diff --git a/rule/Twitter.json b/rule/Twitter.json
index e427f5a..02ace6f 100644
--- a/rule/Twitter.json
+++ b/rule/Twitter.json
@@ -66,7 +66,6 @@
     {
       "ip_cidr": [
         "192.133.76.0/22",
-        "199.16.156.0/22",
         "199.59.148.0/22",
         "199.96.56.0/21",
         "202.160.128.0/22",
diff --git a/rule/Twitter.srs b/rule/Twitter.srs
index 1be08d6..e7e9796 100644
Binary files a/rule/Twitter.srs and b/rule/Twitter.srs differ
diff --git a/rule/adrules_domainset.json b/rule/adrules_domainset.json
index 9c79a0c..f637bf8 100644
--- a/rule/adrules_domainset.json
+++ b/rule/adrules_domainset.json
@@ -1905,6 +1905,7 @@
         "4l903.com",
         "4lhq0cplb.com",
         "4link.it",
+        "4lke.online",
         "4luckyf.com",
         "4mads.com",
         "4mlhn1ocg4.com",
@@ -2039,6 +2040,7 @@
         "53c2dtzsj7t1.top",
         "53kf.com",
         "53ynh.xyz",
+        "542199235l.com",
         "544c1a86a1.com",
         "5475feaab.clicknplay.to",
         "54askjdklm.xyz",
@@ -18360,6 +18362,7 @@
         "astehaub.net",
         "astemolgachan.com",
         "asterbiscusys.com",
+        "asterglobal.com",
         "asterpix.com",
         "asterrakionor.com",
         "astervell.fun",
@@ -18967,6 +18970,7 @@
         "autotesla.org",
         "autotrack.studyquicks.com",
         "autoua.com",
+        "autoupdate.com.ua",
         "autous.ru",
         "autovista-fi.autovistagroup.com",
         "autovista-fr.autovistagroup.com",
@@ -19072,7 +19076,6 @@
         "avito.avito.avito.booking.com-id20341.info",
         "avito.avito.avito.booking.com-id90123.info",
         "avito.avito.avito.www.booking.com-id809702.com",
-        "avito.avito.com-id809712.com",
         "avito.avito.pay.avito.avito.booking.com-id809702.com",
         "avito.avito.sber.avito.www.booking.com-id809702.com",
         "avito.avito.sber.booking.com-id809702.com",
@@ -19244,6 +19247,7 @@
         "awsexam.quantresear.ch",
         "awsmer.com",
         "awsnjsduyhgpk.com",
+        "awsserver903203232.s3.sa-east-1.amazonaws.com",
         "awstaticdn.net",
         "awsurveys.com",
         "awsuvx.lavprisvvs.dk",
@@ -23932,7 +23936,6 @@
         "bruny.net.anwalt.de",
         "brupu.com",
         "brusselssprout.blob.core.windows.net",
-        "brusuax.com",
         "brutalconfer.com",
         "bruteknack.com",
         "brvallsrentacar.eccocar.com",
@@ -25505,6 +25508,7 @@
         "card-tindung.com",
         "card.getgifted.com",
         "card.pingpro.com",
+        "cardadvantagecast.com",
         "carderprofit.ws",
         "carderx.com",
         "cardexchanges.carte-gr.total.fr",
@@ -25637,7 +25641,6 @@
         "casadelteatro.org.co",
         "casalemedia.com",
         "casalmedia.com",
-        "casamuseoayerbe.co",
         "casaqueapogamy.com",
         "cascade-wow.eu",
         "cascadewatchful.com",
@@ -26037,6 +26040,7 @@
         "cctrkom.creditcards.com",
         "ccudl.com",
         "ccwxma.xyz",
+        "cczhk.com",
         "cczqyvuy812jdy.com",
         "ccztgy.elgiganten.dk",
         "cd-ads.com",
@@ -27110,6 +27114,7 @@
         "checkmygeo.com",
         "checkout360now.net",
         "checkoutfree.com",
+        "checkpoint.up4download.xyz",
         "checkpointcharlie.heizung.de",
         "checkru.net",
         "checkskins.com",
@@ -29620,6 +29625,7 @@
         "colovepuquina.guru",
         "coltagainst.pro",
         "colum-rvb.com",
+        "columbiatopdeals.com",
         "columbine.ir",
         "columbustech.tcsg.edu",
         "columngenuinedeploy.com",
@@ -32590,6 +32596,7 @@
         "cumhiwdfoagk.com",
         "cuminside.club",
         "cumjroatzga.com",
+        "cumshot.vip",
         "cumult.com",
         "cunasdonat.com",
         "cunazarp.website",
@@ -32947,7 +32954,6 @@
         "cynes-gwf.com",
         "cynicalspireheroism.com",
         "cynorix.com",
-        "cynshare.com",
         "cyntgd.anticipazionitv.it",
         "cyohmj.catawiki.com",
         "cyonix.to",
@@ -37664,7 +37670,6 @@
         "dichvuvietnam.pw",
         "dicinging.co.in",
         "dicknearbyaircraft.com",
-        "diclegrup.org",
         "diclotrans.com",
         "dicotrebill.digital",
         "dicouksa.com",
@@ -37827,6 +37832,7 @@
         "digitalpush.org",
         "digitaltarget.ru",
         "digitalthrottle.com",
+        "digitalvtu.com.ng",
         "digitalworkplace.ricoh.fr",
         "digitalworkzone.com",
         "digitizeforme.com",
@@ -38526,6 +38532,7 @@
         "dl-test.rivafashion.com",
         "dl-vip.bav.baidu.com",
         "dl-vip.pcfaster.baidu.co.th",
+        "dl.1003b.56a.com",
         "dl.198424.com",
         "dl.4buy.net",
         "dl.4kporn.xxx",
@@ -42372,6 +42379,7 @@
         "emetriq.de",
         "emgers.pe",
         "emgthropositeas.info",
+        "emgvod.com",
         "emicalcove.xyz",
         "emicom.pe",
         "emigrantblunder.com",
