fix: update source

Added entries for Microsoft services and infowars.com.

README.md

@@ -6,12 +6,11 @@
 
 ## Announcements
 
-* Singapore server has been migrated to Contabo provider to serve more bandwidth.
-
-**We will discotinue Japan, Switzerland, Finland by Jul 15, 2024** | Thanks again for all supporters and users 🥰🙏
-
+* Our DNS service has been blocked due to Taiwan RPZ policy
+* We had migrated SSL CA from Buypass GO to Google CA. (2025/09/27)
+* We had migrated DNS Stack to Knot-resolver + dnsdist
 * Beta support `alfis.name` tld. `.anon, .btn, .conf, .index, .merch, .mirror, .mob, .screen, .srv, .ygg`
-* For more old announcements, go [here](https://github.com/ookangzheng/blahdns/issues/36)
+* For more old announcements, go [here](https://github.com/zoonderkins/blahdns/issues/36)
 
 
 ## Our features
@@ -23,7 +22,7 @@
 
 
 ## How to setup / config DoH DoT Dnscrypt 👇
-Config: [HERE for more details](https://github.com/ookangzheng/blahdns/tree/master/server-conf)
+Config: [HERE for more details](https://github.com/zoonderkins/blahdns/tree/master/server-conf)
 
 
 ## Server architecture
@@ -32,29 +31,28 @@ Config: [HERE for more details](https://github.com/ookangzheng/blahdns/tree/mast
 Server
 
 |-- Knot-resolver (DNS resolver, OpenNIC, ICANN, Alfis)
-|-- Dnsdist (cache)
+|-- Dnsdist
 |   |   |-- DNSCryptv2 (encrypted-dns-server, port 8443 TCP/UDP)
 |   |   |-- DoQ, port 784
-|   |-- DoH/http3 (port 443/TCP/UDP port 443, tls version >= 1.2, require SNI)
-|-- DoT (HAProxy, port 853, tls version >=1.2, require SNI)
+|   |   |-- DoH/2, DoH/3 UDP port 443 (Post, Get)
+|   |   |-- DoT, port 853 TCP
 
 ```
 
 ## Config file / Client
-* Collection of blocklist use in BlahDNS: [Source](https://github.com/ookangzheng/blahdns/raw/master/hosts/source.txt) 
-* Yggdrasil IPv6 Network: [Setup guide](https://github.com/ookangzheng/blahdns/blob/master/client-conf/yggdrasil.md)
+* Collection of blocklist use in BlahDNS: [Source](https://github.com/zoonderkins/blahdns/raw/master/hosts/source.txt) 
+* Yggdrasil IPv6 Network: [Setup guide](https://github.com/zoonderkins/blahdns/blob/master/client-conf/yggdrasil.md)
 * Android DoH/DoT: [Nebulo App](https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen) | [personalDNSfilter App](https://zenz-solutions.de/personaldnsfilter/) | [Intra](https://play.google.com/store/apps/details?id=app.intra)
 * iOS Dnscryptv2/DoH: [Dnscloak](https://itunes.apple.com/app/dnscloak-secure-dns-client/id1452162351)
 * Dnscryptv2: [dnscrypt-proxy](https://github.com/DNSCrypt/dnscrypt-proxy)
-* Config files: [ Client config example ](https://github.com/ookangzheng/blahdns/tree/master/client-conf)
+* Config files: [ Client config example ](https://github.com/zoonderkins/blahdns/tree/master/client-conf)
 
 ## Awesome dns-resolver
-https://gist.github.com/ookangzheng/c8fba46fe1dbcc8152e3231f53f91e86
+https://gist.github.com/zoonderkins/c8fba46fe1dbcc8152e3231f53f91e86
 
 ## Huge thanks to those OSS and ORG
 1. [Knot-resolver](https://github.com/CZ-NIC/knot-resolver)
-2. [m13253](https://github.com/m13253/dns-over-https)
-3. [DNSPrivacy.org](https://dnsprivacy.org)
+2. [DNSPrivacy.org](https://dnsprivacy.org)
 
 ## Buy me some coffee :coffee: 
 
@@ -69,4 +67,4 @@ https://gist.github.com/ookangzheng/c8fba46fe1dbcc8152e3231f53f91e86
 * Use at your own risk. Under no circumstances will the operator be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss of profits, business interruption or loss of information) resulting or arising directly or indirectly from accessing or otherwise using this service (Blahdns server).
 * By using this website and service you consent to the disclaimer and agree to its terms and conditions.
 
-[![Stargazers over time](https://starchart.cc/ookangzheng/blahdns.svg)](https://starchart.cc/ookangzheng/blahdns)
+[![Stargazers over time](https://starchart.cc/zoonderkins/blahdns.svg)](https://starchart.cc/zoonderkins/blahdns)

client-conf/README.md

@@ -1,10 +1,10 @@
 ## Android DoT / DoH config
 
-Go [HERE](https://github.com/ookangzheng/blahdns/blob/master/client-conf/DoT-or-DoH-Android.md)
+Go [HERE](https://github.com/zoonderkins/blahdns/blob/master/client-conf/DoT-or-DoH-Android.md)
 
 ## Dnscrypt-proxy
 
-Go [HERE](https://github.com/ookangzheng/blahdns/tree/master/client-conf/dnscrypt)
+Go [HERE](https://github.com/zoonderkins/blahdns/tree/master/client-conf/dnscrypt)
 
 ## Knot-resolver
 
@@ -21,7 +21,7 @@ net.listen({'::1', '127.0.0.1'}, 53)
 cache.size = 100 * MB
 
 -- Forward queries to Blahdns
-policy.add(policy.all(policy.TLS_FORWARD({{'139.162.112.47@853', hostname='dot-jp.blahdns.com', ca_file='/etc/ssl/certs/ca-certificates.crt'}})))
+policy.add(policy.all(policy.TLS_FORWARD({{'78.46.244.143@853', hostname='dot-de.blahdns.com', ca_file='/etc/ssl/certs/ca-certificates.crt'}})))
 
