Coder Social home page Coder Social logo

dns-blocklists's Introduction

GitHub last commitGitHub issuesGitHub closed issuesHitsshields.io Stars

DNS Blocklists - For a better internet!

Made with πŸ’“ for a safer and cleaner internet!

Table of Contents

  1. Overview
  2. Multi light - Hand brush: Light protection
  3. Multi normal - Broom: All-round protection
  4. Multi pro - Big broom: Extended protection
  5. Multi pro++ - Sweeper: Maximum protection (more aggressive)
  6. Fake - Protects against internet scams, traps & fakes!
  7. Threat Intelligence Feeds - Increases security significantly!
  8. DoH/VPN/TOR/Proxy Bypass - Prevent methods to bypass your DNS!
  9. Safesearch not supported - Prevent the use of search engines that do not support safesearch!
  10. Dynamic DNS - Protects against the malicious use of dynamic DNS services!
  11. Badware Hoster - Protects against the malicious use of free host services!
  12. Personal - My manually maintained blacklist
  13. Native Tracker - Broadband tracker of devices and operating systems
  14. Credits
  15. Supporter - Leave a star (top right)!
  16. Recommendation
  17. Online DNS Services: RethinkDNS / DNSforge / AdGuardDNS / NextDNS
  18. About / Referral Domains / Support Me
  19. Sources/Statistics
  20. Raw data collection - Data collection to generate the DNS blocklists

Multi - Cleans the Internet and protects your privacy!

An all in one DNS blocklist in various versions (light, normal, pro and pro++). It can be used as a stand alone blocklist. For every region. Blocks ads, affiliate, tracking, metrics, telemetry, fake, phishing, malware, scam, coins and other "crap". Based on various blocklists.

Multi blocklist version and size overview:

Version Hosts Pro Normal Light Fake TIF Personal
Light 339416
144862
= X P X
Normal 1211073
315323
= X X P X
Pro 1330801
389519
= X X X P X
Pro++ 1433485
432724
++ X X X P X

X = contains the named lists in the column header
P = partially contains the named list in the column header
++ = more sources, more aggressive


Multi LIGHT - Light protection

Hand brush - Cleans the Internet and protects your privacy! Blocks Ads, Tracking, Metrics, some Malware and Fake.

Entries: 339416 domains/hosts - 144862 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Multi NORMAL - All-round protection

Broom - Cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

Entries: 1211073 domains/hosts - 315323 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Multi PRO - Extended protection (Recommended)

Big broom - Cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

Entries: 1330801 domains/hosts - 389519 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Multi PRO++ - Maximum protection

Sweeper - Aggressive cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

More aggressive version of the Multi PRO blocklist. It may contain false positive domains that limit functionality. Therefore it should only be used by experienced users. Furthermore, an admin should be available to unblock incorrectly blocked domains. Reported false positive domains are removed from the list!

Entries: 1433485 domains/hosts - 432724 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: 24 hours (update frequency)


Fake - Protects against internet scams, traps & fakes!

An blocklist for blocking fake stores, -news, -science, -streaming, rip-offs, cost traps and co.

Entries: 11540 domains/hosts - 6021 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Threat Intelligence Feeds - Increases security significantly!

An blocklist for blocking malware, crypto, coin, scam, spam and phishing. Blocks domains known to spread malware, launch phishing attacks and host command-and-control servers.

Entries: 713526 domains/hosts - 373778 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard (oversized, limited to 535000 rules!), AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: 24 hours (update frequency)


DoH/VPN/TOR/Proxy Bypass - Prevent methods to bypass your DNS!

Prevent method to bypass your DNS. To ensure the bootstrap is your DNS server you must redirect or block standard DNS outbound (TCP/UDP 53) and block all DNS over TLS (TCP 853) outbound.

