From dbfa881e3d9cb4b192dd1f6b4280e6f89b3b0950 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Wed, 26 Jun 2024 10:13:12 +0200 Subject: [PATCH] =?UTF-8?q?Went=20better=20than=20expected.=20=F0=9F=8C=9E?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit After I realised it at https://github.com/AdguardTeam/FiltersRegistry/issues/954#issuecomment-2191064653 --- .../AntiMalwareAdGuard.txt | 1158 +++++++++++++++++ ...out's and other adblocker lists' IPs.ipset | 1 + 2 files changed, 1159 insertions(+) diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt index cd86988f7..6f13b259d 100644 --- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt +++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt @@ -86,7 +86,10 @@ www.google.*##*:has(> * > a[oncontextmenu][href^="https://books.google."]) ! Domains that used to host lists for adblockers or "hosts" tools, but which are now either used by malware pushers, or could potentially be snapped up by them. ||adblock.gjtech.net^$document ||spam404bl.com^$document +!+ PLATFORM(windows, mac, android) 109.201.135.46$network +!+ NOT_PLATFORM(windows, mac, android) +||109.201.135.46^$all ||fredfiber.no^$document ||securemecca.com^$document @@ -127,7 +130,10 @@ www.google.*##*:has(> * > a[oncontextmenu][href^="https://books.google."]) ||mandriva.com^$document ! Fraudulent browser extensions ||ublock.org^$document +!+ PLATFORM(windows, mac, android) 138.68.252.54$network +!+ NOT_PLATFORM(windows, mac, android) +||138.68.252.54^$all ||useragentswitch.com^$all ||dev-nano.com^$all ||adblocker-app.info^$all @@ -430,21 +436,48 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ! ——— Typo squatting, misspellings, and honest TLD address bar mistakes ——— ||ubuntu.org^$document,domain=~you-were-likely-looking-for-ubuntu.com +!+ PLATFORM(windows, mac, android) 103.224.212.249$network +!+ NOT_PLATFORM(windows, mac, android) +||103.224.212.249^$all ||speedtest.com^$document,domain=~you-were-likely-looking-for-speedtest.net ||snapchat.cm^$document,domain=~malware-typo-squatter-of-snapchat.com ||facebook.cm^$document,domain=~malware-typo-squatter-of-facebook.com ||wix.cm^$document,domain=~malware-typo-squatter-of-wix.com +!+ PLATFORM(windows, mac, android) 199.59.243.222$network +!+ NOT_PLATFORM(windows, mac, android) +||199.59.243.222^$all |http://ww01.$document,domain=~very-very-extremely-frequently-used-in-malware-redirections.* ||14d.us^$all,~inline-font,domain=~malware-redirection-and-also-you-were-very-likely-looking-for-1d4.us +!+ PLATFORM(windows, mac, android) 173.208.96.42$network +!+ NOT_PLATFORM(windows, mac, android) +||173.208.96.42^$all +!+ PLATFORM(windows, mac, android) 173.208.96.43$network +!+ NOT_PLATFORM(windows, mac, android) +||173.208.96.43^$all +!+ PLATFORM(windows, mac, android) 173.208.96.44$network +!+ NOT_PLATFORM(windows, mac, android) +||173.208.96.44^$all +!+ PLATFORM(windows, mac, android) 173.208.96.45$network +!+ NOT_PLATFORM(windows, mac, android) +||173.208.96.45^$all +!+ PLATFORM(windows, mac, android) 173.208.96.46$network +!+ NOT_PLATFORM(windows, mac, android) +||173.208.96.46^$all +!+ PLATFORM(windows, mac, android) 213.227.149.208$network +!+ NOT_PLATFORM(windows, mac, android) +||213.227.149.208^$all +!+ PLATFORM(windows, mac, android) 213.227.149.211$network +!+ NOT_PLATFORM(windows, mac, android) +||213.227.149.211^$all ||ddscordapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com ||diicordapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com ||disccrdapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com @@ -529,7 +562,10 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||jessica.*.net^$document ||katie.*.net^$document ||emily.*.net^$document +!+ PLATFORM(windows, mac, android) 54.174.156.141$network +!+ NOT_PLATFORM(windows, mac, android) +||54.174.156.141^$all ||lucretius-ada.com^$all ||hippolyte-hag.com^$all ||india-abc.com^$all @@ -542,14 +578,38 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||lordagty.com^$document ||madagty.com^$document ||zeroredirect5.com^$document,domain=~malware-redirection-trains.* +!+ PLATFORM(windows, mac, android) 54.209.22.226$network +!+ NOT_PLATFORM(windows, mac, android) +||54.209.22.226^$all +!+ PLATFORM(windows, mac, android) 54.91.125.197$network +!+ NOT_PLATFORM(windows, mac, android) +||54.91.125.197^$all +!+ PLATFORM(windows, mac, android) 52.202.53.245$network +!+ NOT_PLATFORM(windows, mac, android) +||52.202.53.245^$all +!+ PLATFORM(windows, mac, android) 35.175.38.64$network +!+ NOT_PLATFORM(windows, mac, android) +||35.175.38.64^$all +!+ PLATFORM(windows, mac, android) 35.168.147.213$network +!+ NOT_PLATFORM(windows, mac, android) +||35.168.147.213^$all +!+ PLATFORM(windows, mac, android) 34.230.160.215$network +!+ NOT_PLATFORM(windows, mac, android) +||34.230.160.215^$all +!+ PLATFORM(windows, mac, android) 3.226.8.132$network +!+ NOT_PLATFORM(windows, mac, android) +||3.226.8.132^$all +!+ PLATFORM(windows, mac, android) 3.216.243.46$network +!+ NOT_PLATFORM(windows, mac, android) +||3.216.243.46^$all ||roamingclicks.com^$all ! Source: desidert.no ||collectfasttracks.com^$all,~inline-font,domain=~malware-redirection-trains.* @@ -560,9 +620,18 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||briana.*.com^$document ||sarah.*.com^$document ||pamela.*.com^$document +!+ PLATFORM(windows, mac, android) 54.152.245.247$network +!+ NOT_PLATFORM(windows, mac, android) +||54.152.245.247^$all +!+ PLATFORM(windows, mac, android) 35.172.40.232$network +!+ NOT_PLATFORM(windows, mac, android) +||35.172.40.232^$all +!+ PLATFORM(windows, mac, android) 3.90.125.85$network +!+ NOT_PLATFORM(windows, mac, android) +||3.90.125.85^$all ! Various ex-affiliate links at www.zombooru.com ||track.vcdc.com^$all,~inline-font,domain=~malware-redirection-trains.* ||track.tkbo.com^$all,~inline-font,domain=~malware-redirection-trains.* @@ -572,11 +641,26 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||ns1.trafficclub.com^$all ||satcom1.co.uk^$document ||splitter.microxml.net^$document +!+ PLATFORM(windows, mac, android) 94.130.185.237$network +!+ NOT_PLATFORM(windows, mac, android) +||94.130.185.237^$all +!+ PLATFORM(windows, mac, android) 94.130.186.231$network +!+ NOT_PLATFORM(windows, mac, android) +||94.130.186.231^$all +!+ PLATFORM(windows, mac, android) 144.76.0.242$network +!+ NOT_PLATFORM(windows, mac, android) +||144.76.0.242^$all +!+ PLATFORM(windows, mac, android) 144.76.1.130$network +!+ NOT_PLATFORM(windows, mac, android) +||144.76.1.130^$all +!+ PLATFORM(windows, mac, android) 195.201.92.254$network +!+ NOT_PLATFORM(windows, mac, android) +||195.201.92.254^$all zombooru.com##a[href="http://www.boorufurry.com/"] zombooru.com##a[href="http://www.analbooru.com/"] zombooru.com##a[href="http://www.hard55.com"] @@ -598,10 +682,22 @@ zombooru.com##a[href="http://www.hard55.com"] ||couponbybox.com^$document ||newpage.in^$document /mcaf04/*=$document +!+ PLATFORM(windows, mac, android) 34.204.214.165$network +!+ NOT_PLATFORM(windows, mac, android) +||34.204.214.165^$all +!+ PLATFORM(windows, mac, android) 54.85.113.62$network +!+ NOT_PLATFORM(windows, mac, android) +||54.85.113.62^$all +!+ PLATFORM(windows, mac, android) 54.205.83.61$network +!+ NOT_PLATFORM(windows, mac, android) +||54.205.83.61^$all +!+ PLATFORM(windows, mac, android) 54.210.193.115$network +!+ NOT_PLATFORM(windows, mac, android) +||54.210.193.115^$all [2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]$network ||ailkeyair.com^$all ||amulagaudish.cam^$all @@ -653,29 +749,83 @@ zombooru.com##a[href="http://www.hard55.com"] ||witlayvet.com^$all ||wonfigfig.com^$all ||adblockerapp.com^$document,popup +!+ PLATFORM(windows, mac, android) 172.255.6.107$network +!+ NOT_PLATFORM(windows, mac, android) +||172.255.6.107^$all +!+ PLATFORM(windows, mac, android) 172.255.6.147$network +!+ NOT_PLATFORM(windows, mac, android) +||172.255.6.147^$all +!+ PLATFORM(windows, mac, android) 172.255.6.219$network +!+ NOT_PLATFORM(windows, mac, android) +||172.255.6.219^$all +!+ PLATFORM(windows, mac, android) 172.255.6.225$network +!+ NOT_PLATFORM(windows, mac, android) +||172.255.6.225^$all +!+ PLATFORM(windows, mac, android) 188.42.129.108$network +!+ NOT_PLATFORM(windows, mac, android) +||188.42.129.108^$all +!+ PLATFORM(windows, mac, android) 188.42.129.116$network +!+ NOT_PLATFORM(windows, mac, android) +||188.42.129.116^$all +!+ PLATFORM(windows, mac, android) 188.42.141.100$network +!+ NOT_PLATFORM(windows, mac, android) +||188.42.141.100^$all +!+ PLATFORM(windows, mac, android) 188.42.141.92$network +!+ NOT_PLATFORM(windows, mac, android) +||188.42.141.92^$all +!+ PLATFORM(windows, mac, android) 23.109.82.144$network +!+ NOT_PLATFORM(windows, mac, android) +||23.109.82.144^$all +!+ PLATFORM(windows, mac, android) 23.109.82.41$network +!+ NOT_PLATFORM(windows, mac, android) +||23.109.82.41^$all +!+ PLATFORM(windows, mac, android) 23.109.82.43$network +!+ NOT_PLATFORM(windows, mac, android) +||23.109.82.43^$all +!+ PLATFORM(windows, mac, android) 23.109.82.65$network +!+ NOT_PLATFORM(windows, mac, android) +||23.109.82.65^$all +!+ PLATFORM(windows, mac, android) 23.109.82.66$network +!+ NOT_PLATFORM(windows, mac, android) +||23.109.82.66^$all +!+ PLATFORM(windows, mac, android) 23.109.87.169$network +!+ NOT_PLATFORM(windows, mac, android) +||23.109.87.169^$all +!+ PLATFORM(windows, mac, android) 23.109.87.207$network +!+ NOT_PLATFORM(windows, mac, android) +||23.109.87.207^$all +!+ PLATFORM(windows, mac, android) 23.109.87.208$network +!+ NOT_PLATFORM(windows, mac, android) +||23.109.87.208^$all ||entwithou.xyz^$all ||chedstimaarr.pics^$all ||blueoyster.click^$all ||qocvicklgcgr.com^$all ||zeikvvbobop.com^$all +!+ PLATFORM(windows, mac, android) 216.21.13.14$network +!+ NOT_PLATFORM(windows, mac, android) +||216.21.13.14^$all +!+ PLATFORM(windows, mac, android) 216.21.13.15$network +!+ NOT_PLATFORM(windows, mac, android) +||216.21.13.15^$all /\.(xyz|pics)/[a-zA-Z0-9]{130,}/$document,script,subdocument,image /\.(cloudfront\.net|xyz|pics)/[a-zA-Z0-9]{20,}/[a-zA-Z0-9]{25,}\+[a-zA-Z0-9+]{90,}\$/$document,script,subdocument,image ||abaphosis.guru^$all @@ -3767,7 +3917,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||zmp3-online.com^$all ||zmusic-online.com^$all ||zredir.com^$all,~inline-font,domain=~malware-redirection-trains.* +!+ PLATFORM(windows, mac, android) 178.128.142.109$network +!+ NOT_PLATFORM(windows, mac, android) +||178.128.142.109^$all ||findmedia.biz^$all ||backtonews.biz^$all ||bagclick.biz^$all @@ -3787,7 +3940,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||vviewpoint.biz^$all /^http://\d{1,2}\.[a-z0-9-]{1,}\.(club|me)(/|$)/$document /^https://\d{1,2}\.[a-z0-9-]{1,}\.(club|me)(/|$)/$document +!+ PLATFORM(windows, mac, android) 134.209.136.174$network +!+ NOT_PLATFORM(windows, mac, android) +||134.209.136.174^$all ||whiteclick.biz^$all ||dreamnews.biz^$all ||gonews2.com^$all @@ -3800,10 +3956,22 @@ zombooru.com##a[href="http://www.hard55.com"] ||startmode.biz^$all ||texterra.me^$all ||worldtxt.club^$all +!+ PLATFORM(windows, mac, android) 62.210.6.153$network +!+ NOT_PLATFORM(windows, mac, android) +||62.210.6.153^$all +!+ PLATFORM(windows, mac, android) 62.210.7.209$network +!+ NOT_PLATFORM(windows, mac, android) +||62.210.7.209^$all +!+ PLATFORM(windows, mac, android) 62.210.9.92$network +!+ NOT_PLATFORM(windows, mac, android) +||62.210.9.92^$all +!+ PLATFORM(windows, mac, android) 62.210.11.203$network +!+ NOT_PLATFORM(windows, mac, android) +||62.210.11.203^$all ||ilo134ulih.com^$all ||hooligapps.com^$all ||best202*-games-web1.com^$all @@ -3819,7 +3987,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||notified-today.xyz^$document ||stay-notified.com^$document ||stay-notified.xyz^$document +!+ PLATFORM(windows, mac, android) 167.99.249.47$network +!+ NOT_PLATFORM(windows, mac, android) +||167.99.249.47^$all ! https://maldita.es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/ ! https://maldita.es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/ ||moderncomputer.net^ @@ -3858,20 +4029,53 @@ zombooru.com##a[href="http://www.hard55.com"] ||redirekted.com^$all,~inline-font,domain=~malware-redirection-trains.* ||rebiraert.com^$all ||iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com^$all +!+ PLATFORM(windows, mac, android) 5.8.34.26$network +!+ NOT_PLATFORM(windows, mac, android) +||5.8.34.26^$all +!+ PLATFORM(windows, mac, android) 5.8.47.3$network +!+ NOT_PLATFORM(windows, mac, android) +||5.8.47.3^$all +!+ PLATFORM(windows, mac, android) 103.224.182.251$network +!+ NOT_PLATFORM(windows, mac, android) +||103.224.182.251^$all ! https://github.com/DandelionSprout/adfilt/issues/193 ||holescontracting.com^$all ||doggroomingnews.com^$all +!+ PLATFORM(windows, mac, android) 5.79.71.205$network +!+ NOT_PLATFORM(windows, mac, android) +||5.79.71.205^$all +!+ PLATFORM(windows, mac, android) 5.79.71.225$network +!+ NOT_PLATFORM(windows, mac, android) +||5.79.71.225^$all +!+ PLATFORM(windows, mac, android) 85.17.31.82$network +!+ NOT_PLATFORM(windows, mac, android) +||85.17.31.82^$all +!+ PLATFORM(windows, mac, android) 85.17.31.122$network +!+ NOT_PLATFORM(windows, mac, android) +||85.17.31.122^$all +!+ PLATFORM(windows, mac, android) 178.162.203.202$network +!+ NOT_PLATFORM(windows, mac, android) +||178.162.203.202^$all +!+ PLATFORM(windows, mac, android) 178.162.203.211$network +!+ NOT_PLATFORM(windows, mac, android) +||178.162.203.211^$all +!+ PLATFORM(windows, mac, android) 178.162.203.226$network +!+ NOT_PLATFORM(windows, mac, android) +||178.162.203.226^$all +!+ PLATFORM(windows, mac, android) 178.162.217.107$network +!+ NOT_PLATFORM(windows, mac, android) +||178.162.217.107^$all [2a02:1668:1034::2]$network ! https://github.com/DandelionSprout/adfilt/issues/195 ||logicalrecord.com^$all @@ -3884,10 +4088,22 @@ zombooru.com##a[href="http://www.hard55.com"] ||emiratenbduae.com^$all ||securebankapp.online^$all ||securemailbox.online^$all +!+ PLATFORM(windows, mac, android) 66.85.156.85$network +!+ NOT_PLATFORM(windows, mac, android) +||66.85.156.85^$all +!+ PLATFORM(windows, mac, android) 66.85.156.86$network +!+ NOT_PLATFORM(windows, mac, android) +||66.85.156.86^$all +!+ PLATFORM(windows, mac, android) 108.170.31.123$network +!+ NOT_PLATFORM(windows, mac, android) +||108.170.31.123^$all +!+ PLATFORM(windows, mac, android) 108.170.52.156$network +!+ NOT_PLATFORM(windows, mac, android) +||108.170.52.156^$all ! https://github.com/DandelionSprout/adfilt/issues/198 ||mysecrethoookup.com^$all ! https://www.bleepingcomputer.com/virus-removal/ (18/06/2021) @@ -3993,9 +4209,18 @@ zombooru.com##a[href="http://www.hard55.com"] ||video-update.digital^$all ||watch-this.live^$all ||weather-forecast.today^$all +!+ PLATFORM(windows, mac, android) 95.168.170.165$network +!+ NOT_PLATFORM(windows, mac, android) +||95.168.170.165^$all +!+ PLATFORM(windows, mac, android) 213.227.145.147$network +!+ NOT_PLATFORM(windows, mac, android) +||213.227.145.147^$all +!+ PLATFORM(windows, mac, android) 213.227.149.216$network +!+ NOT_PLATFORM(windows, mac, android) +||213.227.149.216^$all ! https://twitter.com/adamziaja/status/1252234957679808513 ||wow-robotics.xyz^$all ! https://blog.sucuri.net/2021/05/woocommerce-credit-card-skimmer.html @@ -4010,7 +4235,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||aleinvest.xyz^$all ||fblaster.com^$all ||ribinski.us^$all +!+ PLATFORM(windows, mac, android) 5.188.62.36$network +!+ NOT_PLATFORM(windows, mac, android) +||5.188.62.36^$all ! https://github.com/DandelionSprout/adfilt/issues/223 ||speedupmypcfree.com^$all ! https://github.com/DandelionSprout/adfilt/issues/224 @@ -4045,7 +4273,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||untilkawan.com^$all ||ssielearning.com^$all ||paymetconfirm.com^$all +!+ PLATFORM(windows, mac, android) 69.49.231.244$network +!+ NOT_PLATFORM(windows, mac, android) +||69.49.231.244^$all ! https://movsb.0x0.st/users/mia ||vid.me^$third-party ||5starhdporn.com^$frame,third-party @@ -4069,7 +4300,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||cocinasintonterias.com^$all ||blackpass.info^$all ||yzsnw.com^$all +!+ PLATFORM(windows, mac, android) 37.34.176.37$network +!+ NOT_PLATFORM(windows, mac, android) +||37.34.176.37^$all ||atvcampingtrips.com^$all ||thegymmum.com^$all ||pcspeedcat.com^$all @@ -4085,15 +4319,33 @@ zombooru.com##a[href="http://www.hard55.com"] ||mgmgmg.com^$all ||temp74.com^$all ||trackwebclick.com^$all,~inline-font,domain=~malware-redirection-trains.* +!+ PLATFORM(windows, mac, android) 23.111.31.137$network +!+ NOT_PLATFORM(windows, mac, android) +||23.111.31.137^$all +!+ PLATFORM(windows, mac, android) 23.111.88.207$network +!+ NOT_PLATFORM(windows, mac, android) +||23.111.88.207^$all ! https://github.com/DandelionSprout/adfilt/issues/254 ||onesafesoftware.com^$document ! https://github.com/DandelionSprout/adfilt/issues/257 +!+ PLATFORM(windows, mac, android) 185.158.250.239$network +!+ NOT_PLATFORM(windows, mac, android) +||185.158.250.239^$all +!+ PLATFORM(windows, mac, android) 192.169.69.25$network +!+ NOT_PLATFORM(windows, mac, android) +||192.169.69.25^$all +!+ PLATFORM(windows, mac, android) 212.192.241.72$network +!+ NOT_PLATFORM(windows, mac, android) +||212.192.241.72^$all +!+ PLATFORM(windows, mac, android) 37.0.10.83$network +!+ NOT_PLATFORM(windows, mac, android) +||37.0.10.83^$all ||newstepsco.com^$all ||secure-0*.ddnss.ch^$all ||lucdream.com^$document @@ -4123,7 +4375,10 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/url/8066b87ad10ddb5466bc307bb48454139572f6c8c8f80a9734275ac89cf966af/detection ! https://www.virustotal.com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection ! https://safeweb.norton.com/report/show?url=192.3.110.170 +!+ PLATFORM(windows, mac, android) 192.3.110.170$network +!+ NOT_PLATFORM(windows, mac, android) +||192.3.110.170^$all ! https://forums.malwarebytes.com/topic/278209-removal-instructions-for-socialsearchconverter/ ||socialsearchconverter.com^$document ||install.socialsearchconverter.com^$all @@ -4161,7 +4416,10 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/file/c683bc3da4966110b419ac54d09a54ce798efdb51be398331d9ce011e2636fa9/community ! https://www.virustotal.com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection ! https://www.virustotal.com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection +!+ PLATFORM(windows, mac, android) 91.241.19.38$network +!+ NOT_PLATFORM(windows, mac, android) +||91.241.19.38^$all ! https://www.virustotal.com/gui/url/46e095c35d83e2dd0b98df4b5844d3d87948de0c930a618600121020a514c801/detection ! https://safeweb.norton.com/report/show?url=telete.in ! https://www.siteadvisor.com/sitereport.html?url=telete.in @@ -4171,42 +4429,93 @@ zombooru.com##a[href="http://www.hard55.com"] ||kiff.tech^$all ! https://www.virustotal.com/gui/domain/kiff.tech/relations ! https://www.virustotal.com/gui/url/dc038496b1b5358b97f89440135ec91258b406c40859a2cd95983dc7a81e0cfa/detection +!+ PLATFORM(windows, mac, android) 45.90.58.90$network +!+ NOT_PLATFORM(windows, mac, android) +||45.90.58.90^$all ! https://www.virustotal.com/gui/file/e565ba89d034418fd26a5f642f6eeee4d72ee3b8dc69523419b7ca8dfd452730/community ! https://www.virustotal.com/gui/url/e3a9189a1e1256beba8e0fc3abfeab6acb09f7f8cabfd973e22be9f77bb6886f/detection +!+ PLATFORM(windows, mac, android) 95.85.89.98$network +!+ NOT_PLATFORM(windows, mac, android) +||95.85.89.98^$all ! https://github.com/DandelionSprout/adfilt/issues/267 ||tekhacks.net^$all ||mediafire.com/file/pj9jdm7iznc4d51/tekhacksnet_multi_loader.rar^$document ! https://github.com/DandelionSprout/adfilt/pull/278 !! https://www.virustotal.com/gui/file/da75c85fe037f9ff9ebbbd0b37dd2ff154f5e70a0dc6870286e0d3df6b8f246f/community +!+ PLATFORM(windows, mac, android) 139.28.37.49$network +!+ NOT_PLATFORM(windows, mac, android) +||139.28.37.49^$all !! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community +!+ PLATFORM(windows, mac, android) 35.194.188.37$network +!+ NOT_PLATFORM(windows, mac, android) +||35.194.188.37^$all !! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community ||hydro-ca.link^$all !! https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community +!+ PLATFORM(windows, mac, android) 91.243.121.19$network +!+ NOT_PLATFORM(windows, mac, android) +||91.243.121.19^$all !! https://www.virustotal.com/gui/file/9f154115fa8045aa05f15f7cd1de9623ebe32e8ea400279ecb5dfa3596952e3b/community +!+ PLATFORM(windows, mac, android) 103.169.90.205$network +!+ NOT_PLATFORM(windows, mac, android) +||103.169.90.205^$all ! https://github.com/DandelionSprout/adfilt/pull/281 ! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community +!+ PLATFORM(windows, mac, android) 125.44.43.45$network +!+ NOT_PLATFORM(windows, mac, android) +||125.44.43.45^$all +!+ PLATFORM(windows, mac, android) 182.121.8.240$network +!+ NOT_PLATFORM(windows, mac, android) +||182.121.8.240^$all +!+ PLATFORM(windows, mac, android) 42.235.183.74$network +!+ NOT_PLATFORM(windows, mac, android) +||42.235.183.74^$all +!+ PLATFORM(windows, mac, android) 78.36.32.242$network +!+ NOT_PLATFORM(windows, mac, android) +||78.36.32.242^$all +!+ PLATFORM(windows, mac, android) 115.50.2.119$network +!+ NOT_PLATFORM(windows, mac, android) +||115.50.2.119^$all +!+ PLATFORM(windows, mac, android) 115.50.110.163$network +!+ NOT_PLATFORM(windows, mac, android) +||115.50.110.163^$all +!+ PLATFORM(windows, mac, android) 119.179.84.145$network +!+ NOT_PLATFORM(windows, mac, android) +||119.179.84.145^$all +!+ PLATFORM(windows, mac, android) 188.120.50.98$network +!+ NOT_PLATFORM(windows, mac, android) +||188.120.50.98^$all +!+ PLATFORM(windows, mac, android) 190.238.183.5$network +!+ NOT_PLATFORM(windows, mac, android) +||190.238.183.5^$all +!+ PLATFORM(windows, mac, android) 27.220.253.78$network +!+ NOT_PLATFORM(windows, mac, android) +||27.220.253.78^$all ! https://www.virustotal.com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community ||esetnode32-antiviru.ydns.eu^$all ! https://www.joesandbox.com/analysis/486636/0/html#domains ||aieov.com^$all ! Relations to the original domain +!+ PLATFORM(windows, mac, android) 192.3.194.242$network +!+ NOT_PLATFORM(windows, mac, android) +||192.3.194.242^$all ||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^$all ||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^$all ||avira-antivirus.ydns.eu^$all @@ -4281,67 +4590,229 @@ zombooru.com##a[href="http://www.hard55.com"] ||cd.org^$document ! https://www.virustotal.com/gui/file/78f490e503c86eaaff5760197b9ff5308ed6e03161af13194a6c1e0cd95422de/community ! https://github.com/DandelionSprout/adfilt/commit/f7f114945c83b339be5cdd848e229680d9918abb#commitcomment-57642875 +!+ PLATFORM(windows, mac, android) 23.94.26.138$network +!+ NOT_PLATFORM(windows, mac, android) +||23.94.26.138^$all ! https://github.com/DandelionSprout/adfilt/pull/298 ! https://www.virustotal.com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community +!+ PLATFORM(windows, mac, android) 205.185.126.200$network +!+ NOT_PLATFORM(windows, mac, android) +||205.185.126.200^$all ! https://www.virustotal.com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community +!+ PLATFORM(windows, mac, android) 185.243.56.167$network +!+ NOT_PLATFORM(windows, mac, android) +||185.243.56.167^$all ! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +!+ PLATFORM(windows, mac, android) 123.10.224.135$network +!+ NOT_PLATFORM(windows, mac, android) +||123.10.224.135^$all +!+ PLATFORM(windows, mac, android) 59.47.187.147$network +!+ NOT_PLATFORM(windows, mac, android) +||59.47.187.147^$all +!+ PLATFORM(windows, mac, android) 39.68.172.210$network +!+ NOT_PLATFORM(windows, mac, android) +||39.68.172.210^$all +!+ PLATFORM(windows, mac, android) 122.192.177.176$network +!+ NOT_PLATFORM(windows, mac, android) +||122.192.177.176^$all +!+ PLATFORM(windows, mac, android) 112.27.124.108$network +!+ NOT_PLATFORM(windows, mac, android) +||112.27.124.108^$all +!+ PLATFORM(windows, mac, android) 123.110.176.246$network +!+ NOT_PLATFORM(windows, mac, android) +||123.110.176.246^$all +!+ PLATFORM(windows, mac, android) 219.155.105.98$network +!+ NOT_PLATFORM(windows, mac, android) +||219.155.105.98^$all +!+ PLATFORM(windows, mac, android) 171.35.161.209$network +!+ NOT_PLATFORM(windows, mac, android) +||171.35.161.209^$all +!+ PLATFORM(windows, mac, android) 60.16.255.36$network +!+ NOT_PLATFORM(windows, mac, android) +||60.16.255.36^$all +!+ PLATFORM(windows, mac, android) 112.30.4.52$network +!+ NOT_PLATFORM(windows, mac, android) +||112.30.4.52^$all +!+ PLATFORM(windows, mac, android) 182.121.191.201$network +!+ NOT_PLATFORM(windows, mac, android) +||182.121.191.201^$all +!+ PLATFORM(windows, mac, android) 121.61.48.170$network +!+ NOT_PLATFORM(windows, mac, android) +||121.61.48.170^$all +!+ PLATFORM(windows, mac, android) 39.81.68.45$network +!+ NOT_PLATFORM(windows, mac, android) +||39.81.68.45^$all +!+ PLATFORM(windows, mac, android) 27.222.220.164$network +!+ NOT_PLATFORM(windows, mac, android) +||27.222.220.164^$all +!+ PLATFORM(windows, mac, android) 113.233.215.135$network +!+ NOT_PLATFORM(windows, mac, android) +||113.233.215.135^$all +!+ PLATFORM(windows, mac, android) 151.77.100.133$network +!+ NOT_PLATFORM(windows, mac, android) +||151.77.100.133^$all +!+ PLATFORM(windows, mac, android) 125.120.13.184$network +!+ NOT_PLATFORM(windows, mac, android) +||125.120.13.184^$all +!+ PLATFORM(windows, mac, android) 120.12.138.133$network +!+ NOT_PLATFORM(windows, mac, android) +||120.12.138.133^$all +!+ PLATFORM(windows, mac, android) 27.194.115.185$network +!+ NOT_PLATFORM(windows, mac, android) +||27.194.115.185^$all +!+ PLATFORM(windows, mac, android) 104.128.199.228$network +!+ NOT_PLATFORM(windows, mac, android) +||104.128.199.228^$all +!+ PLATFORM(windows, mac, android) 183.92.123.145$network +!+ NOT_PLATFORM(windows, mac, android) +||183.92.123.145^$all +!+ PLATFORM(windows, mac, android) 110.89.8.126$network +!+ NOT_PLATFORM(windows, mac, android) +||110.89.8.126^$all +!+ PLATFORM(windows, mac, android) 125.43.211.184$network +!+ NOT_PLATFORM(windows, mac, android) +||125.43.211.184^$all +!+ PLATFORM(windows, mac, android) 1.0.218.230$network +!+ NOT_PLATFORM(windows, mac, android) +||1.0.218.230^$all +!+ PLATFORM(windows, mac, android) 221.208.4.56$network +!+ NOT_PLATFORM(windows, mac, android) +||221.208.4.56^$all +!+ PLATFORM(windows, mac, android) 60.13.60.19$network +!+ NOT_PLATFORM(windows, mac, android) +||60.13.60.19^$all +!+ PLATFORM(windows, mac, android) 171.37.29.87$network +!+ NOT_PLATFORM(windows, mac, android) +||171.37.29.87^$all +!+ PLATFORM(windows, mac, android) 124.91.237.188$network +!+ NOT_PLATFORM(windows, mac, android) +||124.91.237.188^$all +!+ PLATFORM(windows, mac, android) 115.56.137.49$network +!+ NOT_PLATFORM(windows, mac, android) +||115.56.137.49^$all +!+ PLATFORM(windows, mac, android) 115.52.240.69$network +!+ NOT_PLATFORM(windows, mac, android) +||115.52.240.69^$all +!+ PLATFORM(windows, mac, android) 112.252.132.185$network +!+ NOT_PLATFORM(windows, mac, android) +||112.252.132.185^$all +!+ PLATFORM(windows, mac, android) 117.198.240.157$network +!+ NOT_PLATFORM(windows, mac, android) +||117.198.240.157^$all +!+ PLATFORM(windows, mac, android) 42.53.240.249$network +!+ NOT_PLATFORM(windows, mac, android) +||42.53.240.249^$all +!+ PLATFORM(windows, mac, android) 116.179.138.68$network +!+ NOT_PLATFORM(windows, mac, android) +||116.179.138.68^$all +!+ PLATFORM(windows, mac, android) 110.241.119.159$network +!+ NOT_PLATFORM(windows, mac, android) +||110.241.119.159^$all +!+ PLATFORM(windows, mac, android) 115.56.31.133$network +!+ NOT_PLATFORM(windows, mac, android) +||115.56.31.133^$all +!+ PLATFORM(windows, mac, android) 103.19.128.222$network +!+ NOT_PLATFORM(windows, mac, android) +||103.19.128.222^$all +!+ PLATFORM(windows, mac, android) 202.12.80.74$network +!+ NOT_PLATFORM(windows, mac, android) +||202.12.80.74^$all +!+ PLATFORM(windows, mac, android) 61.52.8.62$network +!+ NOT_PLATFORM(windows, mac, android) +||61.52.8.62^$all +!+ PLATFORM(windows, mac, android) 182.122.252.69$network +!+ NOT_PLATFORM(windows, mac, android) +||182.122.252.69^$all +!+ PLATFORM(windows, mac, android) 219.155.26.50$network +!+ NOT_PLATFORM(windows, mac, android) +||219.155.26.50^$all +!+ PLATFORM(windows, mac, android) 120.4.141.185$network +!+ NOT_PLATFORM(windows, mac, android) +||120.4.141.185^$all +!+ PLATFORM(windows, mac, android) 119.102.7.115$network +!+ NOT_PLATFORM(windows, mac, android) +||119.102.7.115^$all +!+ PLATFORM(windows, mac, android) 72.51.127.213$network +!+ NOT_PLATFORM(windows, mac, android) +||72.51.127.213^$all +!+ PLATFORM(windows, mac, android) 111.224.199.91$network +!+ NOT_PLATFORM(windows, mac, android) +||111.224.199.91^$all +!+ PLATFORM(windows, mac, android) 119.250.236.122$network +!+ NOT_PLATFORM(windows, mac, android) +||119.250.236.122^$all +!+ PLATFORM(windows, mac, android) 112.30.110.58$network +!+ NOT_PLATFORM(windows, mac, android) +||112.30.110.58^$all ! https://www.virustotal.com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community ||pcae.de^$document ! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community +!+ PLATFORM(windows, mac, android) 117.196.49.21$network +!+ NOT_PLATFORM(windows, mac, android) +||117.196.49.21^$all +!+ PLATFORM(windows, mac, android) 115.55.54.234$network +!+ NOT_PLATFORM(windows, mac, android) +||115.55.54.234^$all +!+ PLATFORM(windows, mac, android) 115.52.17.123$network +!+ NOT_PLATFORM(windows, mac, android) +||115.52.17.123^$all +!+ PLATFORM(windows, mac, android) 182.59.69.21$network +!+ NOT_PLATFORM(windows, mac, android) +||182.59.69.21^$all ! https://www.virustotal.com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community ||chip-secured-download.de^$all ! https://www.virustotal.com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb @@ -4364,7 +4835,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||realdefen.se^$document ! Vermilion Strike ! https://www.virustotal.com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations +!+ PLATFORM(windows, mac, android) 160.202.163.100$network +!+ NOT_PLATFORM(windows, mac, android) +||160.202.163.100^$all ! https://www.virustotal.com/gui/ip-address/160.202.163.100/relations ||microsoftkernel.com^$all ||microsofthk.com^$all @@ -4377,11 +4851,20 @@ zombooru.com##a[href="http://www.hard55.com"] ||pushbizapi.com^$all ! https://github.com/DandelionSprout/adfilt/pull/303 ! https://www.virustotal.com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community +!+ PLATFORM(windows, mac, android) 45.95.169.115$network +!+ NOT_PLATFORM(windows, mac, android) +||45.95.169.115^$all ! https://www.virustotal.com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community +!+ PLATFORM(windows, mac, android) 45.148.120.80$network +!+ NOT_PLATFORM(windows, mac, android) +||45.148.120.80^$all ! https://www.virustotal.com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community +!+ PLATFORM(windows, mac, android) 85.239.33.9$network +!+ NOT_PLATFORM(windows, mac, android) +||85.239.33.9^$all ! Relations to the domain above ||adminsys.serveftp.com^$all ||amazbaidu.serveftp.com^$all @@ -4398,9 +4881,15 @@ zombooru.com##a[href="http://www.hard55.com"] ||1log-wellsfargo.serveftp.com^$all ||eposcardokubo.serveftp.com^$all ! https://www.virustotal.com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community +!+ PLATFORM(windows, mac, android) 107.173.176.183$network +!+ NOT_PLATFORM(windows, mac, android) +||107.173.176.183^$all ! https://www.virustotal.com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community +!+ PLATFORM(windows, mac, android) 45.148.120.171$network +!+ NOT_PLATFORM(windows, mac, android) +||45.148.120.171^$all ! https://twitter.com/soranker0/status/1449491402409185283 ://disordgift.$all ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 @@ -4410,7 +4899,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||cloud-apps.store^$document /(^|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz($|/)/$document ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-951321929 +!+ PLATFORM(windows, mac, android) 159.148.186.228$network +!+ NOT_PLATFORM(windows, mac, android) +||159.148.186.228^$all ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains ||yotube.com^$all ||r-tb.com^$all @@ -4438,39 +4930,135 @@ zombooru.com##a[href="http://www.hard55.com"] ||youutube.com^$all ! https://github.com/DandelionSprout/adfilt/pull/348 ! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +!+ PLATFORM(windows, mac, android) 39.83.80.247$network +!+ NOT_PLATFORM(windows, mac, android) +||39.83.80.247^$all +!+ PLATFORM(windows, mac, android) 68.197.33.124$network +!+ NOT_PLATFORM(windows, mac, android) +||68.197.33.124^$all +!+ PLATFORM(windows, mac, android) 219.157.21.37$network +!+ NOT_PLATFORM(windows, mac, android) +||219.157.21.37^$all +!+ PLATFORM(windows, mac, android) 182.123.141.17$network +!+ NOT_PLATFORM(windows, mac, android) +||182.123.141.17^$all +!+ PLATFORM(windows, mac, android) 125.47.243.187$network +!+ NOT_PLATFORM(windows, mac, android) +||125.47.243.187^$all +!+ PLATFORM(windows, mac, android) 182.122.196.203$network +!+ NOT_PLATFORM(windows, mac, android) +||182.122.196.203^$all +!+ PLATFORM(windows, mac, android) 182.117.231.182$network +!+ NOT_PLATFORM(windows, mac, android) +||182.117.231.182^$all +!+ PLATFORM(windows, mac, android) 112.31.211.135$network +!+ NOT_PLATFORM(windows, mac, android) +||112.31.211.135^$all +!+ PLATFORM(windows, mac, android) 125.106.63.93$network +!+ NOT_PLATFORM(windows, mac, android) +||125.106.63.93^$all +!+ PLATFORM(windows, mac, android) 115.59.197.46$network +!+ NOT_PLATFORM(windows, mac, android) +||115.59.197.46^$all +!+ PLATFORM(windows, mac, android) 122.159.29.192$network +!+ NOT_PLATFORM(windows, mac, android) +||122.159.29.192^$all +!+ PLATFORM(windows, mac, android) 171.40.0.127$network +!+ NOT_PLATFORM(windows, mac, android) +||171.40.0.127^$all +!+ PLATFORM(windows, mac, android) 171.80.219.160$network +!+ NOT_PLATFORM(windows, mac, android) +||171.80.219.160^$all +!+ PLATFORM(windows, mac, android) 123.10.65.201$network +!+ NOT_PLATFORM(windows, mac, android) +||123.10.65.201^$all +!+ PLATFORM(windows, mac, android) 168.90.205.46$network +!+ NOT_PLATFORM(windows, mac, android) +||168.90.205.46^$all +!+ PLATFORM(windows, mac, android) 125.47.205.109$network +!+ NOT_PLATFORM(windows, mac, android) +||125.47.205.109^$all +!+ PLATFORM(windows, mac, android) 39.80.147.239$network +!+ NOT_PLATFORM(windows, mac, android) +||39.80.147.239^$all +!+ PLATFORM(windows, mac, android) 45.224.171.130$network +!+ NOT_PLATFORM(windows, mac, android) +||45.224.171.130^$all +!+ PLATFORM(windows, mac, android) 45.5.209.75$network +!+ NOT_PLATFORM(windows, mac, android) +||45.5.209.75^$all +!+ PLATFORM(windows, mac, android) 116.17.210.157$network +!+ NOT_PLATFORM(windows, mac, android) +||116.17.210.157^$all +!+ PLATFORM(windows, mac, android) 27.45.103.240$network +!+ NOT_PLATFORM(windows, mac, android) +||27.45.103.240^$all +!+ PLATFORM(windows, mac, android) 110.167.64.171$network +!+ NOT_PLATFORM(windows, mac, android) +||110.167.64.171^$all +!+ PLATFORM(windows, mac, android) 39.81.117.73$network +!+ NOT_PLATFORM(windows, mac, android) +||39.81.117.73^$all +!+ PLATFORM(windows, mac, android) 183.15.90.156$network +!+ NOT_PLATFORM(windows, mac, android) +||183.15.90.156^$all +!+ PLATFORM(windows, mac, android) 119.113.248.74$network +!+ NOT_PLATFORM(windows, mac, android) +||119.113.248.74^$all +!+ PLATFORM(windows, mac, android) 175.0.95.85$network +!+ NOT_PLATFORM(windows, mac, android) +||175.0.95.85^$all +!+ PLATFORM(windows, mac, android) 61.52.99.109$network +!+ NOT_PLATFORM(windows, mac, android) +||61.52.99.109^$all +!+ PLATFORM(windows, mac, android) 222.142.183.194$network +!+ NOT_PLATFORM(windows, mac, android) +||222.142.183.194^$all +!+ PLATFORM(windows, mac, android) 106.86.172.194$network +!+ NOT_PLATFORM(windows, mac, android) +||106.86.172.194^$all +!+ PLATFORM(windows, mac, android) 103.233.216.77$network +!+ NOT_PLATFORM(windows, mac, android) +||103.233.216.77^$all +!+ PLATFORM(windows, mac, android) 183.188.192.55$network +!+ NOT_PLATFORM(windows, mac, android) +||183.188.192.55^$all ! https://www.virustotal.com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community +!+ PLATFORM(windows, mac, android) 198.23.255.14$network +!+ NOT_PLATFORM(windows, mac, android) +||198.23.255.14^$all ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs @@ -4478,8 +5066,14 @@ zombooru.com##a[href="http://www.hard55.com"] ||querahinor.xyz^$all ||trumops.com^$document ||runmodes.com^$all +!+ PLATFORM(windows, mac, android) 91.121.67.60$network +!+ NOT_PLATFORM(windows, mac, android) +||91.121.67.60^$all +!+ PLATFORM(windows, mac, android) 172.67.186.189$network +!+ NOT_PLATFORM(windows, mac, android) +||172.67.186.189^$all ! https://www.virustotal.com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 ||inconclusive-pyrite-grandparent.glitch.me^$all ||delicate-tame-angora.glitch.me^$all @@ -4494,10 +5088,22 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://scammer.info/t/mcafee-phish/83725 ||securefirst.us-east-1.linodeobjects.com^$all ! https://www.virustotal.com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community +!+ PLATFORM(windows, mac, android) 39.65.72.211$network +!+ NOT_PLATFORM(windows, mac, android) +||39.65.72.211^$all +!+ PLATFORM(windows, mac, android) 42.238.151.197$network +!+ NOT_PLATFORM(windows, mac, android) +||42.238.151.197^$all +!+ PLATFORM(windows, mac, android) 27.213.60.53$network +!+ NOT_PLATFORM(windows, mac, android) +||27.213.60.53^$all +!+ PLATFORM(windows, mac, android) 115.56.169.134$network +!+ NOT_PLATFORM(windows, mac, android) +||115.56.169.134^$all ! https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md ||yasir252.com^$all ||safelink.kadal.club^$document @@ -4517,9 +5123,15 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/url/a2524bba49ae71297d2b408b30d058700d9c80b5b1154924cafe190ec3e605a6/detection ! https://www.virustotal.com/gui/file/2b2628a50d3b39b0fa2395d487bf62b00e37cdae847ff76ee58399bbe4e9f7b3/community +!+ PLATFORM(windows, mac, android) 194.87.138.20$network +!+ NOT_PLATFORM(windows, mac, android) +||194.87.138.20^$all ! https://www.virustotal.com/gui/file/b320bc7a9151d70daca038c4356ca89bfcd4918bcd6f0f73683a27a6a72467ae/community +!+ PLATFORM(windows, mac, android) 103.167.92.73$network +!+ NOT_PLATFORM(windows, mac, android) +||103.167.92.73^$all ! https://www.virustotal.com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community ||bursakulis.com^$all ! https://www.virustotal.com/gui/url/b333c49efa4d399e65c5e2d96a905b380acbca58a3e3052b7bd7cfcb3e0e81ee @@ -4545,14 +5157,38 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://github.com/uBlockOrigin/uAssets/pull/10620 ||shadyclient.net^$all ! https://www.virustotal.com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community +!+ PLATFORM(windows, mac, android) 58.249.74.79$network +!+ NOT_PLATFORM(windows, mac, android) +||58.249.74.79^$all +!+ PLATFORM(windows, mac, android) 27.45.14.109$network +!+ NOT_PLATFORM(windows, mac, android) +||27.45.14.109^$all +!+ PLATFORM(windows, mac, android) 27.40.101.191$network +!+ NOT_PLATFORM(windows, mac, android) +||27.40.101.191^$all +!+ PLATFORM(windows, mac, android) 27.45.119.22$network +!+ NOT_PLATFORM(windows, mac, android) +||27.45.119.22^$all +!+ PLATFORM(windows, mac, android) 27.47.73.159$network +!+ NOT_PLATFORM(windows, mac, android) +||27.47.73.159^$all +!+ PLATFORM(windows, mac, android) 115.204.119.237$network +!+ NOT_PLATFORM(windows, mac, android) +||115.204.119.237^$all +!+ PLATFORM(windows, mac, android) 163.125.31.46$network +!+ NOT_PLATFORM(windows, mac, android) +||163.125.31.46^$all +!+ PLATFORM(windows, mac, android) 163.179.168.44$network +!+ NOT_PLATFORM(windows, mac, android) +||163.179.168.44^$all ! https://github.com/uBlockOrigin/uAssets/pull/10647 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md ||money-mod.com^$document @@ -4567,17 +5203,50 @@ zombooru.com##a[href="http://www.hard55.com"] ||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$all ||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$all ! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +!+ PLATFORM(windows, mac, android) 110.89.59.135$network +!+ NOT_PLATFORM(windows, mac, android) +||110.89.59.135^$all +!+ PLATFORM(windows, mac, android) 113.116.89.1$network +!+ NOT_PLATFORM(windows, mac, android) +||113.116.89.1^$all +!+ PLATFORM(windows, mac, android) 119.183.146.191$network +!+ NOT_PLATFORM(windows, mac, android) +||119.183.146.191^$all +!+ PLATFORM(windows, mac, android) 153.3.3.226$network +!+ NOT_PLATFORM(windows, mac, android) +||153.3.3.226^$all +!+ PLATFORM(windows, mac, android) 182.116.104.6$network +!+ NOT_PLATFORM(windows, mac, android) +||182.116.104.6^$all +!+ PLATFORM(windows, mac, android) 60.7.133.200$network +!+ NOT_PLATFORM(windows, mac, android) +||60.7.133.200^$all +!+ PLATFORM(windows, mac, android) 122.6.254.201$network +!+ NOT_PLATFORM(windows, mac, android) +||122.6.254.201^$all +!+ PLATFORM(windows, mac, android) 110.89.11.167$network +!+ NOT_PLATFORM(windows, mac, android) +||110.89.11.167^$all +!+ PLATFORM(windows, mac, android) 171.112.177.90$network +!+ NOT_PLATFORM(windows, mac, android) +||171.112.177.90^$all +!+ PLATFORM(windows, mac, android) 115.194.38.143$network +!+ NOT_PLATFORM(windows, mac, android) +||115.194.38.143^$all +!+ PLATFORM(windows, mac, android) 61.52.79.32$network +!+ NOT_PLATFORM(windows, mac, android) +||61.52.79.32^$all ! https://scammer.info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 ://ups-dk.$document,denyallow=dk|nu|se|no|fo|gl|ups.com,domain=ups-dk.* ! https://www.virustotal.com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 @@ -4607,7 +5276,10 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.nrk.no/vestfoldogtelemark/1.15750360 ||dundeehills.group^$all !+ NOT_OPTIMIZED +!+ PLATFORM(windows, mac, android) 132.148.220.142$network +!+ NOT_PLATFORM(windows, mac, android) +||132.148.220.142^$all ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-986306768 ||chess-progress.ru^$document ||ouhastay.net^$all @@ -4625,19 +5297,49 @@ zombooru.com##a[href="http://www.hard55.com"] ||p-stn.net^$all ! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md ||haxpc.net^$all +!+ PLATFORM(windows, mac, android) 52.53.243.52$network +!+ NOT_PLATFORM(windows, mac, android) +||52.53.243.52^$all +!+ PLATFORM(windows, mac, android) 34.201.22.10$network +!+ NOT_PLATFORM(windows, mac, android) +||34.201.22.10^$all ! https://scammer.info/t/crypto-scammers-onceagain/85354 ||business.google.com/website/billyandscapedesign^$all ! https://www.virustotal.com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community +!+ PLATFORM(windows, mac, android) 123.10.225.196$network +!+ NOT_PLATFORM(windows, mac, android) +||123.10.225.196^$all +!+ PLATFORM(windows, mac, android) 122.192.106.84$network +!+ NOT_PLATFORM(windows, mac, android) +||122.192.106.84^$all +!+ PLATFORM(windows, mac, android) 172.88.199.9$network +!+ NOT_PLATFORM(windows, mac, android) +||172.88.199.9^$all +!+ PLATFORM(windows, mac, android) 114.38.176.185$network +!+ NOT_PLATFORM(windows, mac, android) +||114.38.176.185^$all +!+ PLATFORM(windows, mac, android) 61.52.97.35$network +!+ NOT_PLATFORM(windows, mac, android) +||61.52.97.35^$all +!+ PLATFORM(windows, mac, android) 27.206.181.208$network +!+ NOT_PLATFORM(windows, mac, android) +||27.206.181.208^$all +!+ PLATFORM(windows, mac, android) 124.163.130.175$network +!+ NOT_PLATFORM(windows, mac, android) +||124.163.130.175^$all +!+ PLATFORM(windows, mac, android) 118.75.87.102$network +!+ NOT_PLATFORM(windows, mac, android) +||118.75.87.102^$all ! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md ||onemacusa.net^$all ! https://github.com/DevSpen/links/pull/3 @@ -4645,7 +5347,10 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://bazaar.abuse.ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ ||mozicrack.com^$all ||download-srvr.xyz^$all +!+ PLATFORM(windows, mac, android) 134.122.115.190$network +!+ NOT_PLATFORM(windows, mac, android) +||134.122.115.190^$all ||cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com^$all ! https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 ||viewty.xyz^$all @@ -4667,7 +5372,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||wellhello.com^$document ! https://github.com/AdguardTeam/AdguardFilters/issues/103475 ||ru.com^$all +!+ PLATFORM(windows, mac, android) 141.8.226.34$network +!+ NOT_PLATFORM(windows, mac, android) +||141.8.226.34^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/108571 ||ston-app.com^$all ! fake human verification scam @@ -4683,7 +5391,10 @@ zombooru.com##a[href="http://www.hard55.com"] ! https://www.virustotal.com/gui/url/c25fe34c05cc8e9136027a67c277e175a5d6e35af921ee37bad98bdfeea6a2f9/community ||splendid-fallacious-anaconda.glitch.me^$all ! https://www.virustotal.com/gui/file/9d40ae0439ddc594b2cf64e21ad0fdea9bb440524298e3a6bcfcc1fb417f1ed2/relations +!+ PLATFORM(windows, mac, android) 91.240.118.172$network +!+ NOT_PLATFORM(windows, mac, android) +||91.240.118.172^$all ! "Press Allow to continue" ||kuyhaa-mee.com^$all ||waystriling.com^$all @@ -4728,7 +5439,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||activatorwin.com^$all ||freeversioncrack.com^$document ||top3hostngc.xyz^$all +!+ PLATFORM(windows, mac, android) 198.199.120.251$network +!+ NOT_PLATFORM(windows, mac, android) +||198.199.120.251^$all ! https://www.telia.no/kundeservice/mobil/malware-flubot-android/ !+ NOT_OPTIMIZED /^https?://(www\.)?[a-z0-9-]{1,}\.[a-z]{2,17}/[a-z0-9]/\?[a-z0-9.-]{8,}\$/$document @@ -4751,8 +5465,14 @@ zombooru.com##a[href="http://www.hard55.com"] ||partners-space.life^$all ||partners-club.life^$all ||cumpussyy.uno^$all +!+ PLATFORM(windows, mac, android) 195.201.253.130$network +!+ NOT_PLATFORM(windows, mac, android) +||195.201.253.130^$all +!+ PLATFORM(windows, mac, android) 195.201.253.131$network +!+ NOT_PLATFORM(windows, mac, android) +||195.201.253.131^$all ! The bottom download button on https://www.sushichop.com/ ||installiq.com^$all ||specgoal.com^$all @@ -4771,11 +5491,26 @@ zombooru.com##a[href="http://www.hard55.com"] ||rtbrevdirect.com^$document,domain=~malware-redirection-trains.* ||rtbvrdirect.com^$document,domain=~malware-redirection-trains.* ||cpmverdirect.com^$document,domain=~malware-redirection-trains.* +!+ PLATFORM(windows, mac, android) 15.197.244.48$network +!+ NOT_PLATFORM(windows, mac, android) +||15.197.244.48^$all +!+ PLATFORM(windows, mac, android) 96.47.230.67$network +!+ NOT_PLATFORM(windows, mac, android) +||96.47.230.67^$all +!+ PLATFORM(windows, mac, android) 96.47.230.68$network +!+ NOT_PLATFORM(windows, mac, android) +||96.47.230.68^$all +!+ PLATFORM(windows, mac, android) 96.47.230.69$network +!+ NOT_PLATFORM(windows, mac, android) +||96.47.230.69^$all +!+ PLATFORM(windows, mac, android) 96.47.230.70$network +!+ NOT_PLATFORM(windows, mac, android) +||96.47.230.70^$all ! https://securitytrails.com/list/ns/ns1.fastthinkingdns.com ||highercaptcha-settle.$all ||highercaptchasettle.$all @@ -4815,7 +5550,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||viixcv.com^$all ||viixes.com^$all ||viiyhn.com^$all +!+ PLATFORM(windows, mac, android) 31.220.27.134$network +!+ NOT_PLATFORM(windows, mac, android) +||31.220.27.134^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/122757 ://adbrbk.$document ! https://github.com/AdguardTeam/AdguardFilters/issues/123544 @@ -5119,8 +5857,14 @@ zombooru.com##a[href="http://www.hard55.com"] 178.253.47.*$network 178.253.54.*$network !#endif +!+ PLATFORM(windows, mac, android) 85.17.31.152$network +!+ NOT_PLATFORM(windows, mac, android) +||85.17.31.152^$all +!+ PLATFORM(windows, mac, android) 95.211.26.202$network +!+ NOT_PLATFORM(windows, mac, android) +||95.211.26.202^$all ! https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 ||bzsx.link^$all ||dfvd.link^$all @@ -5134,8 +5878,14 @@ zombooru.com##a[href="http://www.hard55.com"] ||szxo.link^$all ||ujtj.link^$all ||wznp.link^$all +!+ PLATFORM(windows, mac, android) 158.247.212.220$network +!+ NOT_PLATFORM(windows, mac, android) +||158.247.212.220^$all +!+ PLATFORM(windows, mac, android) 165.227.168.212$network +!+ NOT_PLATFORM(windows, mac, android) +||165.227.168.212^$all !#if !ext_ublock ! https://www.reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/ 162.241.115.*$network @@ -5182,7 +5932,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||proilammix.com^$all ||broburchrove.com^$all ||galantinkoling.com^$all +!+ PLATFORM(windows, mac, android) 23.81.64.183$network +!+ NOT_PLATFORM(windows, mac, android) +||23.81.64.183^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/125300 ||zikroarg.com^$all ||dooloust.net^$all @@ -5352,7 +6105,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||influencer2020.com^$all ||vooculok.com^$all ||mobytrks.com^$all,~inline-font,domain=~malware-redirection-trains.* +!+ PLATFORM(windows, mac, android) 139.45.197.236$network +!+ NOT_PLATFORM(windows, mac, android) +||139.45.197.236^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/128029 ||becovi.com^$all ||becovi.co.uk^$all @@ -5380,9 +6136,18 @@ zombooru.com##a[href="http://www.hard55.com"] ||optimusquaero.com^$document,popup ||frescopartito.com^$document,popup ||motherpipe.net^$document +!+ PLATFORM(windows, mac, android) 51.91.66.125$network +!+ NOT_PLATFORM(windows, mac, android) +||51.91.66.125^$all +!+ PLATFORM(windows, mac, android) 51.178.76.105$network +!+ NOT_PLATFORM(windows, mac, android) +||51.178.76.105^$all +!+ PLATFORM(windows, mac, android) 147.135.253.55$network +!