fix: update source

Added entries for Microsoft services and infowars.com.

README.md

@@ -6,12 +6,11 @@
 
 ## Announcements
 
-* Singapore server has been migrated to Contabo provider to serve more bandwidth.
+* Our DNS service has been blocked due to Taiwan RPZ policy
-
+* We had migrated SSL CA from Buypass GO to Google CA. (2025/09/27)
-**We will discotinue Japan, Switzerland, Finland by Jul 15, 2024** | Thanks again for all supporters and users 🥰🙏
+* We had migrated DNS Stack to Knot-resolver + dnsdist
-
 * Beta support `alfis.name` tld. `.anon, .btn, .conf, .index, .merch, .mirror, .mob, .screen, .srv, .ygg`
-* For more old announcements, go [here](https://github.com/ookangzheng/blahdns/issues/36)
+* For more old announcements, go [here](https://github.com/zoonderkins/blahdns/issues/36)
 
 
 ## Our features
@@ -23,7 +22,7 @@
 
 
 ## How to setup / config DoH DoT Dnscrypt 👇
-Config: [HERE for more details](https://github.com/ookangzheng/blahdns/tree/master/server-conf)
+Config: [HERE for more details](https://github.com/zoonderkins/blahdns/tree/master/server-conf)
 
 
 ## Server architecture
@@ -32,29 +31,28 @@ Config: [HERE for more details](https://github.com/ookangzheng/blahdns/tree/mast
 Server
 
 |-- Knot-resolver (DNS resolver, OpenNIC, ICANN, Alfis)
-|-- Dnsdist (cache)
+|-- Dnsdist
 |   |   |-- DNSCryptv2 (encrypted-dns-server, port 8443 TCP/UDP)
 |   |   |-- DoQ, port 784
-|   |-- DoH/http3 (port 443/TCP/UDP port 443, tls version >= 1.2, require SNI)
+|   |   |-- DoH/2, DoH/3 UDP port 443 (Post, Get)
-|-- DoT (HAProxy, port 853, tls version >=1.2, require SNI)
+|   |   |-- DoT, port 853 TCP
 
 ```
 
 ## Config file / Client
-* Collection of blocklist use in BlahDNS: [Source](https://github.com/ookangzheng/blahdns/raw/master/hosts/source.txt) 
+* Collection of blocklist use in BlahDNS: [Source](https://github.com/zoonderkins/blahdns/raw/master/hosts/source.txt) 
-* Yggdrasil IPv6 Network: [Setup guide](https://github.com/ookangzheng/blahdns/blob/master/client-conf/yggdrasil.md)
+* Yggdrasil IPv6 Network: [Setup guide](https://github.com/zoonderkins/blahdns/blob/master/client-conf/yggdrasil.md)
 * Android DoH/DoT: [Nebulo App](https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen) | [personalDNSfilter App](https://zenz-solutions.de/personaldnsfilter/) | [Intra](https://play.google.com/store/apps/details?id=app.intra)
 * iOS Dnscryptv2/DoH: [Dnscloak](https://itunes.apple.com/app/dnscloak-secure-dns-client/id1452162351)
 * Dnscryptv2: [dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy)
-* Config files: [ Client config example ](https://github.com/ookangzheng/blahdns/tree/master/client-conf)
+* Config files: [ Client config example ](https://github.com/zoonderkins/blahdns/tree/master/client-conf)
 
 ## Awesome dns-resolver
-https://gist.github.com/ookangzheng/c8fba46fe1dbcc8152e3231f53f91e86
+https://gist.github.com/zoonderkins/c8fba46fe1dbcc8152e3231f53f91e86
 
 ## Huge thanks to those OSS and ORG
 1. [Knot-resolver](https://github.com/CZ-NIC/knot-resolver)
-2. [m13253](https://github.com/m13253/dns-over-https)
+2. [DNSPrivacy.org](https://dnsprivacy.org)
-3. [DNSPrivacy.org](https://dnsprivacy.org)
 
 ## Buy me some coffee :coffee: 
 
@@ -69,4 +67,4 @@ https://gist.github.com/ookangzheng/c8fba46fe1dbcc8152e3231f53f91e86
 * Use at your own risk. Under no circumstances will the operator be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss of profits, business interruption or loss of information) resulting or arising directly or indirectly from accessing or otherwise using this service (Blahdns server).
 * By using this website and service you consent to the disclaimer and agree to its terms and conditions.
 
-[![Stargazers over time](https://starchart.cc/ookangzheng/blahdns.svg)](https://starchart.cc/ookangzheng/blahdns)
+[![Stargazers over time](https://starchart.cc/zoonderkins/blahdns.svg)](https://starchart.cc/zoonderkins/blahdns)

client-conf/README.md

@@ -1,10 +1,10 @@
 ## Android DoT / DoH config
 
-Go [HERE](https://github.com/ookangzheng/blahdns/blob/master/client-conf/DoT-or-DoH-Android.md)
+Go [HERE](https://github.com/zoonderkins/blahdns/blob/master/client-conf/DoT-or-DoH-Android.md)
 
 ## Dnscrypt-proxy
 
-Go [HERE](https://github.com/ookangzheng/blahdns/tree/master/client-conf/dnscrypt)
+Go [HERE](https://github.com/zoonderkins/blahdns/tree/master/client-conf/dnscrypt)
 
 ## Knot-resolver
 
@@ -21,7 +21,7 @@ net.listen({'::1', '127.0.0.1'}, 53)
 cache.size = 100 * MB
 
 -- Forward queries to Blahdns
-policy.add(policy.all(policy.TLS_FORWARD({{'139.162.112.47@853', hostname='dot-jp.blahdns.com', ca_file='/etc/ssl/certs/ca-certificates.crt'}})))
+policy.add(policy.all(policy.TLS_FORWARD({{'78.46.244.143@853', hostname='dot-de.blahdns.com', ca_file='/etc/ssl/certs/ca-certificates.crt'}})))
 
