These are pretty good, and if you can catch them all, you’re probably pretty safe on the ‘net. For now, anyway.

I was surprised to note that they didn’t include any URLs with look-alike Unicode characters though. That’s practically impossible for end-users to detect, so they’d probably get howls of protest if they did, but I kept expecting to get tripped up by that.