From e549334eccf2326ece6bc773c1ae0ab02d9dcbf5 Mon Sep 17 00:00:00 2001 From: Imre Eilertsen Date: Sun, 4 Oct 2026 07:05:39 +0200 Subject: [PATCH] Update Dandelion Sprout's Anti-Malware List.txt --- Dandelion Sprout's Anti-Malware List.txt | 225 ++--------------------- 1 file changed, 11 insertions(+), 214 deletions(-) diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index cc59dc8f6..cbb982f66 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,6 +1,6 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 23September2026v1 +! Version: 04October2026v1 ! Expires: 1 day ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks domains and domain patterns used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! Note: When asking us to whitelist a site: Make sure the site has some sort of public content. Non-public sites and alias sites are usually not whitelisted. @@ -439,7 +439,6 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||githubuser.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com ||rgithub.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com ||githubt.com^$doc,domain=~you-were-likely-looking-for-githubusercontent.com -!#if env_firefox $all,ipaddress=173.208.96.42 $all,ipaddress=173.208.96.43 $all,ipaddress=173.208.96.44 @@ -448,8 +447,6 @@ $all,ipaddress=173.208.96.46 $all,ipaddress=199.59.243.222 $all,ipaddress=213.227.149.208 $all,ipaddress=213.227.149.211 -!#endif -!#if !env_firefox ||173.208.96.42^$all ||173.208.96.43^$all ||173.208.96.44^$all @@ -458,13 +455,17 @@ $all,ipaddress=213.227.149.211 ||199.59.243.222^$doc ||213.227.149.208^$all ||213.227.149.211^$all -!#endif +||redddit.com^$all +||redit.com^$all +||reditt.com^$all +||reddtt.com^$all +||reddtit.com^$all +||mirappe.com^$all ! ——— Frequently or previously frequently used to infiltrate and maliciously redirect sites ——— ||ortrun-adi.com^$all ||paramonos-oha.com^$all ||roamingclicks.com^$all -!#if env_firefox $all,ipaddress=144.76.0.242 $all,ipaddress=144.76.1.130 $all,ipaddress=195.201.92.254 @@ -478,8 +479,6 @@ $all,ipaddress=54.209.22.226 $all,ipaddress=54.91.125.197 $all,ipaddress=94.130.185.237 $all,ipaddress=94.130.186.231 -!#endif -!#if !env_firefox ://35.168.147.213^$doc ://35.175.38.64^$doc ||144.76.0.242^$doc @@ -493,7 +492,6 @@ $all,ipaddress=94.130.186.231 ||54.91.125.197^$doc ||94.130.185.237^$doc ||94.130.186.231^$doc -!#endif ! Source: desidertNO ||collectfasttracks.com^$all,domain=~malware_redirection_trains.* ! Various ex-affiliate links at www•zombooru•com @@ -539,7 +537,6 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||elfpetsic.com^$all ||postback.report^$all ||roksit.net^$all -!#if env_firefox $all,ipaddress=/^142\.91\.159\.[12]?\d?\d$/ $all,ipaddress=/^23\.109\.150\.[12]?\d?\d$/ $all,ipaddress=/^23\.109\.248\.[12]?\d?\d$/ @@ -566,8 +563,6 @@ $all,ipaddress=54.205.83.61 $all,ipaddress=54.210.193.115 $all,ipaddress=54.85.113.62 $all,ipaddress=2600:1f18:43d1:2a04:ee05:261e:d408:7ba1 -!#endif -!#if !env_firefox ||172.255.6.107^$all ||172.255.6.147^$all ||172.255.6.219^$all @@ -591,7 +586,6 @@ $all,ipaddress=2600:1f18:43d1:2a04:ee05:261e:d408:7ba1 ||54.210.193.115^$doc ||54.85.113.62^$doc ||[2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]^$doc -!#endif ! https://github.com/DandelionSprout/adfilt/issues/942 $all,ipaddress=/^172\.255\.6\.(\d\d?|(17?|2)[0-689]\d)$/ ||abedwithdrawalautograph.com^$all @@ -906,30 +900,22 @@ $all,ipaddress=/^192\.243\.61\.[12]?\d?\d$/ ||theonlygames.com^$all ||uptodater.net^$all ||whiteclick.biz^$all -!#if env_firefox $all,ipaddress=134.209.136.174 $all,ipaddress=178.128.142.109 $all,ipaddress=62.210.11.203 $all,ipaddress=62.210.6.153 $all,ipaddress=62.210.7.209 $all,ipaddress=62.210.9.92 -!#endif -!#if !env_firefox ||134.209.136.174^$doc ||178.128.142.109^$doc ||62.210.11.203^$doc ||62.210.6.153^$doc ||62.210.7.209^$doc ||62.210.9.92^$doc -!#endif ! https://maldita•es/malditobulo/2020/12/04/concurso-mercadona-ganar-tarjeta-regalo-100-euros-phishing/ ||new-message.email^$doc -!#if env_firefox $all,ipaddress=167.99.249.47 -!#endif -!#if !env_firefox ||167.99.249.47^$doc -!#endif ! https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/ ! https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/ ! https://maldita•es/malditobulo/2020/11/18/gobierno-tarjeta-debito-prepagada-covid-19-phishing-whatsapp/ @@ -955,19 +941,14 @@ $all,ipaddress=167.99.249.47 ||fwdservice.com^$all ||kmip.net^$all ||iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com^$all -!