 ```
 
@@ -31,23 +31,23 @@ Go [HERE](https://github.com/zoonderkins/blahdns/blob/master/client-conf/unbound
 
 ## Stubby
 
-Go [HERE](https://github.com/ookangzheng/blahdns/tree/master/client-conf/stubby)
+Go [HERE](https://github.com/zoonderkins/blahdns/tree/master/client-conf/stubby)
 
 
 ## Windows
 Simplednscrypt -> https://simplednscrypt.org/ and install
 
-![](https://github.com/ookangzheng/blahdns/raw/master/client-conf/img-source/blahdns-1.png?raw=true)
+![](https://github.com/zoonderkins/blahdns/raw/master/client-conf/img-source/blahdns-1.png?raw=true)
-![](https://github.com/ookangzheng/blahdns/raw/master/client-conf/img-source/blahdns-2.png?raw=true)
+![](https://github.com/zoonderkins/blahdns/raw/master/client-conf/img-source/blahdns-2.png?raw=true)
 
 ## Kdig
 ```bash
-kdig google.com @dot-jp.blahdns.com +tls
+kdig google.com @dot-de.blahdns.com +tls
 ```
 ## getdns
 ```bash
 sudo apt install getdns-utils
-getdns_query @139.162.112.47 -s -L -A www.google.com
+getdns_query @78.46.244.143 -s -L -A www.google.com
 ```
 
 ## Curl
@@ -59,21 +59,21 @@ curl -H 'accept: application/dns-json' 'https://doh-jp.blahdns.com/dns-query?nam
 ```bash
 sudo apt install python3-pip python3-setuptools python3-wheel
 sudo -H pip3 install doh-proxy
-doh-client --domain doh-jp.blahdns.com --qname google.com --qtype A
+doh-client --domain doh-de.blahdns.com --qname google.com --qtype A
 ```
 
 ## Linux-systemd
 ```bash
 nano /etc/systemd/resolved.conf
 
-DNS=4139.162.112.47
+DNS=478.46.244.143
 DNSOverTLS=opportunistic
 
 // Save and restart service
 sudo systemctl restart systemd-resolved
 // Check settings
 resolvectl status
-resolvectl query dot-jp.blahdns.com -t A
+resolvectl query dot-de.blahdns.com -t A
 ```
 
 

hosts/README.md

@@ -1,6 +1,6 @@
 ## Blocklist use on BlahDNS
 
-* [Block list sources](https://github.com/ookangzheng/blahdns/raw/master/hosts/source.txt)
+* [Block list sources](https://github.com/zoonderkins/blahdns/raw/master/hosts/source.txt)
 
