Repolode
Submit
hagezi

hagezi/dns-blocklists

A set of DNS blocklists that block ads, trackers, telemetry, phishing, malware and scams network-wide, for any DNS server or ad blocker.

Open-source alternative to:NextDNS

View on GitHub
Stars
27,602
Forks
838
Open issues
6
Last commit
12 hours ago

What is it?

DNS-Blocklists is a collection of domain blocklists maintained by hagezi. Its main Multi lists come in five tiers, from Light to Ultimate, and each tier is published in several formats (Adblock, DNSMasq, Wildcard, RPZ) so it can be loaded into Pi-hole, AdGuard Home, Unbound, BIND, PowerDNS, OPNsense, FRITZ!Box and similar tools. Higher tiers block more aggressively at the cost of a higher risk of breaking legitimate sites.

Beyond the general-purpose lists, the project provides specialized blocklists for threat intelligence feeds, newly registered and DGA domains, dynamic DNS, badware hosts, abused top-level domains, DNS rebinding, encrypted DNS and VPN/Tor/proxy bypass, URL shorteners, piracy, gambling, social networks, NSFW content and native device trackers. A Direct Link Generator helps users pick the right format and copy download links for the lists they choose.

The lists are published via jsDelivr CDN and are refreshed regularly, and the project also offers a lookup tool for checking whether a domain or IP appears in its lists.

Key features

  • 01Five Multi tiers, from Light to Ultimate, for choosing a blocking intensity.
  • 02Output formats for Adblock, DNSMasq, Wildcard, and RPZ resolvers.
  • 03Specialized lists for threat intelligence, newly registered domains, and DGA domains.
  • 04Blocks encrypted DNS, VPN, Tor, and proxy bypass attempts.
  • 05Direct Link Generator and domain lookup tool for finding and checking list entries.

Use cases

  • Blocking ads and trackers network-wide on a home Pi-hole or AdGuard Home setup.
  • Protecting a small office or home network from phishing and malware domains via a recursive resolver.
  • Adding threat-intelligence blocking on top of a general ad-blocking list in a firewall or router.
  • Restricting specific categories such as gambling, social networks, or URL shorteners for families or organizations.

Quick start

  1. 1

    Pick the list format that matches your DNS server or ad blocker

  2. 2

    Use the Direct Link Generator to copy the download links for your chosen lists

  3. 3

    Add the list links to your DNS server or ad blocker, following the quick setup guide in the FAQ

Things to know

  • Licensed under GPL-3.0, a copyleft license that requires derivative works to remain open source.
  • Higher tiers such as Ultimate carry a high risk of breaking websites or apps.
  • Light and Normal do not block error trackers such as Sentry or Crashlytics; only Pro and above do.

Topics

#dns#blocklist#adblock#privacy#malware-protection#pi-hole#phishing#tracking-protection#adguard#ads

FAQ

What is dns-blocklists?
A set of DNS blocklists that block ads, trackers, telemetry, phishing, malware and scams network-wide, for any DNS server or ad blocker. DNS-Blocklists is a collection of domain blocklists maintained by hagezi. Its main Multi lists come in five tiers, from Light to Ultimate, and each tier is published in several formats (Adblock, DNSMasq, Wildcard, RPZ) so it can be loaded into Pi-hole, AdGuard Home, Unbound, BIND, PowerDNS, OPNsense, FRITZ!Box and similar tools. Higher tiers block more aggressively at the cost of a higher risk of breaking legitimate sites.
Is dns-blocklists free to use? What license does it have?
dns-blocklists is open source under the GPL-3.0 license. Check the license terms before using it in commercial products.
Is dns-blocklists still maintained?
Actively maintained. The last commit to dns-blocklists was on Oct 20, 2026.
What can I use dns-blocklists for?
Blocking ads and trackers network-wide on a home Pi-hole or AdGuard Home setup. Protecting a small office or home network from phishing and malware domains via a recursive resolver. Adding threat-intelligence blocking on top of a general ad-blocking list in a firewall or router. Restricting specific categories such as gambling, social networks, or URL shorteners for families or organizations.
How do I install dns-blocklists?
Pick the list format that matches your DNS server or ad blocker Use the Direct Link Generator to copy the download links for your chosen lists Add the list links to your DNS server or ad blocker, following the quick setup guide in the FAQ
Where can I get dns-blocklists?
The source code and installation instructions are on GitHub: https://github.com/hagezi/dns-blocklists

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects