November2021v3-Beta
+! Version: 01December2021v1-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -63,7 +63,7 @@
 ||ssl.bblck.me^
 ||allblock.net^
 
-! Malicious domains found in videogame manuals and title screens
+! Malicious or purchaseable domains found in videogame manuals and title screens
 ||acclaimsports.com^
 ||acclaimmaxsports.com^
 ||hip-games.com^
@@ -381,7 +381,6 @@
 ||new-message.today^
 ||new-notification.live^
 ||new-notifications.live^
-||notified-today.com^
 ||notified-today.live^
 ||notified-today.xyz^
 ||stay-notified.com^
@@ -852,7 +851,6 @@
 ||secure-0*.ddnss.ch^
 ||lucdream.com^
 ||beastbuying.com^
-||kokotrokot.com^
 ||07ca17vejqqej990.inteo.xyz^
 ||pesoaniz.com^
 ||plarium.com^
@@ -1088,7 +1086,6 @@
 ||army-glo.scrollingsystem.com^
 ||www.kqzyfj.com^
 ||kqzyfj.com^
-||cj.dotomi.com^
 ||mcafee12.tt.omtrdc.net^
 ||trolleydrop.info^
 ||jaynordan.digital^
@@ -1258,14 +1255,10 @@
 159.148.186.228
 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains
 ||yotube.com^
-||mybetterdl.com^
-||p185689.mybetterdl.com^
 ||r-tb.com^
 ||cdn.hoood.info^
-||data-px.services^
 ||barah-flo.com^
 ||beta-one.net^
-||beastbuying.com^
 ||pisism.com^
 ||czyzd.xyz^
 ||r1it6.xyz^
@@ -1275,7 +1268,6 @@
 ||m6ydd.xyz^
 ||welcomejohncena.pro^
 ||security-scanner.xyz^
-||pushmeup.art^
 ||c2egp.xyz^
 ||ese40.xyz^
 ||e07wm.xyz^
@@ -1467,6 +1459,46 @@
 115.204.119.237
 163.125.31.46
 163.179.168.44
+! https://github.com/uBlockOrigin/uAssets/pull/10647
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md
+||updsec.builtfromzero.com^
+||money-mod.com^$document
+||gospelchor.info^$document
+
+||new.bestlifeoffer20.com^$document
+||reykijnoac.com^$document
+||totalnicefeed.com^
+! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
+||riteupd.mimanduca.co^
+||oaesso.info^$document
+
+||bestlifeoffer20.com^$document
+! https://scammer.info/t/password-stealer/84348
+! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
+
+
+
+
+! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
+110.89.59.135
+113.116.89.1
+119.183.146.191
+153.3.3.226
+182.116.104.6
+60.7.133.200
+122.6.254.201
+110.89.11.167
+171.112.177.90
+115.194.38.143
+61.52.79.32
+! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
+||ups-dk.u1537460.cp.regruhosting.ru^
+! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
+||lowseelan.com^
+! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
+
+! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
+
 
 ! ——— Standard malware that I stumbled upon on my own ———
 ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6387,10 +6419,10 @@
 ||discord-spooky.ru^
 ||discord.foundation^
 ||discordgift.ru^
-||discordnitro-steam.ru^
+||discordnitro-steam.
 ||discordnitro.space^
-||discordxgift.xyz^
-||discordxnitro.xyz^
+||discordxgift.
+||discordxnitro.
 ||discorgift.online^
 ||discrocl.xyz^
 ||discrod.gifts^
@@ -6419,7 +6451,7 @@
 ||free-dislcordnitrlos.ru^
 ||free-niltross.ru^
 ||free-nitlross.ru^
-||freediscordnitro.ru^
+||freediscordnitro.
 ||freeskinsfree.pp.ua^
 ||from-plames.xyz^
 ||from-sparsei.ru.com^
@@ -6701,12 +6733,12 @@
 ||githubnt.com^
 
 ! ——— Usually used by various groups who buy old domains and display illicit ads on them ———
-://ww4.
-://ww5.$denyallow=ww5.msu.ac.zw
+://ww4.$denyallow=ww4.ikea.com
+://ww5.$denyallow=ww5.ikea.com|ww5.msu.ac.zw
 ://ww6.$denyallow=ww6.generali.pt
 ://ww7.$denyallow=ww7.be|ww7.readsnk.com
 ://ww8.$denyallow=ww8.co|ww8.ikea.com|ww8.tiki.ne.jp|ww8.erovoice.us|ww8.anyanime.com|ww8.bakushpal.az|ww8.tokyoghoulre.com
-://ww9.$denyallow=ww9.tiki.ne.jp|ww9.sakura.ne.jp|ww9.generali.pt|ww9.itau.com.br
+://ww9.$denyallow=ww9.ikea.com|ww9.tiki.ne.jp|ww9.sakura.ne.jp|ww9.generali.pt|ww9.itau.com.br
 ://ww10.
 ://ww11.
 ://ww12.
@@ -6759,18 +6791,15 @@
 ! ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 
 
-! ——— Offline-only apps trying to phone home ———
-
-! https://fosspost.org/audacity-is-now-a-spyware/
-
-
 ! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 ! https://myip.ms/info/limitexcess
 ! https://myip.ms/info/memberarea/My_Account.html
 
+
 ! ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 ||if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data^
 
+
 ! ——— Anti-PUP (WIP) ———
 ! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 ||webadvisorc.rest.gti.mcafee.com^
diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt
index bd5102534..17f5c1741 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt	
@@ -1,5 +1,5 @@
 # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
-# Version: 27November2021v3-Beta
+# Version: 01December2021v1-Beta
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 
@@ -59,7 +59,7 @@ juvander.net
 ssl.bblck.me
 allblock.net
 
