[xorcist]

> Malware/phishing/etc. is still removed, since it's illegal.

They are known for protecting DDoS-for-hire and Cryptolocker services.

[meowface]

It's a gray area. They sometimes reverse proxy frontend portals for those services, but not the services themselves. Sometimes the frontend won't have anything obviously illegal.

Anything that's actively serving malware or phishing pages is removed.