The block list exists in two versions:

Complete Edition - Encrypted DNS Servers, VPN, TOR, Proxies

Entries: 986 domains/hosts - 899 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly

Encrypted DNS Servers only

Entries: 352 domains/hosts - 287 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Safesearch not supported - Prevent the use of search engines that do not support safesearch!

An blocklist for blocking search engines that do not support safesearch.

Entries: 138 domains/hosts - 135 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Dynamic DNS blocking - Protects against the malicious use of dynamic DNS services!

An blocklist for blocking dynamic DNS services to protect against malicious use in phishing campaigns and others.

Entries: 794 domains/hosts - 792 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Badware Hoster blocking - Protects against the malicious use of free host services!

An blocklist for blocking known free hosters that also host badware via user content to prevent the use of these hosters for malicious purposes.

Already included in Pro++

Entries: 51 domains/hosts - 50 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Personal - My manually maintained blacklist

My personal blocklist, an extension for known blocklists. Blocks ads, trackers, native device trackers, badware and more. Not intended to be used as a standalone blocklist, it serves as a addition for other blocklists!

Entries: 9649 domains/hosts - 7263 compressed domains

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Native Tracker - Broadband tracker of devices and operating systems

Blocks native broadband tracker from devices and operating systems that frequently run at the operating system level and track your activity.

The native broadband trackers are already included in all blocklist versions (Personal, Light, Normal, Pro, Pro++)!

Device Domains Hosts Adblock Unbound DNSMasq Wildcard
Apple (iOS, macOS, tvOS) RAW RAW RAW RAW RAW RAW
Microsoft (Windows, Office, MSN) RAW RAW RAW RAW RAW RAW
Huawei (Devices) RAW RAW RAW RAW RAW RAW

Expires: Updated regularly


Credits

A huge thank you to the following list maintainers of the sources that were partially used, alphabetical order:

abpindo, abpvn, abuse.ch, adaway, adguardteam, adroitadorkhan, amnestytech, anti-ad, anudeepnd, assoechap, azorult-tracker.net, badmojr, barbblock, bigdargon, bkrucarci, blahdns, bongochong, botvrij.eu, cats-team, cbuijs, cert-agid.gov.it, cmiksche, craiu, d3ward, dandelionsprout, davidonzo, developerdan, digitalside.it, drsdavidsoft, durablenapkin, easylist, easylist-lithuania, easylist-thailand, elliotwutingfeng, fademind, fanboy, firebog.net, frogeye.fr, gioxx, guardicore, hblock, hexxiumcreations, hole.cert.pl, hoshsadiq, hpthreatresearch, hufilter, iam-py-test, ihgalis, infinitytec, jawz101, jdlingyu, jkrejcha, joewein.net, kargig, kees1958, kevinthomas0, kriskintel.com, laicure, laniksj, lassekongo83, latvian-list, list-kr, logroid, malware-filter, marco-acorte, matomo-org, metamask, migueldemoura, mitchellkrogza, molinero.dev, mvps.org, netlab.360, nextdns, nitrohorse, notonmyshift, notracking, oisd.nl, olbat, oneoffdallas, ookangzheng, paulgb, perflyst, phishing.army, piperun, piquark6046, polishfiltersteam, prodaft, quidsup, rescure.me, scafroglia93, shadowwhisperer, shallalist, shreyasminocha, sjhgvr, smed79, someonewhocares.org, stamparm, stanev.org, stevenblack, stopforumspam.com, systemjargon, t145, th3m3, tiuxo, tomasko126, ublockorigin, ultimate-hosts, ut1, velesila, wally3k, yourduskquibbles, yous, yoyo.org, zerodot1, zoso.ro


Recommendation

As a network-wide DNS blocker, I recommend using Adguard Home, Pi-Hole, Blocky (advanced users) or eBlocker.

DNS blocker offer a good protection of privacy by blocking tracking, metrics and telemetry. They can be used to block the vast majority of ads, malware, scam, fake and co, but not everything can be blocked at the DNS level!
Therefore, I
additionally recommend the use of a browser content blocker such as AdGuard or uBlock with the appropriate block lists (EasyList, AdGuard, uBlock, ...).

