@consenttheater/playbill 0.1.2 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +49 -59
- package/dist/actors/advertising.json +2412 -2412
- package/dist/actors/analytics.json +2653 -2652
- package/dist/actors/consent.json +89 -89
- package/dist/actors/data_leak.json +822 -820
- package/dist/actors/fingerprinting.json +205 -205
- package/dist/actors/functional.json +1098 -1093
- package/dist/actors/marketing.json +727 -727
- package/dist/actors/security.json +90 -90
- package/dist/actors/session_recording.json +161 -161
- package/dist/actors/social.json +325 -325
- package/dist/actors/tag_manager.json +44 -44
- package/dist/index.d.ts +16 -10
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +20 -12
- package/dist/types.d.ts +25 -29
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js +8 -3
- package/package.json +3 -7
- package/dist/scorer.d.ts +0 -42
- package/dist/scorer.d.ts.map +0 -1
- package/dist/scorer.js +0 -97
|
@@ -1,827 +1,829 @@
|
|
|
1
1
|
{
|
|
2
2
|
"category": "data_leak",
|
|
3
3
|
"description": "Third-party resources that expose visitor IP addresses — fonts, embeds, CDNs, maps",
|
|
4
|
-
"stats": { "cookies": 0, "domains":
|
|
4
|
+
"stats": { "cookies": 0, "domains": 821, "companies": 568 },
|
|
5
5
|
"cookies": {},
|
|
6
6
|
"domains": {
|
|
7
|
-
"*.b-cdn.net": { "company": "BunnyCDN", "service": "BunnyCDN CDN", "category": "data_leak", "
|
|
8
|
-
"*.cloudfront.net": { "company": "Amazon", "service": "AWS CloudFront CDN", "category": "data_leak", "
|
|
9
|
-
"*.deno.dev": { "company": "Deno", "service": "Deno Deploy", "category": "data_leak", "
|
|
10
|
-
"*.netlify.app": { "company": "Netlify", "service": "Netlify Edge Functions", "category": "data_leak", "
|
|
11
|
-
"*.vercel.app": { "company": "Vercel", "service": "Vercel Edge CDN", "category": "data_leak", "
|
|
12
|
-
"*.workers.dev": { "company": "Cloudflare", "service": "Cloudflare Workers", "category": "data_leak", "
|
|
13
|
-
"0.gravatar.com": { "company": "Automattic", "service": "Gravatar CDN", "category": "data_leak", "
|
|
14
|
-
"1.gravatar.com": { "company": "Automattic", "service": "Gravatar CDN", "category": "data_leak", "
|
|
15
|
-
"1inch.io": { "company": "1inch Network", "service": "1inch DEX Aggregator", "category": "data_leak", "
|
|
16
|
-
"2.gravatar.com": { "company": "Automattic", "service": "Gravatar CDN", "category": "data_leak", "
|
|
17
|
-
"a.storyblok.com": { "company": "Storyblok", "service": "Storyblok CMS CDN", "category": "data_leak", "
|
|
18
|
-
"abs.twimg.com": { "company": "X Corp", "service": "Twitter/X Absolute CDN", "category": "data_leak", "
|
|
19
|
-
"across.to": { "company": "Across Protocol", "service": "Across Bridge", "category": "data_leak", "
|
|
20
|
-
"acsbapp.com": { "company": "accessiBe", "service": "accessiBe Widget (Extended)", "category": "data_leak", "
|
|
21
|
-
"acuityscheduling.com": { "company": "Squarespace (Acuity)", "service": "Acuity Scheduling Embed", "category": "data_leak", "
|
|
22
|
-
"addons.mozilla.org": { "company": "Mozilla", "service": "Firefox Add-ons Store", "category": "data_leak", "
|
|
23
|
-
"ajax.aspnetcdn.com": { "company": "Microsoft", "service": "Microsoft Ajax CDN", "category": "data_leak", "
|
|
24
|
-
"ajax.googleapis.com": { "company": "Google", "service": "Google Hosted Libraries", "category": "data_leak", "
|
|
25
|
-
"ajax.googleapis.com/ajax/libs/angularjs": { "company": "Google", "service": "AngularJS CDN", "category": "data_leak", "
|
|
26
|
-
"akamaihd.net": { "company": "Akamai", "service": "Akamai HD Network", "category": "data_leak", "
|
|
27
|
-
"akamaized.net": { "company": "Akamai", "service": "Akamai CDN", "category": "data_leak", "
|
|
28
|
-
"analytics.agenziaentrate.gov.it": { "company": "Agenzia delle Entrate", "service": "Agenzia Entrate Analytics", "category": "data_leak", "
|
|
29
|
-
"analytics.arbeitsagentur.de": { "company": "Bundesagentur für Arbeit", "service": "Arbeitsagentur Analytics", "category": "data_leak", "
|
|
30
|
-
"analytics.belastingdienst.nl": { "company": "Dutch Tax Authority", "service": "Belastingdienst Analytics", "category": "data_leak", "
|
|
31
|
-
"analytics.destatis.de": { "company": "Destatis (Federal Statistical Office)", "service": "Destatis Analytics", "category": "data_leak", "
|
|
32
|
-
"analytics.governo.it": { "company": "Italian Government", "service": "Governo.it Analytics", "category": "data_leak", "
|
|
33
|
-
"analytics.inps.it": { "company": "INPS (Italian Social Security)", "service": "INPS Analytics", "category": "data_leak", "
|
|
34
|
-
"analytics.sede.gob.es": { "company": "Spanish Government", "service": "Sede.gob.es Analytics", "category": "data_leak", "
|
|
35
|
-
"analytics.seg-social.es": { "company": "Spanish Social Security", "service": "Seg-Social Analytics", "category": "data_leak", "
|
|
36
|
-
"api.accessibe.com": { "company": "accessiBe", "service": "accessiBe API", "category": "data_leak", "
|
|
37
|
-
"api.audioeye.com": { "company": "AudioEye", "service": "AudioEye API", "category": "data_leak", "
|
|
38
|
-
"api.bigcommerce.com": { "company": "BigCommerce", "service": "BigCommerce API", "category": "data_leak", "
|
|
39
|
-
"api.bombora.com": { "company": "Bombora", "service": "Bombora Intent API", "category": "data_leak", "
|
|
40
|
-
"api.darksky.net": { "company": "Apple (Dark Sky)", "service": "Dark Sky Weather API", "category": "data_leak", "
|
|
41
|
-
"api.db-ip.com": { "company": "DB-IP", "service": "DB-IP Geolocation", "category": "data_leak", "
|
|
42
|
-
"api.embedly.com": { "company": "A Medium Corporation (Embedly)", "service": "Embedly API", "category": "data_leak", "
|
|
43
|
-
"api.fontshare.com": { "company": "Indian Type Foundry", "service": "Fontshare Fonts", "category": "data_leak", "
|
|
44
|
-
"api.iconify.design": { "company": "Iconify", "service": "Iconify Icon API", "category": "data_leak", "
|
|
45
|
-
"api.ipdata.co": { "company": "IPdata", "service": "IPdata Geolocation", "category": "data_leak", "
|
|
46
|
-
"api.ipgeolocation.io": { "company": "IPGeolocation", "service": "IPGeolocation API", "category": "data_leak", "
|
|
47
|
-
"api.ipify.org": { "company": "ipify", "service": "ipify IP Lookup", "category": "data_leak", "
|
|
48
|
-
"api.ipinfo.io": { "company": "IPinfo", "service": "IPinfo API", "category": "data_leak", "
|
|
49
|
-
"api.ipstack.com": { "company": "ipstack", "service": "ipstack Geolocation", "category": "data_leak", "
|
|
50
|
-
"api.llama.fi": { "company": "DefiLlama", "service": "DefiLlama API", "category": "data_leak", "
|
|
51
|
-
"api.mapbox.com": { "company": "Mapbox", "service": "Mapbox Maps", "category": "data_leak", "
|
|
52
|
-
"api.netlify.com": { "company": "Netlify", "service": "Netlify API", "category": "data_leak", "
|
|
53
|
-
"api.nuget.org": { "company": "Microsoft", "service": "NuGet Package Registry", "category": "data_leak", "
|
|
54
|
-
"api.openweathermap.org": { "company": "OpenWeatherMap", "service": "OpenWeatherMap API", "category": "data_leak", "
|
|
55
|
-
"api.service.nhs.uk": { "company": "NHS (UK)", "service": "NHS API", "category": "data_leak", "
|
|
56
|
-
"api.stability.ai": { "company": "Stability AI", "service": "Stable Diffusion API", "category": "data_leak", "
|
|
57
|
-
"api.storyblok.com": { "company": "Storyblok", "service": "Storyblok API", "category": "data_leak", "
|
|
58
|
-
"api.tomtom.com": { "company": "TomTom", "service": "TomTom Maps API", "category": "data_leak", "
|
|
59
|
-
"api.userway.org": { "company": "UserWay", "service": "UserWay API", "category": "data_leak", "
|
|
60
|
-
"api.vercel.com": { "company": "Vercel", "service": "Vercel Deployment API", "category": "data_leak", "
|
|
61
|
-
"api.what3words.com": { "company": "what3words", "service": "what3words Location", "category": "data_leak", "
|
|
62
|
-
"api.wordfence.com": { "company": "Defiant Inc.", "service": "Wordfence API", "category": "data_leak", "
|
|
63
|
-
"app.1inch.io": { "company": "1inch Network", "service": "1inch App", "category": "data_leak", "
|
|
64
|
-
"app.aave.com/v3": { "company": "Aave", "service": "Aave V3 DeFi", "category": "data_leak", "
|
|
65
|
-
"app.box.com": { "company": "Box", "service": "Box Embed Widget", "category": "data_leak", "
|
|
66
|
-
"app.compound.finance": { "company": "Compound Labs", "service": "Compound App", "category": "data_leak", "
|
|
67
|
-
"app.morpho.org": { "company": "Morpho Labs", "service": "Morpho DeFi", "category": "data_leak", "
|
|
68
|
-
"app.optimism.io": { "company": "OP Labs", "service": "Optimism Bridge", "category": "data_leak", "
|
|
69
|
-
"app.savvycal.com": { "company": "SavvyCal", "service": "SavvyCal Scheduling", "category": "data_leak", "
|
|
70
|
-
"app.slack.com": { "company": "Salesforce/Slack", "service": "Slack Unfurl", "category": "data_leak", "
|
|
71
|
-
"app.storyblok.com": { "company": "Storyblok", "service": "Storyblok CMS", "category": "data_leak", "
|
|
72
|
-
"app.uniswap.org": { "company": "Uniswap Labs", "service": "Uniswap Interface", "category": "data_leak", "
|
|
73
|
-
"appointlet.com": { "company": "Appointlet", "service": "Appointlet Scheduling", "category": "data_leak", "
|
|
74
|
-
"arcgis.com": { "company": "Esri", "service": "ArcGIS Online Maps", "category": "data_leak", "
|
|
75
|
-
"assets-global.website-files.com": { "company": "Webflow", "service": "Webflow Asset CDN", "category": "data_leak", "
|
|
76
|
-
"assets.allegrostatic.com": { "company": "Allegro", "service": "Allegro CDN", "category": "data_leak", "
|
|
77
|
-
"assets.calendly.com": { "company": "Calendly", "service": "Calendly Assets", "category": "data_leak", "
|
|
78
|
-
"assets.imgix.net": { "company": "imgix", "service": "imgix Image CDN", "category": "data_leak", "
|
|
79
|
-
"assets.vercel.com": { "company": "Vercel", "service": "Vercel Assets CDN", "category": "data_leak", "
|
|
80
|
-
"assets.website-files.com": { "company": "Webflow", "service": "Webflow Assets CDN", "category": "data_leak", "
|
|
81
|
-
"azureedge.net": { "company": "Microsoft", "service": "Azure CDN", "category": "data_leak", "
|
|
82
|
-
"azurewebsites.net": { "company": "Microsoft", "service": "Azure Web Apps", "category": "data_leak", "
|
|
83
|
-
"b-cdn.net": { "company": "BunnyCDN", "service": "BunnyCDN Pull Zone", "category": "data_leak", "
|
|
84
|
-
"bankid.com": { "company": "BankID (Sweden)", "service": "Swedish BankID", "category": "data_leak", "
|
|
85
|
-
"bcp.crwdcntrl.net": { "company": "Lotame", "service": "Lotame Crowd Control", "category": "data_leak", "
|
|
86
|
-
"blob.core.windows.net": { "company": "Microsoft", "service": "Azure Blob Storage", "category": "data_leak", "
|
|
87
|
-
"blur.io": { "company": "Blur", "service": "Blur NFT Marketplace", "category": "data_leak", "
|
|
88
|
-
"bridge.arbitrum.io": { "company": "Offchain Labs", "service": "Arbitrum Bridge", "category": "data_leak", "
|
|
89
|
-
"bridge.base.org": { "company": "Coinbase (Base)", "service": "Base Bridge", "category": "data_leak", "
|
|
90
|
-
"broker.mitid.dk": { "company": "MitID (Denmark)", "service": "MitID Broker", "category": "data_leak", "
|
|
91
|
-
"browser.sentry-cdn.com": { "company": "Sentry", "service": "Sentry Browser SDK", "category": "data_leak", "
|
|
92
|
-
"c.s-microsoft.com": { "company": "Microsoft", "service": "Microsoft Static CDN", "category": "data_leak", "
|
|
93
|
-
"cal.com": { "company": "Cal.com", "service": "Cal.com Scheduling Embed", "category": "data_leak", "
|
|
94
|
-
"calendly.com": { "company": "Calendly", "service": "Calendly Scheduling Widget", "category": "data_leak", "
|
|
95
|
-
"candidat.pole-emploi.fr": { "company": "France Travail", "service": "France Travail (Pole Emploi)", "category": "data_leak", "
|
|
96
|
-
"carto.com": { "company": "CARTO", "service": "CARTO Location Intelligence", "category": "data_leak", "
|
|
97
|
-
"cdn-apple.com": { "company": "Apple", "service": "Apple CDN", "category": "data_leak", "
|
|
98
|
-
"cdn.100ms.live": { "company": "100ms", "service": "100ms Video CDN", "category": "data_leak", "
|
|
99
|
-
"cdn.1inch.io": { "company": "1inch Network", "service": "1inch Aggregator CDN", "category": "data_leak", "
|
|
100
|
-
"cdn.500px.org": { "company": "500px (VCG)", "service": "500px Photo CDN", "category": "data_leak", "
|
|
101
|
-
"cdn.888sport.com": { "company": "888 Holdings", "service": "888sport CDN", "category": "data_leak", "
|
|
102
|
-
"cdn.accessibe.com": { "company": "accessiBe", "service": "accessiBe Accessibility Widget", "category": "data_leak", "
|
|
103
|
-
"cdn.accor.com": { "company": "Accor", "service": "Accor CDN", "category": "data_leak", "
|
|
104
|
-
"cdn.adidas.com": { "company": "Adidas", "service": "Adidas CDN", "category": "data_leak", "
|
|
105
|
-
"cdn.adjust.com": { "company": "Adjust", "service": "Adjust Attribution CDN", "category": "data_leak", "
|
|
106
|
-
"cdn.adobe.com": { "company": "Adobe", "service": "Adobe Creative Cloud CDN", "category": "data_leak", "
|
|
107
|
-
"cdn.agoda.com": { "company": "Booking Holdings/Agoda", "service": "Agoda CDN", "category": "data_leak", "
|
|
108
|
-
"cdn.agoda.net": { "company": "Booking Holdings", "service": "Agoda CDN", "category": "data_leak", "
|
|
109
|
-
"cdn.ah.nl": { "company": "Albert Heijn (Ahold Delhaize)", "service": "Albert Heijn CDN", "category": "data_leak", "
|
|
110
|
-
"cdn.airbnb.com": { "company": "Airbnb", "service": "Airbnb CDN", "category": "data_leak", "
|
|
111
|
-
"cdn.aldi.com": { "company": "Aldi", "service": "Aldi CDN", "category": "data_leak", "
|
|
112
|
-
"cdn.allianz.com": { "company": "Allianz", "service": "Allianz CDN", "category": "data_leak", "
|
|
113
|
-
"cdn.ameli.fr": { "company": "CNAM (French Health Insurance)", "service": "Ameli.fr CDN", "category": "data_leak", "
|
|
114
|
-
"cdn.amplitude.com": { "company": "Amplitude", "service": "Amplitude SDK CDN", "category": "data_leak", "
|
|
115
|
-
"cdn.anthropic.com": { "company": "Anthropic", "service": "Anthropic CDN", "category": "data_leak", "
|
|
116
|
-
"cdn.appcues.com": { "company": "Appcues", "service": "Appcues Onboarding CDN", "category": "data_leak", "
|
|
117
|
-
"cdn.appdynamics.com": { "company": "Cisco (AppDynamics)", "service": "AppDynamics Browser RUM", "category": "data_leak", "
|
|
118
|
-
"cdn.apple-mapkit.com": { "company": "Apple", "service": "Apple MapKit JS", "category": "data_leak", "
|
|
119
|
-
"cdn.appsflyer.com": { "company": "AppsFlyer", "service": "AppsFlyer Attribution CDN", "category": "data_leak", "
|
|
120
|
-
"cdn.artstation.com": { "company": "ArtStation (Epic Games)", "service": "ArtStation CDN", "category": "data_leak", "
|
|
121
|
-
"cdn.auchan.fr": { "company": "Auchan", "service": "Auchan CDN", "category": "data_leak", "
|
|
122
|
-
"cdn.audi.com": { "company": "Volkswagen Group/Audi", "service": "Audi CDN", "category": "data_leak", "
|
|
123
|
-
"cdn.auth0.com": { "company": "Auth0 (Okta)", "service": "Auth0 SDK CDN", "category": "data_leak", "
|
|
124
|
-
"cdn.aviva.com": { "company": "Aviva", "service": "Aviva CDN", "category": "data_leak", "
|
|
125
|
-
"cdn.axa.com": { "company": "AXA", "service": "AXA CDN", "category": "data_leak", "
|
|
126
|
-
"cdn.bamboohr.com": { "company": "BambooHR", "service": "BambooHR CDN", "category": "data_leak", "
|
|
127
|
-
"cdn.behance.net": { "company": "Adobe", "service": "Behance CDN", "category": "data_leak", "
|
|
128
|
-
"cdn.bestwestern.com": { "company": "Best Western", "service": "Best Western CDN", "category": "data_leak", "
|
|
129
|
-
"cdn.betano.com": { "company": "Betano (Kaizen Gaming)", "service": "Betano CDN", "category": "data_leak", "
|
|
130
|
-
"cdn.betmgm.com": { "company": "BetMGM", "service": "BetMGM CDN", "category": "data_leak", "
|
|
131
|
-
"cdn.betsson.com": { "company": "Betsson Group", "service": "Betsson CDN", "category": "data_leak", "
|
|
132
|
-
"cdn.betterstack.com": { "company": "Better Stack", "service": "Better Stack Status Widget", "category": "data_leak", "
|
|
133
|
-
"cdn.bigcommerce.com": { "company": "BigCommerce", "service": "BigCommerce CDN", "category": "data_leak", "
|
|
134
|
-
"cdn.bitbucket.org": { "company": "Atlassian", "service": "Bitbucket CDN", "category": "data_leak", "
|
|
135
|
-
"cdn.bizzabo.com": { "company": "Bizzabo", "service": "Bizzabo Event CDN", "category": "data_leak", "
|
|
136
|
-
"cdn.bombora.com": { "company": "Bombora", "service": "Bombora Intent Data", "category": "data_leak", "
|
|
137
|
-
"cdn.booking.com": { "company": "Booking Holdings", "service": "Booking.com CDN", "category": "data_leak", "
|
|
138
|
-
"cdn.bootcdn.net": { "company": "BootCDN", "service": "BootCDN", "category": "data_leak", "
|
|
139
|
-
"cdn.boots.com": { "company": "Boots (Walgreens)", "service": "Boots CDN", "category": "data_leak", "
|
|
140
|
-
"cdn.branch.io": { "company": "Branch", "service": "Branch Deep Linking CDN", "category": "data_leak", "
|
|
141
|
-
"cdn.braze.eu": { "company": "Braze", "service": "Braze EU SDK CDN", "category": "data_leak", "
|
|
142
|
-
"cdn.brightcove.com": { "company": "Brightcove", "service": "Brightcove Video CDN", "category": "data_leak", "
|
|
143
|
-
"cdn.bugsnag.com": { "company": "Bugsnag (SmartBear)", "service": "Bugsnag Error Monitoring", "category": "data_leak", "
|
|
144
|
-
"cdn.builder.io": { "company": "Builder.io", "service": "Builder.io Visual CMS CDN", "category": "data_leak", "
|
|
145
|
-
"cdn.bumble.com": { "company": "Bumble", "service": "Bumble CDN", "category": "data_leak", "
|
|
146
|
-
"cdn.bundesregierung.de": { "company": "German Federal Government", "service": "Bundesregierung CDN", "category": "data_leak", "
|
|
147
|
-
"cdn.bunnycdn.com": { "company": "BunnyCDN", "service": "BunnyCDN", "category": "data_leak", "
|
|
148
|
-
"cdn.burgerking.com": { "company": "Burger King", "service": "Burger King CDN", "category": "data_leak", "
|
|
149
|
-
"cdn.buttercms.com": { "company": "ButterCMS", "service": "ButterCMS CDN", "category": "data_leak", "
|
|
150
|
-
"cdn.buymeacoffee.com": { "company": "Buy Me a Coffee", "service": "Buy Me a Coffee Widget", "category": "data_leak", "
|
|
151
|
-
"cdn.buymeacoffee.com/widget": { "company": "Buy Me a Coffee", "service": "Buy Me a Coffee Widget", "category": "data_leak", "
|
|
152
|
-
"cdn.byd.com": { "company": "BYD", "service": "BYD CDN", "category": "data_leak", "
|
|
153
|
-
"cdn.calendly.com/assets": { "company": "Calendly", "service": "Calendly Widget Assets", "category": "data_leak", "
|
|
154
|
-
"cdn.canva.com": { "company": "Canva", "service": "Canva Assets CDN", "category": "data_leak", "
|
|
155
|
-
"cdn.canva.com/static": { "company": "Canva", "service": "Canva Static Assets CDN", "category": "data_leak", "
|
|
156
|
-
"cdn.carrefour.com": { "company": "Carrefour", "service": "Carrefour CDN", "category": "data_leak", "
|
|
157
|
-
"cdn.cartier.com": { "company": "Richemont", "service": "Cartier CDN", "category": "data_leak", "
|
|
158
|
-
"cdn.chameleon.io": { "company": "Chameleon", "service": "Chameleon Product Tours CDN", "category": "data_leak", "
|
|
159
|
-
"cdn.chargebee.com": { "company": "Chargebee", "service": "Chargebee Checkout CDN", "category": "data_leak", "
|
|
160
|
-
"cdn.chargify.com": { "company": "Maxio (Chargify)", "service": "Chargify Billing CDN", "category": "data_leak", "
|
|
161
|
-
"cdn.chewy.com": { "company": "Chewy", "service": "Chewy CDN", "category": "data_leak", "
|
|
162
|
-
"cdn.chipotle.com": { "company": "Chipotle", "service": "Chipotle CDN", "category": "data_leak", "
|
|
163
|
-
"cdn.ckeditor.com": { "company": "CKSource", "service": "CKEditor CDN", "category": "data_leak", "
|
|
164
|
-
"cdn.cloudflare.com": { "company": "Cloudflare", "service": "Cloudflare CDN", "category": "data_leak", "
|
|
165
|
-
"cdn.coingecko.com": { "company": "CoinGecko", "service": "CoinGecko CDN Extended", "category": "data_leak", "
|
|
166
|
-
"cdn.coinmarketcap.com": { "company": "Binance/CoinMarketCap", "service": "CoinMarketCap CDN", "category": "data_leak", "
|
|
167
|
-
"cdn.columbia.com": { "company": "Columbia Sportswear", "service": "Columbia CDN", "category": "data_leak", "
|
|
168
|
-
"cdn.commento.io": { "company": "Commento", "service": "Commento Comments", "category": "data_leak", "
|
|
169
|
-
"cdn.commonsensemedia.org": { "company": "Common Sense Media", "service": "Common Sense Media CDN", "category": "data_leak", "
|
|
170
|
-
"cdn.compound.finance": { "company": "Compound Labs", "service": "Compound DeFi CDN", "category": "data_leak", "
|
|
171
|
-
"cdn.contentful.com": { "company": "Contentful", "service": "Contentful CDN", "category": "data_leak", "
|
|
172
|
-
"cdn.convertkit.com": { "company": "ConvertKit", "service": "ConvertKit Forms CDN", "category": "data_leak", "
|
|
173
|
-
"cdn.cookielaw.org": { "company": "OneTrust", "service": "OneTrust CMP CDN", "category": "data_leak", "
|
|
174
|
-
"cdn.coolblue.nl": { "company": "Coolblue", "service": "Coolblue CDN", "category": "data_leak", "
|
|
175
|
-
"cdn.costacoffee.com": { "company": "Costa Coffee (Coca-Cola)", "service": "Costa Coffee CDN", "category": "data_leak", "
|
|
176
|
-
"cdn.crazyegg.com": { "company": "Crazy Egg", "service": "Crazy Egg CDN", "category": "data_leak", "
|
|
177
|
-
"cdn.crisp.chat": { "company": "Crisp", "service": "Crisp Chat CDN", "category": "data_leak", "
|
|
178
|
-
"cdn.crypto.com": { "company": "Crypto.com", "service": "Crypto.com CDN", "category": "data_leak", "
|
|
179
|
-
"cdn.currys.co.uk": { "company": "Currys", "service": "Currys CDN", "category": "data_leak", "
|
|
180
|
-
"cdn.curve.fi": { "company": "Curve Finance", "service": "Curve DEX CDN", "category": "data_leak", "
|
|
181
|
-
"cdn.cvent.com": { "company": "Cvent", "service": "Cvent Event CDN", "category": "data_leak", "
|
|
182
|
-
"cdn.daily.co": { "company": "Daily", "service": "Daily.co Video CDN", "category": "data_leak", "
|
|
183
|
-
"cdn.dailymotion.com": { "company": "Dailymotion", "service": "Dailymotion Video CDN", "category": "data_leak", "
|
|
184
|
-
"cdn.datadog-agent.com": { "company": "Datadog", "service": "Datadog RUM Agent", "category": "data_leak", "
|
|
185
|
-
"cdn.datatables.net": { "company": "SpryMedia", "service": "DataTables CDN", "category": "data_leak", "
|
|
186
|
-
"cdn.datatables.net/plug-ins": { "company": "DataTables", "service": "DataTables Plugins CDN", "category": "data_leak", "
|
|
187
|
-
"cdn.decathlon.com": { "company": "Decathlon", "service": "Decathlon CDN", "category": "data_leak", "
|
|
188
|
-
"cdn.deezer.com": { "company": "Deezer", "service": "Deezer CDN", "category": "data_leak", "
|
|
189
|
-
"cdn.deliveroo.com": { "company": "Deliveroo", "service": "Deliveroo CDN", "category": "data_leak", "
|
|
190
|
-
"cdn.deviantart.net": { "company": "DeviantArt (Wix)", "service": "DeviantArt CDN", "category": "data_leak", "
|
|
191
|
-
"cdn.dior.com": { "company": "LVMH", "service": "Dior CDN", "category": "data_leak", "
|
|
192
|
-
"cdn.directus.io": { "company": "Directus", "service": "Directus CMS CDN", "category": "data_leak", "
|
|
193
|
-
"cdn.discord.com": { "company": "Discord", "service": "Discord Assets CDN", "category": "data_leak", "
|
|
194
|
-
"cdn.dixa.io": { "company": "Dixa", "service": "Dixa Messenger CDN", "category": "data_leak", "
|
|
195
|
-
"cdn.dm.de": { "company": "dm-drogerie markt", "service": "dm CDN", "category": "data_leak", "
|
|
196
|
-
"cdn.docker.com": { "company": "Docker", "service": "Docker Hub CDN", "category": "data_leak", "
|
|
197
|
-
"cdn.docmorris.de": { "company": "DocMorris", "service": "DocMorris CDN", "category": "data_leak", "
|
|
198
|
-
"cdn.dominos.com": { "company": "Domino's", "service": "Domino's CDN", "category": "data_leak", "
|
|
199
|
-
"cdn.dribbble.com": { "company": "Dribbble", "service": "Dribbble CDN", "category": "data_leak", "
|
|
200
|
-
"cdn.dropboxstatic.com": { "company": "Dropbox", "service": "Dropbox Preview Embed", "category": "data_leak", "
|
|
201
|
-
"cdn.dynatrace.com": { "company": "Dynatrace", "service": "Dynatrace RUM Agent", "category": "data_leak", "
|
|
202
|
-
"cdn.easyjet.com": { "company": "EasyJet", "service": "EasyJet CDN", "category": "data_leak", "
|
|
203
|
-
"cdn.ebay.com": { "company": "eBay", "service": "eBay Assets CDN", "category": "data_leak", "
|
|
204
|
-
"cdn.edeka.de": { "company": "Edeka", "service": "Edeka CDN", "category": "data_leak", "
|
|
205
|
-
"cdn.edf.fr": { "company": "EDF", "service": "EDF CDN", "category": "data_leak", "
|
|
206
|
-
"cdn.ee.co.uk": { "company": "EE (BT)", "service": "EE CDN", "category": "data_leak", "
|
|
207
|
-
"cdn.eharmony.com": { "company": "eHarmony (Spark Networks)", "service": "eHarmony CDN", "category": "data_leak", "
|
|
208
|
-
"cdn.embed.ly": { "company": "Embedly (Medium)", "service": "Embedly", "category": "data_leak", "
|
|
209
|
-
"cdn.embedly.com": { "company": "A Medium Corporation (Embedly)", "service": "Embedly CDN", "category": "data_leak", "
|
|
210
|
-
"cdn.eon.com": { "company": "E.ON", "service": "E.ON CDN", "category": "data_leak", "
|
|
211
|
-
"cdn.epicgames.com": { "company": "Epic Games", "service": "Epic Games CDN", "category": "data_leak", "
|
|
212
|
-
"cdn.equalweb.com": { "company": "EqualWeb", "service": "EqualWeb Accessibility", "category": "data_leak", "
|
|
213
|
-
"cdn.equalweb.com/widget": { "company": "EqualWeb", "service": "EqualWeb Widget Script", "category": "data_leak", "
|
|
214
|
-
"cdn.esselunga.it": { "company": "Esselunga", "service": "Esselunga CDN", "category": "data_leak", "
|
|
215
|
-
"cdn.etherscan.io": { "company": "Etherscan", "service": "Etherscan CDN", "category": "data_leak", "
|
|
216
|
-
"cdn.etoro.com": { "company": "eToro", "service": "eToro CDN", "category": "data_leak", "
|
|
217
|
-
"cdn.etsy.com": { "company": "Etsy", "service": "Etsy Assets CDN", "category": "data_leak", "
|
|
218
|
-
"cdn.europcar.com": { "company": "Europcar", "service": "Europcar CDN", "category": "data_leak", "
|
|
219
|
-
"cdn.eurowings.com": { "company": "Eurowings", "service": "Eurowings CDN", "category": "data_leak", "
|
|
220
|
-
"cdn.eventbrite.com": { "company": "Eventbrite", "service": "Eventbrite CDN", "category": "data_leak", "
|
|
221
|
-
"cdn.eventim.de": { "company": "CTS Eventim", "service": "Eventim CDN", "category": "data_leak", "
|
|
222
|
-
"cdn.expedia.com": { "company": "Expedia Group", "service": "Expedia CDN", "category": "data_leak", "
|
|
223
|
-
"cdn.feeld.co": { "company": "Feeld", "service": "Feeld CDN", "category": "data_leak", "
|
|
224
|
-
"cdn.ferrari.com": { "company": "Ferrari", "service": "Ferrari CDN", "category": "data_leak", "
|
|
225
|
-
"cdn.figma.com": { "company": "Figma", "service": "Figma Design CDN", "category": "data_leak", "
|
|
226
|
-
"cdn.finnair.com": { "company": "Finnair", "service": "Finnair CDN", "category": "data_leak", "
|
|
227
|
-
"cdn.firebase.com": { "company": "Google", "service": "Firebase Hosting CDN", "category": "data_leak", "
|
|
228
|
-
"cdn.fitbit.com": { "company": "Google/Fitbit", "service": "Fitbit CDN", "category": "data_leak", "
|
|
229
|
-
"cdn.flipkart.com": { "company": "Flipkart (Walmart)", "service": "Flipkart CDN", "category": "data_leak", "
|
|
230
|
-
"cdn.flowplayer.com": { "company": "Flowplayer", "service": "Flowplayer Video CDN", "category": "data_leak", "
|
|
231
|
-
"cdn.flypgs.com": { "company": "Pegasus Airlines", "service": "Pegasus CDN", "category": "data_leak", "
|
|
232
|
-
"cdn.fnac.com": { "company": "Fnac Darty", "service": "Fnac CDN", "category": "data_leak", "
|
|
233
|
-
"cdn.fontawesome.com": { "company": "Fonticons/Font Awesome", "service": "Font Awesome CDN", "category": "data_leak", "
|
|
234
|
-
"cdn.fontshare.com": { "company": "Indian Type Foundry", "service": "Fontshare CDN", "category": "data_leak", "
|
|
235
|
-
"cdn.fontsource.org": { "company": "Fontsource", "service": "Fontsource CDN", "category": "data_leak", "
|
|
236
|
-
"cdn.ford.com": { "company": "Ford Motor Company", "service": "Ford CDN", "category": "data_leak", "
|
|
237
|
-
"cdn.forms.hsforms.com": { "company": "HubSpot", "service": "HubSpot Forms CDN", "category": "data_leak", "
|
|
238
|
-
"cdn.freshchat.com": { "company": "Freshworks", "service": "Freshchat CDN", "category": "data_leak", "
|
|
239
|
-
"cdn.fressnapf.de": { "company": "Fressnapf", "service": "Fressnapf CDN", "category": "data_leak", "
|
|
240
|
-
"cdn.funda.nl": { "company": "Funda", "service": "Funda CDN", "category": "data_leak", "
|
|
241
|
-
"cdn.garmin.com": { "company": "Garmin", "service": "Garmin Connect CDN", "category": "data_leak", "
|
|
242
|
-
"cdn.generali.com": { "company": "Generali", "service": "Generali CDN", "category": "data_leak", "
|
|
243
|
-
"cdn.genesis.com": { "company": "Hyundai/Genesis", "service": "Genesis CDN", "category": "data_leak", "
|
|
244
|
-
"cdn.getir.com": { "company": "Getir", "service": "Getir CDN", "category": "data_leak", "
|
|
245
|
-
"cdn.gettyimages.com": { "company": "Getty Images", "service": "Getty Images CDN", "category": "data_leak", "
|
|
246
|
-
"cdn.getyourguide.com": { "company": "GetYourGuide", "service": "GetYourGuide CDN", "category": "data_leak", "
|
|
247
|
-
"cdn.ghost.io": { "company": "Ghost", "service": "Ghost CMS CDN", "category": "data_leak", "
|
|
248
|
-
"cdn.ghost.org": { "company": "Ghost", "service": "Ghost CDN", "category": "data_leak", "
|
|
249
|
-
"cdn.github.com": { "company": "GitHub (Microsoft)", "service": "GitHub CDN", "category": "data_leak", "
|
|
250
|
-
"cdn.gitlab.com": { "company": "GitLab", "service": "GitLab CDN", "category": "data_leak", "
|
|
251
|
-
"cdn.glovoapp.com": { "company": "Glovo", "service": "Glovo CDN", "category": "data_leak", "
|
|
252
|
-
"cdn.gopuff.com": { "company": "Gopuff", "service": "Gopuff CDN", "category": "data_leak", "
|
|
253
|
-
"cdn.grab.com": { "company": "Grab", "service": "Grab CDN", "category": "data_leak", "
|
|
254
|
-
"cdn.greenhouse.io": { "company": "Greenhouse", "service": "Greenhouse ATS CDN", "category": "data_leak", "
|
|
255
|
-
"cdn.grindr.com": { "company": "Grindr", "service": "Grindr CDN", "category": "data_leak", "
|
|
256
|
-
"cdn.gumroad.com": { "company": "Gumroad", "service": "Gumroad Widget CDN", "category": "data_leak", "
|
|
257
|
-
"cdn.happn.com": { "company": "Happn", "service": "Happn CDN", "category": "data_leak", "
|
|
258
|
-
"cdn.hashnode.com": { "company": "Hashnode", "service": "Hashnode CDN", "category": "data_leak", "
|
|
259
|
-
"cdn.headwayapp.co": { "company": "Headway", "service": "Headway Changelog CDN", "category": "data_leak", "
|
|
260
|
-
"cdn.heapanalytics.com": { "company": "Heap", "service": "Heap Analytics CDN", "category": "data_leak", "
|
|
261
|
-
"cdn.here.com": { "company": "HERE Technologies", "service": "HERE Maps", "category": "data_leak", "
|
|
262
|
-
"cdn.hertz.com": { "company": "Hertz", "service": "Hertz CDN", "category": "data_leak", "
|
|
263
|
-
"cdn.hilton.com": { "company": "Hilton", "service": "Hilton CDN", "category": "data_leak", "
|
|
264
|
-
"cdn.hinge.co": { "company": "Match Group/Hinge", "service": "Hinge CDN", "category": "data_leak", "
|
|
265
|
-
"cdn.hoka.com": { "company": "Deckers (Hoka)", "service": "Hoka CDN", "category": "data_leak", "
|
|
266
|
-
"cdn.honda.com": { "company": "Honda", "service": "Honda CDN", "category": "data_leak", "
|
|
267
|
-
"cdn.hornbach.com": { "company": "Hornbach", "service": "Hornbach CDN", "category": "data_leak", "
|
|
268
|
-
"cdn.hotels.com": { "company": "Expedia Group", "service": "Hotels.com CDN", "category": "data_leak", "
|
|
269
|
-
"cdn.hyatt.com": { "company": "Hyatt", "service": "Hyatt CDN", "category": "data_leak", "
|
|
270
|
-
"cdn.hygraph.com": { "company": "Hygraph", "service": "Hygraph CMS CDN", "category": "data_leak", "
|
|
271
|
-
"cdn.hyundai.com": { "company": "Hyundai", "service": "Hyundai CDN", "category": "data_leak", "
|
|
272
|
-
"cdn.iberia.com": { "company": "Iberia", "service": "Iberia CDN", "category": "data_leak", "
|
|
273
|
-
"cdn.icomoon.io": { "company": "IcoMoon", "service": "IcoMoon Icon CDN", "category": "data_leak", "
|
|
274
|
-
"cdn.idealista.com": { "company": "Idealista", "service": "Idealista CDN", "category": "data_leak", "
|
|
275
|
-
"cdn.ifood.com.br": { "company": "iFood", "service": "iFood CDN", "category": "data_leak", "
|
|
276
|
-
"cdn.iframe.ly": { "company": "Iframely", "service": "Iframely Embed Proxy", "category": "data_leak", "
|
|
277
|
-
"cdn.ikea.com": { "company": "IKEA (Ingka Group)", "service": "IKEA CDN", "category": "data_leak", "
|
|
278
|
-
"cdn.immobilienscout24.de": { "company": "ImmobilienScout24 (Scout24)", "service": "ImmobilienScout24 CDN", "category": "data_leak", "
|
|
279
|
-
"cdn.instacart.com": { "company": "Instacart", "service": "Instacart CDN", "category": "data_leak", "
|
|
280
|
-
"cdn.instatus.com": { "company": "Instatus", "service": "Instatus Status Page Widget", "category": "data_leak", "
|
|
281
|
-
"cdn.iubenda.com/cs": { "company": "Iubenda", "service": "Iubenda Cookie Solution", "category": "data_leak", "
|
|
282
|
-
"cdn.jsdelivr.net": { "company": "jsDelivr", "service": "jsDelivr Open Source CDN", "category": "data_leak", "
