starred/adfilt
1
0
Fork 0
mirror of https://github.com/DandelionSprout/adfilt.git synced 2026-10-06 10:54:55 +01:00
Code Issues Packages Projects Releases 4 Wiki Activity

Update Dandelion Sprout's Anti-Malware List.txt

Browse Source 
I genuinely had nothing better to spend this afternoon on.
This commit is contained in:
Imre Eilertsen
2024-09-08 16:31:05 +02:00
committed by GitHub
parent 51b6b12a05
commit 75755105f4
1 changed files with 148 additions and 148 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dandelion Sprout's Anti-Malware List.txt
+148 -148
View File
@@ -1,6 +1,6 @@
[Adblock Plus 3.13]
! Title: 💊 Dandelion Sprout's Anti-Malware List
! Version: 20August2024v1
! Version: 08September2024v1
! Expires: 2 days
! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there.
! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -29,7 +29,7 @@
!!!||ooo^$doc,domain=~toast.ooo
! (https://github.com/DandelionSprout/adfilt/issues/999)
!!!@@://oo*.ooo/$doc
! https://bgp.he.net/AS202492#_prefixes (17/07/2022)
! https://bgp.he•net/AS202492#_prefixes (17/07/2022)
!!!||monster^$doc,domain=~egybest.monster|~yts.monster|~cloudcdn.monster|~fedi.monster|~rollenspiel.monster|~tts.monster|~geometry.monster
! https://github.com/AdguardTeam/AdguardFilters/issues/131156
!!!||sbs^$doc,domain=~ecopulse.sbs
@@ -168,12 +168,12 @@ play.google.com#?#div[class$=" "] > div[class*=" "][jscontroller] > *:has([href$
! ——— Links to PC "optimising" "tool" PUPs that'll most likely stuff your PC full of nagware and malware ———
! ¤¤¤ ReImagePlus (Also added to "uBlock Filters - Badware Risks") ¤¤¤
! https://windowsreport.com/extend-windows-laptop-battery-life/
! https://windowsreport•com/extend-windows-laptop-battery-life/
windowsreport.com##.code-block
! https://appuals.com/fix-error-0x800701e3-on-windows-7-8-1-10/
! https://appuals•com/fix-error-0x800701e3-on-windows-7-8-1-10/
appuals.com##.info.box
appuals.com##.appua-reimage-top
! https://ugetfix.com/ask/how-to-fix-windows-store-error-0x8000ffff/
! https://ugetfix•com/ask/how-to-fix-windows-store-error-0x8000ffff/
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##div.attention-button-box-green
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.sidebar_download_inner
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.primary_download
@@ -183,13 +183,13 @@ ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#.ga-download:has-
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es##.download-button-offer-header
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:has-text(/^Repair\syour\sErrors\sautomatical{2}y$/i)
ugetfix.com,sauguspc.lt,wyleczpc.pl,sichernpc.de,pcseguro.es#?#h2:has-text(/^Repair\syour\sErrors\sautomatical{2}y$/i) + p
! https://www.thewindowsclub.com/fix-windows-update-error-0xc1900130-on-windows-10
! https://www•thewindowsclub•com/fix-windows-update-error-0xc1900130-on-windows-10
thewindowsclub.com#?#.entry-content > div > strong:has-text(find & fix Windows error)
thewindowsclub.com##div[style^="float: none; margin:10px "]
! https://www.majorgeeks.com/files/details/patch_my_pc.html
! https://www•majorgeeks•com/files/details/patch_my_pc•html
majorgeeks.com##b:has(a[target^=reimage])
||majorgeeks.com/images/icons/red_icon_18x17px.png$image
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
! https://www•2-spyware•com/remove-redirector-gvt1-com•html
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#.attention-button-wrap:has-text(Reimage)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.ui-content > .win
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.sidebar_download_inner > :not(.voting-box, .colorbg-grey)
@@ -203,38 +203,38 @@ majorgeeks.com##b:has(a[target^=reimage])
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:has-text(Reimage)
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.quick-download-button-text
! ¤¤¤ ScanUtilities ¤¤¤
! https://www.bynarycodes.com/fix-windows-10-update-error-0x80070006/
! https://www•bynarycodes•com/fix-windows-10-update-error-0x80070006/
bynarycodes.com##div[class^=bynar-content_]
bynarycodes.com##.panel:has(a[href*="scanutilities.com"])
! ¤¤¤ Driver Easy ¤¤¤
! https://www.drivereasy.com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
! https://www•drivereasy•com/knowledge/fix-critical-service-failed-blue-screen-error-on-windows-10/
drivereasy.com#?#.pakb-content ol:has-text(Download and install Driver Easy)
drivereasy.com#?#.pakb-content p:has-text(Driver Easy)
drivereasy.com#?#.pakb-content div.info.note:has-text(drivereasy.com)
! https://www.drivereasy.com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
! https://www•drivereasy•com/knowledge/fixed-how-to-fix-stop-error-0x0000001e/
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 80"]
drivereasy.com#?#.pakb-content p:has-text(the FREE version)
drivereasy.com#?#.pakb-content p:has-text(the Pro version)
! https://www.drivereasy.com/knowledge/download-gigabyte-audio-driver/
! https://www•drivereasy•com/knowledge/download-gigabyte-audio-driver/
drivereasy.com#?#.pakb-content img[sizes^="(max-width: 79"]
drivereasy.com#?#.pakb-content span[id^=i-]:has-text(Automatically update your)
drivereasy.com##.pakb-content li:has(a[href="#automatically"])
! https://www.drivereasy.com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
! https://www•drivereasy•com/knowledge/epson-xp-420-driver-update-for-windows-7-8-and-10/
drivereasy.com#?#.pakb-content span[id^=i-]:has-text(Update drivers with Driver Easy)
drivereasy.com#?#.pakb-content figcaption:has-text(for free if you like)
drivereasy.com#?#.pakb-content li:has(a:has-text(Update drivers with Driver Easy))
! https://www.drivereasy.com/knowledge/solved-this-display-does-not-support-hdcp/
! https://www•drivereasy•com/knowledge/solved-this-display-does-not-support-hdcp/
drivereasy.com#?#.pakb-content p:has-text(click Update All)
! ¤¤¤ Slimware DriverUpdate ¤¤¤
! https://forums.windowscentral.com/
! https://forums•windowscentral•com/
forums.windowscentral.com###navbar_notice_33
! ¤¤¤ Driverpack Online (Accidentally also fixed in EasyPrivacy and «AdGuard Mobile Ads») ¤¤¤
||google-analytics.com^$domain=sdi-tool.org
! ¤¤¤ SpyHunter links ¤¤¤
! https://howtoremove.guide/redirector-gvt1-com-virus-malware-chrome-removal/
! https://howtoremove•guide/redirector-gvt1-com-virus-malware-chrome-removal/
howtoremove.guide##div[style^="border:2px"]
howtoremove.guide#?#.entry-content > div:has-text(Special Offer)
! https://www.2-spyware.com/remove-redirector-gvt1-com.html
! https://www•2-spyware•com/remove-redirector-gvt1-com•html
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk##.automatic_removal_list_w > .ar_block_description
2-spyware.com,novirus.uk,faravirus.ro,uirusu.jp,virusi.hr,wubingdu.cn,avirus.hu,ioys.gr,odstranitvirus.cz,tanpavirus.web.id,utanvirus.se,virukset.fi,losvirus.es,virusler.info.tr,semvirus.pt,lesvirus.fr,senzavirus.it,dieviren.de,viruset.no,usunwirusa.pl,zondervirus.nl,bedynet.ru,virusai.lt,virusi.bg,viirused.ee,udenvirus.dk#?#a:has-text(SpyHunter)
guide##a[href*="download.enigmasoftware.com/spyhunter-free-download/stpl_94/SpyHunter-Installer.exe"]
@@ -246,9 +246,9 @@ virusresearch.org##.virus-before-content
virusresearch.org##.q2w3-fixed-widget-container
virusresearch.org##.virus-after-fourth-h2
virusresearch.org##.virus-after-content
! https://www.cyclonis.com/how-to-create-gmail-account-without-phone-number/
! https://www•cyclonis•com/how-to-create-gmail-account-without-phone-number/
cyclonis.com##div.rotatead-container:has(.download[data-params*="dl.enigmasoftware.com"])
! https://www.2-viruses.com/remove-ad-spam-press-allow-to-continue
! https://www•2-viruses•com/remove-ad-spam-press-allow-to-continue
2-viruses.com##.active.prods-win.prod-download
||2-viruses.com/downloads/spyhunter2^$all,~inline-font
! https://github.com/iam-py-test/my_filters_001/issues/119
@@ -281,16 +281,16 @@ sensorstechforum.com###win_top_new_hidden
macsecurity.net##.banner
macsecurity.net##.btn-download.btn-lg.btn
! ¤¤¤ Restoro ¤¤¤
! https://www.windowsdispatch.com/fix-system-restore-0x81000203-error-code/
! https://www•windowsdispatch•com/fix-system-restore-0x81000203-error-code/
windowsdispatch.com##strong
! https://dlldownloads.com/xlive-dll/
! https://dlldownloads•com/xlive-dll/
dlldownloads.com##.page-container > p
! https://windowsreport.com/find-remove-duplicate-files-windows-10/
! https://windowsreport•com/find-remove-duplicate-files-windows-10/
windowsreport.com##.bnr-block
! https://windowsreport.com/how-to-update-roblox/ (08/12/2022)
! https://windowsreport•com/how-to-update-roblox/ (08/12/2022)
windowsreport.com##div[class^=restoro-download] + section
windowsreport.com##div[class^=refmed]
! https://appuals.com/pr-connect-reset-error/
! https://appuals•com/pr-connect-reset-error/
appuals.com##.wptp
appuals.com#?#h3:has(+ p:has-text(Download and run Restoro ))
appuals.com#?#p:has-text(Download and run Restoro )
@@ -333,7 +333,7 @@ exefiles.com##.row:has(a[href*="/recommended/"])
/^https://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)\d{2,8}\.[a-z-]{5,22}\d{1,8}\.(icu|life|live)/$1p,doc
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/$doc,match-case,domain=com|fun|guru|life|online|pw|site|space|top
/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/$doc,match-case,domain=com|fun|guru|life|online|pw|site|space|top
! https://github.com/AdguardTeam/AdguardFilters/issues/58737
! https://github•com/AdguardTeam/AdguardFilters/issues/58737
/^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php$/$doc,domain=biz|fun|live
! ——— Banner for "MSN New Tab" ———
@@ -517,7 +517,7 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"])
||githubuser.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com
||rgithub.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com
||githubt.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com
! https://scammer.info/t/discord-nitro-scam-25/87887
! https://scammer•info/t/discord-nitro-scam-25/87887
||discorde-nitre.xyz^$all,~inline-font,domain=~fake-malware-version-of-discordapp.com
! ——— Frequently used to infiltrate and maliciously redirect sites, e.g. ToonBarn ———
@@ -3750,7 +3750,7 @@ zombooru.com##a[href="http://www.hard55.com"]
://192.243.59.$doc
://192.243.61.$doc
!#endif
! https://twitter.com/SUNgoddessOKAMI/status/1221295265195405315
! https://twitter•com/SUNgoddessOKAMI/status/1221295265195405315
||deviuser.com^$doc
! https://github.com/AdguardTeam/AdguardFilters/issues/61838
/scan-update-and-protect-your-browser.html$doc
@@ -3808,7 +3808,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||hooligapps.com^$all,~inline-font
||best202*-games-web1.com^$all,~inline-font
||theonlygames.com^$all,~inline-font
! https://maldita.es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/
! https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/
||notified-today.com^
||antivirus-update.com^$doc
||new-message.cc^$doc
@@ -3820,12 +3820,12 @@ zombooru.com##a[href="http://www.hard55.com"]
||stay-notified.com^$doc
||stay-notified.xyz^$doc
||167.99.249.47^$doc
! https://maldita.es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/
! https://maldita.es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/
! https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/
! https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/
||moderncomputer.net^
! https://maldita.es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/
! https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/
||version.gratis^
! https://maldita.es/malditobulo/2020/11/18/no-no-es-cierto-que-amancio-ortega-haya-invertido-100-millones-en-bitcoin-revolution-es-una-web-falsa/
! https://maldita•es/malditobulo/2020/11/18/no-no-es-cierto-que-amancio-ortega-haya-invertido-100-millones-en-bitcoin-revolution-es-una-web-falsa/
||starpowders.github.io^
! https://github.com/AdguardTeam/AdguardFilters/issues/69611
/^http://[a-z0-9-]{30,}\..*\.elasticbeanstalk\.com(/|$)/
@@ -3890,7 +3890,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||108.170.52.156^$doc
! https://github.com/DandelionSprout/adfilt/issues/198
||mysecrethoookup.com^$all,~inline-font
! https://www.bleepingcomputer.com/virus-removal/ (18/06/2021)
! https://www•bleepingcomputer•com/virus-removal/ (18/06/2021)
