search

badmojr / 1Hosts

World's most advanced DNS filter-/blocklists!
https://o0.pages.dev
Mozilla Public License 2.0
1.53k stars 88 forks source link

r.stripe.com #429

Closed p1r473 closed 2 years ago

p1r473 commented 2 years ago

This is a subdomain required for payment processor Stripe It has broken the signup of a page I am using that requires stripe I believe this is a non malicious FP

badmojr commented 2 years ago

I'm still convinced this one is used for tracking. Maybe some more actionable details might help change that.

Are there any that u can probably share perhaps? So, I too can reproduce the issue above?

Origin: https://github.com/ShadowWhisperer/BlockLists/blob/master/Lists/Tracking https://github.com/migueldemoura/ublock-umatrix-rulesets/blob/master/Hosts/ads-tracking

cc: @ShadowWhisperer, @migueldemoura

migueldemoura commented 2 years ago

I had some issues with this one too, same as m.stripe.com which seems to send back mouse movement timings. The tracking involved here is usually to catch bots, so we really have no other choice but to allow it. Removed the subdomain from mine, see: https://github.com/migueldemoura/ublock-umatrix-rulesets/commit/fe487b99a53c8a2175b3f3f832cbbadb66523a36.

ShadowWhisperer commented 2 years ago

I block both q.stripe.com and r.stripe.com. I haven't noticed any issues, but I don't use Stripe.

@p1r473 Could you provide the URL for the site you were on, for further investigation?

ShadowWhisperer commented 2 years ago

I found a site that has Stripe as an option. https://curiositystream.com/payment-step Any time you click anywhere https://r.stripe.com/0, calls out.

p1r473 commented 2 years ago

Please try to sign up and log into https://locals.com with this domain blocked I was not able to when I originally tried. @ShadowWhisperer

ShadowWhisperer commented 2 years ago

Odd, it doesn't call out to r.stripe.com, for me.

1

It does call out to r.stripe.com, if it go to https://locals.com/profile/manage?tab=3, but still works when blocked. *As far as I can tell, without giving a credit card.

p1r473 commented 2 years ago

Odd, it doesn't call out to anything Stripe related, for me. It does call out to r.stripe.com, if it go to https://locals.com/profile/manage?tab=3, but still works when blocked. *As far as I can tell, without giving a credit card.

Sorry, I made an error- @ShadowWhisperer can you please try to sign up on heresyfinancial.locals.com instead? I can reproduce the issue on heresyfinancial.locals.com but on locals.com you are right- it is fine.

Behaviour seems to be permanently stuck at loading during the sign up process while r.stripe.com is blocked

image

Also @ShadowWhisperer how did you get that list of domains? I am using a Chrome extension called AdamOne to do something similar.

ShadowWhisperer commented 2 years ago

Weird, works there also. *A bit more junk in the log, as I opened the log before the temp email site. Also tried Firefox, just for kicks.

Capture

The log it just a custom script that parses the dnsmasq log. Dnsmsq and some files have to be setup a certain way to make it work. Green has been checked and is safe (checks one of my filter lists, red is denied (according to log), and white means unchecked.

p1r473 commented 2 years ago

OK, I guess I will close this and have to do more investigation. Will reopen if I can figure it out. Thanks all!