From c5c14ab74c146d626a57e7212e06667bedcb0332 Mon Sep 17 00:00:00 2001 From: ookangzheng Date: Thu, 26 Nov 2020 14:01:14 +0800 Subject: [PATCH] fix(html): beautify website html --- website/index.html | 1020 +++++++++++++++++++++----------------------- 1 file changed, 498 insertions(+), 522 deletions(-) diff --git a/website/index.html b/website/index.html index d967c0d..a30bdff 100644 --- a/website/index.html +++ b/website/index.html @@ -1,527 +1,503 @@ - Blahdns -- Dns service support DoH, DoT, DNSCrypt - - - - - - - - - - - - - -
-
- -
-

- A small hobby ads block DNS project with DoH, DoT, DNSCrypt support.

- -
-

You are not using Blahdns !!!

-
-
-
-
- -
-

Need some coffees (25 EUR/ per month) for servers to keep this project healthy.

- -
-
-

Announcements

- -
No logs | No EDNS Client-Subnet | OpenNIC support | Ethereum Name Service | DNSSEC ready | Yggdrasil | Filtered ads, trackers, malware, prevent CNAME Cloacking -
- -
-
-
-

Our servers

- -
-
-
- - -
-
-
-

Japan ๐Ÿ‡ฏ๐Ÿ‡ต

- -
-
    -
  • -

    DNS-over-HTTPS

    - - -

    IPv4-stamp:

    - -

    IPv6-stamp:

    - -

    DNS-over-TLS

    - -

    IP address: -
    45.32.55.94 -
    2001:19f0:7001:3259:5400:02ff:fe71:0bc9 -

    tls_auth_name: -
    - port: 853, 443 (Strict SNI, without SNI will drop)

    -

    DNSCrypt v2

    -port: 8443 -

    IPv4 - DNSStamp: -
    - -

    -

    IPv6 - DNSStamp: -
    - -

    -
    • -
-
-
- -
-
-
-

Singapore ๐Ÿ‡ธ๐Ÿ‡ฌ

- -
-
    -
  • -

    DNS-over-HTTPS

    - - -

    IPv4-stamp:

    - -

    IPv6-stamp:

    - -

    DNS-over-TLS

    - -

    IP address:
    - - 139.180.141.57
    - 2001:19f0:4400:6bed:5400:2ff:feb1:f9fa -
    -

    tls_auth_name: -
    - port: 853, 443 (Strict SNI, without SNI will drop)

    -

    DNSCrypt v2

    -port: 8443 -

    IPv4 - DNSStamp: -
    - -

    -

    IPv6 - DNSStamp: -
    - -

    -
    • -
-
-
- -
-
-
-

Germany ๐Ÿ‡ฉ๐Ÿ‡ช

- -
-
    -
  • -

    DNS-over-HTTPS

    - - -

    IPv4-stamp:

    - -

    IPv6-stamp:

    - -

    DNS-over-TLS

    - -

    IP address:
    - - 78.46.244.143
    - 2a01:4f8:c17:ec67::1
    -

    tls_auth_name: -
    - port: 853, 443 (Strict SNI, without SNI will drop)

    -

    DNSCrypt v2

    -port: 8443 -

    IPv4 - DNSStamp: -
    - -

    -

    IPv6 - DNSStamp: -
    - -

    -
    • -
-
-
- -
-
-
-

Finland ๐Ÿ‡ซ๐Ÿ‡ฎ

- -
-
    -
  • -

    DNS-over-HTTPS

    - - -

    IPv4-stamp:

    - -

    IPv6-stamp:

    - -

    DNS-over-TLS

    - -

    IP address: -
    - 95.216.212.177
    - 2a01:4f9:c010:43ce::1
    -

    tls_auth_name: -
    - port: 853, 443 (Strict SNI, without SNI will drop)

    -

    DNSCrypt v2

    -port: 8443 -

    IPv4 - DNSStamp: -
    - -

    -

    IPv6 - DNSStamp: -
    - -

    -
    • -
-
-
-
-
-

News

- - - -
-
- -
-
- -
-
- -
-
-
-

-
-
-
- - - -
-
-

- Thanks to these great projects, Blahdns was born.
- 1. knot-resolver: Go -
2. Dnsdist: Go -
3. HAProxy: Go -
4. dns-over-https: Go - -

