Skip to content

Cover ltmsphrcl.net under Lotame pattern - #1191

Merged
philipp-classen merged 1 commit into
ghostery:mainfrom
ppr88:cover-ltmsphrcl-under-lotame
Aug 6, 2026
Merged

Cover ltmsphrcl.net under Lotame pattern#1191
philipp-classen merged 1 commit into
ghostery:mainfrom
ppr88:cover-ltmsphrcl-under-lotame

Conversation

@ppr88

@ppr88 ppr88 commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

ltmsphrcl.net is a second Lotame audience-collection domain, declared by Lotame themselves. GVL vendor 95 "Epsilon (Lotame)" publishes its device-storage disclosure at tags.crwdcntrl.net/privacy/tcf-purposes.json, whose domains array holds exactly two entries: *.crwdcntrl.net and *.ltmsphrcl.net, both with the use "Audience segmentation and analytics". The infrastructure agrees: the host we see, c.ltmsphrcl.net, is a CNAME to edge-bcp-lb-stack-eu-west-1.ltmsphrcl.net and resolves to the same eight IPs as Lotame's existing collection host bcp.crwdcntrl.net (CNAME edge-bcp-lb-stack-bcp-lb-1536662837.eu-west-1.elb.amazonaws.com) — the same edge-bcp-lb-stack load balancer in eu-west-1. The registrant organization is Publicis Groupe S.A. (RDAP, created 2022-10-11), consistent with Lotame's services privacy notice: "Lotame Solutions, Inc. was merged into Epsilon Data Management, LLC and ceased to exist as a separate legal entity."

No example request URL for this one — the endpoint answers 403 to every path, and we observe it at the DNS level rather than in page requests.

@philipp-classen
philipp-classen merged commit f8a2604 into ghostery:main Aug 6, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants