dns-blocklists

HaGeZi DNS Blocklists is a collection of curated DNS blocklists intended to block ads, trackers, telemetry, phishing, malware, scams and other unwanted domains network-wide. The lists are region-independent and are published for common DNS servers, ad blockers and content blockers. Main structure The core offering is the "Multi" family, an all-in-one list in five escalating versions: Light (basic protection), Normal (all-round), Pro (extended, described as the author's recommendation), Pro++ (more aggressive) and Ultimate (most aggressive). The versions build on each other, so only one should be used at a time. Each has a size-optimized "mini" variant (Pro, Pro++, Ultimate) restricted to domains appearing on Top 1M/10M popularity lists, aimed at browser or mobile blockers and low-RAM devices. Light and Normal do not block app crash/error trackers; those start with Pro. Ultimate carries documented caveats: it can limit Facebook/Messenger and WhatsApp functionality, affect Windows Spotlight and Xbox Live achievement history, and block location/IP trackers, which may cause wrong regional settings or extra CAPTCHAs. The repository provides share files listing domains to unblock for META, Microsoft and other known issues. Standalone lists Beyond Multi, the project publishes focused lists: Fake (fake stores, rip-off and subscription-trap sites), Pop-Up Ads, Threat Intelligence Feeds (TIF, malware, phishing, C2, cryptojacking; full, medium and mini sizes plus an IP list), Newly Registered Domains (NRD/DGA), Dynamic DNS, Badware Hoster, Most Abused TLDs, DNS Rebind Protection, DoH/VPN/Tor/Proxy Bypass (full, DoH-only, DoH IPs), Safesearch-not-supported, URL Shortener, Anti Piracy, Gambling (full/medium/mini), Social Networks, NSFW and Native Tracker. TIF is designed as an add-on that can run alongside any Multi tier; the RPZ build of the full TIF list is split into two files. Formats and tooling Most lists ship in five formats with identical blocked domains: Adblock (Pi-hole, AdGuard, AdGuard Home, uBlock Origin, eBlocker and others), DNSMasq (v2.86+), Wildcard Asterisk (Blocky, OPNsense, YogaDNS and similar), Wildcard Domains (DNSCrypt, FRITZ!Box, TechnitiumDNS, adblock-lean and similar) and RPZ (Bind, Knot, PowerDNS, Unbound). A few lists deviate: Most Abused TLDs has its own variants, DNS Rebind Protection is AdGuard-only, NRD/DGA is Adblock/plain domains only, and TIF/DoH have IP lists. Legacy Subdomains and Hosts formats live in a separate repository. A Direct Link Generator web page builds download links by device/app and selected lists, and a Blocklist Lookup tool checks a domain or IP against all lists. A Cheat Sheet and FAQ cover inclusion matrices, setup, glossary and source compilation. Operational notes Entry counts change with each build; the README quotes figures such as roughly 43.7k (Light), 164k (Normal), 228k (Pro), 256k (Pro++), 285k (Ultimate) and about 2.25M for full TIF. The full TIF list is described as memory-heavy, too large for the iOS AdGuard app, and requiring at least 2 GB RAM in AdGuard Home (1 GB for the medium version). Lists are distributed via CDN links and official mirrors, with a stated update interval. The project is GPL-3.0 licensed and points to online DNS services that already integrate these lists.