Sorry, mis communication from my side probably.
With your static user rules and dynamic easy-medium mode to limit attack surface from third-party domains, you don't need the uBO malware / phishing blocklists.
I mentioned the uBO and abuse.ch url house database (
link) just as an example (go check them out and you will see you block 95% of them).
It is better to do malware blocking at DNS level and add an extension of a security vendor, simply because their blacklists are 1000x larger than the blocklists of uBO
With above approach you already have multiple layers (definitely no need to add a malware/phishing blocklist to your adblocker)
- At DNS level (Quad9, NextDNS, Cloudflare 1.1.1.2)
- Google Safe browsing or Microsoft Smartscreen filter in your browser
- Extension from a reputable security vendor (Bitdefender, Emsisoft, Netcraft)
- Most AV-'s have some network filtering or https-scanning module/mechanism
- a) For URL's your third-party exposure reduction rules in uBO or AG
b) For downloads with MOTW - smartscreen again
Malware and phishing links usually live shorter than 24 hours. The default update frequency of blocklists in adblockers is once a day (or once every 48 hours), which makes them near to useless for short lived malware URL blocking.
github.com
Thanks!
gitflic.ru
