Awesome

:zap: DNS Blocklists - For a better internet!

Made with :heartbeat: for a safer and cleaner internet! It always seems impossible until it’s done.

Privacy is not a crime, protect yourself. Privacy matters. Privacy is what allows us to determine who we are and who we want to be :bangbang:

If you like the project and you can benefit from it, leave a :star: (top right) and become a stargazer! Thanks for your support!

:bookmark_tabs: Table of Contents

1. Overview
2. Multi light - Hand brush: Light protection
3. Multi normal - Broom: All-round protection
4. Multi pro - Big broom: Extended protection (Recommended) : Full - Mini
5. Multi pro++ - Sweeper: Maximum protection (more aggressive) : Full - Mini
6. Multi ultimate - Ultimate Sweeper: Aggressive protection : Full - Mini
7. Fake - Protects against internet scams, traps & fakes!
8. Pop-Up Ads - Protects against annoying and malicious pop-up ads!
9. Threat Intelligence Feeds - Increases security significantly! (Recommended) : Full - Medium - Mini - IPs
10. Newly Registered Domains - Favoured by threat actors to launch malicious campaigns! : 14 days - 30 days
11. DoH/VPN/TOR/Proxy Bypass - Prevent methods to bypass your DNS! : Full - DoH only - DoH IPs
12. Safesearch not supported - Prevent the use of search engines that do not support Safesearch!
13. Dynamic DNS - Protects against the malicious use of dynamic DNS services!
14. Badware Hoster - Protects against the malicious use of free host services!
15. Most Abused TLDs - Protects against known malicious Top Level Domains!
16. Anti Piracy - Protects against piracy!
17. Gambling - Protects against gambling content! : Full - Medium - Mini
18. NSFW (external) - oisd NSFW - Protects against adult content!
19. Native Tracker - Broadband tracker of devices, services and operating systems
20. Supporter - Leave a star (top right)!
21. Recommendation - Which version of the lists should I use?
22. Online DNS Services
23. About : Repository - Referral Domains - Support Me
24. Statistics - Sources
25. FAQ - Frequently Asked Questions

:books: Multi - Cleans the Internet and protects your privacy! <a name="overview"></a>

An all-in-one DNS blocklist in various versions (light, normal, pro, pro++ and ultimate). It can be used as a standalone blocklist. For every region. Blocks ads, affiliate, tracking, metrics, telemetry, fake, phishing, malware, scam, coins and other "crap". Based on various native blocklists. No, they are not just block lists cobbled together from different sources. They have been optimized and extended to efficiently "clean the Internet" in all areas.

See also: Which sources are used for the lists and how are the lists compiled on the basis of these sources?

Blocklist version and size overview:

:green_circle: contains the list named in the column caption :yellow_square: partially contains the list named in the column caption

Blocking level:

[!TIP] For a recommendation, see: Which version of the lists should I use?

:green_book: Multi LIGHT - Basic protection <a name="light"></a>

Hand brush - Cleans the Internet and protects your privacy! Blocks Ads, Tracking, Metrics and some Badware. A size-optimized version of the Multi NORMAL.

[!NOTE] Does not block error trackers such as Bugsnag, Crashlytics, Firebase, Instabug, Sentry, ... and other app-specific crash trackers. These are only blocked from the Pro version onwards.

Entries: 140214 domains/hosts - 70063 compressed domains

:blue_book: Multi NORMAL - All-round protection <a name="normal"></a>

Broom - Cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

[!NOTE] Does not block error trackers such as Bugsnag, Crashlytics, Firebase, Instabug, Sentry, ... and other app-specific crash trackers. These are only blocked from the Pro version onwards.

Entries: 452216 domains/hosts - 148941 compressed domains

:ledger: Multi PRO - Extended protection (Recommended) <a name="pro"></a>

Big broom - Cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

Entries: 520619 domains/hosts - 170124 compressed domains

:ledger: Multi PRO mini (Recommended for browser/mobile adblockers) <a name="promini"></a>

Size-optimised version for DNS/Browser adblockers. This list only contains domains from the Pro full that have been found on Top 1M lists (Umbrella, Cloudflare, Tranco, Chrome, ...) in the last 12 months.

Entries: 86089 compressed domains

:orange_book: Multi PRO++ - Maximum protection <a name="proplus"></a>

Sweeper - Aggressive cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Coins and other "Crap".

[!NOTE] More aggressive version of the Multi PRO blocklist. It may contain a few false positive domains that limit functionality. Therefore it should only be used by experienced users. Furthermore, an admin should be available to unblock incorrectly blocked domains. Reported false positive domains will be removed from the list!

Entries: 624446 domains/hosts - 194702 compressed domains

:orange_book: Multi PRO++ mini <a name="proplusmini"></a>

Size-optimised version for DNS/Browser adblockers. This list only contains domains from the Pro++ full that have been found on Top 1M lists (Umbrella, Cloudflare, Tranco, Chrome, ...) in the last 12 months.

Entries: 101376 compressed domains

:closed_book: Multi ULTIMATE - Aggressive protection <a name="ultimate"></a>

Ultimate Sweeper - Strictly cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Free Hoster, Fake, Coins and other "Crap".

[!NOTE] Stricter version of the Multi PRO++ blocklist. It may contain false positive domains that limit functionality. Therefore it should only be used by experienced users. Furthermore, an admin should be available to unblock incorrectly blocked domains. Reported false positive domains will be removed from the list!

[!WARNING] META trackers are blocked in Ultimate. This restricts the use of Facebook and Facebook Messenger apps. Furthermore, the Whatsapp graph trackers are blocked, which leads to restrictions when creating avatars and using the in-app helpcenter. Otherwise, blocking has no effect on Whatsapp functionalities. To use META apps with Ultimate, unblock the following domains if necessary: META Tracker

Entries: 672100 domains/hosts - 208403 compressed domains

:closed_book: Multi ULTIMATE mini <a name="ultimatemini"></a>

Size-optimised version for DNS/Browser adblockers. This list only contains domains from the Ultimate full that have been found on Top 1M lists (Umbrella, Cloudflare, Tranco, Chrome, ...) in the last 12 months.

Entries: 109339 compressed domains

Expires: 24 hours (update frequency)

:trollface: Fake - Protects against internet scams, traps & fakes! <a name="fake"></a>

A blocklist for blocking fake stores, -streaming, rip-offs, cost traps and co.

:green_circle: yes :yellow_square: partially :x: no

Entries: 13195 compressed domains

Expires: Updated regularly

:tada: Pop-Up Ads - Protects against annoying and malicious pop-up ads! <a name="popupads"></a>

A blocklist for annoying and malicious blocking pop-up ads.

:green_circle: yes :yellow_square: partially :x: no

[!NOTE] In the combination of the Pro or higher and additionally the Threat Intelligence Feeds (TIF) Medium or Full, all domains from the Pop-Up Ads list are included. This means that if you use the Pro or higher and also the TIF medium or full, you no longer need to add this list separately.

Entries: 82778 compressed domains

Expires: 24 hours (update frequency)

:closed_lock_with_key: Threat Intelligence Feeds - Increases security significantly! (Recommended) <a name="tif"></a>

A blocklist for blocking malware, cryptojacking, scam, spam and phishing. Blocks domains known to spread malware, launch phishing attacks and host command-and-control servers.

:green_circle: yes :yellow_square: partially :x: no

Entries: 1006697 domains/hosts - 559779 compressed domains

:closed_lock_with_key: Threat Intelligence Feeds - Medium version (Recommended for browser/mobile adblockers) <a name="tifmedium"></a>

A medium version of the Threat Intelligence Feeds list. Designed for Adblockers that have problems with the size of the full TIF list. Contains only important feeds.

:green_circle: yes :yellow_square: partially :x: no

Entries: 164245 compressed domains

:closed_lock_with_key: Threat Intelligence Feeds - Mini version <a name="tifmini"></a>

A size-optimised version of the Threat Intelligence Feeds Medium list. Designed for Adblockers that have problems with the size of the TIF Medium list.

:green_circle: yes :yellow_square: partially :x: no

Entries: 79404 compressed domains

:closed_lock_with_key: Threat Intelligence Feeds - IPs <a name="tifips"></a>

IPv4 lists in plain IP format for firewalls and AdGuard Home format are also available as an extension to the TIF list.

[!TIP] If the IP list is used in AdGuard Home, all domains that would resolve to the blocked IP are blocked. To prevent the blocked domains from being resolved via IPv6, it is necessary to deactivate resolving via IPv6 in AdGuard Home:
Settings > DNS settings > DNS server configuration > Disable resolving of IPv6 addresses

Expires: 24 hours (update frequency)

:new: Newly Registered Domains (NRDs) <a name="nrd"></a>

A blocklist for blocking domains registered in the last 14 or 30 days. These domains are known to be favoured by threat actors to launch malicious campaigns.

[!IMPORTANT] This is an external list that is created and maintained by @xRuffKez. Please address requests directly to the maintainer in the corresponding repository.

[!NOTE] It may contain a few false positive domains that limit functionality. Therefore it should only be used by experienced users. Furthermore, an admin should be available to unblock incorrectly blocked domains.

:green_circle: yes :yellow_square: partially :x: no

:new: Domains registered in the last 14 days <a name="nrd14"></a>

:new: Domains registered in the last 30 days <a name="nrd30"></a>

[!IMPORTANT] The 30-day list has been divided into two parts in order not to exceed the maximum size for files on Github. Both parts must be used.

[!WARNING] The total size of the list can lead to problems in some Adblockers. If this is the case, use the 14-day version of the list.

Expires: 24 hours (update frequency)

:outbox_tray: DoH/VPN/TOR/Proxy Bypass - Prevent methods to bypass your DNS! <a name="bypass"></a>

Prevent methods to bypass your DNS.

[!NOTE] To ensure the bootstrap is your DNS server you must redirect or block standard DNS outbound (TCP/UDP 53) and block all DNS over TLS/QUIC (TCP/UDP 853) outbound.

The block list exists in two versions:

Complete Edition - Encrypted DNS Servers, VPN, TOR, Proxies <a name="bypass_all"></a>

:green_circle: yes :yellow_square: partially :x: no

Entries: 3414 compressed domains

Expires: Updated regularly

:outbox_tray: Encrypted DNS Servers only <a name="bypass_dns"></a>

:green_circle: yes :yellow_square: partially :x: no

Entries: 1512 domains/hosts - 1352 compressed domains

Expires: Updated regularly

:outbox_tray: Encrypted DNS Servers IPs <a name="bypass_ips"></a>

IPv4 lists in plain IP format for firewalls and AdGuard Home format are also available.

[!TIP] If the IP list is used in AdGuard Home, all domains that would resolve to the blocked IP are blocked. To prevent the blocked domains from being resolved via IPv6, it is necessary to deactivate resolving via IPv6 in AdGuard Home:
Settings > DNS settings > DNS server configuration > Disable resolving of IPv6 addresses

Expires: Updated regularly

:mag: Safesearch not supported - Prevent the use of search engines that do not support Safesearch! <a name="safesearch"></a>

A blocklist for blocking search engines that do not support Safesearch.

:green_circle: yes :yellow_square: partially :x: no

Entries: 226 compressed domains

Expires: Updated regularly

:lock_with_ink_pen: Dynamic DNS blocking - Protects against the malicious use of dynamic DNS services! <a name="dyndns"></a>

A blocklist for blocking dynamic DNS services to protect against malicious use in phishing campaigns and others.

:green_circle: yes :yellow_square: partially :x: no

Entries: 1484 compressed domains

Expires: Updated regularly

:computer: Badware Hoster blocking - Protects against the malicious use of free host services! <a name="hoster"></a>

A blocklist for blocking known free hosters that also host badware via user content to prevent the use of these hosters for malicious purposes.

:green_circle: yes :yellow_square: partially :x: no

Entries: 1840 compressed domains

Expires: Updated regularly

:crystal_ball: Most Abused TLDs - Protects against known malicious Top Level Domains! (Recommended) <a name="tlds"></a>

A blocklist for blocking Top Most Abused Top Level Domains, merged from @Yokoffing, @DandelionSprout, @LennyFox Cloudflare Radar and SpamHaus.

:green_circle: yes :yellow_square: partially :x: no

Expires: Updated regularly

:skull: Anti Piracy - Protects against piracy! <a name="piracy"></a>

Blocks websites and services that are mainly used for the illegal distribution of copyrighted content.

:green_circle: yes :yellow_square: partially :x: no

Entries: 10017 compressed domains

Expires: Updated regularly

:slot_machine: Gambling - Protects against gambling content! <a name="gambling"></a>

Blocks gambling content.

:green_circle: yes :yellow_square: partially :x: no

Entries: 406932 compressed domains

:slot_machine: Gambling - Medium version <a name="gamblingmedium"></a>

A medium version of the Gambling list. Designed for Adblockers that have problems with the size of the full Gambling list.

:green_circle: yes :yellow_square: partially :x: no

Entries: 167872 compressed domains

:slot_machine: Gambling - Mini version <a name="gamblingmini"></a>

A size-optimised version of the Gambling Medium list. This list only contains domains that have been found on Top 1M lists (Umbrella, Cloudflare, Tranco, Chrome, ...) in the last 12 months.

:green_circle: yes :yellow_square: partially :x: no

Entries: 35319 compressed domains

Expires: Updated regularly

:calling: Native Tracker - Broadband tracker of devices, services and operating systems <a name="native"></a>

Blocks native broadband tracker from devices, services and operating systems that track your activity.

:green_circle: yes :yellow_square: partially :x: no

Expires: Updated regularly

:bulb: Recommendation <a name="recommendation"></a>

As a network-wide DNS blocker, I recommend using Adguard Home, Pi-hole, TechnitiumDNS, Blocky (advanced users), adblock-lean (OpenWrt) or eBlocker.

DNS blockers offer good protection of privacy by blocking tracking, metrics and telemetry. They can be used to block the vast majority of ads, malware, scam, fake and co, but not everything can be blocked at the DNS level! Therefore, I additionally recommend the use of a browser content blocker such as AdGuard, uBlock Origin or Ghostery.

Check out Yokoffing's Recommended Filters for uBlock Origin for content blocker filter lists. For a browser recommendation see also Yokoffing's I need a browser with ad blocking. Which one should I choose?

:information_desk_person: Which version of the lists should I use? <a name="whatshouldiuse"></a>

• Use Light if you have to pay attention to the size of the list because the AdBlocker does not support large lists, or light protection is sufficient for you.
• Use Normal if there is no admin nearby who can unblock something from time to time. E.g. for grandma and grandpa or the whole home or family network.
• Use Pro if an admin is available who could unblock something if necessary. My personal recommendation for almost problem-free adblocking.
• Use Pro++ if you are an experienced user, know what you are doing and privacy is important to you. This is an aggressive list and you may need to unblock things more often.
• Use Ultimate if Pro++ is not enough for you.

[!IMPORTANT] Another important recommendation is to combine the main lists with the Threat Intelligence Feeds list if possible. For Adblockers that have problems with the size of the full TIF list, there is a smaller medium and mini version. If you use AdGuard Home or AdGuard DNS, I also recommend using the Dandelion Sprout's Anti-Malware List. There is also an IPv4 list that can be used in addition to the TIF or TIF medium/mini list.

[!TIP] Only for NextDNS users: The Threat Intelligence Feeds list is not available in NextDNS, the security features should be used instead. Furthermore, I recommend that NextDNS users also use the OISD list, which also contains some TIF sources that are not covered by the NextDNS security features.

Further additional options to the main lists depending on the use case are:

• Security: In addition to the Threat Intelligence Feeds list, use the Dynamic DNS, Badware Hoster, Most Abused TLDs and Newly Registered Domains (NRDs) list to further protect yourself from malicious things.
• Protection of children: Use the Gambling, Anti Piracy, Safesearch, DoH/VPN/TOR/Proxy Bypass and oisd NSFW lists in addition to blocking gambling, piracy, no Safesearch engines, DNS bypassing, porn, shock and adult sites.

:department_store: Online DNS Services <a name="dnsservices"></a>

If you don't run your own DNS server on your home network or if you are looking for additional protection for your mobile devices when they are not connected to the home network, then you can use one of the following DNS services.

Availability of the lists in the respective DNS services: <a name="availablelists"></a>

:yellow_square: Are included in the ControlD native lists of the respective category.
:notebook: Available as ControlD folder.

:department_store: AdGuardDNS - limited free/paid <a name="adguarddns"></a>

In AdGuardDNS you can use my Multi Normal, Pro, Pro++, Ultimate, TIF, Gambling, Anti Piracy, DoH/VPN/TOR/Proxy Bypass, DynDNS, Badware Hoster, Most Abused TLDs list and the Allowlist Referral.

:department_store: ControlD - free/paid <a name="controld"></a>

In ControlD you can use my Light, Normal, Pro, Pro++, Ultimate and TIF lists.

Free:

Paid:

Check out Yokoffing's ControlD Config Guide for recommended ControlD configuration settings.

:department_store: NextDNS - limited free/paid <a name="nextdns"></a>

In NextDNS you can use my Light, Normal, Pro, Pro++ and Ultimate lists.

Check out Yokoffing's NextDNS Config Guide and the Techlore Video The ULTIMATE Guide to Mastering NextDNS! for recommended NextDNS configuration settings.

:department_store: DNSwarden - free <a name="dnswarden"></a>

In DNSwarden you can use my Light, Normal, Pro, Pro++, Ultimate and TIF lists.

:department_store: DNSforge (Germany) - free <a name="dnsforge"></a>

DNSforge uses some of my lists in addition to other blocklists.

:department_store: OpenBLD.net - free <a name="openbld"></a>

OpenBLD.net use my Multi Pro blocklist in addition to other blocklists.

:department_store: RobinGroppe.de (Germany) - free <a name="robingroppe"></a>

RobinGroppe.de DNS offers a free German DNS server without logging to block malware, phishing and other threats. It uses my TIF list.

:loudspeaker: About <a name="about"></a>

The blocklists are based on various sources and my own denylists/extensions. They were designed to avoid false positive domains as much as possible without losing effectiveness and efficiency. Dead hosts are regularly removed from the lists to keep them as small as possible. Made with :heartbeat: for a safer and cleaner internet.

All lists were tested against 10000 websites from the Cisco Umbrella Top 1 million list. It was checked whether the pages load, the page content is displayed correctly, navigation links work, images load, videos start and much more.

They are updated and maintained daily.

No, they are not just block lists cobbled together from different sources. They have been optimized and extended to efficiently "clean the Internet" in all areas. See also: Which sources are used for the lists and how are the lists compiled on the basis of these sources?

The results of a test against the 10000 whotracks.me pages. All pages were opened and fully loaded via batch in Edge with privacy features turned off. Cookies were all accepted.

Test them, give feedback and report blockable or incorrectly blocked domains.

:octocat: Repository <a name="repository"></a>

The repository is occasionally compressed (reinitialised) to reduce the overall size. Among other things, this invalidates forks and cleans up the commit history.

:cyclone: Referral Domains <a name="referral"></a>

Affiliate and tracking links (referral domains) that appear frequently on offer web pages like Slickdeals, in emails or in search results are allowed in my lists. These are mostly called only after manually clicking on a link and are not used to display advertising. If these are blocked, the first hit links from search results, for example, no longer work. Furthermore, some of these domains are also used to unsubscribe from newsletters.

See also: Why are referral domains (affiliate and tracking links) not blocked in the lists?

:dizzy: Support Me <a name="support"></a>

If you like the project and you can benefit from it, leave a :star: (top right) and become a stargazer!

Give feedback, show me your ideas, report domains to be blocked, report false positive domains and help to keep the internet safe and clean. Help and cooperation of any kind are welcome!

Thanks for your support!

:stars: Stargazers <a name="stargazers"></a>

Keep the internet clean!