search

lightswitch05 / hosts

Hostfile blocklist for ads and tracking, updated regularly
https://www.github.developerdan.com/hosts/
Apache License 2.0
1.51k stars 75 forks source link

[New Domains] appinfo.garenanow.com statscollection.garenanow.com #302

Closed ghost closed 2 years ago

ghost commented 2 years ago

I was testing out League of Legends on Garena for the r/leagueoflinux community and saw that these 2 domains weren't being blocked.

Steps to reproduce:

  1. Download the Garena installer.
  2. Open the Garena installer, Garena will then try to connect to the domains.

I tried installing Garena on a brand new Operating System with the 2 domains blocked and the installer worked perfectly fine. Also logically speaking an installer shouldn't need internet access for such a small application.

Garena is a game library similar to Steam and the Epic Games store except only for a few games. Blocking these domains didn't impact my League install/experience, although I haven't tested out other games. I never had League try to connect to these domains so I'm guessing it's specific to the Garena application.

It also only ever happens when you're installing the application and never happens again in daily use.

Apologies if my knowledge isn't up to par, this isn't really my type of field so I don't have much experience with this.

Edit: I wanted to include a note that I tested this on both Linux and Windows 10.

lightswitch05 commented 2 years ago

Hey @NSABackdoors, welcome to the project. Thank you for your very detailed instructions on how to reproduce the requests. Also, I really appreciate that you tested it out first.

Apologies if my knowledge isn't up to par, this isn't really my type of field so I don't have much experience with this.

This was a perfect request, and they will be added in the next update. The one thing I ask is that you let me know if something starts breaking due to either of these blocks. Thanks!

spirillen commented 2 years ago

As I was trying to locate the installer you was talking about, I started by visiting garenanow.com which gives nothing

drill garenanow.com
;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 2661
;; flags: qr rd ra ; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 
;; QUESTION SECTION:
;; garenanow.com.       IN      A

;; ANSWER SECTION:

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 1 mse

Now to the interesting question, is this domain in question actually need like at all to have your game running or could you block it entirely?

lightswitch05 commented 2 years ago

Good question @spirillen. I believe the installer in question is Garena PC: https://mobile.garena.sg/gpc

spirillen commented 2 years ago

Hey @lightswitch05 true, but it could be related to the https://www.garena.ph as well

image

image

Which links to https://cdn.gxx.garenanow.com/gxx/pc/installer/Garena-v2.0.exe

Back to the actual question, can we kill the hole garenanow.com without ruing anything to keep privacy private?

would for sure love to at this to my filter

garenanow.com   CNAME . ; Tracking
*.garenanow.com   CNAME . ; Tracking