Missed or needing Updating of Ghostery

G'day All

Here are some more that might need looking into, since Ghostery missed them in it's search pattern, these don't show up in the Ghostery logs !

Request: www.betfair.com/
Crunch: Blocked: http://advancedtracker.appspot.com/ms...

Request: www.wired.com/wiredscience/2013/07/so...
Crunch: Blocked: http://www.wired.com/js/ads/google_cu...
Crunch: Blocked: http://www.wired.com/js/ads/google_cu...

Request: www.newstomato.com/
Crunch: Blocked: http://ck.ingrtg.com/criteo/js/ok.js # Missed
Crunch: Blocked: http://ck.ingrtg.com/criteo/js/ok.js # Missed

Request: www.www.archipelag.pl/
Crunch: Blocked: http://www.salesmanago.pl/static/sm.js

Request: www.torontosun.com/
Crunch: Blocked: http://www.torontosun.com/assets/js/g...
Crunch: Blocked: http://www.torontosun.com/assets/js/g...
Crunch: Blocked: http://adserving.speedshiftmedia.com/...
Crunch: Blocked: http://adserving.speedshiftmedia.com/...
Crunch: Blocked: http://metrics.performgroup.com/b/ss/...
Crunch: Blocked: http://metrics.performgroup.com/b/ss/...

Request: hamusoku.com/
Crunch: Blocked: http://blog.livedoor.jp/hamusoku6/ama...
Crunch: Blocked: http://blog.livedoor.jp/hamusoku/amaz...
Crunch: Blocked: http://blog.livedoor.jp/hamusoku/amaz...
Crunch: Blocked: http://urls.api.twitter.com/1/urls/co...
Crunch: Blocked: http://urls.api.twitter.com/1/urls/co...
Crunch: Blocked: http://urls.api.twitter.com/1/urls/co...
Crunch: Blocked: http://urls.api.twitter.com/1/urls/co...
Crunch: Blocked: http://urls.api.twitter.com/1/urls/co...
Crunch: Blocked: http://b.st-hatena.com/images/entry-b...

Request: www.sueddeutsche.de/
Crunch: Blocked: http://platform.twitter.com/widgets.js

Request: www.mangainn.com/
Crunch: Blocked: http://platform.twitter.com/widgets.js

Request: www.guardian.co.uk/australia
Crunch: Blocked: http://facebook-web-clients.appspot.c...

Request: www.guardian.co.uk/environment/2013/j...
Crunch: Blocked: http://combo.guim.co.uk/11808dc8b0585...

Mobile IOS:
Ghostery: connection allowed to optus.com.au via port: 443
Crunch: Blocked: http://optusprod.amobee.com via port: 80
Crunch: Blocked: http://optuspsp.px.247-inc.com via port: 443
Crunch: Blocked: http://optuspsp.px.247-inc.com via port: 443
Crunch: Blocked: http://optuspsp.px.247-inc.com via port: 443
Crunch: Blocked: http://optuspsp.px.247-inc.com via port: 443
Crunch: Blocked: http://optuspsp.px.247-inc.com via port: 443
Crunch: Blocked: http://optusprod.amobee.com via port: 80

Mobile IOS:
Request: www.nj.com/somerset/index.ssf/2013/06...
Crunch: Blocked: http://geoip.nj.com/media/js/geoip.js
Crunch: Blocked: http://www.nj.com/js/mtmr.js ## blocked fanboy-complete tr.advance.net
Crunch: Blocked: http://www.nj.com/static/common/js/ad... # Missed
Crunch: Blocked: http://tr.advance.net/363616852/?head... ## block fanboy-complete
Crunch: Blocked: http://www.nj.com/js/comscore/comscor... # Missed
Crunch: Blocked: http://media.nj.com/static/common/js/... # Missed

Request: http://www.huffingtonpost.com/2013/07...
Crunch: Blocked: http://buzzbox.buzzfeed.com/wd/BuzzBo...

Request: appleinsider.com/
Crunch: Blocked: http://www.tkqlhce.com/click-1989299-...
Crunch: Blocked: http://www.anrdoezrs.net/click-568152...

