Add Hagezi Threat Intelligence Feeds

[yokoffing]

Hey @romaincointepas,

Thank you for merging a previously popular pull request: https://github.com/nextdns/blocklists/pull/65. By extension, many of us would also like to also have Hagezi's Threat Intelligence Feeds (TIF) to compliment our other blocklists.

Please offer @hagezi's TIF blocklist as an option. Details: https://github.com/hagezi/dns-blocklists#tif

Thanks for your support,

yokoffing Maintainer of NextDNS Config guide

[RaggyShaggy]

Would love to see it.

[fynks]

It would be best

[subhajitsaha97]

Please consider adding the list.

[jimmymcdermott]

Please add!

[hagezi]

Good luck ;)

[mvnixon]

please add

[dartsmaster]

This would be an excellent addition to the blocklists.

[BoDoPs]

Yes, this would be a great add.

[ericafterdark]

Has my vote!

[Spark4000]

C`mon NextDNS, make it happen

[FookunKlez]

Yes please

[hmbarbosa]

Awesome job!!!

[miltonjsvidal]

Thanks for this!!

[thiendt2k1]

Dont even know if they are keeping tab on this whole filter lists topic, i request 3 or 4 different blocklists but none got respond. Shame on NextDNS!

[live4swell]

👍🏻

[NanashiTheNameless]

I would absolutely love this

[gautaus]

:+1:

[adamk1211]

Yes please.

[wengkitt]

Please add this blocklist !

[jimvajda]

Pretty please?

[Sandbox8888]

Please add.

[BourbonCrow]

Please add this

[0xvino]

Nextdns pls add this (I'm a paid nextdns user)

[DragonWolf5589]

This is one of the top features I would like implementing to next dns.

Even if they can't add this exact list allow us a way to import custom ones so we can do it ourselves!

[LunaticBFF57]

Been like 6 weeks and no response from dev team?

[hagezi]

Available in AdGuardDNS, ControlD, RethinkDNS and DNSwarden.

[live4swell]

Any idea what NextDNS uses as their source for threat intelligence feeds?

[LunaticBFF57]

Any idea what NextDNS uses as their source for threat intelligence feeds?

@live4swell, they use "a blend of the most reputable threat intelligence feeds". (Direct quote from website.) It will most likely continue being a secret because of 'trade secrets'.

[serqrevp]

Please add the TIF list.

[wengkitt]

Hey @romaincointepas,

Hope you're doing well! It's been 12 weeks since @yokoffing opened this pull request. Any chance to get it merged? We're all pretty excited about the Hagezi Threat Intelligence Feeds being part of NextDNS.

If there's any hiccup or reason you can't merge it, please let us know. We'd really appreciate it!

Thanks you.

[BourbonCrow]

Hey @romaincointepas,

Hope you're doing well! It's been 12 weeks since @yokoffing opened this pull request. Any chance to get it merged? We're all pretty excited about the Hagezi Threat Intelligence Feeds being part of NextDNS.

If there's any hiccup or reason you can't merge it, please let us know. We'd really appreciate it!

Thanks you.

It has been months since any updates on any of their repositorys. Without any word, I mean sure they have never been good at communicating but posting like 4 words or something on X or whatever social media they prefer letting ppl know what's going on sometimes would be nice. Not asking for a essay, only sign of life at this point haha

[LunaticBFF57]

Hey @romaincointepas, Hope you're doing well! It's been 12 weeks since @yokoffing opened this pull request. Any chance to get it merged? We're all pretty excited about the Hagezi Threat Intelligence Feeds being part of NextDNS. If there's any hiccup or reason you can't merge it, please let us know. We'd really appreciate it! Thanks you.

It has been months since any updates on any of their repositorys. Without any word, I mean sure they have never been good at communicating but posting like 4 words or something on X or whatever social media they prefer letting ppl know what's going on sometimes would be nice. Not asking for a essay, only sign of life at this point haha

@BourbonCrow, @romaincointepas may be working on DNS0.EU.

PS. They are the founder of that company.

[BourbonCrow]

Hey @romaincointepas, Hope you're doing well! It's been 12 weeks since @yokoffing opened this pull request. Any chance to get it merged? We're all pretty excited about the Hagezi Threat Intelligence Feeds being part of NextDNS. If there's any hiccup or reason you can't merge it, please let us know. We'd really appreciate it! Thanks you.

