The Crypto Firewall is a threat intelligence and blocking system built to defend against crypto-related threats including phishing, scams, malware, and cryptojacking.
With continuously updated blocklists, filters, and indicators of compromise (IOCs), it can be deployed across browsers, operating systems, and networks—helping you stay protected in an increasingly hostile crypto environment.
If you discover a false positive or need to add a new block, then feel free to raise an Issue or a Pull request to add/remove them to the lists.
- Core Infrastructure Blocking 🌐
- Application & User Threats 👨💻
- Blockchain Threat Intelligence 🕵️
- Sanctions & Compliance 🚫
- Overview ⚙️
- Core Threat Categories 🚨
- Infrastructure & Network 🌐
- Content & Behaviour 🧠
- Specialised Threats 🎯
- Issues 🔨
- Changelog 🏆
- Support / Donations 💗💗💗
- Sponsors ✨
- Backers ✨
- Contributions ✨
- Requesting Icons 🎁
Crypto Firewall is a threat intelligence and blocking system designed to defend against crypto-related threats including phishing, scams, malware, and cryptojacking.
It provides continuously updated blocklists and indicators of compromise (IOCs) for use across browsers, operating systems, and network-level security tools.
Why Crypto Firewall?
The cryptocurrency ecosystem is a high-value target for attackers, with threats evolving faster than traditional protections.
Crypto Firewall reduces risk by:
- Blocking malicious domains and infrastructure
- Preventing phishing and scam access
- Disrupting cryptojacking and malicious scripts
- Integrating with modern security tooling
Get protected in under 2 minutes:
- Install an adblocker (e.g. Brave or uBlock Origin)
- Add one list:
- Lite (low resource):
https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/lite-version.txt
- Full (recommended):
https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/full-version.txt
- Mega (maximum protection):
https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/mega-version.txt
- Restart your browser
➡️ See Installation for advanced setups
Recommended Setup
- Most users: Full
- High-performance / network-level: Mega
- Low-end devices / mobile: Lite
- Testing / early adopters: Beta
Who is this for?
- Individual traders and investors
- Security-conscious users
- Developers and system administrators
- Network operators and security teams
Supports deployment at:
- Browser level (adblockers)
- OS level (hosts file)
- Network level (DNS, firewalls, IDS/IPS)
Threat Model
Mitigates:
- Phishing and scam infrastructure
- Cryptojacking (browser-based mining)
- Malware distribution endpoints
- Command-and-control (C2) servers
- Fraudulent blockchain services
Does not cover:
- Zero-day exploits
- Compromised endpoints
- Social engineering outside detectable infrastructure
Scope & Limitations
- Not a complete security solution
- Not a replacement for antivirus or endpoint protection
- Not guaranteed to block all threats
Use as part of a layered security strategy.
Data & Updates
Blocklists are continuously updated from:
- Threat intelligence research
- Community contributions
- Ongoing analysis of emerging threats
Enable automatic updates where supported.
Deploy Crypto Firewall at the browser, system, and/or network level to achieve layered protection.
Use a browser that supports Adblock Plus-compatible filter lists.
Built-in ad and tracker blocking with strong privacy defaults.
-
Chrome Browser Guide – MV3 limits (~30k rules) -
Firefox Guide – Recommended for full extension capability -
Opera Browser Guide – Native adblocking
Use these tools with the provided filter lists:
Deploy filtering at the DNS or network layer for system-wide enforcement.
Use for advanced monitoring, detection, and enforcement:
Apply system-wide blocking via hosts file:
-
Domains only: https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/hosts-domains-only.txt
-
Domains + IPs: https://raw.githubusercontent.com/chartingshow/crypto-firewall/master/src/blacklists/hosts-domains-and-ips.txt
-
Editing guide: https://github.com/chartingshow/crypto-firewall/blob/master/docs/help-guides/how-to-edit-your-hosts-file.md
Removes UI clutter, tracking, and promotional noise without breaking core functionality.
Quick install:
For a thorough explanation on how to add the lists to your adblocker, open one of the help guides found in this folder:
Filtering may impact performance. Choose a version based on your device capability:
Choose a version based on your device performance. If unsure, start with full and adjust based on performance.
-
Low-End Devices →
lite(upgrade tofullif stable) -
Mid-Range Devices →
full(downgrade toliteif needed) -
High-Performance Devices →
mega(fallback:full) -
Enthusiast / Workstations →
megaorbeta(fallback:full)
The Lite version excludes all the modules.
There are two methods to install into your Adblocker:
- Click the link below:
- Copy and paste the link in the settings of the ad-blocker:
The Full version contains all the modules (except the crypto annoyances (stable), domains (stable), subdomains (stable), urls (stable) and adverts-filters (unstable) modules).
There are two methods to install into your Adblocker:
- Click the link below:
- Copy and paste the link in the settings of the ad-blocker:
The Mega version contains all the modules (except adverts-filters (unstable) module).
There are two methods to install into your Adblocker:
- Click the link below:
- Copy and paste the link in the settings of the ad-blocker:
The Beta version contains all the stable and unstable modules.
To help the repo grow, please feel free to report any bugs!
There are two methods to install into your Adblocker:
- Click the link below:
- Copy and paste the link in the settings of the ad-blocker:
-
Free DNS / Hosting Blocks high-abuse hosting providers frequently used for malware. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/free-dns-hosting/
-
ASN Blocking Blocks entire network ranges linked to malicious activity. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/asn.txt
-
IP Blocking Blocks known malicious IPs (e.g. C2 servers, malware infrastructure). → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/ip.txt → https://github.com/chartingshow/crypto-firewall/blob/master/src/ip-adblock.txt
-
Custom IP Lists (Advanced) Targeted IP blocks that may overlap with shared infrastructure — review before use. → https://github.com/chartingshow/crypto-firewall/tree/master/src/blacklists/custom-ip-block-lists
-
Malicious Extensions & Packages Blocks known malicious browser extensions and software packages. → https://github.com/chartingshow/crypto-firewall/tree/master/src/blacklists/packages-and-extensions
-
Email Threats Blocks scam, ransomware, sextortion, and blackmail email addresses. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/email.txt
-
Spam Calls References tools to block scam and spoofed numbers. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/spam-calls/list.md
-
Wallet Addresses Blocks known malicious or scam-linked wallet addresses. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/blockchain-wallet-addresses/
-
Transactions Blocks suspicious transaction hashes linked to fraud or C2 activity. → https://github.com/chartingshow/crypto-firewall/tree/master/src/blacklists/blockchain-transactions
-
Mining Pools Blocks malicious or high-risk mining pool addresses. → https://github.com/chartingshow/crypto-firewall/blob/master/src/blacklists/mining-pools-addresses/
- OFAC Sanctions Blocks sanctioned digital currency addresses (SDN and related lists). → https://github.com/chartingshow/crypto-firewall/tree/master/src/ofac-sanctioned-digital-currency-addresses → https://home.treasury.gov/policy-issues/financial-sanctions/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
Crypto Firewall modules are grouped by threat type and use case:
Primary security filters targeting high-risk threats.
- Malware Filter List
- Phishing Filter List
- Phishing Other Filter List
- Scam Filter List
- Fraud Filter List
- Ransomware Filter List
Focuses on domains, botnets, and network-level indicators.
Targets ads, tracking, and misleading content.
-
Tracking Filter List
⚠️ May break websites (blocks JavaScript-heavy functionality)
Targeted filters for specific attack vectors.
- Bank Phishing Filter List
- Pig Butchering Filter List
- PUP Filter List
- Abuse Filter List
- Malicious Filter List
If you face any issue, you can create a new issue in the Issues tab and we will be glad to help you out!
Please see CHANGELOG for more information what has changed recently.
If you like Charting Show you can support the project's improvements and development of new features with a donation to our collective.
👉 https://opencollective.com/chartingshow
Support us by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]
Thank you to all our backers! 🙏 [Become a backer]
This project exists thanks to all the people who contribute.
We are actively inviting new contributors! To get started, please read the contribution guide.
This project is only possible thanks to the work of many dedicated contributors. Everyone is encouraged to help in ways large and small. Here are a few ways you can contribute:
- Review existing content and help fix spelling, grammar, or clarity issues
- Pick an open issue and submit a pull request
- Open a new issue to suggest improvements, report bugs, or propose features
By submitting a contribution (including pull requests, issues, or any form of content), you agree that your contributions will be licensed under the GNU General Public License v3.0 (GPL-3.0).
You also confirm that:
- You have the legal right to contribute the content
- Your contribution does not violate any third-party rights
- Any included third-party material complies with its respective licensing terms
When you want to request a icon please feel to create an issue. See our contribution guidelines for more information.
We take security seriously and support responsible disclosure.
If you discover a security vulnerability, report it privately to the maintainers rather than opening a public issue. This enables safe investigation and remediation.
For bugs, false positives, or feature requests, use the GitHub Issues tab.
No Warranty
This software is provided "as is", without warranty of any kind, express or implied, including but not limited to:
- Fitness for a particular purpose
- Reliability or availability
- Protection against all security threats
See the GNU General Public License v3.0 for full terms.
Limitation of Liability
Maintainers and contributors shall not be liable for:
- Financial loss (including cryptocurrency loss)
- Security breaches or system compromise
- Data loss or corruption
- Service disruption or downtime
- Any direct, indirect, incidental, or consequential damages
arising from use of this project.
False Positives
Filtering and threat intelligence are inherently imperfect:
- Legitimate domains, IPs, or services may be blocked
- Malicious infrastructure may evade detection
Validation is required before production use.
Financial Disclaimer
No financial or investment advice is provided. Independent due diligence is required for all cryptocurrency activity.
Use at Your Own Risk
Security is an evolving domain. No solution provides complete protection. Responsibility for implementation and use remains with the user.
This project provides curated blocklists, filtering rules, and security guidance to reduce exposure to malicious activity in the cryptocurrency ecosystem.
Scope and Purpose
Crypto Firewall is a defensive security resource, not a standalone security control or guaranteed protection mechanism. It should be deployed as part of a layered security strategy.
Data Sources
Data is derived from:
- Public threat intelligence sources
- Community contributions
- Independent research
Accuracy, completeness, and timeliness are not guaranteed.
Third-Party Services
References to third-party platforms, tools, or trademarks are for informational purposes only.
All trademarks remain the property of their respective owners. No affiliation or endorsement is implied.
Copyright (c) Charting Show.
This project is licensed under the GNU General Public License v3.0 (GPL-3.0).
You are free to:
- Use, study, and run the software
- Modify and adapt the code
- Distribute original or modified versions
provided that any derivative work is also licensed under GPL-3.0.
For full license terms, see the LICENSE file or visit:
https://www.gnu.org/licenses/gpl-3.0
crypto security, crypto firewall, crypto scam protection, phishing protection, malicious domains, IP blocklist, ASN blocking, Web3 security, DeFi security, scam wallet blacklist, adblock crypto filter, DNS filtering, network security, threat intelligence, fraud prevention, crypto malware, browser protection, crypto phishing sites
Made with ❤️ for the Decentralized World.