+ NOT_PLATFORM(windows, mac, android) +||147.135.253.55^$all ! https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www.virustotal.com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app.any.run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade) ||bnbdeal.net^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/129414 @@ -5391,8 +6156,14 @@ zombooru.com##a[href="http://www.hard55.com"] !+ NOT_OPTIMIZED /^http://imgblaze.net/[a-z0-9]{6}\$/$third-party,subdocument ! https://github.com/AdguardTeam/AdguardFilters/issues/131156 +!+ PLATFORM(windows, mac, android) 146.19.169.98$network +!+ NOT_PLATFORM(windows, mac, android) +||146.19.169.98^$all +!+ PLATFORM(windows, mac, android) 146.19.169.99$network +!+ NOT_PLATFORM(windows, mac, android) +||146.19.169.99^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/132079 /pushredirect/?$document,domain=~malware-redirection-trains.* ! https://github.com/AdguardTeam/AdguardFilters/issues/134355 @@ -7165,13 +7936,19 @@ zombooru.com##a[href="http://www.hard55.com"] ||zz1200.com^$all ||niderschlagsradar.de^$all ||2c236979-b1bb-4c7a-915c-df74dbad0d8c.s3.ap-northeast-2.amazonaws.com^$all +!+ PLATFORM(windows, mac, android) 69.162.80.56$network +!+ NOT_PLATFORM(windows, mac, android) +||69.162.80.56^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/134903 ||smartlink.name^$all ! Random Discord servers ||newntflix-$document,popup ||giveawaycord.$all +!+ PLATFORM(windows, mac, android) 162.241.124.200$network +!+ NOT_PLATFORM(windows, mac, android) +||162.241.124.200^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/135815 ||adsstar.in^$document,popup ||clickcafe.in^$document,popup @@ -7187,7 +7964,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||tnvalue.in^$document,popup ||usanewstoday.club^$document,popup ||webhostingtips.club^$document,popup +!+ PLATFORM(windows, mac, android) 157.90.71.190$network +!+ NOT_PLATFORM(windows, mac, android) +||157.90.71.190^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/135924 ||abazelfan.com^$all ||abburmyer.com^$all @@ -7424,7 +8204,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||yonabrar.com^$all ||zagtertda.com^$all ||zoawufoy.net^$all +!+ PLATFORM(windows, mac, android) 139.45.197.239$network +!+ NOT_PLATFORM(windows, mac, android) +||139.45.197.239^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/136390 ||glthub.$document,popup ! https://app.any.run/tasks/67907c11-6877-4c38-932f-2cf09ee4e434 @@ -7624,9 +8407,18 @@ zombooru.com##a[href="http://www.hard55.com"] ||yugiidv.xyz^$all ||zaolutd.icu^$all ||zigaahm.icu^$all +!+ PLATFORM(windows, mac, android) 44.228.230.225$network +!+ NOT_PLATFORM(windows, mac, android) +||44.228.230.225^$all +!+ PLATFORM(windows, mac, android) 50.112.124.170$network +!+ NOT_PLATFORM(windows, mac, android) +||50.112.124.170^$all +!+ PLATFORM(windows, mac, android) 100.20.104.229$network +!+ NOT_PLATFORM(windows, mac, android) +||100.20.104.229^$all ! Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread ||link.sv^$document,popup ||4.fo^$document,popup @@ -7637,13 +8429,28 @@ zombooru.com##a[href="http://www.hard55.com"] ||gsecurecontent.com^$all ||pressizer.net^$all ||sapino.net^$all +!+ PLATFORM(windows, mac, android) 44.236.213.34$network +!+ NOT_PLATFORM(windows, mac, android) +||44.236.213.34^$all +!+ PLATFORM(windows, mac, android) 52.24.156.12$network +!+ NOT_PLATFORM(windows, mac, android) +||52.24.156.12^$all +!+ PLATFORM(windows, mac, android) 52.25.6.134$network +!+ NOT_PLATFORM(windows, mac, android) +||52.25.6.134^$all +!+ PLATFORM(windows, mac, android) 100.20.13.49$network +!+ NOT_PLATFORM(windows, mac, android) +||100.20.13.49^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/139667 ||goldmesoil.live^$all +!+ PLATFORM(windows, mac, android) 51.68.87.229$network +!+ NOT_PLATFORM(windows, mac, android) +||51.68.87.229^$all ||f9dle.skin^$all ||kilpa2017.fi^$all ! https://github.com/DandelionSprout/adfilt/issues/747 @@ -9447,9 +10254,18 @@ zombooru.com##a[href="http://www.hard55.com"] ||unity-download.com^$all ||unity-download.org^$all ||webull-download.$all +!+ PLATFORM(windows, mac, android) 185.106.94.139$network +!+ NOT_PLATFORM(windows, mac, android) +||185.106.94.139^$all +!+ PLATFORM(windows, mac, android) 45.90.109.196$network +!+ NOT_PLATFORM(windows, mac, android) +||45.90.109.196^$all +!+ PLATFORM(windows, mac, android) 91.229.23.200$network +!+ NOT_PLATFORM(windows, mac, android) +||91.229.23.200^$all ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872 ! https://github.com/AdguardTeam/AdguardFilters/issues/144514 ||attractbestbonuses.life^$all @@ -9510,13 +10326,22 @@ zombooru.com##a[href="http://www.hard55.com"] ||winxlbonus.life^$all ||winbest.life^$all ||winmacros.life^$all +!+ PLATFORM(windows, mac, android) 185.155.184.98$network +!+ NOT_PLATFORM(windows, mac, android) +||185.155.184.98^$all +!+ PLATFORM(windows, mac, android) 194.110.247.242$network +!+ NOT_PLATFORM(windows, mac, android) +||194.110.247.242^$all ! https://new.reddit.com/r/engrish/comments/10zs6f6/low_budget_scam/ ||ups-addressed.me^$all ||ups-quote.me^$all ||meta-whatsapp.me^$all +!+ PLATFORM(windows, mac, android) 54.219.218.169$network +!+ NOT_PLATFORM(windows, mac, android) +||54.219.218.169^$all ! https://new.reddit.com/r/engrish/comments/10z8r2u/well_you_tried/ ||0365alert.com^$all ||0365online.com^$all @@ -9947,7 +10772,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||yourlivingequity.com^$all ||yourticketchance.com^$all ||yourorderupdate.com^$all +!+ PLATFORM(windows, mac, android) 64.132.201.92$network +!+ NOT_PLATFORM(windows, mac, android) +||64.132.201.92^$all ! https://www.adressa.no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener ||acessmygov.online^$all ||centerlinkmygov.com^$all @@ -9968,7 +10796,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||verifyauth-mtbonline.us^$all ||jatcraft.com^$all ||elimef.link^$document +!+ PLATFORM(windows, mac, android) 209.141.51.49$network +!+ NOT_PLATFORM(windows, mac, android) +||209.141.51.49^$all ://soekpakke*.blogspot.com^$all ||post-norway.web.app^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/142955 @@ -10564,9 +11395,18 @@ zombooru.com##a[href="http://www.hard55.com"] ||wyglyvaso.com^$all ||zogrepsili.com^$all ! Unsuited for wildcarding +!+ PLATFORM(windows, mac, android) 208.88.225.116$network +!+ NOT_PLATFORM(windows, mac, android) +||208.88.225.116^$all +!+ PLATFORM(windows, mac, android) 208.88.225.117$network +!+ NOT_PLATFORM(windows, mac, android) +||208.88.225.117^$all +!+ PLATFORM(windows, mac, android) 208.88.225.119$network +!+ NOT_PLATFORM(windows, mac, android) +||208.88.225.119^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/144823 !+ NOT_OPTIMIZED ://landings.*_slots/?partner=$document @@ -10668,10 +11508,22 @@ zombooru.com##a[href="http://www.hard55.com"] ||wiela-kig.com^$all ||wulfs-dcm.com^$all /zcvisitor/*?campaignid$document +!+ PLATFORM(windows, mac, android) 3.231.116.86$network +!+ NOT_PLATFORM(windows, mac, android) +||3.231.116.86^$all +!+ PLATFORM(windows, mac, android) 54.237.193.255$network +!+ NOT_PLATFORM(windows, mac, android) +||54.237.193.255^$all +!+ PLATFORM(windows, mac, android) 3.231.137.120$network +!+ NOT_PLATFORM(windows, mac, android) +||3.231.137.120^$all +!+ PLATFORM(windows, mac, android) 54.204.83.105$network +!+ NOT_PLATFORM(windows, mac, android) +||54.204.83.105^$all ! https://github.com/DandelionSprout/adfilt/issues/808 ! https://www.mandiant.com/resources/blog/tracking-evolution-gootloader-operations (26/01/2023) ||jonathanbartz.com^$all @@ -10690,11 +11542,26 @@ zombooru.com##a[href="http://www.hard55.com"] ||center-main.com^$all ||office-view.com^$all ||i-likefood.co^$document +!+ PLATFORM(windows, mac, android) 108.61.242.65$network +!+ NOT_PLATFORM(windows, mac, android) +||108.61.242.65^$all +!+ PLATFORM(windows, mac, android) 146.70.78.43$network +!+ NOT_PLATFORM(windows, mac, android) +||146.70.78.43^$all +!+ PLATFORM(windows, mac, android) 87.120.254.39$network +!+ NOT_PLATFORM(windows, mac, android) +||87.120.254.39^$all +!+ PLATFORM(windows, mac, android) 45.150.108.213$network +!+ NOT_PLATFORM(windows, mac, android) +||45.150.108.213^$all +!+ PLATFORM(windows, mac, android) 92.204.160.240$network +!+ NOT_PLATFORM(windows, mac, android) +||92.204.160.240^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/148560 /land/*&afftrack=$document,domain=~likely-a-malware-redirection.* ! Comments on Slack @@ -10849,7 +11716,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||watchprecisehighlyinfo-product.info^$all ||watchrenewedcompletelyinfo-product.info^$all ||watchuberdevelopedinfo-product.info^$all +!+ PLATFORM(windows, mac, android) 34.200.46.148$network +!+ NOT_PLATFORM(windows, mac, android) +||34.200.46.148^$all ||abstorick.com^$all ||affienness.com^$all ||ailippiess.co.in^$all @@ -10906,7 +11776,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||urnigarted.com^$all ||wuruclas.co.in^$all ||zondeucearixes.com^$all +!+ PLATFORM(windows, mac, android) 85.17.80.16$network +!+ NOT_PLATFORM(windows, mac, android) +||85.17.80.16^$all ! https://www.adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull ||sitey.me^$document ! https://github.com/AdguardTeam/AdguardFilters/issues/151479 @@ -11047,11 +11920,26 @@ zombooru.com##a[href="http://www.hard55.com"] ||winwin-raffle.com^$all ||your-finance-now.com^$all ||your-survey-services.com^$all +!+ PLATFORM(windows, mac, android) 185.246.188.124$network +!+ NOT_PLATFORM(windows, mac, android) +||185.246.188.124^$all +!+ PLATFORM(windows, mac, android) 185.246.188.125$network +!+ NOT_PLATFORM(windows, mac, android) +||185.246.188.125^$all +!+ PLATFORM(windows, mac, android) 194.63.140.103$network +!+ NOT_PLATFORM(windows, mac, android) +||194.63.140.103^$all +!+ PLATFORM(windows, mac, android) 194.63.143.61$network +!+ NOT_PLATFORM(windows, mac, android) +||194.63.143.61^$all +!+ PLATFORM(windows, mac, android) 194.63.143.96$network +!