1275.ru DGA Feed – QSnatch

1. Open the AdGuard Home dashboard and go to Filters → DNS blocklists.
2. Click Add blocklist → Add a custom list.
3. Enter 1275.ru DGA Feed – QSnatch as name and paste the URL below, then click Save.
4. AdGuard Home refreshes lists automatically; use Check for updates to force it.

https://1275.ru/DGA/qsnatch.txt

AdGuard Home Dokumentation

Add the list to the blocking.denylists section of your config.yml:

blocking:
  denylists:
    default:
      - https://1275.ru/DGA/qsnatch.txt
  clientGroupsBlock:
    default:
      - default

Restart Blocky afterwards.

Blocky Dokumentation

banIP (recommended)

1. Install the package: opkg update && opkg install banip luci-app-banip
2. Open LuCI → Services → banIP → Feeds and add a custom feed with the URL below.
3. Enable the feed and click Save & Apply.

https://1275.ru/DGA/qsnatch.txt

Manual with nftables

wget -qO /tmp/blocklist.txt "https://1275.ru/DGA/qsnatch.txt"
nft add set inet fw4 blocklist { type ipv4_addr; flags interval; }
nft -f - <<EOF
$(awk '!/^[#;]/ && NF {print "add element inet fw4 blocklist { " $1 " }"}' /tmp/blocklist.txt)
EOF
nft add rule inet fw4 forward ip saddr @blocklist drop

OpenWrt (banIP) Dokumentation