reject-data-source.ts 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580
  1. export const DEBUG_DOMAIN_TO_FIND: string | null = null; // example.com | null
  2. type HostsSource = [main: string, mirrors: string[] | null, includeAllSubDomain: boolean, allowEmptyRemote?: boolean];
  3. export const HOSTS: HostsSource[] = [
  4. // WindowsSpyBlocker hasn't been updated since 2022-06-16, its content has been merged into domainset/reject.conf
  5. // [
  6. // 'https://cdn.jsdelivr.net/gh/crazy-max/WindowsSpyBlocker@master/data/hosts/spy.txt',
  7. // ['https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt'],
  8. // true
  9. // ],
  10. [
  11. 'https://cdn.jsdelivr.net/gh/jerryn70/GoodbyeAds@master/Extension/GoodbyeAds-Xiaomi-Extension.txt',
  12. ['https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-Xiaomi-Extension.txt'],
  13. false
  14. ]
  15. ];
  16. export const HOSTS_EXTRA: HostsSource[] = [
  17. // This stupid hosts blocks t.co, so we determine that this is also bullshit, so it is extra
  18. [
  19. 'https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext',
  20. ['https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/thirdparties/pgl.yoyo.org/as/serverlist'],
  21. true
  22. ],
  23. // Dan Pollock's hosts file, 0.0.0.0 version is 30 KiB smaller
  24. [
  25. 'https://proxy.cdn.skk.moe/https/someonewhocares.org/hosts/zero/hosts',
  26. [
  27. 'https://someonewhocares.org/hosts/zero/hosts',
  28. // 2025-07-10 Dan Pollock's website begin to randomly Cloudflare Challenge.
  29. // enable non-zero hosts as fallbacks.
  30. 'https://someonewhocares.org/hosts/hosts',
  31. 'https://proxy.cdn.skk.moe/https/someonewhocares.org/hosts/hosts'
  32. ],
  33. true
  34. ],
  35. // ad-wars is not actively maintained since 2023.11 due to Tencent's Legal Notice
  36. // All contents has been intergrated into the reject.conf file
  37. // [
  38. // 'https://cdn.jsdelivr.net/gh/jdlingyu/ad-wars@master/hosts',
  39. // ['https://raw.githubusercontent.com/jdlingyu/ad-wars/master/hosts'],
  40. // false
  41. // ],
  42. // hoshsadiq adblock-nocoin-list extra
  43. [
  44. 'https://cdn.jsdelivr.net/gh/hoshsadiq/adblock-nocoin-list@master/hosts.txt',
  45. ['https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/hosts.txt'],
  46. true
  47. ],
  48. // GoodbyeAds - Huawei AdBlock, most of its content has been covered by reject.conf, the rest should belongs to reject_extra now
  49. [
  50. 'https://cdn.jsdelivr.net/gh/jerryn70/GoodbyeAds@master/Extension/GoodbyeAds-Huawei-AdBlock.txt',
  51. ['https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-Huawei-AdBlock.txt'],
  52. false
  53. ],
  54. // GoodbyeAds - Samsung AdBlock
  55. // most of its content has covered by reject.conf. Remaining domains, some are not even owned by samsung, some are normal API/SSO/DNS
  56. // blocking them doesn't make sense, yet will not breaking anything anyway, so we move it to extra
  57. [
  58. 'https://cdn.jsdelivr.net/gh/jerryn70/GoodbyeAds@master/Extension/GoodbyeAds-Samsung-AdBlock.txt',
  59. ['https://raw.githubusercontent.com/jerryn70/GoodbyeAds/master/Extension/GoodbyeAds-Samsung-AdBlock.txt'],
  60. false
  61. ]
  62. ];
  63. export const DOMAIN_LISTS: HostsSource[] = [
  64. // CoinBlockerList
  65. // The CoinBlockerList is no longer maintained and even close-source, so we no longer trust it
  66. // instead we maintain a list of our own
  67. // [
  68. // 'https://zerodot1.gitlab.io/CoinBlockerLists/list_browser.txt',
  69. // [],
  70. // true,
