blocklist

ph00lt0 Blocklist

Comprehensive blocklist for AdGuard Home, AdGuard, Little Snitch, Open Snitch, uBlock Origin, Brave Adblock, pfBlockerNG, and PiHole

The blocklist is automatically cleaned, and kept free of dead or redundant entries. Domains are continuously discovered through multiple detection systems, including my own automated domains analyzer, as well as several threat sources. The collection is contiously being improved and extended.

---

What This Blocklist Blocks

This blocklist is specifically designed to block:

• 🔍 Analytics & Tracking — Google Analytics, Mixpanel, Segment, TikTok and Facebook Pixels, and more
• 📊 Stats Platforms — Data collection and profiling services
• 🍪 Cookie & Consent Management — Forced consent banners and cookie walls
• 🐛 Debugging Trackers — Sentry, LogRocket, and similar tools collecting your data not always in secure ways
• 🎯 Data Brokers — Companies that collect and sell personal data
• 🔗 Tracking Parameters — UTM, affiliate, and click-tracking parameters removed
• 💄 Cosmetic Filters — Cookie banner elements hidden and removing buttons to accidentally consent via dark patterns
• 📧 Newsletter and Chatbot Popups — Subscription request overlays and annoying AI chatbot experiences
• 🌐 Ad Networks & Servers — Third-party ad serving domains and ad delivery infrastructure
• 🏗️ Programmatic Bidding Infrastructure — DSPs, SSPs, ad exchanges, and real-time bidding endpoints
• 🖼️ Retargeting & Audience Matching — Cross-site ad tracking and behavioral profiling networks
• 📰 Social Widgets — Like, share, and embed buttons that track users regardless of interaction
• ✍️ Font & Image Trackers — Embedded resources used for browser fingerprinting
• ⛏️ Cryptojacking — Browser-based cryptocurrency mining scripts
• 🔀 Browser Hijackers — Extensions and settings that redirect traffic without consent
• 🦠 Malware — Malicious software and viruses
• 🖥️ Remote Administration Tools — RATs, software to control a device remotely, often used in scams
• 🎣 Phishing Campaigns — Domains attempting to scam you
• 💊 Health & Medical Scams — Fake remedies, supplement fraud, and telehealth scams
• 🛠️ Tech Support Scams — Popups and sites pretending to offer IT assistance
• 💰 Investment & Crypto Scams — Fraudulent trading platforms, Ponzi schemes, and fake exchanges
• 🎰 Gambling and Lottery — Domains associated with gambling and lottery scams
• 💌 Romance & Impersonation Scams — Dating platforms and profiles used for financial fraud
• 🎁 Survey & Sweepstakes Scams — Fake prize claims and reward programs
• 📬 Email Spam Domains — Known senders of unsolicited bulk email
• 📩 Spam Domains — General spam infrastructure and bulk senders
• 💿 Shareware & Fake Downloads — Cracked software, fake installers, and bundled unwanted programs
• 🧱 Bloatware & Trialware — Pre-installed or bundled unnecessary software
• 🤖 AI Data Harvesting — LLM interfaces and services that train on or sell user inputs

---

Known Issues

[!WARNING] This blocklist prioritizes privacy over convenience. That is intentional.

This blocklist may break functionality for:

• Facebook
• TikTok
• Amazon Alexa
• Link shorteners
• Email tracking

See Troubleshooting below for whitelisting instructions if you encounter issues.

---

Quick Start

Choose your tool and click the subscribe button or follow the setup guide:

Tool	Status	Guide
	✅ Recommended	Manual setup
	✅ Recommended	Manual setup
	✅ Full Support	Manual setup
AdGuard Home	✅ Recommended	Setup
Brave	✅ Recommended	Setup
PiHole	✅ Full Support	Setup
Open Snitch	✅ Full Support	Setup
pfBlockerNG	✅ Full Support	Setup
RethinkDNS	✅ Slow Updates	Setup
NextDNS	⚠️ Via API	Setup

Also works with: Dnsmasq · Adblock Plus · Blokada · DNSCloak · InviZible · Unbound · OPNsense · wBlock · Technitium DNS · Blocky

---

Recommended Configuration

For best results, use this blocklist across 3 filtering levels:

Browser Level

• uBlock Origin (best support)
• Brave's native adblock

Device Level

• Little Snitch (macOS)
• Open Snitch (Linux)

Network Level (DNS)

• AdGuard Home (self-hosted)
• PiHole (Raspberry Pi)
• NextDNS (via import to denylist)

Combine with:

• Hagezi Multi Pro++
• OISD Big

---

Installation Guides

uBlock Origin

Easiest method:

Manual method:

1. Open the uBO Dashboard
2. Navigate to Filter lists
3. Scroll down to + Custom
4. Check Import...
5. Paste: https://raw.githubusercontent.com/ph00lt0/blocklist/master/blocklist.txt
6. Click Apply changes

---

AdGuard Home

1. Go to Filters > DNS blocklists
2. Click Add blocklist
3. Select Add a custom list
4. Choose a name and paste: https://raw.githubusercontent.com/ph00lt0/blocklist/master/blocklist.txt
5. Click Save

---

AdGuard

Easiest method:

Manual method:

1. Open AdGuard Settings
2. Navigate to Filters > Custom
3. Enable the custom switch
4. Click Add custom filter
5. Paste: https://raw.githubusercontent.com/ph00lt0/blocklist/master/blocklist.txt
6. Enable trusted checkbox
7. Click Subscribe

---

Little Snitch

1. 
2. Allow your browser to open Little Snitch
3. Verify update frequency is set to daily and list is active
4. Press Add

---

Brave

1. Go to: brave://adblock
2. Under Add custom filter lists, paste: https://raw.githubusercontent.com/ph00lt0/blocklist/master/blocklist.txt
3. Click Add

---

PiHole

PiHole uses a different format (hosts blocklist):

1. Go to Group Management > Adlist
2. Paste the URL: https://raw.githubusercontent.com/ph00lt0/blocklist/master/hosts-blocklist.txt
3. Click Add
4. Go to Tools > Update Gravity > Update

---

pfBlockerNG

Install pfBlockerNG in pfSense:

1. Go to System > Package Manager
2. Click Available packages
3. Find pfBlockerNG and click install
4. In pfSense dashboard: Firewall > pfBlockerNG
5. Follow the installation wizard
6. Enable DNS resolver and DNSBL blocking under DNSBL tab

Add the blocklist:

1. Go to Firewall > pfBlockerNG > DNSBL > DNSBL Groups
2. Click Add
3. Paste: https://raw.githubusercontent.com/ph00lt0/blocklist/master/unbound-blocklist.txt
4. Click Save
5. Enable auto-updates and force update if needed

---

Open Snitch

Note: Script auto-update setup

1. Create a folder and download script:

   mkdir -p /media/ph00lt0-blocklist/
   wget https://raw.githubusercontent.com/ph00lt0/blocklist/master/blocklist.txt -O /media/ph00lt0-blocklist/blocklist.txt
   

2. Add to crontab for daily updates:

   crontab -l | { cat; echo "00 11 * * * /usr/bin/wget https://raw.githubusercontent.com/ph00lt0/blocklist/master/blocklist.txt -O /media/ph00lt0-blocklist/blocklist.txt"; } | crontab -
   

3. In Open Snitch UI:

   • Create new rule: 000-block-domains
   • Check Enable and Priority
   • Set Duration to always
   • Check To this list of domains
   • Select: /media/ph00lt0-blocklist/blocklist.txt
   • Click Apply

---

RethinkDNS

[!WARNING] RethinkDNS does update the blocklists only every 8 days which limits the effectiveness against malicious domains and phishing.

DOT (DNS over TLS): https://sky.rethinkdns.com/1:oAIIAACAIAA=

DOH (DNS over HTTPS): http://1-uabaqaaaqaqaa.max.rethinkdns.com/

MobileConfig (Apple Devices):

1. Click here to download
2. Open Settings/Preferences
3. Tap Profile Downloaded
4. Tap Install and follow onscreen instructions

---

NextDNS

NextDNS doesn't natively support this list, but you can automatically sync it to your profiles using the custom NextDNS denylist updater — a GitHub Actions workflow that imports and prunes stale entries daily:

1. Fork the repository
2. Add your NextDNS API key as a repository secret (NEXTDNS_ACCOUNT_1_API_KEY)
3. Run the workflow — it syncs all your profiles automatically

See the README for full setup instructions.

---

Troubleshooting

If a website or app breaks after enabling this blocklist:

Problem	Solution
Site not loading	Temporarily disable blocklist to confirm
Login fails	Whitelist authentication domains
Video won't play	Check tracker filters (analytics may block playback)
Maps broken	Add geolocation domains to allowlist
Social media features fail	These are expected (Facebook, TikTok intentionally blocked)

How to Whitelist

• uBlock Origin: Right-click element > "Never block" or go to Dashboard > Whitelist
• AdGuard: Settings > Filters > Whitelist > Add domain
• PiHole: Group Management > Clients > Add whitelist entries
• Little Snitch: Create allow rule for specific domains/processes

---

License

• Source code: MIT License
• Content/data: Attribution-ShareAlike 4.0 International (CC BY-SA 4.0)