-# Malicious domains found in videogame manuals and title screens
+# Malicious or purchaseable domains found in videogame manuals and title screens
 acclaimsports.com
 acclaimmaxsports.com
 hip-games.com
@@ -339,7 +339,6 @@ new-message.email
 new-message.today
 new-notification.live
 new-notifications.live
-notified-today.com
 notified-today.live
 notified-today.xyz
 stay-notified.com
@@ -770,7 +769,6 @@ newstepsco.com
 chse-security-notifications.email
 lucdream.com
 beastbuying.com
-kokotrokot.com
 07ca17vejqqej990.inteo.xyz
 pesoaniz.com
 plarium.com
@@ -951,7 +949,6 @@ aquariuminn.com
 army-glo.scrollingsystem.com
 www.kqzyfj.com
 kqzyfj.com
-cj.dotomi.com
 mcafee12.tt.omtrdc.net
 trolleydrop.info
 jaynordan.digital
@@ -1088,14 +1085,10 @@ cloud-apps.store
 citationsherbe.at
 159.148.186.228
 yotube.com
-mybetterdl.com
-p185689.mybetterdl.com
 r-tb.com
 cdn.hoood.info
-data-px.services
 barah-flo.com
 beta-one.net
-beastbuying.com
 pisism.com
 czyzd.xyz
 r1it6.xyz
@@ -1105,7 +1098,6 @@ nkb18.xyz
 m6ydd.xyz
 welcomejohncena.pro
 security-scanner.xyz
-pushmeup.art
 c2egp.xyz
 ese40.xyz
 e07wm.xyz
@@ -1266,6 +1258,36 @@ shadyclient.net
 115.204.119.237
 163.125.31.46
 163.179.168.44
+updsec.builtfromzero.com
+money-mod.com
+gospelchor.info
+smwgwa.brownbrothersilver.top
+new.bestlifeoffer20.com
+reykijnoac.com
+totalnicefeed.com
+riteupd.mimanduca.co
+oaesso.info
+abcwkv.naturaloffsteam.top
+bestlifeoffer20.com
+
+
+
+
+110.89.59.135
+113.116.89.1
+119.183.146.191
+153.3.3.226
+182.116.104.6
+60.7.133.200
+122.6.254.201
+110.89.11.167
+171.112.177.90
+115.194.38.143
+61.52.79.32
+ups-dk.u1537460.cp.regruhosting.ru
+lowseelan.com
+
+
 
 # ——— Standard malware that I stumbled upon on my own ———
 downloadprovider.me
@@ -6176,10 +6198,10 @@ discord-app.net
 discord-spooky.ru
 discord.foundation
 discordgift.ru
-discordnitro-steam.ru
+
 discordnitro.space
-discordxgift.xyz
-discordxnitro.xyz
+
+
 discorgift.online
 discrocl.xyz
 discrod.gifts
@@ -6207,7 +6229,7 @@ fozzytournaments.fun
 free-dislcordnitrlos.ru
 free-niltross.ru
 free-nitlross.ru
-freediscordnitro.ru
+
 freeskinsfree.pp.ua
 from-plames.xyz
 from-sparsei.ru.com
@@ -6544,15 +6566,13 @@ githubnt.com
 # ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 
 
-# ——— Offline-only apps trying to phone home ———
-
-
-
 # ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 
+
 # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data
 
+
 # ——— Anti-PUP (WIP) ———
 # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 webadvisorc.rest.gti.mcafee.com
diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt
index 08f370068..04226784f 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt	
@@ -1,5 +1,5 @@
 # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
-# Version: 27November2021v3-Alpha
+# Version: 01December2021v1-Alpha
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 
@@ -59,7 +59,7 @@
 127.0.0.1 ssl.bblck.me
 127.0.0.1 allblock.net
 
-# Malicious domains found in videogame manuals and title screens
+# Malicious or purchaseable domains found in videogame manuals and title screens
 127.0.0.1 acclaimsports.com
 127.0.0.1 acclaimmaxsports.com
 127.0.0.1 hip-games.com
@@ -339,7 +339,6 @@
 127.0.0.1 new-message.today
 127.0.0.1 new-notification.live
 127.0.0.1 new-notifications.live
-127.0.0.1 notified-today.com
 127.0.0.1 notified-today.live
 127.0.0.1 notified-today.xyz
 127.0.0.1 stay-notified.com
@@ -770,7 +769,6 @@
 127.0.0.1 chse-security-notifications.email
 127.0.0.1 lucdream.com
 127.0.0.1 beastbuying.com
-127.0.0.1 kokotrokot.com
 127.0.0.1 07ca17vejqqej990.inteo.xyz
 127.0.0.1 pesoaniz.com
 127.0.0.1 plarium.com
@@ -951,7 +949,6 @@
 127.0.0.1 army-glo.scrollingsystem.com
 127.0.0.1 www.kqzyfj.com
 127.0.0.1 kqzyfj.com
-127.0.0.1 cj.dotomi.com
 127.0.0.1 mcafee12.tt.omtrdc.net
 127.0.0.1 trolleydrop.info
 127.0.0.1 jaynordan.digital
@@ -1088,14 +1085,10 @@
 127.0.0.1 citationsherbe.at
 127.0.0.1 159.148.186.228
 127.0.0.1 yotube.com
-127.0.0.1 mybetterdl.com
-127.0.0.1 p185689.mybetterdl.com
 127.0.0.1 r-tb.com
 127.0.0.1 cdn.hoood.info
-127.0.0.1 data-px.services
 127.0.0.1 barah-flo.com
 127.0.0.1 beta-one.net
-127.0.0.1 beastbuying.com
 127.0.0.1 pisism.com
 127.0.0.1 czyzd.xyz
 127.0.0.1 r1it6.xyz
@@ -1105,7 +1098,6 @@
 127.0.0.1 m6ydd.xyz
 127.0.0.1 welcomejohncena.pro
 127.0.0.1 security-scanner.xyz
-127.0.0.1 pushmeup.art
 127.0.0.1 c2egp.xyz
 127.0.0.1 ese40.xyz
 127.0.0.1 e07wm.xyz
@@ -1266,6 +1258,36 @@
 127.0.0.1 115.204.119.237
 127.0.0.1 163.125.31.46
 127.0.0.1 163.179.168.44
+127.0.0.1 updsec.builtfromzero.com
+127.0.0.1 money-mod.com
+127.0.0.1 gospelchor.info
+127.0.0.1 smwgwa.brownbrothersilver.top
+127.0.0.1 new.bestlifeoffer20.com
+127.0.0.1 reykijnoac.com
+127.0.0.1 totalnicefeed.com
+127.0.0.1 riteupd.mimanduca.co
+127.0.0.1 oaesso.info
+127.0.0.1 abcwkv.naturaloffsteam.top
+127.0.0.1 bestlifeoffer20.com
+
+
+
+
+127.0.0.1 110.89.59.135
+127.0.0.1 113.116.89.1
+127.0.0.1 119.183.146.191
+127.0.0.1 153.3.3.226
+127.0.0.1 182.116.104.6
+127.0.0.1 60.7.133.200
+127.0.0.1 122.6.254.201
+127.0.0.1 110.89.11.167
+127.0.0.1 171.112.177.90
+127.0.0.1 115.194.38.143
+127.0.0.1 61.52.79.32
+127.0.0.1 ups-dk.u1537460.cp.regruhosting.ru
+127.0.0.1 lowseelan.com
+
+
 
