Remix.run Logo
xg15 5 hours ago

> After config fetch, the SDK opens a persistent WebSocket to:

wss://proxyjs.brdtnet.com:443

This hostname resolves to AWS Global Accelerator IPs

There is some irony that both the scrapers and the websites being scraped are probably hosted on AWS, while playing an elaborate cat-and-mouse game pretending that they weren't.

trumpdong 17 minutes ago | parent | next [-]

Cloudflare sells DDoS protection services to DDoS control panels.

BLKNSLVR 2 hours ago | parent | prev | next [-]

Adding to DNS block list immediately.

xg15 an hour ago | parent [-]

Don't forget the config endpoint before as well.

> On every launch the SDK calls:

GET <https://clientsdk.bright-sdk.com/sdk_config_ios.json>?appid=<bundle>&ver=<sdk-version>&uuid=sdk-ios-<32hex>

cyanydeez 4 hours ago | parent | prev [-]

Kind how the American government needs commercial businesses which they poorly regulate so those businesses provide privacy invasions as a legal means to wash their hands.

rootsudo 2 hours ago | parent [-]

Same for arms dealing, and every other industry.