diff --git a/NorwegianExperimentalList alternate versions/NordicFiltersAdGuardHome.txt b/NorwegianExperimentalList alternate versions/NordicFiltersAdGuardHome.txt
index 8798bd115..d042e83dd 100644
--- a/NorwegianExperimentalList alternate versions/NordicFiltersAdGuardHome.txt	
+++ b/NorwegianExperimentalList alternate versions/NordicFiltersAdGuardHome.txt	
@@ -395,19 +395,19 @@
 
 # ——— Anti-phishing filters for tools that support wildcards, are below this line. ———
 # ——— Don't be worried if you see entries that resemble major Nordic websites; those are wildcard entries for use with e.g. Samsung Knox, that attempts to stop phishing sites that have stolen the website brands in question. ———
-||vg.no.
-||elkjop.no.
-||coop.no.
-||shell.no.
-||finn.no.
-||dnb.no.
-||sparebank1.no.
-||nordea.no.
-||sbanken.no.
-||danskebank.no.
-||komplett.no.
-||nordnet.no.
-||skatteetaten.no.
+||vg.no.$dnstype=~CNAME
+||elkjop.no.$dnstype=~CNAME
+||coop.no.$dnstype=~CNAME
+||shell.no.$dnstype=~CNAME
+||finn.no.$dnstype=~CNAME
+||dnb.no.$dnstype=~CNAME
+||sparebank1.no.$dnstype=~CNAME
+||nordea.no.$dnstype=~CNAME
+||sbanken.no.$dnstype=~CNAME
+||danskebank.no.$dnstype=~CNAME
+||komplett.no.$dnstype=~CNAME
+||nordnet.no.$dnstype=~CNAME
+||skatteetaten.no.$dnstype=~CNAME
 ||norwegian.com.
 ||flysas-no.
 ||tusenfryd-com.
diff --git a/NorwegianExperimentalList alternate versions/XYZPrepareFilters.py b/NorwegianExperimentalList alternate versions/XYZPrepareFilters.py
index 799824f59..fc4bd9604 100644
--- a/NorwegianExperimentalList alternate versions/XYZPrepareFilters.py	
+++ b/NorwegianExperimentalList alternate versions/XYZPrepareFilters.py	
@@ -3304,6 +3304,12 @@ def prepare_agh(lines) -> str:
            line
         )
 
+        line = re.sub(
+           r"\.(no|dk|is)\.$", 
+           r".\1.$dnstype=~CNAME", 
+           line
+        )
+
         text += line + '\r\n'
 
     return text