 # ——— Standard malware that I stumbled upon on my own ———
 127.0.0.1 downloadprovider.me
@@ -6176,10 +6198,10 @@
 127.0.0.1 discord-spooky.ru
 127.0.0.1 discord.foundation
 127.0.0.1 discordgift.ru
-127.0.0.1 discordnitro-steam.ru
+
 127.0.0.1 discordnitro.space
-127.0.0.1 discordxgift.xyz
-127.0.0.1 discordxnitro.xyz
+
+
 127.0.0.1 discorgift.online
 127.0.0.1 discrocl.xyz
 127.0.0.1 discrod.gifts
@@ -6207,7 +6229,7 @@
 127.0.0.1 free-dislcordnitrlos.ru
 127.0.0.1 free-niltross.ru
 127.0.0.1 free-nitlross.ru
-127.0.0.1 freediscordnitro.ru
+
 127.0.0.1 freeskinsfree.pp.ua
 127.0.0.1 from-plames.xyz
 127.0.0.1 from-sparsei.ru.com
@@ -6544,15 +6566,13 @@
 # ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 
 
-# ——— Offline-only apps trying to phone home ———
-
-
-
 # ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 
+
 # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 127.0.0.1 if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data
 
+
 # ——— Anti-PUP (WIP) ———
 # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 127.0.0.1 webadvisorc.rest.gti.mcafee.com
diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action
index 19d166d1f..403e619c5 100644
--- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action	
+++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action	
@@ -1,6 +1,6 @@
 {+block}
 # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
-# Version: 27November2021v3-Alpha
+# Version: 01December2021v1-Alpha
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 
@@ -67,7 +67,7 @@
 
 
 
-# Malicious domains found in videogame manuals and title screens
+# Malicious or purchaseable domains found in videogame manuals and title screens
 
 
 
@@ -373,7 +373,6 @@
 
 
 
-
 
 
 /bitcoinrevolution/lp.php
@@ -877,7 +876,6 @@
 
 
 
-
 
 
 # Relations to the original domain
@@ -1038,7 +1036,6 @@
 
 
 
-
 
 
 # Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin
@@ -1123,11 +1120,6 @@
 
 
 
-
-
-
-
-
 
 
 
@@ -1265,6 +1257,36 @@
 
 
 
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
 
 
 
@@ -6531,18 +6553,14 @@
 # ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 
 
-{+block}
-# ——— Offline-only apps trying to phone home ———
-#
-#
-#
-
 {+block}
 # ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 
+#
 {+block}
 # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 
+#
 
 {+block}
 # ——— Anti-PUP (WIP) ———
diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl
index 2c655682f..2e4d71292 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl	
+++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl	
@@ -1,6 +1,6 @@
 msFilterList
 # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
-# Version: 27November2021v3-Beta
+# Version: 01December2021v1-Beta
 : expires = 5
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -112,7 +112,7 @@ msFilterList
 -d ssl.bblck.me
 -d allblock.net
 -d microsoftedge.microsoft.com addons detail allblock nkllnmjaaifdphkfbmedklkimjmnjeen
-# Malicious domains found in videogame manuals and title screens
+# Malicious or purchaseable domains found in videogame manuals and title screens
 -d acclaimsports.com
 -d acclaimmaxsports.com
 -d hip-games.com
@@ -430,7 +430,6 @@ msFilterList
 -d new-message.today
 -d new-notification.live
 -d new-notifications.live
--d notified-today.com
 -d notified-today.live
 -d notified-today.xyz
 -d stay-notified.com
@@ -899,7 +898,6 @@ msFilterList
 
 -d lucdream.com
 -d beastbuying.com
--d kokotrokot.com
 -d 07ca17vejqqej990.inteo.xyz
 -d pesoaniz.com
 -d plarium.com
@@ -1135,7 +1133,6 @@ msFilterList
 -d army-glo.scrollingsystem.com
 -d www.kqzyfj.com
 -d kqzyfj.com
--d cj.dotomi.com
 -d mcafee12.tt.omtrdc.net
 -d trolleydrop.info
 -d jaynordan.digital
@@ -1303,14 +1300,10 @@ msFilterList
 -d 159.148.186.228
 # https://github.com/iam-py-test/investigations/blob/main/2021/10 26 1.md#domains
 -d yotube.com
--d mybetterdl.com
--d p185689.mybetterdl.com
 -d r-tb.com
 -d cdn.hoood.info
--d data-px.services
 -d barah-flo.com
 -d beta-one.net
--d beastbuying.com
 -d pisism.com
 -d czyzd.xyz
 -d r1it6.xyz
@@ -1320,7 +1313,6 @@ msFilterList
 -d m6ydd.xyz
 -d welcomejohncena.pro
 -d security-scanner.xyz
--d pushmeup.art
 -d c2egp.xyz
 -d ese40.xyz
 -d e07wm.xyz
@@ -1512,6 +1504,46 @@ msFilterList
 -d 115.204.119.237
 -d 163.125.31.46
 -d 163.179.168.44
+# https://github.com/uBlockOrigin/uAssets/pull/10647
+# https://github.com/iam-py-test/investigations/blob/main/2021/11 28 1.md
+-d updsec.builtfromzero.com
+-d money-mod.com
+-d gospelchor.info
+-d smwgwa.brownbrothersilver.top
+-d new.bestlifeoffer20.com
+-d reykijnoac.com
+-d totalnicefeed.com
+# https://github.com/iam-py-test/investigations/blob/main/2021/11 28 2.md
+-d riteupd.mimanduca.co
+-d oaesso.info
+-d abcwkv.naturaloffsteam.top
+-d bestlifeoffer20.com
+# https://scammer.info/t/password-stealer/84348
+# https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
+-d youtube.com watch?v=8nY7SnvNxH4
+-d bit.ly 3p8kN5V
+-d mediafire.com file at2tvnao5x6ivdo EngineOwning.rar 
+-d download2264.mediafire.com pnk44f5ci9rg at2tvnao5x6ivdo EngineOwning.rar
+# https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
+-d 110.89.59.135
+-d 113.116.89.1
+-d 119.183.146.191
+-d 153.3.3.226
+-d 182.116.104.6
+-d 60.7.133.200
+-d 122.6.254.201
+-d 110.89.11.167
+-d 171.112.177.90
+-d 115.194.38.143
+-d 61.52.79.32
+# https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
+-d ups-dk.u1537460.cp.regruhosting.ru
+# https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
+-d lowseelan.com
+# https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
+-d dl02.s3.amazonaws.com installers 747947 oi_picasa38-setupexe.exe
+# https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
+-d dl02.s3.amazonaws.com installers 424531 2gzbsoj4gxb.exe
 
