Exfiltration of personal data by session-replay scripts

battles

Sites that would be best blocked.

Explanation:

https://freedom-to-tinker.com/2017/11/15/no-boundaries-exfiltration-of-personal-data-by-session-replay-scripts/

Session replay sites and services (to block):

https://webtransparency.cs.princeton.edu/no_boundaries/session_replay_sites.html

battles

List broken down:

Session Replay Companies:

clicktale.net
decibelinsight.net
fullstory.com
hotjar.com
inspectlet.com
mouseflow.com
quantummetric.com
sessioncam.com
smartlook.com
userreplay.net
yandex.ru

Companies using session-replay scripts:

100sp.ru
101.ru
101xp.com
11st.co.kr
1september.ru
1tv.ru
1und1.de
20minutos.es
247sports.com
24smi.info
24timezones.com
24video.xxx
2gis.ru
3ddd.ru
3dnews.ru
4game.com
7days.ru
888casino.com
8drama.com
8muses.com
90tv.ir
9111.ru
abcya.com
abof.com
abs-cbn.com
academyun.ru
acrobat.com
acs.org
adbooth.com
adcash.com
adidas.com
adme.ru
adobe.com
adobelogin.com
aeroflot.ru
afisha.ru
aftenposten.no
ahaber.com.tr
aif.ru
airfrance.fr
akamai.com
alaan.org
alborsagia.com
alfabank.ru
alfacart.com
alitalia.com
aljazeera.net
allbesta.net
alwatanvoice.com
americanas.com.br
anandabazar.com
ancestry.co.uk
ancestry.com
androidcentral.com
anews.com
anidub.com
animespirit.ru
animevost.org
anistar.me
anybunny.com
appear.in
appfolio.com
apteka.ru
arabseed.com
argos.co.uk
aristeguinoticias.com
asana.com
asda.com
ask.fm
askcom.me
astromeridian.ru
asu.edu
asus.com
at.ua
atlassian.com
atlassian.net
atv.com.tr
audioz.download
auth0.com
auto.ru
autodesk.com
avg.com
aviasales.ru
avito.ru
avon.com
avon.ru
avxhome.se
awd.ru
aweber.com
azbyka.ru
azure.com
baby.ru
babyou.com
baixaki.com.br
bajajfinserv.in
bamilo.com
bancdebinary.com
banggood.com
bangkokpost.com
banki.ru
bankier.pl
bankrate.com
bartarinha.ir
baskino.club
bbb.org
bbcgoodfood.com
beeg.com
beeline.ru
benchmark.pl
benchmarkemail.com
beon.ru
bet9ja.com
betfair.com
bibliofond.ru
bibme.org
big.az
bigcinema.to
biglion.ru
bigpicture.ru
bigrock.in
bitbucket.org
bitdefender.com
bitrix24.com
bitrix24.ru
bkm.com.tr
blackberry.com
blamper.ru
blesk.cz
blizko.ru
blocket.se
blueapron.com
bluehost.com
bluestacks.com
bmo.com
bnext.com.tw
bobfilm1.net
bodybuilding.com
bollywoodhungama.com
bonprix.ru
boohoo.com
boots.com
bose.com
brightside.me
britishairways.com
bs.to
bt.com
buffer.com
bufferapp.com
bva-auctions.com
bzwbk.pl
cam4.com
cam4.es
cam4.fr
cancer.org
canlitv.mobi
capgemini.com
car.com
cardinalcommerce.com
career.ru
cars.com
carters.com
casadellibro.com
cathaypacific.com
cbs.com
cbsnews.com
cbssports.com
cell.com
ceneo.pl
centurylink.com
ceskatelevize.cz
cetobeto.com
chainreactioncycles.com
championat.com
charter97.org
cheapoair.com
chefkoch.de
chegg.com
chevrolet.com
chouseisan.com
chto-proishodit.ru
cian.ru
cint.com
citationmachine.net
citethisforme.com
citilink.ru
cleartrip.com
clickadu.com
clickfunnels.com
clickjogos.com.br
clicrbs.com.br
climatempo.com.br
cloudinary.com
cnnturk.com
coccoc.com
codecademy.com
codechef.com
codeforces.com
codeschool.com
coindesk.com
collabserv.com
collider.com
colonelcassad.livejournal.com
columbia.edu
comcast.com
comcast.net
comodo.com
computerbild.de
computerhoy.com
connexus.com
conrad.de
conservativetribune.com
constantcontact.com
consultant.ru
consultaremedios.com.br
cont.ws
contra.gr
corsair.com
cosmo.ru
costco.ca
costco.com
coupondunia.in
cpanel.net
craftsvilla.com
crateandbarrel.com
crowdfireapp.com
crunchbase.com
csgolounge.com
ctc.ru
culturacolectiva.com
cumhuriyet.com.tr
currys.co.uk
customink.com
cutezee.com
cvent.com
cyberforum.ru
cyberleninka.ru
dallasnews.com
datafilehost.com
dawanda.com
day.az
debate.com.mx
delfi.lv
demotywatory.pl
depositphotos.com
deseretnews.com
despegar.com.ar
detmir.ru
diario.mx
diary.ru
dicio.com.br
dickssportinggoods.com
digikala.com
digikey.com
digistyle.com
digitalocean.com
dillards.com
directadvert.ru
dirty.ru
discoveryeducation.com
disneystore.com
disput.az
diy.com
dll-files.com
dnaindia.com
dnevnik.ru
dni.ru
doda.jp
doktorsitesi.com
dom2-fan.org
dominos.com
domofond.ru
donanimhaber.com
doodle.com
doramakun.ru
doramatv.ru
dota2.ru
dota2lounge.com
dramafever.com
draxe.com
dreamhost.com
drive2.ru
driverupdate.net
drp.su
dstv.com
dsw.com
dumedia.ru
dw.com
dynamics.com
dzone.com
e-katalog.ru
e1.ru
eadaily.com
easybib.com
easycounter.com
ebela.in
ebs.in
echosign.com
economist.com
ecwid.com
eda.ru
edf.fr
edimdoma.ru
editorialmanager.com
ee.co.uk
eksisozluk.com
elderscrollsonline.com
eleconomista.com.mx
eleman.net
elibrary.ru
elperiodico.com
elsevier.com
elvenar.com
emag.ro
en.wordpress.com
encuentra24.com
englishforums.com
enjoydressup.com
ensonhaber.com
enterprise.com
entrepreneur.com
epom.com
epson.com
eset.com
euronews.com
europaplus.ru
eurosport.fr
evernote.com
evilangel.com
exist.ru
experian.com
express.com
express.de
extrastores.com
f5haber.com
faberlic.com
fanatics.com
fanatik.com.tr
fandango.com
fast-torrent.ru
fastspring.com
fastweb.it
fb.ru
files.wordpress.com
filmitorrent.org
findanime.ru
finishline.com
firstcry.com
fishki.net
fitbit.com
flvto.biz
flydubai.com
flyertalk.com
flyfrontier.com
flypgs.com
fodors.com
fontanka.ru
foodpanda.in
fool.com
football.ua
forbes.ru
ford.com
forexpf.ru
forgeofempires.com
forumhouse.ru
fotostrana.ru
fox-fan.ru
freenom.com
frontier.com
fullprogramlarindir.com
funshop.co.kr
futhead.com
futura-sciences.com
g2a.com
gaana.com
game-game.com.ua
game.co.uk
gameblog.fr
gamebomb.ru
gamestar.de
gap.com
garant.ru
gdeposylka.ru
gdz.ru
geekbuying.com
geektimes.ru
genial.guru
geocaching.com
germany.ru
getresponse.com
gezginler.net
gfxtrra.com
