Chat assistant domains
17 services, 31 domains. People type questions into these assistants and often paste in text, documents or data, which then leaves the company.
| Service | Domains |
|---|---|
| ChatGPT / OpenAI | chatgpt.com chat.openai.com oaiusercontent.com oaistatic.com sora.com |
| Claude | claude.ai |
| Gemini | gemini.google.com bard.google.com |
| Microsoft Copilot | copilot.microsoft.com copilot.cloud.microsoft sydney.bing.com |
| Perplexity | perplexity.ai pplx.ai |
| Mistral Le Chat | chat.mistral.ai |
| DeepSeek | chat.deepseek.com deepseek.com |
| Grok | grok.com |
| Meta AI | meta.ai |
| Poe | poe.com |
| Character.AI | character.ai c.ai |
| Pi | pi.ai |
| You.com | you.com |
| Phind | phind.com |
| Qwen | chat.qwen.ai tongyi.aliyun.com qianwen.aliyun.com |
| Kimi | kimi.moonshot.cn kimi.com kimi.ai |
| Doubao | doubao.com |
Block or allow the whole category
One list for the whole category. Most teams approve one or two services and block the rest, so remove the ones you approve before using it.
Plain domain list
One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.
# Block list — Plain domain list # Chat assistant (31 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains. bard.google.com c.ai character.ai chat.deepseek.com chat.mistral.ai chat.openai.com chat.qwen.ai chatgpt.com claude.ai copilot.cloud.microsoft copilot.microsoft.com deepseek.com doubao.com gemini.google.com grok.com kimi.ai kimi.com kimi.moonshot.cn meta.ai oaistatic.com oaiusercontent.com perplexity.ai phind.com pi.ai poe.com pplx.ai qianwen.aliyun.com sora.com sydney.bing.com tongyi.aliyun.com you.com
Wildcard list (*.domain)
Each domain plus a *.domain entry, for gateways that need explicit wildcards.
# Block list — Wildcard list (*.domain) # Chat assistant (31 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # Each domain plus a *.domain entry, for gateways that need explicit wildcards. bard.google.com *.bard.google.com c.ai *.c.ai character.ai *.character.ai chat.deepseek.com *.chat.deepseek.com chat.mistral.ai *.chat.mistral.ai chat.openai.com *.chat.openai.com chat.qwen.ai *.chat.qwen.ai chatgpt.com *.chatgpt.com claude.ai *.claude.ai copilot.cloud.microsoft *.copilot.cloud.microsoft copilot.microsoft.com *.copilot.microsoft.com deepseek.com *.deepseek.com doubao.com *.doubao.com gemini.google.com *.gemini.google.com grok.com *.grok.com kimi.ai *.kimi.ai kimi.com *.kimi.com kimi.moonshot.cn *.kimi.moonshot.cn meta.ai *.meta.ai oaistatic.com *.oaistatic.com oaiusercontent.com *.oaiusercontent.com perplexity.ai *.perplexity.ai phind.com *.phind.com pi.ai *.pi.ai poe.com *.poe.com pplx.ai *.pplx.ai qianwen.aliyun.com *.qianwen.aliyun.com sora.com *.sora.com sydney.bing.com *.sydney.bing.com tongyi.aliyun.com *.tongyi.aliyun.com you.com *.you.com
Hosts file
Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.
# Block list — Hosts file # Chat assistant (31 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage. 0.0.0.0 bard.google.com 0.0.0.0 c.ai 0.0.0.0 www.c.ai 0.0.0.0 character.ai 0.0.0.0 www.character.ai 0.0.0.0 chat.deepseek.com 0.0.0.0 chat.mistral.ai 0.0.0.0 chat.openai.com 0.0.0.0 chat.qwen.ai 0.0.0.0 chatgpt.com 0.0.0.0 www.chatgpt.com 0.0.0.0 claude.ai 0.0.0.0 www.claude.ai 0.0.0.0 copilot.cloud.microsoft 0.0.0.0 copilot.microsoft.com 0.0.0.0 deepseek.com 0.0.0.0 www.deepseek.com 0.0.0.0 doubao.com 0.0.0.0 www.doubao.com 0.0.0.0 gemini.google.com 0.0.0.0 grok.com 0.0.0.0 www.grok.com 0.0.0.0 kimi.ai 0.0.0.0 www.kimi.ai 0.0.0.0 kimi.com 0.0.0.0 www.kimi.com 0.0.0.0 kimi.moonshot.cn 0.0.0.0 meta.ai 0.0.0.0 www.meta.ai 0.0.0.0 oaistatic.com 0.0.0.0 www.oaistatic.com 0.0.0.0 oaiusercontent.com 0.0.0.0 www.oaiusercontent.com 0.0.0.0 perplexity.ai 0.0.0.0 www.perplexity.ai 0.0.0.0 phind.com 0.0.0.0 www.phind.com 0.0.0.0 pi.ai 0.0.0.0 www.pi.ai 0.0.0.0 poe.com 0.0.0.0 www.poe.com 0.0.0.0 pplx.ai 0.0.0.0 www.pplx.ai 0.0.0.0 qianwen.aliyun.com 0.0.0.0 sora.com 0.0.0.0 www.sora.com 0.0.0.0 sydney.bing.com 0.0.0.0 tongyi.aliyun.com 0.0.0.0 you.com 0.0.0.0 www.you.com
dnsmasq
address=/domain/ also blocks every subdomain.
