yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
Technical Details

Public available DNS:

Take a look at this thread:

https://xdaforums.com/showpost.php?p=73985083&postcount=6

Background System:

The current system needs 42 Server (!) in the Background that everything is working.

Actually the entire infrastructure is hosted on 5 different providers.

How does it work?

The entire System works with several Servers. Ubuntu, FreeBSD 11 and my own build Operation System based on UNIX is installed. The entire developement and all source codes are not public available. There is more than 14 yrs of work inside.

Current Blacklist size:

39.585.224 Domains (export to TXT)

Current Virus/Ransomware Blacklist size:

18.853.587 Domains (export to TXT)

Current Blacklist contains:

Tracker, Malware, Spyware, Adware, Advertising, Poison Websites Fake Software (Adobe Flash Updates which is in real Malware/Virus) & a few false/positive Sites.

To cover all HTTPS errors because a lot of Advertising Vendors display and spread this crap via https to the world I have created the keweon Root Certificate. Allmost every Malware and Spyware will be installed via HTTPS. The Root Certificate is only responsible to suppress all https error messages for all this Advertising and poison things.

Which Systems are working and acting with keweon?

The keweon System is tested on almost every Operation System and Devices (iOS, Android, Xbox, Playstation, Samsung TV, etc... ) It's currently running within 3 companies because I know the Admins there. You can use it within you private environment but please DO NOT USE it within a Business environment.

Why I can't use it within a Business environment?

There are 2 reasons for it.

1. I want that the entire system becomes free for private and personal usage and I already have requests from Companies and even from the Public Sector that they are interested about to use the System. As long as there are too many error within the System I don't have the option to sell this as an Business solution. That's the deal.

2. Private for free, Business needs to license it. Of cause, the current system needs to be a bigger and stable system..

Does my traffic runs trough the keweon System?

Not even one byte from you or your device will flows through my servers. Also the same with the HTTPS things. Take a sniffer or wireshark or NirSoft Network Suites and you will be surprised. All HTTPS Ads traffic will be terminated with "0" bytes which will show to you that there is no sniffing or spying from my side.

It would not make any sense that I drop all this crap traffic, blame to the advertising Industrie and I do exactly this things which I want to prevent?

Btw... This fact was also the problem why I have had no success with investors. They want that I enable data sniffing or user sniffing but I would rather throw away the entire system & developement than doing what they want.
[Android Software/Hacking General [Developers Only]] MrT69:
Important Links

Website:

http://www.keweon.de and http://www.keweon.com

Forum (in progress)

http://forum.keweon.com

http://board.keweon.com

http://forum.keweon.de

http://board.keweon.de

App URLs:

Android Apps:

Frostnerd (Daniel's) DNS Changer App​

Frostnerd (Daniel's) DoT and DoH (DNS over TLS and HTTPS) App (under developement)​

iPhone and other iOS devices Apps:

AppStore App - Free of charge DoH changer App​

keweon Root Certificate

http://pki.keweon.center​

For Windows Systeme (MSI File) The certificate is working for IE, Edge, Opera, Chrome which has no own certificate storage.​

MSI within a ZIP file​

For Android and iOS devices, also for Firefox and Mozilla Browser (just visit the site with the Browser)​

Certificate within a ZIP file​

For Admins to use it within Active Directory as REG file​

REG within a ZIP file​

If you want to have a "AllInOne Package" use this link please​

Additional Links

Change DNS Settings on DD-WRT with DNSMASQ within the right way​

How to set Firefox DoH Settings​

keweonDNS for Windows

Download the QuickSetDNS from NIRSOFT and use it on Windows to change your DNS settings.

Currently it's only working with IPv4. Link to NirSoft is HERE

Use the QuickSetDNS config to add all DNS servers and choose your favorite DNS Server. Unzip the file, copy it into the directory where you have extracted the download.

