diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index e256e7dcb..a113d4c2a 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ -[Adblock Plus 3.13] +[Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 07December2025v1 +! Version: 07December2025v2 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -70,10 +70,8 @@ www.google.*,ipv6.google.com##a[oncontextmenu][href^="https://books.google."]:up ! Domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. ||adblock.gjtech.net^$doc ||spam404bl.com^$doc -!#if !adguard_app_windows +$doc,ipaddress=109.201.135.46 ||109.201.135.46^$doc -!#endif -*$all,ipaddress=109.201.135.46 ||fredfiber.no^$doc ||securemecca.com^$doc ||1hos.cf^$doc @@ -107,10 +105,8 @@ www.google.*,ipv6.google.com##a[oncontextmenu][href^="https://books.google."]:up ||mandriva.com^$doc ! Fraudulent browser extensions ||ublock.org^$doc -!#if !adguard_app_windows +$doc,ipaddress=138.68.252.54 ||138.68.252.54^$doc -!#endif -*$all,ipaddress=138.68.252.54 ||useragentswitch.com^$all,~inline-font ||dev-nano.com^$all,~inline-font ! Presumed to be fraudulent antivirus extensions on app/extension sites where it's perfectly probable that everyday people could install them. @@ -1041,18 +1037,16 @@ $all,ipaddress=167.99.249.47 ||kmip.net^$all,~inline-font ||0redirc.com^$all,~inline-font,domain=~malware_redirection_trains.* ||iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$doc,ipaddress=5.8.34.26 +$doc,ipaddress=5.8.47.3 +$doc,ipaddress=103.224.182.251 +!#endif +!#if !env_firefox ||5.8.34.26^$doc -!#endif -*$all,ipaddress=5.8.34.26 -!#if !adguard_app_windows ||5.8.47.3^$doc -!#endif -*$all,ipaddress=5.8.47.3 -!#if !adguard_app_windows ||103.224.182.251^$doc !#endif -*$all,ipaddress=103.224.182.251 ! https://github.com/DandelionSprout/adfilt/issues/193 ||holescontracting.com^$all,~inline-font ||doggroomingnews.com^$all,~inline-font @@ -1162,18 +1156,14 @@ $all,ipaddress=95.168.170.165 ||monk.monster^$all,~inline-font ||albumzips.xyz^$all,~inline-font ||aleinvest.xyz^$all,~inline-font -!#if !adguard_app_windows +$doc,ipaddress=5.188.62.36 ||5.188.62.36^$doc -!#endif -*$all,ipaddress=5.188.62.36 ! https://github.com/DandelionSprout/adfilt/issues/223 ||speedupmypcfree.com^$all,~inline-font ! https://github.com/DandelionSprout/adfilt/issues/224 ||ssielearning.com^$all,~inline-font -!#if !adguard_app_windows +$doc,ipaddress=69.49.231.244 ||69.49.231.244^$doc -!#endif -*$all,ipaddress=69.49.231.244 ! https://movsb•0x0•st/users/mia ||5starhdporn.com^$frame,third-party ! https://github.com/DandelionSprout/adfilt/issues/228 @@ -1188,10 +1178,8 @@ $all,ipaddress=95.168.170.165 ! https://github.com/DandelionSprout/adfilt/issues/251#issue-974102211 ||nanorgin.ydns.eu^$all,~inline-font ||yzsnw.com^$all,~inline-font -!#if !adguard_app_windows +$doc,ipaddress=37.34.176.37 ||37.34.176.37^$doc -!#endif -*$all,ipaddress=37.34.176.37 ||pcspeedcat.com^$all,~inline-font ||auslogics.com^$doc ! (https://github.com/DandelionSprout/adfilt/issues/1076) @@ -1208,33 +1196,25 @@ $all,ipaddress=95.168.170.165 ||mgmgmg.com^$all,~inline-font ||temp74.com^$all,~inline-font ||trackwebclick.com^$all,~inline-font,domain=~malware_redirection_trains.* -!#if !adguard_app_windows +$doc,ipaddress=23.111.31.137 +$doc,ipaddress=23.111.88.207 ||23.111.31.137^$doc -!#endif -*$all,ipaddress=23.111.31.137 -!#if !adguard_app_windows ||23.111.88.207^$doc -!#endif -*$all,ipaddress=23.111.88.207 ! https://github.com/DandelionSprout/adfilt/issues/254 ||onesafesoftware.com^$doc ! https://github.com/DandelionSprout/adfilt/issues/257 -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=185.158.250.239 +$all,~inline-font,ipaddress=192.169.69.25 +$all,~inline-font,ipaddress=212.192.241.72 +$all,~inline-font,ipaddress=37.0.10.83 +!#endif +!#if !env_firefox ||185.158.250.239^$all,~inline-font -!#endif -*$all,ipaddress=185.158.250.239 -!#if !adguard_app_windows ||192.169.69.25^$all,~inline-font -!#endif -*$all,ipaddress=192.169.69.25 -!#if !adguard_app_windows ||212.192.241.72^$all,~inline-font -!#endif -*$all,ipaddress=212.192.241.72 -!#if !adguard_app_windows ||37.0.10.83^$all,~inline-font !#endif -*$all,ipaddress=37.0.10.83 ||secure-0*.ddnss.ch^$all,~inline-font ||lucdream.com^$doc ||pesoaniz.com^$doc @@ -1248,10 +1228,8 @@ $all,ipaddress=95.168.170.165 ! https://www•virustotal•com/gui/url/8066b87ad10ddb5466bc307bb48454139572f6c8c8f80a9734275ac89cf966af/detection ! https://www•virustotal•com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection ! https://safeweb•norton•com/report/show?url=192•3•110•170 -!#if !adguard_app_windows +$all,~inline-font,ipaddress=192.3.110.170 ||192.3.110.170^$all,~inline-font -!#endif -*$all,ipaddress=192.3.110.170 ! https://forums•malwarebytes•com/topic/278209-removal-instructions-for-socialsearchconverter/ ||socialsearchconverter.com^$doc ||install.socialsearchconverter.com^$all,~inline-font @@ -1276,10 +1254,8 @@ $all,ipaddress=95.168.170.165 ! https://www•virustotal•com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community ! https://www•virustotal•com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection ! https://www•virustotal•com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection -!#if !adguard_app_windows +$all,~inline-font,ipaddress=91.241.19.38 ||91.241.19.38^$all,~inline-font -!#endif -*$all,ipaddress=91.241.19.38 ! https://www•virustotal•com/gui/url/46e095c35d83e2dd0b98df4b5844d3d87948de0c930a618600121020a514c801/detection ! https://safeweb•norton•com/report/show?url=telete•in ! https://www•siteadvisor•com/sitereport•html?url=telete•in @@ -1289,91 +1265,61 @@ $all,ipaddress=95.168.170.165 ||kiff.tech^$all,~inline-font ! https://www•virustotal•com/gui/domain/kiff•tech/relations ! https://www•virustotal•com/gui/url/dc038496b1b5358b97f89440135ec91258b406c40859a2cd95983dc7a81e0cfa/detection -!#if !adguard_app_windows +$doc,ipaddress=45.90.58.90 ||45.90.58.90^$doc -!#endif -*$all,ipaddress=45.90.58.90 ! https://www•virustotal•com/gui/file/e565ba89d034418fd26a5f642f6eeee4d72ee3b8dc69523419b7ca8dfd452730/community ! https://www•virustotal•com/gui/url/e3a9189a1e1256beba8e0fc3abfeab6acb09f7f8cabfd973e22be9f77bb6886f/detection -!#if !adguard_app_windows +$all,~inline-font,ipaddress=95.85.89.98 ||95.85.89.98^$all,~inline-font -!#endif -*$all,ipaddress=95.85.89.98 ! https://github.com/DandelionSprout/adfilt/issues/267 ||mediafire.com/file/pj9jdm7iznc4d51/tekhacksnet_multi_loader.rar^$doc ! https://github.com/DandelionSprout/adfilt/pull/278 !! https://www.virustotal.com/gui/file/da75c85fe037f9ff9ebbbd0b37dd2ff154f5e70a0dc6870286e0d3df6b8f246f/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=139.28.37.49 ||139.28.37.49^$all,~inline-font -!#endif -*$all,ipaddress=139.28.37.49 !! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community -!#if !adguard_app_windows ://35.194.188.37^$all,~inline-font -!#endif -*$all,ipaddress=35.194.188.37 +$all,ipaddress=35.194.188.37 !! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community !! https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=91.243.121.19 ||91.243.121.19^$all,~inline-font -!#endif -*$all,ipaddress=91.243.121.19 !! https://www.virustotal.com/gui/file/9f154115fa8045aa05f15f7cd1de9623ebe32e8ea400279ecb5dfa3596952e3b/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=103.169.90.205 ||103.169.90.205^$all,~inline-font -!#endif -*$all,ipaddress=103.169.90.205 ! https://github.com/DandelionSprout/adfilt/pull/281 ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=125.44.43.45 +$all,~inline-font,ipaddress=182.121.8.240 +$all,~inline-font,ipaddress=42.235.183.74 +$all,~inline-font,ipaddress=78.36.32.242 +$all,~inline-font,ipaddress=115.50.2.119 +$all,~inline-font,ipaddress=115.50.110.163 +$all,~inline-font,ipaddress=119.179.84.145 +$all,~inline-font,ipaddress=188.120.50.98 +$all,~inline-font,ipaddress=190.238.183.5 +$all,~inline-font,ipaddress=27.220.253.78 +!#endif +!#if !env_firefox ||125.44.43.45^$all,~inline-font -!#endif -*$all,ipaddress=125.44.43.45 -!#if !adguard_app_windows ||182.121.8.240^$all,~inline-font -!#endif -*$all,ipaddress=182.121.8.240 -!#if !adguard_app_windows ||42.235.183.74^$all,~inline-font -!#endif -*$all,ipaddress=42.235.183.74 -!#if !adguard_app_windows ||78.36.32.242^$all,~inline-font -!#endif -*$all,ipaddress=78.36.32.242 -!#if !adguard_app_windows ||115.50.2.119^$all,~inline-font -!#endif -*$all,ipaddress=115.50.2.119 -!#if !adguard_app_windows ||115.50.110.163^$all,~inline-font -!#endif -*$all,ipaddress=115.50.110.163 -!#if !adguard_app_windows ||119.179.84.145^$all,~inline-font -!#endif -*$all,ipaddress=119.179.84.145 -!#if !adguard_app_windows ||188.120.50.98^$all,~inline-font -!#endif -*$all,ipaddress=188.120.50.98 -!#if !adguard_app_windows ||190.238.183.5^$all,~inline-font -!#endif -*$all,ipaddress=190.238.183.5 -!#if !adguard_app_windows ||27.220.253.78^$all,~inline-font !#endif -*$all,ipaddress=27.220.253.78 ! https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community ||esetnode32-antiviru.ydns.eu^$all,~inline-font ! https://www•joesandbox•com/analysis/486636/0/html#domains ||aieov.com^$all,~inline-font ! Relations to the original domain -!#if !adguard_app_windows +$all,~inline-font,ipaddress=192.3.194.242 ||192.3.194.242^$all,~inline-font -!#endif -*$all,ipaddress=192.3.194.242 ||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^$all,~inline-font ||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^$all,~inline-font ||avira-antivirus.ydns.eu^$all,~inline-font @@ -1410,21 +1356,15 @@ $all,ipaddress=95.168.170.165 ||cd.org^$doc ! https://www•virustotal•com/gui/file/78f490e503c86eaaff5760197b9ff5308ed6e03161af13194a6c1e0cd95422de/community ! https://github.com/DandelionSprout/adfilt/commit/f7f114945c83b339be5cdd848e229680d9918abb#commitcomment-57642875 -!#if !adguard_app_windows +$all,~inline-font,ipaddress=23.94.26.138 ||23.94.26.138^$all,~inline-font -!#endif -*$all,ipaddress=23.94.26.138 ! https://github.com/DandelionSprout/adfilt/pull/298 ! https://www•virustotal•com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=205.185.126.200 ||205.185.126.200^$all,~inline-font -!#endif -*$all,ipaddress=205.185.126.200 ! https://www•virustotal•com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=185.243.56.167 ||185.243.56.167^$all,~inline-font -!#endif -*$all,ipaddress=185.243.56.167 ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community !#if env_firefox $all,ipaddress=1.0.218.230 @@ -1527,22 +1467,18 @@ $all,ipaddress=221.208.4.56 ! https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community ||pcae.de^$doc ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=117.196.49.21 +$all,~inline-font,ipaddress=115.55.54.234 +$all,~inline-font,ipaddress=115.52.17.123 +$all,~inline-font,ipaddress=182.59.69.21 +!#endif +!#if !env_firefox ||117.196.49.21^$all,~inline-font -!#endif -*$all,ipaddress=117.196.49.21 -!#if !adguard_app_windows ||115.55.54.234^$all,~inline-font -!#endif -*$all,ipaddress=115.55.54.234 -!#if !adguard_app_windows ||115.52.17.123^$all,~inline-font -!#endif -*$all,ipaddress=115.52.17.123 -!#if !adguard_app_windows ||182.59.69.21^$all,~inline-font !#endif -*$all,ipaddress=182.59.69.21 ! https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community ||chip-secured-download.de^$all,~inline-font ! https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb @@ -1563,10 +1499,8 @@ $all,ipaddress=221.208.4.56 ||realdefen.se^$doc ! Vermilion Strike ! https://www•virustotal•com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations -!#if !adguard_app_windows +$all,~inline-font,ipaddress=160.202.163.100 ||160.202.163.100^$all,~inline-font -!#endif -*$all,ipaddress=160.202.163.100 ! https://www•virustotal•com/gui/ip-address/160•202•163•100/relations ||microsoftkernel.com^$all,~inline-font ||microsofthk.com^$all,~inline-font @@ -1578,20 +1512,14 @@ $all,ipaddress=221.208.4.56 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-944612753 ! https://github.com/DandelionSprout/adfilt/pull/303 ! https://www•virustotal•com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=45.95.169.115 ||45.95.169.115^$all,~inline-font -!#endif -*$all,ipaddress=45.95.169.115 ! https://www•virustotal•com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=45.148.120.80 ||45.148.120.80^$all,~inline-font -!#endif -*$all,ipaddress=45.148.120.80 ! https://www•virustotal•com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=85.239.33.9 ||85.239.33.9^$all,~inline-font -!#endif -*$all,ipaddress=85.239.33.9 ! Relations to the domain above ||adminsys.serveftp.com^$all,~inline-font ||amazbaidu.serveftp.com^$all,~inline-font @@ -1608,15 +1536,11 @@ $all,ipaddress=221.208.4.56 ||1log-wellsfargo.serveftp.com^$all,~inline-font ||eposcardokubo.serveftp.com^$all,~inline-font ! https://www•virustotal•com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=107.173.176.183 ||107.173.176.183^$all,~inline-font -!#endif -*$all,ipaddress=107.173.176.183 ! https://www•virustotal•com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=45.148.120.171 ||45.148.120.171^$all,~inline-font -!#endif -*$all,ipaddress=45.148.120.171 ! https://twitter•com/soranker0/status/1449491402409185283 ://disordgift.$all,~inline-font ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 @@ -1624,10 +1548,8 @@ $all,ipaddress=221.208.4.56 ||google-yandex.$doc /^(.*://|.*\.)?[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz(/.*)?$/$doc ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-951321929 -!#if !adguard_app_windows +$all,~inline-font,ipaddress=159.148.186.228 ||159.148.186.228^$all,~inline-font -!#endif -*$all,ipaddress=159.148.186.228 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains ||yotube.com^$all,~inline-font ||security-scanner.xyz^$all,~inline-font @@ -1712,42 +1634,32 @@ $all,ipaddress=68.197.33.124 ||68.197.33.124^$all,~inline-font !#endif ! https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=198.23.255.14 ||198.23.255.14^$all,~inline-font -!#endif -*$all,ipaddress=198.23.255.14 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs ||trumops.com^$doc ||runmodes.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=91.121.67.60 +$all,~inline-font,ipaddress=172.67.186.189 ||91.121.67.60^$all,~inline-font -!#endif -*$all,ipaddress=91.121.67.60 -!#if !adguard_app_windows ||172.67.186.189^$all,~inline-font -!#endif -*$all,ipaddress=172.67.186.189 ! https://scammer•info/t/mcafee-phish/83725 ||securefirst.us-east-1.linodeobjects.com^$all,~inline-font ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=39.65.72.211 +$all,~inline-font,ipaddress=42.238.151.197 +$all,~inline-font,ipaddress=27.213.60.53 +$all,~inline-font,ipaddress=115.56.169.134 +!#endif +!#if !env_firefox ||39.65.72.211^$all,~inline-font -!#endif -*$all,ipaddress=39.65.72.211 -!#if !adguard_app_windows ||42.238.151.197^$all,~inline-font -!#endif -*$all,ipaddress=42.238.151.197 -!#if !adguard_app_windows ||27.213.60.53^$all,~inline-font -!#endif -*$all,ipaddress=27.213.60.53 -!#if !adguard_app_windows ||115.56.169.134^$all,~inline-font !#endif -*$all,ipaddress=115.56.169.134 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md ||yasir252.com^$all,~inline-font ||safelink.kadal.club^$doc @@ -1759,15 +1671,11 @@ $all,ipaddress=68.197.33.124 ||yourladiefun.life^$all,~inline-font ! https://www•virustotal•com/gui/url/a2524bba49ae71297d2b408b30d058700d9c80b5b1154924cafe190ec3e605a6/detection ! https://www•virustotal•com/gui/file/2b2628a50d3b39b0fa2395d487bf62b00e37cdae847ff76ee58399bbe4e9f7b3/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=194.87.138.20 ||194.87.138.20^$all,~inline-font -!#endif -*$all,ipaddress=194.87.138.20 ! https://www•virustotal•com/gui/file/b320bc7a9151d70daca038c4356ca89bfcd4918bcd6f0f73683a27a6a72467ae/community -!#if !adguard_app_windows +$all,~inline-font,ipaddress=103.167.92.73 ||103.167.92.73^$all,~inline-font -!#endif -*$all,ipaddress=103.167.92.73 ! https://www•virustotal•com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community ||bursakulis.com^$all,~inline-font ! https://www•virustotal•com/gui/url/b333c49efa4d399e65c5e2d96a905b380acbca58a3e3052b7bd7cfcb3e0e81ee @@ -1789,38 +1697,26 @@ $all,ipaddress=68.197.33.124 ||yunosurveys.com^$all,~inline-font ! https://github.com/uBlockOrigin/uAssets/pull/10620 ! https://www•virustotal•com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=58.249.74.79 +$all,~inline-font,ipaddress=27.45.14.109 +$all,~inline-font,ipaddress=27.40.101.191 +$all,~inline-font,ipaddress=27.45.119.22 +$all,~inline-font,ipaddress=27.47.73.159 +$all,~inline-font,ipaddress=115.204.119.237 +$all,~inline-font,ipaddress=163.125.31.46 +$all,~inline-font,ipaddress=163.179.168.44 +!#endif +!#if !env_firefox ||58.249.74.79^$all,~inline-font -!#endif -*$all,ipaddress=58.249.74.79 -!#if !adguard_app_windows ||27.45.14.109^$all,~inline-font -!#endif -*$all,ipaddress=27.45.14.109 -!#if !adguard_app_windows ||27.40.101.191^$all,~inline-font -!#endif -*$all,ipaddress=27.40.101.191 -!#if !adguard_app_windows ||27.45.119.22^$all,~inline-font -!#endif -*$all,ipaddress=27.45.119.22 -!#if !adguard_app_windows ||27.47.73.159^$all,~inline-font -!#endif -*$all,ipaddress=27.47.73.159 -!#if !adguard_app_windows ||115.204.119.237^$all,~inline-font -!#endif -*$all,ipaddress=115.204.119.237 -!#if !adguard_app_windows ||163.125.31.46^$all,~inline-font -!#endif -*$all,ipaddress=163.125.31.46 -!#if !adguard_app_windows ||163.179.168.44^$all,~inline-font !#endif -*$all,ipaddress=163.179.168.44 ! https://github.com/uBlockOrigin/uAssets/pull/10647 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md ||money-mod.com^$doc @@ -1833,50 +1729,32 @@ $all,ipaddress=68.197.33.124 ||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$all,~inline-font ||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$all,~inline-font ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=110.89.59.135 +$all,~inline-font,ipaddress=113.116.89.1 +$all,~inline-font,ipaddress=119.183.146.191 +$all,~inline-font,ipaddress=153.3.3.226 +$all,~inline-font,ipaddress=182.116.104.6 +$all,~inline-font,ipaddress=60.7.133.200 +$all,~inline-font,ipaddress=122.6.254.201 +$all,~inline-font,ipaddress=110.89.11.167 +$all,~inline-font,ipaddress=171.112.177.90 +$all,~inline-font,ipaddress=115.194.38.143 +$all,~inline-font,ipaddress=61.52.79.32 +!#endif +!#if !env_firefox ||110.89.59.135^$all,~inline-font -!#endif -*$all,ipaddress=110.89.59.135 -!#if !adguard_app_windows ||113.116.89.1^$all,~inline-font -!#endif -*$all,ipaddress=113.116.89.1 -!#if !adguard_app_windows ||119.183.146.191^$all,~inline-font -!#endif -*$all,ipaddress=119.183.146.191 -!#if !adguard_app_windows ||153.3.3.226^$all,~inline-font -!#endif -*$all,ipaddress=153.3.3.226 -!#if !adguard_app_windows ||182.116.104.6^$all,~inline-font -!#endif -*$all,ipaddress=182.116.104.6 -!#if !adguard_app_windows ||60.7.133.200^$all,~inline-font -!#endif -*$all,ipaddress=60.7.133.200 -!#if !adguard_app_windows ||122.6.254.201^$all,~inline-font -!#endif -*$all,ipaddress=122.6.254.201 -!#if !adguard_app_windows ||110.89.11.167^$all,~inline-font -!#endif -*$all,ipaddress=110.89.11.167 -!#if !adguard_app_windows ||171.112.177.90^$all,~inline-font -!#endif -*$all,ipaddress=171.112.177.90 -!#if !adguard_app_windows ||115.194.38.143^$all,~inline-font -!