Skip to main content

Enterprise-Grade Domain Blocklist for Squid-Cache

Protect your network with 4.7M+ verified blocked domains. BlackWeb aggregates and optimizes public blocklists to filter porn, malware, trackers, ransomware, and other malicious content.

Get StartedView Configuration

Quick Start

Get BlackWeb running in your Squid-Cache proxy in minutes

1

Download BlackWeb

Download and extract the latest blocklist from the GitHub repository.
wget -q -c -N https://raw.githubusercontent.com/maravento/blackweb/master/blackweb.tar.gz
cat blackweb.tar.gz* | tar xzf -
This downloads the compressed blocklist containing 4.7M+ verified domains.
2

Configure Squid-Cache

Add the BlackWeb ACL to your Squid configuration file.
# Edit /etc/squid/squid.conf
acl blackweb dstdomain "/path_to/blackweb.txt"
http_access deny blackweb
Replace /path_to/ with the actual path where you extracted blackweb.txt.
3

Restart Squid

Reload Squid to apply the new configuration.
sudo systemctl restart squid
Check /var/log/squid/access.log to verify that blocked domains are being denied.
4

Verify the Configuration

Test that the blocklist is working correctly.
# Check file integrity
wget -q -c -N https://raw.githubusercontent.com/maravento/blackweb/master/blackweb.txt.sha256
LOCAL=$(sha256sum blackweb.txt | awk '{print $1}')
REMOTE=$(awk '{print $1}' blackweb.txt.sha256)
[ "$LOCAL" = "$REMOTE" ] && echo "OK" || echo "FAIL"

Key Features

Enterprise-grade domain filtering for Squid-Cache proxy servers

4.7M+ Domains

Aggregates and verifies over 4.7 million blocked domains from 100+ public blocklists, covering porn, malware, trackers, ransomware, and more.

DNS Validation

Every domain is validated via DNS lookup to ensure accuracy. Invalid and non-existent domains are automatically excluded.

TLD Verification

Validates against official TLD lists (ccTLD, gTLD, sTLD) to prevent false positives and ensure only legitimate domain structures are blocked.

Punycode Support

Converts international domain names (IDN) to Punycode format to prevent homograph attacks and phishing attempts.

Advanced Filtering

Supports allow/block lists, TLD blocking, pattern matching, and streaming domain filters for fine-grained control.

Automated Updates

Update script with parallel DNS lookups automatically refreshes the blocklist from upstream sources and validates entries.

Explore the Documentation

Everything you need to deploy and manage BlackWeb

Installation

Step-by-step installation guide for BlackWeb and Squid-Cache dependencies.

Squid Configuration

Configure Squid-Cache ACLs and rules to use BlackWeb effectively.

Advanced Rules

Allow/block lists, TLD filtering, Punycode blocking, and pattern matching.

Update Process

Learn how to update BlackWeb with the automated update script.

Blocklist Sources

Browse the 100+ public blocklists that power BlackWeb.

Troubleshooting

Resolve common issues and debug Squid configuration errors.

Ready to secure your network?

Deploy BlackWeb in your Squid-Cache proxy and start blocking malicious domains immediately.

Get Started NowView on GitHub