Skip to content

DNS-Blocklists: For a better internet - keep the internet clean!

License

Notifications You must be signed in to change notification settings

Dynasty-Dev/dns-blocklists

 
 

Repository files navigation

GitHub last commitGitHub issuesGitHub closed issuesHitsshields.io Stars

DNS Blocklists - For a better internet!

Made with 💓 for a safer and cleaner internet!

Table of Contents

  1. Overview
  2. Multi light - Hand brush: Light protection
  3. Multi normal - Broom: All-round protection
  4. Multi pro - Big broom: Extended protection
  5. Multi pro++ - Sweeper: Maximum protection (more aggressive)
  6. Fake - Protects against internet scams, traps & fakes!
  7. Threat Intelligence Feeds - Increases security significantly!
  8. DoH/VPN/TOR/Proxy Bypass - Prevent methods to bypass your DNS!
  9. Safesearch not supported - Prevent the use of search engines that do not support safesearch!
  10. Dynamic DNS - Protects against the malicious use of dynamic DNS services!
  11. Badware Hoster - Protects against the malicious use of free host services!
  12. Personal - My manually maintained blacklist
  13. Native Tracker - Broadband tracker of devices and operating systems
  14. Credits
  15. Supporter - Leave a star (top right)!
  16. Recommendation
  17. Online DNS Services: RethinkDNS / DNSforge / AdGuardDNS / NextDNS
  18. About / Referral Domains / Support Me
  19. Sources/Statistics
  20. Raw data collection - Data collection to generate the DNS blocklists

Multi - Cleans the Internet and protects your privacy!

An all in one DNS blocklist in various versions (light, normal, pro and pro++). It can be used as a stand alone blocklist. For every region. Blocks ads, affiliate, tracking, metrics, telemetry, fake, phishing, malware, scam, coins and other "crap". Based on various blocklists.

Multi blocklist version and size overview:

Version Hosts Pro Normal Light Fake TIF Personal
Light 339416
144862
= X P X
Normal 1211073
315323
= X X P X
Pro 1330801
389519
= X X X P X
Pro++ 1433485
432724
++ X X X P X

X = contains the named lists in the column header
P = partially contains the named list in the column header
++ = more sources, more aggressive


Multi LIGHT - Light protection

Hand brush - Cleans the Internet and protects your privacy! Blocks Ads, Tracking, Metrics, some Malware and Fake.

Entries: 339416 domains/hosts - 144862 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Multi NORMAL - All-round protection

Broom - Cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

Entries: 1211073 domains/hosts - 315323 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Multi PRO - Extended protection (Recommended)

Big broom - Cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

Entries: 1330801 domains/hosts - 389519 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Multi PRO++ - Maximum protection

Sweeper - Aggressive cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

More aggressive version of the Multi PRO blocklist. It may contain false positive domains that limit functionality. Therefore it should only be used by experienced users. Furthermore, an admin should be available to unblock incorrectly blocked domains. Reported false positive domains are removed from the list!

Entries: 1433485 domains/hosts - 432724 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: 24 hours (update frequency)


Fake - Protects against internet scams, traps & fakes!

An blocklist for blocking fake stores, -news, -science, -streaming, rip-offs, cost traps and co.

Entries: 11540 domains/hosts - 6021 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Threat Intelligence Feeds - Increases security significantly!

An blocklist for blocking malware, crypto, coin, scam, spam and phishing. Blocks domains known to spread malware, launch phishing attacks and host command-and-control servers.

Entries: 713526 domains/hosts - 373778 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard (oversized, limited to 535000 rules!), AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: 24 hours (update frequency)


DoH/VPN/TOR/Proxy Bypass - Prevent methods to bypass your DNS!

Prevent method to bypass your DNS. To ensure the bootstrap is your DNS server you must redirect or block standard DNS outbound (TCP/UDP 53) and block all DNS over TLS (TCP 853) outbound.

The block list exists in two versions:

Complete Edition - Encrypted DNS Servers, VPN, TOR, Proxies

Entries: 986 domains/hosts - 899 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly

Encrypted DNS Servers only

Entries: 352 domains/hosts - 287 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Safesearch not supported - Prevent the use of search engines that do not support safesearch!

An blocklist for blocking search engines that do not support safesearch.

Entries: 138 domains/hosts - 135 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Dynamic DNS blocking - Protects against the malicious use of dynamic DNS services!

An blocklist for blocking dynamic DNS services to protect against malicious use in phishing campaigns and others.

Entries: 794 domains/hosts - 792 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Badware Hoster blocking - Protects against the malicious use of free host services!

An blocklist for blocking known free hosters that also host badware via user content to prevent the use of these hosters for malicious purposes.

Already included in Pro++

Entries: 51 domains/hosts - 50 compressed domains | Sources/Statistics

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Personal - My manually maintained blacklist

My personal blocklist, an extension for known blocklists. Blocks ads, trackers, native device trackers, badware and more. Not intended to be used as a standalone blocklist, it serves as a addition for other blocklists!

Entries: 9649 domains/hosts - 7263 compressed domains

Format Link Can be used for
Domains RAW PiHole, Blocky, eBlocker, Diversion, OpenSnitch, PersonalDNSfilter, pfBlockerNG, PersonalBlocklist
Hosts RAW PiHole, Blocky, eBlocker, AdAway, uMatrix, DNS66, GasMask, HostFileEditor, OpenSnitch, NetGuard
Adblock RAW AdGuard, AdGuard Home, eBlocker, uBlock, AdBlock, AdBlock Plus, Opera, Vivaldi, Brave
Unbound RAW Unbound
DNSMasq RAW DNSMasq
Wildcard RAW DNSCrypt, DNSCloak, YogaDNS, ...

Expires: Updated regularly


Native Tracker - Broadband tracker of devices and operating systems

Blocks native broadband tracker from devices and operating systems that frequently run at the operating system level and track your activity.

The native broadband trackers are already included in all blocklist versions (Personal, Light, Normal, Pro, Pro++)!

Device Domains Hosts Adblock Unbound DNSMasq Wildcard
Apple (iOS, macOS, tvOS) RAW RAW RAW RAW RAW RAW
Microsoft (Windows, Office, MSN) RAW RAW RAW RAW RAW RAW
Huawei (Devices) RAW RAW RAW RAW RAW RAW

Expires: Updated regularly


Credits

A huge thank you to the following list maintainers of the sources that were partially used, alphabetical order:

abpindo, abpvn, abuse.ch, adaway, adguardteam, adroitadorkhan, amnestytech, anti-ad, anudeepnd, assoechap, azorult-tracker.net, badmojr, barbblock, bigdargon, bkrucarci, blahdns, bongochong, botvrij.eu, cats-team, cbuijs, cert-agid.gov.it, cmiksche, craiu, d3ward, dandelionsprout, davidonzo, developerdan, digitalside.it, drsdavidsoft, durablenapkin, easylist, easylist-lithuania, easylist-thailand, elliotwutingfeng, fademind, fanboy, firebog.net, frogeye.fr, gioxx, guardicore, hblock, hexxiumcreations, hole.cert.pl, hoshsadiq, hpthreatresearch, hufilter, iam-py-test, ihgalis, infinitytec, jawz101, jdlingyu, jkrejcha, joewein.net, kargig, kees1958, kevinthomas0, kriskintel.com, laicure, laniksj, lassekongo83, latvian-list, list-kr, logroid, malware-filter, marco-acorte, matomo-org, metamask, migueldemoura, mitchellkrogza, molinero.dev, mvps.org, netlab.360, nextdns, nitrohorse, notonmyshift, notracking, oisd.nl, olbat, oneoffdallas, ookangzheng, paulgb, perflyst, phishing.army, piperun, piquark6046, polishfiltersteam, prodaft, quidsup, rescure.me, scafroglia93, shadowwhisperer, shallalist, shreyasminocha, sjhgvr, smed79, someonewhocares.org, stamparm, stanev.org, stevenblack, stopforumspam.com, systemjargon, t145, th3m3, tiuxo, tomasko126, ublockorigin, ultimate-hosts, ut1, velesila, wally3k, yourduskquibbles, yous, yoyo.org, zerodot1, zoso.ro


Recommendation

As a network-wide DNS blocker, I recommend using Adguard Home, Pi-Hole, Blocky (advanced users) or eBlocker.