#endif -*$all,ipaddress=115.194.38.143 -!#if !adguard_app_windows ||61.52.79.32^$all,~inline-font !#endif -*$all,ipaddress=61.52.79.32 ! https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 ://ups-dk.$doc,denyallow=dk|nu|se|no|fo|gl|ups.com,domain=ups-dk.* ! https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 @@ -1893,10 +1771,8 @@ $all,ipaddress=68.197.33.124 ! https://www•nrk.no/vestfoldogtelemark/1.15750360 ||dundeehills.group^$all,~inline-font !+ NOT_OPTIMIZED -!#if !adguard_app_windows +$doc,ipaddress=132.148.220.142 ||132.148.220.142^$doc -!#endif -*$all,ipaddress=132.148.220.142 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-986306768 ||chess-progress.ru^$doc ! https://scammer•info/t/there-are-things-in-the-game-that-will-interest-you-trojan/84908 @@ -1913,56 +1789,38 @@ $all,ipaddress=68.197.33.124 ||p-stn.net^$all,~inline-font ! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md ||haxpc.net^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=52.53.243.52 +$all,~inline-font,ipaddress=34.201.22.10 ||52.53.243.52^$all,~inline-font -!#endif -*$all,ipaddress=52.53.243.52 -!#if !adguard_app_windows ||34.201.22.10^$all,~inline-font -!#endif -*$all,ipaddress=34.201.22.10 ! https://scammer•info/t/crypto-scammers-onceagain/85354 ||business.google.com/website/billyandscapedesign^$all,~inline-font ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=123.10.225.196 +$all,~inline-font,ipaddress=122.192.106.84 +$all,~inline-font,ipaddress=172.88.199.9 +$all,~inline-font,ipaddress=114.38.176.185 +$all,~inline-font,ipaddress=61.52.97.35 +$all,~inline-font,ipaddress=27.206.181.208 +$all,~inline-font,ipaddress=124.163.130.175 +$all,~inline-font,ipaddress=118.75.87.102 +!#endif +!#if !env_firefox ||123.10.225.196^$all,~inline-font -!#endif -*$all,ipaddress=123.10.225.196 -!#if !adguard_app_windows ||122.192.106.84^$all,~inline-font -!#endif -*$all,ipaddress=122.192.106.84 -!#if !adguard_app_windows ||172.88.199.9^$all,~inline-font -!#endif -*$all,ipaddress=172.88.199.9 -!#if !adguard_app_windows ||114.38.176.185^$all,~inline-font -!#endif -*$all,ipaddress=114.38.176.185 -!#if !adguard_app_windows ||61.52.97.35^$all,~inline-font -!#endif -*$all,ipaddress=61.52.97.35 -!#if !adguard_app_windows ||27.206.181.208^$all,~inline-font -!#endif -*$all,ipaddress=27.206.181.208 -!#if !adguard_app_windows ||124.163.130.175^$all,~inline-font -!#endif -*$all,ipaddress=124.163.130.175 -!#if !adguard_app_windows ||118.75.87.102^$all,~inline-font !#endif -*$all,ipaddress=118.75.87.102 ! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md ! https://github.com/DevSpen/links/pull/3 ! https://bazaar•abuse•ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ -!#if !adguard_app_windows +$all,~inline-font,ipaddress=134.122.115.190 ||134.122.115.190^$all,~inline-font -!#endif -*$all,ipaddress=134.122.115.190 ||cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com^$all,~inline-font ! https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 ||viewty.xyz^$all,~inline-font @@ -1979,10 +1837,8 @@ $all,ipaddress=68.197.33.124 ||microsoftedge.microsoft.com/addons/detail/ecosia-the-search-engin/fhfidmlnclkepgapcephbaciajegheco^$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/103475 ||ru.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=141.8.226.34 ||141.8.226.34^$all,~inline-font -!#endif -*$all,ipaddress=141.8.226.34 ! https://github.com/AdguardTeam/AdguardFilters/issues/108571 ||ston-app.com^$all,~inline-font ! fake human verification scam @@ -1994,10 +1850,8 @@ $all,ipaddress=68.197.33.124 ! Other ||crashfixes.com^$all,~inline-font ! https://www•virustotal•com/gui/file/9d40ae0439ddc594b2cf64e21ad0fdea9bb440524298e3a6bcfcc1fb417f1ed2/relations -!#if !adguard_app_windows +$all,~inline-font,ipaddress=91.240.118.172 ||91.240.118.172^$all,~inline-font -!#endif -*$all,ipaddress=91.240.118.172 ! "Press Allow to continue" ||kuyhaa-mee.com^$all,~inline-font ||upload-4ever.com^$doc @@ -2024,10 +1878,8 @@ $all,ipaddress=68.197.33.124 ||activatorwin.com^$all,~inline-font ||freeversioncrack.com^$document ||top3hostngc.xyz^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=198.199.120.251 ||198.199.120.251^$all,~inline-font -!#endif -*$all,ipaddress=198.199.120.251 ! https://www•telia•no/kundeservice/mobil/malware-flubot-android/ !+ NOT_OPTIMIZED /^https?://(www\.)?[a-z0-9-]{1,}\.[a-z]{2,17}/[a-z0-9]/\?[a-z0-9.-]{8,}$/$doc @@ -2036,46 +1888,38 @@ $all,ipaddress=68.197.33.124 ||findsexy.life^$all,~inline-font ||findsolemate.life^$all,~inline-font ||dating-galaxy.life^$all,~inline-font -!#if !adguard_app_windows +$doc,ipaddress=195.201.253.130 +$doc,ipaddress=195.201.253.131 ||195.201.253.130^$doc -!#endif -*$all,ipaddress=195.201.253.130 -!#if !adguard_app_windows ||195.201.253.131^$doc -!#endif -*$all,ipaddress=195.201.253.131 ! The bottom download button on https://www•sushichop•com/ ||installiq.com^$all,~inline-font /trk2/*?lddomain=$doc,domain=~very_likely_a_malware_redirection.* ||cpmverdirect.com^$doc,domain=~malware_redirection_trains.* -!#if !adguard_app_windows +!#if env_firefox +$doc,ipaddress=15.197.244.48 +$doc,ipaddress=96.47.230.67 +$doc,ipaddress=96.47.230.68 +$doc,ipaddress=96.47.230.69 +$doc,ipaddress=96.47.230.70 +!#endif +!#if !env_firefox ||15.197.244.48^$doc -!#endif -*$all,ipaddress=15.197.244.48 -!#if !adguard_app_windows ||96.47.230.67^$doc -!#endif -*$all,ipaddress=96.47.230.67 -!#if !adguard_app_windows ||96.47.230.68^$doc -!#endif -*$all,ipaddress=96.47.230.68 -!#if !adguard_app_windows ||96.47.230.69^$doc -!#endif -*$all,ipaddress=96.47.230.69 -!#if !adguard_app_windows ||96.47.230.70^$doc !#endif -*$all,ipaddress=96.47.230.70 ! https://securitytrails•com/list/ns/ns1•fastthinkingdns•com ||highercaptcha-settle.$all,~inline-font ||highercaptchasettle.$all,~inline-font ||ns*.fastthinkingdns.com^$all,~inline-font ||top-captcharesolver.$all,~inline-font +!#if env_firefox $all,ipaddress=/^46\.161\.27\.[12]?\d?\d$/ $all,ipaddress=/^78\.128\.112\.[12]?\d?\d$/ $all,ipaddress=/^179\.60\.146\.[12]?\d?\d$/ +!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/121544 ||trafredirtds.com^$all,~inline-font,domain=~malware_redirection_trains.* ||com/landers/iphone*_spin$doc @@ -2088,10 +1932,8 @@ $all,ipaddress=/^179\.60\.146\.[12]?\d?\d$/ ||kdmrqw.com^$all,~inline-font ||kdmttk.com^$all,~inline-font ||uuidtsinc.net^$all,~inline-font -!#if !adguard_app_windows +$doc,ipaddress=31.220.27.134 ||31.220.27.134^$doc -!#endif -*$all,ipaddress=31.220.27.134 ! https://github.com/AdguardTeam/AdguardFilters/issues/122757 ://adbrbk.$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/123544 @@ -2216,6 +2058,7 @@ $all,ipaddress=/^179\.60\.146\.[12]?\d?\d$/ ||z-bounty.icu^$all,~inline-font ||z-game.icu^$all,~inline-font ||z-prize.icu^$all,~inline-font +!#if env_firefox $all,ipaddress=/^178\.253\.[0-7]\.[12]?\d?\d$/ $all,ipaddress=/^178\.253\.14\.[12]?\d?\d$/ $all,ipaddress=/^178\.253\.15\.[12]?\d?\d$/ @@ -2224,32 +2067,23 @@ $all,ipaddress=/^178\.253\.3[04-7]\.[12]?\d?\d$/ $all,ipaddress=/^178\.253\.46\.[12]?\d?\d$/ $all,ipaddress=/^178\.253\.47\.[12]?\d?\d$/ $all,ipaddress=/^178\.253\.54\.[12]?\d?\d$/ -!#if !adguard_app_windows +$all,~inline-font,ipaddress=85.17.31.152 +$all,~inline-font,ipaddress=95.211.26.202 +!#endif ||85.17.31.152^$all,~inline-font -!#endif -*$all,ipaddress=85.17.31.152 -!#if !adguard_app_windows ||95.211.26.202^$all,~inline-font -!#endif -*$all,ipaddress=95.211.26.202 ! https://kommunikasjon•ntb•no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 -!#if !adguard_app_windows +$doc,ipaddress=158.247.212.220 +$doc,ipaddress=165.227.168.212 ||158.247.212.220^$doc -!#endif -*$all,ipaddress=158.247.212.220 -!#if !adguard_app_windows ||165.227.168.212^$doc -!#endif -*$all,ipaddress=165.227.168.212 ! https://new•reddit•com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ ! https://dinside•dagbladet•no/mobil/ikke-la-deg-friste/76730599 ! https://github.com/AdguardTeam/AdguardFilters/issues/125285 ||garbiaes.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=23.81.64.183 ||23.81.64.183^$all,~inline-font -!#endif -*$all,ipaddress=23.81.64.183 ! https://github.com/AdguardTeam/AdguardFilters/issues/125300 ||inmewa.com^$all,~inline-font ||omshellderom.com^$all,~inline-font @@ -2264,10 +2098,8 @@ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ ||stelronsi.net^$all ||tadaickaipt.com^$all ||vekeltaizy.net^$all -!#if !adguard_app_windows +$doc,ipaddress=139.45.197.236 ||139.45.197.236^$doc -!#endif -*$all,ipaddress=139.45.197.236 ! https://github.com/AdguardTeam/AdguardFilters/issues/128029 ||becovi.com^$all,~inline-font ||becovi.co.uk^$all,~inline-font @@ -2283,18 +2115,16 @@ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ ||tutatagliente.com^$doc,popup ||potestainsula.com^$doc,popup ||motherpipe.net^$doc -!#if !adguard_app_windows +!#if env_firefox +$doc,ipaddress=51.91.66.125 +$doc,ipaddress=51.178.76.105 +$doc,ipaddress=147.135.253.55 +!#endif +!#if !env_firefox ||51.91.66.125^$doc -!#endif -*$all,ipaddress=51.91.66.125 -!#if !adguard_app_windows ||51.178.76.105^$doc -!#endif -*$all,ipaddress=51.178.76.105 -!#if !adguard_app_windows ||147.135.253.55^$doc !#endif -*$all,ipaddress=147.135.253.55 ! https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade) ! https://github.com/AdguardTeam/AdguardFilters/issues/129414 !+ NOT_OPTIMIZED @@ -2302,14 +2132,10 @@ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ !+ NOT_OPTIMIZED /^http://imgblaze.net/[a-z0-9]{6}$/$third-party,subdocument ! https://github.com/AdguardTeam/AdguardFilters/issues/131156 -!