From 4a70dc97b01047511166254b9da7acd44d5ae02a Mon Sep 17 00:00:00 2001
From: Yuki2718 <58900598+Yuki2718@users.noreply.github.com>
Date: Mon, 28 Feb 2022 20:50:57 +0900
Subject: [PATCH] Update regex for scam

---
 Dandelion Sprout's Anti-Malware List.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt
index c8ed03cec..646b6253e 100644
--- a/Dandelion Sprout's Anti-Malware List.txt	
+++ b/Dandelion Sprout's Anti-Malware List.txt	
@@ -284,7 +284,8 @@ azdll.net##.dllhelper-banner
 ! Common scam domain patterns
 /^http://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$1p,doc
 /^https://(apps?|best|competition|game|mobile|play|prize|reward|sweeps)[0-9]{2,8}\.[a-z-]{5,22}[0-9]{1,8}\.(icu|life|live)/$1p,doc
-/^https:\/\/[-0-9a-z]{12,}\.life\/\?u=[0-9a-z]{7,}&o=[0-9a-z]{7,}&/$doc,domain=life
+/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?o=[0-9a-z]{7}&u=[0-9a-z]{7}/$doc,match-case,domain=com|fun|guru|life|online|pw|site|space|top
+/^https?:\/\/((?!www)[a-z]{3,5}\.)?[-0-9a-z]{6,}\.(?:com|fun|guru|life|online|pw|site|space|top)\/\/?\?u=[0-9a-z]{7}&o=[0-9a-z]{7}/$doc,match-case,domain=com|fun|guru|life|online|pw|site|space|top
 ! https://github.com/AdguardTeam/AdguardFilters/issues/58737
 /^https?:\/\/(?:www\.)?[-0-9a-z]{14,}\.(?:biz|fun|live)\/[a-zA-Z]{10,}\.php/$doc,domain=biz|fun|live