Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trackers #354

Open
trackerct opened this issue Sep 27, 2022 · 19 comments
Open

Trackers #354

trackerct opened this issue Sep 27, 2022 · 19 comments

Comments

@trackerct
Copy link

Can you add blocklist please?
https://adaway.org/hosts.txt

Trackers by Vivo Mobile (have a couple of dns queries)

tr-vcode-od.vivoglobal.com
tr-vcode-api.vivoglobal.com
tr-st-sl.vivoglobal.com
tr-domaincfg.vivoglobal.com
tr-timesync.vivoglobal.com
tr-romsp-unifyconfig.vivoglobal.com
asia-ex-adlog.vivoglobal.com
asia-analyzer-appstore.vivoglobal.com
asia-exstsdk.vivoglobal.com
asia-comort-stsdk.vivoglobal.com
asia-comonrt-stsdk.vivoglobal.com

Trackers by Vodafone

netperform-is.vodafone.com.tr
vodafonetr.sc.omtrdc.net
mplusps.ims.vodafone.com
mpluswf.ims.vodafone.com

Advertising
advertise.ldplayer.net
creative.eagllwin.com
api.eagllwin.com
storeen.ldmnq.com

Google Spyware (have a couple of dns queries)

telephonyspamprotect-pa.googleapis.com
growth-pa.googleapis.com
deviceintegritytokens-pa.googleapis.com
gmscompliance-pa.googleapis.com
mdh-pa.googleapis.com
firebaseinstallations.googleapis.com
digitalassetlinks.googleapis.com

@jawz101
Copy link
Contributor

jawz101 commented Sep 27, 2022

I have a personal rule I won't block anything *.googleapis.com because there is a strong likelihood you're breaking something that you may not realize. Most of them are things you have enabled within all of the Google apps you may not realize are what cause the chatter. It's all part of Google Play Services.

eg: telephonyspamprotect may just be a matter of going into

  1. settings > apps > default apps > Caller ID and Spam app and set it to none instead of the Google Phone app
  2. go into the phone app's settings and there are Spam & Call Screen features that can be controlled
  3. go into the Google Messenger settings and there are Verified SMS and Spam Protection settings there as well

Also in the Phone app, there is a toggle for Nearby Places searching so when you click on the search screen on the Phone app it will query local business numbers.

Tons of the *.googleapis.com domains are tied to toggles sprinkled throughout Android settings and Google Apps. If in the settings > Google you click on the 3 dots there is an option to send Diagnostics to Google.

There's also Private browsing, Private DNS, geolocation stuff, Nearby Places, Google Cast, Find My Device, Google backup feature/restore, and so many others. You can comb through your phone and uncheck things you don't want. Some of them you may miss having.

I will look at some of the others but you may want to do a web search on the companies & see if some of the built-in apps on your phone are simply prefs

@trackerct
Copy link
Author

trackerct commented Sep 27, 2022

Thanks for the reply.

I disabled Spam Protection but continues sending traffic to telephonyspamprotect-pa.googleapis.com have a couple of dns queries.i want to block unneccessary googleapis. GoogleAPIs are flooding my Phone.

more info
https://mypdns.org/my-privacy-dns/matrix/-/issues/1837

And i have some info

tr-vcode-od.vivoglobal.com
tr-vcode-api.vivoglobal.com
tr-st-sl.vivoglobal.com
tr-domaincfg.vivoglobal.com
tr-timesync.vivoglobal.com
tr-romsp-unifyconfig.vivoglobal.com
asia-ex-adlog.vivoglobal.com
asia-analyzer-appstore.vivoglobal.com
asia-exstsdk.vivoglobal.com
asia-comort-stsdk.vivoglobal.com
asia-comonrt-stsdk.vivoglobal.com

in my vivo phone. have a couple of dns queries. I blocked them manually with personaldnsfilter app. My phone is now very fast:)
https://play.google.com/store/apps/details?id=dnsfilter.android

advertise.ldplayer.net
creative.eagllwin.com
api.eagllwin.com
storeen.ldmnq.com
-and this, LDPlayer 4 in my windows. / Android emulator. Showing advertising
https://www.ldplayer.net/

netperform-is.vodafone.com.tr
(Vodafone NetPerform · Network coverage. This application will capture statistics about your connectivity for phone calls. · Internet connectivity · Call quality)

https://www.vodafone.co.uk/explore/apps/vodafone-netperform/

mplusps.ims.vodafone.com
mpluswf.ims.vodafone.com
tags.tiqcdn.com
config.rcs.mnc002.mcc286.pub.3gppnetwork.org
-and this, Vodafone Mobile Apk
https://www.apkmirror.com/apk/vodafone-holding/vodafone-yanimda/

@spirillen
Copy link
Contributor

Duplicate of badmojr/1Hosts#738 (comment)

@trackerct
Copy link
Author

trackerct commented Sep 30, 2022

mobile.pipe.aria.microsoft.com
self.events.data.microsoft.com
counter.yadro.ru
spylog.com
hotlog.ru
sanalytics.tbs.com
metrics.claspws.tv
ws-na.amazon-adsystem.com
adserve.work
www.adxserve.com
my.rtmark.net
simplewebanalysis.com
browser.sentry-cdn.com
log-va.tiktokv.com
mon.tiktokv.com
mon-va.byteoversea.com
mon-va.tiktokv.com
adsgard.aprod.scopely.io
489a19fa-d831-4954-858d-46436d5cdb20.register.collector.scopely.io
fenrir-resolver.aprod.scopely.io
iot-eu-logser.realme.com
iot-logser.realme.com
applog.matrix.easebar.com
sigma-statistics-push.proxima.nie.easebar.com
mcount.easebar.com
who.nie.easebar.com
appdump.nie.easebar.com
cdn.orangeclickmedia.com
iriscoremetadataprod.blob.core.windows.net
apitm.toolmatrix.plus
o861134.ingest.sentry.io
sentry.justwatch.com
mdp-appconf-sg.heytapdl.com
amnyescsmgcagjj.com
6b73d00a-d4a1-4350-825a-cd3f49afa460.register.collector.scopely.io
sessions.bugsnag.com
guce.oath.com
xconf.cauly.co.kr
image.cauly.co.kr
csi.gstatic.com
in.appcenter.ms
www.obashwmzrfofi.com
ww.visariomedia.com
pl15402247.highperformancecpm.com
st.bebi.com
ja2n2u30a6rgyd.com
uop.umeng.com
alog.umeng.com
mcf4wh-jdfmxrzzzttwqcrf-d3b4.device.marketingcloudapis.com
api.ipify.org
api6.ipify.org
track.wattpad.com
rbthre.work

@jawz101
Copy link
Contributor

jawz101 commented Sep 30, 2022

it's going to take me a while to go through this. Several are familiar but I'm going to have to look into many of them.

ipify is an open source geoip thingy. It's kinda like blocking something that isn't worth blocking. The in.appcenter.ms and other microsoft ones are tied to Microsoft apps and not really worth blocking and might drain battery to block.

The vivoglobal stuff I'm most curious about. It looks like those vodafones also have a developer product where people can make apps designed for their phones. I'm guessing some of this is irrelevant while other stuff could be blocked. If they have a whole game and in-game payment thing it isn't like I'd want to just block everything for no reason. Personally, I would uninstall or disable these precanned apps if it came on my phone.

https://developer.vivo.com/doc/detail?id=30

@spirillen
Copy link
Contributor

From My Privacy DNS listed or not tool https://mypdns.org/listedornot/

Records Known record description
mobile.pipe.aria.microsoft.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3137
self.events.data.microsoft.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3137
counter.yadro.ru https://mypdns.org/my-privacy-dns/matrix/-/issues/287
spylog.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3175
sanalytics.tbs.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1455089
ws-na.amazon-adsystem.com https://mypdns.org/my-privacy-dns/matrix/-/issues/4119
adserve.work https://mypdns.org/my-privacy-dns/matrix/-/issues/1165517
www.adxserve.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1663326
my.rtmark.net https://mypdns.org/my-privacy-dns/matrix/-/issues/4685
simplewebanalysis.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1329835
browser.sentry-cdn.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1875
log-va.tiktokv.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966150
mon.tiktokv.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966150
mon-va.byteoversea.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3738
mon-va.tiktokv.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966150
adsgard.aprod.scopely.io https://mypdns.org/my-privacy-dns/matrix/-/issues/966318
489a19fa-d831-4954-858d-46436d5cdb20.register.collector.scopely.io https://mypdns.org/my-privacy-dns/matrix/-/issues/966318
fenrir-resolver.aprod.scopely.io https://mypdns.org/my-privacy-dns/matrix/-/issues/966318
cdn.orangeclickmedia.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1673893
iriscoremetadataprod.blob.core.windows.net https://mypdns.org/my-privacy-dns/matrix/-/issues/967057
apitm.toolmatrix.plus https://mypdns.org/my-privacy-dns/matrix/-/issues/1167625
o861134.ingest.sentry.io https://mypdns.org/my-privacy-dns/matrix/-/issues/1390
sentry.justwatch.com https://mypdns.org/my-privacy-dns/matrix/-/issues/494293
6b73d00a-d4a1-4350-825a-cd3f49afa460.register.collector.scopely.io https://mypdns.org/my-privacy-dns/matrix/-/issues/966318
sessions.bugsnag.com https://mypdns.org/my-privacy-dns/matrix/-/issues/967104
guce.oath.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966974
csi.gstatic.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3609
in.appcenter.ms https://mypdns.org/my-privacy-dns/matrix/-/issues/968772
www.obashwmzrfofi.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1319641
ww.visariomedia.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3930
pl15402247.highperformancecpm.com https://mypdns.org/my-privacy-dns/matrix/-/issues/2219
st.bebi.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1304715
ja2n2u30a6rgyd.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1180370
uop.umeng.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3083
alog.umeng.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3083
mcf4wh-jdfmxrzzzttwqcrf-d3b4.device.marketingcloudapis.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966301
api.ipify.org https://mypdns.org/my-privacy-dns/matrix/-/issues/967388
api6.ipify.org https://mypdns.org/my-privacy-dns/matrix/-/issues/967388
track.wattpad.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1156773
rbthre.work https://mypdns.org/my-privacy-dns/matrix/-/issues/1324344

Unknown records:

hotlog.ru
metrics.claspws.tv
iot-eu-logser.realme.com
iot-logser.realme.com
applog.matrix.easebar.com
sigma-statistics-push.proxima.nie.easebar.com
mcount.easebar.com
who.nie.easebar.com
appdump.nie.easebar.com
mdp-appconf-sg.heytapdl.com
client-uc.heytapmobi.com
amnyescsmgcagjj.com
xconf.cauly.co.kr
image.cauly.co.kr

@trackerct
Copy link
Author

it's going to take me a while to go through this. Several are familiar but I'm going to have to look into many of them.

ipify is an open source geoip thingy. It's kinda like blocking something that isn't worth blocking. The in.appcenter.ms and other microsoft ones are tied to Microsoft apps and not really worth blocking and might drain battery to block.

The vivoglobal stuff I'm most curious about. It looks like those vodafones also have a developer product where people can make apps designed for their phones. I'm guessing some of this is irrelevant while other stuff could be blocked. If they have a whole game and in-game payment thing it isn't like I'd want to just block everything for no reason. Personally, I would uninstall or disable these precanned apps if it came on my phone.

https://developer.vivo.com/doc/detail?id=30

I totally agree with you.

Large amount of Web Traffic going to the vivo domains. Have a couple of dns queries. Every time, every day, every minutes, every second. I'm sure vivo mobile spyware domains.

I can't uninstall or disable some Vivo mobile pre-installed apps. Beacuse does not allow.

I blocked them with Personaldns filter app. https://f-droid.org/en/packages/dnsfilter.android/

tr-vcode-od.vivoglobal.com
tr-vcode-api.vivoglobal.com
tr-st-sl.vivoglobal.com
tr-domaincfg.vivoglobal.com
tr-timesync.vivoglobal.com
tr-romsp-unifyconfig.vivoglobal.com

my phone is very fast now:)

@trackerct
Copy link
Author

From My Privacy DNS listed or not tool https://mypdns.org/listedornot/

Records Known record description
mobile.pipe.aria.microsoft.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3137
self.events.data.microsoft.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3137
counter.yadro.ru https://mypdns.org/my-privacy-dns/matrix/-/issues/287
spylog.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3175
sanalytics.tbs.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1455089
ws-na.amazon-adsystem.com https://mypdns.org/my-privacy-dns/matrix/-/issues/4119
adserve.work https://mypdns.org/my-privacy-dns/matrix/-/issues/1165517
www.adxserve.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1663326
my.rtmark.net https://mypdns.org/my-privacy-dns/matrix/-/issues/4685
simplewebanalysis.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1329835
browser.sentry-cdn.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1875
log-va.tiktokv.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966150
mon.tiktokv.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966150
mon-va.byteoversea.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3738
mon-va.tiktokv.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966150
adsgard.aprod.scopely.io https://mypdns.org/my-privacy-dns/matrix/-/issues/966318
489a19fa-d831-4954-858d-46436d5cdb20.register.collector.scopely.io https://mypdns.org/my-privacy-dns/matrix/-/issues/966318
fenrir-resolver.aprod.scopely.io https://mypdns.org/my-privacy-dns/matrix/-/issues/966318
cdn.orangeclickmedia.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1673893
iriscoremetadataprod.blob.core.windows.net https://mypdns.org/my-privacy-dns/matrix/-/issues/967057
apitm.toolmatrix.plus https://mypdns.org/my-privacy-dns/matrix/-/issues/1167625
o861134.ingest.sentry.io https://mypdns.org/my-privacy-dns/matrix/-/issues/1390
sentry.justwatch.com https://mypdns.org/my-privacy-dns/matrix/-/issues/494293
6b73d00a-d4a1-4350-825a-cd3f49afa460.register.collector.scopely.io https://mypdns.org/my-privacy-dns/matrix/-/issues/966318
sessions.bugsnag.com https://mypdns.org/my-privacy-dns/matrix/-/issues/967104
guce.oath.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966974
csi.gstatic.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3609
in.appcenter.ms https://mypdns.org/my-privacy-dns/matrix/-/issues/968772
www.obashwmzrfofi.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1319641
ww.visariomedia.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3930
pl15402247.highperformancecpm.com https://mypdns.org/my-privacy-dns/matrix/-/issues/2219
st.bebi.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1304715
ja2n2u30a6rgyd.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1180370
uop.umeng.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3083
alog.umeng.com https://mypdns.org/my-privacy-dns/matrix/-/issues/3083
mcf4wh-jdfmxrzzzttwqcrf-d3b4.device.marketingcloudapis.com https://mypdns.org/my-privacy-dns/matrix/-/issues/966301
api.ipify.org https://mypdns.org/my-privacy-dns/matrix/-/issues/967388
api6.ipify.org https://mypdns.org/my-privacy-dns/matrix/-/issues/967388
track.wattpad.com https://mypdns.org/my-privacy-dns/matrix/-/issues/1156773
rbthre.work https://mypdns.org/my-privacy-dns/matrix/-/issues/1324344
Unknown records:

hotlog.ru
metrics.claspws.tv
iot-eu-logser.realme.com
iot-logser.realme.com
applog.matrix.easebar.com
sigma-statistics-push.proxima.nie.easebar.com
mcount.easebar.com
who.nie.easebar.com
appdump.nie.easebar.com
mdp-appconf-sg.heytapdl.com
client-uc.heytapmobi.com
amnyescsmgcagjj.com
xconf.cauly.co.kr
image.cauly.co.kr

Thank you.

hotlog.ru -Counter and statistics services.

metrics.claspws.tv -analytics domain.

iot-eu-logser.realme.com -Realme phone tracker-spyware
iot-logser.realme.com

applog.matrix.easebar.com -tracker
sigma-statistics-push.proxima.nie.easebar.com -stats
mcount.easebar.com -counter
who.nie.easebar.com -ip tracking
appdump.nie.easebar.com -app crash analytics
mdp-appconf-sg.heytapdl.com -analytics
client-uc.heytapmobi.com -tracker
amnyescsmgcagjj.com -advertising domain
xconf.cauly.co.kr -advertising domain
image.cauly.co.kr -advertising domain

@trackerct
Copy link
Author

more ads/trackers

v10.events.data.microsoft.com
functional.events.data.microsoft.com
log-ingestion-sa.samsungacr.com
ic3.events.data.microsoft.com
browser.events.data.microsoft.com
browser.events.data.msn.com
statsfe2.update.microsoft.com
edge.activity.windows.com
edge.activity.windows.com.akadns.net
edge-global.activity.windows.com.akadns.net
edge-emeu1.activity.windows.com.akadns.net
pf2am3-edge.activity.windows.com.akadns.net
global.asimov.events.data.trafficmanager.net
onedscolprdcus09.centralus.cloudapp.azure.com
evoke-windowsservices-tas.msedge.net
dlwnextsetting.blob.core.windows.net
settings.data.microsoft.com
browser.pipe.aria.microsoft.com
performance.radar.cloudflare.com
web.diagnostic.networking.aws.dev
psstats.superkinglabs.com
ota.lokalise.co
bundles.live.lokalise.cloud
livelogs.slike.in
mobile.protectt.ai
report-oversea.agora.io
report-oversea2.agora.io
geo-id-tl-media-vidio-com.akamaized.net
telemetry.acronis.com
s.deepl.com
collect.analytics.unity3d.com
api.miwifi.com
clickserve.dartsearch.net
analytics.300624.com
nrdp.nccp.netflix.com IoT Telemetry
customerevents.netflix.com IoT Telemetry
gapl.hit.gemius.pl
pro.hit.gemius.pl
redevents-bigdata.redefine.pl
accscdn.m.taobao.com
acs.m.taobao.com
report.banorte.glassboxdigital.io
log.core.cloud.vewd.com
a1h91ecnmw3isq-ats.iot.us-west-1.amazonaws.com
mobile-collector.newrelic.com.cdn.cloudflare.net
self-events-data.trafficmanager.net
total-rekall.metrics.indazn.com
dishanalyticsandtesting.sc.omtrdc.net
4ae1981d8d1a370d08bf3d24f50f5baf47ef1b62.cws.conviva.com
biemffjjakefxlbom6zcwmvbiyy1q1663016176.uaid.imrworldwide.com
hpoahhuy2rocr9xb2kii0o2xeetb41663016176.uaid.imrworldwide.com
4ae1981d8d1a370d08bf3d24f50f5baf47ef1b62.cws.conviva.com
onedscolprdcus01.centralus.cloudapp.azure.com
onedscolprdeus02.eastus.cloudapp.azure.com
device-metrics-us-2.amazon.com
adslog.apexinnotech.com
adx.apexinnotech.com
norma-external-collect.meizu.com
gd-stats.jpush.cn
umengjmacs.m.taobao.com
amdcopen.m.taobao.com
tnc16-useast1a.byteoversea.com
snowplow-pixel.tradingview.com
telemetry.tradingview.com
device-metrics-us.amazon.com
svibeacon.onezapp.com
p-cg64-slinganalytics.movetv.com
log.showmax.com
crash-reporting.duowan.com
www.blockadsnot.com
mobile-data.onetrust.io
www.maxonclick.com
tuplogpublic.bangcdn.net
api-js.datadome.co
smetrics.showtime.com
p.typekit.net
js.driftt.com
distillery.wistia.com
suphelper.com
cdn.ftd.agency
graph.accountkit.com
report-edge.agora.io
go.trouter.skype.com
ap-oversea.agora.io
api.mediation.amberweather.com
lcprd1.samsungcloudsolution.net
global.cmcs.service.amazonsilk.com
cdn.samsungcloudsolution.com
nav.smartscreen.microsoft.com
scs.samsungqbe.com
rvf7b1j85lihhgo5mr3fc8u2r.litix.io
eventlog.willow.tv
unagi-na.amazon.com
incoming.telemetry.mozilla.org
consent-api.service.consent.usercentrics.eu
graphql.usercentrics.eu
api.usercentrics.eu
app.usercentrics.eu
embed-fastly.wistia.com
embed-ssl.wistia.com
teredo.ipv6.microsoft.com
www.msftncsi.com
connectivitycheck.gstatic.com
www.joowkijejv.com
fwallwihsmjun.com
saushoag.net
static.addtoany.com
dnhfi5nn2dt67.cloudfront.net
ku2d3a7pa8mdi.com
www.blockadsnot.com
passedofferundertake.com
glizauvo.net
inpage-push.com
joowkijejv.com
mobile-data.onetrust.io
shookcooperassociate.com
push-link.duowan.com
config.hiido.com
hlog.hiido.com
pangolin16.isnssdk.com
collect.analytics.unity3d.com
branch.wallet.bitcoin.com
try.faceapp.com
tuplogpublic.bangcdn.net
akoss.bangcdn.net
ksehinkitw.hair
arithmeticshovel.com
ds88pc0kw6cvc.cloudfront.net
d10lumateci472.cloudfront.net