-
-
- -
-
-

DNS leak verification -
1. DNSSEC validation: Go -
2. Internet.nl: Go -
3. DNSSEC resolver algorithm test: Go -
4. Cloudflare tools: Go | Go -
5. Check my DNS: Go -
6. DNS randomness: Go -
7. DNS Spoofability test: Go -
8. DNSTrace: Go -
9. Threats search: Go -
10. Whoer.net Go -
11. EDNS test Go - -
Entire privacy leaks test -
1. Browserleaks: Go -
2. Device leak: Go -
3. Webbkoll: Go -
-

-
-
- -
-
-

DNS over HTTPS (DoH) -
DNS over HTTPS is a new protocol designed to encrypt and secure DNS traffic over HTTPS. -
It prevents DNS hijacking and ISPs from sniffing your traffic. -
You can use will Infra on Android Phone, Mozilla firefox nightly, Chrome coming soon. -
DNSCrypt v2 client does support DoH, see dnscrypt configuration - example on Windows, macOS, iOS (DNSCloak)

-
-
- -
-
-

Encrypted DNS - DNS over TLS -
DNS over TLS support is available on all our services through port 853 (standard port, some service may support 443). -
DNS over TLS encrypts and authenticates all your DNS traffic to protect your privacy and prevent DNS hijacking and sniffing. -
Client software: Stubby | Unbound - -
How to get SPKI - -
Be sure you already install package apt install gnutls-bin -
- gnutls-cli --print-cert -p 853 45.32.55.94 | grep "pin-sha256" | head -1 - - -
OR - kdig -d @45.32.55.94 +tls-ca +tls-host=dot-jp.blahdns.com blahdns.com - - -
TLS1.3 support check -
- openssl s_client -connect 45.32.55.94:853 - - -
Will return message: - - New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 - Server public key is 2048 bit - Secure Renegotiation IS NOT supported - Compression: NONE - Expansion: NONE - No ALPN negotiated - Early data was not sent - Verify return code: 0 (ok) - --- - --- - Post-Handshake New Session Ticket arrived: - SSL-Session: - Protocol : TLSv1.3 - Cipher : TLS_AES_256_GCM_SHA384 - -For troubleshooting go HERE - -

-
-
- -
-
-

The Domain Name System (DNS) is the phonebook of the Internet. Humans access information online through domain names, like nytimes.com or espn.com. Web browsers interact through Internet Protocol (IP) addresses. DNS translates domain names to IP addresses - so browsers can load Internet resources.

-

Each device connected to the Internet has a unique IP address which other machines use to find the device. DNS servers eliminate the need for humans to memorize IP addresses such as 192.168.1.1 (in IPv4), or more complex newer alphanumeric IP addresses - such as 2400:cb00:2048:1::c629:d7a2 (in IPv6).

-
-
-
-
-

FAQ

- -
-
- - - - - -
-
-
    -
  • How to fix Chrome on Android phone leaking DNS, check HERE -
    • -
  • Supported TLS v1.3, 1.2
    • -
  • We drop ANY type.
    • -
  • Why you building this porject? I started this project around 2016. During that time, with my private dns, I need an easy way to filter ads and tracker, so I rent a server and learn how to achive this.
    • -
  • Why you dont like huge traffic? I'm still a student. and I run this service with my pocket money and - spare time. Just as a hobby to learn somehting new. buying big server or Anti-DDOS service will cost lot. -
    • -
-
- - -
-

DNSSEC validation: https://dnssec.vs.uni-due.de

-

curl -H 'content-type: application/dns-message' -vL -v 'https://doh-jp.blahdns.com/dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB' | hexdump -C

-

kdig google.com @2001:19f0:7001:1ded:5400:1ff:fe90:945b +tls -p 443

-

kdig google.com @45.32.55.94

-

https://gist.github.com/meanevo/e70ca58e361fb4d1a9d262a8f12b173a (HAProxy) https://stuff-things.net/2016/11/30/haproxy-sni/ https://pre-prod.chown.me/blog/running-dot-on-openbsd.html https://www.haproxy.com/blog/introduction-to-haproxy-acls/

-
-
-

Does Blahdns block CNAME Cloacking? Yes, click here to read more.