#if env_firefox $doc,ipaddress=5.8.34.26 $doc,ipaddress=5.8.47.3 $doc,ipaddress=103.224.182.251 -!#endif -!#if !env_firefox ||5.8.34.26^$doc ||5.8.47.3^$doc ||103.224.182.251^$doc -!#endif ! https://github.com/DandelionSprout/adfilt/issues/193 ||holescontracting.com^$all -!#if env_firefox $all,ipaddress=178.162.203.202 $all,ipaddress=178.162.203.211 $all,ipaddress=178.162.203.226 @@ -977,8 +958,6 @@ $all,ipaddress=5.79.71.225 $all,ipaddress=85.17.31.122 $all,ipaddress=85.17.31.82 $all,ipaddress=2a02:1668:1034::2 -!#endif -!#if !env_firefox ||178.162.203.202^$doc ||178.162.203.211^$doc ||178.162.203.226^$doc @@ -988,24 +967,19 @@ $all,ipaddress=2a02:1668:1034::2 ||85.17.31.122^$doc ||85.17.31.82^$doc ||[2a02:1668:1034::2]^$doc -!#endif ! https://github.com/DandelionSprout/adfilt/issues/195 ||logicalrecord.com^$all ! https://github.com/DandelionSprout/adfilt/issues/196 ||secureportal.online^$all ||emiratenbduae.com^$all -!#if env_firefox $doc,ipaddress=108.170.31.123 $doc,ipaddress=108.170.52.156 $doc,ipaddress=66.85.156.85 $doc,ipaddress=66.85.156.86 -!#endif -!#if !env_firefox ||108.170.31.123^$doc ||108.170.52.156^$doc ||66.85.156.85^$doc ||66.85.156.86^$doc -!#endif ! https://github.com/DandelionSprout/adfilt/issues/198 ! https://www•bleepingcomputer•com/virus-removal/ (18/06/2021) ||toksearches.xyz^$all @@ -1050,16 +1024,12 @@ $doc,ipaddress=66.85.156.86 ||video-call.live^$all ||video-change.digital^$all ||watch-this.live^$all -!#if env_firefox $all,ipaddress=213.227.145.147 $all,ipaddress=213.227.149.216 $all,ipaddress=95.168.170.165 -!#endif -!#if !env_firefox ||213.227.145.147^$doc ||213.227.149.216^$doc ||95.168.170.165^$doc -!#endif ! https://twitter•com/adamziaja/status/1252234957679808513 ||wow-robotics.xyz^$all ! https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html @@ -1109,18 +1079,14 @@ $doc,ipaddress=23.111.88.207 ! https://github.com/DandelionSprout/adfilt/issues/254 ||onesafesoftware.com^$doc ! https://github.com/DandelionSprout/adfilt/issues/257 -!#if env_firefox $all,ipaddress=185.158.250.239 $all,ipaddress=192.169.69.25 $all,ipaddress=212.192.241.72 $all,ipaddress=37.0.10.83 -!#endif -!#if !env_firefox ||185.158.250.239^$all ||192.169.69.25^$all ||212.192.241.72^$all ||37.0.10.83^$all -!#endif ||secure-0*.ddnss.ch^$all ||lucdream.com^$doc ||pesoaniz.com^$doc @@ -1194,7 +1160,6 @@ $all,ipaddress=103.169.90.205 ||103.169.90.205^$all ! https://github.com/DandelionSprout/adfilt/pull/281 ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community -!#if env_firefox $all,ipaddress=125.44.43.45 $all,ipaddress=182.121.8.240 $all,ipaddress=42.235.183.74 @@ -1205,8 +1170,6 @@ $all,ipaddress=119.179.84.145 $all,ipaddress=188.120.50.98 $all,ipaddress=190.238.183.5 $all,ipaddress=27.220.253.78 -!#endif -!#if !env_firefox ||125.44.43.45^$all ||182.121.8.240^$all ||42.235.183.74^$all @@ -1217,7 +1180,6 @@ $all,ipaddress=27.220.253.78 ||188.120.50.98^$all ||190.238.183.5^$all ||27.220.253.78^$all -!#endif ! https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community ! https://www•joesandbox•com/analysis/486636/0/html#domains ||aieov.com^$all @@ -1268,7 +1230,6 @@ $all,ipaddress=205.185.126.200 $all,ipaddress=185.243.56.167 ||185.243.56.167^$all ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community -!#if env_firefox $all,ipaddress=1.0.218.230 $all,ipaddress=27.194.115.185 $all,ipaddress=27.222.220.164 @@ -1316,8 +1277,6 @@ $all,ipaddress=202.12.80.74 $all,ipaddress=219.155.105.98 $all,ipaddress=219.155.26.50 $all,ipaddress=221.208.4.56 -!#endif -!#if !env_firefox ://104.128.199.228^$all ||27.194.115.185^$all ||27.222.220.164^$all @@ -1365,22 +1324,17 @@ $all,ipaddress=221.208.4.56 ||219.155.105.98^$all ||219.155.26.50^$all ||221.208.4.56^$all -!#endif ! https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community ||pcae.de^$doc ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community -!#if env_firefox $all,ipaddress=117.196.49.21 $all,ipaddress=115.55.54.234 $all,ipaddress=115.52.17.123 $all,ipaddress=182.59.69.21 -!#endif -!#if !env_firefox ||117.196.49.21^$all ||115.55.54.234^$all ||115.52.17.123^$all ||182.59.69.21^$all -!