|
|
283
|
-
"cdn.jsdelivr.net/npm/alpinejs": { "company": "jsDelivr (Prospect One)", "service": "Alpine.js CDN", "category": "data_leak", "
|
|
284
|
-
"cdn.jsdelivr.net/npm/bootstrap": { "company": "jsDelivr (Prospect One)", "service": "Bootstrap CSS/JS CDN", "category": "data_leak", "
|
|
285
|
-
"cdn.jsdelivr.net/npm/vue": { "company": "jsDelivr (Prospect One)", "service": "Vue.js CDN", "category": "data_leak", "
|
|
286
|
-
"cdn.jumia.com": { "company": "Jumia", "service": "Jumia CDN", "category": "data_leak", "
|
|
287
|
-
"cdn.just-eat.com": { "company": "Just Eat Takeaway", "service": "Just Eat CDN", "category": "data_leak", "
|
|
288
|
-
"cdn.justeat.com": { "company": "Just Eat Takeaway", "service": "Just Eat CDN", "category": "data_leak", "
|
|
289
|
-
"cdn.jwplayer.com": { "company": "JW Player", "service": "JW Player Video CDN", "category": "data_leak", "
|
|
290
|
-
"cdn.katex.org": { "company": "KaTeX", "service": "KaTeX Math CDN", "category": "data_leak", "
|
|
291
|
-
"cdn.keycdn.com": { "company": "KeyCDN (proinity)", "service": "KeyCDN Swiss CDN", "category": "data_leak", "
|
|
292
|
-
"cdn.kfc.com": { "company": "Yum! Brands", "service": "KFC CDN", "category": "data_leak", "
|
|
293
|
-
"cdn.klook.com": { "company": "Klook", "service": "Klook CDN", "category": "data_leak", "
|
|
294
|
-
"cdn.knightlab.com": { "company": "Knight Lab", "service": "Knight Lab Timeline/StoryMap", "category": "data_leak", "
|
|
295
|
-
"cdn.ko-fi.com": { "company": "Ko-fi", "service": "Ko-fi Widget", "category": "data_leak", "
|
|
296
|
-
"cdn.kustomer.com": { "company": "Meta/Kustomer", "service": "Kustomer Chat CDN", "category": "data_leak", "
|
|
297
|
-
"cdn.kvk.nl": { "company": "KVK (Dutch Chamber of Commerce)", "service": "KVK CDN", "category": "data_leak", "
|
|
298
|
-
"cdn.lazada.com": { "company": "Lazada (Alibaba)", "service": "Lazada CDN", "category": "data_leak", "
|
|
299
|
-
"cdn.leclerc.fr": { "company": "E.Leclerc", "service": "E.Leclerc CDN", "category": "data_leak", "
|
|
300
|
-
"cdn.ledger.com": { "company": "Ledger", "service": "Ledger CDN", "category": "data_leak", "
|
|
301
|
-
"cdn.lemonade.com": { "company": "Lemonade", "service": "Lemonade CDN", "category": "data_leak", "
|
|
302
|
-
"cdn.lemonsqueezy.com": { "company": "Lemon Squeezy", "service": "Lemon Squeezy Widget", "category": "data_leak", "
|
|
303
|
-
"cdn.leroymerlin.fr": { "company": "Leroy Merlin (Adeo)", "service": "Leroy Merlin CDN", "category": "data_leak", "
|
|
304
|
-
"cdn.lever.co": { "company": "Lever", "service": "Lever ATS CDN", "category": "data_leak", "
|
|
305
|
-
"cdn.lidl.com": { "company": "Lidl (Schwarz Group)", "service": "Lidl CDN", "category": "data_leak", "
|
|
306
|
-
"cdn.linear.app": { "company": "Linear", "service": "Linear CDN", "category": "data_leak", "
|
|
307
|
-
"cdn.linearicons.com": { "company": "Perxis", "service": "Linearicons Icon Font CDN", "category": "data_leak", "
|
|
308
|
-
"cdn.livekit.io": { "company": "LiveKit", "service": "LiveKit Video CDN", "category": "data_leak", "
|
|
309
|
-
"cdn.loom.com": { "company": "Atlassian/Loom", "service": "Loom CDN", "category": "data_leak", "
|
|
310
|
-
"cdn.loom.com/assets": { "company": "Atlassian/Loom", "service": "Loom Video Assets", "category": "data_leak", "
|
|
311
|
-
"cdn.lotame.com/tag.js": { "company": "Lotame", "service": "Lotame DMP Tag", "category": "data_leak", "
|
|
312
|
-
"cdn.lr-in-prod.com": { "company": "LogRocket", "service": "LogRocket CDN", "category": "data_leak", "
|
|
313
|
-
"cdn.lucidmotors.com": { "company": "Lucid Motors", "service": "Lucid CDN", "category": "data_leak", "
|
|
314
|
-
"cdn.magento.com": { "company": "Adobe/Magento", "service": "Magento CDN", "category": "data_leak", "
|
|
315
|
-
"cdn.maptiler.com": { "company": "MapTiler", "service": "MapTiler Maps", "category": "data_leak", "
|
|
316
|
-
"cdn.marriott.com": { "company": "Marriott International", "service": "Marriott CDN", "category": "data_leak", "
|
|
317
|
-
"cdn.materialdesignicons.com": { "company": "Pictogrammers", "service": "Material Design Icons CDN", "category": "data_leak", "
|
|
318
|
-
"cdn.mathjax.org": { "company": "MathJax", "service": "MathJax CDN", "category": "data_leak", "
|
|
319
|
-
"cdn.matterport.com": { "company": "Matterport", "service": "Matterport 3D Tour CDN", "category": "data_leak", "
|
|
320
|
-
"cdn.matterport.com/models": { "company": "Matterport", "service": "Matterport 3D Model CDN", "category": "data_leak", "
|
|
321
|
-
"cdn.mcdonalds.com": { "company": "McDonald's", "service": "McDonald's CDN", "category": "data_leak", "
|
|
322
|
-
"cdn.mediamarkt.de": { "company": "MediaMarktSaturn", "service": "MediaMarkt CDN", "category": "data_leak", "
|
|
323
|
-
"cdn.medium.com": { "company": "Medium", "service": "Medium CDN", "category": "data_leak", "
|
|
324
|
-
"cdn.meetic.fr": { "company": "Match Group/Meetic", "service": "Meetic CDN", "category": "data_leak", "
|
|
325
|
-
"cdn.meetup.com": { "company": "Meetup (Bending Spoons)", "service": "Meetup CDN", "category": "data_leak", "
|
|
326
|
-
"cdn.mercadolibre.com": { "company": "MercadoLibre", "service": "MercadoLibre CDN", "category": "data_leak", "
|
|
327
|
-
"cdn.mercadona.es": { "company": "Mercadona", "service": "Mercadona CDN", "category": "data_leak", "
|
|
328
|
-
"cdn.mercedes-benz.com": { "company": "Mercedes-Benz", "service": "Mercedes-Benz CDN", "category": "data_leak", "
|
|
329
|
-
"cdn.metamask.io": { "company": "Consensys/MetaMask", "service": "MetaMask CDN", "category": "data_leak", "
|
|
330
|
-
"cdn.midjourney.com": { "company": "Midjourney", "service": "Midjourney AI", "category": "data_leak", "
|
|
331
|
-
"cdn.monzo.com": { "company": "Monzo", "service": "Monzo CDN", "category": "data_leak", "
|
|
332
|
-
"cdn.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow CDN", "category": "data_leak", "
|
|
333
|
-
"cdn.mux.com": { "company": "Mux", "service": "Mux Video CDN", "category": "data_leak", "
|
|
334
|
-
"cdn.mxpnl.com": { "company": "Mixpanel", "service": "Mixpanel CDN", "category": "data_leak", "
|
|
335
|
-
"cdn.n26.com": { "company": "N26", "service": "N26 CDN", "category": "data_leak", "
|
|
336
|
-
"cdn.nandos.com": { "company": "Nando's", "service": "Nando's CDN", "category": "data_leak", "
|
|
337
|
-
"cdn.netlify.com": { "company": "Netlify", "service": "Netlify Assets CDN", "category": "data_leak", "
|
|
338
|
-
"cdn.nextdoor.com": { "company": "Nextdoor", "service": "Nextdoor CDN", "category": "data_leak", "
|
|
339
|
-
"cdn.nhhotels.com": { "company": "NH Hotels (Minor International)", "service": "NH Hotels CDN", "category": "data_leak", "
|
|
340
|
-
"cdn.nike.com": { "company": "Nike", "service": "Nike CDN", "category": "data_leak", "
|
|
341
|
-
"cdn.nio.com": { "company": "NIO", "service": "NIO CDN", "category": "data_leak", "
|
|
342
|
-
"cdn.nissan.com": { "company": "Nissan", "service": "Nissan CDN", "category": "data_leak", "
|
|
343
|
-
"cdn.norwegian.com": { "company": "Norwegian Air Shuttle", "service": "Norwegian CDN", "category": "data_leak", "
|
|
344
|
-
"cdn.notion.so": { "company": "Notion", "service": "Notion CDN", "category": "data_leak", "
|
|
345
|
-
"cdn.npmjs.com": { "company": "GitHub (Microsoft)", "service": "npm CDN", "category": "data_leak", "
|
|
346
|
-
"cdn.nr-data.net": { "company": "New Relic", "service": "New Relic Browser Agent", "category": "data_leak", "
|
|
347
|
-
"cdn.o2.co.uk": { "company": "O2 (Telefonica UK)", "service": "O2 CDN", "category": "data_leak", "
|
|
348
|
-
"cdn.oai.azure.com": { "company": "Microsoft", "service": "Azure OpenAI CDN", "category": "data_leak", "
|
|
349
|
-
"cdn.ocado.com": { "company": "Ocado", "service": "Ocado CDN", "category": "data_leak", "
|
|
350
|
-
"cdn.okcupid.com": { "company": "Match Group/OkCupid", "service": "OkCupid CDN", "category": "data_leak", "
|
|
351
|
-
"cdn.olark.com": { "company": "Olark", "service": "Olark Chat CDN", "category": "data_leak", "
|
|
352
|
-
"cdn.on-running.com": { "company": "On", "service": "On Running CDN", "category": "data_leak", "
|
|
353
|
-
"cdn.onesignal.com": { "company": "OneSignal", "service": "OneSignal Push CDN", "category": "data_leak", "
|
|
354
|
-
"cdn.onetrust.com": { "company": "OneTrust", "service": "OneTrust Cookie Banner CDN", "category": "data_leak", "
|
|
355
|
-
"cdn.openai.com": { "company": "OpenAI", "service": "OpenAI CDN", "category": "data_leak", "
|
|
356
|
-
"cdn.optimizely.com": { "company": "Optimizely", "service": "Optimizely CDN", "category": "data_leak", "
|
|
357
|
-
"cdn.paddle.com": { "company": "Paddle", "service": "Paddle Checkout CDN", "category": "data_leak", "
|
|
358
|
-
"cdn.pandora.net": { "company": "Pandora Jewelry", "service": "Pandora CDN", "category": "data_leak", "
|
|
359
|
-
"cdn.parship.com": { "company": "Parship Group", "service": "Parship CDN", "category": "data_leak", "
|
|
360
|
-
"cdn.patagonia.com": { "company": "Patagonia", "service": "Patagonia CDN", "category": "data_leak", "
|
|
361
|
-
"cdn.patreon.com": { "company": "Patreon", "service": "Patreon Widget CDN", "category": "data_leak", "
|
|
362
|
-
"cdn.peloton.com": { "company": "Peloton", "service": "Peloton CDN", "category": "data_leak", "
|
|
363
|
-
"cdn.pendo.io": { "company": "Pendo", "service": "Pendo Analytics CDN", "category": "data_leak", "
|
|
364
|
-
"cdn.petsathome.com": { "company": "Pets at Home", "service": "Pets at Home CDN", "category": "data_leak", "
|
|
365
|
-
"cdn.pexels.com": { "company": "Canva/Pexels", "service": "Pexels Image CDN", "category": "data_leak", "
|
|
366
|
-
"cdn.phantom.app": { "company": "Phantom", "service": "Phantom Wallet CDN", "category": "data_leak", "
|
|
367
|
-
"cdn.pixabay.com": { "company": "Canva/Pixabay", "service": "Pixabay Image CDN", "category": "data_leak", "
|
|
368
|
-
"cdn.plot.ly": { "company": "Plotly", "service": "Plotly Chart CDN", "category": "data_leak", "
|
|
369
|
-
"cdn.plyr.io": { "company": "Plyr", "service": "Plyr Video Player CDN", "category": "data_leak", "
|
|
370
|
-
"cdn.pole-emploi.fr": { "company": "France Travail (Pôle Emploi)", "service": "France Travail CDN", "category": "data_leak", "
|
|
371
|
-
"cdn.polestar.com": { "company": "Polestar (Geely/Volvo)", "service": "Polestar CDN", "category": "data_leak", "
|
|
372
|
-
"cdn.polyfill.io": { "company": "Funnull (polyfill.io)", "service": "Polyfill.io CDN", "category": "data_leak", "
|
|
373
|
-
"cdn.porsche.com": { "company": "Volkswagen Group/Porsche", "service": "Porsche CDN", "category": "data_leak", "
|
|
374
|
-
"cdn.prestashop.com": { "company": "PrestaShop", "service": "PrestaShop CDN", "category": "data_leak", "
|
|
375
|
-
"cdn.prismic.io": { "company": "Prismic", "service": "Prismic CMS CDN", "category": "data_leak", "
|
|
376
|
-
"cdn.producthunt.com": { "company": "Product Hunt", "service": "Product Hunt CDN", "category": "data_leak", "
|
|
377
|
-
"cdn.quilljs.com": { "company": "Quill", "service": "Quill Editor CDN", "category": "data_leak", "
|
|
378
|
-
"cdn.quora.com": { "company": "Quora", "service": "Quora CDN", "category": "data_leak", "
|
|
379
|
-
"cdn.radissonhotels.com": { "company": "Radisson Hotel Group", "service": "Radisson CDN", "category": "data_leak", "
|
|
380
|
-
"cdn.rappi.com": { "company": "Rappi", "service": "Rappi CDN", "category": "data_leak", "
|
|
381
|
-
"cdn.recurly.com": { "company": "Recurly", "service": "Recurly Checkout CDN", "category": "data_leak", "
|
|
382
|
-
"cdn.reddit.com": { "company": "Reddit", "service": "Reddit Assets CDN", "category": "data_leak", "
|
|
383
|
-
"cdn.renault.com": { "company": "Renault Group", "service": "Renault CDN", "category": "data_leak", "
|
|
384
|
-
"cdn.render.com": { "company": "Render", "service": "Render CDN", "category": "data_leak", "
|
|
385
|
-
"cdn.revolut.com": { "company": "Revolut", "service": "Revolut CDN", "category": "data_leak", "
|
|
386
|
-
"cdn.rewe.de": { "company": "REWE", "service": "REWE CDN", "category": "data_leak", "
|
|
387
|
-
"cdn.rightmove.co.uk": { "company": "Rightmove", "service": "Rightmove CDN", "category": "data_leak", "
|
|
388
|
-
"cdn.rivian.com": { "company": "Rivian", "service": "Rivian CDN", "category": "data_leak", "
|
|
389
|
-
"cdn.robinhood.com": { "company": "Robinhood", "service": "Robinhood CDN", "category": "data_leak", "
|
|
390
|
-
"cdn.rollbar.com": { "company": "Rollbar", "service": "Rollbar Error Tracking", "category": "data_leak", "
|
|
391
|
-
"cdn.rossmann.de": { "company": "Rossmann", "service": "Rossmann CDN", "category": "data_leak", "
|
|
392
|
-
"cdn.rudderlabs.com": { "company": "RudderStack", "service": "RudderStack CDP CDN", "category": "data_leak", "
|
|
393
|
-
"cdn.ryanair.com": { "company": "Ryanair", "service": "Ryanair CDN", "category": "data_leak", "
|
|
394
|
-
"cdn.sainsburys.co.uk": { "company": "Sainsbury's", "service": "Sainsbury's CDN", "category": "data_leak", "
|
|
395
|
-
"cdn.salomon.com": { "company": "Amer Sports", "service": "Salomon CDN", "category": "data_leak", "
|
|
396
|
-
"cdn.sanity.io": { "company": "Sanity", "service": "Sanity CMS CDN", "category": "data_leak", "
|
|
397
|
-
"cdn.segment.com": { "company": "Twilio (Segment)", "service": "Segment CDP CDN", "category": "data_leak", "
|
|
398
|
-
"cdn.segment.io": { "company": "Twilio", "service": "Segment Analytics CDN", "category": "data_leak", "
|
|
399
|
-
"cdn.seloger.com": { "company": "SeLoger (Aviv/Axel Springer)", "service": "SeLoger CDN", "category": "data_leak", "
|
|
400
|
-
"cdn.sentry.io": { "company": "Sentry", "service": "Sentry Error Tracking CDN", "category": "data_leak", "
|
|
401
|
-
"cdn.shein.com": { "company": "Shein", "service": "Shein CDN", "category": "data_leak", "
|
|
402
|
-
"cdn.shopee.com": { "company": "Shopee (Sea Group)", "service": "Shopee CDN", "category": "data_leak", "
|
|
403
|
-
"cdn.shopify.com": { "company": "Shopify", "service": "Shopify CDN", "category": "data_leak", "
|
|
404
|
-
"cdn.shopifycloud.com": { "company": "Shopify", "service": "Shopify Cloud CDN", "category": "data_leak", "
|
|
405
|
-
"cdn.shutterstock.com": { "company": "Shutterstock", "service": "Shutterstock CDN", "category": "data_leak", "
|
|
406
|
-
"cdn.sixt.com": { "company": "Sixt", "service": "Sixt CDN", "category": "data_leak", "
|
|
407
|
-
"cdn.sketch.com": { "company": "Sketch", "service": "Sketch Cloud CDN", "category": "data_leak", "
|
|
408
|
-
"cdn.skypack.dev": { "company": "Skypack (Snowpack)", "service": "Skypack CDN", "category": "data_leak", "
|
|
409
|
-
"cdn.socket.io": { "company": "Socket.IO", "service": "Socket.IO CDN", "category": "data_leak", "
|
|
410
|
-
"cdn.sofi.com": { "company": "SoFi", "service": "SoFi CDN", "category": "data_leak", "
|
|
411
|
-
"cdn.soundcloud.com": { "company": "SoundCloud", "service": "SoundCloud CDN", "category": "data_leak", "
|
|
412
|
-
"cdn.speedcurve.com": { "company": "SpeedCurve", "service": "SpeedCurve LUX RUM", "category": "data_leak", "
|
|
413
|
-
"cdn.spotify.com": { "company": "Spotify", "service": "Spotify CDN Extended", "category": "data_leak", "
|
|
414
|
-
"cdn.squarespace.com": { "company": "Squarespace", "service": "Squarespace CDN", "category": "data_leak", "
|
|
415
|
-
"cdn.sstatic.net": { "company": "Stack Overflow (Prosus)", "service": "Stack Exchange CDN", "category": "data_leak", "
|
|
416
|
-
"cdn.stackoverflow.com": { "company": "Stack Overflow (Prosus)", "service": "Stack Overflow CDN", "category": "data_leak", "
|
|
417
|
-
"cdn.starbucks.com": { "company": "Starbucks", "service": "Starbucks CDN", "category": "data_leak", "
|
|
418
|
-
"cdn.statuspage.io": { "company": "Atlassian", "service": "Statuspage Widget", "category": "data_leak", "
|
|
419
|
-
"cdn.steampowered.com": { "company": "Valve", "service": "Steam CDN", "category": "data_leak", "
|
|
420
|
-
"cdn.storeimages.cdn-apple.com": { "company": "Apple", "service": "Apple Store Images CDN", "category": "data_leak", "
|
|
421
|
-
"cdn.storyblok.com": { "company": "Storyblok", "service": "Storyblok CMS CDN", "category": "data_leak", "
|
|
422
|
-
"cdn.strapi.io": { "company": "Strapi", "service": "Strapi Cloud CDN", "category": "data_leak", "
|
|
423
|
-
"cdn.stubhub.com": { "company": "StubHub (viagogo)", "service": "StubHub CDN", "category": "data_leak", "
|
|
424
|
-
"cdn.subway.com": { "company": "Subway", "service": "Subway CDN", "category": "data_leak", "
|
|
425
|
-
"cdn.supabase.co": { "company": "Supabase", "service": "Supabase CDN", "category": "data_leak", "
|
|
426
|
-
"cdn.sushi.com": { "company": "Sushi", "service": "SushiSwap CDN", "category": "data_leak", "
|
|
427
|
-
"cdn.swarovski.com": { "company": "Swarovski", "service": "Swarovski CDN", "category": "data_leak", "
|
|
428
|
-
"cdn.swiggy.com": { "company": "Swiggy", "service": "Swiggy CDN", "category": "data_leak", "
|
|
429
|
-
"cdn.swiss.com": { "company": "Swiss International Air Lines", "service": "SWISS CDN", "category": "data_leak", "
|
|
430
|
-
"cdn.syndication.twimg.com": { "company": "X Corp", "service": "X/Twitter Embed CDN", "category": "data_leak", "
|
|
431
|
-
"cdn.tailwindcss.com": { "company": "Tailwind Labs", "service": "Tailwind CSS CDN", "category": "data_leak", "
|
|
432
|
-
"cdn.tawk.to": { "company": "Tawk.to", "service": "Tawk.to Chat CDN", "category": "data_leak", "
|
|
433
|
-
"cdn.telenor.no": { "company": "Telenor", "service": "Telenor CDN", "category": "data_leak", "
|
|
434
|
-
"cdn.telia.se": { "company": "Telia", "service": "Telia CDN", "category": "data_leak", "
|
|
435
|
-
"cdn.temu.com": { "company": "Temu (PDD Holdings)", "service": "Temu CDN", "category": "data_leak", "
|
|
436
|
-
"cdn.tesco.com": { "company": "Tesco", "service": "Tesco CDN", "category": "data_leak", "
|
|
437
|
-
"cdn.tesla.com": { "company": "Tesla", "service": "Tesla CDN", "category": "data_leak", "
|
|
438
|
-
"cdn.thenorthface.com": { "company": "VF Corporation", "service": "The North Face CDN", "category": "data_leak", "
|
|
439
|
-
"cdn.three.co.uk": { "company": "Three UK", "service": "Three CDN", "category": "data_leak", "
|
|
440
|
-
"cdn.ticketmaster.com": { "company": "Ticketmaster (Live Nation)", "service": "Ticketmaster CDN", "category": "data_leak", "
|
|
441
|
-
"cdn.tiffany.com": { "company": "LVMH (Tiffany)", "service": "Tiffany CDN", "category": "data_leak", "
|
|
442
|
-
"cdn.tinder.com": { "company": "Match Group", "service": "Tinder CDN", "category": "data_leak", "
|
|
443
|
-
"cdn.tiny.cloud": { "company": "Tiny (TinyMCE)", "service": "TinyMCE Cloud", "category": "data_leak", "
|
|
444
|
-
"cdn.tipico.de": { "company": "Tipico", "service": "Tipico CDN", "category": "data_leak", "
|
|
445
|
-
"cdn.tiqets.com": { "company": "Tiqets", "service": "Tiqets CDN", "category": "data_leak", "
|
|
446
|
-
"cdn.tokopedia.com": { "company": "Tokopedia (GoTo)", "service": "Tokopedia CDN", "category": "data_leak", "
|
|
447
|
-
"cdn.toyota.com": { "company": "Toyota", "service": "Toyota CDN", "category": "data_leak", "
|
|
448
|
-
"cdn.transavia.com": { "company": "Transavia", "service": "Transavia CDN", "category": "data_leak", "
|
|
449
|
-
"cdn.trezor.io": { "company": "SatoshiLabs/Trezor", "service": "Trezor CDN", "category": "data_leak", "
|
|
450
|
-
"cdn.trip.com": { "company": "Trip.com Group", "service": "Trip.com CDN", "category": "data_leak", "
|
|
451
|
-
"cdn.tripadvisor.com": { "company": "TripAdvisor", "service": "TripAdvisor CDN", "category": "data_leak", "
|
|
452
|
-
"cdn.trivago.com": { "company": "Trivago", "service": "Trivago CDN", "category": "data_leak", "
|
|
453
|
-
"cdn.trustpilot.com": { "company": "Trustpilot", "service": "Trustpilot CDN", "category": "data_leak", "
|
|
454
|
-
"cdn.trustpilot.net": { "company": "Trustpilot", "service": "Trustpilot CDN", "category": "data_leak", "
|
|
455
|
-
"cdn.tumblr.com": { "company": "Automattic/Tumblr", "service": "Tumblr CDN", "category": "data_leak", "
|
|
456
|
-
"cdn.typeform.com": { "company": "Typeform", "service": "Typeform Embed", "category": "data_leak", "
|
|
457
|
-
"cdn.uniqlo.com": { "company": "Fast Retailing", "service": "Uniqlo CDN", "category": "data_leak", "
|
|
458
|
-
"cdn.usercentrics.eu/latest": { "company": "Usercentrics", "service": "Usercentrics Banner CDN", "category": "data_leak", "
|
|
459
|
-
"cdn.userpilot.io/sdk": { "company": "Userpilot", "service": "Userpilot SDK CDN", "category": "data_leak", "
|
|
460
|
-
"cdn.userway.org": { "company": "UserWay", "service": "UserWay Accessibility Widget", "category": "data_leak", "
|
|
461
|
-
"cdn.vattenfall.com": { "company": "Vattenfall", "service": "Vattenfall CDN", "category": "data_leak", "
|
|
462
|
-
"cdn.viator.com": { "company": "Tripadvisor/Viator", "service": "Viator CDN", "category": "data_leak", "
|
|
463
|
-
"cdn.vidstack.io": { "company": "Vidstack", "service": "Vidstack Player CDN", "category": "data_leak", "
|
|
464
|
-
"cdn.vidyard.com": { "company": "Vidyard", "service": "Vidyard Video CDN", "category": "data_leak", "
|
|
465
|
-
"cdn.vidyard.com/embed": { "company": "Vidyard", "service": "Vidyard Embed CDN", "category": "data_leak", "
|
|
466
|
-
"cdn.vodafone.com": { "company": "Vodafone", "service": "Vodafone CDN", "category": "data_leak", "
|
|
467
|
-
"cdn.volkswagen.com": { "company": "Volkswagen Group", "service": "VW Group CDN", "category": "data_leak", "
|
|
468
|
-
"cdn.volvo.com": { "company": "Volvo Cars (Geely)", "service": "Volvo CDN", "category": "data_leak", "
|
|
469
|
-
"cdn.vrbo.com": { "company": "Expedia Group/Vrbo", "service": "Vrbo CDN", "category": "data_leak", "
|
|
470
|
-
"cdn.vueling.com": { "company": "Vueling", "service": "Vueling CDN", "category": "data_leak", "
|
|
471
|
-
"cdn.wagamama.com": { "company": "The Restaurant Group/Wagamama", "service": "Wagamama CDN", "category": "data_leak", "
|
|
472
|
-
"cdn.waitrose.com": { "company": "Waitrose (John Lewis)", "service": "Waitrose CDN", "category": "data_leak", "
|
|
473
|
-
"cdn.walkme.com": { "company": "WalkMe", "service": "WalkMe DAP CDN", "category": "data_leak", "
|
|
474
|
-
"cdn.wayfair.com": { "company": "Wayfair", "service": "Wayfair CDN", "category": "data_leak", "
|
|
475
|
-
"cdn.webflow.com": { "company": "Webflow", "service": "Webflow CDN", "category": "data_leak", "
|
|
476
|
-
"cdn.whereby.com": { "company": "Whereby", "service": "Whereby Video CDN", "category": "data_leak", "
|
|
477
|
-
"cdn.whova.com": { "company": "Whova", "service": "Whova Event CDN", "category": "data_leak", "
|
|
478
|
-
"cdn.wise.com": { "company": "Wise", "service": "Wise CDN", "category": "data_leak", "
|
|
479
|
-
"cdn.wistia.com": { "company": "Wistia", "service": "Wistia Video CDN", "category": "data_leak", "
|
|
480
|
-
"cdn.wix.com": { "company": "Wix", "service": "Wix CDN", "category": "data_leak", "
|
|
481
|
-
"cdn.wix.com/editor-model": { "company": "Wix", "service": "Wix Editor Model CDN", "category": "data_leak", "
|
|
482
|
-
"cdn.wizzair.com": { "company": "Wizz Air", "service": "Wizz Air CDN", "category": "data_leak", "
|
|
483
|
-
"cdn.wolt.com": { "company": "Wolt (DoorDash)", "service": "Wolt CDN", "category": "data_leak", "
|
|
484
|
-
"cdn.woocommerce.com": { "company": "Automattic", "service": "WooCommerce CDN", "category": "data_leak", "
|
|
485
|
-
"cdn.workable.com": { "company": "Workable", "service": "Workable ATS CDN", "category": "data_leak", "
|
|
486
|
-
"cdn.wyndhamhotels.com": { "company": "Wyndham Hotels", "service": "Wyndham CDN", "category": "data_leak", "
|
|
487
|
-
"cdn.yelp.com": { "company": "Yelp", "service": "Yelp CDN", "category": "data_leak", "
|
|
488
|
-
"cdn.zomato.com": { "company": "Zomato", "service": "Zomato CDN", "category": "data_leak", "
|
|
489
|
-
"cdn.zoopla.co.uk": { "company": "Zoopla", "service": "Zoopla CDN", "category": "data_leak", "
|
|
490
|
-
"cdn.zooplus.com": { "company": "Zooplus", "service": "Zooplus CDN", "category": "data_leak", "
|
|
491
|
-
"cdn2.shopify.com": { "company": "Shopify", "service": "Shopify CDN2", "category": "data_leak", "
|
|
492
|
-
"cdnjs.cloudflare.com": { "company": "Cloudflare", "service": "cdnjs CDN", "category": "data_leak", "
|
|
493
|
-
"cdnjs.cloudflare.com/ajax/libs/Chart.js": { "company": "Cloudflare", "service": "Chart.js CDN", "category": "data_leak", "
|
|
494
|
-
"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2": { "company": "Cloudflare", "service": "Owl Carousel CDN", "category": "data_leak", "
|
|
495
|
-
"cdnjs.cloudflare.com/ajax/libs/ScrollMagic": { "company": "Cloudflare", "service": "ScrollMagic CDN", "category": "data_leak", "
|
|
496
|
-
"cdnjs.cloudflare.com/ajax/libs/Swiper": { "company": "Cloudflare", "service": "Swiper CDN", "category": "data_leak", "
|
|
497
|
-
"cdnjs.cloudflare.com/ajax/libs/animejs": { "company": "Cloudflare", "service": "Anime.js CDN", "category": "data_leak", "
|
|
498
|
-
"cdnjs.cloudflare.com/ajax/libs/axios": { "company": "Cloudflare", "service": "Axios CDN", "category": "data_leak", "
|
|
499
|
-
"cdnjs.cloudflare.com/ajax/libs/d3": { "company": "Cloudflare", "service": "D3.js CDN", "category": "data_leak", "
|
|
500
|
-
"cdnjs.cloudflare.com/ajax/libs/gsap": { "company": "Cloudflare", "service": "GSAP Animation CDN", "category": "data_leak", "
|
|
501
|
-
"cdnjs.cloudflare.com/ajax/libs/highlight.js": { "company": "Cloudflare", "service": "Highlight.js CDN", "category": "data_leak", "
|
|
502
|
-
"cdnjs.cloudflare.com/ajax/libs/lodash.js": { "company": "Cloudflare", "service": "Lodash CDN", "category": "data_leak", "
|
|
503
|
-
"cdnjs.cloudflare.com/ajax/libs/moment.js": { "company": "Cloudflare", "service": "Moment.js CDN", "category": "data_leak", "
|
|
504
|
-
"cdnjs.cloudflare.com/ajax/libs/prism": { "company": "Cloudflare", "service": "Prism.js Syntax Highlighter CDN", "category": "data_leak", "
|
|
505
|
-
"cdnjs.cloudflare.com/ajax/libs/react": { "company": "Cloudflare", "service": "React CDN (cdnjs)", "category": "data_leak", "
|
|
506
|
-
"cdnjs.cloudflare.com/ajax/libs/slick-carousel": { "company": "Cloudflare", "service": "Slick Carousel CDN", "category": "data_leak", "
|
|
507
|
-
"cdnjs.cloudflare.com/ajax/libs/three.js": { "company": "Cloudflare", "service": "Three.js CDN", "category": "data_leak", "
|
|
508
|
-
"chrome.google.com/webstore": { "company": "Google", "service": "Chrome Web Store", "category": "data_leak", "
|
|
509
|
-
"clave.gob.es": { "company": "Spanish Government", "service": "Cl@ve eID (Spain)", "category": "data_leak", "
|
|
510
|
-
"cloudfront.net": { "company": "Amazon", "service": "AWS CloudFront", "category": "data_leak", "
|
|
511
|
-
"cloudproxy.sucuri.net": { "company": "GoDaddy (Sucuri)", "service": "Sucuri WAF CloudProxy", "category": "data_leak", "
|
|
512
|
-
"code.jquery.com": { "company": "OpenJS Foundation", "service": "jQuery CDN", "category": "data_leak", "
|
|
513
|
-
"compound.finance": { "company": "Compound Labs", "service": "Compound DeFi", "category": "data_leak", "
|
|
514
|
-
"compute.fastly.com": { "company": "Fastly", "service": "Fastly Compute", "category": "data_leak", "
|
|
515
|
-
"connect.facebook.net": { "company": "Meta", "service": "Facebook SDK/Pixel", "category": "data_leak", "
|
|
516
|
-
"connect.facebook.net/en_US/sdk.js": { "company": "Meta", "service": "Facebook SDK (Embed)", "category": "data_leak", "
|
|
517
|
-
"connect.psdb.cloud": { "company": "PlanetScale", "service": "PlanetScale Database", "category": "data_leak", "
|
|
518
|
-
"copilot.microsoft.com": { "company": "Microsoft", "service": "Microsoft Copilot", "category": "data_leak", "
|
|
519
|
-
"count.myfonts.net": { "company": "Monotype", "service": "MyFonts Page View Counter", "category": "data_leak", "
|
|
520
|
-
"crates.io": { "company": "Rust Foundation", "service": "crates.io Registry", "category": "data_leak", "
|
|
521
|
-
"customer-*.cloudflarestream.com": { "company": "Cloudflare", "service": "Cloudflare Stream CDN", "category": "data_leak", "
|
|
522
|
-
"d1bxh8uas1mnw7.cloudfront.net": { "company": "Altmetric", "service": "Altmetric Badge CDN", "category": "data_leak", "
|
|
523
|
-
"d2wy8f7a9ursnm.cloudfront.net": { "company": "Amazon CloudFront", "service": "CloudFront CDN", "category": "data_leak", "
|
|
524
|
-
"defillama.com": { "company": "DefiLlama", "service": "DefiLlama Analytics", "category": "data_leak", "
|
|
525
|
-
"deno.dev": { "company": "Deno", "service": "Deno Deploy", "category": "data_leak", "
|
|
526
|
-
"digid.nl": { "company": "Logius (Netherlands)", "service": "Dutch DigiD", "category": "data_leak", "
|
|
527
|
-
"digitaloceanspaces.com": { "company": "DigitalOcean", "service": "DigitalOcean Spaces", "category": "data_leak", "
|
|
528
|
-
"dl.dropboxusercontent.com": { "company": "Dropbox", "service": "Dropbox Content Viewer", "category": "data_leak", "
|
|
529
|
-
"docs.google.com": { "company": "Google", "service": "Google Docs Embed", "category": "data_leak", "
|
|
530
|
-
"drive.google.com": { "company": "Google", "service": "Google Drive Embed", "category": "data_leak", "
|
|
531
|
-
"ecologi.com": { "company": "Ecologi", "service": "Ecologi Climate Widget", "category": "data_leak", "
|
|
532
|
-
"edge-config.vercel.com": { "company": "Vercel", "service": "Vercel Edge Config", "category": "data_leak", "
|
|
533
|
-
"edge.netlify.com": { "company": "Netlify", "service": "Netlify Edge", "category": "data_leak", "
|
|
534
|
-
"edgekey.net": { "company": "Akamai", "service": "Akamai Edge Key CDN", "category": "data_leak", "
|
|
535
|
-
"eidas.europa.eu": { "company": "European Commission", "service": "eIDAS Node", "category": "data_leak", "
|
|
536
|
-
"elster.de": { "company": "German Tax Authority", "service": "ELSTER Tax Portal", "category": "data_leak", "
|
|
537
|
-
"embed.api.video": { "company": "api.video", "service": "api.video Player Embed", "category": "data_leak", "
|
|
538
|
-
"embed.linkedin.com": { "company": "LinkedIn (Microsoft)", "service": "LinkedIn Post Embed", "category": "data_leak", "
|
|
539
|
-
"embed.loom.com": { "company": "Loom (Atlassian)", "service": "Loom Video Embed", "category": "data_leak", "
|
|
540
|
-
"embed.mentimeter.com": { "company": "Mentimeter", "service": "Mentimeter Presentation Embed", "category": "data_leak", "
|
|
541
|
-
"embed.music.apple.com": { "company": "Apple", "service": "Apple Music Embed", "category": "data_leak", "
|
|
542
|
-
"embed.podcasts.apple.com": { "company": "Apple", "service": "Apple Podcasts Embed Player", "category": "data_leak", "
|
|
543
|
-
"embed.typeform.com": { "company": "Typeform", "service": "Typeform Embed", "category": "data_leak", "
|
|
544
|
-
"embedwistia-a.akamaihd.net": { "company": "Wistia", "service": "Wistia Embed via Akamai", "category": "data_leak", "
|
|
545
|
-
"esm.sh": { "company": "esm.sh", "service": "esm.sh Module CDN", "category": "data_leak", "
|
|
546
|
-
"esri.com": { "company": "Esri", "service": "ArcGIS Maps Embed", "category": "data_leak", "
|
|
547
|
-
"ewr1.vultrobjects.com": { "company": "Vultr (Constant)", "service": "Vultr Object Storage", "category": "data_leak", "
|
|
548
|
-
"f.vimeocdn.com": { "company": "Vimeo", "service": "Vimeo", "category": "data_leak", "
|
|
549
|
-
"f000.backblazeb2.com": { "company": "Backblaze", "service": "Backblaze B2", "category": "data_leak", "
|
|
550
|
-
"f001.backblazeb2.com": { "company": "Backblaze", "service": "Backblaze B2", "category": "data_leak", "
|
|
551
|
-
"fast.fonts.net": { "company": "Monotype", "service": "Fonts.com Web Fonts", "category": "data_leak", "
|
|
552
|
-
"fast.wistia.com": { "company": "Wistia", "service": "Wistia Video Embed", "category": "data_leak", "
|
|
553
|
-
"fast.wistia.net": { "company": "Wistia", "service": "Wistia Video CDN", "category": "data_leak", "
|
|
554
|
-
"fastly.net": { "company": "Fastly", "service": "Fastly CDN", "category": "data_leak", "
|
|
555
|
-
"fastlylb.net": { "company": "Fastly", "service": "Fastly Load Balancer", "category": "data_leak", "
|
|
556
|
-
"files.pythonhosted.org": { "company": "Python Software Foundation", "service": "PyPI Package CDN", "category": "data_leak", "
|
|
557
|
-
"firebaseapp.com": { "company": "Google", "service": "Firebase Hosting (Legacy)", "category": "data_leak", "
|
|
558
|
-
"fly.dev": { "company": "Fly.io", "service": "Fly.io Edge Hosting", "category": "data_leak", "
|
|
559
|
-
"fonts.bunny.net": { "company": "Bunny CDN", "service": "Bunny Fonts", "category": "data_leak", "
|
|
560
|
-
"fonts.googleapis.com": { "company": "Google", "service": "Google Fonts", "category": "data_leak", "
|
|
561
|
-
"fonts.gstatic.com": { "company": "Google", "service": "Google Fonts", "category": "data_leak", "
|
|
562
|
-
"forms.office.com": { "company": "Microsoft", "service": "Microsoft Forms Embed", "category": "data_leak", "
|
|
563
|
-
"formspree.io": { "company": "Formspree", "service": "Formspree Form Backend", "category": "data_leak", "
|
|
564
|
-
"formulae.brew.sh": { "company": "Homebrew", "service": "Homebrew Formulae", "category": "data_leak", "
|
|
565
|
-
"foundation.app": { "company": "Foundation", "service": "Foundation NFT", "category": "data_leak", "
|
|
566
|
-