-
- -
-

-

    -
  • Thanks for Adam Srxxx for 2 USD
    • -
  • Thanks for Slawomir Mxxx for 5 USD
    • -
  • Thanks for Giuseppe Macxxx for 5 USD
    • -
  • Thanks for Austin Sarxxx for 25 USD
    • -
  • Thanks for Jonni Rauhxxx for 25 USD
    • -
  • Thanks for Regin Jaxxx for 50 EUR
    • -
  • Thanks for Kristian NyXXXard JenXXXX for 5 USD and 10 EUR
    • -
  • Thanks for Martin LohrXXXrg for 10 EUR
    • -
  • Thanks for Ferdinand MuXXXch for 3 USD
    • -
  • Thanks for MarsXXXn for 5 USD
    • -
  • Thanks for Lawerence LeXXXng for 20 AUD
    • -
  • Thanks for ๅ„ชๆจน XXไธ‹ for 3 USD
    • -
  • Thanks for Ardi KaXXXin for 5 SGD
    • -
  • Thanks for Kung JXXXe for 3 USD
    • -
  • Thanks for Braian KapXXXan for 9 USD
    • -
  • Thanks for Lorenzo OXXXi for 20 USD
    • -
  • Thanks for Felix HungXXXberg for 3 USD
    • -
  • Thanks for Marco GXXXze for 10 USD
    • -
  • Thanks for mikXXXla for 10 EUR
    • -
  • Thanks for Tim 331 for 20 TWD
    • -
-

-
-
-
+ Blahdns -- Dns service support DoH, DoT, DNSCrypt + + + + + + + + + + + + + +
+
+ +
+

+ A small hobby ads block DNS project with DoH, DoT, DNSCrypt support. +

- - -
-
-

-

Disclamier

- -

Use at your own risk. Under no circumstances will the operator be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss - of profits, business interruption or loss of information) resulting or arising directly or indirectly from accessing or otherwise using this service (Blahdns server). -
The operator does not guarantee in any way the access, availability and continuity of the functioning of this service. By using this website and service you consent to the disclaimer and agree to its terms and conditions. -
By using Cloudflare this website stores a cookie, created and evaluated by Cloudflare. -
This cookie is strictly necessary for Cloudflare's security features and cannot be turned off. More - information. - -

-

Copyright 2016 - 2020 blahdns.com

-

Github | - - - Buy Me a Coffee at ko-fi.com - | - - - - - - - - Donate with PayPal button - - - - - - - -

-
Go To Top - - -
+

You are not using Blahdns !!!

+
+
+
+
+ +
+

Need some coffees (25 EUR/ per month) for servers to keep this project healthy.

+
+
+

Announcements

+
+ No logs | No EDNS Client-Subnet | OpenNIC support | Ethereum Name Service | DNSSEC ready | Yggdrasil | Filtered ads, trackers, malware, prevent CNAME Cloacking +
+ +
+
+
+

Our servers

+
+
+
+ +
+
+
+

Japan ๐Ÿ‡ฏ๐Ÿ‡ต

- - - - +
    +
  • +

    DNS-over-HTTPS

    + +

    IPv4-stamp:

    + +

    IPv6-stamp:

    + +

    DNS-over-TLS

    +

    IP address: +
    45.32.55.94 +
    2001:19f0:7001:3259:5400:02ff:fe71:0bc9 +

    tls_auth_name: +
    + port: 853, 443 (Strict SNI, without SNI will drop) +

    +

    DNSCrypt v2

    + port: 8443 +

    IPv4 - DNSStamp: +
    + +

    +

    IPv6 - DNSStamp: +
    + +

    +
    • +
+
+
+ +
+
+
+

Singapore ๐Ÿ‡ธ๐Ÿ‡ฌ

+
+
    +
  • +

    DNS-over-HTTPS

    + +

    IPv4-stamp:

    + +

    IPv6-stamp:

    + +

    DNS-over-TLS

    +

    IP address:
    + 139.180.141.57
    + 2001:19f0:4400:6bed:5400:2ff:feb1:f9fa +
    +

    tls_auth_name: +
    + port: 853, 443 (Strict SNI, without SNI will drop) +

    +

    DNSCrypt v2

    + port: 8443 +

    IPv4 - DNSStamp: +
    + +

    +

    IPv6 - DNSStamp: +
    + +

    +
    • +
+
+
+ +
+
+
+

Germany ๐Ÿ‡ฉ๐Ÿ‡ช

+
+
    +
  • +

    DNS-over-HTTPS

    + +

    IPv4-stamp:

