2018-10-09 06:18:46 +00:00
# URLhaus Malicious URL Blocklist
2018-10-08 10:53:50 +00:00
2020-04-07 06:51:21 +00:00
A blocklist of malicious URLs that are being used for malware distribution, based on the **Database dump (CSV)** of Abuse.ch [URLhaus ](https://urlhaus.abuse.ch/ ).
2018-10-09 06:18:46 +00:00
2020-04-19 05:41:03 +00:00
There are multiple formats available, refer to the appropriate section according to the program used:
2020-04-07 06:51:21 +00:00
2020-04-19 05:41:03 +00:00
- uBlock Origin (uBO) -> [URL-based ](#url-based ) section (recommended)
- Pi-hole -> [Domain-based ](#domain-based ) or [Hosts-based ](#hosts-based ) section
- Hosts file -> [Hosts-based ](#hosts-based ) section
2020-04-07 06:51:21 +00:00
- Dnsmasq DNS server -> [Dnsmasq ](#dnsmasq ) section
2020-04-19 05:41:03 +00:00
Not sure which format to choose? See [Compatibility ](https://gitlab.com/curben/urlhaus-filter/wikis/compatibility ) page in the wiki.
2020-04-07 06:51:21 +00:00
## URL-based
2018-10-09 06:18:46 +00:00
2018-10-11 04:18:21 +00:00
Filter is updated twice a day.
2018-10-09 06:18:46 +00:00
2019-04-29 11:17:26 +00:00
Import the following URL into uBO to subscribe:
2018-10-09 06:18:46 +00:00
2019-04-29 11:17:26 +00:00
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter.txt
2019-10-14 13:14:38 +00:00
< details >
< summary > Mirrors< / summary >
2019-04-29 11:17:26 +00:00
2019-10-01 12:25:35 +00:00
- https://cdn.statically.io/gl/curben/urlhaus-filter/raw/master/urlhaus-filter.txt
2019-04-29 11:17:26 +00:00
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter.txt
2019-10-01 12:25:35 +00:00
- https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter.txt
- https://cdn.statically.io/gh/curbengh/urlhaus-filter/master/urlhaus-filter.txt
- https://gitcdn.xyz/repo/curbengh/urlhaus-filter/master/urlhaus-filter.txt
- https://cdn.jsdelivr.net/gh/curbengh/urlhaus-filter/urlhaus-filter.txt
2019-10-02 02:44:27 +00:00
- https://repo.or.cz/urlhaus-filter.git/blob_plain/refs/heads/master:/urlhaus-filter.txt
2018-10-09 06:18:46 +00:00
2019-10-14 13:14:38 +00:00
< / details >
2019-06-13 06:56:45 +00:00
< br / >
Lite version (online urls only):
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-online.txt
2019-10-14 13:14:38 +00:00
< details >
< summary > Mirrors< / summary >
2019-06-13 06:56:45 +00:00
2019-10-01 12:25:35 +00:00
- https://cdn.statically.io/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-online.txt
2019-06-13 06:56:45 +00:00
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-online.txt
2019-10-01 12:25:35 +00:00
- https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-online.txt
- https://cdn.statically.io/gh/curbengh/urlhaus-filter/master/urlhaus-filter-online.txt
- https://gitcdn.xyz/repo/curbengh/urlhaus-filter/master/urlhaus-filter-online.txt
- https://cdn.jsdelivr.net/gh/curbengh/urlhaus-filter/urlhaus-filter-online.txt
2019-10-02 02:44:27 +00:00
- https://repo.or.cz/urlhaus-filter.git/blob_plain/refs/heads/master:/urlhaus-filter-online.txt
2019-06-13 06:56:45 +00:00
2019-10-14 13:14:38 +00:00
< / details >
2019-06-13 06:56:45 +00:00
2019-06-13 07:04:21 +00:00
**Note:** Lite version is ~95% smaller by excluding offline urls. The status of urls is determined by the upstream Abuse.ch. However, the test is not 100% accurate and some malicious urls that are otherwise accessible may be missed. If bandwidth (1.5MB/day) is not a constraint, I recommend the regular version.
2019-06-13 06:56:45 +00:00
*PS: While regular version contains roughly 65K filters, uBO can [easily handle ](https://github.com/uBlockOrigin/uBlock-issues/issues/338#issuecomment-452843669 ) half a million filters.*
2020-04-19 05:41:03 +00:00
## Domain-based
This blocklist includes domains and IP addresses.