||toksearches.xyz^$all,~inline-font
||smashapps.net^$all,~inline-font
||smashappsearch.com^$all,~inline-font
@@ -3902,7 +3902,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||searchinggood.com^$all,~inline-font
||searchprivacyplus.com^$all,~inline-font
||powersmashsearch.com^$all,~inline-font
! https://www.bleepingcomputer.com/virus-removal/remove-please-allow-to-watch-the-video
! https://www•bleepingcomputer•com/virus-removal/remove-please-allow-to-watch-the-video
||1000-dollar.cash^$all,~inline-font
||1000-eur.cash^$all,~inline-font
||bokerstars.com^$all,~inline-font
@@ -3996,9 +3996,9 @@ zombooru.com##a[href="http://www.hard55.com"]
||95.168.170.165^$doc
||213.227.145.147^$doc
||213.227.149.216^$doc
! https://twitter.com/adamziaja/status/1252234957679808513
! https://twitter•com/adamziaja/status/1252234957679808513
||wow-robotics.xyz^$all,~inline-font
! https://blog.sucuri.net/2021/05/woocommerce-credit-card-skimmer.html
! https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html
||deepe.icu^$all,~inline-font
||google-analytics.buzz^$all,~inline-font
||intr0.cyou^$all,~inline-font
@@ -4046,7 +4046,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||ssielearning.com^$all,~inline-font
||paymetconfirm.com^$all,~inline-font
||69.49.231.244^$doc
! https://movsb.0x0.st/users/mia
! https://movsb•0x0•st/users/mia
||vid.me^$third-party
||5starhdporn.com^$frame,third-party
! https://github.com/DandelionSprout/adfilt/issues/228
@@ -4116,22 +4116,22 @@ zombooru.com##a[href="http://www.hard55.com"]
||pc-my-protection.xyz^$all,~inline-font
||beta-news.org^$doc
! https://github.com/DandelionSprout/adfilt/pull/266
! https://www.virustotal.com/gui/domain/kirstialechulbard.space/relations
! https://www.virustotal.com/gui/ip-address/198.54.117.244/relations
! https://www•virustotal•com/gui/domain/kirstialechulbard•space/relations
! https://www•virustotal•com/gui/ip-address/198•54•117•244/relations
||dashwoodestates.com^$all,~inline-font
! http://vxvault.net/ViriFiche.php?ID=44013
! https://www.virustotal.com/gui/url/8066b87ad10ddb5466bc307bb48454139572f6c8c8f80a9734275ac89cf966af/detection
! https://www.virustotal.com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection
! https://safeweb.norton.com/report/show?url=192.3.110.170
! http://vxvault•net/ViriFiche•php?ID=44013
! https://www•virustotal•com/gui/url/8066b87ad10ddb5466bc307bb48454139572f6c8c8f80a9734275ac89cf966af/detection
! https://www•virustotal•com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection
! https://safeweb•norton•com/report/show?url=192•3•110•170
||192.3.110.170^$all,~inline-font
! https://forums.malwarebytes.com/topic/278209-removal-instructions-for-socialsearchconverter/
! https://forums•malwarebytes•com/topic/278209-removal-instructions-for-socialsearchconverter/
||socialsearchconverter.com^$doc
||install.socialsearchconverter.com^$all,~inline-font
||feed.socialsearchconverter.com^$all,~inline-font
||api.socialsearchconverter.com^$all,~inline-font
||notify-service.com^$all,~inline-font
||install.stream-all.com^$all,~inline-font
! copied over from https://github.com/uBlockOrigin/uAssets/issues/9848
! Copied over from https://github.com/uBlockOrigin/uAssets/issues/9848
||gghacks.com^$all,~inline-font
||rewardsgiantusa.com^$doc
||promotionsonlineusa.com^$all,~inline-font
@@ -4143,10 +4143,10 @@ zombooru.com##a[href="http://www.hard55.com"]
||mediafiire.com^$doc
||d1xkyo9j4r7vnn.cloudfront.net^$all,~inline-font
||onlinepromotionsusa.com^$doc
! https://securelist.com/apkpure-android-app-store-infected/101845/
! https://www.virustotal.com/gui/url/866a25343864f03dc5a10105fda523bfbb6ed09c486d07fd31ca2b5306440089/detection
! https://securelist•com/apkpure-android-app-store-infected/101845/
! https://www•virustotal•com/gui/url/866a25343864f03dc5a10105fda523bfbb6ed09c486d07fd31ca2b5306440089/detection
||wcf.seven1029.com^$all,~inline-font
! https://www.virustotal.com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection
! https://www•virustotal•com/gui/url/9c66e331e455dc5c5c9d06e1a537580c9e4db279182d2285c07783e837806a16/detection
||foodin.site^$all,~inline-font
! https://github.com/AdguardTeam/AdguardFilters/issues/91506#issuecomment-904080849
||totalav.com^$all,~inline-font
@@ -4158,22 +4158,22 @@ zombooru.com##a[href="http://www.hard55.com"]
||totaladblock.com^$all,~inline-font
||totaladblocker.xyz^$all,~inline-font
||totalwebshield.xyz^$all,~inline-font
! https://www.virustotal.com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community
! https://www.virustotal.com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection
! https://www.virustotal.com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection
! https://www•virustotal•com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community
! https://www•virustotal•com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection
! https://www•virustotal•com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection
||91.241.19.38^$all,~inline-font
! https://www.virustotal.com/gui/url/46e095c35d83e2dd0b98df4b5844d3d87948de0c930a618600121020a514c801/detection
! https://safeweb.norton.com/report/show?url=telete.in
! https://www.siteadvisor.com/sitereport.html?url=telete.in
! https://www•virustotal•com/gui/url/46e095c35d83e2dd0b98df4b5844d3d87948de0c930a618600121020a514c801/detection
! https://safeweb•norton•com/report/show?url=telete•in
! https://www•siteadvisor•com/sitereport•html?url=telete•in
||telete.in^$all,~inline-font
! https://www.virustotal.com/gui/file/e63b2d03e3fee2d538f8bd721b61dd3641284fa941087d846dea6f15cab40308/community
! https://www.virustotal.com/gui/url/fbbc8a671bff32539bd829a76f6df9f364a21ac2279922e64e3ec494a1669dd3/detection
! https://www•virustotal•com/gui/file/e63b2d03e3fee2d538f8bd721b61dd3641284fa941087d846dea6f15cab40308/community
! https://www•virustotal•com/gui/url/fbbc8a671bff32539bd829a76f6df9f364a21ac2279922e64e3ec494a1669dd3/detection
||kiff.tech^$all,~inline-font
! https://www.virustotal.com/gui/domain/kiff.tech/relations
! https://www.virustotal.com/gui/url/dc038496b1b5358b97f89440135ec91258b406c40859a2cd95983dc7a81e0cfa/detection