  71. // ]
  72. ];
  73. export const DOMAIN_LISTS_EXTRA: HostsSource[] = [
  74. // CoinBlockerList - Full
  75. // The CoinBlockerList is no longer maintained and even close-source, so we no longer trust it
  76. // instead we maintain a list of our own
  77. // BarbBlock
  78. // The barbblock list has never been updated since ~~2019-05~~ ~~2023-10~~ 2025-07, merged to reject_extra.conf
  79. // [
  80. // 'https://cdn.jsdelivr.net/gh/paulgb/BarbBlock@main/blacklists/domain-list.txt',
  81. // ['https://paulgb.github.io/BarbBlock/blacklists/domain-list.txt'],
  82. // true
  83. // ],
  84. // DigitalSide Threat-Intel - OSINT Hub -- Dead, server offline
  85. // ['https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt', [], true],
  86. // AdGuard CNAME Filter Combined
  87. // Update on a 7 days basis, so we can also use jsDelivr as primary URL
  88. [
  89. 'https://cdn.jsdelivr.net/gh/AdguardTeam/cname-trackers@master/data/combined_disguised_ads_justdomains.txt',
  90. [
  91. 'https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_ads_justdomains.txt'
  92. ],
  93. true
  94. ],
  95. [
  96. 'https://cdn.jsdelivr.net/gh/AdguardTeam/cname-trackers@master/data/combined_disguised_trackers_justdomains.txt',
  97. [
  98. 'https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_trackers_justdomains.txt'
  99. ],
  100. true
  101. ],
  102. // Disable clickthrough set. Many mail SaaS uses this kind of technique on their links (even normal links)
  103. // E.g. links.strava.com
  104. // [
  105. // 'https://cdn.jsdelivr.net/gh/AdguardTeam/cname-trackers@master/data/combined_disguised_clickthroughs_justdomains.txt',
  106. // [
  107. // 'https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_clickthroughs_justdomains.txt'
  108. // ],
  109. // true
  110. // ],
  111. [
  112. 'https://cdn.jsdelivr.net/gh/AdguardTeam/cname-trackers@master/data/combined_disguised_microsites_justdomains.txt',
  113. [
  114. 'https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_microsites_justdomains.txt'
  115. ],
  116. true
  117. ],
  118. // ['https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_mail_trackers_justdomains.txt', [], true],
  119. // Curben's PUP Domains Blocklist
  120. // The PUP filter has paused the update since 2023-05, so we set a 14 days cache ttl, and move it to extra
  121. // [
  122. // 'https://pup-filter.pages.dev/pup-filter-domains.txt',
  123. // [
  124. // // 'https://malware-filter.pages.dev/pup-filter-domains.txt',
  125. // // 'https://malware-filter.gitlab.io/malware-filter/pup-filter-domains.txt',
  126. // 'https://malware-filter.gitlab.io/pup-filter/pup-filter-domains.txt'
  127. // // 'https://curbengh.github.io/pup-filter/pup-filter-domains.txt',
  128. // // 'https://malware-filter.pages.dev/pup-filter-domains.txt'
  129. // ],
  130. // true
  131. // ],
  132. // Curben's UrlHaus Malicious URL Blocklist
  133. [
  134. 'https://urlhaus-filter.pages.dev/urlhaus-filter-domains-online.txt',
  135. [
  136. 'https://malware-filter.pages.dev/urlhaus-filter-domains-online.txt',
  137. 'https://malware-filter.gitlab.io/urlhaus-filter/urlhaus-filter-domains-online.txt',
  138. 'https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-domains-online.txt',
  139. 'https://curbengh.github.io/urlhaus-filter/urlhaus-filter-domains-online.txt'
  140. ],
  141. true
  142. ],
  143. [
  144. 'https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareDomains.txt',
  145. [],
  146. true
  147. ]
  148. // Spam404
