added a malware dmain filter