BIG TECH BLOCKER v2.2

@echo off
setlocal enabledelayedexpansion
title Big Tech Blocker v2.2 - 50+ Domains + Backup!
color 0A
chcp 437 >nul 2>&1  REM Fix for ASCII graphics display
echo.
echo +======================================================+
echo ^| 🛡️ BIG TECH BLOCKER v2.2 - TOTAL CONTROL            ^|
echo ^| Akamai•Google•Meta•Amazon•Apple•MS•TikTok+50!        ^|
echo ^| WARNING: MS Block breaks GitHub/Logins!              ^|
echo +======================================================+
echo.
:: Admin Check
net session >nul 2>&1 || (echo [ERROR]🔴 Run as ADMIN! & pause & exit /b)
:: AUTO-BACKUP
if not exist "Blocker_Backup" mkdir Blocker_Backup
set "backup_file=Blocker_Backup\firewall_%date:~-4,4%%date:~-10,2%%date:~-7,2%_%time:~0,2%%time:~3,2%.wfw"
netsh advfirewall export "%backup_file%" >nul 2>&1
if errorlevel 1 (echo [X] Backup failed! Check syntax or permissions.) else (echo [✓] Backup saved: %backup_file%!)
:: DNS Setup (Quad9 for speed/privacy)
echo [DNS] Using Quad9 (9.9.9.9) - Privacy + Malware Block!
set "dns1=9.9.9.9" & set "dns2=149.112.112.112"
for %%i in (Ethernet Wi-Fi "Local Area Connection" "Wireless Connection") do (
    netsh interface ip set dns "%%i" static !dns1! primary >nul 2>&1
    netsh interface ip add dns "%%i" !dns2! index=2 >nul 2>&1
)
ipconfig /flushdns >nul 2>&1
ping -n 1 %dns1% >nul 2>&1 && echo [✓] DNS: Quad9 Active! (Ping OK) || echo [⚠️ DNS Ping Failed - Check connection!]
:: Always Allow Web + Bypass Streaming
netsh advfirewall firewall delete rule name="AllowWeb*" >nul 2>&1
netsh advfirewall firewall add rule name="AllowWeb_OUT" dir=out action=allow protocol=TCP remoteport=80,443 >nul 2>&1
netsh advfirewall firewall add rule name="AllowWeb_IN" dir=in action=allow protocol=TCP localport=80,443 >nul 2>&1
netsh advfirewall firewall add rule name="BypassNetflix" dir=out action=allow remoteip=192.229.138.0/24,23.246.0.0/18 >nul 2>&1
netsh advfirewall firewall add rule name="BypassTwitch" dir=out action=allow remoteip=151.101.0.0/16 >nul 2>&1
echo [✓] Web + Netflix/Twitch Bypass Active!
:menu
echo.
echo +=================== MENU ===================+
echo ^| A.Akamai (CDN/Global)                     ^|
echo ^| 1.Google (YouTube/Ads) 6.TikTok           ^|
echo ^| 2.Meta (FB/Insta)      7.Snapchat         ^|
echo ^| 3.Amazon (AWS/Ads)     8.Uber/Lyft        ^|
echo ^| 4.Apple (iCloud)       9.Twitter/X        ^|
echo ^| 5.Microsoft* (GitHub!) 0.Telemetry        ^|
echo ^| B.Block All            U.Unblock All      ^|
echo ^| I.Import Rules                            ^|
echo ^| *CAUTION: Unblock MS first! E.Export      ^|
echo +============================= X.Exit ======+
set /p choice="Enter: "
if /i "!choice!"=="X" goto end
if /i "!choice!"=="E" (
    netsh advfirewall export "Blocker_Backup\current.wfw" >nul 2>&1
    if errorlevel 1 (echo [X] Export failed!) else (echo [✓] Rules Exported to current.wfw!)
    goto menu
)
if /i "!choice!"=="I" (
    echo [IMPORT] Finding latest backup...
    set "latest="
    for /f %%f in ('dir /b /od "Blocker_Backup\*.wfw" 2^>nul') do set latest=%%f
    if not defined latest (echo [X] No backups found!) else (
        netsh advfirewall import "Blocker_Backup\!latest!" >nul 2>&1
        if errorlevel 1 (echo [X] Import failed!) else (echo [✓] Imported: !latest!)
