SatoshiShield

Bitcoin privacy at the DNS layer. Maintainer of SatoshiShield, for Pi-hole & AdGuard Home. Blocking surveillance isn't concealment — it's self-defense. ₿

Public Key

npub1tje8zhrfxj9hzskajfzcqyupl7y4q3sw46ulsug8j8u58hxtacpsvnma2j

NIP-05 Address

satoshishield.org

Profile Code

nprofile1qqs9evn3t35nfzm3gtwey3vqzwqllz2sgc82aw0cwyrer72rmn97uqcpp4mhxue69uhkummn9ekx7mqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdurhkmay

Publishing to

nos.lol

relay.damus.io

Author Public Key

npub1tje8zhrfxj9hzskajfzcqyupl7y4q3sw46ulsug8j8u58hxtacpsvnma2j

Show more details

Last Notes

2026-06-18 13:06:48 GMT

- reply

Somehow all the bank accounts and high tech IT infrastructure is immune to quantum threats even though their level of encryption is not even in the same universe as Bitcoin encryption.
Yes ... just another creative attack from the idiot overlords.

2026-06-17 01:43:53 GMT

Don't trust. Verify. Even the blocklist.
SatoshiShield blocks the blockchain-surveillance industry at your
DNS layer — the firms whose products log which Bitcoin addresses
you look up and sell the correlation to exchanges, banks, and
governments.
But a blocklist you can't audit is just one more thing you're asked
to trust. So the research behind it is now public.
Every firm we add goes through the same seven steps before it ships:
WHOIS, certificates, passive DNS, the vendor's own surveillance
marketing, a privacy-harm assessment, six inclusion criteria, and a
functional test proving it won't break your wallet. Twenty records
are live — including the firms we investigated and deliberately did
NOT block, with the reasons written out in full.
Open source. No token. No ads. No "trust me."
Read the receipts. Check our work. Open an issue if we got one wrong.
→ satoshishield.org (Research)

2026-06-13 13:09:51 GMT

Taking back your data isn't a single weekend project, and it doesn't have to be.
Do it in steps.
A DNS blocklist on your home network is one of the highest-leverage first moves — quiet, free, and it protects everything on the network at once. Start there.
satoshishield.org

2026-06-12 23:14:38 GMT

The weak link in your Bitcoin privacy is often a device you didn't set up — a family member's phone, a smart TV, a guest's laptop, all phoning home to whoever.
A blocklist on your network covers everything on it, with no per-device work. SatoshiShield handles the surveillance-firm slice.
satoshishield.org

2026-06-12 23:13:47 GMT

You can't block these firms by IP — they hide behind shared CDNs like Cloudflare, where one address serves thousands of legitimate sites. Block the IP and you break the web.
Blocking at the DNS layer sidesteps that. The query is dropped before any IP is resolved.
satoshishield.org

2026-06-11 14:16:17 GMT

What does a firm like Chainalysis actually do?
Among other things, it logs the IP addresses querying Bitcoin address lookups and sells that intelligence to law enforcement and financial institutions.
Your device volunteers that query. SatoshiShield stops it from arriving.
satoshishield.org

2026-06-11 14:14:21 GMT

What SatoshiShield does not do, plainly:
It won't stop on-chain analysis. It won't help if a KYC exchange hands over your data directly. And it can't see an app that hardcodes its own DNS to route around your resolver.
It closes the DNS-layer gap that almost nothing else covers. One layer, done well.
satoshishield.org

2026-06-10 15:35:35 GMT

SatoshiShield isn't a fire-and-forget gist. New firms get researched and added, every change is logged, and releases go out regularly.
A blocklist is only as good as the upkeep behind it. You can see every change on the site.
satoshishield.org

2026-06-10 15:33:39 GMT

Surveillance firms rotate domains to dodge blocklists.
api.chainalysis.com becomes some new name next month.
SatoshiShield blocks at the organization level with wildcards, so *.chainalysis.com catches whatever they rename it to. New firms get caught through community reports and regular releases.
satoshishield.org

2026-06-09 13:03:48 GMT

Privacy isn't secrecy. Secrecy is wanting no one to know. Privacy is getting to choose who knows.
Your bank seeing your balance is fine. A data broker buying up your whole financial life and selling it to anyone who pays is not.
The surveillance industry's whole product is erasing that choice. What I'm building pushes back on it. It isn't about hiding from a fair investigation. It's about not being an open book to anyone curious enough to look.
That used to be normal.