#endif ! https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community ||chip-secured-download.de^$all ! https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb @@ -1468,7 +1422,6 @@ $all,ipaddress=159.148.186.228 ||mediadlvr.com^$all ! https://github.com/DandelionSprout/adfilt/pull/348 ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community -!#if env_firefox $all,ipaddress=103.233.216.77 $all,ipaddress=106.86.172.194 $all,ipaddress=110.167.64.171 @@ -1500,8 +1453,6 @@ $all,ipaddress=45.224.171.130 $all,ipaddress=45.5.209.75 $all,ipaddress=61.52.99.109 $all,ipaddress=68.197.33.124 -!#endif -!#if !env_firefox ||103.233.216.77^$all ||106.86.172.194^$all ||110.167.64.171^$all @@ -1533,7 +1484,6 @@ $all,ipaddress=68.197.33.124 ||45.5.209.75^$all ||61.52.99.109^$all ||68.197.33.124^$all -!#endif ! https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community $all,ipaddress=198.23.255.14 ||198.23.255.14^$all @@ -1547,18 +1497,14 @@ $all,ipaddress=91.121.67.60 ! https://scammer•info/t/mcafee-phish/83725 ||securefirst.us-east-1.linodeobjects.com^$all ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community -!#if env_firefox $all,ipaddress=39.65.72.211 $all,ipaddress=42.238.151.197 $all,ipaddress=27.213.60.53 $all,ipaddress=115.56.169.134 -!#endif -!#if !env_firefox ||39.65.72.211^$all ||42.238.151.197^$all ||27.213.60.53^$all ||115.56.169.134^$all -!#endif ! https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md ||yasir252.com^$all ||safelink.kadal.club^$doc @@ -1594,7 +1540,6 @@ $all,ipaddress=103.167.92.73 ! https://github.com/uBlockOrigin/uAssets/pull/10599 ! https://github.com/uBlockOrigin/uAssets/pull/10620 ! https://www•virustotal•com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community -!#if env_firefox $all,ipaddress=58.249.74.79 $all,ipaddress=27.45.14.109 $all,ipaddress=27.40.101.191 @@ -1603,8 +1548,6 @@ $all,ipaddress=27.47.73.159 $all,ipaddress=115.204.119.237 $all,ipaddress=163.125.31.46 $all,ipaddress=163.179.168.44 -!#endif -!#if !env_firefox ||58.249.74.79^$all ||27.45.14.109^$all ||27.40.101.191^$all @@ -1613,7 +1556,6 @@ $all,ipaddress=163.179.168.44 ||115.204.119.237^$all ||163.125.31.46^$all ||163.179.168.44^$all -!#endif ! https://github.com/uBlockOrigin/uAssets/pull/10647 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md ||money-mod.com^$doc @@ -1626,7 +1568,6 @@ $all,ipaddress=163.179.168.44 ||mediafire.com/file/at2tvnao5x6ivdo/EngineOwning.rar/$all ||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$all ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community -!#if env_firefox $all,ipaddress=110.89.59.135 $all,ipaddress=113.116.89.1 $all,ipaddress=119.183.146.191 @@ -1638,8 +1579,6 @@ $all,ipaddress=110.89.11.167 $all,ipaddress=171.112.177.90 $all,ipaddress=115.194.38.143 $all,ipaddress=61.52.79.32 -!#endif -!#if !env_firefox ||110.89.59.135^$all ||113.116.89.1^$all ||119.183.146.191^$all @@ -1651,7 +1590,6 @@ $all,ipaddress=61.52.79.32 ||171.112.177.90^$all ||115.194.38.143^$all ||61.52.79.32^$all -!#endif ! https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 ://ups-dk.$doc,denyallow=dk|nu|se|no|fo|gl|ups.com,domain=ups-dk.* ! https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 @@ -1693,7 +1631,6 @@ $all,ipaddress=34.201.22.10 ! https://scammer•info/t/crypto-scammers-onceagain/85354 ||business.google.com/website/billyandscapedesign^$all ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community -!#if env_firefox $all,ipaddress=123.10.225.196 $all,ipaddress=122.192.106.84 $all,ipaddress=172.88.199.9 @@ -1702,8 +1639,6 @@ $all,ipaddress=61.52.97.35 $all,ipaddress=27.206.181.208 $all,ipaddress=124.163.130.175 $all,ipaddress=118.75.87.102 -!#endif -!#if !env_firefox ||123.10.225.196^$all ||122.192.106.84^$all ||172.88.199.9^$all @@ -1712,7 +1647,6 @@ $all,ipaddress=118.75.87.102 ||27.206.181.208^$all ||124.163.130.175^$all ||118.75.87.102^$all -!#endif ! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md ! https://github.com/DevSpen/links/pull/3 ! https://bazaar•abuse•ch/sample/357226dff2f3309f8271b5a7c2cc816aa8fb779275357dce9b98b30357951210/ @@ -1787,30 +1721,24 @@ $doc,ipaddress=195.201.253.131 ||installiq.com^$all /trk2/*?lddomain=$doc,domain=~very_likely_a_malware_redirection.* ||cpmverdirect.com^$doc,domain=~malware_redirection_trains.* -!#if env_firefox $doc,ipaddress=15.197.244.48 $doc,ipaddress=96.47.230.67 $doc,ipaddress=96.47.230.68 $doc,ipaddress=96.47.230.69 $doc,ipaddress=96.47.230.70 -!#endif -!#if !env_firefox ||15.197.244.48^$doc ||96.47.230.67^$doc ||96.47.230.68^$doc ||96.47.230.69^$doc ||96.47.230.70^$doc -!#endif ! https://securitytrails•com/list/ns/ns1•fastthinkingdns•com ||highercaptcha-settle.$all ||highercaptchasettle.$all ||ns*.fastthinkingdns.com^$all ||top-captcharesolver.$all -!#if env_firefox $all,ipaddress=/^46\.161\.27\.[12]?\d?\d$/ $all,ipaddress=/^78\.128\.112\.[12]?\d?\d$/ $all,ipaddress=/^179\.60\.146\.[12]?\d?\d$/ -!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/121544 ||com/landers/iphone*_spin$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/121772 @@ -1932,7 +1860,6 @@ $doc,ipaddress=31.220.27.134 ||xparibet*.com^$all ||yourbonus.online^$all ||z-prize.icu^$all -!#if env_firefox $all,ipaddress=/^178\.253\.[0-7]\.[12]?\d?\d$/ $all,ipaddress=/^178\.253\.14\.[12]?\d?\d$/ $all,ipaddress=/^178\.253\.15\.[12]?\d?\d$/ @@ -1943,7 +1870,6 @@ $all,ipaddress=/^178\.253\.47\.[12]?\d?\d$/ $all,ipaddress=/^178\.253\.54\.[12]?\d?\d$/ $all,ipaddress=85.17.31.152 $all,ipaddress=95.211.26.202 -!#endif ||85.17.31.152^$all ||95.211.26.202^$all ! https://kommunikasjon•ntb•no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 @@ -1975,16 +1901,12 @@ $doc,ipaddress=139.45.197.236 ||tutatagliente.com^$doc,popup ||potestainsula.com^$doc,popup ||motherpipe.net^$doc -!#if env_firefox $doc,ipaddress=51.91.66.125 $doc,ipaddress=51.178.76.105 $doc,ipaddress=147.135.253.55 -!#endif -!#if !env_firefox ||51.91.66.125^$doc ||51.178.76.105^$doc ||147.135.253.55^$doc -!#endif ! https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade) ! https://github.com/AdguardTeam/AdguardFilters/issues/129414 !+ NOT_OPTIMIZED @@ -3309,16 +3231,12 @@ $all,ipaddress=139.45.197.239 ||siiwafami.xyz^$all ||umexesong.xyz^$all ||uxobx.xyz^$all -!#if env_firefox $doc,ipaddress=44.228.230.225 $doc,ipaddress=50.112.124.170 $doc,ipaddress=100.20.104.229 -!#endif -!#if !env_firefox ||44.228.230.225^$doc ||50.112.124.170^$doc ||100.20.104.229^$doc -!#endif ! Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread ||link.sv^$doc,popup ||4.fo^$doc,popup @@ -3328,18 +3246,14 @@ $doc,ipaddress=100.20.104.229 ||gsecurecontent.com^$all ||pressizer.net^$all ||sapino.net^$all -!#if env_firefox $doc,ipaddress=44.236.213.34 $doc,ipaddress=52.24.156.12 $doc,ipaddress=52.25.6.134 $doc,ipaddress=100.20.13.49 -!#endif -!#if !env_firefox ||44.236.213.34^$doc ||52.24.156.12^$doc ||52.25.6.134^$doc ||100.20.13.49^$doc -!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/139667 $all,ipaddress=51.68.87.229 ||51.68.87.229^$all @@ -3572,7 +3486,6 @@ $all,ipaddress=/^165\.231\.154\.[12]?\d?\d$/ ||nanavypredaj.sk^$all ||salononfranceonline.com^$all ||zapatillasmcqueen.com^$all -!#if env_firefox $all,ipaddress=/^165\.231\.10\.[12]?\d?\d$/ $all,ipaddress=/^165\.231\.152\.[12]?\d?\d$/ $all,ipaddress=/^196\.196\.52\.[12]?\d?\d$/ @@ -3581,7 +3494,6 @@ $all,ipaddress=/^196\.240\.121\.[12]?\d?\d$/ $all,ipaddress=/^196\.242\.179\.[12]?\d?\d$/ $all,ipaddress=/^196\.245\.52\.[12]?\d?\d$/ $all,ipaddress=/^196\.245\.56\.[12]?\d?\d$/ -!#endif ! https://www•bleepingcomputer•com/news/security/hackers-push-malware-via-google-search-ads-for-vlc-7-zip-ccleaner/ ://rufus.download.$doc,popup ://virtualbox.download.$doc,popup @@ -3593,16 +3505,12 @@ $all,ipaddress=/^196\.245\.56\.[12]?\d?\d$/ ||blender3d-software.$all ||blender3ds-download.$all ||webull-download.$all -!#if env_firefox $doc,ipaddress=185.106.94.139 $doc,ipaddress=45.90.109.196 $all,ipaddress=91.229.23.200 -!#endif -!#if !env_firefox ||185.106.94.139^$doc ||45.90.109.196^$doc ||91.229.23.200^$all -!#endif ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872 ! https://github.com/AdguardTeam/AdguardFilters/issues/144514 ||bonusgift.life^$all @@ -3651,16 +3559,12 @@ $all,ipaddress=/^139\.45\.197\.[12]?\d?\d$/ ||wholegrady.com^$all ||wooden-comfort.com^$all ! Unsuited for wildcarding -!#if env_firefox $all,ipaddress=208.88.225.116 $all,ipaddress=208.88.225.117 $all,ipaddress=208.88.225.119 -!#endif -!#if !env_firefox ||208.88.225.116^$all ||208.88.225.117^$all ||208.88.225.119^$all -!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/144823 !+ NOT_OPTIMIZED ://landings.*_slots/?partner=$doc @@ -3692,20 +3596,16 @@ $all,ipaddress=54.237.193.255 ||kristinee.com^$all ||lakeside-fishandchips.com^$all ||office-view.com^$all -!#if env_firefox $all,ipaddress=108.61.242.65 $all,ipaddress=146.70.78.43 $all,ipaddress=87.120.254.39 $all,ipaddress=45.150.108.213 $all,ipaddress=92.204.160.240 -!