"franceconnect.gouv.fr": { "company": "French Government", "service": "FranceConnect", "category": "data_leak", "
|
|
567
|
-
"geo.dailymotion.com/player": { "company": "Dailymotion", "service": "Dailymotion Player Extended", "category": "data_leak", "
|
|
568
|
-
"geoip.maxmind.com": { "company": "MaxMind", "service": "MaxMind GeoIP", "category": "data_leak", "
|
|
569
|
-
"geolocation-db.com": { "company": "Geolocation DB", "service": "Geolocation DB API", "category": "data_leak", "
|
|
570
|
-
"getcomposer.org": { "company": "Composer", "service": "Composer PHP Package Manager", "category": "data_leak", "
|
|
571
|
-
"giscus.app": { "company": "giscus", "service": "giscus GitHub Comments", "category": "data_leak", "
|
|
572
|
-
"github.io": { "company": "GitHub (Microsoft)", "service": "GitHub Pages", "category": "data_leak", "
|
|
573
|
-
"gitlab.io": { "company": "GitLab", "service": "GitLab Pages", "category": "data_leak", "
|
|
574
|
-
"glitch.com/embed": { "company": "Glitch (Fastly)", "service": "Glitch Project Embed", "category": "data_leak", "
|
|
575
|
-
"global.ssl.fastly.net": { "company": "Fastly", "service": "Fastly CDN", "category": "data_leak", "
|
|
576
|
-
"google.com/maps/embed": { "company": "Google", "service": "Google Maps Embed API", "category": "data_leak", "
|
|
577
|
-
"graphcdn.io": { "company": "Stellate", "service": "Stellate GraphQL CDN", "category": "data_leak", "
|
|
578
|
-
"graphql.contentful.com": { "company": "Contentful", "service": "Contentful GraphQL API", "category": "data_leak", "
|
|
579
|
-
"hello.myfonts.net": { "company": "Monotype", "service": "MyFonts Web Font Counter", "category": "data_leak", "
|
|
580
|
-
"here.com": { "company": "HERE Technologies", "service": "HERE Maps", "category": "data_leak", "
|
|
581
|
-
"herokuapp.com": { "company": "Salesforce (Heroku)", "service": "Heroku Platform Hosting", "category": "data_leak", "
|
|
582
|
-
"hwcdn.net": { "company": "StackPath (Highwinds)", "service": "StackPath CDN", "category": "data_leak", "
|
|
583
|
-
"i.s-microsoft.com": { "company": "Microsoft", "service": "Microsoft Image CDN", "category": "data_leak", "
|
|
584
|
-
"i.scdn.co": { "company": "Spotify", "service": "Spotify CDN", "category": "data_leak", "
|
|
585
|
-
"i.ytimg.com": { "company": "Google", "service": "YouTube Images", "category": "data_leak", "
|
|
586
|
-
"id.bund.de": { "company": "German Government", "service": "BundID", "category": "data_leak", "
|
|
587
|
-
"id.gov.uk": { "company": "UK Government", "service": "GOV.UK One Login", "category": "data_leak", "
|
|
588
|
-
"id.swedenconnect.se": { "company": "Swedish Government", "service": "Sweden Connect", "category": "data_leak", "
|
|
589
|
-
"idserver.servizicie.interno.gov.it": { "company": "Italian Government", "service": "CIE (Italian eID)", "category": "data_leak", "
|
|
590
|
-
"imagekit.io": { "company": "ImageKit", "service": "ImageKit Image CDN", "category": "data_leak", "
|
|
591
|
-
"images.contentful.com": { "company": "Contentful", "service": "Contentful Images CDN", "category": "data_leak", "
|
|
592
|
-
"images.ctfassets.net": { "company": "Contentful", "service": "Contentful Image CDN", "category": "data_leak", "
|
|
593
|
-
"images.unsplash.com": { "company": "Unsplash", "service": "Unsplash Image CDN", "category": "data_leak", "
|
|
594
|
-
"img.imgix.net": { "company": "Imgix", "service": "Imgix Image CDN", "category": "data_leak", "
|
|
595
|
-
"img2.storyblok.com": { "company": "Storyblok", "service": "Storyblok Image CDN", "category": "data_leak", "
|
|
596
|
-
"imgix.net": { "company": "Imgix", "service": "Imgix Image CDN", "category": "data_leak", "
|
|
597
|
-
"impots.gouv.fr": { "company": "French Tax Authority (DGFiP)", "service": "French Tax Portal", "category": "data_leak", "
|
|
598
|
-
"ip-api.com": { "company": "IP-API", "service": "IP-API Free Geolocation", "category": "data_leak", "
|
|
599
|
-
"ipinfo.io": { "company": "IPinfo", "service": "IPinfo Geolocation API", "category": "data_leak", "
|
|
600
|
-
"is1-ssl.mzstatic.com": { "company": "Apple", "service": "Apple Static Assets", "category": "data_leak", "
|
|
601
|
-
"js.api.here.com": { "company": "HERE Technologies", "service": "HERE Maps JS API", "category": "data_leak", "
|
|
602
|
-
"js.driftt.com": { "company": "Drift", "service": "Drift Chat CDN", "category": "data_leak", "
|
|
603
|
-
"js.intercomcdn.com": { "company": "Intercom", "service": "Intercom SDK CDN", "category": "data_leak", "
|
|
604
|
-
"js.pusher.com": { "company": "Pusher (MessageBird)", "service": "Pusher JS CDN", "category": "data_leak", "
|
|
605
|
-
"js.squareup.com": { "company": "Block (Square)", "service": "Square Web Payments SDK", "category": "data_leak", "
|
|
606
|
-
"js.stripe.com": { "company": "Stripe", "service": "Stripe.js", "category": "data_leak", "
|
|
607
|
-
"json.geoiplookup.io": { "company": "GeoIP Lookup", "service": "GeoIP Lookup Service", "category": "data_leak", "
|
|
608
|
-
"
|
|
609
|
-
"
|
|
610
|
-
"
|
|
611
|
-
"
|
|
612
|
-
"
|
|
613
|
-
"ko-fi.com/
|
|
614
|
-
"
|
|
615
|
-
"
|
|
616
|
-
"
|
|
617
|
-
"
|
|
618
|
-
"
|
|
619
|
-
"
|
|
620
|
-
"
|
|
621
|
-
"login.
|
|
622
|
-
"login.
|
|
623
|
-
"login.
|
|
624
|
-
"
|
|
625
|
-
"
|
|
626
|
-
"maps.
|
|
627
|
-
"maps.
|
|
628
|
-
"maps.
|
|
629
|
-
"
|
|
630
|
-
"
|
|
631
|
-
"
|
|
632
|
-
"
|
|
633
|
-
"
|
|
634
|
-
"
|
|
635
|
-
"
|
|
636
|
-
"
|
|
637
|
-
"
|
|
638
|
-
"
|
|
639
|
-
"
|
|
640
|
-
"
|
|
641
|
-
"
|
|
642
|
-
"
|
|
643
|
-
"
|
|
644
|
-
"
|
|
645
|
-
"objects.
|
|
646
|
-
"
|
|
647
|
-
"onedrive.live.com
|
|
648
|
-
"
|
|
649
|
-
"
|
|
650
|
-
"
|
|
651
|
-
"
|
|
652
|
-
"
|
|
653
|
-
"
|
|
654
|
-
"
|
|
655
|
-
"
|
|
656
|
-
"
|
|
657
|
-
"
|
|
658
|
-
"
|
|
659
|
-
"
|
|
660
|
-
"
|
|
661
|
-
"pixel.
|
|
662
|
-
"
|
|
663
|
-
"
|
|
664
|
-
"platform.
|
|
665
|
-
"
|
|
666
|
-
"
|
|
667
|
-
"
|
|
668
|
-
"
|
|
669
|
-
"player.
|
|
670
|
-
"player.
|
|
671
|
-
"
|
|
672
|
-
"
|
|
673
|
-
"
|
|
674
|
-
"
|
|
675
|
-
"
|
|
676
|
-
"
|
|
677
|
-
"
|
|
678
|
-
"
|
|
679
|
-
"
|
|
680
|
-
"
|
|
681
|
-
"
|
|
682
|
-
"
|
|
683
|
-
"
|
|
684
|
-
"
|
|
685
|
-
"
|
|
686
|
-
"
|
|
687
|
-
"
|
|
688
|
-
"
|
|
689
|
-
"
|
|
690
|
-
"
|
|
691
|
-
"
|
|
692
|
-
"s3.
|
|
693
|
-
"s3
|
|
694
|
-
"s3.
|
|
695
|
-
"s3.
|
|
696
|
-
"
|
|
697
|
-
"
|
|
698
|
-
"
|
|
699
|
-
"
|
|
700
|
-
"
|
|
701
|
-
"
|
|
702
|
-
"
|
|
703
|
-
"
|
|
704
|
-
"
|
|
705
|
-
"
|
|
706
|
-
"
|
|
707
|
-
"
|
|
708
|
-
"
|
|
709
|
-
"
|
|
710
|
-
"
|
|
711
|
-
"
|
|
712
|
-
"
|
|
713
|
-
"
|
|
714
|
-
"
|
|
715
|
-
"
|
|
716
|
-
"static.
|
|
717
|
-
"static.
|
|
718
|
-
"static.
|
|
719
|
-
"static.
|
|
720
|
-
"static.
|
|
721
|
-
"static.
|
|
722
|
-
"static.
|
|
723
|
-
"static.
|
|
724
|
-
"
|
|
725
|
-
"
|
|
726
|
-
"
|
|
727
|
-
"
|
|
728
|
-
"stats.
|
|
729
|
-
"stats.
|
|
730
|
-
"stats.
|
|
731
|
-
"
|
|
732
|
-
"
|
|
733
|
-
"storage.
|
|
734
|
-
"
|
|
735
|
-
"
|
|
736
|
-
"
|
|
737
|
-
"
|
|
738
|
-
"
|
|
739
|
-
"
|
|
740
|
-
"
|
|
741
|
-
"
|
|
742
|
-
"
|
|
743
|
-
"
|
|
744
|
-
"
|
|
745
|
-
"
|
|
746
|
-
"
|
|
747
|
-
"
|
|
748
|
-
"
|
|
749
|
-
"
|
|
750
|
-
"
|
|
751
|
-
"
|
|
752
|
-
"
|
|
753
|
-
"
|
|
754
|
-
"
|
|
755
|
-
"
|
|
756
|
-
"
|
|
757
|
-
"
|
|
758
|
-
"unpkg.com
|
|
759
|
-
"unpkg.com/
|
|
760
|
-
"
|
|
761
|
-
"
|
|
762
|
-
"
|
|
763
|
-
"
|
|
764
|
-
"
|
|
765
|
-
"
|
|
766
|
-
"
|
|
767
|
-
"
|
|
768
|
-
"
|
|
769
|
-
"
|
|
770
|
-
"
|
|
771
|
-
"
|
|
772
|
-
"
|
|
773
|
-
"
|
|
774
|
-
"
|
|
775
|
-
"
|
|
776
|
-
"
|
|
777
|
-
"
|
|
778
|
-
"widget.
|
|
779
|
-
"widget.
|
|
780
|
-
"
|
|
781
|
-
"
|
|
782
|
-
"
|
|
783
|
-
"
|
|
784
|
-
"
|
|
785
|
-
"
|
|
786
|
-
"www.
|
|
787
|
-
"www.
|
|
788
|
-
"www.
|
|
789
|
-
"www.
|
|
790
|
-
"www.
|
|
791
|
-
"www.
|
|
792
|
-
"www.
|
|
793
|
-
"www.
|
|
794
|
-
"www.
|
|
795
|
-
"www.
|
|
796
|
-
"www.
|
|
797
|
-
"www.
|
|
798
|
-
"www.
|
|
799
|
-
"www.
|
|
800
|
-
"www.
|
|
801
|
-
"www.
|
|
802
|
-
"www.
|
|
803
|
-
"www.
|
|
804
|
-
"www.
|
|
805
|
-
"www.
|
|
806
|
-
"www.
|
|
807
|
-
"www.
|
|
808
|
-
"www.
|
|
809
|
-
"www.
|
|
810
|
-
"www.
|
|
811
|
-
"www.
|
|
812
|
-
"www.
|
|
813
|
-
"www.
|
|
814
|
-
"www.
|
|
815
|
-
"www.
|
|
816
|
-
"www.
|
|
817
|
-
"www.
|
|
818
|
-
"www.
|
|
819
|
-
"www.
|
|
820
|
-
"www.
|
|
821
|
-
"www.
|
|
822
|
-
"
|
|
823
|
-
"
|
|
824
|
-
"
|
|
825
|
-
"
|
|
7
|
+
"*.b-cdn.net": { "company": "BunnyCDN", "service": "BunnyCDN CDN", "category": "data_leak", "consent_burden": "contested", "pattern": true, "docs_url": "https://bunny.net/privacy" },
|
|
8
|
+
"*.cloudfront.net": { "company": "Amazon", "service": "AWS CloudFront CDN", "category": "data_leak", "consent_burden": "contested", "pattern": true, "note": "AWS CloudFront CDN — leaks visitor IP and request headers to Amazon infrastructure and Lambda@Edge functions", "docs_url": "https://aws.amazon.com/privacy/" },
|
|
9
|
+
"*.deno.dev": { "company": "Deno", "service": "Deno Deploy", "category": "data_leak", "consent_burden": "contested", "pattern": true, "note": "Deno Deploy edge functions — serverless JavaScript runtime leaking visitor IP to deployed edge functions", "docs_url": "https://deno.com/deploy/docs/privacy-policy" },
|
|
10
|
+
"*.netlify.app": { "company": "Netlify", "service": "Netlify Edge Functions", "category": "data_leak", "consent_burden": "contested", "pattern": true, "note": "Netlify-hosted sites and edge functions — visitor IP exposed to Netlify infrastructure", "docs_url": "https://www.netlify.com/privacy/" },
|
|
11
|
+
"*.vercel.app": { "company": "Vercel", "service": "Vercel Edge CDN", "category": "data_leak", "consent_burden": "contested", "pattern": true, "note": "Vercel-hosted apps and edge functions — visitor IP exposed to Vercel infrastructure and deployed edge functions", "docs_url": "https://vercel.com/legal/privacy-policy" },
|
|
12
|
+
"*.workers.dev": { "company": "Cloudflare", "service": "Cloudflare Workers", "category": "data_leak", "consent_burden": "contested", "pattern": true, "note": "Cloudflare Workers edge functions — custom code runs on Cloudflare edge, exposing visitor IP to worker logic", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
13
|
+
"0.gravatar.com": { "company": "Automattic", "service": "Gravatar CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://automattic.com/privacy/" },
|
|
14
|
+
"1.gravatar.com": { "company": "Automattic", "service": "Gravatar CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://automattic.com/privacy/" },
|
|
15
|
+
"1inch.io": { "company": "1inch Network", "service": "1inch DEX Aggregator", "category": "data_leak", "consent_burden": "required", "note": "DEX aggregator — routes token swaps across multiple decentralized exchanges, collecting wallet addresses and transaction data", "docs_url": "https://1inch.io/assets/1inch_network_privacy_policy.pdf" },
|
|
16
|
+
"2.gravatar.com": { "company": "Automattic", "service": "Gravatar CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://automattic.com/privacy/" },
|
|
17
|
+
"a.storyblok.com": { "company": "Storyblok", "service": "Storyblok CMS CDN", "category": "data_leak", "consent_burden": "required", "note": "⚠ PHISHING RISK: Storyblok CDN is widely flagged as phishing in security databases (VirusTotal, PhishTank) because attackers abuse Storyblok free tier to host phishing pages. Legitimate CMS service but CDN domain has severely damaged reputation", "docs_url": "https://www.storyblok.com/legal/privacy-policy" },
|
|
18
|
+
"abs.twimg.com": { "company": "X Corp", "service": "Twitter/X Absolute CDN", "category": "data_leak", "consent_burden": "contested", "note": "X/Twitter absolute asset CDN for embedded tweet widget resources — leaks visitor IP", "docs_url": "https://help.twitter.com/en/rules-and-policies/twitter-cookies" },
|
|
19
|
+
"across.to": { "company": "Across Protocol", "service": "Across Bridge", "category": "data_leak", "consent_burden": "required", "docs_url": "https://across.to/privacy-policy" },
|
|
20
|
+
"acsbapp.com": { "company": "accessiBe", "service": "accessiBe Widget (Extended)", "category": "data_leak", "consent_burden": "required", "note": "accessiBe accessibility overlay app domain — collects page structure, user interaction patterns, and accessibility feature usage. Reveals disability-related browsing signals to third party.", "docs_url": "https://accessibe.com/privacy-policy" },
|
|
21
|
+
"acuityscheduling.com": { "company": "Squarespace (Acuity)", "service": "Acuity Scheduling Embed", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://acuityscheduling.com/privacy.php" },
|
|
22
|
+
"addons.mozilla.org": { "company": "Mozilla", "service": "Firefox Add-ons Store", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.mozilla.org/en-US/privacy/" },
|
|
23
|
+
"ajax.aspnetcdn.com": { "company": "Microsoft", "service": "Microsoft Ajax CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Microsoft-hosted JS library CDN leaking visitor IP to Microsoft", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
24
|
+
"ajax.googleapis.com": { "company": "Google", "service": "Google Hosted Libraries", "category": "data_leak", "consent_burden": "minimal", "note": "Google-hosted jQuery/Angular libraries CDN leaking visitor IP to Google", "docs_url": "https://developers.google.com/speed/libraries" },
|
|
25
|
+
"ajax.googleapis.com/ajax/libs/angularjs": { "company": "Google", "service": "AngularJS CDN", "category": "data_leak", "consent_burden": "contested", "note": "Loading AngularJS from Google CDN leaks visitor IP to Google", "docs_url": "https://developers.google.com/speed/libraries" },
|
|
26
|
+
"akamaihd.net": { "company": "Akamai", "service": "Akamai HD Network", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.akamai.com/legal/privacy-statement" },
|
|
27
|
+
"akamaized.net": { "company": "Akamai", "service": "Akamai CDN", "category": "data_leak", "consent_burden": "contested", "note": "Akamai CDN requests expose visitor IP to Akamai edge infrastructure", "docs_url": "https://www.akamai.com/legal/privacy-statement" },
|
|
28
|
+
"analytics.agenziaentrate.gov.it": { "company": "Agenzia delle Entrate", "service": "Agenzia Entrate Analytics", "category": "data_leak", "consent_burden": "required", "note": "Italian tax agency analytics leaking taxpayer IP and portal navigation data", "docs_url": "https://www.agenziaentrate.gov.it/portale/web/guest/privacy" },
|
|
29
|
+
"analytics.arbeitsagentur.de": { "company": "Bundesagentur für Arbeit", "service": "Arbeitsagentur Analytics", "category": "data_leak", "consent_burden": "required", "note": "German Federal Employment Agency analytics leaking jobseeker IP and portal browsing behavior", "docs_url": "https://www.arbeitsagentur.de/datenschutz" },
|
|
30
|
+
"analytics.belastingdienst.nl": { "company": "Dutch Tax Authority", "service": "Belastingdienst Analytics", "category": "data_leak", "consent_burden": "required", "note": "Dutch tax authority analytics leaking citizen IP and tax portal browsing behavior", "docs_url": "https://www.belastingdienst.nl/wps/wcm/connect/nl/home/content/privacy" },
|
|
31
|
+
"analytics.destatis.de": { "company": "Destatis (Federal Statistical Office)", "service": "Destatis Analytics", "category": "data_leak", "consent_burden": "contested", "note": "German Federal Statistical Office analytics leaking visitor IP for statistical portal tracking", "docs_url": "https://www.destatis.de/DE/Service/Datenschutz/datenschutz.html" },
|
|
32
|
+
"analytics.governo.it": { "company": "Italian Government", "service": "Governo.it Analytics", "category": "data_leak", "consent_burden": "contested", "note": "Italian government analytics endpoint transmitting citizen visitor data", "docs_url": "https://www.governo.it/it/note-legali" },
|
|
33
|
+
"analytics.inps.it": { "company": "INPS (Italian Social Security)", "service": "INPS Analytics", "category": "data_leak", "consent_burden": "required", "note": "Italian social security analytics leaking citizen IP and benefit portal browsing behavior", "docs_url": "https://www.inps.it/content/inps-site/it/privacy.html" },
|
|
34
|
+
"analytics.sede.gob.es": { "company": "Spanish Government", "service": "Sede.gob.es Analytics", "category": "data_leak", "consent_burden": "contested", "note": "Spanish e-government portal analytics transmitting citizen browsing data", "docs_url": "https://sede.gob.es/avisolegal" },
|
|
35
|
+
"analytics.seg-social.es": { "company": "Spanish Social Security", "service": "Seg-Social Analytics", "category": "data_leak", "consent_burden": "required", "note": "Spanish social security analytics leaking citizen IP and benefits portal navigation", "docs_url": "https://www.seg-social.es/wps/portal/wss/internet/ProteccionDatos" },
|
|
36
|
+
"api.accessibe.com": { "company": "accessiBe", "service": "accessiBe API", "category": "data_leak", "consent_burden": "required", "note": "accessiBe API endpoint — receives detailed page interaction data and accessibility preference signals from embedded overlay widget", "docs_url": "https://accessibe.com/privacy-policy" },
|
|
37
|
+
"api.audioeye.com": { "company": "AudioEye", "service": "AudioEye API", "category": "data_leak", "consent_burden": "required", "note": "AudioEye accessibility API — receives page structure and user interaction data for accessibility scanning, revealing assistive technology usage", "docs_url": "https://www.audioeye.com/privacy-policy/" },
|
|
38
|
+
"api.bigcommerce.com": { "company": "BigCommerce", "service": "BigCommerce API", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.bigcommerce.com/privacy/" },
|
|
39
|
+
"api.bombora.com": { "company": "Bombora", "service": "Bombora Intent API", "category": "data_leak", "consent_burden": "required_strict", "docs_url": "https://bombora.com/privacy/" },
|
|
40
|
+
"api.darksky.net": { "company": "Apple (Dark Sky)", "service": "Dark Sky Weather API", "category": "data_leak", "consent_burden": "contested", "note": "Dark Sky weather API (Apple) — receives precise latitude/longitude coordinates from embedded weather requests, leaking visitor location to Apple", "docs_url": "https://darksky.net/privacy" },
|
|
41
|
+
"api.db-ip.com": { "company": "DB-IP", "service": "DB-IP Geolocation", "category": "data_leak", "consent_burden": "required", "note": "IP geolocation database API — resolves visitor IP to location, ISP, and threat data", "docs_url": "https://db-ip.com/privacy-policy" },
|
|
42
|
+
"api.embedly.com": { "company": "A Medium Corporation (Embedly)", "service": "Embedly API", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://embed.ly/legal/privacy" },
|
|
43
|
+
"api.fontshare.com": { "company": "Indian Type Foundry", "service": "Fontshare Fonts", "category": "data_leak", "consent_burden": "minimal", "note": "Fontshare free font CDN — leaks visitor IP for each font request; consider self-hosting fonts", "docs_url": "https://www.fontshare.com/terms" },
|
|
44
|
+
"api.iconify.design": { "company": "Iconify", "service": "Iconify Icon API", "category": "data_leak", "consent_burden": "minimal", "note": "Open-source icon API; every icon request leaks visitor IP to Iconify servers", "docs_url": "https://iconify.design/privacy/" },
|
|
45
|
+
"api.ipdata.co": { "company": "IPdata", "service": "IPdata Geolocation", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://ipdata.co/privacy.html" },
|
|
46
|
+
"api.ipgeolocation.io": { "company": "IPGeolocation", "service": "IPGeolocation API", "category": "data_leak", "consent_burden": "required", "note": "IP geolocation API — reveals visitor location, timezone, currency, and ISP data from IP address", "docs_url": "https://ipgeolocation.io/privacy.html" },
|
|
47
|
+
"api.ipify.org": { "company": "ipify", "service": "ipify IP Lookup", "category": "data_leak", "consent_burden": "contested", "note": "Public IP address lookup API; reveals visitor public IP to third party", "docs_url": "https://www.ipify.org/" },
|
|
48
|
+
"api.ipinfo.io": { "company": "IPinfo", "service": "IPinfo API", "category": "data_leak", "consent_burden": "required", "docs_url": "https://ipinfo.io/privacy-policy" },
|
|
49
|
+
"api.ipstack.com": { "company": "ipstack", "service": "ipstack Geolocation", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://ipstack.com/privacy" },
|
|
50
|
+
"api.llama.fi": { "company": "DefiLlama", "service": "DefiLlama API", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://defillama.com/" },
|
|
51
|
+
"api.mapbox.com": { "company": "Mapbox", "service": "Mapbox Maps", "category": "data_leak", "consent_burden": "contested", "note": "Mapbox map API — leaks visitor IP and location viewport data for map tile requests", "docs_url": "https://www.mapbox.com/legal/privacy" },
|
|
52
|
+
"api.netlify.com": { "company": "Netlify", "service": "Netlify API", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.netlify.com/privacy/" },
|
|
53
|
+
"api.nuget.org": { "company": "Microsoft", "service": "NuGet Package Registry", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
54
|
+
"api.openweathermap.org": { "company": "OpenWeatherMap", "service": "OpenWeatherMap API", "category": "data_leak", "consent_burden": "contested", "note": "Weather API calls can leak visitor IP and approximate geolocation to OpenWeatherMap", "docs_url": "https://openweathermap.org/privacy-policy" },
|
|
55
|
+
"api.service.nhs.uk": { "company": "NHS (UK)", "service": "NHS API", "category": "data_leak", "consent_burden": "required_strict", "note": "UK National Health Service API — processes patient health data, appointment bookings, and medical records", "docs_url": "https://digital.nhs.uk/about-nhs-digital/privacy-and-cookies" },
|
|
56
|
+
"api.stability.ai": { "company": "Stability AI", "service": "Stable Diffusion API", "category": "data_leak", "consent_burden": "contested", "note": "Stability AI API — image generation prompts and outputs processed on Stability AI servers", "docs_url": "https://stability.ai/privacy-policy" },
|
|
57
|
+
"api.storyblok.com": { "company": "Storyblok", "service": "Storyblok API", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.storyblok.com/legal/privacy-policy" },
|
|
58
|
+
"api.tomtom.com": { "company": "TomTom", "service": "TomTom Maps API", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.tomtom.com/privacy/" },
|
|
59
|
+
"api.userway.org": { "company": "UserWay", "service": "UserWay API", "category": "data_leak", "consent_burden": "required", "note": "UserWay accessibility overlay API — receives page interaction data and accessibility feature usage that can reveal disability status", "docs_url": "https://userway.org/privacy" },
|
|
60
|
+
"api.vercel.com": { "company": "Vercel", "service": "Vercel Deployment API", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://vercel.com/legal/privacy-policy" },
|
|
61
|
+
"api.what3words.com": { "company": "what3words", "service": "what3words Location", "category": "data_leak", "consent_burden": "contested", "note": "what3words address widget transmits location queries and visitor IP", "docs_url": "https://what3words.com/privacy" },
|
|
62
|
+
"api.wordfence.com": { "company": "Defiant Inc.", "service": "Wordfence API", "category": "data_leak", "consent_burden": "contested", "note": "Wordfence API transmits security event data including visitor IPs to Defiant servers", "docs_url": "https://www.wordfence.com/terms-of-use-and-privacy-policy/" },
|
|
63
|
+
"app.1inch.io": { "company": "1inch Network", "service": "1inch App", "category": "data_leak", "consent_burden": "required", "docs_url": "https://1inch.io/assets/1inch_network_privacy_policy.pdf" },
|
|
64
|
+
"app.aave.com/v3": { "company": "Aave", "service": "Aave V3 DeFi", "category": "data_leak", "consent_burden": "required", "docs_url": "https://aave.com/privacy-policy" },
|
|
65
|
+
"app.box.com": { "company": "Box", "service": "Box Embed Widget", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.box.com/legal/privacypolicy" },
|
|
66
|
+
"app.compound.finance": { "company": "Compound Labs", "service": "Compound App", "category": "data_leak", "consent_burden": "required", "docs_url": "https://compound.finance/privacy-policy" },
|
|
67
|
+
"app.morpho.org": { "company": "Morpho Labs", "service": "Morpho DeFi", "category": "data_leak", "consent_burden": "required", "docs_url": "https://morpho.org/privacy-policy" },
|
|
68
|
+
"app.optimism.io": { "company": "OP Labs", "service": "Optimism Bridge", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.optimism.io/privacy-policy" },
|
|
69
|
+
"app.savvycal.com": { "company": "SavvyCal", "service": "SavvyCal Scheduling", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://savvycal.com/privacy" },
|
|
70
|
+
"app.slack.com": { "company": "Salesforce/Slack", "service": "Slack Unfurl", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://slack.com/trust/privacy/privacy-policy" },
|
|
71
|
+
"app.storyblok.com": { "company": "Storyblok", "service": "Storyblok CMS", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.storyblok.com/legal/privacy-policy" },
|
|
72
|
+
"app.uniswap.org": { "company": "Uniswap Labs", "service": "Uniswap Interface", "category": "data_leak", "consent_burden": "required", "note": "Uniswap DEX frontend — collects wallet addresses, swap data, and visitor IP; Uniswap Labs has shared data with regulators", "docs_url": "https://uniswap.org/privacy-policy" },
|
|
73
|
+
"appointlet.com": { "company": "Appointlet", "service": "Appointlet Scheduling", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.appointlet.com/privacy" },
|
|
74
|
+
"arcgis.com": { "company": "Esri", "service": "ArcGIS Online Maps", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.esri.com/en-us/privacy/overview" },
|
|
75
|
+
"assets-global.website-files.com": { "company": "Webflow", "service": "Webflow Asset CDN", "category": "data_leak", "consent_burden": "contested", "note": "Webflow asset CDN — leaks visitor IP when loading images and files from Webflow-hosted sites", "docs_url": "https://webflow.com/legal/privacy" },
|
|
76
|
+
"assets.allegrostatic.com": { "company": "Allegro", "service": "Allegro CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://allegro.pl/regulamin/polityka-prywatnosci" },
|
|
77
|
+
"assets.calendly.com": { "company": "Calendly", "service": "Calendly Assets", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://calendly.com/privacy" },
|
|
78
|
+
"assets.imgix.net": { "company": "imgix", "service": "imgix Image CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Image optimization CDN — processes images server-side, leaking visitor IP for each image request", "docs_url": "https://www.imgix.com/privacy" },
|
|
79
|
+
"assets.vercel.com": { "company": "Vercel", "service": "Vercel Assets CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://vercel.com/legal/privacy-policy" },
|
|
80
|
+
"assets.website-files.com": { "company": "Webflow", "service": "Webflow Assets CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://webflow.com/legal/privacy" },
|
|
81
|
+
"azureedge.net": { "company": "Microsoft", "service": "Azure CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Azure CDN edge domain transmitting visitor IP to Microsoft infrastructure", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
82
|
+
"azurewebsites.net": { "company": "Microsoft", "service": "Azure Web Apps", "category": "data_leak", "consent_burden": "minimal", "note": "Azure App Service hosted sites expose visitor IP to Microsoft infrastructure", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
83
|
+
"b-cdn.net": { "company": "BunnyCDN", "service": "BunnyCDN Pull Zone", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://bunny.net/privacy" },
|
|
84
|
+
"bankid.com": { "company": "BankID (Sweden)", "service": "Swedish BankID", "category": "data_leak", "consent_burden": "required", "note": "Swedish national eID system — authentication requests expose citizen identity to BankID infrastructure; used for tax, banking, and government services", "docs_url": "https://www.bankid.com/en/om-bankid/integritetspolicy" },
|
|
85
|
+
"bcp.crwdcntrl.net": { "company": "Lotame", "service": "Lotame Crowd Control", "category": "data_leak", "consent_burden": "required_strict", "note": "Lotame Crowd Control data collection endpoint — transmits browsing behavior, IP, and device data to Lotame's audience data marketplace", "docs_url": "https://www.lotame.com/about-lotame/privacy/" },
|
|
86
|
+
"blob.core.windows.net": { "company": "Microsoft", "service": "Azure Blob Storage", "category": "data_leak", "consent_burden": "contested", "note": "Azure Blob storage requests expose visitor IP to Microsoft infrastructure", "docs_url": "https://learn.microsoft.com/en-us/azure/storage/blobs/" },
|
|
87
|
+
"blur.io": { "company": "Blur", "service": "Blur NFT Marketplace", "category": "data_leak", "consent_burden": "required", "note": "NFT marketplace — tracks wallet addresses, bidding activity, and trading patterns", "docs_url": "https://blur.io/privacy" },
|
|
88
|
+
"bridge.arbitrum.io": { "company": "Offchain Labs", "service": "Arbitrum Bridge", "category": "data_leak", "consent_burden": "required", "docs_url": "https://arbitrum.io/privacy" },
|
|
89
|
+
"bridge.base.org": { "company": "Coinbase (Base)", "service": "Base Bridge", "category": "data_leak", "consent_burden": "required", "docs_url": "https://base.org/privacy-policy" },
|
|
90
|
+
"broker.mitid.dk": { "company": "MitID (Denmark)", "service": "MitID Broker", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.mitid.dk/en-gb/privacy/" },
|
|
91
|
+
"browser.sentry-cdn.com": { "company": "Sentry", "service": "Sentry Browser SDK", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://sentry.io/privacy/" },
|
|
92
|
+
"c.s-microsoft.com": { "company": "Microsoft", "service": "Microsoft Static CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Microsoft static content CDN — leaks visitor IP to Microsoft for resource delivery", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
93
|
+
"cal.com": { "company": "Cal.com", "service": "Cal.com Scheduling Embed", "category": "data_leak", "consent_burden": "minimal", "note": "Open-source scheduling embed leaks visitor IP when booking widget loads", "docs_url": "https://cal.com/privacy" },
|
|
94
|
+
"calendly.com": { "company": "Calendly", "service": "Calendly Scheduling Widget", "category": "data_leak", "consent_burden": "contested", "note": "Calendly scheduling embed — leaks visitor IP and can pre-fill personal information via URL parameters", "docs_url": "https://calendly.com/privacy" },
|
|
95
|
+
"candidat.pole-emploi.fr": { "company": "France Travail", "service": "France Travail (Pole Emploi)", "category": "data_leak", "consent_burden": "required", "note": "French employment service portal (formerly Pole emploi) — jobseeker data and employment status", "docs_url": "https://www.francetravail.fr/candidat/informations-legales.html" },
|
|
96
|
+
"carto.com": { "company": "CARTO", "service": "CARTO Location Intelligence", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://carto.com/privacy/" },
|
|
97
|
+
"cdn-apple.com": { "company": "Apple", "service": "Apple CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Apple content delivery network — leaks visitor IP for Apple service embeds and resources", "docs_url": "https://www.apple.com/legal/privacy/" },
|
|
98
|
+
"cdn.100ms.live": { "company": "100ms", "service": "100ms Video CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.100ms.live/privacy-policy" },
|
|
99
|
+
"cdn.1inch.io": { "company": "1inch Network", "service": "1inch Aggregator CDN", "category": "data_leak", "consent_burden": "contested", "note": "1inch DEX aggregator CDN leaking visitor IP for swap interface delivery", "docs_url": "https://1inch.io/assets/1inch_network_privacy_policy.pdf" },
|
|
100
|
+
"cdn.500px.org": { "company": "500px (VCG)", "service": "500px Photo CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://500px.com/privacy" },
|
|
101
|
+
"cdn.888sport.com": { "company": "888 Holdings", "service": "888sport CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.888sport.com/privacy-policy" },
|
|
102
|
+
"cdn.accessibe.com": { "company": "accessiBe", "service": "accessiBe Accessibility Widget", "category": "data_leak", "consent_burden": "contested", "note": "accessiBe AI accessibility overlay — leaks visitor IP and collects usage of accessibility features, revealing potential disability status", "docs_url": "https://accessibe.com/privacy-policy" },
|
|
103
|
+
"cdn.accor.com": { "company": "Accor", "service": "Accor CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://group.accor.com/en/footer/privacy-policy" },
|
|
104
|
+
"cdn.adidas.com": { "company": "Adidas", "service": "Adidas CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.adidas.com/us/privacy-policy" },
|
|
105
|
+
"cdn.adjust.com": { "company": "Adjust", "service": "Adjust Attribution CDN", "category": "data_leak", "consent_burden": "contested", "note": "Adjust mobile measurement CDN leaking visitor IP for attribution SDK delivery", "docs_url": "https://www.adjust.com/terms/privacy-policy/" },