jawz101 added a commit that referenced this issue Oct 3, 2022
@jawz101
Copy link
Contributor

jawz101 commented Oct 3, 2022

I added these 04f783e

except for the ones in this last post. The Adaway list is JUST for Mobile ads and trackers. If you're browsing the web or getting spam emails, viruses, and catching cloudfront and other obscure domains and whatnot, I don't want the list to be full of hostnames not on the mobile app landscape.

This is where I'd want to keep it trimmed down to the 7000-ish or so domains when some of these might be short-lived or not on subject.

One thing I do to isolate the domains I look for is search for them on VirusTotal to see if Android apps communicate to those domains

example: https://www.virustotal.com/gui/domain/shalltry.com/relations

I may also try installing an app or game and use NetGuard Pro version to log all app DNS lookups (that is, I specifically exclude my mobile browser traffic. I use Firefox for Android w/ uBlock Origin to block web ads anyways.)
Then I get a culled down list just coming from my mobile apps. Say, in personalDNSfilter, I would whitelist my browsers & email clients so I wasn't getting their traffic logged.

You're suggesting a lot of familiar domains so I like the stuff you're seeing. It's just keeping them on point.

When I see ones starting with www, cloudfront domains, smetrics (aka sitemetrics) I think I'm having to contend with junk from browsing the web.

These really need to be scrutinized. The Adaway list funnels into several bigger ad blocklists and products so it can cause some headaches if some things get blocked. Say, the device metrics amazon ones can break Amazon Alexa devices. The Microsoft and Windows ones can break general bug reporting and telemetry stuff. I've even read of some of them draining phone battery if they get blocked. If you open a game and suddenly some video ad plays or you do a web search on one of these domains and it says 'we track location beacons' or something- that's where it's an easy choice but 324242342.cloudfront.com or onedscolprdcus0n.centralus.clooudapp.azure.com aren't too obvious to go on.

If you have example apps instead of a long log of DNS lookups it helps. Like the more I get sent, the less I'm going to want to go through and look at :/

@trackerct
Copy link
Author

Thank you

ps: alog.umeng.com

@spirillen
Copy link
Contributor

@trackerct If you like these to be put into the big lexicon at https://mypdns.org/ I suggest you

  1. Separates your lists into per category
  2. Uses our mass commit tool in our Firefox addon
  3. Also add a comment about why you think this is... and or where you have found it.

@trackerct
Copy link
Author

@trackerct If you like these to be put into the big lexicon at https://mypdns.org/ I suggest you

  1. Separates your lists into per category
  2. Uses our mass commit tool in our Firefox addon
  3. Also add a comment about why you think this is... and or where you have found it.

Thank you so much. Trying...

@trackerct
Copy link
Author

I added these 04f783e

except for the ones in this last post. The Adaway list is JUST for Mobile ads and trackers. If you're browsing the web or getting spam emails, viruses, and catching cloudfront and other obscure domains and whatnot, I don't want the list to be full of hostnames not on the mobile app landscape.

This is where I'd want to keep it trimmed down to the 7000-ish or so domains when some of these might be short-lived or not on subject.

One thing I do to isolate the domains I look for is search for them on VirusTotal to see if Android apps communicate to those domains

example: https://www.virustotal.com/gui/domain/shalltry.com/relations

I may also try installing an app or game and use NetGuard Pro version to log all app DNS lookups (that is, I specifically exclude my mobile browser traffic. I use Firefox for Android w/ uBlock Origin to block web ads anyways.) Then I get a culled down list just coming from my mobile apps. Say, in personalDNSfilter, I would whitelist my browsers & email clients so I wasn't getting their traffic logged.

You're suggesting a lot of familiar domains so I like the stuff you're seeing. It's just keeping them on point.

When I see ones starting with www, cloudfront domains, smetrics (aka sitemetrics) I think I'm having to contend with junk from browsing the web.

These really need to be scrutinized. The Adaway list funnels into several bigger ad blocklists and products so it can cause some headaches if some things get blocked. Say, the device metrics amazon ones can break Amazon Alexa devices. The Microsoft and Windows ones can break general bug reporting and telemetry stuff. I've even read of some of them draining phone battery if they get blocked. If you open a game and suddenly some video ad plays or you do a web search on one of these domains and it says 'we track location beacons' or something- that's where it's an easy choice but 324242342.cloudfront.com or onedscolprdcus0n.centralus.clooudapp.azure.com aren't too obvious to go on.

If you have example apps instead of a long log of DNS lookups it helps. Like the more I get sent, the less I'm going to want to go through and look at :/

Thank you. I love adaway and i want to use adaway:)

de-gdpr-exstatic-vivofs.vivo.com
appad.cyberlink.com
e7126.dscd.akamaiedge.net
rum.browser-intake-datadoghq.com
logs.browser-intake-datadoghq.com
www.datadoghq-browser-agent.com
s2.go-mpulse.net
p11.techlab-cdn.com
jenson.api.swiftkey.com.
p.midasplayer.com
ccss.play.king.com
pro-1w-dataaggregator.onelouder.com
stats.clover.co
bestwesterninternati.tt.omtrdc.net
prebid-server.rubiconproject.com
get.geojs.io
mebed.dm-event.net
pebed.dm-event.net
tofu.dmcdn.net
dmxleo.dailymotion.com
vendorlist.dmcdn.net
speedtest.dailymotion.com
corp.sts.microsoft.com
link.medium.com
o43253.ingest.sentry.io
serve.tercept.com
events.mapbox.com
sdk-01.moengage.com
manager.smartlook.com
api.snapkit.com
saa.paramountplus.com
o375585.ingest.sentry.io
hoverfly.papercrowns.com
httpproxy.data.ada.com
mfl-badger-prod-statscluster.moonfroglabs.com
geolocation.onetrust.com