! https://www•virustotal•com/gui/domain/kiff•tech/relations
! https://www•virustotal•com/gui/url/dc038496b1b5358b97f89440135ec91258b406c40859a2cd95983dc7a81e0cfa/detection
||45.90.58.90^$doc
! https://www.virustotal.com/gui/file/e565ba89d034418fd26a5f642f6eeee4d72ee3b8dc69523419b7ca8dfd452730/community
! https://www.virustotal.com/gui/url/e3a9189a1e1256beba8e0fc3abfeab6acb09f7f8cabfd973e22be9f77bb6886f/detection
! https://www•virustotal•com/gui/file/e565ba89d034418fd26a5f642f6eeee4d72ee3b8dc69523419b7ca8dfd452730/community
! https://www•virustotal•com/gui/url/e3a9189a1e1256beba8e0fc3abfeab6acb09f7f8cabfd973e22be9f77bb6886f/detection
||95.85.89.98^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/issues/267
||tekhacks.net^$all,~inline-font
@@ -4190,7 +4190,7 @@ zombooru.com##a[href="http://www.hard55.com"]
!! https://www.virustotal.com/gui/file/9f154115fa8045aa05f15f7cd1de9623ebe32e8ea400279ecb5dfa3596952e3b/community
||103.169.90.205^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/pull/281
! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
||125.44.43.45^$all,~inline-font
||182.121.8.240^$all,~inline-font
||42.235.183.74^$all,~inline-font
@@ -4201,9 +4201,9 @@ zombooru.com##a[href="http://www.hard55.com"]
||188.120.50.98^$all,~inline-font
||190.238.183.5^$all,~inline-font
||27.220.253.78^$all,~inline-font
! https://www.virustotal.com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community
! https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community
||esetnode32-antiviru.ydns.eu^$all,~inline-font
! https://www.joesandbox.com/analysis/486636/0/html#domains
! https://www•joesandbox•com/analysis/486636/0/html#domains
||aieov.com^$all,~inline-font
! Relations to the original domain
||192.3.194.242^$all,~inline-font
@@ -4277,17 +4277,17 @@ zombooru.com##a[href="http://www.hard55.com"]
||army-glo.scrollingsystem.com^$doc
||mcafee12.tt.omtrdc.net^$doc
||trolleydrop.info^$doc
! https://www.virustotal.com/gui/ip-address/70.32.1.32/relations
! https://www•virustotal•com/gui/ip-address/70•32•1•32/relations
||cd.org^$doc
! https://www.virustotal.com/gui/file/78f490e503c86eaaff5760197b9ff5308ed6e03161af13194a6c1e0cd95422de/community
! https://www•virustotal•com/gui/file/78f490e503c86eaaff5760197b9ff5308ed6e03161af13194a6c1e0cd95422de/community
! https://github.com/DandelionSprout/adfilt/commit/f7f114945c83b339be5cdd848e229680d9918abb#commitcomment-57642875
||23.94.26.138^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/pull/298
! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
! https://www•virustotal•com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community
||205.185.126.200^$all,~inline-font
! https://www.virustotal.com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community
! https://www•virustotal•com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community
||185.243.56.167^$all,~inline-font
! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
||123.10.224.135^$all,~inline-font
||59.47.187.147^$all,~inline-font
||39.68.172.210^$all,~inline-font
@@ -4335,24 +4335,24 @@ zombooru.com##a[href="http://www.hard55.com"]
||111.224.199.91^$all,~inline-font
||119.250.236.122^$all,~inline-font
||112.30.110.58^$all,~inline-font
! https://www.virustotal.com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community
! https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community
||pcae.de^$doc
! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
||117.196.49.21^$all,~inline-font
||115.55.54.234^$all,~inline-font
||115.52.17.123^$all,~inline-font
||182.59.69.21^$all,~inline-font
! https://www.virustotal.com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community
! https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community
||chip-secured-download.de^$all,~inline-font
! https://www.virustotal.com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb
! https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb
! Domains which resolve to this (already blocked) IP - for users of HOSTs/Domains/uBlock Origin
||nctylivpwhpby.com^$all,~inline-font
||phhitgjxsit.com^$all,~inline-font
! https://www.virustotal.com/gui/url/b2936e74f35940d2f09cabf4e089a0d655e62a5fc08ad32e1fae79a62683683f?nocache=1
! https://www•virustotal•com/gui/url/b2936e74f35940d2f09cabf4e089a0d655e62a5fc08ad32e1fae79a62683683f?nocache=1
||saimission.org^$all,~inline-font
! https://www.virustotal.com/gui/url/4c2c3cf2e4f5b9ac9765eb9c58f2756d8f0f4632ec707107afe3c111f4749025?nocache=1
! https://www•virustotal•com/gui/url/4c2c3cf2e4f5b9ac9765eb9c58f2756d8f0f4632ec707107afe3c111f4749025?nocache=1
||grub-wa-saya.duckdns.org^$all,~inline-font
! https://www.virustotal.com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations
! https://www•virustotal•com/gui/file/a6e89d2bb1c2da1d852fb8e248f39cf7b3d4b0ea05a8d8f343d1b8e74d271d43/relations
||driversupport.com^$doc
! A PUP and scam website
||mycleanpc.com^$doc
@@ -4363,9 +4363,9 @@ zombooru.com##a[href="http://www.hard55.com"]
! The main website for the MyCleanPC company
||realdefen.se^$doc
! Vermilion Strike
! https://www.virustotal.com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations
! https://www•virustotal•com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations
||160.202.163.100^$all,~inline-font
! https://www.virustotal.com/gui/ip-address/160.202.163.100/relations
! https://www•virustotal•com/gui/ip-address/160•202•163•100/relations
||microsoftkernel.com^$all,~inline-font
||microsofthk.com^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-938167311
@@ -4376,11 +4376,11 @@ zombooru.com##a[href="http://www.hard55.com"]
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-944612753
||pushbizapi.com^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/pull/303
! https://www.virustotal.com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community
! https://www•virustotal•com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community
||45.95.169.115^$all,~inline-font
! https://www.virustotal.com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community