If you have any recommendations about additional links, let me know!
[Android Software/Hacking General [Developers Only]] MrT69:
keweonDNS & installation Information

ALL keweonDNS Servers:

Version: DoT Server - DNS over TLS (updated 03/21/2019)

Used Certificate: Let'sEncrypt Certificate

Server Address: dot.asecdns.com

Port: 853 & 443

IP Addresses:

dot.asecdns.com (159.69.48.240 - HETTNER RZ Falkenstein)

dot.asecdns.com (116.203.117.199 - HETTNER RZ Nuernberg)

dot.asecdns.com (95.216.192.253 - HETTNER RZ Helsinki)

dot.asecdns.com (2a01:4f8:1c17:6e44::240 - HETTNER RZ Falkenstein)

dot.asecdns.com (2a01:4f8:c2c:491::199 - HETTNER RZ Nuernberg)

dot.asecdns.com (2a01:4f9:c010:3071::253 - HETTNER RZ Helsinki)

Version: DoH Server - DNS over HTTPS (updated 03/21/2019)

Used Certificate: Let'sEncrypt Certificate

Server Address: doh.asecdns.com/nebulo

Port: 443

IP Addresses:

doh.asecdns.com (159.69.49.250 - HETTNER RZ Falkenstein)

doh.asecdns.com (116.203.126.207 - HETTNER RZ Nuernberg)

doh.asecdns.com (95.216.165.29 - HETTNER RZ Helsinki)

doh.asecdns.com (2a01:4f8:1c17:6fc7::250 - HETTNER RZ Falkenstein)

doh.asecdns.com (2a01:4f8:c2c:e25::207 - HETTNER RZ Nuernberg)

doh.asecdns.com (2a01:4f9:c010:1cbd::29 - HETTNER RZ Helsinki)

Version: keweonDNS v.6.80.280.LL (updated 03/21/2019)

Australia / Sidney: (vServer)

k1ns-au-001.keweon.center

45.76.125.130

2001:19f0:5801:b45::130

France / Paris: (vServer)

k1ns-fr-001.keweon.center

45.77.62.37

2001:19f0:6801:95e::37

Germany / Frankfurt (vServer)

k1ns-de-001.keweon.center

104.207.131.11

2001:19f0:6c01:61f::11

India / Bangalore (vServer)

k1ns-in-001.keweon.center

IPv4: 139.59.33.236

IPv6: 2400:6180:100:d0::30d:5001

Japan / Tokio (vServer)

k1ns-jp-001.keweon.center

45.77.25.72

2001:19f0:7001:22a8::72

Netherland / Amsterdam (vServer)

k1ns-nl-001.keweon.center

45.77.138.206

2001:19f0:5001:d8d::206

Singapore / Singapore: (vServer)

k1ns-sp-001.keweon.center

45.76.151.221

2001:19f0:4400:4f31::221

UK / London (vServer)

k1ns-lon-001.keweon.center

45.32.183.39

2001:19f0:7402:a61::39

USA / Dallas (vServer)

k1ns-tx-001.keweon.center

45.76.57.41

2001:19f0:6401:9ed::41

USA / New Jersey (vServer)

k1ns-ny-001.keweon.center

45.77.144.132

2001:19f0:5:2962::132

USA / Silicon Valley (vServer)

k1ns-sv-001.keweon.center

45.32.140.26

2001:19f0:ac01:639::26

Physical Instance:

Germany / Falkenstein

k1-de-058-fsn.keweon.center (Physical)

176.9.62.58

2a01:4f8:150:8023::58

and

176.9.62.62

2a01:4f8:150:8023::62

DNS Server to use with keweon Adblock Root Certificate:

This Servers block in addition:

- pixel.facebook.com

- Amazon data collection and advertising

- more things which are normally not possible will coming soon step by step

Germany / Nuernberg

k1-de-143-nbg.keweon.center (Physical)

213.239.207.143

2a01:4f8:a0:8487::143

USA / Dallas - Texas

k1-ns2-us02.keweon.center (vServer)

107.191.55.215

2001:19f0:6401:175d::215

(Updated at 21. March 2019)
[Android Software/Hacking General [Developers Only]] dalepothen:
Works like a charm better than adaway just download a dns app just have to change the dns then your done
[Android Software/Hacking General [Developers Only]] Deleted member 5451494:
Works like a charm. Thank you. Is there any difference between this and using VPN-based adblocking apps? (importing our own blacklists into it)
[Android Software/Hacking General [Developers Only]] MrT69:
This should be no Problem. But if you are using with the VPN App a different DNS Server than my system might not longer work. No clue about your VPN & DNS settings.

Please keep in mind, the last DNS Server rules. If you set my DNS Server and than u run a VPN App with a different DNS Server u will "overwrite" my DNS Server settings.

From the blacklist itself that should fit. Haven't had this bevor. ?

Send me PM if you have further questions.

Anyway, thanks a lot.
[Android Software/Hacking General [Developers Only]] MrT69:
UPDATE:

The current Infrastructure will be upgraded to 10 GBit (!) DNS Server power and much more faster system.

Please notice that the DNS Server addresses will change during the next weeks.