 ```
 
@@ -31,23 +31,23 @@ Go [HERE](https://github.com/zoonderkins/blahdns/blob/master/client-conf/unbound
 
 ## Stubby
 
-Go [HERE](https://github.com/ookangzheng/blahdns/tree/master/client-conf/stubby)
+Go [HERE](https://github.com/zoonderkins/blahdns/tree/master/client-conf/stubby)
 
 
 ## Windows
 Simplednscrypt -> https://simplednscrypt.org/ and install
 
-![](https://github.com/ookangzheng/blahdns/raw/master/client-conf/img-source/blahdns-1.png?raw=true)
-![](https://github.com/ookangzheng/blahdns/raw/master/client-conf/img-source/blahdns-2.png?raw=true)
+![](https://github.com/zoonderkins/blahdns/raw/master/client-conf/img-source/blahdns-1.png?raw=true)
+![](https://github.com/zoonderkins/blahdns/raw/master/client-conf/img-source/blahdns-2.png?raw=true)
 
 ## Kdig
 ```bash
-kdig google.com @dot-jp.blahdns.com +tls
+kdig google.com @dot-de.blahdns.com +tls
 ```
 ## getdns
 ```bash
 sudo apt install getdns-utils
-getdns_query @139.162.112.47 -s -L -A www.google.com
+getdns_query @78.46.244.143 -s -L -A www.google.com
 ```
 
 ## Curl
@@ -59,21 +59,21 @@ curl -H 'accept: application/dns-json' 'https://doh-jp.blahdns.com/dns-query?nam
 ```bash
 sudo apt install python3-pip python3-setuptools python3-wheel
 sudo -H pip3 install doh-proxy
-doh-client --domain doh-jp.blahdns.com --qname google.com --qtype A
+doh-client --domain doh-de.blahdns.com --qname google.com --qtype A
 ```
 
 ## Linux-systemd
 ```bash
 nano /etc/systemd/resolved.conf
 
-DNS=4139.162.112.47
+DNS=478.46.244.143
 DNSOverTLS=opportunistic
 
 // Save and restart service
 sudo systemctl restart systemd-resolved
 // Check settings
 resolvectl status
-resolvectl query dot-jp.blahdns.com -t A
+resolvectl query dot-de.blahdns.com -t A
 ```
 
 

hosts/README.md

@@ -1,6 +1,6 @@
 ## Blocklist use on BlahDNS
 
-* [Block list sources](https://github.com/ookangzheng/blahdns/raw/master/hosts/source.txt)
+* [Block list sources](https://github.com/zoonderkins/blahdns/raw/master/hosts/source.txt)
 
 * [xiaomi-list](https://gist.github.com/232057d3562bffc31daa7739dfdb4469)
 
@@ -24,11 +24,6 @@
 
 * [lite domain](https://oooo.b-cdn.net/blahdns/lite_domain.txt) 
 