|
|
106
|
+
"cdn.adobe.com": { "company": "Adobe", "service": "Adobe Creative Cloud CDN", "category": "data_leak", "consent_burden": "contested", "note": "Adobe Creative Cloud asset CDN leaking visitor IP for application delivery", "docs_url": "https://www.adobe.com/privacy/policy.html" },
|
|
107
|
+
"cdn.agoda.com": { "company": "Booking Holdings/Agoda", "service": "Agoda CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.agoda.com/info/privacy-policy" },
|
|
108
|
+
"cdn.agoda.net": { "company": "Booking Holdings", "service": "Agoda CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.agoda.com/info/privacy-policy.html" },
|
|
109
|
+
"cdn.ah.nl": { "company": "Albert Heijn (Ahold Delhaize)", "service": "Albert Heijn CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.ah.nl/privacy" },
|
|
110
|
+
"cdn.airbnb.com": { "company": "Airbnb", "service": "Airbnb CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.airbnb.com/terms/privacy_policy" },
|
|
111
|
+
"cdn.aldi.com": { "company": "Aldi", "service": "Aldi CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.aldi.com/privacy-policy" },
|
|
112
|
+
"cdn.allianz.com": { "company": "Allianz", "service": "Allianz CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.allianz.com/en/privacy-statement.html" },
|
|
113
|
+
"cdn.ameli.fr": { "company": "CNAM (French Health Insurance)", "service": "Ameli.fr CDN", "category": "data_leak", "consent_burden": "required", "note": "French health insurance CDN leaking citizen IP for healthcare portal asset delivery", "docs_url": "https://www.ameli.fr/politique-de-confidentialite" },
|
|
114
|
+
"cdn.amplitude.com": { "company": "Amplitude", "service": "Amplitude SDK CDN", "category": "data_leak", "consent_burden": "required", "note": "Amplitude analytics SDK CDN — leaks visitor IP; all user behavior data flows through this endpoint", "docs_url": "https://amplitude.com/privacy" },
|
|
115
|
+
"cdn.anthropic.com": { "company": "Anthropic", "service": "Anthropic CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.anthropic.com/privacy" },
|
|
116
|
+
"cdn.appcues.com": { "company": "Appcues", "service": "Appcues Onboarding CDN", "category": "data_leak", "consent_burden": "contested", "note": "Appcues product onboarding CDN leaking visitor IP for flow delivery", "docs_url": "https://www.appcues.com/privacy" },
|
|
117
|
+
"cdn.appdynamics.com": { "company": "Cisco (AppDynamics)", "service": "AppDynamics Browser RUM", "category": "data_leak", "consent_burden": "contested", "note": "AppDynamics browser RUM agent — collects performance and error data including visitor IP", "docs_url": "https://www.cisco.com/c/en/us/about/legal/privacy-full.html" },
|
|
118
|
+
"cdn.apple-mapkit.com": { "company": "Apple", "service": "Apple MapKit JS", "category": "data_leak", "consent_burden": "contested", "note": "Apple Maps embedded via MapKit JS transmits visitor IP to Apple", "docs_url": "https://developer.apple.com/maps/web/" },
|
|
119
|
+
"cdn.appsflyer.com": { "company": "AppsFlyer", "service": "AppsFlyer Attribution CDN", "category": "data_leak", "consent_burden": "contested", "note": "AppsFlyer mobile attribution SDK CDN leaking visitor IP for install attribution", "docs_url": "https://www.appsflyer.com/legal/privacy-policy/" },
|
|
120
|
+
"cdn.artstation.com": { "company": "ArtStation (Epic Games)", "service": "ArtStation CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.artstation.com/privacy" },
|
|
121
|
+
"cdn.auchan.fr": { "company": "Auchan", "service": "Auchan CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.auchan.fr/donnees-personnelles" },
|
|
122
|
+
"cdn.audi.com": { "company": "Volkswagen Group/Audi", "service": "Audi CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.audi.com/en/data-protection.html" },
|
|
123
|
+
"cdn.auth0.com": { "company": "Auth0 (Okta)", "service": "Auth0 SDK CDN", "category": "data_leak", "consent_burden": "contested", "note": "Auth0 identity SDK CDN leaking visitor IP for authentication widget loading", "docs_url": "https://auth0.com/privacy" },
|
|
124
|
+
"cdn.aviva.com": { "company": "Aviva", "service": "Aviva CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.aviva.com/privacy-policy/" },
|
|
125
|
+
"cdn.axa.com": { "company": "AXA", "service": "AXA CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.axa.com/en/about-us/privacy-policy" },
|
|
126
|
+
"cdn.bamboohr.com": { "company": "BambooHR", "service": "BambooHR CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.bamboohr.com/privacy-policy/" },
|
|
127
|
+
"cdn.behance.net": { "company": "Adobe", "service": "Behance CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.adobe.com/privacy/policy.html" },
|
|
128
|
+
"cdn.bestwestern.com": { "company": "Best Western", "service": "Best Western CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.bestwestern.com/en_US/privacy-policy.html" },
|
|
129
|
+
"cdn.betano.com": { "company": "Betano (Kaizen Gaming)", "service": "Betano CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.betano.com/privacy-policy" },
|
|
130
|
+
"cdn.betmgm.com": { "company": "BetMGM", "service": "BetMGM CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.betmgm.com/en/privacy" },
|
|
131
|
+
"cdn.betsson.com": { "company": "Betsson Group", "service": "Betsson CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.betssongroup.com/privacy-policy/" },
|
|
132
|
+
"cdn.betterstack.com": { "company": "Better Stack", "service": "Better Stack Status Widget", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://betterstack.com/privacy" },
|
|
133
|
+
"cdn.bigcommerce.com": { "company": "BigCommerce", "service": "BigCommerce CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.bigcommerce.com/privacy/" },
|
|
134
|
+
"cdn.bitbucket.org": { "company": "Atlassian", "service": "Bitbucket CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.atlassian.com/legal/privacy-policy" },
|
|
135
|
+
"cdn.bizzabo.com": { "company": "Bizzabo", "service": "Bizzabo Event CDN", "category": "data_leak", "consent_burden": "contested", "note": "Bizzabo event platform CDN leaking visitor IP for event page and widget delivery", "docs_url": "https://www.bizzabo.com/privacy" },
|
|
136
|
+
"cdn.bombora.com": { "company": "Bombora", "service": "Bombora Intent Data", "category": "data_leak", "consent_burden": "required_strict", "note": "Bombora B2B intent data tag — collects business research behavior across 5,000+ publisher sites to build company-level intent signals for B2B advertising", "docs_url": "https://bombora.com/privacy/" },
|
|
137
|
+
"cdn.booking.com": { "company": "Booking Holdings", "service": "Booking.com CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.booking.com/content/privacy.html" },
|
|
138
|
+
"cdn.bootcdn.net": { "company": "BootCDN", "service": "BootCDN", "category": "data_leak", "consent_burden": "contested", "note": "Chinese CDN for front-end libraries — leaks visitor IP to Chinese infrastructure; previously caught injecting tracking scripts", "docs_url": "https://www.bootcdn.cn/" },
|
|
139
|
+
"cdn.boots.com": { "company": "Boots (Walgreens)", "service": "Boots CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.boots.com/privacy-policy" },
|
|
140
|
+
"cdn.branch.io": { "company": "Branch", "service": "Branch Deep Linking CDN", "category": "data_leak", "consent_burden": "contested", "note": "Branch deep linking SDK CDN leaking visitor IP for attribution and link routing", "docs_url": "https://branch.io/policies/privacy-policy/" },
|
|
141
|
+
"cdn.braze.eu": { "company": "Braze", "service": "Braze EU SDK CDN", "category": "data_leak", "consent_burden": "contested", "note": "Braze customer engagement SDK EU CDN leaking visitor IP for messaging SDK delivery", "docs_url": "https://www.braze.com/company/legal/cookies" },
|
|
142
|
+
"cdn.brightcove.com": { "company": "Brightcove", "service": "Brightcove Video CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.brightcove.com/en/legal/privacy/" },
|
|
143
|
+
"cdn.bugsnag.com": { "company": "Bugsnag (SmartBear)", "service": "Bugsnag Error Monitoring", "category": "data_leak", "consent_burden": "contested", "note": "Bugsnag error monitoring CDN — captures and transmits JavaScript errors with user context data", "docs_url": "https://smartbear.com/privacy/" },
|
|
144
|
+
"cdn.builder.io": { "company": "Builder.io", "service": "Builder.io Visual CMS CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.builder.io/c/privacy" },
|
|
145
|
+
"cdn.bumble.com": { "company": "Bumble", "service": "Bumble CDN", "category": "data_leak", "consent_burden": "required", "docs_url": "https://bumble.com/en/privacy" },
|
|
146
|
+
"cdn.bundesregierung.de": { "company": "German Federal Government", "service": "Bundesregierung CDN", "category": "data_leak", "consent_burden": "minimal", "note": "German federal chancellery CDN leaking visitor IP for content delivery", "docs_url": "https://www.bundesregierung.de/breg-de/service/datenschutzhinweis" },
|
|
147
|
+
"cdn.bunnycdn.com": { "company": "BunnyCDN", "service": "BunnyCDN", "category": "data_leak", "consent_burden": "contested", "note": "BunnyCDN edge network — leaks visitor IP to Bunny.net infrastructure for content delivery", "docs_url": "https://bunny.net/privacy" },
|
|
148
|
+
"cdn.burgerking.com": { "company": "Burger King", "service": "Burger King CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.bk.com/privacy" },
|
|
149
|
+
"cdn.buttercms.com": { "company": "ButterCMS", "service": "ButterCMS CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://buttercms.com/privacy/" },
|
|
150
|
+
"cdn.buymeacoffee.com": { "company": "Buy Me a Coffee", "service": "Buy Me a Coffee Widget", "category": "data_leak", "consent_burden": "minimal", "note": "Creator support widget — leaks visitor IP and identifies potential supporters", "docs_url": "https://www.buymeacoffee.com/privacy" },
|
|
151
|
+
"cdn.buymeacoffee.com/widget": { "company": "Buy Me a Coffee", "service": "Buy Me a Coffee Widget", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.buymeacoffee.com/privacy" },
|
|
152
|
+
"cdn.byd.com": { "company": "BYD", "service": "BYD CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.byd.com/en/privacy-policy" },
|
|
153
|
+
"cdn.calendly.com/assets": { "company": "Calendly", "service": "Calendly Widget Assets", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://calendly.com/privacy" },
|
|
154
|
+
"cdn.canva.com": { "company": "Canva", "service": "Canva Assets CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.canva.com/policies/privacy-policy/" },
|
|
155
|
+
"cdn.canva.com/static": { "company": "Canva", "service": "Canva Static Assets CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.canva.com/policies/privacy-policy/" },
|
|
156
|
+
"cdn.carrefour.com": { "company": "Carrefour", "service": "Carrefour CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.carrefour.com/en/group/privacy" },
|
|
157
|
+
"cdn.cartier.com": { "company": "Richemont", "service": "Cartier CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.cartier.com/en-us/legal-area/privacy-policy.html" },
|
|
158
|
+
"cdn.chameleon.io": { "company": "Chameleon", "service": "Chameleon Product Tours CDN", "category": "data_leak", "consent_burden": "contested", "note": "Chameleon product tour CDN leaking visitor IP for in-app experience delivery", "docs_url": "https://www.chameleon.io/privacy" },
|
|
159
|
+
"cdn.chargebee.com": { "company": "Chargebee", "service": "Chargebee Checkout CDN", "category": "data_leak", "consent_burden": "contested", "note": "Chargebee subscription checkout CDN leaking visitor IP for hosted payment page delivery", "docs_url": "https://www.chargebee.com/privacy/" },
|
|
160
|
+
"cdn.chargify.com": { "company": "Maxio (Chargify)", "service": "Chargify Billing CDN", "category": "data_leak", "consent_burden": "contested", "note": "Chargify/Maxio subscription management CDN leaking visitor IP for billing page delivery", "docs_url": "https://www.maxio.com/privacy-policy" },
|
|
161
|
+
"cdn.chewy.com": { "company": "Chewy", "service": "Chewy CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.chewy.com/app/content/privacy" },
|
|
162
|
+
"cdn.chipotle.com": { "company": "Chipotle", "service": "Chipotle CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.chipotle.com/privacy-policy" },
|
|
163
|
+
"cdn.ckeditor.com": { "company": "CKSource", "service": "CKEditor CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://ckeditor.com/legal/privacy-policy/" },
|
|
164
|
+
"cdn.cloudflare.com": { "company": "Cloudflare", "service": "Cloudflare CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
165
|
+
"cdn.coingecko.com": { "company": "CoinGecko", "service": "CoinGecko CDN Extended", "category": "data_leak", "consent_burden": "minimal", "note": "CoinGecko crypto data CDN leaking visitor IP for market data widget delivery", "docs_url": "https://www.coingecko.com/en/privacy" },
|
|
166
|
+
"cdn.coinmarketcap.com": { "company": "Binance/CoinMarketCap", "service": "CoinMarketCap CDN", "category": "data_leak", "consent_burden": "minimal", "note": "CoinMarketCap CDN leaking visitor IP for market data and chart widget delivery", "docs_url": "https://coinmarketcap.com/privacy/" },
|
|
167
|
+
"cdn.columbia.com": { "company": "Columbia Sportswear", "service": "Columbia CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.columbia.com/privacy-policy.html" },
|
|
168
|
+
"cdn.commento.io": { "company": "Commento", "service": "Commento Comments", "category": "data_leak", "consent_burden": "minimal", "note": "Privacy-focused commenting system — leaks visitor IP for comment loading but minimizes data collection", "docs_url": "https://commento.io/privacy" },
|
|
169
|
+
"cdn.commonsensemedia.org": { "company": "Common Sense Media", "service": "Common Sense Media CDN", "category": "data_leak", "consent_burden": "contested", "note": "Children's media rating site CDN — despite child-safety mission, leaks visitor IP through CDN and embeds Google Analytics and ad trackers", "docs_url": "https://www.commonsensemedia.org/about-us/our-mission/privacy-policy" },
|
|
170
|
+
"cdn.compound.finance": { "company": "Compound Labs", "service": "Compound DeFi CDN", "category": "data_leak", "consent_burden": "contested", "note": "Compound DeFi protocol CDN leaking visitor IP and potentially wallet interaction data", "docs_url": "https://compound.finance/privacy-policy" },
|
|
171
|
+
"cdn.contentful.com": { "company": "Contentful", "service": "Contentful CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Contentful headless CMS CDN — leaks visitor IP for content delivery API requests", "docs_url": "https://www.contentful.com/legal/privacy-at-contentful/" },
|
|
172
|
+
"cdn.convertkit.com": { "company": "ConvertKit", "service": "ConvertKit Forms CDN", "category": "data_leak", "consent_burden": "contested", "note": "ConvertKit email marketing CDN leaking visitor IP for form embed delivery", "docs_url": "https://convertkit.com/privacy" },
|
|
173
|
+
"cdn.cookielaw.org": { "company": "OneTrust", "service": "OneTrust CMP CDN", "category": "data_leak", "consent_burden": "minimal", "note": "OneTrust consent banner CDN — ironically, the privacy tool itself leaks visitor IP to a third party", "docs_url": "https://www.onetrust.com/privacy/" },
|
|
174
|
+
"cdn.coolblue.nl": { "company": "Coolblue", "service": "Coolblue CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.coolblue.nl/privacybeleid" },
|
|
175
|
+
"cdn.costacoffee.com": { "company": "Costa Coffee (Coca-Cola)", "service": "Costa Coffee CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.costacoffee.com/privacy-policy" },
|
|
176
|
+
"cdn.crazyegg.com": { "company": "Crazy Egg", "service": "Crazy Egg CDN", "category": "data_leak", "consent_burden": "contested", "note": "Crazy Egg heatmap and recording CDN — leaks visitor IP for click tracking and scroll analytics", "docs_url": "https://www.crazyegg.com/privacy" },
|
|
177
|
+
"cdn.crisp.chat": { "company": "Crisp", "service": "Crisp Chat CDN", "category": "data_leak", "consent_burden": "contested", "note": "Crisp live chat widget CDN leaking visitor IP for chat widget delivery before any interaction", "docs_url": "https://crisp.chat/en/privacy/" },
|
|
178
|
+
"cdn.crypto.com": { "company": "Crypto.com", "service": "Crypto.com CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://crypto.com/privacy/global" },
|
|
179
|
+
"cdn.currys.co.uk": { "company": "Currys", "service": "Currys CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.currys.co.uk/privacy" },
|
|
180
|
+
"cdn.curve.fi": { "company": "Curve Finance", "service": "Curve DEX CDN", "category": "data_leak", "consent_burden": "contested", "note": "Curve Finance DEX CDN leaking visitor IP for DeFi application delivery", "docs_url": "https://curve.fi/" },
|
|
181
|
+
"cdn.cvent.com": { "company": "Cvent", "service": "Cvent Event CDN", "category": "data_leak", "consent_burden": "contested", "note": "Cvent event management CDN leaking visitor IP for registration page delivery", "docs_url": "https://www.cvent.com/en/cvent-global-privacy-policy" },
|
|
182
|
+
"cdn.daily.co": { "company": "Daily", "service": "Daily.co Video CDN", "category": "data_leak", "consent_burden": "contested", "note": "Video API CDN — leaks participant IP for WebRTC video call infrastructure", "docs_url": "https://www.daily.co/privacy" },
|
|
183
|
+
"cdn.dailymotion.com": { "company": "Dailymotion", "service": "Dailymotion Video CDN", "category": "data_leak", "consent_burden": "contested", "note": "Dailymotion video player CDN leaking visitor IP for embedded video delivery", "docs_url": "https://www.dailymotion.com/legal/privacy" },
|
|
184
|
+
"cdn.datadog-agent.com": { "company": "Datadog", "service": "Datadog RUM Agent", "category": "data_leak", "consent_burden": "required", "note": "Datadog Real User Monitoring agent — captures page load performance, user interactions, and error data", "docs_url": "https://www.datadoghq.com/legal/privacy/" },
|
|
185
|
+
"cdn.datatables.net": { "company": "SpryMedia", "service": "DataTables CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://datatables.net/privacy" },
|
|
186
|
+
"cdn.datatables.net/plug-ins": { "company": "DataTables", "service": "DataTables Plugins CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://datatables.net/privacy/" },
|
|
187
|
+
"cdn.decathlon.com": { "company": "Decathlon", "service": "Decathlon CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.decathlon.com/pages/privacy-policy" },
|
|
188
|
+
"cdn.deezer.com": { "company": "Deezer", "service": "Deezer CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.deezer.com/legal/personal-datas" },
|
|
189
|
+
"cdn.deliveroo.com": { "company": "Deliveroo", "service": "Deliveroo CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://deliveroo.co.uk/privacy" },
|
|
190
|
+
"cdn.deviantart.net": { "company": "DeviantArt (Wix)", "service": "DeviantArt CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.deviantart.com/about/policy/privacy/" },
|
|
191
|
+
"cdn.dior.com": { "company": "LVMH", "service": "Dior CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.dior.com/en_us/beauty/fragrance/privacy-policy.html" },
|
|
192
|
+
"cdn.directus.io": { "company": "Directus", "service": "Directus CMS CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://directus.io/privacy-policy" },
|
|
193
|
+
"cdn.discord.com": { "company": "Discord", "service": "Discord Assets CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://discord.com/privacy" },
|
|
194
|
+
"cdn.dixa.io": { "company": "Dixa", "service": "Dixa Messenger CDN", "category": "data_leak", "consent_burden": "contested", "note": "Dixa customer service messenger CDN leaking visitor IP for widget delivery", "docs_url": "https://www.dixa.com/privacy-policy/" },
|
|
195
|
+
"cdn.dm.de": { "company": "dm-drogerie markt", "service": "dm CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.dm.de/datenschutz" },
|
|
196
|
+
"cdn.docker.com": { "company": "Docker", "service": "Docker Hub CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.docker.com/legal/privacy/" },
|
|
197
|
+
"cdn.docmorris.de": { "company": "DocMorris", "service": "DocMorris CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.docmorris.de/datenschutz" },
|
|
198
|
+
"cdn.dominos.com": { "company": "Domino's", "service": "Domino's CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.dominos.com/pages/content/privacy" },
|
|
199
|
+
"cdn.dribbble.com": { "company": "Dribbble", "service": "Dribbble CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://dribbble.com/privacy" },
|
|
200
|
+
"cdn.dropboxstatic.com": { "company": "Dropbox", "service": "Dropbox Preview Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.dropbox.com/privacy" },
|
|
201
|
+
"cdn.dynatrace.com": { "company": "Dynatrace", "service": "Dynatrace RUM Agent", "category": "data_leak", "consent_burden": "contested", "note": "Dynatrace Real User Monitoring JavaScript agent — common in banking and enterprise sites", "docs_url": "https://www.dynatrace.com/support/help/manage/data-privacy-and-security/data-privacy/cookies" },
|
|
202
|
+
"cdn.easyjet.com": { "company": "EasyJet", "service": "EasyJet CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.easyjet.com/en/policy/privacy-promise" },
|
|
203
|
+
"cdn.ebay.com": { "company": "eBay", "service": "eBay Assets CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260" },
|
|
204
|
+
"cdn.edeka.de": { "company": "Edeka", "service": "Edeka CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.edeka.de/datenschutz.jsp" },
|
|
205
|
+
"cdn.edf.fr": { "company": "EDF", "service": "EDF CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.edf.fr/politique-de-confidentialite" },
|
|
206
|
+
"cdn.ee.co.uk": { "company": "EE (BT)", "service": "EE CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://ee.co.uk/privacy-policy" },
|
|
207
|
+
"cdn.eharmony.com": { "company": "eHarmony (Spark Networks)", "service": "eHarmony CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.eharmony.com/privacy/" },
|
|
208
|
+
"cdn.embed.ly": { "company": "Embedly (Medium)", "service": "Embedly", "category": "data_leak", "consent_burden": "contested", "note": "Embedly rich embed service — leaks visitor IP when loading URL preview cards and media embeds", "docs_url": "https://embed.ly/legal/privacy" },
|
|
209
|
+
"cdn.embedly.com": { "company": "A Medium Corporation (Embedly)", "service": "Embedly CDN", "category": "data_leak", "consent_burden": "contested", "note": "Embedly embed generation service — leaks visitor IP when rendering embedded content cards", "docs_url": "https://embed.ly/legal/privacy" },
|
|
210
|
+
"cdn.eon.com": { "company": "E.ON", "service": "E.ON CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.eon.com/en/privacy.html" },
|
|
211
|
+
"cdn.epicgames.com": { "company": "Epic Games", "service": "Epic Games CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.epicgames.com/site/en-US/privacypolicy" },
|
|
212
|
+
"cdn.equalweb.com": { "company": "EqualWeb", "service": "EqualWeb Accessibility", "category": "data_leak", "consent_burden": "contested", "note": "EqualWeb accessibility overlay — leaks visitor IP and accessibility feature usage patterns", "docs_url": "https://www.equalweb.com/privacy-policy" },
|
|
213
|
+
"cdn.equalweb.com/widget": { "company": "EqualWeb", "service": "EqualWeb Widget Script", "category": "data_leak", "consent_burden": "required", "note": "EqualWeb accessibility overlay widget — injects third-party JavaScript that phones home with page structure and accessibility feature interaction data", "docs_url": "https://www.equalweb.com/privacy-policy" },
|
|
214
|
+
"cdn.esselunga.it": { "company": "Esselunga", "service": "Esselunga CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.esselunga.it/cms/privacy-policy.html" },
|
|
215
|
+
"cdn.etherscan.io": { "company": "Etherscan", "service": "Etherscan CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Etherscan blockchain explorer CDN leaking visitor IP for transaction data delivery", "docs_url": "https://etherscan.io/privacyPolicy" },
|
|
216
|
+
"cdn.etoro.com": { "company": "eToro", "service": "eToro CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.etoro.com/customer-service/privacy/" },
|
|
217
|
+
"cdn.etsy.com": { "company": "Etsy", "service": "Etsy Assets CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.etsy.com/legal/privacy/" },
|
|
218
|
+
"cdn.europcar.com": { "company": "Europcar", "service": "Europcar CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.europcar.com/privacy-notice" },
|
|
219
|
+
"cdn.eurowings.com": { "company": "Eurowings", "service": "Eurowings CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.eurowings.com/en/information/legal/privacy-policy.html" },
|
|
220
|
+
"cdn.eventbrite.com": { "company": "Eventbrite", "service": "Eventbrite CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.eventbrite.com/help/en-us/articles/460838/eventbrite-privacy-policy/" },
|
|
221
|
+
"cdn.eventim.de": { "company": "CTS Eventim", "service": "Eventim CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.eventim.de/information/privacy/" },
|
|
222
|
+
"cdn.expedia.com": { "company": "Expedia Group", "service": "Expedia CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.expediagroup.com/privacy-policy/default.aspx" },
|
|
223
|
+
"cdn.feeld.co": { "company": "Feeld", "service": "Feeld CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://feeld.co/privacy-policy" },
|
|
224
|
+
"cdn.ferrari.com": { "company": "Ferrari", "service": "Ferrari CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.ferrari.com/en-EN/privacy" },
|
|
225
|
+
"cdn.figma.com": { "company": "Figma", "service": "Figma Design CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.figma.com/privacy/" },
|
|
226
|
+
"cdn.finnair.com": { "company": "Finnair", "service": "Finnair CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.finnair.com/en/info/finnair-privacy-policy" },
|
|
227
|
+
"cdn.firebase.com": { "company": "Google", "service": "Firebase Hosting CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://firebase.google.com/support/privacy" },
|
|
228
|
+
"cdn.fitbit.com": { "company": "Google/Fitbit", "service": "Fitbit CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.fitbit.com/legal/privacy-policy" },
|
|
229
|
+
"cdn.flipkart.com": { "company": "Flipkart (Walmart)", "service": "Flipkart CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.flipkart.com/pages/privacypolicy" },
|
|
230
|
+
"cdn.flowplayer.com": { "company": "Flowplayer", "service": "Flowplayer Video CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://flowplayer.com/privacy-policy" },
|
|
231
|
+
"cdn.flypgs.com": { "company": "Pegasus Airlines", "service": "Pegasus CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.flypgs.com/en/privacy-policy" },
|
|
232
|
+
"cdn.fnac.com": { "company": "Fnac Darty", "service": "Fnac CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.fnac.com/politique-de-confidentialite" },
|
|
233
|
+
"cdn.fontawesome.com": { "company": "Fonticons/Font Awesome", "service": "Font Awesome CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Font Awesome icon CDN — leaks visitor IP for each icon font or SVG sprite request", "docs_url": "https://fontawesome.com/privacy" },
|
|
234
|
+
"cdn.fontshare.com": { "company": "Indian Type Foundry", "service": "Fontshare CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Fontshare free font CDN leaking visitor IP for web font delivery", "docs_url": "https://www.fontshare.com/" },
|
|
235
|
+
"cdn.fontsource.org": { "company": "Fontsource", "service": "Fontsource CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Fontsource open-source font CDN leaking visitor IP for self-hosted Google Fonts alternatives", "docs_url": "https://fontsource.org/" },
|
|
236
|
+
"cdn.ford.com": { "company": "Ford Motor Company", "service": "Ford CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.ford.com/help/privacy/" },
|
|
237
|
+
"cdn.forms.hsforms.com": { "company": "HubSpot", "service": "HubSpot Forms CDN", "category": "data_leak", "consent_burden": "required", "note": "HubSpot forms CDN — leaks visitor IP and loads tracking scripts alongside form widgets", "docs_url": "https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser" },
|
|
238
|
+
"cdn.freshchat.com": { "company": "Freshworks", "service": "Freshchat CDN", "category": "data_leak", "consent_burden": "contested", "note": "Freshchat messaging CDN leaking visitor IP for customer support widget delivery", "docs_url": "https://www.freshworks.com/privacy/" },
|
|
239
|
+
"cdn.fressnapf.de": { "company": "Fressnapf", "service": "Fressnapf CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.fressnapf.de/datenschutz" },
|
|
240
|
+
"cdn.funda.nl": { "company": "Funda", "service": "Funda CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.funda.nl/privacy/" },
|
|
241
|
+
"cdn.garmin.com": { "company": "Garmin", "service": "Garmin Connect CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.garmin.com/en-US/privacy/connect/" },
|
|
242
|
+
"cdn.generali.com": { "company": "Generali", "service": "Generali CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.generali.com/info/privacy" },
|
|
243
|
+
"cdn.genesis.com": { "company": "Hyundai/Genesis", "service": "Genesis CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.genesis.com/us/en/privacy-policy.html" },
|
|
244
|
+
"cdn.getir.com": { "company": "Getir", "service": "Getir CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://getir.com/en/privacy-policy/" },
|
|
245
|
+
"cdn.gettyimages.com": { "company": "Getty Images", "service": "Getty Images CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.gettyimages.com/company/privacy-policy" },
|
|
246
|
+
"cdn.getyourguide.com": { "company": "GetYourGuide", "service": "GetYourGuide CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.getyourguide.com/privacy_policy" },
|
|
247
|
+
"cdn.ghost.io": { "company": "Ghost", "service": "Ghost CMS CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Ghost CMS platform CDN — leaks visitor IP when loading Ghost-hosted blog assets", "docs_url": "https://ghost.org/privacy/" },
|
|
248
|
+
"cdn.ghost.org": { "company": "Ghost", "service": "Ghost CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://ghost.org/privacy/" },
|
|
249
|
+
"cdn.github.com": { "company": "GitHub (Microsoft)", "service": "GitHub CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://docs.github.com/en/site-policy/privacy-policies" },
|
|
250
|
+
"cdn.gitlab.com": { "company": "GitLab", "service": "GitLab CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://about.gitlab.com/privacy/" },
|
|
251
|
+
"cdn.glovoapp.com": { "company": "Glovo", "service": "Glovo CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://glovoapp.com/en/legal/privacy/" },
|
|
252
|
+
"cdn.gopuff.com": { "company": "Gopuff", "service": "Gopuff CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://gopuff.com/privacy" },
|
|
253
|
+
"cdn.grab.com": { "company": "Grab", "service": "Grab CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.grab.com/sg/privacy/" },
|
|
254
|
+
"cdn.greenhouse.io": { "company": "Greenhouse", "service": "Greenhouse ATS CDN", "category": "data_leak", "consent_burden": "contested", "note": "Greenhouse career page widget — leaks candidate IP when viewing job listings", "docs_url": "https://www.greenhouse.com/privacy-policy" },
|
|
255
|
+
"cdn.grindr.com": { "company": "Grindr", "service": "Grindr CDN", "category": "data_leak", "consent_burden": "required", "note": "Grindr CDN — LGBTQ+ dating app CDN leaking user IP and potentially sensitive identity information", "docs_url": "https://www.grindr.com/privacy-policy/" },
|
|
256
|
+
"cdn.gumroad.com": { "company": "Gumroad", "service": "Gumroad Widget CDN", "category": "data_leak", "consent_burden": "contested", "note": "Gumroad digital sales widget CDN leaking visitor IP for product overlay delivery", "docs_url": "https://gumroad.com/privacy" },
|
|
257
|
+
"cdn.happn.com": { "company": "Happn", "service": "Happn CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.happn.com/en/privacy/" },
|
|
258
|
+
"cdn.hashnode.com": { "company": "Hashnode", "service": "Hashnode CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://hashnode.com/privacy" },
|
|
259
|
+
"cdn.headwayapp.co": { "company": "Headway", "service": "Headway Changelog CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Headway changelog widget CDN leaking visitor IP for badge rendering", "docs_url": "https://headwayapp.co/privacy" },
|
|
260
|
+
"cdn.heapanalytics.com": { "company": "Heap", "service": "Heap Analytics CDN", "category": "data_leak", "consent_burden": "required", "note": "Heap auto-capture analytics CDN — automatically records all clicks, form inputs, and page views", "docs_url": "https://heap.io/privacy" },
|
|
261
|
+
