# ==============================================================================
# 2026 DeGoogle Mobile Telemetry Benchmark - Pi-hole & DNS Blocklist
# Source: PraveenTechWorld Lab (https://www.praveentechworld.com/research/degoogle-telemetry-2026)
# Research DOI: 10.5281/zenodo.22848749
# License: Creative Commons Attribution 4.0 International (CC BY 4.0)
#
# CRITICAL WARNING - READ BEFORE ENABLING:
# ------------------------------------------------------------------------------
# This blocklist contains the 42 unique Alphabet ASN 15169 endpoints observed
# phoning home during our 72-hour idle Android telemetry benchmark.
#
# OVERBLOCKING RISK:
# Blocking core Google endpoints WILL BREAK several key Android features:
# 1. checkin.gstatic.com -> Disables network captive portal checks & NTP time sync.
# 2. mtalk.google.com -> Kills Google Firebase Cloud Messaging (push notifications
#    for Signal, WhatsApp, banking apps, and delivery trackers).
# 3. device-provisioning.googleapis.com -> Breaks Google Play licensing & some
#    banking app Play Integrity / SafetyNet attestation checks.
# 4. play.googleapis.com -> Halts Google Play Store app updates.
#
# Recommended Use:
# - Test in a separate Pi-hole/AdGuard Home group or RethinkDNS profile first.
# - Whitelist mtalk.google.com if you rely on push notifications.
# ==============================================================================

# --- Category 1: Location Triangulation & Network Check-ins ---
0.0.0.0 checkin.gstatic.com
0.0.0.0 location.googleapis.com
0.0.0.0 geolocation.googleapis.com
0.0.0.0 connectivitycheck.gstatic.com
0.0.0.0 clients1.google.com

# --- Category 2: Play Services Licensing & Infrastructure ---
0.0.0.0 play.googleapis.com
0.0.0.0 android.googleapis.com
0.0.0.0 android.clients.google.com
0.0.0.0 clients3.google.com
0.0.0.0 clients4.google.com
0.0.0.0 clients.l.google.com
0.0.0.0 play-fe.googleapis.com
0.0.0.0 licensing.googleapis.com

# --- Category 3: Device Provisioning & Carrier Profiling ---
0.0.0.0 device-provisioning.googleapis.com
0.0.0.0 mobileconf.googleapis.com
0.0.0.0 update.googleapis.com
0.0.0.0 ota.googlezip.net
0.0.0.0 default-provisioning.googleapis.com

# --- Category 4: Cloud Messaging (FCM Heartbeats & Push) ---
# NOTE: Blocking these disables background notifications on stock Android.
0.0.0.0 mtalk.google.com
0.0.0.0 mtalk4.google.com
0.0.0.0 alt1-mtalk.google.com
0.0.0.0 alt2-mtalk.google.com
0.0.0.0 fcm.googleapis.com
0.0.0.0 push.googleapis.com

# --- Category 5: Background Telemetry, Diagnostics & Crash Reporting ---
0.0.0.0 telemetry.google.com
0.0.0.0 app-measurement.com
0.0.0.0 firebaselogging-pa.googleapis.com
0.0.0.0 firebaseremoteconfig.googleapis.com
0.0.0.0 crashlytics.com
0.0.0.0 crashlyticsreports-pa.googleapis.com
0.0.0.0 diagnostics.googleapis.com
0.0.0.0 play-services-telemetry.googleapis.com

# --- Category 6: Search Bar Prefetch & Voice Assistant Delta ---
0.0.0.0 suggestqueries.google.com
0.0.0.0 speech.googleapis.com
0.0.0.0 assistant.googleapis.com

# --- Category 7: Cloud Photo Sync & Face Clustering Delta ---
0.0.0.0 photosdata-pa.googleapis.com
0.0.0.0 lh3.googleusercontent.com
0.0.0.0 storage.googleapis.com

# --- Category 8: Ad Measurement & Attribution Sockets ---
0.0.0.0 googleads.g.doubleclick.net
0.0.0.0 adservice.google.com
0.0.0.0 pagead2.googlesyndication.com
0.0.0.0 stats.g.doubleclick.net