Hello
I’m trying to access some services on a Brazilian bank website. But there’s one service not loading; the page stays clear. When I disable dnsforge.de DNS, it loads normally, so the DNS is blocking some domain that is preventing this specific page from loading.
I’m investigating all domains being blocked while using DNS. But I’m not that expert to do that.
Anyway, I’ll list here some of the filtered domains I think may be related to this issue.
My main suspicion is this „cdn.cookielaw.org“, since when I whitelist it, the website works a little better. I checked here on dnsforge.de and it is flagged as „not blocked“. I don’t know why but it was being blocked whle using dnsforge.de. Could you check if it is really allowed?
My second guess is „cdn.appdynamics.com“ since OISD lists it as needed for US banks.
These other two are suspected too, but I’m not sure what they exactly do: „we-stats.com“ „nebula-cdn.kampyle.com“.
I think you should put these 4 domains on the whitelist, but as I’m not an expert, I ask you for help with it.
Thanks since now.
AppDynamics is similar to Dynatrace I would guess, it collects monitoring data on the internal parameters of the browser, that should not be mandatory unless the web page is implemented really amateurish when calling APIs without error handling.
Blocking AppDynamics is more easy on the level of specific URLs, e.g. with uMatrix, that is outside of the scope of a DNS blocker
Have you given up on whitelisting the domain?
No, it’s pretty clear what this company does and tracking should be blocked. If this means the app doesn’t work, I would consider whether it’s any good.
Then it means that it will remain blocked, right? It is not an app that is malfunctioning; it is a bank website.
I found out that these domains may actually be the cause of the problem.
„cdn.appdynamics.com“
Responsible for AppDynamics performance scripts.
If blocked, it can prevent dynamic parts of the website from working properly, such as loading bank details (e.g. statement).
„eum-appdynamics.com“
Used in conjunction with the previous one for user experience (UEM).
It can also be directly related to the loading of the statement.
These are used to collect telemetry data to ensure the applications run smoothly and efficiently.
It’s important to note that while AppDynamics does collect data for performance monitoring, it is not designed to track users for advertising purposes. Its primary function is to help developers and IT teams identify and resolve performance issues within their applications.
So, it could be considered a performance tracker, but not a marketing tracker like Facebook Pixel or Google Analytics.
It does not track users across multiple websites for ad targeting.
Hello? Any update about this?
So I’m pretty sure that eum-appdynamics.com collects user data. I suggest that I unblock cdn.appdynamics.com and you test again.
Interestingly, Hagezi chose to whitelist eum-appdynamics.com while maintaining the block on cdn.appdynamics.com
That may well be the case, perhaps they made a mistake.
Is it working now with the release of cdn.appdynamics.com ?
Yes, it is working! I’ll keep testing for a few days to confirm, but for now, I think it has solved the issue. Thanks for your help. I really intend to continue using DNSForge.
1 Like
It was not fully working, so I kept investigating.
Now I think I may have found the main culprit for the issue.
sdk-analytics-web.cloud.itau.com.br
I need to whitelist this domain to make the bank website fully functional.
It’s safe to allow it since it’s only related to this bank. It won’t affect anyone else not using the bank.
Could you please add it to the whitelist?
This domain isn’t blocked by dnsforge 
% dig sdk-analytics-web.cloud.itau.com.br @dnsforge.de
; <<>> DiG 9.20.9 <<>> sdk-analytics-web.cloud.itau.com.br @dnsforge.de
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45024
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;sdk-analytics-web.cloud.itau.com.br. IN A
;; ANSWER SECTION:
sdk-analytics-web.cloud.itau.com.br. 300 IN CNAME d20j4slg19rc9m.cloudfront.net.
d20j4slg19rc9m.cloudfront.net. 300 IN A 99.86.4.109
d20j4slg19rc9m.cloudfront.net. 300 IN A 99.86.4.2
d20j4slg19rc9m.cloudfront.net. 300 IN A 99.86.4.42
d20j4slg19rc9m.cloudfront.net. 300 IN A 99.86.4.105
;; Query time: 18 msec
;; SERVER: 2a01:4f8:141:316d::117#53(dnsforge.de) (UDP)
;; WHEN: Sat Jun 07 10:11:52 CEST 2025
;; MSG SIZE rcvd: 171
I tested the „domain check“ on the main website yesterday, and it was blocked. Anyway, thank you again. Just to inform you, the bank website is now working great.