"cdn.here.com": { "company": "HERE Technologies", "service": "HERE Maps", "category": "data_leak", "consent_burden": "contested", "note": "HERE Maps embedded widget transmits visitor IP to HERE Technologies", "docs_url": "https://legal.here.com/privacy" },
|
|
262
|
+
"cdn.hertz.com": { "company": "Hertz", "service": "Hertz CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.hertz.com/rentacar/privacypolicy" },
|
|
263
|
+
"cdn.hilton.com": { "company": "Hilton", "service": "Hilton CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.hilton.com/en/corporate/privacy/" },
|
|
264
|
+
"cdn.hinge.co": { "company": "Match Group/Hinge", "service": "Hinge CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://hinge.co/privacy" },
|
|
265
|
+
"cdn.hoka.com": { "company": "Deckers (Hoka)", "service": "Hoka CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.hoka.com/en/us/privacy-policy.html" },
|
|
266
|
+
"cdn.honda.com": { "company": "Honda", "service": "Honda CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.honda.com/privacy" },
|
|
267
|
+
"cdn.hornbach.com": { "company": "Hornbach", "service": "Hornbach CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.hornbach.com/datenschutz/" },
|
|
268
|
+
"cdn.hotels.com": { "company": "Expedia Group", "service": "Hotels.com CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.hotels.com/page/privacy/" },
|
|
269
|
+
"cdn.hyatt.com": { "company": "Hyatt", "service": "Hyatt CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.hyatt.com/en-US/info/privacy-policy" },
|
|
270
|
+
"cdn.hygraph.com": { "company": "Hygraph", "service": "Hygraph CMS CDN", "category": "data_leak", "consent_burden": "minimal", "note": "GraphQL headless CMS CDN — leaks visitor IP when loading content and media assets", "docs_url": "https://hygraph.com/privacy" },
|
|
271
|
+
"cdn.hyundai.com": { "company": "Hyundai", "service": "Hyundai CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.hyundai.com/worldwide/en/privacy-policy" },
|
|
272
|
+
"cdn.iberia.com": { "company": "Iberia", "service": "Iberia CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.iberia.com/gb/en/footer/legal-notice/privacy-policy/" },
|
|
273
|
+
"cdn.icomoon.io": { "company": "IcoMoon", "service": "IcoMoon Icon CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://icomoon.io/" },
|
|
274
|
+
"cdn.idealista.com": { "company": "Idealista", "service": "Idealista CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.idealista.com/privacy-policy/" },
|
|
275
|
+
"cdn.ifood.com.br": { "company": "iFood", "service": "iFood CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://institucional.ifood.com.br/privacidade" },
|
|
276
|
+
"cdn.iframe.ly": { "company": "Iframely", "service": "Iframely Embed Proxy", "category": "data_leak", "consent_burden": "contested", "note": "Iframely proxies embed requests, exposing visitor IP to Iframely servers", "docs_url": "https://iframely.com/privacy" },
|
|
277
|
+
"cdn.ikea.com": { "company": "IKEA (Ingka Group)", "service": "IKEA CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.ikea.com/us/en/customer-service/privacy-policy/" },
|
|
278
|
+
"cdn.immobilienscout24.de": { "company": "ImmobilienScout24 (Scout24)", "service": "ImmobilienScout24 CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.immobilienscout24.de/agb/datenschutz.html" },
|
|
279
|
+
"cdn.instacart.com": { "company": "Instacart", "service": "Instacart CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.instacart.com/privacy" },
|
|
280
|
+
"cdn.instatus.com": { "company": "Instatus", "service": "Instatus Status Page Widget", "category": "data_leak", "consent_burden": "minimal", "note": "Instatus status page widget — leaks visitor IP to third-party status monitoring service", "docs_url": "https://instatus.com/privacy" },
|
|
281
|
+
"cdn.iubenda.com/cs": { "company": "Iubenda", "service": "Iubenda Cookie Solution", "category": "data_leak", "consent_burden": "minimal", "note": "Iubenda cookie solution script CDN — even privacy tools leak visitor IP to third parties", "docs_url": "https://www.iubenda.com/privacy-policy" },
|
|
282
|
+
"cdn.jsdelivr.net": { "company": "jsDelivr", "service": "jsDelivr Open Source CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Open-source CDN backed by Cloudflare and Fastly — leaks visitor IP when loading JavaScript libraries; used by millions of websites", "docs_url": "https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net" },
|
|
283
|
+
"cdn.jsdelivr.net/npm/alpinejs": { "company": "jsDelivr (Prospect One)", "service": "Alpine.js CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net" },
|
|
284
|
+
"cdn.jsdelivr.net/npm/bootstrap": { "company": "jsDelivr (Prospect One)", "service": "Bootstrap CSS/JS CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net" },
|
|
285
|
+
"cdn.jsdelivr.net/npm/vue": { "company": "jsDelivr (Prospect One)", "service": "Vue.js CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Loading Vue.js from jsDelivr CDN leaks visitor IP to Prospect One infrastructure", "docs_url": "https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net" },
|
|
286
|
+
"cdn.jumia.com": { "company": "Jumia", "service": "Jumia CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.jumia.com/sp-privacy/" },
|
|
287
|
+
"cdn.just-eat.com": { "company": "Just Eat Takeaway", "service": "Just Eat CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.just-eat.co.uk/privacy-policy" },
|
|
288
|
+
"cdn.justeat.com": { "company": "Just Eat Takeaway", "service": "Just Eat CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.justeattakeaway.com/privacy-statement" },
|
|
289
|
+
"cdn.jwplayer.com": { "company": "JW Player", "service": "JW Player Video CDN", "category": "data_leak", "consent_burden": "contested", "note": "JW Player embedded video player leaks viewer IP and watch data to JW Player", "docs_url": "https://www.jwplayer.com/privacy-policy/" },
|
|
290
|
+
"cdn.katex.org": { "company": "KaTeX", "service": "KaTeX Math CDN", "category": "data_leak", "consent_burden": "minimal", "note": "KaTeX fast math rendering CDN leaking visitor IP for equation display", "docs_url": "https://katex.org/" },
|
|
291
|
+
"cdn.keycdn.com": { "company": "KeyCDN (proinity)", "service": "KeyCDN Swiss CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Swiss CDN provider — leaks visitor IP for content delivery but operates under Swiss privacy law", "docs_url": "https://www.keycdn.com/privacy" },
|
|
292
|
+
"cdn.kfc.com": { "company": "Yum! Brands", "service": "KFC CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.kfc.com/privacy-policy" },
|
|
293
|
+
"cdn.klook.com": { "company": "Klook", "service": "Klook CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.klook.com/policy/" },
|
|
294
|
+
"cdn.knightlab.com": { "company": "Knight Lab", "service": "Knight Lab Timeline/StoryMap", "category": "data_leak", "consent_burden": "minimal", "note": "Northwestern Knight Lab embeds leak visitor IP for timeline and map rendering", "docs_url": "https://knightlab.northwestern.edu/privacy-policy/" },
|
|
295
|
+
"cdn.ko-fi.com": { "company": "Ko-fi", "service": "Ko-fi Widget", "category": "data_leak", "consent_burden": "contested", "note": "Ko-fi donation widget CDN leaking visitor IP for support button delivery", "docs_url": "https://ko-fi.com/privacy" },
|
|
296
|
+
"cdn.kustomer.com": { "company": "Meta/Kustomer", "service": "Kustomer Chat CDN", "category": "data_leak", "consent_burden": "contested", "note": "Kustomer (Meta) customer service widget CDN leaking visitor IP for chat widget delivery", "docs_url": "https://www.kustomer.com/privacy/" },
|
|
297
|
+
"cdn.kvk.nl": { "company": "KVK (Dutch Chamber of Commerce)", "service": "KVK CDN", "category": "data_leak", "consent_burden": "contested", "note": "Dutch Chamber of Commerce CDN leaking business visitor IP for portal delivery", "docs_url": "https://www.kvk.nl/privacy/" },
|
|
298
|
+
"cdn.lazada.com": { "company": "Lazada (Alibaba)", "service": "Lazada CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.lazada.com/en/privacy-policy/" },
|
|
299
|
+
"cdn.leclerc.fr": { "company": "E.Leclerc", "service": "E.Leclerc CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.e-leclerc.com/politique-de-confidentialite" },
|
|
300
|
+
"cdn.ledger.com": { "company": "Ledger", "service": "Ledger CDN", "category": "data_leak", "consent_burden": "contested", "note": "Ledger hardware wallet CDN leaking visitor IP for shop and support asset delivery", "docs_url": "https://www.ledger.com/privacy-policy" },
|
|
301
|
+
"cdn.lemonade.com": { "company": "Lemonade", "service": "Lemonade CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.lemonade.com/privacy" },
|
|
302
|
+
"cdn.lemonsqueezy.com": { "company": "Lemon Squeezy", "service": "Lemon Squeezy Widget", "category": "data_leak", "consent_burden": "contested", "note": "Lemon Squeezy checkout overlay CDN leaking visitor IP for payment widget delivery", "docs_url": "https://www.lemonsqueezy.com/privacy" },
|
|
303
|
+
"cdn.leroymerlin.fr": { "company": "Leroy Merlin (Adeo)", "service": "Leroy Merlin CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.leroymerlin.fr/donnees-personnelles-cookies.html" },
|
|
304
|
+
"cdn.lever.co": { "company": "Lever", "service": "Lever ATS CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.lever.co/privacy/" },
|
|
305
|
+
"cdn.lidl.com": { "company": "Lidl (Schwarz Group)", "service": "Lidl CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.lidl.com/privacy-policy" },
|
|
306
|
+
"cdn.linear.app": { "company": "Linear", "service": "Linear CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://linear.app/privacy" },
|
|
307
|
+
"cdn.linearicons.com": { "company": "Perxis", "service": "Linearicons Icon Font CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Icon font CDN — leaks visitor IP for each icon font request; consider self-hosting", "docs_url": "https://linearicons.com/" },
|
|
308
|
+
"cdn.livekit.io": { "company": "LiveKit", "service": "LiveKit Video CDN", "category": "data_leak", "consent_burden": "contested", "note": "WebRTC video infrastructure CDN — leaks participant IP for real-time video and audio delivery", "docs_url": "https://livekit.io/privacy" },
|
|
309
|
+
"cdn.loom.com": { "company": "Atlassian/Loom", "service": "Loom CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.loom.com/privacy-policy" },
|
|
310
|
+
"cdn.loom.com/assets": { "company": "Atlassian/Loom", "service": "Loom Video Assets", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.loom.com/privacy-policy" },
|
|
311
|
+
"cdn.lotame.com/tag.js": { "company": "Lotame", "service": "Lotame DMP Tag", "category": "data_leak", "consent_burden": "required_strict", "note": "Lotame data management platform tag — leaks visitor IP and behavioral data for audience segment building and data marketplace trading", "docs_url": "https://www.lotame.com/about-lotame/privacy/" },
|
|
312
|
+
"cdn.lr-in-prod.com": { "company": "LogRocket", "service": "LogRocket CDN", "category": "data_leak", "consent_burden": "required", "note": "LogRocket session recording CDN — loads script that records all user interactions, DOM state, and network requests", "docs_url": "https://logrocket.com/privacy/" },
|
|
313
|
+
"cdn.lucidmotors.com": { "company": "Lucid Motors", "service": "Lucid CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.lucidmotors.com/privacy-policy" },
|
|
314
|
+
"cdn.magento.com": { "company": "Adobe/Magento", "service": "Magento CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.adobe.com/privacy/policy.html" },
|
|
315
|
+
"cdn.maptiler.com": { "company": "MapTiler", "service": "MapTiler Maps", "category": "data_leak", "consent_burden": "contested", "note": "MapTiler map CDN — leaks visitor IP for each map tile request", "docs_url": "https://www.maptiler.com/privacy-policy/" },
|
|
316
|
+
"cdn.marriott.com": { "company": "Marriott International", "service": "Marriott CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.marriott.com/about/privacy.mi" },
|
|
317
|
+
"cdn.materialdesignicons.com": { "company": "Pictogrammers", "service": "Material Design Icons CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://pictogrammers.com/" },
|
|
318
|
+
"cdn.mathjax.org": { "company": "MathJax", "service": "MathJax CDN", "category": "data_leak", "consent_burden": "minimal", "note": "MathJax mathematical notation CDN leaking visitor IP for LaTeX rendering", "docs_url": "https://www.mathjax.org/privacy/" },
|
|
319
|
+
"cdn.matterport.com": { "company": "Matterport", "service": "Matterport 3D Tour CDN", "category": "data_leak", "consent_burden": "contested", "note": "Matterport embedded 3D tours transmit viewer IP and interaction data", "docs_url": "https://matterport.com/privacy-policy" },
|
|
320
|
+
"cdn.matterport.com/models": { "company": "Matterport", "service": "Matterport 3D Model CDN", "category": "data_leak", "consent_burden": "contested", "note": "Matterport 3D model CDN leaking visitor IP for virtual tour asset delivery", "docs_url": "https://matterport.com/privacy-policy" },
|
|
321
|
+
"cdn.mcdonalds.com": { "company": "McDonald's", "service": "McDonald's CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.mcdonalds.com/us/en-us/privacy.html" },
|
|
322
|
+
"cdn.mediamarkt.de": { "company": "MediaMarktSaturn", "service": "MediaMarkt CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.mediamarkt.de/de/shop/datenschutz.html" },
|
|
323
|
+
"cdn.medium.com": { "company": "Medium", "service": "Medium CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://policy.medium.com/medium-privacy-policy-f03bf92035c9" },
|
|
324
|
+
"cdn.meetic.fr": { "company": "Match Group/Meetic", "service": "Meetic CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.meetic.fr/pages/misc/privacy/" },
|
|
325
|
+
"cdn.meetup.com": { "company": "Meetup (Bending Spoons)", "service": "Meetup CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.meetup.com/privacy/" },
|
|
326
|
+
"cdn.mercadolibre.com": { "company": "MercadoLibre", "service": "MercadoLibre CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.mercadolibre.com/privacy" },
|
|
327
|
+
"cdn.mercadona.es": { "company": "Mercadona", "service": "Mercadona CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.mercadona.es/politica-de-privacidad" },
|
|
328
|
+
"cdn.mercedes-benz.com": { "company": "Mercedes-Benz", "service": "Mercedes-Benz CDN", "category": "data_leak", "consent_burden": "contested", "note": "Mercedes-Benz asset CDN leaking visitor IP for configurator and dealer locator content", "docs_url": "https://www.mercedes-benz.com/en/privacy/" },
|
|
329
|
+
"cdn.metamask.io": { "company": "Consensys/MetaMask", "service": "MetaMask CDN", "category": "data_leak", "consent_burden": "contested", "note": "MetaMask wallet CDN leaking visitor IP for portfolio and bridge interface delivery", "docs_url": "https://consensys.io/privacy-policy" },
|
|
330
|
+
"cdn.midjourney.com": { "company": "Midjourney", "service": "Midjourney AI", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://docs.midjourney.com/docs/privacy-policy" },
|
|
331
|
+
"cdn.monzo.com": { "company": "Monzo", "service": "Monzo CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://monzo.com/legal/privacy-notice" },
|
|
332
|
+
"cdn.mouseflow.com": { "company": "Mouseflow", "service": "Mouseflow CDN", "category": "data_leak", "consent_burden": "required", "note": "Mouseflow session recording CDN — leaks visitor IP; records mouse movements, clicks, and form interactions", "docs_url": "https://mouseflow.com/privacy/" },
|
|
333
|
+
"cdn.mux.com": { "company": "Mux", "service": "Mux Video CDN", "category": "data_leak", "consent_burden": "contested", "note": "Video streaming infrastructure CDN — tracks video playback quality, viewer IP, and engagement metrics", "docs_url": "https://mux.com/privacy" },
|
|
334
|
+
"cdn.mxpnl.com": { "company": "Mixpanel", "service": "Mixpanel CDN", "category": "data_leak", "consent_burden": "required", "note": "Mixpanel analytics SDK CDN — leaks visitor IP to Mixpanel infrastructure on script load", "docs_url": "https://mixpanel.com/legal/privacy-policy/" },
|
|
335
|
+
"cdn.n26.com": { "company": "N26", "service": "N26 CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://n26.com/en-eu/privacy-policy" },
|
|
336
|
+
"cdn.nandos.com": { "company": "Nando's", "service": "Nando's CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.nandos.com/privacy" },
|
|
337
|
+
"cdn.netlify.com": { "company": "Netlify", "service": "Netlify Assets CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.netlify.com/privacy/" },
|
|
338
|
+
"cdn.nextdoor.com": { "company": "Nextdoor", "service": "Nextdoor CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://help.nextdoor.com/s/article/Privacy-Policy" },
|
|
339
|
+
"cdn.nhhotels.com": { "company": "NH Hotels (Minor International)", "service": "NH Hotels CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.nh-hotels.com/corporate/privacy-policy" },
|
|
340
|
+
"cdn.nike.com": { "company": "Nike", "service": "Nike CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://agreementservice.svs.nike.com/us/en_us/rest/privacy" },
|
|
341
|
+
"cdn.nio.com": { "company": "NIO", "service": "NIO CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.nio.com/privacy-policy" },
|
|
342
|
+
"cdn.nissan.com": { "company": "Nissan", "service": "Nissan CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.nissan.com/privacy-policy.html" },
|
|
343
|
+
"cdn.norwegian.com": { "company": "Norwegian Air Shuttle", "service": "Norwegian CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.norwegian.com/en/about/privacy-policy/" },
|
|
344
|
+
"cdn.notion.so": { "company": "Notion", "service": "Notion CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.notion.so/Privacy-Policy-3468d120cf614d4c9014c09f6adc9091" },
|
|
345
|
+
"cdn.npmjs.com": { "company": "GitHub (Microsoft)", "service": "npm CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://docs.npmjs.com/policies/privacy" },
|
|
346
|
+
"cdn.nr-data.net": { "company": "New Relic", "service": "New Relic Browser Agent", "category": "data_leak", "consent_burden": "contested", "note": "New Relic browser monitoring agent CDN — collects page load metrics and JavaScript error data", "docs_url": "https://newrelic.com/termsandconditions/privacy" },
|
|
347
|
+
"cdn.o2.co.uk": { "company": "O2 (Telefonica UK)", "service": "O2 CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.o2.co.uk/termsandconditions/privacy-policy" },
|
|
348
|
+
"cdn.oai.azure.com": { "company": "Microsoft", "service": "Azure OpenAI CDN", "category": "data_leak", "consent_burden": "required", "note": "Azure OpenAI Service CDN — hosts AI model endpoints; visitor IP and prompts sent to Microsoft Azure", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
349
|
+
"cdn.ocado.com": { "company": "Ocado", "service": "Ocado CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.ocado.com/content/privacy-policy" },
|
|
350
|
+
"cdn.okcupid.com": { "company": "Match Group/OkCupid", "service": "OkCupid CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.okcupid.com/legal/privacy" },
|
|
351
|
+
"cdn.olark.com": { "company": "Olark", "service": "Olark Chat CDN", "category": "data_leak", "consent_burden": "contested", "note": "Olark live chat CDN leaking visitor IP for support chat widget delivery", "docs_url": "https://www.olark.com/privacy-policy/" },
|
|
352
|
+
"cdn.on-running.com": { "company": "On", "service": "On Running CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.on-running.com/en-us/legal/privacy" },
|
|
353
|
+
"cdn.onesignal.com": { "company": "OneSignal", "service": "OneSignal Push CDN", "category": "data_leak", "consent_burden": "contested", "note": "OneSignal web push notification CDN — leaks visitor IP for subscriber identification", "docs_url": "https://onesignal.com/privacy_policy" },
|
|
354
|
+
"cdn.onetrust.com": { "company": "OneTrust", "service": "OneTrust Cookie Banner CDN", "category": "data_leak", "consent_burden": "minimal", "note": "OneTrust consent banner CDN leaking visitor IP before consent is obtained", "docs_url": "https://www.onetrust.com/privacy/" },
|
|
355
|
+
"cdn.openai.com": { "company": "OpenAI", "service": "OpenAI CDN", "category": "data_leak", "consent_burden": "contested", "note": "OpenAI CDN for ChatGPT widget and API resources — leaks visitor IP to OpenAI", "docs_url": "https://openai.com/policies/privacy-policy" },
|
|
356
|
+
"cdn.optimizely.com": { "company": "Optimizely", "service": "Optimizely CDN", "category": "data_leak", "consent_burden": "contested", "note": "Optimizely experimentation SDK CDN — leaks visitor IP and loads A/B test configuration", "docs_url": "https://www.optimizely.com/legal/privacy-policy/" },
|
|
357
|
+
"cdn.paddle.com": { "company": "Paddle", "service": "Paddle Checkout CDN", "category": "data_leak", "consent_burden": "contested", "note": "Paddle SaaS payment checkout CDN leaking visitor IP for subscription overlay delivery", "docs_url": "https://paddle.com/privacy/" },
|
|
358
|
+
"cdn.pandora.net": { "company": "Pandora Jewelry", "service": "Pandora CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.pandora.net/en/privacy-policy" },
|
|
359
|
+
"cdn.parship.com": { "company": "Parship Group", "service": "Parship CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.parship.com/privacypolicy" },
|
|
360
|
+
"cdn.patagonia.com": { "company": "Patagonia", "service": "Patagonia CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.patagonia.com/privacy-policy.html" },
|
|
361
|
+
"cdn.patreon.com": { "company": "Patreon", "service": "Patreon Widget CDN", "category": "data_leak", "consent_burden": "contested", "note": "Patreon creator widget CDN leaking visitor IP for membership button delivery", "docs_url": "https://privacy.patreon.com/policies" },
|
|
362
|
+
"cdn.peloton.com": { "company": "Peloton", "service": "Peloton CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.onepeloton.com/privacy-policy" },
|
|
363
|
+
"cdn.pendo.io": { "company": "Pendo", "service": "Pendo Analytics CDN", "category": "data_leak", "consent_burden": "contested", "note": "Pendo product analytics CDN leaking visitor IP for in-app guide delivery", "docs_url": "https://www.pendo.io/legal/privacy-policy/" },
|
|
364
|
+
"cdn.petsathome.com": { "company": "Pets at Home", "service": "Pets at Home CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.petsathome.com/privacy-policy" },
|
|
365
|
+
"cdn.pexels.com": { "company": "Canva/Pexels", "service": "Pexels Image CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Pexels free stock photo CDN leaking visitor IP for image delivery", "docs_url": "https://www.pexels.com/privacy-policy/" },
|
|
366
|
+
"cdn.phantom.app": { "company": "Phantom", "service": "Phantom Wallet CDN", "category": "data_leak", "consent_burden": "contested", "note": "Phantom Solana wallet CDN leaking visitor IP for web app delivery", "docs_url": "https://phantom.app/privacy" },
|
|
367
|
+
"cdn.pixabay.com": { "company": "Canva/Pixabay", "service": "Pixabay Image CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Pixabay free media CDN leaking visitor IP for image delivery", "docs_url": "https://pixabay.com/service/privacy/" },
|
|
368
|
+
"cdn.plot.ly": { "company": "Plotly", "service": "Plotly Chart CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Plotly data visualization CDN leaking visitor IP for chart rendering", "docs_url": "https://plotly.com/privacy/" },
|
|
369
|
+
"cdn.plyr.io": { "company": "Plyr", "service": "Plyr Video Player CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://plyr.io/privacy" },
|
|
370
|
+
"cdn.pole-emploi.fr": { "company": "France Travail (Pôle Emploi)", "service": "France Travail CDN", "category": "data_leak", "consent_burden": "required", "note": "French employment agency CDN leaking jobseeker IP for portal asset delivery", "docs_url": "https://www.francetravail.fr/informations-legales/protection-des-donnees-a-caractere.html" },
|
|
371
|
+
"cdn.polestar.com": { "company": "Polestar (Geely/Volvo)", "service": "Polestar CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.polestar.com/global/legal/privacy/" },
|
|
372
|
+
"cdn.polyfill.io": { "company": "Funnull (polyfill.io)", "service": "Polyfill.io CDN", "category": "data_leak", "consent_burden": "required_strict", "note": "SUPPLY CHAIN RISK: polyfill.io was acquired by a Chinese company (Funnull) and caught injecting malicious redirects. Do NOT use — switch to cdnjs or self-host polyfills.", "docs_url": "https://sansec.io/research/polyfill-supply-chain-attack" },
|
|
373
|
+
"cdn.porsche.com": { "company": "Volkswagen Group/Porsche", "service": "Porsche CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.porsche.com/privacy/" },
|
|
374
|
+
"cdn.prestashop.com": { "company": "PrestaShop", "service": "PrestaShop CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.prestashop.com/en/privacy-policy" },
|
|
375
|
+
"cdn.prismic.io": { "company": "Prismic", "service": "Prismic CMS CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Prismic headless CMS CDN — leaks visitor IP for content delivery", "docs_url": "https://prismic.io/privacy" },
|
|
376
|
+
"cdn.producthunt.com": { "company": "Product Hunt", "service": "Product Hunt CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.producthunt.com/privacy" },
|
|
377
|
+
"cdn.quilljs.com": { "company": "Quill", "service": "Quill Editor CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://quilljs.com/" },
|
|
378
|
+
"cdn.quora.com": { "company": "Quora", "service": "Quora CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.quora.com/about/privacy" },
|
|
379
|
+
"cdn.radissonhotels.com": { "company": "Radisson Hotel Group", "service": "Radisson CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.radissonhotels.com/en-us/privacy" },
|
|
380
|
+
"cdn.rappi.com": { "company": "Rappi", "service": "Rappi CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://legal.rappi.com/privacy/" },
|
|
381
|
+
"cdn.recurly.com": { "company": "Recurly", "service": "Recurly Checkout CDN", "category": "data_leak", "consent_burden": "contested", "note": "Recurly subscription billing CDN leaking visitor IP for checkout form delivery", "docs_url": "https://recurly.com/legal/privacy/" },
|
|
382
|
+
"cdn.reddit.com": { "company": "Reddit", "service": "Reddit Assets CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.redditinc.com/policies/cookies" },
|
|
383
|
+
"cdn.renault.com": { "company": "Renault Group", "service": "Renault CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.renaultgroup.com/en/privacy-policy/" },
|
|
384
|
+
"cdn.render.com": { "company": "Render", "service": "Render CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://render.com/privacy" },
|
|
385
|
+
"cdn.revolut.com": { "company": "Revolut", "service": "Revolut CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.revolut.com/legal/privacy/" },
|
|
386
|
+
"cdn.rewe.de": { "company": "REWE", "service": "REWE CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.rewe.de/datenschutz/" },
|
|
387
|
+
"cdn.rightmove.co.uk": { "company": "Rightmove", "service": "Rightmove CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.rightmove.co.uk/this-site/privacy-policy.html" },
|
|
388
|
+
"cdn.rivian.com": { "company": "Rivian", "service": "Rivian CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://rivian.com/legal/privacy-policy" },
|
|
389
|
+
"cdn.robinhood.com": { "company": "Robinhood", "service": "Robinhood CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://robinhood.com/us/en/about/legal/" },
|
|
390
|
+
"cdn.rollbar.com": { "company": "Rollbar", "service": "Rollbar Error Tracking", "category": "data_leak", "consent_burden": "contested", "note": "Rollbar error tracking CDN — error payloads may contain PII, session data, and visitor IP", "docs_url": "https://rollbar.com/privacy/" },
|
|
391
|
+
"cdn.rossmann.de": { "company": "Rossmann", "service": "Rossmann CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.rossmann.de/datenschutz" },
|
|
392
|
+
"cdn.rudderlabs.com": { "company": "RudderStack", "service": "RudderStack CDP CDN", "category": "data_leak", "consent_burden": "required", "note": "RudderStack open-source CDP SDK CDN — data pipeline that routes visitor data to downstream destinations", "docs_url": "https://www.rudderstack.com/privacy-policy/" },
|
|
393
|
+
"cdn.ryanair.com": { "company": "Ryanair", "service": "Ryanair CDN", "category": "data_leak", "consent_burden": "contested", "note": "Ryanair asset CDN leaking visitor IP for flight booking page delivery", "docs_url": "https://www.ryanair.com/gb/en/corporate/privacy-policy" },
|
|
394
|
+
"cdn.sainsburys.co.uk": { "company": "Sainsbury's", "service": "Sainsbury's CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.sainsburys.co.uk/shop/gb/groceries/get-ideas/about-us/privacy-policy" },
|
|
395
|
+
"cdn.salomon.com": { "company": "Amer Sports", "service": "Salomon CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.salomon.com/en-us/privacy-policy" },
|
|
396
|
+
"cdn.sanity.io": { "company": "Sanity", "service": "Sanity CMS CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Sanity headless CMS CDN — leaks visitor IP for image and asset delivery", "docs_url": "https://www.sanity.io/legal/privacy" },
|
|
397
|
+
"cdn.segment.com": { "company": "Twilio (Segment)", "service": "Segment CDP CDN", "category": "data_leak", "consent_burden": "required", "note": "Segment CDP JavaScript CDN — loads the data pipeline that fans out visitor data to dozens of downstream tools", "docs_url": "https://segment.com/legal/privacy/" },
|
|
398
|
+
"cdn.segment.io": { "company": "Twilio", "service": "Segment Analytics CDN", "category": "data_leak", "consent_burden": "contested", "note": "Segment CDP CDN leaking visitor IP for analytics script delivery", "docs_url": "https://segment.com/legal/privacy/" },
|
|
399
|
+
"cdn.seloger.com": { "company": "SeLoger (Aviv/Axel Springer)", "service": "SeLoger CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.seloger.com/protection-des-donnees.htm" },
|
|
400
|
+
"cdn.sentry.io": { "company": "Sentry", "service": "Sentry Error Tracking CDN", "category": "data_leak", "consent_burden": "contested", "note": "Sentry error monitoring CDN — error reports contain visitor IP, browser info, and potentially PII from error context", "docs_url": "https://sentry.io/privacy/" },
|
|
401
|
+
"cdn.shein.com": { "company": "Shein", "service": "Shein CDN", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.shein.com/Privacy-Policy-a-282.html" },
|
|
402
|
+
"cdn.shopee.com": { "company": "Shopee (Sea Group)", "service": "Shopee CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://shopee.com/docs/3600" },
|
|
403
|
+
"cdn.shopify.com": { "company": "Shopify", "service": "Shopify CDN", "category": "data_leak", "consent_burden": "contested", "note": "Shopify store asset CDN — leaks visitor IP to Shopify infrastructure", "docs_url": "https://www.shopify.com/legal/privacy" },
|
|
404
|
+
"cdn.shopifycloud.com": { "company": "Shopify", "service": "Shopify Cloud CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.shopify.com/legal/cookies" },
|
|
405
|
+
"cdn.shutterstock.com": { "company": "Shutterstock", "service": "Shutterstock CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.shutterstock.com/privacy" },
|
|
406
|
+
"cdn.sixt.com": { "company": "Sixt", "service": "Sixt CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.sixt.com/privacy-policy/" },
|
|
407
|
+
"cdn.sketch.com": { "company": "Sketch", "service": "Sketch Cloud CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.sketch.com/privacy/" },
|
|
408
|
+
"cdn.skypack.dev": { "company": "Skypack (Snowpack)", "service": "Skypack CDN", "category": "data_leak", "consent_burden": "minimal", "note": "JavaScript package CDN — leaks visitor IP for each module import", "docs_url": "https://www.skypack.dev/" },
|
|
409
|
+
"cdn.socket.io": { "company": "Socket.IO", "service": "Socket.IO CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Socket.IO client library CDN; leaks visitor IP on load", "docs_url": "https://socket.io/" },
|
|
410
|
+
"cdn.sofi.com": { "company": "SoFi", "service": "SoFi CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.sofi.com/privacy/" },
|
|
411
|
+
"cdn.soundcloud.com": { "company": "SoundCloud", "service": "SoundCloud CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://soundcloud.com/pages/cookies" },
|
|
412
|
+
"cdn.speedcurve.com": { "company": "SpeedCurve", "service": "SpeedCurve LUX RUM", "category": "data_leak", "consent_burden": "contested", "note": "SpeedCurve LUX real user monitoring — collects page load performance data and visitor IP", "docs_url": "https://speedcurve.com/privacy/" },
|
|
413
|
+
"cdn.spotify.com": { "company": "Spotify", "service": "Spotify CDN Extended", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.spotify.com/legal/cookies-policy/" },
|
|
414
|
+
"cdn.squarespace.com": { "company": "Squarespace", "service": "Squarespace CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.squarespace.com/privacy" },
|
|
415
|
+
"cdn.sstatic.net": { "company": "Stack Overflow (Prosus)", "service": "Stack Exchange CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://stackoverflow.com/legal/privacy-policy" },
|
|
416
|
+
"cdn.stackoverflow.com": { "company": "Stack Overflow (Prosus)", "service": "Stack Overflow CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://stackoverflow.com/legal/privacy-policy" },
|
|
417
|
+
"cdn.starbucks.com": { "company": "Starbucks", "service": "Starbucks CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.starbucks.com/terms/privacy-policy/" },
|
|
418
|
+
"cdn.statuspage.io": { "company": "Atlassian", "service": "Statuspage Widget", "category": "data_leak", "consent_burden": "minimal", "note": "Atlassian Statuspage widget — leaks visitor IP when loading embedded status indicators", "docs_url": "https://www.atlassian.com/legal/privacy-policy" },
|
|
419
|
+
"cdn.steampowered.com": { "company": "Valve", "service": "Steam CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://store.steampowered.com/privacy_agreement/" },
|
|
420
|
+
"cdn.storeimages.cdn-apple.com": { "company": "Apple", "service": "Apple Store Images CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.apple.com/legal/privacy/" },
|
|
421
|
+
"cdn.storyblok.com": { "company": "Storyblok", "service": "Storyblok CMS CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.storyblok.com/legal/privacy-policy" },
|
|
422
|
+
"cdn.strapi.io": { "company": "Strapi", "service": "Strapi Cloud CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://strapi.io/privacy" },
|
|
423
|
+
"cdn.stubhub.com": { "company": "StubHub (viagogo)", "service": "StubHub CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.stubhub.com/legal/privacy" },
|
|
424
|
+
"cdn.subway.com": { "company": "Subway", "service": "Subway CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.subway.com/en-us/legal/privacypolicy" },
|
|
425
|
+
"cdn.supabase.co": { "company": "Supabase", "service": "Supabase CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://supabase.com/privacy" },
|
|
426
|
+
"cdn.sushi.com": { "company": "Sushi", "service": "SushiSwap CDN", "category": "data_leak", "consent_burden": "contested", "note": "SushiSwap DEX CDN leaking visitor IP for DeFi application delivery", "docs_url": "https://www.sushi.com/privacy-policy" },
|
|
427
|
+
"cdn.swarovski.com": { "company": "Swarovski", "service": "Swarovski CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.swarovski.com/privacy-policy" },
|
|
428
|
+
"cdn.swiggy.com": { "company": "Swiggy", "service": "Swiggy CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.swiggy.com/privacy-policy" },
|
|
429
|
+
"cdn.swiss.com": { "company": "Swiss International Air Lines", "service": "SWISS CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.swiss.com/ch/en/legal/privacy-policy" },
|
|
430
|
+
"cdn.syndication.twimg.com": { "company": "X Corp", "service": "X/Twitter Embed CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://help.twitter.com/en/rules-and-policies/twitter-cookies" },
|
|
431
|
+
"cdn.tailwindcss.com": { "company": "Tailwind Labs", "service": "Tailwind CSS CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Tailwind CSS CDN — leaks visitor IP when loading CSS framework; self-hosting recommended for production", "docs_url": "https://tailwindcss.com/" },
|
|
432
|
+
"cdn.tawk.to": { "company": "Tawk.to", "service": "Tawk.to Chat CDN", "category": "data_leak", "consent_burden": "contested", "note": "Tawk.to live chat widget CDN leaking visitor IP and browsing context for support widget delivery", "docs_url": "https://www.tawk.to/privacy-policy/" },
|
|
433
|
+
"cdn.telenor.no": { "company": "Telenor", "service": "Telenor CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.telenor.no/om/personvern/" },
|
|
434
|
+
"cdn.telia.se": { "company": "Telia", "service": "Telia CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.telia.se/privat/om/integritetspolicy" },
|
|
435
|
+
"cdn.temu.com": { "company": "Temu (PDD Holdings)", "service": "Temu CDN", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.temu.com/privacy-policy.html" },
|
|
436
|
+
"cdn.tesco.com": { "company": "Tesco", "service": "Tesco CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.tesco.com/help/privacy-and-cookies/privacy-centre/privacy-policy/" },
|
|
437
|
+
"cdn.tesla.com": { "company": "Tesla", "service": "Tesla CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.tesla.com/legal/privacy" },
|
|
438
|
+
"cdn.thenorthface.com": { "company": "VF Corporation", "service": "The North Face CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.thenorthface.com/help/privacy-policy" },
|
|
439
|
+
"cdn.three.co.uk": { "company": "Three UK", "service": "Three CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.three.co.uk/privacy" },
|
|
440
|
+
"cdn.ticketmaster.com": { "company": "Ticketmaster (Live Nation)", "service": "Ticketmaster CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.ticketmaster.com/h/privacy-policy" },
|
|
441
|
+
"cdn.tiffany.com": { "company": "LVMH (Tiffany)", "service": "Tiffany CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.tiffany.com/privacy-policy/" },
|
|
442
|
+
"cdn.tinder.com": { "company": "Match Group", "service": "Tinder CDN", "category": "data_leak", "consent_burden": "required", "note": "Dating app CDN may reveal visitor interest in dating services", "docs_url": "https://www.gotinder.com/privacy" },
|
|
443
|
+
"cdn.tiny.cloud": { "company": "Tiny (TinyMCE)", "service": "TinyMCE Cloud", "category": "data_leak", "consent_burden": "minimal", "note": "TinyMCE rich text editor cloud — leaks visitor IP and may send editor content for spell-checking", "docs_url": "https://www.tiny.cloud/privacy/" },
|
|
444
|
+
"cdn.tipico.de": { "company": "Tipico", "service": "Tipico CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.tipico.de/datenschutz" },
|
|
445
|
+
"cdn.tiqets.com": { "company": "Tiqets", "service": "Tiqets CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.tiqets.com/privacy" },
|
|
446
|
+
"cdn.tokopedia.com": { "company": "Tokopedia (GoTo)", "service": "Tokopedia CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.tokopedia.com/privacy" },
|
|
447
|
+
"cdn.toyota.com": { "company": "Toyota", "service": "Toyota CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.toyota.com/support/privacy-rights" },
|
|
448
|
+
"cdn.transavia.com": { "company": "Transavia", "service": "Transavia CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.transavia.com/en-EU/privacy-statement/" },
|
|
449
|
+
"cdn.trezor.io": { "company": "SatoshiLabs/Trezor", "service": "Trezor CDN", "category": "data_leak", "consent_burden": "contested", "note": "Trezor hardware wallet CDN leaking visitor IP for Suite webapp delivery", "docs_url": "https://trezor.io/privacy" },
|
|
450
|
+
"cdn.trip.com": { "company": "Trip.com Group", "service": "Trip.com CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://pages.trip.com/service-guideline/privacy-policy-en.html" },
|
|
451
|
+
"cdn.tripadvisor.com": { "company": "TripAdvisor", "service": "TripAdvisor CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://tripadvisor.mediaroom.com/us-privacy-policy" },
|
|
452
|
+
"cdn.trivago.com": { "company": "Trivago", "service": "Trivago CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.trivago.com/privacy-policy" },
|
|
453
|
+
"cdn.trustpilot.com": { "company": "Trustpilot", "service": "Trustpilot CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://legal.trustpilot.com/for-businesses/business-privacy-policy" },
|
|
454
|
+
"cdn.trustpilot.net": { "company": "Trustpilot", "service": "Trustpilot CDN", "category": "data_leak", "consent_burden": "contested", "note": "Trustpilot static asset CDN for review widget styling and scripts", "docs_url": "https://legal.trustpilot.com/for-businesses/privacy-policy" },
|
|
455
|
+
"cdn.tumblr.com": { "company": "Automattic/Tumblr", "service": "Tumblr CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.tumblr.com/privacy" },
|
|
456
|
+
"cdn.typeform.com": { "company": "Typeform", "service": "Typeform Embed", "category": "data_leak", "consent_burden": "contested", "note": "Typeform form embed CDN — leaks visitor IP when loading embedded forms and surveys", "docs_url": "https://www.typeform.com/privacy-policy/" },
|
|
457
|
+
"cdn.uniqlo.com": { "company": "Fast Retailing", "service": "Uniqlo CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.uniqlo.com/us/en/privacy-policy" },
|
|
458
|
+
"cdn.usercentrics.eu/latest": { "company": "Usercentrics", "service": "Usercentrics Banner CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Usercentrics CMP CDN leaking visitor IP before consent decision", "docs_url": "https://docs.usercentrics.com/" },
|
|
459
|
+
"cdn.userpilot.io/sdk": { "company": "Userpilot", "service": "Userpilot SDK CDN", "category": "data_leak", "consent_burden": "contested", "note": "Userpilot product experience CDN leaking visitor IP for onboarding flow delivery", "docs_url": "https://userpilot.com/privacy-policy/" },
|
|
460
|
+
"cdn.userway.org": { "company": "UserWay", "service": "UserWay Accessibility Widget", "category": "data_leak", "consent_burden": "contested", "note": "UserWay accessibility overlay widget — leaks visitor IP and disability-related browsing signals to third party", "docs_url": "https://userway.org/privacy" },
|
|
461
|
+
"cdn.vattenfall.com": { "company": "Vattenfall", "service": "Vattenfall CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://group.vattenfall.com/privacy" },
|
|
462
|
+
"cdn.viator.com": { "company": "Tripadvisor/Viator", "service": "Viator CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.viator.com/support/privacy" },
|
|
463
|
+
"cdn.vidstack.io": { "company": "Vidstack", "service": "Vidstack Player CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.vidstack.io/privacy" },
|
|
464
|
+
"cdn.vidyard.com": { "company": "Vidyard", "service": "Vidyard Video CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.vidyard.com/privacy/" },
|
|
465
|
+
"cdn.vidyard.com/embed": { "company": "Vidyard", "service": "Vidyard Embed CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.vidyard.com/privacy/" },
|
|
466
|
+
"cdn.vodafone.com": { "company": "Vodafone", "service": "Vodafone CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.vodafone.com/about-vodafone/privacy" },
|
|
467
|
+
"cdn.volkswagen.com": { "company": "Volkswagen Group", "service": "VW Group CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.volkswagen.com/en/privacy.html" },
|
|
468
|
+
"cdn.volvo.com": { "company": "Volvo Cars (Geely)", "service": "Volvo CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.volvocars.com/intl/v/legal/privacy" },
|
|
469
|
+
"cdn.vrbo.com": { "company": "Expedia Group/Vrbo", "service": "Vrbo CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.vrbo.com/legal/privacy-policy" },
|
|
470
|
+
"cdn.vueling.com": { "company": "Vueling", "service": "Vueling CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.vueling.com/en/legal/privacy-policy" },
|
|
471
|
+
"cdn.wagamama.com": { "company": "The Restaurant Group/Wagamama", "service": "Wagamama CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.wagamama.com/privacy-policy" },
|
|
472
|
+
"cdn.waitrose.com": { "company": "Waitrose (John Lewis)", "service": "Waitrose CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.waitrose.com/ecom/help-information/policies/privacy" },
|
|
473
|
+
"cdn.walkme.com": { "company": "WalkMe", "service": "WalkMe DAP CDN", "category": "data_leak", "consent_burden": "contested", "note": "WalkMe digital adoption platform CDN leaking visitor IP for overlay delivery", "docs_url": "https://www.walkme.com/privacy-policy/" },
|
|
474
|
+
"cdn.wayfair.com": { "company": "Wayfair", "service": "Wayfair CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.wayfair.com/customerservice/general_info.html#privacy" },
|
|
475
|
+
"cdn.webflow.com": { "company": "Webflow", "service": "Webflow CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://webflow.com/legal/privacy" },
|
|
476
|
+
"cdn.whereby.com": { "company": "Whereby", "service": "Whereby Video CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://whereby.com/privacy-policy" },
|
|
477
|
+
"cdn.whova.com": { "company": "Whova", "service": "Whova Event CDN", "category": "data_leak", "consent_burden": "contested", "note": "Whova event platform CDN leaking visitor IP for event agenda and networking widget delivery", "docs_url": "https://whova.com/privacy/" },
|
|
478
|
+
"cdn.wise.com": { "company": "Wise", "service": "Wise CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://wise.com/privacy-policy" },
|
|
479
|
+
"cdn.wistia.com": { "company": "Wistia", "service": "Wistia Video CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://wistia.com/privacy" },
|
|
480
|
+
"cdn.wix.com": { "company": "Wix", "service": "Wix CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.wix.com/about/privacy" },
|
|
481
|
+
"cdn.wix.com/editor-model": { "company": "Wix", "service": "Wix Editor Model CDN", "category": "data_leak", "consent_burden": "contested", "note": "Wix CMS platform CDN — leaks visitor IP when loading site templates and components from Wix servers", "docs_url": "https://www.wix.com/about/privacy" },
|
|
482
|
+
"cdn.wizzair.com": { "company": "Wizz Air", "service": "Wizz Air CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://wizzair.com/en-gb/information-and-services/about-us/privacy-notice" },
|
|
483
|
+
"cdn.wolt.com": { "company": "Wolt (DoorDash)", "service": "Wolt CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://wolt.com/en/privacy" },
|
|
484
|
+
"cdn.woocommerce.com": { "company": "Automattic", "service": "WooCommerce CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://automattic.com/privacy/" },
|
|
485
|
+
"cdn.workable.com": { "company": "Workable", "service": "Workable ATS CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.workable.com/privacy" },
|
|
486
|
+
"cdn.wyndhamhotels.com": { "company": "Wyndham Hotels", "service": "Wyndham CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.wyndhamhotels.com/us/en/privacy" },
|
|
487
|
+
"cdn.yelp.com": { "company": "Yelp", "service": "Yelp CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.yelp.com/tos/privacy_policy" },
|
|
488
|
+
"cdn.zomato.com": { "company": "Zomato", "service": "Zomato CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.zomato.com/privacy" },
|
|
489
|
+
"cdn.zoopla.co.uk": { "company": "Zoopla", "service": "Zoopla CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.zoopla.co.uk/about/privacy-policy/" },
|
|
490
|
+
"cdn.zooplus.com": { "company": "Zooplus", "service": "Zooplus CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.zooplus.com/content/privacy" },
|
|
491
|
+
"cdn2.shopify.com": { "company": "Shopify", "service": "Shopify CDN2", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.shopify.com/legal/privacy" },
|
|
492
|
+
"cdnjs.cloudflare.com": { "company": "Cloudflare", "service": "cdnjs CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Cloudflare-hosted open-source JS library CDN — leaks visitor IP to Cloudflare infrastructure", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
493
|
+
"cdnjs.cloudflare.com/ajax/libs/Chart.js": { "company": "Cloudflare", "service": "Chart.js CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
494
|
+
"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2": { "company": "Cloudflare", "service": "Owl Carousel CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
495
|
+
"cdnjs.cloudflare.com/ajax/libs/ScrollMagic": { "company": "Cloudflare", "service": "ScrollMagic CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
496
|
+
"cdnjs.cloudflare.com/ajax/libs/Swiper": { "company": "Cloudflare", "service": "Swiper CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
497
|
+
"cdnjs.cloudflare.com/ajax/libs/animejs": { "company": "Cloudflare", "service": "Anime.js CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
498
|
+
"cdnjs.cloudflare.com/ajax/libs/axios": { "company": "Cloudflare", "service": "Axios CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
499
|
+
"cdnjs.cloudflare.com/ajax/libs/d3": { "company": "Cloudflare", "service": "D3.js CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
500
|
+
"cdnjs.cloudflare.com/ajax/libs/gsap": { "company": "Cloudflare", "service": "GSAP Animation CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
501
|
+
"cdnjs.cloudflare.com/ajax/libs/highlight.js": { "company": "Cloudflare", "service": "Highlight.js CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
502
|
+
"cdnjs.cloudflare.com/ajax/libs/lodash.js": { "company": "Cloudflare", "service": "Lodash CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
503
|
+
"cdnjs.cloudflare.com/ajax/libs/moment.js": { "company": "Cloudflare", "service": "Moment.js CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
504
|
+
"cdnjs.cloudflare.com/ajax/libs/prism": { "company": "Cloudflare", "service": "Prism.js Syntax Highlighter CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
505
|
+
"cdnjs.cloudflare.com/ajax/libs/react": { "company": "Cloudflare", "service": "React CDN (cdnjs)", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
506
|
+
"cdnjs.cloudflare.com/ajax/libs/slick-carousel": { "company": "Cloudflare", "service": "Slick Carousel CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
507
|
+
"cdnjs.cloudflare.com/ajax/libs/three.js": { "company": "Cloudflare", "service": "Three.js CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
508
|
+
"chrome.google.com/webstore": { "company": "Google", "service": "Chrome Web Store", "category": "data_leak", "consent_burden": "contested", "note": "Chrome Web Store embeds leak visitor IP and extension usage to Google", "docs_url": "https://policies.google.com/privacy" },
|
|
509
|
+
"clave.gob.es": { "company": "Spanish Government", "service": "Cl@ve eID (Spain)", "category": "data_leak", "consent_burden": "required", "note": "Spanish national digital identity system — citizen authentication for tax, social security, and government portals", "docs_url": "https://clave.gob.es/clave_Home/en/avisoLegal.html" },
|
|
510
|
+
"cloudfront.net": { "company": "Amazon", "service": "AWS CloudFront", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://aws.amazon.com/privacy/" },
|
|
511
|
+
"cloudproxy.sucuri.net": { "company": "GoDaddy (Sucuri)", "service": "Sucuri WAF CloudProxy", "category": "data_leak", "consent_burden": "contested", "note": "Sucuri WAF proxies all traffic; visitor IP and request data pass through GoDaddy infrastructure", "docs_url": "https://sucuri.net/privacy/" },
|
|
512
|
+
"code.jquery.com": { "company": "OpenJS Foundation", "service": "jQuery CDN", "category": "data_leak", "consent_burden": "minimal", "note": "jQuery CDN hosted by StackPath; every request leaks visitor IP", "docs_url": "https://jquery.org/privacy/" },
|
|
513
|
+
"compound.finance": { "company": "Compound Labs", "service": "Compound DeFi", "category": "data_leak", "consent_burden": "required", "note": "DeFi lending protocol — frontend tracks wallet addresses, supply/borrow positions, and governance votes", "docs_url": "https://compound.finance/privacy-policy" },
|
|
514
|
+
"compute.fastly.com": { "company": "Fastly", "service": "Fastly Compute", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.fastly.com/privacy/" },
|
|
515
|
+
"connect.facebook.net": { "company": "Meta", "service": "Facebook SDK/Pixel", "category": "data_leak", "consent_burden": "required", "note": "Meta JavaScript SDK host — loads Facebook Pixel, Social Plugins, and Login. Leaks visitor IP and enables tracking", "docs_url": "https://developers.facebook.com/docs/javascript/" },
|
|
516
|
+
"connect.facebook.net/en_US/sdk.js": { "company": "Meta", "service": "Facebook SDK (Embed)", "category": "data_leak", "consent_burden": "required", "note": "Facebook SDK loaded for social embeds leaks visitor IP for cross-site tracking", "docs_url": "https://developers.facebook.com/docs/javascript/" },
|
|
517
|
+
"connect.psdb.cloud": { "company": "PlanetScale", "service": "PlanetScale Database", "category": "data_leak", "consent_burden": "minimal", "note": "PlanetScale serverless MySQL requests expose visitor IP to PlanetScale infrastructure", "docs_url": "https://planetscale.com/legal/privacy" },
|
|
518
|
+
"copilot.microsoft.com": { "company": "Microsoft", "service": "Microsoft Copilot", "category": "data_leak", "consent_burden": "required", "note": "Microsoft Copilot AI assistant — queries and context sent to Microsoft for AI processing", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
519
|
+
"count.myfonts.net": { "company": "Monotype", "service": "MyFonts Page View Counter", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.myfonts.com/info/legal/" },
|
|
520
|
+
"crates.io": { "company": "Rust Foundation", "service": "crates.io Registry", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://foundation.rust-lang.org/policies/privacy-policy/" },
|
|
521
|
+
"customer-*.cloudflarestream.com": { "company": "Cloudflare", "service": "Cloudflare Stream CDN", "category": "data_leak", "consent_burden": "contested", "pattern": true, "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
522
|
+
"d1bxh8uas1mnw7.cloudfront.net": { "company": "Altmetric", "service": "Altmetric Badge CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Altmetric attention badge CDN leaks visitor IP for academic citation tracking", "docs_url": "https://www.altmetric.com/privacy-policy/" },
|
|
523
|
+
"d2wy8f7a9ursnm.cloudfront.net": { "company": "Amazon CloudFront", "service": "CloudFront CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Common CloudFront distribution leaking IP to AWS infrastructure", "docs_url": "https://aws.amazon.com/privacy/" },
|
|
524
|
+
"defillama.com": { "company": "DefiLlama", "service": "DefiLlama Analytics", "category": "data_leak", "consent_burden": "contested", "note": "DeFi analytics aggregator — tracks protocol TVL and usage; visitor IP exposed when querying chain data", "docs_url": "https://defillama.com/" },
|
|
525
|
+
"deno.dev": { "company": "Deno", "service": "Deno Deploy", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://deno.com/deploy/docs/privacy-policy" },
|
|
526
|
+
"digid.nl": { "company": "Logius (Netherlands)", "service": "Dutch DigiD", "category": "data_leak", "consent_burden": "required", "note": "Dutch national digital identity — citizen BSN and authentication data processed through DigiD infrastructure", "docs_url": "https://www.digid.nl/en/privacy" },
|
|
527
|
+
"digitaloceanspaces.com": { "company": "DigitalOcean", "service": "DigitalOcean Spaces", "category": "data_leak", "consent_burden": "minimal", "note": "DigitalOcean object storage CDN leaking visitor IP for asset delivery", "docs_url": "https://www.digitalocean.com/legal/privacy-policy" },
|
|
528
|
+
"dl.dropboxusercontent.com": { "company": "Dropbox", "service": "Dropbox Content Viewer", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.dropbox.com/privacy" },
|
|
529
|
+
"docs.google.com": { "company": "Google", "service": "Google Docs Embed", "category": "data_leak", "consent_burden": "contested", "note": "Embedded Google Docs expose viewer IP and viewing behavior to Google", "docs_url": "https://policies.google.com/privacy" },
|
|
530
|
+
"drive.google.com": { "company": "Google", "service": "Google Drive Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://policies.google.com/privacy" },
|
|
531
|
+
"ecologi.com": { "company": "Ecologi", "service": "Ecologi Climate Widget", "category": "data_leak", "consent_burden": "minimal", "note": "Ecologi climate impact widget leaking visitor IP for badge rendering", "docs_url": "https://ecologi.com/privacy-policy" },
|
|
532
|
+
"edge-config.vercel.com": { "company": "Vercel", "service": "Vercel Edge Config", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://vercel.com/legal/privacy-policy" },
|
|
533
|
+
"edge.netlify.com": { "company": "Netlify", "service": "Netlify Edge", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.netlify.com/privacy/" },
|
|
534
|
+
"edgekey.net": { "company": "Akamai", "service": "Akamai Edge Key CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.akamai.com/legal/privacy-statement" },
|
|
535
|
+
"eidas.europa.eu": { "company": "European Commission", "service": "eIDAS Node", "category": "data_leak", "consent_burden": "required", "note": "European electronic identification framework — cross-border citizen authentication between EU member states", "docs_url": "https://ec.europa.eu/digital-building-blocks/wikis/display/DIGITAL/eIDAS+eID+Profile" },
|
|
536
|
+
"elster.de": { "company": "German Tax Authority", "service": "ELSTER Tax Portal", "category": "data_leak", "consent_burden": "required", "note": "German electronic tax filing system — processes taxpayer data and financial declarations", "docs_url": "https://www.elster.de/eportal/datenschutz" },
|
|
537
|
+
"embed.api.video": { "company": "api.video", "service": "api.video Player Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://api.video/privacy/" },
|
|
538
|
+
"embed.linkedin.com": { "company": "LinkedIn (Microsoft)", "service": "LinkedIn Post Embed", "category": "data_leak", "consent_burden": "required", "note": "LinkedIn embeds leak visitor IP and enable cross-site tracking by Microsoft", "docs_url": "https://www.linkedin.com/legal/privacy-policy" },
|
|
539
|
+
"embed.loom.com": { "company": "Loom (Atlassian)", "service": "Loom Video Embed", "category": "data_leak", "consent_burden": "contested", "note": "Loom embeds track video views and leak viewer IP to Atlassian", "docs_url": "https://www.loom.com/privacy" },
|
|
540
|
+
"embed.mentimeter.com": { "company": "Mentimeter", "service": "Mentimeter Presentation Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.mentimeter.com/privacy" },
|
|
541
|
+
"embed.music.apple.com": { "company": "Apple", "service": "Apple Music Embed", "category": "data_leak", "consent_burden": "minimal", "note": "Apple Music embedded player — leaks visitor IP to Apple infrastructure", "docs_url": "https://www.apple.com/legal/privacy/" },
|
|
542
|
+
"embed.podcasts.apple.com": { "company": "Apple", "service": "Apple Podcasts Embed Player", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.apple.com/legal/privacy/" },
|
|
543
|
+
"embed.typeform.com": { "company": "Typeform", "service": "Typeform Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.typeform.com/privacy-policy/" },
|
|
544
|
+
"embedwistia-a.akamaihd.net": { "company": "Wistia", "service": "Wistia Embed via Akamai", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://wistia.com/privacy" },
|
|
545
|
+
"esm.sh": { "company": "esm.sh", "service": "esm.sh Module CDN", "category": "data_leak", "consent_burden": "minimal", "note": "ES Module CDN — leaks visitor IP when loading JavaScript modules from npm via ESM format", "docs_url": "https://esm.sh/" },
|
|
546
|
+
"esri.com": { "company": "Esri", "service": "ArcGIS Maps Embed", "category": "data_leak", "consent_burden": "contested", "note": "ArcGIS map embeds leak visitor IP and location context to Esri", "docs_url": "https://www.esri.com/en-us/privacy/overview" },
|
|
547
|
+
"ewr1.vultrobjects.com": { "company": "Vultr (Constant)", "service": "Vultr Object Storage", "category": "data_leak", "consent_burden": "minimal", "note": "Vultr S3-compatible object storage leaking visitor IP for static asset delivery", "docs_url": "https://www.vultr.com/legal/privacy/" },
|
|
548
|
+
"f.vimeocdn.com": { "company": "Vimeo", "service": "Vimeo", "category": "data_leak", "consent_burden": "contested", "note": "Vimeo CDN leaks viewer IP to Vimeo/Fastly for embedded video delivery", "docs_url": "https://vimeo.com/cookie_policy" },
|
|
549
|
+
"f000.backblazeb2.com": { "company": "Backblaze", "service": "Backblaze B2", "category": "data_leak", "consent_burden": "minimal", "note": "Backblaze B2 cloud storage public URL leaking visitor IP", "docs_url": "https://www.backblaze.com/company/privacy.html" },
|
|
550
|
+
"f001.backblazeb2.com": { "company": "Backblaze", "service": "Backblaze B2", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.backblaze.com/company/privacy.html" },
|
|
551
|
+
"fast.fonts.net": { "company": "Monotype", "service": "Fonts.com Web Fonts", "category": "data_leak", "consent_burden": "contested", "note": "Monotype web font delivery leaking visitor IP for font license enforcement", "docs_url": "https://www.fonts.com/info/legal/privacy" },
|
|
552
|
+
"fast.wistia.com": { "company": "Wistia", "service": "Wistia Video Embed", "category": "data_leak", "consent_burden": "contested", "note": "Wistia video player leaks viewer IP and engagement analytics to Wistia servers", "docs_url": "https://wistia.com/privacy" },
|
|
553
|
+
"fast.wistia.net": { "company": "Wistia", "service": "Wistia Video CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://wistia.com/privacy" },
|
|
554
|
+
"fastly.net": { "company": "Fastly", "service": "Fastly CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Fastly CDN edge — transmits visitor IP to Fastly infrastructure", "docs_url": "https://www.fastly.com/privacy/" },
|
|
555
|
+
"fastlylb.net": { "company": "Fastly", "service": "Fastly Load Balancer", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.fastly.com/privacy" },
|
|
556
|
+
"files.pythonhosted.org": { "company": "Python Software Foundation", "service": "PyPI Package CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://policies.python.org/python.org/Privacy-Policy/" },
|
|
557
|
+
"firebaseapp.com": { "company": "Google", "service": "Firebase Hosting (Legacy)", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://firebase.google.com/support/privacy" },
|
|
558
|
+
"fly.dev": { "company": "Fly.io", "service": "Fly.io Edge Hosting", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://fly.io/legal/privacy-policy/" },
|
|
559
|
+
"fonts.bunny.net": { "company": "Bunny CDN", "service": "Bunny Fonts", "category": "data_leak", "consent_burden": "minimal", "note": "Privacy-friendly Google Fonts alternative — still leaks visitor IP but does not track", "docs_url": "https://bunny.net/fonts/" },
|
|
560
|
+
"fonts.googleapis.com": { "company": "Google", "service": "Google Fonts", "category": "data_leak", "consent_burden": "contested", "note": "Leaks visitor IP to Google; Austrian DPA (DSB, 2022-01-22) and LG Muenchen I (3 O 17493/20, 2022-01-20) ruled this a GDPR violation without consent", "docs_url": "https://developers.google.com/fonts/faq" },
|
|
561
|
+
"fonts.gstatic.com": { "company": "Google", "service": "Google Fonts", "category": "data_leak", "consent_burden": "contested", "note": "Font asset CDN; transmits visitor IP to Google servers without necessity", "docs_url": "https://developers.google.com/fonts/faq" },
|
|
562
|
+
"forms.office.com": { "company": "Microsoft", "service": "Microsoft Forms Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
563
|
+
"formspree.io": { "company": "Formspree", "service": "Formspree Form Backend", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://formspree.io/legal/privacy-policy/" },
|
|
564
|
+
"formulae.brew.sh": { "company": "Homebrew", "service": "Homebrew Formulae", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://brew.sh/" },
|
|
565
|
+
"foundation.app": { "company": "Foundation", "service": "Foundation NFT", "category": "data_leak", "consent_burden": "required", "docs_url": "https://foundation.app/privacy" },
|
|
566
|
+
"franceconnect.gouv.fr": { "company": "French Government", "service": "FranceConnect", "category": "data_leak", "consent_burden": "required", "note": "French national digital identity — citizen authentication across 1,400+ French government services", "docs_url": "https://franceconnect.gouv.fr/cgu" },
|
|
567
|
+
"geo.dailymotion.com/player": { "company": "Dailymotion", "service": "Dailymotion Player Extended", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.dailymotion.com/legal/privacy" },
|
|
568
|
+
"geoip.maxmind.com": { "company": "MaxMind", "service": "MaxMind GeoIP", "category": "data_leak", "consent_burden": "required", "note": "MaxMind GeoIP — industry-standard IP geolocation database. Resolves IP addresses to physical locations, ISPs, and organization data. Used by millions of websites.", "docs_url": "https://www.maxmind.com/en/privacy-policy" },
|
|
569
|
+
"geolocation-db.com": { "company": "Geolocation DB", "service": "Geolocation DB API", "category": "data_leak", "consent_burden": "required", "docs_url": "https://geolocation-db.com/privacy" },
|
|
570
|
+
"getcomposer.org": { "company": "Composer", "service": "Composer PHP Package Manager", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://getcomposer.org/" },
|
|
571
|
+
