⚡ DNS Blocklists - For a better internet!

Made with 💓 for a safer and cleaner internet! It always seems impossible until it’s done.

📑 Table of Contents

📚Multi - Cleans the Internet and protects your privacy!

Blocklist version and size overview:

Blocking level:

Tip

💁Which version of the lists should I use?

📗Multi LIGHT -Basic protection

Note

Blocking type: Relaxed
This list version should not lead to any restrictions. It is particularly suitable for environments in which there is no admin nearby who can unblock something and if you have to pay attention to the size of the list, because the AdBlocker does not support large lists.

Important

Does not block error trackers such as Bugsnag, Crashlytics, Firebase, Instabug, Sentry, ... and other app-specific crash trackers. These are only blocked from the Pro version onwards.

📘Multi NORMAL -All-round protection

Note

Blocking type: Relaxed/Balanced
This list version should not lead to any restrictions for the most part. It is particularly suitable for environments in which there is no admin nearby who can unblock something.

Important

Does not block error trackers such as Bugsnag, Crashlytics, Firebase, Instabug, Sentry, ... and other app-specific crash trackers. These are only blocked from the Pro version onwards.

📒Multi PRO -Extended protection (Recommended)

Note

Blocking type: Balanced
This list version should only very rarely lead to restrictions. It is suitable for environments where there is an admin nearby who can unblock something. My personal recommendation for mostly problem-free adblocking with good privacy protection.

📒Multi PRO mini (Recommended for browser/mobile adblockers)

📙Multi PRO++ -Maximum protection

Note

Blocking type: Balanced/Aggressive
More aggressive version of the Multi PRO blocklist. It may contain a few false positive domains that limit functionality. Therefore it should only be used by experienced users. Furthermore, an admin should be available to unblock incorrectly blocked domains.

Warning

Referral domains (affiliate and tracking links):
A few referral domains that also function as normal trackers are blocked. For further details see:Referral domains

📙Multi PRO++ mini

📕Multi ULTIMATE -Aggressive protection

Note

Blocking type: Aggressive
Stricter version of the Multi PRO++ blocklist. It contains domains that limit functionality in apps and on websites - some popular trackers, that lead to restrictions, are blocked in this list. Therefore it should only be used by experienced users. Furthermore, an admin should be available to unblock incorrectly blocked domains.

Warning

Referral domains (affiliate and tracking links):
A few referral domains that also function as normal trackers are blocked. For further details see:Referral domains

Facebook:
Some META trackers are blocked in Ultimate. This restricts the use of Facebook and Facebook Messenger apps. Furthermore, the Whatsapp graph trackers are blocked, which leads to restrictions when creating avatars, using the in-app helpcenter and using video effects. Otherwise, blocking has no effect on Whatsapp functionalities. To use META apps with Ultimate, unblock the following domains if necessary:META Tracker

Windows/XBox:
Some Microsoft trackers are blocked in Ultimate, which lead to restrictions, e.g. Windows Spotlight, XBox Live Achievements Activity History and others. For details and which domains must be unblocked for which function, see:Microsoft Tracker.

Location and IP trackers:
Certain location and IP trackers used by websites to identify or monitor your IP address and geographic location are blocked. This enhances privacy but may lead to issues such as incorrect regional settings, additional CAPTCHAs, or reduced website functionality. These trackers are commonly employed for hidden analytics and targeted advertising.

Miscellaneous:
Details on other known issues can be foundhere.

📕Multi ULTIMATE mini

Fake - Protects against internet scams, traps & fakes!

🎉Pop-Up Ads - Protects against annoying and malicious pop-up ads!

🔐Threat Intelligence Feeds - Increases security significantly! (Recommended)

Warning

This blocklist is very large and may cause high memory usage depending on your ad blocker.
For a more resource-friendly option, consider using the medium or mini versions.

