https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware Open raw list Description
Filter list covering malware. Format: Domains. Maintained by ShadowWhisperer. See the project homepage for details and inclusion criteria.
Integration
Pi-hole v6 (web interface)
- Open the admin interface and go to Settings → Lists.
- Paste the address below into Address, optionally add a comment and click Add.
- Go to Tools → Update Gravity (or run
pihole -g) to download the list.
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/MalwarePi-hole v5
- Go to Group Management → Adlists.
- Paste the address into Address and click Add.
- Run
pihole -gor use Tools → Update Gravity.
Command line (v5 / v6)
sudo sqlite3 /etc/pihole/gravity.db "INSERT INTO adlist (address, enabled, comment) VALUES ('https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware', 1, 'ShadowWhisperer – Malware');"
pihole -gPi-hole v5 only understands hosts and plain domain lists. Since v6 ABP-style entries (||example.com^) are supported as well.
- Open the AdGuard Home dashboard and go to Filters → DNS blocklists.
- Click Add blocklist → Add a custom list.
- Enter ShadowWhisperer – Malware as name and paste the URL below, then click Save.
- AdGuard Home refreshes lists automatically; use Check for updates to force it.
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/MalwareManual import
- Click the uBlock Origin icon → Dashboard (gear icon).
- Open the Filter lists tab and scroll to the bottom.
- Expand Import…, paste the URL below and click Apply changes.
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware- Open AdGuard → Settings → Filters → Custom.
- Click Add custom filter and paste the URL below.
- Confirm with Next / Add.
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware- Open the web console and go to Settings → Blocking.
- Paste the URL below into Block List URLs (one per line) and click Save Settings.
- Technitium downloads the list immediately and refreshes it every 24 hours.
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware- Go to Services → Unbound DNS → Blocklist.
- Enable the blocklist feature and paste the URL below into URLs of Blocklists.
- Click Apply. OPNsense downloads the list via cron (default: daily).
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware- Go to Firewall → pfBlockerNG → DNSBL → DNSBL Groups (or IP for IP lists).
- Click Add, give the group a name and add the URL below as source (Format: Auto).
- Save, then run Update → Force Reload.
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/MalwareAdd the list to the blocking.denylists section of your config.yml:
blocking:
denylists:
default:
- https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware
clientGroupsBlock:
default:
- defaultRestart Blocky afterwards.
banIP (recommended)
- Install the package:
opkg update && opkg install banip luci-app-banip - Open LuCI → Services → banIP → Feeds and add a custom feed with the URL below.
- Enable the feed and click Save & Apply.
https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/MalwareManual with nftables
wget -qO /tmp/blocklist.txt "https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Malware"
nft add set inet fw4 blocklist { type ipv4_addr; flags interval; }
nft -f - <<EOF
$(awk '!/^[#;]/ && NF {print "add element inet fw4 blocklist { " $1 " }"}' /tmp/blocklist.txt)
EOF
nft add rule inet fw4 forward ip saddr @blocklist drop