#if !adguard_app_windows +$doc,ipaddress=146.19.169.98 +$doc,ipaddress=146.19.169.99 ||146.19.169.98^$doc -!#endif -*$all,ipaddress=146.19.169.98 -!#if !adguard_app_windows ||146.19.169.99^$doc -!#endif -*$all,ipaddress=146.19.169.99 ! https://github.com/AdguardTeam/AdguardFilters/issues/132079 /pushredirect/?$doc,domain=~malware_redirection_trains.* ! https://github.com/AdguardTeam/AdguardFilters/issues/134355 @@ -3822,18 +3648,14 @@ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ ||zz1200.com^$all,~inline-font ||niderschlagsradar.de^$all,~inline-font ||2c236979-b1bb-4c7a-915c-df74dbad0d8c.s3.ap-northeast-2.amazonaws.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=69.162.80.56 ||69.162.80.56^$all,~inline-font -!#endif -*$all,ipaddress=69.162.80.56 ! https://github.com/AdguardTeam/AdguardFilters/issues/134903 ! Random Discord servers ||newntflix-$doc,popup ||giveawaycord.$all,~inline-font -!#if !adguard_app_windows +$doc,ipaddress=162.241.124.200 ||162.241.124.200^$doc -!#endif -*$all,ipaddress=162.241.124.200 ! https://github.com/AdguardTeam/AdguardFilters/issues/135815 ||adsstar.in^$doc,popup ||clickcafe.in^$doc,popup @@ -3845,10 +3667,8 @@ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ ||tnlink.in^$doc,popup ||tnvalue.in^$doc,popup ||webhostingtips.club^$doc,popup -!#if !adguard_app_windows +$doc,ipaddress=157.90.71.190 ||157.90.71.190^$doc -!#endif -*$all,ipaddress=157.90.71.190 ! https://github.com/AdguardTeam/AdguardFilters/issues/135924 ||beskittyan.com^$all,~inline-font ||cadbitff.com^$all,~inline-font @@ -3864,10 +3684,8 @@ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ ||uponelectabuzzor.club^$all,~inline-font ||vethojoa.net^$all,~inline-font ||wumpeeps.net^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=139.45.197.239 ||139.45.197.239^$all,~inline-font -!#endif -*$all,ipaddress=139.45.197.239 ! https://github.com/AdguardTeam/AdguardFilters/issues/136390 ||glthub.$document,popup ! https://app•any•run/tasks/67907c11-6877-4c38-932f-2cf09ee4e434 @@ -3888,18 +3706,16 @@ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ ||uxobx.xyz^$all,~inline-font ||vayamuegn.icu^$all,~inline-font ||wehiqes.xyz^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$doc,ipaddress=44.228.230.225 +$doc,ipaddress=50.112.124.170 +$doc,ipaddress=100.20.104.229 +!#endif +!#if !env_firefox ||44.228.230.225^$doc -!#endif -*$all,ipaddress=44.228.230.225 -!#if !adguard_app_windows ||50.112.124.170^$doc -!#endif -*$all,ipaddress=50.112.124.170 -!#if !adguard_app_windows ||100.20.104.229^$doc !#endif -*$all,ipaddress=100.20.104.229 ! Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread ||link.sv^$doc,popup ||4.fo^$doc,popup @@ -3909,28 +3725,22 @@ $all,ipaddress=/^162\.241\.115\.[12]?\d?\d$/ ||gsecurecontent.com^$all,~inline-font ||pressizer.net^$all,~inline-font ||sapino.net^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$doc,ipaddress=44.236.213.34 +$doc,ipaddress=52.24.156.12 +$doc,ipaddress=52.25.6.134 +$doc,ipaddress=100.20.13.49 +!#endif +!#if !env_firefox ||44.236.213.34^$doc -!#endif -*$all,ipaddress=44.236.213.34 -!#if !adguard_app_windows ||52.24.156.12^$doc -!#endif -*$all,ipaddress=52.24.156.12 -!#if !adguard_app_windows ||52.25.6.134^$doc -!#endif -*$all,ipaddress=52.25.6.134 -!#if !adguard_app_windows ||100.20.13.49^$doc !#endif -*$all,ipaddress=100.20.13.49 ! https://github.com/AdguardTeam/AdguardFilters/issues/139667 ||goldmesoil.live^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=51.68.87.229 ||51.68.87.229^$all,~inline-font -!#endif -*$all,ipaddress=51.68.87.229 ! https://github.com/DandelionSprout/adfilt/issues/747 ||2022crucialcatch.store^$all,~inline-font ||adidascostarica.com^$all,~inline-font @@ -4342,6 +4152,7 @@ $all,ipaddress=/^165\.231\.154\.[12]?\d?\d$/ ||nanavypredaj.sk^$all,~inline-font ||salononfranceonline.com^$all,~inline-font ||zapatillasmcqueen.com^$all,~inline-font +!#if env_firefox $all,ipaddress=/^165\.231\.10\.[12]?\d?\d$/ $all,ipaddress=/^165\.231\.152\.[12]?\d?\d$/ $all,ipaddress=/^196\.196\.52\.[12]?\d?\d$/ @@ -4350,6 +4161,7 @@ $all,ipaddress=/^196\.240\.121\.[12]?\d?\d$/ $all,ipaddress=/^196\.242\.179\.[12]?\d?\d$/ $all,ipaddress=/^196\.245\.52\.[12]?\d?\d$/ $all,ipaddress=/^196\.245\.56\.[12]?\d?\d$/ +!#endif ! https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/ ://rufus.download.$doc,popup ://virtualbox.download.$doc,popup @@ -4363,18 +4175,16 @@ $all,ipaddress=/^196\.245\.56\.[12]?\d?\d$/ ||project-obs.com^$all,~inline-font ||studio-obs.com^$all,~inline-font ||webull-download.$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$doc,ipaddress=185.106.94.139 +$doc,ipaddress=45.90.109.196 +$all,~inline-font,ipaddress=91.229.23.200 +!#endif +!#if !env_firefox ||185.106.94.139^$doc -!#endif -*$all,ipaddress=185.106.94.139 -!#if !adguard_app_windows ||45.90.109.196^$doc -!#endif -*$all,ipaddress=45.90.109.196 -!#if !adguard_app_windows ||91.229.23.200^$all,~inline-font !#endif -*$all,ipaddress=91.229.23.200 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872 ! https://github.com/AdguardTeam/AdguardFilters/issues/144514 ||bonusgift.life^$all,~inline-font @@ -4389,19 +4199,13 @@ $all,ipaddress=/^196\.245\.56\.[12]?\d?\d$/ ||thebestprizes.life^$all,~inline-font ||winearth.life^$all,~inline-font ||winpulse.life^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=185.155.184.98 +$all,~inline-font,ipaddress=194.110.247.242 ||185.155.184.98^$all,~inline-font -!#endif -*$all,ipaddress=185.155.184.98 -!#if !adguard_app_windows ||194.110.247.242^$all,~inline-font -!#endif -*$all,ipaddress=194.110.247.242 ! https://new•reddit•com/r/engrish/comments/10zs6f6/low_budget_scam/ -!#if !adguard_app_windows +$doc,ipaddress=54.219.218.169 ||54.219.218.169^$doc -!#endif -*$all,ipaddress=54.219.218.169 ! https://new•reddit•com/r/engrish/comments/10z8r2u/well_you_tried/ ||0365alert.com^$all,~inline-font ||0365online.com^$all,~inline-font @@ -4806,17 +4610,13 @@ $all,ipaddress=/^196\.245\.56\.[12]?\d?\d$/ ||yourlivingequity.com^$all,~inline-font ||yourticketchance.com^$all,~inline-font ||yourorderupdate.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=64.132.201.92 ||64.132.201.92^$all,~inline-font -!#endif -*$all,ipaddress=64.132.201.92 ! https://www•adressa•no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener ||jatvpn.softether.net^$all,~inline-font ||jatcraft.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=209.141.51.49 ||209.141.51.49^$all,~inline-font -!#endif -*$all,ipaddress=209.141.51.49 ://soekpakke*.blogspot.com^$all,~inline-font ||post-norway.web.app^$all,~inline-font ! https://github.com/AdguardTeam/AdguardFilters/issues/142955 @@ -4885,18 +4685,16 @@ $all,ipaddress=/^139\.45\.197\.[12]?\d?\d$/ ||wholegrady.com^$all,~inline-font ||wooden-comfort.com^$all,~inline-font ! Unsuited for wildcarding -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=208.88.225.116 +$all,~inline-font,ipaddress=208.88.225.117 +$all,~inline-font,ipaddress=208.88.225.119 +!#endif +!#if !env_firefox ||208.88.225.116^$all,~inline-font -!#endif -*$all,ipaddress=208.88.225.116 -!#if !adguard_app_windows ||208.88.225.117^$all,~inline-font -!#endif -*$all,ipaddress=208.88.225.117 -!#if !adguard_app_windows ||208.88.225.119^$all,~inline-font !#endif -*$all,ipaddress=208.88.225.119 ! https://github.com/AdguardTeam/AdguardFilters/issues/144823 !+ NOT_OPTIMIZED ://landings.*_slots/?partner=$doc @@ -4921,10 +4719,10 @@ $all,ipaddress=/^139\.45\.197\.[12]?\d?\d$/ ||phara-rgm.com^$all,~inline-font ||wiela-kig.com^$all,~inline-font /zcvisitor/*?campaignid$doc -*$all,ipaddress=3.231.116.86 -*$all,ipaddress=3.231.137.120 -*$all,ipaddress=54.204.83.105 -*$all,ipaddress=54.237.193.255 +$all,ipaddress=3.231.116.86 +$all,ipaddress=3.231.137.120 +$all,ipaddress=54.204.83.105 +$all,ipaddress=54.237.193.255 ||3.231.116.86^$all,~inline-font ||3.231.137.120^$all,~inline-font ||54.204.83.105^$all,~inline-font @@ -4938,32 +4736,26 @@ $all,ipaddress=/^139\.45\.197\.[12]?\d?\d$/ ||kristinee.com^$all,~inline-font ||lakeside-fishandchips.com^$all,~inline-font ||office-view.com^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=108.61.242.65 +$all,~inline-font,ipaddress=146.70.78.43 +$all,~inline-font,ipaddress=87.120.254.39 +$all,~inline-font,ipaddress=45.150.108.213 +$all,~inline-font,ipaddress=92.204.160.240 +!#endif +!#if !env_firefox ||108.61.242.65^$all,~inline-font -!#endif -*$all,ipaddress=108.61.242.65 -!#if !adguard_app_windows ||146.70.78.43^$all,~inline-font -!#endif -*$all,ipaddress=146.70.78.43 -!#if !adguard_app_windows ||87.120.254.39^$all,~inline-font -!#endif -*$all,ipaddress=87.120.254.39 -!#if !adguard_app_windows ||45.150.108.213^$all,~inline-font -!#endif -*$all,ipaddress=45.150.108.213 -!#if !adguard_app_windows ||92.204.160.240^$all,~inline-font !#endif -*$all,ipaddress=92.204.160.240 ! https://github.com/AdguardTeam/AdguardFilters/issues/148560 /land/*&afftrack=$doc,domain=~likely_a_malware_redirection.* ! Comments on Slack ||updatefreecompletelytheproduct.vip^$all,~inline-font ||34.200.46.148^$all,~inline-font -*$all,ipaddress=34.200.46.148 +$all,ipaddress=34.200.46.148 ||ailippiess.co.in^$all,~inline-font ||anknulachemila.com^$all,~inline-font ||beboasty.co.in^$all,~inline-font @@ -4971,7 +4763,7 @@ $all,ipaddress=/^139\.45\.197\.[12]?\d?\d$/ ||derhostrins.com^$all,~inline-font ||lambatorkincer.co.in^$all,~inline-font ||85.17.80.16^$all,~inline-font -*$all,ipaddress=85.17.80.16 +$all,ipaddress=85.17.80.16 ! https://www•adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull ||sitey.me^$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/151479 @@ -5223,26 +5015,20 @@ $all,ipaddress=/^139\.45\.197\.