Privacy is not a crime, protect yourself. Privacy matters. Privacy is what allows us to determine who we are and who we want to be ‼️

If you like the project and you can benefit from it, leave a ⭐ (top right) and become a stargazer! Thanks for your support!

1. Overview
2. Multi light - Hand brush: Light protection
3. Multi normal - Broom: All-round protection
4. Multi pro - Big broom: Extended protection (Recommended) : Full - Mini
5. Multi pro++ - Sweeper: Maximum protection (more aggressive) : Full - Mini
6. Multi ultimate - Ultimate Sweeper: Aggressive protection : Full - Mini
7. Fake - Protects against internet scams, traps & fakes!
8. Pop-Up Ads - Protects against annoying and malicious pop-up ads!
9. Threat Intelligence Feeds - Increases security significantly! (Recommended) : Full - Medium - Mini - IPs
10. Newly Registered Domains - NRD/DGA - Favoured by threat actors to launch malicious campaigns!
11. DoH/VPN/TOR/Proxy Bypass - Prevent methods to bypass your DNS! : Full - DoH only - DoH IPs
12. Safesearch not supported - Prevent the use of search engines that do not support Safesearch!
13. Dynamic DNS - Protects against the malicious use of dynamic DNS services!
14. Badware Hoster - Protects against the malicious use of host services!
15. URL Shortener - Blocks link/URL shortener!
16. Most Abused TLDs - Protects against known malicious Top Level Domains!
17. DNS Rebind Protection - Prevents attackers from resolving domains to local IPs!
18. Anti Piracy - Protects against piracy!
19. Gambling - Protects against gambling content! : Full - Medium - Mini
20. NSFW - Protects against adult content!
21. Native Tracker - Broadband tracker of devices, services and operating systems
22. Supporter - Leave a star (top right)!
23. Recommendation - Which version of the lists should I use?
24. Online DNS Services
25. About : Repository - Referral Domains - Support Me - Sponsor Me
26. FAQ - Frequently Asked Questions
27. Discussions
28. Sources
29. Disclaimer
30. Contact

An all-in-one DNS blocklist in various versions (light, normal, pro, pro++ and ultimate). It can be used as a standalone blocklist. For every region. Blocks ads, affiliate, tracking, metrics, telemetry, fake, phishing, malware, scam, cryptojacking and other "crap". Based on various blocklists. No, they are not just block lists cobbled together from different sources. They have been optimized and extended to efficiently "clean the Internet" in all areas.

See also: Which sources are used for the lists and how are the lists compiled on the basis of these sources?

🟢 contains the list named in the column caption 🟨 partially contains the list named in the column caption

Hand brush - Cleans the Internet and protects your privacy! Blocks Ads, Tracking, Metrics and some Badware. A size-optimized version of the Multi NORMAL.

Entries: 79809 domains/hosts - 8868 compressed hosts - 40379 compressed domains

Broom - Cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Cryptojacking and other "Crap".

Entries: 244987 domains/hosts - 27221 compressed hosts - 129902 compressed domains

Big broom - Cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Cryptojacking and other "Crap".

Entries: 322173 domains/hosts - 35797 compressed hosts - 168341 compressed domains

Size-optimised version for DNS/Browser adblockers, e.g. for devices with less RAM. This list only contains domains from the Pro full that have been found on Top 1/10M lists (Umbrella, Cloudflare, Tranco, Chrome, BuiltWith, Majestic, DomCop).

Entries: 46066 compressed domains

Sweeper - Aggressive cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Cryptojacking and other "Crap".

Entries: 415232 domains/hosts - 46137 compressed hosts - 221453 compressed domains

Size-optimised version for DNS/Browser adblockers, e.g. for devices with less RAM. This list only contains domains from the Pro++ full that have been found on Top 1/10M lists (Umbrella, Cloudflare, Tranco, Chrome, BuiltWith, Majestic, DomCop).

Entries: 66610 compressed domains

Ultimate Sweeper - Strictly cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking, Metrics, Telemetry, Phishing, Malware, Scam, Fake, Cryptojacking and other "Crap".

Entries: 458762 domains/hosts - 50974 compressed hosts - 241198 compressed domains

Size-optimised version for DNS/Browser adblockers, e.g. for devices with less RAM. This list only contains domains from the Ultimate full that have been found on Top 1/10M lists (Umbrella, Cloudflare, Tranco, Chrome, BuiltWith, Majestic, DomCop).

Entries: 71445 compressed domains

A blocklist for blocking fake stores, -streaming, rip-offs, cost traps and co.

🟢 yes 🟨 partially ❌ no

Entries: 14272 compressed domains

A blocklist for annoying and malicious pop-up ads.

🟢 yes 🟨 partially ❌ no

Entries: 72385 compressed domains

A blocklist for blocking Malware, Cryptojacking, Scam, Spam and Phishing. Blocks domains known to spread malware, launch phishing attacks and host command-and-control servers.

🟢 yes 🟨 partially ❌ no

Entries: 962931 domains/hosts - 106993 compressed hosts - 835999 compressed domains

A medium version of the Threat Intelligence Feeds list. Designed for Adblockers that have problems with the size of the full TIF list. Contains only important feeds.

🟢 yes 🟨 partially ❌ no

Entries: 320227 compressed domains

A size-optimised version of the Threat Intelligence Feeds Medium list. Designed for Adblockers that have problems with the size of the TIF Medium list.

🟢 yes 🟨 partially ❌ no

Entries: 186309 compressed domains

IPv4 lists in plain IP format for firewalls and AdGuard Home format are also available as an extension to the TIF list.

Newly registered domains (NRDs) are commonly used by threat actors for phishing, malware, and command-and-control infrastructure due to their disposable nature, which helps evade detection.

Two variants are available:

• NRDs: Include all newly registered domains.
• Entropy NRDs/DGAs: Contain only newly registered, high-entropy domains generated by Domain Generation Algorithms (DGAs) extracted from the NRD list. These domains display significant structural randomness and are commonly used by malware to establish resilient and evasive command-and-control channels.

Prevent methods to bypass your DNS.

The block list exists in two versions:

🟢 yes 🟨 partially ❌ no

Entries: 6219 compressed domains

🟢 yes 🟨 partially ❌ no

Entries: 3910 domains/hosts - 435 compressed hosts - 3431 compressed domains

IPv4 lists in plain IP format for firewalls and AdGuard Home format are also available.

A blocklist for blocking search engines that do not support Safesearch.

🟢 yes 🟨 partially ❌ no

Entries: 182 compressed domains

A blocklist for blocking dynamic DNS services to protect against malicious use in phishing campaigns and others.

🟢 yes 🟨 partially ❌ no

Entries: 1472 compressed domains

A blocklist for blocking known hosters that also host badware via user content to prevent the use of these hosters for malicious purposes.

🟢 yes 🟨 partially ❌ no

Entries: 1385 compressed domains

A blocklist for blocking all known URL/link shortener.

🟢 yes 🟨 partially ❌ no

Entries: 7753 compressed domains

A blocklist for blocking Top Most Abused Top Level Domains, merged from @Yokoffing, @DandelionSprout, @LennyFox Cloudflare Radar, Netcraft and SpamHaus.

🟢 yes 🟨 partially ❌ no

DNS Rebind Protection is a security mechanism that prevents attackers from manipulating DNS responses to make a domain resolve to private or local IP addresses, thereby blocking malicious scripts from accessing internal networks through DNS rebinding attacks.

Blocks websites and services that are mainly used for the illegal distribution of copyrighted content.

🟢 yes 🟨 partially ❌ no

Entries: 11515 compressed domains

Blocks gambling content.

🟢 yes 🟨 partially ❌ no

Entries: 203959 compressed domains

A medium version of the Gambling list. Designed for Adblockers that have problems with the size of the full Gambling list.

🟢 yes 🟨 partially ❌ no

Entries: 84582 compressed domains

A size-optimised version of the Gambling Medium list. This list only contains domains that have been found on Top 1/10M lists (Umbrella, Cloudflare, Tranco, Chrome, BuiltWith, Majestic, DomCop).

🟢 yes 🟨 partially ❌ no

Entries: 47430 compressed domains

Blocks adult content.

🟢 yes 🟨 partially ❌ no

Entries: 79433 compressed domains

Blocks native broadband tracker from devices, services and operating systems that track your activity.

🟢 yes 🟨 partially ❌ no

As a network-wide DNS blocker, I recommend using Adguard Home, Pi-hole, TechnitiumDNS, Blocky (advanced users), adblock-lean (OpenWrt) or eBlocker.

DNS blockers offer good protection of privacy by blocking tracking, metrics and telemetry. They can be used to block the vast majority of ads, malware, scam, fake and co, but not everything can be blocked at the DNS level! Therefore, I additionally recommend the use of a browser content blocker such as AdGuard, uBlock Origin or Ghostery.

Check out Yokoffing's Recommended Filters for uBlock Origin for content blocker filter lists.

If you don't run your own DNS server on your home network or if you are looking for additional protection for your mobile devices when they are not connected to the home network, then you can use one of the following DNS services.

Availability of the lists in the respective DNS services:

🟨 Are included in the ControlD native lists of the respective category.
📓 Available as ControlD folder.

In AdGuardDNS you can use my:

• Normal, Pro, Pro++, Ultimate
• Threat-Intelligence-Feeds (TIF), Most Abused TLDs, Badware Hoster, DynDNS, DNS Rebind Protection, URLshortener
• DoH/VPN/TOR/Proxy Bypass
• Gambling
• Anti Piracy
• Native Tracker (Apple, OPPO & Realme, Samsung, Vivo, Windows/Office, Xiaomi)
• Allowlist Referral

In ControlD you can use my Light, Normal, Pro, Pro++, Ultimate and TIF lists.

Free:

Paid:

Check out Yokoffing's ControlD Config Guide for recommended ControlD configuration settings.

In RethinkDNS you can use my Light, Normal, Pro, Pro++, Ultimate, TIF, DynDNS and Badware Hoster lists.

In DNSwarden you can use my Light, Normal, Pro, Pro++, Ultimate and TIF lists.

DNSBUNKER.org is a hardened, privacy-first DNS resolver located in Germany.

OpenBLD.net uses my Pro in combination with the TIF blocklist.

RobinGroppe.de DNS offers a free German DNS server without logging to block malware, phishing and other threats. It uses my TIF list.

"If the plan doesn‘t work, change the plan but never the goal."
There's no place like 127.0.0.1!

The blocklists are based on various sources and my own denylists/extensions. They were designed to avoid false positive domains as much as possible without losing effectiveness and efficiency. Dead hosts are regularly removed from the lists to keep them as small as possible. Made with 💓 for a safer and cleaner internet.

All lists were tested against 10000 websites from the Cisco Umbrella Top 1 million list. It was checked whether the pages load, the page content is displayed correctly, navigation links work, images load, videos start and much more.

No, they are not just block lists cobbled together from different sources. They have been optimized and extended to efficiently "clean the Internet" in all areas. See also: Which sources are used for the lists and how are the lists compiled on the basis of these sources?

The results of a test against the 10000 whotracks.me pages. All pages were opened and fully loaded via batch in Edge with privacy features turned off. Cookies were all accepted.

Test them, give feedback and report blockable or incorrectly blocked domains.

The repository is occasionally compressed (reinitialised) to reduce the overall size. Among other things, this invalidates forks and cleans up the commit history.

Why are referral domains (affiliate and tracking links) not blocked in the lists?

If you like this project and find it useful, please leave a ⭐ (top right) and become a stargazer!

Your feedback, ideas, reports of domains to block or false positives, and any kind of collaboration are always welcome to help keep the internet safer and cleaner.

This project thrives thanks to an active and supportive community and is provided free of charge with regular updates and maintenance. Donations help cover infrastructure costs and support ongoing development. Contributions are entirely voluntary, and every bit of support is greatly appreciated.

Thank you for being part of the community!