reject-data-source.ts 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526
  1. export const DEBUG_DOMAIN_TO_FIND: string | null = 'links.strava.com'; // example.com | null
  2. type HostsSource = [main: string, mirrors: string[] | null, includeAllSubDomain: boolean];
  3. export const HOSTS: HostsSource[] = [
  4. [
  5. // WindowsSpyBlocker hasn't been updated since 2022-06-16, let's use jsDelivr as primary URL
  6. 'https://cdn.jsdelivr.net/gh/crazy-max/WindowsSpyBlocker@master/data/hosts/spy.txt',
  7. ['https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt'],
  8. true
  9. ],
  10. ['https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-Xiaomi-Extension.txt', null, false],
  11. ['https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-Huawei-AdBlock.txt', null, false]
  12. ];
  13. export const HOSTS_EXTRA: HostsSource[] = [
  14. ['https://raw.githubusercontent.com/durablenapkin/block/master/tvstream.txt', null, true],
  15. // This stupid hosts blocks t.co, so we determine that this is also bullshit, so it is extra
  16. [
  17. 'https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext',
  18. ['https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/thirdparties/pgl.yoyo.org/as/serverlist'],
  19. true
  20. ],
  21. // Dan Pollock's hosts file, 0.0.0.0 version is 30 KiB smaller
  22. [
  23. 'https://someonewhocares.org/hosts/zero/hosts',
  24. ['https://proxy.cdn.skk.moe/https/someonewhocares.org/hosts/zero/hosts'],
  25. true
  26. ],
  27. // ad-wars is not actively maintained since 2023.11, so we use jsDelivr as primary URL
  28. [
  29. 'https://cdn.jsdelivr.net/gh/jdlingyu/ad-wars@master/hosts',
  30. ['https://raw.githubusercontent.com/jdlingyu/ad-wars/master/hosts'],
  31. false
  32. ]
  33. ];
  34. export const DOMAIN_LISTS: HostsSource[] = [
  35. // CoinBlockerList
  36. // The CoinBlockerList is no longer maintained and even close-source, so we no longer trust it
  37. // instead we maintain a list of our own
  38. // [
  39. // 'https://zerodot1.gitlab.io/CoinBlockerLists/list_browser.txt',
  40. // [],
  41. // true,
  42. // ]
  43. ];
  44. export const DOMAIN_LISTS_EXTRA: HostsSource[] = [
  45. // CoinBlockerList - Full
  46. // The CoinBlockerList is no longer maintained and even close-source, so we no longer trust it
  47. // instead we maintain a list of our own
  48. // BarbBlock
  49. // The barbblock list has never been updated since 2019-05, so we set a 14 days cache ttl
  50. [
  51. 'https://paulgb.github.io/BarbBlock/blacklists/domain-list.txt',
  52. ['https://raw.githubusercontent.com/paulgb/BarbBlock/refs/heads/main/blacklists/domain-list.txt'],
  53. true
  54. ],
  55. // DigitalSide Threat-Intel - OSINT Hub
  56. // Update once per day
  57. ['https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt', [], true],
  58. // AdGuard CNAME Filter Combined
  59. // Update on a 7 days basis, so we can also use jsDelivr as primary URL
  60. [
  61. 'https://cdn.jsdelivr.net/gh/AdguardTeam/cname-trackers@master/data/combined_disguised_ads_justdomains.txt',
  62. [
  63. 'https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_ads_justdomains.txt'
  64. ],
  65. true
  66. ],
  67. [
  68. 'https://cdn.jsdelivr.net/gh/AdguardTeam/cname-trackers@master/data/combined_disguised_trackers_justdomains.txt',
  69. [
  70. 'https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_trackers_justdomains.txt'
  71. ],
  72. true
  73. ],
  74. // Disable clickthrough set. Many mail SaaS uses this kind of technique on their links (even normal links)
  75. // E.g. links.strava.com
  76. // [
  77. // 'https://cdn.jsdelivr.net/gh/AdguardTeam/cname-trackers@master/data/combined_disguised_clickthroughs_justdomains.txt',
  78. // [
  79. // 'https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_clickthroughs_justdomains.txt'
  80. // ],
  81. // true
  82. // ],
  83. [
  84. 'https://cdn.jsdelivr.net/gh/AdguardTeam/cname-trackers@master/data/combined_disguised_microsites_justdomains.txt',
  85. [
  86. 'https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_microsites_justdomains.txt'
  87. ],
  88. true
  89. ],
  90. // ['https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_mail_trackers_justdomains.txt', [], true],
  91. // Curben's PUP Domains Blocklist
  92. // The PUP filter has paused the update since 2023-05, so we set a 14 days cache ttl, and move it to extra
  93. // [
  94. // 'https://pup-filter.pages.dev/pup-filter-domains.txt',
  95. // [
  96. // // 'https://malware-filter.pages.dev/pup-filter-domains.txt',
  97. // // 'https://malware-filter.gitlab.io/malware-filter/pup-filter-domains.txt',
  98. // 'https://malware-filter.gitlab.io/pup-filter/pup-filter-domains.txt'
  99. // // 'https://curbengh.github.io/pup-filter/pup-filter-domains.txt',
  100. // // 'https://malware-filter.pages.dev/pup-filter-domains.txt'
  101. // ],
  102. // true
  103. // ],
  104. // Curben's UrlHaus Malicious URL Blocklist
  105. [
  106. 'https://urlhaus-filter.pages.dev/urlhaus-filter-domains.txt',
  107. [
  108. 'https://malware-filter.pages.dev/urlhaus-filter-domains.txt',
  109. 'https://malware-filter.gitlab.io/urlhaus-filter/urlhaus-filter-domains.txt',
  110. 'https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains.txt',
  111. 'https://curbengh.github.io/urlhaus-filter/urlhaus-filter-domains.txt'
  112. ],
  113. true
  114. ],
  115. // Spam404
  116. // Not actively maintained, let's use jsDelivr as primary URL
  117. [
  118. 'https://cdn.jsdelivr.net/gh/Spam404/lists@master/main-blacklist.txt',
  119. [
  120. 'https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt'
  121. ],
  122. true
  123. ]
  124. ];
  125. export const PHISHING_HOSTS_EXTRA: HostsSource[] = [
  126. ['https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt', [], true]
  127. ];
  128. export const PHISHING_DOMAIN_LISTS_EXTRA: HostsSource[] = [
  129. [
  130. 'https://phishing-filter.pages.dev/phishing-filter-domains.txt',
  131. [
  132. 'https://malware-filter.pages.dev/phishing-filter-domains.txt',
  133. 'https://malware-filter.gitlab.io/phishing-filter/phishing-filter-domains.txt',
  134. 'https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt',
  135. 'https://curbengh.github.io/phishing-filter/phishing-filter-domains.txt'
  136. ],
  137. true
  138. ],
  139. [
  140. 'https://phishing.army/download/phishing_army_blocklist.txt',
  141. [],
  142. true
  143. ]
  144. ];
  145. type AdGuardFilterSource = [main: string, mirrors: string[] | null, includeThirdParty?: boolean];
  146. export const ADGUARD_FILTERS: AdGuardFilterSource[] = [
  147. // EasyList -- Use AdGuard Base Filter w/ EasyList
  148. // [
  149. // 'https://easylist.to/easylist/easylist.txt',
  150. // [
  151. // 'https://easylist-downloads.adblockplus.org/easylist.txt',
  152. // 'https://secure.fanboy.co.nz/easylist.txt',
  153. // 'https://ublockorigin.github.io/uAssetsCDN/thirdparties/easylist.txt',
  154. // 'https://ublockorigin.pages.dev/thirdparties/easylist.txt',
  155. // 'https://raw.githubusercontent.com/easylist/easylist/gh-pages/easylist.txt',
  156. // 'https://filters.adtidy.org/extension/ublock/filters/101_optimized.txt'
  157. // ]
  158. // ],
  159. // AdGuard Base Filter -- Use AdGuard Base Filter w/ EasyList
  160. [