  149. // Not actively maintained, let's consider it is dead
  150. // [
  151. // 'https://cdn.jsdelivr.net/gh/Spam404/lists@master/main-blacklist.txt',
  152. // ['https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt'],
  153. // true
  154. // ]
  155. ];
  156. export const PHISHING_HOSTS_EXTRA: HostsSource[] = [
  157. ['https://raw.githubusercontent.com/durablenapkin/scamblocklist/master/hosts.txt', [], true]
  158. ];
  159. export const PHISHING_DOMAIN_LISTS_EXTRA: HostsSource[] = [
  160. [
  161. 'https://phishing-filter.pages.dev/phishing-filter-domains.txt',
  162. [
  163. 'https://malware-filter.pages.dev/phishing-filter-domains.txt',
  164. 'https://malware-filter.gitlab.io/phishing-filter/phishing-filter-domains.txt',
  165. 'https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt',
  166. 'https://curbengh.github.io/phishing-filter/phishing-filter-domains.txt'
  167. ],
  168. true
  169. ],
  170. [
  171. 'https://phishing.army/download/phishing_army_blocklist.txt',
  172. [],
  173. true
  174. ]
  175. ];
  176. type AdGuardFilterSource = [main: string, mirrors: string[] | null, includeThirdParty?: boolean];
  177. export const ADGUARD_FILTERS: AdGuardFilterSource[] = [
  178. // EasyList -- Use AdGuard Base Filter w/ EasyList
  179. // [
  180. // 'https://easylist.to/easylist/easylist.txt',
  181. // [
  182. // 'https://easylist-downloads.adblockplus.org/easylist.txt',
  183. // 'https://secure.fanboy.co.nz/easylist.txt',
  184. // 'https://ublockorigin.github.io/uAssetsCDN/thirdparties/easylist.txt',
  185. // 'https://ublockorigin.pages.dev/thirdparties/easylist.txt',
  186. // 'https://raw.githubusercontent.com/easylist/easylist/gh-pages/easylist.txt',
  187. // 'https://filters.adtidy.org/extension/ublock/filters/101_optimized.txt'
  188. // ]
  189. // ],
  190. // AdGuard Base Filter -- Use AdGuard Base Filter w/ EasyList
  191. [
  192. 'https://filters.adtidy.org/extension/ublock/filters/2_optimized.txt',
  193. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/2_optimized.txt']
  194. ],
  195. // EasyPrivacy
  196. [
  197. 'https://easylist.to/easylist/easyprivacy.txt',
  198. [
  199. 'https://easylist-downloads.adblockplus.org/easyprivacy.txt',
  200. 'https://secure.fanboy.co.nz/easyprivacy.txt',
  201. 'https://filters.adtidy.org/extension/ublock/filters/118_optimized.txt',
  202. 'https://raw.githubusercontent.com/easylist/easylist/gh-pages/easyprivacy.txt',
  203. 'https://ublockorigin.github.io/uAssetsCDN/thirdparties/easyprivacy.txt',
  204. 'https://ublockorigin.pages.dev/thirdparties/easyprivacy.txt'
  205. ]
  206. // 3p is included in AdGuardDNSFilter, which we will use that in reject_extra
  207. ],
  208. // AdGuard Base Filter: Use AdGuard Base Filter w/ EasyList
  209. // [
  210. // 'https://filters.adtidy.org/extension/ublock/filters/2_without_easylist.txt',
  211. // ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/2_without_easylist.txt']
  212. // ],
  213. // AdGuard Mobile AD
  214. [
  215. 'https://filters.adtidy.org/extension/ublock/filters/11_optimized.txt',
  216. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/11_optimized.txt']
  217. ],
  218. // AdGuard Tracking Protection
  219. [
  220. 'https://filters.adtidy.org/extension/ublock/filters/3_optimized.txt',
  221. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/3_optimized.txt']
  222. // 3p is included in AdGuardDNSFilter
  223. ],
  224. // AdGuard Chinese filter (EasyList China + AdGuard Chinese filter)
  225. [
  226. 'https://filters.adtidy.org/extension/ublock/filters/224_optimized.txt',
