# (Unofficial) Emerging Threats PiHole blocklist # https://github.com/tweedge/emerging-threats-pihole # # Category: INFORMATIONAL # Description: Blocks more link shorteners, benign callbacks, and some potentially unwanted sites (ex. file sharing), etc. # Utility: Low - may be useful in certain strict corporate environments # Status: Beta / in development # Last modified: 2024-10-14 # # WHAT: # This blocklist is intended for use in PiHole or similar DNS-level filters. It's generated automatically from part of # the current Emerging Threats Open ruleset, which is threat intelligence and signatures provided by the Emerging # Threats research team and contributed to by security researchers around the world. # # TECHNICAL NOTICE: # While this list provides some DNS filtering coverage, the provided filter is NOT comparable to protection offered by # Emerging Threats' signatures when implemented in an IPS such as Snort or Suricata. This is because IDS can perform # advanced matching functionality and make bypassing the filter much more difficult. Some key examples: # * If a particular strain of malware queries the public DNS resolver 8.8.8.8 directly, this could bypass PiHole on # your network. # * Emerging Threats includes much more than blocking specific domains, such as detecting and blocking DNS # exfiltration attacks based on different parts of the DNS payload that PiHole would simply ignore. # * And of course, Emerging Threats covers 100s of different protocols with their signatures, extending FAR beyond # DNS! This allows researchers to write very specific rules to detect and block threats at the network level, # making it harder for malware or threats to hide from security staff by just changing what domain they use. # After all, a domain can cost only a few dollars - but re-engineering your custom malware implant could take days! # # WHY: # First, of course I hope this can help you keep some malware/unwanted traffic/etc. off your network! # Second, for folks interested in cybersecurity (personal or career) that you get a glimpse of some new technology # that you may not have heard of before and something fun to learn about - or maybe contribute to in the future! :) # # SOMETHING IS WRONG: # Sorry! This is NOT an official Emerging Threats project and while I'll do my best to ensure correctness, # this hosts file is not provided with any guarantees. # Please report false positives or other issues here: https://github.com/tweedge/emerging-threats-pihole/issues # # LICENSE: # Emerging Threats community rules, from which this hosts file is derived, are BSD-licensed: # Copyright (c) 2003-2021, Emerging Threats # All rights reserved. # # Redistribution and use in source and binary forms, with or without modification, are permitted provided that the # following conditions are met: # # * Redistributions