    )
    goto menu
)
if /i "!choice!"=="B" (set "toggle=B" & set "multi= A 1 2 3 4 5 6 7 8 9 0" & goto multi_process)
if /i "!choice!"=="U" (set "toggle=U" & set "multi= A 1 2 3 4 5 6 7 8 9 0" & goto multi_process)
:: Single choice handling
set "multi=!choice!"
:multi_process
for %%c in (!multi!) do (
    if "%%c"=="A" set "group=AKAMAI" & set "rules=Block_AKAMAI_" & set "domains=akamai.com akamai.net edgesuite.net edgekey.net akamaized.net akamaiedge.net akamaitechnologies.com akadns.net akaa.net akamaistream.net akamaicdn.net"
    if "%%c"=="1" set "group=GOOGLE" & set "rules=Block_GOOGLE_" & set "domains=google.com youtube.com googlevideo.com doubleclick.net google-analytics.com googlesyndication.com googleadservices.com android.com blogger.com gstatic.com googleapis.com ggpht.com ytimg.com"
    if "%%c"=="2" set "group=META" & set "rules=Block_META_" & set "domains=facebook.com fb.com fbcdn.net facebook.net fbsbx.com messenger.com instagram.com whatsapp.com whatsapp.net oculus.com connect.facebook.net graph.facebook.com"
    if "%%c"=="3" set "group=AMAZON" & set "rules=Block_AMAZON_" & set "domains=amazon.com amazonaws.com media-amazon.com ssl-images-amazon.com amazon-adsystem.com a2z.com images-na.ssl-images-amazon.com"
    if "%%c"=="4" set "group=APPLE" & set "rules=Block_APPLE_" & set "domains=apple.com icloud.com itunes.com aaplimg.com cdn-apple.com mzstatic.com apple-mapkit.com idmsa.apple.com"
    if "%%c"=="5" set "group=MICROSOFT" & set "rules=Block_MS_" & set "domains=microsoft.com windows.com live.com outlook.com office.com onedrive.com azure.com bing.com msn.com skype.com xbox.com windowsupdate.com msftncsi.com github.com"
    if "%%c"=="6" set "group=TIKTOK" & set "rules=Block_TIKTOK_" & set "domains=tiktok.com tiktokv.com byteoversea.com byteimg.com ttlivecdn.com musically.com"
    if "%%c"=="7" set "group=SNAPCHAT" & set "rules=Block_SNAP_" & set "domains=snapchat.com sc-cdn.net cf-st.sc-cdn.net"
    if "%%c"=="8" set "group=UBER" & set "rules=Block_UBER_" & set "domains=uber.com lyft.com ubereats.com"
    if "%%c"=="9" set "group=TWITTER" & set "rules=Block_X_" & set "domains=twitter.com x.com t.co twimg.com twittercdn.com"
    if "%%c"=="0" set "group=TELEMETRY" & set "rules=Block_TELEMETRY_" & set "domains=telemetry.urs.microsoft.com settings-win.data.microsoft.com vortex.data.microsoft.com watson.telemetry.microsoft.com sqm.telemetry.microsoft.com sls.update.microsoft.com ooboot.data.microsoft.com diagnostics.support.microsoft.com feedback.microsoft.com telemetry.microsoft.com"
    if not defined group (echo [X] Invalid choice: %%c & goto menu)
    if /i "!toggle!"=="U" (
        echo [🔓 UNBLOCKING] !group!...
        for %%d in (!domains!) do netsh advfirewall firewall delete rule name="!rules!%%d*" >nul 2>&1
        echo [✓] !group! UNBLOCKED!
    ) else (
        echo [🔒 BLOCKING] !group!...
        set /a count=0
        for %%d in (!domains!) do (
            netsh advfirewall firewall delete rule name="!rules!%%d*" >nul 2>&1
            for /f "tokens=2 delims= " %%a in ('nslookup %%d !dns1! 2^>nul ^| findstr "Address" ^| findstr "[0-9]"') do (
                set /a count+=1
                netsh advfirewall firewall add rule name="!rules!%%d_%%a" dir=out action=block remoteip=%%a >nul 2>&1
            )
        )
        echo [✓] !group! BLOCKED (^!count! IPs^)!
    )
    set "group="
)
:: Quick Test
ping -n 1 8.8.8.8 >nul 2>&1 && echo [🌐 Internet OK!] || echo [⚠️ No Internet - Check DNS/Firewall!]
goto menu
:end
echo [🏁 ALL CHANGES SAVED! Backup: Blocker_Backup\]
pause