  227. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/224_optimized.txt']
  228. ],
  229. // GameConsoleAdblockList
  230. // Update almost once per 1 to 3 months, let's set a 10 days cache ttl
  231. [
  232. 'https://cdn.jsdelivr.net/gh/DandelionSprout/adfilt@master/GameConsoleAdblockList.txt',
  233. ['https://raw.githubusercontent.com/DandelionSprout/adfilt/master/GameConsoleAdblockList.txt']
  234. ],
  235. // PiHoleBlocklist
  236. // Hasn't been updated for two years. Merged to reject.conf
  237. // [
  238. // 'https://cdn.jsdelivr.net/gh/Perflyst/PiHoleBlocklist@master/SmartTV-AGH.txt',
  239. // [
  240. // 'https://perflyst.github.io/PiHoleBlocklist/SmartTV-AGH.txt',
  241. // 'https://raw.githubusercontent.com/Perflyst/PiHoleBlocklist/master/SmartTV-AGH.txt'
  242. // ]
  243. // ],
  244. // uBlock Origin Unbreak
  245. [
  246. 'https://ublockorigin.github.io/uAssetsCDN/filters/unbreak.min.txt',
  247. [
  248. 'https://ublockorigin.pages.dev/filters/unbreak.min.txt'
  249. ]
  250. ]
  251. //
  252. // Stalkerware
  253. // [
  254. // 'https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/hosts',
  255. // [
  256. // 'https://adguardteam.github.io/HostlistsRegistry/assets/filter_31.txt'
  257. // ]
  258. // ]
  259. ];
  260. export const ADGUARD_FILTERS_WHITELIST: AdGuardFilterSource[] = [
  261. [
  262. 'https://adguardteam.github.io/AdGuardSDNSFilter/Filters/exceptions.txt',
  263. [
  264. 'https://raw.githubusercontent.com/AdguardTeam/AdGuardSDNSFilter/master/Filters/exceptions.txt'
  265. ]
  266. ],
  267. [
  268. 'https://adguardteam.github.io/AdGuardSDNSFilter/Filters/exclusions.txt',
  269. [
  270. 'https://raw.githubusercontent.com/AdguardTeam/AdGuardSDNSFilter/master/Filters/exclusions.txt'
  271. ]
  272. ]
  273. ];
  274. export const ADGUARD_FILTERS_EXTRA: AdGuardFilterSource[] = [
  275. // AdGuard DNS Filter
  276. // way too many other countries' domains (JP, Spanish, RU, VN, Turkish, Ukarainian, Dutch, etc.)
  277. // EasyList, EasyPrivacy, Chinese and general filters are already included in base data source
  278. // Including extra $third-party rules
  279. [
  280. 'https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt',
  281. [
  282. 'https://filters.adtidy.org/extension/ublock/filters/15_optimized.txt',
  283. 'https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt'
  284. ]
  285. ],
  286. // no coin list adguard list is more maintained than its hosts
  287. [
  288. 'https://cdn.jsdelivr.net/gh/hoshsadiq/adblock-nocoin-list@master/nocoin.txt',
  289. ['https://raw.githubusercontent.com/hoshsadiq/adblock-nocoin-list/master/nocoin.txt'],
  290. true
  291. ],
  292. // AdGuard Annoyances filter
  293. [
  294. 'https://filters.adtidy.org/extension/ublock/filters/14_optimized.txt',
  295. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/14_optimized.txt'],
  296. true
  297. ],
  298. // AdGuard Cookie Notices, included in Annoyances filter
  299. // ['https://filters.adtidy.org/extension/ublock/filters/18_optimized.txt', null, true],
  300. // EasyList Germany filter, not even included in extra for now
  301. // [
  302. // 'https://easylist.to/easylistgermany/easylistgermany.txt',
  303. // [
  304. // 'https://easylist-downloads.adblockplus.org/easylistgermany.txt'
  305. // ],
  306. //
  307. // ],
  308. // AdGuard Japanese filter
  309. [
  310. 'https://filters.adtidy.org/extension/ublock/filters/7_optimized.txt',
  311. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/7_optimized.txt']
  312. ],
  313. // uBlock Origin Filter List
  314. [
  315. 'https://ublockorigin.github.io/uAssetsCDN/filters/filters.min.txt',
  316. [
  317. 'https://ublockorigin.pages.dev/filters/filters.min.txt'
  318. ]
  319. ],
  320. // AdGuard Popup Overlay - included in Annoyances filter
  321. // ['https://filters.adtidy.org/extension/ublock/filters/19_optimized.txt', null, true],
  322. // AdGuard Mobile Banner
  323. // almost all generic rule
  324. // ['https://filters.adtidy.org/extension/ublock/filters/20_optimized.txt', null],
  325. // uBlock Origin Badware Risk List
  326. [
  327. 'https://ublockorigin.github.io/uAssetsCDN/filters/badware.min.txt',
  328. [
  329. 'https://ublockorigin.pages.dev/filters/badware.min.txt'
  330. ]
  331. ],
  332. // uBlock Origin Privacy List
  333. [
  334. 'https://ublockorigin.github.io/uAssetsCDN/filters/privacy.min.txt',
  335. [
  336. 'https://ublockorigin.pages.dev/filters/privacy.min.txt'
  337. ]
  338. ],
  339. // uBlock Origin Resource Abuse: merged in uBlock Origin Privacy List
  340. // [
  341. // 'https://ublockorigin.github.io/uAssetsCDN/filters/resource-abuse.txt',
  342. // ['https://ublockorigin.pages.dev/filters/resource-abuse.txt']
  343. // ],
  344. // uBlock Origin Annoyances (the un-merged of Fanboy Annoyances List)
  345. [
  346. 'https://ublockorigin.github.io/uAssetsCDN/filters/annoyances.min.txt',
  347. ['https://ublockorigin.pages.dev/filters/annoyances.min.txt']
  348. ],
  349. // EasyList Annoyances
  350. [
  351. 'https://ublockorigin.github.io/uAssetsCDN/thirdparties/easylist-annoyances.txt',
  352. ['https://ublockorigin.pages.dev/thirdparties/easylist-annoyances.txt']
  353. ],
  354. // EasyList - Newsletters
  355. [
  356. 'https://ublockorigin.github.io/uAssetsCDN/thirdparties/easylist-newsletters.txt',
  357. ['https://ublockorigin.pages.dev/thirdparties/easylist-newsletters.txt']
  358. ],
  359. // EasyList - Notifications
  360. [
  361. 'https://ublockorigin.github.io/uAssets/thirdparties/easylist-notifications.txt',
  362. ['https://ublockorigin.pages.dev/thirdparties/easylist-notifications.txt']
  363. ],
  364. // Fanboy Cookie Monster (EasyList Cookie List)
  365. [
  366. 'https://ublockorigin.github.io/uAssets/thirdparties/easylist-cookies.txt',
  367. [
  368. 'https://ublockorigin.pages.dev/thirdparties/easylist-cookies.txt',
  369. 'https://secure.fanboy.co.nz/fanboy-cookiemonster_ubo.txt'
  370. ]
  371. ],
  372. // Dandelion Sprout's Annoyances
  373. [
  374. 'https://filters.adtidy.org/extension/ublock/filters/250_optimized.txt',
  375. ['https://proxy.cdn.skk.moe/https/filters.adtidy.org/extension/ublock/filters/250_optimized.txt'],
  376. true
  377. ],
  378. // Adblock Warning Removal List
  379. [
  380. 'https://easylist-downloads.adblockplus.org/antiadblockfilters.txt',
  381. [
  382. 'https://filters.adtidy.org/extension/ublock/filters/207_optimized.txt'
  383. ],
  384. true
  385. ]
  386. ];
  387. // In a hostile network like when an ad blocker is present, apps might be crashing, and these errors need to be
  388. // The reason for unblocking crashlytics is to not make developers life worse by breaking crash reporting.
  389. // In a hostile network like when an ad blocker is present, apps might be crashing, and these errors need to be
  390. // reported to devs, otherwise they won't learn about the issue and won't fix it.
  391. // Also, it is not a common third-party analytics tracker, Crashlytics is not used for collecting users' data.