🔐Threat Intelligence Feeds - Medium version (Recommended for browser/mobile adblockers)

🔐Threat Intelligence Feeds - Mini version

🔐Threat Intelligence Feeds - IPs

Tip

If the IP list is used in AdGuard Home, all domains that would resolve to the blocked IP are blocked. To prevent the blocked domains from being resolved via IPv6, it is necessary to deactivate resolving via IPv6 in AdGuard Home:
Settings > DNS settings > DNS server configuration > Disable resolving of IPv6 addresses

🆕Newly Registered Domains (NRD/DGA)

Warning

These lists are very large and resource-intensive. They may cause high memory usage and contain false positives, since some legitimate domains are newly registered. Use with caution and whitelist critical services as needed.

Caution

Use at your own risk. The NRD lists are provided as-is, without guarantees, support, or a process for removing false positives.

Important

The base data for these lists is provided byStamus Labs andOpenSquat.
Stamus Labs and OpenSquat do not guarantee daily updates, and in some cases, data may be delayed by several days.

Current status of the data provided:

• OpenSquat: 🟢 - Sat, 29 Nov 2025 05:30:17 UTC / 10729334 domains
• Stamus Labs: 🟢 - Sat, 29 Nov 2025 05:09:53 UTC / 10789600 domains

🆕NRDs: Include all newly registered domains

Note

To block NRDs from the last 14 days, combine the domain lists from 7 days ago and 14 days ago. For blocking NRDs from the last 21 days, combine lists from 7, 14, and 21 days ago. Etc.

Tip

In addition to the NRD list formats provided here, the NRDs are also available in other formats in external repositories:

• Wildcard (Asterisk):Cebeerre/dnsblocklists

🔠Entropy NRDs/DGAs: Contain only newly registered, high-entropy domains generated by Domain Generation Algorithms (DGAs)

Note

These domains are already included in the full NRD list.

📤DoH/VPN/TOR/Proxy Bypass - Prevent methods to bypass your DNS!

Note

To ensure the bootstrap is your DNS server you must redirect or block standard DNS outbound (TCP/UDP 53) and block all DNS over TLS/QUIC (TCP/UDP 853) outbound.

Complete Edition - Encrypted DNS Servers, VPN, TOR, Proxies

📤Encrypted DNS Servers only

📤Encrypted DNS Servers IPs

Tip

If the IP list is used in AdGuard Home, all domains that would resolve to the blocked IP are blocked. To prevent the blocked domains from being resolved via IPv6, it is necessary to deactivate resolving via IPv6 in AdGuard Home:
Settings > DNS settings > DNS server configuration > Disable resolving of IPv6 addresses

🔍Safesearch not supported - Prevent the use of search engines that do not support Safesearch!

🔏Dynamic DNS blocking - Protects against the malicious use of dynamic DNS services!

💻Badware Hoster blocking - Protects against the malicious use of host services!

Important

This list blocks the root domains of all hosting providers that occasionally appear in threat intelligence feeds due to malicious subdomains. Please be aware that this will also block legitimate sites hosted by these providers. Consider this carefully before using the list.

When using this list, users are responsible for unblocking any required subdomains themselves.

Caution

Blocking entire hosting providers is impractical in normal environments and may disrupt legitimate services. In sensitive environments, however, stricter blocking can be justified to maximize security.

📲URL Shortener - Blocks link shortener!

Warning

Not suitable for use in standard environments. Blocking all URL shorteners is recommended mainly in highly sensitive environments, as they can hide link destinations and facilitate attacks. In less sensitive settings, monitoring, selective blocking, or user education usually suffice to manage risks.

When using this list, users are responsible for unblocking any required domains themselves.

🔮Most Abused TLDs - Protects against known malicious Top Level Domains! (Recommended)

Warning

The Most Abused TLDs list is designed to block entire top-level domains (such as *.top, *.shop, *.gdn) with poor reputations. While this may also block some legitimate sites, it is highly effective at preventing spam, scams, phishing, malware, and other malicious content. Users should be aware of which sites are affected by this list.

