adguard-warp-blocklist/AdGuard Home custom blocklist at main · Jeryken/adguard-warp-blocklist · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
! AdGuard Home custom blocklist to disrupt Cloudflare 1.1.1.1/WARP
! Generated: 2025-08-10 12:17:24
! Scope: Blocks domains used by WARP client for orchestration, connectivity checks, DNS (DoH/DoT), and Zero Trust.
! Limitation: DNS-level only. WARP can still connect via hardcoded IPs. For complete blocking, block IP ranges 162.159.193.0/24 and 162.159.197.0/24 and UDP ports 2408/443 (+ fallbacks) on your router/firewall.

! --- Core WARP client domains (orchestration, connectivity checks) ---
||cloudflareclient.com^
||zero-trust-client.cloudflareclient.com^
||engage.cloudflareclient.com^
||connectivity.cloudflareclient.com^

! --- Zero Trust / Access auth endpoint (login) ---
||cloudflareaccess.com^

! --- Cloudflare Gateway DoH (Zero Trust DNS) ---
||cloudflare-gateway.com^

! --- Cloudflare 1.1.1.1 DNS endpoints (DoH/DoT and variants) ---
||cloudflare-dns.com^
||one.one.one.one^
||1dot1dot1dot1.cloudflare-dns.com^
||security.cloudflare-dns.com^
||family.cloudflare-dns.com^

! --- Optional telemetry / reporting (uncomment to block) ---
!||a.nel.cloudflare.com^
!||time.cloudflare.com^

! --- Optional captive portal/check domains used by WARP and OS ---
! NOTE: Blocking these may cause OS to show 'No Internet' or break captive portal login pages.
!||cloudflareportal.com^
!||cloudflareok.com^
!||cloudflarecp.com^
!||www.msftconnecttest.com^
!||captive.apple.com^
!||connectivitycheck.gstatic.com^