[12]?\d?\d$/ ||z5v6h8recpgb.com^$all,~inline-font ||zirze151uk5d.com^$all,~inline-font ||zxvjn4igweb9.com^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=185.246.188.124 +$all,~inline-font,ipaddress=185.246.188.125 +$all,~inline-font,ipaddress=194.63.140.103 +$all,~inline-font,ipaddress=194.63.143.61 +$all,~inline-font,ipaddress=194.63.143.96 +!#endif +!#if !env_firefox ||185.246.188.124^$all,~inline-font -!#endif -*$all,ipaddress=185.246.188.124 -!#if !adguard_app_windows ||185.246.188.125^$all,~inline-font -!#endif -*$all,ipaddress=185.246.188.125 -!#if !adguard_app_windows ||194.63.140.103^$all,~inline-font -!#endif -*$all,ipaddress=194.63.140.103 -!#if !adguard_app_windows ||194.63.143.61^$all,~inline-font -!#endif -*$all,ipaddress=194.63.143.61 -!#if !adguard_app_windows ||194.63.143.96^$all,~inline-font !#endif -*$all,ipaddress=194.63.143.96 ! https://github.com/AdguardTeam/AdguardFilters/issues/152945 ||moneystartup.live^$all,~inline-font &trafficsource=Kadam&$doc @@ -5317,29 +5103,21 @@ $all,ipaddress=/^5\.61\.60\.[12]?\d?\d$/ ||xxxmessages.com^$all,~inline-font ||yourlifestyle-blog.com^$all,~inline-font ||zorka-news.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=37.48.80.112 ||37.48.80.112^$all,~inline-font -!#endif -*$all,ipaddress=37.48.80.112 ! Slack comments ||cojcdn.net^$all,~inline-font ||redic3.com^$all,~inline-font,domain=~malware_redirection_trains.* ||totadblock.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=109.206.168.16 +$all,~inline-font,ipaddress=109.206.168.17 ||109.206.168.16^$all,~inline-font -!#endif -*$all,ipaddress=109.206.168.16 -!#if !adguard_app_windows ||109.206.168.17^$all,~inline-font -!#endif -*$all,ipaddress=109.206.168.17 ! https://github.com/AdguardTeam/AdguardFilters/issues/155298 ||cadstoppam.live^$all,~inline-font ||paidsuenut.live^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=57.128.71.215 ||57.128.71.215^$all,~inline-font -!#endif -*$all,ipaddress=57.128.71.215 /^.*&[a-z]{1,2}=[a-zA-Z0-9]{0,}%[a-zA-Z0-9%]{1000,}$/$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/155936 ||rumadel.com^$all,~inline-font @@ -5462,11 +5240,14 @@ $all,ipaddress=/^103\.224\.182\.[12]?\d?\d$/ ||zrqdqt.com^$all,~inline-font ||ztzguv.com^$all,~inline-font ||zuhrzf.com^$all,~inline-font -*$all,ipaddress=139.45.197.167 -*$all,ipaddress=139.45.197.245 -*$all,ipaddress=159.223.137.164 -*$all,ipaddress=185.56.234.205 -*$all,ipaddress=37.1.223.231 +!#if env_firefox +$all,ipaddress=139.45.197.167 +$all,ipaddress=139.45.197.245 +$all,ipaddress=159.223.137.164 +$all,ipaddress=185.56.234.205 +$all,ipaddress=37.1.223.231 +!#endif +!#if !env_firefox ||139.45.197.167^$all,~inline-font ||139.45.197.245^$all,~inline-font ||159.223.137.164^$all,~inline-font @@ -5477,17 +5258,20 @@ $all,ipaddress=/^103\.224\.182\.[12]?\d?\d$/ ||192.243.58.123^$all,~inline-font ||192.243.58.124^$all,~inline-font ||192.243.58.125^$all,~inline-font +!#endif ||[2a02:b48:207:1::2]^$all,~inline-font ||[2a02:b48:207:1::3]^$all,~inline-font ||[2a02:b48:207:1::6]^$all,~inline-font ||[2a02:b48:207:1::7]^$all,~inline-font ||[2a02:b48:207:1::8]^$all,~inline-font +!#if env_firefox $all,ipaddress=2a02:b48:207:1::2 $all,ipaddress=2a02:b48:207:1::3 $all,ipaddress=2a02:b48:207:1::6 $all,ipaddress=2a02:b48:207:1::7 $all,ipaddress=2a02:b48:207:1::8 $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ +!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/157308 ||dest.co.in^$all,~inline-font ||dkeie.co.in^$all,~inline-font @@ -5663,18 +5447,16 @@ $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ ||vitalityfortune.com^$all,~inline-font ||wellnessfortune.net^$all,~inline-font ||ztomy.com^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=5.45.123.44 +$all,~inline-font,ipaddress=69.16.230.226 +$all,~inline-font,ipaddress=208.91.196.46 +!#endif +!#if !env_firefox ||5.45.123.44^$all,~inline-font -!#endif -*$all,ipaddress=5.45.123.44 -!#if !adguard_app_windows ||69.16.230.226^$all,~inline-font -!#endif -*$all,ipaddress=69.16.230.226 -!#if !adguard_app_windows ||208.91.196.46^$all,~inline-font !#endif -*$all,ipaddress=208.91.196.46 /page/bouncy.php?$all,~inline-font ! https://github.com/AdguardTeam/AdguardFilters/issues/158316 ||abberantbeefy.com^$all,~inline-font @@ -6341,10 +6123,8 @@ $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ ||ptentry.com^$all,~inline-font ||ptosrd.com^$all,~inline-font ||ptwmbed.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=93.93.51.223 ||93.93.51.223^$all,~inline-font -!#endif -*$all,ipaddress=93.93.51.223 ||livejasmin.com/*&origin=$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/161364 ! (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) @@ -6381,10 +6161,8 @@ $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ ||179.43.189.62$all,~inline-font ! https://new•reddit•com/r/engrish/comments/16lg4i1/seems_legit/ ||reschedule-delivery.ups.com.$doc -!#if !adguard_app_windows +$all,~inline-font,ipaddress=103.174.102.240 ||103.174.102.240^$all,~inline-font -!#endif -*$all,ipaddress=103.174.102.240 ! https://github.com/libre-tube/LibreTube/issues/4409 ||libretube.net^$all,~inline-font ! https://github.com/RPiList/specials/issues/1353 @@ -6475,10 +6253,8 @@ $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ !!!://162.214.80.$doc ! https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 ||monetrizer*.$all -!#if !adguard_app_windows +$all,ipaddress=38.180.96.244 ||38.180.96.244^$all -!#endif -*$all,ipaddress=38.180.96.244 ! https://github.com/AdguardTeam/AdguardFilters/issues/172569 ||acareewityjh.com^$all ||accedenonre.xyz^$all @@ -6598,14 +6374,10 @@ $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ ||wasanasset.buzz^$all ||withmefeyauknaly.com^$all ||wukbgater.buzz^$all -!#if !adguard_app_windows +$all,ipaddress=34.195.224.242 +$all,ipaddress=54.225.185.110 ||34.195.224.242^$all -!#endif -*$all,ipaddress=34.195.224.242 -!#if !adguard_app_windows ||54.225.185.110^$all -!#endif -*$all,ipaddress=54.225.185.110 &lp=not_robot_$all ||githubtalentcommunity.$all ! https://github.com/AdguardTeam/AdguardFilters/issues/173925 @@ -6613,10 +6385,8 @@ $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ ||levering-ekspedition.network^$all,~inline-font ||dhlexpress-lieferung.net^$all,~inline-font ||pochta-ru.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=91.202.233.143 ||91.202.233.143^$all,~inline-font -!#endif -*$all,ipaddress=91.202.233.143 ! Based on a tip from my secretary ||advancedwalletpay.com^$all,~inline-font ||amberzextracts.com^$all,~inline-font @@ -6712,10 +6482,8 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||routingsequencepriority.com^$all,~inline-font ||speednetworkchain.com^$all,~inline-font ||systemnetworkroute.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=108.62.157.10 ||108.62.157.10^$all,~inline-font -!#endif -*$all,ipaddress=108.62.157.10 ! https://github.com/AdguardTeam/FiltersRegistry/issues/925 ! https://github.com/AdguardTeam/FiltersRegistry/pull/927 ||avito.avito.avito.$all @@ -6729,46 +6497,30 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||avito.avito.www.avito.$all ||booking.com-id*$all ! https://github.com/AdguardTeam/AdguardFilters/issues/179170 -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=172.240.108.68 +$all,~inline-font,ipaddress=172.240.108.76 +$all,~inline-font,ipaddress=172.240.108.84 +$all,~inline-font,ipaddress=172.240.127.234 +$all,~inline-font,ipaddress=172.240.253.132 +$all,~inline-font,ipaddress=192.243.59.12 +$all,~inline-font,ipaddress=192.243.59.13 +$all,~inline-font,ipaddress=192.243.59.20 +$all,~inline-font,ipaddress=192.243.61.225 +$all,~inline-font,ipaddress=192.243.61.227 +!#endif +!#if !env_firefox ||172.240.108.68^$all,~inline-font -!#endif -*$all,ipaddress=172.240.108.68 -!#if !adguard_app_windows ||172.240.108.76^$all,~inline-font -!#endif -*$all,ipaddress=172.240.108.76 -!#if !adguard_app_windows ||172.240.108.84^$all,~inline-font -!#endif -*$all,ipaddress=172.240.108.84 -!#if !adguard_app_windows ||172.240.127.234^$all,~inline-font -!#endif -*$all,ipaddress=172.240.127.234 -!#if !adguard_app_windows ||172.240.253.132^$all,~inline-font -!#endif -*$all,ipaddress=172.240.253.132 -!#if !adguard_app_windows ||192.243.59.12^$all,~inline-font -!#endif -*$all,ipaddress=192.243.59.12 -!#if !adguard_app_windows ||192.243.59.13^$all,~inline-font -!#endif -*$all,ipaddress=192.243.59.13 -!#if !adguard_app_windows ||192.243.59.20^$all,~inline-font -!#endif -*$all,ipaddress=192.243.59.20 -!#if !adguard_app_windows ||192.243.61.225^$all,~inline-font -!#endif -*$all,ipaddress=192.243.61.225 -!#if !adguard_app_windows ||192.243.61.227^$all,~inline-font !#endif -*$all,ipaddress=192.243.61.227 ||abberantextending.com^$all,~inline-font ||abdicatehorrified.com^$all,~inline-font ||abjectpreludeparity.com^$all,~inline-font @@ -7286,7 +7038,7 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||xo28pclotovi.com^$all,~inline-font ||yydtbpms8tf4.com^$all,~inline-font ! https://github.com/AdguardTeam/AdguardFilters/issues/181966 -*$all,ipaddress=167.71.252.38 +$all,ipaddress=167.71.252.38 ! https://github.com/AdguardTeam/AdguardFilters/issues/183432 ||100carbures.com^$all,~inline-font ||123ecos.com^$all,~inline-font @@ -7646,19 +7398,17 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||yelitong.com^$all,~inline-font ||yourchoicehealthplan.com^$all,~inline-font ||zymstr.com^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=185.149.120.161 +$all,~inline-font,ipaddress=185.149.120.163 +$all,ipaddress=185.149.120.173 +$all,~inline-font,ipaddress=185.149.120.175 +!#endif +!