 # ——— Standard malware that I stumbled upon on my own ———
 # http://www.toorgle.net/results.php?q=fetishkitsch&security=666
@@ -6431,10 +6463,10 @@ msFilterList
 -d discord-spooky.ru
 -d discord.foundation
 -d discordgift.ru
--d discordnitro-steam.ru
+-d discordnitro-steam.
 -d discordnitro.space
--d discordxgift.xyz
--d discordxnitro.xyz
+-d discordxgift.
+-d discordxnitro.
 -d discorgift.online
 -d discrocl.xyz
 -d discrod.gifts
@@ -6463,7 +6495,7 @@ msFilterList
 -d free-dislcordnitrlos.ru
 -d free-niltross.ru
 -d free-nitlross.ru
--d freediscordnitro.ru
+-d freediscordnitro.
 -d freeskinsfree.pp.ua
 -d from-plames.xyz
 -d from-sparsei.ru.com
@@ -6757,19 +6789,15 @@ msFilterList
 # ——— Upgrades HTTP requests to HTTPS on sites that don't do it automatically ———
 
 
-# ——— Offline-only apps trying to phone home ———
-
-# https://fosspost.org/audacity-is-now-a-spyware/
-
-
-
 # ——— Anti-'Malware comments' (Currently Disqus-specific) ———
 # https://myip.ms/info/limitexcess
 # https://myip.ms/info/memberarea/My_Account.html
 
+
 # ——— Dummy entry used to give myself credit, for when this list is used in large compilation hosts-type files (Although they are fully allowed by my licence to use this list, it'd be nice for me and end-users to see where it's being used, as a few of them do not credit their sources) ———
 -d if-a-large-hosts-file-contains-this-entry-then-it.uses-dandelion-sprouts-anti-malware-list-as-a-source-list.data
 
+
 # ——— Anti-PUP (WIP) ———
 # This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
 -d webadvisorc.rest.gti.mcafee.com
diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset
index 337183cea..c10180170 100644
--- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset	
+++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset	
@@ -1,5 +1,5 @@
 # Title: Dandelion Sprout's and other adblocker lists' IPs
-# Version: 25November2021v1-Beta
+# Version: 27November2021v3-Beta
 # Expires: 5 days
 # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish.
 # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
@@ -184,6 +184,14 @@
 115.56.169.134
 194.87.138.20
 103.167.92.73
+58.249.74.79
+27.45.14.109
+27.40.101.191
+27.45.119.22
+27.47.73.159
+115.204.119.237
+163.125.31.46
+163.179.168.44
 192.243.59.12
 192.243.59.13
 192.243.59.20

From f4485d753608d8fc26b28a0bb04a3432c9756f1d Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Wed, 1 Dec 2021 05:22:39 +0100
Subject: [PATCH 06/11] Add files via upload

---
 .../DandelionSproutsNorskeFiltre.tpl          |  2 +-
 .../NordicFilters-uBOLegacy.txt               |  6 ++++-
 .../NordicFilters-uMatrixSupplement.txt       |  2 +-
 .../NordicFiltersABP-Inclusion.txt            | 23 +++++++++++++++----
 .../NordicFiltersABP.txt                      |  2 +-
 .../NordicFiltersAdGuard.txt                  |  6 ++++-
 .../NordicFiltersPrivacy.txt                  |  6 ++++-
 .../NordicFiltersPrivoxy.action               |  2 +-
 8 files changed, 38 insertions(+), 11 deletions(-)

diff --git a/NorwegianExperimentalList alternate versions/DandelionSproutsNorskeFiltre.tpl b/NorwegianExperimentalList alternate versions/DandelionSproutsNorskeFiltre.tpl
index 646722604..7755c87d1 100644
--- a/NorwegianExperimentalList alternate versions/DandelionSproutsNorskeFiltre.tpl	
+++ b/NorwegianExperimentalList alternate versions/DandelionSproutsNorskeFiltre.tpl	
@@ -952,7 +952,7 @@ msFilterList
 # 🇳🇴 🇩🇰: ——— Anti-anti-reklameblokkering ———
 # 🇮🇸: ——— And-and-auglýsingshindrun ———
 # 🇬🇧: ——— Anti-anti-adblocking ———
-# Last updated: 10November2021v2-Extension
+# Last updated: 01December2021v1-Extension
 -d elderlyscissors.com
 # Also fixed in "uBlock Filters - Privacy", but is added to this list as well, because it serves to remove AAAB notices on various pages (especially when "uBlock Filters" is turned on).
 -d googletagmanager.com gtm.js
diff --git a/NorwegianExperimentalList alternate versions/NordicFilters-uBOLegacy.txt b/NorwegianExperimentalList alternate versions/NordicFilters-uBOLegacy.txt
index f4572b416..ed3dae93d 100644
--- a/NorwegianExperimentalList alternate versions/NordicFilters-uBOLegacy.txt	
+++ b/NorwegianExperimentalList alternate versions/NordicFilters-uBOLegacy.txt	
@@ -2418,6 +2418,10 @@ intrafish.no##.preview-gradient
 lydogbilde.no,lydogbillede.dk##.lbplussinfo
 ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image
 information.dk###paywall:style(margin-top: 0px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important)
 ! dagbladet.no,elbil24.no
 ##.CTA-body-faded
 ! digi.no, tu.no, medier24.no, porten.no
@@ -2432,7 +2436,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 dagensbyggeri.dk##+js(std, (), 2500)
 eurosport.*##+js(aeld, contextmenu)
 techstart.dk##+js(set, adblock, false)
diff --git a/NorwegianExperimentalList alternate versions/NordicFilters-uMatrixSupplement.txt b/NorwegianExperimentalList alternate versions/NordicFilters-uMatrixSupplement.txt
index 109473bf9..9c1915c27 100644
--- a/NorwegianExperimentalList alternate versions/NordicFilters-uMatrixSupplement.txt	
+++ b/NorwegianExperimentalList alternate versions/NordicFilters-uMatrixSupplement.txt	
@@ -192,5 +192,5 @@ in-addr.arpa 193.148.70.153 * allow
 ! Takk til THEtomaso (https://github.com/THEtomaso) for de fleste av disse oppføringene.
 ! Tak til THEtomaso (https://github.com/THEtomaso) for de fleste af disse regler.
 ! Thanks to THEtomaso (https://github.com/THEtomaso) for most of these entries.
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 ! Also fixed in "uBlock Filters - Privacy", but is added to this list as well, because it serves to remove AAAB notices on various pages (especially when "uBlock Filters" is turned on).
diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersABP-Inclusion.txt b/NorwegianExperimentalList alternate versions/NordicFiltersABP-Inclusion.txt
index 6b7ed842d..6f62ea1cd 100644
--- a/NorwegianExperimentalList alternate versions/NordicFiltersABP-Inclusion.txt	
+++ b/NorwegianExperimentalList alternate versions/NordicFiltersABP-Inclusion.txt	
@@ -4355,7 +4355,7 @@ whowhatwear.co.uk#@#a[href*="/click.linksynergy"] img
 ! Språknöjtral test för at kolla om ABP-brukarrapporter för YouTube går ner til 0 med den här uppförning / Language-neutral test to see if ABP user reports for YouTube plunge down to 0 with this entry
 ||googlevideo.com/*&ctier=
 