# Block list — dnsmasq # Chat assistant (31 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # address=/domain/ also blocks every subdomain. address=/bard.google.com/0.0.0.0 address=/c.ai/0.0.0.0 address=/character.ai/0.0.0.0 address=/chat.deepseek.com/0.0.0.0 address=/chat.mistral.ai/0.0.0.0 address=/chat.openai.com/0.0.0.0 address=/chat.qwen.ai/0.0.0.0 address=/chatgpt.com/0.0.0.0 address=/claude.ai/0.0.0.0 address=/copilot.cloud.microsoft/0.0.0.0 address=/copilot.microsoft.com/0.0.0.0 address=/deepseek.com/0.0.0.0 address=/doubao.com/0.0.0.0 address=/gemini.google.com/0.0.0.0 address=/grok.com/0.0.0.0 address=/kimi.ai/0.0.0.0 address=/kimi.com/0.0.0.0 address=/kimi.moonshot.cn/0.0.0.0 address=/meta.ai/0.0.0.0 address=/oaistatic.com/0.0.0.0 address=/oaiusercontent.com/0.0.0.0 address=/perplexity.ai/0.0.0.0 address=/phind.com/0.0.0.0 address=/pi.ai/0.0.0.0 address=/poe.com/0.0.0.0 address=/pplx.ai/0.0.0.0 address=/qianwen.aliyun.com/0.0.0.0 address=/sora.com/0.0.0.0 address=/sydney.bing.com/0.0.0.0 address=/tongyi.aliyun.com/0.0.0.0 address=/you.com/0.0.0.0
Unbound
Add to unbound.conf under server:. always_nxdomain covers subdomains.
# Block list — Unbound # Chat assistant (31 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # Add to unbound.conf under server:. always_nxdomain covers subdomains. local-zone: "bard.google.com." always_nxdomain local-zone: "c.ai." always_nxdomain local-zone: "character.ai." always_nxdomain local-zone: "chat.deepseek.com." always_nxdomain local-zone: "chat.mistral.ai." always_nxdomain local-zone: "chat.openai.com." always_nxdomain local-zone: "chat.qwen.ai." always_nxdomain local-zone: "chatgpt.com." always_nxdomain local-zone: "claude.ai." always_nxdomain local-zone: "copilot.cloud.microsoft." always_nxdomain local-zone: "copilot.microsoft.com." always_nxdomain local-zone: "deepseek.com." always_nxdomain local-zone: "doubao.com." always_nxdomain local-zone: "gemini.google.com." always_nxdomain local-zone: "grok.com." always_nxdomain local-zone: "kimi.ai." always_nxdomain local-zone: "kimi.com." always_nxdomain local-zone: "kimi.moonshot.cn." always_nxdomain local-zone: "meta.ai." always_nxdomain local-zone: "oaistatic.com." always_nxdomain local-zone: "oaiusercontent.com." always_nxdomain local-zone: "perplexity.ai." always_nxdomain local-zone: "phind.com." always_nxdomain local-zone: "pi.ai." always_nxdomain local-zone: "poe.com." always_nxdomain local-zone: "pplx.ai." always_nxdomain local-zone: "qianwen.aliyun.com." always_nxdomain local-zone: "sora.com." always_nxdomain local-zone: "sydney.bing.com." always_nxdomain local-zone: "tongyi.aliyun.com." always_nxdomain local-zone: "you.com." always_nxdomain
BIND response policy zone (RPZ)
Records for a response-policy zone. Add your zone's SOA and NS records at the top.
