Exfiltration of personal data by session-replay scripts
-
Sites that would be best blocked.
Explanation:
https://freedom-to-tinker.com/2017/11/15/no-boundaries-exfiltration-of-personal-data-by-session-replay-scripts/
Session replay sites and services (to block):
https://webtransparency.cs.princeton.edu/no_boundaries/session_replay_sites.html
-
List broken down:
Session Replay Companies:
clicktale.net decibelinsight.net fullstory.com hotjar.com inspectlet.com mouseflow.com quantummetric.com sessioncam.com smartlook.com userreplay.net yandex.ru
Companies using session-replay scripts:
100sp.ru 101.ru 101xp.com 11st.co.kr 1september.ru 1tv.ru 1und1.de 20minutos.es 247sports.com 24smi.info 24timezones.com 24video.xxx 2gis.ru 3ddd.ru 3dnews.ru 4game.com 7days.ru 888casino.com 8drama.com 8muses.com 90tv.ir 9111.ru abcya.com abof.com abs-cbn.com academyun.ru acrobat.com acs.org adbooth.com adcash.com adidas.com adme.ru adobe.com adobelogin.com aeroflot.ru afisha.ru aftenposten.no ahaber.com.tr aif.ru airfrance.fr akamai.com alaan.org alborsagia.com alfabank.ru alfacart.com alitalia.com aljazeera.net allbesta.net alwatanvoice.com americanas.com.br anandabazar.com ancestry.co.uk ancestry.com androidcentral.com anews.com anidub.com animespirit.ru animevost.org anistar.me anybunny.com appear.in appfolio.com apteka.ru arabseed.com argos.co.uk aristeguinoticias.com asana.com asda.com ask.fm askcom.me astromeridian.ru asu.edu asus.com at.ua atlassian.com atlassian.net atv.com.tr audioz.download auth0.com auto.ru autodesk.com avg.com aviasales.ru avito.ru avon.com avon.ru avxhome.se awd.ru aweber.com azbyka.ru azure.com baby.ru babyou.com baixaki.com.br bajajfinserv.in bamilo.com bancdebinary.com banggood.com bangkokpost.com banki.ru bankier.pl bankrate.com bartarinha.ir baskino.club bbb.org bbcgoodfood.com beeg.com beeline.ru benchmark.pl benchmarkemail.com beon.ru bet9ja.com betfair.com bibliofond.ru bibme.org big.az bigcinema.to biglion.ru bigpicture.ru bigrock.in bitbucket.org bitdefender.com bitrix24.com bitrix24.ru bkm.com.tr blackberry.com blamper.ru blesk.cz blizko.ru blocket.se blueapron.com bluehost.com bluestacks.com bmo.com bnext.com.tw bobfilm1.net bodybuilding.com bollywoodhungama.com bonprix.ru boohoo.com boots.com bose.com brightside.me britishairways.com bs.to bt.com buffer.com bufferapp.com bva-auctions.com bzwbk.pl cam4.com cam4.es cam4.fr cancer.org canlitv.mobi capgemini.com car.com cardinalcommerce.com career.ru cars.com carters.com casadellibro.com cathaypacific.com cbs.com cbsnews.com cbssports.com cell.com ceneo.pl centurylink.com ceskatelevize.cz cetobeto.com chainreactioncycles.com championat.com charter97.org cheapoair.com chefkoch.de chegg.com chevrolet.com chouseisan.com chto-proishodit.ru cian.ru cint.com citationmachine.net citethisforme.com citilink.ru cleartrip.com clickadu.com clickfunnels.com clickjogos.com.br clicrbs.com.br climatempo.com.br cloudinary.com cnnturk.com coccoc.com codecademy.com codechef.com codeforces.com codeschool.com coindesk.com collabserv.com collider.com colonelcassad.livejournal.com columbia.edu comcast.com comcast.net comodo.com computerbild.de computerhoy.com connexus.com conrad.de conservativetribune.com constantcontact.com consultant.ru consultaremedios.com.br cont.ws contra.gr corsair.com cosmo.ru costco.ca costco.com coupondunia.in cpanel.net craftsvilla.com crateandbarrel.com crowdfireapp.com crunchbase.com csgolounge.com ctc.ru culturacolectiva.com cumhuriyet.com.tr currys.co.uk customink.com cutezee.com cvent.com cyberforum.ru cyberleninka.ru dallasnews.com datafilehost.com dawanda.com day.az debate.com.mx delfi.lv demotywatory.pl depositphotos.com deseretnews.com despegar.com.ar detmir.ru diario.mx diary.ru dicio.com.br dickssportinggoods.com digikala.com digikey.com digistyle.com digitalocean.com dillards.com directadvert.ru dirty.ru discoveryeducation.com disneystore.com disput.az diy.com dll-files.com dnaindia.com dnevnik.ru dni.ru doda.jp doktorsitesi.com dom2-fan.org dominos.com domofond.ru donanimhaber.com doodle.com doramakun.ru doramatv.ru dota2.ru dota2lounge.com dramafever.com draxe.com dreamhost.com drive2.ru driverupdate.net drp.su dstv.com dsw.com dumedia.ru dw.com dynamics.com dzone.com e-katalog.ru e1.ru eadaily.com easybib.com easycounter.com ebela.in ebs.in echosign.com economist.com ecwid.com eda.ru edf.fr edimdoma.ru editorialmanager.com ee.co.uk eksisozluk.com elderscrollsonline.com eleconomista.com.mx eleman.net elibrary.ru elperiodico.com elsevier.com elvenar.com emag.ro en.wordpress.com encuentra24.com englishforums.com enjoydressup.com ensonhaber.com enterprise.com entrepreneur.com epom.com epson.com eset.com euronews.com europaplus.ru eurosport.fr evernote.com evilangel.com exist.ru experian.com express.com express.de extrastores.com f5haber.com faberlic.com fanatics.com fanatik.com.tr fandango.com fast-torrent.ru fastspring.com fastweb.it fb.ru files.wordpress.com filmitorrent.org findanime.ru finishline.com firstcry.com fishki.net fitbit.com flvto.biz flydubai.com flyertalk.com flyfrontier.com flypgs.com fodors.com fontanka.ru foodpanda.in fool.com football.ua forbes.ru ford.com forexpf.ru forgeofempires.com forumhouse.ru fotostrana.ru fox-fan.ru freenom.com frontier.com fullprogramlarindir.com funshop.co.kr futhead.com futura-sciences.com g2a.com gaana.com game-game.com.ua game.co.uk gameblog.fr gamebomb.ru gamestar.de gap.com garant.ru gdeposylka.ru gdz.ru geekbuying.com geektimes.ru genial.guru geocaching.com germany.ru getresponse.com gezginler.net gfxtrra.com ghostvidstube.com gibdd.ru giffgaff.com gigya.com gismeteo.ru gitlab.com glaz.tv gnezdo.ru goal.com gob.cl godaddy.com gofundme.com goldenline.pl goodfon.ru gooool.org gordonua.com gosugamers.net gosuslugi.ru grab.com grammarly.com grandars.ru graphicstock.com greenmangaming.com grepolis.com grouple.ru grupobancolombia.com gsp.ro gucci.com gulfnews.com guru99.com gutefrage.net h2porn.com haber7.com haberler.com habrahabr.ru hackerrank.com haqqin.az harborfreight.com harrods.com hashflare.io hasznaltauto.hu hbr.org hclips.com hdkinoteatr.com hdzog.com hemnet.se hepsiburada.com heraldsun.com.au herb.co hertz.com hh.ru hi.ru hidemyass.com hitfile.net holidaycheck.de hollywoodlife.com home.pl homedepot.com homes.com hornbach.de horoscope.com hostgator.com hostgator.in hotmart.com hotmovs.com hotntubes.com houseoffraser.co.uk hp.com hpe.com hqporner.com hqtube.xxx hse.ru hsn.com htmlbook.ru hubspot.com hubspot.net hurriyet.com.tr hurriyetemlak.com hvg.hu hyatt.com hyundai.com ibm.com ibtimes.co.uk icims.com iconosquare.com idealista.com idealista.it idealo.de