-* Mobile Adblock clients: [Adhell](https://play.google.com/store/apps/details?id=com.getadhell.androidapp&hl=en_US) | [Blokada](https://github.com/blokadaorg/blokada) | [DNSCloak(ios)](https://apps.apple.com/us/app/dnscloak-secure-dns-client/id1452162351) | [DNS66](https://github.com/julian-klode/dns66) | [pDNSf](https://zenz-solutions.de/personaldnsfilter) | [Nebulo](https://github.com/Ch4t4r/Nebulo) | [RethinkDNS + Firewall](https://github.com/celzero/rethink-app)
-
-**Allow list**
-
-* [Blockconvert allowlist](https://raw.githubusercontent.com/mkb2091/blockconvert/master/output/whitelist_domains.txt)
 
 ## Useful blocklist (not included) 
 1. [blocklistproject/Lists](https://github.com/blocklistproject/Lists)
@@ -38,14 +33,41 @@
 5. [nickspaargaren/no-google](https://raw.githubusercontent.com/nickspaargaren/no-google/master/pihole-google.txt)
 6. [Loyalsoldier/v2ray-rules-dat](https://github.com/Loyalsoldier/v2ray-rules-dat/): [Full adblock list](https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/reject-list.txt) | [Windows spyware / tracker list](https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/win-spy.txt) | [Windows spyware extra list](https://raw.githubusercontent.com/Loyalsoldier/v2ray-rules-dat/release/win-extra.txt)
 
+## AirVPN blocklist
+
 ```
 https://airvpn.org/api/dns_lists/?code=air_malware&block=0.0.0.0&style=domains
 https://airvpn.org/api/dns_lists/?code=air_cryptojacking&block=0.0.0.0&style=domains
 https://airvpn.org/api/dns_lists/?code=air_ads&block=0.0.0.0&style=domains
+```
+
+## Personal
+```
+# Web browser ABP style, uBlock Origin
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockfilters.txt # Recommend
+https://raw.githubusercontent.com/Cats-Team/AdRules/main/adblock.txt
+https://raw.githubusercontent.com/Cats-Team/AdRules/main/adblock_plus.txt
+
+# ABP for Adguard, Adguard home
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockdnslite.txt # Lite
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockdns.txt # Recommend
+https://raw.githubusercontent.com/Cats-Team/AdRules/refs/heads/main/dns.txt # Host style
+
+# Pihole | Hosts
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockhosts.txt # Recommend
+https://raw.githubusercontent.com/217heidai/adblockfilters/main/rules/adblockhostslite.txt
+
+# Mobile + Browser (ios adguard, android adguard)
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/pro.mini.txt # Recommend
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/wildcard/pro.mini-onlydomains.txt # Host style
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/pro.plus.mini.txt
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/wildcard/pro.plus.mini-onlydomains.txt # Host style
+
+# Adguard home (others)
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/fake.txt # Recommend
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/tif.mini.txt # Recommend
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/wildcard/tif.mini-onlydomains.txt # Hosts style
 
 ```
 
-```
-Thanks a lot as well to everyone creating the original lists I am compiling together.
-Origin source: https://github.com/ookangzheng/blahdns/raw/master/hosts/source.txt
-```
+

