Modes
BLOKD uses DNS-only VPN routing. Berserk means bigger blocklists, not a full device tunnel.
Standard
- HaGeZi Pro Plus Mini wildcard list
- OISD domainswild2
- Best for everyday use: strong blocking, lower RAM footprint
Berserk
- Everything in Standard, plus HaGeZi Pro Plus full list
- More tracker and ad-network domains blocked at DNS level
- Does not intercept all traffic or encrypted DNS ports (planned for a future release)
Shared layers
- Blocklists: bundled snapshot on install, refreshed daily on unmetered Wi-Fi
- AdGuard DoT: optional encrypted upstream resolver (default on)
- CNAME cloaking filter: blocks answers that chain to tracker domains
- Connectivity allowlist: Android validation hosts are never blocked