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-domains.txt
< details >
< summary > Mirrors< / summary >
- https://cdn.statically.io/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-domains.txt
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-domains.txt
- https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-domains.txt
- https://cdn.statically.io/gh/curbengh/urlhaus-filter/master/urlhaus-filter-domains.txt
- https://gitcdn.xyz/repo/curbengh/urlhaus-filter/master/urlhaus-filter-domains.txt
- https://cdn.jsdelivr.net/gh/curbengh/urlhaus-filter/urlhaus-filter-domains.txt
- https://repo.or.cz/urlhaus-filter.git/blob_plain/refs/heads/master:/urlhaus-filter-domains.txt
2019-04-29 11:17:26 +00:00
2020-04-19 05:41:03 +00:00
< / details >
2019-04-29 11:17:26 +00:00
2020-04-19 05:41:03 +00:00
< br / >
Lite version (online domains/IPs only):
2019-10-01 06:58:46 +00:00
2020-04-19 05:41:03 +00:00
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-domains-online.txt
2019-10-01 06:58:46 +00:00
2020-04-19 05:41:03 +00:00
< details >
< summary > Mirrors< / summary >
2019-10-01 06:58:46 +00:00
2020-04-19 05:41:03 +00:00
- https://cdn.statically.io/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-domains-online.txt
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-domains-online.txt
- https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-domains-online.txt
- https://cdn.statically.io/gh/curbengh/urlhaus-filter/master/urlhaus-filter-domains-online.txt
- https://gitcdn.xyz/repo/curbengh/urlhaus-filter/master/urlhaus-filter-domains-online.txt
- https://cdn.jsdelivr.net/gh/curbengh/urlhaus-filter/urlhaus-filter-domains-online.txt
- https://repo.or.cz/urlhaus-filter.git/blob_plain/refs/heads/master:/urlhaus-filter-domains-online.txt
2019-10-01 06:58:46 +00:00
2020-04-19 05:41:03 +00:00
< / details >
## Hosts-based
2019-04-29 11:17:26 +00:00
2020-04-19 05:41:03 +00:00
This blocklist includes domains only.
2019-06-28 10:21:42 +00:00
2019-10-01 06:58:46 +00:00
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts.txt
2019-10-14 13:14:38 +00:00
< details >
< summary > Mirrors< / summary >
2019-10-01 06:58:46 +00:00
2019-10-01 12:25:35 +00:00
- https://cdn.statically.io/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts.txt
2019-10-01 06:58:46 +00:00
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts.txt
2019-10-01 12:25:35 +00:00
- https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-hosts.txt
- https://cdn.statically.io/gh/curbengh/urlhaus-filter/master/urlhaus-filter-hosts.txt
- https://gitcdn.xyz/repo/curbengh/urlhaus-filter/master/urlhaus-filter-hosts.txt
- https://cdn.jsdelivr.net/gh/curbengh/urlhaus-filter/urlhaus-filter-hosts.txt
2019-10-02 02:44:27 +00:00
- https://repo.or.cz/urlhaus-filter.git/blob_plain/refs/heads/master:/urlhaus-filter-hosts.txt
2019-10-01 06:58:46 +00:00
2019-10-14 13:14:38 +00:00
< / details >
2019-10-01 06:58:46 +00:00
< br / >
2020-04-19 05:41:03 +00:00
Lite version (online domains only):
2019-10-01 06:58:46 +00:00
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts-online.txt
2019-10-14 13:14:38 +00:00
< details >
< summary > Mirrors< / summary >
2019-10-01 06:58:46 +00:00
2019-10-01 12:25:35 +00:00
- https://cdn.statically.io/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts-online.txt
2019-10-01 06:58:46 +00:00
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts-online.txt
2019-10-01 12:25:35 +00:00
- https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-hosts-online.txt
- https://cdn.statically.io/gh/curbengh/urlhaus-filter/master/urlhaus-filter-hosts-online.txt
- https://gitcdn.xyz/repo/curbengh/urlhaus-filter/master/urlhaus-filter-hosts-online.txt
- https://cdn.jsdelivr.net/gh/curbengh/urlhaus-filter/urlhaus-filter-hosts-online.txt
2019-10-02 02:44:27 +00:00
- https://repo.or.cz/urlhaus-filter.git/blob_plain/refs/heads/master:/urlhaus-filter-hosts-online.txt
2019-06-28 10:21:42 +00:00
2019-10-14 13:14:38 +00:00
< / details >
2020-03-30 03:19:25 +00:00
## Dnsmasq
2020-04-19 05:41:03 +00:00
This blocklist includes domains only.
2020-03-30 03:19:25 +00:00
### Install
```
mkdir -p ~/.config/urlhaus-filter/
2020-04-01 10:27:02 +00:00
curl https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-dnsmasq.conf -o ~/.config/urlhaus-filter/urlhaus-filter-dnsmasq.conf
2020-03-30 03:19:25 +00:00
printf "\nconf-file=$HOME/.config/urlhaus-filter/urlhaus-filter-dnsmasq.conf\n" >> /etc/dnsmasq.conf
```
### Update
```
2020-04-01 10:27:02 +00:00
curl https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-dnsmasq.conf -o ~/.config/urlhaus-filter/urlhaus-filter-dnsmasq.conf
2020-03-30 03:19:25 +00:00
```
< details >
< summary > Mirrors< / summary >
- https://cdn.statically.io/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-dnsmasq.conf
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-dnsmasq.conf
- https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-dnsmasq.conf
- https://cdn.statically.io/gh/curbengh/urlhaus-filter/master/urlhaus-filter-dnsmasq.conf
- https://gitcdn.xyz/repo/curbengh/urlhaus-filter/master/urlhaus-filter-dnsmasq.conf
- https://cdn.jsdelivr.net/gh/curbengh/urlhaus-filter/urlhaus-filter-dnsmasq.conf
- https://repo.or.cz/urlhaus-filter.git/blob_plain/refs/heads/master:/urlhaus-filter-dnsmasq.conf
< / details >
< br / >
2020-04-19 05:41:03 +00:00
Lite version (online domains only):
2020-03-30 03:19:25 +00:00
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-dnsmasq-online.conf
< details >
< summary > Mirrors< / summary >
- https://cdn.statically.io/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-dnsmasq-online.conf
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-dnsmasq-online.conf
- https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-dnsmasq-online.conf
- https://cdn.statically.io/gh/curbengh/urlhaus-filter/master/urlhaus-filter-dnsmasq-online.conf
- https://gitcdn.xyz/repo/curbengh/urlhaus-filter/master/urlhaus-filter-dnsmasq-online.conf
- https://cdn.jsdelivr.net/gh/curbengh/urlhaus-filter/urlhaus-filter-dnsmasq-online.conf
- https://repo.or.cz/urlhaus-filter.git/blob_plain/refs/heads/master:/urlhaus-filter-dnsmasq-online.conf
< / details >
Note that it is not possible for Dnsmasq to block malicious IP address.
2018-11-12 00:49:13 +00:00
## Issues
2018-10-09 06:18:46 +00:00
2019-05-11 10:05:19 +00:00
Report any false positive by creating an [issue ](https://gitlab.com/curben/urlhaus-filter/issues ) or [merge request ](https://gitlab.com/curben/urlhaus-filter/merge_requests )
2018-10-09 06:18:46 +00:00
2019-05-11 10:05:19 +00:00
This filter **only** accepts malware URLs from [URLhaus ](https://urlhaus.abuse.ch/ ).
2018-10-09 06:18:46 +00:00
2019-04-29 11:49:38 +00:00
Please report new malware URL to the upstream maintainer through https://urlhaus.abuse.ch/api/#submit.
2018-10-09 06:18:46 +00:00
2019-06-13 06:56:45 +00:00
This repo is not endorsed by Abuse.ch.
2018-10-09 06:18:46 +00:00
2019-03-07 00:39:54 +00:00
## Cloning
Since the filter is updated frequently, cloning the repo would become slower over time as the revision grows.
2019-05-11 10:05:19 +00:00
Use shallow clone to get the recent revisions only. Getting the last five revisions should be sufficient for a valid MR.
2019-03-07 00:39:54 +00:00
`git clone --depth 5 https://gitlab.com/curben/urlhaus-filter.git`
2018-11-12 00:49:13 +00:00
## License
[Creative Commons Zero v1.0 Universal ](LICENSE.md )
2018-10-09 06:18:46 +00:00
## FAQ
2020-04-19 05:41:03 +00:00
See [FAQ ](https://gitlab.com/curben/urlhaus-filter/wikis/faq ).