#endif -!#if !env_firefox ||108.61.242.65^$all ||146.70.78.43^$all ||87.120.254.39^$all ||45.150.108.213^$all ||92.204.160.240^$all -!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/148560 /land/*&afftrack=$doc,domain=~likely_a_malware_redirection.* ! Comments on Slack @@ -3918,20 +3818,16 @@ $all,ipaddress=85.17.80.16 ||your-free-vpn.com^$all ||your-phone-keeper.com^$all ||zirze151uk5d.com^$all -!#if env_firefox $all,ipaddress=185.246.188.124 $all,ipaddress=185.246.188.125 $all,ipaddress=194.63.140.103 $all,ipaddress=194.63.143.61 $all,ipaddress=194.63.143.96 -!#endif -!#if !env_firefox ||185.246.188.124^$all ||185.246.188.125^$all ||194.63.140.103^$all ||194.63.143.61^$all ||194.63.143.96^$all -!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/152945 &trafficsource=Kadam&$doc $all,ipaddress=/^5\.61\.60\.[12]?\d?\d$/ @@ -4036,14 +3932,11 @@ $all,ipaddress=/^103\.224\.182\.[12]?\d?\d$/ ||ybcgju.com^$all ||ybrmvy.com^$all ||zuhrzf.com^$all -!#if env_firefox $all,ipaddress=139.45.197.167 $all,ipaddress=139.45.197.245 $all,ipaddress=159.223.137.164 $all,ipaddress=185.56.234.205 $all,ipaddress=37.1.223.231 -!#endif -!#if !env_firefox ||139.45.197.167^$all ||139.45.197.245^$all ||159.223.137.164^$all @@ -4054,20 +3947,17 @@ $all,ipaddress=37.1.223.231 ||192.243.58.123^$all ||192.243.58.124^$all ||192.243.58.125^$all -!#endif ||[2a02:b48:207:1::2]^$all ||[2a02:b48:207:1::3]^$all ||[2a02:b48:207:1::6]^$all ||[2a02:b48:207:1::7]^$all ||[2a02:b48:207:1::8]^$all -!#if env_firefox $all,ipaddress=2a02:b48:207:1::2 $all,ipaddress=2a02:b48:207:1::3 $all,ipaddress=2a02:b48:207:1::6 $all,ipaddress=2a02:b48:207:1::7 $all,ipaddress=2a02:b48:207:1::8 $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ -!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/157308 ||dest.co.in^$all ||dkeie.co.in^$all @@ -4238,16 +4128,12 @@ $all,ipaddress=/^192\.243\.58\.[12]?\d?\d$/ ||vitalityfortune.com^$all ||wellnessfortune.net^$all ||ztomy.com^$all -!#if env_firefox $all,ipaddress=5.45.123.44 $all,ipaddress=69.16.230.226 $all,ipaddress=208.91.196.46 -!#endif -!#if !env_firefox ||5.45.123.44^$all ||69.16.230.226^$all ||208.91.196.46^$all -!#endif /page/bouncy.php?$all ! https://github.com/AdguardTeam/AdguardFilters/issues/158316 ||abberantbeefy.com^$all @@ -4801,7 +4687,6 @@ $all,ipaddress=108.62.157.10 ||avito.avito.www.avito.$all ||booking.com-id*$all ! https://github.com/AdguardTeam/AdguardFilters/issues/179170 -!#if env_firefox $all,ipaddress=172.240.108.68 $all,ipaddress=172.240.108.76 $all,ipaddress=172.240.108.84 @@ -4812,8 +4697,6 @@ $all,ipaddress=192.243.59.13 $all,ipaddress=192.243.59.20 $all,ipaddress=192.243.61.225 $all,ipaddress=192.243.61.227 -!#endif -!#if !env_firefox ||172.240.108.68^$all ||172.240.108.76^$all ||172.240.108.84^$all @@ -4824,7 +4707,6 @@ $all,ipaddress=192.243.61.227 ||192.243.59.20^$all ||192.243.61.225^$all ||192.243.61.227^$all -!#endif ||abjectpreludeparity.com^$all ||ablecheap.com^$all ||abroadwas.com^$all @@ -5465,17 +5347,13 @@ $all,ipaddress=167.71.252.38 ||workyourtech.com^$all ||wpinstant.com^$all ||zymstr.com^$all -!#if env_firefox $all,ipaddress=185.149.120.161 $all,ipaddress=185.149.120.163 $all,ipaddress=185.149.120.173 $all,ipaddress=185.149.120.175 -!#endif -!#if !env_firefox ||185.149.120.161^$all ||185.149.120.163^$all ||185.149.120.175^$all -!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/184671 ||astrarestaurant.com^$all ||bamasolutions.com^$all @@ -5517,7 +5395,6 @@ $all,ipaddress=185.149.120.175 ||upsbezahlung.com^$all ||vius-inf.com^$all ||vrsecurego.com^$all -!#if env_firefox $all,ipaddress=45.202.32.3 $all,ipaddress=45.8.92.138 $all,ipaddress=79.133.46.252 @@ -5536,8 +5413,6 @@ $all,ipaddress=193.143.1.45 $all,ipaddress=193.143.1.214 $all,ipaddress=193.143.1.217 $all,ipaddress=208.91.189.203 -!#endif -!#if !env_firefox ||45.202.32.3^$all ||45.8.92.138^$all ||79.133.46.252^$all @@ -5556,7 +5431,6 @@ $all,ipaddress=208.91.189.203 ||193.143.1.214^$all ||193.143.1.217^$all ||208.91.189.203^$all -!#endif !#if !ext_ublock ://193.143.1.*$doc !#endif @@ -9874,7 +9748,6 @@ $all,ipaddress=185.196.9.222 ||xynro.com^$all ||yourbestonlinefriend.vip^$all ||yoursweetflirt.online^$all -!