diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index 1f84abab8..e256e7dcb 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 27November2025v1 +! Version: 07December2025v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -387,47 +387,11 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ! ——— Typo squatting, misspellings, and honest TLD address bar mistakes ——— ||ubuntu.org^$doc,domain=~you-were-likely-looking-for-ubuntu.com -!#if !adguard_app_windows -||103.224.212.249^$doc -!#endif -*$all,ipaddress=103.224.212.249 ||speedtest.com^$doc,domain=~you-were-likely-looking-for-speedtest.net ||snapchat.cm^$doc,domain=~malware-typo-squatter-of-snapchat.com ||facebook.cm^$doc,domain=~malware-typo-squatter-of-facebook.com ||wix.cm^$doc,domain=~malware-typo-squatter-of-wix.com -!#if !adguard_app_windows -||199.59.243.222^$doc -!#endif -*$all,ipaddress=199.59.243.222 |http://ww01.$doc,domain=~very_very_extremely_frequently_used_in_malware_redirections.* -!#if !adguard_app_windows -||173.208.96.42^$all,~inline-font -!#endif -*$all,ipaddress=173.208.96.42 -!#if !adguard_app_windows -||173.208.96.43^$all,~inline-font -!#endif -*$all,ipaddress=173.208.96.43 -!#if !adguard_app_windows -||173.208.96.44^$all,~inline-font -!#endif -*$all,ipaddress=173.208.96.44 -!#if !adguard_app_windows -||173.208.96.45^$all,~inline-font -!#endif -*$all,ipaddress=173.208.96.45 -!#if !adguard_app_windows -||173.208.96.46^$all,~inline-font -!#endif -*$all,ipaddress=173.208.96.46 -!#if !adguard_app_windows -||213.227.149.208^$all,~inline-font -!#endif -*$all,ipaddress=213.227.149.208 -!#if !adguard_app_windows -||213.227.149.211^$all,~inline-font -!#endif -*$all,ipaddress=213.227.149.211 ||ddscordapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com ||diicordapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com ||disccrdapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com @@ -486,7 +450,26 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||githubuser.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com ||rgithub.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com ||githubt.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com -! https://scammer•info/t/discord-nitro-scam-25/87887 +!#if env_firefox +$all,ipaddress=173.208.96.42 +$all,ipaddress=173.208.96.43 +$all,ipaddress=173.208.96.44 +$all,ipaddress=173.208.96.45 +$all,ipaddress=173.208.96.46 +$all,ipaddress=199.59.243.222 +$all,ipaddress=213.227.149.208 +$all,ipaddress=213.227.149.211 +!#endif +!#if !env_firefox +||173.208.96.42^$all,~inline-font +||173.208.96.43^$all,~inline-font +||173.208.96.44^$all,~inline-font +||173.208.96.45^$all,~inline-font +||173.208.96.46^$all,~inline-font +||199.59.243.222^$doc +||213.227.149.208^$all,~inline-font +||213.227.149.211^$all,~inline-font +!#endif ! ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ——— ||hippolyte-hag.com^$all,~inline-font @@ -495,39 +478,37 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||paramonos-oha.com^$all,~inline-font ||photios-raj.com^$all,~inline-font ||zeroredirect5.com^$doc,domain=~malware_redirection_trains.* -!#if !adguard_app_windows -||54.209.22.226^$doc -!#endif -*$all,ipaddress=54.209.22.226 -!#if !adguard_app_windows -||54.91.125.197^$doc -!#endif -*$all,ipaddress=54.91.125.197 -!#if !adguard_app_windows -||52.202.53.245^$doc -!#endif -*$all,ipaddress=52.202.53.245 -!#if !adguard_app_windows -://35.175.38.64^$doc -!#endif -*$all,ipaddress=35.175.38.64 -!#if !adguard_app_windows -://35.168.147.213^$doc -!#endif -*$all,ipaddress=35.168.147.213 -!#if !adguard_app_windows -||34.230.160.215^$doc -!#endif -*$all,ipaddress=34.230.160.215 -!#if !adguard_app_windows -||3.226.8.132^$doc -!#endif -*$all,ipaddress=3.226.8.132 -!#if !adguard_app_windows -||3.216.243.46^$doc -!#endif -*$all,ipaddress=3.216.243.46 ||roamingclicks.com^$all,~inline-font +!