  392. export const CRASHLYTICS_WHITELIST = [
  393. // VSCode Telemetry, see https://sts.online.visualstudio.com/api/swagger/index.html
  394. 'sts.online.visualstudio.com',
  395. // Sentry
  396. '.ingest.sentry.io',
  397. '.ingest.us.sentry.io',
  398. '.ingest.de.sentry.io',
  399. // bugsnag
  400. '.sessions.bugsnag.com',
  401. '.notify.bugsnag.com',
  402. // influxdata
  403. '.cloud.influxdata.com',
  404. '.cloud1.influxdata.com',
  405. '.cloud2.influxdata.com',
  406. // split.io A/B flag
  407. 'streaming.split.io',
  408. 'telemetry.split.io',
  409. 'sdk.split.io',
  410. // Google
  411. // -ds.metric.gstatic.com are specifically exempted from reject, but it could use secondary proxy policy
  412. '.metric.gstatic.com',
  413. // Misc
  414. 'telemetry.1passwordservices.com',
  415. 'b5x-sentry.1passwordservices.com',
  416. 'events.tableplus.com',
  417. 'telemetry.nextjs.org',
  418. 'telemetry.vercel.com',
  419. 'stats.setapp.com',
  420. 'stats.setapp.macpaw.dev',
  421. '.app-analytics-services.com',
  422. '.telemetry.services.yofi.ai',
  423. '.cdn.pubnub.com',
  424. '.data.debugbear.com',
  425. '.cdn.applicationinsights.io',
  426. '.applicationinsights.azure.com',
  427. '.applicationinsights.azure.cn',
  428. '.api.loganalytics.io',
  429. '.bugly.qcloud.com',
  430. '.cdn.signalfx.com',
  431. '.crash-reports.browser.yandex.net',
  432. '.crashlytics2.l.google.com',
  433. '.crashlyticsreports-pa.googleapis.com',
  434. '.e.crashlytics.com',
  435. '.events.backtrace.io',
  436. 'auth.split.io',
  437. 'events.split.io',
  438. 'streaming.split.io',
  439. '.in.appcenter.ms',
  440. '.loggly.com',
  441. '.logz.io',
  442. '.opentelemetry.io',
  443. '.raygun.io', // dashboard lives at raygun.com
  444. '.rum.cronitor.io',
  445. '.settings.crashlytics.com',
  446. '.sny.monosnap.com',
  447. '.lr-ingest.com',
  448. '.cdn.rollbar.com',
  449. '.api.instabug.com',
  450. '.ensighten.com',
  451. 'api.crashguard.me'
  452. ];
  453. export const PREDEFINED_WHITELIST = [
  454. ...CRASHLYTICS_WHITELIST,
  455. '.localhost',
  456. '.local',
  457. '.localdomain',
  458. '.broadcasthost',
  459. '.ip6-loopback',
  460. '.ip6-localnet',
  461. '.ip6-mcastprefix',
  462. '.ip6-allnodes',
  463. '.ip6-allrouters',
  464. '.ip6-allhosts',
  465. '.mcastprefix',
  466. '.skk.moe',
  467. 'analytics.google.com',
  468. '.cloud.answerhub.com',
  469. 'ae01.alicdn.com',
  470. '.whoami.akamai.net',
  471. '.whoami.ds.akahelp.net',
  472. '.instant.page', // No, it doesn't violate anyone's privacy. I will whitelist it
  473. '.piwik.pro',
  474. 'mixpanel.com',
  475. 'cdn.mxpnl.com',
  476. '.heapanalytics.com',
  477. '.segment.com',
  478. '.segmentify.com',
  479. '.t.co', // pgl yoyo add t.co to the blacklist
  480. '.survicate.com', // AdGuardDNSFilter
  481. '.perfops.io', // AdGuardDNSFilter
  482. 'd2axgrpnciinw7.cloudfront.net', // ADGuardDNSFilter
  483. '.sb-cd.com', // AdGuard
  484. '.storage.yandexcloud.net', // phishing list
  485. '.login.microsoftonline.com', // phishing list
  486. 'api.xiaomi.com', // https://github.com/jerryn70/GoodbyeAds/issues/281
  487. 'api.io.mi.com', // https://github.com/jerryn70/GoodbyeAds/issues/281
  488. '.cdn.userreport.com', // https://github.com/AdguardTeam/AdGuardSDNSFilter/issues/1158
  489. '.ip-api.com',
  490. '.fastly-analytics.com',
  491. '.digitaloceanspaces.com',
  492. 's3.nl-ams.scw.cloud',
  493. '.geolocation-db.com',
  494. '.uploads.codesandbox.io',
  495. '.vlscppe.microsoft.com', // Affect Windows ISO download https://raw.githubusercontent.com/AdguardTeam/cname-trackers/master/data/combined_disguised_trackers.txt
  496. '.statsig.com', // OpenAI use this for A/B testing
  497. '.pstmrk.it', // Fuck Peter Lowe Hosts
  498. '.clicks.mlsend.com', // Fuck Peter Lowe Hosts
  499. 'email.accounts.bitly.com', // Fuck Peter Lowe Hosts
  500. 'adsense.google.com', // Fuck Peter Lowe Hosts
  501. 'api.vip.miui.com', // Fuck Goodbye Xiaomi Ads
  502. 'api.comm.miui.com', // Xiaomi MIUI phone number database update URL
  503. '.ai.api.xiaomi.com', // Fuck Goodbye Xiaomi Ads
  504. 'm.stripe.com', // EasyPrivacy only blocks m.stripe.com wwith $third-party,
  505. // yet stupid AdGuardDNSFilter blocks all of it. Stupid AdGuard
  506. '.w3s.link', // stupid phishing.army, introduce both "*.ipfs.w3s.link" and ".w3s.link" to the block list
  507. '.r2.dev', // Despite 5000+ r2 instances used for phishing, yet cloudflare refuse to do anything. we have no choice but whitelist this.