! https://www•virustotal•com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community
||45.148.120.80^$all,~inline-font
! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
! https://www•virustotal•com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community
||85.239.33.9^$all,~inline-font
! Relations to the domain above
||adminsys.serveftp.com^$all,~inline-font
@@ -4397,11 +4397,11 @@ zombooru.com##a[href="http://www.hard55.com"]
||c4ase-verified9932.serveftp.com^$all,~inline-font
||1log-wellsfargo.serveftp.com^$all,~inline-font
||eposcardokubo.serveftp.com^$all,~inline-font
! https://www.virustotal.com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community
! https://www•virustotal•com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community
||107.173.176.183^$all,~inline-font
! https://www.virustotal.com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community
! https://www•virustotal•com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community
||45.148.120.171^$all,~inline-font
! https://twitter.com/soranker0/status/1449491402409185283
! https://twitter•com/soranker0/status/1449491402409185283
://disordgift.$all,~inline-font
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114
||free-softs.net^$all,~inline-font
@@ -4428,7 +4428,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||kokotrokot.com^$all,~inline-font
!!!?next_url=$doc,popup (https://github.com/AdguardTeam/AdguardFilters/issues/108072#issuecomment-1021534226)
?uclickhash=$doc,popup
! https://www.upwork.com/freelance-jobs/apply/Integarte-push-notification-for-chrome_~013c73ed9282225184/
! https://www•upwork•com/freelance-jobs/apply/Integarte-push-notification-for-chrome_~013c73ed9282225184/
||mugrikees.com^$all,~inline-font
||alpha-news.org^$all,~inline-font
! https://github.com/iam-py-test/investigations/blob/main/2021/11/3/1.md
@@ -4437,7 +4437,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||youvetube.com^$all,~inline-font
||youutube.com^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/pull/348
! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
||39.83.80.247^$all,~inline-font
||68.197.33.124^$all,~inline-font
||219.157.21.37^$all,~inline-font
@@ -4469,7 +4469,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||106.86.172.194^$all,~inline-font
||103.233.216.77^$all,~inline-font
||183.188.192.55^$all,~inline-font
! https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
! https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community
||198.23.255.14^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248
@@ -4480,7 +4480,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||runmodes.com^$all,~inline-font
||91.121.67.60^$all,~inline-font
||172.67.186.189^$all,~inline-font
! https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111
! https://www•virustotal•com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111
||inconclusive-pyrite-grandparent.glitch.me^$all,~inline-font
||delicate-tame-angora.glitch.me^$all,~inline-font
||secureinvoice.glitch.me^$all,~inline-font
@@ -4491,9 +4491,9 @@ zombooru.com##a[href="http://www.hard55.com"]
||aquamarine-cotton-impala.glitch.me^$all,~inline-font
||mature-periwinkle-advantage.glitch.me^$all,~inline-font
||tough-numerous-lemur.glitch.me^$all,~inline-font
! https://scammer.info/t/mcafee-phish/83725
! https://scammer•info/t/mcafee-phish/83725
||securefirst.us-east-1.linodeobjects.com^$all,~inline-font
! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community
||39.65.72.211^$all,~inline-font
||42.238.151.197^$all,~inline-font
||27.213.60.53^$all,~inline-font
@@ -4514,21 +4514,21 @@ zombooru.com##a[href="http://www.hard55.com"]
||members.tonightshookup.com^$all,~inline-font
||t.tonightshookup.com^$all,~inline-font
||yourladiefun.life^$all,~inline-font
! https://www.virustotal.com/gui/url/a2524bba49ae71297d2b408b30d058700d9c80b5b1154924cafe190ec3e605a6/detection
! https://www•virustotal•com/gui/url/a2524bba49ae71297d2b408b30d058700d9c80b5b1154924cafe190ec3e605a6/detection
||newrrb.bid^$all,~inline-font
! https://www.virustotal.com/gui/file/2b2628a50d3b39b0fa2395d487bf62b00e37cdae847ff76ee58399bbe4e9f7b3/community
! https://www•virustotal•com/gui/file/2b2628a50d3b39b0fa2395d487bf62b00e37cdae847ff76ee58399bbe4e9f7b3/community
||194.87.138.20^$all,~inline-font
! https://www.virustotal.com/gui/file/b320bc7a9151d70daca038c4356ca89bfcd4918bcd6f0f73683a27a6a72467ae/community
! https://www•virustotal•com/gui/file/b320bc7a9151d70daca038c4356ca89bfcd4918bcd6f0f73683a27a6a72467ae/community
||103.167.92.73^$all,~inline-font
! https://www.virustotal.com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community
! https://www•virustotal•com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community
||bursakulis.com^$all,~inline-font
! https://www.virustotal.com/gui/url/b333c49efa4d399e65c5e2d96a905b380acbca58a3e3052b7bd7cfcb3e0e81ee
! https://www•virustotal•com/gui/url/b333c49efa4d399e65c5e2d96a905b380acbca58a3e3052b7bd7cfcb3e0e81ee
||610418.selcdn.ru^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-977912975
! https://www.tv2.no/nyheter/14368524/
! https://www•tv2•no/nyheter/14368524/
||alexstewartinternationalltd.rw^$all,~inline-font
||vps.re^$all,~inline-font
! https://www.tek.no/i/wOVv0o/
! https://www•tek•no/i/wOVv0o/
||21steditionnaturalgh.com^$all,~inline-font
! https://github.com/iam-py-test/investigations/blob/main/2021/11/24/1.md
||macsoftwarez.com^$all,~inline-font
@@ -4544,7 +4544,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||yunosurveys.com^$all,~inline-font
! https://github.com/uBlockOrigin/uAssets/pull/10620
||shadyclient.net^$all,~inline-font
! https://www.virustotal.com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community
! https://www•virustotal•com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community
||58.249.74.79^$all,~inline-font
||27.45.14.109^$all,~inline-font
||27.40.101.191^$all,~inline-font
@@ -4560,13 +4560,13 @@ zombooru.com##a[href="http://www.hard55.com"]
||totalnicefeed.com^$all,~inline-font
! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/2.md
||bestlifeoffer20.com^$doc