ghostvidstube.com
gibdd.ru
giffgaff.com
gigya.com
gismeteo.ru
gitlab.com
glaz.tv
gnezdo.ru
goal.com
gob.cl
godaddy.com
gofundme.com
goldenline.pl
goodfon.ru
gooool.org
gordonua.com
gosugamers.net
gosuslugi.ru
grab.com
grammarly.com
grandars.ru
graphicstock.com
greenmangaming.com
grepolis.com
grouple.ru
grupobancolombia.com
gsp.ro
gucci.com
gulfnews.com
guru99.com
gutefrage.net
h2porn.com
haber7.com
haberler.com
habrahabr.ru
hackerrank.com
haqqin.az
harborfreight.com
harrods.com
hashflare.io
hasznaltauto.hu
hbr.org
hclips.com
hdkinoteatr.com
hdzog.com
hemnet.se
hepsiburada.com
heraldsun.com.au
herb.co
hertz.com
hh.ru
hi.ru
hidemyass.com
hitfile.net
holidaycheck.de
hollywoodlife.com
home.pl
homedepot.com
homes.com
hornbach.de
horoscope.com
hostgator.com
hostgator.in
hotmart.com
hotmovs.com
hotntubes.com
houseoffraser.co.uk
hp.com
hpe.com
hqporner.com
hqtube.xxx
hse.ru
hsn.com
htmlbook.ru
hubspot.com
hubspot.net
hurriyet.com.tr
hurriyetemlak.com
hvg.hu
hyatt.com
hyundai.com
ibm.com
ibtimes.co.uk
icims.com
iconosquare.com
idealista.com
idealista.it
idealo.de
idntimes.com
ifixit.com
ifunny.co
igromania.ru
iherb.com
ihg.com
ijr.com
ilsole24ore.com
imgsrc.ru
immobilienscout24.de
imore.com
imzog.com
incrivel.club
index.hr
indiatimes.com
infox.sg
infusionsoft.com
inmotionhosting.com
inosmi.ru
instamojo.com
instructure.com
intel.com
intelius.com
interfax.ru
iobit.com
iol.co.za
ipage.com
iprima.cz
iqoption.com
irecommend.ru
irr.ru
istockphoto.com
ivi.ru
ixbt.com
izvestia.ru
jamieoliver.com
jbhifi.com.au
jbzd.pl
jcrew.com
jeffreestarcosmetics.com
jet.com
jetblue.com
jetstar.com
jizzbunker.com
jobstreet.com.my
jofogas.hu
johnlewis.com
join.me
jomashop.com
joxi.ru
jsbin.com
jusbrasil.com.br
just-eat.co.uk
justanswer.com
justclick.ru
justporno.tv
jutarnji.hr
jwplayer.com
k12.com
k2s.cc
kanobu.ru
karar.com
kariyer.net
kaspersky.com
kaspersky.ru
kat.how
katespade.com
khl.ru
kinguin.net
kino-teatr.ru
kinogo.club
kinokong.net
kinokrad.co
kinopoisk.ru
kinoprofi.net
kinoprofi.org
kinozz.net
kismia.com
kissmetrics.com
kizi.com
kmart.com
kolesa.kz
kommersant.ru
konga.com
kosmetista.ru
kp.ru
ku.edu
kufar.by
kuleuven.be
kupivip.ru
kwejk.pl
labirint.ru
lamoda.ru
lanacion.com.ar
lance.com.br
landsend.com
layalina.com
ldlc.com
lds.org
leagueoflegends.co.kr
leagueoflegends.com
legalporno.com
legalzoom.com
lenovo.com
lenta.ru
leroymerlin.es
leroymerlin.ru
letyshops.ru
lexisnexis.com
libertatea.ro
life.ru
liga.net
liginc.co.jp
link.tl
linode.com
liquidweb.com
litres.ru
littleone.ru
live-smi.ru
livechatinc.com
liveinternet.ru
livejournal.com
liverpool.com.mx
logitech.com
logmein.com
lohaco.jp
lolesports.com
lostfilm.tv
loveplanet.ru
lse.ac.uk
lurkmore.to
lyricsfreak.com
lyricsmode.com
lyrsense.com
m24.ru
maam.ru
mackeeper.com
magazineluiza.com.br
magento.com
magentocommerce.com
magoosh.com
mail.com
maisonsdumonde.com
makeagif.com
mako.co.il
mamba.ru
manchestereveningnews.co.uk
manualslib.com
mapsofworld.com
mapy.cz
masralarabia.com
matchtv.ru
materiel.net
mbc.net
meb.gov.tr
mediametrics.ru
megafon.ru
megaresheba.ru
megaserial.net
megashara.com
megashare.su
megogo.net
mendeley.com
mercadolibre.com.ar
met-art.com
michaelkors.com
michaels.com
microsoft.com
midwayusa.com
milanuncios.com
milli.az
mimp3.me
mindbodygreen.com
mindtools.com
minecraft.net
mintmanga.com
mirraw.com
mirror.co.uk
mitlukashermann.com
mk.ru
mlbshop.com
mobile-review.com
modelmayhem.com
modxvm.com
money.pl
moneysavingexpert.com
mongodb.com
morhipo.com
mos.ru
motogp.com
mouser.com
movavi.com
moviepilot.com
moviepilot.de
moz.com
mp3tunes.tv
mrporter.com
msnbc.com
msu.edu
msu.ru
mts.ru
mtv.fi
mudah.my
multitran.ru
multoigri.ru
muni.cz
musixmatch.com
mvideo.ru
my-hit.me
my-shop.ru
mymovies.it
mynet.com
myopportunity.com
myschoolapp.com
myshared.ru
myshows.me
myus.com
myvi.ru
n11.com
nalog.ru
narod.ru
natemat.pl
natwest.com
neimanmarcus.com
nerdwallet.com
nesaporn.com
nest.com
net-a-porter.com
net.hr
neteller.com
neu.edu
newegg.com
news.am
news.com.au
news24.com
news247.gr
newsbomb.gr
newsru.co.il
newsru.com
ngs.ru
nieuwsblad.be
nifty.com
ning.com
niniban.com
nintendo.com
njuskalo.hr
nn.ru
nnm-club.me
nnm.me
nnmclub.to
nolo.com
norton.com
nottingham.ac.uk
novayagazeta.ru
nsw.gov.au
ntv.com.tr
ntv.ru
ntvspor.net
nur.kz
oantagonista.com
occ.com.mx
office365.com
ognyvo.ru
ohnotheydidnt.livejournal.com
oi.com.br
okdiario.com
oldnavy.com
olke.az
olx.bg
olx.kz
olymptrade.com
omgpm.com
omniture.com
onedio.com
onelogin.com
onlinemultfilmy.ru
onliner.by
onlinevideoconverter.com
only-tv.org
opera.com
orange.pl
oszone.net
outbrain.com
overclockers.ru
ozon.ru
pagseguro.uol.com.br
pakwheels.com
parallels.com
parapolitika.gr
passeidireto.com
patagonia.com
paychex.com
paysafecard.com
pccomponentes.com
peixeurbano.com.br
petco.com
petfinder.com
pexels.com
photobucket.com
photoshop-master.ru
pipedrive.com
pistonheads.com
planningcenteronline.com
plarium.com
playbuzz.com
playcast.ru
playfulbet.com
playground.ru
pochta.ru
podio.com
poiskm.org
politikus.ru
pons.com
popmyads.com
pornhubpremium.com
postila.ru
povar.ru
povarenok.ru
powtoon.com
pozdravok.ru
pr-cy.ru
pravda.ru
pravda.sk
pravoslavie.ru
prensalibre.com
prezi.com
programme-tv.net
promodj.com
pronews.gr
psu.edu
publitas.com
pulscen.ru
puma.com
pure-t.ru
qafqazinfo.az
qantas.com
qip.ru
quidco.com
rabota.ru
radikal.ru
rbc.ru
readmanga.me
realclearpolitics.com
reclameaqui.com.br
redhat.com
redmp3.su
reed.co.uk
reg.ru
regnum.ru
ren.tv
resellerclub.com
retre.org
reuters.com
reverb.com
rg.ru
rgho.st
ria.ru
riafan.ru
rich-birds.com
riotgames.com
rivalo.com
riverisland.com
rlsnet.ru
rochester.edu
rogers.com
rome2rio.com
rosbalt.ru
rosreestr.ru
rottentomatoes.com
royalads.net
rp.pl
rt.com
rt.ru
rte.ie
rulit.me
rumorsleague.com
rusfolder.com
russia.tv
russianfood.com
rusvesna.su
rutor.in
rutube.ru
ruyaanlami.com
ryanair.com
rzd.ru
sagepay.com
sainsburys.co.uk
samsung.com
santander.co.uk
sapo.pt
satu.kz
savevideo.me
sbazar.cz
sberbank.ru
sbis.ru
sbrf.ru
school.mosreg.ru
sci-hub.bz
sci-hub.cc
screencast.com
sdamgia.ru
sdna.gr
sdpnoticias.com
seagate.com
sears.com
seasonvar.ru
see.xxx
seek.com.au
seekingarrangement.com
sellfy.com
semrush.com
sendpulse.com
serienstream.to
sh.st
sharepoint.com
shaw.ca
shawacademy.com
shiftdelete.net
shikimori.org
shop.com
shopfacil.com.br
shoptime.com.br
shorte.st
showroomprive.com
shutterfly.com
sibnet.ru
sigmalive.com
sima-land.ru
skrill.com
skroutz.gr
sky.com
sky.it
skype.com
sling.com
smartinf.ru
sme.sk
smh.com.au
smi2.ru
smotri.com
snob.ru
soccerway.com
socialmediaexaminer.com
society6.com
softbank.jp
softonic.com
softonic.com.br
sondakika.com
songkick.com
songsterr.com
songx.pk
souq.com
sovsport.ru
sozcu.com.tr
sp-fan.ru
spareroom.co.uk
spidersweb.pl
spletnik.ru
sport-express.ru
sport24.gr
sportbox.ru
sportingnews.com
sportmaster.ru
sports.ru
sporx.com
spotify.com
spreadshirt.com
sputniknews.com
standaard.be
start.me
startv.com.tr
starzplay.com
stepstone.de
stoloto.ru
stopgame.ru
stranamam.ru
studfiles.ru
studopedia.ru
studyblue.com
suara.com
submarino.com.br
subscribe.ru
successfactors.com
superjob.ru
sur.ly
surfsecured.net
svpressa.ru
svyaznoy.ru
swiggy.com
sydney.edu.au
symantec.com
synxis.com
t-mobile.com
t3n.de
taboola.com
talktalk.co.uk
tamindir.com
tankionline.com
tap.az
tass.ru
tatacliq.com
teamtreehouse.com
teamviewer.com
teamwork.com
technologyreview.com
techrepublic.com
techsmith.com
teespring.com
tekfullhdfilmizle.com
teknosa.com
tele2.ru
telegraph.co.uk
telenet.be
telerik.com
telus.com
tengrinews.kz
tenkofx.com
tes.com
texas.gov
text.ru
tfile.co
the-star.co.ke
the-village.ru
theage.com.au
theaustralian.com.au
thecelebritylane.com
thefappening.so
thegay.com
thenorthface.com
theoutnet.com
thepennyhoarder.com
thequestion.ru
thermofisher.com
thewirecutter.com
three.co.uk
tiki.vn
tikona.in
tim.com.br
time-to-read.ru
timesofindia.com
tirto.id
tiu.ru
tmz.com
tn.com.ar
tnt-online.ru
today.com
tokopedia.com
toluna.com
tonkosti.ru
topky.sk
topuniversities.com
topwar.ru
torentor.net
torrent-games.net
torrent-tv.ru
torrentino.me
torrentor.co
toster.ru
touchofmodern.com
toyota.com
toysrus.com
tparser.org
tradedoubler.com
trafficfactory.biz
trend.az
trendingpatrol.com
trendyol.com
trinixy.ru
trojmiasto.pl
trud.com
tsb.co.uk
tubelombia.net
tubeplus.ag
tubepornclassic.com
tuberel.com
tune.pk
turbo.az
turbobit.net
turkcell.com.tr
turkcinema.tv
tushkan.tv
tut.by
tutu.ru
tvfplay.com
tvigle.ru
tvrain.ru
