Shadow AI Finder by Agent Trust Cloud

Slides, research and documents domains

8 services, 10 domains. Documents and research material are uploaded to produce slides, summaries or answers.

ServiceDomains
NotebookLMnotebooklm.google.com notebooklm.google
Gammagamma.app
Tometome.app
Beautiful.aibeautiful.ai
Elicitelicit.com elicit.org
Consensusconsensus.app
ChatPDFchatpdf.com
Humatahumata.ai

Block or allow the whole category

One list for the whole category. Most teams approve one or two services and block the rest, so remove the ones you approve before using it.

Plain domain list

One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.

# Block list — Plain domain list
# Slides, research and documents (10 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# One domain per line. Most DNS filters, secure web gateways and firewalls accept this for custom lists; set the list to include subdomains.

beautiful.ai
chatpdf.com
consensus.app
elicit.com
elicit.org
gamma.app
humata.ai
notebooklm.google
notebooklm.google.com
tome.app

Wildcard list (*.domain)

Each domain plus a *.domain entry, for gateways that need explicit wildcards.

# Block list — Wildcard list (*.domain)
# Slides, research and documents (10 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Each domain plus a *.domain entry, for gateways that need explicit wildcards.

beautiful.ai
*.beautiful.ai
chatpdf.com
*.chatpdf.com
consensus.app
*.consensus.app
elicit.com
*.elicit.com
elicit.org
*.elicit.org
gamma.app
*.gamma.app
humata.ai
*.humata.ai
notebooklm.google
*.notebooklm.google
notebooklm.google.com
*.notebooklm.google.com
tome.app
*.tome.app

Hosts file

Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.

# Block list — Hosts file
# Slides, research and documents (10 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Blocks exact names only; subdomains not listed here still resolve. Use a DNS filter for full coverage.

0.0.0.0 beautiful.ai
0.0.0.0 www.beautiful.ai
0.0.0.0 chatpdf.com
0.0.0.0 www.chatpdf.com
0.0.0.0 consensus.app
0.0.0.0 www.consensus.app
0.0.0.0 elicit.com
0.0.0.0 www.elicit.com
0.0.0.0 elicit.org
0.0.0.0 www.elicit.org
0.0.0.0 gamma.app
0.0.0.0 www.gamma.app
0.0.0.0 humata.ai
0.0.0.0 www.humata.ai
0.0.0.0 notebooklm.google
0.0.0.0 www.notebooklm.google
0.0.0.0 notebooklm.google.com
0.0.0.0 tome.app
0.0.0.0 www.tome.app

dnsmasq

address=/domain/ also blocks every subdomain.

# Block list — dnsmasq
# Slides, research and documents (10 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# address=/domain/ also blocks every subdomain.

address=/beautiful.ai/0.0.0.0
address=/chatpdf.com/0.0.0.0
address=/consensus.app/0.0.0.0
address=/elicit.com/0.0.0.0
address=/elicit.org/0.0.0.0
address=/gamma.app/0.0.0.0
address=/humata.ai/0.0.0.0
address=/notebooklm.google/0.0.0.0
address=/notebooklm.google.com/0.0.0.0
address=/tome.app/0.0.0.0

Unbound

Add to unbound.conf under server:. always_nxdomain covers subdomains.

# Block list — Unbound
# Slides, research and documents (10 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Add to unbound.conf under server:. always_nxdomain covers subdomains.

local-zone: "beautiful.ai." always_nxdomain
local-zone: "chatpdf.com." always_nxdomain
local-zone: "consensus.app." always_nxdomain
local-zone: "elicit.com." always_nxdomain
local-zone: "elicit.org." always_nxdomain
local-zone: "gamma.app." always_nxdomain
local-zone: "humata.ai." always_nxdomain
local-zone: "notebooklm.google." always_nxdomain
local-zone: "notebooklm.google.com." always_nxdomain
local-zone: "tome.app." always_nxdomain

BIND response policy zone (RPZ)

Records for a response-policy zone. Add your zone's SOA and NS records at the top.

; Block list — BIND response policy zone (RPZ)
; Slides, research and documents (10 domains)
; Generated by Shadow AI Finder (shadowaifinder.com)
; Records for a response-policy zone. Add your zone's SOA and NS records at the top.

beautiful.ai CNAME .
*.beautiful.ai CNAME .
chatpdf.com CNAME .
*.chatpdf.com CNAME .
consensus.app CNAME .
*.consensus.app CNAME .
elicit.com CNAME .
*.elicit.com CNAME .
elicit.org CNAME .
*.elicit.org CNAME .
gamma.app CNAME .
*.gamma.app CNAME .
humata.ai CNAME .
*.humata.ai CNAME .
notebooklm.google CNAME .
*.notebooklm.google CNAME .
notebooklm.google.com CNAME .
*.notebooklm.google.com CNAME .
tome.app CNAME .
*.tome.app CNAME .

Pi-hole regex

Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.

# Block list — Pi-hole regex
# Slides, research and documents (10 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# Add as regex blacklist (or whitelist) entries. Each line matches the domain and its subdomains.

(\.|^)beautiful\.ai$
(\.|^)chatpdf\.com$
(\.|^)consensus\.app$
(\.|^)elicit\.com$
(\.|^)elicit\.org$
(\.|^)gamma\.app$
(\.|^)humata\.ai$
(\.|^)notebooklm\.google$
(\.|^)notebooklm\.google\.com$
(\.|^)tome\.app$

Squid dstdomain

A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.

# Block list — Squid dstdomain
# Slides, research and documents (10 domains)
# Generated by Shadow AI Finder (shadowaifinder.com)
# A leading dot matches the domain and all subdomains. Use with an acl ... dstdomain "/path/file" rule.

.beautiful.ai
.chatpdf.com
.consensus.app
.elicit.com
.elicit.org
.gamma.app
.humata.ai
.notebooklm.google
.notebooklm.google.com
.tome.app

See which of these your company uses

Drop a DNS, proxy or sign-in export into the finder to see which of these services actually show up.