-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathhosts
152 lines (133 loc) · 5.66 KB
/
hosts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
#Title: rugabunda custom
#Author: rugabunda
#Updated: 06 Nov 2019
#---------------------
#testing, used by many "offline only" purposed mobile apps like notepads
0.0.0.0 storage.googleapis.com
0.0.0.0 bucket.storage.googleapis.com
0.0.0.0 cloudconfig.googleapis.com
0.0.0.0 device-provisioning.googleapis.com
0.0.0.0 plus.google.com
# fb tracking/telemetry
0.0.0.0 connect.facebook.com
0.0.0.0 fbsbx.com
#telemetey/spyware/analytics, the overlooked privacy danger in mobile apps.
0.0.0.0 s.update.fbsbx.com #facebook outcontracted analytics, redirects (CNAME) to s.agentanalytics.com https://www.robtex.com/dns-lookup/s.update.fbsbx.com
0.0.0.0 post.update.fbsbx.com #facebook outcontracted analytics, a CNAME to agentanalytics.com
0.0.0.0 t.update.fbsbx.com #facebook outcontracted analytics, a CNAME to t.agentanalytics.com
0.0.0.0 www.buglife.com #ios/android telemetry web bug/beacon
0.0.0.0 startup.mobile.yandex.net #Webvisor tracks everything you do and plays it back as video
0.0.0.0 mobile.webvisor.com #Yandex Metrica's Webvisor records users' actions in browser and plays telemetry back as video
0.0.0.0 u.startup.mobile.webvisor.com #https://yandex.com/blog/metrica/webvisor-2-0-is-coming-soon
0.0.0.0 startup.mobile.webvisor.com #Yandex Metrica's Webvisor steals your passwords https://www.certificationanswers.com/en/does-webvisor-record-passwords-entered-by-a-site-user/amp/
0.0.0.0 firebaselogging.googleapis.com #google firebase backdoor telemetey
0.0.0.0 reports.crashlytics.com #even with no crash, google firebase backdoor telemetey/beacon
0.0.0.0 e.crashlytics.com #never a crash, google-owned backdoor telemetry/beacon
0.0.0.0 flury-ycpi.gycpi.b.yahoodns.net #Flurry.com yahoos app analytics for Android & iOS
0.0.0.0 mononoteapp.firebaseio.com #firebase google telemetry for just mononote app, wildcard block *firebase*
0.0.0.0 onesignal.com #telemetry/marketing
0.0.0.0 stats.adlice.com #statistics for legit adlice windows apps
0.0.0.0 id.sputniknews.com #identifier
# nVidia Telemetry
0.0.0.0 activation-dc1.gfe.nvidia.com
0.0.0.0 activation.gfe.nvidia.com
0.0.0.0 download.gfe.nvidia.com
0.0.0.0 download-dc1.gfe.nvidia.com
0.0.0.0 download-dce-2.gfe.nvidia.com
0.0.0.0 events.gfe.nvidia.com
0.0.0.0 events.gfe.nvidia.com
0.0.0.0 events-dc1-2.gfe.nvidia.com
0.0.0.0 events-temp.gfe.nvidia.com
0.0.0.0 gfe.geforce.com
0.0.0.0 gfe.nvidia.com
0.0.0.0 gfwsl.geforce.com
0.0.0.0 services.gfe.nvidia.com
0.0.0.0 telemetry.gfe.nvidia.com
0.0.0.0 telemetry.nvidia.com
0.0.0.0 telemetry-dce.gfe.nvidia.com
#avast telem
0.0.0.0 ip-info.ff.avast.com
0.0.0.0 shepherd.sb.avast.com
0.0.0.0 analytics.ff.avast.com
#eset
0.0.0.0 edf.eset.com #bad cert, (test in broweser) microsoft azure cloud, appears to be unecessary for functionality, CNAME redirects to edfpcs.trafficmanager.net, https://support.eset.com/kb332/#telemetry
