The Crypto Firewall is a threat intelligence and blocking system built to defend against crypto-related threats including phishing, scams, malware, and cryptojacking.

With continuously updated blocklists, filters, and indicators of compromise (IOCs), it can be deployed across browsers, operating systems, and networks—helping you stay protected in an increasingly hostile crypto environment.

If you discover a false positive or need to add a new block, then feel free to raise an Issue or a Pull request to add/remove them to the lists.

Table of Contents 📑

1. Overview

• Quick Start ⚡

2. Getting Started

• Installation ❤️
  • Browser Blocking 🌟
  • Ad Blockers ☀️
  • Network / DNS Filtering 🔓
  • Firewalls / IDS / SIEM 🛡️
  • Operating System Blocking 🌟
• Crypto Annoyances (Optional Step) 🚀

3. Usage & Versions

• Basic usage 🔥
• Recommended versions ✅
• Stable Versions 🏆
  • Lite Version
  • Full Version
  • Mega Version
• Beta Version ⚠️

4. Blocklists & Intelligence

• Core Infrastructure Blocking 🌐
• Application & User Threats 👨‍💻
• Blockchain Threat Intelligence 🕵️
• Sanctions & Compliance 🚫

5. Modules

• Overview ⚙️
• Core Threat Categories 🚨
• Infrastructure & Network 🌐
• Content & Behaviour 🧠
• Specialised Threats 🎯

6. Project & Community

• Issues 🔨
• Changelog 🏆
• Support / Donations 💗💗💗
• Sponsors ✨
• Backers ✨
• Contributions ✨
  • Contribution Terms
• Requesting Icons 🎁

7. Security & Legal

• Security 🔐
• Disclaimer ⚠️
• Legal ⚖️
• License 📄
  • Stargazers
  • SEO Keywords

Overview

Crypto Firewall is a threat intelligence and blocking system designed to defend against crypto-related threats including phishing, scams, malware, and cryptojacking.

It provides continuously updated blocklists and indicators of compromise (IOCs) for use across browsers, operating systems, and network-level security tools.

Why Crypto Firewall?

The cryptocurrency ecosystem is a high-value target for attackers, with threats evolving faster than traditional protections.

Crypto Firewall reduces risk by:

• Blocking malicious domains and infrastructure
• Preventing phishing and scam access
• Disrupting cryptojacking and malicious scripts
• Integrating with modern security tooling

Quick Start ⚡

Get protected in under 2 minutes:

1. Install an adblocker (e.g. Brave or uBlock Origin)
2. Add one list:

• Lite (low resource):

https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/lite-version.txt

• Full (recommended):

https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/full-version.txt

• Mega (maximum protection):

https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/mega-version.txt

1. Restart your browser

➡️ See Installation for advanced setups

Recommended Setup

• Most users: Full
• High-performance / network-level: Mega
• Low-end devices / mobile: Lite
• Testing / early adopters: Beta

Who is this for?

• Individual traders and investors
• Security-conscious users
• Developers and system administrators
• Network operators and security teams

Supports deployment at:

• Browser level (adblockers)
• OS level (hosts file)
• Network level (DNS, firewalls, IDS/IPS)

Threat Model

Mitigates:

• Phishing and scam infrastructure
• Cryptojacking (browser-based mining)
• Malware distribution endpoints
• Command-and-control (C2) servers
• Fraudulent blockchain services

Does not cover:

• Zero-day exploits
• Compromised endpoints
• Social engineering outside detectable infrastructure

Scope & Limitations

• Not a complete security solution
• Not a replacement for antivirus or endpoint protection
• Not guaranteed to block all threats

Use as part of a layered security strategy.

Data & Updates

Blocklists are continuously updated from:

• Threat intelligence research
• Community contributions
• Ongoing analysis of emerging threats

Enable automatic updates where supported.

Getting Started

Installation ❤️

Deploy Crypto Firewall at the browser, system, and/or network level to achieve layered protection.

Browser Blocking 🌟

Use a browser that supports Adblock Plus-compatible filter lists.