-! Version: 261120211
+! Version: 301120211
 ! Title: Adblock List for Finland
 ! Description: Finnish adblock list
 ! Expires: 4 days
@@ -4455,7 +4455,9 @@ _mainosnappi.
 ##[href^="https://tc.tradetracker.net/"]
 ##[href^="https://www.nettikasinot.org"]
 ##a[href*="/clickthrgh.asp?"]
+##a[href="https://kasinoseta.com/"]
 ##a[href^="https://app.readpeak.com/ads"]
+##a[href^="https://www.kumiukko.fi/ostos?tt="]
 ##div[class*=element--nativead]
 ##div[class*=newsFrontAd]
 ##div[class="ad container-right"]
@@ -4770,6 +4772,7 @@ kotiliesi.fi##.article-continues
 kotiliesi.fi##.nativecarousel.widget
 kotiliesi.fi##.widget_google-ad-manager
 kotiliesi.fi##body.category .placeholder
+kotiliesi.fi#?#article[class^="grid__item_"]:-abp-has(.template-item_nativead)
 kotimikro.fi##.campaign-teaser-show
 kotimikro.fi##b > [href^="https://tilaus.kotimikro.fi/brand/kotimikro/"]
 kotimikro.fi#?#div.themebox.widget:-abp-has(> div > div > div > div#cx_4217c66c223ecb55cb7b1d49afa884837bfccda9)
@@ -4895,6 +4898,7 @@ mvlehti.net##[href="https://www.halvinlaina.fi/"]
 mvlehti.net##[href^="https://www.kasinot.org/"]
 mvlehti.net##a[href*="tarjousproffa.com"]
 mvlehti.net##a[href="https://kasinot.org"]
+mvlehti.net##a[href="https://loistehammasharja.com/"]
 mvlehti.net##a[href="https://www.kippis.net/"]
 mvlehti.net#?#.aligncenter:has(a[href*="tarjousproffa.com"])
 mvlehti.net#?#.entry-content > h3:-abp-contains(kasino)
@@ -5042,18 +5046,21 @@ tekniikkatalous.fi#?#div#skyscraper-height-div > aside > div > div > a:-abp-cont
 tekniikkatalous.fi#?#div#skyscraper-height-div > section > div > a:-abp-contains(Kaupallinen yhteistyö)
 tekniikkatalous.fi#?#.article-body > div[class]:-abp-has(> span:-abp-contains(KAUPALLINEN YHTEISTYÖ) + a[href^="https://koulutus.almatalent.fi/"])
 tekniikkatalous.fi,tivi.fi#?#[width]:-abp-has(.lazyload-wrapper)
+tekniikkatalous.fi##a[href^="/tyopaikat/kumppanisisalto-tyopaikat/"]
+tekniikkatalous.fi##aside > div[class] > a[href^="https://www.tekniikkatalous.fi/kumppanisisallot"]
+tekniikkatalous.fi##div[class][width="980"]
 telsu.fi###pb_bottom2
 telsu.fi###pb_bottom3
 telsu.fi##.cmore.ch
 tennis.fi##.ad-blocks
-tekniikkatalous.fi##a[href^="/tyopaikat/kumppanisisalto-tyopaikat/"]
-tekniikkatalous.fi##aside > div[class] > a[href^="https://www.tekniikkatalous.fi/kumppanisisallot"]
-tekniikkatalous.fi##div[class][width="980"]
 tervareitti.fi##.advertisement-banner-row
 tervareitti.fi#?#.article-container.shadow-sm.col:-abp-has(img[alt^="Oma tilausmainos"])
 terve.fi##div[class|=ProductRecommendationCarousel__CarouselContainer]
 terve.fi#?#div[class^=PageElementFeedItem__Container]:-abp-contains(Mainos)
 terve.fi#?#div[class^=transitionSlot__component][class*=layout__container]:-abp-contains(KAUPALLINEN YHTEISTYÖ)
+terveydenasialla.com##a[href^="https://on.vallila.fi/"]
+terveydenasialla.com##p a[href^="https://related.iittala.com/"]
+terveydenasialla.com#?#p:-abp-has(strong):-abp-has(a[href="http://www.curaofsweden.com/fi"])
 ticketmaster.fi##div[id^=ad-slot-]
 ticketmaster.fi#?#div:-abp-has(> [id|=ad-slot])
 tiede.fi#?#.views-row:-abp-has(.is-commercial)
@@ -5216,6 +5223,7 @@ yrittajat.fi##div[class$=kaupallinen-yhteistyo]
 ||kinuskikissa.fi/wp-content/uploads/*kumppani_*.gif$image
 ||kiuruvesilehti.fi/wp-content/uploads/*kampanja_banneri.png$image
 ||kotikarjala.fi/eneo?tem=ndap_ilmoitus&$xmlhttprequest,domain=kotikarjala.fi
+||kotiliesi.fi/upotukset/hintaopas/*$domain=tekniikanmaailma.fi
 ||kuvake.net/js/bannerloader.js$script,domain=kuvake.net
 ||laitilansanomat.fi^*/gallery/mainos*/$image,domain=laitilansanomat.fi
 ||lbaanijakuva.fi/test/*?template=prisjakt$domain=lbaanijakuva.fi
@@ -5410,3 +5418,10 @@ iltalehti.fi#@#.ad-placement
 
