Skip to content

feat: add ACR blocklist and rebuild smart-tv coverage #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Stensel8 merged 5 commits into from
Sep 17, 2026
Merged

feat: add ACR blocklist and rebuild smart-tv coverage #6

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
6ccb8b8
feat: add ACR blocklist and rebuild smart-tv coverage
Sep 17, 2026
7f2b339
fix: drop lgtvsdp.com and lgappstv.com from the allowlist
Sep 17, 2026
af9db24
fix: drop shared-CDN IPs and Samsung's OTA domain
Sep 17, 2026
be90640
chore: add acr-enum.py and validate-lists.py to tools/
Stensel8 Sep 17, 2026
7895d39
feat: import politie.nl malafide handelspartijen into scam list
Stensel8 Sep 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
765 changes: 765 additions & 0 deletions DNS/acr/domains.txt
View file
Open in desktop

Large diffs are not rendered by default.

800 changes: 800 additions & 0 deletions DNS/acr/hosts.txt
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 0 additions & 2 deletions DNS/allowlist/domains.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,8 +53,6 @@ wireguard.com
windscribe.com
yahoo.com
webos.com
lgtvsdp.com
lgappstv.com
samsung.com
samsung.net
samsungcloudsolution.com
Expand Down
26 changes: 20 additions & 6 deletions DNS/allowlist/hosts.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,13 +1,29 @@

# Allowlist (Exclusions)
#
#
# This list contains domains that are explicitly allowed and excluded from blocking.
# These domains are maintained to ensure important services and apps continue to work.
#
# Read this before you run the smart-TV lists
#
# How an allowlist entry behaves depends on the resolver. NextDNS matches an entry
# against the domain and all of its subdomains; Pi-hole and other hosts-format
# allowlists match exactly. That difference matters now that DNS/acr/ and
# DNS/smart-tv/ carry per-country vendor hostnames.
#
# lgtvsdp.com and lgappstv.com used to sit here and were shadowing 535 of the LG
# entries in DNS/smart-tv/, among them the rdx2 data exchange and the lgrecommends
# home-screen profiling endpoints. They have been removed on purpose. If the LG
# Content Store or a webOS service you need stops working, put back the specific
# hostname it calls rather than the apex.
#
# Two Samsung apexes are still here and still shadow 30 smart-tv entries between
# them, samsungcloudsolution.com and samsung.com. They stay because Samsung account
# sign-in and the app store run on them.
#
# Format: 0.0.0.0 domain.com (hosts file format)
# Last updated: 2026-06-25
# Last updated: 2026-09-17
#
# Total domains: 139
# Total domains: 137
#

0.0.0.0 v10.events.data.microsoft.com
Expand Down Expand Up @@ -65,8 +81,6 @@
0.0.0.0 windscribe.com
0.0.0.0 yahoo.com
0.0.0.0 webos.com
0.0.0.0 lgtvsdp.com
0.0.0.0 lgappstv.com
0.0.0.0 samsung.com
0.0.0.0 samsung.net
0.0.0.0 samsungcloudsolution.com
Expand Down
42 changes: 31 additions & 11 deletions DNS/chinese-shops/domains.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,42 +1,62 @@
1688.com
ae-rus.net
ae-rus.ru
alibaba-inc.com
alibaba.com
alibabagroup.com
alicdn.com
aliexpress-media.com
aliexpress.com
aliexpress.ru
aliexpress-media.com
aliexpress.us
alipayobjects.com
aliyun.com
aliyuncs.com
app-temu-com.trafficmanager.net
assets.aliexpress-media.com
banggood.com
cdn.wish.com
contextlogic.com
dhgate.com
ds.temu.com
eu.thtk.temu.com
gw.temu.com
gearbest.com
gw-temu-com.trafficmanager.net
gw.temu.com
joom.com
kwcdn.co
kwcdn.com
lazada.com
locale-temu-com.trafficmanager.net
ltwebstatic.com
m.shein.com
m.wish.com
matk.temu.com
miravia.es
nl.shein.com
pdd.com
pddglobal.com
pftk.temu.com
pinduoduo.com
romwe.com
shein.co.uk
shein.com
shein.de
shein.fr
sheincorp.com
sheingroup.com
sheinm.com
slatic.net
taobao.com
temu.com
temu-com.trafficmanager.net
temu-gtm.trafficmanager.net
temu.com
temuseller.com
thtk.temu.com
tmall.com
us.shein.com
wish.com
world.taobao.com
www.aliexpress.com
www.wish.com
1688.com
alibaba-inc.com
aliexpress.us
aliyun.com
aliyuncs.com
pdd.com
pinduoduo.com
yangkeduo.com
contextlogic.com
48 changes: 34 additions & 14 deletions DNS/chinese-shops/hosts.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Chinese Shops Blocking List
#
#
# This list blocks Chinese marketplace domains known for aggressive tracking:
# - Temu and PDD Holdings tracking infrastructure
# - AliExpress, Alibaba, and Taobao analytics
Expand All @@ -9,50 +9,70 @@
#
# These platforms are known for extensive data collection and tracking
# Format: 0.0.0.0 domain.com (hosts file format)
# Last updated: 2025-10-12
# Last updated: 2026-09-17
#
# Total domains: 42
# Total domains: 62
#

0.0.0.0 1688.com
0.0.0.0 ae-rus.net
0.0.0.0 ae-rus.ru
0.0.0.0 alibaba-inc.com
0.0.0.0 alibaba.com
0.0.0.0 alibabagroup.com
0.0.0.0 alicdn.com
0.0.0.0 aliexpress-media.com
0.0.0.0 aliexpress.com
0.0.0.0 aliexpress.ru
0.0.0.0 aliexpress-media.com
0.0.0.0 aliexpress.us
0.0.0.0 alipayobjects.com
0.0.0.0 aliyun.com
0.0.0.0 aliyuncs.com
0.0.0.0 app-temu-com.trafficmanager.net
0.0.0.0 assets.aliexpress-media.com
0.0.0.0 banggood.com
0.0.0.0 cdn.wish.com
0.0.0.0 contextlogic.com
0.0.0.0 dhgate.com
0.0.0.0 ds.temu.com
0.0.0.0 eu.thtk.temu.com
0.0.0.0 gw.temu.com
0.0.0.0 gearbest.com
0.0.0.0 gw-temu-com.trafficmanager.net
0.0.0.0 gw.temu.com
0.0.0.0 joom.com
0.0.0.0 kwcdn.co
0.0.0.0 kwcdn.com
0.0.0.0 lazada.com
0.0.0.0 locale-temu-com.trafficmanager.net
0.0.0.0 ltwebstatic.com
0.0.0.0 m.shein.com
0.0.0.0 m.wish.com
0.0.0.0 matk.temu.com
0.0.0.0 miravia.es
0.0.0.0 nl.shein.com
0.0.0.0 pdd.com
0.0.0.0 pddglobal.com
0.0.0.0 pftk.temu.com
0.0.0.0 pinduoduo.com
0.0.0.0 romwe.com
0.0.0.0 shein.co.uk
0.0.0.0 shein.com
0.0.0.0 shein.de
0.0.0.0 shein.fr
0.0.0.0 sheincorp.com
0.0.0.0 sheingroup.com
0.0.0.0 sheinm.com
0.0.0.0 slatic.net
0.0.0.0 taobao.com
0.0.0.0 temu.com
0.0.0.0 temu-com.trafficmanager.net
0.0.0.0 temu-gtm.trafficmanager.net
0.0.0.0 temu.com
0.0.0.0 temuseller.com
0.0.0.0 thtk.temu.com
0.0.0.0 tmall.com
0.0.0.0 us.shein.com
0.0.0.0 wish.com
0.0.0.0 world.taobao.com
0.0.0.0 www.aliexpress.com
0.0.0.0 www.wish.com
0.0.0.0 1688.com
0.0.0.0 alibaba-inc.com
0.0.0.0 aliexpress.us
0.0.0.0 aliyun.com
0.0.0.0 aliyuncs.com
0.0.0.0 pdd.com
0.0.0.0 pinduoduo.com
0.0.0.0 yangkeduo.com
0.0.0.0 contextlogic.com
6 changes: 3 additions & 3 deletions DNS/datto-kaseya/domains.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
centrastage.net
datto.com
datto.io
dattobackup.com
kaseya.com
datto.com
centrastage.net
infocyte.com
kaseya.com
10 changes: 5 additions & 5 deletions DNS/datto-kaseya/hosts.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Datto RMM / Kaseya Blocking List
#
#
# This list blocks Datto RMM and Kaseya tracking and management domains:
# - Enterprise remote monitoring and management software
# - Network tracking and device discovery
Expand All @@ -8,15 +8,15 @@
#
# Referenced: 2021 Kaseya ransomware supply chain attack
# Format: 0.0.0.0 domain.com (hosts file format)
# Last updated: 2026-06-25
# Last updated: 2026-09-17
#
# Total domains: 6
# The IP addresses for these are in ../../IP/datto-kaseya/ips.txt
#