    + +

    IPv6-stamp:

    + +

    DNS-over-TLS

    +

    IP address:
    + 78.46.244.143
    + 2a01:4f8:c17:ec67::1
    +

    tls_auth_name: +
    + port: 853, 443 (Strict SNI, without SNI will drop) +

    +

    DNSCrypt v2

    + port: 8443 +

    IPv4 - DNSStamp: +
    + +

    +

    IPv6 - DNSStamp: +
    + +

    +
    • +
+
+
+ +
+
+
+

Finland ๐Ÿ‡ซ๐Ÿ‡ฎ

+
+
    +
  • +

    DNS-over-HTTPS

    + +

    IPv4-stamp:

    + +

    IPv6-stamp:

    + +

    DNS-over-TLS

    +

    IP address: +
    + 95.216.212.177
    + 2a01:4f9:c010:43ce::1
    +

    tls_auth_name: +
    + port: 853, 443 (Strict SNI, without SNI will drop) +

    +

    DNSCrypt v2

    + port: 8443 +

    IPv4 - DNSStamp: +
    + +

    +

    IPv6 - DNSStamp: +
    + +

    +
    • +
+
+
+
+
+

News

+ + +
+
+ +
+
+ +
+
+ +
+
+
+

+
+
+
+ + + +
+
+

+ Thanks to these great projects, Blahdns was born.
+ 1. knot-resolver: Go +
2. Dnsdist: Go +
3. HAProxy: Go +
4. dns-over-https: Go +

+
+
+ +
+
+

DNS leak verification +
1. DNSSEC validation: Go +
2. Internet.nl: Go +
3. DNSSEC resolver algorithm test: Go +
4. Cloudflare tools: Go | Go +
5. Check my DNS: Go +
6. DNS randomness: Go +
7. DNS Spoofability test: Go +
8. DNSTrace: Go +
9. Threats search: Go +
10. Whoer.net Go +
11. EDNS test Go +
12. Cloudflare SNI Test Go .. You should have DNSSEC + TLS1.3 section in Green color. +
Browser or Device privacy leaks test +
1. Browserleaks: Go +
2. Device leak: Go +
3. Creepy JS: Go +
4. Webbkoll: Go +
5. Hardenize Report: Go +
+

+
+
+ +
+
+

DNS over HTTPS (DoH) +
DNS over HTTPS is a new protocol designed to encrypt and secure DNS traffic over HTTPS. +
It prevents DNS hijacking and ISPs from sniffing your traffic. +
You can use will Infra on Android Phone, Mozilla firefox nightly, Chrome coming soon. +
DNSCrypt v2 client does support DoH, see dnscrypt configuration + example on Windows, macOS, iOS (DNSCloak) +

+
+
+ +
+
+

Encrypted DNS - DNS over TLS +
DNS over TLS support is available on all our services through port 853 (standard port, some service may support 443). +
DNS over TLS encrypts and authenticates all your DNS traffic to protect your privacy and prevent DNS hijacking and sniffing. +
Client software: Stubby | Unbound +
How to get SPKI +
Be sure you already install package apt install gnutls-bin +
+ gnutls-cli --print-cert -p 853 45.32.55.94 | grep "pin-sha256" | head -1 + +
OR + kdig -d @45.32.55.94 +tls-ca +tls-host=dot-jp.blahdns.com blahdns.com + +
TLS1.3 support check +
+ openssl s_client -connect 45.32.55.94:853 + +
Will return message: + + New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 + Server public key is 2048 bit + Secure Renegotiation IS NOT supported + Compression: NONE + Expansion: NONE + No ALPN negotiated + Early data was not sent + Verify return code: 0 (ok) + --- + --- + Post-Handshake New Session Ticket arrived: + SSL-Session: + Protocol : TLSv1.3 + Cipher : TLS_AES_256_GCM_SHA384 + + For troubleshooting go HERE +

