diff --git a/backend/server/api/url-filter/blocklist.txt.get.ts b/backend/server/api/url-filter/blocklist.txt.get.ts
index f7702cc..7f070a7 100644
--- a/backend/server/api/url-filter/blocklist.txt.get.ts
+++ b/backend/server/api/url-filter/blocklist.txt.get.ts
@@ -11,7 +11,10 @@ import { getActiveBlocklistDomains } from "../../db/domains";
  */
 export default defineEventHandler(async (event) => {
   const domains = await getActiveBlocklistDomains();
-  const body = domains.map((d) => d.domain).join("\n") + "\n";
+  // Adblock-Syntax `||domain^` blockt die Domain UND alle Subdomains (www, m, …).
+  // Plain-Domain-Format ist Apex-only — www.bet365.com etc. blieben sonst offen
+  // (Casino-Content liegt fast immer auf www / Google-Ad-Links zeigen dorthin).
+  const body = domains.map((d) => `||${d.domain}^`).join("\n") + "\n";
 
   setHeader(event, "Content-Type", "text/plain; charset=utf-8");
   setHeader(event, "Cache-Control", "public, max-age=300");