0.0.0.0 centrastage.net
0.0.0.0 datto.com
0.0.0.0 datto.io
0.0.0.0 dattobackup.com
0.0.0.0 kaseya.com
0.0.0.0 datto.com
0.0.0.0 centrastage.net
0.0.0.0 infocyte.com
0.0.0.0 kaseya.com
37 changes: 31 additions & 6 deletions DNS/google/domains.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,24 +1,49 @@
2mdn.net
ad.doubleclick.net
ade.googlesyndication.com
admob.googleapis.com
adnxs.com
ads.google.com
ads.youtube.com
adservice.google.co.uk
adservice.google.com
admob.googleapis.com
adservice.google.de
adservice.google.nl
adsmeasurement.com
analytics-alv.google.com
analytics.google.com
androidtvchannels-pa.googleapis.com
androidtvlauncherxfe-pa.googleapis.com
androidtvwatsonfe-pa.googleapis.com
app-measurement.com
beacons.gcp.gvt2.com
beacons.gvt2.com
beacons2.gvt2.com
beacons3.gvt2.com
beacons4.gvt2.com
beacons5.gvt2.com
cm.g.doubleclick.net
doubleclick.com
doubleclick.net
g.doubleclick.net
google-analytics.com
googleads.g.doubleclick.net
googlesyndication.com
googletagmanager.com
googletagservices.com
pagead2.googlesyndication.com
partnerad.l.doubleclick.net
pubads.g.doubleclick.net
region1.analytics.google.com
region1.google-analytics.com
s0.2mdn.net
securepubads.g.doubleclick.net
ssl.google-analytics.com
static.doubleclick.net
stats.g.doubleclick.net
tagger.opecloud.com
tpc.googlesyndication.com
whistleflower.com
www.google-analytics.com
www.googletagmanager.com
www.googletagservices.com
ade.googlesyndication.com
cm.g.doubleclick.net
securepubads.g.doubleclick.net
tagger.opecloud.com
whistleflower.com
43 changes: 34 additions & 9 deletions DNS/google/hosts.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Google Tracking Blocking List
#
#
# This list blocks Google tracking and analytics domains to prevent:
# - Google Analytics data collection
# - Google Ads tracking and targeting
Expand All @@ -9,32 +9,57 @@
#
# Note: This does NOT block core Google services like Search, Gmail, Maps
# Format: 0.0.0.0 domain.com (hosts file format)
# Last updated: 2026-06-25
# Last updated: 2026-09-17
#
# Total domains: 24
# Total domains: 49
#

0.0.0.0 2mdn.net
0.0.0.0 ad.doubleclick.net
0.0.0.0 ade.googlesyndication.com
0.0.0.0 admob.googleapis.com
0.0.0.0 adnxs.com
0.0.0.0 ads.google.com
0.0.0.0 ads.youtube.com
0.0.0.0 adservice.google.co.uk
0.0.0.0 adservice.google.com
0.0.0.0 admob.googleapis.com
0.0.0.0 adservice.google.de
0.0.0.0 adservice.google.nl
0.0.0.0 adsmeasurement.com
0.0.0.0 analytics-alv.google.com
0.0.0.0 analytics.google.com
0.0.0.0 androidtvchannels-pa.googleapis.com
0.0.0.0 androidtvlauncherxfe-pa.googleapis.com
0.0.0.0 androidtvwatsonfe-pa.googleapis.com
0.0.0.0 app-measurement.com
0.0.0.0 beacons.gcp.gvt2.com
0.0.0.0 beacons.gvt2.com
0.0.0.0 beacons2.gvt2.com
0.0.0.0 beacons3.gvt2.com
0.0.0.0 beacons4.gvt2.com
0.0.0.0 beacons5.gvt2.com
0.0.0.0 cm.g.doubleclick.net
0.0.0.0 doubleclick.com
0.0.0.0 doubleclick.net
0.0.0.0 g.doubleclick.net
0.0.0.0 google-analytics.com
0.0.0.0 googleads.g.doubleclick.net
0.0.0.0 googlesyndication.com
0.0.0.0 googletagmanager.com
0.0.0.0 googletagservices.com
0.0.0.0 pagead2.googlesyndication.com
0.0.0.0 partnerad.l.doubleclick.net
0.0.0.0 pubads.g.doubleclick.net
0.0.0.0 region1.analytics.google.com
0.0.0.0 region1.google-analytics.com
0.0.0.0 s0.2mdn.net
0.0.0.0 securepubads.g.doubleclick.net
0.0.0.0 ssl.google-analytics.com
0.0.0.0 static.doubleclick.net
0.0.0.0 stats.g.doubleclick.net
0.0.0.0 tagger.opecloud.com
0.0.0.0 tpc.googlesyndication.com
0.0.0.0 whistleflower.com
0.0.0.0 www.google-analytics.com
0.0.0.0 www.googletagmanager.com
0.0.0.0 www.googletagservices.com
0.0.0.0 ade.googlesyndication.com
0.0.0.0 cm.g.doubleclick.net
0.0.0.0 securepubads.g.doubleclick.net
0.0.0.0 tagger.opecloud.com
0.0.0.0 whistleflower.com
Loading