+ NOT_PLATFORM(windows, mac, android) +||194.63.143.96^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/152945 ||moneystartup.live^$all ||fintechbest.online^$all @@ -11261,9 +12149,18 @@ zombooru.com##a[href="http://www.hard55.com"] ||yourlifestyle-blog.com^$all ||zarta-news.com^$all ||zorka-news.com^$all +!+ PLATFORM(windows, mac, android) 37.48.80.112$network +!+ NOT_PLATFORM(windows, mac, android) +||37.48.80.112^$all +!+ PLATFORM(windows, mac, android) 95.168.170.165$network +!+ NOT_PLATFORM(windows, mac, android) +||95.168.170.165^$all +!+ PLATFORM(windows, mac, android) 213.227.149.216$network +!+ NOT_PLATFORM(windows, mac, android) +||213.227.149.216^$all ! Slack comments ||cojcdn.net^$all ||collecl.cc^$all @@ -11289,8 +12186,14 @@ zombooru.com##a[href="http://www.hard55.com"] ||tapore.net^$all ||totadblock.com^$all ||updateasap.online^$all +!+ PLATFORM(windows, mac, android) 109.206.168.16$network +!+ NOT_PLATFORM(windows, mac, android) +||109.206.168.16^$all +!+ PLATFORM(windows, mac, android) 109.206.168.17$network +!+ NOT_PLATFORM(windows, mac, android) +||109.206.168.17^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/155298 ||cadstoppam.live^$all ||cottodwin.live^$all @@ -11306,7 +12209,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||rodrevtill.live^$all ||showjoinnip.live^$all ||usedhutsold.live^$all +!+ PLATFORM(windows, mac, android) 57.128.71.215$network +!+ NOT_PLATFORM(windows, mac, android) +||57.128.71.215^$all /&[a-z]{1,2}=[a-zA-Z0-9]{0,}%[a-zA-Z0-9%]{1000,}\$/$document ! https://github.com/AdguardTeam/AdguardFilters/issues/155936 ||truanet.com^$all @@ -12043,16 +12949,46 @@ zombooru.com##a[href="http://www.hard55.com"] ||zybnzw.com^$all ||zzebuh.com^$all ||zzrgab.com^$all +!+ PLATFORM(windows, mac, android) 37.1.223.231$network +!+ NOT_PLATFORM(windows, mac, android) +||37.1.223.231^$all +!+ PLATFORM(windows, mac, android) 139.45.197.167$network +!+ NOT_PLATFORM(windows, mac, android) +||139.45.197.167^$all +!+ PLATFORM(windows, mac, android) 139.45.197.245$network +!+ NOT_PLATFORM(windows, mac, android) +||139.45.197.245^$all +!+ PLATFORM(windows, mac, android) 159.223.137.164$network +!+ NOT_PLATFORM(windows, mac, android) +||159.223.137.164^$all +!+ PLATFORM(windows, mac, android) 185.56.234.205$network +!+ NOT_PLATFORM(windows, mac, android) +||185.56.234.205^$all +!+ PLATFORM(windows, mac, android) 192.243.58.97$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.58.97^$all +!+ PLATFORM(windows, mac, android) 192.243.58.98$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.58.98^$all +!+ PLATFORM(windows, mac, android) 192.243.58.123$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.58.123^$all +!+ PLATFORM(windows, mac, android) 192.243.58.124$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.58.124^$all +!+ PLATFORM(windows, mac, android) 192.243.58.125$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.58.125^$all [2a02:b48:207:1::2]$network [2a02:b48:207:1::3]$network [2a02:b48:207:1::6]$network @@ -12431,9 +13367,18 @@ zombooru.com##a[href="http://www.hard55.com"] ||vitalwealth.net^$all ||wellnessfortune.net^$all ||ztomy.com^$all +!+ PLATFORM(windows, mac, android) 5.45.123.44$network +!+ NOT_PLATFORM(windows, mac, android) +||5.45.123.44^$all +!+ PLATFORM(windows, mac, android) 69.16.230.226$network +!+ NOT_PLATFORM(windows, mac, android) +||69.16.230.226^$all +!+ PLATFORM(windows, mac, android) 208.91.196.46$network +!+ NOT_PLATFORM(windows, mac, android) +||208.91.196.46^$all /page/bouncy.php?$all ! https://github.com/AdguardTeam/AdguardFilters/issues/158316 ||abashfireworks.com^$all @@ -17009,7 +17954,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||ptwmbed.com^$all ||ptwmjmp.com^$all ||wmptengate.com^$all +!+ PLATFORM(windows, mac, android) 93.93.51.223$network +!+ NOT_PLATFORM(windows, mac, android) +||93.93.51.223^$all ||livejasmin.com/*&origin=$document ! https://github.com/AdguardTeam/AdguardFilters/issues/161364 ! (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) @@ -17262,7 +18210,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||upste.us^$all ||upstr.us^$all ||reschedule-delivery.ups.com.$document +!+ PLATFORM(windows, mac, android) 103.174.102.240$network +!+ NOT_PLATFORM(windows, mac, android) +||103.174.102.240^$all ! https://github.com/libre-tube/LibreTube/issues/4409 ||libretube.app^$all ||libretube.net^$all @@ -17412,7 +18363,10 @@ zombooru.com##a[href="http://www.hard55.com"] 162.214.80.*$network ! https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 ||monetrizer*.$all +!+ PLATFORM(windows, mac, android) 38.180.96.244$network +!+ NOT_PLATFORM(windows, mac, android) +||38.180.96.244^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/172569 ||acareewityjh.com^$all ||accedenonre.xyz^$all @@ -17749,8 +18703,14 @@ zombooru.com##a[href="http://www.hard55.com"] ||ysearchingfo.xyz^$all ||yticaframeofm.com^$all ||yvaluationiamcur.com^$all +!+ PLATFORM(windows, mac, android) 34.195.224.242$network +!+ NOT_PLATFORM(windows, mac, android) +||34.195.224.242^$all +!+ PLATFORM(windows, mac, android) 54.225.185.110$network +!+ NOT_PLATFORM(windows, mac, android) +||54.225.185.110^$all &lp=not_robot_$all ||githubtalentcommunity.$all ! https://github.com/AdguardTeam/AdguardFilters/issues/173925 @@ -17760,7 +18720,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||regularisierung-konto.com^$all ||dhlexpress-lieferung.net^$all ||pochta-ru.com^$all +!+ PLATFORM(windows, mac, android) 91.202.233.143$network +!+ NOT_PLATFORM(windows, mac, android) +||91.202.233.143^$all ! Based on a tip from my secretary ||0842-3231-4323-4243-2344-1333-0595-3453-6439-7-3235-03928-2348.name^$all ||1-3evlhls3yf.shop^$all @@ -18116,7 +19079,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||speednetworkchain.com^$all ||systemnetworkroute.com^$all ||trafficredirectchain.com^$all +!+ PLATFORM(windows, mac, android) 108.62.157.10$network +!+ NOT_PLATFORM(windows, mac, android) +||108.62.157.10^$all ! https://github.com/AdguardTeam/FiltersRegistry/issues/925 ! https://github.com/AdguardTeam/FiltersRegistry/pull/927 ||avito.avito.avito.$all @@ -18130,16 +19096,46 @@ zombooru.com##a[href="http://www.hard55.com"] ||avito.avito.www.avito.$all ||booking.com-id*$all ! https://github.com/AdguardTeam/AdguardFilters/issues/179170 +!+ PLATFORM(windows, mac, android) 172.240.108.68$network +!+ NOT_PLATFORM(windows, mac, android) +||172.240.108.68^$all +!+ PLATFORM(windows, mac, android) 172.240.108.76$network +!+ NOT_PLATFORM(windows, mac, android) +||172.240.108.76^$all +!+ PLATFORM(windows, mac, android) 172.240.108.84$network +!+ NOT_PLATFORM(windows, mac, android) +||172.240.108.84^$all +!+ PLATFORM(windows, mac, android) 172.240.127.234$network +!+ NOT_PLATFORM(windows, mac, android) +||172.240.127.234^$all +!+ PLATFORM(windows, mac, android) 172.240.253.132$network +!+ NOT_PLATFORM(windows, mac, android) +||172.240.253.132^$all +!+ PLATFORM(windows, mac, android) 192.243.59.12$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.59.12^$all +!+ PLATFORM(windows, mac, android) 192.243.59.13$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.59.13^$all +!+ PLATFORM(windows, mac, android) 192.243.59.20$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.59.20^$all +!+ PLATFORM(windows, mac, android) 192.243.61.225$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.61.225^$all +!+ PLATFORM(windows, mac, android) 192.243.61.227$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.61.227^$all ||0sntp7dnrr.com^$all ||0x01n2ptpuz3.com^$all ||2e8dgn8n0e0l.com^$all @@ -21117,7 +22113,10 @@ zombooru.com##a[href="http://www.hard55.com"] ||yydtbpms8tf4.com^$all ||zipinaccurateoffering.com^$all ! https://github.com/AdguardTeam/AdguardFilters/issues/181966 +!+ PLATFORM(windows, mac, android) 167.71.252.38$network +!+ NOT_PLATFORM(windows, mac, android) +||167.71.252.38^$all ! ——— Standard malware that I stumbled upon on my own ——— ! http://www.toorgle.net/results.php?q=fetishkitsch&security=666 @@ -22752,9 +23751,18 @@ toorgle.net##.join ||zqvee2re50mr.com^$all ||zypy2h6rgfux.com^$all ||zzdb5p4upiug.com^$all +!+ PLATFORM(windows, mac, android) 192.243.59.12$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.59.12^$all +!+ PLATFORM(windows, mac, android) 192.243.59.13$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.59.13^$all +!+ PLATFORM(windows, mac, android) 192.243.59.20$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.59.20^$all !#if !ext_ublock /^(https?://)?192\.243\.59\.\d{1,3}($|/)/$document !#endif @@ -22787,10 +23795,22 @@ toorgle.net##.join ||s-arts.pro^$all ||skinosoda.online^$all ||tradeoffer.com.ru^$all +!+ PLATFORM(windows, mac, android) 194.226.139.121$network +!+ NOT_PLATFORM(windows, mac, android) +||194.226.139.121^$all +!+ PLATFORM(windows, mac, android) 194.226.139.7$network +!+ NOT_PLATFORM(windows, mac, android) +||194.226.139.7^$all +!+ PLATFORM(windows, mac, android) 95.181.157.36$network +!+ NOT_PLATFORM(windows, mac, android) +||95.181.157.36^$all +!+ PLATFORM(windows, mac, android) 95.181.172.204$network +!+ NOT_PLATFORM(windows, mac, android) +||95.181.172.204^$all !#if !ext_ublock 194.226.139.*$network ! AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking) @@ -23400,7 +24420,10 @@ toorgle.net##.join ||farmerdaybreaknote.com^$all ||sidenoteconcern.com^$all ||abnegationbanquet.com^$all +!+ PLATFORM(windows, mac, android) 192.243.61.225$network +!+ NOT_PLATFORM(windows, mac, android) +||192.243.61.225^$all ! https://twitter.com/medicinehelp/status/1550250932394409985 ! https://securitytrails.com/list/ip/147.135.16.27 ||2spendless.$document @@ -23457,7 +24480,10 @@ toorgle.net##.join ||medicinecoupons.space^$document ||medicinecoupons.xyz^$document ||medicinehelp.news^$document +!+ PLATFORM(windows, mac, android) 147.135.16.27$network +!+ NOT_PLATFORM(windows, mac, android) +||147.135.16.27^$all ! https://www.google.no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img ||ingeniovirtual.com^$document ! Spambot posts on Tumblr (19/09/2022) @@ -23472,7 +24498,10 @@ apkfab.com##.tip-extension ||2y68554.cyou^$all ||1pwk1j.cyou^$all ||986.group^$all +!