They own zone Konterra.com which is already blocked upstream, and have been implicated in DataSpii.
It *looks* like they were probably a consumer of Nacho Analytics data rather than being involved in collection of data from end users, but as their business is tracking they're being blocked anyway
Grapeshot is an analytics/tracking/"customer engagement" system
They appear to use a subdomain per customer, so block the entire zone - does mean their www goes inaccessible, but it's fairly minor as collateral damage goes
URL observed from msn.com: https://www.sdad.guru/i10c@p1/cenome/endpoint/nanovisor?inp=www.msn.com&env.app=nanovisor&env.appVersion=10.6.37&env.instance=morpheus
- The bare domain points at a GoDaddy domain parking page.
- Attempts to connect to the document root of www.sdad.guru results in the server tearing down the connection.
Combined, that's sufficiently suspicious to warrant a block without beautifying the JS it's serving.
ADBLK-8 Adding example script for pulling zones (only) into unbound
My DNS server has a read-only root partition (with a writeable /var), so my deployment using this went as follows:
```
mkdir /var/unbound_blocks
cd /etc/unbound/local.d
mount -o remount,rw /
ln -s /var/unbound_blocks/ adblocks
cd /var/unbound_blocks/
nano unbound_block_zones.sh # Following this commit, should just be able to wget it
chmod +x unbound_block_zones.sh
./unbound_block_zones.sh
cd /etc/unbound/
nano unbound.conf
service unbound reload
This domain is identical in behaviour to the domain blocked in ADBLK-3
{noformat}ben@milleniumfalcon:~/Documents/src.old/adblock_lists$ host swa.metro.co.uk
swa.metro.co.uk is an alias for metro.co.uk.102.122.2o7.net.
metro.co.uk.102.122.2o7.net has address 130.248.129.181
{noformat}
Also explicitly blocking the zone {{2o7.net}} so that Pi-Hole's consuming my lists should stop resolving anything that's cnamed out to 2o7.net
Pushly allows sites to push notifications to your browser - something I neither need nor want - and as a result get to see a reasonable chunk of your browsing history (at least amongst news sites)
Rumble.com claims to "MANAGE YOUR PROFESSIONAL, SOCIAL AND VIRAL VIDEOS ON RUMBLE"
But, these calls don't seem to result in any kind of video/player relevant to the content being embedded. So all that's happening is the source page (in this case, ruinmyweek.com) is sending the current URL to a 3rd party - which seems to line up with the fact they also offer analytics services
Unequalbrake *claims* to be a DMCA blocking tool. However, it appears to actually be used to serve adblock detection scripts.
Even were that not the case, Copyright policing is a task for the copyright holders, and not something that should result in javascript being pushed into my browser (why would a copyright violating site willingly serve that JS anyway?)
Domain is registered in the Russian Federation - See https://domainbigdata.com/nj/UOohi_cUwW7RAqbMzqnTAC2jqcza7RGNqHuv5EdHt9g for list of registrants other domains
Had previously left these unblocked as I do find some use in the "tweet" buttons, but in retrospect I'd rather write a greasemonkey script to embed one than have Twitter track
All get called when using Freshdesk/Freshservice. Not needed (and man that's a lot of analytics products they're using), so blocking. Service performs a lot faster in Firefox afterwards.
Remove some redundant rules (as they're covered by a wildcard that was added later) and support for additional domains
1337x.to have a list of their domains here - http://1337x.to/about
Block JS on all of them, including the new cgi-cdn path they've added at some point.
They also use inline scripts for ads, so if you're using Ublock it's recommended to block these too, but you'll also then need to use a tampermonkey script to override their clickjack protection and make the page display:
// ==UserScript==
// @name New Userscript
// @namespace http://tampermonkey.net/
// @version 0.1
// @description try to take over the world!
// @author You
// @match http://1337x.to/*
// @grant none
// ==/UserScript==
(function() {
'use strict';
var antiClickjack = document.getElementById("antiClickjack");
antiClickjack.parentNode.removeChild(antiClickjack);
})();
Or, you know, just pay for your content at a legitimate source ;)
Whilst I approve of the idea of trying to warn people when their browser is out-of-date, ultimately it's still being done by pulling scripting resources from an untrusted third party
Add the manually controlled lists of domains to block.
This is the primary reason for moving into a git repo. Any changes to these files should have a justification in the commit message (so I can keep track of why I've blocked a domain)
projects /
adblocklists.git
/ log