  161. 'https://filters.adtidy.org/extension/ublock/filters/2_optimized.txt',
  162. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/2_optimized.txt']
  163. ],
  164. // EasyPrivacy
  165. [
  166. 'https://easylist.to/easylist/easyprivacy.txt',
  167. [
  168. 'https://easylist-downloads.adblockplus.org/easyprivacy.txt',
  169. 'https://secure.fanboy.co.nz/easyprivacy.txt',
  170. 'https://ublockorigin.github.io/uAssetsCDN/thirdparties/easyprivacy.txt',
  171. 'https://ublockorigin.pages.dev/thirdparties/easyprivacy.txt',
  172. 'https://raw.githubusercontent.com/easylist/easylist/gh-pages/easyprivacy.txt',
  173. 'https://filters.adtidy.org/extension/ublock/filters/118_optimized.txt'
  174. ]
  175. ],
  176. // AdGuard Base Filter: Use AdGuard Base Filter w/ EasyList
  177. // [
  178. // 'https://filters.adtidy.org/extension/ublock/filters/2_without_easylist.txt',
  179. // ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/2_without_easylist.txt']
  180. // ],
  181. // AdGuard Mobile AD
  182. [
  183. 'https://filters.adtidy.org/extension/ublock/filters/11_optimized.txt',
  184. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/2_without_easylist.txt']
  185. ],
  186. // AdGuard Tracking Protection
  187. [
  188. 'https://filters.adtidy.org/extension/ublock/filters/3_optimized.txt',
  189. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/3_optimized.txt']
  190. ],
  191. // AdGuard Chinese filter (EasyList China + AdGuard Chinese filter)
  192. [
  193. 'https://filters.adtidy.org/extension/ublock/filters/224_optimized.txt',
  194. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/224_optimized.txt']
  195. ],
  196. // GameConsoleAdblockList
  197. // Update almost once per 1 to 3 months, let's set a 10 days cache ttl
  198. [
  199. 'https://cdn.jsdelivr.net/gh/DandelionSprout/adfilt@master/GameConsoleAdblockList.txt',
  200. ['https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GameConsoleAdblockList.txt']
  201. ],
  202. // PiHoleBlocklist
  203. // Update almost once per 3 months, let's set a 10 days cache ttl
  204. [
  205. 'https://perflyst.github.io/PiHoleBlocklist/SmartTV-AGH.txt',
  206. [
  207. 'https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV-AGH.txt'
  208. ]
  209. ],
  210. // uBlock Origin Unbreak
  211. [
  212. 'https://ublockorigin.github.io/uAssetsCDN/filters/unbreak.min.txt',
  213. [
  214. 'https://ublockorigin.pages.dev/filters/unbreak.min.txt'
  215. ]
  216. ]
  217. //
  218. // [
  219. // 'https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareAdGuardHome.txt',
  220. // [
  221. // 'https://adguardteam.github.io/HostlistsRegistry/assets/filter_12.txt'
  222. // ]
  223. // ]
  224. // Stalkerware
  225. // [
  226. // 'https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/hosts',
  227. // [
  228. // 'https://adguardteam.github.io/HostlistsRegistry/assets/filter_31.txt'
  229. // ]
  230. // ]
  231. ];
  232. export const ADGUARD_FILTERS_WHITELIST: AdGuardFilterSource[] = [
  233. [
  234. 'https://adguardteam.github.io/AdGuardSDNSFilter/Filters/exceptions.txt',
  235. [
  236. 'https://raw.githubusercontent.com/AdguardTeam/AdGuardSDNSFilter/master/Filters/exceptions.txt'
  237. ]
  238. ],
  239. [
  240. 'https://adguardteam.github.io/AdGuardSDNSFilter/Filters/exclusions.txt',
  241. [
  242. 'https://raw.githubusercontent.com/AdguardTeam/AdGuardSDNSFilter/master/Filters/exclusions.txt'
  243. ]
  244. ]
  245. ];
  246. export const ADGUARD_FILTERS_EXTRA: AdGuardFilterSource[] = [
  247. // AdGuard DNS Filter
  248. // way too many other countries' domains (JP, Spanish, RU, VN, Turkish, Ukarainian, Dutch, etc.)
