diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt index cceb2e782..39e6ea529 100644 --- a/Dandelion Sprout's Anti-Malware List.txt +++ b/Dandelion Sprout's Anti-Malware List.txt @@ -1,10 +1,9 @@ [Adblock Plus 3.13] ! Title: 💊 Dandelion Sprout's Anti-Malware List -! Version: 30September2024v1 +! Version: 30September2024v2 ! Expires: 2 days ! Description: This list goes the extra kilometer to prevent more malware than other mainstream anti-malware lists. It blocks heavily abused top-level domains (and even search engine results for them), blocks domains used in malware redirection trains and in domain parking schemes, blocks sponsored Windows PUP nags on PC guide articles, uses mass blocking of domains belonging to bad IPs, and has many other subcategories that give it a solid advantage over similar lists out there. ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists -! (Note to self, only applicable to uBO: When 1.59.1 goes stable, implement "*$ipaddress=(...),all" for the IP addresses, alongside the previous syntaxing as the case is for AdGuard Browser Extension.) ! Homepage: https://github.com/DandelionSprout/adfilt/blob/master/Wiki/General-info.md#-english ! ——— Bad top-level domains ——— @@ -88,6 +87,7 @@ www.google.*##a[oncontextmenu][href^="https://books.google."]:upward(2) ||adblock.gjtech.net^$doc ||spam404bl.com^$doc ||109.201.135.46^$doc +*$all,ipaddress=109.201.135.46 ||fredfiber.no^$doc ||securemecca.com^$doc ||1hos.cf^$doc @@ -129,6 +129,7 @@ www.google.*##a[oncontextmenu][href^="https://books.google."]:upward(2) ! Fraudulent browser extensions ||ublock.org^$doc ||138.68.252.54^$doc +*$all,ipaddress=138.68.252.54 ||useragentswitch.com^$all,~inline-font ||dev-nano.com^$all,~inline-font ||adblocker-app.info^$all,~inline-font @@ -432,20 +433,29 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ! ——— Typo squatting, misspellings, and honest TLD address bar mistakes ——— ||ubuntu.org^$doc,domain=~you-were-likely-looking-for-ubuntu.com ||103.224.212.249^$doc +*$all,ipaddress=103.224.212.249 ||speedtest.com^$doc,domain=~you-were-likely-looking-for-speedtest.net ||snapchat.cm^$doc,domain=~malware-typo-squatter-of-snapchat.com ||facebook.cm^$doc,domain=~malware-typo-squatter-of-facebook.com ||wix.cm^$doc,domain=~malware-typo-squatter-of-wix.com ||199.59.243.222^$doc +*$all,ipaddress=199.59.243.222 |http://ww01.$doc,domain=~very-very-extremely-frequently-used-in-malware-redirections.* ||14d.us^$all,~inline-font,domain=~malware-redirection-and-also-you-were-very-likely-looking-for-1d4.us ||173.208.96.42^$all,~inline-font +*$all,ipaddress=173.208.96.42 ||173.208.96.43^$all,~inline-font +*$all,ipaddress=173.208.96.43 ||173.208.96.44^$all,~inline-font +*$all,ipaddress=173.208.96.44 ||173.208.96.45^$all,~inline-font +*$all,ipaddress=173.208.96.45 ||173.208.96.46^$all,~inline-font +*$all,ipaddress=173.208.96.46 ||213.227.149.208^$all,~inline-font +*$all,ipaddress=213.227.149.208 ||213.227.149.211^$all,~inline-font +*$all,ipaddress=213.227.149.211 ||ddscordapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com ||diicordapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com ||disccrdapp.$all,~inline-font,domain=~fake-malware-version-of-discordapp.com @@ -531,6 +541,7 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||katie.*.net^$doc ||emily.*.net^$doc ||54.174.156.141^$doc +*$all,ipaddress=54.174.156.141 ||lucretius-ada.com^$all,~inline-font ||hippolyte-hag.com^$all,~inline-font ||india-abc.com^$all,~inline-font @@ -544,13 +555,21 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||madagty.com^$doc ||zeroredirect5.com^$doc,domain=~malware-redirection-trains.* ||54.209.22.226^$doc +*$all,ipaddress=54.209.22.226 ||54.91.125.197^$doc +*$all,ipaddress=54.91.125.197 ||52.202.53.245^$doc +*$all,ipaddress=52.202.53.245 ||35.175.38.64^$doc +*$all,ipaddress=35.175.38.64 ||35.168.147.213^$doc +*$all,ipaddress=35.168.147.213 ||34.230.160.215^$doc +*$all,ipaddress=34.230.160.215 ||3.226.8.132^$doc +*$all,ipaddress=3.226.8.132 ||3.216.243.46^$doc +*$all,ipaddress=3.216.243.46 ||roamingclicks.com^$all,~inline-font ! Source: desidert•no ||collectfasttracks.com^$all,~inline-font,domain=~malware-redirection-trains.* @@ -562,8 +581,11 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||sarah.*.com^$doc ||pamela.*.com^$doc ||54.152.245.247^$doc +*$all,ipaddress=54.152.245.247 ||35.172.40.232^$doc +*$all,ipaddress=35.172.40.232 ||3.90.125.85^$doc +*$all,ipaddress=3.90.125.85 ! Various ex-affiliate links at www•zombooru•com ||track.vcdc.com^$all,~inline-font,domain=~malware-redirection-trains.* ||track.tkbo.com^$all,~inline-font,domain=~malware-redirection-trains.* @@ -574,10 +596,15 @@ download.cnet.com##.c-globalCard:has(a[href*="/AdsCleaner/"]) ||satcom1.co.uk^$doc ||splitter.microxml.net^$doc ||94.130.185.237^$doc +*$all,ipaddress=94.130.185.237 ||94.130.186.231^$doc +*$all,ipaddress=94.130.186.231 ||144.76.0.242^$doc +*$all,ipaddress=144.76.0.242 ||144.76.1.130^$doc +*$all,ipaddress=144.76.1.130 ||195.201.92.254^$doc +*$all,ipaddress=195.201.92.254 zombooru.com##a[href$="ttp://www.boorufurry.com/"] zombooru.com##a[href$="ttp://www.analbooru.com/"] zombooru.com##a[href$="ttp://www.hard55.com"] @@ -600,9 +627,13 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||newpage.in^$doc /mcaf04/*=$doc ||34.204.214.165^$doc +*$all,ipaddress=34.204.214.165 ||54.85.113.62^$doc +*$all,ipaddress=54.85.113.62 ||54.205.83.61^$doc +*$all,ipaddress=54.205.83.61 ||54.210.193.115^$doc +*$all,ipaddress=54.210.193.115 ||[2600:1f18:43d1:2a04:ee05:261e:d408:7ba1]^$doc ||ailkeyair.com^$all,~inline-font ||amulagaudish.cam^$all,~inline-font @@ -655,28 +686,46 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||wonfigfig.com^$all,~inline-font ||adblockerapp.com^$doc,popup ||172.255.6.107^$all,~inline-font +*$all,ipaddress=172.255.6.107 ||172.255.6.147^$all,~inline-font +*$all,ipaddress=172.255.6.147 ||172.255.6.219^$all,~inline-font +*$all,ipaddress=172.255.6.219 ||172.255.6.225^$all,~inline-font +*$all,ipaddress=172.255.6.225 ||188.42.129.108^$all,~inline-font +*$all,ipaddress=188.42.129.108 ||188.42.129.116^$all,~inline-font +*$all,ipaddress=188.42.129.116 ||188.42.141.100^$all,~inline-font +*$all,ipaddress=188.42.141.100 ||188.42.141.92^$all,~inline-font +*$all,ipaddress=188.42.141.92 ||23.109.82.144^$all,~inline-font +*$all,ipaddress=23.109.82.144 ||23.109.82.41^$all,~inline-font +*$all,ipaddress=23.109.82.41 ||23.109.82.43^$all,~inline-font +*$all,ipaddress=23.109.82.43 ||23.109.82.65^$all,~inline-font +*$all,ipaddress=23.109.82.65 ||23.109.82.66^$all,~inline-font +*$all,ipaddress=23.109.82.66 ||23.109.87.169^$all,~inline-font +*$all,ipaddress=23.109.87.169 ||23.109.87.207^$all,~inline-font +*$all,ipaddress=23.109.87.207 ||23.109.87.208^$all,~inline-font +*$all,ipaddress=23.109.87.208 ||entwithou.xyz^$all,~inline-font ||chedstimaarr.pics^$all,~inline-font ||blueoyster.click^$all,~inline-font ||qocvicklgcgr.com^$all,~inline-font ||zeikvvbobop.com^$all,~inline-font ||216.21.13.14^$all,~inline-font +*$all,ipaddress=216.21.13.14 ||216.21.13.15^$all,~inline-font +*$all,ipaddress=216.21.13.15 /^.*\.(xyz|pics)/[a-zA-Z0-9]{130,}$/$doc,script,subdocument,image /^.*\.(cloudfront\.net|xyz|pics)/[a-zA-Z0-9]{20,}/[a-zA-Z0-9]{25,}\+[a-zA-Z0-9+]{90,}$/$doc,script,subdocument,image ||abaphosis.guru^$all,~inline-font @@ -3769,6 +3818,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zmusic-online.com^$all,~inline-font ||zredir.com^$all,~inline-font,domain=~malware-redirection-trains.