 * [xiaomi-list](https://gist.github.com/232057d3562bffc31daa7739dfdb4469)
 
@@ -24,11 +24,6 @@
 
 * [lite domain](https://oooo.b-cdn.net/blahdns/lite_domain.txt) 
 
-* Mobile Adblock clients: [Adhell](https://play.google.com/store/apps/details?id=com.getadhell.androidapp&hl=en_US) | [Blokada](https://github.com/blokadaorg/blokada) | [DNSCloak(ios)](https://apps.apple.com/us/app/dnscloak-secure-dns-client/id1452162351) | [DNS66](https://github.com/julian-klode/dns66) | [pDNSf](https://zenz-solutions.de/personaldnsfilter) | [Nebulo](https://github.com/Ch4t4r/Nebulo) | [RethinkDNS + Firewall](https://github.com/celzero/rethink-app)
-
-**Allow list**
-
-* [Blockconvert allowlist](https://raw.githubusercontent.com/mkb2091/blockconvert/master/output/whitelist_domains.txt)
 
 ## Useful blocklist (not included) 
 1. [blocklistproject/Lists](https://github.com/blocklistproject/Lists)
@@ -38,14 +33,41 @@
 5. [nickspaargaren/no-google](https://raw.githubusercontent.com/nickspaargaren/no-google/master/pihole-google.txt)
 6. [Loyalsoldier/v2ray-rules-dat](https://github.com/Loyalsoldier/v2ray-rules-dat/): [Full adblock list](https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/reject-list.txt) | [Windows spyware / tracker list](https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/win-spy.txt) | [Windows spyware extra list](https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/win-extra.txt)
 
+## AirVPN blocklist
+
 ```
 https://airvpn.org/api/dns_lists/?code=air_malware&block=0.0.0.0&style=domains
 https://airvpn.org/api/dns_lists/?code=air_cryptojacking&block=0.0.0.0&style=domains
 https://airvpn.org/api/dns_lists/?code=air_ads&block=0.0.0.0&style=domains
+```
+
+## Personal
+```
+# Web browser ABP style, uBlock Origin
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockfilters.txt # Recommend
+https://raw.githubusercontent.com/Cats-Team/AdRules/main/adblock.txt
+https://raw.githubusercontent.com/Cats-Team/AdRules/main/adblock_plus.txt
+
+# ABP for Adguard, Adguard home
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockdnslite.txt # Lite
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockdns.txt # Recommend
+https://raw.githubusercontent.com/Cats-Team/AdRules/refs/heads/main/dns.txt # Host style
+
+# Pihole | Hosts
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockhosts.txt # Recommend
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockhostslite.txt
+
+# Mobile + Browser (ios adguard, android adguard)
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/pro.mini.txt # Recommend
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/wildcard/pro.mini-onlydomains.txt # Host style
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/pro.plus.mini.txt
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/wildcard/pro.plus.mini-onlydomains.txt # Host style
+
+# Adguard home (others)
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/fake.txt # Recommend
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/tif.mini.txt # Recommend
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/wildcard/tif.mini-onlydomains.txt # Hosts style
 
 ```
 
-```
+
-Thanks a lot as well to everyone creating the original lists I am compiling together.
-Origin source: https://github.com/ookangzheng/blahdns/raw/master/hosts/source.txt
-```