+
+
+ +
+
+

The Domain Name System (DNS) is the phonebook of the Internet. Humans access information online through domain names, like nytimes.com or espn.com. Web browsers interact through Internet Protocol (IP) addresses. DNS translates domain names to IP addresses + so browsers can load Internet resources. +

+

Each device connected to the Internet has a unique IP address which other machines use to find the device. DNS servers eliminate the need for humans to memorize IP addresses such as 192.168.1.1 (in IPv4), or more complex newer alphanumeric IP addresses + such as 2400:cb00:2048:1::c629:d7a2 (in IPv6). +

+
+
+
+
+

FAQ

+
+
+ + + + + +
+
+
    +
  • How to fix Chrome on Android phone leaking DNS, check HERE +
    • +
  • Supported TLS v1.3, 1.2
    • +
  • We drop ANY type.
    • +
  • Why you building this porject? I started this project around 2016. During that time, with my private dns, I need an easy way to filter ads and tracker, so I rent a server and learn how to achive this.
    • +
  • Why you dont like huge traffic? I'm still a student. and I run this service with my pocket money and + spare time. Just as a hobby to learn somehting new. buying big server or Anti-DDOS service will cost lot. +
    • +
+
+ + +
+

DNSSEC validation: https://dnssec.vs.uni-due.de

+

curl -H 'content-type: application/dns-message' -vL -v 'https://doh-jp.blahdns.com/dns-query?dns=AAABAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB' | hexdump -C

+

kdig google.com @2001:19f0:7001:1ded:5400:1ff:fe90:945b +tls -p 443

+

kdig google.com @45.32.55.94

+

https://gist.github.com/meanevo/e70ca58e361fb4d1a9d262a8f12b173a (HAProxy) https://stuff-things.net/2016/11/30/haproxy-sni/ https://pre-prod.chown.me/blog/running-dot-on-openbsd.html https://www.haproxy.com/blog/introduction-to-haproxy-acls/

+
+
+

Does Blahdns block CNAME Cloacking? Yes, click here to read more.

+
+ +
+

+

    +
  • Thanks for Adam Srxxx for 2 USD
    • +
  • Thanks for Slawomir Mxxx for 5 USD
    • +
  • Thanks for Giuseppe Macxxx for 5 USD
    • +
  • Thanks for Austin Sarxxx for 25 USD
    • +
  • Thanks for Jonni Rauhxxx for 25 USD
    • +
  • Thanks for Regin Jaxxx for 50 EUR
    • +
  • Thanks for Kristian NyXXXard JenXXXX for 5 USD and 10 EUR
    • +
  • Thanks for Martin LohrXXXrg for 10 EUR
    • +
  • Thanks for Ferdinand MuXXXch for 3 USD
    • +
  • Thanks for MarsXXXn for 5 USD
    • +
  • Thanks for Lawerence LeXXXng for 20 AUD
    • +
  • Thanks for ๅ„ชๆจน XXไธ‹ for 3 USD
    • +
  • Thanks for Ardi KaXXXin for 5 SGD
    • +
  • Thanks for Kung JXXXe for 3 USD
    • +
  • Thanks for Braian KapXXXan for 9 USD
    • +
  • Thanks for Lorenzo OXXXi for 20 USD
    • +
  • Thanks for Felix HungXXXberg for 3 USD
    • +
  • Thanks for Marco GXXXze for 10 USD
    • +
  • Thanks for mikXXXla for 10 EUR
    • +
  • Thanks for Tim 331 for 20 TWD
    • +
+

+
+
+
+
+ + +
+
+

+

Disclamier

+

Use at your own risk. Under no circumstances will the operator be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss + of profits, business interruption or loss of information) resulting or arising directly or indirectly from accessing or otherwise using this service (Blahdns server). +
The operator does not guarantee in any way the access, availability and continuity of the functioning of this service. By using this website and service you consent to the disclaimer and agree to its terms and conditions. +
By using Cloudflare this website stores a cookie, created and evaluated by Cloudflare. +
This cookie is strictly necessary for Cloudflare's security features and cannot be turned off. More + information. +

+

Copyright 2016 - 2020 blahdns.com

+

+ Github | + + + Buy Me a Coffee at ko-fi.com + | + + + + + + + + Donate with PayPal button + + + + + + + +

+
Go To Top + +
+
+
+ +