#if env_firefox +$all,ipaddress=144.76.0.242 +$all,ipaddress=144.76.1.130 +$all,ipaddress=195.201.92.254 +$all,ipaddress=3.216.243.46 +$all,ipaddress=3.226.8.132 +$all,ipaddress=34.230.160.215 +$all,ipaddress=35.168.147.213 +$all,ipaddress=35.175.38.64 +$all,ipaddress=52.202.53.245 +$all,ipaddress=54.209.22.226 +$all,ipaddress=54.91.125.197 +$all,ipaddress=94.130.185.237 +$all,ipaddress=94.130.186.231 +!#endif +!#if !env_firefox +://35.168.147.213^$doc +://35.175.38.64^$doc +||144.76.0.242^$doc +||144.76.1.130^$doc +||195.201.92.254^$doc +||3.216.243.46^$doc +||3.226.8.132^$doc +||34.230.160.215^$doc +||52.202.53.245^$doc +||54.209.22.226^$doc +||54.91.125.197^$doc +||94.130.185.237^$doc +||94.130.186.231^$doc +!#endif ! Source: desidertNO ||collectfasttracks.com^$all,~inline-font,domain=~malware_redirection_trains.* ! Various ex-affiliate links at www•zombooru•com @@ -539,26 +520,6 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||ns1.trafficclub.com^$all,~inline-font ||satcom1.co.uk^$doc ||splitter.microxml.net^$doc -!#if !adguard_app_windows -||94.130.185.237^$doc -!#endif -*$all,ipaddress=94.130.185.237 -!#if !adguard_app_windows -||94.130.186.231^$doc -!#endif -*$all,ipaddress=94.130.186.231 -!#if !adguard_app_windows -||144.76.0.242^$doc -!#endif -*$all,ipaddress=144.76.0.242 -!#if !adguard_app_windows -||144.76.1.130^$doc -!#endif -*$all,ipaddress=144.76.1.130 -!#if !adguard_app_windows -||195.201.92.254^$doc -!#endif -*$all,ipaddress=195.201.92.254 zombooru.com##a[href$="ttp://www.boorufurry.com/"] zombooru.com##a[href$="ttp://www.analbooru.com/"] zombooru.com##a[href$="ttp://www.hard55.com"] @@ -573,102 +534,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||couponbybox.com^$doc ||newpage.in^$doc /mcaf04/*=$doc -!#if !adguard_app_windows -||34.204.214.165^$doc -!#endif -*$all,ipaddress=34.204.214.165 -!#if !adguard_app_windows -||54.85.113.62^$doc -!#endif -*$all,ipaddress=54.85.113.62 -!#if !adguard_app_windows -||54.205.83.61^$doc -!#endif -*$all,ipaddress=54.205.83.61 -!#if !adguard_app_windows -||54.210.193.115^$doc -!#endif -*$all,ipaddress=54.210.193.115 -||[2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]^$doc -||banalbjar.com^$all,~inline-font -||coryljanty.cam^$all,~inline-font -||elfpetsic.com^$all,~inline-font -||postback.report^$all,~inline-font -||roksit.net^$all,~inline-font -||adblockerapp.com^$doc,popup -!#if !adguard_app_windows -||172.255.6.107^$all,~inline-font -!#endif -*$all,ipaddress=172.255.6.107 -!#if !adguard_app_windows -||172.255.6.147^$all,~inline-font -!#endif -*$all,ipaddress=172.255.6.147 -!#if !adguard_app_windows -||172.255.6.219^$all,~inline-font -!#endif -*$all,ipaddress=172.255.6.219 -!#if !adguard_app_windows -||172.255.6.225^$all,~inline-font -!#endif -*$all,ipaddress=172.255.6.225 -!#if !adguard_app_windows -||188.42.129.108^$all,~inline-font -!#endif -*$all,ipaddress=188.42.129.108 -!#if !adguard_app_windows -||188.42.129.116^$all,~inline-font -!#endif -*$all,ipaddress=188.42.129.116 -!#if !adguard_app_windows -||188.42.141.100^$all,~inline-font -!#endif -*$all,ipaddress=188.42.141.100 -!#if !adguard_app_windows -||188.42.141.92^$all,~inline-font -!#endif -*$all,ipaddress=188.42.141.92 -!#if !adguard_app_windows -||23.109.82.144^$all,~inline-font -!#endif -*$all,ipaddress=23.109.82.144 -!#if !adguard_app_windows -||23.109.82.41^$all,~inline-font -!#endif -*$all,ipaddress=23.109.82.41 -!#if !adguard_app_windows -||23.109.82.43^$all,~inline-font -!#endif -*$all,ipaddress=23.109.82.43 -!#if !adguard_app_windows -||23.109.82.65^$all,~inline-font -!#endif -*$all,ipaddress=23.109.82.65 -!#if !adguard_app_windows -||23.109.82.66^$all,~inline-font -!#endif -*$all,ipaddress=23.109.82.66 -!#if !adguard_app_windows -||23.109.87.169^$all,~inline-font -!#endif -*$all,ipaddress=23.109.87.169 -!#if !adguard_app_windows -||23.109.87.207^$all,~inline-font -!#endif -*$all,ipaddress=23.109.87.207 -!#if !adguard_app_windows -||23.109.87.208^$all,~inline-font -!#endif -*$all,ipaddress=23.109.87.208 -||blueoyster.click^$all,~inline-font -!#if !adguard_app_windows -||216.21.13.14^$all,~inline-font -!#endif -*$all,ipaddress=216.21.13.14 -!#if !adguard_app_windows -||216.21.13.15^$all,~inline-font -!#endif -*$all,ipaddress=216.21.13.15 /^.*\.(xyz|pics)/[a-zA-Z0-9]{130,}$/$doc,script,subdocument,image /^.*\.(cloudfront\.net|xyz|pics)/[a-zA-Z0-9]{20,}/[a-zA-Z0-9]{25,}\+[a-zA-Z0-9+]{90,}$/$doc,script,subdocument,image ||hafisague.com^$all,~inline-font @@ -685,9 +550,66 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||videoadblockers.$doc,popup ||videoadblockertou.$doc,popup ||videoadblockextension.$doc,popup +||adblockerapp.com^$doc,popup +||banalbjar.com^$all,~inline-font +||blueoyster.click^$all,~inline-font +||coryljanty.cam^$all,~inline-font +||elfpetsic.com^$all,~inline-font +||postback.report^$all,~inline-font +||roksit.net^$all,~inline-font +!#if env_firefox $all,ipaddress=/^142\.91\.159\.[12]?\d?\d$/ $all,ipaddress=/^23\.109\.150\.[12]?\d?\d$/ $all,ipaddress=/^23\.109\.248\.[12]?\d?\d$/ +$all,ipaddress=172.255.6.107 +$all,ipaddress=172.255.6.147 +$all,ipaddress=172.255.6.219 +$all,ipaddress=172.255.6.225 +$all,ipaddress=188.42.129.108 +$all,ipaddress=188.42.129.116 +$all,ipaddress=188.42.141.100 +$all,ipaddress=188.42.141.92 +$all,ipaddress=216.21.13.14 +$all,ipaddress=216.21.13.15 +$all,ipaddress=23.109.82.144 +$all,ipaddress=23.109.82.41 +$all,ipaddress=23.109.82.43 +$all,ipaddress=23.109.82.65 +$all,ipaddress=23.109.82.66 +$all,ipaddress=23.109.87.169 +$all,ipaddress=23.109.87.207 +$all,ipaddress=23.109.87.208 +$all,ipaddress=34.204.214.165 +$all,ipaddress=54.205.83.61 +$all,ipaddress=54.210.193.115 +$all,ipaddress=54.85.113.62 +$all,ipaddress=2600:1f18:43d1:2a04:ee05:261e:d408:7ba1 +!#endif +!#if !env_firefox +||172.255.6.107^$all,~inline-font +||172.255.6.147^$all,~inline-font +||172.255.6.219^$all,~inline-font +||172.255.6.225^$all,~inline-font +||188.42.129.108^$all,~inline-font +||188.42.129.116^$all,~inline-font +||188.42.141.100^$all,~inline-font +||188.42.141.92^$all,~inline-font +||216.21.13.14^$all,~inline-font +||216.21.13.15^$all,~inline-font +||23.109.82.144^$all,~inline-font +||23.109.82.41^$all,~inline-font +||23.109.82.43^$all,~inline-font +||23.109.82.65^$all,~inline-font +||23.109.82.66^$all,~inline-font +||23.109.87.169^$all,~inline-font +||23.109.87.207^$all,~inline-font +||23.109.87.208^$all,~inline-font +||34.204.214.165^$doc +||54.205.83.61^$doc +||54.210.193.115^$doc +||54.85.113.62^$doc +||[2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]^$doc +!#endif ! https://github.com/DandelionSprout/adfilt/issues/942 $all,ipaddress=/^172\.255\.6\.(\d\d?|(17?|2)[0-689]\d)$/ ||abedwithdrawalautograph.com^$all,~inline-font @@ -1042,61 +964,55 @@ $all,ipaddress=/^192\.243\.61\.[12]?\d?\d$/ ! https://github.com/AdguardTeam/AdguardFilters/issues/61743 /^(https?://)?(www\.)?cunt[a-z]{3,8}\.com(/.*)?$/$doc,popup ! https://github.com/easylist/easylist/issues/6111 -||fres-news.com^$all,~inline-font -||workerz-news.com^$all,~inline-font -||zredir.com^$all,~inline-font,domain=~malware_redirection_trains.* -!#if !adguard_app_windows -||178.128.142.109^$doc -!#endif -*$all,ipaddress=178.128.142.109 -||findmedia.biz^$all,~inline-font +/^https?://\d\d?\.[a-z0-9-]{1,}\.(club|me)(/.*)?$/$doc ||backtonews.biz^$all,~inline-font ||bagclick.biz^$all,~inline-font +||best202*-games-web1.com^$all,~inline-font ||bigkick.biz^$all,~inline-font +||findmedia.biz^$all,~inline-font +||fres-news.com^$all,~inline-font ||getcontent24.com^$all,~inline-font -||klickmode.biz^$all,~inline-font -||newsgate.biz^$all,~inline-font -||redmdeia.biz^$all,~inline-font -||uptodater.net^$all,~inline-font -||virnews.club^$all,~inline-font -/^https?://\d\d?\.[a-z0-9-]{1,}\.(club|me)(/.*)?$/$doc -!#if !adguard_app_windows -||134.209.136.174^$doc -!