#if !env_firefox ||185.149.120.161^$all,~inline-font -!#endif -*$all,ipaddress=185.149.120.161 -!#if !adguard_app_windows ||185.149.120.163^$all,~inline-font -!#endif -*$all,ipaddress=185.149.120.163 -*$all,ipaddress=185.149.120.173 -!#if !adguard_app_windows ||185.149.120.175^$all,~inline-font !#endif -*$all,ipaddress=185.149.120.175 ! https://github.com/AdguardTeam/AdguardFilters/issues/184671 ||alatterapistroke.com^$all ||astrarestaurant.com^$all @@ -7705,78 +7455,46 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||upsbezahlung.com^$all ||vius-inf.com^$all ||vrsecurego.com^$all -!#if !adguard_app_windows +!#if env_firefox +$all,ipaddress=45.202.32.3 +$all,ipaddress=45.8.92.138 +$all,ipaddress=79.133.46.252 +$all,ipaddress=82.147.85.156 +$all,ipaddress=91.212.166.16 +$all,ipaddress=94.156.64.129 +$all,ipaddress=94.232.249.61 +$all,ipaddress=94.232.249.69 +$all,ipaddress=94.232.249.75 +$all,ipaddress=94.232.249.235 +$all,ipaddress=176.111.174.118 +$all,ipaddress=176.113.115.191 +$all,ipaddress=191.96.224.140 +$all,ipaddress=193.124.185.42 +$all,ipaddress=193.143.1.45 +$all,ipaddress=193.143.1.214 +$all,ipaddress=193.143.1.217 +$all,ipaddress=208.91.189.203 +!#endif +!#if !env_firefox ||45.202.32.3^$all -!#endif -*$all,ipaddress=45.202.32.3 -!#if !adguard_app_windows ||45.8.92.138^$all -!#endif -*$all,ipaddress=45.8.92.138 -!#if !adguard_app_windows ||79.133.46.252^$all -!#endif -*$all,ipaddress=79.133.46.252 -!#if !adguard_app_windows ||82.147.85.156^$all -!#endif -*$all,ipaddress=82.147.85.156 -!#if !adguard_app_windows ||91.212.166.16^$all -!#endif -*$all,ipaddress=91.212.166.16 -!#if !adguard_app_windows ||94.156.64.129^$all -!#endif -*$all,ipaddress=94.156.64.129 -!#if !adguard_app_windows ||94.232.249.61^$all -!#endif -*$all,ipaddress=94.232.249.61 -!#if !adguard_app_windows ||94.232.249.69^$all -!#endif -*$all,ipaddress=94.232.249.69 -!#if !adguard_app_windows ||94.232.249.75^$all -!#endif -*$all,ipaddress=94.232.249.75 -!#if !adguard_app_windows ||94.232.249.235^$all -!#endif -*$all,ipaddress=94.232.249.235 -!#if !adguard_app_windows ||176.111.174.118^$all -!#endif -*$all,ipaddress=176.111.174.118 -!#if !adguard_app_windows ||176.113.115.191^$all -!#endif -*$all,ipaddress=176.113.115.191 -!#if !adguard_app_windows ||191.96.224.140^$all -!#endif -*$all,ipaddress=191.96.224.140 -!#if !adguard_app_windows ||193.124.185.42^$all -!#endif -*$all,ipaddress=193.124.185.42 -!#if !adguard_app_windows ||193.143.1.45^$all -!#endif -*$all,ipaddress=193.143.1.45 -!#if !adguard_app_windows ||193.143.1.214^$all -!#endif -*$all,ipaddress=193.143.1.214 -!#if !adguard_app_windows ||193.143.1.217^$all -!#endif -*$all,ipaddress=193.143.1.217 -!#if !adguard_app_windows ||208.91.189.203^$all !#endif -*$all,ipaddress=208.91.189.203 !#if !ext_ublock ://193.143.1.*$doc !#endif @@ -12188,10 +11906,8 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||yj-huayuan.com^$doc ||ynjkdl.com^$doc ||yuxc.xyz^$doc -!#if !adguard_app_windows +$doc,ipaddress=103.155.214.207 ||103.155.214.207^$doc -!#endif -*$all,ipaddress=103.155.214.207 ! Inspired by https://github.com/AdguardTeam/AdguardFilters/issues/197908 ||app-update.site^$all ||appupdate.net^$all @@ -12199,17 +11915,13 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||mijndiensten.website^$all ||potanschranky.com^$all ||prihlasit-secure-auth.com^$all -!#if !adguard_app_windows +$all,ipaddress=185.196.9.214 ||185.196.9.214^$all -!#endif -*$all,ipaddress=185.196.9.214 ||chrome.webredirect.org^$all ||captcha.webredirect.org^$all .microsoft.com.chrome.$doc -!#if !adguard_app_windows +$all,ipaddress=185.196.9.222 ||185.196.9.222^$all -!#endif -*$all,ipaddress=185.196.9.222 ! https://github.com/AdguardTeam/AdguardFilters/issues/201064 ||100urls.com^$all,~inline-font ||17lc.cc^$all,~inline-font @@ -12634,30 +12346,32 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||yoursweetfantazeez.site^$all,~inline-font ||yoursweetfantazeez.store^$all,~inline-font ||yoursweetflirt.online^$all,~inline-font -!#if !adguard_app_windows +!#if !env_firefox ||3.220.51.12^$all ||44.223.210.42^$all ||52.9.43.57^$all ||52.204.19.219^$all ||100.28.19.138^$all ||108.61.99.63^$all -!#endif ||[2600:1f18:43d1:2a02:169f:dcbb:85f9:3c56]^$all ||[2600:1f18:43d1:2a02:b6ee:327b:545e:e578]^$all ||[2600:1f18:43d1:2a02:c3bd:35f3:da0a:4041]^$all ||[2600:1f18:43d1:2a02:c6f9:e151:e2e1:732d]^$all ||[2600:1f1c:57F:b502:dd8:9588:11e6:282]^$all -*$all,ipaddress=3.220.51.12 -*$all,ipaddress=44.223.210.42 -*$all,ipaddress=52.9.43.57 -*$all,ipaddress=52.204.19.219 -*$all,ipaddress=100.28.19.138 -*$all,ipaddress=108.61.99.63 -*$all,ipaddress=2600:1f18:43d1:2a02:169f:dcbb:85f9:3c56 -*$all,ipaddress=2600:1f18:43d1:2a02:b6ee:327b:545e:e578 -*$all,ipaddress=2600:1f18:43d1:2a02:c3bd:35f3:da0a:4041 -*$all,ipaddress=2600:1f18:43d1:2a02:c6f9:e151:e2e1:732d -*$all,ipaddress=2600:1f1c:57F:b502:dd8:9588:11e6:282 +!#endif +!#if env_firefox +$all,ipaddress=3.220.51.12 +$all,ipaddress=44.223.210.42 +$all,ipaddress=52.9.43.57 +$all,ipaddress=52.204.19.219 +$all,ipaddress=100.28.19.138 +$all,ipaddress=108.61.99.63 +$all,ipaddress=2600:1f18:43d1:2a02:169f:dcbb:85f9:3c56 +$all,ipaddress=2600:1f18:43d1:2a02:b6ee:327b:545e:e578 +$all,ipaddress=2600:1f18:43d1:2a02:c3bd:35f3:da0a:4041 +$all,ipaddress=2600:1f18:43d1:2a02:c6f9:e151:e2e1:732d +$all,ipaddress=2600:1f1c:57F:b502:dd8:9588:11e6:282 +!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/202010 ||adblockermax.com/land$doc,popup ! Various other reports @@ -12729,9 +12443,11 @@ $all,ipaddress=/^45\.141\.59\.[12]?\d?\d$/ ||womsacmackoa.com^$all ||wounofoarausooy.net^$all ||zmeso.com^$all +!#if env_firefox $all,ipaddress=172.240.41.32 $all,ipaddress=172.240.41.64 $all,ipaddress=172.240.41.96 +!#endif ||abcradilytor.com^$all ||abmagbychan.com^$all ||agatorkoaltor.com^$all @@ -12849,9 +12565,7 @@ $all,ipaddress=172.240.41.96 ||wsbuckon.com^$all ||zacmoageeshee.net^$all ||zucoagorsout.com^$all -!#if !adguard_app_windows ||139.45.197.106^$all -!#endif $all,ipaddress=139.45.197.106 ! https://github.com/DandelionSprout/adfilt/issues/1129 ||password-internal.com^$all @@ -13058,9 +12772,7 @@ http://secured21.*.com/|$all ||xxx-telegram.com^$all ||zc-telegran.org^$all ||zzz-telegram.com^$all -!#if !adguard_app_windows ||43.128.142.70^$all -!#endif $all,ipaddress=43.128.142.70 ! https://github.com/AdguardTeam/AdguardFilters/issues/20787[2-5] ||chceshi001.com^$all @@ -13207,16 +12919,18 @@ $all,ipaddress=43.128.142.70 ||whatcsappwap.com^$all ||whatstapps.com^$all ||whetcsapp.com^$all -!#if !adguard_app_windows +!#if !env_firefox ||149.30.232.154^$all ||154.204.32.99^$all ||156.245.23.49^$all ||206.119.178.163^$all !#endif +!#if env_firefox $all,ipaddress=149.30.232.154 $all,ipaddress=154.204.32.99 $all,ipaddress=156.245.23.49 $all,ipaddress=206.119.178.163 +!#endif ! https://github.com/DandelionSprout/adfilt/issues/1164 ||device-checking.com^$all ||device-cleanup.com^$all @@ -13226,9 +12940,7 @@ $all,ipaddress=206.119.178.163 ||system-noticers.com^$all ||systemsnotifications.com^$all ||warningnotification.com^$all -!#if !adguard_app_windows ||46.101.81.149^$all -!#endif $all,ipaddress=46.101.81.149 ||adaptationfirework.com^$all ||armourbreederleadership.com^$all @@ -13273,14 +12985,10 @@ $all,ipaddress=46.101.81.149 ||unesmunbrebers.com^$doc,popup ||filinnetirt.com^$doc,popup ||freshsubz.com^$doc -!#if !adguard_app_windows ||52.15.34.25^$all -!#endif $all,ipaddress=52.15.34.25 ! https://www•gdatasoftware•com/blog/2025/09/38265-steam-blockblasters-game-downloads-malware -!#if !adguard_app_windows ||203.188.171.156^$all -!#endif $all,ipaddress=203.188.171.156 ! https://github•com/prodaft/malware-ioc/blob/master/LARVA-208/SteamCampaign•md ||soft-gets.com^$all @@ -13544,18 +13252,22 @@ $all,ipaddress=203.188.171.156 ||workspace-drive.com^$all ||xtrash-tarck.com^$all ||your-package-delivery.com^$all +!#if !env_firefox ||158.94.209.86^$all ||158.94.209.87^$all ||158.94.209.88^$all ||158.94.209.89^$all ||158.94.209.90^$all ||223.29.226.200^$all +!#endif +!#if env_firefox $all,ipaddress=158.94.209.86 $all,ipaddress=158.94.209.87 $all,ipaddress=158.94.209.88 $all,ipaddress=158.94.209.89 $all,ipaddress=158.94.209.90 $all,ipaddress=223.29.226.200 +!#endif ! https://urlscan.io/result/019a4ffd-885c-7545-816a-3c121d8bdc0d/ (Early November 2025) /linkresolver.html?url=*p0$doc ! https://github.com/DandelionSprout/adfilt/issues/1197 @@ -13917,16 +13629,12 @@ toorgle.net##.join ||market-csgo.ru^$all,~inline-font ||pubggf*.xyz^$all,~inline-font ||pubggift*.xyz^$all,~inline-font -!#if !adguard_app_windows ||194.226.139.121^$all,~inline-font ||194.226.139.7^$all,~inline-font ||95.181.157.36^$all,~inline-font -!#endif -*$all,ipaddress=95.181.157.36 -!#if !adguard_app_windows +$all,ipaddress=95.181.157.36 +$all,~inline-font,ipaddress=95.181.172.204 ||95.181.172.204^$all,~inline-font -!#endif -*$all,ipaddress=95.181.172.204 $all,ipaddress=/^194\.226\.139\.[12]?\d?\d$/ !#if !ext_ublock ! AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking) @@ -14021,10 +13729,8 @@ $all,ipaddress=/^194\.226\.139\.[12]?\d?\d$/ ||drugcoupons.xyz^$doc ||freemedicine.info^$doc ||medication.coupons^$doc -!#if !adguard_app_windows +$doc,ipaddress=147.135.16.27 ||147.135.16.27^$doc -!#endif -*$all,ipaddress=147.135.16.27 ! https://www•google•no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img ||ingeniovirtual.com^$doc ! https://scambiofigu•forumcommunity•net/?t=57482915 @@ -14033,10 +13739,8 @@ apkfab.com##.tip-extension ! Google results for 'Katy and Bob:Cake Café powerpc' (04/11/2022) ||xxlmag.com/redirect^$all,~inline-font,domain=~malware_redirection_results.