tvzvezda.ru
twentytwowords.com
txxx.com
uci.edu
ucoz.net
ucoz.ru
ucoz.ua
udacity.com
udemy.com
ulke.com.tr
ulmart.ru
uloz.to
ulozto.cz
ultipro.com
uniblue.com
unicredit.it
unionpeer.org
unity.com
unity3d.com
univision.com
uol.com.br
upornia.com
upwork.com
usembassy.gov
uservoice.com
usgs.gov
utarget.ru
utoronto.ca
uznayvse.ru
varlamov.ru
vecernji.hr
vedomosti.ru
vente-privee.com
vesti.ru
viator.com
vibbo.com
vic.gov.au
videoblocks.com
videomore.ru
virginmedia.com
visualstudio.com
vitalsource.com
vivanuncios.com.mx
vivo.com.br
vivo.sx
vivud.com
vjav.com
vodafone.es
vokrug.tv
voyeurhit.com
vseigru.net
vseinstrumenti.ru
vtb24.ru
vz.ru
wadi.com
wallapop.com
wallpaperscraft.com
wargaming.net
warthunder.com
webdesignerdepot.com
webmotors.com.br
weightwatchers.com
westernunion.com
wetter.de
which.co.uk
whoer.net
wiley.com
wind.it
windows.com
windowsazure.com
windowscentral.com
wishpond.com
wittyfeed.com
woman.ru
womanadvice.ru
woocommerce.com
wooordhunt.ru
wordpress.com
wordstream.com
workable.com
worldoftanks.com
worldoftanks.eu
worldofwarships.eu
worldofwarships.ru
wp.com
wpengine.com
wrike.com
x-rates.com
xbox.com
xcams.fr
xero.com
xfinity.com
xrutor.org
xtube.com
xuk.net
y8.com
yadi.sk
yandex.by
yandex.com
yandex.com.tr
yandex.kz
yandex.net
yandex.ua
yapikredi.com.tr
yaplakal.com
ye-mek.net
yemeksepeti.com
yenisafak.com
yepi.com
ykt.ru
yoast.com
yoob.com
yoox.com
youmob.com
your-surveys.com
yourcinema.tv
yourdictionary.com
zakon.kz
zakupki.gov.ru
zap.co.il
zarplata.ru
zdnet.com
zenmate.com
zf.fm
zfilm-hd.net
zive.cz
zoom.com.br
zoom.us

KOM

The question is, does the session data get sent back to the originating server and then forwarded to these tracking companies, or does it go direct?

sanipilani

This post is deleted!

hertaveins

This post is deleted!

davidcmith

This post is deleted!

drinatrinh2703

Thanks for your information!

kovacsszandra

@KOM said in Exfiltration of personal data by session-replay scripts:

e session data g

From a user perspective it doesn't make much of a difference, right?

kovacsszandra

@sanipilani

@sanipilani said in Exfiltration of personal data by session-replay scripts:

@battles said in Exfiltration of personal data by session-replay scripts:

Companies using session-replay scripts:

http://www.atomtech.in/ https://hu.flatfy.com/
https://hu.flatfy.com/elad%C3%B3-lak%C3%A1s-budapest
https://hu.flatfy.com/kiad%C3%B3-lak%C3%A1s-budapest

I would be curious how did the number of replay script using websites evolve since this study from 2017. There are certainly much more websites out there, and as far as I'm concerned no regulation exists on this besides the EU's GDPR...

vern1231

This post is deleted!

shey42

This post is deleted!

jimp

Locking this thread as it has become a magnet for spambots.