#endif -*$all,ipaddress=134.209.136.174 -||whiteclick.biz^$all,~inline-font ||gonews2.com^$all,~inline-font +||hooligapps.com^$all,~inline-font +||klickmode.biz^$all,~inline-font ||mediadate.net^$all,~inline-font ||newscode.me^$all,~inline-font +||newsgate.biz^$all,~inline-font +||redmdeia.biz^$all,~inline-font ||skymedia7.me^$all,~inline-font ||startmode.biz^$all,~inline-font ||texterra.me^$all,~inline-font -!#if !adguard_app_windows +||theonlygames.com^$all,~inline-font +||uptodater.net^$all,~inline-font +||virnews.club^$all,~inline-font +||whiteclick.biz^$all,~inline-font +||workerz-news.com^$all,~inline-font +||zredir.com^$all,~inline-font,domain=~malware_redirection_trains.* +!#if env_firefox +$all,ipaddress=134.209.136.174 +$all,ipaddress=178.128.142.109 +$all,ipaddress=62.210.11.203 +$all,ipaddress=62.210.6.153 +$all,ipaddress=62.210.7.209 +$all,ipaddress=62.210.9.92 +!#endif +!#if !env_firefox +||134.209.136.174^$doc +||178.128.142.109^$doc +||62.210.11.203^$doc ||62.210.6.153^$doc -!#endif -*$all,ipaddress=62.210.6.153 -!#if !adguard_app_windows ||62.210.7.209^$doc -!#endif -*$all,ipaddress=62.210.7.209 -!#if !adguard_app_windows ||62.210.9.92^$doc !#endif -*$all,ipaddress=62.210.9.92 -!#if !adguard_app_windows -||62.210.11.203^$doc -!#endif -*$all,ipaddress=62.210.11.203 -||hooligapps.com^$all,~inline-font -||best202*-games-web1.com^$all,~inline-font -||theonlygames.com^$all,~inline-font ! https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/ ||notified-today.com^ ||new-message.email^$doc -!#if !adguard_app_windows +!#if env_firefox +$all,ipaddress=167.99.249.47 +!#endif +!#if !env_firefox ||167.99.249.47^$doc !#endif -*$all,ipaddress=167.99.249.47 ! https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/ ! https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/ ||moderncomputer.net^ @@ -1140,60 +1056,45 @@ $all,ipaddress=/^192\.243\.61\.[12]?\d?\d$/ ! https://github.com/DandelionSprout/adfilt/issues/193 ||holescontracting.com^$all,~inline-font ||doggroomingnews.com^$all,~inline-font -!#if !adguard_app_windows -||5.79.71.205^$doc +!#if env_firefox +$all,ipaddress=178.162.203.202 +$all,ipaddress=178.162.203.211 +$all,ipaddress=178.162.203.226 +$all,ipaddress=178.162.217.107 +$all,ipaddress=5.79.71.205 +$all,ipaddress=5.79.71.225 +$all,ipaddress=85.17.31.122 +$all,ipaddress=85.17.31.82 +$all,ipaddress=2a02:1668:1034::2 !#endif -*$all,ipaddress=5.79.71.205 -!#if !adguard_app_windows -||5.79.71.225^$doc -!#endif -*$all,ipaddress=5.79.71.225 -!#if !adguard_app_windows -||85.17.31.82^$doc -!#endif -*$all,ipaddress=85.17.31.82 -!#if !adguard_app_windows -||85.17.31.122^$doc -!#endif -*$all,ipaddress=85.17.31.122 -!#if !adguard_app_windows +!#if !env_firefox ||178.162.203.202^$doc -!#endif -*$all,ipaddress=178.162.203.202 -!#if !adguard_app_windows ||178.162.203.211^$doc -!#endif -*$all,ipaddress=178.162.203.211 -!#if !adguard_app_windows ||178.162.203.226^$doc -!#endif -*$all,ipaddress=178.162.203.226 -!#if !adguard_app_windows ||178.162.217.107^$doc -!#endif -*$all,ipaddress=178.162.217.107 +||5.79.71.205^$doc +||5.79.71.225^$doc +||85.17.31.122^$doc +||85.17.31.82^$doc ||[2a02:1668:1034::2]^$doc +!#endif ! https://github.com/DandelionSprout/adfilt/issues/195 ||logicalrecord.com^$all,~inline-font ! https://github.com/DandelionSprout/adfilt/issues/196 ||secureportal.online^$all,~inline-font ||emiratenbduae.com^$all,~inline-font -!#if !adguard_app_windows -||66.85.156.85^$doc +!#if env_firefox +$doc,ipaddress=108.170.31.123 +$doc,ipaddress=108.170.52.156 +$doc,ipaddress=66.85.156.85 +$doc,ipaddress=66.85.156.86 !#endif -*$all,ipaddress=66.85.156.85 -!#if !adguard_app_windows +!#if !env_firefox +||108.170.31.123^$doc +||108.170.52.156^$doc +||66.85.156.85^$doc ||66.85.156.86^$doc !#endif -*$all,ipaddress=66.85.156.86 -!#if !adguard_app_windows -||108.170.31.123^$doc -!#endif -*$all,ipaddress=108.170.31.123 -!#if !adguard_app_windows -||108.170.52.156^$doc -!#endif -*$all,ipaddress=108.170.52.156 ! https://github.com/DandelionSprout/adfilt/issues/198 ! https://www•bleepingcomputer•com/virus-removal/ (18/06/2021) ||toksearches.xyz^$all,~inline-font @@ -1243,18 +1144,16 @@ $all,ipaddress=/^192\.243\.61\.[12]?\d?\d$/ ||video-call.live^$all,~inline-font ||video-change.digital^$all,~inline-font ||watch-this.live^$all,~inline-font -!#if !adguard_app_windows +!#if env_firefox +$all,ipaddress=213.227.145.147 +$all,ipaddress=213.227.149.216 +$all,ipaddress=95.168.170.165 +!#endif +!#if !env_firefox +||213.227.145.147^$doc +||213.227.149.216^$doc ||95.168.170.165^$doc !#endif -*$all,ipaddress=95.168.170.165 -!#if !adguard_app_windows -||213.227.145.147^$doc -!#endif -*$all,ipaddress=213.227.145.147 -!#if !adguard_app_windows -||213.227.149.216^$doc -!#endif -*$all,ipaddress=213.227.149.216 ! https://twitter•com/adamziaja/status/1252234957679808513 ||wow-robotics.xyz^$all,~inline-font ! https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html @@ -1527,194 +1426,104 @@ $all,ipaddress=/^192\.243\.61\.[12]?\d?\d$/ !#endif *$all,ipaddress=185.243.56.167 ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community -!#if !adguard_app_windows -||123.10.224.135^$all,~inline-font +!#if env_firefox +$all,ipaddress=1.0.218.230 +$all,ipaddress=27.194.115.185 +$all,ipaddress=27.222.220.164 +$all,ipaddress=39.68.172.210 +$all,ipaddress=39.81.68.45 +$all,ipaddress=42.53.240.249 +$all,ipaddress=59.47.187.147 +$all,ipaddress=60.13.60.19 +$all,ipaddress=60.16.255.36 +$all,ipaddress=61.52.8.62 +$all,ipaddress=72.51.127.213 +$all,ipaddress=103.19.128.222 +$all,ipaddress=104.128.199.228 +$all,ipaddress=110.241.119.159 +$all,ipaddress=110.89.8.126 +$all,ipaddress=111.224.199.91 +$all,ipaddress=112.252.132.185 +$all,ipaddress=112.27.124.108 +$all,ipaddress=112.30.110.58 +$all,ipaddress=112.30.4.52 +$all,ipaddress=113.233.215.135 +$all,ipaddress=115.52.240.69 +$all,ipaddress=115.56.137.49 +$all,ipaddress=115.56.31.133 +$all,ipaddress=116.179.138.68 +$all,ipaddress=117.198.240.157 +$all,ipaddress=119.102.7.115 +$all,ipaddress=119.250.236.122 +$all,ipaddress=120.12.138.133 +$all,ipaddress=120.4.141.185 +$all,ipaddress=121.61.48.170 +$all,ipaddress=122.192.177.176 +$all,ipaddress=123.10.224.135 +$all,ipaddress=123.110.176.246 +$all,ipaddress=124.91.237.188 +$all,ipaddress=125.120.13.184 +$all,ipaddress=125.43.211.184 +$all,ipaddress=151.77.100.133 +$all,ipaddress=171.35.161.209 +$all,ipaddress=171.37.29.87 +$all,ipaddress=182.121.191.201 +$all,ipaddress=182.122.252.69 +$all,ipaddress=183.92.123.145 +$all,ipaddress=202.12.80.74 +$all,ipaddress=219.155.105.98 +$all,ipaddress=219.155.26.50 +$all,ipaddress=221.208.4.56 !#endif -*$all,ipaddress=123.10.224.135 -!#if !adguard_app_windows -||59.47.187.147^$all,~inline-font -!#endif -*$all,ipaddress=59.47.187.147 -!#if !adguard_app_windows -||39.68.172.210^$all,~inline-font -!#endif -*$all,ipaddress=39.68.172.210 -!#if !adguard_app_windows -||122.192.177.176^$all,~inline-font -!#endif -*$all,ipaddress=122.192.177.176 -!#if !adguard_app_windows -||112.27.124.108^$all,~inline-font -!#endif -*$all,ipaddress=112.27.124.108 -!#if !adguard_app_windows -||123.110.176.246^$all,~inline-font -!#endif -*$all,ipaddress=123.110.176.246 -!#if !adguard_app_windows -||219.155.105.98^$all,~inline-font -!#endif -*$all,ipaddress=219.155.105.98 -!#if !adguard_app_windows -||171.35.161.209^$all,~inline-font -!#endif -*$all,ipaddress=171.35.161.209 -!#if !adguard_app_windows -||60.16.255.36^$all,~inline-font -!#endif -*$all,ipaddress=60.16.255.36 -!#if !adguard_app_windows -||112.30.4.52^$all,~inline-font -!#endif -*$all,ipaddress=112.30.4.52 -!#if !adguard_app_windows -||182.121.191.201^$all,~inline-font -!#endif -*$all,ipaddress=182.121.191.201 -!#if !adguard_app_windows -||121.61.48.170^$all,~inline-font -!#endif -*$all,ipaddress=121.61.48.170 -!#if !adguard_app_windows -||39.81.68.45^$all,~inline-font -!#endif -*$all,ipaddress=39.81.68.45 -!#if !adguard_app_windows -||27.222.220.164^$all,~inline-font -!#endif -*$all,ipaddress=27.222.220.164 -!#if !adguard_app_windows -||113.233.215.135^$all,~inline-font -!#endif -*$all,ipaddress=113.233.215.135 -!#if !adguard_app_windows -||151.77.100.133^$all,~inline-font -!#endif -*$all,ipaddress=151.77.100.133 -!#if !adguard_app_windows -||125.120.13.184^$all,~inline-font -!#endif -*$all,ipaddress=125.120.13.184 -!#if !adguard_app_windows -||120.12.138.133^$all,~inline-font -!#endif -*$all,ipaddress=120.12.138.133 -!#if !adguard_app_windows -||27.194.115.185^$all,~inline-font -!#endif -*$all,ipaddress=27.194.115.185 -!#if !adguard_app_windows +!#if !env_firefox ://104.128.199.228^$all,~inline-font -!#endif -*$all,ipaddress=104.128.199.228 -!#if !adguard_app_windows -||183.92.123.145^$all,~inline-font -!#endif -*$all,ipaddress=183.92.123.145 -!#if !adguard_app_windows -||110.89.8.126^$all,~inline-font -!#endif -*$all,ipaddress=110.89.8.126 -!#if !adguard_app_windows -||125.43.211.184^$all,~inline-font -!#endif -*$all,ipaddress=125.43.211.184 -!#if !adguard_app_windows +||27.194.115.185^$all,~inline-font +||27.222.220.164^$all,~inline-font +||39.68.172.210^$all,~inline-font +||39.81.68.45^$all,~inline-font +||42.53.240.249^$all,~inline-font +||59.47.187.147^$all,~inline-font +||60.13.60.19^$all,~inline-font +||60.16.255.36^$all,~inline-font +||61.52.8.62^$all,~inline-font +||72.51.127.213^$all,~inline-font ||1.0.218.230^$all,~inline-font -!#endif -*$all,ipaddress=1.0.218.230 -!#if !adguard_app_windows +||103.19.128.222^$all,~inline-font +||110.241.119.159^$all,~inline-font +||110.89.8.126^$all,~inline-font +||111.224.199.91^$all,~inline-font +||112.252.132.185^$all,~inline-font +||112.27.124.108^$all,~inline-font +||112.30.110.58^$all,~inline-font +||112.30.4.52^$all,~inline-font +||113.233.215.135^$all,~inline-font +||115.52.240.69^$all,~inline-font +||115.56.137.49^$all,~inline-font +||115.56.31.133^$all,~inline-font +||116.179.138.68^$all,~inline-font +||117.198.240.157^$all,~inline-font +||119.102.7.115^$all,~inline-font +||119.250.236.122^$all,~inline-font +||120.12.138.133^$all,~inline-font +||120.4.141.185^$all,~inline-font +||121.61.48.170^$all,~inline-font +||122.192.177.176^$all,~inline-font +||123.10.224.135^$all,~inline-font +||123.110.176.246^$all,~inline-font +||124.91.237.188^$all,~inline-font +||125.120.13.184^$all,~inline-font +||125.43.211.184^$all,~inline-font +||151.77.100.133^$all,~inline-font +||171.35.161.209^$all,~inline-font +||171.37.29.87^$all,~inline-font +||182.121.191.201^$all,~inline-font +||182.122.252.69^$all,~inline-font +||183.92.123.145^$all,~inline-font +||202.12.80.74^$all,~inline-font +||219.155.105.98^$all,~inline-font +||219.155.26.50^$all,~inline-font ||221.208.4.56^$all,~inline-font !#endif -*$all,ipaddress=221.208.4.56 -!#if !adguard_app_windows -||60.13.60.19^$all,~inline-font -!#endif -*$all,ipaddress=60.13.60.19 -!#if !adguard_app_windows -||171.37.29.87^$all,~inline-font -!#endif -*$all,ipaddress=171.37.29.87 -!#if !adguard_app_windows -||124.91.237.188^$all,~inline-font -!#endif -*$all,ipaddress=124.91.237.188 -!#if !adguard_app_windows -||115.56.137.49^$all,~inline-font -!#endif -*$all,ipaddress=115.56.137.49 -!#if !adguard_app_windows -||115.52.240.69^$all,~inline-font -!#endif -*$all,ipaddress=115.52.240.69 -!#if !adguard_app_windows -||112.252.132.185^$all,~inline-font -!#endif -*$all,ipaddress=112.252.132.185 -!#if !adguard_app_windows -||117.198.240.157^$all,~inline-font -!#endif -*$all,ipaddress=117.198.240.157 -!#if !adguard_app_windows -||42.53.240.249^$all,~inline-font -!#endif -*$all,ipaddress=42.53.240.249 -!#if !adguard_app_windows -||116.179.138.68^$all,~inline-font -!#endif -*$all,ipaddress=116.179.138.68 -!#if !adguard_app_windows -||110.241.119.159^$all,~inline-font -!#endif -*$all,ipaddress=110.241.119.159 -!#if !adguard_app_windows -||115.56.31.133^$all,~inline-font -!#endif -*$all,ipaddress=115.56.31.133 -!#if !adguard_app_windows -||103.19.128.222^$all,~inline-font -!#endif -*$all,ipaddress=103.19.128.222 -!#if !adguard_app_windows -||202.12.80.74^$all,~inline-font -!#endif -*$all,ipaddress=202.12.80.74 -!#if !adguard_app_windows -||61.52.8.62^$all,~inline-font -!#endif -*$all,ipaddress=61.52.8.62 -!#if !adguard_app_windows -||182.122.252.69^$all,~inline-font -!#endif -*$all,ipaddress=182.122.252.69 -!#if !adguard_app_windows -||219.155.26.50^$all,~inline-font -!#endif -*$all,ipaddress=219.155.26.50 -!#if !adguard_app_windows -||120.4.141.185^$all,~inline-font -!#endif -*$all,ipaddress=120.4.141.185 -!#if !adguard_app_windows -||119.102.7.115^$all,~inline-font -!#endif -*$all,ipaddress=119.102.7.115 -!#if !adguard_app_windows -||72.51.127.213^$all,~inline-font -!#endif -*$all,ipaddress=72.51.127.213 -!#if !adguard_app_windows -||111.224.199.91^$all,~inline-font -!#endif -*$all,ipaddress=111.224.199.91 -!#if !adguard_app_windows -||119.250.236.122^$all,~inline-font -!#endif -*$all,ipaddress=119.250.236.122 -!#if !adguard_app_windows -||112.30.110.58^$all,~inline-font -!#endif -*$all,ipaddress=112.30.110.58 ! https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community ||pcae.de^$doc ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community @@ -1836,130 +1645,72 @@ $all,ipaddress=/^192\.243\.61\.[12]?\d?\d$/ ||mediadlvr.com^$all,~inline-font ! https://github.com/DandelionSprout/adfilt/pull/348 ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community -!#if !adguard_app_windows -||39.83.80.247^$all,~inline-font +!#if env_firefox +$all,ipaddress=103.233.216.77 +$all,ipaddress=106.86.172.194 +$all,ipaddress=110.167.64.171 +$all,ipaddress=112.31.211.135 +$all,ipaddress=115.59.197.46 +$all,ipaddress=116.17.210.157 +$all,ipaddress=119.113.248.74 +$all,ipaddress=122.159.29.192 +$all,ipaddress=123.10.65.201 +$all,ipaddress=125.106.63.93 +$all,ipaddress=125.47.205.109 +$all,ipaddress=125.47.243.187 +$all,ipaddress=168.90.205.46 +$all,ipaddress=171.40.0.127 +$all,ipaddress=171.80.219.160 +$all,ipaddress=175.0.95.85 +$all,ipaddress=182.117.231.182 +$all,ipaddress=182.122.196.203 +$all,ipaddress=182.123.141.17 +$all,ipaddress=183.15.90.156 +$all,ipaddress=183.188.192.55 +$all,ipaddress=219.157.21.37 +$all,ipaddress=222.142.183.194 +$all,ipaddress=27.45.103.240 +$all,ipaddress=39.80.147.239 +$all,ipaddress=39.81.117.73 +$all,ipaddress=39.83.80.247 +$all,ipaddress=45.224.171.130 +$all,ipaddress=45.5.209.75 +$all,ipaddress=61.52.99.109 +$all,ipaddress=68.197.33.124 !#endif -*$all,ipaddress=39.83.80.247 -!#if !adguard_app_windows +!#if !env_firefox +||103.233.216.77^$all,~inline-font +||106.86.172.194^$all,~inline-font +||110.167.64.171^$all,~inline-font +||112.31.211.135^$all,~inline-font +||115.59.197.46^$all,~inline-font +||116.17.210.157^$all,~inline-font +||119.113.248.74^$all,~inline-font +||122.159.29.192^$all,~inline-font +||123.10.65.201^$all,~inline-font +||125.106.63.93^$all,~inline-font +||125.47.205.109^$all,~inline-font +||125.47.243.187^$all,~inline-font +||168.90.205.46^$all,~inline-font +||171.40.0.127^$all,~inline-font +||171.80.219.160^$all,~inline-font +||175.0.95.85^$all,~inline-font +||182.117.231.182^$all,~inline-font +||182.122.196.203^$all,~inline-font +||182.123.141.17^$all,~inline-font +||183.15.90.156^$all,~inline-font +||183.188.192.55^$all,~inline-font +||219.157.21.37^$all,~inline-font +||222.142.183.194^$all,~inline-font +||27.45.103.240^$all,~inline-font +||39.80.147.239^$all,~inline-font +||39.81.117.73^$all,~inline-font +||39.83.80.247^$all,~inline-font +||45.224.171.130^$all,~inline-font +||45.5.209.75^$all,~inline-font +||61.52.99.109^$all,~inline-font ||68.197.33.124^$all,~inline-font !#endif -*$all,ipaddress=68.197.33.124 -!