0.0.0.0 gallup.eset.com #telemetry
#ads
0.0.0.0 a.0e4b0abb1f69821da471689f323e049b.com #Appodeal ads https://a.0e4b0abb1f69821da471689f323e049b.com/home/
0.0.0.0 a.04ee395e5b8a076c7bd8592851ff8cad.com #Appodeal ads, a.*.com for wildcard
0.0.0.0 a.ab90be9135de1428ae387956ebd06722.com #Appodeal ads
0.0.0.0 qd.admetricspro.com
0.0.0.0 report.admetricspro.com
#amazon cloud ads
#cnames to ads.ad-center.com
127.0.0.1 look.utnldn.com
127.0.0.1 look.kfioplkn.com
127.0.0.1 look.ichlnk.com
127.0.0.1 look.udncoeln.com
127.0.0.1 look.fjfiln.com
127.0.0.1 look.ufinkln.com
127.0.0.1 hlok.qertewrt.com
127.0.0.1 look.opskln.com
127.0.0.1 look.ichlnk.com
127.0.0.1 look.ufinkln.com
127.0.0.1 look.utndln.com
127.0.0.1 look.djfiln.com
127.0.0.1 look.kfiopkln.com
127.0.0.1 look.udncoeln.com
127.0.0.1 ads.ad-center.com
127.0.0.1 cdn1.ad-center.com
127.0.0.1 cdn2.ad-center.com
127.0.0.1 ads4.ad-center.com
127.0.0.1 ads.ad-center.com
127.0.0.1 ads-script.ad-center.com
127.0.0.1 www.ad-center.com
#these are closely associated and or interacting directly with ad-center https://threatcrowd.org/domain.php?domain=pwwysydh.com
127.0.0.1 pwwysydh.com
127.0.0.1 piz7ohhujogi.com
127.0.0.1 prjcq.com
127.0.0.1 pocofh.com
127.0.0.1 npmpecd.com
127.0.0.1 pt21na.com
127.0.0.1 pwdplz.com
127.0.0.1 pohs2oom.com
127.0.0.1 ps4ux.com
127.0.0.1 jadserve.postrelease.com
127.0.0.1 docaz.net
127.0.0.1 prjcq.com
127.0.0.1 e.serverbid.com
127.0.0.1 d303resfoavrtt.cloudfront.net
#all ptrs for ads.ad-center.com https://www.robtex.com/dns-lookup/ads.ad-center.com
127.0.0.1 ec2-46-137-77-217.eu-west-1.compute.amazonaws.com
127.0.0.1 ec2-46-137-110-83.eu-west-1.compute.amazonaws.com
127.0.0.1 ec2-54-243-100-198.compute-1.amazonaws.com
127.0.0.1 ec2-175-41-141-63.ap-southeast-1.compute.amazonaws.com
127.0.0.1 ec2-175-41-150-101.ap-southeast-1.compute.amazonaws.com
127.0.0.1 ec2-176-34-182-24.eu-west-1.compute.amazonaws.com
127.0.0.1 ec2-184-72-41-50.us-west-1.compute.amazonaws.com
127.0.0.1 ec2-184-169-151-9.us-west-1.compute.amazonaws.com
127.0.0.1 ec2-184-169-178-22.us-west-1.compute.amazonaws.com
127.0.0.1 ec2-184-169-182-88.us-west-1.compute.amazonaws.com
#diversion adblocker ads, must be added to dnscrypt
0.0.0.0 ads.ad-center.com
0.0.0.0 aax-us-east.amazon-adsystem.com #amazon ads
0.0.0.0 aax-eu.amazon-adsystem.com
0.0.0.0 aax-us-east.amazon-adsystem.com
0.0.0.0 ad2.netshelter.net
0.0.0.0 assets.omidoo.com
0.0.0.0 flashtalking.com
0.0.0.0 fls-na.amazon-adsystem.com
0.0.0.0 images-na.ssl-images-amazon.com
0.0.0.0 ir-na.amazon-adsystem.com
0.0.0.0 ir-uk.amazon-adsystem.com
0.0.0.0 pagead2.googlesyndication.com
0.0.0.0 servedby.flashtalking.com
0.0.0.0 tgdaily.com
0.0.0.0 tgdaily.net
0.0.0.0 vma.tgdaily.com
0.0.0.0 vma.tgdaily.net
0.0.0.0 wms-eu.amazon-adsystem.com
0.0.0.0 wms-na.amazon-adsystem.com
0.0.0.0 wms-na.assoc-amazon.com
0.0.0.0 ws-eu.amazon-adsystem.com
0.0.0.0 ws-na.amazon-adsystem.com
0.0.0.0 z-na.amazon-adsystem.com