  508. 'mlsend.com', // Fuck Peter Lowe Hosts
  509. 'ab.chatgpt.com', // EasyPrivacy blocks this
  510. 'jnn-pa.googleapis.com', // ad-wars
  511. 'imasdk.googleapis.com', // ad-wars
  512. '.in-addr.arpa', // rDNS
  513. '.ip6.arpa', // rDNS
  514. '.clients.your-server.de', // rDNS .static.183.213.201.138.clients.your-server.de
  515. '.bc.googleusercontent.com', // rDNS 218.178.172.34.bc.googleusercontent.com
  516. '.host.secureserver.net', // rDNS .64.149.167.72.host.secureserver.net,
  517. '.ip.linodeusercontent.com', // rDNS 45-79-169-153.ip.linodeusercontent.com
  518. '.static.akamaitechnologies.com', // rDNS a23-57-90-107.deploy.static.akamaitechnologies.com
  519. '.compute.amazonaws.com', // rDNS ec2-3-22-96-128.us-east-2.compute.amazonaws.com
  520. '.shoppy.gg', // Spam404
  521. 'transcend-cdn.com', // AdGuard Annoyances
  522. 'store1.gofile.io', // Dandelion Sprout's Annoyances List
  523. 'ad.12306.cn', // https://github.com/jdlingyu/ad-wars
  524. '.ib.snssdk.com', // AdGuard Tracking Protection -- breaks 今日头条专业版
  525. '.telize.com', // AdGuardDNSFilter
  526. '.wns.windows.com', // Windows Push Notifications. Besides there is no point in adding these
  527. 'widget-mediator.zopim.com', // breaking zendesk chat
  528. '.llnw.net', // entire llnm.net has dead
  529. 'repo.huaweicloud.com', // urlhaus
  530. '.hubspotlinks.com', // Peter Lowe Hosts
  531. 'cldup.com', // OSINT
  532. 'cuty.io', // short domain like bitly, blocked by phishing army
  533. 'links.strava.com', // AdGuard CNAME Clickthrough Filters
  534. 'email.strava.com', // EasyList
  535. 'insideruser.microsoft.com', // WindowsSpyBlocker
  536. // Doesn't make sense: CNAME domains
  537. '.cdn.cloudflare.net',
  538. '.apple-dns.net',
  539. '.data.microsoft.com.akadns.net',
  540. // Expired domains
  541. '.expobarrio.com',
  542. '.hamdandates.com',
  543. '.amzone.co.jp',
  544. '.xpanama.net',
  545. // Migrate from SmartTV-AGH List
  546. 'mhc-ajax-eu.myhomescreen.tv',
  547. 'mhc-ajax-eu-s2.myhomescreen.tv',
  548. 'mhc-xpana-eu.myhomescreen.tv',
  549. 'mhc-xpana-eu-s2.myhomescreen.tv',
  550. 'infolink.pavv.co.kr',
  551. 'hbbtv.zdf.de',
  552. 'hbbtv.prosieben.de',
  553. 'hbbtv.redbutton.de',
  554. 'hbbtv.kika.de'
  555. ];
  556. export const BOGUS_NXDOMAIN_DNSMASQ = [
  557. 'https://cdn.jsdelivr.net/gh/felixonmars/dnsmasq-china-list@master/bogus-nxdomain.china.conf',
  558. ['https://raw.githubusercontent.com/felixonmars/dnsmasq-china-list/master/bogus-nxdomain.china.conf']
  559. ] as const;