[DEV] keweon - AdBlocker (RC1 Edition) [Project disruption]

keweonDNS

THE FIRST ADBLOCKER WORLDWIDE
WHICH RUNS ON

EVERY OPERATION SYSTEM
EVERY BROWSER
EVERY SYSTEM

without any Software Installation

Tested & working on:

WinXP to Win10 - Windows Mobile - Linux - UNIX - Android - iPhone - iPad - MacOS - BeOS - BLACKBERRY - JavaOS - XBOX - PLAYSTATION - APPLE WATCH - WebOS - Microsoft EDGE - RASBERRY - NAS DEVICES - SmartTV's​

​

Click to expand...

Click to collapse

I'm proud to present a brand new ad-block and security solution. I hope to find some supporter here to check, test and optimize the system.
The name of this system is keweon which is a short form from the German words "keine werbung online". Translated to English this would be "no advertising online"

Unfortunately every online presence is within German language because my English is not longer the best.

The idea and very first solution was born in year 2003. In the year 2013 I decided to launch the system as an online based system and we have tested this system almost on every device. AdBlocking is just only one of the many features but at the moment it's only important if the black and white lists are usable and what to change.

keweon is also the only adblock solution world wide which is not possible to block. If you find a web page where you receive the message "Blocked because you are using an adblocker" let me know this link here or post it on our facebook page and we will change this.

Now it's up to you to decide what you want to think about it.


How can you use it?

The big advantage is that you don't need to install any software. Just point your device to the keweonDNS Server and - that's it!
You can use it on your device or on your SOHO Router or you can use it just on your PC to test and see how does it work.
It's working on EVERY operation system, on EVERY device. Even on IPhone, PlayStation, XBOX and if you want it will even run on the Apple Watch.

Here are the keweonDNS Server list and where they are located:

DNS Server IPv4

GERMANY 01 (*) 46.101.208.121
GERMANY 02 (**) 46.101.187.194
UNITED KINGDOM 01 (*) 178.62.117.240
USA - Dallas (TX) (**) 45.32.198.153

DNS Server IPv6

GERMANY 01 (*) 2a03:b0c0:3:d0::3c:7001
GERMANY 02 (**) 2a03:b0c0:3:d0::b0:8001
UNITED KINGDOM 01 (*) 2a03:b0c0:1:d0::28:8001
USA - Dallas (TX) (**) 2001:19f0:6400:8945:5400:00ff:fe17:5dba

(*) = only available for Germany, Austria, Switzerland and Liechtenstein
(**) = global available

Our DNS Server are not pointing to Google server at the other end. We want to have a clean DNS solution. The DNS servers points to root-server.net infrastructure only.
This might cause some troubles e.g. with MarkMonitor URL's and Domains. I don't care because this company is anyway block at 99,999% via keweonDNS


HTTPS Advertising - no more chance

This is also a big advantage that keweon is able to cover also this crap. We know the current solution is not the best but it is the cheapest.
If you want get rid of the HTTPS advertising error message than you need to install the keweon Adblock Root Certificate on your Computer or on your device.
I know that there are better solutions but the problem is that keweon is currently just a hobby and to buy a public certificate and spending 800 Euro just for fun would be a big financial pain.
You don't need the certificate to use the keweon Adblock but if you want to get rid of the https nags you need to use is.

Browser example without keweon Root Certificate:

Browser example with keweon Root Certificate:

If you want to see what is inside this certificate than browse to the keweon HTTPS Sniper Server and take a look inside the SSL Certificate. You can see what URL's we will take over for ad-blocking reason.

How does keweonDNS work?

It's not a big secret because EVERYTHING is working on 100% pure native DNS technologies. The only thing you need is a FreeBSD Server, a LINUX Server and - YES, it is REQUIRED - a Windows Server. You need to build your own operation system based on UNIX and some special kernel things.
That's all!

I also have had a contact to a big AdBlock Company and the CEO still think this solution is a Proxy solution. I don't want to make a big discussion but keweon is running on 100% native DNS.

The only exception for this is currently YouTube. We have unlocked YouTube that you will not longer get stupid messages "Is blocked because...".
In non other country of the world are more Videos blocked than in Germany. Don't ask for the secret of the YouTube solution. It's working and we will not send the traffic over the keweon systems. That's the reason why we can offer this solution to nearly half a million users.

Check this and see:
https://apps.opendatacity.de/gema-vs-youtube/en/

Currently we have the problem that YouTube unblocker will not run 100% on iOS devices. If you want to see EVERY Video you need to uninstall the YouTube App from your device and watch the videos within the browser.

Therefore I would need additional help to sort out where the hell this app will take the GEO location information's. At the moment it seems it will use the iOS API for this but my knowledge about the iOS API is very limited.


Here are the important links:

On Facebook: https://www.facebook.com/keweonNetwork
On Twitter: https://www.twitter.com/keweonNetwork

Because of legal reason the web site is still offline. One little error on the page could cost a lot of money in Germany.
The Web: http://www.keweon.de

The keweon Root Certificate.
Keep in mind it is not required to use the certificate. If you want to get rid of the HTTPS error messages u can use it but for the basic Ad-blocking it is NOT REQUIRED.

Here is the list of the current entries within our certificate. You can double check this within our HTTPS sniper server: https://adblock.keweon.center

http://forum.keweon.de/viewtopic.php?f=9&t=8

For Windows Systeme (MSI File)
The certificate is working for IE, Edge and Chrome Browser.
http://pki.keweon.center/certs/keweonAdBlockCertificate.msi

MSI within a ZIP file:
http://pki.keweon.center/certs/keweonAdBlockCertificate-MSI.zip

For Android and iOS devices, also for Firefox and Mozilla Browser:
http://pki.keweon.center/certs/keweonAdBlockCertificate.crt

CRT within a ZIP file:
http://pki.keweon.center/certs/keweonAdBlockCertificate-CRT.zip

For Admins to use it within Active Directory as REG file:
http://pki.keweon.center/certs/keweonAdblockCertificate.reg

REG within a ZIP file:
http://pki.keweon.center/certs/keweonAdblockCertificate-REG.zip

If you want to have a "AllInOne Package" use this link please:
http://pki.keweon.center/certs/keweonAdblockCertificate.zip


What will this cost?

It will cost nothing. You can use it where ever you want to use it.

Why it's free?
Because we can do it.
We are unknown.
We don't know what you think about this solution.

That's the reason why this will be free of charge. But keep in mind that this system is only a demo system because we don't have the money to do what we want to do.

The only thing what we expect:
Like, Share and Promote us here by XDA (hit the Thanks Button), on Facebook and Twitter. That's all we want to have from you.


And now?

Now it's your turn.
Read it, use it and decide if you want to have the Internet in a newer Version. Take a look and see.

Hope you enjoy it!

How you can support keweon?

If you have found an address which is blocked that needs to be unblocked or if you have found additional critical address then just send this via email.
At the moment we need to cross check everything manually but we hope that we can automated this process within a few weeks. For this it is important how you send the email. Let's give a short example.


BLACKLIST EXAMPLE:

You have found the URL www.ads-terror.com. But this address is a Popup from the site www.cool-site.com
Now create a text file as like as a hosts file and add the bad URL. Use the Hash sign (#) to seperate the comment. As comment you should use the source URL where you have found the Popup.

www.ads-terror.com # www.cool-site.com

If you have found a malware site or address or something like the "Flashplayer Update" which is in real a malware or spyware trash than comment this with what it is. Just one or two words that we know what it is. You can also combine this or write a few more words. It's up to you.

www.ads-terror.com # fake flashplayer


WHITELIST EXAMPLE:

We know that 7 million entries will not be 100% safe and clean. So don't worry, if you find an address which is blocked which should be not blocked than let's whitelist this.
Also write this into a TXT File and comment this with some self spelling infos that we know why.

bit.ly # Twitter URL shortener

That's all. Please don't send any screenshot or PDF or anything else than a TXT file. Keep in mind that we only will work with the attachments. It does not make sence to send the information within the email body. Whatever you write in the mail this will be ignored because this is an half automated process.




Where to send?

It's easy.
If you have an request and attachment for white listing send this to:

whitelist@keweon.center

If you have an request and attachment for black listing send this to:

blacklist@keweon.center




Anything else?

Yes. If you have seen a website where you will receive the Message "this website is blocked because you are using an adblocker" than we also want this to know.
Sometimes it will take a few hours, sometimes this can take up to 3 days until whe are able to break this. But we keep you updated on twitter if we are able to remove this crap.
If you have found an address please copy this address also into a TXT file and send this to:

adblocking@keweon.center

A few of our blocked URL's might cause some HTTPS errors. For this we have the Root Certificate and because of this we are able to manage this errors within a few minutes.
If you are using the keweon Adblock Root Certificate and find an error on a web page than make a screenshot OR send a TXT file with the URL.
We will double check this and if we see that this address needs to be placed in our HTTPS certficate we will do this. If something wents wrong we will remove this address from our blacklist.
If you see or find an error within the HTTPS certificate than we also need this to know. Send the screenshot or the TXT file to this address and we will take action.

https-error@keweon.center




Update of white and black lists

Currently we have a job, we have family and we can not offer 24x7 support for this. This system is just a damn small system, it's a hobby and this update procedure can cause a timeout for round about 60 sec. when we do an update on our DNS Servers. We know how to solve this but we don't have the money currently for this.

This update has only impact to NEW site and URL requests.

If you are playing an online game, stay on facebook or doing work on the same site you will see no interruption. If you do a new site request and you will see that this request runs into a time out take a smoke or move away for a new cup of coffee.


I hope you enjoy this and if you have any recommendations please let me know this.

What is keweonDNS?

keweonDNS is more than just a simple adblocker system. keweon is a solution which offers a lot of cute things.

• privacy Protection
• protection by Virus and Trojan infection (prevent the download of additional files)
• protection against spying (blocking the source address)
• Internet without Ads and Popups
• real time online ad-blocking
• domain address based
• working with ipv4 and ipv6
• tracking protection
• malware protection
• spyware protection
• trojan protection
• fake security filter
• fake software filter
• phishing protection
• advantage because of all of this: up to 50% faster internet on all devices

We also have found a solution where we are able to block even IP Addresses and filter single websites or a picture. But currently it is to expensive to release this for public usage.




We need your support!

The keweonDNS phishing protection is a beta solution at the moment because we have the idea. We know what to do. We know where to do.
But we have no email with a phishing address or URL. We hope someone of you is able to support us and send us a few URL's.

If you receive a phishing mail than copy the content of the mail into a TXT file. Please make sure that you will copy the PHISHING address into this TXT file and then send the TXT file as attachment to:

phishing@keweon.center

!!! ATTENTION !!!
IF YOU DON'T KNOW WHAT TO DO - NEVER CLICK ON A LINK WITHIN A PHISHING MAIL.
ASK A FRIEND OF YOU OR SOMEONE WHO KNOWS WHAT TO DO!
​

Click to expand...

Click to collapse

​

If you are not sure than you can forward and send the complete mail to us. Please send this mail to:

phishing@keweon.center

The problem is that our mail provider might filter this mail. That is the reason why we are asking for the source and destination address within a text file.
It will not help if you only send a screenshot because the LINK and the LINK REFERENCE are completely different. It's also an idea if you are able to save the message and send the message as ZIP file.
If we have this mail we will take action and prevent phishing attacks when you are using the keweonDNS Servers.

Currently we have not a real solution how you can send the information's within a secure way. You can do what you want as long as you are safe and can make sure that you will be not infected.



If you have any idea how to send the complete mail your welcome to keep us informed.

It seems no one is using this System because of my self signed Root Certificate.
I want to get rid of the Certificate installation.

Does someone know if there are some provider who offers free public web server certificates?
Currently I only know Comondo.

Thanks in advance!

(2015/12/11 - 12:15) EDIT:

Click to expand...

Click to collapse

We have done a Certificate request with public domains entries within the SAN field.
After this the certificate request was catched by fraud detection and they denied the certificate.

Bad luck for us. But we don't give up.

If someone knows a different solution than our Root Certificate please let me know.
At the moment it is only possible to get rid of the HTTPS trash with our Root Certificate.

Thanks in advance!

Over 500 Hits and no one seems to be interessted?
Can someone explain to me why there is a problem to give it a try and test this System?

Would be a great thing. Thanks in advance.

jacomail95 said:

I'll give it a try, i already promoted it over my friends, i thank you for your work

Inviato dal mio Nexus 4 con Tapatalk 2

Click to expand...

Click to collapse

That's good to know.I will Update this Thread with more options.
I have no exerience with Italy and ads, Malware and Spyware.

Hope you will give some feedback to optimize it. Infos and how2 will follow within this Thread the next few hours.

Thanks and I hope you enjoy this system

Now you can help us with update and clean up the white and black lists.

http://xdaforums.com/showpost.php?p=64055856&postcount=2

Best regards!

HeathenMan said:

Hello , thanks for this dns. Could you provide server & net provider information?
Please take a look at dnscrypt.org , usage would be great.
Your website isnt loading , what happened

Sent from my GT-I9505 using XDA Free mobile app

Click to expand...

Click to collapse

At this point DNS encryption is not a thing we Plan to implement.
This System is comlete VPS based and a real smal system.

We are using some overloaded security on the servers. If we have success to establish this as an commercial system we will use DNS encryption.

But at the moment we only want to clean up the Black and white lists and for this DNS encryption will cause more troubles than security.

Best regards!

Technical Focus:

It seems that adblock blocking will become the "Advertising Surprise XXL Feature" for 2016.
May be for all other Adblockers. But this will not work with the keweon System.

We cross the fingers and we wil see :fingers-crossed:


Blocking Adblocker which blocking ads to make sure that ads will never blocked


If you see any Website which is blocked when you will use an ad-blocker please test this also with the keweon System.

Yahoo is working on this to prevent ad-blocker usage.
We are working on this problem too and for a well-balanced result we take the other side.

Help and let us know when you find such a site!

Tell us what you think about this:

kinox.to and movie2k.to are now 98% ad free.
We also removed the abo traps when you use this sites on your mobile phone.


Best regards and we hope you enjoy this!

flummi3000 said:

What are you doing with all the user data you are collecting with this?

Gesendet von meinem HTC One mit Tapatalk

Click to expand...

Click to collapse

Collecting data? From users? Or any connections?
I guess you are german because that's typically german bull****!

Who the hell told you that we collecting data? Collecting user data via DNS Server? Did you saw any data collection?

Do you realy belive that we break the communication to nearly everywhere and than we collect data for what?

Oh damn!! Almost idiots only here in germany!

brad65807 said:

Sprint

Anyone know how to change the DNS on android KK?

Sent from my N9515 using XDA Forums Pro.

Click to expand...

Click to collapse

Check the Playstore and search "RomToolBox". But this tool requires root.
Unfortunately I'm using currently an iPhone but with this Tool I have had the best experience on android.

With higher versions than KK (4.4) I have no clue how to change the DNS Servers because HTC OneMax with 4.4 was my last android device.

Shockwave71 said:

I just use the DNS changer from Playstore. Works fine so far. Thanks for your effort!:good:

Click to expand...

Click to collapse

Good to know. thanks for the Feedback :good:

bencozzy said:

I have to agree this is not open source so only security conscious conclusion is that you are data sniffing.

Click to expand...

Click to collapse

Hmmm... Data sniffing with DNS? How? And why?

Everyone is claiming that it is not possible to protect data. I have found years ago a solution and after 10 years I decided to launch this as an online solution.

Let's assume that I will data sniffing. What can I get?

Compare DNS as a phone book. You have the option to look inside where the Webserver or the destination exists. You are searching only a phone number or IP Address.
If you take data from the webserver this will not served and offered by the DNS Servers because this will be done from the webserver which you are browsing to. DNS is only telling your browser, hey go there and there you will find the rest.

The only thing I would get is which IP address is seeking for what address. So what data I should sniff? I only will get the information which IP address is searching xyz.com. Based on this information what should I do with this?
If I would like to have this Data that makes no sence because I have a account to statista.com where I can get more and detailed informations about this. Therefore is no need to launch such a tool.

I decided to build this project DNS based because in no country of the world it is requrired to log DNS request. May be China is an exception but especially in germany where it is required by law to log EVERY web server access DNS will be an exception.

Everyone is claiming that it is not possible to filter dangerous things within the Internet or web sites. Also the site and user tracking. If you use my DNS you can browse to Amazon do a search any you will get not "stalking result" when you visit ebay after your amazon visit.

I have disabled this online tracking which a lot of people say this it not possible. I'm working with this keweonDNS solution since years and also a lot of other people. This was finally the reason why I decided to launch this system as a public system. I'm specialist for Active Directoy since 2000 and I promises to you I will and I can do things with DNS where others will never dream of.

And yes. The system is closed source. And it will stay closed source.
On the one hand I have spend years of work into this system and if you ask someone who has experience with DNS this guy will confirm that this will not work what I do. I heard this so many times - but it's working. On the other handy I keep this closed because I will give no one the chance to break my system or doing some evil things.

If this system will have success than hey, I will find an Investor and I'm able to implement all the security features and launch this as an global system. Yes, this is what I want to do with this.
At the moment you will see only 20% of it's power because all other things would make this system damn expensive when I would release this as public system.
Big companies better pray that this never will happens because for them this system will become an evil nightmare.
If it's no success and everyone has concerns to use it than I will put everything back into the drawer and that's it. At the moment it is fun, fun, fun and more fun. Nothing more.

The same is with my Adblock Root Certificate. I was searching a solution. I found it and it's working. Within a Windows System you will see 42 root certificates. Do you know what they will do? Do you know what they are responsible for? I guess you will not know this but you trust them by default.
I will open and release my complete certificate if you want.

I can not take the fear away which you might have with my system, it's up to you to use it. But the main reason is I want to keep my data on my machine. I don't like if someone try to spy me, my machine and everything what I do.
At the moment I only want to know if the Black and White Lists are OK. To launch the system as a public system there is a lot of additional work required which is not possible that one or two guys can handle this.

I have a solution. I offer the solution as a public system and I will never say that this is the master solution. But with keweon you have more security and options than every other system.
It is absolut O.K. that someone thinks twice bevor he use this system. It is absolut O.K. when someone do not trust the certificate. And it's absolut OK when someone think that this is a big peace of sh**t.

I expected a lot of complains and I'm prepared for nearly everything.
But to think that I'm collecting data?
That's a hard pain because this is what I hate and that is something what this system prevent.

If you will not trust this solution it's O.K. for me. If you have any recommendations how can I achieve more trust into this system than let me know this because I'm open to anything.

Best regards!