 ! https://github.com/easylist/easylist/pull/9343
 @@||almamedia.fi/almacmp/$script
+
+! https://github.com/easylist/easylist/pull/9900
+mustijamirri.fi#@##cookie_consent
+mustijamirri.fi#@#.cookie_body
+mustijamirri.fi#@##cookieform
+mustijamirri.fi#@#.cookie_info
+mustijamirri.fi#@#.cookie_check
diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersABP.txt b/NorwegianExperimentalList alternate versions/NordicFiltersABP.txt
index 8681d0e5c..09a3d898a 100644
--- a/NorwegianExperimentalList alternate versions/NordicFiltersABP.txt	
+++ b/NorwegianExperimentalList alternate versions/NordicFiltersABP.txt	
@@ -2325,7 +2325,7 @@ vg.no##div[data-test-tag=timestamp] + p + div::before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 tv2.no#$#abort-current-inline-script adblockDetector
 ||elderlyscissors.com^
 ||vg.no/cnp-assets/src/sites/vg/components/AdblockModal$script,~third-party
diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersAdGuard.txt b/NorwegianExperimentalList alternate versions/NordicFiltersAdGuard.txt
index d45370967..b9d6efd4f 100644
--- a/NorwegianExperimentalList alternate versions/NordicFiltersAdGuard.txt	
+++ b/NorwegianExperimentalList alternate versions/NordicFiltersAdGuard.txt	
@@ -2417,6 +2417,10 @@ intrafish.no##.preview-gradient
 lydogbilde.no,lydogbillede.dk##.lbplussinfo
 ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image
 information.dk###paywall:style(margin-top: 0px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important)
 ! dagbladet.no,elbil24.no
 ##.CTA-body-faded
 ! digi.no, tu.no, medier24.no, porten.no
@@ -2431,7 +2435,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 dagensbyggeri.dk##+js(std, (), 2500)
 eurosport.*##+js(aeld, contextmenu)
 techstart.dk##+js(set, adblock, false)
diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersPrivacy.txt b/NorwegianExperimentalList alternate versions/NordicFiltersPrivacy.txt
index e11077f5f..88238de14 100644
--- a/NorwegianExperimentalList alternate versions/NordicFiltersPrivacy.txt	
+++ b/NorwegianExperimentalList alternate versions/NordicFiltersPrivacy.txt	
@@ -2417,6 +2417,10 @@ intrafish.no##.preview-gradient
 lydogbilde.no,lydogbillede.dk##.lbplussinfo
 ||dagligvarehandelen.no/sites/all/themes/custom/ledelseas/gfx/veil.png$image
 information.dk###paywall:style(margin-top: 0px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-include[src*="/incentive/"]:style(border: 10px !important; border-color: #CD5C5C !important; border-style: solid !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##amedia-incentive:style(top: 1600px !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no##.aid-background-blur:style(filter: none !important)
+aasavis.no,amta.no,an.no,ao.no,auraavis.no,austagderblad.no,avisenagder.no,ba.no,bygdebladet.no,bygdeposten.no,dalane-tidende.no,dt.no,eikerbladet.no,enebakkavis.no,f-b.no,finnmarkdagblad.no,finnmarken.no,firda.no,firdaposten.no,fremover.no,gbnett.no,gjengangeren.no,glomdalen.no,h-avis.no,ha-halden.no,hadeland.no,hardanger-folkeblad.no,helg.no,iharstad.no,indre.no,jarlsbergavis.no,jbl.no,kv.no,kvinnheringen.no,laagendalsposten.no,lierposten.no,lofotposten.no,lyngdalsavis.no,moss-avis.no,nettavisen.no,nidaros.no,noblad.no,nordhordland.no,nordlys.no,nt24.no,oa.no,oblad.no,op.no,ostlendingen.no,oyene.no,r-a.no,rablad.no,ranablad.no,rb.no,retten.no,rha.no,ringblad.no,ringsaker-blad.no,sa.no,sandeavis.no,sandnesposten.no,sb.no,smaalenene.no,sognavis.no,solabladet.no,solungavisa.no,strandbuen.no,svelviksposten.no,ta.no,tb.no,telen.no,tk.no,tvedestrandsposten.no,varingen.no,vestbyavis.no###aid-overlay:style(background: none !important; height: 0px !important; min-height: unset !important)
 ! dagbladet.no,elbil24.no
 ##.CTA-body-faded
 ! digi.no, tu.no, medier24.no, porten.no
@@ -2431,7 +2435,7 @@ vg.no##div[data-test-tag=timestamp] + p + div:before
 ! 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 ! 🇮🇸: ——— And-and-auglýsingshindrun ———
 ! 🇬🇧: ——— Anti-anti-adblocking ———
-! Last updated: 10November2021v2-Extension
+! Last updated: 01December2021v1-Extension
 dagensbyggeri.dk##+js(std, (), 2500)
 eurosport.*##+js(aeld, contextmenu)
 techstart.dk##+js(set, adblock, false)
diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersPrivoxy.action b/NorwegianExperimentalList alternate versions/NordicFiltersPrivoxy.action
index 456da0885..1debd1deb 100644
--- a/NorwegianExperimentalList alternate versions/NordicFiltersPrivoxy.action	
+++ b/NorwegianExperimentalList alternate versions/NordicFiltersPrivoxy.action	
@@ -1286,7 +1286,7 @@
 # 🇳🇴/🇩🇰: ——— Anti-anti-reklameblokkering ———
 # 🇮🇸: ——— And-and-auglýsingshindrun ———
 {+block{🇬🇧: ——— Anti-anti-adblocking ———}}
-# Last updated: 10November2021v2-Extension
+# Last updated: 01December2021v1-Extension
 .elderlyscissors.com
 {+block}
 .vg.no/cnp-assets/src/sites/vg/components/AdblockModal

From 039185ca4ad00bc7224cbe4beea686e141ff022d Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Wed, 1 Dec 2021 12:14:37 +0100
Subject: [PATCH 07/11] Update Dandelion Sprout's Anti-Malware List.txt

---
 Dandelion Sprout's Anti-Malware List.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt
index 076f8a46f..0fe2f4cac 100644
--- a/Dandelion Sprout's Anti-Malware List.txt	
+++ b/Dandelion Sprout's Anti-Malware List.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List
-! Version: 01December2021v1-Beta
+! Version: 01December2021v2-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,7 +13,7 @@
 ! Gabon
 ||ga^$doc,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga
 ! Mali
-||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml
+||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~demonoid.pw|~noic.ml
 ! Equatorial Guinea
 ||gq^$doc,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
 ! Central African Republic
@@ -1019,7 +1019,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||212.192.241.72^$all
 ||37.0.10.83^$all
 ||newstepsco.com^$all
-||duckdns.org^$doc,domain=~www.duckdns.org
+||duckdns.org^$doc,domain=~www.duckdns.org|~checkip.dyndns.com
 @@://duckdns.org^$doc
 ||chse-security-notifications.email^$all
 ||secure-0*.ddnss.ch^$all