It has been months since any updates on any of their repositorys. Without any word, I mean sure they have never been good at communicating but posting like 4 words or something on X or whatever social media they prefer letting ppl know what's going on sometimes would be nice. Not asking for a essay, only sign of life at this point haha

@BourbonCrow, @romaincointepas may be working on DNS0.EU.

PS. They are the founder of that company.

You are probably correct about them working on that since it's somewhat new. But a word from em would be nice. Concider NextDNS is a payed service and they prioritize a free service that I'm confused why it even exist. Like whatever dns0 is atm they could have made the free tier of NextDNS I'm confused why it needed a new company and branding doing the same thing even using same software as it states on dns0 site.. That it has been tested with next dns for years

[LudnicaKiller]

Would love to see it 😊

[wengkitt]

Still no response from the dev 💀

[LunaticBFF57]

Are there any other devs that can commit to this repo?

[ittairuf]

@romaincointepas and @rs please give us an update.

[DragonWolf5589]

Its no wonder people are moving away/saying nextdns is "abandoned" im thinking if switching to a competitor one of these days and rsetting everything up again if they dont add this or at LEAST show they are active/still supporting nextdns.

(edit: spelling mistake)

[BourbonCrow]

Its no wonder people are moving away/saying nextdns is "abandoned" im thinking if switching to a competitor one of these days and rsetting everything up again if they dont add this or at LEAST show they are active/still supporting nextdns.

(edit: spelling mistake)

I'm annoyed with them being 100% just vanished and dont deal with old issues like removing old out dated filters and removing the outdated filters from their main filter and their list where you add your own domains whitelist and blocklist could be a bit better so you could add multiple domains.. and even like control D to organize in folders would be great with a import export. so I'm currently trying out ControlD a bit while i montitor the situation over at nextdns pros:

• UI is nice and easy to work with
• easy to add / import your own lil list of domains or TLD's no need to input them 1 by 1,
• they do have all the hagezi stuff including the TIF

cons:

• i would say their own filters seems a bit of a mess atm way to many false positives on their crypty/malware (they seem pretty fast at fixing the reports on discord)

[wengkitt]

@BourbonCrow I tried ControlD too, it took some time to get used to their UI. The dev team listens to their customers, and any issues are solved quickly. But, too bad I can't make the switch because I'm living in Asia, and the servers in Asia are quite bad when compared with NextDNS. I hope ControlD can increase and improve their servers in the Asia region.

By the way, if you guys go check out NextDNS other repository, there is still ongoing development, which means they can actually look into the issues in this repository, but they choose to ignore it? I'm not sure.

I wish the NextDNS dev team can have some response to this PR.

[BourbonCrow]

@BourbonCrow I tried ControlD too, it took some time to get used to their UI. The dev team listens to their customers, and any issues are solved quickly. But, too bad I can't make the switch because I'm living in Asia, and the servers in Asia are quite bad when compared with NextDNS. I hope ControlD can increase and improve their servers in the Asia region.

By the way, if you guys go check out NextDNS other repository, there is still ongoing development, which means they can actually look into the issues in this repository, but they choose to ignore it? I'm not sure.

I wish the NextDNS dev team can have some response to this PR.

@wengkitttt sweden ping on controld is like 30~ and nextdns is like..13 cause nextdns got servers in sweden but in for me non of the latencys are noticable cause both are very long, but i hope for you that they add a asian server.

also even if they dont wanna write massive blob posts.. i think next dns ppl could atleast spend... 10 min per month or.. less writing like a 15 word post on twitter or .. whatever social media they prefer just small updates letting us know whats going on. not asking for a essay or anything.. could just be like "We currently busy with dns0 eu so our work with next dns will slow donwn for a while" something simple like that would satesfy me and prolly alot of other ppl as well. cause its better knowing than just wondering forever not knowing anything

[nemchik]

https://github.com/nextdns/nextdns does not seem abandoned. I am not sure the status of this repository. It's possible different contributors responsible may not have visibility here vs the other repo that has a little more activity.

[ittairuf]

Hello @rs @romaincointepas, could you please check this?

[hagezi]

@rs @romaincointepas could you at least give feedback to the community? Zero response for months. But it's not that difficult: yes, no, don't know would be enough.

@yokoffing If you don't get any feedback, just close the PR.

Gerd

[unknown4849]

https://help.nextdns.io/t/60yqxb9?r=m1y8n0m

and after ±6 month, got the answer.

[yokoffing]

https://help.nextdns.io/t/60yqxb9?r=m1y8n0m

We are only adding blocklists related to privacy, and our TI feeds include only source feeds. Hagezi TIF is an aggregation list that contains most of the same feeds as our TI feeds.

There are over 30 sources plus unique entries used in Hagezi's list that aren't in the NextDNS lists.

``` https://phishing-filter.pages.dev/phishing-filter-hosts.txt https://raw.githubusercontent.com/phishfort/phishfort-lists/master/blacklists/hotlist.json https://phishing.army/download/phishing_army_blocklist_extended.txt https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt https://raw.githubusercontent.com/jarelllama/Scam-Blocklist/main/lists/adblock/scams.txt https://raw.githubusercontent.com/scamsniffer/scam-database/main/blacklist/domains.json https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/master/Lists/Scam https://raw.githubusercontent.com/elliotwutingfeng/GlobalAntiScamOrg-blocklist/main/global-anti-scam-org-scam-urls-pihole.txt https://raw.githubusercontent.com/elliotwutingfeng/SpamdexingSites/main/blocklist.txt https://raw.githubusercontent.com/marco-acorte/antispam-it/main/antispam-it.txt https://raw.githubusercontent.com/matomo-org/referrer-spam-list/master/spammers.txt https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt https://hosts.tweedge.net/malicious.txt https://raw.githubusercontent.com/bigdargon/hostsVN/master/extensions/threat/hosts https://vn-badsite-filter.pages.dev/vn-badsite-filter-hosts.txt https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt https://github.com/scafroglia93/blocklists https://raw.githubusercontent.com/0xDanielLopez/TweetFeed/master/week.csv https://botvrij.eu/data/ioclist.domain https://dl.red.flag.domains/red.flag.domains.txt https://lists.cyberhost.uk/malware.txt https://raw.githubusercontent.com/braveinnovators/ukrainian-security-filter/main/lists/domains.txt https://raw.githubusercontent.com/elliotwutingfeng/Inversion-DNSBL-Blocklists/main/Google_hostnames_Predecessor: Multi Light https://raw.githubusercontent.com/elliotwutingfeng/Ukrainian-EMA-blocklist/main/urls-pihole.txt https://raw.githubusercontent.com/iam-py-test/my_filters_001/main/Alternative%20list%20formats/antimalware_domains.txt https://raw.githubusercontent.com/ttc-cert/TTC-CERT_blocklist_recommended/master/domain_blocklist_recommended.txt https://threatview.io/Downloads/DOMAIN-High-Confidence-Feed.txt https://zonefiles.io/f/compromised/domains/live/ https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/badware.txt https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/hosts https://filters.adavoid.org/ultimate-security-filter.txt ```

Not to mention, Hagezi removes entries for false positives and dead domains.

[wengkitt]

I'm not an expert in this, but may I ask why it is so hard for them to add the Hagezi TIF list? Is it the format of the list? Or are there any policy issues that are stopping them?

I believe many NextDNS users want this list to be added, and some of their customers are leaving to go for other alternatives that have this list included, like AdGuardDNS, Controld, etc.

[DragonWolf5589]

Wow an update after 6 months.. Now i know why hagazi removed nextdns as a recommended service and why everyone is moving to adguard and controlD instead as they allow the lists. Guess ill be doing the same after my paid nextdns ends and moving all my friends/family too. Especially as an autistic friend of mine keeps clicking dodgy links. But next dns tif list doesn't include the same protection as hagAzi TIF

[DragonWolf5589]

I'm not an expert in this, but may I ask why it is so hard for them to add the Hagezi TIF list? Is it the format of the list? Or are there any policy issues that are stopping them?

I believe many NextDNS users want this list to be added, and some of their customers are leaving to go for other alternatives that have this list included, like AdGuardDNS, Controld, etc.

All they said is "we only add privacy lists and use our own TIF"

Seems ill be joining everyone else leaving to another servicr once my paid year is up

[live4swell]

Wow an update after 6 months.. Now inonow what hagazi removed nexydns as a recommended service and why evwryone is moving to adguard and controlD instead. Guess ill be doing the same after my paid nextdns ends and moving all my friends/family too.

Does the service not work as intended? Do you have issues? I think those should be reasons for switching not silence from the company especially when things just work.