{
  "ts": "2026-11-05T00:44:17-0500",
  "wave": 222,
  "type": "surveillance-cartography",
  "total_sinkholes": 32,
  "corporations": {
    "Adobe (Omniture)": {
      "endpoints": 1,
      "domains": [
        "sc.omtrdc.net"
      ],
      "purposes": [
        "Web analytics, visitor tracking, session recording"
      ],
      "data_centers": [
        "Adobe Cloud (Oregon/Virginia)"
      ],
      "gdpr_roles": [
        "Processor"
      ]
    },
    "Adobe": {
      "endpoints": 1,
      "domains": [
        "demdex.net"
      ],
      "purposes": [
        "Cross-site identity graph, interest profiling, data marketplace"
      ],
      "data_centers": [
        "Adobe Cloud (global)"
      ],
      "gdpr_roles": [
        "Controller \u2014 builds identity profiles"
      ]
    },
    "Nielsen": {
      "endpoints": 1,
      "domains": [
        "imrworldwide.com"
      ],
      "purposes": [
        "TV/streaming viewership tracking"
      ],
      "data_centers": [
        "Nielsen Cloud (Virginia)"
      ],
      "gdpr_roles": [
        "Controller"
      ]
    },
    "Amazon": {
      "endpoints": 13,
      "domains": [
        "amazon-adsystem.com",
        "unagi-na.amazon.com",
        "device-metrics-us.amazon.com",
        "device-metrics-us-2.amazon.com",
        "mads.amazon.com",
        "fls-na.amazon.com",
        "arcus-uswest.amazon.com",
        "mas-ext.amazon.com",
        "ads.amazon.com",
        "msh.amazon.com",
        "api.amazonalexa.com",
        "ktpx.amazon.com",
        "firetvcaptiveportal.com"
      ],
      "purposes": [
        "Alexa routines, device state, automation",
        "App installs, updates, licensing",
        "Same \u2014 redundant collection endpoint",
        "Hardware telemetry, crash reports, usage patterns",
        "Everything \u2014 clicks, views, purchases, device state",
        "Voice recordings, NLU, command processing",
        "Cross-site ad tracking",
        "Viewing habits, app usage, device state",
        "Ad targeting on Fire devices",
        "Reading habits, device usage",
        "Ad targeting, purchase tracking",
        "Ring/Blink camera cloud processing",
        "Captive portal check \u2014 leaks presence"
      ],
      "data_centers": [
        "AWS us-east-1 (Virginia)",
        "AWS us-east-1",
        "AWS us-west-2 (Oregon)",
        "AWS (CloudFront)"
      ],
      "gdpr_roles": [
        "Processor",
        "Controller \u2014 video surveillance data",
        "Controller \u2014 voice data",
        "Controller"
      ]
    },
    "Google (Alphabet)": {
      "endpoints": 10,
      "domains": [
        "firebaselogging-pa.googleapis.com",
        "app-measurement.com",
        "doubleclick.net",
        "pagead2.googlesyndication.com",
        "logsink.devices.nest.com",
        "clients3.google.com",
        "connectivitycheck.gstatic.com",
        "play.googleapis.com",
        "home-frontdoor-pa.googleapis.com",
        "firebaseinstallations.googleapis.com"
      ],
      "purposes": [
        "Captive portal detection \u2014 leaks device presence",
        "Ad serving, cross-site tracking, cookies",
        "Thermostat logs, camera feeds, sensor data",
        "Smart home device control, presence, HVAC data",
        "Cross-platform measurement",
        "App telemetry, usage tracking",
        "Device telemetry, update checks, diagnostics",
        "App installs, licensing, device attestation",
        "Installation tracking, device fingerprinting",
        "Ad delivery, interest profiling"
      ],
      "data_centers": [
        "Google Cloud (us-east4)",
        "Google Cloud (global)",
        "Google Cloud (us-central1)",
        "Google Cloud (global CDN)"
      ],
      "gdpr_roles": [
        "Processor",
        "Controller \u2014 processes home sensor data",
        "Controller",
        "Processor under Google DPA",
        "Controller \u2014 processes home data",
        "Controller \u2014 tracks across sites",
        "Processor/Controller"
      ]
    },
    "comScore (Comscore)": {
      "endpoints": 1,
      "domains": [
        "scorecardresearch.com"
      ],
      "purposes": [
        "Cross-publisher audience measurement"
      ],
      "data_centers": [
        "Reston VA"
      ],
      "gdpr_roles": [
        "Controller"
      ]
    },
    "Conviva": {
      "endpoints": 1,
      "domains": [
        "conviva.com"
      ],
      "purposes": [
        "Video QoE, buffering, viewer behavior"
      ],
      "data_centers": [
        "AWS us-west-2"
      ],
      "gdpr_roles": [
        "Processor"
      ]
    },
    "Oracle (Moat)": {
      "endpoints": 1,
      "domains": [
        "moatads.com"
      ],
      "purposes": [
        "Ad viewability, attention tracking, brand safety"
      ],
      "data_centers": [
        "Oracle Cloud (Ashburn)"
      ],
      "gdpr_roles": [
        "Controller"
      ]
    },
    "Mediaocean (Flashtalking)": {
      "endpoints": 1,
      "domains": [
        "serving-sys.com"
      ],
      "purposes": [
        "Ad creative serving, impression tracking"
      ],
      "data_centers": [
        "AWS (global CDN)"
      ],
      "gdpr_roles": [
        "Processor"
      ]
    },
    "The Trade Desk": {
      "endpoints": 1,
      "domains": [
        "adsrvr.org"
      ],
      "purposes": [
        "Real-time bidding, behavioral targeting, cross-device ID"
      ],
      "data_centers": [
        "Multiple DCs (global)"
      ],
      "gdpr_roles": [
        "Controller \u2014 builds profiles"
      ]
    },
    "Microsoft (Xandr/AppNexus)": {
      "endpoints": 1,
      "domains": [
        "adnxs.com"
      ],
      "purposes": [
        "Programmatic ads, cross-site tracking, identity resolution"
      ],
      "data_centers": [
        "Azure (multiple)"
      ],
      "gdpr_roles": [
        "Controller \u2014 identity resolution"
      ]
    },
    "Meta (Facebook)": {
      "endpoints": 14,
      "endpoints_proposed_block": 7,
      "domains": [
        "graph.facebook.com",
        "www.facebook.com",
        "connect.facebook.net",
        "pixel.facebook.com",
        "an.facebook.com",
        "mqtt-mini.facebook.com",
        "edge-mqtt.facebook.com",
        "static.xx.fbcdn.net",
        "web.facebook.com",
        "portal.facebook.com",
        "instagram.com",
        "i.instagram.com",
        "threads.net",
        "whatsapp.net"
      ],
      "purposes": [
        "social graph tracking",
        "cross-platform measurement",
        "ad targeting",
        "device fingerprinting",
        "presence tracking",
        "video/audio monitoring"
      ],
      "data_centers": [
        "Prineville OR",
        "Lulea Sweden",
        "Ashburn VA",
        "New Albany OH",
        "Eagle Mountain UT"
      ],
      "gdpr_roles": [
        "Controller \u2014 owns data across all Meta properties"
      ],
      "status": "PROPOSED \u2014 not yet sinkholes"
    }
  },
  "data_types_blocked": [
    "ad",
    "identity",
    "presence",
    "profiling",
    "sensor",
    "telemetry",
    "tracking",
    "video",
    "viewing",
    "voice"
  ],
  "gdpr_controllers": 23,
  "gdpr_processors": 10,
  "total_sinkholes_proposed": 39,
  "corporations_total": 12
}