Only widely-used, reputable domains, such as those appearing on major top lists (Umbrella, Cloudflare, Tranco, Chrome, DomCop, etc.) or those essential for popular apps and services will be considered for exclusion. Illegal domains, including those related to piracy, will not be unblocked. Domains that do not meet these criteria are reviewed individually; if exclusion is not justified, they remain blocked. Users who need access to such domains should add them to their personal allowlist.

This selective approach is necessary because AdGuard and uBlock Origin have technical limits on rule length when using denyallow/domain modifiers. Attempting to exclude every legitimate domain would eventually break important rules, so exclusions must be limited and carefully chosen.

🛡️DNS Rebind Protection - Prevents attackers from resolving domains to local IPs!

Important

This list is only compatible with AdGuard/AdGuard Home and can also be selected in AdGuard DNS.
Other DNS blockers may include built‑in DNS rebinding protection.

Since rebinding protection blocks all domains resolving to local IPs, internal hostnames may also be affected.
In AdGuard, you should therefore whitelist your local domains, for example:@@||fritz.box^

💀Anti Piracy - Protects against piracy!

🎰Gambling - Protects against gambling content!

🎰Gambling - Medium version

🎰Gambling - Mini version

💬Social Networks - Blocks access to social networks!

Note

This list does not block messaging services such as WhatsApp or streaming platforms like Twitch. The blocking is strictly limited to traditional social networking sites only.

🔞NSFW - Protects against adult content!

📲Native Tracker - Broadband tracker of devices, services and operating systems

Important

The native tracker lists encompass all trackers used for monitoring user activity, which may also result in certain restrictions. These lists are integrated across the standard tiers—Light, Normal, Pro, Pro++, and Ultimate—each providing different levels of blocking:

• Light to Pro: These lists only block native trackers that do not interfere with functionality, ensuring a smooth experience.
• Pro++ (Aggressive): This list blocks additional native trackers that may cause some restrictions or limit certain features.
• Ultimate: This list provides the most comprehensive blocking, including all native trackers for maximum privacy.

By choosing a specific list version, you can control how aggressively native trackers are blocked according to your preferences.

When combining native tracker lists with standard lists, you may need to manually unblock certain native trackers as required.

💡Recommendation

Tip

💁Which version of the lists should I use?

🏬Online DNS Services

🏬AdGuardDNS - limited free/unlimited trial/paid

🏬ControlD - free/paid

🏬HaGeZi DNS (EU) - free

🏬DNSBUNKER.org (Germany) - free

🏬RethinkDNS - free

Note

The lists in RethinkDNS are only updated once a week.

🏬DNSwarden - free

🏬OpenBLD.net - free

🏬RobinGroppe.de (Germany) - free

📢About

Repository

🌀 Referral Domains

💫 Support Me

🌠 Stargazers

⚠️ Disclaimer

Important

The provided DNS blocklists are made available free of charge and without any warranty of any kind. The creator or operator of these blocklists assumes no liability for the accuracy, completeness, timeliness, or suitability of the provided information for any particular purpose. In particular, there is no guarantee that all harmful or unwanted domains are captured, or that legitimate domains will not be erroneously blocked.

Use of the DNS blocklists is strictly at the user's own risk. Any direct or indirect liability for material or non-material damages arising from the use or non-use of the provided lists is expressly excluded, unless such damage is demonstrably the result of deliberate or grossly negligent misconduct on the part of the provider.

The lists are intended solely as an additional, non-exclusive security measure and do not replace the user's own responsibility for due diligence or the use of further protective mechanisms (e.g. firewalls, antivirus software, IDS/IPS systems). Compatibility with specific systems, software solutions, or individual deployment scenarios is not guaranteed.

Redistribution and adaptation of the blocklists is permitted within the scope of the applicable open source license terms. It is the user's responsibility to be aware of and comply with the respective license conditions.

By using the DNS blocklists, you expressly acknowledge and accept these terms and conditions.

Keep the internet clean!