mirror of
https://gitlab.com/SukkaW/ruleset.skk.moe.git
synced 2025-12-31 09:30:25 +00:00
691 lines
26 KiB
JSON
691 lines
26 KiB
JSON
{
|
|
"version": 2,
|
|
"rules": [
|
|
{
|
|
"domain": [
|
|
"th1s_rule5et_1s_m4d3_by_5ukk4w_ruleset.skk.moe",
|
|
"resolver.msg.xiaomi.net",
|
|
"this_rule_set_is_made_by_sukkaw.skk.moe",
|
|
"httpdns.volcengineapi.com",
|
|
"httpdns-euex-push.heytapmobile.com",
|
|
"httpdns-ocloud.heytapmobile.com",
|
|
"httpdns-push.heytapmobile.com",
|
|
"httpdns.huaweicloud.com",
|
|
"httpdns.calorietech.com",
|
|
"hd.xiaojukeji.com",
|
|
"httpdns.ocloud.oppomobile.com",
|
|
"httpdns.push.oppomobile.com",
|
|
"httpdns.ocloud.heytapmobi.com",
|
|
"httpdns.push.heytapmobi.com",
|
|
"httpdns.platform.dbankcloud.com",
|
|
"httpdns.yunxindns.com",
|
|
"stun.smartgslb.com",
|
|
"httpdns.bilivideo.com",
|
|
"api-js.mixpanel.com",
|
|
"api.iterable.com",
|
|
"js.iterable.com",
|
|
"httpdns.baidubce.com",
|
|
"httpdns-api.aliyuncs.com",
|
|
"httpdns-sc.aliyuncs.com",
|
|
"httpdns.danuoyi.tbcache.com",
|
|
"httpdns-sdk.n.netease.com",
|
|
"httpdnsvip.meituan.com",
|
|
"httpdns.meituan.com",
|
|
"httpdns1.cc.cdnhwc5.com",
|
|
"httpdns.c.cdnhwc2.com",
|
|
"httpdns.bcelive.com",
|
|
"httpdns.zybang.com",
|
|
"resolver.mi.xiaomi.com",
|
|
"dns.wechat.com",
|
|
"httpdns.volces.com",
|
|
"httpdns.n.shifen.com",
|
|
"log.mmstat.com",
|
|
"httpdns.kwd.inkuai.com",
|
|
"httpdns.alicdn.com",
|
|
"hdns.ksyun.com",
|
|
"doh.iqiyi.com",
|
|
"httpsdns.baidu.com",
|
|
"httpdns.baidu.com",
|
|
"httpdns.browser.miui.com",
|
|
"httpdns.cctv.com",
|
|
"httpdns.music.163.com",
|
|
"yyapp-httpdns.gslb.yy.com",
|
|
"union-httpdns.gslb.yy.com",
|
|
"httpdns-v6.gslb.yy.com",
|
|
"httpdns.gslb.yy.com",
|
|
"aedns.weixin.qq.com",
|
|
"dns.weixin.qq.com",
|
|
"httpdns.kg.qq.com",
|
|
"dns.jd.com",
|
|
"doh.ptqy.gitv.tv",
|
|
"httpdns-browser.platform.dbankcloud.cn",
|
|
"ttnet-doh.feishu.cn",
|
|
"ttnet-dig.feishu.cn",
|
|
"doh.zjurl.cn",
|
|
"dns.weibo.cn",
|
|
"dns.weixin.qq.com.cn"
|
|
],
|
|
"domain_suffix": [
|
|
"th1s_rule5et_1s_m4d3_by_5ukk4w_ruleset.skk.moe",
|
|
"data",
|
|
"httpdns.pro",
|
|
"holashop.org",
|
|
"telemetry-coverage.mozilla.org",
|
|
"telemetry.mozilla.org",
|
|
"h-vpn.org",
|
|
"hola.org",
|
|
"luminatichina.net",
|
|
"incoming-telemetry.thunderbird.net",
|
|
"lambda-ix.net",
|
|
"omtrdc.net",
|
|
"openx.net",
|
|
"scorecardresearch.com",
|
|
"brightinitiative.com",
|
|
"rubiconproject.com",
|
|
"kanuassociates.com",
|
|
"whatismyippro.com",
|
|
"hola-shopping.com",
|
|
"binaryoptionz.com",
|
|
"zon-networks.com",
|
|
"proxy-review.com",
|
|
"luminatinet.com",
|
|
"advertising.com",
|
|
"brightdata.com",
|
|
"bright-sdk.com",
|
|
"thecodeil.com",
|
|
"notifysrv.com",
|
|
"newzgames.com",
|
|
"brightvpn.com",
|
|
"amplitude.com",
|
|
"taxility.com",
|
|
"proxyway.com",
|
|
"lum-bext.com",
|
|
"crazyegg.com",
|
|
"adincube.com",
|
|
"svd-cdn.com",
|
|
"notify6.com",
|
|
"httpdns.n.netease.com",
|
|
"classify-client.services.mozilla.com",
|
|
"minexmr.com",
|
|
"luxxeeu.com",
|
|
"lumtest.com",
|
|
"lum-lpm.com",
|
|
"holacdn.com",
|
|
"histats.com",
|
|
