Discontinuation of Subdomain-Enumeration Lists in Domains and Hosts Formats

[hagezi]

Announcement: Discontinuation of Subdomain-Enumeration Lists in Domains and Hosts Formats

Effective August 1, 2026, blocklists in domains and hosts formats that rely on explicit subdomain enumeration will no longer be supported or published.

These formats require all possible subdomains to be listed individually in order to approximate wildcard-style blocking. This approach is inefficient, incomplete by design, and no longer aligned with modern DNS and content-blocking methods.

Affected Software

The following solutions are known to be affected if they still rely on these formats:

• Blocky older than v0.23
• Diversion older than v5
• PersonalBlocklist
• pfBlockerNG
• AdAway
• uMatrix
• OpenSnitch
• DNS66
• NetGuard
• Hostfile (Windows/Linux)
• Other tools using subdomain-based domains or hosts lists

Timeline

• During this week, links to these formats will be removed from the README.
• Until August 1, 2026, the lists will still be updated and made available through the existing URLs currently in use.
• Starting on August 1, 2026, the GitHub RAW and GitLab RAW links for these formats will no longer work.
• After that date, only the jsDelivr CDN cached versions from July 31, 2026 may remain accessible.
• These cached versions will not receive any further updates.

Why This Change Is Necessary

This decision was made for several technical and practical reasons:

• These formats are highly inefficient because every relevant subdomain must be listed explicitly.
• They cannot reliably block generic, dynamic, or previously unknown subdomains, so coverage is inherently limited.
• The resulting lists become very large, which increases download size, memory usage, parsing time, and processing overhead.
• They require significantly more maintenance effort while offering comparatively low technical value.
• Modern DNS blockers increasingly support more capable and efficient formats, making legacy subdomain-enumeration lists obsolete.
• Continuing to maintain these formats adds unnecessary complexity to the release process and takes time away from more useful improvements.
• Large legacy lists can negatively affect performance on resource-constrained systems and embedded devices.
• These formats may create a false sense of completeness, even though they cannot provide full subdomain coverage in practice.

Recommendation

Users of affected software are strongly encouraged to migrate to a supported modern format before August 1, 2026.

Thank you for your understanding and for your continued support of the project,
Gerd

[hagezi]

The following cached versions from July 31, 2026, will be available starting August 1, 2026 - they will not receive any further updates.

Subdomains:

https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/light.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/multi.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/pro.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/pro.plus.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/ultimate.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/tif.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/doh.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.amazon.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.apple.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.huawei.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.winoffice.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.samsung.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.tiktok.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.tiktok.extended.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.lgwebos.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.roku.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.vivo.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.oppo-realme.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/domains/native.xiaomi.txt

The corresponding GitHub and GitLab RAW links will no longer work/will be dead as of August 1, 2026.

Hosts:

https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/light.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/light-compressed.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/multi.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/multi-compressed.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/pro.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/pro-compressed.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/pro.plus.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/pro.plus-compressed.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/ultimate.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/ultimate-compressed.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/tif.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/tif-compressed.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/doh.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/doh-compressed.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.amazon.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.apple.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.huawei.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.winoffice.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.samsung.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.tiktok.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.tiktok.extended.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.lgwebos.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.roku.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.vivo.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.oppo-realme.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/native.xiaomi.txt

The corresponding GitHub and GitLab RAW links will no longer work/will be dead as of August 1, 2026.

[ghost]

hagezi/dns-blocklists/main/hosts/doh.txt
hagezi/dns-blocklists/main/hosts/pro.plus.txt
hagezi/dns-blocklists/main/hosts/tif.txt

What's the alternative for above 3? Stevenblack's hosts? https://github.com/StevenBlack/hosts

[hagezi]

The alternative is to replace rigid host/subdomain lists with a modern blocker that supports wildcard matching.

[ghost]

@hagezi

The resulting lists become very large

• analytics.004gmbh.de: 0 length
• hosts/pro.plus.txt: just 0.0.0.0 analytics.004gmbh.de (+8 length)
• dnsmasq/pro.plus.txt: local=/analytics.004gmbh.de/ (+8 length)
• rpz/pro.plus.txt: analytics.004gmbh.de CNAME . and *.analytics.004gmbh.de CNAME . (+39 length!)

Clearly RPZ is bigger than dnsmasq or hosts so why not remove RPZ?

Also the length of hosts and dnsmasq are identical.

[hagezi]

Why isn’t RPZ being removed? Because you haven’t understood why the ‘hosts’ and ‘subdomain’ formats are no longer being maintained and only wildcard compatible formats - where the root domain on the list blocks all possible subdomains - are being maintained. RPZ is a wildcard format.