2018-10-09 06:18:46 +00:00
# URLhaus Malicious URL Blocklist
2018-10-08 10:53:50 +00:00
2019-06-16 02:24:19 +00:00
A block list of malicious URLs that are being used for malware distribution. This [uBO ](https://github.com/gorhill/uBlock/ )-compatible filter list is based on the **Database dump (CSV)** of Abuse.ch [URLhaus ](https://urlhaus.abuse.ch/ ).
2018-10-09 06:18:46 +00:00
## Subscribe
2018-10-11 04:18:21 +00:00
Filter is updated twice a day.
2018-10-09 06:18:46 +00:00
2019-04-29 11:17:26 +00:00
Import the following URL into uBO to subscribe:
2018-10-09 06:18:46 +00:00
2019-04-29 11:17:26 +00:00
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter.txt
Mirrors:
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter.txt
- https://cdn.staticaly.com/gl/curben/urlhaus-filter/raw/master/urlhaus-filter.txt
2018-10-09 06:18:46 +00:00
2019-06-13 06:56:45 +00:00
< br / >
Lite version (online urls only):
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-online.txt
Mirrors:
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-online.txt
- https://cdn.staticaly.com/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-online.txt
2019-06-13 07:04:21 +00:00
**Note:** Lite version is ~95% smaller by excluding offline urls. The status of urls is determined by the upstream Abuse.ch. However, the test is not 100% accurate and some malicious urls that are otherwise accessible may be missed. If bandwidth (1.5MB/day) is not a constraint, I recommend the regular version.
2019-06-13 06:56:45 +00:00
*PS: While regular version contains roughly 65K filters, uBO can [easily handle ](https://github.com/uBlockOrigin/uBlock-issues/issues/338#issuecomment-452843669 ) half a million filters.*
2019-04-29 11:17:26 +00:00
## Compatibility
This filter is only tested with uBO. [FilterLists ](https://filterlists.com/ ) shows it is compatible with the following software:
2019-10-01 06:58:46 +00:00
- [AdNauseam ](https://github.com/dhowe/AdNauseam/ )
- [NanoAdblocker ](https://github.com/NanoAdblocker/NanoCore )
Host/DNS-based software uses host-based blocklist instead, see below section.
## Host-based blocklist
If you're using one of the following programs:
2019-04-29 11:17:26 +00:00
- [AdGuard Home ](https://github.com/AdguardTeam/AdGuardHome )
2019-10-01 06:58:46 +00:00
- [Blokada ](https://github.com/blokadaorg/blokada/ )
2019-04-29 11:17:26 +00:00
- [Google Hit Hider ](https://www.jeffersonscher.com/gm/google-hit-hider/ )
- [hostsmgr ](https://www.henrypp.org/product/hostsmgr )
- [Personal Blocklist ](https://addons.mozilla.org/firefox/addon/personal-blocklist/ )
- [personalDNSfilter ](https://zenz-solutions.de/personaldnsfilter )
- [Pi-hole ](https://pi-hole.net/ )
- [Samsung Knox ](https://www.samsungknox.com/ )
- [uMatrix ](https://github.com/gorhill/uMatrix )
2019-10-01 06:58:46 +00:00
The filters listed in [Subscribe ](#subscribe ) section are not compatible.
Instead, use the following blocklist:
2019-06-28 10:21:42 +00:00
2019-10-01 06:58:46 +00:00
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts.txt
Mirrors:
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts.txt
- https://cdn.staticaly.com/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts.txt
< br / >
Lite version (online hosts only):
- https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts-online.txt
Mirrors:
- https://glcdn.githack.com/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts-online.txt
- https://cdn.staticaly.com/gl/curben/urlhaus-filter/raw/master/urlhaus-filter-hosts-online.txt
2019-06-28 10:21:42 +00:00
2019-10-01 06:58:46 +00:00
Note that host-based software does not block malware URLs hosted by well-known domains (e.g. amazonaws.com, docs.google.com, dropbox.com).
2019-05-11 10:05:19 +00:00
2018-11-12 00:49:13 +00:00
## Issues
2018-10-09 06:18:46 +00:00
2019-05-11 10:05:19 +00:00
Report any false positive by creating an [issue ](https://gitlab.com/curben/urlhaus-filter/issues ) or [merge request ](https://gitlab.com/curben/urlhaus-filter/merge_requests )
2018-10-09 06:18:46 +00:00
2019-05-11 10:05:19 +00:00
This filter **only** accepts malware URLs from [URLhaus ](https://urlhaus.abuse.ch/ ).
2018-10-09 06:18:46 +00:00
2019-04-29 11:49:38 +00:00
Please report new malware URL to the upstream maintainer through https://urlhaus.abuse.ch/api/#submit.
2018-10-09 06:18:46 +00:00
2019-06-13 06:56:45 +00:00
This repo is not endorsed by Abuse.ch.
2018-10-09 06:18:46 +00:00
2019-03-07 00:39:54 +00:00
## Cloning
Since the filter is updated frequently, cloning the repo would become slower over time as the revision grows.
2019-05-11 10:05:19 +00:00
Use shallow clone to get the recent revisions only. Getting the last five revisions should be sufficient for a valid MR.
2019-03-07 00:39:54 +00:00
`git clone --depth 5 https://gitlab.com/curben/urlhaus-filter.git`
2018-11-12 00:49:13 +00:00
## License
[Creative Commons Zero v1.0 Universal ](LICENSE.md )
2018-10-09 06:18:46 +00:00
## FAQ
2018-11-12 00:49:13 +00:00
See [wiki ](https://gitlab.com/curben/urlhaus-filter/wikis/FAQ ).