#if !env_firefox ||3.220.51.12^$all ||44.223.210.42^$all ||52.9.43.57^$all @@ -9886,8 +9759,6 @@ $all,ipaddress=185.196.9.222 ||[2600:1f18:43d1:2a02:c3bd:35f3:da0a:4041]^$all ||[2600:1f18:43d1:2a02:c6f9:e151:e2e1:732d]^$all ||[2600:1f1c:57F:b502:dd8:9588:11e6:282]^$all -!#endif -!#if env_firefox $all,ipaddress=3.220.51.12 $all,ipaddress=44.223.210.42 $all,ipaddress=52.9.43.57 @@ -9899,7 +9770,6 @@ $all,ipaddress=2600:1f18:43d1:2a02:b6ee:327b:545e:e578 $all,ipaddress=2600:1f18:43d1:2a02:c3bd:35f3:da0a:4041 $all,ipaddress=2600:1f18:43d1:2a02:c6f9:e151:e2e1:732d $all,ipaddress=2600:1f1c:57F:b502:dd8:9588:11e6:282 -!#endif ! https://github.com/AdguardTeam/AdguardFilters/issues/202010 ||adblockermax.com/land$doc,popup ! Various other reports @@ -9943,11 +9813,9 @@ $all,ipaddress=2600:1f1c:57F:b502:dd8:9588:11e6:282 ||whomeenoaglauns.com^$all ||wounofoarausooy.net^$all ||zmeso.com^$all -!#if env_firefox $all,ipaddress=172.240.41.32 $all,ipaddress=172.240.41.64 $all,ipaddress=172.240.41.96 -!#endif ||abcradilytor.com^$all ||abmagbychan.com^$all ||agatorkoaltor.com^$all @@ -10335,18 +10203,14 @@ $all,ipaddress=43.128.142.70 ||whatcsappwap.com^$all ||whatstapps.com^$all ||whetcsapp.com^$all -!#if !env_firefox ||149.30.232.154^$all ||154.204.32.99^$all ||156.245.23.49^$all ||206.119.178.163^$all -!#endif -!#if env_firefox $all,ipaddress=149.30.232.154 $all,ipaddress=154.204.32.99 $all,ipaddress=156.245.23.49 $all,ipaddress=206.119.178.163 -!#endif ! https://github.com/DandelionSprout/adfilt/issues/1164 ||device-checking.com^$all ||device-cleanup.com^$all @@ -10585,22 +10449,18 @@ $all,ipaddress=203.188.171.156 ||watch-user-help.com^$all ||workspace-drive.com^$all ||your-package-delivery.com^$all -!#if !env_firefox ||158.94.209.86^$all ||158.94.209.87^$all ||158.94.209.88^$all ||158.94.209.89^$all ||158.94.209.90^$all ||223.29.226.200^$all -!#endif -!#if env_firefox $all,ipaddress=158.94.209.86 $all,ipaddress=158.94.209.87 $all,ipaddress=158.94.209.88 $all,ipaddress=158.94.209.89 $all,ipaddress=158.94.209.90 $all,ipaddress=223.29.226.200 -!#endif ! https://urlscan.io/result/019a4ffd-885c-7545-816a-3c121d8bdc0d/ (Early November 2025) /linkresolver.html?url=*p0$doc ! https://github.com/DandelionSprout/adfilt/issues/1197 @@ -10933,20 +10793,16 @@ $all,ipaddress=94.156.232.201 ||tigosv.toythieves.com^$all ||trpttgovqs.icu^$all ||very-wonderful.shop^$all -!#if !env_firefox ||43.157.122.86^$all ||43.157.46.83^$all ||43.164.196.209^$all ||88.255.216.16^$all -/((https?|tcp|iquic)://)?204\.194\.54\.\d{1,3}([:/].*)?$/$all -!#endif -!#if env_firefox +/^((https?|tcp|iquic)://)?204\.194\.54\.\d{1,3}([:/].*)?$/$all $all,ipaddress=43.157.122.86 $all,ipaddress=43.157.46.83 $all,ipaddress=43.164.196.209 $all,ipaddress=88.255.216.16 $all,ipaddress=204.194.54.* -!#endif ! https://new•reddit•com/r/softwaregore/comments/1spebzh/i_broke_the_antivirus_ad/ (19/04/2026) ||adtng.com^$all ||anonymity-guardstation.com^$all @@ -11185,18 +11041,14 @@ $all,ipaddress=204.194.54.* ||webtracksecurity.com^$all ||z-zip.org^$all ||zaxbyfeedback.com^$all -!#if !env_firefox ://15.204.140.239^$all ://15.204.160.216^$all ://[2604:2dc0:100:4ed8::]^$all ://[2604:2dc0:104:da00::]^$all -!#endif -!#if env_firefox $all,ipaddress=15.204.140.239 $all,ipaddress=15.204.160.216 $all,ipaddress=2604:2dc0:100:4ed8:: $all,ipaddress=2604:2dc0:104:da00:: -!#endif ! According to https://thedreydossier•substack•com/p/i-found-a-second-votegov-and-its ||posthog.$all,domain=gov|loveisaskill.cloudflareaccess.com ! https://github.com/AdguardTeam/AdguardFilters/issues/238795 @@ -11218,6 +11070,9 @@ $all,ipaddress=2604:2dc0:104:da00:: ||13.140.171.211^$all $all,ipaddress=103.29.182.53 $all,ipaddress=13.140.171.211 +! https://github.com/DandelionSprout/adfilt/issues/1296 +||koboldcpp.com^$all +$all,ipaddress=146.19.248.143 ! ——— Standard malware that I stumbled upon on my own ——— ! http://www•toorgle•net/results•php?q=fetishkitsch&security=666 @@ -11544,20 +11399,16 @@ $doc,ipaddress=45.136.49.35 ||semex.com/popurl.cgi^$all,domain=~malware_redirection_results.* ||pharmanimal.com/catalog/redirect.php^$all,domain=~malware_redirection_results.* ! Browsing around for Tajik newssites -!#if env_firefox $all,ipaddress=51.91.211.94 $all,ipaddress=162.19.71.16 $all,ipaddress=146.59.240.191 $all,ipaddress=54.37.5.34 $all,ipaddress=54.36.118.105 -!#endif -!#if !env_firefox ||51.91.211.94^$all ||162.19.71.16^$all ||146.59.240.191^$all ||54.37.5.34^$all ||54.36.118.105^$all -!#endif ! Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt ||highlandnews.com^$all ||pcbasicstrength.com^$all @@ -11597,7 +11448,6 @@ $all,ipaddress=34.80.59.191 ||zombooru.com^$all ||kusubooru.com^$all ||wh40kart.im^$all -!#if env_firefox $doc,ipaddress=45.33.2.79 $doc,ipaddress=45.33.18.44 $doc,ipaddress=45.33.20.235 @@ -11610,8 +11460,6 @@ $doc,ipaddress=72.14.185.43 $doc,ipaddress=96.126.123.244 $doc,ipaddress=173.255.194.134 $doc,ipaddress=198.58.118.167 -!#endif -!#if !env_firefox ||45.33.2.79^$doc ||45.33.18.44^$doc ||45.33.20.235^$doc @@ -11624,7 +11472,6 @@ $doc,ipaddress=198.58.118.167 ||96.126.123.244^$doc ||173.255.194.134^$doc ||198.58.118.167^$doc -!#endif ! https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/ ||777offers.net^$all ||99linksfortc.com^$all @@ -11677,22 +11524,18 @@ $doc,ipaddress=198.58.118.167 ||turbotrffc.com^$all ||upcloud.host^$all ||ym3trk.com^$all,domain=~malware_redirection_trains.* -!#if env_firefox $all,ipaddress=34.117.199.78 $all,ipaddress=94.237.103.119 $all,ipaddress=94.237.84.54 $all,ipaddress=94.237.93.242 $all,ipaddress=94.237.99.118 $all,ipaddress=139.45.197.249 -!#endif -!#if !env_firefox ||34.117.199.78^$all ||94.237.103.119^$all ||94.237.84.54^$all ||94.237.93.242^$all ||94.237.99.118^$all ||139.45.197.249^$all -!#endif ! https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide ||anahitagirted.uno^$all ||arenitezill.com^$all @@ -11876,11 +11719,9 @@ www.tumblr.com##div[tabindex][style="margin-top: 0px;"]:not([class],[id]):has(a[ ||shua999.com^$all ||topnews24gm.com^$all ||vgadeal.com^$all -!#if env_firefox $all,ipaddress=104.21.82.132 $all,ipaddress=172.67.158.57 $all,ipaddress=198.12.86.90 -!#endif ||sites.google.com/view/*wincashapp^$doc ||iuxxx.com^$all ||tuusi.com^$all @@ -12720,7 +12561,6 @@ $all,ipaddress=54.174.156.141 ||85.159.213.158^$all $all,ipaddress=85.159.213.158 ! Seemingly mass-generated fake "marketing company" sites that seem to serve no visible purpose (12/05/2025) -!#if !env_firefox ||23.170.252.196^$all ||23.229.68.43^$all ||23.229.68.44^$all @@ -12812,8 +12652,6 @@ $all,ipaddress=85.159.213.158 ://216.246.30.82^$all ://216.246.30.83^$all ://216.246.30.84^$all -!#endif -!#if env_firefox $doc,3p,ipaddress=23.170.252.196 $doc,3p,ipaddress=23.229.68.43 $doc,3p,ipaddress=23.229.68.44 @@ -12905,7 +12743,6 @@ $doc,3p,ipaddress=216.246.30.82 $doc,3p,ipaddress=216.246.30.83 $doc,3p,ipaddress=216.246.30.84 $doc,3p,ipaddress=2a14:2d81:0:27::1 -!#endif ||beastlyendeavors.com^$doc ||lolo.sickbeard.com^$doc ||detentionteach.com^$doc @@ -12939,18 +12776,14 @@ $all,ipaddress=139.45.195.9 ||24hdeepnude.com^$doc ! gelbo²ruCOM ||debateobsoletesimply.com^$all -!#if !env_firefox ||172.240.41.33^$all ||172.240.41.65^$all ||172.240.41.97^$all ||172.240.41.129^$all -!#endif -!#if env_firefox $all,ipaddress=172.240.41.33 $all,ipaddress=172.240.41.65 $all,ipaddress=172.240.41.97 $all,ipaddress=172.240.41.129 -!#endif ! bdsmx-pornCOM ||6traitors.com^$all ||baimgfroggd.site^$all @@ -13012,7 +12845,6 @@ $all,ipaddress=172.240.41.129 ||storewbhjkk.shop^$all ||trankosty.shop^$all ||tubecup.org^$all -!#if !env_firefox ||62.122.168.42^$all ||109.206.163.112^$all ||109.206.163.116^$all @@ -13028,8 +12860,6 @@ $all,ipaddress=172.240.41.129 ||[2a02:128:7:5427::2]^$all ||[2a02:128:7:5905::2]^$all ||[2a02:128:7:5940::3]^$all -!#endif -!#if env_firefox $all,ipaddress=62.122.168.42 $all,ipaddress=109.206.163.112 $all,ipaddress=109.206.163.116 @@ -13045,7 +12875,6 @@ $all,ipaddress=2a02:128:7:5241::2 $all,ipaddress=2a02:128:7:5427::2 $all,ipaddress=2a02:128:7:5905::2 $all,ipaddress=2a02:128:7:5940::3 -!#endif ||biuqbiu.com^$all ||bmgmb.com^$all ||onclckbn.com^$all @@ -13055,11 +12884,9 @@ $all,ipaddress=2a02:128:7:5940::3 ||178.63.5.120^$all ||[2a01:4f8:c0:33d8::1]^$all ||[2a01:4f8:c0:2a5c::1]^$all -!#if env_firefox $all,ipaddress=178.63.5.120 $all,ipaddress=2a01:4f8:c0:33d8::1 $all,ipaddress=2a01:4f8:c0:2a5c::1 -!#endif ||03122e72f0.com^$all ||0551acf6ed.com^$all ||0c5351790d.com^$all @@ -13121,11 +12948,9 @@ $all,ipaddress=2a01:4f8:c0:2a5c::1 ||167.235.163.216^$all ||[2a01:4f8:c0:2343::2]^$all ||[2a01:4f8:e0:19cb::1]^$all -!#if env_firefox $all,ipaddress=167.235.163.216 $all,ipaddress=2a01:4f8:c0:2343::2 $all,ipaddress=2a01:4f8:e0:19cb::1 -!#endif ||a3ion.com^$all ||advertrek.com^$all ||cant3am.com^$all @@ -13363,7 +13188,6 @@ $all,ipaddress=2a00:1178:1:4b::e ||trackingparcel.today^$all ||tur-ptt-posen.