of source code must retain the above copyright notice, this list of conditions and the following # disclaimer. # * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the # following disclaimer in the documentation and/or other materials provided with the distribution. # * Neither the name of the nor the names of its contributors may be used to endorse or promote products derived # from this software without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES, # INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE # DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR # SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE # USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 0.0.0.0 iplogger.com 0.0.0.0 freegeoip.net 0.0.0.0 cz.cc 0.0.0.0 cu.cc 0.0.0.0 freevnn.com 0.0.0.0 co.tv 0.0.0.0 gr.com 0.0.0.0 000webhostapp.com 0.0.0.0 vv.cc 0.0.0.0 co.be 0.0.0.0 net.tf 0.0.0.0 eu.tf 0.0.0.0 int.tf 0.0.0.0 edu.tf 0.0.0.0 us.tf 0.0.0.0 ca.tf 0.0.0.0 bg.tf 0.0.0.0 ru.tf 0.0.0.0 pl.tf 0.0.0.0 cz.tf 0.0.0.0 de.tf 0.0.0.0 at.tf 0.0.0.0 ch.tf 0.0.0.0 sg.tf 0.0.0.0 noip.cn 0.0.0.0 ch.vu 0.0.0.0 be.ma 0.0.0.0 upas.su 0.0.0.0 co.cc 0.0.0.0 orge.pl 0.0.0.0 ae.am 0.0.0.0 qc.cx 0.0.0.0 myfirewall.org 0.0.0.0 dns1.us 0.0.0.0 otzo.com 0.0.0.0 zyns.com 0.0.0.0 zzux.com 0.0.0.0 my-ip.io 0.0.0.0 interact.sh 0.0.0.0 interactsh.com 0.0.0.0 gofile.io 0.0.0.0 freehostia.com 0.0.0.0 transferxl.com 0.0.0.0 kisa.link 0.0.0.0 seeklogo.com 0.0.0.0 imgyukle.com 0.0.0.0 resimag.com 0.0.0.0 resimupload.org 0.0.0.0 dumpor.com 0.0.0.0 smihub.com 0.0.0.0 greatfon.com 0.0.0.0 lk.tc 0.0.0.0 proxynet.io 0.0.0.0 syncromsp.com 0.0.0.0 splashtop.eu 0.0.0.0 splashtop.com 0.0.0.0 ic0.app 0.0.0.0 anonfile.com 0.0.0.0 fromsmash.co 0.0.0.0 oast.me 0.0.0.0 oastify.com 0.0.0.0 mediafire.com 0.0.0.0 filesend.jp 0.0.0.0 sharepointin.com 0.0.0.0 templatern.com 0.0.0.0 prizegives.com 0.0.0.0 shareholds.com 0.0.0.0 prizewings.com 0.0.0.0 doctricant.com 0.0.0.0 sharession.com 0.0.0.0 sharepointle.com 0.0.0.0 mcsharepoint.com 0.0.0.0 officenced.com 0.0.0.0 templatent.com 0.0.0.0 sharepointen.com 0.0.0.0 officence.com 0.0.0.0 templateau.com 0.0.0.0 sharesbyte.com 0.0.0.0 officences.com 0.0.0.0 officentry.com 0.0.0.0 officested.com 0.0.0.0 prizemons.com 0.0.0.0 prizewel.com 0.0.0.0 sharestion.com 0.0.0.0 attemplate.com 0.0.0.0 windocyte.com 0.0.0.0 giize.com 0.0.0.0 con-ip.com 0.0.0.0 cutt.ly 0.0.0.0 remoteutilities.net 0.0.0.0 filebase.io 0.0.0.0 nftstorage.link 0.0.0.0 ct8.pl 0.0.0.0 eth0.me 0.0.0.0 ifconfig.pro 0.0.0.0 xsph.ru 0.0.0.0 zshorten.com 0.0.0.0 zii.to 0.0.0.0 c1.biz 0.0.0.0 mega.co.nz 0.0.0.0 duia.ro 0.0.0.0 lhr.life 0.0.0.0 mypressonline.com 0.0.0.0 preview-domain.com 0.0.0.0 infinityfree.net 0.0.0.0 hizliresim.com 0.0.0.0 logodownload.org 0.0.0.0 employees-portal.com 0.0.0.0 reversetunnel.net 0.0.0.0 mediastreamer.app 