! https://scammer.info/t/password-stealer/84348
! https://bazaar.abuse.ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
! https://scammer•info/t/password-stealer/84348
! https://bazaar•abuse•ch/sample/462a689d171f543c10efa08e963996d382585b67a6b298ec40d64f924adfb47a/
||youtube.com/watch?v=8nY7SnvNxH4^$all,~inline-font
||bit.ly/3p8kN5V^$doc
||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$all,~inline-font
||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$all,~inline-font
! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
||110.89.59.135^$all,~inline-font
||113.116.89.1^$all,~inline-font
||119.183.146.191^$all,~inline-font
@@ -4578,33 +4578,33 @@ zombooru.com##a[href="http://www.hard55.com"]
||171.112.177.90^$all,~inline-font
||115.194.38.143^$all,~inline-font
||61.52.79.32^$all,~inline-font
! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
! https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466
://ups-dk.$doc,denyallow=dk|nu|se|no|fo|gl|ups.com,domain=ups-dk.*
! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
! https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1
||lowseelan.com^$all,~inline-font
! https://www.virustotal.com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
! https://www•virustotal•com/gui/file/50fd813cf8fe981e6aee179f8ba394e5527c5128b84c328f9f8347cd994bbc42/community
||dl02.s3.amazonaws.com/installers/747947/oi_picasa38-setupexe.exe^$all,~inline-font
! https://www.virustotal.com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
! https://www•virustotal•com/gui/file/2ea599605c4d65902943f12e1114a71af7a40fa7dffbf018b0ee3e7a61aaeaa3/community
||dl02.s3.amazonaws.com/installers/424531/2gzbsoj4gxb.exe^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/pull/395
! https://www.huorong.cn/info/1531309921141.html
! https://www•huorong.cn/info/1531309921141.html
||kuaizip.com^$all,~inline-font
! https://www.huorong.cn/info/1618397948649.html - possible malware
! https://www•huorong.cn/info/1618397948649.html - possible malware
! ||zhuangjizhuli.com^$all,~inline-font
! ||zhuangjizhuli.net^$all,~inline-font
! https://github.com/uBlockOrigin/uAssets/pull/9656
||geekotg.com^$all,~inline-font
! https://www.huorong.cn/info/1526627586130.html
! https://www•huorong.cn/info/1526627586130.html
||xiaobaixitong.com^$all,~inline-font
! https://www.huorong.cn/info/1577158839403.html
! https://www•huorong.cn/info/1577158839403.html
||daque.cn^$all,~inline-font
! https://www.huorong.cn/info/1598957552515.html
! https://www•huorong.cn/info/1598957552515.html
||dabaicai.com^$all,~inline-font
! https://www.huorong.cn/info/1617368984641.html
! https://www•huorong.cn/info/1617368984641.html
||qqfzn.com^$all,~inline-font
! https://github.com/uBlockOrigin/uAssets/pull/10017
||flash.cn^$all,~inline-font
! https://www.nrk.no/vestfoldogtelemark/1.15750360
! https://www•nrk.no/vestfoldogtelemark/1.15750360
||dundeehills.group^$all,~inline-font
!+ NOT_OPTIMIZED
||132.148.220.142^$doc
@@ -4618,8 +4618,8 @@ zombooru.com##a[href="http://www.hard55.com"]
! https://scammer.info/t/fake-facebook-login-page/84939
||royyer.us/R8cWuvQjhtM^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-988127908
! https://www.tek.no/i/lVeQAe/
! https://www.nkom.no/aktuelt/ikke-trykk-pa-lenker-i-sms--for-du-er-helt-sikker/
! https://www•tek.no/i/lVeQAe/
! https://www•nkom.no/aktuelt/ikke-trykk-pa-lenker-i-sms--for-du-er-helt-sikker/
||eccolabgroup.com^$all,~inline-font
||galerijajava.ba^$all,~inline-font
||p-stn.net^$all,~inline-font
@@ -4629,7 +4629,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||34.201.22.10^$all,~inline-font
! https://scammer.info/t/crypto-scammers-onceagain/85354
||business.google.com/website/billyandscapedesign^$all,~inline-font
! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community
||123.10.225.196^$all,~inline-font
||122.192.106.84^$all,~inline-font
||172.88.199.9^$all,~inline-font
@@ -4680,9 +4680,9 @@ zombooru.com##a[href="http://www.hard55.com"]
||d13pxqgp3ixdbh.cloudfront.net^$all,~inline-font
! Other
||crashfixes.com^$all,~inline-font
! https://www.virustotal.com/gui/url/c25fe34c05cc8e9136027a67c277e175a5d6e35af921ee37bad98bdfeea6a2f9/community
! https://www•virustotal•com/gui/url/c25fe34c05cc8e9136027a67c277e175a5d6e35af921ee37bad98bdfeea6a2f9/community
||splendid-fallacious-anaconda.glitch.me^$all,~inline-font
! https://www.virustotal.com/gui/file/9d40ae0439ddc594b2cf64e21ad0fdea9bb440524298e3a6bcfcc1fb417f1ed2/relations
! https://www•virustotal•com/gui/file/9d40ae0439ddc594b2cf64e21ad0fdea9bb440524298e3a6bcfcc1fb417f1ed2/relations
||91.240.118.172^$all,~inline-font
! "Press Allow to continue"
||kuyhaa-mee.com^$all,~inline-font
@@ -4693,7 +4693,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||myget.org/feed/discord-nitro-hack/package/nuget/Free-discord-nitro-codes-2021^$doc
||lucymods.com^$all,~inline-font
||gluegames.xyz^$all,~inline-font
! https://twitter.com/iam_py_test/status/1496259425493225472
! https://twitter•com/iam_py_test/status/1496259425493225472
||sites.google.com/view/groundworkssolutions/contact-us^$all,~inline-font
||sites.google.com/view/groundworkssolutions/^$all,~inline-font
||sites.google.com/mytv/maintenance^$all,~inline-font
@@ -4708,7 +4708,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||download2340.mediafire.com/eift3ac9qmig/y65v1rk0zy7ot4a/The__Setup__With__File.zip^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1074966240
||melding.link^$doc
! https://twitter.com/MBThreatIntel/status/1509956416311742464
! https://twitter•com/MBThreatIntel/status/1509956416311742464
||xposednews.xyz^$all,~inline-font
||tomguide.xyz^$all,~inline-font
||eronews.xyz^$all,~inline-font
@@ -4729,7 +4729,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||freeversioncrack.com^$document
||top3hostngc.xyz^$all,~inline-font
||198.199.120.251^$all,~inline-font
! https://www.telia.no/kundeservice/mobil/malware-flubot-android/
! https://www•telia.no/kundeservice/mobil/malware-flubot-android/
!+ NOT_OPTIMIZED
/^https?://(www\.)?[a-z0-9-]{1,}\.[a-z]{2,17}/[a-z0-9]/\?[a-z0-9.-]{8,}$/$doc
! A Discord conversation I had about Throneful
