Please include the malware domains identified by URLHaus. The majority of these domains are known to host ransomware payloads. (See https://www.zdnet.com/article/security-researchers-take-down-100000-malware-sites-over-the-last-ten-months/). It appears that the domains contained in their RW_DOMBL domain blocklist are already included, but the domains contained in the DNS Response Policy Zone (RPZ) and the domains contained in their Plain-Text URL List (URLs only) are not.