+ PLATFORM(windows, mac, android) 185.87.148.199$network +!+ NOT_PLATFORM(windows, mac, android) +||185.87.148.199^$all ! Google results for 'horse tales: emerald valley ranch mobygames' (05/11/2022) ||imaot.co.il/ContentArea/BannerClick^$all ||q1065.fm/redirect^$all,~inline-font,domain=~malware-redirection-results.* @@ -23484,7 +24513,10 @@ apkfab.com##.tip-extension ||canon70x70.site^$all ||gacorhub.com^$all ||zh1653.com^$all +!+ PLATFORM(windows, mac, android) 45.136.49.35$network +!+ NOT_PLATFORM(windows, mac, android) +||45.136.49.35^$all ||semex.com/popurl.cgi^$all,~inline-font,domain=~malware-redirection-results.* ||pharmanimal.com/catalog/redirect.php^$all,~inline-font,domain=~malware-redirection-results.* ! Browsing around for Tajik newssites @@ -23538,11 +24570,26 @@ apkfab.com##.tip-extension ||fillrumrip.live^$all ||cityratetod.live^$all ||onlymetsure.live^$all +!+ PLATFORM(windows, mac, android) 51.91.211.94$network +!+ NOT_PLATFORM(windows, mac, android) +||51.91.211.94^$all +!+ PLATFORM(windows, mac, android) 162.19.71.16$network +!+ NOT_PLATFORM(windows, mac, android) +||162.19.71.16^$all +!+ PLATFORM(windows, mac, android) 146.59.240.191$network +!+ NOT_PLATFORM(windows, mac, android) +||146.59.240.191^$all +!+ PLATFORM(windows, mac, android) 54.37.5.34$network +!+ NOT_PLATFORM(windows, mac, android) +||54.37.5.34^$all +!+ PLATFORM(windows, mac, android) 54.36.118.105$network +!+ NOT_PLATFORM(windows, mac, android) +||54.36.118.105^$all ! Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt ||highlandnews.com^$all ||genuinescansupport.com^$all @@ -23569,7 +24616,10 @@ apkfab.com##.tip-extension ||multilpleflow.com^$all ||networkprincple.com^$all ||pcnetworkdefense.com^$all +!+ PLATFORM(windows, mac, android) 159.89.10.102$network +!+ NOT_PLATFORM(windows, mac, android) +||159.89.10.102^$all ! Other ||foxsportnetwork.com^$all ||pksauniversity.com^$all @@ -23593,7 +24643,10 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||neracti.com^$all ||nuouther.com^$all ||carpiesi.com^$all +!+ PLATFORM(windows, mac, android) 104.206.252.90$network +!+ NOT_PLATFORM(windows, mac, android) +||104.206.252.90^$all ! https://github.com/blocklistproject/Lists/issues/933 ||jNKmS0zFuEh.click^$all ||pjljo54uk.click^$all @@ -23617,7 +24670,10 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ! https://github.com/RPiList/specials/issues/948#issuecomment-1458739160 ||yuppdownload.com^$all ! Commonly set as a proxy on hacked devices (https://www.virustotal.com/gui/url/e610e7d09c614529cb8c64185717769946f5c86044ac5c31c6608e604995f577/detection) +!+ PLATFORM(windows, mac, android) 34.80.59.191$network +!+ NOT_PLATFORM(windows, mac, android) +||34.80.59.191^$all ! Various domains on https://securitytrails.com/list/ip/72.14.178.174 |http://www6.$document,domain=~often-used-in-malware-redirections.* |http://www1.*&kw$document,domain=~often-used-in-malware-redirections.* @@ -23625,18 +24681,54 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||zombooru.com^$all ||kusubooru.com^$all ||wh40kart.im^$all +!+ PLATFORM(windows, mac, android) 45.33.2.79$network +!+ NOT_PLATFORM(windows, mac, android) +||45.33.2.79^$all +!+ PLATFORM(windows, mac, android) 45.33.18.44$network +!+ NOT_PLATFORM(windows, mac, android) +||45.33.18.44^$all +!+ PLATFORM(windows, mac, android) 45.33.20.235$network +!+ NOT_PLATFORM(windows, mac, android) +||45.33.20.235^$all +!+ PLATFORM(windows, mac, android) 45.33.23.183$network +!+ NOT_PLATFORM(windows, mac, android) +||45.33.23.183^$all +!+ PLATFORM(windows, mac, android) 45.33.30.197$network +!+ NOT_PLATFORM(windows, mac, android) +||45.33.30.197^$all +!+ PLATFORM(windows, mac, android) 45.56.79.23$network +!+ NOT_PLATFORM(windows, mac, android) +||45.56.79.23^$all +!+ PLATFORM(windows, mac, android) 45.79.19.196$network +!+ NOT_PLATFORM(windows, mac, android) +||45.79.19.196^$all +!+ PLATFORM(windows, mac, android) 72.14.178.174$network +!+ NOT_PLATFORM(windows, mac, android) +||72.14.178.174^$all +!+ PLATFORM(windows, mac, android) 72.14.185.43$network +!+ NOT_PLATFORM(windows, mac, android) +||72.14.185.43^$all +!+ PLATFORM(windows, mac, android) 96.126.123.244$network +!+ NOT_PLATFORM(windows, mac, android) +||96.126.123.244^$all +!+ PLATFORM(windows, mac, android) 173.255.194.134$network +!+ NOT_PLATFORM(windows, mac, android) +||173.255.194.134^$all +!+ PLATFORM(windows, mac, android) 198.58.118.167$network +!+ NOT_PLATFORM(windows, mac, android) +||198.58.118.167^$all ! https://hutudole.com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/ ||123chance.net^$all ||123links4u.net^$all @@ -24014,12 +25106,30 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||youwanthis.com^$all ||zebramode.com^$all ||zebraoffers.net^$all +!+ PLATFORM(windows, mac, android) 34.117.199.78$network +!+ NOT_PLATFORM(windows, mac, android) +||34.117.199.78^$all +!+ PLATFORM(windows, mac, android) 94.237.103.119$network +!+ NOT_PLATFORM(windows, mac, android) +||94.237.103.119^$all +!+ PLATFORM(windows, mac, android) 94.237.84.54$network +!+ NOT_PLATFORM(windows, mac, android) +||94.237.84.54^$all +!+ PLATFORM(windows, mac, android) 94.237.93.242$network +!+ NOT_PLATFORM(windows, mac, android) +||94.237.93.242^$all +!+ PLATFORM(windows, mac, android) 94.237.99.118$network +!+ NOT_PLATFORM(windows, mac, android) +||94.237.99.118^$all +!+ PLATFORM(windows, mac, android) 139.45.197.249$network +!+ NOT_PLATFORM(windows, mac, android) +||139.45.197.249^$all ! https://dnpedia.com/tlds/topm.php bizarrely listing "anahitagirted.uno" as the 622th most visited domain worldwide ||acorusinfield.life^$all ||acridlydebit.live^$all @@ -24419,13 +25529,34 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] *norgestores.com^$document *skobutikks.com^$document *butikksoslo.com^$document +!+ PLATFORM(windows, mac, android) 196.196.153.151$network +!+ NOT_PLATFORM(windows, mac, android) +||196.196.153.151^$all +!+ PLATFORM(windows, mac, android) 158.222.7.116$network +!+ NOT_PLATFORM(windows, mac, android) +||158.222.7.116^$all +!+ PLATFORM(windows, mac, android) 196.245.152.139$network +!+ NOT_PLATFORM(windows, mac, android) +||196.245.152.139^$all +!+ PLATFORM(windows, mac, android) 165.231.251.197$network +!+ NOT_PLATFORM(windows, mac, android) +||165.231.251.197^$all +!+ PLATFORM(windows, mac, android) 196.242.16.29$network +!+ NOT_PLATFORM(windows, mac, android) +||196.242.16.29^$all +!+ PLATFORM(windows, mac, android) 165.231.4.90$network +!+ NOT_PLATFORM(windows, mac, android) +||165.231.4.90^$all +!+ PLATFORM(windows, mac, android) 158.222.7.83$network +!+ NOT_PLATFORM(windows, mac, android) +||158.222.7.83^$all ! Spam on W.I.T.C.H. and Winx text search results tumblr.com#?#div[tabindex][style]:has(a[href*="tinyurl."]:has-text(_1+8_)) tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) @@ -24489,7 +25620,10 @@ tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) ||your-track-ups.net^$all ||your-ups-track.com^$all ||zoll-pakete-support.com^$all +!+ PLATFORM(windows, mac, android) 95.214.26.78$network +!+ NOT_PLATFORM(windows, mac, android) +||95.214.26.78^$all ! Overly dedicated E-mail spammers ||wirexapp.africa.com^$all ||tachyoniums.eu.com^$all @@ -24499,8 +25633,14 @@ tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) tumblr.com#?#:is(.post,div[data-cell-id][style]:not([data-cell-id*=carousel]),div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has-text( click & chat me ):has-text(🔞) tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has(a[rel=author]:has-text(/^[a-z]{2,6}-[a-z]{2,8}\d{2}$/i)):has-text(/^.*(18|sex|squirt|bo{2}ty).*$/i) ||deltacorriher.best^$all +!+ PLATFORM(windows, mac, android) 104.21.82.132$network +!+ NOT_PLATFORM(windows, mac, android) +||104.21.82.132^$all +!+ PLATFORM(windows, mac, android) 172.67.158.57$network +!+ NOT_PLATFORM(windows, mac, android) +||172.67.158.57^$all [2606:4700:3030::6815:5284]$network [2606:4700:3037::ac43:9e39]$network ! Google results for «SodaStream site:no cranberry» @@ -24526,12 +25666,21 @@ tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[dat ||seedlogoonce.info^$all ||sirdayscare.info^$all ||slownansuch.info^$all +!+ PLATFORM(windows, mac, android) 185.155.184.57$network +!+ NOT_PLATFORM(windows, mac, android) +||185.155.184.57^$all +!+ PLATFORM(windows, mac, android) 185.155.186.24$network +!+ NOT_PLATFORM(windows, mac, android) +||185.155.186.24^$all ||usayn.fr^$all ||style-js.com^$all /a.aspx?cid=*&cname=^$all +!+ PLATFORM(windows, mac, android) 209.74.107.131$network +!+ NOT_PLATFORM(windows, mac, android) +||209.74.107.131^$all ||qidjrsgroup.shop^$all /flying.asp?cid=$all /kjyo.php?cname=$all @@ -24604,8 +25753,14 @@ tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[dat ||wsdcq7wayud.com^$all ||xgptw11vogsh.com^$all ||zeirj14ikqwf.com^$all +!+ PLATFORM(windows, mac, android) 69.172.200.185$network +!+ NOT_PLATFORM(windows, mac, android) +||69.172.200.185^$all +!+ PLATFORM(windows, mac, android) 77.220.214.153$network +!+ NOT_PLATFORM(windows, mac, android) +||77.220.214.153^$all ! More search terms than what can be counted with a supercomputer (11/03/2024) google.*##.isv-r:has-text(/, [1-9][1-46-9]% OF{2}/) @@ -25053,7 +26208,10 @@ www.microsoft.com##a[data-pfns][href*=pac-men] ! (Presumably anonymous) E-mail tips ||s.free.fr^$all ||trmff.wpengine.com^$all +!+ PLATFORM(windows, mac, android) 212.27.60.108$network +!+ NOT_PLATFORM(windows, mac, android) +||212.27.60.108^$all !#if !adguard diff --git a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset index 173992de1..1a1252db0 100644 --- a/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset +++ b/Alternate versions Anti-Malware List/Dandelion Sprout's and other adblocker lists' IPs.ipset @@ -342,6 +342,7 @@ 192.243.59.20 192.243.61.225 192.243.61.227 +167.71.252.38 192.243.59.12 192.243.59.13 192.243.59.20