"earnapp.com",
|
|
"choyoga.com",
|
|
"brdtest.com",
|
|
"moebgp.com",
|
|
"cnzz.mmstat.com",
|
|
"resolver.gslb.mi-idc.com",
|
|
"esgltc.com",
|
|
"tukif.com",
|
|
"optmd.com",
|
|
"l-cdn.com",
|
|
"pgi.com",
|
|
"httpdns.c.163.com",
|
|
"luminati-china.biz",
|
|
"l-err.biz",
|
|
"august.tw",
|
|
"kimo.tw",
|
|
"hola.sk",
|
|
"hola.com.sg",
|
|
"shengen.ru",
|
|
"hut1.ru",
|
|
"hola.ph",
|
|
"l-agent.me",
|
|
"wakuwaku.ne.jp",
|
|
"luminati-china.io",
|
|
"adtech.redventures.io",
|
|
"mynextphone.io",
|
|
"luminati.io",
|
|
"lum-sdk.io",
|
|
"lum-int.io",
|
|
"lum-ext.io",
|
|
"lum-api.io",
|
|
"topvpn.io",
|
|
"lum-cn.io",
|
|
"juejin.im",
|
|
"hola.hk",
|
|
"net.mydays.de",
|
|
"luminati-china.co",
|
|
"whoisit.co",
|
|
"brdtest.co",
|
|
"bgp.co",
|
|
"juejin.cn"
|
|
],
|
|
"domain_regex": [
|
|
"^as[\\w.-]*?\\.prog\\.hu$",
|
|
"^sher\\.[\\w.-]*?\\.hu$",
|
|
"^rehs\\.[\\w.-]*?\\.hu$",
|
|
"^etargetnet\\.[\\w.-]*?\\.hu$",
|
|
"^adverticum\\.[\\w.-]*?\\.hu$",
|
|
"^advert[\\w.-]*?\\.ultraweb\\.hu$",
|
|
"^ad[\\w.-]*?\\.mellesleg\\.hu$",
|
|
"^ad[\\w.-]*?\\.gyaloglo\\.hu$",
|
|
"^ad[\\w.-]*?\\.tmgrup\\.com\\.tr$",
|
|
"^ad[\\w.-]*?\\.bilgin\\.pro$",
|
|
"^banner[\\w.-]*?\\.kinogo\\.by$",
|
|
"^w[\\w.-]*?statistics\\.info$",
|
|
"^minitds-[\\w.-]*?\\.info$",
|
|
"^q[\\w.-]*?-publick\\.club$",
|
|
"^orbit[\\w.-]*?\\.lun\\.ua$",
|
|
"^tracking[\\w.-]*?\\.euroads\\.fi$",
|
|
"^bar[\\w.-]*?\\.shinobi\\.jp$",
|
|
"^mapi-log\\.qoo[\\w.-]*?\\.jp$",
|
|
"^t[\\w.-]*?\\.playdigo\\.live$",
|
|
"^tw[\\w.-]*?\\.netcore\\.co\\.in$",
|
|
"^host[\\w.-]*?\\.nti\\.nl$",
|
|
"^host[\\w.-]*?\\.ncoi\\.nl$",
|
|
"^host[\\w.-]*?\\.carl-ras\\.dk$",
|
|
"^events[\\w.-]*?\\.cre\\.ma$",
|
|
"^counter[\\w.-]*?-yadro[\\w.-]*?-ru\\.unblocked\\.lol$",
|
|
"^piwik\\.[\\w.-]*?\\.vn$",
|
|
"^mautic\\.[\\w.-]*?\\.vn$",
|
|
"^matomo\\.[\\w.-]*?\\.vn$",
|
|
"^log-[\\w.-]*?\\.zadn\\.vn$",
|
|
"^admicro[\\w.-]*?\\.vcmedia\\.vn$",
|
|
"^log[\\w.-]*?\\.vietnamplus\\.vn$",
|
|
"^ad[\\w.-]*?\\.wisenut\\.co\\.kr$",
|
|
"^a[\\w.-]*?\\.smlog\\.co\\.kr$",
|
|
"^event\\.[\\w.-]*?\\.shoplive\\.cloud$",
|
|
"^broredir[\\w.-]*?s\\.site$",
|
|
"^parkdomainreal[\\w.-]*?\\.site$",
|
|
"^logs[\\w.-]*?\\.smithsonian\\.museum$",
|
|
"^analytics[\\w.-]*?\\.carambo\\.la$",
|
|
"^mf[\\w.-]*?\\.advantage\\.as$",
|
|
"^geoloc[\\w.-]*?\\.geovisite\\.ovh$",
|
|
"^geoloc[\\w.-]*?\\.geostats\\.ovh$",
|
|
"^stats[\\w.-]*?\\.credit-cooperatif\\.coop$",
|
|
"^v\\.newsportal[\\w.-]*?\\.ru$",
|
|
"^real[\\w.-]*?traf\\.ru$",
|
|
"^rb[\\w.-]*?\\.design\\.ru$",
|
|
"^alishop[\\w.-]*?\\.ru$",
|
|
"^discovery-ios-[\\w.-]*?\\.ertelecom\\.ru$",
|
|
"^ssp[\\w.-]*?\\.rtb\\.beeline\\.ru$",
|
|
"^pxl-[\\w.-]*?\\.ozone\\.ru$",
|
|
"^adcounter[\\w.-]*?\\.uptolike\\.ru$",
|
|
"^stats[\\w.-]*?\\.videonow\\.ru$",
|
|
"^rum[\\w.-]*?\\.cdnvideo\\.ru$",
|
|
"^px[\\w.-]*?\\.mediahills\\.ru$",
|
|
"^stats-[\\w.-]*?\\.p2pnow\\.ru$",
|
|
"^zbb\\.bbb\\.[\\w.-]*?\\.pics$",
|
|
"^bjsvp[\\w.-]*?\\.space$",
|
|
"^advert[\\w.-]*?\\.livesportmedia\\.eu$",
|
|
"^mobiadvert[\\w.-]*?\\.livesportmedia\\.eu$",
|
|
"^sportframe[\\w.-]*?\\.co$",
|
|
"^collector[\\w.-]*?\\.ex\\.co$",
|
|
"^prebid-cache[\\w.-]*?\\.ifunny\\.co$",
|
|
"^trk[\\w.-]*?\\.vidible\\.tv$",
|
|
"^stat[\\w.-]*?\\.1internet\\.tv$",
|
|
"^acr-[\\w.-]*?-prd\\.samsungcloud\\.tv$",
|
|
"^staging-[\\w.-]*?\\.ispot\\.tv$",
|
|
"^pixelapi-[\\w.-]*?\\.cs\\.mysamba\\.tv$",
|
|
"^ad[\\w.-]*?\\.zonaplus\\.tv$",
|
|
"^mon[\\w.-]*?-[\\w.-]*?\\.tiktokv\\.us$",
|
|
"^rtlog[\\w.-]*?\\.tiktokv\\.us$",
|
|
"^log[\\w.-]*?-normal-[\\w.-]*?\\.tiktokv\\.us$",
|
|
"^tnc[\\w.-]*?\\.tiktokv\\.us$",
|
|
"^mcs-[\\w.-]*?\\.lemon8-app\\.us$",
|
|
"^mon-[\\w.-]*?\\.lemon8-app\\.us$",
|
|
"^api16-access-ttp[\\w.-]*?\\.tiktokpangle-b\\.us$",
|
|
"^zoom\\.us[\\w.-]*?web\\.us$",
|
|
"^basvformu[\\w.-]*?\\.xyz$",
|
|
"^v\\.tzbox[\\w.-]*?\\.xyz$",
|
|
"^www\\.fuze-sea[\\w.-]*?\\.xyz$",
|
|
"^www\\.fuze-hill[\\w.-]*?\\.xyz$",
|
|
"^evri\\.[\\w.-]*?\\.xyz$",
|
|
"^marketplace-item-[\\w.-]*?\\.000\\.pe$",
|
|
"^sportframe[\\w.-]*?\\.org$",
|
|
"^chinhphu\\.[\\w.-]*?\\.org$",
|
|
"^govuk\\.[\\w.-]*?\\.top$",
|
|
"^press-continue\\.[\\w.-]*?\\.top$",
|
|
"^vincomplaza\\.[\\w.-]*?\\.top$",
|
|
"^baoviet[\\w.-]*?\\.top$",
|
|
"^ad[\\w.-]*?\\.on\\.cc$",
|
|
"^newmall[\\w.-]*?\\.cc$",
|
|
"^vssid\\.[\\w.-]*?\\.cc$",
|
|
"^baoviet[\\w.-]*?\\.vip$",
|
|
"^whatsapp[\\w.-]*?\\.icu$",
|
|
"^telezelm-[\\w.-]*?\\.icu$",
|
|
"^d[\\w.-]*?wsapp\\.icu$",
|
|
"^microsoft[\\w.-]*?\\.dfautomotive\\.de$",
|
|
"^quangcao-[\\w.-]*?\\.epicdn\\.me$",
|
|
"^log-[\\w.-]*?\\.epicdn\\.me$",
|
|
"^ads\\.livetv[\\w.-]*?\\.me$",
|
|
"^ads[\\w.-]*?\\.textra\\.me$",
|
|
"^utahpolicetraining\\.[\\w.-]*?\\.mybluehost\\.me$",
|
|
"^outloksupport[\\w.-]*?\\.glitch\\.me$",
|
|
"^marketplace-item-details-[\\w.-]*?\\.zya\\.me$",
|
|
"^tracking-v[\\w.-]*?\\.a\\.run\\.app$",
|
|
"^authsignonstaff[\\w.-]*?\\.softr\\.app$",
|
|
"^support-metahelpcenter-id[\\w.-]*?\\.netlify\\.app$",
|
|
"^nhantienquocte[\\w.-]*?\\.vercel\\.app$",
|
|
"^pay8-2v-[\\w.-]*?-gmailcom\\.vercel\\.app$",
|
|
"^pancakeclaim-[\\w.-]*?\\.vercel\\.app$",
|
|
"^pancake-nft[\\w.-]*?\\.vercel\\.app$",
|
|
"^pancake-swap[\\w.-]*?\\.vercel\\.app$",
|
|
"^pancakeswap-[\\w.-]*?\\.vercel\\.app$",
|
|
"^base-swap-frontend-[\\w.-]*?\\.vercel\\.app$",
|
|
"^azuki-[\\w.-]*?\\.vercel\\.app$",
|
|
"^facture-pdf-secure-[\\w.-]*?\\.vercel\\.app$",
|
|
"^safety-profiles-fb-ads-[\\w.-]*?\\.vercel\\.app$",
|
|
"^support-center-for-[\\w.-]*?\\.vercel\\.app$",
|
|
"^govern-assessment-validation-[\\w.-]*?\\.vercel\\.app$",
|
|
"^santanderpod\\.[\\w.-]*?\\.co\\.uk$",
|
|
"^santander\\.[\\w.-]*?\\.fino\\.digital$",
|
|
"^amazon-[\\w.-]*?\\.shop$",
|
|
"^allegrolokalnie\\.[\\w.-]*?\\.shop$",
|
|
"^ubacollect-[\\w.-]*?\\.cloud\\.dbankcloud\\.cn$",
|
|
"^logservice-[\\w.-]*?\\.platform\\.dbankcloud\\.cn$",
|
|
"^res[\\w.-]*?\\.pinpai8\\.cn$",
|
|
"^gcw[\\w.-]*?\\.2liang\\.cn$",
|
|
"^ysdm[\\w.-]*?\\.ys137\\.com\\.cn$",
|
|
"^bdcpro[\\w.-]*?\\.techweb\\.com\\.cn$",
|
|
"^adx-[\\w.-]*?\\.dbankedge\\.cn$",
|
|
"^ad-[\\w.-]*?\\.appacc\\.dbankedge\\.cn$",
|
|
"^jtbo[\\w.-]*?\\.nqxvevk\\.cn$",
|
|
"^icloud\\.apple-[\\w.-]*?\\.cn$",
|
|
"^trck\\.[\\w.-]*?\\.prod-na\\.turntable\\.sonic\\.advertising\\.amazon\\.dev$",
|
|
"^alienxchain[\\w.-]*?\\.pages\\.dev$",
|
|
"^help-for-work-[\\w.-]*?\\.pages\\.dev$",
|
|
"^business-facebook-[\\w.-]*?\\.pages\\.dev$",
|
|
"^apples-24x7-[\\w.-]*?\\.pages\\.dev$",
|
|
"^noticiarecentesagora\\.net\\.klebeerlopees[\\w.-]*?\\.meusitehostgator\\.com\\.br$",
|
|
"^fan-page-[\\w.-]*?\\.surge\\.sh$",
|
|
"^copyrights-[\\w.-]*?\\.surge\\.sh$",
|
|
"^violation-[\\w.-]*?\\.surge\\.sh$",
|
|
"^request-page-violation-[\\w.-]*?\\.surge\\.sh$",
|
|
"^minero-proxy-[\\w.-]*?\\.now\\.sh$",
|
|
"^adimg[\\w.-]*?\\.search\\.naver\\.net$",
|
|
"^[\\w.-]*?ad\\.durasite\\.net$",
|
|
"^subnewss[\\w.-]*?\\.net$",
|
|
"^gonews[\\w.-]*?\\.net$",
|
|
"^sonar[\\w.-]*?\\.xy\\.fbcdn\\.net$",
|
|
"^ali-bj-pcdn-[\\w.-]*?\\.biliapi\\.net$",
|
|
"^hw-sh-pcdn-[\\w.-]*?\\.biliapi\\.net$",
|
|
"^[\\w.-]*?-datareceiver\\.aki-game\\.net$",
|
|
"^t[\\w.-]*?\\.zcvh\\.net$",
|
|
"^ad[\\w.-]*?\\.ettoday\\.net$",
|
|
"^collector-[\\w.-]*?\\.px-cdn\\.net$",
|
|
"^collector-[\\w.-]*?\\.px-client\\.net$",
|
|
"^beacon-[\\w.-]*?\\.helpscout\\.net$",
|
|
"^rum[\\w.-]*?\\.a\\.trbcdn\\.net$",
|
|
"^suite[\\w.-]*?\\.linximpulse\\.net$",
|
|
"^pixel-[\\w.-]*?\\.convertagain\\.net$",
|
|
"^faro-collector-prod-[\\w.-]*?\\.grafana\\.net$",
|
|
"^aff[\\w.-]*?\\.kolektiva\\.net$",
|
|
"^adi[\\w.-]*?\\.cnool\\.net$",
|
|
"^flurry\\.agentportal-[\\w.-]*?\\.yahoodns\\.net$",
|
|
"^flurry\\.agentportal\\.[\\w.-]*?\\.yahoodns\\.net$",
|
|
"^api[\\w.-]*?\\.batmobil\\.net$",
|
|
"^api[\\w.-]*?\\.batmobi\\.net$",
|
|
"^adx-[\\w.-]*?\\.op\\.dbankcloud\\.com\\.edgekey\\.net$",
|
|
"^weoidnet[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^verifyyourself-[\\w.-]*?system\\.b-cdn\\.net$",
|
|
"^verification-module-v[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^nikutjyjgchr[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^newverifyyourself-system[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^izmncdnboxuse[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^file-typ-botcheck[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^dedicloadpgeing[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^bot-check-v[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^anti-automation-v[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^ajmaboxanherulv[\\w.-]*?\\.b-cdn\\.net$",
|
|
"^adv0[\\w.-]*?\\.msa\\.cdn\\.mediaset\\.net$",
|
|
"^[\\w.-]*?\\.ad\\.[\\w.-]*?\\.prod\\.hosts\\.ooklaserver\\.net$",
|
|
"^report\\.[\\w.-]*?\\.gbqofs\\.io$",
|
|
"^eum[\\w.-]*?\\.instana\\.io$",
|
|
"^c[\\w.-]*?hit\\.zerkalo\\.io$",
|
|
"^cl[\\w.-]*?\\.k5a\\.io$",
|
|
"^api[\\w.-]*?\\.bidmachine\\.io$",
|
|
"^pixel[\\w.-]*?\\.production-public\\.tubi\\.io$",
|
|
"^ads[\\w.-]*?\\.production-public\\.tubi\\.io$",
|
|
"^metamask[\\w.-]*?\\.webflow\\.io$",
|
|
"^telemetry[\\w.-]*?\\.transcend\\.io$",
|
|
"^f-log-[\\w.-]*?\\.grammarly\\.io$",
|
|
"^f-log[\\w.-]*?\\.grammarly\\.io$",
|
|
"^invenio_tracking_[\\w.-]*?\\.sgnapps\\.com$",
|
|
"^s[\\w.-]*?\\.adduplex\\.com$",
|
|
"^metric[\\w.-]*?\\.rediff\\.com$",
|
|
"^logger-[\\w.-]*?\\.dailymotion\\.com$",
|
|
"^ads-[\\w.-]*?\\.v\\.ssp\\.yahoo\\.com$",
|
|
"^ad[\\w.-]*?\\.thisisgame\\.com$",
|
|
"^pangolin[\\w.-]*?\\.sgsnssdk\\.com$",
|
|
"^analytics-[\\w.-]*?\\.aasaam\\.com$",
|
|
"^partner\\.superbahisaffiliates[\\w.-]*?\\.com$",
|
|
"^r\\.reklam[\\w.-]*?\\.com$",
|
|
"^dw-informer-[\\w.-]*?\\.newsru\\.com$",
|
|
"^u[\\w.-]*?\\.takru\\.com$",
|
|
"^[\\w.-]*?\\.a-akamaihd\\.com$",
|
|
"^cdn[\\w.-]*?\\.swaxis\\.com$",
|
|
"^log[\\w.-]*?-[\\w.-]*?\\.tiktokv\\.com$",
|
|
"^mcs-va-[\\w.-]*?\\.tiktokv\\.com$",
|
|
"^xlog[\\w.-]*?-[\\w.-]*?\\.tiktokv\\.com$",
|
|
"^mon-[\\w.-]*?\\.tiktokv\\.com$",
|
|
"^rtlog[\\w.-]*?\\.tiktokv\\.com$",
|
|
"^mon[\\w.-]*?-[\\w.-]*?\\.tiktokv\\.com$",
|
|
"^mcs\\.[\\w.-]*?\\.tiktokv\\.com$",
|
|
"^ulog\\.[\\w.-]*?\\.ksapisrv\\.com$",
|
|
"^ulog-[\\w.-]*?\\.ksapisrv\\.com$",
|
|
"^sdk-[\\w.-]*?\\.moengage\\.com$",
|
|
"^api[\\w.-]*?\\.moengage\\.com$",
|
|
"^report[\\w.-]*?\\.appmetrica\\.webvisor\\.com$",
|
|
"^tracking-[\\w.-]*?\\.trnox\\.com$",
|
|
"^batchlogging[\\w.-]*?-noneu\\.truecaller\\.com$",
|
|
"^batchlogging[\\w.-]*?-eu\\.truecaller\\.com$",
|
|
"^report\\.[\\w.-]*?\\.qq\\.com$",
|
|
"^appanalysis[\\w.-]*?\\.banggood\\.com$",
|
|
"^beacons[\\w.-]*?\\.gvt3\\.com$",
|
|
"^log[\\w.-]*?-misc-lf\\.amemv\\.com$",
|
|
"^imp-[\\w.-]*?\\.jampp\\.com$",
|
|
"^maas-[\\w.-]*?\\.phunware\\.com$",
|
|
"^-applog[\\w.-]*?\\.fqnovel\\.com$",
|
|
"^mon[\\w.-]*?-misc-lf\\.fqnovel\\.com$",
|
|
"^track\\.[\\w.-]*?\\.roku\\.com$",
|
|
"^-ulog\\.[\\w.-]*?\\.kwaipros\\.com$",
|
|
"^-ulog-[\\w.-]*?\\.kwaipros\\.com$",
|
|
"^ulog[\\w.-]*?\\.kwaipros\\.com$",
|
|
"^ulog\\.[\\w.-]*?\\.kwai-pro\\.com$",
|
|
"^-ulog\\.[\\w.-]*?\\.kwai-pro\\.com$",
|
|
"^-ulog-[\\w.-]*?\\.kwai-pro\\.com$",
|
|
"^-ulogl[\\w.-]*?\\.kwai-pro\\.com$",
|
|
"^ulog[\\w.-]*?\\.kwai-pro\\.com$",
|
|
"^use-trk[\\w.-]*?\\.bluevoox\\.com$",
|
|
"^ulog[\\w.-]*?\\.gifshow\\.com$",
|
|
"^tnc16-[\\w.-]*?\\.hypic\\.com$",
|
|
"^applog[\\w.-]*?\\.matrix\\.easebar\\.com$",
|
|
"^mgbsdk[\\w.-]*?\\.matrix\\.easebar\\.com$",
|
|
"^logs-[\\w.-]*?\\.rebxgame\\.com$",
|
|
"^auth-[\\w.-]*?\\.hismarttv\\.com$",
|
|
"^api-[\\w.-]*?\\.hismarttv\\.com$",
|
|
"^st-[\\w.-]*?\\.dynamicyield\\.com$",
|
|
"^pixel[\\w.-]*?\\.adswizz\\.com$",
|
|
"^lt[\\w.-]*?\\.tritondigital\\.com$",
|
|
"^hstats[\\w.-]*?\\.hepsiburada\\.com$",
|
|
"^host[\\w.-]*?\\.rigbyandpeller\\.com$",
|
|
"^host[\\w.-]*?\\.rvshare\\.com$",
|
|
"^host[\\w.-]*?\\.polaroid\\.com$",
|
|
"^gscounters\\.[\\w.-]*?\\.gigya\\.com$",
|
|
"^geoloc[\\w.-]*?\\.geo20120530\\.com$",
|
|
"^geoloc[\\w.-]*?\\.9cd47096ab1495d8d3b18667f6a52b9c\\.com$",
|
|
"^events-api[\\w.-]*?\\.outfit7\\.com$",
|
|
"^device-metrics-[\\w.-]*?\\.amazon\\.com$",
|
|
"^device-metrics-us[\\w.-]*?\\.amazon\\.com$",
|
|
"^datacollect[\\w.-]*?\\.abtasty\\.com$",
|
|
"^clog[\\w.-]*?\\.yuanfudao\\.com$",
|
|
"^app-analytics-[\\w.-]*?\\.snapchat\\.com$",
|
|
"^analyzer[\\w.-]*?\\.fc2\\.com$",
|
|
"^analytics\\.[\\w.-]*?\\.sky\\.com$",
|
|
"^sensorsdata[\\w.-]*?\\.read\\.duokan\\.com$",
|
|
"^ads-dmp-collect\\.[\\w.-]*?\\.karrotmarket\\.com$",
|
|
"^mcs-[\\w.-]*?\\.tiktok\\.com$",
|
|
"^ana[\\w.-]*?\\.inews24\\.com$",
|
|
"^apple-[\\w.-]*?\\.le\\.com$",
|
|
"^clickstream-[\\w.-]*?\\.homedepot\\.com$",
|
|
"^log[\\w.-]*?-normal-useast1a\\.lemon8-app\\.com$",
|
|
"^mcs-[\\w.-]*?\\.lemon8-app\\.com$",
|
|
"^mon-[\\w.-]*?\\.lemon8-app\\.com$",
|
|
"^log-va[\\w.-]*?\\.capcutapi\\.com$",
|
|
"^mon-va[\\w.-]*?\\.capcutapi\\.com$",
|
|
"^tnc-va[\\w.-]*?\\.capcutapi\\.com$",
|
|
"^mssdk[\\w.-]*?\\.capcutapi\\.com$",
|
|
"^stlog[\\w.-]*?-local\\.kakao\\.com$",
|
|
"^customerevents\\.us-east-[\\w.-]*?\\.internal\\.dradis\\.netflix\\.com$",
|
|
"^sock[\\w.-]*?-goguardian\\.pusher\\.com$",
|
|
"^metrics[\\w.-]*?\\.fitanalytics\\.com$",
|
|
"^analytics[\\w.-]*?\\.clickdimensions\\.com$",
|
|
"^i-[\\w.-]*?\\.ci360\\.sas\\.com$",
|
|
"^eclog[\\w.-]*?-[\\w.-]*?\\.cafe24\\.com$",
|
|
"^collector-[\\w.-]*?\\.tvsquared\\.com$",
|
|
"^livetracker\\.[\\w.-]*?\\.pangea-cms\\.com$",
|
|
"^browser-intake-[\\w.-]*?-datadoghq\\.com$",
|
|
"^analytics[\\w.-]*?\\.prezly\\.com$",
|
|
"^srmdata-[\\w.-]*?\\.com$",
|
|
"^install[\\w.-]*?\\.zonastat\\.com$",
|
|
"^s[\\w.-]*?\\.skencituer\\.com$",
|
|
"^pijama\\.[\\w.-]*?\\.elasticbeanstalk\\.com$",
|
|
"^block\\.s[\\w.-]*?block\\.com$",
|
|
"^putrr[\\w.-]*?\\.com$",
|
|
"^teleriumads-[\\w.-]*?\\.netdna-ssl\\.com$",
|
|
"^clk\\.rtpdn[\\w.-]*?\\.com$",
|
|
"^widget-v[\\w.-]*?\\.tidiochat\\.com$",
|
|
"^btn\\.createsend[\\w.-]*?\\.com$",
|
|
"^widgets\\.[\\w.-]*?\\.webengage\\.com$",
|
|
"^cdn[\\w.-]*?\\.pdmntn\\.com$",
|
|
"^policy[\\w.-]*?\\.cookieinformation\\.com$",
|
|
"^stat\\.[\\w.-]*?\\.v-56\\.com$",
|
|
"^hn-ping[\\w.-]*?\\.hashnode\\.com$",
|
|
"^stats2\\.[\\w.-]*?\\.fdnames\\.com$",
|
|
"^log-[\\w.-]*?\\.previewnetworks\\.com$",
|
|
"^collector-[\\w.-]*?\\.luigisbox\\.com$",
|
|
"^geotargetly-api-[\\w.-]*?\\.com$",
|
|
"^uc[\\w.-]*?\\.atobo\\.com$",
|
|
"^union[\\w.-]*?\\.365inews\\.com$",
|
|
"^static[\\w.-]*?\\.365inews\\.com$",
|
|
"^qpb[\\w.-]*?\\.sohu\\.com$",
|
|
"^fpb[\\w.-]*?\\.51edu\\.com$",
|
|
"^fanpingbi[\\w.-]*?\\.gaokao\\.com$",
|
|
"^dn[\\w.-]*?\\.ixinwei\\.com$",
|
|
"^dm[\\w.-]*?\\.yxlady\\.com$",
|
|
"^d[\\w.-]*?\\.xinshipu\\.com$",
|
|
"^d[\\w.-]*?\\.ruiwen\\.com$",
|
|
"^bdlm[\\w.-]*?\\.hc360\\.com$",
|
|
"^at[\\w.-]*?\\.doubanio\\.com$",
|
|
"^ac[\\w.-]*?\\.pingguolv\\.com$",
|
|
"^ac[\\w.-]*?\\.faxingchina\\.com$",
|
|
"^ac[\\w.-]*?\\.786ip\\.com$",
|
|
"^a[\\w.-]*?\\.chajiaotong\\.com$",
|
|
"^ya[\\w.-]*?\\.dwstatic\\.com$",
|
|
"^same[\\w.-]*?\\.stockstar\\.com$",
|
|
"^sam[\\w.-]*?\\.baby-kingdom\\.com$",
|
|
"^js[\\w.-]*?\\.abolezi\\.com$",
|
|
"^ja[\\w.-]*?\\.gamersky\\.com$",
|
|
"^impservice[\\w.-]*?\\.youdao\\.com$",
|
|
"^impservice[\\w.-]*?\\.yodao\\.com$",
|
|
"^tupian888\\.[\\w.-]*?\\.bcebos\\.com$",
|
|
"^log[\\w.-]*?\\.aliyuncs\\.com$",
|
|
"^zhizhizhizhi\\.oss-[\\w.-]*?\\.aliyuncs\\.com$",
|
|
"^vns86\\.oss-[\\w.-]*?\\.aliyuncs\\.com$",
|
|
"^ky891\\.oss-[\\w.-]*?\\.aliyuncs\\.com$",
|
|
"^asd8900\\.oss-[\\w.-]*?\\.aliyuncs\\.com$",
|
|
"^ax\\.[\\w.-]*?\\.ifeng\\.com$",
|
|
"^ifengad\\.[\\w.-]*?\\.ifeng\\.com$",
|
|
"^us\\.[\\w.-]*?\\.qwadro\\.com$",
|
|
"^banner\\.[\\w.-]*?\\.tccapis\\.com$",
|
|
"^sdk\\.[\\w.-]*?\\.braze\\.com$",
|
|
"^iad-[\\w.-]*?\\.braze\\.com$",
|
|
"^events-[\\w.-]*?\\.op\\.hicloud\\.com$",
|
|
"^mediate-ios-[\\w.-]*?\\.hyprmx\\.com$",
|
|
"^marketplace-[\\w.-]*?\\.hyprmx\\.com$",
|
|
"^adcs-[\\w.-]*?\\.myappsget\\.com$",
|
|
"^log[\\w.-]*?\\.byteoversea\\.com$",
|
|
"^tnc16-[\\w.-]*?\\.byteoversea\\.com$",
|
|
"^ads[\\w.-]*?\\.bojijulebu\\.com$",
|
|
"^dualstack\\.adbert-web-lbs-[\\w.-]*?\\.elb\\.amazonaws\\.com$",
|
|
"^liveme-sensors-collect2-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^lively-collect-elb-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^iptracker-lb-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^collect-elb-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^ce-global-track-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^bi-eventtracker-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^analytics-rollout-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^apiproxy-log-nlb-1f304af4d3ac01a4\\.elb\\.us-east-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^snowplow-collector-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^mobileanalytics\\.[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^client\\.rum\\.[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^reachableads-av\\.[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^tag-based\\.s3\\.[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^cookie-sl\\.s3\\.[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^rtbimp-loadbalancer-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^ad-[\\w.-]*?\\.amazonaws\\.com$",
|
|
"^mob[\\w.-]*?\\.novanewsapp\\.com$",
|
|
"^tnc[\\w.-]*?\\.zijieapi\\.com$",
|
|
"^polaris[\\w.-]*?-normal-[\\w.-]*?\\.zijieapi\\.com$",
|
|
"^mssdk[\\w.-]*?\\.zijieapi\\.com$",
|
|
"^log[\\w.-]*?\\.zijieapi\\.com$",
|
|
"^ads[\\w.-]*?-normal-lq\\.zijieapi\\.com$",
|
|
"^ads[\\w.-]*?-normal-[\\w.-]*?\\.zijieapi\\.com$",
|
|
"^creative[\\w.-]*?\\.bidease\\.com$",
|
|
"^profitablecpm[\\w.-]*?\\.com$",
|
|
"^highcpmrevenue[\\w.-]*?\\.com$",
|
|
"^c\\.blue\\.[\\w.-]*?\\.com$",
|
|
"^irs\\.gov\\.[\\w.-]*?\\.com$",
|
|
"^e-interac-[\\w.-]*?\\.com$",
|
|
"^usps-packages-[\\w.-]*?\\.com$",
|
|
"^[\\w.-]*?\\.favoripirlanta\\.com$",
|
|
"^tiktok-svip[\\w.-]*?\\.com$",
|
|
"^lcldetecthumainweb[\\w.-]*?\\.firebaseapp\\.com$",
|
|
"^agripro-fr-[\\w.-]*?\\.com$",
|
|
"^mail\\.[\\w.-]*?-coinbase\\.com$",
|
|
"^msoftupdate\\.[\\w.-]*?\\.linodeobjects\\.com$",
|
|
"^wwwservicemsnlive-[\\w.-]*?\\.hubspotpagebuilder\\.com$",
|
|
"^steam\\.workshop[\\w.-]*?\\.com$",
|
|
"^facebook-[\\w.-]*?\\.ubpages\\.com$",
|
|
"^attonlineservice[\\w.-]*?\\.wixstudio\\.com$",
|
|
"^payer-ma-acture-[\\w.-]*?\\.mystrikingly\\.com$",
|
|
"^westernunion[\\w.-]*?\\.wixsite\\.com$",
|
|
"^messagerie[\\w.-]*?\\.wixsite\\.com$",
|
|
"^messagerie[\\w.-]*?\\.godaddysites\\.com$",
|
|
"^bingkasprogram-[\\w.-]*?\\.xdbng\\.com$",
|
|
"^e-navy[\\w.-]*?\\.weebly\\.com$",
|
|
"^2025[\\w.-]*?maintenance\\.weebly\\.com$",
|
|
"^currentlymail[\\w.-]*?\\.weebly\\.com$",
|
|
"^currentlyatt[\\w.-]*?\\.weebly\\.com$",
|
|
"^testra[\\w.-]*?-covid\\.weebly\\.com$",
|
|
"^vnote-[\\w.-]*?\\.myqcloud\\.com$",
|
|
"^tracking\\.[\\w.-]*?\\.miui\\.com$",
|
|
"^[\\w.-]*?\\.tracking\\.[\\w.-]*?\\.miui\\.com$",
|
|
"^beacons[\\w.-]*?\\.gvt[\\w.-]\\.com$",
|
|
"^info\\.[\\w.-]*?\\.aleragroup\\.com$"
|
|
],
|
|
"domain_keyword": [
|
|
".estream.",
|
|
"jshosting",
|
|
"hostingcloud",
|
|
"flightsy",
|
|
"zymerget",
|
|
"gettate",
|
|
"mighbest",
|
|
"nimiqpool",
|
|
".freecontent.",
|
|
"sunnimiq",
|
|
".nimiq.",
|
|
"anybest.",
|
|
"dubester.",
|
|
"fb-restriction-case",
|
|
"fb-restriction-appeal",
|
|
"fb-community-standards",
|
|
"fb-business-appeal",
|
|
"cp-home-pl-",
|
|
"tlauncher",
|
|
"track.tiara",
|
|
"umeng",
|
|
"adsby",
|
|
"adsdk",
|
|
"adserver",
|
|
"admaster",
|
|
"adserve2",
|
|
"admob",
|
|
"adspace",
|
|
"advertmarket",
|
|
"adsyndication",
|
|
"doubleclick.",
|
|
"adjust.",
|
|
"appsflyer",
|
|
"dnserror",
|
|
"marketing.net",
|
|
"adktrack",
|
|
"track.msadcenter",
|
|
"dc.pimentaafricana",
|
|
"-txtagstore",
|
|
"thetollroads-",
|
|
"-go.experian.com",
|
|
"-adnow.com",
|
|
"dkswshap-",
|
|
".srvqck",
|
|
".fstsrv",
|
|
".sagewwl",
|
|
"_vmind.qqvideo.tc.qq.com",
|
|
"-logging.nextmedia.com",
|
|
"-spiky.clevertap-prod.com",
|
|
".engage.3m.",
|
|
"telemetry.officeapps.live.com",
|
|
"-launches.appsflyersdk.com",
|
|
"-attr.appsflyersdk.com",
|
|
"-s2s.sensic.net",
|
|
"-rtb.gravite.net",
|
|
"-pia.appsflyersdk.com",
|
|
"-skadsdkless.appsflyersdk.com",
|
|
"-adrevenue.appsflyersdk.com",
|
|
"-ulogl2.kwai-pro.com",
|
|
"-ulogl2.kwaipros.com",
|
|
"-ulog.kwai-pro.com",
|
|
"-ulog.ksapisrv.com",
|
|
"-ulog.region.kwai-pro.com",
|
|
"-logsdk.kwai-pro.com",
|
|
"analytics-cdn.",
|
|
"backstory.ebay.",
|
|
"click.rum.",
|
|
"cmpworker.",
|
|
"insights-collector.",
|
|
"track.opentable.",
|
|
".net.daraz.",
|
|
".zooplus.",
|
|
"smetrics.",
|
|
"a8clk.",
|
|
"a8cv.",
|
|
"plausible.",
|
|
"wxsnsdy",
|
|
"adwords",
|
|
"-tracker.biliapi.net",
|
|
"ad.ixigua.com",
|
|
"trksvg.business.hsbc.",
|
|
"trkgbm.business.hsbc.",
|
|
"trkhinv.business.hsbc.",
|
|
"trkcmb.business.hsbc.",
|
|
"-analytics-events.apple.com",
|
|
"-ad.video.yximgs.com",
|
|
"-ad.sm.cn",
|
|
"-ad.wtzw.com",
|
|
"-be-pack-sign.pglstatp-toutiao.com",
|
|
"-normal.zijieapi.com"
|
|
],
|
|
"ip_cidr": [
|
|
"39.97.128.148/32",
|
|
"39.97.130.51/32",
|
|
"42.81.232.18/32",
|
|
"42.187.182.106/32",
|
|
"42.187.182.123/32",
|
|
"42.187.184.154/32",
|
|
"59.82.99.47/32",
|
|
"59.111.239.61/32",
|
|
"59.111.239.62/32",
|
|
"101.35.204.35/32",
|
|
"101.124.19.122/32",
|
|
"103.37.152.97/32",
|
|
"103.224.222.208/32",
|
|
"106.11.25.31/32",
|
|
"114.110.97.97/32",
|
|
"115.236.121.51/32",
|
|
"115.236.121.195/32",
|
|
"118.89.204.198/32",
|
|
"119.29.29.98/31",
|
|
"123.151.54.50/32",
|
|
"180.76.76.200/32",
|
|
"182.254.116.117/32",
|
|
"182.254.118.119/32",
|
|
"202.90.108.13/32",
|
|
"202.90.110.46/32",
|
|
"203.107.1.0/24",
|
|
"203.119.204.66/32",
|
|
"203.119.238.194/32",
|
|
"2402:db40:5100:1011::5/128",
|
|
"2402:4e00:1900:1700:0:9554:1ad9:c3a/128",
|
|
"240e:928:1400:10::25/128",
|
|
"2402:4e00:1200:ed00:0:9089:6dac:96b6/128"
|
|
]
|
|
}
|
|
]
|
|
}
|