After this upgrade you can spread the system to all of your friends.

Thanks a lot & more will comming soon on the website

...which is currently still under developement...
[Android Software/Hacking General [Developers Only]] levone1:
Working well, but I get 'invalid security certificate' error popup on most pages. Any way to eliminate?
[Android Software/Hacking General [Developers Only]] MrT69:
If this URLs are wrong within the blacklist, do me a favor and send them to me to whitelist them.

Copy the URLs from the Browser into a TXT file and send this to. Keep in mind only attachments will arrive. It will help not if you type the addresses or URLs within the mail Body.

whitelist@keweon.center

Doesn't matters if you send 100 Mails per Day because the will automatically processed during the night.

I'm happy for every wrong listed URL. Million thanks in advance for your feedback.

If this is affecting websites which are not false positive than you need to wait a few days. Currently I'm working to terminate all https crap from the advertising side. But therefore it is a must to have the keweon Root Certificate installed. Right now I need to terminate every https error manually.

It is incredible how many poison sites work with HTTPS so it was a need to develope a different solution than doing this always manually. The server installation is in progress but first I need to finalize the tests. Should be done until next weekend.
[Android Software/Hacking General [Developers Only]] levone1:
I like this concept and want to keep testing. Here's my issue - for some reason, activating design change causes very slow loading speed. Same on WiFi or mobile. I have entries active for ipv4 and ipv6. For ipv4, the first set of numbers in post 2 won't work. Dns changer shows red line in entry field, (bad numbers). So, I'm using the second set, (starts with 51.254...). For ipv6, I'm using the first set. They work fine, but cause it to take 10-20 seconds to load a page. It seems like it gets better the more I browse, but still will take 5-10 seconds to load just about any page, and when I open up dns changer and hit 'stop', it is automatically faster, no more lag.

I wondered at first if it was a conflict with other tweaks and mods, (I have build prop tweaks, and AFWall app, etc), so I undid everything and tried again, but the same. I use Naked Browser almost exclusively, but tested with AOSP browser also, and no different.

Any ideas? Thanks
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot for the feedback.

The problem is related to the latency of my current VPS. That was one of the main reason why I would need to find an Investor. The entire system needs to be run from a physical Host but this will need an Invest for 200.000 Euro per year. 20 GBit Server located within 16 Countries world wide. Would be so cute but they wanted that I collect data from users to sell this. I guess you can imagine what my answers was to this stupid idea.

Anyway... I guess I have an idea. First at all, which county/city you are located? If you don't want to make this public send me a short PM.

Thanks a lot for your support. I'm pretty sure I will find a solution ?

Btw... Anyone else with this problem? Send a short PM with your Country/City.
[Android Software/Hacking General [Developers Only]] Ksathral:
Thank you very much, it works very well.

I do have a small delay from 5 up to 15 seconds on an initial connection but after the webpage is loaded there is no more delay and often faster than without the dns.

For me its not a big issue, I did pm you with my country and city in case it may be if help for you.
[Android Software/Hacking General [Developers Only]] MrT69:
MILLION TIMES THANKS TO ALL OF YOU

FOR YOUR SUPPORT & TRUST INTO KEWEON​

Today I received the first f/p blacklist settings and this will be in place tomorrow morning 03:00 AM GMT +1 (German Time). Good to see that the system is in use.

With the help and testing from a view users it seems the current DNS Servers are to slow. I will change the public front end infrastructure. I will anounce this bevore to prevent interruption.

But keep in mind!

I'M NOT GOOGLE OR ANY OTHER DNS PROVIDER WITH A BILLION EURO BUDGET!

Unfortunately I don't have the money to do what I want but I guess this is anyway the best solution which is currently available. I need to host everything on VPS which is from the technical point of view not the best solution because of a high latency. I'm working on this, still think about Investor or Crowdfunding or anthing like this. But first at all I want to have a usable system and a pretty website in place.

That will finally mean that the launch of the website is still in progress - sorry folks - but I guess it is more important that the system will be fast as possible and stable.

OFFER:

If someone of you is interested to take over the responsiblity/administration of the keweon forum - let me know. I'm fine with nearly 8 programming languages but this phpBB3 Board drives me crazy. This is not my world. I appreciate every help and support. My english is not longer the best and my wife would kill me if I would do this also because the technical support of the system needs already a lot of time.

Contact me via PM if you are interested.

MILLION TIMES THANKS AGAIN!​
[Android Software/Hacking General [Developers Only]] MrT69:
New & faster Servers are online. Feel so free to use it, test it, share it to your friends and wherever you want.

