chore: update malware from upstream sources

[github-actions]

🤖 Automated Upstream Update: malware

This PR was automatically generated by the upstream monitoring system.

📊 Summary

• List: malware.txt
• New domains: 668987
• Removed domains: 0
• Sources checked: 2

📡 Source Details

Source 1: Malware

• URL: https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/refs/heads/master/Lists/Malware
• Upstream total: 43271 domains
• New domains: 53

Sample of new domains (showing 10 of 53):

abluentdecocttawpies.qpon
anbank.biz
athortamoved.cfd
b7899-43.top
bixsearch.com
blazerapi.com
blazerbrowser.blob.core.windows.net
blazerbrowser.com
blazerextensionsstorage.blob.core.windows.net
blazerhome.com

Source 2: malicious.txt

• URL: https://media.githubusercontent.com/media/zachlagden/Pi-hole-Optimized-Blocklists/main/lists/malicious.txt
• Upstream total: 2738432 domains
• New domains: 668934

Sample of new domains (showing 10 of 668934):

0-0-0-0-0-0-0-0-0-0-0-0-0-33-0-0-0-0-0-0-0-0-0-0-0-0-0.info
0-10-7.casino
0-2-0-7.casino
0-213008-google.ph
0-30-7.casino
0-5-07-casino.buzz
0-50-7.casino
0-60-7r.casino
0-6n10.sbs
0-7-0-7s.casino

✅ Validation

• New domains are relevant to the {list_name} category
• No false positives identified
• Domains pass validation checks
• Build succeeds

🔄 Merge Policy

🔴 Manual review required - Changes exceed threshold (>100 domains)

---

This PR was created by the upstream monitoring workflow.
To disable upstream monitoring for this list, remove the upstream_sources section from config/lists.yml.