2026-06-09 12:55:34 GMT

Important limitation:
SatoshiShield protects a network, not a device.
On your home network, every phone is covered. The moment one drops to cellular, it resolves DNS through the carrier and the list does nothing. To carry it with you, route DNS back home over Tailscale, or run an on-device filter.
satoshishield.org

2026-06-09 12:46:25 GMT

You don't need to be technical to shut down a big chunk of Bitcoin surveillance at home.
Pi-hole or AdGuard Home plus a free blocklist, and every device on your network is covered. An AI assistant can walk you through the parts you're unsure about. Start small.

2026-06-08 00:19:28 GMT

A VPN hides your IP address. It does nothing to stop the apps on your phone from reaching out to Chainalysis or TRM Labs in the first place — it only changes which address the request comes from.
Different problem, different fix.
SatoshiShield blocks the lookup itself, at the DNS layer.
https://satoshishield.org

2026-06-08 00:15:54 GMT

Every app on your devices is quietly asking "what's the IP for this server?" before it connects to anything. Those DNS questions go out in the clear, and a lot of them go to companies whose business is identifying Bitcoin users.
SatoshiShield drops the ones headed for surveillance firms before they leave your network.

2026-06-08 00:13:20 GMT

- reply

https://satoshishield.org/IRS_Procurement_Landscape_Followup.html

2026-06-08 00:10:40 GMT

- reply

They require a bit of research but there are a couple of ways:
1. The government comes out with contracts that these companies bid on. All of this is in the public domain. Companies that bid on these contracts are targets that need to be researched.
2. If you are using pihole or adguard home, you can check the logs to identify domains or ip addresses that are accesses when a bitcoin wallet is opened, i.e. Coinbase, Strike, an exchange wallet, etc.
Once some of the targets are identified, there is a methodology to work through to confirm whether the domain is surveilling. One very big source of information is the companies website. Believe it or not, they are not shy about marketing their services. They are advertising their services snd what they do to governments, banks, law enforcement and other institutions. This is all done under the guise of AML and who isn't against money laundering?
I will be returning home on Saturday and I plan to upload the research. Not every company researched makes the block list. I plan to upload these as well to show the reasons why they didn't make the list. I've identified another roughly 20 firms to research. I am hoping that others will participate to help as I am only one person.
This is a whole other rabbit hole that I have not heard anyone really talk about. The DNS layer has not been a focus.

2026-06-07 01:20:57 GMT

You can run your own node, use coin control, and never touch a KYC exchange — and the apps on your phone are still quietly resolving DNS to Chainalysis, TRM Labs, and Elliptic before any of that comes into play.
A node protects your wallet's traffic. It does nothing about the dozen other apps on your network making lookups to surveillance firms. Different layer, different problem.
SatoshiShield blocks those lookups at the DNS layer. Free, open, and every domain on the list is documented with a source you can check.
satoshishield.org

2026-06-06 00:55:05 GMT

You can now browse the entire SatoshiShield blocklist on the site — every surveillance firm it blocks, the specific privacy harm, a source you can check, and the date each entry was verified. Searchable and filterable.
https://satoshishield.org/blocked-domains.html

2026-06-04 11:41:00 GMT

After you install a Bitcoin node … 
After you learn how to use conjoins effectively and practice good coin control … 
It’s time to begin taking control of YOUR data. 
Taking control of your own data is not a single weekend project, and it does not have to be. You can do it in steps, and you do not need to be especially technical to start.
The first step that covers the most ground is filtering at the DNS layer on your home network. Pi-hole and AdGuard Home are both free, and with an AI assistant walking you through it, installing one is well within reach for someone who has never run a server before. Once it is running with a surveillance blocklist like SatoshiShield, every device on your network is covered, with no setup on the devices themselves.
That protection ends at the edge of your home network. The moment your phone is on cellular, it resolves DNS through your carrier and the blocklist does nothing. There are two straightforward ways to carry it with you. You can use Tailscale to route your phone's DNS back to your home Pi-hole over an encrypted tunnel, so it keeps using your filter wherever you are. Or you can install the AdGuard app directly on your phone, point it at the same blocklist, and let it filter on the device with no connection back home needed.
None of this has to happen in a day. Start with the home network, get comfortable, then extend it to your phone when you are ready. The point is that this is within reach now in a way it was not a few years ago.

