########################################################################################## ADBLK-3: Block swa.and.co.uk ########################################################################################## Issue Type: Improvement ----------------------------------------------------------------------------------------- Issue Information ==================== Priority: Major Status: Closed Resolution: Done (2019-06-09 14:45:53) Project: Adblock Lists (ADBLK) Reported By: btasker Assigned To: btasker Time Estimate: 0 minutes Time Logged: 0 minutes ----------------------------------------------------------------------------------------- Issue Description ================== Noticed this whilst doing some work on the Anti-AMP scripts (which meant I ended up on the Daily Mail...) Hitting one of their news stories results in a request like this -- BEGIN SNIPPET -- https://swa.and.co.uk/b/ss/anddailymailprod/1/H.26/s22702968394192?AQB=1&ndh=1&t=9%2F5%2F2019%2014%3A15%3A14%200%20-60&fid=52055774D5077687-34E7E5AFA2E28913&ce=UTF-8&ns=associatednorthcliffedigital&cdp=3&pageName=%2Fnews%2Farticle&g=https%3A%2F%2Fwww.dailymail.co.uk%2Fnews%2Farticle-7120893%2FJeremy-Clarkson-complains-road-closed-following-fatal-crash-west-London.html&r=https%3A%2F%2Fwww.bing.com%2F&c.&gdprbannerstatus=ENABLED&fesbv=3.41.0&feabv=5.10.2&vbv=5.19.1&tag=fe_mobile_default&electrostatic=electrostatic-12.4.0&.c&ch=dailymail.co.uk&events=event2%2Cevent25&c1=%2Fnews&v1=D%3Dc1&c2=%2Fnews&v2=D%3Dc2&c4=article&v4=D%3Dc4&c5=jeremy%20clarkson%20complains%20about%20a%20road%20being%20closed%20following%20a%20fatal%20crash%20in%20west%20london%C2%A0&v5=D%3Dc5&c6=7120893&v6=D%3Dc6&c11=Logged%20Out&v11=D%3DpageName&v12=D%3Dch&c13=%2Fnews%2Farticle&c14=New&v14=New&c15=%2Fnews%2Farticle&v21=D%3Dc23&v22=D%3Dc24&c23=2019-06-09&v23=D%3Dc25&c24=10&c25=Danyal%20Hussain%20For%20Mailonline&v25=D%3Dc27&v26=D%3Dc28&c27=2019-06-09&v27=D%3Dc29&c28=14&c29=www.bing.com&v29=D%3Dc31&v30=D%3Dc32&c31=%2Fnews%2Farticle&c32=%2Fnews%2Farticle&v33=D%3Dc39&c37=GB&c44=D%3Dg&c46=electrostatic-12.4.0&c47=adBlocker%20off&v49=%21-%21EXT%21-%21&v50=D%3Dg&c51=Page%20Reloaded&c53=%2Fnews%5E%2Fnews%5Earticle&v54=NoInstart&c57=46101631&v57=D%3Dc57&v58=Guest&c59=1%5E1%5E1&v59=D%3Dc59&c65=Mobile&v65=Mobile&v70=b&h2=dailymail.co.uk%2Fnews&s=1920x1080&c=24&j=1.6&v=N&k=Y&bw=1920&bh=942&p=Shockwave%20Flash%3B&AQE=1 -- END SNIPPET -- Which is fairly obviously an analytics link (you can see I hit the page from Bing news for example). At time of writing, the domain swa.and.co.uk is served only via HTTPS, and serves an empty page at the document root. It CNAME's out to 2o7.net: -- BEGIN SNIPPET -- ben@milleniumfalcon:~$ host swa.and.co.uk swa.and.co.uk is an alias for and.co.uk.102.122.2o7.net. and.co.uk.102.122.2o7.net has address 130.248.129.118 -- END SNIPPET -- 2o7 are known trackers - https://www.makeuseof.com/tag/that-mysterious-2o7-net-tracking-cookie-all-you-need-to-know/ - and are blocked in easylist. Adding a block of *.and.co.uk ----------------------------------------------------------------------------------------- Activity ========== ----------------------------------------------------------------------------------------- 2019-06-09 14:26:46 git ----------------------------------------------------------------------------------------- -- BEGIN QUOTE -- Repo: adblocklists Commit: 7a029e1cc4f287333b1f4a88b84439d2ac271017 Author: B Tasker