Click here for current DNS Server List

Please test each of the server. Someone from US reportet that UK and NL DNS Server has a damn good performance within USA.

If someone of you have contact to ASIA please let me know what's about the Japan DNS Server.

@Rom DEVS

If you are interested to add the keweon Certificate by default to your ROM you're welcome.

This has the advantage that there is no need to assign a PIN to the device if you place the Certificate by default into the Certificate Store.

Btw, the website is already in progress and I hope you will visit it when it's done. ;)
[Android Software/Hacking General [Developers Only]] bond32:
Really excited about this.

Looking into ways to change the dns on Android with root access, any ideas?
[Android Software/Hacking General [Developers Only]] MrT69:
Use this App. No Root required. The app is a fake VPN App.

This will mean it will also work in 3G/LTE Mode and it's Open Source available at Git Hub.

Not my App. But I also use this outside.

https://play.google.com/store/apps/details?id=com.frostnerd.dnschanger

Enjoy it!
[Android Software/Hacking General [Developers Only]] problemathic:
Done bro. using now the dns server means im good to go now? this feeling of secured :) thank you for the awesome update.
[Android Software/Hacking General [Developers Only]] MrT69:
And don't forget a lot of users will not use my DNS Servers. Either they don't trust me or to many false/positiv Sites are blocked.

On the one hand it's a bad thing, on the other it's good because if really everyone would use them I guess the server will break down and I'm still searching for errors to prevent as much as possible false positiv within the live database.

As soon as I have the funding from Amazon I will set a different blacklist database online ;)

Until this time I hope some users find this info usefull and use the blacklists even when they are only "hosts" files.
[Android Software/Hacking General [Developers Only]] problemathic:
no need to add those in my host file? since im using youre dns server bro?
[Android Software/Hacking General [Developers Only]] MrT69:
Exactly. I'm doing a daily reboot at and during this reboot all updates will be in place.

At 4:00 AM GMT+1 everything is in place and replicated.
[Android Software/Hacking General [Developers Only]] MrT69:
Dallas Network outage at

26th January

https://www.vultr.com/status/#dfw

Event Type: Network Upgrade

Start Time: 2018-01-26 11:30:00 UTC

End Time: 2018-01-26 12:30:00 UTC

​
[Android Software/Hacking General [Developers Only]] JohnFawkes:
is there any way to use this and dnscrypt on android? i have dnscrypt fully working but the dns needs to be set as loopback 127.0.0.1 to work
[Android Software/Hacking General [Developers Only]] MrT69:
I will try this to setup. I still have one Server spare and a good reason to fully test dnscrypt.

With 1GB RAM and one Core I will give no warranty that this will work as expected. If you kindly agree to this I will use you as Beta tester.

Don't expect to much. I only need your current location. PM me please to find the best server location for this. ?
[Android Software/Hacking General [Developers Only]] bhaskarjy0ti:
Are you using dnscrypt in android ?
[Android Software/Hacking General [Developers Only]] JohnFawkes:
ummmm yes...
[Android Software/Hacking General [Developers Only]] MrT69:
If it's running it would be a valid confirmation that everything is really running on 100% DNS. I have had enough investors who was telling me that this is a Proxy solution.

What a nonsense...
[Android Software/Hacking General [Developers Only]] MrT69:
Database upgrade in place

Last night I have moved a new Database to the current system. I have tested it during the last 2 Months and also my 3 testing companies here in Germany.

In addition I have cleaned it and round about 11.5 Million Domains removed.

The current blacklist database contains now 46.8 Million entries. The current Antivirus Database contains 23.2 Million entries.

Enjoy it. Test it. Feedback please.

Have a nice weekend & and may the adfree be with you...
[Android Software/Hacking General [Developers Only]] problemathic:
Thank you bro. Nice an update again.
[Android Software/Hacking General [Developers Only]] MrT69:
YOUTUBE SERVS CRYPTOMINING ADS:

A lot of people asking me why I'm doing this. I'm doing it because I guess it's time to tell the advertising Industrie enough is enough.

There are million of reason why I'm so hard against any advertising within the Internet. Either they collect data about you and your devices or they give a sh*it on your privacy or the just simply try to cheat you.

But sometimes there are other reasons and let me show you now how they abuse advertising.

https://arstechnica.com/information...-ads-with-cpu-draining-cryptocurrency-miners/

As long as they believe they can do what they want as long as this I will do everything against them to prevent this.
[Android Software/Hacking General [Developers Only]] problemathic:
thanks for the info bro. glad i learned about this.
[Android Software/Hacking General [Developers Only]] MrT69:
DNSCRYPT will not work with my environment and I don't want to take OpenDNS as forward Server. Now I remember why I was not interested to use DNSCRYPT. Btw, DNSCRYPT is unfortunately not working on Android.

What's about DNSSEC? I can offer you DNS via TLS for testing (SSL DNS via Port 853). But I can do it only with my Root Certificate because everything else will cost money.

It's a good idea to test it because I still hope for Amazon funding. If they will support me than I guess I will think about to install a view more server for this. Currently I have no clue what's about the CPU and RAM requirements.

With your kindly permissions I would like to enable logging on the server. Not to track you. I just want to see how many CPU and RAM is required. As far as I have calculated it seems 2000 to 2500 Users will be OK for one of my Servers.

If this would be OK than let me know.
[Android Software/Hacking General [Developers Only]] JohnFawkes:
i can help you test dessec but i have dnscrypt working with my htc 10. i use the module in the magisk repo and i have amthe universal init.d support app from play store to force the dnscrypt init.d script to run at boot. but anyway yes you can enable logging and i can help test dnssec
[Android Software/Hacking General [Developers Only]] MrT69:
I know what you want but I have currently no clue what OpenDNS is doing with this proxy. If I would know how the dnscrypt-proxy communicate with the DNS Server that would be a nice thing. But I'm pretty sure that I will see this after a view tests. If I know this, I also know what they are doing and this would mean that you can use keweonDNS with DNSCrypt-Proxy. As I have had started the entire project as an Online solution I was playing around with some things but it's 4 yrs ago that I have had a deeper look with DNSSEC and DNS ENCRYPTION. But it might be a good idea to take again a deeper look inside this things.

If anyone here as some informations than let me know this. Everything would help.

EDIT:

I got it!!!!! Oh damn... It's just "SSL DNS" via 443 instead of port 853. I guess this would become now a funny game. :P
[Android Software/Hacking General [Developers Only]] JohnFawkes:
so you might be able to implement dnscrypt on your server? it be awesome if we could get dnscrypt and dnssec implemented on keweon to have a sort of all in one solution by just using your server
[Android Software/Hacking General [Developers Only]] MrT69:
I only have seen it how it's working. That's not a big thing.

But we need to do it step by step because I need to understand why and where errors might happens.

On the other hand this DNSSEC and CRYPT thing will need a lot of CPU's and RAM. DNS are smal packages but each of them will get it's own SSL session. Right now I have no clue about the required resources but for you (and for a few others who are interested) it should be not a problem.

For public access as like as the other servers my budget is definitly to smal for this. ;)

I'll let you know when it's done and latest on Saturday it should work.
[Android Software/Hacking General [Developers Only]] erayrafet:
[MENTION=304818]MrT69[/MENTION] Hey!

Google drive isn't working with London DNS server and I'm also getting invalid certificate notifications from Lightning browser.

https://play.google.com/store/apps/details?id=acr.browser.barebones
[Android Software/Hacking General [Developers Only]] MrT69:
Exactly. The Certificate is only working in combination with KeweonDNS only on HTTPS.

It's just there to remove or surpress all the https errors which are caused by Adblocking. This will prevent visible and non visible errors and because of this it will speed up in addition your device, your Internet and also downloads.
[Android Software/Hacking General [Developers Only]] :
Thanks. I successfully got the certificate installed for my new browser and the https i.hate.ads is working again.
[Android Software/Hacking General [Developers Only]] AntonVermeulen:
Yes use Smokescreen. Apk Ask mrT69 how to get it. It is still in Alpha testing but working brilliantly. No logs and no tracking
[Android Software/Hacking General [Developers Only]] surya790:
There's this interesting phenomenon I've noticed (there's a chance that this happening only to me but I have no idea)

I'm using keweon DoH along with the certificate.

99% of all YouTube videos work but there are a small number of them that don't play on the YouTube app but work on Chrome.

An example is [youtube]XdRxmCvWZgs[/youtube]

I use the vanced YouTube app
[Android Software/Hacking General [Developers Only]] Cfibel:
I have exactly the same, but I did not pay attention to it, because I rarely watch youtube.
[Android Software/Hacking General [Developers Only]] cahdawe:
I can't access Line Webtoon app. It only shows loading screen.

The app will go normal if i turn off the dns.
[Android Software/Hacking General [Developers Only]] MrT69:
Please send a link for the App. ?