This period saw 7,703 new domain entries added and 4,594 removed across major ad and tracking protection lists. Steven Black Unified Hosts led the charge with the most additions and removals. EasyList, AdGuard DNS Filter, and AdGuard Base Filter also stayed busy. Below, we break down the highlights, with a rare removal, a wave of high-consensus blocks, and some domain churn that should interest anyone monitoring ad/track coverage.

Foflib.org: The 24-Hour Block-and-Unblock

In an unusual move, foflib.org was added to AdGuard Base Filter, AdGuard DNS Filter, and EasyList on July 9, then removed from all three within 24 hours. Fast in, fast out. This kind of quick reversal usually means a false positive—either the domain was misidentified as adware/tracking, or someone pointed out collateral damage fast enough for maintainers to act. For anyone with infrastructure on foflib.org, your analytics and tags just dodged a bullet. For list watchers, it’s a reminder: even curated lists can swing and miss.

Attack of the Nonsense Domains: High-Consensus Blocking

Several new domains with names like 6lmt17r7m8kfvz21zc.rest, 8wl57n3vciqi6bcw4wo2zylux1bi9x5pc.cfd, and 4xv4cz64bkkv7e3rpqinpq5c84tog.rest landed on three major lists at once: AdGuard Base Filter, AdGuard DNS Filter, and EasyList. When a domain appears on multiple lists in the same cycle, that’s a signal for automated tracker or malvertising behavior—usually domain generation algorithms (DGAs) at play. If you’re seeing requests to similar domains in your logs, treat them as disposable and probably hostile.

31instances.com and 3502warehouses.net: Infrastructure or Just More Churn?

Two more domains, 31instances.com and 3502warehouses.net, also made the rounds, getting blocked by all three big ad-blocking lists this period. Unlike the pure gibberish above, these names almost sound like legitimate SaaS or logistics platforms. But their cross-list blocking suggests otherwise—likely compromised or repurposed for ad/tracking payloads. If your MarTech stack allowslist infrastructure domains, double-check these before whitelisting. This is how shadow infrastructure sneaks into analytics.

EasyList: The Churn Continues

EasyList added a grab bag of new .cfd, .net, and .rest domains, most of which are clearly throwaways. But the volume (914 additions) shows how much churn these lists face. If you’re seeing traffic blocked from unfamiliar domains, expect the blocklists to catch up quickly—sometimes in hours, as seen with foflib.org.

Numbers this period

Next digest drops July 13, 2026. For live block checks, use isblocked.fyi.