@@ -4753,7 +4753,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||cumpussyy.uno^$all,~inline-font
||195.201.253.130^$doc
||195.201.253.131^$doc
! The bottom download button on https://www.sushichop.com/
! The bottom download button on https://www•sushichop•com/
||installiq.com^$all,~inline-font
||specgoal.com^$all,~inline-font
||sandhyapi.online^$all,~inline-font
@@ -4776,7 +4776,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||96.47.230.68^$doc
||96.47.230.69^$doc
||96.47.230.70^$doc
! https://securitytrails.com/list/ns/ns1.fastthinkingdns.com
! https://securitytrails•com/list/ns/ns1•fastthinkingdns•com
||highercaptcha-settle.$all,~inline-font
||highercaptchasettle.$all,~inline-font
||ns*.fastthinkingdns.com^$all,~inline-font
@@ -4822,7 +4822,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||saferedirects.xyz^$all,~inline-font,domain=~malware-redirection-trains.*
||online-guard.com^$all,~inline-font
/mcafee-safe-browsing/?*=*&*=*&*=*&*=*&*=*&*=$doc,popup,domain=~fake-site-with-malware.*
! https://twitter.com/iam_py_test/status/1545164642346930176
! https://twitter•com/iam_py_test/status/1545164642346930176
||amazon-security-info.lnk.to^$all,~inline-font
! https://github.com/AdguardTeam/AdguardFilters/issues/123968
! https://github.com/AdguardTeam/AdguardFilters/issues/124620
@@ -5137,7 +5137,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||158.247.212.220^$doc
||165.227.168.212^$doc
!#if !ext_ublock
! https://www.reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/
! https://www•reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/
://162.241.115.$doc
!#endif
! https://dinside.dagbladet.no/mobil/ikke-la-deg-friste/76730599
@@ -5383,7 +5383,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||51.91.66.125^$doc
||51.178.76.105^$doc
||147.135.253.55^$doc
! https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www.virustotal.com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app.any.run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade)
! https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade)
||bnbdeal.net^$all,~inline-font
! https://github.com/AdguardTeam/AdguardFilters/issues/129414
!+ NOT_OPTIMIZED
@@ -9413,7 +9413,7 @@ zombooru.com##a[href="http://www.hard55.com"]
://196.245.52.$doc
://196.245.56.$doc
!#endif
! https://www.bleepingcomputer.com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
! https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/
://rufus.download.$doc,popup
://virtualbox.download.$doc,popup
://vidiq.download.$doc,popup
@@ -9948,7 +9948,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||yourticketchance.com^$all,~inline-font
||yourorderupdate.com^$all,~inline-font
||64.132.201.92^$all,~inline-font
! https://www.adressa.no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener
! https://www•adressa.no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener
||acessmygov.online^$all,~inline-font
||centerlinkmygov.com^$all,~inline-font
||centierssl.us^$all,~inline-font
@@ -10673,7 +10673,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||3.231.137.120^$all,~inline-font
||54.204.83.105^$all,~inline-font
! https://github.com/DandelionSprout/adfilt/issues/808
! https://www.mandiant.com/resources/blog/tracking-evolution-gootloader-operations (26/01/2023)
! https://www•mandiant.com/resources/blog/tracking-evolution-gootloader-operations (26/01/2023)
||jonathanbartz.com^$all,~inline-font
||jp.imonitorsoft.com^$all,~inline-font
||junk-bros.com^$all,~inline-font
@@ -10907,7 +10907,7 @@ zombooru.com##a[href="http://www.hard55.com"]
||wuruclas.co.in^$all,~inline-font
||zondeucearixes.com^$all,~inline-font
||85.17.80.16^$all,~inline-font
! https://www.adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull
! https://www•adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull
||sitey.me^$doc
! https://github.com/AdguardTeam/AdguardFilters/issues/151479
||agazpeppily.live^$all,~inline-font
@@ -17015,7 +17015,7 @@ zombooru.com##a[href="http://www.hard55.com"]
! (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497)
/(//|\.|^)github\.[a-z]{2,20}(/|$)/$document,match-case,~third-party,domain=github.*|~com|~org|~net|~co|~blog|~community|~host|~io|~microsoft|~office|~uk|~us|~xn--fiqs8s|~dev|~archive.*
||github.sale^$all,~inline-font
! https://www.tv2.no/nyheter/innenriks/advarer-ikke-klikk-pa-lenken/16040614/
! https://www•tv2.no/nyheter/innenriks/advarer-ikke-klikk-pa-lenken/16040614/
||0nedr1ved0cumentonline.com^$all,~inline-font
||88godetailsvc.com^$all,~inline-font
||amexmobileupdate.cc^$all,~inline-font
@@ -22905,11 +22905,11 @@ zombooru.com##a[href="http://www.hard55.com"]
!#endif
! ——— Standard malware that I stumbled upon on my own ———
! http://www.toorgle.net/results.php?q=fetishkitsch&security=666
! http://www.toorgle•net/results•php?q=fetishkitsch&security=666
||downloadprovider.me^$all,~inline-font
##a[href*=".downloadprovider.me/"]
toorgle.net##.join
! https://www.riverbender.com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877.cfm
! https://www•riverbender•com/articles/details/two-charged-in-connection-of-the-stallon-drug-raid-in-wood-river-46877•cfm
||cash93.com^$all,~inline-font
||a4alig.com^$all,~inline-font
||cash03.com^$all,~inline-font
@@ -22922,7 +22922,7 @@ toorgle.net##.join
||netpay8.com^$all,~inline-font
||slimxketo.com^$all,~inline-font
||works35.com^$all,~inline-font
! Various ex-affiliate links at www.zombooru.com
! Various ex-affiliate links at www•zombooru•com
||allowandgo.com^$all,~inline-font
||aksuu.ru^$all,~inline-font
||allow-space.com^$all,~inline-font
@@ -22936,7 +22936,7 @@ toorgle.net##.join
||push.weo.su^$all,~inline-font
||traffsend.me^$all,~inline-font
||wwopenclick.club^$all,~inline-font
! Spam comments at https://www.accountkiller.com/en/delete-htcdev-account
! Spam comments at https://www.accountkiller•com/en/delete-htcdev-account
||azhydroxychloroquine.com^$all,~inline-font
||wisig.org^$all,~inline-font
||confrancisyalgomas.com^$all,~inline-font
@@ -22948,13 +22948,13 @@ toorgle.net##.join
||amoxycillin1st.com^$all,~inline-font