idntimes.com ifixit.com ifunny.co igromania.ru iherb.com ihg.com ijr.com ilsole24ore.com imgsrc.ru immobilienscout24.de imore.com imzog.com incrivel.club index.hr indiatimes.com infox.sg infusionsoft.com inmotionhosting.com inosmi.ru instamojo.com instructure.com intel.com intelius.com interfax.ru iobit.com iol.co.za ipage.com iprima.cz iqoption.com irecommend.ru irr.ru istockphoto.com ivi.ru ixbt.com izvestia.ru jamieoliver.com jbhifi.com.au jbzd.pl jcrew.com jeffreestarcosmetics.com jet.com jetblue.com jetstar.com jizzbunker.com jobstreet.com.my jofogas.hu johnlewis.com join.me jomashop.com joxi.ru jsbin.com jusbrasil.com.br just-eat.co.uk justanswer.com justclick.ru justporno.tv jutarnji.hr jwplayer.com k12.com k2s.cc kanobu.ru karar.com kariyer.net kaspersky.com kaspersky.ru kat.how katespade.com khl.ru kinguin.net kino-teatr.ru kinogo.club kinokong.net kinokrad.co kinopoisk.ru kinoprofi.net kinoprofi.org kinozz.net kismia.com kissmetrics.com kizi.com kmart.com kolesa.kz kommersant.ru konga.com kosmetista.ru kp.ru ku.edu kufar.by kuleuven.be kupivip.ru kwejk.pl labirint.ru lamoda.ru lanacion.com.ar lance.com.br landsend.com layalina.com ldlc.com lds.org leagueoflegends.co.kr leagueoflegends.com legalporno.com legalzoom.com lenovo.com lenta.ru leroymerlin.es leroymerlin.ru letyshops.ru lexisnexis.com libertatea.ro life.ru liga.net liginc.co.jp link.tl linode.com liquidweb.com litres.ru littleone.ru live-smi.ru livechatinc.com liveinternet.ru livejournal.com liverpool.com.mx logitech.com logmein.com lohaco.jp lolesports.com lostfilm.tv loveplanet.ru lse.ac.uk lurkmore.to lyricsfreak.com lyricsmode.com lyrsense.com m24.ru maam.ru mackeeper.com magazineluiza.com.br magento.com magentocommerce.com magoosh.com mail.com maisonsdumonde.com makeagif.com mako.co.il mamba.ru manchestereveningnews.co.uk manualslib.com mapsofworld.com mapy.cz masralarabia.com matchtv.ru materiel.net mbc.net meb.gov.tr mediametrics.ru megafon.ru megaresheba.ru megaserial.net megashara.com megashare.su megogo.net mendeley.com mercadolibre.com.ar met-art.com michaelkors.com michaels.com microsoft.com midwayusa.com milanuncios.com milli.az mimp3.me mindbodygreen.com mindtools.com minecraft.net mintmanga.com mirraw.com mirror.co.uk mitlukashermann.com mk.ru mlbshop.com mobile-review.com modelmayhem.com modxvm.com money.pl moneysavingexpert.com mongodb.com morhipo.com mos.ru motogp.com mouser.com movavi.com moviepilot.com moviepilot.de moz.com mp3tunes.tv mrporter.com msnbc.com msu.edu msu.ru mts.ru mtv.fi mudah.my multitran.ru multoigri.ru muni.cz musixmatch.com mvideo.ru my-hit.me my-shop.ru mymovies.it mynet.com myopportunity.com myschoolapp.com myshared.ru myshows.me myus.com myvi.ru n11.com nalog.ru narod.ru natemat.pl natwest.com neimanmarcus.com nerdwallet.com nesaporn.com nest.com net-a-porter.com net.hr neteller.com neu.edu newegg.com news.am news.com.au news24.com news247.gr newsbomb.gr newsru.co.il newsru.com ngs.ru nieuwsblad.be nifty.com ning.com niniban.com nintendo.com njuskalo.hr nn.ru nnm-club.me nnm.me nnmclub.to nolo.com norton.com nottingham.ac.uk novayagazeta.ru nsw.gov.au ntv.com.tr ntv.ru ntvspor.net nur.kz oantagonista.com occ.com.mx office365.com ognyvo.ru ohnotheydidnt.livejournal.com oi.com.br okdiario.com oldnavy.com olke.az olx.bg olx.kz olymptrade.com omgpm.com omniture.com onedio.com onelogin.com onlinemultfilmy.ru onliner.by onlinevideoconverter.com only-tv.org opera.com orange.pl oszone.net outbrain.com overclockers.ru ozon.ru pagseguro.uol.com.br pakwheels.com parallels.com parapolitika.gr passeidireto.com patagonia.com paychex.com paysafecard.com pccomponentes.com peixeurbano.com.br petco.com petfinder.com pexels.com photobucket.com photoshop-master.ru pipedrive.com pistonheads.com planningcenteronline.com plarium.com playbuzz.com playcast.ru playfulbet.com playground.ru pochta.ru podio.com poiskm.org politikus.ru pons.com popmyads.com pornhubpremium.com postila.ru povar.ru povarenok.ru powtoon.com pozdravok.ru pr-cy.ru pravda.ru pravda.sk pravoslavie.ru prensalibre.com prezi.com programme-tv.net promodj.com pronews.gr psu.edu publitas.com pulscen.ru puma.com pure-t.ru qafqazinfo.az qantas.com qip.ru quidco.com rabota.ru radikal.ru rbc.ru readmanga.me realclearpolitics.com reclameaqui.com.br redhat.com redmp3.su reed.co.uk reg.ru regnum.ru ren.tv resellerclub.com retre.org reuters.com reverb.com rg.ru rgho.st ria.ru riafan.ru rich-birds.com riotgames.com rivalo.com riverisland.com rlsnet.ru rochester.edu rogers.com rome2rio.com rosbalt.ru rosreestr.ru rottentomatoes.com royalads.net rp.pl rt.com rt.ru rte.ie rulit.me rumorsleague.com rusfolder.com russia.tv russianfood.com rusvesna.su rutor.in rutube.ru ruyaanlami.com ryanair.com rzd.ru sagepay.com sainsburys.co.uk samsung.com santander.co.uk sapo.pt satu.kz savevideo.me sbazar.cz sberbank.ru sbis.ru sbrf.ru school.mosreg.ru sci-hub.bz sci-hub.cc screencast.com sdamgia.ru sdna.gr sdpnoticias.com seagate.com sears.com seasonvar.ru see.xxx seek.com.au seekingarrangement.com sellfy.com semrush.com sendpulse.com serienstream.to sh.st sharepoint.com shaw.ca shawacademy.com shiftdelete.net shikimori.org shop.com shopfacil.com.br shoptime.com.br shorte.st showroomprive.com shutterfly.com sibnet.ru sigmalive.com sima-land.ru skrill.com skroutz.gr sky.com sky.it skype.com sling.com smartinf.ru sme.sk smh.com.au smi2.ru smotri.com snob.ru soccerway.com socialmediaexaminer.com society6.com softbank.jp softonic.com softonic.com.br sondakika.com songkick.com songsterr.com songx.pk souq.com sovsport.ru sozcu.com.tr sp-fan.ru spareroom.co.uk spidersweb.pl spletnik.ru sport-express.ru sport24.gr sportbox.ru sportingnews.com sportmaster.ru sports.ru sporx.com spotify.com spreadshirt.com sputniknews.com standaard.be start.me startv.com.tr starzplay.com stepstone.de stoloto.ru stopgame.ru stranamam.ru studfiles.ru studopedia.ru studyblue.com suara.com submarino.com.br subscribe.ru successfactors.com superjob.ru sur.ly surfsecured.net svpressa.ru svyaznoy.ru swiggy.com sydney.edu.au symantec.com synxis.com t-mobile.com t3n.de taboola.com talktalk.co.uk tamindir.com tankionline.com tap.az tass.ru tatacliq.com teamtreehouse.com teamviewer.com teamwork.com technologyreview.com techrepublic.com techsmith.com teespring.com tekfullhdfilmizle.com teknosa.com tele2.ru telegraph.co.uk telenet.be telerik.com telus.com tengrinews.kz tenkofx.com tes.com texas.gov text.ru tfile.co the-star.co.ke the-village.ru theage.com.au theaustralian.com.au thecelebritylane.com thefappening.so thegay.com thenorthface.com theoutnet.com thepennyhoarder.com thequestion.ru thermofisher.com thewirecutter.com