You shouldn't need to resolve domains to block things, but if you need to... do run cmd, and then ping the domain. It should show you it.

Personally, I would edit hosts file. You put 0.0.0.0 and wwwr2rdownload.com save the hosts file and you are done in under a minute.

 

your
https://www.nslookup.io/website-to-ip-lookup/
it gave me this : 67.225.218.6
in the page above you can copy url and it gives you ip address, or you can scroll down and you'll see a tute about
How to lookup a website's IP address on Windows (or other Operating Systems)

 

Last edited: Feb 14, 2024

Oh, I just looked it up and found it in the C:\Windows\System32\drivers\etc\hosts with admin.
Here is the content of the hosts file:

```
# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
127.0.0.1 www.r2rdownload.com
127.0.0.1 www.elephantafiles.com
# Added by Docker Desktop
# 192.168.1.103 host.docker.internal
# 192.168.1.103 gateway.docker.internal
# To allow the same kube context to work on the host and the container:
127.0.0.1 kubernetes.docker.internal
# End of section
127.0.0.1 www.overloud.com
```

There it is. r2rdownload.com and elephantafiles.com are added without my permission. So, would the issue be solved if I remove these two lines?
What about others? There are more, but I think docker files are safe as I installed Docker. But I'm not sure if it's ok to leave www.overlould.com. Or should I remove it as well?

 

Great! Thx!

 

Awesome! It works! It's much simpler. Blocking the IP address with Firewall didn't help though.
Thank you so much!

 

Welp, the thread went senile.

An R2R keygen added those. It blocked your PC from ever accessing these sites, because now whenever you try to actually visit r2rdownload from your browser, the call wil be redirected to localhost and thus will never reach the site. They sold R2R cracks for real money, so R2R went for this measure, and some of their keygens from 2018-19, I believe, refused to work if these lines weren't in your hosts file.
I repeat again, what's actually happening is, your browser calls 127.0.0.1, which is an IP address your computer uses to call itself. This is normal behaviour. But due to that line in hosts, the analytics tool show that your browser calls r2rdownload.
Nothing is really happening, it's just windows analytics bug.

 

For feck's sake Wolfang, you've been here for almost as long as I have and every question of yours I've seen is just stubborn ignorance.

 

My bet is on how the monitoring tool interprets the network activity - simply showing the domain name associated with the connection. So yeah, nothing rly going on here (there is only a slight chance of malicious activity in similar cases)

I wonder though if it wouldn't be the same just deleting or putting # in front of those entries at this point. r2r kgs wont work anyway if it is a 0.0.0.0 block.. or will they? Just something to keep in mind if you're using cracks from that period.