Model API or platform domains

One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.

# Block list — Plain domain list
# Model API or platform (26 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.

aistudio.google.com
api.anthropic.com
api.deepseek.com
api.mistral.ai
api.openai.com
api.x.ai
cohere.ai
cohere.com
console.anthropic.com
console.mistral.ai
console.x.ai
fireworks.ai
generativelanguage.googleapis.com
groq.com
groqcloud.com
hf.co
hf.space
huggingface.co
makersuite.google.com
openrouter.ai
platform.deepseek.com
platform.openai.com
replicate.com
replicate.delivery
together.ai
together.xyz

Copy

Each domain plus a *.domain entry, for gateways that need explicit wildcards.

# Block list — Wildcard list (*.domain)
# Model API or platform (26 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Each domain plus a *.domain entry, for gateways that need explicit wildcards.

aistudio.google.com
*.aistudio.google.com
api.anthropic.com
*.api.anthropic.com
api.deepseek.com
*.api.deepseek.com
api.mistral.ai
*.api.mistral.ai
api.openai.com
*.api.openai.com
api.x.ai
*.api.x.ai
cohere.ai
*.cohere.ai
cohere.com
*.cohere.com
console.anthropic.com
*.console.anthropic.com
console.mistral.ai
*.console.mistral.ai
console.x.ai
*.console.x.ai
fireworks.ai
*.fireworks.ai
generativelanguage.googleapis.com
*.generativelanguage.googleapis.com
groq.com
*.groq.com
groqcloud.com
*.groqcloud.com
hf.co
*.hf.co
hf.space
*.hf.space
huggingface.co
*.huggingface.co
makersuite.google.com
*.makersuite.google.com
openrouter.ai
*.openrouter.ai
platform.deepseek.com
*.platform.deepseek.com
platform.openai.com
*.platform.openai.com
replicate.com
*.replicate.com
replicate.delivery
*.replicate.delivery
together.ai
*.together.ai
together.xyz
*.together.xyz

Copy

Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.

# Block list — Hosts file
# Model API or platform (26 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.

0.0.0.0 aistudio.google.com
0.0.0.0 api.anthropic.com
0.0.0.0 api.deepseek.com
0.0.0.0 api.mistral.ai
0.0.0.0 api.openai.com
0.0.0.0 api.x.ai
0.0.0.0 cohere.ai
0.0.0.0 www.cohere.ai
0.0.0.0 cohere.com
0.0.0.0 www.cohere.com
0.0.0.0 console.anthropic.com
0.0.0.0 console.mistral.ai
0.0.0.0 console.x.ai
0.0.0.0 fireworks.ai
0.0.0.0 www.fireworks.ai
0.0.0.0 generativelanguage.googleapis.com
0.0.0.0 groq.com
0.0.0.0 www.groq.com
0.0.0.0 groqcloud.com
0.0.0.0 www.groqcloud.com
0.0.0.0 hf.co
0.0.0.0 www.hf.co
0.0.0.0 hf.space
0.0.0.0 www.hf.space
0.0.0.0 huggingface.co
0.0.0.0 www.huggingface.co
0.0.0.0 makersuite.google.com
0.0.0.0 openrouter.ai
0.0.0.0 www.openrouter.ai
0.0.0.0 platform.deepseek.com
0.0.0.0 platform.openai.com
0.0.0.0 replicate.com
0.0.0.0 www.replicate.com
0.0.0.0 replicate.delivery
0.0.0.0 www.replicate.delivery
0.0.0.0 together.ai
0.0.0.0 www.together.ai
0.0.0.0 together.xyz
0.0.0.0 www.together.xyz

Copy

address=/domain/ also blocks every subdomain.

# Block list — dnsmasq
# Model API or platform (26 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# address=/domain/ also blocks every subdomain.

address=/aistudio.google.com/0.0.0.0
address=/api.anthropic.com/0.0.0.0
address=/api.deepseek.com/0.0.0.0
address=/api.mistral.ai/0.0.0.0
address=/api.openai.com/0.0.0.0
address=/api.x.ai/0.0.0.0
address=/cohere.ai/0.0.0.0
address=/cohere.com/0.0.0.0
address=/console.anthropic.com/0.0.0.0
address=/console.mistral.ai/0.0.0.0
address=/console.x.ai/0.0.0.0
address=/fireworks.ai/0.0.0.0
address=/generativelanguage.googleapis.com/0.0.0.0
address=/groq.com/0.0.0.0
address=/groqcloud.com/0.0.0.0
address=/hf.co/0.0.0.0
address=/hf.space/0.0.0.0
address=/huggingface.co/0.0.0.0
address=/makersuite.google.com/0.0.0.0
address=/openrouter.ai/0.0.0.0
address=/platform.deepseek.com/0.0.0.0
address=/platform.openai.com/0.0.0.0
address=/replicate.com/0.0.0.0
address=/replicate.delivery/0.0.0.0
address=/together.ai/0.0.0.0
address=/together.xyz/0.0.0.0

Copy

Add to unbound.conf under server:. always_nxdomain covers subdomains.