! The Jerma985 Discord server
||crazycrabreedville.com^$all,~inline-font
! https://flclever.weebly.com/pixie-hollow-mini-games.html (06/05/2021)
! https://flclever.weebly•com/pixie-hollow-mini-games•html (06/05/2021)
||messium.info^$all,~inline-font
! Various Google searches
://hullcitytigers.com^$doc
! Various search results for 'kelloggs tresor' in Norwegian (30/05/2021)
/pgxhtogrzm-$doc
! https://fx-onlinee.blogspot.com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj
! https://fx-onlinee•blogspot•com/2021/06/?r=Bergens-Tidende-Flertallet-av-fastlegene-i-Trondheim-sier-nei-til-Janssen-vaksinen-Umulig-%C3%A5-ta-det-ansvaret-seo+aj
||blogspot.com/*/?r=*-seo+aj$doc
! Fake security sites that think every single domain is a supervirus and which try to make you install PUP (Most commonly SpyHunter)
||malwarecleanerpro.com^$doc
@@ -25187,8 +25187,8 @@ toorgle.net##.join
||sidenoteconcern.com^$all,~inline-font
||abnegationbanquet.com^$all,~inline-font
||192.243.61.225^$doc
! https://twitter.com/medicinehelp/status/1550250932394409985
! https://securitytrails.com/list/ip/147.135.16.27
! https://twitter•com/medicinehelp/status/1550250932394409985
! https://securitytrails•com/list/ip/147•135•16•27
||2spendless.$doc
||acrx.online^$doc
||acrx.org^$doc
@@ -25244,11 +25244,11 @@ toorgle.net##.join
||medicinecoupons.xyz^$doc
||medicinehelp.news^$doc
||147.135.16.27^$doc
! https://www.google.no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img
! https://www•google.no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img
||ingeniovirtual.com^$doc
! Spambot posts on Tumblr (19/09/2022)
tumblr.com##div[data-id][tabindex="-1"]:has(a[href^="https://href.li/?https://bit.ly/"])
! https://scambiofigu.forumcommunity.net/?t=57482915
! https://scambiofigu.forumcommunity•net/?t=57482915
||scambiofigu.net^$all,~inline-font
! Only links to another site's (APKPure) APKs, yet tries to promote its own browser extension on the alleged download pages, which comes across as suspicious
apkfab.com##.tip-extension
@@ -25396,15 +25396,15 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
! https://app.any.run/tasks/679e9afa-eb19-4414-a086-e280a779a448 and https://tria.ge/230217-xd8nksgc9x/behavioral2
||ru-torproject.ru^$all,~inline-font
||anapatformacion.org/modules/file/tor/tor-browser.zip^$all,~inline-font
! https://forums.malwarebytes.com/topic/295588-support-scam-supportclientexe-and-screenconnectwindowsclientexe/ (account required)
! https://forums.malwarebytes.com/topic/295605-techsupport-scam/ (account required)
! https://forums•malwarebytes•com/topic/295588-support-scam-supportclientexe-and-screenconnectwindowsclientexe/ (account required)
! https://forums•malwarebytes•com/topic/295605-techsupport-scam/ (account required)
! https://app.any.run/tasks/0f8b5786-177a-45c0-a1de-32e0d68beff2
||123secure.org^$all,~inline-font
! https://github.com/RPiList/specials/issues/948#issuecomment-1458739160
||yuppdownload.com^$all,~inline-font
! Commonly set as a proxy on hacked devices (https://www.virustotal.com/gui/url/e610e7d09c614529cb8c64185717769946f5c86044ac5c31c6608e604995f577/detection)
||34.80.59.191^$all,~inline-font
! Various domains on https://securitytrails.com/list/ip/72.14.178.174
! Various domains on https://securitytrails•com/list/ip/72•14•178•174
|http://www6.$doc,domain=~often-used-in-malware-redirections.*
|http://www1.*&kw$doc,domain=~often-used-in-malware-redirections.*
||megabooru.com^$all,~inline-font
@@ -25423,7 +25423,7 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||96.126.123.244^$doc
||173.255.194.134^$doc
||198.58.118.167^$doc
! https://hutudole.com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/
! https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/
||123chance.net^$all,~inline-font
||123links4u.net^$all,~inline-font
||123prizes.net^$all,~inline-font
@@ -25806,7 +25806,7 @@ cdburnerxp.se##[href*="/downloadsetup.exe"]
||94.237.93.242^$all,~inline-font
||94.237.99.118^$all,~inline-font
||139.45.197.249^$all,~inline-font
! https://dnpedia.com/tlds/topm.php bizarrely listing "anahitagirted.uno" as the 622th most visited domain worldwide
! https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide
||acorusinfield.life^$all,~inline-font
||acridlydebit.live^$all,~inline-font
||aeneasclosure.website^$all,~inline-font
@@ -26494,9 +26494,9 @@ facebook.com#?#div[class*=ImageBlockContent] .clearfix:has-text(0nl!ne)
$csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|ufl.edu|oecd.org|bu.edu|wikidot.com|alternativenation.net
! ——— Anti-'Malware comments' (Currently Disqus-specific) ———
! https://myip.ms/info/limitexcess
! https://myip•ms/info/limitexcess
*#?#.post-list > .post-content:has-text(/^.*Best\sgirls\swebcam.*$/i)
! https://myip.ms/info/memberarea/My_Account.html
! https://myip•ms/info/memberarea/My_Account•html
*#?#script[src*=disquscdn] + #layout .post-content:has-text(Viagra)
*#?#script[src*=disquscdn] + #layout .post-content:has-text(We offer unlimited)
*#?#script[src*=disquscdn] + #layout .post-content:has-text(.com specialize)
@@ -26510,7 +26510,7 @@ $csp=upgrade-insecure-requests,domain=apache.org|gnu.org|washington.edu|nyu.edu|
! This section covers ones that would not normally be found in EasyList or AdGuard Base, for instance McAfee WebAdvisor (which also tries to change the search engine)
||webadvisorc.rest.gti.mcafee.com^
||mip.api.mcafeewebadvisor.com^
! https://get.adobe.com/no/reader/
! https://get•adobe•com/no/reader/
get.adobe.com###offersInformationPane
! Gigabyte APP Center (which use sneaky tricks to install a Norton 360 trial period; May require «AdGuard for Windows»)
||mb.download.gigabyte.com/FileList/Swhttp/DriverUpd/ANTIVIRUS^
@@ -26843,7 +26843,7 @@ www.microsoft.com##a[data-pfns][data-pfns^="9"][data-pfns*="dev."]
www.microsoft.com##a[data-pfns][href*=pacman]
www.microsoft.com##a[data-pfns][href*=pac-men]
! https://eclypsium.com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/
! https://eclypsium•com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/
|http://mb.download.gigabyte.com/FileList/Swhttp/LiveUpdate4^
! (Presumably anonymous) E-mail tips