一、国家互联网应急中心威胁预警恶意代码网址https://www.cert.org.cn/publish/main/10/index.html二、规则参考的网址三、json规则编码utf-8 with bom lf{ ver:6.0, tag:malurl_user, data:[ { id:1, name:dns, power:true, rules:27.124.42.32\r202.79.174.219\r118.107.24.242\r27.124.17.11\r118.107.32.155\r112.213.116.170\r134.122.183.142\r143.92.48.15\r202.79.175.100\r27.124.34.143\r143.92.56.180\r27.124.20.237\r137.220.229.5\r143.92.63.213\r27.124.12.72\r137.220.229.16\r192.252.176.48\r118.107.47.76\r27.124.2.196\r27.124.2.214\r202.95.14.241\r202.79.171.149\r143.92.57.29\r14.128.50.26\r143.92.52.183\r202.95.11.163\r202.79.168.144\r143.92.53.251\r143.92.63.247\r143.92.56.81\r143.92.56.8\r27.124.45.61\r27.124.41.92\r202.95.14.218\r143.92.53.134\r27.124.42.48\r202.79.168.160\r118.107.40.48\r143.92.63.214\r27.124.42.39\r27.124.17.18\r118.107.24.243\r202.95.14.252\r202.95.14.230\r202.95.11.179\r27.124.42.51\r27.124.42.50\r27.124.34.144\r27.124.20.238\r143.92.63.249\r118.107.47.78 }, { id:2, name:siverfox, power:true, rules:103.73.220.57\r\r47.76.195.75\r\r104.143.33.78\r\r103.156.25.99\r\r122.248.198.240\r\r203.91.74.8\r\r154.23.183.157\r\r47.76.255.167\r\r27.124.2.150\r\r185.203.39.134\r\r103.12.148.80\r\r137.220.158.22\r\r182.16.88.242\r\r192.238.128.30\r\r103.156.25.99\r\r54.254.148.22\r\r154.23.184.120\r\r192.252.176.79\r\r47.130.236.119\r\r137.220.153.134\r\rwww.ozz79u.com\r\rwww.danpengit.com\r\rwww.vpconn.fit\r\rychsq.icu\r\rwomsz.com\r\rtmm.magentaias.com\r\rItan7942.top\r\rdd.kmsccedn.com\r\rwww.w1pf9.com\r\rwww.amdyj15.com\r\rfeiji22.vip\r\rwoyfc.com\r\rvaeth.cn\r\rwww.hongyun4.com\r\rwww.chishuikaisuo.com\r\rwww.xr95633.com\r\rrtjthgjnwetghf39.top\r\rrr-tg-cn.com.cn\r\rzz-tg-cn.com.cn\rww-tg-cn.com.cn\rqq-tg-cn.com.cn\ree-tg-cn.com.cn\rhh-wps-office.com.cn\rbb-wps-office.com.cn\rxx-google-chome.hk.cn\rcc-google-chome.hk.cn\rzz-google-chome.hk.cn\rqq-google-chome.hk.cn\raa-google-chome.hk.cn\rtt-wps-office.com.cn\r1l-wps-office.com.cn\ree-wps-office.com.cn\ruu-wps-office.com.cn\rkk-wps-office.com.cn\rgg-wps-office.com.cn\rff-wps-office.com.cn\rdd-wps-office.com.cn\raa-wps-office.com.cn\rwps-office-wps-xlsx.com.cn\rwps-office-wps-world.com.cn\rtelegram-tg-zh.hl.cn\rtelegram-tg-web.hl.cn\rtelegram-tg-cn.hl.cn\rgoogle-google-chrome-site.hl.cn\rgoogle-google-chrome-pro.hl.cn\rgoogle-google-chrome-new.hl.cn\rwps-office-xlsx.com.cn\rwps-office-world.com.cn\rwps-office-excel.com.cn\rtelegram-dianbao-zh.hl.cn\rtelegram-dianbao-web.hl.cn\rtelegram-dianbao-cn.hl.cn\rgoogle-chrome-site.hl.cn\rgoogle-