Skip to main content

Documentation

Malicious domain and URL filtering

How Uruky flags or removes search results that match third-party malicious-domain and malicious-URL blocklists.

Uruky can flag or hide web and image search results whose domain or URL appears on public malicious-domain and malicious-URL blocklists. This is a warning layer based on third-party lists, not malware scanning or site verification by Uruky.

What gets checked

The feature applies to result URLs in web search and image search. For images, the source URL of each result is checked, not the image file URL itself.

Domain and URL blocklists

Uruky maintains two merged blocklists, updated daily from external sources:

Domain lists

A hostname matches if it equals a listed domain or is a subdomain of one. For example, sub.evil.com matches a listing for evil.com .

URL lists

Some blocklists target specific paths rather than whole domains. URLs are normalized before matching: the protocol is ignored, trailing slashes on the path are removed, and query strings and fragments are kept. A result matches only when its normalized URL is listed exactly.

Modes

  • Disabled No blocklist checks are applied.
  • Highlight malicious results Matching results stay visible with a red shield badge and a light red background tint.
  • Remove malicious results Matching results are dropped from the page. The results count line appends how many were removed, for example "Removed 2 malicious results.", with a (show) link that reloads the search with mr=highlight for that page only.

New accounts default to Highlight. The preference is saved with your other settings and included in export/import.

When every result on a page is removed

If remove mode drops every result on the current page, Uruky shows a dedicated message instead of a blank results list. The status line uses honest wording (for example, how many were removed) rather than "Displaying 0".

  • On page 1, if remove mode leaves the page short, Uruky may fetch provider page 2 once and append any visible results after filtering.
  • If page 1 is still empty after that backfill, pagination collapses to a single page so you are not offered additional empty pages (for example, a site: search on a fully blocklisted domain).
  • Use the (show) link to reload with mr=highlight and see removed results with badges. For a single request without any blocklist checks, add mr=show to the search URL.

JSON search responses (f=json) include page, pageCount, removedMaliciousCount, and removedAiSlopCount alongside results and totalResults. totalResults remains the provider estimate; results contains only visible items after filtering.

Sources

Lists are merged from these public sources (Uruky does not curate them):

Limitations

Uruky does not verify blocklist entries. Lists can be incomplete, outdated, or include false positives. This feature is not a substitute for browser security settings, antivirus software, or careful judgment about what you click. For a broader view of what search can and cannot protect, see Threat models .

Hostnames under *.uruky.com are never flagged, so Uruky's own pages cannot be marked malicious by this filter.

How to configure

Open Settings → Domain Preferences, find Malicious domain filtering, and choose Disabled, Highlight, or Remove.

Related