urlhaus-filter (Domains)

1. Open the AdGuard Home dashboard and go to Filters → DNS blocklists.
2. Click Add blocklist → Add a custom list.
3. Enter urlhaus-filter (Domains) as name and paste the URL below, then click Save.
4. AdGuard Home refreshes lists automatically; use Check for updates to force it.

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt

AdGuard Home documentation

Subscribe in uBlock Origin

Manual import

1. Click the uBlock Origin icon → Dashboard (gear icon).
2. Open the Filter lists tab and scroll to the bottom.
3. Expand Import…, paste the URL below and click Apply changes.

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt

uBlock Origin documentation

Subscribe in AdGuard

1. Open AdGuard → Settings → Filters → Custom.
2. Click Add custom filter and paste the URL below.
3. Confirm with Next / Add.

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt

AdGuard (Apps) documentation

1. Open the web console and go to Settings → Blocking.
2. Paste the URL below into Block List URLs (one per line) and click Save Settings.
3. Technitium downloads the list immediately and refreshes it every 24 hours.

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt

Technitium DNS documentation

1. Go to Services → Unbound DNS → Blocklist.
2. Enable the blocklist feature and paste the URL below into URLs of Blocklists.
3. Click Apply. OPNsense downloads the list via cron (default: daily).

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt

OPNsense (Unbound) documentation

1. Go to Firewall → pfBlockerNG → DNSBL → DNSBL Groups (or IP for IP lists).
2. Click Add, give the group a name and add the URL below as source (Format: Auto).
3. Save, then run Update → Force Reload.

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt

pfBlockerNG documentation

Add the list to the blocking.denylists section of your config.yml:

blocking:
  denylists:
    default:
      - https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt
  clientGroupsBlock:
    default:
      - default

Restart Blocky afterwards.

Blocky documentation

banIP (recommended)

1. Install the package: opkg update && opkg install banip luci-app-banip
2. Open LuCI → Services → banIP → Feeds and add a custom feed with the URL below.
3. Enable the feed and click Save & Apply.

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt

Manual with nftables

wget -qO /tmp/blocklist.txt "https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt"
nft add set inet fw4 blocklist { type ipv4_addr; flags interval; }
nft -f - <<EOF
$(awk '!/^[#;]/ && NF {print "add element inet fw4 blocklist { " $1 " }"}' /tmp/blocklist.txt)
EOF
nft add rule inet fw4 forward ip saddr @blocklist drop

OpenWrt (banIP) documentation