@trackerct
Copy link
Author

trackerct commented Oct 10, 2022

more Vivo mobile spiesss

asia-exstatic.vivo.com
vcm-static.vivo.com
co-vcode-api.vivoglobal.com
co-vcode-h5-od.vivoglobal.com
asia-err-up.vivoglobal.com
asia-third-appstore.vivoglobal.com
asia-vcode-api.vivoglobal.com
asia-vcode-or.vivoglobal.com
asia-stp.vivoglobal.com
asia-romsp-unifyconfig.vivoglobal.com
asia-monitor-stsdk.vivoglobal.com
asia-onrt-stsdk.vivoglobal.com
asia-pnrt-stsdk.vivoglobal.com
asia-commonitor-stsdk.vivoglobal.com
asia-comonrt-stsdk.vivoglobal.com
asia-comort-stsdk.vivoglobal.com
asia-compnrt-stsdk.vivoglobal.com
asia-comprt-stsdk.vivoglobal.com

more trackers/ads

log.uu.easebar.com
crash.uu.easebar.com
mobile.uu.easebar.com
uumov.fp.ps.easebar.com
uuov.fp.ps.easebar.com
uu.fp.ps.netease.com
mg.uu.163.com
adx.adsgaga.com
log-mediation.smartvisionapp.com
cfg.smartvisionapp.com
cfg-mediation.smartvisionapp.com
wcpstatic.microsoft.com
statics-marketingsites-neu-ms-com.akamaized.net
mybbc-analytics.files.bbci.co.uk
a1.api.bbc.co.uk
cdn3.optimizely.com
report.netgear.glassboxdigital.io
api.instabug.com
cdn.optimizely.com
s2s.aniview.com
zerossl.crt.sectigo.com
stream-us-east-1.getpublica.com
s0.2mdn.net
status.metaxads.com
rtbus.ssp.metaxads.com
policy.seraphic-corp.com
uk-script.dotmetrics.net
clientlog.baechat.my
vmweb-va.byteoversea.com
mssdk-va.tiktok.com
sf16-static.i18n-pglstatp.com
sf16-muse-va.ibytedtos.com
analytics.zenly-app.com
log.tpns.sgp.tencent.com
vibeacon.onezapp.com
htrace.wetvinfo.com
mtrace.wetvinfo.com
vibeaconstr.onezapp.com
btrace.wetvinfo.com
vtrace.wetvinfo.com
logs.us-east-1.amazonaws.com
g792337343.co
177657.tracking.hyros.com
b-code.liadm.com
seo.apps.avada.io
instant.page
cdn-app.pathfactory.com
consent.cookiefirst.com
freegeoip.live
cdn-cs.conductor.com
my.hellobar.com
snippet.growsumo.com
partnerlinks.io
partnerstack.ada.support
static.ada.support
rollout.ada.support
grsm.io
cdn.subscribers.com
utt.impactcdn.com
e1e6d41a09e1.cdn4.forter.com
ws.zoominfo.com
api.indicative.com
log-va.tiktokv.com
ads.dogusdigital.com
rt.visilabs.net
tags.bluekai.com
collector.puhutv.com
lgr.visilabs.net
ma1226-r.analytics.edgesuite.net
ads.dygdigital.com
api.vip.miui.com
sdkconfig.ad.xiaomi.com
data.sec.miui.com
an.yandex.ru
sapphire-api.target.com
goto.target.com
uefa.sb.blueconic.net
eu1.clevertap-prod.com
public.edigitalresearch.com
x.everestop.io
api.speedspot.org
b2.etrality.com
net.etrality.com
a.58dac16e7b2c86c19cfe48914a6e8fcdac9ae06fe5cf53369beaa45b.com
survey.survicate.com
sdk.iad-06.braze.com
o540540.ingest.sentry.io
mam.netease.com
wannos.127.net
statistic.live.126.net
mam6.netease.com
zn2rjw8v8ecfgyigt-paypalxm.siteintercept.qualtrics.com
c.paypal.com
b.stats.paypal.com
o436621.ingest.sentry.io
api.segment.io
api2.branch.io
d32z5ni8t5127x.cloudfront.net
tnc16-alisg.isnssdk.com
tnc16-useast1a.byteoversea.com
tnc16-useast1a.isnssdk.com
tnc16-alisg.byteoversea.com
ads.api.vungle.com
gdl.news-cdn.site
api.imotech.tech
da.anythinktech.com
tk.anythinktech.com
api.anythinktech.com
analytics.coollabs.io
coolify.io
coollabs.io
direct.applog-lb-texas.useast5.byteoversea.net
mcs-va.tiktok.com
mcs-va.tiktok.com.edgekey.net
auditrecording-pa.googleapis.com
cmdts.ksmobile.com
sa.api.intl.miui.com
qualcomm.sc.omtrdc.net
metrics.brightcove.com
edge-elb.api.brightcove.com
xtrapath1.izatcloud.net
xtrapath2.izatcloud.net
xtrapath3.izatcloud.net
www-alv.google-analytics.com
secure.insightexpressai.com
alb.reddit.com
events.redditmedia.com
cdn.parsely.com
browser-http-intake.logs.datadoghq.com
o248881.ingest.sentry.io
s13.cnzz.com
stream-us-east-1.getpublica.com
j.6sc.co
cdn.b0e8.com
polyfill.io
sotalcloud.blob.core.windows.net
zncvomiueeqmfxynn-tracfone.siteintercept.qualtrics.com
bf37534ykp.bf.dynatrace.com
imagesvc.meredithcorp.io
srtb.msn.com
cn.bing.com
in.appcenter.ms
static-mon.yandex.net
collect.tealiumiq.com
smetrics.vodafone.co.uk
vodafoneuk.tt.omtrdc.net
api.bugfender.com
netperform-lz.vodafone.com
gcpsmapi.vodafone.com
hellosmpl.com
lb.revotas.com
revocdn.revotas.com
eturkcell.netmera.com
sdkapi.netmera.com
restapi.netmera.com
certify-js.alexametrics.com
id.ad-plus.com.tr
searchanalytics.turkcell.com.tr
fast.fonts.net
log.byteoversea.com
gecko-sg.byteoversea.com
mon.byteoversea.com
mon.isnssdk.com
mon-va.tiktokv.com
api-eu1.hubspot.com
js-eu1.hscollectedforms.net
forms-eu1.hsforms.com
js-eu1.hs-banner.com
js-eu1.hs-scripts.com
livewp.site
ntm.netmera-web.com
js-eu1.usemessages.com
cdn.netmera-web.com
www.tapresearch.com
mr.fullstory.com
adminlogin.liveperson.net
api.pushio.com
mobile-http-intake.logs.datadoghq.eu
sdk.fra-01.braze.eu
h.trace.qq.com
oth.eve.mdt.qq.com
othstr.beacon.qq.com
oth.str.mdt.qq.com
btrace.qq.com
iqoption.com
event.id-iqoption.com
api3.siftscience.com
cdn.krxd.net
service.cmp.oath.com
o77029.ingest.sentry.io
m.stripe.com
bf97804kct.bf.dynatrace.com
trk.storyly.io
track.saygames.io
tag.targeting.unrulymedia.com
rclog.rcplatformhk.com
alogsus.umeng.com
alogus.umeng.com
rcscdata.livuchat.com
sdk-api-v1.singular.net
subway-surfers.sng.link
click.snapchat.com
at.iocnt.net
logs152.xiti.com
config-at.iocnt.net
config.mpianalytics.com
sdk.privacy-center.org
scmetrics.shell.com
dc.services.visualstudio.com
shell.data.adobedc.net
shell.tt.omtrdc.net
mobile-collector.newrelic.com
api.rudderlabs.com
hm.baidu.com
mc2m55m4y9pvd1q7lngvt61w9tjq.device.marketingcloudapis.com
swasc.kaufland.com
pok.mintegral.net
vlogerads.com
l.urioy.com
api.urioy.com
api-sdk.datadome.co
o315582.ingest.sentry.io
o502112.ingest.sentry.io
customers.kameleoon.com
public.profitwell.com
static.fbot.me
3zutpy0bjn.kameleoon.eu
campaign.fbot.me
api.iterable.com
static.hotjar.com
o534899.ingest.sentry.io
log.go.com
unid.go.com
identity.mparticle.com
config2.mparticle.com
dominospizza.sc.omtrdc.net
dominos.bttn.io
app-1c835e5474e6a378.mobileapi.usebutton.com
l1-1.anzu.io
server.bidstack.com
pinpoint.us-east-1.amazonaws.com
tracker-api.my.com
ip4.tracker-api.my.com
cc-api-data.adobe.io
adobemobiledev.sc.omtrdc.net
csdkapi-policy.adobe.com
cc-api-behance.adobe.io
sensors.binance.cloud
c.riskified.com
h.online-metrix.net
log.bntrace.com
jpush.bntrace.com
www.mokexapp.cloud
client-analytics.braintreegateway.com
get.venmo.com
widget.criteo.com
creditonebank.sc.omtrdc.net
mobile.confsettings.com
md-a-c.apptimize.com
click.emails.creditonebank.com
sdk.iad-05.braze.com
bf76686hfr.bf.dynatrace.com
o331365.ingest.sentry.io
regionconfig.amplitude.com
ipapi.co
balancer.voximplant.com
images-dl.taboola.com
o248881.ingest.sentry.io
servicemagic.sc.omtrdc.net
sdk.out.usbla.net
api-analytics.prod.birdapp.com
mobile-production.content-square.net
edge.adobedc.net
engage.vzw.com
scache.vzw.com
track.tenjin.com
static.site24x7rum.eu
salesiq.zoho.com
zohotagmanager.cdn.pagesense.io
apptics.zoho.com
ff54f-92afa.api.pushwoosh.com
post-log.pushwoosh.com
d0bc1-29659.api.pushwoosh.com
tags.bluekai.com
rt.visilabs.net
lgr.visilabs.net
datacollector-dre.dt.hicloud.com
zc.adswizz.com
a-fds.youborafds01.com
tls13.taboola.map.fastly.net
api64.com
co4.telecommand.telemetry.microsoft.com.akadns.net
geller-pa.googleapis.com
secure.leadforensics.com
admedo.activehosted.com
admedo.com
heapanalytics.com
kvinit-prod.api.kochava.com
events.split.io
ace.naver.com
lcs.naver.com
d3clybje3sun07.cloudfront.net
api2.branch.io
metrics2.data.hicloud.com
dnkeeper.hicloud.com
grs.dbankcloud.cn
grs.dbankcloud.asia
grs.platform.dbankcloud.ru
connectivitycheck.platform.dbankcloud.com
sdk-b.apptornado.com
sdk.appbrain.com
infoevent.startappservice.com
adsmetadata.startappservice.com
sdk-exchange.startappservice.com
adsmetadata.mobileadexchange.net
info.startappservice.com
pls.prd.mz.internal.unity3d.com
answers.chartboost.com
perf-events.cloud.unity3d.com
evt.mxplay.com
mxvp-feature-toggle-prod-1.zenmxapps.com
i.mxplayer.j2inter.com
live.mxplay.com
mon-va.byteoversea.com
mcs-va.tiktokv.com
platform.linkedin.com
mon-va.byteoversea.com
ipcheck.tmgrup.com.tr
api.segment.io
getir-prod.api.kustomerapp.com
consent.cookiebot.com
tr.hit.gemius.pl
gatr.hit.gemius.pl
ad01.tmgrup.com.tr
cdn.dimml.io
vsh.visilabs.net
cdn.cookie-script.com
static.axept.io
cdn.firstpromoter.com
loader.wisepops.com
app.mindbehind.com
ghmtr.hit.gemius.pl
static.bitlo.com
dc.services.visualstudio.com
cookiehub.net
fg8vvsvnieiv3ej16jby.litix.io
www.clickcease.com
www.clarity.ms
cdn.ywxi.net
dmxleo.dailymotion.com
vendorlist.dmcdn.net
sdk.iad-01.braze.com
alog.umengcloud.com
speedtest.dailymotion.com
corp.sts.microsoft.com
rum.browser-intake-datadoghq.com
logs.browser-intake-datadoghq.com
bestwesterninternati.tt.omtrdc.net
www.datadoghq-browser-agent.com
s2.go-mpulse.net
p11.techlab-cdn.com
0.datadog.pool.ntp.org
jenson.api.swiftkey.com
telemetry.api.swiftkey.com
king-contenido-prod.secure2.footprint.net
p.midasplayer.com
servicelayer.king.com
ccss.play.king.com
o248881.ingest.sentry.io
mobile.yandexadexchange.net
report.appmetrica.yandex.net
imptrk.siteplug.com
cookie-cdn.cookiepro.com
api.theadex.com
de.ioam.de
config.ioam.de
lms.ebayk.liberty-prod.classifiedscloud.io
cdn.permutive.app
sanalytics.verizon.com
engage.vzw.com
cdp.cloud.unity3d.com
config.uca.cloud.unity3d.com
helium-rtb.chartboost.com
cdn.personaclick.com
assets.cookieseal.com
cdn-api.admost.com
med-api.admost.com
telve-3cf61.firebaseio.com
app.tr.adjust.com
datacollector-dre.dt.hicloud.com
remote.appsgeyser.com
config.appsgeyser.com
ads.appsgeyser.com
stat.appsgeyser.com
cdn.i-artserveis.net
scopely-wheeloffortune.adsbynimbus.com
adsgard.aprod.scopely.io
fenrir-resolver.aprod.scopely.io
6b73d00a-d4a1-4350-825a-cd3f49afa460.register.collector.scopely.io
wof.aia.apponboard.com
niantic.api.kws.superawesome.tv
infoevent.startappservice.com
hoverfly.papercrowns.com
get.geojs.io
mebed.dm-event.net
pebed.dm-event.net
tofu.dmcdn.net
r.remarketingpixel.com
www.skassets.com
cdn.izooto.com
adsxyz.com
sdk.fra-01.braze.eu
nan46ysangt28eec.com
ad.particlenews.com
log.particlenews.com
toblog.tobsnssdk.com
wkrd.tingyun.com
plausible.io
rallydisprove.com
ad.mail.ru
htlb.casalemedia.com
colossalcoat.com
cmp.optad360.io
get.optad360.io
prg.smartadserver.com
ads.vidoomy.com
c2shb.ssp.yahoo.com
www.adspirit.com
adspirit.de
cdn.consentmanager.mgr.consensu.org
consentmanager.mgr.consensu.org
cdn.adspirit.de
crm.adflex.com.tr
adtarget.com.tr
link.medium.com
o43253.ingest.sentry.io
serve.tercept.com
events.mapbox.com
sdk-01.moengage.com
manager.smartlook.com
topapps-func.pinsightmedia.com
api.snapkit.com
ceres.iad-03.braze.com
kvinit-prod.api.kochava.com

@Hill-98
Copy link

Hill-98 commented Oct 26, 2022

Blocking client-uc.heytapmobi.com will prevent OPPO phone users from using OPPO accounts normally.

@trackerct
Copy link
Author

Blocking client-uc.heytapmobi.com will prevent OPPO phone users from using OPPO accounts normally.

Removed. Thank you

@trackerct
Copy link
Author

trackerct commented Oct 26, 2022

tr-album-api.vivoglobal.com
asia-exstatic.vivo.com
vcm-static.vivo.com
co-vcode-api.vivoglobal.com
co-vcode-h5-od.vivoglobal.com

vas.samsungapps.com
ew1.api.cfpd.bdp.samsung.com
tr-odc.samsungapps.com.wtxcdn.com
tr-odc.samsungapps.com
dualstack.tls13.taboola.map.fastly.net
track.adformnet.akadns.net
tagr-gcp-odr-euw4.mookie1.com
cm.everesttech.net.akadns.net
fe-pew1-ext-openapi-lb-547958838.eu-west-1.elb.amazonaws.com
elb-p-mg-cfpolicy-ew1-001-1325558153.eu-west-1.elb.amazonaws.com
e8091.a.akamaiedge.com

ad01.tmgrup.com.tr
l.flat-ads.com
api.flat-ads.com
delivery.adrecover.com
tpx.tesseradigital.com
cdn.serve.admatic.com.tr
events.mz.unity3d.com
mpush-api.aliyun.com
adash-emas.cn-hangzhou.aliyuncs.com
amdcopen.m.taobao.com
log.haberturk.com
v.gez.io
adl.mynetreklam.com
sc.cdnstr.com
ad.medyanetads.com
tsis.jpush.cn
adx.ads.vungle.com
ad.sxp.smartclip.net
securepubads46.g.doubleclick.net
dsp.adfarm1.adition.com
track.adformnet.akadns.net
ls.hit.gemius.pl
rpdn.relateddigital.com
wps.relateddigital.com
wd.adcolony.xyz
adobetarget.data.adobedc.net
ams01.sync.search.spotxchange.com
vodafoneturkey.demdex.net
androidads4-6.adcolony.com
cdn-setting.rayjump.com
thind-gke-usc.prd.data.corp.unity3d.com
remote-config-prd.uca.cloud.unity3d.com
cdn-store-icons-akamai-prd.unityads.unity3d.com
cdn-creatives-akamaistls-prd.acquire.unity3dusercontent.com
ads-sdk-configuration-gcp.unityads.unity3d.com
cdn-ketchapp.akamaized.net
e35904.dscf.akamaiedge.net
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com
k8s-fairbids-fevfyber-89e25a72fe-1540832213.us-east-1.elb.amazonaws.com
e35904.f.akamaiedge.net
cdn.liftoff-creatives.io
e7178.f.akamaiedge.net
cds.a6y8g4g2.hwcdn.net
a1958.dsdc.akamai.net
e3422.dscd.akamaiedge.net
cds.s2m5b2y6.hwcdn.net
a824.dscw27.akamai.net
nginx-auction12-prd.unityads.unity3d.com
a1822.dscd.akamai.net
d1k15gitkzferqo.cloudfront.net
winner-lb2-da7888c8ad57a09f.elb.eu-central-1.amazonaws.com
a2047.dscapi3.akamai.net
huracan-936647329.us-east-1.elb.amazonaws.com
s-v6exp1-v4.metric.gstatic.com
lgr.visilabs.net
rt.visilabs.net
avlsh.visilabs.net
s.visilabs.net
vsh.visilabs.net
mbls.visilabs.net
fundingchoicesmessages.google.com
ds-pr-bh.ybp.gysm.yahoodns.net
bam.nr-data.net.cdn.cloudflare.net
r2---sn-5goeen7y.c.2mdn.net
r2---sn-5go7ynl6.c.2mdn.net
r4---sn-5goeen7y.c.2mdn.net
r1---sn-5go7ynez.c.2mdn.net
fk-new-cdn-eu-central-1b-hb.rayjump.com
configure-tcp-android.rayjump.com
adsessionserv.com
att.inq.com

vodafoneuk.tt.omtrdc.net
pictures.personaclick.com
static.personaclick.com
api.personaclick.com
cdn-static.personaclick.com
cdn.personaclick.com
statis.multispaces.net
api.multispaces.net
sensors.dito.ph
dspres.dgtverse.com
public.transacme.com
static.ahagamecenter.com
thirdback.eagllwin.com
callback.kkuid.com
a.8392c6e79df6ad8a3ab1fa972ec327855198c2d4cdf46aacc93d0c76.com
mdmserver.mobidia.com
in1.api.clevertap.com
mzn65.veve.com
controller.jio-cdn42.net
hiview-log-01.obs.eu-de.otc.t-systems.com
ss-user-privacy.kingsgroupgames.com
kg-logagent-ss.kingsgroupgames.com
devs-data.dutils.com
adserverapi.psafe.com
report.mbheroes.com
track.bi.moonton.com
analyticsstorage-prod.europe-west1.firebasedatabase.app
myattlog.att.com
log-mediation.easemobi.net
uicrashtracer.tesla.com
acs4public.m.taobao.com
daa.mobilewalla.com
pixelapi.stg.cs.mysamba.tv
na-dps.mplatform.com
mobile.truste.com
cis.yndhi.com
partner-mobile.truste.com
logs4.papertrailapp.com
nexus-websocket-a.intercom.io
exp.host
api-alexa-router.tplinknbu.com
s.xsdacdn.com
log.internetat.tv
mpush-api.aliyun.com
adash-emas.cn-hangzhou.aliyuncs.com
amdcopen.m.taobao.com
api.share.mob.com
beacon-api.aliyuncs.com
log.haberturk.com
v.gez.io
adl.mynetreklam.com
sc.cdnstr.com
ad.medyanetads.com
tsis.jpush.cn
static.site24x7rum.com
riza.efilli.com
cdn.efilli.com
chimpstatic.com
info.udemy.com
analytics.zenly-app.com
log.tpns.sgp.tencent.com
vibeacon.onezapp.com
htrace.wetvinfo.com
mtrace.wetvinfo.com
vibeaconstr.onezapp.com
btrace.wetvinfo.com
vtrace.wetvinfo.com
logs.us-east-1.amazonaws.com
alimelog.taobao.com
adiu.amap.com
grs.platform.dbankcloud.ru
hapselli.api.appboy.eu
geocheck.sim-technik.de
adclick.startappservice.com
sdk-exchange.startappservice.com