Request: www.theinquirer.net/
Crunch: Blocked: http://www.adestra.com/form_validate2.js

Cheers
1 person likes
this idea
+1
Reply
  • Added: speed shift media, perform group, amobee, buzzfeed, comission junction

    Wired, nj.com, guardian stuff is first party.

    ingrtg.com appears to be down

    Need more examples for salesmango. Twitter will be fixed in the next release of Ghostery.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited

  • Advanced Tracker

    Website: http://www.lovesdata.com/products/goo...

    Examples: (third party)
    www.bos18.com
    www.getmusic.com.au
    headon.com.au
    www.hollows.com.au

    Pattern: /advancedtracker\\.appspot\\.com\\/mstracker\\.js/

    — — — — — — —

    Speed Shift Media

    Website: www.speedshiftmedia.com

    Examples: (Type 1)
    www.decaturdaily.com
    www.edmontonsun.com
    www.ottawasun.com
    www.torontosun.com

    Examples: (Type 2)
    www.anthemgolfaz.com
    www.delwebbpulte.com
    www.divosta.com
    www.eyeonpultegroup.com
    www.greensummerlin.com
    www.pulteandcentex.org
    www.thepultecentexgroup.info

    Pattern: /\\.speedshiftmedia\\.com\\/products\\/dynamicwebads\\/adserving\\//

    — — — — — — —

    metrics.performgroup.com is an alias for performgroup.com.122.2o7.net, an Omniture SiteCatalyst data collector.

    There are sites that either integrate trackers such as Omniture (Adobe Analytics) or Coremetrics in sufficiently unusual (and often unique) ways that Ghostery won't detect them, or they need to be selectively whitelisted because the host site is so incompetently (or maliciously) crafted that blocking would "break" something important. Currently, the best way to deal with these is on a case-by-case basis, external to Ghostery.

    — — — — — — —

    See: https://getsatisfaction.com/ghostery/... re http://platform.twitter.com/widgets.js

    — — — — — — —

    As for Commission Junction, the search box is your friend. Use the search box.

    — — — — — — —

    What is it about http://www.adestra.com/form_validate2.js that disturbs you?

  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited

  • G'day Eric
    this was a mistake http://www.adestra.com/form_validate2.js please ignore this url.

    P.S do wish me too keep showing site's like this metrics.performgroup.com or just ignore anything with regards too metrics.*.com ?

    From here on out I'll ignore this url platform.twitter.com/widgets.js , keep forgetting as I don't use twitter or facebook myself.

    Cheers
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited

  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited

  • Looking for metrics.*.com is the wrong approach. Not only are you likely to get several false positives, you're going to miss most of the beacons, because tracking domains can be arbitrary.

    Examples: [http]

    a.medtronic.com is an alias for medtronic.com.112.2o7.net.
    analytics.homes.com is an alias for homes.com.112.2o7.net.
    b.salon.com is an alias for salon.com.112.2o7.net.
    cnd.landsend.de is an alias for landsend.de.112.2o7.net.
    electronics.sony-latin.com is an alias for sony-latin.com.112.2o7.net.
    hits.terra.com is an alias for terra.112.2o7.net.
    met1.hp.com is an alias for hp.com.112.2o7.net.
    metric.bizjournals.com is an alias for bizjournals.com.112.2o7.net.
    metrics.tmz.com is an alias for tmz.com.112.2o7.net.
    metrics1.pricegrabber.com is an alias for pgrabcom.112.2o7.net.
    modus.nike.com is an alias for nike.com.112.2o7.net.
    nmetrics.samsung.com is an alias for samsung.com.112.2o7.net.
    o.opentable.com is an alias for opentable.com.112.2o7.net.
    odc.weather.com is an alias for weather.com.112.2o7.net.
    om.neimanmarcus.com is an alias for neimanmarcus.com.112.2o7.net.
    omn.rockwool.de is an alias for rockwool.112.2o7.net.
    omni.alaskaair.com is an alias for alaskaair.com.112.2o7.net.
    omniture.digidesign.com is an alias for digidesign.com.112.2o7.net.
    omt.honda.com is an alias for honda.com.112.2o7.net.
    ou.shutterfly.com is an alias for shutterfly.com.112.2o7.net.
    s.ugo.com is an alias for ugo.com.112.2o7.net.
    sc.questia.com is an alias for questia.com.112.112.2o7.net.
    sc-forbes.forbes.com is an alias for forbescom.112.2o7.net.
    sec.tsubo.com is an alias for tsubo.com.112.2o7.net.
    serviceo.comcast.net is an alias for comcast.net.112.2o7.net.
    stat.safeway.com is an alias for safeway.com.112.2o7.net.
    stats.kroger.com is an alias for kroger.com.112.2o7.net.
    track.www.zazzle.com is an alias for www.zazzle.com.112.2o7.net.
    tracking.trutv.com is an alias for trutv.com.112.2o7.net.
    vitals.ninewest.com is an alias for ninewest.com.112.2o7.net.
    vs.blackplanet.com is an alias for blackplanet.com.112.2o7.net.
    w88.go.com is an alias for go.com.112.2o7.net.
    wa.eonline.com is an alias for eonline.com.112.2o7.net.
    www2.spiegel.com is an alias for spiegel.com.112.2o7.net.
    www91.intel.com is an alias for intel.com.112.2o7.net.