* ||178.128.142.109^$doc +*$all,ipaddress=178.128.142.109 ||findmedia.biz^$all,~inline-font ||backtonews.biz^$all,~inline-font ||bagclick.biz^$all,~inline-font @@ -3789,6 +3839,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] /^http://\d{1,2}\.[a-z0-9-]{1,}\.(club|me)(/|$)/$doc /^https://\d{1,2}\.[a-z0-9-]{1,}\.(club|me)(/|$)/$doc ||134.209.136.174^$doc +*$all,ipaddress=134.209.136.174 ||whiteclick.biz^$all,~inline-font ||dreamnews.biz^$all,~inline-font ||gonews2.com^$all,~inline-font @@ -3802,9 +3853,13 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||texterra.me^$all,~inline-font ||worldtxt.club^$all,~inline-font ||62.210.6.153^$doc +*$all,ipaddress=62.210.6.153 ||62.210.7.209^$doc +*$all,ipaddress=62.210.7.209 ||62.210.9.92^$doc +*$all,ipaddress=62.210.9.92 ||62.210.11.203^$doc +*$all,ipaddress=62.210.11.203 ||ilo134ulih.com^$all,~inline-font ||hooligapps.com^$all,~inline-font ||best202*-games-web1.com^$all,~inline-font @@ -3821,6 +3876,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||stay-notified.com^$doc ||stay-notified.xyz^$doc ||167.99.249.47^$doc +*$all,ipaddress=167.99.249.47 ! https://maldita•es/malditobulo/2020/12/02/lidl-regala-robot-cocina-silvercrest-monsieur-cuisine-encuesta/ ! https://maldita•es/malditobulo/2020/11/25/jordi-evole-el-hormiguero-bitcoin-revolution-timo-twitter/ ||moderncomputer.net^ @@ -3860,19 +3916,30 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||rebiraert.com^$all,~inline-font ||iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com^$all,~inline-font ||5.8.34.26^$doc +*$all,ipaddress=5.8.34.26 ||5.8.47.3^$doc +*$all,ipaddress=5.8.47.3 ||103.224.182.251^$doc +*$all,ipaddress=103.224.182.251 ! https://github.com/DandelionSprout/adfilt/issues/193 ||holescontracting.com^$all,~inline-font ||doggroomingnews.com^$all,~inline-font ||5.79.71.205^$doc +*$all,ipaddress=5.79.71.205 ||5.79.71.225^$doc +*$all,ipaddress=5.79.71.225 ||85.17.31.82^$doc +*$all,ipaddress=85.17.31.82 ||85.17.31.122^$doc +*$all,ipaddress=85.17.31.122 ||178.162.203.202^$doc +*$all,ipaddress=178.162.203.202 ||178.162.203.211^$doc +*$all,ipaddress=178.162.203.211 ||178.162.203.226^$doc +*$all,ipaddress=178.162.203.226 ||178.162.217.107^$doc +*$all,ipaddress=178.162.217.107 ||[2a02:1668:1034::2]^$doc ! https://github.com/DandelionSprout/adfilt/issues/195 ||logicalrecord.com^$all,~inline-font @@ -3886,9 +3953,13 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||securebankapp.online^$all,~inline-font ||securemailbox.online^$all,~inline-font ||66.85.156.85^$doc +*$all,ipaddress=66.85.156.85 ||66.85.156.86^$doc +*$all,ipaddress=66.85.156.86 ||108.170.31.123^$doc +*$all,ipaddress=108.170.31.123 ||108.170.52.156^$doc +*$all,ipaddress=108.170.52.156 ! https://github.com/DandelionSprout/adfilt/issues/198 ||mysecrethoookup.com^$all,~inline-font ! https://www•bleepingcomputer•com/virus-removal/ (18/06/2021) @@ -3995,8 +4066,11 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||watch-this.live^$all,~inline-font ||weather-forecast.today^$all,~inline-font ||95.168.170.165^$doc +*$all,ipaddress=95.168.170.165 ||213.227.145.147^$doc +*$all,ipaddress=213.227.145.147 ||213.227.149.216^$doc +*$all,ipaddress=213.227.149.216 ! https://twitter•com/adamziaja/status/1252234957679808513 ||wow-robotics.xyz^$all,~inline-font ! https://blog•sucuri•net/2021/05/woocommerce-credit-card-skimmer•html @@ -4012,6 +4086,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||fblaster.com^$all,~inline-font ||ribinski.us^$all,~inline-font ||5.188.62.36^$doc +*$all,ipaddress=5.188.62.36 ! https://github.com/DandelionSprout/adfilt/issues/223 ||speedupmypcfree.com^$all,~inline-font ! https://github.com/DandelionSprout/adfilt/issues/224 @@ -4047,6 +4122,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||ssielearning.com^$all,~inline-font ||paymetconfirm.com^$all,~inline-font ||69.49.231.244^$doc +*$all,ipaddress=69.49.231.244 ! https://movsb•0x0•st/users/mia ||vid.me^$third-party ||5starhdporn.com^$frame,third-party @@ -4071,6 +4147,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||blackpass.info^$all,~inline-font ||yzsnw.com^$all,~inline-font ||37.34.176.37^$doc +*$all,ipaddress=37.34.176.37 ||atvcampingtrips.com^$all,~inline-font ||thegymmum.com^$all,~inline-font ||pcspeedcat.com^$all,~inline-font @@ -4087,14 +4164,20 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||temp74.com^$all,~inline-font ||trackwebclick.com^$all,~inline-font,domain=~malware-redirection-trains.* ||23.111.31.137^$doc +*$all,ipaddress=23.111.31.137 ||23.111.88.207^$doc +*$all,ipaddress=23.111.88.207 ! https://github.com/DandelionSprout/adfilt/issues/254 ||onesafesoftware.com^$doc ! https://github.com/DandelionSprout/adfilt/issues/257 ||185.158.250.239^$all,~inline-font +*$all,ipaddress=185.158.250.239 ||192.169.69.25^$all,~inline-font +*$all,ipaddress=192.169.69.25 ||212.192.241.72^$all,~inline-font +*$all,ipaddress=212.192.241.72 ||37.0.10.83^$all,~inline-font +*$all,ipaddress=37.0.10.83 ||newstepsco.com^$all,~inline-font ||secure-0*.ddnss.ch^$all,~inline-font ||lucdream.com^$doc @@ -4125,6 +4208,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://www•virustotal•com/gui/url/826c451929420c4da32552f967fb1cab6467405a29c65b23802aaadb6a8c7505/detection ! https://safeweb•norton•com/report/show?url=192•3•110•170 ||192.3.110.170^$all,~inline-font +*$all,ipaddress=192.3.110.170 ! https://forums•malwarebytes•com/topic/278209-removal-instructions-for-socialsearchconverter/ ||socialsearchconverter.com^$doc ||install.socialsearchconverter.com^$all,~inline-font @@ -4163,6 +4247,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://www•virustotal•com/gui/url/5618023ed5a768d7f879c0d599b9ba7cff0e9171201981256eeaf5ce8eb09fdb/detection ! https://www•virustotal•com/gui/url/8cf9ca3359f17cf92b9b3e5fdab30e29be23f08e66c8c5396c9410fcb91f7c3c/detection ||91.241.19.38^$all,~inline-font +*$all,ipaddress=91.241.19.38 ! https://www•virustotal•com/gui/url/46e095c35d83e2dd0b98df4b5844d3d87948de0c930a618600121020a514c801/detection ! https://safeweb•norton•com/report/show?url=telete•in ! https://www•siteadvisor•com/sitereport•html?url=telete•in @@ -4173,41 +4258,58 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://www•virustotal•com/gui/domain/kiff•tech/relations ! https://www•virustotal•com/gui/url/dc038496b1b5358b97f89440135ec91258b406c40859a2cd95983dc7a81e0cfa/detection ||45.90.58.90^$doc +*$all,ipaddress=45.90.58.90 ! https://www•virustotal•com/gui/file/e565ba89d034418fd26a5f642f6eeee4d72ee3b8dc69523419b7ca8dfd452730/community ! https://www•virustotal•com/gui/url/e3a9189a1e1256beba8e0fc3abfeab6acb09f7f8cabfd973e22be9f77bb6886f/detection ||95.85.89.98^$all,~inline-font +*$all,ipaddress=95.85.89.98 ! https://github.com/DandelionSprout/adfilt/issues/267 ||tekhacks.net^$all,~inline-font ||mediafire.com/file/pj9jdm7iznc4d51/tekhacksnet_multi_loader.rar^$doc ! https://github.com/DandelionSprout/adfilt/pull/278 !! https://www.virustotal.com/gui/file/da75c85fe037f9ff9ebbbd0b37dd2ff154f5e70a0dc6870286e0d3df6b8f246f/community ||139.28.37.49^$all,~inline-font +*$all,ipaddress=139.28.37.49 !! https://www.virustotal.com/gui/file/717bfbdba55f9c2d820fde170c04fd70c3e0f907b635c13d0f29678ff781f665/community ||35.194.188.37^$all,~inline-font +*$all,ipaddress=35.194.188.37 !! https://www.virustotal.com/gui/file/368afeda7af69f329e896dc86e9e4187a59d2007e0e4b47af30a1c117da0d792/community ||hydro-ca.link^$all,~inline-font !! https://www.virustotal.com/gui/file/c0e40a12643436cb413235e385a6a90deeb6cc13b24458368fd7facb20ac0c81/community ||91.243.121.19^$all,~inline-font +*$all,ipaddress=91.243.121.19 !! https://www.virustotal.com/gui/file/9f154115fa8045aa05f15f7cd1de9623ebe32e8ea400279ecb5dfa3596952e3b/community ||103.169.90.205^$all,~inline-font +*$all,ipaddress=103.169.90.205 ! https://github.com/DandelionSprout/adfilt/pull/281 ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community ||125.44.43.45^$all,~inline-font +*$all,ipaddress=125.44.43.45 ||182.121.8.240^$all,~inline-font +*$all,ipaddress=182.121.8.240 ||42.235.183.74^$all,~inline-font +*$all,ipaddress=42.235.183.74 ||78.36.32.242^$all,~inline-font +*$all,ipaddress=78.36.32.242 ||115.50.2.119^$all,~inline-font +*$all,ipaddress=115.50.2.119 ||115.50.110.163^$all,~inline-font +*$all,ipaddress=115.50.110.163 ||119.179.84.145^$all,~inline-font +*$all,ipaddress=119.179.84.145 ||188.120.50.98^$all,~inline-font +*$all,ipaddress=188.120.50.98 ||190.238.183.5^$all,~inline-font +*$all,ipaddress=190.238.183.5 ||27.220.253.78^$all,~inline-font +*$all,ipaddress=27.220.253.78 ! https://www•virustotal•com/gui/file/0374ead74fa807fb1737d8829fdb5bad6c93779f6b9eb7162eddabff7a64acff/community ||esetnode32-antiviru.ydns.eu^$all,~inline-font ! https://www•joesandbox•com/analysis/486636/0/html#domains ||aieov.com^$all,~inline-font ! Relations to the original domain ||192.3.194.242^$all,~inline-font +*$all,ipaddress=192.3.194.242 ||w0hsyejhnbcvzaxi8euyr6tgeya5vml09jysgav27.ydns.eu^$all,~inline-font ||hncbeyghfsbvcuabgsbncvzgaioiuyegdbhabbbw.ydns.eu^$all,~inline-font ||avira-antivirus.ydns.eu^$all,~inline-font @@ -4283,66 +4385,120 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://www•virustotal•com/gui/file/78f490e503c86eaaff5760197b9ff5308ed6e03161af13194a6c1e0cd95422de/community ! https://github.com/DandelionSprout/adfilt/commit/f7f114945c83b339be5cdd848e229680d9918abb#commitcomment-57642875 ||23.94.26.138^$all,~inline-font +*$all,ipaddress=23.94.26.138 ! https://github.com/DandelionSprout/adfilt/pull/298 ! https://www•virustotal•com/gui/file/ac5a95221b895545eb04cfea29693288d7b432ad313f6bfc9db2ddf86f085a63/community ||205.185.126.200^$all,~inline-font +*$all,ipaddress=205.185.126.200 ! https://www•virustotal•com/gui/file/3ef65ce27d39b037d75bdc16b197e04f3b391f76c2da5f2f755e2ded38bb9078/community ||185.243.56.167^$all,~inline-font +*$all,ipaddress=185.243.56.167 ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community ||123.10.224.135^$all,~inline-font +*$all,ipaddress=123.10.224.135 ||59.47.187.147^$all,~inline-font +*$all,ipaddress=59.47.187.147 ||39.68.172.210^$all,~inline-font +*$all,ipaddress=39.68.172.210 ||122.192.177.176^$all,~inline-font +*$all,ipaddress=122.192.177.176 ||112.27.124.108^$all,~inline-font +*$all,ipaddress=112.27.124.108 ||123.110.176.246^$all,~inline-font +*$all,ipaddress=123.110.176.246 ||219.155.105.98^$all,~inline-font +*$all,ipaddress=219.155.105.98 ||171.35.161.209^$all,~inline-font +*$all,ipaddress=171.35.161.209 ||60.16.255.36^$all,~inline-font +*$all,ipaddress=60.16.255.36 ||112.30.4.52^$all,~inline-font +*$all,ipaddress=112.30.4.52 ||182.121.191.201^$all,~inline-font +*$all,ipaddress=182.121.191.201 ||121.61.48.170^$all,~inline-font +*$all,ipaddress=121.61.48.170 ||39.81.68.45^$all,~inline-font +*$all,ipaddress=39.81.68.45 ||27.222.220.164^$all,~inline-font +*$all,ipaddress=27.222.220.164 ||113.233.215.135^$all,~inline-font +*$all,ipaddress=113.233.215.135 ||151.77.100.133^$all,~inline-font +*$all,ipaddress=151.77.100.133 ||125.120.13.184^$all,~inline-font +*$all,ipaddress=125.120.13.184 ||120.12.138.133^$all,~inline-font +*$all,ipaddress=120.12.138.133 ||27.194.115.185^$all,~inline-font +*$all,ipaddress=27.194.115.185 ||104.128.199.228^$all,~inline-font +*$all,ipaddress=104.128.199.228 ||183.92.123.145^$all,~inline-font +*$all,ipaddress=183.92.123.145 ||110.89.8.126^$all,~inline-font +*$all,ipaddress=110.89.8.126 ||125.43.211.184^$all,~inline-font +*$all,ipaddress=125.43.211.184 ||1.0.218.230^$all,~inline-font +*$all,ipaddress=1.0.218.230 ||221.208.4.56^$all,~inline-font +*$all,ipaddress=221.208.4.56 ||60.13.60.19^$all,~inline-font +*$all,ipaddress=60.13.60.19 ||171.37.29.87^$all,~inline-font +*$all,ipaddress=171.37.29.87 ||124.91.237.188^$all,~inline-font +*$all,ipaddress=124.91.237.188 ||115.56.137.49^$all,~inline-font +*$all,ipaddress=115.56.137.49 ||115.52.240.69^$all,~inline-font +*$all,ipaddress=115.52.240.69 ||112.252.132.185^$all,~inline-font +*$all,ipaddress=112.252.132.185 ||117.198.240.157^$all,~inline-font +*$all,ipaddress=117.198.240.157 ||42.53.240.249^$all,~inline-font +*$all,ipaddress=42.53.240.249 ||116.179.138.68^$all,~inline-font +*$all,ipaddress=116.179.138.68 ||110.241.119.159^$all,~inline-font +*$all,ipaddress=110.241.119.159 ||115.56.31.133^$all,~inline-font +*$all,ipaddress=115.56.31.133 ||103.19.128.222^$all,~inline-font +*$all,ipaddress=103.19.128.222 ||202.12.80.74^$all,~inline-font +*$all,ipaddress=202.12.80.74 ||61.52.8.62^$all,~inline-font +*$all,ipaddress=61.52.8.62 ||182.122.252.69^$all,~inline-font +*$all,ipaddress=182.122.252.69 ||219.155.26.50^$all,~inline-font +*$all,ipaddress=219.155.26.50 ||120.4.141.185^$all,~inline-font +*$all,ipaddress=120.4.141.185 ||119.102.7.115^$all,~inline-font +*$all,ipaddress=119.102.7.115 ||72.51.127.213^$all,~inline-font +*$all,ipaddress=72.51.127.213 ||111.224.199.91^$all,~inline-font +*$all,ipaddress=111.224.199.91 ||119.250.236.122^$all,~inline-font +*$all,ipaddress=119.250.236.122 ||112.30.110.58^$all,~inline-font +*$all,ipaddress=112.30.110.58 ! https://www•virustotal•com/gui/file/715eef1fb3bbf84ade848d97d4ec05d380cf8595298b51af134385de70be9d08/community ||pcae.de^$doc ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community ||117.196.49.21^$all,~inline-font +*$all,ipaddress=117.196.49.21 ||115.55.54.234^$all,~inline-font +*$all,ipaddress=115.55.54.234 ||115.52.17.123^$all,~inline-font +*$all,ipaddress=115.52.17.123 ||182.59.69.21^$all,~inline-font +*$all,ipaddress=182.59.69.21 ! https://www•virustotal•com/gui/file/3db0e385eb53a32d61a5a35908a99317868b571e4cf7079db67fd68604da662c/community ||chip-secured-download.de^$all,~inline-font ! https://www•virustotal•com/gui/url/5b1dc9b2ec70e28b5f6cbb282a598a1b2ecd4df2aebb66953ca9194fa1c9c4fb @@ -4366,6 +4522,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! Vermilion Strike ! https://www•virustotal•com/gui/file/294b8db1f2702b60fb2e42fdc50c2cee6a5046112da9a5703a548a4fa50477bc/relations ||160.202.163.100^$all,~inline-font +*$all,ipaddress=160.202.163.100 ! https://www•virustotal•com/gui/ip-address/160•202•163•100/relations ||microsoftkernel.com^$all,~inline-font ||microsofthk.com^$all,~inline-font @@ -4379,10 +4536,13 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://github.com/DandelionSprout/adfilt/pull/303 ! https://www•virustotal•com/gui/file/37328efa73c248b460aba605d7745b024f31ab7ab864e1af273e9a197a188f42/community ||45.95.169.115^$all,~inline-font +*$all,ipaddress=45.95.169.115 ! https://www•virustotal•com/gui/file/03e4533ba8874c2f4dcdb94bd135914fa4c22ed477d7c0395dc2322b6468e249/community ||45.148.120.80^$all,~inline-font +*$all,ipaddress=45.148.120.80 ! https://www•virustotal•com/gui/file/1a782cab036efa567c2c42b7bae9452bf735be72f0b00d68f6dcba48cea526fa/community ||85.239.33.9^$all,~inline-font +*$all,ipaddress=85.239.33.9 ! Relations to the domain above ||adminsys.serveftp.com^$all,~inline-font ||amazbaidu.serveftp.com^$all,~inline-font @@ -4400,8 +4560,10 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||eposcardokubo.serveftp.com^$all,~inline-font ! https://www•virustotal•com/gui/file/8a39f18caa77d52e80bec05f584ec50e733a3be1e33551d8902e95b9b0bfe6c0/community ||107.173.176.183^$all,~inline-font +*$all,ipaddress=107.173.176.183 ! https://www•virustotal•com/gui/file/54054209c921a68f12a9b29d6e84f1b45cb417bc0b5a99356a245727e0a41e40/community ||45.148.120.171^$all,~inline-font +*$all,ipaddress=45.148.120.171 ! https://twitter•com/soranker0/status/1449491402409185283 ://disordgift.