hosts/blacklist.txt

@@ -1,5 +1,115 @@
-## This blacklist maintaince by @ookangzheng
-## Attribution-NonCommercial 4.0 International (CC BY-NC-SA 4.0)
+
+# scam invesment in chinese, taiwan
+## agw-ms 投資
+app.agw77.com
+agw77.com
+ascend-code.com
+6g93jh.com
+
+
+smooch.io
+api.smooch.io
+cf-main.smooch.io
+
+# Apex One Security Agent
+
+api-us1.xbc.trendmicro.com
+api-us2.xbc.trendmicro.com
+xlogr-ue1.xdr.trendmicro.com
+upload.xdr.trendmicro.com
+endpointpolicy-cdn-us1.xbc.trendmicro.com
+mcs.trendmicro.com
+xbc.trendmicro.com
+icrc.trendmicro.com
+url.trendmicro.com
+sqppct.manage.trendmicro.com
+tmsm350-en.fbs25.trendmicro.com
+tmsm35.icrc.trendmicro.com
+tmsm3-5-en.url.trendmicro.com
+a1bz7u2flvp09t-ats.iot.us-east-1.amazonaws.com
+support-connector-service.manage.trendmicro.com
+# Python trendmicro
+edc2munki02.trendmicro.com
+# Nudge trendmicro
+edc2mdmdep01.trendmicro.com
+# CET Agent trendmicro
+tgw-us1.mgcp.trendmicro.com
+
+# AirAsia app
+airasia.gw-dv.vip
+airasia.ck123.io
+
+# grab taxi
+api.sg.gdefence.io
+gdefence.io
+
+# https://stillcarol.tw/secretary/
+adblock.static-01.workers.dev
+static-01.workers.dev
+unblock.ad-block.shop
+ad-block.shop
+pagead2.googlesyndication.com
+
+# TouchnGo mobile app
+ilog-sea-aliyun.alipayplus.com
+sg1.clevertap-prod.com
+ocsp.digicert.cn
+0j55i2vci4m0ly4f.aliyunddos0027.com
+cdn.optimizely.com
+cathaypacific.quantummetric.com
+dns.alidns.com
+apps.pingone.com
+
+# Cathay asia miles app
+tags.tiqcdn.com
+datacloud.tealiumiq.com
+eligibility.wootric.com
+c.us.heap-api.com
+tags.cathaypacific.com.greylabeldelivery.com
+tags.cathaypacific.com
+c.go-mpulse.net
+
+# Insta360 mobile
+thinkingdata.cn
+apmplus.volces.com
+log.zijieapi.com
+log-klink.zijieapi.com
+mssdk-bu.bytedance.com
+ali.wosms.cn
+httpdns.yunxinfw.com
+abt-online.netease.im
+enrichgw.10010.com
+
+# tw openpoint
+# Aotter 電獺 | 出現在兌換頁面 video 廣告
+ocsp.digicert.com
+status.rapidssl.com
+sdk-02.moengage.com
+c3po.aotter.net
+tkvideo.aottercdn.com
+aottercdn.com
+aotter.net
+pic-ilake-rmn-r.pic.net.tw
+static.ottercdn.com
+
+# Spark Mail
+o439196.ingest.sentry.io
+api.amplitude.com
+in.appcenter.ms
+
+# Macpaw
+api-lytics.macpaw.com
+o36975.ingest.sentry.io
+
+# Line pay
+cloud.v-key.com
+v-key.com
+
+# Shopback ios app
+api3.branch.io
+api2.branch.io
+app-2eb14b23959e2b5d.mobileapi.usebutton.com
+mobileapi.usebutton.com
 
 mu-pl.lemnisk.co
 api.cooladata.com
@@ -23,6 +133,7 @@ pangolin-sdk-toutiao.com
 api-access.pangolin-sdk-toutiao.com
 
 # Appsflyer
+0sak8o-cdn-settings.appsflyersdk.com
 inapps.appsflyer-cn.com
 
 # localstack
@@ -94,11 +205,23 @@ logx.optimizely.com
 # Block Ads inside Line Today, also break picture (thumbnail)
 # Feedback needed (Android Too)
 
+
+# grafana alloy track user frontend 
+alloy-gw.line.dev
+line.dev
+# line k8s ingress controller
+contour.brown.line-apps.com
+# Line taxi
+adc.tamedia.com.tw
+car-plus-datasink.sensorsdata.com
+sensorsdata.com
+
 voom-obs.line-scdn.net
 today-obs.line-scdn.net
 ad.line-scdn.net
 sentry-uit.line-apps.com
 ly.my.sentry.io
+# leygy will break outside app share file or picture to Line app on iOS
 # legy.line-apps.com
 # legy-backup.line-apps.com
 d.line-scdn.net
@@ -126,6 +249,15 @@ www.ijnb.cn
 ijnb.cn
 
 # Camscanner App iOS
+api16-log-sg2.pangle.io
+api16-access-ttp.tiktokpangle.us
+p16-ttam-va.ibyteimg.com
+engagements.appsflyer.com
+init-p01md.apple.com
+ss-static.intsig.net
+ep2.facebook.com
+cgi.connect.qq.com
+0sak8o-launches.appsflyersdk.com
 dsp-material.brainx.tech
 brainx-dsp-sg.tec-do.cn
 tec-do.cn
@@ -259,6 +391,7 @@ shuc-js.ksord.com
 movip.wps.com
 service-mopdf.wps.com
 dw-online.ksosoft.com
+sz-qiniu-all.volcgtm.com
 
