1Hosts

Similar here. I use Unbound DNS plus 1Hosts [1] and a few others here and there and I block all the DoH/DoT servers. I also blackhole route known malicious networks. [1] - https://github.com/badmojr/1Hosts

There are currently git repositories that contain domains that share malware, scams, annoying advertisements, etc... Will there be repositories for sites that force Age Verification or Digital ID's? If so I would gladly use it in combination with my local DNS to outright block such sites. I like the multiple formats of 1Hosts [1] so that anyone can use it without having to modify the format. [1] - https://github.com/badmojr/1Hosts

I have a windows 11 machine I recently imaged using their latest ISO and Rufus [0] to burn the image which Microsoft recommend so I could skip the Microsoft account creation and hardware checks. The first thing I do is run windows update, reboot, then O&O's ShutUp10 [1] which also works on W11. Just these few things has prevented any ads or other nonsense. I have not seen any slowness or ads. The license tied to the hardware is for W11 Pro. The home edition may be a different experience. I also block some DNS requests [2] on my firewall / router running Unbound so that could also be masking some garbage. The hardware I bought had 2 pieces of malware installed from the OEM image so I have gone back to the practice of reinstalling the OS from a pristine image and that may be helping avoid some OEM cruft. [0] - https://rufus.ie/en/ [1

I suppose that should there be enough fraud on the gTLD's that mimic .edu[cation] we could push for legislation to have ICANN [1] drop those TLD's given that scammers will do what scammers can do. Or alternately add the same requirements as .edu to those gTLD's. In the mean time perhaps all the firewall and DNS providers that block malicious sites should just globally block those TLD's. e.g. OpenDNS, Fortinet, Palo Alto Networks, maybe even Google DNS and Cloudflare DNS, all the blocklists on Github [2], etc... [1] - https://www.icann.org/resources/pages/report-security-issues... [2] - https://github.com/badmojr/1Hosts

Wow, yes, only 1Hosts (Xtra) includes 2 of the 3 command & control domains: https://archive.is/drYgk I am surprised that none of the usual threats lists have picked these domains up. Edit: https://github.com/badmojr/1Hosts/issues/964

For what it's worth that domain in your repo is also listed in the 1Hosts block-list [1] but only in the Xtra category, not sure why. It seems that is a known malware site. Oddly enough it is not listed in the PiHoleBlocklist [2] [1] - https://github.com/badmojr/1Hosts [listed but only in Xtra] [2] - https://github.com/Perflyst/PiHoleBlocklist.git [not listed]

This file has DNS servers and IP's + IP's. I think it needs some clean-up before anyone uses it. Consider sticking with the CDN domains and the names owned by TikTok to avoid blocking unrelated sites. Lines 35 through 50 will not do anything. The awsdns lines will not block anything unless these are being blocked in ones upstream DNS servers and would block a lot more than tiktok if this was done. [0] Consider instead doing a "grep tiktok | sort" from this file [1] from this repo [2] [0] - https://www.robtex.com/dns-lookup/ns-1475.awsdns-56.org [1] - https://raw.githubusercontent.com/badmojr/1Hosts/master/mini... [2] - https://github.com/badmojr/1Hosts