67,820 new domains were added to major blocklists this period, while 28,396 were removed. The most active lists: AdGuard DNS Filter (+28,659/-8,030), AdGuard Tracking Protection (+26,561/-5,372), and Steven Black Unified Hosts (+7,163/-10,459). Removal activity hit a recent high, with several domains yanked almost as quickly as they appeared.

Mass Removals: The 24-Hour Domain Turnaround

A cluster of domains such as 0.www.0ul1wlo58s-vu69us-r1u.xyz, 0.www.2wu0m0ms098w7148.xyz, and 0.www.cheetahhowevertowardsfrom.com were added to AdGuard Base and DNS Filter on August 18, only to be removed within a day. This pattern suggests automated bulk additions, possibly in response to a new threat feed, followed by a manual or automated clean-up—likely after realizing these domains were either dead, not serving ads, or false positives.

Why it matters: If you maintain allowlists or have automation built around blocklist changes, prepare for churn. Quick reversals like this can trigger unnecessary alarms, break domain-dependent integrations, or cause noise for MarTech monitoring. Review your alerting for same-day add/remove cycles.

High-Consensus Blocks: The .cfd and .rest Domain Flood

Eight domains, all using .cfd or .rest TLDs, were simultaneously added to AdGuard Base, AdGuard DNS, and EasyList. Examples include 8hw49hipgurimmzrcv8qh6r1e.cfd, a21b624502.com, and 74r9h1n2m9exgk.rest. These domains have algorithmically generated names and popped up on three or more lists at once.

Why it matters: When multiple lists coordinate on a block like this, it's usually a sign of active, high-volume abuse (malvertising, tracker networks, or botnet infrastructure). If your analytics or ad tech is using similar domain patterns—intentionally or not—expect rapid and broad blocking.

EasyList: The Human Touch (and Some Weird Names)

EasyList saw a modest 886 domain adds and 1,413 removes. Among the new entries: addressimpertinenceclockwise.com, agriasdustingmobile.qpon, and acinusxs.shop. These aren’t standard ad or tracker domains—they look like someone’s password manager exploded on a TLD registrar.

Why it matters: Lists are fighting back against disposable, single-use domains. If your tracking/pixel setup rotates domains this way, legacy blocklist evasion tactics are less effective. The window for new domains flying under the radar is shrinking.

Steven Black Unified Hosts: Purge Mode Engaged

Steven Black's Unified Hosts removed 10,459 domains, far outpacing its 7,163 new additions. This is a notable reversal from its usual pattern of steady growth. No high-profile domains made the removal list, but the scale hints at a major clean-up—possibly dead domains, invalid TLDs, or a rethink of what "malware" means for the project.

Why it matters: If you previously lobbied for removal of a domain from this host file, now is the time to recheck your status. Big purges can mean false positives are finally gone, but they also risk delisting actual threats if the criteria get too loose.

Numbers This Period

Next digest: August 22, 2026. For up-to-date block status, check isblocked.fyi.