Option to block recently created domains (DGA)

[slawa]

Finally this is possible with CloudFlare Teams and it is free!

You just have to point your Pi-hole to the CloudFlare Teams DNS.

[jfb]

And in exchange, Cloudflare teams wants you to register with them. I would pass on that once-in-a-lifetime opportunity.

[DanSchaper]

@slawa

You just have to point your Pi-hole to the CloudFlare Teams DNS.

[slawa]

I am all ears to other solutions than can do that! Please name them.

[DanSchaper]

Do what? Capitalize on your personal information, make money selling you? Not sure why you'd want that...

[slawa]

@DanSchaper

Do what?

Option to block recently created domains like the thread title says.

[DanSchaper]

NextDNS?

[slawa]

Yes, it was mentioned before

Option to block recently created domains (DGA)

Nextdns.io has introduced a very useful function to fight Phishing and Malware: the blocking of domains registered for less than 30 days. New domains are often used to spread Phishing or Malware in Ad Hoc campaigns. I think this function is very useful, I would also like to see it on Pi-Hole. Thanks

US$19.90/year for unlimited queries

[DanSchaper]

I'd trust them vastly more than ClownFlare.

[slawa]

Hopefully more providers will add this feature and we can use the one we trust the most.
At the moment the choices are limited.

Doing it in Pi-hole is not possible.

[DanSchaper]

@slawa

At the moment the choices are limited.

Because it's useless. A topic covered in previous posts in this thread.

[slawa]

People have different requirements.

Blocking recently created domains will help me not to waste time and manually block new ad domains every week.
Some sites use up to 5 new domains to push ads and register new domains frequently.

By the time those are added to some lists they already moved on to other domains.

Browser extensions can help, but those are not available on some mobile devices.

---

replying here as I can not reply to next post:

@DanSchaper

What you linked to at CrapFare is not DGA.

How so? All new domains will be blocked also those made by DGAs.

The problem comes from the reaction time when a domain is created to being recognized as malicious/ads and then added to some of the public lists. Blocking newly created domains will bridge that time.
I think that is helpful but obviously has downsides (CloudFlare with tracking or NextDNS has cost and some new legit domains will be unavailable for some time).

[DanSchaper]

@slawa

Blocking recently created domains will help me not to waste time and manually block new ad domains every week.

Maybe not, you'll just spend time unblocking the false positives. Or, more likely, you'll never see any of the newly created domain names so you'll just feel like it's working.

By the by, DGA's are not being used in the manner you suggest. Newly created domains and DGA created domains are two completely separate things. What you linked to at CrapFare is not DGA.

[DanSchaper]

Moved to Out Of Scope.