@@ -44285,6 +44293,7 @@
         "exitfuel.com",
         "exitintel.com",
         "exitmonitor.com",
+        "exks.members.openarmscv.com",
         "exlusepolly.com",
         "exmarketplace.com",
         "exmarkt.de",
@@ -44421,7 +44430,6 @@
         "express-gens.com",
         "express-submit.de",
         "expressalike.com",
-        "expresscourier.delivery",
         "expressgrab.com",
         "expressionsofwood.ca",
         "expressmoney.cc",
@@ -46563,6 +46571,7 @@
         "fiwyjar.cn",
         "fix-apple-maan-error.info",
         "fix-files.com",
+        "fix-live.tech",
         "fix-system-security-virus-alert.info",
         "fix.hpplay.cn",
         "fixabu.ru",
@@ -48632,6 +48641,7 @@
         "fumanhua88.info",
         "fumarinpest.com",
         "fumeiti.cc",
+        "fumekart.com",
         "fumersoctoon.com",
         "fumiad.dxys.pro",
         "fummkxa.com",
@@ -49809,7 +49819,6 @@
         "ge6.getfto.com",
         "ge8.getfto.com",
         "gea-exchange-03.net.jumia.ug",
-        "geaapy.com",
         "gear.echovisuals.com",
         "gearanime.com",
         "gearedftnerr.com",
@@ -53843,6 +53852,7 @@
         "hablvsmnr.com",
         "habovethecity.info",
         "habovethecityon.info",
+        "habrafa.com",
         "habrasysteleii.xyz",
         "habrox.xyz",
         "habusima.uno",
@@ -54669,10 +54679,8 @@
         "hbjolp.xyz",
         "hbkpcwdxite.com",
         "hbkunye.com",
-        "hblmbtbm.beget.tech",
         "hblnqr.blackwidowpro.com",
         "hbloveinfo.com",
-        "hbm.sync.oystergardens.club",
         "hbmkglobal.com",
         "hbmode.com",
         "hbnursery.com",
@@ -59226,7 +59234,6 @@
         "indoleads.com",
         "indolentleader.com",
         "indomarineshipchandler.com",
-        "indonesias.me",
         "indooritalian.com",
         "indraftcoft.digital",
         "indratankman.com",
@@ -61810,6 +61817,7 @@
         "jakeycorkage.digital",
         "jakid.xyz",
         "jakj.settings.oysterfloats.org",
+        "jakkesalgs.com",
         "jaletemetia.com",
         "jalewaads.com",
         "jaloppystudy.life",
@@ -62668,7 +62676,6 @@
         "job4pals.biz",
         "jobappplus.actonservice.com",
         "jobbio.com",
-        "jobcity.com",
         "jobfilletfortitude.com",
         "joblouder.com",
         "jobmandate.com",
@@ -63432,6 +63439,7 @@
         "jwnmnnnzrebqa.top",
         "jwnmnnnzreeyw.top",
         "jwpltx.com",
+        "jwqr.members.openarmscv.com",
         "jwqtuyjqxvsxy.com",
         "jwronx.xyz",
         "jwrrwzrrwqmj.top",
@@ -64778,6 +64786,7 @@
         "kodu.neti.ee",
         "koekd.xyz",
         "kofirusy.pro",
+        "kog.day.50adayplan.com",
         "kogaqmlci.com",
         "kognoaka.net",
         "kogtrmjz.xyz",
@@ -68265,7 +68274,6 @@
         "lividn.com",
         "livingshonghealth.com",
         "livingsleet.com",
-        "livmesilovess.pro",
         "livquxokndfe.com",
         "livreral.fr",
         "livrfufzios.com",
@@ -69916,6 +69924,7 @@
         "lunyfallace.com",
         "lunylarynx.uno",
         "luodiye01.cn",
+        "luofk.xyz",
         "luogod.xyz",
         "luolitang.com",
         "luoyangjinmeii.com",
@@ -70195,7 +70204,6 @@
         "lzthjd.cn",
         "lzuc.sfr.fr",
         "lzupkz.com",
-        "lzv.sync.oystergardens.club",
         "lzvjtxe.xyz",
         "lzvkmwyavjeeb.top",
         "lzvwxy.hometogo.pl",
@@ -72913,7 +72921,6 @@
         "maximumductpictorial.com",
         "maximumimmortality.com",
         "maximus-time.net",
-        "maxmoney.com",
         "maxmusics.com",
         "maxmydl.com",
         "maxonclick.com",
@@ -73417,7 +73424,6 @@
         "medcar.com.tn",
         "meddleachievehat.com",
         "meddlekilled.com",
-        "medfioytrkdkcodlskeej.net",
         "medfoodsafety.com",
         "medfoodspace.com",
         "medfoodtech.com",
@@ -73953,6 +73959,7 @@
         "merita.ir",
         "meritedgasser.com",
         "meriwest.actonservice.com",
+        "merketsignets.site",
         "merligopotlid.com",
         "mermenmanzil.life",
         "meromou.ru",
@@ -78191,6 +78198,7 @@
         "muzotur.info",
         "muzsj.com",
         "muzzlematrix.com",
+        "muzzumilruheel.com",
         "mv0129.stream",
         "mva1.maeva.com",
         "mvads.kugou.com",
@@ -79366,7 +79374,6 @@
         "navi39.ru",
         "navi4.com",
         "navi40.com",
-        "navi42.ru",
         "navi45.ru",
         "navi47.com",
         "navi5.com",
@@ -80678,6 +80685,7 @@
         "ninzatool.pw",
         "nip1.com",
         "nip10.com",
+        "nip12.com",
         "nip13.com",
         "nip17.com",
         "nip2.com",
@@ -82740,6 +82748,7 @@
         "oj.likewut.net",
         "oj2q8.montecarlosbm.book-secure.com",
         "ojafexcbndql.com",
+        "ojang.pe.kr",
         "ojapanelm.xyz",
         "ojbkmcsdx.xyz",
         "ojbrtkrvew.com",