$all ||ukpayment.xin^$all -!#if !env_firefox ||43.100.125.58^$all ||43.159.140.215^$all ||43.162.119.45^$all @@ -13371,8 +13195,6 @@ $all,ipaddress=2a00:1178:1:4b::e ||109.230.237.116^$all ||147.93.63.211^$all ||154.223.16.232^$all -!#endif -!#if env_firefox $all,ipaddress=43.100.125.58 $all,ipaddress=43.159.140.215 $all,ipaddress=43.162.119.45 @@ -13380,7 +13202,6 @@ $all,ipaddress=47.76.132.29 $all,ipaddress=109.230.237.116 $all,ipaddress=147.93.63.211 $all,ipaddress=154.223.16.232 -!#endif ! icepornCOM /adx_iframe_$3p ! https://www•drvhub•net/devices/network/asix/ax88178a-usb-2-0-to-gigabit-ethernet-adapter @@ -13619,7 +13440,6 @@ drvhub.net##.driver-item__install ||trksp1.com^$all ||trksp2.com^$all ||trksp3.com^$all -!#if !env_firefox ||157.90.33.79^$all ||173.239.53.20^$all ||178.63.248.53^$all @@ -13635,8 +13455,6 @@ drvhub.net##.driver-item__install ||[2604:9e00:1:129::2:b10]^$all ||[2606:4700:3033::6815:5644]^$all ||[2a01:4f8:2201:388a::2]^$all -!#endif -!#if env_firefox $all,ipaddress=157.90.33.79 $all,ipaddress=173.239.53.20 $all,ipaddress=178.63.248.53 @@ -13652,7 +13470,6 @@ $all,ipaddress=52.207.126.104 $all,ipaddress=2604:9e00:1:129::2:b10 $all,ipaddress=2606:4700:3033::6815:5644 $all,ipaddress=2a01:4f8:2201:388a::2 -!#endif ! https://github.com/iam-py-test/my_filters_001/issues/135 ||aipredictdeathcalculator.com^$doc ||deathcalculator.ai^$doc @@ -13740,18 +13557,14 @@ $all,ipaddress=199.191.50.* ||quickfindresults.com^$all ||smorgasbordet.com^$all ||xdelta.org^ -!#if !env_firefox ||3.33.130.190^ ||[2a02:26f0:1700:11::b856:6790]^ /^(.*://)?204\.11\.56\.\d{1,3}(/.*)?$/$all /^(.*://)?208\.91\.197\.\d{1,3}(/.*)?$/$all -!#endif -!#if env_firefox $all,ipaddress=204.11.56.* $all,ipaddress=208.91.197.* $ipaddress=2a02:26f0:1700:11::b856:6790 $ipaddress=3.33.130.190 -!#endif ! submitted via email ! https://www.reddit.com/r/CryptoScams/comments/1svik99/grokarium_youtube_scam_campaign/ ||grokvarum.com^$all @@ -13889,7 +13702,6 @@ $ipaddress=3.33.130.190 -director-data-recovery.github.io/.github^$all ||katukaposole.com^$all ||fleecykobird.com^$all -!#if !env_firefox ||151.243.18.53^$all ||185.100.157.222^$all ||185.107.74.103^$all @@ -13899,8 +13711,6 @@ $ipaddress=3.33.130.190 ||45.87.249.13^$all ||77.91.96.188^$all ||88.214.50.173^$all -!#endif -!#if env_firefox $all,ipaddress=151.243.18.53 $all,ipaddress=185.100.157.222 $all,ipaddress=185.107.74.103 @@ -13910,27 +13720,22 @@ $all,ipaddress=45.150.34.21 $all,ipaddress=45.87.249.13 $all,ipaddress=77.91.96.188 $all,ipaddress=88.214.50.173 -!#endif ! Researching fonts for Taiwanese kana (19/06/2026) ||mojikyo.org^$all ||trekpeak.site^$all ||upperch.site^$all -!#if !env_firefox ://172.232.7.47^$all ://172.234.216.100^$all ://172.237.146.46^$all ://[2600:3c06::f03c:95ff:fed9:ce5e]^$all ://[2600:3c06::f03c:95ff:fedc:7282]^$all ://35.71.155.166^$all -!#endif -!#if env_firefox $all,ipaddress=172.232.7.47 $all,ipaddress=172.234.216.100 $all,ipaddress=172.237.146.46 $all,ipaddress=2600:3c06::f03c:95ff:fed9:ce5e $all,ipaddress=2600:3c06::f03c:95ff:fedc:7282 $all,ipaddress=35.71.155.166 -!#endif ! https://github.com/DandelionSprout/adfilt/issues/1275 ||tgdrive.app^$all ||tg-drive-bx4f.onrender.com^$all @@ -14077,14 +13882,10 @@ $all,ipaddress=35.71.155.166 ||yeesshh.com^$all ||yolkclknu.com^$all ||yolkdirxl.com^$all -!#if !env_firefox ||103.67.200.64^$all ||[2a00:8860:10d:1::2:b01]^$all -!#endif -!#if env_firefox $all,ipaddress=103.67.200.64 $all,ipaddress=2a00:8860:10d:1::2:b01 -!#endif ! Extreme amounts of PUP to a comical extent ||driverpack.io^$doc,domain=~has_extreme_amounts_of_pup_in_it.* ! https://github.com/DandelionSprout/adfilt/issues/1124 @@ -14736,7 +14537,6 @@ $all,ipaddress=91.195.240.12 ||woodburn.com.au^$all ||yellowdragon.com^$all ! Parking services' IP addresses -!#if !env_firefox ||13.248.148.254^$all ||185.53.177.50^$all ||185.53.177.51^$all @@ -14748,8 +14548,6 @@ $all,ipaddress=91.195.240.12 ||185.53.178.52^$all ||185.53.178.53^$all ||185.53.178.54^$all -!#endif -!#if env_firefox $all,ipaddress=13.248.148.254 $all,ipaddress=185.53.177.50 $all,ipaddress=185.53.177.51 @@ -14761,7 +14559,6 @@ $all,ipaddress=185.53.178.51 $all,ipaddress=185.53.178.52 $all,ipaddress=185.53.178.53 $all,ipaddress=185.53.178.54 -!#endif ! Bouncing hard-to-close (but admittedly empty) popups on NSFW sites like viperTO .to/popconsole.php|