* ||ultimateclassicrock.com/redirect^$all,~inline-font,domain=~malware_redirection_results.* -!#if !adguard_app_windows +$doc,ipaddress=185.87.148.199 ||185.87.148.199^$doc -!#endif -*$all,ipaddress=185.87.148.199 ! Google results for 'horse tales: emerald valley ranch mobygames' (05/11/2022) ||imaot.co.il/ContentArea/BannerClick^$all,~inline-font ||q1065.fm/redirect^$all,~inline-font,domain=~malware_redirection_results.* @@ -14045,10 +13749,8 @@ apkfab.com##.tip-extension ||wnbf.com/redirect^$all,~inline-font,domain=~malware_redirection_results.* ||gacorhub.com^$all,~inline-font ||zh1653.com^$all,~inline-font -!#if !adguard_app_windows +$doc,ipaddress=45.136.49.35 ||45.136.49.35^$doc -!#endif -*$all,ipaddress=45.136.49.35 ||semex.com/popurl.cgi^$all,~inline-font,domain=~malware_redirection_results.* ||pharmanimal.com/catalog/redirect.php^$all,~inline-font,domain=~malware_redirection_results.* ! Browsing around for Tajik newssites @@ -14060,34 +13762,26 @@ apkfab.com##.tip-extension ||biztomjean.live^$all,~inline-font ||backshyoh.live^$all,~inline-font ||cityratetod.live^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=51.91.211.94 +$all,~inline-font,ipaddress=162.19.71.16 +$all,~inline-font,ipaddress=146.59.240.191 +$all,~inline-font,ipaddress=54.37.5.34 +$all,~inline-font,ipaddress=54.36.118.105 +!#endif +!#if !env_firefox ||51.91.211.94^$all,~inline-font -!#endif -*$all,ipaddress=51.91.211.94 -!#if !adguard_app_windows ||162.19.71.16^$all,~inline-font -!#endif -*$all,ipaddress=162.19.71.16 -!#if !adguard_app_windows ||146.59.240.191^$all,~inline-font -!#endif -*$all,ipaddress=146.59.240.191 -!#if !adguard_app_windows ||54.37.5.34^$all,~inline-font -!#endif -*$all,ipaddress=54.37.5.34 -!#if !adguard_app_windows ||54.36.118.105^$all,~inline-font !#endif -*$all,ipaddress=54.36.118.105 ! Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt ||highlandnews.com^$all,~inline-font ||pcbasicstrength.com^$all,~inline-font ||leantime.bigfi.re^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=159.89.10.102 ||159.89.10.102^$all,~inline-font -!#endif -*$all,ipaddress=159.89.10.102 ! Other ||pksauniversity.com^$all,~inline-font ||sharedmega.com^$doc @@ -14101,10 +13795,8 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||thotsbay-leaked.com^$doc ||cbox.ws^$domain=chicks.cam ||inuseme.com^$all,~inline-font -!#if !adguard_app_windows ://104.206.252.90^$all,~inline-font -!#endif -*$all,ipaddress=104.206.252.90 +$all,ipaddress=104.206.252.90 ! https://github.com/blocklistproject/Lists/issues/933 ||jNKmS0zFuEh.click^$all,~inline-font ! https://app•any•run/tasks/679e9afa-eb19-4414-a086-e280a779a448 and https://tria•ge/230217-xd8nksgc9x/behavioral2 @@ -14117,10 +13809,8 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ! https://github.com/RPiList/specials/issues/948#issuecomment-1458739160 ||yuppdownload.com^$all,~inline-font ! Commonly set as a proxy on hacked devices (https://www•virustotal•com/gui/url/e610e7d09c614529cb8c64185717769946f5c86044ac5c31c6608e604995f577/detection) -!#if !adguard_app_windows +$all,~inline-font,ipaddress=34.80.59.191 ||34.80.59.191^$all,~inline-font -!#endif -*$all,ipaddress=34.80.59.191 ! Various domains on https://securitytrails•com/list/ip/72•14•178•174 |http://www6.$doc,domain=~often_used_in_malware_redirections.* |http://www1.*&kw$doc,domain=~often_used_in_malware_redirections.* @@ -14128,54 +13818,34 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||zombooru.com^$all,~inline-font ||kusubooru.com^$all,~inline-font ||wh40kart.im^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$doc,ipaddress=45.33.2.79 +$doc,ipaddress=45.33.18.44 +$doc,ipaddress=45.33.20.235 +$doc,ipaddress=45.33.23.183 +$doc,ipaddress=45.33.30.197 +$doc,ipaddress=45.56.79.23 +$doc,ipaddress=45.79.19.196 +$doc,ipaddress=72.14.178.174 +$doc,ipaddress=72.14.185.43 +$doc,ipaddress=96.126.123.244 +$doc,ipaddress=173.255.194.134 +$doc,ipaddress=198.58.118.167 +!#endif +!#if !env_firefox ||45.33.2.79^$doc -!#endif -*$all,ipaddress=45.33.2.79 -!#if !adguard_app_windows ||45.33.18.44^$doc -!#endif -*$all,ipaddress=45.33.18.44 -!#if !adguard_app_windows ||45.33.20.235^$doc -!#endif -*$all,ipaddress=45.33.20.235 -!#if !adguard_app_windows ||45.33.23.183^$doc -!#endif -*$all,ipaddress=45.33.23.183 -!#if !adguard_app_windows ||45.33.30.197^$doc -!#endif -*$all,ipaddress=45.33.30.197 -!#if !adguard_app_windows ||45.56.79.23^$doc -!#endif -*$all,ipaddress=45.56.79.23 -!#if !adguard_app_windows ||45.79.19.196^$doc -!#endif -*$all,ipaddress=45.79.19.196 -!#if !adguard_app_windows ||72.14.178.174^$doc -!#endif -*$all,ipaddress=72.14.178.174 -!#if !adguard_app_windows ||72.14.185.43^$doc -!#endif -*$all,ipaddress=72.14.185.43 -!#if !adguard_app_windows ||96.126.123.244^$doc -!#endif -*$all,ipaddress=96.126.123.244 -!#if !adguard_app_windows ||173.255.194.134^$doc -!#endif -*$all,ipaddress=173.255.194.134 -!#if !adguard_app_windows ||198.58.118.167^$doc !#endif -*$all,ipaddress=198.58.118.167 ! https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/ ||1337links.net^$all,~inline-font ||777offers.net^$all,~inline-font @@ -14273,30 +13943,22 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||whackyblue.com^$all,~inline-font ||ym3trk.com^$all,~inline-font,domain=~malware_redirection_trains.* ||youwanthis.com^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$all,~inline-font,ipaddress=34.117.199.78 +$all,~inline-font,ipaddress=94.237.103.119 +$all,~inline-font,ipaddress=94.237.84.54 +$all,~inline-font,ipaddress=94.237.93.242 +$all,~inline-font,ipaddress=94.237.99.118 +$all,~inline-font,ipaddress=139.45.197.249 +!#endif +!#if !env_firefox ||34.117.199.78^$all,~inline-font -!#endif -*$all,ipaddress=34.117.199.78 -!#if !adguard_app_windows ||94.237.103.119^$all,~inline-font -!#endif -*$all,ipaddress=94.237.103.119 -!#if !adguard_app_windows ||94.237.84.54^$all,~inline-font -!#endif -*$all,ipaddress=94.237.84.54 -!#if !adguard_app_windows ||94.237.93.242^$all,~inline-font -!#endif -*$all,ipaddress=94.237.93.242 -!#if !adguard_app_windows ||94.237.99.118^$all,~inline-font -!#endif -*$all,ipaddress=94.237.99.118 -!#if !adguard_app_windows ||139.45.197.249^$all,~inline-font !#endif -*$all,ipaddress=139.45.197.249 ! https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide ||anahitagirted.uno^$all,~inline-font ||arenitezill.com^$all,~inline-font @@ -14338,44 +14000,28 @@ $all,ipaddress=/^203\.195\.121\.[12]?\d?\d$/ *norgestores.com^$doc *skobutikks.com^$doc *butikksoslo.com^$doc -!#if !adguard_app_windows +$all,~inline-font,ipaddress=196.196.153.151 +$all,~inline-font,ipaddress=158.222.7.116 +$all,~inline-font,ipaddress=196.245.152.139 +$all,~inline-font,ipaddress=165.231.251.197 +$all,~inline-font,ipaddress=196.242.16.29 +$all,~inline-font,ipaddress=165.231.4.90 +$all,~inline-font,ipaddress=158.222.7.83 ||196.196.153.151^$all,~inline-font -!#endif -*$all,ipaddress=196.196.153.151 -!#if !adguard_app_windows ||158.222.7.116^$all,~inline-font -!#endif -*$all,ipaddress=158.222.7.116 -!#if !adguard_app_windows ||196.245.152.139^$all,~inline-font -!#endif -*$all,ipaddress=196.245.152.139 -!#if !adguard_app_windows ||165.231.251.197^$all,~inline-font -!#endif -*$all,ipaddress=165.231.251.197 -!#if !adguard_app_windows ||196.242.16.29^$all,~inline-font -!#endif -*$all,ipaddress=196.242.16.29 -!#if !adguard_app_windows ||165.231.4.90^$all,~inline-font -!#endif -*$all,ipaddress=165.231.4.90 -!#if !adguard_app_windows ||158.222.7.83^$all,~inline-font -!#endif -*$all,ipaddress=158.222.7.83 ! A scam SMS I got ||95-214-26-78.plesk.page^$all,~inline-font ||account-limitato.org^$all,~inline-font ||netfiixhungary.net^$all,~inline-font ||tracking-sk.com^$all,~inline-font ||supportnetflix.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=95.214.26.78 ||95.214.26.78^$all,~inline-font -!#endif -*$all,ipaddress=95.214.26.78 ! Overly dedicated E-mail spammers ||wirexapp.africa.com^$all @@ -14394,20 +14040,14 @@ $all,ipaddress=/^203\.195\.121\.[12]?\d?\d$/ ||kidroleland.info^$all,~inline-font ||sirdayscare.info^$all,~inline-font ||slownansuch.info^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=185.155.184.57 +$all,~inline-font,ipaddress=185.155.186.24 ||185.155.184.57^$all,~inline-font -!#endif -*$all,ipaddress=185.155.184.57 -!#if !adguard_app_windows ||185.155.186.24^$all,~inline-font -!#endif -*$all,ipaddress=185.155.186.24 ||style-js.com^$all,~inline-font /a.aspx?cid=*&cname=^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=209.74.107.131 ||209.74.107.131^$all,~inline-font -!#endif -*$all,ipaddress=209.74.107.131 /flying.asp?cid=$all,~inline-font /kjyo.php?cname=$all,~inline-font /flying?cid=*&keywords=$all,~inline-font @@ -14476,14 +14116,10 @@ $all,ipaddress=/^203\.195\.121\.[12]?\d?\d$/ ||wsdcq7wayud.com^$all,~inline-font ||xgptw11vogsh.com^$all,~inline-font ||zeirj14ikqwf.com^$all,~inline-font -!#if !adguard_app_windows +$all,~inline-font,ipaddress=69.172.200.185 +$all,~inline-font,ipaddress=77.220.214.153 ||69.172.200.185^$all,~inline-font -!#endif -*$all,ipaddress=69.172.200.185 -!#if !adguard_app_windows ||77.220.214.153^$all,~inline-font -!#endif -*$all,ipaddress=77.220.214.153 ! More search terms than what can be counted with a supercomputer (11/03/2024) google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ! Scam E-mails I've got @@ -14510,11 +14146,9 @@ tumblr.com##div[tabindex][style]:has(a[href*="://cutt.ly/"]) tumblr.com#?#div[tabindex][style]:has(a[href*="tinyurl."]:has-text(_1+8_)) www.tumblr.com##div[style="margin-top: 0px;"][tabindex]:has-text(🔞):has-text(/Insta/i) www.tumblr.com##div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a[target=_blank] > div > div:has-text(/^.