# Block list — Unbound
# Model API or platform (26 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Add to unbound.conf under server:. always_nxdomain covers subdomains.

local-zone: "aistudio.google.com." always_nxdomain
local-zone: "api.anthropic.com." always_nxdomain
local-zone: "api.deepseek.com." always_nxdomain
local-zone: "api.mistral.ai." always_nxdomain
local-zone: "api.openai.com." always_nxdomain
local-zone: "api.x.ai." always_nxdomain
local-zone: "cohere.ai." always_nxdomain
local-zone: "cohere.com." always_nxdomain
local-zone: "console.anthropic.com." always_nxdomain
local-zone: "console.mistral.ai." always_nxdomain
local-zone: "console.x.ai." always_nxdomain
local-zone: "fireworks.ai." always_nxdomain
local-zone: "generativelanguage.googleapis.com." always_nxdomain
local-zone: "groq.com." always_nxdomain
local-zone: "groqcloud.com." always_nxdomain
local-zone: "hf.co." always_nxdomain
local-zone: "hf.space." always_nxdomain
local-zone: "huggingface.co." always_nxdomain
local-zone: "makersuite.google.com." always_nxdomain
local-zone: "openrouter.ai." always_nxdomain
local-zone: "platform.deepseek.com." always_nxdomain
local-zone: "platform.openai.com." always_nxdomain
local-zone: "replicate.com." always_nxdomain
local-zone: "replicate.delivery." always_nxdomain
local-zone: "together.ai." always_nxdomain
local-zone: "together.xyz." always_nxdomain

Copy

Records for a response-policy zone. Add your zone's SOA and NS records at the top.

; Block list — BIND response policy zone (RPZ)
; Model API or platform (26 domains)
; Generated by Shadow AI Finder (shadowaifinder.com)
; Records for a response-policy zone. Add your zone's SOA and NS records at the top.

aistudio.google.com CNAME .
*.aistudio.google.com CNAME .
api.anthropic.com CNAME .
*.api.anthropic.com CNAME .
api.deepseek.com CNAME .
*.api.deepseek.com CNAME .
api.mistral.ai CNAME .
*.api.mistral.ai CNAME .
api.openai.com CNAME .
*.api.openai.com CNAME .
api.x.ai CNAME .
*.api.x.ai CNAME .
cohere.ai CNAME .
*.cohere.ai CNAME .
cohere.com CNAME .
*.cohere.com CNAME .
console.anthropic.com CNAME .
*.console.anthropic.com CNAME .
console.mistral.ai CNAME .
*.console.mistral.ai CNAME .
console.x.ai CNAME .
*.console.x.ai CNAME .
fireworks.ai CNAME .
*.fireworks.ai CNAME .
generativelanguage.googleapis.com CNAME .
*.generativelanguage.googleapis.com CNAME .
groq.com CNAME .
*.groq.com CNAME .
groqcloud.com CNAME .
*.groqcloud.com CNAME .
hf.co CNAME .
*.hf.co CNAME .
hf.space CNAME .
*.hf.space CNAME .
huggingface.co CNAME .
*.huggingface.co CNAME .
makersuite.google.com CNAME .
*.makersuite.google.com CNAME .
openrouter.ai CNAME .
*.openrouter.ai CNAME .
platform.deepseek.com CNAME .
*.platform.deepseek.com CNAME .
platform.openai.com CNAME .
*.platform.openai.com CNAME .
replicate.com CNAME .
*.replicate.com CNAME .
replicate.delivery CNAME .
*.replicate.delivery CNAME .
together.ai CNAME .
*.together.ai CNAME .
together.xyz CNAME .
*.together.xyz CNAME .

Copy

Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.

# Block list — Pi-hole regex
# Model API or platform (26 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.

(\.|^)aistudio\.google\.com$
(\.|^)api\.anthropic\.com$
(\.|^)api\.deepseek\.com$
(\.|^)api\.mistral\.ai$
(\.|^)api\.openai\.com$
(\.|^)api\.x\.ai$
(\.|^)cohere\.ai$
(\.|^)cohere\.com$
(\.|^)console\.anthropic\.com$
(\.|^)console\.mistral\.ai$
(\.|^)console\.x\.ai$
(\.|^)fireworks\.ai$
(\.|^)generativelanguage\.googleapis\.com$
(\.|^)groq\.com$
(\.|^)groqcloud\.com$
(\.|^)hf\.co$
(\.|^)hf\.space$
(\.|^)huggingface\.co$
(\.|^)makersuite\.google\.com$
(\.|^)openrouter\.ai$
(\.|^)platform\.deepseek\.com$
(\.|^)platform\.openai\.com$
(\.|^)replicate\.com$
(\.|^)replicate\.delivery$
(\.|^)together\.ai$
(\.|^)together\.xyz$

Copy

A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.

# Block list — Squid dstdomain
# Model API or platform (26 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.

.aistudio.google.com
.api.anthropic.com
.api.deepseek.com
.api.mistral.ai
.api.openai.com
.api.x.ai
.cohere.ai
.cohere.com
.console.anthropic.com
.console.mistral.ai
.console.x.ai
.fireworks.ai
.generativelanguage.googleapis.com
.groq.com
.groqcloud.com
.hf.co
.hf.space
.huggingface.co
.makersuite.google.com
.openrouter.ai
.platform.deepseek.com
.platform.openai.com
.replicate.com
.replicate.delivery
.together.ai
.together.xyz

Copy