"giscus.app": { "company": "giscus", "service": "giscus GitHub Comments", "category": "data_leak", "consent_burden": "minimal", "note": "GitHub Discussions-based commenting — leaks visitor IP to giscus and GitHub servers", "docs_url": "https://github.com/giscus/giscus/blob/main/PRIVACY-POLICY.md" },
|
|
572
|
+
"github.io": { "company": "GitHub (Microsoft)", "service": "GitHub Pages", "category": "data_leak", "consent_burden": "minimal", "note": "GitHub Pages static hosting leaks visitor IP to Microsoft/GitHub", "docs_url": "https://docs.github.com/en/site-policy/privacy-policies" },
|
|
573
|
+
"gitlab.io": { "company": "GitLab", "service": "GitLab Pages", "category": "data_leak", "consent_burden": "minimal", "note": "GitLab Pages static hosting leaks visitor IP to GitLab infrastructure", "docs_url": "https://about.gitlab.com/privacy/" },
|
|
574
|
+
"glitch.com/embed": { "company": "Glitch (Fastly)", "service": "Glitch Project Embed", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://glitch.com/legal/privacy/" },
|
|
575
|
+
"global.ssl.fastly.net": { "company": "Fastly", "service": "Fastly CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.fastly.com/privacy/" },
|
|
576
|
+
"google.com/maps/embed": { "company": "Google", "service": "Google Maps Embed API", "category": "data_leak", "consent_burden": "required", "note": "Google Maps embed leaks visitor IP and loads tracking cookies without consent", "docs_url": "https://developers.google.com/maps/documentation/embed/get-started" },
|
|
577
|
+
"graphcdn.io": { "company": "Stellate", "service": "Stellate GraphQL CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://stellate.co/privacy-policy" },
|
|
578
|
+
"graphql.contentful.com": { "company": "Contentful", "service": "Contentful GraphQL API", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.contentful.com/legal/privacy-at-contentful/" },
|
|
579
|
+
"hello.myfonts.net": { "company": "Monotype", "service": "MyFonts Web Font Counter", "category": "data_leak", "consent_burden": "contested", "note": "MyFonts tracking pixel counts page views where licensed fonts are used; leaks visitor IP", "docs_url": "https://www.myfonts.com/info/legal/" },
|
|
580
|
+
"here.com": { "company": "HERE Technologies", "service": "HERE Maps", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://legal.here.com/privacy/policy" },
|
|
581
|
+
"herokuapp.com": { "company": "Salesforce (Heroku)", "service": "Heroku Platform Hosting", "category": "data_leak", "consent_burden": "minimal", "note": "Heroku-hosted apps expose visitor IP to Salesforce infrastructure", "docs_url": "https://www.heroku.com/policy/privacy" },
|
|
582
|
+
"hwcdn.net": { "company": "StackPath (Highwinds)", "service": "StackPath CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.stackpath.com/legal/privacy-statement/" },
|
|
583
|
+
"i.s-microsoft.com": { "company": "Microsoft", "service": "Microsoft Image CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Microsoft image delivery CDN — leaks visitor IP to Microsoft infrastructure", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
584
|
+
"i.scdn.co": { "company": "Spotify", "service": "Spotify CDN", "category": "data_leak", "consent_burden": "contested", "note": "Spotify image CDN leaking visitor IP for album art and cover delivery", "docs_url": "https://www.spotify.com/legal/cookies-policy/" },
|
|
585
|
+
"i.ytimg.com": { "company": "Google", "service": "YouTube Images", "category": "data_leak", "consent_burden": "minimal", "note": "YouTube thumbnail CDN — leaks IP to Google", "docs_url": "https://policies.google.com/technologies/cookies" },
|
|
586
|
+
"id.bund.de": { "company": "German Government", "service": "BundID", "category": "data_leak", "consent_burden": "required", "note": "German federal digital identity — citizen authentication for government services using eID card", "docs_url": "https://id.bund.de/de/datenschutz" },
|
|
587
|
+
"id.gov.uk": { "company": "UK Government", "service": "GOV.UK One Login", "category": "data_leak", "consent_burden": "required", "note": "UK Government single sign-on — citizen authentication for HMRC, DWP, DVLA, and other government services", "docs_url": "https://www.sign-in.service.gov.uk/privacy-notice" },
|
|
588
|
+
"id.swedenconnect.se": { "company": "Swedish Government", "service": "Sweden Connect", "category": "data_leak", "consent_burden": "required", "docs_url": "https://swedenconnect.se/about/privacy/" },
|
|
589
|
+
"idserver.servizicie.interno.gov.it": { "company": "Italian Government", "service": "CIE (Italian eID)", "category": "data_leak", "consent_burden": "required", "note": "Italian electronic identity card authentication server — processes citizen identity for government services", "docs_url": "https://www.cartaidentita.interno.gov.it/privacy/" },
|
|
590
|
+
"imagekit.io": { "company": "ImageKit", "service": "ImageKit Image CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Real-time image optimization CDN — leaks visitor IP for each image transformation request", "docs_url": "https://imagekit.io/privacy-policy" },
|
|
591
|
+
"images.contentful.com": { "company": "Contentful", "service": "Contentful Images CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.contentful.com/legal/privacy-at-contentful/" },
|
|
592
|
+
"images.ctfassets.net": { "company": "Contentful", "service": "Contentful Image CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.contentful.com/legal/privacy-at-contentful/" },
|
|
593
|
+
"images.unsplash.com": { "company": "Unsplash", "service": "Unsplash Image CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://unsplash.com/privacy" },
|
|
594
|
+
"img.imgix.net": { "company": "Imgix", "service": "Imgix Image CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.imgix.com/privacy" },
|
|
595
|
+
"img2.storyblok.com": { "company": "Storyblok", "service": "Storyblok Image CDN", "category": "data_leak", "consent_burden": "required", "note": "⚠ PHISHING RISK: Storyblok image CDN flagged in multiple phishing databases due to abuse by malicious actors", "docs_url": "https://www.storyblok.com/legal/privacy-policy" },
|
|
596
|
+
"imgix.net": { "company": "Imgix", "service": "Imgix Image CDN", "category": "data_leak", "consent_burden": "contested", "note": "Image optimization CDN leaking visitor IP for every image request", "docs_url": "https://www.imgix.com/privacy" },
|
|
597
|
+
"impots.gouv.fr": { "company": "French Tax Authority (DGFiP)", "service": "French Tax Portal", "category": "data_leak", "consent_burden": "required", "note": "French tax authority portal — processes citizen tax declarations and financial data", "docs_url": "https://www.impots.gouv.fr/mentions-legales" },
|
|
598
|
+
"ip-api.com": { "company": "IP-API", "service": "IP-API Free Geolocation", "category": "data_leak", "consent_burden": "required", "note": "Free IP geolocation API — resolves visitor IP to city-level location data without authentication required", "docs_url": "https://ip-api.com/docs/legal" },
|
|
599
|
+
"ipinfo.io": { "company": "IPinfo", "service": "IPinfo Geolocation API", "category": "data_leak", "consent_burden": "required", "note": "IP geolocation service — reveals visitor city, region, country, ISP, and organization from IP address. Widely used for geo-targeting and access control.", "docs_url": "https://ipinfo.io/privacy-policy" },
|
|
600
|
+
"is1-ssl.mzstatic.com": { "company": "Apple", "service": "Apple Static Assets", "category": "data_leak", "consent_burden": "minimal", "note": "Apple static asset CDN (App Store badges, Apple Music embeds) — leaks visitor IP", "docs_url": "https://www.apple.com/legal/privacy/" },
|
|
601
|
+
"js.api.here.com": { "company": "HERE Technologies", "service": "HERE Maps JS API", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://legal.here.com/privacy/policy" },
|
|
602
|
+
"js.driftt.com": { "company": "Drift", "service": "Drift Chat CDN", "category": "data_leak", "consent_burden": "contested", "note": "Drift chat widget CDN — leaks visitor IP and identifies anonymous visitors for sales prospecting", "docs_url": "https://www.drift.com/privacy-policy/" },
|
|
603
|
+
"js.intercomcdn.com": { "company": "Intercom", "service": "Intercom SDK CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.intercom.com/legal/privacy" },
|
|
604
|
+
"js.pusher.com": { "company": "Pusher (MessageBird)", "service": "Pusher JS CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Pusher client library CDN leaks visitor IP to MessageBird infrastructure", "docs_url": "https://pusher.com/legal/privacy-policy/" },
|
|
605
|
+
"js.squareup.com": { "company": "Block (Square)", "service": "Square Web Payments SDK", "category": "data_leak", "consent_burden": "contested", "note": "Square payment embed leaks visitor IP and device info for payment processing", "docs_url": "https://squareup.com/legal/privacy" },
|
|
606
|
+
"js.stripe.com": { "company": "Stripe", "service": "Stripe.js", "category": "data_leak", "consent_burden": "contested", "note": "Stripe payment JavaScript SDK — necessary for payments but leaks visitor IP to Stripe on every page load, even when not checking out", "docs_url": "https://stripe.com/privacy" },
|
|
607
|
+
"json.geoiplookup.io": { "company": "GeoIP Lookup", "service": "GeoIP Lookup Service", "category": "data_leak", "consent_burden": "required", "note": "Free IP geolocation API — exposes visitor IP, location, ISP, and timezone data to third party", "docs_url": "https://geoiplookup.io/privacy-policy" },
|
|
608
|
+
"jsonip.com": { "company": "jsonip", "service": "jsonip.com IP Lookup", "category": "data_leak", "consent_burden": "contested", "note": "Public IP-reveal API (JSONP-friendly) — when called from client-side JS, the visitor's IP leaks to jsonip.com AND gets handed back to the calling site, where it's often stored as a visitor identifier. 'Show consent based on country' argument is legitimate; storing IP is not", "docs_url": "https://jsonip.com/" },
|
|
609
|
+
"jup.ag": { "company": "Jupiter (Solana)", "service": "Jupiter DEX Aggregator", "category": "data_leak", "consent_burden": "required", "note": "Solana DEX aggregator — routes token swaps and collects wallet addresses on Solana network", "docs_url": "https://station.jup.ag/legal/privacy-policy" },
|
|
610
|
+
"ka-f.fontawesome.com": { "company": "Fonticons (Font Awesome)", "service": "Font Awesome Kit Analytics", "category": "data_leak", "consent_burden": "contested", "note": "Font Awesome Kit analytics — tracks page views and icon usage statistics across sites using Font Awesome kits", "docs_url": "https://fontawesome.com/privacy" },
|
|
611
|
+
"keycdn.com": { "company": "KeyCDN", "service": "KeyCDN", "category": "data_leak", "consent_burden": "minimal", "note": "KeyCDN asset delivery — leaks visitor IP to KeyCDN servers", "docs_url": "https://www.keycdn.com/privacy" },
|
|
612
|
+
"kit.fontawesome.com": { "company": "Fonticons (Font Awesome)", "service": "Font Awesome CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Font Awesome icon CDN — leaks visitor IP for icon font delivery; kit includes page view tracking", "docs_url": "https://fontawesome.com/privacy" },
|
|
613
|
+
"ko-fi.com/btn": { "company": "Ko-fi", "service": "Ko-fi Donation Button", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://ko-fi.com/privacy" },
|
|
614
|
+
"ko-fi.com/widget": { "company": "Ko-fi", "service": "Ko-fi Support Widget", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://more.ko-fi.com/privacy" },
|
|
615
|
+
"kxcdn.com": { "company": "KeyCDN", "service": "KeyCDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.keycdn.com/privacy" },
|
|
616
|
+
"lambda.us-east-1.amazonaws.com": { "company": "Amazon", "service": "AWS Lambda@Edge", "category": "data_leak", "consent_burden": "contested", "note": "AWS Lambda edge function — custom code executing on CloudFront edge with access to visitor request data", "docs_url": "https://aws.amazon.com/privacy/" },
|
|
617
|
+
"layerzero.network": { "company": "LayerZero Labs", "service": "LayerZero Bridge", "category": "data_leak", "consent_burden": "required", "docs_url": "https://layerzero.network/privacy" },
|
|
618
|
+
"lh3.googleusercontent.com": { "company": "Google", "service": "Google User Content CDN", "category": "data_leak", "consent_burden": "contested", "note": "Google user-uploaded content CDN (profile photos, Drive files) — leaks visitor IP and user-agent to Google", "docs_url": "https://policies.google.com/privacy" },
|
|
619
|
+
"linodeobjects.com": { "company": "Akamai/Linode", "service": "Linode Object Storage", "category": "data_leak", "consent_burden": "minimal", "note": "Linode object storage CDN leaking visitor IP for static asset delivery", "docs_url": "https://www.linode.com/legal-privacy/" },
|
|
620
|
+
"live.staticflickr.com": { "company": "SmugMug/Flickr", "service": "Flickr Photo CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.flickr.com/help/privacy" },
|
|
621
|
+
"login.bankid.com": { "company": "BankID (Sweden)", "service": "BankID Login", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.bankid.com/en/om-bankid/integritetspolicy" },
|
|
622
|
+
"login.digid.nl": { "company": "Logius (Netherlands)", "service": "DigiD Login", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.digid.nl/en/privacy" },
|
|
623
|
+
"login.microsoftonline.com": { "company": "Microsoft", "service": "Microsoft Azure AD Login", "category": "data_leak", "consent_burden": "contested", "note": "Microsoft Azure Active Directory login page — embedded SSO iframes leak visitor IP and authentication state to Microsoft", "docs_url": "https://learn.microsoft.com/en-us/entra/identity/authentication/" },
|
|
624
|
+
"login.nhs.uk": { "company": "NHS (UK)", "service": "NHS Login", "category": "data_leak", "consent_burden": "required_strict", "docs_url": "https://digital.nhs.uk/about-nhs-digital/privacy-and-cookies" },
|
|
625
|
+
"magiceden.io": { "company": "Magic Eden", "service": "Magic Eden NFT", "category": "data_leak", "consent_burden": "required", "docs_url": "https://magiceden.io/privacy-policy" },
|
|
626
|
+
"maps.apple.com": { "company": "Apple", "service": "Apple Maps", "category": "data_leak", "consent_burden": "minimal", "note": "Apple Maps embeds — leaks visitor IP to Apple; generally more privacy-respecting than Google Maps", "docs_url": "https://www.apple.com/legal/privacy/" },
|
|
627
|
+
"maps.google.com": { "company": "Google", "service": "Google Maps", "category": "data_leak", "consent_burden": "contested", "note": "Embedded Google Maps transmits visitor IP; consider using static map images or consent gate", "docs_url": "https://developers.google.com/maps/documentation/javascript/overview" },
|
|
628
|
+
"maps.googleapis.com": { "company": "Google", "service": "Google Maps JavaScript API", "category": "data_leak", "consent_burden": "required", "docs_url": "https://policies.google.com/privacy" },
|
|
629
|
+
"maps.gstatic.com": { "company": "Google", "service": "Google Maps", "category": "data_leak", "consent_burden": "contested", "note": "Static asset host for Google Maps; transmits visitor IP", "docs_url": "https://developers.google.com/maps/documentation/javascript/overview" },
|
|
630
|
+
"matomo.europarl.europa.eu": { "company": "European Parliament", "service": "European Parliament Matomo", "category": "data_leak", "consent_burden": "contested", "note": "European Parliament self-hosted Matomo instance tracking citizen visits to parliamentary websites", "docs_url": "https://www.europarl.europa.eu/privacy-policy/en" },
|
|
631
|
+
"maxcdn.bootstrapcdn.com": { "company": "StackPath (MaxCDN)", "service": "Bootstrap CDN (MaxCDN)", "category": "data_leak", "consent_burden": "minimal", "note": "Legacy Bootstrap CDN via MaxCDN; leaks visitor IP to StackPath", "docs_url": "https://www.stackpath.com/privacy-statement/" },
|
|
632
|
+
"maxst.icons8.com": { "company": "Icons8", "service": "Line Awesome / Icons8 CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://icons8.com/privacy" },
|
|
633
|
+
"media.graphassets.com": { "company": "Hygraph", "service": "Hygraph (GraphCMS) Assets", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://hygraph.com/privacy" },
|
|
634
|
+
"messari.io": { "company": "Messari", "service": "Messari Crypto Analytics", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://messari.io/privacy-policy" },
|
|
635
|
+
"metamask.io": { "company": "Consensys", "service": "MetaMask Website", "category": "data_leak", "consent_burden": "required", "note": "MetaMask wallet website — connects to Infura RPC nodes by default, sending all transaction data and wallet balance queries through Consensys infrastructure", "docs_url": "https://consensys.io/privacy-policy" },
|
|
636
|
+
"microsoftedge.microsoft.com/addons": { "company": "Microsoft", "service": "Edge Add-ons Store", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
637
|
+
"miro.com": { "company": "Miro", "service": "Miro Board Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://miro.com/legal/privacy-policy/" },
|
|
638
|
+
"mitid.dk": { "company": "MitID (Denmark)", "service": "Danish MitID", "category": "data_leak", "consent_burden": "required", "note": "Danish national digital identity — citizen authentication data processed through MitID infrastructure", "docs_url": "https://www.mitid.dk/en-gb/privacy/" },
|
|
639
|
+
"my.matterport.com": { "company": "Matterport", "service": "Matterport Tour Viewer", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://matterport.com/privacy-policy" },
|
|
640
|
+
"neon.tech": { "company": "Neon", "service": "Neon Serverless Postgres", "category": "data_leak", "consent_burden": "minimal", "note": "Neon serverless database requests expose visitor IP to Neon infrastructure", "docs_url": "https://neon.tech/privacy" },
|
|
641
|
+
"netlify.app": { "company": "Netlify", "service": "Netlify", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.netlify.com/privacy/" },
|
|
642
|
+
"noc1.wordfence.com": { "company": "Defiant Inc.", "service": "Wordfence Security", "category": "data_leak", "consent_burden": "contested", "note": "Wordfence WordPress security plugin phones home with visitor IP data for threat intelligence", "docs_url": "https://www.wordfence.com/terms-of-use-and-privacy-policy/" },
|
|
643
|
+
"notion.so": { "company": "Notion", "service": "Notion Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.notion.so/Privacy-Policy-3468d120cf614d4c9014c09f6adc9091" },
|
|
644
|
+
"oai.azure.com": { "company": "Microsoft", "service": "Azure OpenAI", "category": "data_leak", "consent_burden": "required", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
645
|
+
"objects.githubusercontent.com": { "company": "GitHub (Microsoft)", "service": "GitHub Release Assets", "category": "data_leak", "consent_burden": "minimal", "note": "GitHub release asset downloads expose visitor IP to Microsoft/GitHub CDN", "docs_url": "https://docs.github.com/en/site-policy/privacy-policies" },
|
|
646
|
+
"objects.hetzner.com": { "company": "Hetzner", "service": "Hetzner Object Storage", "category": "data_leak", "consent_burden": "minimal", "note": "Hetzner S3-compatible object storage CDN leaking visitor IP for static asset delivery", "docs_url": "https://www.hetzner.com/legal/privacy-policy" },
|
|
647
|
+
"onedrive.live.com": { "company": "Microsoft", "service": "OneDrive Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
648
|
+
"onedrive.live.com/embed": { "company": "Microsoft", "service": "OneDrive Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
649
|
+
"onrender.com": { "company": "Render", "service": "Render Cloud Hosting", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://render.com/privacy" },
|
|
650
|
+
"p.typekit.net": { "company": "Adobe", "service": "Adobe Fonts Tracking", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.adobe.com/privacy/policies/typekit.html" },
|
|
651
|
+
"packagist.org": { "company": "Packagist (Private Packagist)", "service": "PHP Packagist Registry", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://packagist.org/" },
|
|
652
|
+
"pages.cloudflare.com": { "company": "Cloudflare", "service": "Cloudflare Pages CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
653
|
+
"paperform.co": { "company": "Paperform", "service": "Paperform Embed", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://paperform.co/privacy/" },
|
|
654
|
+
"paraswap.io": { "company": "ParaSwap", "service": "ParaSwap DEX Aggregator", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.paraswap.io/privacy-policy" },
|
|
655
|
+
"pbs.twimg.com": { "company": "X Corp", "service": "Twitter/X Image CDN", "category": "data_leak", "consent_burden": "contested", "note": "X/Twitter profile image and media CDN — leaks visitor IP when tweet embeds load images", "docs_url": "https://help.twitter.com/en/rules-and-policies/twitter-cookies" },
|
|
656
|
+
"pbskids.org": { "company": "PBS", "service": "PBS Kids", "category": "data_leak", "consent_burden": "contested", "note": "PBS Kids children's educational content — while publicly funded, embeds third-party analytics and CDN resources that leak child visitor IP addresses", "docs_url": "https://www.pbs.org/about/pbs-privacy-policy/" },
|
|
657
|
+
"phantom.app/download": { "company": "Phantom", "service": "Phantom Wallet Download", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://phantom.app/privacy" },
|
|
658
|
+
"picsum.photos": { "company": "Lorem Picsum", "service": "Lorem Picsum Placeholder Images", "category": "data_leak", "consent_burden": "minimal", "note": "Non-commercial open-source placeholder image service (picsum.photos + fastly.picsum.photos via subdomain match). No known profiling or analytics, but each request still leaks the visitor IP to Lorem Picsum and to Fastly (their CDN). Self-host images for strict zero-risk compliance", "docs_url": "https://picsum.photos/" },
|
|
659
|
+
"pins.pinterest.com": { "company": "Pinterest", "service": "Pinterest Pin Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://policy.pinterest.com/en/privacy-policy" },
|
|
660
|
+
"pitch.com/embed": { "company": "Pitch", "service": "Pitch Presentation Embed", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://pitch.com/privacy" },
|
|
661
|
+
"pixel.eyeota.net": { "company": "Eyeota", "service": "Eyeota Data Collection", "category": "data_leak", "consent_burden": "required_strict", "note": "Eyeota audience data marketplace pixel — collects visitor data for resale to advertisers through data trading platforms", "docs_url": "https://www.eyeota.com/privacy-policy" },
|
|
662
|
+
"pixel.kantar.com": { "company": "Kantar", "service": "Kantar Audience Measurement", "category": "data_leak", "consent_burden": "required", "note": "Kantar media measurement pixel — collects audience data for digital advertising research and cross-media measurement panels", "docs_url": "https://www.kantar.com/cookies-policies" },
|
|
663
|
+
"pixel.wp.com": { "company": "Automattic", "service": "WordPress.com Stats Pixel", "category": "data_leak", "consent_burden": "contested", "note": "WordPress.com stats tracking pixel — leaks visitor IP and page view data to Automattic for Jetpack site statistics", "docs_url": "https://automattic.com/privacy/" },
|
|
664
|
+
"platform.instagram.com": { "company": "Meta", "service": "Instagram Embed Platform", "category": "data_leak", "consent_burden": "contested", "note": "Meta Instagram embed platform — leaks visitor IP and browsing context when loading Instagram post embeds", "docs_url": "https://developers.facebook.com/docs/instagram/oembed/" },
|
|
665
|
+
"platform.linkedin.com": { "company": "LinkedIn", "service": "LinkedIn Platform", "category": "data_leak", "consent_burden": "contested", "note": "LinkedIn embed and share button platform script — leaks visitor IP to Microsoft/LinkedIn", "docs_url": "https://www.linkedin.com/legal/l/cookie-table" },
|
|
666
|
+
"platform.twitter.com": { "company": "X Corp", "service": "Twitter/X Platform", "category": "data_leak", "consent_burden": "contested", "note": "X/Twitter embed platform script — leaks visitor IP when tweet, timeline, or share button embeds are loaded", "docs_url": "https://developer.twitter.com/en/docs/twitter-for-websites" },
|
|
667
|
+
"play.google.com": { "company": "Google", "service": "Google Play Store", "category": "data_leak", "consent_burden": "contested", "note": "Google Play Store embeds (app badges, install buttons) leak visitor IP to Google", "docs_url": "https://policies.google.com/privacy" },
|
|
668
|
+
"play.vidyard.com": { "company": "Vidyard", "service": "Vidyard Video Player", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.vidyard.com/privacy/" },
|
|
669
|
+
"player.bunnycdn.com": { "company": "BunnyCDN", "service": "Bunny Stream Player", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://bunny.net/privacy/" },
|
|
670
|
+
"player.podcasts.apple.com": { "company": "Apple", "service": "Apple Podcasts Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.apple.com/legal/privacy/" },
|
|
671
|
+
"player.vdocipher.com": { "company": "VdoCipher", "service": "VdoCipher DRM Player", "category": "data_leak", "consent_burden": "contested", "note": "DRM video player — tracks viewer identity, playback analytics, and implements anti-piracy measures", "docs_url": "https://www.vdocipher.com/privacy-policy" },
|
|
672
|
+
"player.vimeo.com/api": { "company": "Vimeo", "service": "Vimeo Player API", "category": "data_leak", "consent_burden": "contested", "note": "Vimeo player API endpoint transmitting viewer data for video analytics", "docs_url": "https://vimeo.com/cookie_policy" },
|
|
673
|
+
"players.brightcove.net": { "company": "Brightcove", "service": "Brightcove Video Player", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.brightcove.com/en/legal/privacy/" },
|
|
674
|
+
"portal.zksync.io": { "company": "Matter Labs", "service": "zkSync Bridge", "category": "data_leak", "consent_burden": "required", "docs_url": "https://zksync.io/privacy-policy" },
|
|
675
|
+
"portfolio.metamask.io": { "company": "Consensys", "service": "MetaMask Portfolio", "category": "data_leak", "consent_burden": "required", "docs_url": "https://consensys.io/privacy-policy" },
|
|
676
|
+
"prezi.com/v": { "company": "Prezi", "service": "Prezi Presentation Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://prezi.com/privacy-policy/" },
|
|
677
|
+
"pro.ip-api.com": { "company": "IP-API", "service": "IP-API Geolocation", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://ip-api.com/docs/legal" },
|
|
678
|
+
"proxy.golang.org": { "company": "Google", "service": "Go Module Proxy", "category": "data_leak", "consent_burden": "minimal", "note": "Go module proxy leaks package download patterns and visitor IP to Google", "docs_url": "https://proxy.golang.org/privacy" },
|
|
679
|
+
"pypi.org": { "company": "Python Software Foundation", "service": "Python Package Index", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://policies.python.org/python.org/privacy/" },
|
|
680
|
+
"rainbow.me": { "company": "Rainbow", "service": "Rainbow Wallet", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://rainbow.me/privacy" },
|
|
681
|
+
"rarible.com": { "company": "Rarible", "service": "Rarible NFT", "category": "data_leak", "consent_burden": "required", "docs_url": "https://rarible.com/privacy" },
|
|
682
|
+
"raw.githubusercontent.com": { "company": "GitHub (Microsoft)", "service": "GitHub Raw Content", "category": "data_leak", "consent_burden": "minimal", "note": "GitHub raw file serving exposes visitor IP to Microsoft/GitHub infrastructure", "docs_url": "https://docs.github.com/en/site-policy/privacy-policies" },
|
|
683
|
+
"recaptcha.google.com": { "company": "Google", "service": "Google reCAPTCHA", "category": "data_leak", "consent_burden": "contested", "note": "Google reCAPTCHA leaks visitor IP, browser fingerprint, and browsing behavior to Google", "docs_url": "https://developers.google.com/recaptcha/docs/faq" },
|
|
684
|
+
"registry.npmjs.org": { "company": "GitHub (Microsoft)", "service": "npm Registry", "category": "data_leak", "consent_burden": "minimal", "note": "npm package registry leaking developer IP for package download delivery", "docs_url": "https://docs.npmjs.com/policies/privacy" },
|
|
685
|
+
"renderer-v2.typeform.com": { "company": "Typeform", "service": "Typeform Renderer", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.typeform.com/privacy-policy/" },
|
|
686
|
+
"replit.com/@": { "company": "Replit", "service": "Replit Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://replit.com/site/privacy" },
|
|
687
|
+
"repo.packagist.org": { "company": "Packagist (Private Packagist)", "service": "Packagist Repository API", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://packagist.org/" },
|
|
688
|
+
"repo1.maven.apache.org": { "company": "Apache Software Foundation", "service": "Maven Central Repository", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.apache.org/foundation/policies/privacy.html" },
|
|
689
|
+
"res.cloudinary.com": { "company": "Cloudinary", "service": "Cloudinary Image CDN", "category": "data_leak", "consent_burden": "contested", "note": "Cloud image and video management CDN — processes images server-side, leaking visitor IP", "docs_url": "https://cloudinary.com/privacy" },
|
|
690
|
+
"rsms.me/inter": { "company": "Rasmus Andersson", "service": "Inter Font CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Inter typeface CDN — leaks visitor IP for font requests; popular alternative to Google Fonts", "docs_url": "https://rsms.me/inter/" },
|
|
691
|
+
"rubygems.org": { "company": "Ruby Central", "service": "RubyGems Registry", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://rubygems.org/pages/privacy" },
|
|
692
|
+
"s3-media0.fl.yelpcdn.com": { "company": "Yelp", "service": "Yelp CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.yelp.com/tos/privacy_policy" },
|
|
693
|
+
"s3-us-west-2.amazonaws.com": { "company": "Amazon", "service": "AWS S3 Static Hosting", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://aws.amazon.com/privacy/" },
|
|
694
|
+
"s3.amazonaws.com": { "company": "Amazon", "service": "AWS S3 Public Buckets", "category": "data_leak", "consent_burden": "minimal", "note": "AWS S3 public bucket access leaking visitor IP for static asset delivery from third-party hosted content", "docs_url": "https://aws.amazon.com/privacy/" },
|
|
695
|
+
"s3.fr-par.scw.cloud": { "company": "Scaleway (Iliad Group)", "service": "Scaleway Paris Object Storage", "category": "data_leak", "consent_burden": "minimal", "note": "Scaleway Paris region object storage leaking visitor IP for content delivery", "docs_url": "https://www.scaleway.com/en/privacy-policy/" },
|
|
696
|
+
"s3.nl-ams.scw.cloud": { "company": "Scaleway (Iliad Group)", "service": "Scaleway Object Storage", "category": "data_leak", "consent_burden": "minimal", "note": "Scaleway S3-compatible object storage CDN leaking visitor IP for asset delivery", "docs_url": "https://www.scaleway.com/en/privacy-policy/" },
|
|
697
|
+
"s3.wasabisys.com": { "company": "Wasabi", "service": "Wasabi Cloud Storage", "category": "data_leak", "consent_burden": "minimal", "note": "Wasabi object storage CDN leaking visitor IP for asset delivery", "docs_url": "https://wasabi.com/legal/privacy-policy/" },
|
|
698
|
+
"sb.scorecardresearch.com": { "company": "Comscore", "service": "Comscore ScorecardResearch", "category": "data_leak", "consent_burden": "required", "note": "Comscore ScorecardResearch beacon — collects browsing behavior across millions of sites for internet usage measurement panels", "docs_url": "https://www.comscore.com/About/Privacy-Policy" },
|
|
699
|
+
"scontent.cdninstagram.com": { "company": "Meta", "service": "Instagram CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://help.instagram.com/519522125107875" },
|
|
700
|
+
"scontent.xx.fbcdn.net": { "company": "Meta", "service": "Facebook Content CDN", "category": "data_leak", "consent_burden": "contested", "note": "Meta content delivery CDN for images and videos in Facebook embeds — leaks visitor IP and viewing context", "docs_url": "https://www.facebook.com/policies/cookies/" },
|
|
701
|
+
"sdk.amazonaws.com": { "company": "Amazon", "service": "AWS SDK CDN", "category": "data_leak", "consent_burden": "minimal", "note": "AWS JavaScript SDK CDN leaking visitor IP to Amazon infrastructure", "docs_url": "https://aws.amazon.com/privacy/" },
|
|
702
|
+
"sdk.split.io": { "company": "Split.io", "service": "Split Feature Flags", "category": "data_leak", "consent_burden": "contested", "note": "Split.io feature flag SDK — leaks visitor IP and user attributes for feature targeting and A/B testing", "docs_url": "https://www.split.io/product/data-privacy/" },
|
|
703
|
+
"search.maven.org": { "company": "Sonatype", "service": "Maven Central Search", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.sonatype.com/privacy-policy" },
|
|
704
|
+
"secure.gravatar.com": { "company": "Automattic", "service": "Gravatar", "category": "data_leak", "consent_burden": "contested", "note": "Gravatar avatar service leaking visitor email hashes and IP to Automattic", "docs_url": "https://automattic.com/privacy/" },