 # Notion.so
 nexus-websocket-a.intercom.io

hosts/source.txt

@@ -1,33 +1,34 @@
-https://raw.githubusercontent.com/VeleSila/yhosts/master/hosts
+# Last update 2025-10-07
+
+# Allowlist
+https://raw.githubusercontent.com/217heidai/adblockfilters/refs/heads/main/rules/white.txt
+https://raw.githubusercontent.com/hl2guide/Filterlist-for-AdGuard/master/filter_whitelist.txt
+
+# Blocklist
+## General
+https://abp.oisd.nl
+https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/quad9_blocklist.txt
 https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
 https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/android-tracking.txt
 https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV.txt
-https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt
-https://raw.githubusercontent.com/Yhonay/antipopads/master/hosts
-https://raw.githubusercontent.com/cchevy/macedonian-pi-hole-blocklist/master/hosts.txt
-https://raw.githubusercontent.com/scafroglia93/blocklists/master/blocklists-main.txt
-https://raw.githubusercontent.com/cchevy/macedonian-pi-hole-blocklist/master/hosts.txt
-https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt
-https://raw.githubusercontent.com/ilpl/ad-hosts/master/hosts
 https://raw.githubusercontent.com/jdlingyu/ad-wars/master/hosts
-https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt
-https://raw.githubusercontent.com/ilpl/ad-hosts/master/hosts
-https://raw.githubusercontent.com/joeylane/hosts/master/hosts
 https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Hosts/GoodbyeAds.txt
 https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-LeEco-Extension.txt
 https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-Spotify-AdBlock.txt
 https://raw.githubusercontent.com/r-a-y/mobile-hosts/master/AdguardMobileSpyware.txt
-https://raw.githubusercontent.com/Cats-Team/AdRules/main/hosts.txt
-
+https://raw.githubusercontent.com/Cats-Team/AdRules/refs/heads/main/dns.txt
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/pro.txt
 https://hostfiles.frogeye.fr/multiparty-only-trackers.txt
 https://badmojr.github.io/1Hosts/Lite/adblock.txt
-https://rescure.fruxlabs.com/rescure_domain_blacklist.txt
 http://npc.0am.jp/hosts.php?dl=1
-https://abp.oisd.nl
-https://gitee.com/bigdataleaveme/dontcollectme/raw/master/dontcollectme.txt
 https://warui.intaa.net/adhosts/hosts.txt
 https://raw.githubusercontent.com/stamparm/blackbook/master/blackbook.txt
 
+# Scam
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/fake.txt
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/tif-compressed.txt
+https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/adblock/gambling.mini.txt
+
 # CNAME cloaking
 https://raw.githubusercontent.com/r-a-y/mobile-hosts/master/AdguardCNAME.txt
 https://raw.githubusercontent.com/r-a-y/mobile-hosts/master/EasyPrivacyCNAME.txt

hosts/whitelist.txt

@@ -1,6 +1,26 @@
 ## This whitelist maintaince by @ookangzheng
 ## Attribution-NonCommercial 4.0 International (CC BY-NC-SA 4.0)
 
+
+
+# apple.com
+## ios app store
+tr.iadsdk.apple.com
+iadsdk.apple.com
+
+# youtube
+jnn-pa.googleapis.com
+
+## digicert
+ocsp.digicert.com
+
+# picsart.com
+api.picsart.com
+
+# scholar 
+#issue #310
+scholar.google.com
+
 # Metro Taipei
 api.metro.taipei
 ws.metro.taipei
@@ -9,6 +29,9 @@ ws.metro.taipei
 slackb.com
 
 # Line
+api.line.me
+# Line Taxi voucher redeem
+app.data-di.com
 # Report ads website not loading
 liffsdk.line-scdn.net
 # Line chat official account bottom message select form content
@@ -161,10 +184,25 @@ amp-api-edge.apps.apple.com.edgekey.net
 # mihoyo.com
 log-upload-os.mihoyo.com
 
+# Sogo Input
+pgdt.gtimg.cn
+cdn-go.cn
+
 # QQ Lemon
 guanjia.qq.com
+qq-web.cdn-go.cn
+appcfg.v.qq.com
+tangram-config.gdt.qq.com
 
-# Wei Xin IM
+# QQ messenger
+static-res.qq.com
+d3g.qq.com
+v.gdt.qq.com
+rpt.gdt.qq.com
+tangram-config.gdt.qq.com
+vv.video.qq.com
+
+# Wechat
 shminorshort.weixin.qq.com
 minorshort.weixin.qq.com # Will break user unable to join group
 support.weixin.qq.com
@@ -261,6 +299,7 @@ opera.software
 op-cdn.net
 
 # Microsoft
+substrate.office.com # Teams internal search webpage
 activity.windows.com # brake Authenticator backup function
 continuum.dds.microsoft.com # Connect your phone to Microsoft windows
 
@@ -1000,6 +1039,7 @@ cvp1.cdn.turner.com
 z.cdn.turner.com
 
 # OCSP-Servers 
+ocsp.digicert.com
 ocsp.verisign.com
 #a652.dscb.akamai.net # CNAME of ocsp.comodoca.com
 ocsp.int-x3.letsencrypt.org
@@ -1009,7 +1049,6 @@ ocsp.int-x1.letsencrypt.org
 #ocsp.apple.com
 ocsp.comodoca.com
 ocsp.comodoca4.com
-ocsp.digicert.com
 ocsp.globalsign.com
 ocsp.godaddy.com
 ocsp.pki.goog