diff --git a/data/conf/rspamd/local.d/multimap.conf b/data/conf/rspamd/local.d/multimap.conf
index caa84d78..94160460 100644
--- a/data/conf/rspamd/local.d/multimap.conf
+++ b/data/conf/rspamd/local.d/multimap.conf
@@ -163,9 +163,10 @@ SMTP_LIMITED_ACCESS {
   symbols_set = ["SMTP_LIMITED_ACCESS"];
 }
 
-ABUSE_NULLNULL {
-  type = "selector";
-  selector = "urls:get_host.lower";
-  map = "http://dns.mailcow.email/bad-domains.txt";
+BAD_REGEX_00 {
+  type = "content";
+  filter = "headers"
+  regexp = true;
+  map = "http://nullnull.org/bad-header-regex.txt";
   score = 20.0;
 }