hosts/blacklist.txt

@@ -1,5 +1,96 @@
-## This blacklist maintaince by @ookangzheng
+
-## Attribution-NonCommercial 4.0 International (CC BY-NC-SA 4.0)
+# scam invesment in chinese, taiwan
+## agw-ms 投資
+app.agw77.com
+agw77.com
+ascend-code.com
+6g93jh.com
+
+
+smooch.io
+api.smooch.io
+cf-main.smooch.io
+
+# Apex One Security Agent
+
+api-us1.xbc.trendmicro.com
+api-us2.xbc.trendmicro.com
+xlogr-ue1.xdr.trendmicro.com
+upload.xdr.trendmicro.com
+endpointpolicy-cdn-us1.xbc.trendmicro.com
+mcs.trendmicro.com
+xbc.trendmicro.com
+icrc.trendmicro.com
+url.trendmicro.com
+sqppct.manage.trendmicro.com
+tmsm350-en.fbs25.trendmicro.com
+tmsm35.icrc.trendmicro.com
+tmsm3-5-en.url.trendmicro.com
+a1bz7u2flvp09t-ats.iot.us-east-1.amazonaws.com
+support-connector-service.manage.trendmicro.com
+# Python trendmicro
+edc2munki02.trendmicro.com
+# Nudge trendmicro
+edc2mdmdep01.trendmicro.com
+# CET Agent trendmicro
+tgw-us1.mgcp.trendmicro.com
+
+# AirAsia app
+airasia.gw-dv.vip
+airasia.ck123.io
+
+# grab taxi
+api.sg.gdefence.io
+gdefence.io
+
+# https://stillcarol.tw/secretary/
+adblock.static-01.workers.dev
+static-01.workers.dev
+unblock.ad-block.shop
+ad-block.shop
+pagead2.googlesyndication.com
+
+# TouchnGo mobile app
+ilog-sea-aliyun.alipayplus.com
+sg1.clevertap-prod.com
+ocsp.digicert.cn
+0j55i2vci4m0ly4f.aliyunddos0027.com
+cdn.optimizely.com
+cathaypacific.quantummetric.com
+dns.alidns.com
+apps.pingone.com
+
+# Cathay asia miles app
+tags.tiqcdn.com
+datacloud.tealiumiq.com
+eligibility.wootric.com
+c.us.heap-api.com
+tags.cathaypacific.com.greylabeldelivery.com
+tags.cathaypacific.com
+c.go-mpulse.net
+
+# Insta360 mobile
+thinkingdata.cn
+apmplus.volces.com
+log.zijieapi.com
+log-klink.zijieapi.com
+mssdk-bu.bytedance.com
+ali.wosms.cn
+httpdns.yunxinfw.com
+abt-online.netease.im
+enrichgw.10010.com
+
+# tw openpoint
+# Aotter 電獺 | 出現在兌換頁面 video 廣告
+ocsp.digicert.com
+status.rapidssl.com
+sdk-02.moengage.com
+c3po.aotter.net
+tkvideo.aottercdn.com
+aottercdn.com
+aotter.net
+pic-ilake-rmn-r.pic.net.tw
+static.ottercdn.com
 
 # Spark Mail
 o439196.ingest.sentry.io
@@ -158,6 +249,15 @@ www.ijnb.cn
 ijnb.cn
 
 # Camscanner App iOS
+api16-log-sg2.pangle.io
+api16-access-ttp.tiktokpangle.us
+p16-ttam-va.ibyteimg.com
+engagements.appsflyer.com
+init-p01md.apple.com
+ss-static.intsig.net
+ep2.facebook.com
+cgi.connect.qq.com
+0sak8o-launches.appsflyersdk.com
 dsp-material.brainx.tech
 brainx-dsp-sg.tec-do.cn
 tec-do.cn
@@ -291,6 +391,7 @@ shuc-js.ksord.com
 movip.wps.com
 service-mopdf.wps.com
 dw-online.ksosoft.com
+sz-qiniu-all.volcgtm.com
 