Recommended ⭐

• Brave Desktop Guide
• Brave Mobile Guide

Built-in ad and tracker blocking with strong privacy defaults.

Alternatives ✨

• AdBlock Browser Guide

• Chrome Browser Guide – MV3 limits (~30k rules)

• Firefox Guide – Recommended for full extension capability

• Opera Browser Guide – Native adblocking

• Vivaldi Guide

Ad Blockers ☀️

Use these tools with the provided filter lists:

• AdAway Guide

• AdBlock Plus Guide

• AdGuard Guide

• Blokada Android Guide

• Blokada iOS Guide

• DNS66 Guide

• uBlock Origin (MV2) Guide

• uBlock Origin Lite (MV3) Guide

Network / DNS Filtering 🔓

Deploy filtering at the DNS or network layer for system-wide enforcement.

• Bind RPZ Guide

• Bind Zone Guide

• Blocky Guide

• Dnsmasq Android Instructions Guide

• Dnsmasq Linux Instructions Guide

• Dnsmasq Mac OS Instructions Guide

• Dnsmasq Windows Instructions Guide

• Dnscrypt-Proxy Guide

• NextDNS Guide

• Pi-hole Guide

Firewalls / IDS / SIEM 🛡️

Use for advanced monitoring, detection, and enforcement:

• pfSense + pfBlockerNG Guide

• Snort3 Guide

• Splunk Guide

• Splunk App Guide

• Suricata Linux & Mac OS Instructions Guide

• Suricata Windows Instructions Guide

• Suricata SNI Linux Instructions Guide

• Suricata SNI Mac OS Instructions Guide

• Suricata SNI Windows Instructions Guide

Operating System Blocking 🌟

Apply system-wide blocking via hosts file:

• Linux Guide

• macOS Guide

• Windows Guide

Hosts Lists

• Domains only: https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/hosts-domains-only.txt

• Domains + IPs: https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/hosts-domains-and-ips.txt

• Editing guide: https://github.com/chartingshow/crypto-firewall/blob/master/docs/help-guides/how-to-edit-your-hosts-file.md

Crypto Annoyances (Optional) 🚀

Removes UI clutter, tracking, and promotional noise without breaking core functionality.

• Crypto Annoyances Filter

Quick install:

• Brave Desktop Guide
• Brave Mobile Guide

Usage & Versions

Basic usage 🔥

For a thorough explanation on how to add the lists to your adblocker, open one of the help guides found in this folder:

• https://github.com/chartingshow/crypto-firewall/tree/master/docs

Recommended versions ✅

Filtering may impact performance. Choose a version based on your device capability:

Suggested Versions (Performance & Device)

Choose a version based on your device performance. If unsure, start with full and adjust based on performance.

• Low-End Devices → lite (upgrade to full if stable)

• Mid-Range Devices → full (downgrade to lite if needed)

• High-Performance Devices → mega (fallback: full)

• Enthusiast / Workstations → mega or beta (fallback: full)

Stable Versions 🏆

Lite Version

The Lite version excludes all the modules.

There are two methods to install into your Adblocker:

1. Click the link below:

• https://subscribe.adblockplus.org/?location=https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/lite-version.txt&title=Crypto%20Firewall%20Lite%20Version

1. Copy and paste the link in the settings of the ad-blocker:

• https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/lite-version.txt

Full Version

The Full version contains all the modules (except the crypto annoyances (stable), domains (stable), subdomains (stable), urls (stable) and adverts-filters (unstable) modules).

There are two methods to install into your Adblocker:

1. Click the link below:

• https://subscribe.adblockplus.org/?location=https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/full-version.txt&title=Crypto%20Firewall%20Full%20Version

1. Copy and paste the link in the settings of the ad-blocker:

• https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/full-version.txt

Mega Version

The Mega version contains all the modules (except adverts-filters (unstable) module).

There are two methods to install into your Adblocker:

1. Click the link below:

• https://subscribe.adblockplus.org/?location=https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/mega-version.txt&title=Crypto%20Firewall%20Mega%20Version

1. Copy and paste the link in the settings of the ad-blocker:

• https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/mega-version.txt

Beta Version ⚠️

The Beta version contains all the stable and unstable modules.