mssdk16-platform-useast5.us.tiktokv.com
mon16-platform-useast5.us.tiktokv.com
dl.airtable.com
0b1fa2aa448941e6bc3a3e9f9cc57c20.js.ubembed.com
bugly-android.mgapex.com
sdk-api-v1.singular.net
api-deviq.prod.tivoservice.com
mobile-collector.eu01.nr-data.net.cdn.cloudflare.net
mobile-collector.eu01.nr-data.net
client-logging.live-hub.net
jslogger.sbtech.com
locate.measurementlab.net
api.hyperbid.com
tk.hyperbid.com
da.hyperbid.com
push.enjoymobiserver.com
ad.intools.dev
checkip.amazonaws.com
enjoyads.videoshowapp.com
flogmacaroni.com
a.privacity.se
check.unity.cn
report-oversea2.agora.io
ap-oversea-tls.agora.io
ap-oversea2.agora.io
ap-oversea.agora.io
www.digitalturbine.com
pi.pardot.com
sdkconf.avlyun.com
ssp-3-9f58.trnox.com
cse.avlyun.com
h5hosting-dre.dbankcdn.com
store-dre.hispace.dbankcloud.com
openapi.palmmerchant.com
api.seax1.com
track.buzzvil.com
sentry.cafebazaar.org
app.adtrace.io
tracking.bi.psafe.com
adserverapi.psafe.com
ad.videocontact.net
nr.bidderstack.com
cdn.polyfill.io
vpntest-marketing66.herokuapp.com
abtest.tantanapp.com
report.tantanapp.com
client-tracking.tantanapp.com
sc-report.tantanapp.com
deviceid.tantanapp.com
counter.tantanapp.com
config-api.internet.apps.samsung.com
sf1-cdn-tos.huoshanstatic.com
adpmobiledebug.page.link
analytics-lal-nba.yinzcam.com
ads-lal-nba.yinzcam.com
api.adtech.etermax.com
gdpr-tcfv2.sp-prod.net
mynt-test-privacy.my.onetrust.com
analytics.meaww.com
cdn.sprig.com
api.sprig.com
vmweb-va.byteoversea.com
mssdk-va.tiktok.com
sf16-static.i18n-pglstatp.com
sf16-muse-va.ibytedtos.com
clientlog.baechat.my
104.fastput.net

@trackerct
Copy link
Author

trackerct commented Nov 4, 2022

imasdk.googleapis.com
(The IMA SDK is a Google Ads SDK that allows developers and publishers to show interactive and video ads on their websites and mobile apps.)

fundingchoicesmessages.google.com
(Funding Choices has moved into the ad platforms)

dit.whatsapp.net
(De-identified Telemetry (DIT)

pagead-googlehosted.l.google.com
csm.am5.vip.prod.criteo.net
ssum-sec-casalemedia.com
ssum-sec-casalemedia.com.cdn.cloudflare.net
istrp.adform.net
static.par.vip.prod.criteo.com
securepubads46.g.doubleclick.net
region1.analytics.google.com
ad-cdn.bilgin.pro
beacons.handoff.gcp.gvt2.com
beacons.gcp.gvt2.com
www3.doubleclick.net
cdn2.popcash.net
api.trackpush.com
client.trackpush.com
adsparc.com
cdn.carbonads.com
collector.wawlabs.com
beacons3.gvt2.com
adclick.startappservice.com
startup.mobile.webvisor.com
u.startup.mobile.webvisor.com
sdk-diagnostics.prd.mz.internal.unity3d.com
r2---sn-5goeen7y.c.2mdn.net
r2---sn-5go7ynl6.c.2mdn.net
r4---sn-5goeen7y.c.2mdn.net
r1---sn-5go7ynez.c.2mdn.net
logger.nktcdn.com
logger.virgul.com
0i0i0i0.com
b.isbnrs.com
istlnkbn.com
highperformancedformats.com
westats.dev
www.statisgeek.com
sdk.ad.smaato.net
collector-pxxgcxm9by.cl6.px-cloud.net
api.fouanalytics.com
pixel.adsafeprotected.com
rosenberg.appmetrica.yandex.net
gdetr.hit.gemius.pl
log.strm.yandex.ru
analytics.silktide.com
hepsiburada01.webtrekk.net
adservice.google.com.tr
turktelekom.api.useinsider.com
cdn-netmeraprod.turktelekom.com.tr
countly.turktelekom.com.tr
pnsdkapi.turktelekom.com.tr
samsungturkey.demdex.net
mp.subservis.com
visit-prod-us.occa.ocs.oraclecloud.com
visit-prod-eur.occa.ocs.oraclecloud.com
clickserve.dartsearch.net
api.apphud.com
samcm.ksmobile.com
samcmsec.ksmobile.com
www.wshifen.com
ddf14d6dce2957067b9aacf4280d766c.safeframe.googlesyndication.com
494d6512ed5a331f432bb8fbf3498b98.safeframe.googlesyndication.com
662424e40dcf116c76576d64b097d46a.safeframe.googlesyndication.com
8d2291e8cb65847ef70e4bc6a2d3d074.safeframe.googlesyndication.com
c5da38ed03a25a6bdea2b980de3c67f5.safeframe.googlesyndication.com
f4116e36cdcb85e4685ff218585bc1de.safeframe.googlesyndication.com
fdc042e5f4b90fd7df437deaa187eb69.safeframe.googlesyndication.com
api.samsungspd.com
api.spd.samsungdm.com
eu-dir-apis.samsungdiroute.net
dir-apis.samsungdm.com
ampcid.google.com
ampcid.google.com.tr

I dont know what is this but dns flooding, exceeds 20 queries in 60 seconds

w34fa9d421-gqydsmbqgi2tsmbs.snr.whatsapp.net
sonar.fist1-3.fna.whatsapp.net

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants