Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

a8.net #24254

Closed
spirillen opened this issue Jan 12, 2025 · 2 comments
Closed

a8.net #24254

spirillen opened this issue Jan 12, 2025 · 2 comments
Assignees
Labels
Tracking Basically the same as SpyWare but TrackWare is used to Track you're online habits
Milestone

Comments

@spirillen
Copy link
Contributor

Comments

A lot of domains are used as CNAME records for this domain. However, by using true RPZ, all these subdomains are waist of bits as, once this domain is meat in the query, it is returning NXDOMAIN, RCODE 3

EasyList

easyprivacy/easyprivacy_specific_cname_a8net.txt:||a8.onamae.com^
easyprivacy/easyprivacy_trackingservers_thirdparty.txt:||a8.net^$third-party

Wildcard domain records

a8.net|adware,tracking

Sub-Domain records

null

Hosts (RFC:952) specific records, not used by DNS RPZ firewalls

8pon.a8.net|adware,tracking
ad.a8.net|adware,tracking
ad-api.a8.net|adware,tracking
adtest.a8.net|adware,tracking
adv.a8.net|adware,tracking
ad-verification.a8.net|adware,tracking
amz-ad.a8.net|adware,tracking
api2.a8.net|adware,tracking
api.a8.net|adware,tracking
cv-checker.a8.net|adware,tracking
datafeed.a8.net|adware,tracking
document.a8.net|adware,tracking
ecsales-api.a8.net|adware,tracking
form.adv.a8.net|adware,tracking
form.pub.a8.net|adware,tracking
ifrb.a8.net|adware,tracking
items.a8.net|adware,tracking
lm.a8.net|adware,tracking
ml.a8.net|adware,tracking
nat2.a8.net|adware,tracking
nat3.a8.net|adware,tracking
ns6.a8.net|adware,tracking
ns7.a8.net|adware,tracking
ow.a8.net|adware,tracking
pub.a8.net|adware,tracking
px.a8.net|adware,tracking
trck.a8.net|adware,tracking
www11.a8.net|adware,tracking
www12.a8.net|adware,tracking
www13.a8.net|adware,tracking
www14.a8.net|adware,tracking
www15.a8.net|adware,tracking
www16.a8.net|adware,tracking
www17.a8.net|adware,tracking
www18.a8.net|adware,tracking
www19.a8.net|adware,tracking
www21.a8.net|adware,tracking
www22.a8.net|adware,tracking
www23.a8.net|adware,tracking
www24.a8.net|adware,tracking
www25.a8.net|adware,tracking
www26.a8.net|adware,tracking
www27.a8.net|adware,tracking
www28.a8.net|adware,tracking
www.a8.net|adware,tracking

Safe Search records

null

Screenshots

Screenshot, click to expand

image

Links to external sources

null

logs from uBlock Origin

N/A

@spirillen spirillen added the Tracking Basically the same as SpyWare but TrackWare is used to Track you're online habits label Jan 12, 2025
@spirillen spirillen added this to the Tracking milestone Jan 12, 2025
@spirillen spirillen self-assigned this Jan 12, 2025
@spirillen
Copy link
Contributor Author

DNS lookup

a8.net. 40770   IN      NS      ns-124.awsdns-15.com.
a8.net. 40770   IN      NS      ns-1261.awsdns-29.org.
a8.net. 40770   IN      NS      ns-2044.awsdns-63.co.uk.
a8.net. 40770   IN      NS      ns-888.awsdns-47.net.

HTTP header

HTTP response, click to expand
HTTP/2 301 
server: awselb/2.0
date: Sun, 12 Jan 2025 13:51:20 GMT
content-type: text/html
content-length: 134
location: https://www.a8.net:443/

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 12 Jan 2025 13:51:22 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Set-Cookie: AWSALB=0aGBzdhaZ4ZxJ7BacoGRgB18DI8hE9Njf3jePvUKIt9x1LSaVd77uqxbmqD7Rn+XDww+PtgHH2COLDQp/a9w3G8gd4+yG/lK4IgbdkNSDYjGV+0J4eFQOqbD+P/S; Expires=Sun, 19 Jan 2025 13:39:59 GMT; Path=/
Set-Cookie: AWSALBCORS=0aGBzdhaZ4ZxJ7BacoGRgB18DI8hE9Njf3jePvUKIt9x1LSaVd77uqxbmqD7Rn+XDww+PtgHH2COLDQp/a9w3G8gd4+yG/lK4IgbdkNSDYjGV+0J4eFQOqbD+P/S; Expires=Sun, 19 Jan 2025 13:39:59 GMT; Path=/; SameSite=None; Secure
Link: <https://www.a8.net/wp-json/>; rel="https://api.w.org/"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: upgrade-insecure-requests;
X-Cache: Hit from cloudfront
Via: 1.1 225f13165c0c9859b35222e0494aa584.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT20-P5
X-Amz-Cf-Id: tcPv2HnFzGJVBZvW14oNzLcIbnPuaLkEOwqqtK7JlJWJK2jUzkAjAQ==
Age: 683

@spirillen
Copy link
Contributor Author

Found these RPZ records in My Privacy DNS

Domain records Type content
*.a8.net.adware.mypdns.cloud CNAME .
*.a8.net.tracking.mypdns.cloud CNAME .
a8.net.adware.mypdns.cloud CNAME .
a8.net.tracking.mypdns.cloud CNAME .

Known Issues

DNS lookup

a8.net. 30552   IN      NS      ns-124.awsdns-15.com.
a8.net. 30552   IN      NS      ns-1261.awsdns-29.org.
a8.net. 30552   IN      NS      ns-2044.awsdns-63.co.uk.
a8.net. 30552   IN      NS      ns-888.awsdns-47.net.

HTTP header

HTTP response, click to expand
HTTP/2 301 
server: awselb/2.0
date: Sun, 12 Jan 2025 17:16:10 GMT
content-type: text/html
content-length: 134
location: https://www.a8.net:443/

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 12 Jan 2025 17:16:12 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Set-Cookie: AWSALB=HSRUlzoZ35+KEXd5MLImdztqcGXZnZ4UMn1h4hBNcymmHx6qdpvA2ENoEuvQf4lnMo1M2WdAnUtfzsR/7PLJU8GcAkVgMTpuhJvgHKJaFbjyK3aqxhdJveKKd3Pq; Expires=Sun, 19 Jan 2025 16:54:18 GMT; Path=/
Set-Cookie: AWSALBCORS=HSRUlzoZ35+KEXd5MLImdztqcGXZnZ4UMn1h4hBNcymmHx6qdpvA2ENoEuvQf4lnMo1M2WdAnUtfzsR/7PLJU8GcAkVgMTpuhJvgHKJaFbjyK3aqxhdJveKKd3Pq; Expires=Sun, 19 Jan 2025 16:54:18 GMT; Path=/; SameSite=None; Secure
Link: <https://www.a8.net/wp-json/>; rel="https://api.w.org/"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: upgrade-insecure-requests;
X-Cache: Hit from cloudfront
Via: 1.1 225f13165c0c9859b35222e0494aa584.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT20-P5
X-Amz-Cf-Id: kgBFQZk3wGqGUcswmcDDKKhEpDOqn2qPYna72EvqggOZgqP7M2JK6w==
Age: 1314

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Tracking Basically the same as SpyWare but TrackWare is used to Track you're online habits
Projects
None yet
Development

No branches or pull requests

1 participant