@@ -84052,7 +84061,6 @@
         "orcjagpox.com",
         "ordbzeokdxku.com",
         "ordealsreannoy.top",
-        "orderedami.com",
         "orderfritter.com",
         "orderlymall.pro",
         "orderlyregister.pro",
@@ -85581,6 +85589,7 @@
         "partlytrouble.com",
         "partner-ads.com",
         "partner-affilbox.telly.cz",
+        "partner-app.softwareselect.com",
         "partner-earning.com",
         "partner-staging.miso.kr",
         "partner-ts.groupon.be",
@@ -86352,23 +86361,18 @@
         "pay.avito.avito.avito.sber.avito.com-id02349.info",
         "pay.avito.avito.avito.sber.booking.com-id90123.info",
         "pay.avito.avito.avito.sber.com-id20341.info",
-        "pay.avito.avito.avito.www.booking.com-id809712.com",
         "pay.avito.avito.avito.www.booking.com-id90123.info",
         "pay.avito.avito.com-id02349.info",
         "pay.avito.avito.com-id809702.com",
         "pay.avito.avito.pay.avito.avito.booking.com-id90123.info",
-        "pay.avito.avito.pay.www.booking.com-id809712.com",
         "pay.avito.avito.sber.booking.com-id90123.info",
         "pay.avito.avito.sber.com-id02349.info",
         "pay.avito.avito.sber.com-id20341.info",
         "pay.avito.avito.www.booking.com-id809702.com",
         "pay.avito.booking.com-id809702.com",
-        "pay.avito.booking.com-id809712.com",
         "pay.avito.booking.com-id90123.info",
         "pay.avito.com-id809702.com",
         "pay.avito.com-id90123.info",
-        "pay.avito.pay.com-id3212341.info",
-        "pay.avito.pay.www.booking.com-id809712.com",
         "pay.avito.sber.avito.com-id02349.info",
         "pay.avito.sber.avito.www.booking.com-id809702.com",
         "pay.avito.sber.booking.com-id809702.com",
@@ -86381,7 +86385,6 @@
         "pay.avito.www.booking.com-id90123.info",
         "pay.ayazprak.com",
         "pay.booking.com-id20341.info",
-        "pay.booking.id19045617.info",
         "pay.com-id20341.info",
         "pay.com-id409712.com",
         "pay.com-id809702.com",
@@ -86469,6 +86472,7 @@
         "pbhjohrx.xyz",
         "pbhrwhehnyibit.com",
         "pbid.iforex.com",
+        "pbjs-stream.bydata.com",
         "pbjs.sskzlabs.com",
         "pblcpush.com",
         "pblinq.com",
@@ -88022,6 +88026,7 @@
         "pjyvgdpvjp.com",
         "pjzgggywd.com",
         "pjzmbhf.cn",
+        "pjzxdl.xyz",
         "pk.tawersasocial.com",
         "pk1u.melanielyne.com",
         "pk840.com",
@@ -88851,7 +88856,6 @@
         "poneycurnies.com",
         "pongidsrunback.com",
         "ponierpeewees.digital",
-        "ponizinny.nl",
         "ponk.pro",
         "ponnerhut.com",
         "pontent.powzers.lol",
@@ -89699,6 +89703,7 @@
         "priestsuede.com",
         "prijavi.net",
         "prilosec.1.p2l.info",
+        "primalbrainhacks.com",
         "primalredfish.com",
         "primary.hasegawa.jp",
         "primaryads.com",
@@ -90309,7 +90314,6 @@
         "protapes.actonservice.com",
         "protawe.com",
         "proteavoices.com",
-        "protechasia.com",
         "protecmedia.com",
         "protect-x.com",
         "protect-your-privacy.net",
@@ -95505,6 +95509,7 @@
         "ronm.top",
         "rontar.com",
         "roobbet.com",
+        "roofing.galacticleads.com",
         "roofprison.com",
         "rooglomitaiy.com",
         "roohoozy.net",
@@ -97906,7 +97911,6 @@
         "sbecashqjk.com",
         "sber.avito.avito.avito.booking.com-id809702.com",
         "sber.avito.avito.www.booking.com-id809702.com",
-        "sber.avito.booking.com-id3212341.info",
         "sber.avito.pay.avito.avito.booking.com-id809702.com",
         "sber.avito.pay.avito.avito.booking.com-id90123.info",
         "sber.avito.sber.avito.www.booking.com-id809702.com",
@@ -97958,6 +97962,7 @@
         "sberbank.avito.sber.booking.com-id90123.info",
         "sberbank.avito.sber.com-id02349.info",
         "sberbank.avito.sber.com-id809702.com",
+        "sberbank.avito.sber.com-id809712.com",
         "sberbank.avito.sber.sber.booking.com-id90123.info",
         "sberbank.avito.www.avito.www.booking.com-id90123.info",
         "sberbank.avito.www.booking.com-id20341.info",
@@ -97975,6 +97980,7 @@
         "sberbank.pay.avito.avito.booking.com-id90123.info",
         "sberbank.pay.avito.avito.com-id90123.info",
         "sberbank.pay.booking.com-id809702.com",
+        "sberbank.pay.com-id809712.com",
         "sberbank.pay.www.booking.com-id809702.com",
         "sberbank.sber.booking.com-id20341.info",
         "sberbank.sber.booking.com-id90123.info",
@@ -100523,6 +100529,7 @@
         "shinystat.shiny.it",
         "shiokambing2.com",
         "shiowbafrrra.com",
+        "shipminttracking.net",
         "shipostrich.com",
         "shippinginsights.com",
         "shippingswimsuitflog.com",
@@ -101055,6 +101062,7 @@
         "shorantonto.com",
         "shoresmmrnews.com",
         "shoril.com",
+        "short-bear-15.telebit.io",
         "short-share.com",
         "short-video.kakamobi.cn",
         "short.afgruppen.no",
@@ -101651,6 +101659,7 @@
         "sizesidewalk.com",
         "siziermamas.com",
         "sizmek.com",
+        "sjaaquj.cn",
         "sjalipa.cn",
         "sjanff.v-moda.com",
         "sjardw.footlocker.fr",
@@ -107271,6 +107280,7 @@
         "srwww1.com",
         "srxy.xyz",
         "srzirmlql.com",
+        "srzpsbf.xyz",
         "srzzohlms.com",
         "ss.azuremagazine.com",
         "ss.musthird.com",
@@ -108015,6 +108025,7 @@
         "starcardsnbulls.com",
         "starchild.odencat.com",
         "starchportraypub.com",
+        "starcountry.net",
         "starcraftvip.com",
         "stardatis.com",
         "stardrop.fun",
@@ -110081,7 +110092,6 @@
         "store.iqiyi.com",
         "store.tv.api.3g.youku.com",
         "store.xl.api.3g.youku.com",
-        "store1.gofile.io",
         "store17.gofile.io",
         "store25848025.company.site",
         "store4porn.com",
@@ -113075,6 +113085,7 @@
         "tbmgyz.centerparcs.de",
         "tbmwkwbdcryfhb.xyz",
         "tbox-project.com",
+        "tbpot.com",
         "tbppfktchj.com",
         "tbradshedm.org",
         "tbsjkaorxwuchyb.com",
@@ -114720,6 +114731,7 @@
         "threatotherwise.com",
         "threeate.jp",
         "threechurch.com",
+        "threedayvi.com",
         "threedrive.su",
         "threeheartswellness.com",
         "threeinters.com",
@@ -121268,6 +121280,7 @@
         "trmit.com",
         "trmnsite.com",
         "trmobc.com",
+        "trmpc.com",
         "trmwidget.eu",
         "trocado.at",
         "trodpigbays.com",
@@ -123226,6 +123239,7 @@
         "unlockdienthoai.zyrosite.com",
         "unlockers.xyz",
         "unlockhack.com",
+        "unlockingdreamsfinancial.com",
         "unlockiosnow.com",
         "unlocknokialumia.info",
         "unlockphone.me",
@@ -124356,6 +124370,7 @@
         "valleysinstruct.com",
         "valonghost.xyz",
         "valornutricional.cc",
+        "valowaves.com",
         "valpeiros.com",
         "valsesoffhand.website",
         "valsgaard-kofod.dk",
@@ -127558,6 +127573,7 @@
         "wbupbv.com",
         "wbusiness.fr",
         "wbuurzutrhmlsz.com",
+        "wbvfj.xyz",
         "wbvjhlaljp.com",
         "wbzfybvl.com",
         "wc-tracking.lavasoft.com",
@@ -127606,7 +127622,6 @@
         "wdads.sx.atl.publicus.com",
         "wdakda.cn",
         "wdavrzv.com",
-        "wdb.life",
         "wdcigo.xyz",
         "wddlydaxtmm.com",
         "wddsva0.com",
@@ -130196,7 +130211,6 @@
         "www.armolipid.com.ru",
         "www.asdfg23.com",
         "www.aservice.tools",
-        "www.asterglobal.com",
         "www.atl-6-ga.com",
         "www.atlantis-asia.com",
         "www.atpanel.com",
@@ -130729,6 +130743,7 @@
         "www.mass1soma.com",
         "www.masterspace.biz",
         "www.mavic852.com",
+        "www.maxmoney.com",
         "www.mbljpu9.com",
         "www.me1294hlx.com",
         "www.mean8sigh.com",
@@ -131057,7 +131072,6 @@
         "www.ssquire.plus.com",
         "www.stadiumstage.com",
         "www.star-cntr-5.com",
-        "www.starcountry.net",
         "www.start-downloading.com",
         "www.startnewtab.com",
         "www.statcount.com",
@@ -132570,6 +132584,7 @@
         "xn--steamcommunlity-vpb.com",
         "xn--steamcommunlt-lse6412i.com",
         "xn--stemcmmunily-09a608b.com",
+        "xn--wgvp78a61swpe6zdozj.cn",
         "xn--wxtr9fwyxk9c.club",
         "xn--wxtr9fwyxk9c.xn--fiqs8s",
         "xn--wxtr9fwyxk9co4hbua.xn--fiqs8s",
@@ -133152,21 +133167,18 @@
         "yandex.avito.sber.com-id809702.com",
         "yandex.avito.www.booking.com-id20341.info",
         "yandex.avito.www.booking.com-id809702.com",
+        "yandex.avito.www.booking.com-id809712.com",
         "yandex.com-id20341.info",
         "yandex.pay.avito.avito.avito.avito.avito.com-id20341.info",
         "yandex.pay.avito.avito.avito.avito.sber.com-id02349.info",
         "yandex.pay.avito.avito.avito.com-id02349.info",
         "yandex.pay.avito.avito.avito.com-id90123.info",
         "yandex.pay.avito.avito.booking.com-id809702.com",
-        "yandex.pay.avito.avito.booking.com-id809712.com",
         "yandex.pay.booking.com-id809702.com",
-        "yandex.pay.com-id809712.com",
         "yandex.pay.www.booking.com-id809702.com",
         "yandex.sber.avito.avito.avito.avito.avito.com-id20341.info",
-        "yandex.sber.avito.booking.com-id809712.com",
         "yandex.sber.booking.com-id20341.info",
         "yandex.sber.booking.com-id809702.com",
-        "yandex.sber.booking.com-id809712.com",
         "yandex.sber.com-id02349.info",
         "yandex.sber.com-id20341.info",
         "yandex.www.booking.com-id809702.com",
@@ -137498,6 +137510,7 @@
         ".4l903.com",
         ".4lhq0cplb.com",
         ".4link.it",
+        ".4lke.online",
         ".4luckyf.com",
         ".4mads.com",
         ".4mlhn1ocg4.com",
@@ -137632,6 +137645,7 @@
         ".53c2dtzsj7t1.top",
         ".53kf.com",
         ".53ynh.xyz",
+        ".542199235l.com",
         ".544c1a86a1.com",
         ".5475feaab.clicknplay.to",
         ".54askjdklm.xyz",
@@ -153953,6 +153967,7 @@
         ".astehaub.net",
         ".astemolgachan.com",
         ".asterbiscusys.com",
+        ".asterglobal.com",
         ".asterpix.com",
         ".asterrakionor.com",
         ".astervell.fun",
@@ -154560,6 +154575,7 @@
         ".autotesla.org",
         ".autotrack.studyquicks.com",
         ".autoua.com",
+        ".autoupdate.com.ua",
         ".autous.ru",
         ".autovista-fi.autovistagroup.com",
         ".autovista-fr.autovistagroup.com",
@@ -154665,7 +154681,6 @@
         ".avito.avito.avito.booking.com-id20341.info",
         ".avito.avito.avito.booking.com-id90123.info",
         ".avito.avito.avito.www.booking.com-id809702.com",
-        ".avito.avito.com-id809712.com",
         ".avito.avito.pay.avito.avito.booking.com-id809702.com",
         ".avito.avito.sber.avito.www.booking.com-id809702.com",
         ".avito.avito.sber.booking.com-id809702.com",
@@ -154837,6 +154852,7 @@
         ".awsexam.quantresear.ch",
         ".awsmer.com",
         ".awsnjsduyhgpk.com",
+        ".awsserver903203232.s3.sa-east-1.amazonaws.com",
         ".awstaticdn.net",
         ".awsurveys.com",
         ".awsuvx.lavprisvvs.dk",
@@ -159525,7 +159541,6 @@
         ".bruny.net.anwalt.de",
         ".brupu.com",
         ".brusselssprout.blob.core.windows.net",
-        ".brusuax.com",
         ".brutalconfer.com",
         ".bruteknack.com",
         ".brvallsrentacar.eccocar.com",
@@ -161098,6 +161113,7 @@
         ".card-tindung.com",
         ".card.getgifted.com",
         ".card.pingpro.com",
+        ".cardadvantagecast.com",
         ".carderprofit.ws",
         ".carderx.com",
         ".cardexchanges.carte-gr.total.fr",
@@ -161230,7 +161246,6 @@
         ".casadelteatro.org.co",
         ".casalemedia.com",
         ".casalmedia.com",
-        ".casamuseoayerbe.co",
         ".casaqueapogamy.com",
         ".cascade-wow.eu",
         ".cascadewatchful.com",
@@ -161630,6 +161645,7 @@
         ".cctrkom.creditcards.com",
         ".ccudl.com",
         ".ccwxma.xyz",
+        ".cczhk.com",
         ".cczqyvuy812jdy.com",
         ".ccztgy.elgiganten.dk",
         ".cd-ads.com",
@@ -162703,6 +162719,7 @@
         ".checkmygeo.com",
         ".checkout360now.net",
         ".checkoutfree.com",
+        ".checkpoint.up4download.xyz",
         ".checkpointcharlie.heizung.de",
         ".checkru.net",
         ".checkskins.com",
@@ -165213,6 +165230,7 @@
         ".colovepuquina.guru",
         ".coltagainst.pro",
         ".colum-rvb.com",
+        ".columbiatopdeals.com",
         ".columbine.ir",
         ".columbustech.tcsg.edu",
         ".columngenuinedeploy.com",
@@ -168183,6 +168201,7 @@
         ".cumhiwdfoagk.com",
         ".cuminside.club",
         ".cumjroatzga.com",
+        ".cumshot.vip",
         ".cumult.com",
         ".cunasdonat.com",
         ".cunazarp.website",
@@ -168540,7 +168559,6 @@
         ".cynes-gwf.com",
         ".cynicalspireheroism.com",
         ".cynorix.com",
-        ".cynshare.com",
         ".cyntgd.anticipazionitv.it",
         ".cyohmj.catawiki.com",
         ".cyonix.to",
@@ -173257,7 +173275,6 @@
         ".dichvuvietnam.pw",
         ".dicinging.co.in",
         ".dicknearbyaircraft.com",
-        ".diclegrup.org",
         ".diclotrans.com",
         ".dicotrebill.digital",
         ".dicouksa.com",
@@ -173420,6 +173437,7 @@
         ".digitalpush.org",
         ".digitaltarget.ru",
         ".digitalthrottle.com",
+        ".digitalvtu.com.ng",
         ".digitalworkplace.ricoh.fr",
         ".digitalworkzone.com",
         ".digitizeforme.com",
@@ -174119,6 +174137,7 @@
         ".dl-test.rivafashion.com",
         ".dl-vip.bav.baidu.com",
         ".dl-vip.pcfaster.baidu.co.th",
+        ".dl.1003b.56a.com",
         ".dl.198424.com",
         ".dl.4buy.net",
         ".dl.4kporn.xxx",
@@ -177965,6 +177984,7 @@
         ".emetriq.de",
         ".emgers.pe",
         ".emgthropositeas.info",
+        ".emgvod.com",
         ".emicalcove.xyz",
         ".emicom.pe",
         ".emigrantblunder.com",
@@ -179878,6 +179898,7 @@
         ".exitfuel.com",
         ".exitintel.com",
         ".exitmonitor.com",
+        ".exks.members.openarmscv.com",
         ".exlusepolly.com",
         ".exmarketplace.com",
         ".exmarkt.de",
@@ -180014,7 +180035,6 @@
         ".express-gens.com",
         ".express-submit.de",
         ".expressalike.com",
-        ".expresscourier.delivery",
         ".expressgrab.com",
         ".expressionsofwood.ca",
         ".expressmoney.cc",
@@ -182156,6 +182176,7 @@
         ".fiwyjar.cn",
         ".fix-apple-maan-error.info",