|
|
705
|
+
"secure.quantserve.com": { "company": "Quantcast", "service": "Quantcast Measurement", "category": "data_leak", "consent_burden": "required", "note": "Quantcast measurement pixel — collects visitor data for audience measurement and interest-based advertising", "docs_url": "https://www.quantcast.com/privacy/" },
|
|
706
|
+
"sede.dgt.gob.es": { "company": "DGT (Spain)", "service": "DGT Traffic", "category": "data_leak", "consent_burden": "required", "note": "Spanish Directorate General of Traffic — processes driving license and vehicle data", "docs_url": "https://sede.dgt.gob.es/es/avisolegal/" },
|
|
707
|
+
"sede.sepe.gob.es": { "company": "SEPE (Spain)", "service": "SEPE Employment", "category": "data_leak", "consent_burden": "required", "note": "Spanish public employment service — processes unemployment benefits and jobseeker data", "docs_url": "https://www.sepe.es/HomeSepe/aviso-legal.html" },
|
|
708
|
+
"skypack.dev": { "company": "Skypack", "service": "Skypack Module CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.skypack.dev/privacy" },
|
|
709
|
+
"social-plugins.line.me": { "company": "LINE", "service": "LINE Social Plugin", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://developers.line.biz/en/docs/line-social-plugins/" },
|
|
710
|
+
"ssl.gstatic.com": { "company": "Google", "service": "Google Static Content (SSL)", "category": "data_leak", "consent_burden": "minimal", "note": "Google SSL static asset CDN — leaks visitor IP to Google infrastructure", "docs_url": "https://policies.google.com/technologies/cookies" },
|
|
711
|
+
"stability.ai": { "company": "Stability AI", "service": "Stability AI", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://stability.ai/privacy-policy" },
|
|
712
|
+
"stackpath.bootstrapcdn.com": { "company": "StackPath", "service": "Bootstrap CDN (StackPath)", "category": "data_leak", "consent_burden": "minimal", "note": "Legacy Bootstrap CDN hosted by StackPath; leaks visitor IP", "docs_url": "https://www.stackpath.com/privacy-statement/" },
|
|
713
|
+
"stackpathcdn.com": { "company": "StackPath", "service": "StackPath CDN", "category": "data_leak", "consent_burden": "minimal", "note": "StackPath/MaxCDN asset delivery — leaks visitor IP to StackPath", "docs_url": "https://www.stackpath.com/legal/privacy-statement/" },
|
|
714
|
+
"stackpathdns.com": { "company": "StackPath", "service": "StackPath DNS CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.stackpath.com/legal/privacy-statement/" },
|
|
715
|
+
"stargate.finance": { "company": "LayerZero (Stargate)", "service": "Stargate Bridge", "category": "data_leak", "consent_burden": "required", "docs_url": "https://stargate.finance/privacy-policy" },
|
|
716
|
+
"static.cloudflareinsights.com": { "company": "Cloudflare", "service": "Cloudflare Web Analytics", "category": "data_leak", "consent_burden": "contested", "note": "Cloudflare Web Analytics beacon script — leaks visitor IP and page view data to Cloudflare", "docs_url": "https://www.cloudflare.com/web-analytics/" },
|
|
717
|
+
"static.crates.io": { "company": "Rust Foundation", "service": "crates.io CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://foundation.rust-lang.org/policies/privacy-policy/" },
|
|
718
|
+
"static.getclicky.com": { "company": "Roxr Software", "service": "Clicky Analytics CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://clicky.com/terms/privacy" },
|
|
719
|
+
"static.panoramio.com": { "company": "Google", "service": "Google Panoramio CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://policies.google.com/privacy" },
|
|
720
|
+
"static.parastorage.com": { "company": "Wix", "service": "Wix Static Assets", "category": "data_leak", "consent_burden": "contested", "note": "Wix static asset CDN — all Wix-hosted sites load assets from this domain, leaking visitor IP to Wix for every page load", "docs_url": "https://www.wix.com/about/privacy" },
|
|
721
|
+
"static.squarespace.com": { "company": "Squarespace", "service": "Squarespace Static CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.squarespace.com/privacy" },
|
|
722
|
+
"static.tiktokcdn.com": { "company": "TikTok (ByteDance)", "service": "TikTok Static CDN", "category": "data_leak", "consent_burden": "required", "note": "TikTok CDN leaks visitor IP and device info to ByteDance infrastructure", "docs_url": "https://www.tiktok.com/legal/page/row/privacy-policy" },
|
|
723
|
+
"static.wixstatic.com": { "company": "Wix", "service": "Wix Static CDN", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.wix.com/about/privacy" },
|
|
724
|
+
"static.xx.fbcdn.net": { "company": "Meta", "service": "Facebook Static CDN", "category": "data_leak", "consent_burden": "contested", "note": "Meta static asset CDN for Facebook embeds and social plugins — leaks visitor IP to Meta", "docs_url": "https://www.facebook.com/policies/cookies/" },
|
|
725
|
+
"static.zdassets.com": { "company": "Zendesk", "service": "Zendesk Widget CDN", "category": "data_leak", "consent_burden": "contested", "note": "Zendesk support widget CDN leaking visitor IP and browsing context", "docs_url": "https://www.zendesk.com/company/agreements-and-terms/privacy-notice/" },
|
|
726
|
+
"static1.squarespace.com": { "company": "Squarespace", "service": "Squarespace CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.squarespace.com/privacy" },
|
|
727
|
+
"statistics.rijksoverheid.nl": { "company": "Dutch Government (Rijksoverheid)", "service": "Rijksoverheid Analytics", "category": "data_leak", "consent_burden": "contested", "note": "Dutch government Piwik/Matomo analytics transmitting citizen visitor data to government infrastructure", "docs_url": "https://www.rijksoverheid.nl/privacy" },
|
|
728
|
+
"stats.bund.de": { "company": "German Federal Government", "service": "Bund.de Statistics CDN", "category": "data_leak", "consent_burden": "minimal", "note": "German government statistics — citizen IP addresses transmitted to government Matomo analytics infrastructure", "docs_url": "https://www.bund.de/datenschutz" },
|
|
729
|
+
"stats.gouvernement.fr": { "company": "French Government", "service": "France Government Stats", "category": "data_leak", "consent_burden": "minimal", "note": "French government statistics endpoint — citizen browsing data transmitted to DINUM-operated analytics", "docs_url": "https://www.gouvernement.fr/politique-de-confidentialite" },
|
|
730
|
+
"stats.impots.gouv.fr": { "company": "French Tax Authority (DGFiP)", "service": "Impots.gouv.fr Analytics", "category": "data_leak", "consent_burden": "required", "note": "French tax authority analytics leaking citizen IP and tax portal browsing behavior", "docs_url": "https://www.impots.gouv.fr/informations-legales" },
|
|
731
|
+
"stats.service-public.fr": { "company": "French Government (DINUM)", "service": "Service-Public.fr Analytics", "category": "data_leak", "consent_burden": "contested", "note": "French government Matomo analytics endpoint transmitting citizen browsing data to DINUM infrastructure", "docs_url": "https://www.service-public.fr/P10100" },
|
|
732
|
+
"stats.wp.com": { "company": "Automattic", "service": "WordPress.com Stats", "category": "data_leak", "consent_burden": "contested", "note": "WordPress.com Jetpack stats endpoint — transmits page view data and visitor IP for WordPress site analytics", "docs_url": "https://automattic.com/privacy/" },
|
|
733
|
+
"storage.cloud.google.com": { "company": "Google", "service": "Google Cloud Storage", "category": "data_leak", "consent_burden": "contested", "note": "Google Cloud Storage requests expose visitor IP to Google Cloud infrastructure", "docs_url": "https://cloud.google.com/terms/cloud-privacy-notice" },
|
|
734
|
+
"storage.de.cloud.ovh.net": { "company": "OVHcloud", "service": "OVHcloud Object Storage", "category": "data_leak", "consent_burden": "minimal", "note": "OVHcloud object storage leaking visitor IP for static content delivery", "docs_url": "https://www.ovhcloud.com/en/terms-and-conditions/privacy-policy/" },
|
|
735
|
+
"storage.googleapis.com": { "company": "Google", "service": "Google Cloud Storage", "category": "data_leak", "consent_burden": "contested", "note": "Static asset requests leak visitor IP to Google Cloud Platform", "docs_url": "https://cloud.google.com/storage/docs/request-endpoints" },
|
|
736
|
+
"stream.cloudflare.com": { "company": "Cloudflare", "service": "Cloudflare Stream", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
737
|
+
"stream.mux.com": { "company": "Mux", "service": "Mux Streaming", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://mux.com/privacy" },
|
|
738
|
+
"streamable.com/e": { "company": "Streamable (Hopin)", "service": "Streamable Video Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://streamable.com/privacy" },
|
|
739
|
+
"stripe.com/climate": { "company": "Stripe", "service": "Stripe Climate Widget", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://stripe.com/privacy" },
|
|
740
|
+
"sum.golang.org": { "company": "Google", "service": "Go Checksum Database", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://sum.golang.org/privacy" },
|
|
741
|
+
"superrare.com": { "company": "SuperRare Labs", "service": "SuperRare NFT", "category": "data_leak", "consent_burden": "required", "docs_url": "https://superrare.com/privacy" },
|
|
742
|
+
"surge.sh": { "company": "Surge", "service": "Surge Static Hosting", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://surge.sh/help/terms-of-service" },
|
|
743
|
+
"surveyhero.com": { "company": "SurveyHero", "service": "SurveyHero Embed", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.surveyhero.com/privacy" },
|
|
744
|
+
"tags.bluekai.com/site": { "company": "Oracle", "service": "Oracle BlueKai Site Tag", "category": "data_leak", "consent_burden": "required_strict", "note": "Oracle BlueKai site-level data collection tag — leaks visitor IP and browsing behavior to Oracle's data cloud for audience profiling", "docs_url": "https://www.oracle.com/legal/privacy/marketing-cloud-data-cloud-privacy-policy.html" },
|
|
745
|
+
"tally.so": { "company": "Tally", "service": "Tally Forms Embed", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://tally.so/help/privacy-policy" },
|
|
746
|
+
"tidycal.com": { "company": "TidyCal (AppSumo)", "service": "TidyCal Scheduling", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://tidycal.com/privacy" },
|
|
747
|
+
"tile.openstreetmap.org": { "company": "OpenStreetMap Foundation", "service": "OpenStreetMap Tiles", "category": "data_leak", "consent_burden": "minimal", "note": "OpenStreetMap tile server — leaks visitor IP; consider self-hosting tiles for full privacy compliance", "docs_url": "https://wiki.osmfoundation.org/wiki/Privacy_Policy" },
|
|
748
|
+
"tiles.mapbox.com": { "company": "Mapbox", "service": "Mapbox Tiles", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.mapbox.com/legal/privacy" },
|
|
749
|
+
"tokenterminal.com": { "company": "Token Terminal", "service": "Token Terminal Analytics", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://tokenterminal.com/privacy-policy" },
|
|
750
|
+
"tomtom.com": { "company": "TomTom", "service": "TomTom Maps SDK", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.tomtom.com/privacy/" },
|
|
751
|
+
"ton.twimg.com": { "company": "X Corp", "service": "Twitter/X Upload CDN", "category": "data_leak", "consent_burden": "contested", "note": "X/Twitter upload service CDN for media content — leaks visitor IP to X Corp", "docs_url": "https://help.twitter.com/en/rules-and-policies/twitter-cookies" },
|
|
752
|
+
"trafficmanager.net": { "company": "Microsoft", "service": "Azure Traffic Manager", "category": "data_leak", "consent_burden": "minimal", "note": "Azure Traffic Manager DNS-based load balancing exposes visitor IP for routing decisions", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
753
|
+
"translate.google.com": { "company": "Google", "service": "Google Translate Widget", "category": "data_leak", "consent_burden": "contested", "note": "Google Translate widget transmits page content and visitor IP to Google for translation", "docs_url": "https://policies.google.com/privacy" },
|
|
754
|
+
"translate.googleapis.com": { "company": "Google", "service": "Google Translate API", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://policies.google.com/privacy" },
|
|
755
|
+
"trustwallet.com": { "company": "Trust Wallet (Binance)", "service": "Trust Wallet", "category": "data_leak", "consent_burden": "required", "note": "Trust Wallet (Binance-owned) — mobile wallet that connects to Binance infrastructure for token data", "docs_url": "https://trustwallet.com/privacy-policy" },
|
|
756
|
+
"twemoji.maxcdn.com": { "company": "StackPath/X Corp", "service": "Twitter Emoji CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Twitter emoji CDN — leaks visitor IP when loading Twemoji graphics on web pages", "docs_url": "https://help.twitter.com/en/rules-and-policies/twitter-cookies" },
|
|
757
|
+
"ucas.com": { "company": "UCAS (UK)", "service": "UCAS University Admissions", "category": "data_leak", "consent_burden": "required", "note": "UK university admissions service — processes student applications, grades, and personal statements", "docs_url": "https://www.ucas.com/about-us/policies/privacy-policies-and-declarations/ucas-privacy-policy" },
|
|
758
|
+
"unpkg.com": { "company": "Cloudflare", "service": "unpkg CDN", "category": "data_leak", "consent_burden": "minimal", "note": "npm package CDN (Cloudflare-backed) — leaks visitor IP when loading JavaScript packages from npm", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
759
|
+
"unpkg.com/htmx.org": { "company": "Cloudflare (unpkg)", "service": "htmx CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Loading htmx from unpkg leaks visitor IP to Cloudflare", "docs_url": "https://unpkg.com/" },
|
|
760
|
+
"unpkg.com/react": { "company": "Cloudflare (unpkg)", "service": "React CDN (unpkg)", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://unpkg.com/" },
|
|
761
|
+
"unpkg.com/vue": { "company": "Cloudflare (unpkg)", "service": "Vue.js via unpkg", "category": "data_leak", "consent_burden": "minimal", "note": "Loading Vue.js from unpkg leaks visitor IP to Cloudflare", "docs_url": "https://unpkg.com/" },
|
|
762
|
+
"up.railway.app": { "company": "Railway", "service": "Railway App Hosting", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://railway.app/legal/privacy" },
|
|
763
|
+
"upload.wikimedia.org": { "company": "Wikimedia Foundation", "service": "Wikipedia/Wikimedia CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Wikimedia Commons media CDN leaking visitor IP for encyclopedia image delivery", "docs_url": "https://foundation.wikimedia.org/wiki/Privacy_policy" },
|
|
764
|
+
"uploads-ssl.webflow.com": { "company": "Webflow", "service": "Webflow Uploads CDN", "category": "data_leak", "consent_burden": "contested", "note": "Webflow uploads CDN — leaks visitor IP for media file delivery on Webflow-hosted websites", "docs_url": "https://webflow.com/legal/privacy" },
|
|
765
|
+
"use.fontawesome.com": { "company": "Fonticons/Font Awesome", "service": "Font Awesome Kit CDN", "category": "data_leak", "consent_burden": "minimal", "note": "Font Awesome Kit CDN with usage analytics — tracks which icons are used on which sites", "docs_url": "https://fontawesome.com/privacy" },
|
|
766
|
+
"use.typekit.net": { "company": "Adobe", "service": "Adobe Fonts (Typekit)", "category": "data_leak", "consent_burden": "contested", "note": "Adobe Fonts (formerly Typekit) — leaks visitor IP and referrer for web font delivery; tracks font usage across sites", "docs_url": "https://www.adobe.com/privacy/policies/typekit.html" },
|
|
767
|
+
"user-images.githubusercontent.com": { "company": "GitHub (Microsoft)", "service": "GitHub User Images", "category": "data_leak", "consent_burden": "minimal", "note": "GitHub user-uploaded image hosting exposes viewer IP to Microsoft/GitHub", "docs_url": "https://docs.github.com/en/site-policy/privacy-policies" },
|
|
768
|
+
"utteranc.es": { "company": "utterances", "service": "utterances GitHub Comments", "category": "data_leak", "consent_burden": "minimal", "note": "GitHub Issues-based commenting widget — leaks visitor IP to utterances and GitHub", "docs_url": "https://utteranc.es/" },
|
|
769
|
+
"va.vercel-scripts.com": { "company": "Vercel", "service": "Vercel Analytics Script", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://vercel.com/legal/privacy-policy" },
|
|
770
|
+
"vercel.app": { "company": "Vercel", "service": "Vercel Deployments", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://vercel.com/legal/privacy-policy" },
|
|
771
|
+
"vitals.vercel-insights.com": { "company": "Vercel", "service": "Vercel Web Analytics", "category": "data_leak", "consent_burden": "contested", "note": "Vercel Web Analytics and Speed Insights — collects Core Web Vitals and visitor data for deployed sites", "docs_url": "https://vercel.com/legal/privacy-policy" },
|
|
772
|
+
"w.soundcloud.com": { "company": "SoundCloud", "service": "SoundCloud Widget", "category": "data_leak", "consent_burden": "contested", "note": "SoundCloud embedded player widget — leaks visitor IP and sets tracking cookies", "docs_url": "https://soundcloud.com/pages/privacy" },
|
|
773
|
+
"wallet.coinbase.com": { "company": "Coinbase", "service": "Coinbase Wallet", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.coinbase.com/legal/privacy" },
|
|
774
|
+
"wallet.polygon.technology": { "company": "Polygon Labs", "service": "Polygon Bridge", "category": "data_leak", "consent_burden": "required", "docs_url": "https://polygon.technology/privacy-policy" },
|
|
775
|
+
"web.app": { "company": "Google", "service": "Firebase Hosting", "category": "data_leak", "consent_burden": "minimal", "note": "Firebase-hosted sites expose visitor IP to Google Cloud", "docs_url": "https://firebase.google.com/support/privacy" },
|
|
776
|
+
"webanalytics.bund.de": { "company": "German Federal Government", "service": "German Federal Web Analytics", "category": "data_leak", "consent_burden": "minimal", "note": "Self-hosted Matomo analytics for German federal websites; IP data stays in EU", "docs_url": "https://www.bund.de/DE/Datenschutz/datenschutz_node.html" },
|
|
777
|
+
"webtools.europa.eu/analytics": { "company": "European Commission", "service": "Europa.eu Extended Analytics", "category": "data_leak", "consent_burden": "contested", "note": "EU Commission extended analytics endpoint transmitting citizen browsing data from EU institution sites", "docs_url": "https://ec.europa.eu/info/cookies_en" },
|
|
778
|
+
"widget.accuweather.com": { "company": "AccuWeather", "service": "AccuWeather Embed Widget", "category": "data_leak", "consent_burden": "required", "note": "AccuWeather widget leaks visitor IP for geolocation-based weather display — AccuWeather previously caught sharing location data without consent", "docs_url": "https://www.accuweather.com/en/privacy" },
|
|
779
|
+
"widget.intercom.io": { "company": "Intercom", "service": "Intercom Chat Widget", "category": "data_leak", "consent_burden": "contested", "note": "Intercom messenger widget leaks visitor IP and browsing context before any interaction", "docs_url": "https://www.intercom.com/legal/privacy" },
|
|
780
|
+
"widget.trustpilot.com": { "company": "Trustpilot", "service": "Trustpilot Reviews Widget", "category": "data_leak", "consent_burden": "contested", "note": "Trustpilot review widget CDN — leaks visitor IP and browsing context when loading review scores", "docs_url": "https://legal.trustpilot.com/for-businesses/privacy-policy" },
|
|
781
|
+
"widget.wechat.com": { "company": "Tencent", "service": "WeChat Widget", "category": "data_leak", "consent_burden": "required", "note": "WeChat widget leaks visitor IP to Tencent servers in China", "docs_url": "https://www.tencent.com/en-us/privacy-policy.html" },
|
|
782
|
+
"widgets.shopifyapps.com": { "company": "Shopify", "service": "Shopify Apps Widget", "category": "data_leak", "consent_burden": "minimal", "note": "Shopify embedded app widgets leak visitor IP to Shopify infrastructure", "docs_url": "https://www.shopify.com/legal/cookies" },
|
|
783
|
+
"widgets.weather.com": { "company": "The Weather Company (IBM)", "service": "Weather.com Widget", "category": "data_leak", "consent_burden": "required", "note": "Weather widget embeds leak visitor IP and location data to IBM's Weather Company infrastructure for weather display and ad targeting", "docs_url": "https://weather.com/en-US/twc/privacy-policy" },
|
|
784
|
+
"workers.dev": { "company": "Cloudflare", "service": "Cloudflare Workers", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.cloudflare.com/privacypolicy/" },
|
|
785
|
+
"wormhole.com": { "company": "Wormhole", "service": "Wormhole Bridge", "category": "data_leak", "consent_burden": "required", "note": "Cross-chain bridge protocol — tracks wallet addresses and bridged asset transfers across blockchains", "docs_url": "https://wormhole.com/privacy" },
|
|
786
|
+
"www.agenciatributaria.gob.es": { "company": "Spanish Tax Agency", "service": "Agencia Tributaria", "category": "data_leak", "consent_burden": "required", "note": "Spanish tax agency portal — processes citizen tax filings, VAT declarations, and financial data", "docs_url": "https://sede.agenciatributaria.gob.es/static_files/common/internet/dep/aplicaciones/es/aeat/sede/Avisos/AvisoLegal.html" },
|
|
787
|
+
"www.agenziaentrate.gov.it": { "company": "Italian Tax Agency", "service": "Agenzia delle Entrate", "category": "data_leak", "consent_burden": "required", "note": "Italian revenue agency — processes tax declarations, property records, and fiscal data", "docs_url": "https://www.agenziaentrate.gov.it/portale/web/guest/privacy" },
|
|
788
|
+
"www.borger.dk": { "company": "Danish Government", "service": "Borger.dk", "category": "data_leak", "consent_burden": "required", "note": "Danish citizen self-service portal — browsing reveals administrative needs across Danish government services", "docs_url": "https://www.borger.dk/om-borger-dk/Cookies-og-privatlivspolitik" },
|
|
789
|
+
"www.bund.de": { "company": "German Government", "service": "Bundesportal", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.bund.de/datenschutz" },
|
|
790
|
+
"www.canva.com": { "company": "Canva", "service": "Canva Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.canva.com/policies/privacy-policy/" },
|
|
791
|
+
"www.cartoonnetwork.com": { "company": "Warner Bros. Discovery", "service": "Cartoon Network Website", "category": "data_leak", "consent_burden": "required", "note": "Cartoon Network children's website — embeds Google Analytics, social widgets, and ad trackers on pages targeted at children", "docs_url": "https://www.warnermediaprivacy.com/policycenter/b2c/main/" },
|
|
792
|
+
"www.datocms-assets.com": { "company": "DatoCMS", "service": "DatoCMS Assets CDN", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://www.datocms.com/legal/privacy-policy" },
|
|
793
|
+
"www.disneychannel.com": { "company": "Disney", "service": "Disney Channel Website", "category": "data_leak", "consent_burden": "required", "note": "Disney Channel children's content — Disney digital properties embed multiple advertising and analytics trackers on children's content pages", "docs_url": "https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/" },
|
|
794
|
+
"www.dropbox.com": { "company": "Dropbox", "service": "Dropbox Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.dropbox.com/privacy" },
|
|
795
|
+
"www.dropbox.com/s": { "company": "Dropbox", "service": "Dropbox Shared File Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.dropbox.com/privacy" },
|
|
796
|
+
"www.dvla.gov.uk": { "company": "DVLA (UK)", "service": "DVLA Vehicle Services", "category": "data_leak", "consent_burden": "required", "note": "UK Driver and Vehicle Licensing Agency — processes driving license and vehicle registration data", "docs_url": "https://www.gov.uk/government/organisations/driver-and-vehicle-licensing-agency/about/personal-information-charter" },
|
|
797
|
+
"www.elster.de": { "company": "German Tax Authority", "service": "ELSTER", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.elster.de/eportal/datenschutz" },
|
|
798
|
+
"www.figma.com": { "company": "Figma", "service": "Figma Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.figma.com/privacy/" },
|
|
799
|
+
"www.gofundme.com/f": { "company": "GoFundMe", "service": "GoFundMe Campaign Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.gofundme.com/privacy" },
|
|
800
|
+
"www.google.com": { "company": "Google", "service": "Google Cross-Site Endpoint", "category": "data_leak", "consent_burden": "contested", "note": "Cross-origin requests to www.google.com on a non-Google site are almost always reCAPTCHA (/recaptcha/api.js), Google Fonts CSS, OAuth/Login, or Maps — all leak visitor IP to Google regardless of consent", "docs_url": "https://policies.google.com/privacy" },
|
|
801
|
+
"www.gov.uk": { "company": "UK Government", "service": "GOV.UK", "category": "data_leak", "consent_burden": "contested", "note": "UK government services portal — browsing patterns reveal benefit claims, visa applications, tax filings, and health needs", "docs_url": "https://www.gov.uk/help/privacy-notice" },
|
|
802
|
+
"www.gov.uk/dwp": { "company": "DWP (UK)", "service": "UK Department for Work and Pensions", "category": "data_leak", "consent_burden": "required", "note": "UK benefits and social security portal — browsing reveals claimant status and benefit types", "docs_url": "https://www.gov.uk/government/organisations/department-for-work-pensions/about/personal-information-charter" },
|
|
803
|
+
"www.gstatic.com": { "company": "Google", "service": "Google Static Content", "category": "data_leak", "consent_burden": "minimal", "note": "Google static asset CDN — leaks visitor IP to Google on every page load", "docs_url": "https://policies.google.com/technologies/cookies" },
|
|
804
|
+
"www.inps.it": { "company": "INPS (Italy)", "service": "INPS Social Security", "category": "data_leak", "consent_burden": "required", "note": "Italian national social security institute — processes pension, disability, and benefit claim data", "docs_url": "https://www.inps.it/content/inps-site/it/privacy.html" },
|
|
805
|
+
"www.instagram.com": { "company": "Meta", "service": "Instagram Embed", "category": "data_leak", "consent_burden": "contested", "note": "Embedded Instagram content transmits visitor data to Meta", "docs_url": "https://developers.facebook.com/docs/instagram/oembed/" },
|
|
806
|
+
"www.instagram.com/embed": { "company": "Meta", "service": "Instagram Post Embed", "category": "data_leak", "consent_burden": "required", "note": "Instagram embeds leak visitor IP and behavior data to Meta for ad targeting", "docs_url": "https://help.instagram.com/519522125107875" },
|
|
807
|
+
"www.loom.com": { "company": "Atlassian/Loom", "service": "Loom Video Embed", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://www.loom.com/privacy-policy" },
|
|
808
|
+
"www.maxmind.com": { "company": "MaxMind", "service": "MaxMind GeoIP Web", "category": "data_leak", "consent_burden": "required", "docs_url": "https://www.maxmind.com/en/privacy-policy" },
|
|
809
|
+
"www.nhs.uk": { "company": "NHS (UK)", "service": "NHS Website", "category": "data_leak", "consent_burden": "required", "note": "NHS website — health information searches reveal medical conditions and health concerns to NHS Digital", "docs_url": "https://digital.nhs.uk/about-nhs-digital/privacy-and-cookies" },
|
|
810
|
+
"www.nick.com": { "company": "Paramount Global", "service": "Nickelodeon Website", "category": "data_leak", "consent_burden": "required", "note": "Nickelodeon children's website — Viacom fined $4.95M by FTC in 2019 for COPPA violations collecting personal data from children under 13 on Nick.com", "docs_url": "https://www.viacomcbs.com/privacy" },
|
|
811
|
+
"www.npmjs.com": { "company": "GitHub (Microsoft)", "service": "npm Registry Website", "category": "data_leak", "consent_burden": "minimal", "note": "npm package registry website leaks visitor IP to Microsoft/GitHub infrastructure", "docs_url": "https://docs.npmjs.com/policies/privacy" },
|
|
812
|
+
"www.nuget.org": { "company": "Microsoft", "service": "NuGet Gallery", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://privacy.microsoft.com/en-us/privacystatement" },
|
|
813
|
+
"www.parcoursup.fr": { "company": "French Ministry of Education", "service": "Parcoursup", "category": "data_leak", "consent_burden": "required", "note": "French higher education admission platform — processes student academic records and university preferences", "docs_url": "https://www.parcoursup.fr/index.php?desc=mentions" },
|
|
814
|
+
"www.patreon.com/widget": { "company": "Patreon", "service": "Patreon Widget", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://privacy.patreon.com/policies" },
|
|
815
|
+
"www.paypal.com/sdk/js": { "company": "PayPal", "service": "PayPal JS SDK", "category": "data_leak", "consent_burden": "contested", "note": "PayPal JavaScript SDK — leaks visitor IP and device info to PayPal on page load; consider lazy-loading at checkout", "docs_url": "https://www.paypal.com/webapps/mpp/ua/privacy-full" },
|
|
816
|
+
"www.paypalobjects.com": { "company": "PayPal", "service": "PayPal Static Assets", "category": "data_leak", "consent_burden": "contested", "note": "PayPal static resource CDN for payment buttons and checkout widgets", "docs_url": "https://www.paypal.com/webapps/mpp/ua/privacy-full" },
|
|
817
|
+
"www.roblox.com/tracking": { "company": "Roblox", "service": "Roblox Platform Tracking", "category": "data_leak", "consent_burden": "required", "note": "Roblox children's gaming platform — FTC investigated Roblox for COPPA compliance. Platform collects extensive behavioral data from children including chat logs, purchase history, and play patterns.", "docs_url": "https://en.help.roblox.com/hc/en-us/articles/115004630823" },
|
|
818
|
+
"www.service-public.fr": { "company": "French Government", "service": "Service-public.fr", "category": "data_leak", "consent_burden": "contested", "note": "French government services portal — browsing reveals administrative needs and life events", "docs_url": "https://www.service-public.fr/P10105" },
|
|
819
|
+
"www.suomi.fi": { "company": "Finnish Government", "service": "Suomi.fi", "category": "data_leak", "consent_burden": "required", "note": "Finnish government digital services portal — citizen authentication and e-government services", "docs_url": "https://www.suomi.fi/info/tietosuoja" },
|
|
820
|
+
"www.tiktok.com": { "company": "TikTok", "service": "TikTok Embed", "category": "data_leak", "consent_burden": "contested", "note": "Embedded TikTok content transmits visitor data to ByteDance servers", "docs_url": "https://www.tiktok.com/legal/page/row/cookie-policy" },
|
|
821
|
+
"www.tiktok.com/embed": { "company": "TikTok (ByteDance)", "service": "TikTok Video Embed", "category": "data_leak", "consent_burden": "required", "note": "TikTok embeds leak visitor IP and device fingerprint to ByteDance servers", "docs_url": "https://www.tiktok.com/legal/page/row/privacy-policy" },
|
|
822
|
+
"www.youtube-nocookie.com": { "company": "Google", "service": "YouTube (privacy-enhanced)", "category": "data_leak", "consent_burden": "minimal", "note": "Privacy-enhanced embed mode — still leaks IP but no tracking cookies", "docs_url": "https://support.google.com/youtube/answer/171780" },
|
|
823
|
+
"www.youtube.com": { "company": "Google", "service": "YouTube Embed", "category": "data_leak", "consent_burden": "contested", "note": "Standard YouTube embed sets cookies and leaks IP; use youtube-nocookie.com instead", "docs_url": "https://support.google.com/youtube/answer/171780" },
|
|
824
|
+
"yastatic.net": { "company": "Yandex", "service": "Yandex Static CDN", "category": "data_leak", "consent_burden": "required", "note": "Yandex CDN leaks visitor IP to Russian infrastructure", "docs_url": "https://yandex.com/legal/privacy/" },
|
|
825
|
+
"youcanbook.me": { "company": "YouCanBookMe", "service": "YouCanBookMe Scheduling", "category": "data_leak", "consent_burden": "minimal", "docs_url": "https://youcanbook.me/privacy/" },
|
|
826
|
+
"youtube.com": { "company": "Google", "service": "YouTube", "category": "data_leak", "consent_burden": "contested", "note": "Embedded YouTube content transmits visitor data to Google; use youtube-nocookie.com for privacy-enhanced mode", "docs_url": "https://developers.google.com/youtube/terms/developer-policies" },
|
|
827
|
+
"youtube.googleapis.com": { "company": "Google", "service": "YouTube API", "category": "data_leak", "consent_burden": "contested", "docs_url": "https://developers.google.com/youtube/terms/api-services-terms-of-service" }
|
|
826
828
|
}
|
|
827
829
|
}
|