Skip to content

Network Connections

This page serves to document connections commonly made by IronFox. It will explain the purpose of each connection, what data is shared, and how to disable (or override if applicable) the connection if desired.

Default Connections

These connections are made by default, out of the box.

Add-on Updates

AttributeDetails
URL(s)https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=2&*
OperatorMozilla - Privacy policy
PurposeDownloads updates for installed extensions and themes
Data SharedIdentifiers of installed add-ons, Current versions of installed add-ons, Browser version, User Agent, public IP address
FrequencyHourly (extensions.update.interval)
ControlSet extensions.update.enabled to false in about:config. Individual add-ons: extensions.{GUID}.update.enabled to false. NOT recommended to disable.

Autograph

AttributeDetails
URL(s)https://content-signature-2.cdn.mozilla.net/g/chains/*
OperatorMozilla - Privacy policy
PurposeProvides signing/verification for content signatures and extension signing
Data SharedUser Agent, public IP address
FrequencyEvery browser launch, and periodically after
ControlAppend ,content-signature-2.cdn.mozilla.net to network.dns.localDomains in about:config. NOT recommended to disable.

DNS over HTTPS

AttributeDetails
URL(s)https://dns.quad9.net/dns-query
OperatorQuad9 - Privacy policy
PurposeProvides encrypted domain name resolution
Data SharedDomain names of servers you connect to, User Agent, public IP address
FrequencyEvery time you connect to a domain
ControlChange providers in Privacy and securityDNS over HTTPS in settings, or set to use system DNS with Default Protection

Initial Add-on Installation

AttributeDetails
URL(s)https://addons.mozilla.org/firefox/downloads/latest/uBlock0@raymondhill.net/latest.xpi
OperatorMozilla - Privacy policy
PurposeDownloads and installs the uBlock Origin extension
Data SharedUser Agent, public IP address
FrequencyOnce, on initial set-up
ControlUncheck the box to install uBlock Origin on onboarding. NOT recommended.

OCSP Checks

AttributeDetails
URL(s)http://ocsp.digicert.com/, http://ocsp.globalsign.com/*, http://r10.o.lencr.org/, http://r11.o.lencr.org/
OperatorVarious certificate authorities
PurposeValidates HTTPS certificates
Data SharedUser Agent, public IP address
FrequencyEvery time you connect to a server that doesn’t support CRLite or OCSP stapling
ControlSet security.OCSP.enabled to 0 in about:config. NOT recommended to disable.

Push Service

AttributeDetails
URL(s)wss://push.services.mozilla.com/
OperatorMozilla - Privacy policy
PurposeProvides support for web push notifications and Remote Settings
Data SharedRandom identifier (dom.push.userAgentID), User Agent, public IP address
FrequencyEvery browser launch, and periodically after
ControlSet dom.push.connection.enabled to false and dom.push.userAgentID to in about:config. NOT recommended.

Remote Settings

AttributeDetails
URL(s)Multiple https://firefox.settings.services.mozilla.com/ and https://firefox-settings-attachments.cdn.mozilla.net/ URLs
OperatorMozilla - Privacy policy
PurposeDownloads configurations and databases for various functionality (blocklists, certificates, tracking protection, etc.)
Data SharedUser Agent, public IP address
FrequencyHourly (services.settings.poll_interval)
ControlSet browser.ironfox.services.settings.allowedCollections to in about:config. NOT recommended to disable. Individual components can be disabled separately.

Safe Browsing

AttributeDetails
URL(s)https://safebrowsing.ironfoxoss.org/v4/fullHashes:find?$ct=application/x-protobuf&*, https://safebrowsing.ironfoxoss.org/v4/threatListUpdates:fetch?$ct=application/x-protobuf&*
OperatorIronFox OSS - Privacy policy
PurposeProvides real-time protection against malware and phishing (Proxies Google Safe Browsing)
Data SharedPartial URL hashes upon potential matches, User Agent, public IP address
FrequencyEvery browser launch, and every 30 minutes after
ControlSee our Safe Browsing page for details. NOT recommended to disable.

System Add-on Updates

AttributeDetails
URL(s)https://archive.mozilla.org/pub/system-addons/*, https://aus5.mozilla.org/update/3/SystemAddons/*
OperatorMozilla - Privacy policy
PurposeDownloads and updates system add-ons
Data SharedBrowser version, locale, OS, OS architecture, OS version, User Agent, public IP address
FrequencyHourly
ControlSet extensions.systemAddon.update.enabled to false in about:config. NOT recommended.

uBlock Origin

AttributeDetails
URL(s)Multiple URLs including https://cdn.jsdelivr.net/, https://cdn.statically.io/, https://filters.adtidy.org/, https://gitlab.com/, https://raw.githubusercontent.com/, etc.
OperatorVarious operators
PurposeDownloads and updates for filterlists and other resources in uBlock Origin
Data SharedUser Agent, public IP address
FrequencyPeriodically
ControlDisable or remove uBlock Origin from AdvancedExtensionsuBlock Origin in settings. NOT recommended.

Additional Connections

The following are optional, non-standard connections that IronFox might make, depending on the features you decide to use.

Geolocation

AttributeDetails
URL(s)https://api.beacondb.net/v1/geolocate
OperatorBeaconDB - Privacy policy
PurposeServes as a fallback to provide geolocation when the system’s provider is unavailable
Data SharedStrength and general information of nearby cellular towers and Wi-Fi networks (if available/supported), User Agent, public IP address
FrequencyWhen/if you grant a website permission to access your location and if your system’s geolocation provider is unavailable
ControlSimply don’t grant websites location permission, or set geo.provider.network.url to in about:config. Can also change provider by setting geo.provider.network.url to preferred URL.

DNS over HTTPS Provider Options

Available in Privacy and securityDNS over HTTPSChoose provider:

ProviderURLPrivacy Policy
AdGuardhttps://dns.adguard-dns.com/dns-queryPrivacy policy
AdGuard (Unfiltered)https://unfiltered.adguard-dns.com/dns-queryPrivacy policy
Cloudflarehttps://mozilla.cloudflare-dns.com/dns-queryPrivacy policy
Cloudflare (Malware Protection)https://security.cloudflare-dns.com/dns-queryPrivacy policy
DNS0https://dns0.euPrivacy policy
DNS0 (ZERO)https://zero.dns0.euPrivacy policy
DNS4EU (Ad Blocking)https://noads.joindns4.eu/dns-queryPrivacy policy
DNS4EU (Protective)https://protective.joindns4.eu/dns-queryPrivacy policy
DNS4EU (Unfiltered)https://unfiltered.joindns4.eu/dns-queryPrivacy policy
Mullvad (Base)https://base.dns.mullvad.net/dns-queryPrivacy policy
Mullvad (Unfiltered)https://dns.mullvad.net/dns-queryPrivacy policy
NextDNShttps://firefox.dns.nextdns.io/Privacy policy
Wikimediahttps://wikimedia-dns.org/dns-queryPrivacy policy