Block Brightdata

[r2fo]

Prerequisites

• I checked the documentation and found no answer;
• I checked to make sure that this issue has not already been filed;
• This is not an ad/bug report.

Problem description

brightdata.com
brightdata.de
bright-sdk.com
clientsdk.bright-sdk.com
perr.bright-sdk.com

Proposed solution

Brightdata offers SDK’s for developers to put into their apps. These SDK’s abuse the user’s internet connection and turn it into a proxy. The developer earns money from it.

https://web.archive.org/web/20230601022816/https://old.reddit.com/r/privacy/comments/13wyc0c/bightdatacom_attempting_to_trick_child_into/

Additional information

No response

[Alex-302]

Hi.
Where can we check it?

bright-sdk.com
clientsdk.bright-sdk.com
perr.bright-sdk.com

in our case ||bright-sdk.com^ will block also subdomains.

[r2fo]

Hi.

Where can we check it?

bright-sdk.com

clientsdk.bright-sdk.com

perr.bright-sdk.com

in our case ||bright-sdk.com^ will block also subdomains.

On this page they advertise their proxies: https://brightdata.com/proxy-types

Here is a list of apps which use their SDK: https://bright-sdk.com

I installed one of them (Ludo Club) and got this pop-up where they want to give me 20 in-game currency in return for my 'device resources': image

I also checked my dns logs and found connections to clientsdk.bright-sdk.com and perr.bright-sdk.com. Just to be sure, I think brightdata.com and brightdata.de should also be blocked since there is a risk of more of these things operating under unknown subdomains of these domains.

Edit: I allowed the app Ludo Club to use Brightdata on my device and I noticed a few more domains that are used by their SDK (there are redirects to Brightdata.com). These domains are partially blocked by other blocklists, but not yet by AdGuard:

perr.l-agent.me
perr.l-err.biz
clientsdk.brdtnet.com
brdtest.com
brdtnet.com
luminati.io

image

[Alex-302]

Ok, added

||brightdata.com^
||brightdata.de^
||perr.l-agent.me^
||perr.l-err.biz^
||brdtest.com^
||brdtnet.com^
||luminati.io^

[r2fo]

Ok, added

||brightdata.com^

||brightdata.de^

||perr.l-agent.me^

||perr.l-err.biz^

||brdtest.com^

||brdtnet.com^

||luminati.io^

You should also add:

||bright-sdk.com^

Since this domain is also used for their SDK

[Alex-302]

Ok.

[fenopa]

@Alex-302 blocking "brightdata.com" and "brightdata.de" doesn't look right, these are just normal sites, they are not ad or tracking servers, they are the main sites of a product, "no normal users would want to visit it" is not a valid argument, someone would want to visit it to learn about it, or someone could be a customer (their proxies are used widely for testing of web apps), that's more like censorship.

[r2fo]

@Alex-302 blocking "brightdata.com" and "brightdata.de" doesn't look right, these are just normal sites, they are not ad or tracking servers, they are the main sites of a product, "no normal users would want to visit it" is not a valid argument, someone would want to visit it to learn about it, or someone could be a customer (their proxies are used widely for testing of web apps), that's more like censorship.

I'm worried that they're using those domains or unknown subdomains under that domain for some of their other malware products, it's better to be safe

[Alex-302]

@fenopa

"no normal users would want to visit it"

I did not say that.