    a.fox.com is an alias for foxentertainment.122.2o7.net.
    analytic.ae.com is an alias for ae.com.122.2o7.net.
    analytics.mail-corp.com is an alias for mail-corp.com.122.2o7.net.
    attorney.findlaw.com is an alias for findlaw.com.122.2o7.net.
    b.tienda.com is an alias for tienda.com.122.2o7.net.
    bc.law.com is an alias for law.com.122.2o7.net.
    c.musicradio.com is an alias for globalradio.122.2o7.net.
    ci.intuit.com is an alias for intuit.com.122.2o7.net.
    info.telstra.com is an alias for telstra.com.122.2o7.net.
    m.localwireless.com is an alias for localwireless.com.122.2o7.net.
    metric.starz.com is an alias for starz.122.2o7.net.
    metrics.ikea.com is an alias for ikea.com.122.2o7.net.
    mtrcs.popcap.com is an alias for popcap.com.122.2o7.net.
    my.iheartradio.com is an alias for clearchannel.122.2o7.net.
    nossl.aafp.org is an alias for aafp.org.122.2o7.net.
    nsc.natwest.com is an alias for natwest.com.122.2o7.net.
    nsomniture.nvidia.com is an alias for nvidia.com.122.2o7.net.
    oimg.nbcuni.com is an alias for nbcuni.com.122.2o7.net.
    om.dowjoneson.com is an alias for dowjoneson.com.122.2o7.net.
    omn.americanexpress.com is an alias for americanexpress.com.122.2o7.net.
    omni.macmall.com is an alias for macmall.com.122.2o7.net.
    omniture.australia.com is an alias for tourismaustralia.122.2o7.net.
    omtrkpix.rd.com is an alias for rd.com.122.2o7.net.
    o.sa.aol.com is an alias for sa.aol.com.122.2o7.net.
    sc.independent.co.uk is an alias for independent.122.2o7.net.
    stat.gilt.com is an alias for gilt.com.122.2o7.net.
    stats.scholastic.com is an alias for scholastic.com.122.2o7.net.
    std.o.webmd.com is an alias for webmdglobal.122.2o7.net.
    wa.and.co.uk is an alias for and.co.uk.122.2o7.net.
    wasc.homedepot.com is an alias for homedepot.com.122.2o7.net.
    web.ulta.com is an alias for ulta.com.122.2o7.net.
    ww0.tui.com is an alias for tui.com.122.2o7.net.

    ftr2.external.xerox.com is an alias for xerox.com.d1.sc.omtrdc.net.
    hits.guardian.co.uk is an alias for guardian.co.uk.d1.sc.omtrdc.net.
    metrics.libertymutual.com is an alias for libertymutual.com.d1.sc.omtrdc.net.
    natsp.xing.com is an alias for xing.com.d1.sc.omtrdc.net.
    nsm.dell.com is an alias for dell.com.d1.sc.omtrdc.net.
    om.expedia.com is an alias for expedia.com.d1.sc.omtrdc.net.
    stats.adobe.com is an alias for adobe.com.d1.sc.omtrdc.net.
    tracking.everydayhealth.com is an alias for everydayhealth.com.d1.sc.omtrdc.net.

    metric.trulia.com is an alias for trulia.com.d2.sc.omtrdc.net.
    metrics.skype.com is an alias for skype.d2.sc.omtrdc.net.
    om.hotels.com is an alias for hotels.com.d2.sc.omtrdc.net.
    omtr1.partners.salesforce.com is an alias for partners.salesforce.com.d2.sc.omtrdc.net.

    omni.elitepartner.ch is an alias for elitepartner.ch.d3.sc.omtrdc.net.

    vs.target.com is an alias for da203.insight.omtrdc.net.

    Examples: [https]

    b.medtronic.com is an alias for medtronic.com.102.112.2o7.net.
    oms.businessweek.com is an alias for businessweek.102.112.2o7.net.
    s.xbox.com is an alias for xbox.com.102.112.2o7.net.
    sanalytics.freedom.com is an alias for freedom.com.102.112.2o7.net.
    scnd.landsend.de is an alias for landsend.de.102.112.2o7.net.
    secure-stat.canal-plus.com is an alias for canal-plus.com.102.112.2o7.net.
    securemetrics.apple.com is an alias for appleglobal.102.112.2o7.net.
    smetrics.radioshack.com is an alias for radioshack.com.102.112.2o7.net.
    smodus.nike.com is an alias for nike.com.102.112.2o7.net.
    so.opentable.com is an alias for opentable.com.102.112.2o7.net.
    som.sfgate.com is an alias for sfgate.com.102.112.2o7.net.
    somni.alaskaair.com is an alias for alaskaair.com.102.112.2o7.net.
    ssec.tsubo.com is an alias for tsubo.com.102.112.2o7.net.
    sstat.levitra.com is an alias for levitra.com.102.112.2o7.net.
    sstats.drugstore.com is an alias for drugstore.com.102.112.2o7.net.
    sw88.go.com is an alias for go.com.102.112.2o7.net.
    vss.blackplanet.com is an alias for blackplanet.com.102.112.2o7.net.

    42s.sonicwall.com is an alias for sonicwall.com.102.122.2o7.net.
    b.law.com is an alias for law.com.102.122.2o7.net.
    infos.telstra.com is an alias for telstra.com.102.122.2o7.net.
    ssl.o.webmd.com is an alias for webmdglobal.102.122.2o7.net.
    omns.americanexpress.com is an alias for americanexpress.com.102.122.2o7.net.
    oms.dowjoneson.com is an alias for dowjoneson.com.102.122.2o7.net.
    osimg.nbcuni.com is an alias for nbcuni.com.102.122.2o7.net.
    s.sa.aol.com is an alias for sa.aol.com.102.122.2o7.net.
    sci.intuit.com is an alias for intuit.com.102.122.2o7.net.
    sm.trb.com is an alias for trb.102.122.2o7.net.
    smetrics.mastercard.com is an alias for mastercard.com.102.122.2o7.net.
    smtrcs.popcap.com is an alias for popcap.com.102.122.2o7.net.
    sstats.scholastic.com is an alias for scholastic.com.102.122.2o7.net.
    swasc.homedepot.com is an alias for homedepot.com.102.122.2o7.net.

    hits-secure.guardian.co.uk is an alias for guardian.co.uk.ssl.d1.sc.omtrdc.net.
    oms.expedia.com is an alias for expedia.com.ssl.d1.sc.omtrdc.net.
    smetrics.xoom.com is an alias for xoom.com.ssl.d1.sc.omtrdc.net.

    analytics.cibc.com is an alias for cibc.com.ssl.d2.sc.omtrdc.net.
    smetric.trulia.com is an alias for trulia.com.ssl.d2.sc.omtrdc.net.
    smetrics.reedbusiness.net is an alias for reedbusiness.net.ssl.d2.sc.omtrdc.net.

    • Yeah, so were probably not going to add this list directly, but what were considering to do is to deny access to known headers for metrics sites. So if header includes Omniture headers (there are a few), we will maintain a list of those, and auto block them if Omniture is blocked. This isn't close to implementation yet, but thats the idea.
    • Too Eric P. Scott, Looking for metrics.*.com is the wrong approach !! This was a simple generic sample of what I was trying to express for one too understand, not that I use this form myself , I use a much more cerfistated script langauge, for catching the naughties boys
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated kidding, amused, unsure, silly indifferent, undecided, unconcerned happy, confident, thankful, excited