diff --git a/rules/malware.txt b/rules/malware.txt
index 841a147..2314aae 100644
--- a/rules/malware.txt
+++ b/rules/malware.txt
@@ -2283,7 +2283,8 @@
 /e00228.com/
 /e0173.com/
 /ea.dreamdu.net/
-/eams.cn/
+#/eams.cn/
+^/eams\.cn/
 /eaudit.ro/
 /ebuwgo.cn.com/
 /eceaxy.com/