To help the repo grow, please feel free to report any bugs!

There are two methods to install into your Adblocker:

1. Click the link below:

• https://subscribe.adblockplus.org/?location=https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/beta-version.txt&title=Crypto%20Firewall%20Beta%20Version

1. Copy and paste the link in the settings of the ad-blocker:

• https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/beta-version.txt

Blocklists & Intelligence

Core Infrastructure Blocking 🌐

• Free DNS / Hosting Blocks high-abuse hosting providers frequently used for malware, phishing, and scam infrastructure. → https://github.com/chartingshow/crypto-firewall/tree/master/src/blacklists/free-dns-hosting/

• ASN Blocking Blocks entire autonomous system networks associated with malicious activity. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/asn.txt

• IPv4 Blocking Blocks known malicious IPv4 addresses including:

  • command-and-control (C2) systems
  • malicious automation networks
  • malware infrastructure
  • phishing servers

  → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/ipv4.txt

• IPv6 Blocking Blocks known malicious IPv6 addresses associated with cyber threats and abusive infrastructure.

  → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/ipv6.txt

• Server Filter Configurations Pre-generated server filter rules for popular web servers and reverse proxies.

  Supported platforms:

  • Apache HTTP Server
  • Caddy
  • Google App Engine
  • HAProxy
  • Lighttpd
  • Microsoft IIS
  • Nginx

  → https://github.com/chartingshow/crypto-firewall/tree/master/src/blacklists/server-filters

• Custom IP Lists (Advanced) Targeted IP blocklists that may overlap with shared hosting or CDN infrastructure. Review carefully before deployment in production environments.

  → https://github.com/chartingshow/crypto-firewall/tree/master/src/blacklists/custom-ip-block-lists

Application & User Threats 👨‍💻

• Malicious Extensions & Packages Blocks known malicious browser extensions and software packages. → https://github.com/chartingshow/crypto-firewall/tree/master/src/blacklists/packages-and-extensions

• Email Threats Blocks scam, ransomware, sextortion, and blackmail email addresses. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/email.txt

• Spam Calls References tools to block scam and spoofed numbers. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/spam-calls/list.md

Blockchain Threat Intelligence 🕵️

• Wallet Addresses Blocks known malicious or scam-linked wallet addresses. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/blockchain-wallet-addresses/

• Transactions Blocks suspicious transaction hashes linked to fraud or C2 activity. → https://github.com/chartingshow/crypto-firewall/tree/master/src/blacklists/blockchain-transactions

• Mining Pools Blocks malicious or high-risk mining pool addresses. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/mining-pools-addresses/

Sanctions & Compliance 🚫

• OFAC Sanctions Blocks sanctioned digital currency addresses (SDN and related lists). → https://github.com/chartingshow/crypto-firewall/tree/master/src/ofac-sanctioned-digital-currency-addresses → https://home.treasury.gov/policy-issues/financial-sanctions/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists

Modules

Overview ⚙️

Crypto Firewall modules are grouped by threat type and use case:

Core Threat Categories 🚨

Primary security filters targeting high-risk threats.

• Malware Filter List
• Phishing Filter List
• Phishing Other Filter List
• Scam Filter List
• Fraud Filter List
• Ransomware Filter List

Infrastructure & Network 🌐

Focuses on domains, botnets, and network-level indicators.

• Botnet Filter List
• Domain Filter List
• Subdomain Filter List
• Url Filter List
• URLhaus Filter List

Content & Behaviour 🧠

Targets ads, tracking, and misleading content.

• Ad Server Filter List

• Adverts Filter List

• Tracking Filter List ⚠️ May break websites (blocks JavaScript-heavy functionality)

• Fake News Filter List

Specialised Threats 🎯

Targeted filters for specific attack vectors.