chrome-pro.hl.cn\rgoogle-chrome-new.hl.cn\rgoog-google-chrome.hl.cn\rwpwp-wps.com.cn\rwp-office-wps.com.cn\rgoo-google-chrome.hl.cn\rgg-google-chrome.hl.cn\rwp-wps-office.com.cn\rapps-chrome-browser.hl.cn\rzhcn-google-browser.hl.cn\rxls-wps-zhcn.com.cn\rgoogle-chrome-browser.com.cn\rcn-google-zhcn.com.cn\rword-wps-office.com.cn\rdoc-wps-office.com.cn\rwps-cnzh-ppt.com.cn\rgoogle-google-cn-chrome.hl.cn\rwps-work-office.com.cn\rchrome-cnzh-google.com.cn\rchrome-apps-google.com.cn\rapps-wps-ppt.com.cn\rzhcn-googlle-chrome.com.cn\rgooglle-chrome-apps.com.cn\rgoogllee-chrrome.hl.cn\rgogglle-chrome.com.cn\rgoogllee-chrrome.com.cn\rgoogle-chrome-chen.com.cn\ren-chrome-google.com.cn\rchrome-apps-google.hl.cn\rcnzh-chrome-google.hl.cn\rapi-google-chrome.hl.cn\rzn-google-chrome.com.cn\rgoogle-apps-chrome.com.cn\rwps-ooffiice.com.cn\rwps-office-ac.com.cn\rwps-ac-office.com.cn\rgoogle-cn-chrome.hl.cn\rapps-chrome-google.hl.cn\rchrome-ch-google.hl.cn\rzhcn-wps-xls.com.cn\rzhcn-goggle-chrome.hl.cn\rwps-word-office.com.cn\rwps-doc-office.com.cn\rgoogle-chrome-browser.hl.cn\rggogle-chrome.hl.cn\rgooglle-chrrome-zhcn.hl.cn\rgoogle-apps-zhcn.hl.cn\rchrome-zhcn-apps.hl.cn\rwps-cnzh-apps.com.cn\rapps-zhcn-wps.com.cn\roffice-zhcn-wps.com.cn\rwps-offiicee.com.cn\rwps-cn-office.com.cn\rwps-office-ch.com.cn\rgooglle-chrromee.hl.cn\rchromee-googlle.hl.cn\rchromee-cnzh-google.hl.cn\rwps-zhcn-office.com.cn\rwps-web-office.com.cn\rwps-apps-office.com.cn\rgoogle-web-chrome.hl.cn\rgoogle-app-chrome.hl.cn\rggooglle-chrome.hl.cn\rzhcn-googlle-chrrome.hl.cn\rgooglee-chrrome-com.hl.cn\rgoogle-apps-chrrome.hl.cn\rwps-office-ppt.com.cn\rwps-office-pdf.com.cn\rwps-officee-apps.com.cn\rgoogle-zhcn-chhrome.hl.cn\rgoogle-chhrrome.hl.cn\rapps-google-cchrome.hl.cn\rwps-zhcn-offiiice.com.cn\roffiiice-wps.com.cn\rapps-wps-offiiice.com.cn\rwps-office-pro.com.cn\rpros-wps.com.cn\rgoogle-cchhrome.hl.cn\rwps-pros.com.cn\rcnzh-google-cchrome.hl.cn\rapps-google-chhrome.hl.cn\rgoogle-chrrrome.hl.cn\rgoogle-cnzh-chromee.hl.cn\rapps-wps-offce.com.cn\rzh-wps-offce.com.cn\rwps-zhcn-offce.com.cn\rapps-google-chroome.hl.cn\rgoogle-zh-cn-chrome.hl.cn\rgoogle-cnzh-chrome.hl.cn\rgoogle-cn-zh-chrome.hl.cn\rzhcn-wps-office.hl.cn\rwps-zhcn-office.hl.cn\rwps-office-zhcn.hl.cn\rwps-zh-office.com.cn\rapps-wps-offfice.com.cn\rgoogle-apps-chrome.hl.cn\rwps-cnzh-office.com.cn\rgoogle-zhcn-chrome.hl.cn\rgoogle-chrromee.hl.cn\rzh-wps-platform.com.cn\rgoogle-chrrome-app.hl.cn\rapps-wps-platform.com.cn\rapps-wps-zhcn.com.cn\rcnzh-google-chrrome.hl.cn\rapps-google-chrroome.hl.cn\rgoogle-apps-zh.hl.cn\rgoogle-apps-cn.hl.cn\rwps-office-xls.com.cn\rchrome-apps-cn.hl.cn\rxls-wps.com.cn\rwps-xls.com.cn\rchrome-googlee-zhcn.hl.cn\rgoogle-apps-com.hl.cn\rgoogle-zhcn-cn.hl.cn\rapps-wps-cnzh.com.cn\rzhcn-wps-cn.com.cn\rapps-wps-zhcn.hl.cn\rapps-wps-word.hl.cn\rwps-ppt.hl.cn\rapps-zhcn-google.hl.cn\rapps-chrome-zhcn.hl.cn\rzhcn-apps-google.hl.cn\rzh-clash-apps.com.cn\rapps-clash-zh.com.cn\rclash-zh-cn.com.cn\rapps-wps-cn-zh.com.cn\rapps-wps-zh-cn.com.cn\rcn-googlle-chrome-apps.hl.cn\rapps-wps-zh-cn.hl.cn\rcn-zh-chrome-apps.hl.cn\rapps-chrome-cn-zh.hl.cn\rwps-pt.com.cn\rcn-wps-hl.com.cn\rwps-offiicce.com.cn\rch-chrome-apps.hl.cn\rapps-google-com-cn.hl.cn\rapps-chrome-zh-cn.hl.cn\rchrome-google.hn.cn\rchrome-google.ah.cn\rchrroome-googlle.hl.cn\rchrrome-googlie.hl.cn\rwps-office-mb.com.cn\rwps-office-mb.hl.cn\rchrrome-googlle.hl.cn\rgoogle-chrrome.ac.cn\rwww-google.ac.cn\rwww-cn-google.hl.cn\rwps-officce.hl.cn\rwps-offfice.hl.cn\rwps-officce.com.cn\rwps-offfice.com.cn\rzh-app-wps.com.cn\rwps-zh-apps.com.cn\rwps-cn-zh.com.cn\rwps-gf.com.cn\rwps-offiice-zh.hl.cn\rcn-wps-offiice.hl.cn\rapps-offiice-wps.com.cn\rofffiice-wps.com.cn\rgoooggle-chroome.hl.cn\rapps-googgle-chrome.hl.cn\rcn-googlle-chrome.hl.cn\rgooglle-cchrome.hl.cn\rchrome-apps.hl.cn\rgoogle-apps.ac.cn\rgooggle-chrrome.hl.cn\rzhcn-google.ac.cn\rwps-cn.ac.cn\rwps-apps.ac.cn\rzh-wps.ac.cn\rwps-com.ac.cn\rmb-google-chrome.hl.cn\rcn-chrome-googlle.hl.cn\rchrome-gooogle-zh.hl.cn\rgoogle-chlome.com.cn\rchrome-googllee.com.cn\rwps1-zh.com.cn\rwps-wps-zh.hl.cn\roffice-wps-hl.hl.cn\rzh-youdao-apps.com.cn\rcnzh-youdao.com.cn\rcnzh-youdao.hl.cn\rapp-youdao-zh.hl.cn\rzh-google-chromme.hl.cn\rgoogle-chrromme.hl.cn\rgooggle-chrrome.com.cn\rggooglle-chrrome.com.cn\rgooglle-chroome.hl.cn\rgoogle-chrrome-zh.hl.cn\rzhcn-googele.hl.cn\rgooggle-com.hl.cn\rgoogle-cn-chrome-zh.com.cn\rgoogle-ch-chrome.com.cn\rgoogle-cnzh-chrome.com.cn\rwps-office-ch.hl.cn\rzhcn-office-wps.com.cn\rch-office-wps.com.cn\rzh-chrome-com.hl.cn\roffiece-wps.com.cn\rapps-chrome-zh.hl.cn\rgoogle-zhcn-chrome.com.cn\rgoogle-zh-chrom.com.cn\rapps-google-zh.hl.cn\rzh-googlle-chrome.hl.cn\rgoogle-chromee-com.hl.cn\rgoogle-chromee-zh.hl.cn\rcn-office-wps-zh.hl.cn\rapp-wps-zh.hl.cn\rcn-wps-zh.com.cn\rwp-wps-zh.com.cn\rapps-wps-zh.hl.cn\rweb-wps-zh.hl.cn\roffice-wps-com.hl.cn\rtellegram-zh.hl.cn\roffice-wps-zh.hl.cn\rtg-feiji-zh.hl.cn\rtg-dianbao-zh.com.cn\rzh-tg-dianbao.com.cn\rtg-feiji.com.cn\rdianbao-tg.com.cn\rapps-telegram-zh.hl.cn\rweb-telegram-zh.hl.cn\rzh-telegram-com.hl.cn\rcn-telegram-zh.hl.cn\rgo-google-chrome-zh.hl.cn\rzh-chrome-google-web.hl.cn\rdo-google-chrome-com.hl.cn\rweb-chrome-google-zh.hl.cn\rzh-we-whatsapp.hl.cn\rapps-whatsapp-com.hl.cn\rzhcn-whatsapp-com.hl.cn\rweb-whatsapp-zh.hl.cn\reqs-whatsapp-zh.hl.cn\rwhap-whatsapp-zh.hl.cn\rzhcn-whatsapp-app.hl.cn\rzh-whatsapp-com.hl.cn\rwee-whatsapp.hl.cn\rzh-yd-kuailian.com.cn\rzh-kuaiilian.com.cn\rkuailian-cnzh.com.cn\rkuaiilian-zh.com.cn\rkuaiinllian.com.cn\rkuaiinilian.com.cn\rzh-yd-google-chrome.hl.cn\rapps-google-chrome.hl.cn\rgoogle-chrome-ch.hl.cn\rchrome-app-zh.hl.cn\rcnzh-google-apps.hl.cn\rzh-chrome-google-com.hl.cn\rapps-chrome-google-com.hl.cn\rchrome-googllee-zh.hl.cn\rgoogle-chrrome-com.hl.cn\rzh-google-apps-com.hl.cn\rapps-google-zh-com.hl.cn\rgooglle-chrome-com.hl.cn\rcn-google-apps.hl.cn\rkulkuailian.com.cn\rzh-wps-apps.hl.cn\rwps-wpsoffice-zh.hl.cn\rwps-office-com.hl.cn\rgoogle-chromee.hl.cn\rchrome-googlle-com.hl.cn\rapps-googlle-chrome-zh.hl.cn\rgooglle-chrome.hl.cn\rcnzh-kuailian-zh.com.cn\rweb-kuailiian-zh.com.cn\rapps-kuailiian-zh.com.cn\rkuailiian-zh.com.cn\rgoogle-chrome-apps.hl.cn\rchrome-apps-zh.hl.cn\rapps-google-com-zh.hl.cn\rgoogle-chrrome-zh.com.cn\rgoogle-chrrome-cn.com.cn\rchrome-google-com.com.cn\rwww-google-chrome-zh.hl.cn\rgoogle-chrome-com-zh.hl.cn\rchrome-google-com-zh.hl.cn\rwww-google-com-zh.hl.cn\rzhcn-whatsapp-apps.hl.cn\rwhatsapp-web-zh.hl.cn\rapps-whatsapp-zh.hl.cn\rcn-wps-office-zh.hl.cn\rzh-wps-com.hl.cn\rwps-office-zh.hl.cn\rzhnc-google-com.hl.cn\rchromee-google-zh.hl.cn\ryoudao-fanyi-zh.hl.cn\rweb-google-zh.hl.cn\rfanyi-youdao-zh.hl.cn\rzh-youdao-com.hl.cn\rzh-google-com.hl.cn\rgoogle-com-zh.hl.cn\rchrroome-google-zh.hl.cn\rzh-chrroome-google.hl.cn\rzh-chroome-google.hl.cn\rchroome-google-zh.hl.cn\rcnzh-wps-zh.hl.cn\rcn-wps-zh.hl.cn\rwps-api.cn\rwps-work.cn\rwps-id.cn\rwps-sec.cn\rlineclub.cn\rwpsnest.cn\rwpsclient.cn\rwpsapp-cn.cn\rwpszones.cn\rwpspaths.cn\rwpslane.cn\rwps-center.cn\rwps-apps.cn\rwpsapphub.cn\rwpslink.cn\rwpsworks.cn\rwps-hub.cn\rwpsserve.cn\rwps-cloud.cn\rwpssoft.cn\rwpsapps.cn\rapps-google-zh.com.cn\rclash-app.cn\rchromeportal.cn\rbrowserfast.cn\rchromewave.cn\rbrowsercore.cn\rchromezone.cn\rbrowserdock.cn\rchromebridge.cn\rchromesite.cn\rchromeservice.cn\rwebchrome.cn\rbrowserlink.cn\rbrowserhub.cn\rchromecenter.cn\rchromelink.cn\rchromedock.cn\rchromecore.cn\rchromehubx.cn\rchromefast.cn\rwww-win-rar.com.cn\rwpsfast.cn\rwpsedge.cn\rletsvpnnetwork.cn\rletsvpnsecure.cn\rletsvpnproxy.cn\rletsvpnroute.cn\rletsvpnfast.cn\rletsvpnline.cn\rletsvpnshield.cn\rletsvpnnode.cn\rletsvpnservice.cn\rletsvpnbridge.cn\rletsvpnaccess.cn\rletsvpncenter.cn\rletsvpnportal.cn\rletsvpndock.cn\rletsvpnconnect.cn\rletsvpncloud.cn\rletsvpnlink.cn\rletsvpncore.cn\rwpszone.cn\rwpsunit.cn\rwpsring.cn\rwpsdock.cn\rwpspath.cn\rwpsloop.cn\rwpsflux.cn\rwpsbase.cn\rwpslogic.cn\rwpshub.cn\rwpsdesk.cn\rwpsbyte.cn\rwpscore.cn\rwpsgrid.cn\rwpsnode.cn\rwpsnova.cn\rwps-pp.cn\rchrome-gooole.cn\rwww-wps-cn.cn\rtg-feiji-zh.cn\rwww-wps-zh.cn\rfeiji-tg.cn\rtg-dianbao.com.cn\rwpp-wps.cn\rdict-youdao.cn\ryoudao-dict.cn\rsougou-shurufa.cn\rsogou-shurufa.cn\rwps-wpp.cn\rwps-wwp.cn\ryoudao-pc.cn\rokxapp.cn\rbitget-app.cn\rapp-gate.cn\rgate-app.cn\rbitgetapp.cn\rtrading-view.cn\rapp-okx.cn\rbit-bybit.cn\rapp-binance.cn\rwps-ppt.cn\rdy-doubao.cn\r360-app.cn }, { id:3, name:wolf, power:true, rules:192.151.151.43\r192.151.151.46\r103.150.10.133\r112.121.168.138\r63.141.251.188\rtj.ddd222.xyz\ryun.ddd222.xyz\rtj.gzdata.io\rdwav.cose.space\rdn.luckyfilebox.com\raqllq.zuitie.cn\rpcxz.zhaocai123.cn\raqllq.njjhykj.com\recodir.xtione.com }, { id:4, name:jiang, power:true, rules:91.92.242.42\r5.255.127.15\r103.146.23.241\r103.149.29.38\rwww.gokart.su\rwww.boatdealers.su\rkieranellison.cecilioc2.xyz\rnineeleven.gokart.su\rwww.plane.cat\rmail.gokart.su\rjjj.jjycc.cc\r104.233.144.23 }, { id:5, name:ip-dns, power:true, rules:103.85.84.*\r103.85.85.*\r45.113.201.* }, { id:6, name:site, power:true, rules:*.cc\r*.vip\r*.top\r*.co }, { id:7, name:notepad, power:true, rules:notepadplusplus.cn\rclash.net.cn\rclash.ac.cn\rcn-notepadplusplus.com\rzh-clash.com\rclashforwindows.org.cn\rgithub.zh-cns.top\rcdn-ccdown.com\r223.26.63.103\r27.50.63.118\r27.50.54.144\r137.220.252.82\r206.119.64.108\r38.55.16.61\r154.213.190.46\rjiaweo.com\rtaokur.com\rjouloi.com\rduooi.com\rgolomee.com\rtitamic.com\rsadliu.com\rolabb.com\rvlumu.com\rjokewick.com\ralonesad.com\rlovemeb.com\rtheaigaming.com\rhiluxo.com\rsbido.com\rkimhate.com }, { id:8, name:nutsbot, power:true, rules:31.56.27.76\r89.144.31.18\r5.255.121.141\r193.34.213.150\r185.14.92.152\r45.61.157.12\r185.14.92.55\r5.253.188.173\r77.110.104.193\r69.169.104.2 }, { id:9, name:horse, power:true, rules:www.imqqd.com\ri4.com.vn\rwww.imqqd.com\rwindqq.oss-ap-southeast-1.aliyuncs.com\rkuaianlest.oss-ap-southeast-1.aliyuncs.com\ross12318.oss-cn-hongkong.aliyuncs.com\rfyat.mlcrosoft.cyou\rfymaimai.mlcrosoft.asia\rxat.tk9885.com\r202.79.175.117\rmm.opi6qi5k.com\r143.92.60.214 }, { id:10, name:snake, power:true, rules:104.233.164.131\r61.110.5.21\r137.220.131.139\r137.220.131.140\rhiluxo.com\rtitamic.com\rsimmem.com\rgolomee.com\rduooi.com\rsadliu.com\rgoogle-chrom.cn\rchrome-html.com\ram-666.com\rchrome-admin.com\rzhcn.down-cdn.com\rcdn.downoss.com\ross.downncdn.com\rcdn-kkdown.com }, { id:11, name:steal, power:true, rules:8.218.94.162\rcdr.jyxwlkj.cn\rcdrnb.jyxwlkj.cn\rapi2.uptocycle.com\rcdr.jyxwlkj.cn\rapi2.uptocycle.com }, { id:12, name:mirai, power:true, rules:142.93.229.199\r179.43.156.214\r185.28.39.119\r194.31.98.205\r195.58.38.253\r2.56.56.162\r37.0.11.168\r46.19.137.50\r31.7.58.162\r5.255.101.44\r103.136.41.159\r194.31.98.230\r194.31.98.186\r107.174.137.24\r46.175.146.159\r103.136.42.158 }, { id:13, name:fodcha, power:true, rules:139.177.195.192\r162.33.179.171\r206.188.197.104\r31.214.245.253\rfolded.in\rfridgexperts.cc }, { id:14, name:blackmoon, power:true, rules:www2.xiaoniu321.com\rww1.m27p.com\rww1.jincpay.com\r222.xiaoniu321.com\rxiaoniu321.com\r111.xiaoniu321.com }, { id:15, name:mine, power:true, rules:arhivehaceru.com\r45.88.67.94\r139.99.123.196\rpool.supportxmr.com\r45.139.105.222\r212.193.30.11 }, { id:16, name:pbot, power:true, rules:205.185.126.254\rmonke.tw }, { id:17, name:app, power:true, rules:qbjz3.\rkkl.;*life.com\r*ses.com\r*band.com\r*zv0.cn\r*zz0g.cn\r*5k5a.cn\r*yuan.me\r*06.cn\r*fga.cn\r*90.cn\rab.\rqss.\r*zhuan.xyz }, { id:18, name:android, power:true, rules:t.cn/RGfj6iM\rdlapkb.com\rzengheng\rangelhuajia\rcvtech.cn\rdlapka.com\rdlapkc.com\rebankman.com\rebankmanager.com\ryunzhanlve.cn }, { id:19, name:zhifubao, power:true, rules:222.246.135.115\r\r\r218.75.155.19\r\r\r113.105.82.11\r\r\r218.76.131.23\r\r\r113.243.8.192\r\r\r218.77.87.20\r\r\r125.39.29.173\r\r\r218.75.155.27\r\r\r218.75.222.26\r\r\r218.75.155.26\r\r\r218.26.99.162\r\r\r218.77.87.23\r\r\r120.196.28.47\r\r\r218.76.131.25\r\r\r120.196.28.44\r\r\r218.75.254.18\r\r\r120.196.28.48\r\r\r218.75.254.20\r\r\r120.196.28.46\r\r\r218.76.131.24\r\r\r218.75.222.19\r\r\r183.224.40.124\r\r\r219.153.1.122\r\r\r218.75.254.23\r\r\r218.77.87.22\r\r\r120.196.27.236\r\r\r218.76.107.25\r\r\r218.76.107.18\r\r\r183.224.40.111\r\r\r60.24.10.203\r\r\r218.76.116.23\r\r\r218.76.107.22\r\r\r218.75.155.21 } ] }四、火绒导入规则火绒版本6.0.11.0规则位置设置左下角齿轮→网络防护→恶意网址拦截→自定义规则→删除所选右侧三个点→导入五、其它设置可以把此规则设置到防火墙中方法略六、提示根据实际情况调整规则本规则仅供参考