*🔞.*insta( |gram).*\n.*$/i)) -!#if !adguard_app_windows ://104.21.82.132^$doc,popup ||172.67.158.57^$doc,popup ||198.12.86.90^$all -!#endif ||[2606:4700:3030::6815:5284]^$doc,popup ||[2606:4700:3037::ac43:9e39]^$doc,popup ||adhitagency.shop^$all @@ -14583,9 +14217,11 @@ www.tumblr.com##div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a[ ||tq24k.com^$all ||vcqtools.com^$all ||vgadeal.com^$all -*$all,ipaddress=104.21.82.132 -*$all,ipaddress=172.67.158.57 -*$all,ipaddress=198.12.86.90 +!#if env_firefox +$all,ipaddress=104.21.82.132 +$all,ipaddress=172.67.158.57 +$all,ipaddress=198.12.86.90 +!#endif ||sites.google.com/view/*wincashapp^$doc ||iuxxx.com^$all ||tuusi.com^$all @@ -14604,15 +14240,13 @@ www.tumblr.com##div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([hr ||dreamintim.com^$all ! R34US ! https://github.com/AdguardTeam/FiltersRegistry/issues/654#issuecomment-2629098471 -!#if !adguard_app_windows ||139.45.197.168^$all ||139.45.197.244^$all -!#endif -*$all,ipaddress=139.45.197.168 -*$all,ipaddress=139.45.197.244 -*$all,ipaddress=172.240.41.32 -*$all,ipaddress=172.240.41.64 -*$all,ipaddress=172.240.41.96 +$all,ipaddress=139.45.197.168 +$all,ipaddress=139.45.197.244 +$all,ipaddress=172.240.41.32 +$all,ipaddress=172.240.41.64 +$all,ipaddress=172.240.41.96 ||ajartoalsushy.com^$all ||catilrecmemsi.com^$all ||chusapsoarduwa.net^$all @@ -14772,20 +14406,16 @@ www.tumblr.com##div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([hr ||wackel-dackel.com^$all ||whashop.xyz^$all ||bestpartnerfinderonline.com^$all -!#if !adguard_app_windows +$all,ipaddress=185.68.16.189 ||185.68.16.189^$all -!#endif -*$all,ipaddress=185.68.16.189 ||huntinginukraine.com^$all ||gitlab.gitlab.gitlab.$doc,popup ||gitlab.git.git.$doc,popup ||gitlab.gitlab.git.$doc,popup ||git.git.git.git.$doc,popup ||git.gitlab.gitlab.$doc,popup -!#if !adguard_app_windows +$all,ipaddress=76.223.15.82 ||76.223.15.82^$all -!#endif -*$all,ipaddress=76.223.15.82 ||10bestchina.com^$all ||123594.com^$all ||127453.com^$all @@ -15539,18 +15169,15 @@ www.tumblr.com##div[data-timeline-id] div[style="margin-top: 0px;"]:has(a:is([hr ||netnet33.net^$all ||netnet44.net^$all ||odintara.com^$doc -!#if !adguard_app_windows ||54.174.156.141^$doc -!#endif $all,ipaddress=54.174.156.141 ! Searched for Breaking Bad Jesse memes on Qwant (29/04/2025) ://old.sermitsiaq.ag^$doc,domain=subdomain_stolen_from_sermitsiaqs_owners.* ||xss.my.id^$third-party -!#if !adguard_app_windows ||85.159.213.158^$all -!#endif $all,ipaddress=85.159.213.158 ! Seemingly mass-generated fake "marketing company" sites that seem to serve no visible purpose (12/05/2025) +!#if !env_firefox ||23.170.252.196^$all ||23.229.68.43^$all ||23.229.68.44^$all @@ -15642,6 +15269,8 @@ $all,ipaddress=85.159.213.158 ://216.246.30.82^$all ://216.246.30.83^$all ://216.246.30.84^$all +!#endif +!#if env_firefox $doc,3p,ipaddress=23.170.252.196 $doc,3p,ipaddress=23.229.68.43 $doc,3p,ipaddress=23.229.68.44 @@ -15733,6 +15362,7 @@ $doc,3p,ipaddress=216.246.30.82 $doc,3p,ipaddress=216.246.30.83 $doc,3p,ipaddress=216.246.30.84 $doc,3p,ipaddress=2a14:2d81:0:27::1 +!#endif ||taylorcopies.com^$doc ||atypicalnorms.com^$doc ||beastlyendeavors.com^$doc @@ -15762,9 +15392,7 @@ $doc,3p,ipaddress=2a14:2d81:0:27::1 ||psaitchuzaubo.com^$all ||rita0.com^$all ||tshfc.com^$all -!#if !adguard_app_windows ||139.45.195.9^$all -!#endif $all,ipaddress=139.45.195.9 ! Other entries ||animeplaynow.com^$doc,popup @@ -15772,25 +15400,25 @@ $all,ipaddress=139.45.195.9 ||datedate.today^$all ||go.dealslandz.com^$all ||awecrptjmp.com^$doc,popup -!#if !adguard_app_windows ||172.240.41.32^$all ||172.240.41.64^$all ||172.240.41.96^$all -!#endif ! Spambot(s?) on R34X³ ||24hdeepnude.com^$doc ! gelbo²ruCOM ||debateobsoletesimply.com^$all -!#if !adguard_app_windows +!#if !env_firefox ||172.240.41.33^$all ||172.240.41.65^$all ||172.240.41.97^$all ||172.240.41.129^$all !#endif +!#if env_firefox $all,ipaddress=172.240.41.33 $all,ipaddress=172.240.41.65 $all,ipaddress=172.240.41.97 $all,ipaddress=172.240.41.129 +!#endif ! bdsmx-pornCOM ||6traitors.com^$all ||baimgfroggd.site^$all @@ -15854,6 +15482,7 @@ $all,ipaddress=172.240.41.129 ||sunsandmoon.com^$all ||trankosty.shop^$all ||tubecup.org^$all +!#if !env_firefox ||62.122.168.42^$all ||109.206.163.112^$all ||109.206.163.116^$all @@ -15869,6 +15498,8 @@ $all,ipaddress=172.240.41.129 ||[2a02:128:7:5427::2]^$all ||[2a02:128:7:5905::2]^$all ||[2a02:128:7:5940::3]^$all +!#endif +!#if env_firefox $all,ipaddress=62.122.168.42 $all,ipaddress=109.206.163.112 $all,ipaddress=109.206.163.116 @@ -15884,6 +15515,7 @@ $all,ipaddress=2a02:128:7:5241::2 $all,ipaddress=2a02:128:7:5427::2 $all,ipaddress=2a02:128:7:5905::2 $all,ipaddress=2a02:128:7:5940::3 +!#endif ||biuqbiu.com^$all ||bmgmb.com^$all ||onclckbn.com^$all @@ -15894,9 +15526,11 @@ $all,ipaddress=2a02:128:7:5940::3 ||178.63.5.120^$all ||[2a01:4f8:c0:33d8::1]^$all ||[2a01:4f8:c0:2a5c::1]^$all +!#if env_firefox $all,ipaddress=178.63.5.120 $all,ipaddress=2a01:4f8:c0:33d8::1 $all,ipaddress=2a01:4f8:c0:2a5c::1 +!#endif ||013d5342d9.com^$all ||03122e72f0.com^$all ||0551acf6ed.com^$all @@ -15985,14 +15619,14 @@ $all,ipaddress=2a01:4f8:c0:2a5c::1 ||ntvpevnts.com^$all ||selecttopon.com^$all ||statelinear.com^$all -!#if !adguard_app_windows ||167.235.163.216^$all -!#endif ||[2a01:4f8:c0:2343::2]^$all ||[2a01:4f8:e0:19cb::1]^$all +!#if env_firefox $all,ipaddress=167.235.163.216 $all,ipaddress=2a01:4f8:c0:2343::2 $all,ipaddress=2a01:4f8:e0:19cb::1 +!#endif ||a3ion.com^$all ||advertrek.com^$all ||cant3am.com^$all @@ -16041,9 +15675,7 @@ $all,ipaddress=2a01:4f8:e0:19cb::1 ||zlink9.com^$all ||zlinkl.com^$all ||zlinkv.com^$all -!#if !adguard_app_windows ||95.211.229.247^$all -!#endif $all,ipaddress=95.211.229.247 ! fetish2230•rssing•com ||agdosortione.com^$all @@ -16071,9 +15703,7 @@ $all,ipaddress=95.211.229.247 ||undeciliste.com^$all ||unrertivermalous.com^$all ||wherdiapospir.com^$all -!#if !adguard_app_windows ||88.208.22.1^$all -!#endif $all,ipaddress=88.208.22.1 ! xmegadriveCOM ||adoredcount.com^$all @@ -16093,9 +15723,7 @@ $all,ipaddress=88.208.22.1 ||repulsiveguarantee.com^$all ||sotomistel.com^$all ||unripereading.com^$all -!#if !adguard_app_windows ||188.72.219.35^$all -!#endif ||[2a00:1178:1:4b::e]^$all $all,ipaddress=188.72.219.35 $all,ipaddress=2a00:1178:1:4b::e @@ -16508,7 +16136,7 @@ $all,ipaddress=2a00:1178:1:4b::e ||ukpayment.xin^$all ||uspsprl.cfd^$all ||zaepost.cfd^$all -!#if !adguard_app_windows +!#if !env_firefox ||43.100.125.58^$all ||43.159.140.215^$all ||43.162.119.45^$all @@ -16517,6 +16145,7 @@ $all,ipaddress=2a00:1178:1:4b::e ||147.93.63.211^$all ||154.223.16.232^$all !#endif +!#if env_firefox $all,ipaddress=43.100.125.58 $all,ipaddress=43.159.140.215 $all,ipaddress=43.162.119.45 @@ -16524,6 +16153,7 @@ $all,ipaddress=47.76.132.29 $all,ipaddress=109.230.237.116 $all,ipaddress=147.93.63.211 $all,ipaddress=154.223.16.232 +!#endif ! icepornCOM /adx_iframe_$3p ! https://www•drvhub•net/devices/network/asix/ax88178a-usb-2-0-to-gigabit-ethernet-adapter @@ -17007,6 +16637,7 @@ drvhub.net##.driver-item__install ||trksp1.com^$all ||trksp2.com^$all ||trksp3.com^$all +!#if !env_firefox ||157.90.33.79^$all ||173.239.53.20^$all ||178.63.248.53^$all @@ -17022,6 +16653,8 @@ drvhub.net##.driver-item__install ||[2604:9e00:1:129::2:b10]^$all ||[2606:4700:3033::6815:5644]^$all ||[2a01:4f8:2201:388a::2]^$all +!#endif +!#if env_firefox $all,ipaddress=157.90.33.79 $all,ipaddress=173.239.53.20 $all,ipaddress=178.63.248.53 @@ -17037,6 +16670,7 @@ $all,ipaddress=52.207.126.104 $all,ipaddress=2604:9e00:1:129::2:b10 $all,ipaddress=2606:4700:3033::6815:5644 $all,ipaddress=2a01:4f8:2201:388a::2 +!#endif ! ——— A hijacked link that had previously been on https://sims•fandom•com/wiki/Game_guide:Fog_emitter ——— ||0network.com^$all @@ -17229,14 +16863,18 @@ $all,ipaddress=2a01:4f8:2201:388a::2 ||yolkclknu.com^$all ||yolkdirxl.com^$all ||zentrixads.com^$all +!#if !env_firefox ||103.67.200.64^$all ||198.134.116.17^$all ||198.134.116.30^$all ||[2a00:8860:10d:1::2:b01]^$all -*$all,ipaddress=103.67.200.64 -*$all,ipaddress=198.134.116.17 -*$all,ipaddress=198.134.116.30 -*$all,ipaddress=2a00:8860:10d:1::2:b01 +!#endif +!#if env_firefox +$all,ipaddress=103.67.200.64 +$all,ipaddress=198.134.116.17 +$all,ipaddress=198.134.116.30 +$all,ipaddress=2a00:8860:10d:1::2:b01 +!#endif ! Extreme amounts of PUP to a comical extent ||driverpack.io^$doc,domain=~has_extreme_amounts_of_pup_in_it.* ! https://github.com/DandelionSprout/adfilt/issues/1124 @@ -17648,10 +17286,8 @@ www.microsoft.com##a[data-pfns][href*=pac-men] ! (Presumably anonymous) E-mail tips ||s.free.fr^$all ||trmff.wpengine.com^$all -!#if !adguard_app_windows +$all,ipaddress=212.27.60.108 ||212.27.60.108^$all -!#endif -*$all,ipaddress=212.27.60.108 !#if !adguard !#include uBO%20list%20extensions/AdGuardSafeBrowsing-ReverseEngineered.txt @@ -17849,6 +17485,7 @@ $all,ipaddress=91.195.240.12 ||xyz.cm^$all ||yellowdragon.com^$all ! Parking services' IP addresses +!#if !env_firefox ||13.248.148.254^$all ||185.53.177.50^$all ||185.53.177.51^$all @@ -17860,6 +17497,8 @@ $all,ipaddress=91.195.240.12 ||185.53.178.52^$all ||185.53.178.53^$all ||185.53.178.54^$all +!#endif +!#if env_firefox $all,ipaddress=13.248.148.254 $all,ipaddress=185.53.177.50 $all,ipaddress=185.53.177.51 @@ -17871,6 +17510,7 @@ $all,ipaddress=185.53.178.51 $all,ipaddress=185.53.178.52 $all,ipaddress=185.53.178.53 $all,ipaddress=185.53.178.54 +!#endif ! Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO .to/popconsole.php|