Coding assistant domains

One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.

# Block list — Plain domain list
# Coding assistant (19 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.

bolt.new
codeium.com
copilot-proxy.githubusercontent.com
cursor.com
cursor.sh
cursorapi.com
devin.ai
githubcopilot.com
lovable.app
lovable.dev
origin-tracker.githubusercontent.com
repl.co
replit.com
replit.dev
tabnine.com
v0.app
v0.dev
windsurf.ai
windsurf.com

Copy

Each domain plus a *.domain entry, for gateways that need explicit wildcards.

# Block list — Wildcard list (*.domain)
# Coding assistant (19 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Each domain plus a *.domain entry, for gateways that need explicit wildcards.

bolt.new
*.bolt.new
codeium.com
*.codeium.com
copilot-proxy.githubusercontent.com
*.copilot-proxy.githubusercontent.com
cursor.com
*.cursor.com
cursor.sh
*.cursor.sh
cursorapi.com
*.cursorapi.com
devin.ai
*.devin.ai
githubcopilot.com
*.githubcopilot.com
lovable.app
*.lovable.app
lovable.dev
*.lovable.dev
origin-tracker.githubusercontent.com
*.origin-tracker.githubusercontent.com
repl.co
*.repl.co
replit.com
*.replit.com
replit.dev
*.replit.dev
tabnine.com
*.tabnine.com
v0.app
*.v0.app
v0.dev
*.v0.dev
windsurf.ai
*.windsurf.ai
windsurf.com
*.windsurf.com

Copy

Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.

# Block list — Hosts file
# Coding assistant (19 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.

0.0.0.0 bolt.new
0.0.0.0 www.bolt.new
0.0.0.0 codeium.com
0.0.0.0 www.codeium.com
0.0.0.0 copilot-proxy.githubusercontent.com
0.0.0.0 cursor.com
0.0.0.0 www.cursor.com
0.0.0.0 cursor.sh
0.0.0.0 www.cursor.sh
0.0.0.0 cursorapi.com
0.0.0.0 www.cursorapi.com
0.0.0.0 devin.ai
0.0.0.0 www.devin.ai
0.0.0.0 githubcopilot.com
0.0.0.0 www.githubcopilot.com
0.0.0.0 lovable.app
0.0.0.0 www.lovable.app
0.0.0.0 lovable.dev
0.0.0.0 www.lovable.dev
0.0.0.0 origin-tracker.githubusercontent.com
0.0.0.0 repl.co
0.0.0.0 www.repl.co
0.0.0.0 replit.com
0.0.0.0 www.replit.com
0.0.0.0 replit.dev
0.0.0.0 www.replit.dev
0.0.0.0 tabnine.com
0.0.0.0 www.tabnine.com
0.0.0.0 v0.app
0.0.0.0 www.v0.app
0.0.0.0 v0.dev
0.0.0.0 www.v0.dev
0.0.0.0 windsurf.ai
0.0.0.0 www.windsurf.ai
0.0.0.0 windsurf.com
0.0.0.0 www.windsurf.com

Copy

address=/domain/ also blocks every subdomain.

# Block list — dnsmasq
# Coding assistant (19 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# address=/domain/ also blocks every subdomain.

address=/bolt.new/0.0.0.0
address=/codeium.com/0.0.0.0
address=/copilot-proxy.githubusercontent.com/0.0.0.0
address=/cursor.com/0.0.0.0
address=/cursor.sh/0.0.0.0
address=/cursorapi.com/0.0.0.0
address=/devin.ai/0.0.0.0
address=/githubcopilot.com/0.0.0.0
address=/lovable.app/0.0.0.0
address=/lovable.dev/0.0.0.0
address=/origin-tracker.githubusercontent.com/0.0.0.0
address=/repl.co/0.0.0.0
address=/replit.com/0.0.0.0
address=/replit.dev/0.0.0.0
address=/tabnine.com/0.0.0.0
address=/v0.app/0.0.0.0
address=/v0.dev/0.0.0.0
address=/windsurf.ai/0.0.0.0
address=/windsurf.com/0.0.0.0

Copy

Add to unbound.conf under server:. always_nxdomain covers subdomains.

# Block list — Unbound
# Coding assistant (19 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Add to unbound.conf under server:. always_nxdomain covers subdomains.

local-zone: "bolt.new." always_nxdomain
local-zone: "codeium.com." always_nxdomain
local-zone: "copilot-proxy.githubusercontent.com." always_nxdomain
local-zone: "cursor.com." always_nxdomain
local-zone: "cursor.sh." always_nxdomain
local-zone: "cursorapi.com." always_nxdomain
local-zone: "devin.ai." always_nxdomain
local-zone: "githubcopilot.com." always_nxdomain
local-zone: "lovable.app." always_nxdomain
local-zone: "lovable.dev." always_nxdomain
local-zone: "origin-tracker.githubusercontent.com." always_nxdomain
local-zone: "repl.co." always_nxdomain
local-zone: "replit.com." always_nxdomain
local-zone: "replit.dev." always_nxdomain
local-zone: "tabnine.com." always_nxdomain
local-zone: "v0.app." always_nxdomain
local-zone: "v0.dev." always_nxdomain
local-zone: "windsurf.ai." always_nxdomain
local-zone: "windsurf.com." always_nxdomain

Copy

Records for a response-policy zone. Add your zone's SOA and NS records at the top.

; Block list — BIND response policy zone (RPZ)
; Coding assistant (19 domains)
; Generated by Shadow AI Finder (shadowaifinder.com)
; Records for a response-policy zone. Add your zone's SOA and NS records at the top.

bolt.new CNAME .
*.bolt.new CNAME .
codeium.com CNAME .
*.codeium.com CNAME .
copilot-proxy.githubusercontent.com CNAME .
*.copilot-proxy.githubusercontent.com CNAME .
cursor.com CNAME .
*.cursor.com CNAME .
cursor.sh CNAME .
*.cursor.sh CNAME .
cursorapi.com CNAME .
*.cursorapi.com CNAME .
devin.ai CNAME .
*.devin.ai CNAME .
githubcopilot.com CNAME .
*.githubcopilot.com CNAME .
lovable.app CNAME .
*.lovable.app CNAME .
lovable.dev CNAME .
*.lovable.dev CNAME .
origin-tracker.githubusercontent.com CNAME .
*.origin-tracker.githubusercontent.com CNAME .
repl.co CNAME .
*.repl.co CNAME .
replit.com CNAME .
*.replit.com CNAME .
replit.dev CNAME .
*.replit.dev CNAME .
tabnine.com CNAME .
*.tabnine.com CNAME .
v0.app CNAME .
*.v0.app CNAME .
v0.dev CNAME .
*.v0.dev CNAME .
windsurf.ai CNAME .
*.windsurf.ai CNAME .
windsurf.com CNAME .
*.windsurf.com CNAME .

Copy

Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.

# Block list — Pi-hole regex
# Coding assistant (19 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.

(\.|^)bolt\.new$
(\.|^)codeium\.com$
(\.|^)copilot-proxy\.githubusercontent\.com$
(\.|^)cursor\.com$
(\.|^)cursor\.sh$
(\.|^)cursorapi\.com$
(\.|^)devin\.ai$
(\.|^)githubcopilot\.com$
(\.|^)lovable\.app$
(\.|^)lovable\.dev$
(\.|^)origin-tracker\.githubusercontent\.com$
(\.|^)repl\.co$
(\.|^)replit\.com$
(\.|^)replit\.dev$
(\.|^)tabnine\.com$
(\.|^)v0\.app$
(\.|^)v0\.dev$
(\.|^)windsurf\.ai$
(\.|^)windsurf\.com$

Copy

A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.

# Block list — Squid dstdomain
# Coding assistant (19 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.

.bolt.new
.codeium.com
.copilot-proxy.githubusercontent.com
.cursor.com
.cursor.sh
.cursorapi.com
.devin.ai
.githubcopilot.com
.lovable.app
.lovable.dev
.origin-tracker.githubusercontent.com
.repl.co
.replit.com
.replit.dev
.tabnine.com
.v0.app
.v0.dev
.windsurf.ai
.windsurf.com

Copy