From c5f3a0ef007a68969cf3d2c1b28ba6c1d58e5f3b Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Wed, 1 Dec 2021 12:15:09 +0100
Subject: [PATCH 08/11] Update Dandelion Sprout's Anti-Malware List.txt

---
 Dandelion Sprout's Anti-Malware List.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt
index 0fe2f4cac..e860ada0d 100644
--- a/Dandelion Sprout's Anti-Malware List.txt	
+++ b/Dandelion Sprout's Anti-Malware List.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List
-! Version: 01December2021v2-Beta
+! Version: 01December2021v3-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,13 +13,13 @@
 ! Gabon
 ||ga^$doc,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga
 ! Mali
-||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~demonoid.pw|~noic.ml
+||ml^$doc,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml
 ! Equatorial Guinea
 ||gq^$doc,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
 ! Central African Republic
 ||cf^$doc,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf
 ! Palau
-||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw
+||pw^$doc,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw
 ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 ||loan^$doc
 ||agency^$doc

From 9fd893f88b04c6d76a5d06e2a9f108f3b68338c7 Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Wed, 1 Dec 2021 12:21:32 +0100
Subject: [PATCH 09/11] Add files via upload

---
 .../AntiMalwareABP.txt                              |  8 ++++----
 .../AntiMalwareAdGuard.txt                          |  8 ++++----
 .../AntiMalwareAdGuardHome.txt                      |  8 ++++----
 .../AntiMalwareDomains.txt                          |  2 +-
 .../AntiMalwareHosts.txt                            |  2 +-
 .../AntiMalwarePrivoxy.action                       |  2 +-
 .../AntiMalwareTPL.tpl                              |  9 ++++++---
 ...on Sprout's and other adblocker lists' IPs.ipset | 13 ++++++++++++-
 8 files changed, 33 insertions(+), 19 deletions(-)

diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt
index 03d6e2d64..3362df8c6 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
-! Version: 01December2021v1-Beta
+! Version: 01December2021v3-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,13 +13,13 @@
 ! Gabon
 ||ga^$domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga
 ! Mali
-||ml^$domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml
+||ml^$domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml
 ! Equatorial Guinea
 ||gq^$domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
 ! Central African Republic
 ||cf^$domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf
 ! Palau
-||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw
+||pw^$domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw
 ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 ||loan^
 ||agency^
@@ -1488,7 +1488,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 ||37.0.10.83^$popup
 ||newstepsco.com^
 ||newstepsco.com^$popup
-||duckdns.org^$domain=~www.duckdns.org
+||duckdns.org^$domain=~www.duckdns.org|~checkip.dyndns.com
 @@://duckdns.org^
 ||chse-security-notifications.email^
 ||chse-security-notifications.email^$popup
diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt
index 50fd4e4ec..c8088d5ee 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt	
@@ -1,6 +1,6 @@
 [AdGuard versions from ≥2019]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
-! Version: 01December2021v1-Beta
+! Version: 01December2021v3-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,13 +13,13 @@
 ! Gabon
 ||ga^$document,domain=~google.ga|~filtri-dns.ga|~dgdi.ga|~voitures.ga|~economie-gabon.ga
 ! Mali
-||ml^$document,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml
+||ml^$document,domain=~google.ml|~mobili.ml|~melody.ml|~dcod.ml|~info-matin.ml|~amap.ml|~mastodon.ml|~worproject.ml|~nothingprivate.ml|~lingva.ml|~lemmy.ml|~bittor.ml|~noic.ml
 ! Equatorial Guinea
 ||gq^$document,domain=~deimos.gq|~inege.gq|~tvgelive.gq|~comprarcarros.gq
 ! Central African Republic
 ||cf^$document,domain=~google.cf|~rths.cf|~voitures.cf|~assembleenationale-rca.cf|~cps-rca.cf|~acap.cf|~miraculousladybug.cf|~scrat.cf
 ! Palau
-||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw
+||pw^$document,domain=~libgen.pw|~petridish.pw|~palaugov.pw|~dpc.pw|~zikrap.pw|~demonoid.pw
 ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 ||loan^$document
 ||agency^$document
@@ -1019,7 +1019,7 @@ zombooru.com##a[href="http://www.hard55.com"]
 212.192.241.72$network
 37.0.10.83$network
 ||newstepsco.com^$empty,important
-||duckdns.org^$document,domain=~www.duckdns.org
+||duckdns.org^$document,domain=~www.duckdns.org|~checkip.dyndns.com
 @@://duckdns.org^$document
 ||chse-security-notifications.email^$empty,important
 ||secure-0*.ddnss.ch^$empty,important
diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt
index 144764d65..31307d6e8 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home, and for AdGuard for Android/Windows' DNS filtering)
-! Version: 01December2021v1-Beta
+! Version: 01December2021v3-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -13,13 +13,13 @@
 ! Gabon
 ||ga^$denyallow=google.ga|filtri-dns.ga|dgdi.ga|voitures.ga|economie-gabon.ga
 ! Mali
-||ml^$denyallow=google.ml|mobili.ml|melody.ml|dcod.ml|info-matin.ml|amap.ml|mastodon.ml|worproject.ml|nothingprivate.ml|lingva.ml|lemmy.ml
+||ml^$denyallow=google.ml|mobili.ml|melody.ml|dcod.ml|info-matin.ml|amap.ml|mastodon.ml|worproject.ml|nothingprivate.ml|lingva.ml|lemmy.ml|bittor.ml|noic.ml
 ! Equatorial Guinea
 ||gq^$denyallow=deimos.gq|inege.gq|tvgelive.gq|comprarcarros.gq
 ! Central African Republic
 ||cf^$denyallow=google.cf|rths.cf|voitures.cf|assembleenationale-rca.cf|cps-rca.cf|acap.cf|miraculousladybug.cf|scrat.cf
 ! Palau
-||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|zikrap.pw
+||pw^$denyallow=libgen.pw|petridish.pw|palaugov.pw|dpc.pw|zikrap.pw|demonoid.pw
 ! International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 ||loan^
 ||agency^
@@ -845,7 +845,7 @@
 212.192.241.72
 37.0.10.83
 ||newstepsco.com^
-||duckdns.org^$denyallow=www.duckdns.org
+||duckdns.org^$denyallow=www.duckdns.org|checkip.dyndns.com
 @@://duckdns.org^
 ||chse-security-notifications.email^
 ||secure-0*.ddnss.ch^
diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt
index 17f5c1741..68bc30c05 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt	
@@ -1,5 +1,5 @@
 # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
-# Version: 01December2021v1-Beta
+# Version: 01December2021v3-Beta
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 
diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt
index 04226784f..e85a2e590 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt	
@@ -1,5 +1,5 @@
 # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
-# Version: 01December2021v1-Alpha
+# Version: 01December2021v3-Alpha
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 
diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action
index 403e619c5..0582191ba 100644
--- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action	
+++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action	
@@ -1,6 +1,6 @@
 {+block}
 # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
-# Version: 01December2021v1-Alpha
+# Version: 01December2021v3-Alpha
 # Expires: 5 days
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 
diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl
index 2e4d71292..03c96c818 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl	
+++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl	
@@ -1,6 +1,6 @@
 msFilterList
 # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
-# Version: 01December2021v1-Beta
+# Version: 01December2021v3-Beta
 : expires = 5
 # Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -47,7 +47,9 @@ msFilterList
 +d mastodon.ml
 +d worproject.ml
 +d nothingprivate.ml
-+d lingva.ml~lemmy.ml
++d lingva.ml
++d lemmy.ml
++d bittor.ml~noic.ml
 # Equatorial Guinea
 -d gq
 +d deimos.gq
@@ -67,7 +69,8 @@ msFilterList
 +d libgen.pw
 +d petridish.pw
 +d palaugov.pw
-+d dpc.pw~zikrap.pw
++d dpc.pw
++d zikrap.pw~demonoid.pw
 # International topical domains that have consistently horrendous scores on watchlists of bad TLDs, and whose use for legit purposes is practically non-existent.
 