         ".fix-files.com",
+        ".fix-live.tech",
         ".fix-system-security-virus-alert.info",
         ".fix.hpplay.cn",
         ".fixabu.ru",
@@ -184225,6 +184246,7 @@
         ".fumanhua88.info",
         ".fumarinpest.com",
         ".fumeiti.cc",
+        ".fumekart.com",
         ".fumersoctoon.com",
         ".fumiad.dxys.pro",
         ".fummkxa.com",
@@ -185402,7 +185424,6 @@
         ".ge6.getfto.com",
         ".ge8.getfto.com",
         ".gea-exchange-03.net.jumia.ug",
-        ".geaapy.com",
         ".gear.echovisuals.com",
         ".gearanime.com",
         ".gearedftnerr.com",
@@ -189436,6 +189457,7 @@
         ".hablvsmnr.com",
         ".habovethecity.info",
         ".habovethecityon.info",
+        ".habrafa.com",
         ".habrasysteleii.xyz",
         ".habrox.xyz",
         ".habusima.uno",
@@ -190262,10 +190284,8 @@
         ".hbjolp.xyz",
         ".hbkpcwdxite.com",
         ".hbkunye.com",
-        ".hblmbtbm.beget.tech",
         ".hblnqr.blackwidowpro.com",
         ".hbloveinfo.com",
-        ".hbm.sync.oystergardens.club",
         ".hbmkglobal.com",
         ".hbmode.com",
         ".hbnursery.com",
@@ -194819,7 +194839,6 @@
         ".indoleads.com",
         ".indolentleader.com",
         ".indomarineshipchandler.com",
-        ".indonesias.me",
         ".indooritalian.com",
         ".indraftcoft.digital",
         ".indratankman.com",
@@ -197403,6 +197422,7 @@
         ".jakeycorkage.digital",
         ".jakid.xyz",
         ".jakj.settings.oysterfloats.org",
+        ".jakkesalgs.com",
         ".jaletemetia.com",
         ".jalewaads.com",
         ".jaloppystudy.life",
@@ -198261,7 +198281,6 @@
         ".job4pals.biz",
         ".jobappplus.actonservice.com",
         ".jobbio.com",
-        ".jobcity.com",
         ".jobfilletfortitude.com",
         ".joblouder.com",
         ".jobmandate.com",
@@ -199025,6 +199044,7 @@
         ".jwnmnnnzrebqa.top",
         ".jwnmnnnzreeyw.top",
         ".jwpltx.com",
+        ".jwqr.members.openarmscv.com",
         ".jwqtuyjqxvsxy.com",
         ".jwronx.xyz",
         ".jwrrwzrrwqmj.top",
@@ -200371,6 +200391,7 @@
         ".kodu.neti.ee",
         ".koekd.xyz",
         ".kofirusy.pro",
+        ".kog.day.50adayplan.com",
         ".kogaqmlci.com",
         ".kognoaka.net",
         ".kogtrmjz.xyz",
@@ -203858,7 +203879,6 @@
         ".lividn.com",
         ".livingshonghealth.com",
         ".livingsleet.com",
-        ".livmesilovess.pro",
         ".livquxokndfe.com",
         ".livreral.fr",
         ".livrfufzios.com",
@@ -205509,6 +205529,7 @@
         ".lunyfallace.com",
         ".lunylarynx.uno",
         ".luodiye01.cn",
+        ".luofk.xyz",
         ".luogod.xyz",
         ".luolitang.com",
         ".luoyangjinmeii.com",
@@ -205788,7 +205809,6 @@
         ".lzthjd.cn",
         ".lzuc.sfr.fr",
         ".lzupkz.com",
-        ".lzv.sync.oystergardens.club",
         ".lzvjtxe.xyz",
         ".lzvkmwyavjeeb.top",
         ".lzvwxy.hometogo.pl",
@@ -208506,7 +208526,6 @@
         ".maximumductpictorial.com",
         ".maximumimmortality.com",
         ".maximus-time.net",
-        ".maxmoney.com",
         ".maxmusics.com",
         ".maxmydl.com",
         ".maxonclick.com",
@@ -209010,7 +209029,6 @@
         ".medcar.com.tn",
         ".meddleachievehat.com",
         ".meddlekilled.com",
-        ".medfioytrkdkcodlskeej.net",
         ".medfoodsafety.com",
         ".medfoodspace.com",
         ".medfoodtech.com",
@@ -209546,6 +209564,7 @@
         ".merita.ir",
         ".meritedgasser.com",
         ".meriwest.actonservice.com",
+        ".merketsignets.site",
         ".merligopotlid.com",
         ".mermenmanzil.life",
         ".meromou.ru",
@@ -213784,6 +213803,7 @@
         ".muzotur.info",
         ".muzsj.com",
         ".muzzlematrix.com",
+        ".muzzumilruheel.com",
         ".mv0129.stream",
         ".mva1.maeva.com",
         ".mvads.kugou.com",
@@ -214959,7 +214979,6 @@
         ".navi39.ru",
         ".navi4.com",
         ".navi40.com",
-        ".navi42.ru",
         ".navi45.ru",
         ".navi47.com",
         ".navi5.com",
@@ -216271,6 +216290,7 @@
         ".ninzatool.pw",
         ".nip1.com",
         ".nip10.com",
+        ".nip12.com",
         ".nip13.com",
         ".nip17.com",
         ".nip2.com",
@@ -218333,6 +218353,7 @@
         ".oj.likewut.net",
         ".oj2q8.montecarlosbm.book-secure.com",
         ".ojafexcbndql.com",
+        ".ojang.pe.kr",
         ".ojapanelm.xyz",
         ".ojbkmcsdx.xyz",
         ".ojbrtkrvew.com",
@@ -219645,7 +219666,6 @@
         ".orcjagpox.com",
         ".ordbzeokdxku.com",
         ".ordealsreannoy.top",
-        ".orderedami.com",
         ".orderfritter.com",
         ".orderlymall.pro",
         ".orderlyregister.pro",
@@ -221174,6 +221194,7 @@
         ".partlytrouble.com",
         ".partner-ads.com",
         ".partner-affilbox.telly.cz",
+        ".partner-app.softwareselect.com",
         ".partner-earning.com",
         ".partner-staging.miso.kr",
         ".partner-ts.groupon.be",
@@ -221945,23 +221966,18 @@
         ".pay.avito.avito.avito.sber.avito.com-id02349.info",
         ".pay.avito.avito.avito.sber.booking.com-id90123.info",
         ".pay.avito.avito.avito.sber.com-id20341.info",
-        ".pay.avito.avito.avito.www.booking.com-id809712.com",
         ".pay.avito.avito.avito.www.booking.com-id90123.info",
         ".pay.avito.avito.com-id02349.info",
         ".pay.avito.avito.com-id809702.com",
         ".pay.avito.avito.pay.avito.avito.booking.com-id90123.info",
-        ".pay.avito.avito.pay.www.booking.com-id809712.com",
         ".pay.avito.avito.sber.booking.com-id90123.info",
         ".pay.avito.avito.sber.com-id02349.info",
         ".pay.avito.avito.sber.com-id20341.info",
         ".pay.avito.avito.www.booking.com-id809702.com",
         ".pay.avito.booking.com-id809702.com",
-        ".pay.avito.booking.com-id809712.com",
         ".pay.avito.booking.com-id90123.info",
         ".pay.avito.com-id809702.com",
         ".pay.avito.com-id90123.info",
-        ".pay.avito.pay.com-id3212341.info",
-        ".pay.avito.pay.www.booking.com-id809712.com",
         ".pay.avito.sber.avito.com-id02349.info",
         ".pay.avito.sber.avito.www.booking.com-id809702.com",
         ".pay.avito.sber.booking.com-id809702.com",
@@ -221974,7 +221990,6 @@
         ".pay.avito.www.booking.com-id90123.info",
         ".pay.ayazprak.com",
         ".pay.booking.com-id20341.info",
-        ".pay.booking.id19045617.info",
         ".pay.com-id20341.info",
         ".pay.com-id409712.com",
         ".pay.com-id809702.com",
@@ -222062,6 +222077,7 @@
         ".pbhjohrx.xyz",
         ".pbhrwhehnyibit.com",
         ".pbid.iforex.com",
+        ".pbjs-stream.bydata.com",
         ".pbjs.sskzlabs.com",
         ".pblcpush.com",
         ".pblinq.com",
@@ -223615,6 +223631,7 @@
         ".pjyvgdpvjp.com",
         ".pjzgggywd.com",
         ".pjzmbhf.cn",
+        ".pjzxdl.xyz",
         ".pk.tawersasocial.com",
         ".pk1u.melanielyne.com",
         ".pk840.com",
@@ -224444,7 +224461,6 @@
         ".poneycurnies.com",
         ".pongidsrunback.com",
         ".ponierpeewees.digital",
-        ".ponizinny.nl",
         ".ponk.pro",
         ".ponnerhut.com",
         ".pontent.powzers.lol",
@@ -225292,6 +225308,7 @@
         ".priestsuede.com",
         ".prijavi.net",
         ".prilosec.1.p2l.info",
+        ".primalbrainhacks.com",
         ".primalredfish.com",
         ".primary.hasegawa.jp",
         ".primaryads.com",
@@ -225902,7 +225919,6 @@
         ".protapes.actonservice.com",
         ".protawe.com",
         ".proteavoices.com",
-        ".protechasia.com",
         ".protecmedia.com",
         ".protect-x.com",
         ".protect-your-privacy.net",
@@ -231098,6 +231114,7 @@
         ".ronm.top",
         ".rontar.com",
         ".roobbet.com",
+        ".roofing.galacticleads.com",
         ".roofprison.com",
         ".rooglomitaiy.com",
         ".roohoozy.net",
@@ -233499,7 +233516,6 @@
         ".sbecashqjk.com",
         ".sber.avito.avito.avito.booking.com-id809702.com",
         ".sber.avito.avito.www.booking.com-id809702.com",
-        ".sber.avito.booking.com-id3212341.info",
         ".sber.avito.pay.avito.avito.booking.com-id809702.com",
         ".sber.avito.pay.avito.avito.booking.com-id90123.info",
         ".sber.avito.sber.avito.www.booking.com-id809702.com",
@@ -233551,6 +233567,7 @@
         ".sberbank.avito.sber.booking.com-id90123.info",
         ".sberbank.avito.sber.com-id02349.info",
         ".sberbank.avito.sber.com-id809702.com",
+        ".sberbank.avito.sber.com-id809712.com",
         ".sberbank.avito.sber.sber.booking.com-id90123.info",
         ".sberbank.avito.www.avito.www.booking.com-id90123.info",
         ".sberbank.avito.www.booking.com-id20341.info",
@@ -233568,6 +233585,7 @@
         ".sberbank.pay.avito.avito.booking.com-id90123.info",
         ".sberbank.pay.avito.avito.com-id90123.info",
         ".sberbank.pay.booking.com-id809702.com",
+        ".sberbank.pay.com-id809712.com",
         ".sberbank.pay.www.booking.com-id809702.com",
         ".sberbank.sber.booking.com-id20341.info",
         ".sberbank.sber.booking.com-id90123.info",
@@ -236116,6 +236134,7 @@
         ".shinystat.shiny.it",
         ".shiokambing2.com",
         ".shiowbafrrra.com",
+        ".shipminttracking.net",
         ".shipostrich.com",
         ".shippinginsights.com",
         ".shippingswimsuitflog.com",
@@ -236648,6 +236667,7 @@
         ".shorantonto.com",
         ".shoresmmrnews.com",
         ".shoril.com",
+        ".short-bear-15.telebit.io",
         ".short-share.com",
         ".short-video.kakamobi.cn",
         ".short.afgruppen.no",
@@ -237244,6 +237264,7 @@
         ".sizesidewalk.com",
         ".siziermamas.com",
