{ "version": 2, "rules": [ { "domain": [ "th1s_rule5et_1s_m4d3_by_5ukk4w_ruleset.skk.moe", "resolver.msg.xiaomi.net", "this_rule_set_is_made_by_sukkaw.skk.moe", "httpdns.volcengineapi.com", "httpdns-euex-push.heytapmobile.com", "httpdns-ocloud.heytapmobile.com", "httpdns-push.heytapmobile.com", "httpdns.huaweicloud.com", "httpdns.calorietech.com", "hd.xiaojukeji.com", "httpdns.ocloud.oppomobile.com", "httpdns.push.oppomobile.com", "httpdns.ocloud.heytapmobi.com", "httpdns.push.heytapmobi.com", "httpdns.platform.dbankcloud.com", "httpdns.yunxindns.com", "stun.smartgslb.com", "httpdns.bilivideo.com", "api-js.mixpanel.com", "api.iterable.com", "js.iterable.com", "httpdns.baidubce.com", "httpdns-api.aliyuncs.com", "httpdns-sc.aliyuncs.com", "httpdns.danuoyi.tbcache.com", "httpdns-sdk.n.netease.com", "httpdnsvip.meituan.com", "httpdns.meituan.com", "httpdns1.cc.cdnhwc5.com", "httpdns.c.cdnhwc2.com", "httpdns.bcelive.com", "httpdns.zybang.com", "resolver.mi.xiaomi.com", "dns.wechat.com", "httpdns.volces.com", "httpdns.n.shifen.com", "log.mmstat.com", "httpdns.kwd.inkuai.com", "httpdns.alicdn.com", "hdns.ksyun.com", "doh.iqiyi.com", "httpsdns.baidu.com", "httpdns.baidu.com", "httpdns.browser.miui.com", "httpdns.cctv.com", "httpdns.music.163.com", "yyapp-httpdns.gslb.yy.com", "union-httpdns.gslb.yy.com", "httpdns-v6.gslb.yy.com", "httpdns.gslb.yy.com", "aedns.weixin.qq.com", "dns.weixin.qq.com", "httpdns.kg.qq.com", "dns.jd.com", "doh.ptqy.gitv.tv", "httpdns-browser.platform.dbankcloud.cn", "ttnet-doh.feishu.cn", "ttnet-dig.feishu.cn", "doh.zjurl.cn", "dns.weibo.cn", "dns.weixin.qq.com.cn" ], "domain_suffix": [ "th1s_rule5et_1s_m4d3_by_5ukk4w_ruleset.skk.moe", "data", "httpdns.pro", "holashop.org", "telemetry-coverage.mozilla.org", "telemetry.mozilla.org", "h-vpn.org", "hola.org", "luminatichina.net", "incoming-telemetry.thunderbird.net", "lambda-ix.net", "omtrdc.net", "openx.net", "scorecardresearch.com", "brightinitiative.com", "rubiconproject.com", "kanuassociates.com", "whatismyippro.com", "hola-shopping.com", "binaryoptionz.com", "zon-networks.com", "proxy-review.com", "luminatinet.com", "advertising.com", "brightdata.com", "bright-sdk.com", "thecodeil.com", "notifysrv.com", "newzgames.com", "brightvpn.com", "amplitude.com", "taxility.com", "proxyway.com", "lum-bext.com", "crazyegg.com", "adincube.com", "svd-cdn.com", "notify6.com", "httpdns.n.netease.com", "classify-client.services.mozilla.com", "minexmr.com", "luxxeeu.com", "lumtest.com", "lum-lpm.com", "holacdn.com", "histats.com", "earnapp.com", "choyoga.com", "brdtest.com", "moebgp.com", "cnzz.mmstat.com", "resolver.gslb.mi-idc.com", "esgltc.com", "tukif.com", "optmd.com", "l-cdn.com", "pgi.com", "httpdns.c.163.com", "luminati-china.biz", "l-err.biz", "august.tw", "kimo.tw", "hola.sk", "hola.com.sg", "shengen.ru", "hut1.ru", "hola.ph", "l-agent.me", "wakuwaku.ne.jp", "luminati-china.io", "adtech.redventures.io", "mynextphone.io", "luminati.io", "lum-sdk.io", "lum-int.io", "lum-ext.io", "lum-api.io", "topvpn.io", "lum-cn.io", "juejin.im", "hola.hk", "net.mydays.de", "luminati-china.co", "whoisit.co", "brdtest.co", "bgp.co", "juejin.cn" ], "domain_regex": [ "^as[\\w.-]*?\\.prog\\.hu$", "^sher\\.[\\w.-]*?\\.hu$", "^rehs\\.[\\w.-]*?\\.hu$", "^etargetnet\\.[\\w.-]*?\\.hu$", "^adverticum\\.[\\w.-]*?\\.hu$", "^advert[\\w.-]*?\\.ultraweb\\.hu$", "^ad[\\w.-]*?\\.mellesleg\\.hu$", "^ad[\\w.-]*?\\.gyaloglo\\.hu$", "^ad[\\w.-]*?\\.tmgrup\\.com\\.tr$", "^ad[\\w.-]*?\\.bilgin\\.pro$", "^banner[\\w.-]*?\\.kinogo\\.by$", "^w[\\w.-]*?statistics\\.info$", "^minitds-[\\w.-]*?\\.info$", "^q[\\w.-]*?-publick\\.club$", "^orbit[\\w.-]*?\\.lun\\.ua$", "^tracking[\\w.-]*?\\.euroads\\.fi$", "^bar[\\w.-]*?\\.shinobi\\.jp$", "^mapi-log\\.qoo[\\w.-]*?\\.jp$", "^t[\\w.-]*?\\.playdigo\\.live$", "^tw[\\w.-]*?\\.netcore\\.co\\.in$", "^host[\\w.-]*?\\.nti\\.nl$", "^host[\\w.-]*?\\.ncoi\\.nl$", "^host[\\w.-]*?\\.carl-ras\\.dk$", "^events[\\w.-]*?\\.cre\\.ma$", "^counter[\\w.-]*?-yadro[\\w.-]*?-ru\\.unblocked\\.lol$", "^piwik\\.[\\w.-]*?\\.vn$", "^mautic\\.[\\w.-]*?\\.vn$", "^matomo\\.[\\w.-]*?\\.vn$", "^log-[\\w.-]*?\\.zadn\\.vn$", "^admicro[\\w.-]*?\\.vcmedia\\.vn$", "^log[\\w.-]*?\\.vietnamplus\\.vn$", "^ad[\\w.-]*?\\.wisenut\\.co\\.kr$", "^a[\\w.-]*?\\.smlog\\.co\\.kr$", "^event\\.[\\w.-]*?\\.shoplive\\.cloud$", "^broredir[\\w.-]*?s\\.site$", "^parkdomainreal[\\w.-]*?\\.site$", "^logs[\\w.-]*?\\.smithsonian\\.museum$", "^analytics[\\w.-]*?\\.carambo\\.la$", "^mf[\\w.-]*?\\.advantage\\.as$", "^geoloc[\\w.-]*?\\.geovisite\\.ovh$", "^geoloc[\\w.-]*?\\.geostats\\.ovh$", "^stats[\\w.-]*?\\.credit-cooperatif\\.coop$", "^v\\.newsportal[\\w.-]*?\\.ru$", "^real[\\w.-]*?traf\\.ru$", "^rb[\\w.-]*?\\.design\\.ru$", "^alishop[\\w.-]*?\\.ru$", "^discovery-ios-[\\w.-]*?\\.ertelecom\\.ru$", "^ssp[\\w.-]*?\\.rtb\\.beeline\\.ru$", "^pxl-[\\w.-]*?\\.ozone\\.ru$", "^adcounter[\\w.-]*?\\.uptolike\\.ru$", "^stats[\\w.-]*?\\.videonow\\.ru$", "^rum[\\w.-]*?\\.cdnvideo\\.ru$", "^px[\\w.-]*?\\.mediahills\\.ru$", "^stats-[\\w.-]*?\\.p2pnow\\.ru$", "^zbb\\.bbb\\.[\\w.-]*?\\.pics$", "^bjsvp[\\w.-]*?\\.space$", "^advert[\\w.-]*?\\.livesportmedia\\.eu$", "^mobiadvert[\\w.-]*?\\.livesportmedia\\.eu$", "^sportframe[\\w.-]*?\\.co$", "^collector[\\w.-]*?\\.ex\\.co$", "^prebid-cache[\\w.-]*?\\.ifunny\\.co$", "^trk[\\w.-]*?\\.vidible\\.tv$", "^stat[\\w.-]*?\\.1internet\\.tv$", "^acr-[\\w.-]*?-prd\\.samsungcloud\\.tv$", "^staging-[\\w.-]*?\\.ispot\\.tv$", "^pixelapi-[\\w.-]*?\\.cs\\.mysamba\\.tv$", "^ad[\\w.-]*?\\.zonaplus\\.tv$", "^mon[\\w.-]*?-[\\w.-]*?\\.tiktokv\\.us$", "^rtlog[\\w.-]*?\\.tiktokv\\.us$", "^log[\\w.-]*?-normal-[\\w.-]*?\\.tiktokv\\.us$", "^tnc[\\w.-]*?\\.tiktokv\\.us$", "^mcs-[\\w.-]*?\\.lemon8-app\\.us$", "^mon-[\\w.-]*?\\.lemon8-app\\.us$", "^api16-access-ttp[\\w.-]*?\\.tiktokpangle-b\\.us$", "^zoom\\.us[\\w.-]*?web\\.us$", "^basvformu[\\w.-]*?\\.xyz$", "^v\\.tzbox[\\w.-]*?\\.xyz$", "^www\\.fuze-sea[\\w.-]*?\\.xyz$", "^www\\.fuze-hill[\\w.-]*?\\.xyz$", "^evri\\.[\\w.-]*?\\.xyz$", "^marketplace-item-[\\w.-]*?\\.000\\.pe$", "^sportframe[\\w.-]*?\\.org$", "^chinhphu\\.[\\w.-]*?\\.org$", "^govuk\\.[\\w.-]*?\\.top$", "^press-continue\\.[\\w.-]*?\\.top$", "^vincomplaza\\.[\\w.-]*?\\.top$", "^baoviet[\\w.-]*?\\.top$", "^ad[\\w.-]*?\\.on\\.cc$", "^newmall[\\w.-]*?\\.cc$", "^vssid\\.[\\w.-]*?\\.cc$", "^baoviet[\\w.-]*?\\.vip$", "^whatsapp[\\w.-]*?\\.icu$", "^telezelm-[\\w.-]*?\\.icu$", "^d[\\w.-]*?wsapp\\.icu$", "^microsoft[\\w.-]*?\\.dfautomotive\\.de$", "^quangcao-[\\w.-]*?\\.epicdn\\.me$", "^log-[\\w.-]*?\\.epicdn\\.me$", "^ads\\.livetv[\\w.-]*?\\.me$", "^ads[\\w.-]*?\\.textra\\.me$", "^utahpolicetraining\\.[\\w.-]*?\\.mybluehost\\.me$", "^outloksupport[\\w.-]*?\\.glitch\\.me$", "^marketplace-item-details-[\\w.-]*?\\.zya\\.me$", "^tracking-v[\\w.-]*?\\.a\\.run\\.app$", "^authsignonstaff[\\w.-]*?\\.softr\\.app$", "^support-metahelpcenter-id[\\w.-]*?\\.netlify\\.app$", "^nhantienquocte[\\w.-]*?\\.vercel\\.app$", "^pay8-2v-[\\w.-]*?-gmailcom\\.vercel\\.app$", "^pancakeclaim-[\\w.-]*?\\.vercel\\.app$", "^pancake-nft[\\w.-]*?\\.vercel\\.app$", "^pancake-swap[\\w.-]*?\\.vercel\\.app$", "^pancakeswap-[\\w.-]*?\\.vercel\\.app$", "^base-swap-frontend-[\\w.-]*?\\.vercel\\.app$", "^azuki-[\\w.-]*?\\.vercel\\.app$", "^facture-pdf-secure-[\\w.-]*?\\.vercel\\.app$", "^safety-profiles-fb-ads-[\\w.-]*?\\.vercel\\.app$", "^support-center-for-[\\w.-]*?\\.vercel\\.app$", "^govern-assessment-validation-[\\w.-]*?\\.vercel\\.app$", "^santanderpod\\.[\\w.-]*?\\.co\\.uk$", "^santander\\.[\\w.-]*?\\.fino\\.digital$", "^amazon-[\\w.-]*?\\.shop$", "^allegrolokalnie\\.[\\w.-]*?\\.shop$", "^ubacollect-[\\w.-]*?\\.cloud\\.dbankcloud\\.cn$", "^logservice-[\\w.-]*?\\.platform\\.dbankcloud\\.cn$", "^res[\\w.-]*?\\.pinpai8\\.cn$", "^gcw[\\w.-]*?\\.2liang\\.cn$", "^ysdm[\\w.-]*?\\.ys137\\.com\\.cn$", "^bdcpro[\\w.-]*?\\.techweb\\.com\\.cn$", "^adx-[\\w.-]*?\\.dbankedge\\.cn$", "^ad-[\\w.-]*?\\.appacc\\.dbankedge\\.cn$", "^jtbo[\\w.-]*?\\.nqxvevk\\.cn$", "^icloud\\.apple-[\\w.-]*?\\.cn$", "^trck\\.[\\w.-]*?\\.prod-na\\.turntable\\.sonic\\.advertising\\.amazon\\.dev$", "^alienxchain[\\w.-]*?\\.pages\\.dev$", "^help-for-work-[\\w.-]*?\\.pages\\.dev$", "^business-facebook-[\\w.-]*?\\.pages\\.dev$", "^apples-24x7-[\\w.-]*?\\.pages\\.dev$", "^noticiarecentesagora\\.net\\.klebeerlopees[\\w.-]*?\\.meusitehostgator\\.com\\.br$", "^fan-page-[\\w.-]*?\\.surge\\.sh$", "^copyrights-[\\w.-]*?\\.surge\\.sh$", "^violation-[\\w.-]*?\\.surge\\.sh$", "^request-page-violation-[\\w.-]*?\\.surge\\.sh$", "^minero-proxy-[\\w.-]*?\\.now\\.sh$", "^adimg[\\w.-]*?\\.search\\.naver\\.net$", "^[\\w.-]*?ad\\.durasite\\.net$", "^subnewss[\\w.-]*?\\.net$", "^gonews[\\w.-]*?\\.net$", "^sonar[\\w.-]*?\\.xy\\.fbcdn\\.net$", "^ali-bj-pcdn-[\\w.-]*?\\.biliapi\\.net$", "^hw-sh-pcdn-[\\w.-]*?\\.biliapi\\.net$", "^[\\w.-]*?-datareceiver\\.aki-game\\.net$", "^t[\\w.-]*?\\.zcvh\\.net$", "^ad[\\w.-]*?\\.ettoday\\.net$", "^collector-[\\w.-]*?\\.px-cdn\\.net$", "^collector-[\\w.-]*?\\.px-client\\.net$", "^beacon-[\\w.-]*?\\.helpscout\\.net$", "^rum[\\w.-]*?\\.a\\.trbcdn\\.net$", "^suite[\\w.-]*?\\.linximpulse\\.net$", "^pixel-[\\w.-]*?\\.convertagain\\.net$", "^faro-collector-prod-[\\w.-]*?\\.grafana\\.net$", "^aff[\\w.-]*?\\.kolektiva\\.net$", "^adi[\\w.-]*?\\.cnool\\.net$", "^flurry\\.agentportal-[\\w.-]*?\\.yahoodns\\.net$", "^flurry\\.agentportal\\.[\\w.-]*?\\.yahoodns\\.net$", "^api[\\w.-]*?\\.batmobil\\.net$", "^api[\\w.-]*?\\.batmobi\\.net$", "^adx-[\\w.-]*?\\.op\\.dbankcloud\\.com\\.edgekey\\.net$", "^weoidnet[\\w.-]*?\\.b-cdn\\.net$", "^verifyyourself-[\\w.-]*?system\\.b-cdn\\.net$", "^verification-module-v[\\w.-]*?\\.b-cdn\\.net$", "^nikutjyjgchr[\\w.-]*?\\.b-cdn\\.net$", "^newverifyyourself-system[\\w.-]*?\\.b-cdn\\.net$", "^izmncdnboxuse[\\w.-]*?\\.b-cdn\\.net$", "^file-typ-botcheck[\\w.-]*?\\.b-cdn\\.net$", "^dedicloadpgeing[\\w.-]*?\\.b-cdn\\.net$", "^bot-check-v[\\w.-]*?\\.b-cdn\\.net$", "^anti-automation-v[\\w.-]*?\\.b-cdn\\.net$", "^ajmaboxanherulv[\\w.-]*?\\.b-cdn\\.net$", "^adv0[\\w.-]*?\\.msa\\.cdn\\.mediaset\\.net$", "^[\\w.-]*?\\.ad\\.[\\w.-]*?\\.prod\\.hosts\\.ooklaserver\\.net$", "^report\\.[\\w.-]*?\\.gbqofs\\.io$", "^eum[\\w.-]*?\\.instana\\.io$", "^c[\\w.-]*?hit\\.zerkalo\\.io$", "^cl[\\w.-]*?\\.k5a\\.io$", "^api[\\w.-]*?\\.bidmachine\\.io$", "^pixel[\\w.-]*?\\.production-public\\.tubi\\.io$", "^ads[\\w.-]*?\\.production-public\\.tubi\\.io$", "^metamask[\\w.-]*?\\.webflow\\.io$", "^telemetry[\\w.-]*?\\.transcend\\.io$", "^f-log-[\\w.-]*?\\.grammarly\\.io$", "^f-log[\\w.-]*?\\.grammarly\\.io$", "^invenio_tracking_[\\w.-]*?\\.sgnapps\\.com$", "^s[\\w.-]*?\\.adduplex\\.com$", "^metric[\\w.-]*?\\.rediff\\.com$", "^logger-[\\w.-]*?\\.dailymotion\\.com$", "^ads-[\\w.-]*?\\.v\\.ssp\\.yahoo\\.com$", "^ad[\\w.-]*?\\.thisisgame\\.com$", "^pangolin[\\w.-]*?\\.sgsnssdk\\.com$", "^analytics-[\\w.-]*?\\.aasaam\\.com$", "^partner\\.superbahisaffiliates[\\w.-]*?\\.com$", "^r\\.reklam[\\w.-]*?\\.com$", "^dw-informer-[\\w.-]*?\\.newsru\\.com$", "^u[\\w.-]*?\\.takru\\.com$", "^[\\w.-]*?\\.a-akamaihd\\.com$", "^cdn[\\w.-]*?\\.swaxis\\.com$", "^log[\\w.-]*?-[\\w.-]*?\\.tiktokv\\.com$", "^mcs-va-[\\w.-]*?\\.tiktokv\\.com$", "^xlog[\\w.-]*?-[\\w.-]*?\\.tiktokv\\.com$", "^mon-[\\w.-]*?\\.tiktokv\\.com$", "^rtlog[\\w.-]*?\\.tiktokv\\.com$", "^mon[\\w.-]*?-[\\w.-]*?\\.tiktokv\\.com$", "^mcs\\.[\\w.-]*?\\.tiktokv\\.com$", "^ulog\\.[\\w.-]*?\\.ksapisrv\\.com$", "^ulog-[\\w.-]*?\\.ksapisrv\\.com$", "^sdk-[\\w.-]*?\\.moengage\\.com$", "^api[\\w.-]*?\\.moengage\\.com$", "^report[\\w.-]*?\\.appmetrica\\.webvisor\\.com$", "^tracking-[\\w.-]*?\\.trnox\\.com$", "^batchlogging[\\w.-]*?-noneu\\.truecaller\\.com$", "^batchlogging[\\w.-]*?-eu\\.truecaller\\.com$", "^report\\.[\\w.-]*?\\.qq\\.com$", "^appanalysis[\\w.-]*?\\.banggood\\.com$", "^beacons[\\w.-]*?\\.gvt3\\.com$", "^log[\\w.-]*?-misc-lf\\.amemv\\.com$", "^imp-[\\w.-]*?\\.jampp\\.com$", "^maas-[\\w.-]*?\\.phunware\\.com$", "^-applog[\\w.-]*?\\.fqnovel\\.com$", "^mon[\\w.-]*?-misc-lf\\.fqnovel\\.com$", "^track\\.[\\w.-]*?\\.roku\\.com$", "^-ulog\\.[\\w.-]*?\\.kwaipros\\.com$", "^-ulog-[\\w.-]*?\\.kwaipros\\.com$", "^ulog[\\w.-]*?\\.kwaipros\\.com$", "^ulog\\.[\\w.-]*?\\.kwai-pro\\.com$", "^-ulog\\.[\\w.-]*?\\.kwai-pro\\.com$", "^-ulog-[\\w.-]*?\\.kwai-pro\\.com$", "^-ulogl[\\w.-]*?\\.kwai-pro\\.com$", "^ulog[\\w.-]*?\\.kwai-pro\\.com$", "^use-trk[\\w.-]*?\\.bluevoox\\.com$", "^ulog[\\w.-]*?\\.gifshow\\.com$", "^tnc16-[\\w.-]*?\\.hypic\\.com$", "^applog[\\w.-]*?\\.matrix\\.easebar\\.com$", "^mgbsdk[\\w.-]*?\\.matrix\\.easebar\\.com$", "^logs-[\\w.-]*?\\.rebxgame\\.com$", "^auth-[\\w.-]*?\\.hismarttv\\.com$", "^api-[\\w.-]*?\\.hismarttv\\.com$", "^st-[\\w.-]*?\\.dynamicyield\\.com$", "^pixel[\\w.-]*?\\.adswizz\\.com$", "^lt[\\w.-]*?\\.tritondigital\\.com$", "^hstats[\\w.-]*?\\.hepsiburada\\.com$", "^host[\\w.-]*?\\.rigbyandpeller\\.com$", "^host[\\w.-]*?\\.rvshare\\.com$", "^host[\\w.-]*?\\.polaroid\\.com$", "^gscounters\\.[\\w.-]*?\\.gigya\\.com$", "^geoloc[\\w.-]*?\\.geo20120530\\.com$", "^geoloc[\\w.-]*?\\.9cd47096ab1495d8d3b18667f6a52b9c\\.com$", "^events-api[\\w.-]*?\\.outfit7\\.com$", "^device-metrics-[\\w.-]*?\\.amazon\\.com$", "^device-metrics-us[\\w.-]*?\\.amazon\\.com$", "^datacollect[\\w.-]*?\\.abtasty\\.com$", "^clog[\\w.-]*?\\.yuanfudao\\.com$", "^app-analytics-[\\w.-]*?\\.snapchat\\.com$", "^analyzer[\\w.-]*?\\.fc2\\.com$", "^analytics\\.[\\w.-]*?\\.sky\\.com$", "^sensorsdata[\\w.-]*?\\.read\\.duokan\\.com$", "^ads-dmp-collect\\.[\\w.-]*?\\.karrotmarket\\.com$", "^mcs-[\\w.-]*?\\.tiktok\\.com$", "^ana[\\w.-]*?\\.inews24\\.com$", "^apple-[\\w.-]*?\\.le\\.com$", "^clickstream-[\\w.-]*?\\.homedepot\\.com$", "^log[\\w.-]*?-normal-useast1a\\.lemon8-app\\.com$", "^mcs-[\\w.-]*?\\.lemon8-app\\.com$", "^mon-[\\w.-]*?\\.lemon8-app\\.com$", "^log-va[\\w.-]*?\\.capcutapi\\.com$", "^mon-va[\\w.-]*?\\.capcutapi\\.com$", "^tnc-va[\\w.-]*?\\.capcutapi\\.com$", "^mssdk[\\w.-]*?\\.capcutapi\\.com$", "^stlog[\\w.-]*?-local\\.kakao\\.com$", "^customerevents\\.us-east-[\\w.-]*?\\.internal\\.dradis\\.netflix\\.com$", "^sock[\\w.-]*?-goguardian\\.pusher\\.com$", "^metrics[\\w.-]*?\\.fitanalytics\\.com$", "^analytics[\\w.-]*?\\.clickdimensions\\.com$", "^i-[\\w.-]*?\\.ci360\\.sas\\.com$", "^eclog[\\w.-]*?-[\\w.-]*?\\.cafe24\\.com$", "^collector-[\\w.-]*?\\.tvsquared\\.com$", "^livetracker\\.[\\w.-]*?\\.pangea-cms\\.com$", "^browser-intake-[\\w.-]*?-datadoghq\\.com$", "^analytics[\\w.-]*?\\.prezly\\.com$", "^srmdata-[\\w.-]*?\\.com$", "^install[\\w.-]*?\\.zonastat\\.com$", "^s[\\w.-]*?\\.skencituer\\.com$", "^pijama\\.[\\w.-]*?\\.elasticbeanstalk\\.com$", "^block\\.s[\\w.-]*?block\\.com$", "^putrr[\\w.-]*?\\.com$", "^teleriumads-[\\w.-]*?\\.netdna-ssl\\.com$", "^clk\\.rtpdn[\\w.-]*?\\.com$", "^widget-v[\\w.-]*?\\.tidiochat\\.com$", "^btn\\.createsend[\\w.-]*?\\.com$", "^widgets\\.[\\w.-]*?\\.webengage\\.com$", "^cdn[\\w.-]*?\\.pdmntn\\.com$", "^policy[\\w.-]*?\\.cookieinformation\\.com$", "^stat\\.[\\w.-]*?\\.v-56\\.com$", "^hn-ping[\\w.-]*?\\.hashnode\\.com$", "^stats2\\.[\\w.-]*?\\.fdnames\\.com$", "^log-[\\w.-]*?\\.previewnetworks\\.com$", "^collector-[\\w.-]*?\\.luigisbox\\.com$", "^geotargetly-api-[\\w.-]*?\\.com$", "^uc[\\w.-]*?\\.atobo\\.com$", "^union[\\w.-]*?\\.365inews\\.com$", "^static[\\w.-]*?\\.365inews\\.com$", "^qpb[\\w.-]*?\\.sohu\\.com$", "^fpb[\\w.-]*?\\.51edu\\.com$", "^fanpingbi[\\w.-]*?\\.gaokao\\.com$", "^dn[\\w.-]*?\\.ixinwei\\.com$", "^dm[\\w.-]*?\\.yxlady\\.com$", "^d[\\w.-]*?\\.xinshipu\\.com$", "^d[\\w.-]*?\\.ruiwen\\.com$", "^bdlm[\\w.-]*?\\.hc360\\.com$", "^at[\\w.-]*?\\.doubanio\\.com$", "^ac[\\w.-]*?\\.pingguolv\\.com$", "^ac[\\w.-]*?\\.faxingchina\\.com$", "^ac[\\w.-]*?\\.786ip\\.com$", "^a[\\w.-]*?\\.chajiaotong\\.com$", "^ya[\\w.-]*?\\.dwstatic\\.com$", "^same[\\w.-]*?\\.stockstar\\.com$", "^sam[\\w.-]*?\\.baby-kingdom\\.com$", "^js[\\w.-]*?\\.abolezi\\.com$", "^ja[\\w.-]*?\\.gamersky\\.com$", "^impservice[\\w.-]*?\\.youdao\\.com$", "^impservice[\\w.-]*?\\.yodao\\.com$", "^tupian888\\.[\\w.-]*?\\.bcebos\\.com$", "^log[\\w.-]*?\\.aliyuncs\\.com$", "^zhizhizhizhi\\.oss-[\\w.-]*?\\.aliyuncs\\.com$", "^vns86\\.oss-[\\w.-]*?\\.aliyuncs\\.com$", "^ky891\\.oss-[\\w.-]*?\\.aliyuncs\\.com$", "^asd8900\\.oss-[\\w.-]*?\\.aliyuncs\\.com$", "^ax\\.[\\w.-]*?\\.ifeng\\.com$", "^ifengad\\.[\\w.-]*?\\.ifeng\\.com$", "^us\\.[\\w.-]*?\\.qwadro\\.com$", "^banner\\.[\\w.-]*?\\.tccapis\\.com$", "^sdk\\.[\\w.-]*?\\.braze\\.com$", "^iad-[\\w.-]*?\\.braze\\.com$", "^events-[\\w.-]*?\\.op\\.hicloud\\.com$", "^mediate-ios-[\\w.-]*?\\.hyprmx\\.com$", "^marketplace-[\\w.-]*?\\.hyprmx\\.com$", "^adcs-[\\w.-]*?\\.myappsget\\.com$", "^log[\\w.-]*?\\.byteoversea\\.com$", "^tnc16-[\\w.-]*?\\.byteoversea\\.com$", "^ads[\\w.-]*?\\.bojijulebu\\.com$", "^dualstack\\.adbert-web-lbs-[\\w.-]*?\\.elb\\.amazonaws\\.com$", "^liveme-sensors-collect2-[\\w.-]*?\\.amazonaws\\.com$", "^lively-collect-elb-[\\w.-]*?\\.amazonaws\\.com$", "^iptracker-lb-[\\w.-]*?\\.amazonaws\\.com$", "^collect-elb-[\\w.-]*?\\.amazonaws\\.com$", "^ce-global-track-[\\w.-]*?\\.amazonaws\\.com$", "^bi-eventtracker-[\\w.-]*?\\.amazonaws\\.com$", "^analytics-rollout-[\\w.-]*?\\.amazonaws\\.com$", "^apiproxy-log-nlb-1f304af4d3ac01a4\\.elb\\.us-east-[\\w.-]*?\\.amazonaws\\.com$", "^snowplow-collector-[\\w.-]*?\\.amazonaws\\.com$", "^mobileanalytics\\.[\\w.-]*?\\.amazonaws\\.com$", "^client\\.rum\\.[\\w.-]*?\\.amazonaws\\.com$", "^reachableads-av\\.[\\w.-]*?\\.amazonaws\\.com$", "^tag-based\\.s3\\.[\\w.-]*?\\.amazonaws\\.com$", "^cookie-sl\\.s3\\.[\\w.-]*?\\.amazonaws\\.com$", "^rtbimp-loadbalancer-[\\w.-]*?\\.amazonaws\\.com$", "^ad-[\\w.-]*?\\.amazonaws\\.com$", "^mob[\\w.-]*?\\.novanewsapp\\.com$", "^tnc[\\w.-]*?\\.zijieapi\\.com$", "^polaris[\\w.-]*?-normal-[\\w.-]*?\\.zijieapi\\.com$", "^mssdk[\\w.-]*?\\.zijieapi\\.com$", "^log[\\w.-]*?\\.zijieapi\\.com$", "^ads[\\w.-]*?-normal-lq\\.zijieapi\\.com$", "^ads[\\w.-]*?-normal-[\\w.-]*?\\.zijieapi\\.com$", "^creative[\\w.-]*?\\.bidease\\.com$", "^profitablecpm[\\w.-]*?\\.com$", "^highcpmrevenue[\\w.-]*?\\.com$", "^c\\.blue\\.[\\w.-]*?\\.com$", "^irs\\.gov\\.[\\w.-]*?\\.com$", "^e-interac-[\\w.-]*?\\.com$", "^usps-packages-[\\w.-]*?\\.com$", "^[\\w.-]*?\\.favoripirlanta\\.com$", "^tiktok-svip[\\w.-]*?\\.com$", "^lcldetecthumainweb[\\w.-]*?\\.firebaseapp\\.com$", "^agripro-fr-[\\w.-]*?\\.com$", "^mail\\.[\\w.-]*?-coinbase\\.com$", "^msoftupdate\\.[\\w.-]*?\\.linodeobjects\\.com$", "^wwwservicemsnlive-[\\w.-]*?\\.hubspotpagebuilder\\.com$", "^steam\\.workshop[\\w.-]*?\\.com$", "^facebook-[\\w.-]*?\\.ubpages\\.com$", "^attonlineservice[\\w.-]*?\\.wixstudio\\.com$", "^payer-ma-acture-[\\w.-]*?\\.mystrikingly\\.com$", "^westernunion[\\w.-]*?\\.wixsite\\.com$", "^messagerie[\\w.-]*?\\.wixsite\\.com$", "^messagerie[\\w.-]*?\\.godaddysites\\.com$", "^bingkasprogram-[\\w.-]*?\\.xdbng\\.com$", "^e-navy[\\w.-]*?\\.weebly\\.com$", "^2025[\\w.-]*?maintenance\\.weebly\\.com$", "^currentlymail[\\w.-]*?\\.weebly\\.com$", "^currentlyatt[\\w.-]*?\\.weebly\\.com$", "^testra[\\w.-]*?-covid\\.weebly\\.com$", "^vnote-[\\w.-]*?\\.myqcloud\\.com$", "^tracking\\.[\\w.-]*?\\.miui\\.com$", "^[\\w.-]*?\\.tracking\\.[\\w.-]*?\\.miui\\.com$", "^beacons[\\w.-]*?\\.gvt[\\w.-]\\.com$", "^info\\.[\\w.-]*?\\.aleragroup\\.com$" ], "domain_keyword": [ ".estream.", "jshosting", "hostingcloud", "flightsy", "zymerget", "gettate", "mighbest", "nimiqpool", ".freecontent.", "sunnimiq", ".nimiq.", "anybest.", "dubester.", "fb-restriction-case", "fb-restriction-appeal", "fb-community-standards", "fb-business-appeal", "cp-home-pl-", "tlauncher", "track.tiara", "umeng", "adsby", "adsdk", "adserver", "admaster", "adserve2", "admob", "adspace", "advertmarket", "adsyndication", "doubleclick.", "adjust.", "appsflyer", "dnserror", "marketing.net", "adktrack", "track.msadcenter", "dc.pimentaafricana", "-txtagstore", "thetollroads-", "-go.experian.com", "-adnow.com", "dkswshap-", ".srvqck", ".fstsrv", ".sagewwl", "_vmind.qqvideo.tc.qq.com", "-logging.nextmedia.com", "-spiky.clevertap-prod.com", ".engage.3m.", "telemetry.officeapps.live.com", "-launches.appsflyersdk.com", "-attr.appsflyersdk.com", "-s2s.sensic.net", "-rtb.gravite.net", "-pia.appsflyersdk.com", "-skadsdkless.appsflyersdk.com", "-adrevenue.appsflyersdk.com", "-ulogl2.kwai-pro.com", "-ulogl2.kwaipros.com", "-ulog.kwai-pro.com", "-ulog.ksapisrv.com", "-ulog.region.kwai-pro.com", "-logsdk.kwai-pro.com", "analytics-cdn.", "backstory.ebay.", "click.rum.", "cmpworker.", "insights-collector.", "track.opentable.", ".net.daraz.", ".zooplus.", "smetrics.", "a8clk.", "a8cv.", "plausible.", "wxsnsdy", "adwords", "-tracker.biliapi.net", "ad.ixigua.com", "trksvg.business.hsbc.", "trkgbm.business.hsbc.", "trkhinv.business.hsbc.", "trkcmb.business.hsbc.", "-analytics-events.apple.com", "-ad.video.yximgs.com", "-ad.sm.cn", "-ad.wtzw.com", "-be-pack-sign.pglstatp-toutiao.com", "-normal.zijieapi.com" ], "ip_cidr": [ "39.97.128.148/32", "39.97.130.51/32", "42.81.232.18/32", "42.187.182.106/32", "42.187.182.123/32", "42.187.184.154/32", "59.82.99.47/32", "59.111.239.61/32", "59.111.239.62/32", "101.35.204.35/32", "101.124.19.122/32", "103.37.152.97/32", "103.224.222.208/32", "106.11.25.31/32", "114.110.97.97/32", "115.236.121.51/32", "115.236.121.195/32", "118.89.204.198/32", "119.29.29.98/31", "123.151.54.50/32", "180.76.76.200/32", "182.254.116.117/32", "182.254.118.119/32", "202.90.108.13/32", "202.90.110.46/32", "203.107.1.0/24", "203.119.204.66/32", "203.119.238.194/32", "2402:db40:5100:1011::5/128", "2402:4e00:1900:1700:0:9554:1ad9:c3a/128", "240e:928:1400:10::25/128", "2402:4e00:1200:ed00:0:9089:6dac:96b6/128" ] } ] }