  249. // EasyList, EasyPrivacy, Chinese and general filters are already included in base data source
  250. [
  251. 'https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt',
  252. [
  253. 'https://filters.adtidy.org/extension/ublock/filters/15_optimized.txt',
  254. 'https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt'
  255. ]
  256. ],
  257. // no coin list adguard list is more maintained than its hosts
  258. ['https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/nocoin.txt', [], true],
  259. // AdGuard Annoyances filter
  260. [
  261. 'https://filters.adtidy.org/extension/ublock/filters/14_optimized.txt',
  262. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/14_optimized.txt'],
  263. true
  264. ],
  265. // AdGuard Cookie Notices, included in Annoyances filter
  266. // ['https://filters.adtidy.org/extension/ublock/filters/18_optimized.txt', null, true],
  267. // EasyList Germany filter, not even included in extra for now
  268. // [
  269. // 'https://easylist.to/easylistgermany/easylistgermany.txt',
  270. // [
  271. // 'https://easylist-downloads.adblockplus.org/easylistgermany.txt'
  272. // ],
  273. //
  274. // ],
  275. // AdGuard Japanese filter
  276. [
  277. 'https://filters.adtidy.org/extension/ublock/filters/7_optimized.txt',
  278. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/7_optimized.txt']
  279. ],
  280. // uBlock Origin Filter List
  281. [
  282. 'https://ublockorigin.github.io/uAssetsCDN/filters/filters.min.txt',
  283. [
  284. 'https://ublockorigin.pages.dev/filters/filters.min.txt'
  285. ]
  286. ],
  287. // AdGuard Popup Overlay - included in Annoyances filter
  288. // ['https://filters.adtidy.org/extension/ublock/filters/19_optimized.txt', null, true],
  289. // AdGuard Mobile Banner
  290. // almost all generic rule
  291. // ['https://filters.adtidy.org/extension/ublock/filters/20_optimized.txt', null],
  292. // uBlock Origin Badware Risk List
  293. [
  294. 'https://ublockorigin.github.io/uAssetsCDN/filters/badware.min.txt',
  295. [
  296. 'https://ublockorigin.pages.dev/filters/badware.min.txt'
  297. ]
  298. ],
  299. // uBlock Origin Privacy List
  300. [
  301. 'https://ublockorigin.github.io/uAssetsCDN/filters/privacy.min.txt',
  302. [
  303. 'https://ublockorigin.pages.dev/filters/privacy.min.txt'
  304. ]
  305. ],
  306. // uBlock Origin Resource Abuse: merged in uBlock Origin Privacy List
  307. // [
  308. // 'https://ublockorigin.github.io/uAssetsCDN/filters/resource-abuse.txt',
  309. // ['https://ublockorigin.pages.dev/filters/resource-abuse.txt']
  310. // ],
  311. // uBlock Origin Annoyances (the un-merged of Fanboy Annoyances List)
  312. [
  313. 'https://ublockorigin.github.io/uAssetsCDN/filters/annoyances.min.txt',
  314. ['https://ublockorigin.pages.dev/filters/annoyances.min.txt']
  315. ],
  316. // EasyList Annoyances
  317. [
  318. 'https://ublockorigin.github.io/uAssetsCDN/thirdparties/easylist-annoyances.txt',
  319. ['https://ublockorigin.pages.dev/thirdparties/easylist-annoyances.txt']
  320. ],
  321. // EasyList - Newsletters
  322. [
  323. 'https://ublockorigin.github.io/uAssetsCDN/thirdparties/easylist-newsletters.txt',
  324. ['https://ublockorigin.pages.dev/thirdparties/easylist-newsletters.txt']
  325. ],
  326. // EasyList - Notifications
  327. [
  328. 'https://ublockorigin.github.io/uAssets/thirdparties/easylist-notifications.txt',
  329. ['https://ublockorigin.pages.dev/thirdparties/easylist-notifications.txt']
  330. ],
  331. // Fanboy Cookie Monster (EasyList Cookie List)
  332. [
  333. 'https://ublockorigin.github.io/uAssets/thirdparties/easylist-cookies.txt',
  334. [
  335. 'https://ublockorigin.pages.dev/thirdparties/easylist-cookies.txt',
  336. 'https://secure.fanboy.co.nz/fanboy-cookiemonster_ubo.txt'
  337. ]
  338. ],
  339. // Dandelion Sprout's Annoyances
  340. [
  341. 'https://filters.adtidy.org/extension/ublock/filters/250_optimized.txt',
  342. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/250_optimized.txt'],
  343. true
  344. ],
  345. // Adblock Warning Removal List
  346. [
  347. 'https://easylist-downloads.adblockplus.org/antiadblockfilters.txt',
  348. [
  349. 'https://filters.adtidy.org/extension/ublock/filters/207_optimized.txt'
  350. ],
  351. true
  352. ]
  353. ];
  354. // In a hostile network like when an ad blocker is present, apps might be crashing, and these errors need to be
  355. // The reason for unblocking crashlytics is to not make developers life worse by breaking crash reporting.
  356. // In a hostile network like when an ad blocker is present, apps might be crashing, and these errors need to be
  357. // reported to devs, otherwise they won't learn about the issue and won't fix it.
  358. // Also, it is not a common third-party analytics tracker, Crashlytics is not used for collecting users' data.
  359. export const CRASHLYTICS_WHITELIST = [
  360. // VSCode Telemetry, see https://sts.online.visualstudio.com/api/swagger/index.html
  361. 'sts.online.visualstudio.com',
  362. // Sentry
  363. '.ingest.sentry.io',
  364. '.ingest.us.sentry.io',
  365. '.ingest.de.sentry.io',
  366. // bugsnag
  367. '.sessions.bugsnag.com',
  368. '.notify.bugsnag.com',
  369. // influxdata
  370. '.cloud.influxdata.com',
  371. '.cloud1.influxdata.com',
  372. '.cloud2.influxdata.com',
  373. // split.io A/B flag
  374. 'streaming.split.io',
  375. 'telemetry.split.io',
  376. 'sdk.split.io',
  377. // Google
  378. // -ds.metric.gstatic.com are specifically exempted from reject, but it could use secondary proxy policy
  379. '.metric.gstatic.com',
  380. // Misc
  381. 'telemetry.1passwordservices.com',
  382. 'events.tableplus.com',
  383. 'telemetry.nextjs.org',
  384. 'telemetry.vercel.com',
  385. 'stats.setapp.com',
  386. 'stats.setapp.macpaw.dev',
  387. '.app-analytics-services.com',
  388. '.telemetry.services.yofi.ai',
  389. '.cdn.pubnub.com',
  390. '.data.debugbear.com',
  391. '.cdn.applicationinsights.io',
  392. '.applicationinsights.azure.com',
  393. '.applicationinsights.azure.cn',
  394. '.api.loganalytics.io',
  395. '.bugly.qcloud.com',
  396. '.cdn.signalfx.com',
  397. '.crash-reports.browser.yandex.net',
  398. '.crashlytics2.l.google.com',
  399. '.crashlyticsreports-pa.googleapis.com',
  400. '.e.crashlytics.com',
  401. '.events.backtrace.io',
  402. 'auth.split.io',
  403. 'events.split.io',
  404. 'streaming.split.io',
  405. '.in.appcenter.ms',
  406. '.loggly.com',
  407. '.logz.io',
  408. '.opentelemetry.io',
  409. '.raygun.io', // dashboard lives at raygun.com
  410. '.rum.cronitor.io',
  411. '.settings.crashlytics.com',
  412. '.sny.monosnap.com',
  413. '.lr-ingest.com',
  414. '.cdn.rollbar.com',
  415. '.api.instabug.com',
  416. '.ensighten.com',
  417. 'api.crashguard.me'
  418. ];
  419. export const PREDEFINED_WHITELIST = [
  420. ...CRASHLYTICS_WHITELIST,
  421. '.localhost',
  422. '.local',
  423. '.localdomain',
  424. '.broadcasthost',
  425. '.ip6-loopback',
  426. '.ip6-localnet',
  427. '.ip6-mcastprefix',
  428. '.ip6-allnodes',
  429. '.ip6-allrouters',
  430. '.ip6-allhosts',
  431. '.mcastprefix',
  432. '.skk.moe',
  433. 'analytics.google.com',
  434. '.cloud.answerhub.com',
  435. 'ae01.alicdn.com',
  436. '.whoami.akamai.net',
  437. '.whoami.ds.akahelp.net',
  438. '.instant.page', // No, it doesn't violate anyone's privacy. I will whitelist it
  439. '.piwik.pro',
  440. 'mixpanel.com',
  441. 'cdn.mxpnl.com',
  442. '.heapanalytics.com',
  443. '.segment.com',
  444. '.segmentify.com',
  445. '.t.co', // pgl yoyo add t.co to the blacklist
  446. '.survicate.com', // AdGuardDNSFilter
  447. '.perfops.io', // AdGuardDNSFilter
  448. '.d2axgrpnciinw7.cloudfront.net', // ADGuardDNSFilter
  449. '.sb-cd.com', // AdGuard
  450. '.storage.yandexcloud.net', // phishing list
  451. '.login.microsoftonline.com', // phishing list
  452. 'api.xiaomi.com', // https://github.com/jerryn70/GoodbyeAds/issues/281
  453. 'api.io.mi.com', // https://github.com/jerryn70/GoodbyeAds/issues/281
  454. '.cdn.userreport.com', // https://github.com/AdguardTeam/AdGuardSDNSFilter/issues/1158
  455. '.ip-api.com',
  456. '.fastly-analytics.com',
  457. '.digitaloceanspaces.com',
  458. 's3.nl-ams.scw.cloud',
  459. '.geolocation-db.com',
  460. '.uploads.codesandbox.io',
  461. '.vlscppe.microsoft.com', // Affect Windows ISO download https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_trackers.txt
  462. '.statsig.com', // OpenAI use this for A/B testing
  463. '.pstmrk.it', // Fuck Peter Lowe Hosts
  464. '.clicks.mlsend.com', // Fuck Peter Lowe Hosts
  465. 'email.accounts.bitly.com', // Fuck Peter Lowe Hosts
  466. 'adsense.google.com', // Fuck Peter Lowe Hosts
  467. 'api.vip.miui.com', // Fuck Goodbye Xiaomi Ads
  468. 'api.comm.miui.com', // Xiaomi MIUI phone number database update URL
  469. '.ai.api.xiaomi.com', // Fuck Goodbye Xiaomi Ads
  470. 'm.stripe.com', // EasyPrivacy only blocks m.stripe.com wwith $third-party,
  471. // yet stupid AdGuardDNSFilter blocks all of it. Stupid AdGuard
  472. '.w3s.link', // stupid phishing.army, introduce both "*.ipfs.w3s.link" and ".w3s.link" to the block list
  473. '.r2.dev', // Despite 5000+ r2 instances used for phishing, yet cloudflare refuse to do anything. we have no choice but whitelist this.
  474. 'mlsend.com', // Fuck Peter Lowe Hosts
  475. 'ab.chatgpt.com', // EasyPrivacy blocks this
  476. 'jnn-pa.googleapis.com', // ad-wars
  477. 'imasdk.googleapis.com', // ad-wars
  478. '.l.qq.com', // ad-wars
  479. '.in-addr.arpa', // rDNS
  480. '.ip6.arpa', // rDNS
  481. '.clients.your-server.de', // rDNS .static.183.213.201.138.clients.your-server.de
  482. '.bc.googleusercontent.com', // rDNS 218.178.172.34.bc.googleusercontent.com
  483. '.host.secureserver.net', // rDNS .64.149.167.72.host.secureserver.net,
  484. '.ip.linodeusercontent.com', // rDNS 45-79-169-153.ip.linodeusercontent.com
  485. '.static.akamaitechnologies.com', // rDNS a23-57-90-107.deploy.static.akamaitechnologies.com
  486. '.compute.amazonaws.com', // rDNS ec2-3-22-96-128.us-east-2.compute.amazonaws.com
  487. '.shoppy.gg', // Spam404
  488. 'transcend-cdn.com', // AdGuard Annoyances
  489. 'store1.gofile.io', // Dandelion Sprout's Annoyances List
  490. 'ad.12306.cn', // https://github.com/jdlingyu/ad-wars
  491. '.ib.snssdk.com', // AdGuard Tracking Protection -- breaks 今日头条专业版
  492. '.nstool.netease.com', // it is only used to check local dns
  493. '.wns.windows.com', // Windows Push Notifications. Besides there is no point in adding these
  494. '.lon.llnw.net', // There is no point in adding these, many subdomains are dead anyway
  495. '.lcy.llnw.net', // There is no point in adding these, many subdomains are dead anyway
  496. 'repo.huaweicloud.com', // urlhaus
  497. '.hubspotlinks.com', // Peter Lowe Hosts
  498. 'cldup.com', // OSINT
  499. 'cuty.io', // short domain like bitly, blocked by phishing army
  500. 'links.strava.com', // AdGuard CNAME Clickthrough Filters
  501. // Doesn't make sense: CNAME domains
  502. '.cdn.cloudflare.net',
  503. '.apple-dns.net',
  504. '.data.microsoft.com.akadns.net',
  505. // Expired domains
  506. '.expobarrio.com',
  507. '.hamdandates.com',
  508. '.amzone.co.jp'
  509. ];