; Block list — BIND response policy zone (RPZ) ; Chat assistant (31 domains) ; Generated by Shadow AI Finder (shadowaifinder.com) ; Records for a response-policy zone. Add your zone's SOA and NS records at the top. bard.google.com CNAME . *.bard.google.com CNAME . c.ai CNAME . *.c.ai CNAME . character.ai CNAME . *.character.ai CNAME . chat.deepseek.com CNAME . *.chat.deepseek.com CNAME . chat.mistral.ai CNAME . *.chat.mistral.ai CNAME . chat.openai.com CNAME . *.chat.openai.com CNAME . chat.qwen.ai CNAME . *.chat.qwen.ai CNAME . chatgpt.com CNAME . *.chatgpt.com CNAME . claude.ai CNAME . *.claude.ai CNAME . copilot.cloud.microsoft CNAME . *.copilot.cloud.microsoft CNAME . copilot.microsoft.com CNAME . *.copilot.microsoft.com CNAME . deepseek.com CNAME . *.deepseek.com CNAME . doubao.com CNAME . *.doubao.com CNAME . gemini.google.com CNAME . *.gemini.google.com CNAME . grok.com CNAME . *.grok.com CNAME . kimi.ai CNAME . *.kimi.ai CNAME . kimi.com CNAME . *.kimi.com CNAME . kimi.moonshot.cn CNAME . *.kimi.moonshot.cn CNAME . meta.ai CNAME . *.meta.ai CNAME . oaistatic.com CNAME . *.oaistatic.com CNAME . oaiusercontent.com CNAME . *.oaiusercontent.com CNAME . perplexity.ai CNAME . *.perplexity.ai CNAME . phind.com CNAME . *.phind.com CNAME . pi.ai CNAME . *.pi.ai CNAME . poe.com CNAME . *.poe.com CNAME . pplx.ai CNAME . *.pplx.ai CNAME . qianwen.aliyun.com CNAME . *.qianwen.aliyun.com CNAME . sora.com CNAME . *.sora.com CNAME . sydney.bing.com CNAME . *.sydney.bing.com CNAME . tongyi.aliyun.com CNAME . *.tongyi.aliyun.com CNAME . you.com CNAME . *.you.com CNAME .
Pi-hole regex
Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.
# Block list — Pi-hole regex # Chat assistant (31 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains. (\.|^)bard\.google\.com$ (\.|^)c\.ai$ (\.|^)character\.ai$ (\.|^)chat\.deepseek\.com$ (\.|^)chat\.mistral\.ai$ (\.|^)chat\.openai\.com$ (\.|^)chat\.qwen\.ai$ (\.|^)chatgpt\.com$ (\.|^)claude\.ai$ (\.|^)copilot\.cloud\.microsoft$ (\.|^)copilot\.microsoft\.com$ (\.|^)deepseek\.com$ (\.|^)doubao\.com$ (\.|^)gemini\.google\.com$ (\.|^)grok\.com$ (\.|^)kimi\.ai$ (\.|^)kimi\.com$ (\.|^)kimi\.moonshot\.cn$ (\.|^)meta\.ai$ (\.|^)oaistatic\.com$ (\.|^)oaiusercontent\.com$ (\.|^)perplexity\.ai$ (\.|^)phind\.com$ (\.|^)pi\.ai$ (\.|^)poe\.com$ (\.|^)pplx\.ai$ (\.|^)qianwen\.aliyun\.com$ (\.|^)sora\.com$ (\.|^)sydney\.bing\.com$ (\.|^)tongyi\.aliyun\.com$ (\.|^)you\.com$
Squid dstdomain
A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.
# Block list — Squid dstdomain # Chat assistant (31 domains) # Generated by Shadow AI Finder (shadowaifinder.com) # A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule. .bard.google.com .c.ai .character.ai .chat.deepseek.com .chat.mistral.ai .chat.openai.com .chat.qwen.ai .chatgpt.com .claude.ai .copilot.cloud.microsoft .copilot.microsoft.com .deepseek.com .doubao.com .gemini.google.com .grok.com .kimi.ai .kimi.com .kimi.moonshot.cn .meta.ai .oaistatic.com .oaiusercontent.com .perplexity.ai .phind.com .pi.ai .poe.com .pplx.ai .qianwen.aliyun.com .sora.com .sydney.bing.com .tongyi.aliyun.com .you.com
See which of these your company uses
Drop a DNS, proxy or sign-in export into the finder to see which of these services actually show up.