This period saw 9,440 domain entries added and a massive 39,334 removed across major ad and tracking blocklists. Steven Black Unified Hosts, AdGuard DNS Filter, EasyList, and AdGuard Base Filter led the activity, each deleting over 7,900 domains. EasyList alone dropped 10,484 domains. Below, we break down the most notable changes and what they mean for you.

The Great Purge: Thousands of .xyz and .cfd Domains Removed Overnight

EasyList, AdGuard DNS Filter, AdGuard Base Filter, and Steven Black Unified Hosts all removed thousands of entries this cycle. Many were recent additions, including 12ibwu84fqxcti.rest, 16rmn5qbknrrnv1izg8r1r5e.rest, and 18zkj1qlruj79oyq63f6w.cfd. All three appeared on three lists, were added on August 11, and dropped just days later.

Why this matters: If you rely on blocklist data for threat intelligence or automated blocking, expect churn. Domains cycling in and out at this pace signal either mass false positives or rapid malvertising domain turnover. If your analytics or ad loading broke this week and fixed itself, this is probably why.

Chinese Analytics Under Fire: Dianping and Aliyun RUM Hit by Consensus Blocks

Two high-profile infrastructure domains popped up on four major lists at once: catfront.dianping.com and rum.aliyuncs.com. Both are linked to analytics and real user monitoring for large Chinese platforms.

Why this matters: If you're running marketing, analytics, or web performance operations in or for China, check your dashboards. Four-list consensus means these endpoints are likely blocked for a large portion of your global users. If you see sudden drops in session or performance data, this could be the culprit.

Popup Block: aifolr.com Tagged for Annoyance

aifolr.com was added to EasyList, specifically flagged for popup behavior. Not a household name, but its popup reputation got it a fast track onto curated lists.

Why this matters: For developers embedding third-party scripts, this is a reminder to audit dependencies. If you use libraries or widgets pulling from aifolr.com, expect higher rates of resource blocking or user complaints about popups not being suppressed.

Pattern Watch: Ongoing .cfd and .rest Churn

While many .cfd, .rest, and .xyz domains were removed, a new crop took their place. Domains like 77hbtrjuw77orrzem2tvcx.rest and abutformal.cfd appeared on three lists at once. These are likely part of a generated domain network.

Why this matters: Automated domain churn continues to be the tracker and malvertiser’s tool of choice. If you’re in fraud detection or bot mitigation, expect these patterns to keep popping up. If you rely on blocklists for filtering, expect your logs to be filled with fresh noise.

Numbers this period

Next digest drops August 16, 2026. For real-time coverage, check any domain at isblocked.fyi.