This is not specifically related to Pi-hole per se, but while looking through the query log I kept seeing requests to steelseries.com ; media.steelseriescdn.com ; void.steelseries.com ; legacy._segment._tcp.steelseries.com
My keyboard is this brand but the thing is I have blocked all the executables in the Steelseries Engine 3 install folder with Windows firewall. Not a fan of telemetry and the updates have removed configurations in the past. The software itself fails to check for updates. Yet there are still requests.
I started a capture with MS Network Monitor, exited the Engine 3 and relauched. Nothing shown in Network Monitor, but there are requests in Pi-hole query log.
The TCP/IP tab in Process Explorer for SteelSeriesEngine3.exe only shows connections from 127.0.0.1:52893 to 0.0.0.0:0 and localhost:52904
Does anyone have an idea what's going on here? I could just be being pedantic, but I'm really curious.
It's probably a startup application they installed when you installed the keyboard software. If they have a system tray application to load custom configurations, rgb lighting, etc it cold be the root of this request. If you launch task manager and go to the startup tab you may find the application there and you can disable it.
These system try apps in my thoughts are invasive. They always seem to phone home saying they are looking for software updates, etc. Unless there is a function that you must use I would disable it. Other than that you can add these as new black list sites to your pi-hole and still run the system tray and know you aren't sending telemetry.
The app in startup is firewall'd this is the SteelSeriesEngine3.exe. I firewall'd everything I could find related to this software but still getting out.
Yeah I ended up adding them to blacklist, since my investigations have lead nowhere.