DNS blocker offer a good protection of privacy by blocking tracking, metrics and telemetry. They can be used to block the vast majority of ads, malware, scam, fake and co, but not everything can be blocked at the DNS level!
Therefore, I
additionally recommend the use of a browser content blocker such as AdGuard or uBlock with the appropriate block lists (EasyList, AdGuard, uBlock, ...).

Check out @yokoffing's Recommended Filters for uBlock Origin for content blocker filter lists.

Online DNS Services

If you don't run your own DNS server on your home network or if you are looking for additional protection for your mobile devices when they are not connected to the home network, then I recommend one of the following DNS services:

RethinkDNS - free

In RethinkDNS you can use my blocklists:

Blocklists DNS-over-HTTPS DNS-over-TLS Apple Mobileconfig
Normal (PRO + TIF) https://sky.rethinkdns.com/1:AAoACBAA 1-aafaacaqaa.max.rethinkdns.com Visit and click on the red apple
Aggressive (PRO plus + TIF) https://sky.rethinkdns.com/1:AAoACAgA 1-aafaacaiaa.max.rethinkdns.com Visit and click on the red apple

DNSforge (Germany) - free

DNSforge uses my light blocklist:

Blocklists DNS-over-HTTPS DNS-over-TLS DNS-over-QUIC
Normal (LIGHT + more) https://dnsforge.de/dns-query dnsforge.de quic://dnsforge.de:853

AdGuardDNS - limited free/paid

My blocklist recommendations for AdGuardDNS are:

Profile Blocklists
Normal 1Hosts (Lite) + AdGuard DNS filter + OISD full + HaGeZi Personal Black & White (coming soon!)

NextDNS - limited free/paid

Unfortunately, my blocklists have not yet been included in NextDNS. You can vote for the inclusion of the lists.

My blocklist recommendations for NextDNS are:

Profile Blocklists
Normal 1Hosts (Lite) + AdGuard DNS filter + OISD
Strict 1Hosts (Pro) + AdGuard DNS filter + OISD

Check out @yokoffing's NextDNS Config Guide for further configuration settings.


About

"If the plan doesn‘t work, change the plan but never the goal."
There's no place like 127.0.0.1!

The blocklists are based on various sources and my own blacklists. They were designed to avoid false positive domains as much as possible without losing effectiveness and efficiency. Dead hosts are regularly removed from the lists to keep them as small as possible. Made with 💓 for a safer and cleaner internet.
All lists were tested against 6000 websites from the Cisco Umbrella Top 1 million list. It was checked whether the pages load, the page content is displayed correctly, navigation links work, images load, videos start and much more.
They are updated and maintained daily.

No, it's not just blocklists cobbled together from multiple sources. They have been optimized and extended to efficiently "clean the Internet" in all areas.
Test them and give feedback!

Please report false positive domains.

Referral Domains

Affiliate and tracking links (referral domains) that appear frequently on offer web pages, in emails or in search results are allowed in my lists. These are mostly called only after manual clicking on a link and are not used to display advertising. If these are blocked, the first hit links from search results, for example, no longer work.

There are users who want to block referral domains anyway, so for each list I show the domains that were whitelisted because of referral. You can see them in the list of used sources behind the link "whitelisted referral domains" per list. This list can then be used as a blocklist to "undo" the whitelisting of referral domains.

Allowing referral domains in my lists is equivalent to the NextDNS feature "Privacy > Allow Affiliate & Tracking Links".

Support Me

I do not want any money donations. If you don't know what to do with your money, invest it in aid or similar projects, do something good with it. There is enough misery in the world.
Accepting money donations would also be absolutely unfair to the maintainers of the sources used, that's not my way. Without the existing lists. these lists would be simply nothing.

If you like the project and you can benefit from it, leave a ⭐ (top right) and become a stargazer!

Give feedback, show me your ideas, report false positve domains and help to keep the internet safe and clean.
Help and cooperation of any kind is welcome!

Thanks for your support!


Keep the internet clean! - Join the Matrix: #dnsblocklists:matrix.org


About

DNS-Blocklists: For a better internet - keep the internet clean!

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published