         ".sizmek.com",
+        ".sjaaquj.cn",
         ".sjalipa.cn",
         ".sjanff.v-moda.com",
         ".sjardw.footlocker.fr",
@@ -242864,6 +242885,7 @@
         ".srwww1.com",
         ".srxy.xyz",
         ".srzirmlql.com",
+        ".srzpsbf.xyz",
         ".srzzohlms.com",
         ".ss.azuremagazine.com",
         ".ss.musthird.com",
@@ -243608,6 +243630,7 @@
         ".starcardsnbulls.com",
         ".starchild.odencat.com",
         ".starchportraypub.com",
+        ".starcountry.net",
         ".starcraftvip.com",
         ".stardatis.com",
         ".stardrop.fun",
@@ -245674,7 +245697,6 @@
         ".store.iqiyi.com",
         ".store.tv.api.3g.youku.com",
         ".store.xl.api.3g.youku.com",
-        ".store1.gofile.io",
         ".store17.gofile.io",
         ".store25848025.company.site",
         ".store4porn.com",
@@ -248668,6 +248690,7 @@
         ".tbmgyz.centerparcs.de",
         ".tbmwkwbdcryfhb.xyz",
         ".tbox-project.com",
+        ".tbpot.com",
         ".tbppfktchj.com",
         ".tbradshedm.org",
         ".tbsjkaorxwuchyb.com",
@@ -250313,6 +250336,7 @@
         ".threatotherwise.com",
         ".threeate.jp",
         ".threechurch.com",
+        ".threedayvi.com",
         ".threedrive.su",
         ".threeheartswellness.com",
         ".threeinters.com",
@@ -256861,6 +256885,7 @@
         ".trmit.com",
         ".trmnsite.com",
         ".trmobc.com",
+        ".trmpc.com",
         ".trmwidget.eu",
         ".trocado.at",
         ".trodpigbays.com",
@@ -258819,6 +258844,7 @@
         ".unlockdienthoai.zyrosite.com",
         ".unlockers.xyz",
         ".unlockhack.com",
+        ".unlockingdreamsfinancial.com",
         ".unlockiosnow.com",
         ".unlocknokialumia.info",
         ".unlockphone.me",
@@ -259949,6 +259975,7 @@
         ".valleysinstruct.com",
         ".valonghost.xyz",
         ".valornutricional.cc",
+        ".valowaves.com",
         ".valpeiros.com",
         ".valsesoffhand.website",
         ".valsgaard-kofod.dk",
@@ -263151,6 +263178,7 @@
         ".wbupbv.com",
         ".wbusiness.fr",
         ".wbuurzutrhmlsz.com",
+        ".wbvfj.xyz",
         ".wbvjhlaljp.com",
         ".wbzfybvl.com",
         ".wc-tracking.lavasoft.com",
@@ -263199,7 +263227,6 @@
         ".wdads.sx.atl.publicus.com",
         ".wdakda.cn",
         ".wdavrzv.com",
-        ".wdb.life",
         ".wdcigo.xyz",
         ".wddlydaxtmm.com",
         ".wddsva0.com",
@@ -265789,7 +265816,6 @@
         ".www.armolipid.com.ru",
         ".www.asdfg23.com",
         ".www.aservice.tools",
-        ".www.asterglobal.com",
         ".www.atl-6-ga.com",
         ".www.atlantis-asia.com",
         ".www.atpanel.com",
@@ -266322,6 +266348,7 @@
         ".www.mass1soma.com",
         ".www.masterspace.biz",
         ".www.mavic852.com",
+        ".www.maxmoney.com",
         ".www.mbljpu9.com",
         ".www.me1294hlx.com",
         ".www.mean8sigh.com",
@@ -266650,7 +266677,6 @@
         ".www.ssquire.plus.com",
         ".www.stadiumstage.com",
         ".www.star-cntr-5.com",
-        ".www.starcountry.net",
         ".www.start-downloading.com",
         ".www.startnewtab.com",
         ".www.statcount.com",
@@ -268163,6 +268189,7 @@
         ".xn--steamcommunlity-vpb.com",
         ".xn--steamcommunlt-lse6412i.com",
         ".xn--stemcmmunily-09a608b.com",
+        ".xn--wgvp78a61swpe6zdozj.cn",
         ".xn--wxtr9fwyxk9c.club",
         ".xn--wxtr9fwyxk9c.xn--fiqs8s",
         ".xn--wxtr9fwyxk9co4hbua.xn--fiqs8s",
@@ -268745,21 +268772,18 @@
         ".yandex.avito.sber.com-id809702.com",
         ".yandex.avito.www.booking.com-id20341.info",
         ".yandex.avito.www.booking.com-id809702.com",
+        ".yandex.avito.www.booking.com-id809712.com",
         ".yandex.com-id20341.info",
         ".yandex.pay.avito.avito.avito.avito.avito.com-id20341.info",
         ".yandex.pay.avito.avito.avito.avito.sber.com-id02349.info",
         ".yandex.pay.avito.avito.avito.com-id02349.info",
         ".yandex.pay.avito.avito.avito.com-id90123.info",
         ".yandex.pay.avito.avito.booking.com-id809702.com",
-        ".yandex.pay.avito.avito.booking.com-id809712.com",
         ".yandex.pay.booking.com-id809702.com",
-        ".yandex.pay.com-id809712.com",
         ".yandex.pay.www.booking.com-id809702.com",
         ".yandex.sber.avito.avito.avito.avito.avito.com-id20341.info",
-        ".yandex.sber.avito.booking.com-id809712.com",
         ".yandex.sber.booking.com-id20341.info",
         ".yandex.sber.booking.com-id809702.com",
-        ".yandex.sber.booking.com-id809712.com",
         ".yandex.sber.com-id02349.info",
         ".yandex.sber.com-id20341.info",
         ".yandex.www.booking.com-id809702.com",
diff --git a/rule/adrules_domainset.srs b/rule/adrules_domainset.srs
index be72b7c..86c12f3 100644
Binary files a/rule/adrules_domainset.srs and b/rule/adrules_domainset.srs differ