• Bank Phishing Filter List
• Pig Butchering Filter List
• PUP Filter List
• Abuse Filter List
• Malicious Filter List

Project & Community

Issues 🔨

If you face any issue, you can create a new issue in the Issues tab and we will be glad to help you out!

Changelog 🏆

Please see CHANGELOG for more information what has changed recently.

Support / Donations 💗💗💗

If you like Charting Show you can support the project's improvements and development of new features with a donation to our collective.

👉 https://opencollective.com/chartingshow

Sponsors ✨

Support us by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

Backers ✨

Thank you to all our backers! 🙏 [Become a backer]

Contributions ✨

This project exists thanks to all the people who contribute.

We are actively inviting new contributors! To get started, please read the contribution guide.

This project is only possible thanks to the work of many dedicated contributors. Everyone is encouraged to help in ways large and small. Here are a few ways you can contribute:

• Review existing content and help fix spelling, grammar, or clarity issues
• Pick an open issue and submit a pull request
• Open a new issue to suggest improvements, report bugs, or propose features

Contribution Terms

By submitting a contribution (including pull requests, issues, or any form of content), you agree that your contributions will be licensed under the GNU General Public License v3.0 (GPL-3.0).

You also confirm that:

• You have the legal right to contribute the content
• Your contribution does not violate any third-party rights
• Any included third-party material complies with its respective licensing terms

Requesting Icons 🎁

When you want to request a icon please feel to create an issue. See our contribution guidelines for more information.

Security & Legal

Security 🔐

We take security seriously and support responsible disclosure.

If you discover a security vulnerability, report it privately to the maintainers rather than opening a public issue. This enables safe investigation and remediation.

For bugs, false positives, or feature requests, use the GitHub Issues tab.

Disclaimer ⚠️

No Warranty

This software is provided "as is", without warranty of any kind, express or implied, including but not limited to:

• Fitness for a particular purpose
• Reliability or availability
• Protection against all security threats

See the GNU General Public License v3.0 for full terms.

Limitation of Liability

Maintainers and contributors shall not be liable for:

• Financial loss (including cryptocurrency loss)
• Security breaches or system compromise
• Data loss or corruption
• Service disruption or downtime
• Any direct, indirect, incidental, or consequential damages

arising from use of this project.

False Positives

Filtering and threat intelligence are inherently imperfect:

• Legitimate domains, IPs, or services may be blocked
• Malicious infrastructure may evade detection

Validation is required before production use.

Financial Disclaimer

No financial or investment advice is provided. Independent due diligence is required for all cryptocurrency activity.

Use at Your Own Risk

Security is an evolving domain. No solution provides complete protection. Responsibility for implementation and use remains with the user.

Legal ⚖️

This project provides curated blocklists, filtering rules, and security guidance to reduce exposure to malicious activity in the cryptocurrency ecosystem.

Scope and Purpose

Crypto Firewall is a defensive security resource, not a standalone security control or guaranteed protection mechanism. It should be deployed as part of a layered security strategy.

Data Sources

Data is derived from:

• Public threat intelligence sources
• Community contributions
• Independent research

Accuracy, completeness, and timeliness are not guaranteed.

Third-Party Services

References to third-party platforms, tools, or trademarks are for informational purposes only.

All trademarks remain the property of their respective owners. No affiliation or endorsement is implied.

License 📄

Copyright (c) Charting Show.

This project is licensed under the GNU General Public License v3.0 (GPL-3.0).

You are free to:

• Use, study, and run the software
• Modify and adapt the code
• Distribute original or modified versions

provided that any derivative work is also licensed under GPL-3.0.

For full license terms, see the LICENSE file or visit: https://www.gnu.org/licenses/gpl-3.0

Many Thanks to all the Stargazers who have supported this project with stars(⭐)

SEO Keywords

crypto security, crypto firewall, crypto scam protection, phishing protection, malicious domains, IP blocklist, ASN blocking, Web3 security, DeFi security, scam wallet blacklist, adblock crypto filter, DNS filtering, network security, threat intelligence, fraud prevention, crypto malware, browser protection, crypto phishing sites

⬆ back to top

Made with ❤️ for the Decentralized World.