 
diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset
index c10180170..593f80762 100644
--- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset	
+++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset	
@@ -1,5 +1,5 @@
 # Title: Dandelion Sprout's and other adblocker lists' IPs
-# Version: 27November2021v3-Beta
+# Version: 01December2021v1-Beta
 # Expires: 5 days
 # Description: This IP set combines IP and CIDR addresses from plentiful of major adblocker lists. It contains heavily altered content from Dandelion Sprout's Anti-Malware List, Dandelion Sprout's Nordic Filters, EasyList, uBlock Filters, uBlock Filters - Badware Risks, AdGuard Base Filter, AdGuard French Filter, EasyList Germany, ABP Anti-Circumvention Filters, RU AdList, Liste AR, and EasyList Spanish.
 # For more information and details about this list and other lists of mine, go to https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#english
@@ -192,6 +192,17 @@
 115.204.119.237
 163.125.31.46
 163.179.168.44
+110.89.59.135
+113.116.89.1
+119.183.146.191
+153.3.3.226
+182.116.104.6
+60.7.133.200
+122.6.254.201
+110.89.11.167
+171.112.177.90
+115.194.38.143
+61.52.79.32
 192.243.59.12
 192.243.59.13
 192.243.59.20

From b993822b7fd51d709f8ff22d8107719d1d050c81 Mon Sep 17 00:00:00 2001
From: iam-py-test <84232764+iam-py-test@users.noreply.github.com>
Date: Wed, 1 Dec 2021 06:33:19 -0500
Subject: [PATCH 10/11] Address
 https://github.com/DandelionSprout/adfilt/discussions/163#discussioncomment-1726673

---
 LegitimateURLShortener.txt | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/LegitimateURLShortener.txt b/LegitimateURLShortener.txt
index 3cfbd893c..ec5e5c6d3 100644
--- a/LegitimateURLShortener.txt
+++ b/LegitimateURLShortener.txt
@@ -1,5 +1,5 @@
 ! Title: ➗ Actually Legitimate URL Shortener Tool
-! Version: 30November2021v1-Beta
+! Version: 1December2021v1-Beta
 ! Expires: 2 days
 ! Description: In a world dominated by bit.ly, adf.ly, and several thousand other malware cover-up tools, this list reduces the length of URLs in a much more legitimate and transparent manner. Essentially, it automatically removes unnecessary $/& values from the URLs, making them easier to copy from the URL bar and pasting elsewhere as links. Enjoy.
 ! Homepage: https://github.com/DandelionSprout/adfilt/discussions/163
@@ -1947,7 +1947,6 @@ $removeparam=rid,domain=giphy.com
 ||microsoft.com^$removeparam=/^AAAA/
 ||babbel.com^$removeparam=bsc
 ||babbel.com^$removeparam=btp
-||microsoft.com^$removeparam=ru
 ||microsoft.com^$removeparam=destrt
 
 ! http://www.discshop.fi/?id=116426&ad=hintaseuranta&ad_src=hintaseuranta.fi&ad_content=Nintendo+Switch+Pro+Controller%2c+Nintendo+Switch+-peliohjain&ad_prodid=5179300

From f0467658eb5a9ba2b623e0b5ef4a037005aac8be Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Wed, 1 Dec 2021 12:39:27 +0100
Subject: [PATCH 11/11] Removed 1 entry

As per https://github.com/uBlockOrigin/uAssets/pull/10647#issuecomment-983392782
---
 Dandelion Sprout's Anti-Malware List.txt | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt
index e860ada0d..8d9b37593 100644
--- a/Dandelion Sprout's Anti-Malware List.txt	
+++ b/Dandelion Sprout's Anti-Malware List.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List
-! Version: 01December2021v3-Beta
+! Version: 01December2021v4-Beta
 ! Expires: 5 days
 ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -271,7 +271,6 @@ azdll.net##.dllhelper-banner
 /^https?:\/\/[-0-9a-z]*prize[-0-9a-z]+\.li[fv]e\/\?u=[0-9a-z]+&o=[0-9a-z]+/$popup,domain=www.google.*
 ! https://github.com/AdguardTeam/AdguardFilters/issues/58737
 /^https?://(www\.)?[-0-9a-z]{14,}\.fun/[a-z]{10,11}\.php.*/$doc,domain=fun
-/^https://www\.namejp0[1-9]\.xyz/$doc,popup,domain=xyz
 ! https://github.com/AdguardTeam/AdguardFilters/issues/78614
 /^https?:\/\/\d{6}\.xyz\/lucky\/[-a-z]+\/\?t=/$doc,popup,domain=xyz
 /^https?:\/\/[a-z]{6}\.vip\/lucky\/[-a-z]+\/\?t=/$doc,popup,domain=vip