0.0.0.0 pktriot.net 0.0.0.0 betabuild.dev 0.0.0.0 discord.com 0.0.0.0 discordapp.com 0.0.0.0 proxies.black 0.0.0.0 kabutoservices.com 0.0.0.0 repairshopr.com 0.0.0.0 trinket.io 0.0.0.0 temp.swtest.ru 0.0.0.0 fleek.co 0.0.0.0 fileditch.com 0.0.0.0 mspbackups.com 0.0.0.0 rustdesk.com 0.0.0.0 mesharepoint.com 0.0.0.0 exlibrisgroup.com 0.0.0.0 papepritz.com 0.0.0.0 zippyshare.com 0.0.0.0 89ip.cn 0.0.0.0 at.ply.gg 0.0.0.0 tally.so 0.0.0.0 avl.team 0.0.0.0 u5p.cn 0.0.0.0 ctcontents.com 0.0.0.0 rentry.co 0.0.0.0 important-notification.com 0.0.0.0 ffm.to 0.0.0.0 cloakerly.com 0.0.0.0 loca.lt 0.0.0.0 mjt.lu 0.0.0.0 autoitscript.com 0.0.0.0 ipfs.w3s.link 0.0.0.0 ipfs.dweb.link 0.0.0.0 gateway.pinata.cloud 0.0.0.0 reverse-shell.sh 0.0.0.0 myq-see.com 0.0.0.0 ngrok.io 0.0.0.0 tiny.cc 0.0.0.0 s.id 0.0.0.0 cleverapps.io 0.0.0.0 keepnetlabs.com 0.0.0.0 webwave.dev 0.0.0.0 agents.level.io 0.0.0.0 online.level.io 0.0.0.0 builds.level.io 0.0.0.0 downloads.level.io 0.0.0.0 global.turn.twilio.com 0.0.0.0 global.stun.twilio.com 0.0.0.0 torforall.com 0.0.0.0 torman2.com 0.0.0.0 torwoman.com 0.0.0.0 torroadsters.com 0.0.0.0 onion.city 0.0.0.0 onion.plus 0.0.0.0 onion.casa 0.0.0.0 wasabisys.com 0.0.0.0 screenconnect.com 0.0.0.0 pool.minexmr.com 0.0.0.0 pxybomb.icu 0.0.0.0 invertexto.com 0.0.0.0 ipfs.eternum.io 0.0.0.0 hardbin.com 0.0.0.0 cloudflare-ipfs.com 0.0.0.0 cf-ipfs.com 0.0.0.0 infura-ipfs.io 0.0.0.0 2read.net 0.0.0.0 ipfs.infura.io 0.0.0.0 ipfs.2read.net 0.0.0.0 webdav.drivehq.com 0.0.0.0 paste.bingner.com 0.0.0.0 argotunnel.com 0.0.0.0 fleetdeck.io 0.0.0.0 ipify.org 0.0.0.0 sharefile.com 0.0.0.0 external-share.com 0.0.0.0 requestbin.net 0.0.0.0 requestinspector.com 0.0.0.0 saucelabs.com 0.0.0.0 x.pipedream.net 0.0.0.0 m.pipedream.net 0.0.0.0 to.intercept.rest 0.0.0.0 curlhub.io 0.0.0.0 apiary-mock.com 0.0.0.0 devtunnels.ms 0.0.0.0 portmap.io 0.0.0.0 portmap.host 0.0.0.0 binlist.net 0.0.0.0 lifeboxtransfer.com 0.0.0.0 codeanyapp.com 0.0.0.0 storyblok.com 0.0.0.0 rf.gd 0.0.0.0 dreamwp.com 0.0.0.0 ngrok-free.dev 0.0.0.0 ngrok.app 0.0.0.0 ngrok.dev 0.0.0.0 ngrok-free.app 0.0.0.0 ngrok.pizza 0.0.0.0 supabase.co 0.0.0.0 tox.chat 0.0.0.0 dracoon.team 0.0.0.0 infinityfreeapp.com 0.0.0.0 openfpcdn.io 0.0.0.0 sftpcloud.io 0.0.0.0 glitch.me 0.0.0.0 onrender.com 0.0.0.0 keyauth.win 0.0.0.0 cheating.store 0.0.0.0 virtualcabinet.com 0.0.0.0 termbin.com 0.0.0.0 zohopublic.eu 0.0.0.0 arvanstorage.ir 0.0.0.0 myqcloud.com 0.0.0.0 getsession.org 0.0.0.0 giize.com 0.0.0.0 insomnia.rest 0.0.0.0 mockbin.io 0.0.0.0 textbin.net 0.0.0.0 reallyfreegeoip.org 0.0.0.0 2zie.com 0.0.0.0 pixelprohn.com 0.0.0.0 viewdns.net 0.0.0.0 egnyte.com 0.0.0.0 freeupload.store 0.0.0.0 sync.com 0.0.0.0 terabox.com 0.0.0.0 workers.dev 0.0.0.0 filedoge.com 0.0.0.0 eventcreate.com 0.0.0.0 lnkz.at 0.0.0.0 oast.pro 0.0.0.0 oast.live 0.0.0.0 oast.site 0.0.0.0 oast.fun 0.0.0.0 noc.su 0.0.0.0 onion.guide 0.0.0.0 s59.site 0.0.0.0 onion.link 0.0.0.0 puter.com 0.0.0.0 docsend.com 0.0.0.0 aliyuncs.com 0.0.0.0 stablediffusionapi.com 0.0.0.0 flg.to 0.0.0.0 getflg.com 0.0.0.0 pipedrive.com 0.0.0.0 passproviders.com 0.0.0.0 arkinfo.in 0.0.0.0 paperusercontent.com 0.0.0.0 hcbanking.com 0.0.0.0 gmail-online.net 0.0.0.0 adobeconnections.com 0.0.0.0 sirumuv.com 0.0.0.0 isthmiboutique.com 0.0.0.0 wrightparkerobrien.biz 0.0.0.0 fimotoclub.com 0.0.0.0 microsoft-files.link 0.0.0.0 office65.info 0.0.0.0 ms365.group 0.0.0.0 o3n.io 0.0.0.0 syncthing.net 0.0.0.0 ad.johnwick.me 0.0.0.0 adfiltro.fun 0.0.0.0 adg.khon.dev 0.0.0.0 resolve.corpa.me 0.0.0.0 dns1.dnscrypt.ca 0.0.0.0 doh.denypradana.com 0.0.0.0 guard.thefather.cloud 0.0.0.0 dns.wael.name:4433 0.0.0.0 dns.56k.uy 0.0.0.0 dns.privex.io 0.0.0.0 dns.wargan.io 0.0.0.0 nana-is.so-gorgeo.us.kg 0.0.0.0 dns.esnube.es 0.0.0.0 dns.ple91.uk 0.0.0.0 dns.utangard.net 0.0.0.0 dnssilo.top 0.0.0.0 dns.nj0.de 0.0.0.0 doh-rs.whalebone.io 0.0.0.0 albertocognetti.com 0.0.0.0 doh.funil.de 0.0.0.0 outdoor.v6.army 0.0.0.0 dns.pccoach.nl 0.0.0.0 nsec.arnor.org 0.0.0.0 morbitzer.de 0.0.0.0 dns.dooks.uk 0.0.0.0 doh.eddi.net 0.0.0.0 doh.iucc.ac.il 0.0.0.0 mikatos.de 0.0.0.0 dns.neowutran.ovh 0.0.0.0 doh.978159.xyz 0.0.0.0 dns.doserver.top 0.0.0.0 dns-1.wil.cloud 0.0.0.0 doh.amonsul.net 0.0.0.0 dns.cert.ee 0.0.0.0 princez.uk 0.0.0.0 dns.rjls.me 0.0.0.0 dns.csa-rz.de 0.0.0.0 dns1.hanahira.dev 0.0.0.0 hk.ahua.ltd 0.0.0.0 dns.rafn.is 0.0.0.0 africadns1.liquidtelecom.net 0.0.0.0 zdn.ro 0.0.0.0 dns.yumenashyi.com 0.0.0.0 dns.huas.me 0.0.0.0 dns.axto.me 0.0.0.0 huanmengmeta.art 0.0.0.0 dns.jupitrdns.com 0.0.0.0 doh.airwaynet.cz 0.0.0.0 resov.wehao.net 0.0.0.0 dns.hyas.com 0.0.0.0 blocker.thethorsens.org 0.0.0.0 dnsdoh.art:444 0.0.0.0 dns.ch6se.com 0.0.0.0 adguard.tcpu.io 0.0.0.0 dns.renardyre.com 0.0.0.0 doh.beauty 0.0.0.0 dns.everdns.tech 0.0.0.0 dns.cctld.kg 0.0.0.0 agh.ero-sayhi.com 0.0.0.0 doh.plaawan.uk 0.0.0.0 dns.sec511.com 0.0.0.0 dns.npsolution.it 0.0.0.0 adguard.leadseason.eu 0.0.0.0 yeralin.net 0.0.0.0 doh.webnmail.de 0.0.0.0 dns.decky.eu 0.0.0.0 anycast.uncensoreddns.org 0.0.0.0 dns.pacificmonster.com 0.0.0.0 qrfy.io 0.0.0.0 cdn.ethers.io 0.0.0.0 doh.futa.gg 0.0.0.0 centrastage.net 0.0.0.0 polyfill.io 0.0.0.0 iplog.co 0.0.0.0 ident.me 0.0.0.0 whatismyipaddress.com 0.0.0.0 bablosoft.com 0.0.0.0 imgurl.ir 0.0.0.0 advanced-port-scanner.com 0.0.0.0 usrfiles.com 0.0.0.0 storjshare.io 0.0.0.0 discreetshare.com 0.0.0.0 farmerswife.com 0.0.0.0 ply.gg 0.0.0.0 desktime.com 0.0.0.0 ipfs.io 0.0.0.0 4sync.com 0.0.0.0 replit.dev 0.0.0.0 tempfiles.ninja 0.0.0.0 pantheonsite.io 0.0.0.0 secret.ist.ie 0.0.0.0 sendgb.com 0.0.0.0 norishare.com 0.0.0.0 2ly.link 0.0.0.0 w3spaces.com 0.0.0.0 vultrcdn.com 0.0.0.0 vultrobjects.com 0.0.0.0 adttemp.com.br