Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IP logging websites #4955

Open
5 tasks done
ExtRIELICi opened this issue Jan 21, 2025 · 4 comments
Open
5 tasks done

IP logging websites #4955

ExtRIELICi opened this issue Jan 21, 2025 · 4 comments
Assignees
Labels
deny Deny domain(s) fixed-pending-release Will be fixed in the next release

Comments

@ExtRIELICi
Copy link

Which blocklist(s) do you use?

Multi ULTIMATE

Which category do the domain(s) to be blocked belong to?

Malware/Badware/Phishing/Scam

Other category

No response

Which domain(s) should be blocked?

grabify.link
grabify.link
screenshare.pics
screenshare.pics
noodshare.pics
noodshare.pics
cheapcinema.club
cheapcinema.club
shhh.lol
shhh.lol
partpicker.shop
partpicker.shop
sportshub.bar
sportshub.bar
locations.quest
locations.quest
lovebird.guru
lovebird.guru
truelove.guru
truelove.guru
dateing.club
dateing.club
sherkis.life
sherkis.life
headshot.monster
headshot.monster
gaming-at-my.best
gaming-at-my.best
programming.monster
programming.monster
yourmy.monster
yourmy.monster
imageshare.best
imageshare.best
screenshot.best
screenshot.best
gamingfun.me
gamingfun.me
catsnthings.fun
catsnthings.fun
joinmy.site
joinmy.site
fortnitechat.site
fortnitechat.site
fortnight.space
fortnight.space
freegiftcards.co
freegiftcards.co
stopify.co
stopify.co
leancoding.co
leancoding.co
iplogger.org
iplogger.org
iplogger.com
iplogger.com
maper.info
maper.info
iplogger.ru
iplogger.ru
iplogger.co
iplogger.co
2no.co
2no.co
yip.su
yip.su
iplogger.info
iplogger.info
ipgrabber.ru
ipgrabber.ru
ipgraber.ru
ipgraber.ru
iplis.ru
iplis.ru
02ip.ru
ezstat.ru
ps3cfw.com
ps3cfw.com
ythingy.com
ythingy.com
www.yȯutube.com
www.yȯutube.com
www.gyazo.nl
www.gyazo.nl
www.xn--yutube-iqc.com
www.xn--yutube-iqc.com
www.webresolver.nl
www.webresolver.nl
roblox.com.lv
roblox.com.lv
tracker.iplocation.net
tracker.iplocation.net

Which website or app accesses the domain(s)?

Malicious domains of any kind, including malicious scripts.

Why should these domain(s) be blocked?

IP logging websites are used for malicious purposes and serve no legitimate function. In fact, my most recent badware issue included an embedded IP logger link within the script text file.

I believe that blocking such websites at the DNS level is crucial for protecting users. Therefore, I would like to suggest blocking all potential IP logging websites, at least in the Ultimate and full TIF lists.

Some of these domains are already blocked by HaGeZi lists, but I am unable to verify which ones are included or excluded.

If you agree with this proposal, could you please review the domains I reported, identify those not currently included, and add them?

Thanks!

Confirmation

  • I have verified that no existing issue explains why the domain(s) were previously unblocked or why the blocking request was declined.
  • I have verified that the domain(s) is/are not already blocked.
  • I have verified that the domain(s) is/are active and not inactive (dead).
  • I have provided sufficient details to justify the need for blocking the domain(s).

Terms

  • I confirm that the request does not contain any sexually explicit material or private/sensitive information.
@ExtRIELICi ExtRIELICi added the deny Deny domain(s) label Jan 21, 2025
@hagezi hagezi added further analysis Further analysis necessary fixed-pending-release Will be fixed in the next release and removed further analysis Further analysis necessary labels Jan 21, 2025
Copy link

Thank you for your support. The issue is scheduled to be fixed in the next release. You will be notified when the issue is finally fixed.

@ExtRIELICi
Copy link
Author

I also found this and this, two lists that have a good amount of these IP logging websites. There are probably many more out there, if I find any new domains I will report them here. @hagezi

@hagezi
Copy link
Owner

hagezi commented Jan 22, 2025

@ExtRIELICi Not every IP logger is “blockable”. Some are also required for functionalities, which is why a few were on the allowlist. I'll take a look at the lists, but I think I would have included them in the base domains back then. But I'll check that again.

@ExtRIELICi
Copy link
Author

Yes of course, only the suspicious ones or those clearly used for malicious purposes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
deny Deny domain(s) fixed-pending-release Will be fixed in the next release
Projects
None yet
Development

No branches or pull requests

2 participants