#if !adguard_app_windows -||219.157.21.37^$all,~inline-font -!#endif -*$all,ipaddress=219.157.21.37 -!#if !adguard_app_windows -||182.123.141.17^$all,~inline-font -!#endif -*$all,ipaddress=182.123.141.17 -!#if !adguard_app_windows -||125.47.243.187^$all,~inline-font -!#endif -*$all,ipaddress=125.47.243.187 -!#if !adguard_app_windows -||182.122.196.203^$all,~inline-font -!#endif -*$all,ipaddress=182.122.196.203 -!#if !adguard_app_windows -||182.117.231.182^$all,~inline-font -!#endif -*$all,ipaddress=182.117.231.182 -!#if !adguard_app_windows -||112.31.211.135^$all,~inline-font -!#endif -*$all,ipaddress=112.31.211.135 -!#if !adguard_app_windows -||125.106.63.93^$all,~inline-font -!#endif -*$all,ipaddress=125.106.63.93 -!#if !adguard_app_windows -||115.59.197.46^$all,~inline-font -!#endif -*$all,ipaddress=115.59.197.46 -!#if !adguard_app_windows -||122.159.29.192^$all,~inline-font -!#endif -*$all,ipaddress=122.159.29.192 -!#if !adguard_app_windows -||171.40.0.127^$all,~inline-font -!#endif -*$all,ipaddress=171.40.0.127 -!#if !adguard_app_windows -||171.80.219.160^$all,~inline-font -!#endif -*$all,ipaddress=171.80.219.160 -!#if !adguard_app_windows -||123.10.65.201^$all,~inline-font -!#endif -*$all,ipaddress=123.10.65.201 -!#if !adguard_app_windows -||168.90.205.46^$all,~inline-font -!#endif -*$all,ipaddress=168.90.205.46 -!#if !adguard_app_windows -||125.47.205.109^$all,~inline-font -!#endif -*$all,ipaddress=125.47.205.109 -!#if !adguard_app_windows -||39.80.147.239^$all,~inline-font -!#endif -*$all,ipaddress=39.80.147.239 -!#if !adguard_app_windows -||45.224.171.130^$all,~inline-font -!#endif -*$all,ipaddress=45.224.171.130 -!#if !adguard_app_windows -||45.5.209.75^$all,~inline-font -!#endif -*$all,ipaddress=45.5.209.75 -!#if !adguard_app_windows -||116.17.210.157^$all,~inline-font -!#endif -*$all,ipaddress=116.17.210.157 -!#if !adguard_app_windows -||27.45.103.240^$all,~inline-font -!#endif -*$all,ipaddress=27.45.103.240 -!#if !adguard_app_windows -||110.167.64.171^$all,~inline-font -!#endif -*$all,ipaddress=110.167.64.171 -!#if !adguard_app_windows -||39.81.117.73^$all,~inline-font -!#endif -*$all,ipaddress=39.81.117.73 -!#if !adguard_app_windows -||183.15.90.156^$all,~inline-font -!#endif -*$all,ipaddress=183.15.90.156 -!#if !adguard_app_windows -||119.113.248.74^$all,~inline-font -!#endif -*$all,ipaddress=119.113.248.74 -!#if !adguard_app_windows -||175.0.95.85^$all,~inline-font -!#endif -*$all,ipaddress=175.0.95.85 -!#if !adguard_app_windows -||61.52.99.109^$all,~inline-font -!#endif -*$all,ipaddress=61.52.99.109 -!#if !adguard_app_windows -||222.142.183.194^$all,~inline-font -!#endif -*$all,ipaddress=222.142.183.194 -!#if !adguard_app_windows -||106.86.172.194^$all,~inline-font -!#endif -*$all,ipaddress=106.86.172.194 -!#if !adguard_app_windows -||103.233.216.77^$all,~inline-font -!#endif -*$all,ipaddress=103.233.216.77 -!#if !adguard_app_windows -||183.188.192.55^$all,~inline-font -!#endif -*$all,ipaddress=183.188.192.55 ! https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community !#if !adguard_app_windows ||198.23.255.14^$all,~inline-font @@ -13810,6 +13561,22 @@ $all,ipaddress=223.29.226.200 ! https://github.com/DandelionSprout/adfilt/issues/1197 ||creations.tools^$doc,domain=~believed_to_be_fraudsters.* ||idtsoftware.com^$doc,domain=~believed_to_be_fraudsters.* +! https://github.com/DandelionSprout/adfilt/issues/1212 +||acrossprotocols.com^$all +||aftop10.com^$all +||directory-opus-manager.github.io^$all +||dokopka.icu^$all +||dramajaratstate.com^$all +||heygetbarter.com^$all +||michaelborsari.com^$all +||softs-window.com^$all +||sublime-merge-git-client.github.io^$all +||sublime-text-3.github.io^$all +||welearnn.com^$all +||94.156.232.201^$all +||213.209.143.119^$all +$all,ipaddress=213.209.143.119 +$all,ipaddress=94.156.232.201 ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666