2026-06-04 11:20:56 GMT

SatoshiShield started as a proof of concept. It is now being built out to cover as many confirmed Bitcoin surveillance firms that can be verified.
The layer it addresses is one most people don't know they're leaking from.
Before any app connects to anything, it asks a resolver for the server's IP. That DNS query goes out in the clear, before encryption, before your wallet has decided anything about privacy. A lot of those queries go to firms whose business is identifying Bitcoin users: the analytics API a wallet checks in with, a price tracker, a browser extension. The query alone tells that firm your IP is interested in their endpoint. Nothing has connected yet, and it's already logged.
You can run your own node, use coin control, and never touch a KYC exchange, and still leak here. A VPN doesn't stop it; it just changes the source IP. The node doesn't either, because it handles wallet traffic, not the dozen other apps on your network.
SatoshiShield is a list of confirmed surveillance firm domains. Installed on Pi-hole or AdGuard Home, every device on the network stops resolving them. The query never leaves the network. Every domain is documented with evidence, so you can audit the list yourself.
One honest limit: it protects the network, not the device. The moment your phone drops to cellular, it resolves through the carrier and the list does nothing. To carry it with you, route DNS back home over Tailscale or run an on-device filter.
It does not stop on-chain analysis, KYC exchanges, or apps that ship their own hardcoded DNS-over-HTTPS. It is one layer, but it is the one that is almost always missing. We will deal with this gap with SatoshiShield-firewall in the near future.
github.com/cypherpilgrim/satoshishield

2026-06-04 11:09:07 GMT

So I built something for that neglected layer. SatoshiShield is a free, open-source DNS blocklist for Pi-hole and AdGuard Home. It blocks the surveillance firms' domains at your resolver, so every device on your network stops reaching them — quietly, in the background, no per-app work. Every entry is documented: which firm, what they do, why it's listed, with a source. A privacy tool you can't audit is just one more thing asking for trust, so all of it is open.
github.com/cypherpilgrim/satoshishield

2026-06-04 11:06:00 GMT

This isn't hypothetical. In 2020 the IRS paid Chainalysis and a forensics firm to build tools to break the privacy of Monero and of Bitcoin sent over Lightning. It's a public contract — you can pull it up on USAspending.gov. The effort to de-anonymize ordinary users is funded, ongoing, and on the record.

2026-06-04 11:04:03 GMT

You don't have to have done anything wrong to be harmed by surveillance. You only have to be visible to it. Frozen accounts, tainted coins, a risk score you'll never get to see or contest — none of that needs wrongdoing, just a data trail. Blocking the surveillance isn't hiding. It's declining to hand it over for free.

2026-06-04 11:01:51 GMT

The part of Bitcoin privacy nobody talks about isn't your node or your coinjoin. It's DNS. The apps on your devices phone home constantly — a wallet pinging a Chainalysis endpoint, an extension fetching from Arkham, a price widget calling TRM Labs. A VPN doesn't stop that. It just changes which IP they log it against. The query still leaves your network. 

2026-06-04 03:58:44 GMT

- reply

A node fixes the wallet you point at. It doesn't stop your other apps and devices from phoning home to the surveillance firms - that's the blocklist's job. Different layers.
A node is a very important tool but there are other layers to protect as well.

2026-06-04 01:31:44 GMT

Most people think Bitcoin is anonymous. It isn't. It's pseudonymous — a public ledger that never forgets, with one thin layer of "nobody knows which address is mine" on top. A multi-billion dollar industry exists to peel that layer off, and it only has to succeed once. Get linked to a single address, ever, and your whole history reads backward.

2026-06-04 01:14:01 GMT

SatoshiShield blocks the blockchain-surveillance firms — Chainalysis, Elliptic, TRM Labs, Arkham, and others — at your network's DNS layer, so your wallets and apps can't quietly phone home to them. Free, open-source, for Pi-hole and AdGuard Home. Every domain documented and auditable.
github.com/cypherpilgrim/satoshishield