Check out @yokoffing's Recommended Filters for uBlock Origin for content blocker filter lists.

Online DNS Services

If you don't run your own DNS server on your home network or if you are looking for additional protection for your mobile devices when they are not connected to the home network, then I recommend one of the following DNS services:

RethinkDNS - free

In RethinkDNS you can use my blocklists:

Blocklists DNS-over-HTTPS DNS-over-TLS Apple Mobileconfig
Normal (PRO + TIF) https://sky.rethinkdns.com/1:AAoACBAA 1-aafaacaqaa.max.rethinkdns.com Visit and click on the red apple
Aggressive (PRO plus + TIF) https://sky.rethinkdns.com/1:AAoACAgA 1-aafaacaiaa.max.rethinkdns.com Visit and click on the red apple

DNSforge (Germany) - free

DNSforge uses my light blocklist:

Blocklists DNS-over-HTTPS DNS-over-TLS DNS-over-QUIC
Normal (LIGHT + more) https://dnsforge.de/dns-query dnsforge.de quic://dnsforge.de:853

AdGuardDNS - limited free/paid

My blocklist recommendations for AdGuardDNS are:

Profile Blocklists
Normal 1Hosts (Lite) + AdGuard DNS filter + OISD full + HaGeZi Personal Black & White (coming soon!)

NextDNS - limited free/paid

Unfortunately, my blocklists have not yet been included in NextDNS. You can vote for the inclusion of the lists.

My blocklist recommendations for NextDNS are:

Profile Blocklists
Normal 1Hosts (Lite) + AdGuard DNS filter + OISD
Strict 1Hosts (Pro) + AdGuard DNS filter + OISD

Check out @yokoffing's NextDNS Config Guide for further configuration settings.


About

"If the plan doesnβ€˜t work, change the plan but never the goal."
There's no place like 127.0.0.1!

The blocklists are based on various sources and my own blacklists. They were designed to avoid false positive domains as much as possible without losing effectiveness and efficiency. Dead hosts are regularly removed from the lists to keep them as small as possible. Made with πŸ’“ for a safer and cleaner internet.
All lists were tested against 6000 websites from the Cisco Umbrella Top 1 million list. It was checked whether the pages load, the page content is displayed correctly, navigation links work, images load, videos start and much more.
They are updated and maintained daily.

No, it's not just blocklists cobbled together from multiple sources. They have been optimized and extended to efficiently "clean the Internet" in all areas.
Test them and give feedback!

Please report false positive domains.

Referral Domains

Affiliate and tracking links (referral domains) that appear frequently on offer web pages, in emails or in search results are allowed in my lists. These are mostly called only after manual clicking on a link and are not used to display advertising. If these are blocked, the first hit links from search results, for example, no longer work.

There are users who want to block referral domains anyway, so for each list I show the domains that were whitelisted because of referral. You can see them in the list of used sources behind the link "whitelisted referral domains" per list. This list can then be used as a blocklist to "undo" the whitelisting of referral domains.

Allowing referral domains in my lists is equivalent to the NextDNS feature "Privacy > Allow Affiliate & Tracking Links".

Support Me

I do not want any money donations. If you don't know what to do with your money, invest it in aid or similar projects, do something good with it. There is enough misery in the world.
Accepting money donations would also be absolutely unfair to the maintainers of the sources used, that's not my way. Without the existing lists. these lists would be simply nothing.

If you like the project and you can benefit from it, leave a ⭐ (top right) and become a stargazer!

Give feedback, show me your ideas, report false positve domains and help to keep the internet safe and clean.
Help and cooperation of any kind is welcome!

Thanks for your support!


Keep the internet clean! - Join the Matrix: #dnsblocklists:matrix.org


Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.