$all,~inline-font ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-950330114 @@ -4412,6 +4574,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] /(^|://|\.)[a-z]{5,}-[a-z]{5,}-[a-z]{5,}\.xyz($|/)/$doc ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-951321929 ||159.148.186.228^$all,~inline-font +*$all,ipaddress=159.148.186.228 ! https://github.com/iam-py-test/investigations/blob/main/2021/10/26/1.md#domains ||yotube.com^$all,~inline-font ||r-tb.com^$all,~inline-font @@ -4440,38 +4603,70 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://github.com/DandelionSprout/adfilt/pull/348 ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community ||39.83.80.247^$all,~inline-font +*$all,ipaddress=39.83.80.247 ||68.197.33.124^$all,~inline-font +*$all,ipaddress=68.197.33.124 ||219.157.21.37^$all,~inline-font +*$all,ipaddress=219.157.21.37 ||182.123.141.17^$all,~inline-font +*$all,ipaddress=182.123.141.17 ||125.47.243.187^$all,~inline-font +*$all,ipaddress=125.47.243.187 ||182.122.196.203^$all,~inline-font +*$all,ipaddress=182.122.196.203 ||182.117.231.182^$all,~inline-font +*$all,ipaddress=182.117.231.182 ||112.31.211.135^$all,~inline-font +*$all,ipaddress=112.31.211.135 ||125.106.63.93^$all,~inline-font +*$all,ipaddress=125.106.63.93 ||115.59.197.46^$all,~inline-font +*$all,ipaddress=115.59.197.46 ||122.159.29.192^$all,~inline-font +*$all,ipaddress=122.159.29.192 ||171.40.0.127^$all,~inline-font +*$all,ipaddress=171.40.0.127 ||171.80.219.160^$all,~inline-font +*$all,ipaddress=171.80.219.160 ||123.10.65.201^$all,~inline-font +*$all,ipaddress=123.10.65.201 ||168.90.205.46^$all,~inline-font +*$all,ipaddress=168.90.205.46 ||125.47.205.109^$all,~inline-font +*$all,ipaddress=125.47.205.109 ||39.80.147.239^$all,~inline-font +*$all,ipaddress=39.80.147.239 ||45.224.171.130^$all,~inline-font +*$all,ipaddress=45.224.171.130 ||45.5.209.75^$all,~inline-font +*$all,ipaddress=45.5.209.75 ||116.17.210.157^$all,~inline-font +*$all,ipaddress=116.17.210.157 ||27.45.103.240^$all,~inline-font +*$all,ipaddress=27.45.103.240 ||110.167.64.171^$all,~inline-font +*$all,ipaddress=110.167.64.171 ||39.81.117.73^$all,~inline-font +*$all,ipaddress=39.81.117.73 ||183.15.90.156^$all,~inline-font +*$all,ipaddress=183.15.90.156 ||119.113.248.74^$all,~inline-font +*$all,ipaddress=119.113.248.74 ||175.0.95.85^$all,~inline-font +*$all,ipaddress=175.0.95.85 ||61.52.99.109^$all,~inline-font +*$all,ipaddress=61.52.99.109 ||222.142.183.194^$all,~inline-font +*$all,ipaddress=222.142.183.194 ||106.86.172.194^$all,~inline-font +*$all,ipaddress=106.86.172.194 ||103.233.216.77^$all,~inline-font +*$all,ipaddress=103.233.216.77 ||183.188.192.55^$all,~inline-font +*$all,ipaddress=183.188.192.55 ! https://www•virustotal•com/gui/file/3bf1b7e9bdaeaa4a5619cf26b59767637bc44193df2a0470df263b98b1fe47fe/community ||198.23.255.14^$all,~inline-font +*$all,ipaddress=198.23.255.14 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971512075 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-971495248 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/15/1.md#iocs @@ -4480,7 +4675,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||trumops.com^$doc ||runmodes.com^$all,~inline-font ||91.121.67.60^$all,~inline-font +*$all,ipaddress=91.121.67.60 ||172.67.186.189^$all,~inline-font +*$all,ipaddress=172.67.186.189 ! https://www•virustotal•com/gui/url/af8f443208f4e86d469549b219fccbeb43b7cae40be5f1b4c4e5083e27fc8111 ||inconclusive-pyrite-grandparent.glitch.me^$all,~inline-font ||delicate-tame-angora.glitch.me^$all,~inline-font @@ -4496,9 +4693,13 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||securefirst.us-east-1.linodeobjects.com^$all,~inline-font ! https://www•virustotal•com/gui/file/4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7/community ||39.65.72.211^$all,~inline-font +*$all,ipaddress=39.65.72.211 ||42.238.151.197^$all,~inline-font +*$all,ipaddress=42.238.151.197 ||27.213.60.53^$all,~inline-font +*$all,ipaddress=27.213.60.53 ||115.56.169.134^$all,~inline-font +*$all,ipaddress=115.56.169.134 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/21/1.md ||yasir252.com^$all,~inline-font ||safelink.kadal.club^$doc @@ -4519,8 +4720,10 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||newrrb.bid^$all,~inline-font ! https://www•virustotal•com/gui/file/2b2628a50d3b39b0fa2395d487bf62b00e37cdae847ff76ee58399bbe4e9f7b3/community ||194.87.138.20^$all,~inline-font +*$all,ipaddress=194.87.138.20 ! https://www•virustotal•com/gui/file/b320bc7a9151d70daca038c4356ca89bfcd4918bcd6f0f73683a27a6a72467ae/community ||103.167.92.73^$all,~inline-font +*$all,ipaddress=103.167.92.73 ! https://www•virustotal•com/gui/file/6146dfe56dcb49e1b843624a44e204754e15625a4f94b230b59a5cafc924f618/community ||bursakulis.com^$all,~inline-font ! https://www•virustotal•com/gui/url/b333c49efa4d399e65c5e2d96a905b380acbca58a3e3052b7bd7cfcb3e0e81ee @@ -4547,13 +4750,21 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||shadyclient.net^$all,~inline-font ! https://www•virustotal•com/gui/file/d546509ab6670f9ff31783ed72875dfc0f37fa2b666bd5870eecaaed2ebea4a8/community ||58.249.74.79^$all,~inline-font +*$all,ipaddress=58.249.74.79 ||27.45.14.109^$all,~inline-font +*$all,ipaddress=27.45.14.109 ||27.40.101.191^$all,~inline-font +*$all,ipaddress=27.40.101.191 ||27.45.119.22^$all,~inline-font +*$all,ipaddress=27.45.119.22 ||27.47.73.159^$all,~inline-font +*$all,ipaddress=27.47.73.159 ||115.204.119.237^$all,~inline-font +*$all,ipaddress=115.204.119.237 ||163.125.31.46^$all,~inline-font +*$all,ipaddress=163.125.31.46 ||163.179.168.44^$all,~inline-font +*$all,ipaddress=163.179.168.44 ! https://github.com/uBlockOrigin/uAssets/pull/10647 ! https://github.com/iam-py-test/investigations/blob/main/2021/11/28/1.md ||money-mod.com^$doc @@ -4569,16 +4780,27 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||download2264.mediafire.com/pnk44f5ci9rg/at2tvnao5x6ivdo/EngineOwning.rar^$all,~inline-font ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community ||110.89.59.135^$all,~inline-font +*$all,ipaddress=110.89.59.135 ||113.116.89.1^$all,~inline-font +*$all,ipaddress=113.116.89.1 ||119.183.146.191^$all,~inline-font +*$all,ipaddress=119.183.146.191 ||153.3.3.226^$all,~inline-font +*$all,ipaddress=153.3.3.226 ||182.116.104.6^$all,~inline-font +*$all,ipaddress=182.116.104.6 ||60.7.133.200^$all,~inline-font +*$all,ipaddress=60.7.133.200 ||122.6.254.201^$all,~inline-font +*$all,ipaddress=122.6.254.201 ||110.89.11.167^$all,~inline-font +*$all,ipaddress=110.89.11.167 ||171.112.177.90^$all,~inline-font +*$all,ipaddress=171.112.177.90 ||115.194.38.143^$all,~inline-font +*$all,ipaddress=115.194.38.143 ||61.52.79.32^$all,~inline-font +*$all,ipaddress=61.52.79.32 ! https://scammer•info/t/pihishing-site-claiming-to-hold-a-ups-package-that-needs-payment/84466 ://ups-dk.$doc,denyallow=dk|nu|se|no|fo|gl|ups.com,domain=ups-dk.* ! https://www•virustotal•com/gui/url/269d374b629d7896da1f9e7449bd5afecf6284a9a564244f96a71e5192363635?nocache=1 @@ -4609,6 +4831,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||dundeehills.group^$all,~inline-font !+ NOT_OPTIMIZED ||132.148.220.142^$doc +*$all,ipaddress=132.148.220.142 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-986306768 ||chess-progress.ru^$doc ||ouhastay.net^$all,~inline-font @@ -4627,18 +4850,28 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://github.com/iam-py-test/investigations/blob/main/2021/12/13/1.md ||haxpc.net^$all,~inline-font ||52.53.243.52^$all,~inline-font +*$all,ipaddress=52.53.243.52 ||34.201.22.10^$all,~inline-font +*$all,ipaddress=34.201.22.10 ! https://scammer.info/t/crypto-scammers-onceagain/85354 ||business.google.com/website/billyandscapedesign^$all,~inline-font ! https://www•virustotal•com/gui/file/12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef/community ||123.10.225.196^$all,~inline-font +*$all,ipaddress=123.10.225.196 ||122.192.106.84^$all,~inline-font +*$all,ipaddress=122.192.106.84 ||172.88.199.9^$all,~inline-font +*$all,ipaddress=172.88.199.9 ||114.38.176.185^$all,~inline-font +*$all,ipaddress=114.38.176.185 ||61.52.97.35^$all,~inline-font +*$all,ipaddress=61.52.97.35 ||27.206.181.208^$all,~inline-font +*$all,ipaddress=27.206.181.208 ||124.163.130.175^$all,~inline-font +*$all,ipaddress=124.163.130.175 ||118.75.87.102^$all,~inline-font +*$all,ipaddress=118.75.87.102 ! https://github.com/iam-py-test/investigations/blob/main/2021/12/14/1.md ||onemacusa.net^$all,~inline-font ! https://github.com/DevSpen/links/pull/3 @@ -4647,6 +4880,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||mozicrack.com^$all,~inline-font ||download-srvr.xyz^$all,~inline-font ||134.122.115.190^$all,~inline-font +*$all,ipaddress=134.122.115.190 ||cybermicto768jubileejhsye6yt6543.s3.us-east-1.amazonaws.com^$all,~inline-font ! https://github.com/uBlockOrigin/uBlock-issues/issues/1774#issuecomment-1000722777 ||viewty.xyz^$all,~inline-font @@ -4669,6 +4903,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://github.com/AdguardTeam/AdguardFilters/issues/103475 ||ru.com^$all,~inline-font ||141.8.226.34^$all,~inline-font +*$all,ipaddress=141.8.226.34 ! https://github.com/AdguardTeam/AdguardFilters/issues/108571 ||ston-app.com^$all,~inline-font ! fake human verification scam @@ -4685,6 +4920,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||splendid-fallacious-anaconda.glitch.me^$all,~inline-font ! https://www•virustotal•com/gui/file/9d40ae0439ddc594b2cf64e21ad0fdea9bb440524298e3a6bcfcc1fb417f1ed2/relations ||91.240.118.172^$all,~inline-font +*$all,ipaddress=91.240.118.172 ! "Press Allow to continue" ||kuyhaa-mee.com^$all,~inline-font ||waystriling.com^$all,~inline-font @@ -4730,6 +4966,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||freeversioncrack.com^$document ||top3hostngc.xyz^$all,~inline-font ||198.199.120.251^$all,~inline-font +*$all,ipaddress=198.199.120.251 ! https://www•telia.no/kundeservice/mobil/malware-flubot-android/ !+ NOT_OPTIMIZED /^https?://(www\.)?[a-z0-9-]{1,}\.[a-z]{2,17}/[a-z0-9]/\?[a-z0-9.-]{8,}$/$doc @@ -4753,7 +4990,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||partners-club.life^$all,~inline-font ||cumpussyy.uno^$all,~inline-font ||195.201.253.130^$doc +*$all,ipaddress=195.201.253.130 ||195.201.253.131^$doc +*$all,ipaddress=195.201.253.131 ! The bottom download button on https://www•sushichop•com/ ||installiq.com^$all,~inline-font ||specgoal.com^$all,~inline-font @@ -4773,10 +5012,15 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||rtbvrdirect.com^$doc,domain=~malware-redirection-trains.* ||cpmverdirect.com^$doc,domain=~malware-redirection-trains.* ||15.197.244.48^$doc +*$all,ipaddress=15.197.244.48 ||96.47.230.67^$doc +*$all,ipaddress=96.47.230.67 ||96.47.230.68^$doc +*$all,ipaddress=96.47.230.68 ||96.47.230.69^$doc +*$all,ipaddress=96.47.230.69 ||96.47.230.70^$doc +*$all,ipaddress=96.47.230.70 ! https://securitytrails•com/list/ns/ns1•fastthinkingdns•com ||highercaptcha-settle.$all,~inline-font ||highercaptchasettle.$all,~inline-font @@ -4817,6 +5061,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||viixes.com^$all,~inline-font ||viiyhn.com^$all,~inline-font ||31.220.27.134^$doc +*$all,ipaddress=31.220.27.134 ! https://github.com/AdguardTeam/AdguardFilters/issues/122757 ://adbrbk.$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/123544 @@ -5121,7 +5366,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ://178.253.54.$doc !#endif ||85.17.31.152^$all,~inline-font +*$all,ipaddress=85.17.31.152 ||95.211.26.202^$all,~inline-font +*$all,ipaddress=95.211.26.202 ! https://kommunikasjon.ntb.no/pressemelding/power-advarer-mot-sms-svindel?publisherId=17847615&releaseId=17937583 ||bzsx.link^$all,~inline-font ||dfvd.link^$all,~inline-font @@ -5136,7 +5383,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||ujtj.link^$all,~inline-font ||wznp.link^$all,~inline-font ||158.247.212.220^$doc +*$all,ipaddress=158.247.212.220 ||165.227.168.212^$doc +*$all,ipaddress=165.227.168.212 !#if !ext_ublock ! https://www•reddit.com/r/engrish/comments/w6u4uy/received_this_text_message_yesterday_i_am_very/ ://162.241.115.$doc @@ -5184,6 +5433,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||broburchrove.com^$all,~inline-font ||galantinkoling.com^$all,~inline-font ||23.81.64.183^$all,~inline-font +*$all,ipaddress=23.81.64.183 ! https://github.com/AdguardTeam/AdguardFilters/issues/125300 ||zikroarg.com^$all,~inline-font ||dooloust.net^$all,~inline-font @@ -5354,6 +5604,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||vooculok.com^$all,~inline-font ||mobytrks.com^$all,~inline-font,domain=~malware-redirection-trains.* ||139.45.197.236^$doc +*$all,ipaddress=139.45.197.236 ! https://github.com/AdguardTeam/AdguardFilters/issues/128029 ||becovi.com^$all,~inline-font ||becovi.co.uk^$all,~inline-font @@ -5382,8 +5633,11 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||frescopartito.com^$doc,popup ||motherpipe.net^$doc ||51.91.66.125^$doc +*$all,ipaddress=51.91.66.125 ||51.178.76.105^$doc +*$all,ipaddress=51.178.76.105 ||147.135.253.55^$doc +*$all,ipaddress=147.135.253.55 ! https://github.com/uBlockOrigin/uAssets/issues/14569 → https://www•virustotal•com/gui/url/b819586938326577d759d8024abe3e0e6de1c853d6b67824daf6f613fba0f63b/detection (https://app•any•run/tasks/5914a712-1a73-4432-b89a-ca0627a24ade) ||bnbdeal.net^$all,~inline-font ! https://github.com/AdguardTeam/AdguardFilters/issues/129414 @@ -5393,7 +5647,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] /^http://imgblaze.net/[a-z0-9]{6}$/$third-party,subdocument ! https://github.com/AdguardTeam/AdguardFilters/issues/131156 ||146.19.169.98^$doc +*$all,ipaddress=146.19.169.98 ||146.19.169.99^$doc +*$all,ipaddress=146.19.169.99 ! https://github.com/AdguardTeam/AdguardFilters/issues/132079 /pushredirect/?$doc,domain=~malware-redirection-trains.* ! https://github.com/AdguardTeam/AdguardFilters/issues/134355 @@ -7167,12 +7423,14 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||niderschlagsradar.de^$all,~inline-font ||2c236979-b1bb-4c7a-915c-df74dbad0d8c.s3.ap-northeast-2.amazonaws.com^$all,~inline-font ||69.162.80.56^$all,~inline-font +*$all,ipaddress=69.162.80.56 ! https://github.com/AdguardTeam/AdguardFilters/issues/134903 ||smartlink.name^$all,~inline-font ! Random Discord servers ||newntflix-$doc,popup ||giveawaycord.$all,~inline-font ||162.241.124.200^$doc +*$all,ipaddress=162.241.124.200 ! https://github.com/AdguardTeam/AdguardFilters/issues/135815 ||adsstar.in^$doc,popup ||clickcafe.in^$doc,popup @@ -7189,6 +7447,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||usanewstoday.club^$doc,popup ||webhostingtips.club^$doc,popup ||157.90.71.190^$doc +*$all,ipaddress=157.90.71.190 ! https://github.com/AdguardTeam/AdguardFilters/issues/135924 ||abazelfan.com^$all,~inline-font ||abburmyer.com^$all,~inline-font @@ -7426,6 +7685,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zagtertda.com^$all,~inline-font ||zoawufoy.net^$all,~inline-font ||139.45.197.239^$all,~inline-font +*$all,ipaddress=139.45.197.239 ! https://github.com/AdguardTeam/AdguardFilters/issues/136390 ||glthub.$document,popup ! https://app.any.run/tasks/67907c11-6877-4c38-932f-2cf09ee4e434 @@ -7626,8 +7886,11 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zaolutd.icu^$all,~inline-font ||zigaahm.icu^$all,~inline-font ||44.228.230.225^$doc +*$all,ipaddress=44.228.230.225 ||50.112.124.170^$doc +*$all,ipaddress=50.112.124.170 ||100.20.104.229^$doc +*$all,ipaddress=100.20.104.229 ! Spambots who posted malware shortener links in the Legitimate URL Shortener discussion thread ||link.sv^$doc,popup ||4.fo^$doc,popup @@ -7639,12 +7902,17 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||pressizer.net^$all,~inline-font ||sapino.net^$all,~inline-font ||44.236.213.34^$doc +*$all,ipaddress=44.236.213.34 ||52.24.156.12^$doc +*$all,ipaddress=52.24.156.12 ||52.25.6.134^$doc +*$all,ipaddress=52.25.6.134 ||100.20.13.49^$doc +*$all,ipaddress=100.20.13.49 ! https://github.com/AdguardTeam/AdguardFilters/issues/139667 ||goldmesoil.live^$all,~inline-font ||51.68.87.229^$all,~inline-font +*$all,ipaddress=51.68.87.229 ||f9dle.skin^$all,~inline-font ||kilpa2017.fi^$all,~inline-font ! https://github.com/DandelionSprout/adfilt/issues/747 @@ -9449,8 +9717,11 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||unity-download.org^$all,~inline-font ||webull-download.$all,~inline-font ||185.106.94.139^$doc +*$all,ipaddress=185.106.94.139 ||45.90.109.196^$doc +*$all,ipaddress=45.90.109.196 ||91.229.23.200^$all,~inline-font +*$all,ipaddress=91.229.23.200 ! https://github.com/DandelionSprout/adfilt/issues/63#issuecomment-1401711872 ! https://github.com/AdguardTeam/AdguardFilters/issues/144514 ||attractbestbonuses.life^$all,~inline-font @@ -9512,12 +9783,15 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||winbest.life^$all,~inline-font ||winmacros.life^$all,~inline-font ||185.155.184.98^$all,~inline-font +*$all,ipaddress=185.155.184.98 ||194.110.247.242^$all,~inline-font +*$all,ipaddress=194.110.247.242 ! https://new.reddit.com/r/engrish/comments/10zs6f6/low_budget_scam/ ||ups-addressed.me^$all,~inline-font ||ups-quote.me^$all,~inline-font ||meta-whatsapp.me^$all,~inline-font ||54.219.218.169^$doc +*$all,ipaddress=54.219.218.169 ! https://new.reddit.com/r/engrish/comments/10z8r2u/well_you_tried/ ||0365alert.com^$all,~inline-font ||0365online.com^$all,~inline-font @@ -9949,6 +10223,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||yourticketchance.com^$all,~inline-font ||yourorderupdate.com^$all,~inline-font ||64.132.201.92^$all,~inline-font +*$all,ipaddress=64.132.201.92 ! https://www•adressa.no/nyheter/trondheim/i/BWkdkw/trodde-hun-skulle-faa-en-pakke-i-posten-ble-lurt-for-titusener ||acessmygov.online^$all,~inline-font ||centerlinkmygov.com^$all,~inline-font @@ -9970,6 +10245,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||jatcraft.com^$all,~inline-font ||elimef.link^$doc ||209.141.51.49^$all,~inline-font +*$all,ipaddress=209.141.51.49 ://soekpakke*.blogspot.com^$all,~inline-font ||post-norway.web.app^$all,~inline-font ! https://github.com/AdguardTeam/AdguardFilters/issues/142955 @@ -10566,8 +10842,11 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zogrepsili.com^$all,~inline-font ! Unsuited for wildcarding ||208.88.225.116^$all,~inline-font +*$all,ipaddress=208.88.225.116 ||208.88.225.117^$all,~inline-font +*$all,ipaddress=208.88.225.117 ||208.88.225.119^$all,~inline-font +*$all,ipaddress=208.88.225.119 ! https://github.com/AdguardTeam/AdguardFilters/issues/144823 !+ NOT_OPTIMIZED ://landings.*_slots/?partner=$doc @@ -10670,9 +10949,13 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||wulfs-dcm.com^$all,~inline-font /zcvisitor/*?campaignid$doc ||3.231.116.86^$all,~inline-font +*$all,ipaddress=3.231.116.86 ||54.237.193.255^$all,~inline-font +*$all,ipaddress=54.237.193.255 ||3.231.137.120^$all,~inline-font +*$all,ipaddress=3.231.137.120 ||54.204.83.105^$all,~inline-font +*$all,ipaddress=54.204.83.105 ! https://github.com/DandelionSprout/adfilt/issues/808 ! https://www•mandiant.com/resources/blog/tracking-evolution-gootloader-operations (26/01/2023) ||jonathanbartz.com^$all,~inline-font @@ -10692,10 +10975,15 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||office-view.com^$all,~inline-font ||i-likefood.co^$doc ||108.61.242.65^$all,~inline-font +*$all,ipaddress=108.61.242.65 ||146.70.78.43^$all,~inline-font +*$all,ipaddress=146.70.78.43 ||87.120.254.39^$all,~inline-font +*$all,ipaddress=87.120.254.39 ||45.150.108.213^$all,~inline-font +*$all,ipaddress=45.150.108.213 ||92.204.160.240^$all,~inline-font +*$all,ipaddress=92.204.160.240 ! https://github.com/AdguardTeam/AdguardFilters/issues/148560 /land/*&afftrack=$doc,domain=~likely-a-malware-redirection.* ! Comments on Slack @@ -10851,6 +11139,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||watchrenewedcompletelyinfo-product.info^$all,~inline-font ||watchuberdevelopedinfo-product.info^$all,~inline-font ||34.200.46.148^$all,~inline-font +*$all,ipaddress=34.200.46.148 ||abstorick.com^$all,~inline-font ||affienness.com^$all,~inline-font ||ailippiess.co.in^$all,~inline-font @@ -10908,6 +11197,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||wuruclas.co.in^$all,~inline-font ||zondeucearixes.com^$all,~inline-font ||85.17.80.16^$all,~inline-font +*$all,ipaddress=85.17.80.16 ! https://www•adressa.no/nyheter/trondheim/i/Moq2wR/svindlere-kaarer-vinnere-i-konkurranser-gir-en-daarlig-foelelse-aa-forklare-at-dette-bare-er-tull ||sitey.me^$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/151479 @@ -11049,10 +11339,15 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||your-finance-now.com^$all,~inline-font ||your-survey-services.com^$all,~inline-font ||185.246.188.124^$all,~inline-font +*$all,ipaddress=185.246.188.124 ||185.246.188.125^$all,~inline-font +*$all,ipaddress=185.246.188.125 ||194.63.140.103^$all,~inline-font +*$all,ipaddress=194.63.140.103 ||194.63.143.61^$all,~inline-font +*$all,ipaddress=194.63.143.61 ||194.63.143.96^$all,~inline-font +*$all,ipaddress=194.63.143.96 ! https://github.com/AdguardTeam/AdguardFilters/issues/152945 ||moneystartup.live^$all,~inline-font ||fintechbest.online^$all,~inline-font @@ -11263,8 +11558,11 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zarta-news.com^$all,~inline-font ||zorka-news.com^$all,~inline-font ||37.48.80.112^$all,~inline-font +*$all,ipaddress=37.48.80.112 ||95.168.170.165^$all,~inline-font +*$all,ipaddress=95.168.170.165 ||213.227.149.216^$all,~inline-font +*$all,ipaddress=213.227.149.216 ! Slack comments ||cojcdn.net^$all,~inline-font ||collecl.cc^$all,~inline-font @@ -11291,7 +11589,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||totadblock.com^$all,~inline-font ||updateasap.online^$all,~inline-font ||109.206.168.16^$all,~inline-font +*$all,ipaddress=109.206.168.16 ||109.206.168.17^$all,~inline-font +*$all,ipaddress=109.206.168.17 ! https://github.com/AdguardTeam/AdguardFilters/issues/155298 ||cadstoppam.live^$all,~inline-font ||cottodwin.live^$all,~inline-font @@ -11308,6 +11608,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||showjoinnip.live^$all,~inline-font ||usedhutsold.live^$all,~inline-font ||57.128.71.215^$all,~inline-font +*$all,ipaddress=57.128.71.215 /^.*&[a-z]{1,2}=[a-zA-Z0-9]{0,}%[a-zA-Z0-9%]{1000,}$/$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/155936 ||truanet.com^$all,~inline-font @@ -12045,15 +12346,25 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zzebuh.com^$all,~inline-font ||zzrgab.com^$all,~inline-font ||37.1.223.231^$all,~inline-font +*$all,ipaddress=37.1.223.231 ||139.45.197.167^$all,~inline-font +*$all,ipaddress=139.45.197.167 ||139.45.197.245^$all,~inline-font +*$all,ipaddress=139.45.197.245 ||159.223.137.164^$all,~inline-font +*$all,ipaddress=159.223.137.164 ||185.56.234.205^$all,~inline-font +*$all,ipaddress=185.56.234.205 ||192.243.58.97^$all,~inline-font +*$all,ipaddress=192.243.58.97 ||192.243.58.98^$all,~inline-font +*$all,ipaddress=192.243.58.98 ||192.243.58.123^$all,~inline-font +*$all,ipaddress=192.243.58.123 ||192.243.58.124^$all,~inline-font +*$all,ipaddress=192.243.58.124 ||192.243.58.125^$all,~inline-font +*$all,ipaddress=192.243.58.125 ||[2a02:b48:207:1::2]^$all,~inline-font ||[2a02:b48:207:1::3]^$all,~inline-font ||[2a02:b48:207:1::6]^$all,~inline-font @@ -12433,8 +12744,11 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||wellnessfortune.net^$all,~inline-font ||ztomy.com^$all,~inline-font ||5.45.123.44^$all,~inline-font +*$all,ipaddress=5.45.123.44 ||69.16.230.226^$all,~inline-font +*$all,ipaddress=69.16.230.226 ||208.91.196.46^$all,~inline-font +*$all,ipaddress=208.91.196.46 /page/bouncy.php?$all,~inline-font ! https://github.com/AdguardTeam/AdguardFilters/issues/158316 ||abashfireworks.com^$all,~inline-font @@ -17011,6 +17325,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||ptwmjmp.com^$all,~inline-font ||wmptengate.com^$all,~inline-font ||93.93.51.223^$all,~inline-font +*$all,ipaddress=93.93.51.223 ||livejasmin.com/*&origin=$doc ! https://github.com/AdguardTeam/AdguardFilters/issues/161364 ! (https://github.com/AdguardTeam/AdguardBrowserExtension/issues/2497) @@ -17264,6 +17579,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||upstr.us^$all,~inline-font ||reschedule-delivery.ups.com.$doc ||103.174.102.240^$all,~inline-font +*$all,ipaddress=103.174.102.240 ! https://github.com/libre-tube/LibreTube/issues/4409 ||libretube.app^$all,~inline-font ||libretube.net^$all,~inline-font @@ -17414,6 +17730,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ! https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-7873648 ||monetrizer*.$all ||38.180.96.244^$all +*$all,ipaddress=38.180.96.244 ! https://github.com/AdguardTeam/AdguardFilters/issues/172569 ||acareewityjh.com^$all ||accedenonre.xyz^$all @@ -17751,7 +18068,9 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||yticaframeofm.com^$all ||yvaluationiamcur.com^$all ||34.195.224.242^$all +*$all,ipaddress=34.195.224.242 ||54.225.185.110^$all +*$all,ipaddress=54.225.185.110 &lp=not_robot_$all ||githubtalentcommunity.$all ! https://github.com/AdguardTeam/AdguardFilters/issues/173925 @@ -17762,6 +18081,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||dhlexpress-lieferung.net^$all,~inline-font ||pochta-ru.com^$all,~inline-font ||91.202.233.143^$all,~inline-font +*$all,ipaddress=91.202.233.143 ! Based on a tip from my secretary ||0842-3231-4323-4243-2344-1333-0595-3453-6439-7-3235-03928-2348.name^$all,~inline-font ||1-3evlhls3yf.shop^$all,~inline-font @@ -18118,6 +18438,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||systemnetworkroute.com^$all,~inline-font ||trafficredirectchain.com^$all,~inline-font ||108.62.157.10^$all,~inline-font +*$all,ipaddress=108.62.157.10 ! https://github.com/AdguardTeam/FiltersRegistry/issues/925 ! https://github.com/AdguardTeam/FiltersRegistry/pull/927 ||avito.avito.avito.$all @@ -18132,15 +18453,25 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||booking.com-id*$all ! https://github.com/AdguardTeam/AdguardFilters/issues/179170 ||172.240.108.68^$all,~inline-font +*$all,ipaddress=172.240.108.68 ||172.240.108.76^$all,~inline-font +*$all,ipaddress=172.240.108.76 ||172.240.108.84^$all,~inline-font +*$all,ipaddress=172.240.108.84 ||172.240.127.234^$all,~inline-font +*$all,ipaddress=172.240.127.234 ||172.240.253.132^$all,~inline-font +*$all,ipaddress=172.240.253.132 ||192.243.59.12^$all,~inline-font +*$all,ipaddress=192.243.59.12 ||192.243.59.13^$all,~inline-font +*$all,ipaddress=192.243.59.13 ||192.243.59.20^$all,~inline-font +*$all,ipaddress=192.243.59.20 ||192.243.61.225^$all,~inline-font +*$all,ipaddress=192.243.61.225 ||192.243.61.227^$all,~inline-font +*$all,ipaddress=192.243.61.227 ||0sntp7dnrr.com^$all,~inline-font ||0x01n2ptpuz3.com^$all,~inline-font ||2e8dgn8n0e0l.com^$all,~inline-font @@ -21119,6 +21450,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zipinaccurateoffering.com^$all,~inline-font ! https://github.com/AdguardTeam/AdguardFilters/issues/181966 ||167.71.252.38^$all +*$all,ipaddress=167.71.252.38 ! https://github.com/AdguardTeam/AdguardFilters/issues/183432 ||100carbures.com^$all,~inline-font ||123ecos.com^$all,~inline-font @@ -22229,9 +22561,13 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zoomdirectory.net^$all,~inline-font ||zymstr.com^$all,~inline-font ||185.149.120.161^$all,~inline-font +*$all,ipaddress=185.149.120.161 ||185.149.120.163^$all,~inline-font +*$all,ipaddress=185.149.120.163 ||185.149.120.173^$all,~inline-font +*$all,ipaddress=185.149.120.173 ||185.149.120.175^$all,~inline-font +*$all,ipaddress=185.149.120.175 ! https://github.com/AdguardTeam/AdguardFilters/issues/184671 ||2rlive.com^$all ||afro-melanin.com^$all @@ -22395,6 +22731,7 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||zglobalindia.com^$all ||zircontahafuz.com^$all ||185.149.120.173^$all +*$all,ipaddress=185.149.120.173 ! https://sol•no/81812194/ / https://github.com/DandelionSprout/adfilt/discussions/932#discussioncomment-10360231 ||02helpinfo.com^$all ||02rebill-pending.com^$all @@ -22884,23 +23221,41 @@ zombooru.com##a[href$="ttp://www.hard55.com"] ||yourtollbymailnyfile.com^$all ||youweb-bpm.com^$all ||45.202.32.3^$all +*$all,ipaddress=45.202.32.3 ||45.8.92.138^$all +*$all,ipaddress=45.8.92.138 ||79.133.46.252^$all +*$all,ipaddress=79.133.46.252 ||82.147.85.156^$all +*$all,ipaddress=82.147.85.156 ||91.212.166.16^$all +*$all,ipaddress=91.212.166.16 ||94.156.64.129^$all +*$all,ipaddress=94.156.64.129 ||94.232.249.61^$all +*$all,ipaddress=94.232.249.61 ||94.232.249.69^$all +*$all,ipaddress=94.232.249.69 ||94.232.249.75^$all +*$all,ipaddress=94.232.249.75 ||94.232.249.235^$all +*$all,ipaddress=94.232.249.235 ||176.111.174.118^$all +*$all,ipaddress=176.111.174.118 ||176.113.115.191^$all +*$all,ipaddress=176.113.115.191 ||191.96.224.140^$all +*$all,ipaddress=191.96.224.140 ||193.124.185.42^$all +*$all,ipaddress=193.124.185.42 ||193.143.1.45^$all +*$all,ipaddress=193.143.1.45 ||193.143.1.214^$all +*$all,ipaddress=193.143.1.214 ||193.143.1.217^$all +*$all,ipaddress=193.143.1.217 ||208.91.189.203^$all +*$all,ipaddress=208.91.189.203 !#if !ext_ublock ://193.143.1.*$doc !#endif @@ -24542,8 +24897,11 @@ toorgle.net##.join ||zypy2h6rgfux.com^$all,~inline-font ||zzdb5p4upiug.com^$all,~inline-font ||192.243.59.12^$doc +*$all,ipaddress=192.243.59.12 ||192.243.59.13^$doc +*$all,ipaddress=192.243.59.13 ||192.243.59.20^$doc +*$all,ipaddress=192.243.59.20 !#if !ext_ublock /^(https?://)?192\.243\.59\.\d{1,3}($|/)/$doc !#endif @@ -24577,9 +24935,13 @@ toorgle.net##.join ||skinosoda.online^$all,~inline-font ||194.226.139.121^$all,~inline-font +*$all,ipaddress=194.226.139.121 ||194.226.139.7^$all,~inline-font +*$all,ipaddress=194.226.139.7 ||95.181.157.36^$all,~inline-font +*$all,ipaddress=95.181.157.36 ||95.181.172.204^$all,~inline-font +*$all,ipaddress=95.181.172.204 !#if !ext_ublock ://194.226.139.$doc ! AS209813 (https://github.com/AdguardTeam/AdguardFilters/issues/114618#issuecomment-1100702530; currently specific to tools that support CIDR blocking) @@ -25190,6 +25552,7 @@ toorgle.net##.join ||sidenoteconcern.com^$all,~inline-font ||abnegationbanquet.com^$all,~inline-font ||192.243.61.225^$doc +*$all,ipaddress=192.243.61.225 ! https://twitter•com/medicinehelp/status/1550250932394409985 ! https://securitytrails•com/list/ip/147•135•16•27 ||2spendless.$doc @@ -25247,6 +25610,7 @@ toorgle.net##.join ||medicinecoupons.xyz^$doc ||medicinehelp.news^$doc ||147.135.16.27^$doc +*$all,ipaddress=147.135.16.27 ! https://www•google.no/search?q=mlp+g5&newwindow=1&tbm=isch&oq=mlp+g5&sclient=img ||ingeniovirtual.com^$doc ! Spambot posts on Tumblr (19/09/2022) @@ -25262,6 +25626,7 @@ apkfab.com##.tip-extension ||1pwk1j.cyou^$all,~inline-font ||986.group^$all,~inline-font ||185.87.148.199^$doc +*$all,ipaddress=185.87.148.199 ! Google results for 'horse tales: emerald valley ranch mobygames' (05/11/2022) ||imaot.co.il/ContentArea/BannerClick^$all,~inline-font ||q1065.fm/redirect^$all,~inline-font,domain=~malware-redirection-results.* @@ -25274,6 +25639,7 @@ apkfab.com##.tip-extension ||gacorhub.com^$all,~inline-font ||zh1653.com^$all,~inline-font ||45.136.49.35^$doc +*$all,ipaddress=45.136.49.35 ||semex.com/popurl.cgi^$all,~inline-font,domain=~malware-redirection-results.* ||pharmanimal.com/catalog/redirect.php^$all,~inline-font,domain=~malware-redirection-results.* ! Browsing around for Tajik newssites @@ -25328,10 +25694,15 @@ apkfab.com##.tip-extension ||cityratetod.live^$all,~inline-font ||onlymetsure.live^$all,~inline-font ||51.91.211.94^$all,~inline-font +*$all,ipaddress=51.91.211.94 ||162.19.71.16^$all,~inline-font +*$all,ipaddress=162.19.71.16 ||146.59.240.191^$all,~inline-font +*$all,ipaddress=146.59.240.191 ||54.37.5.34^$all,~inline-font +*$all,ipaddress=54.37.5.34 ||54.36.118.105^$all,~inline-font +*$all,ipaddress=54.36.118.105 ! Work put into https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GDPR%20451%20List.txt ||highlandnews.com^$all,~inline-font ||genuinescansupport.com^$all,~inline-font @@ -25359,6 +25730,7 @@ apkfab.com##.tip-extension ||networkprincple.com^$all,~inline-font ||pcnetworkdefense.com^$all,~inline-font ||159.89.10.102^$all,~inline-font +*$all,ipaddress=159.89.10.102 ! Other ||foxsportnetwork.com^$all,~inline-font ||pksauniversity.com^$all,~inline-font @@ -25383,6 +25755,7 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||nuouther.com^$all,~inline-font ||carpiesi.com^$all,~inline-font ||104.206.252.90^$all,~inline-font +*$all,ipaddress=104.206.252.90 ! https://github.com/blocklistproject/Lists/issues/933 ||jNKmS0zFuEh.click^$all,~inline-font ||pjljo54uk.click^$all,~inline-font @@ -25407,6 +25780,7 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||yuppdownload.com^$all,~inline-font ! Commonly set as a proxy on hacked devices (https://www.virustotal.com/gui/url/e610e7d09c614529cb8c64185717769946f5c86044ac5c31c6608e604995f577/detection) ||34.80.59.191^$all,~inline-font +*$all,ipaddress=34.80.59.191 ! Various domains on https://securitytrails•com/list/ip/72•14•178•174 |http://www6.$doc,domain=~often-used-in-malware-redirections.* |http://www1.*&kw$doc,domain=~often-used-in-malware-redirections.* @@ -25415,17 +25789,29 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||kusubooru.com^$all,~inline-font ||wh40kart.im^$all,~inline-font ||45.33.2.79^$doc +*$all,ipaddress=45.33.2.79 ||45.33.18.44^$doc +*$all,ipaddress=45.33.18.44 ||45.33.20.235^$doc +*$all,ipaddress=45.33.20.235 ||45.33.23.183^$doc +*$all,ipaddress=45.33.23.183 ||45.33.30.197^$doc +*$all,ipaddress=45.33.30.197 ||45.56.79.23^$doc +*$all,ipaddress=45.56.79.23 ||45.79.19.196^$doc +*$all,ipaddress=45.79.19.196 ||72.14.178.174^$doc +*$all,ipaddress=72.14.178.174 ||72.14.185.43^$doc +*$all,ipaddress=72.14.185.43 ||96.126.123.244^$doc +*$all,ipaddress=96.126.123.244 ||173.255.194.134^$doc +*$all,ipaddress=173.255.194.134 ||198.58.118.167^$doc +*$all,ipaddress=198.58.118.167 ! https://hutudole•com/za-mu-%c9%93ullo-da-matakan-da-za-su-hana-al%c6%99alai-kwa%c9%97ayin-cin-hanci-ba-tinubu/ ||123chance.net^$all,~inline-font ||123links4u.net^$all,~inline-font @@ -25804,11 +26190,17 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] ||zebramode.com^$all,~inline-font ||zebraoffers.net^$all,~inline-font ||34.117.199.78^$all,~inline-font +*$all,ipaddress=34.117.199.78 ||94.237.103.119^$all,~inline-font +*$all,ipaddress=94.237.103.119 ||94.237.84.54^$all,~inline-font +*$all,ipaddress=94.237.84.54 ||94.237.93.242^$all,~inline-font +*$all,ipaddress=94.237.93.242 ||94.237.99.118^$all,~inline-font +*$all,ipaddress=94.237.99.118 ||139.45.197.249^$all,~inline-font +*$all,ipaddress=139.45.197.249 ! https://dnpedia•com/tlds/topm•php bizarrely listing "anahitagirted•uno" as the 622th most visited domain worldwide ||acorusinfield.life^$all,~inline-font ||acridlydebit.live^$all,~inline-font @@ -26209,12 +26601,19 @@ cdburnerxp.se##[href*="/downloadsetup.exe"] *skobutikks.com^$doc *butikksoslo.com^$doc ||196.196.153.151^$all,~inline-font +*$all,ipaddress=196.196.153.151 ||158.222.7.116^$all,~inline-font +*$all,ipaddress=158.222.7.116 ||196.245.152.139^$all,~inline-font +*$all,ipaddress=196.245.152.139 ||165.231.251.197^$all,~inline-font +*$all,ipaddress=165.231.251.197 ||196.242.16.29^$all,~inline-font +*$all,ipaddress=196.242.16.29 ||165.231.4.90^$all,~inline-font +*$all,ipaddress=165.231.4.90 ||158.222.7.83^$all,~inline-font +*$all,ipaddress=158.222.7.83 ! Spam on W.I.T.C.H. and Winx text search results tumblr.com#?#div[tabindex][style]:has(a[href*="tinyurl."]:has-text(_1+8_)) tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) @@ -26279,6 +26678,7 @@ tumblr.com#?#div[tabindex][style]:has(a[href*="://cutt.ly/"]) ||your-ups-track.com^$all,~inline-font ||zoll-pakete-support.com^$all,~inline-font ||95.214.26.78^$all,~inline-font +*$all,ipaddress=95.214.26.78 ! Overly dedicated E-mail spammers ||wirexapp.africa.com^$all ||tachyoniums.eu.com^$all @@ -26289,7 +26689,9 @@ tumblr.com#?#:is(.post,div[data-cell-id][style]:not([data-cell-id*=carousel]),di tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[data-id]:not([class*=" "]),:not([style],[class]))):has(a[rel=author]:has-text(/^[a-z]{2,6}-[a-z]{2,8}\d{2}$/i)):has-text(/^.*(18|sex|squirt|bo{2}ty).*$/i) ||deltacorriher.best^$all,~inline-font ||104.21.82.132^$doc,popup +*$all,ipaddress=104.21.82.132 ||172.67.158.57^$doc,popup +*$all,ipaddress=172.67.158.57 ||[2606:4700:3030::6815:5284]^$doc,popup ||[2606:4700:3037::ac43:9e39]^$doc,popup ! Google results for «SodaStream site:no cranberry» @@ -26316,11 +26718,14 @@ tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[dat ||sirdayscare.info^$all,~inline-font ||slownansuch.info^$all,~inline-font ||185.155.184.57^$all,~inline-font +*$all,ipaddress=185.155.184.57 ||185.155.186.24^$all,~inline-font +*$all,ipaddress=185.155.186.24 ||usayn.fr^$all,~inline-font ||style-js.com^$all,~inline-font /a.aspx?cid=*&cname=^$all,~inline-font ||209.74.107.131^$all,~inline-font +*$all,ipaddress=209.74.107.131 ||qidjrsgroup.shop^$all,~inline-font /flying.asp?cid=$all,~inline-font /kjyo.php?cname=$all,~inline-font @@ -26394,7 +26799,9 @@ tumblr.com#?#:is(.post,div[data-cell-id][style],div[tabindex]:is([style^=m],[dat ||xgptw11vogsh.com^$all,~inline-font ||zeirj14ikqwf.com^$all,~inline-font ||69.172.200.185^$all,~inline-font +*$all,ipaddress=69.172.200.185 ||77.220.214.153^$all,~inline-font +*$all,ipaddress=77.220.214.153 ! More search terms than what can be counted with a supercomputer (11/03/2024) google.*##div[data-attrid^="images "]:has-text(/, [1-9][1-46-9]% OF{2}/) ! Scam E-mails I've got @@ -26853,6 +27260,7 @@ www.microsoft.com##a[data-pfns][href*=pac-men] ||s.free.fr^$all ||trmff.wpengine.com^$all ||212.27.60.108^$all +*$all,ipaddress=212.27.60.108 !#if !adguard !#include uBO%20list%20extensions/AdGuardSafeBrowsing-ReverseEngineered.txt