three.co.uk tiki.vn tikona.in tim.com.br time-to-read.ru timesofindia.com tirto.id tiu.ru tmz.com tn.com.ar tnt-online.ru today.com tokopedia.com toluna.com tonkosti.ru topky.sk topuniversities.com topwar.ru torentor.net torrent-games.net torrent-tv.ru torrentino.me torrentor.co toster.ru touchofmodern.com toyota.com toysrus.com tparser.org tradedoubler.com trafficfactory.biz trend.az trendingpatrol.com trendyol.com trinixy.ru trojmiasto.pl trud.com tsb.co.uk tubelombia.net tubeplus.ag tubepornclassic.com tuberel.com tune.pk turbo.az turbobit.net turkcell.com.tr turkcinema.tv tushkan.tv tut.by tutu.ru tvfplay.com tvigle.ru tvrain.ru tvzvezda.ru twentytwowords.com txxx.com uci.edu ucoz.net ucoz.ru ucoz.ua udacity.com udemy.com ulke.com.tr ulmart.ru uloz.to ulozto.cz ultipro.com uniblue.com unicredit.it unionpeer.org unity.com unity3d.com univision.com uol.com.br upornia.com upwork.com usembassy.gov uservoice.com usgs.gov utarget.ru utoronto.ca uznayvse.ru varlamov.ru vecernji.hr vedomosti.ru vente-privee.com vesti.ru viator.com vibbo.com vic.gov.au videoblocks.com videomore.ru virginmedia.com visualstudio.com vitalsource.com vivanuncios.com.mx vivo.com.br vivo.sx vivud.com vjav.com vodafone.es vokrug.tv voyeurhit.com vseigru.net vseinstrumenti.ru vtb24.ru vz.ru wadi.com wallapop.com wallpaperscraft.com wargaming.net warthunder.com webdesignerdepot.com webmotors.com.br weightwatchers.com westernunion.com wetter.de which.co.uk whoer.net wiley.com wind.it windows.com windowsazure.com windowscentral.com wishpond.com wittyfeed.com woman.ru womanadvice.ru woocommerce.com wooordhunt.ru wordpress.com wordstream.com workable.com worldoftanks.com worldoftanks.eu worldofwarships.eu worldofwarships.ru wp.com wpengine.com wrike.com x-rates.com xbox.com xcams.fr xero.com xfinity.com xrutor.org xtube.com xuk.net y8.com yadi.sk yandex.by yandex.com yandex.com.tr yandex.kz yandex.net yandex.ua yapikredi.com.tr yaplakal.com ye-mek.net yemeksepeti.com yenisafak.com yepi.com ykt.ru yoast.com yoob.com yoox.com youmob.com your-surveys.com yourcinema.tv yourdictionary.com zakon.kz zakupki.gov.ru zap.co.il zarplata.ru zdnet.com zenmate.com zf.fm zfilm-hd.net zive.cz zoom.com.br zoom.us
-
The question is, does the session data get sent back to the originating server and then forwarded to these tracking companies, or does it go direct?
-
This post is deleted! -
This post is deleted! -
This post is deleted! -
Thanks for your information!
-
@KOM said in Exfiltration of personal data by session-replay scripts:
e session data g
From a user perspective it doesn't make much of a difference, right?
-
@sanipilani said in Exfiltration of personal data by session-replay scripts:
@battles said in Exfiltration of personal data by session-replay scripts:
Companies using session-replay scripts:
http://www.atomtech.in/ https://hu.flatfy.com/
https://hu.flatfy.com/elad%C3%B3-lak%C3%A1s-budapest
https://hu.flatfy.com/kiad%C3%B3-lak%C3%A1s-budapestI would be curious how did the number of replay script using websites evolve since this study from 2017. There are certainly much more websites out there, and as far as I'm concerned no regulation exists on this besides the EU's GDPR...
-
This post is deleted! -
This post is deleted! -
Locking this thread as it has become a magnet for spambots.