 # Notion.so
 nexus-websocket-a.intercom.io

hosts/source.txt

@@ -1,34 +1,34 @@
+# Last update 2025-10-07
+
+# Allowlist
+https://raw.githubusercontent.com/217heidai/adblockfilters/refs/heads/main/rules/white.txt
+https://raw.githubusercontent.com/hl2guide/Filterlist-for-AdGuard/master/filter_whitelist.txt
+
+# Blocklist
+## General
+https://abp.oisd.nl
 https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/quad9_blocklist.txt
-https://raw.githubusercontent.com/VeleSila/yhosts/master/hosts
 https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
 https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/android-tracking.txt
 https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV.txt
-https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt
-https://raw.githubusercontent.com/Yhonay/antipopads/master/hosts
-https://raw.githubusercontent.com/cchevy/macedonian-pi-hole-blocklist/master/hosts.txt
-https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-main.txt
-https://raw.githubusercontent.com/cchevy/macedonian-pi-hole-blocklist/master/hosts.txt
-https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt
-https://raw.githubusercontent.com/ilpl/ad-hosts/master/hosts
 https://raw.githubusercontent.com/jdlingyu/ad-wars/master/hosts
-https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt
-https://raw.githubusercontent.com/ilpl/ad-hosts/master/hosts
-https://raw.githubusercontent.com/joeylane/hosts/master/hosts
 https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Hosts/GoodbyeAds.txt
 https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-LeEco-Extension.txt
 https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-Spotify-AdBlock.txt
 https://raw.githubusercontent.com/r-a-y/mobile-hosts/master/AdguardMobileSpyware.txt
-https://raw.githubusercontent.com/Cats-Team/AdRules/main/hosts.txt
+https://raw.githubusercontent.com/Cats-Team/AdRules/refs/heads/main/dns.txt
-
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/pro.txt
 https://hostfiles.frogeye.fr/multiparty-only-trackers.txt
 https://badmojr.github.io/1Hosts/Lite/adblock.txt
-https://rescure.fruxlabs.com/rescure_domain_blacklist.txt
 http://npc.0am.jp/hosts.php?dl=1
-https://abp.oisd.nl
-https://gitee.com/bigdataleaveme/dontcollectme/raw/master/dontcollectme.txt
 https://warui.intaa.net/adhosts/hosts.txt
 https://raw.githubusercontent.com/stamparm/blackbook/master/blackbook.txt
 
+# Scam
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/fake.txt
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/tif-compressed.txt
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/gambling.mini.txt
+
 # CNAME cloaking
 https://raw.githubusercontent.com/r-a-y/mobile-hosts/master/AdguardCNAME.txt
 https://raw.githubusercontent.com/r-a-y/mobile-hosts/master/EasyPrivacyCNAME.txt

hosts/whitelist.txt

@@ -1,8 +1,19 @@
 ## This whitelist maintaince by @ookangzheng
 ## Attribution-NonCommercial 4.0 International (CC BY-NC-SA 4.0)
 
+
+
+# apple.com
+## ios app store
+tr.iadsdk.apple.com
+iadsdk.apple.com
+
+# youtube
 jnn-pa.googleapis.com
 
+## digicert
+ocsp.digicert.com
+
 # picsart.com
 api.picsart.com
 
@@ -18,6 +29,7 @@ ws.metro.taipei
 slackb.com
 
 # Line
+api.line.me
 # Line Taxi voucher redeem
 app.data-di.com
 # Report ads website not loading
@@ -172,10 +184,25 @@ amp-api-edge.apps.apple.com.edgekey.net
 # mihoyo.com
 log-upload-os.mihoyo.com
 
+# Sogo Input
+pgdt.gtimg.cn
+cdn-go.cn
+
 # QQ Lemon
 guanjia.qq.com
+qq-web.cdn-go.cn
+appcfg.v.qq.com
+tangram-config.gdt.qq.com
 
-# Wei Xin IM
+# QQ messenger
+static-res.qq.com
+d3g.qq.com
+v.gdt.qq.com
+rpt.gdt.qq.com
+tangram-config.gdt.qq.com
+vv.video.qq.com
+
+# Wechat
 shminorshort.weixin.qq.com
 minorshort.weixin.qq.com # Will break user unable to join group
 support.weixin.qq.com
@@ -272,6 +299,7 @@ opera.software
 op-cdn.net
 
 # Microsoft
+substrate.office.com # Teams internal search webpage
 activity.windows.com # brake Authenticator backup function
 continuum.dds.microsoft.com # Connect your phone to Microsoft windows
 
@@ -1011,6 +1039,7 @@ cvp1.cdn.turner.com
 z.cdn.turner.com
 
 # OCSP-Servers 
+ocsp.digicert.com
 ocsp.verisign.com
 #a652.dscb.akamai.net # CNAME of ocsp.comodoca.com
 ocsp.int-x3.letsencrypt.org
@@ -1020,7 +1049,6 @@ ocsp.int-x1.letsencrypt.org
 #ocsp.apple.com
 ocsp.comodoca.com
 ocsp.comodoca4.com
-ocsp.digicert.com
 ocsp.globalsign.com
 ocsp.godaddy.com
 ocsp.pki.goog