Enjoy all the common rulesets brought by janlay.
In the rules section of Surge/Clash config, use the shared rulesets in this order:
- blocked-domains
- quick-direct
- loc-sens
- traffic
- <Your rules>
- built-in LAN rules
- direct
- <Final rule>
Last active
October 19, 2025 02:43
-
-
Save janlay/bec3cade3361678d975a8394d54515c6 to your computer and use it in GitHub Desktop.
Rule sets for Surge & Clash
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| - DOMAIN, ads.mopub.com | |
| - DOMAIN, amonsul.douban.com | |
| - DOMAIN, analytics.plex.tv | |
| - DOMAIN, analytics.yahoo.com | |
| - DOMAIN, analytics.x.com | |
| - DOMAIN, assets.msn.com | |
| - DOMAIN, browser.events.data.msn.com | |
| - DOMAIN, collect.alipay.com | |
| - DOMAIN, cpro.baidu.com | |
| - DOMAIN, cpro.baidustatic.com | |
| - DOMAIN, edge.activity.windows.com | |
| - DOMAIN, erebor.douban.com | |
| - DOMAIN, firebaselogging-pa.glgleapis.com | |
| - DOMAIN, hm.baidu.com | |
| - DOMAIN, hmma.baidu.com | |
| - DOMAIN, zz.bdstatic.com | |
| - DOMAIN, h-adashx.dingtalkapps.com | |
| - DOMAIN, img-s-msn-com.akamaized.net | |
| - DOMAIN, js-agent.newrelic.com | |
| - DOMAIN, js.monitor.azure.com | |
| - DOMAIN, loggw.alipay.com | |
| - DOMAIN, lwlog.dingtalk.com | |
| - DOMAIN, monitor.uu.qq.com | |
| - DOMAIN, graph.facebook.com | |
| - DOMAIN, pagead2.ooooglesyndication.com | |
| - DOMAIN, pgdt.gtimg.cn | |
| - DOMAIN, pingma.qq.com | |
| - DOMAIN, r.msftstatic.com | |
| - DOMAIN, stat.m.jd.com | |
| - DOMAIN, static.ads-twitter.com | |
| - DOMAIN, safebrowsing.urlsec.qq.com | |
| - DOMAIN, t.dtscout.com | |
| - DOMAIN, analytics.plex.tv | |
| - DOMAIN, www.google-analytics.com | |
| - DOMAIN, www.pangolin-dsp-toutiao.com | |
| - DOMAIN, xlog.jd.com | |
| - DOMAIN-KEYWORD, cnzz | |
| - DOMAIN-KEYWORD, domob | |
| - DOMAIN-KEYWORD, flurry.co | |
| - DOMAIN-KEYWORD, umeng.co | |
| - DOMAIN-SUFFIX, 127.net | |
| - DOMAIN-SUFFIX, aniview.com | |
| - DOMAIN-SUFFIX, amazon-adsystem.com | |
| - DOMAIN-SUFFIX, applovin.com | |
| - DOMAIN-SUFFIX, bugsnag.com | |
| - DOMAIN-SUFFIX, beacon.qq.com | |
| - DOMAIN-SUFFIX, doubleclick.net | |
| - DOMAIN-SUFFIX, duomeng.cn | |
| - DOMAIN-SUFFIX, log.aliyuncs.com | |
| - DOMAIN-SUFFIX, mmstat.com | |
| - DOMAIN-SUFFIX, mob.com | |
| - DOMAIN-SUFFIX, msn.cn | |
| - DOMAIN-SUFFIX, sponsorpay.com | |
| - DOMAIN-SUFFIX, tanx.com | |
| - DOMAIN-SUFFIX, umengcloud.com | |
| - DOMAIN-SUFFIX, youmi.net | |
| - DOMAIN-SUFFIX, zhanzhang.baidu.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| DOMAIN, ads.mopub.com | |
| DOMAIN, amonsul.douban.com | |
| DOMAIN, analytics.plex.tv | |
| DOMAIN, analytics.yahoo.com | |
| DOMAIN, analytics.x.com | |
| DOMAIN, assets.msn.com | |
| DOMAIN, browser.events.data.msn.com | |
| DOMAIN, collect.alipay.com | |
| DOMAIN, cpro.baidu.com | |
| DOMAIN, edge.activity.windows.com | |
| DOMAIN, erebor.douban.com | |
| DOMAIN, firebaselogging-pa.googleapis.com | |
| DOMAIN, hm.baidu.com | |
| DOMAIN, hmma.baidu.com | |
| DOMAIN, zz.bdstatic.com | |
| DOMAIN, h-adashx.dingtalkapps.com | |
| DOMAIN, img-s-msn-com.akamaized.net | |
| DOMAIN, js-agent.newrelic.com | |
| DOMAIN, js.monitor.azure.com | |
| DOMAIN, loggw.alipay.com | |
| DOMAIN, lwlog.dingtalk.com | |
| DOMAIN, monitor.uu.qq.com | |
| DOMAIN, graph.facebook.com | |
| DOMAIN, pagead2.googlesyndication.com | |
| DOMAIN, pgdt.gtimg.cn | |
| DOMAIN, pingma.qq.com | |
| DOMAIN, r.msftstatic.com | |
| DOMAIN, stat.m.jd.com | |
| DOMAIN, static.ads-twitter.com | |
| DOMAIN, safebrowsing.urlsec.qq.com | |
| DOMAIN, t.dtscout.com | |
| DOMAIN, analytics.plex.tv | |
| DOMAIN, www.google-analytics.com | |
| DOMAIN, www.pangolin-dsp-toutiao.com | |
| DOMAIN, xlog.jd.com | |
| DOMAIN-KEYWORD, cnzz | |
| DOMAIN-KEYWORD, domob | |
| DOMAIN-KEYWORD, flurry.co | |
| DOMAIN-KEYWORD, umeng.co | |
| DOMAIN-SUFFIX, 127.net | |
| DOMAIN-SUFFIX, aniview.com | |
| DOMAIN-SUFFIX, amazon-adsystem.com | |
| DOMAIN-SUFFIX, applovin.com | |
| DOMAIN-SUFFIX, bugsnag.com | |
| DOMAIN-SUFFIX, beacon.qq.com | |
| DOMAIN-SUFFIX, doubleclick.net | |
| DOMAIN-SUFFIX, duomeng.cn | |
| DOMAIN-SUFFIX, log.aliyuncs.com | |
| AND, ((NOT, ((DOMAIN, wgo.mmstat.com))), (DOMAIN-SUFFIX, mmstat.com)) | |
| DOMAIN-SUFFIX, mob.com | |
| DOMAIN-SUFFIX, msn.cn | |
| DOMAIN-SUFFIX, sponsorpay.com | |
| DOMAIN-SUFFIX, tanx.com | |
| DOMAIN-SUFFIX, umengcloud.com | |
| DOMAIN-SUFFIX, youmi.net | |
| DOMAIN-SUFFIX, zhanzhang.baidu.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Place these lines before the MATCH rule | |
| payload: | |
| # NTP | |
| - DST-PORT, 123 | |
| # Apple Push | |
| - DST-PORT, 5223 | |
| - DOMAIN, commnat-main-gc.ess.apple.com | |
| - DOMAIN-SUFFIX, push-apple.com.akadns.net | |
| # IP services | |
| - DOMAIN, checkip.synology.com | |
| - DOMAIN, cloudsync-tw.synology.com | |
| # Windows push | |
| - DOMAIN-SUFFIX, wns.windows.com | |
| - DOMAIN-SUFFIX, notify.windows.com | |
| - IP-CIDR, 127.0.0.0/8 | |
| - IP-CIDR, 10.0.0.0/8 | |
| - IP-CIDR, 192.168.0.0/16 | |
| - IP-CIDR, 172.16.0.0/12 | |
| # Tentent | |
| - IP-CIDR, 129.224.0.0/11 | |
| - IP-CIDR, 101.32.0.0/11 | |
| - GEOIP, CN |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Place these lines before the FINAL rule | |
| # NTP | |
| DEST-PORT, 123 | |
| # Apple push | |
| AND, ((PROTOCOL, UDP), (DEST-PORT, 5223)) | |
| DOMAIN, commnat-main-gc.ess.apple.com | |
| DOMAIN-SUFFIX, push-apple.com.akadns.net | |
| # IP services | |
| DOMAIN, checkip.synology.com | |
| DOMAIN, cloudsync-tw.synology.com | |
| IP-CIDR, 127.0.0.0/8 | |
| IP-CIDR, 10.0.0.0/8 | |
| IP-CIDR, 192.168.0.0/16 | |
| IP-CIDR, 172.16.0.0/12 | |
| # Alibaba | |
| IP-ASN, 37963 | |
| IP-ASN, 24429 | |
| # Tencent | |
| IP-ASN, 45090 | |
| IP-ASN, 132203 | |
| GEOIP, CN |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| - PROCESS-NAME, com.disney.disneyplus | |
| - DOMAIN-KEYWORD, disney | |
| - DOMAIN-KEYWORD, dssott | |
| - DOMAIN-SUFFIX, adobedtm.com | |
| - DOMAIN-SUFFIX, bam.nr-date.net | |
| - DOMAIN-SUFFIX, bamgrid.com | |
| - DOMAIN-SUFFIX, braze.com | |
| - DOMAIN-SUFFIX, cdn.optimizely.com | |
| - DOMAIN-SUFFIX, d9.flashtalking.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| USER-AGENT, Disney* | |
| DOMAIN-KEYWORD, disney | |
| DOMAIN-KEYWORD, dssott | |
| DOMAIN-SUFFIX, adobedtm.com | |
| DOMAIN-SUFFIX, bam.nr-date.net | |
| DOMAIN-SUFFIX, bamgrid.com | |
| DOMAIN-SUFFIX, braze.com | |
| DOMAIN-SUFFIX, cdn.optimizely.com | |
| DOMAIN-SUFFIX, d9.flashtalking.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| - DOMAIN-SUFFIX, github.com | |
| - DOMAIN-SUFFIX, githubusercontent.com | |
| - DOMAIN-SUFFIX, githubapp.com | |
| - DOMAIN-SUFFIX, githubassets.com | |
| - DOMAIN-SUFFIX, parsely.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| DOMAIN-SUFFIX, github.com | |
| DOMAIN-SUFFIX, githubusercontent.com | |
| DOMAIN-SUFFIX, githubapp.com | |
| DOMAIN-SUFFIX, githubassets.com | |
| DOMAIN-SUFFIX, parsely.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| # region detection | |
| - DOMAIN, app-measurement.com | |
| - DOMAIN-SUFFIX, gstatic.com | |
| - DOMAIN-SUFFIX, ggpht.com | |
| - DOMAIN-SUFFIX, gvt1.com | |
| - DOMAIN-SUFFIX, yt.be | |
| - DOMAIN-SUFFIX, ytimg.com | |
| - DOMAIN-KEYWORD, goog | |
| - DOMAIN-KEYWORD, gmail | |
| - DOMAIN-KEYWORD, youtu |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # region detection | |
| DOMAIN, app-measurement.com | |
| DOMAIN-SUFFIX, gstatic.com | |
| DOMAIN-SUFFIX, ggpht.com | |
| DOMAIN-SUFFIX, gvt1.com | |
| DOMAIN-SUFFIX, yt.be | |
| DOMAIN-SUFFIX, ytimg.com | |
| DOMAIN-KEYWORD, goog | |
| DOMAIN-KEYWORD, gmail | |
| DOMAIN-KEYWORD, youtu |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Location-sensitive services | |
| # Place these rules above the Google ruleset | |
| payload: | |
| - DOMAIN, ai.google.dev | |
| - DOMAIN, aistudio.google.com | |
| - DOMAIN, alkalicore-pa.clients6.google.com | |
| - DOMAIN, api.segment.io | |
| - DOMAIN, bard.google.com | |
| - DOMAIN, gemini.google.com | |
| - DOMAIN, generativelanguage.googleapis.com | |
| - DOMAIN-SUFFIX, notebooklm.google | |
| - DOMAIN-SUFFIX, deepmind.google | |
| - DOMAIN-SUFFIX, geller-pa.googleapis.com | |
| - DOMAIN-SUFFIX, generativeai.google | |
| - DOMAIN-SUFFIX, proactivebackend-pa.googleapis.com | |
| - DOMAIN-SUFFIX, makersuite.google.com | |
| - DOMAIN-SUFFIX, notebooklm.google.com | |
| - DOMAIN, www2.deepl.com | |
| - DOMAIN, cdn.oaiusercontent.com | |
| - DOMAIN, probe.icloud.com | |
| - DOMAIN, mask-api.icloud.com | |
| - DOMAIN, apple-relay.apple.com | |
| - DOMAIN, configuration.ls.apple.com | |
| - DOMAIN, starling.zijieapi.com | |
| - DOMAIN, prodregistryv2.org | |
| - DOMAIN-SUFFIX, ai.com | |
| - DOMAIN-SUFFIX, anthropic.com | |
| - DOMAIN-SUFFIX, bing.com | |
| - DOMAIN-SUFFIX, chat.com | |
| - DOMAIN-SUFFIX, chatgpt.com | |
| - DOMAIN-SUFFIX, claude.ai | |
| - DOMAIN-SUFFIX, cursor.sh | |
| - DOMAIN-SUFFIX, ingest.us.sentry.io | |
| - DOMAIN-SUFFIX, intercom.io | |
| - DOMAIN-SUFFIX, oaistatic.com | |
| - DOMAIN-SUFFIX, siftscience.com | |
| - DOMAIN-SUFFIX, stripe.com | |
| - DOMAIN-SUFFIX, stripe.network | |
| - DOMAIN-KEYWORD, openai | |
| - DOMAIN-KEYWORD, siri |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Location-sensitive services | |
| # Place these rules above the Google ruleset | |
| DOMAIN, ai.google.dev | |
| DOMAIN, aistudio.google.com | |
| DOMAIN, alkalicore-pa.clients6.google.com | |
| DOMAIN, api.segment.io | |
| DOMAIN, bard.google.com | |
| DOMAIN, gemini.google.com | |
| DOMAIN, generativelanguage.googleapis.com | |
| DOMAIN-SUFFIX, notebooklm.google | |
| DOMAIN-SUFFIX, deepmind.google | |
| DOMAIN-SUFFIX, geller-pa.googleapis.com | |
| DOMAIN-SUFFIX, generativeai.google | |
| DOMAIN-SUFFIX, proactivebackend-pa.googleapis.com | |
| DOMAIN-SUFFIX, makersuite.google.com | |
| DOMAIN-SUFFIX, notebooklm.google.com | |
| DOMAIN, www2.deepl.com | |
| DOMAIN, cdn.oaiusercontent.com | |
| DOMAIN, probe.icloud.com | |
| DOMAIN, mask-api.icloud.com | |
| DOMAIN, apple-relay.apple.com | |
| DOMAIN, configuration.ls.apple.com | |
| DOMAIN, starling.zijieapi.com | |
| DOMAIN, prodregistryv2.org | |
| DOMAIN-SUFFIX, ai.com | |
| DOMAIN-SUFFIX, anthropic.com | |
| DOMAIN-SUFFIX, bing.com | |
| DOMAIN-SUFFIX, chat.com | |
| DOMAIN-SUFFIX, chatgpt.com | |
| DOMAIN-SUFFIX, claude.ai | |
| DOMAIN-SUFFIX, cursor.sh | |
| DOMAIN-SUFFIX, ingest.us.sentry.io | |
| DOMAIN-SUFFIX, intercom.io | |
| DOMAIN-SUFFIX, oaistatic.com | |
| DOMAIN-SUFFIX, siftscience.com | |
| DOMAIN-SUFFIX, stripe.com | |
| DOMAIN-SUFFIX, stripe.network | |
| DOMAIN-KEYWORD, openai | |
| DOMAIN-KEYWORD, siri |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| - DOMAIN, api.radarr.video | |
| - DOMAIN-SUFFIX, servarr.com | |
| - DOMAIN-SUFFIX, tmdb.org | |
| - DOMAIN-SUFFIX, imdb.com | |
| - DOMAIN-SUFFIX, themoviedb.org |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| DOMAIN, api.radarr.video | |
| DOMAIN-SUFFIX, servarr.com | |
| DOMAIN-SUFFIX, tmdb.org | |
| DOMAIN-SUFFIX, imdb.com | |
| DOMAIN-SUFFIX, themoviedb.org |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| - DOMAIN-SUFFIX, keepfrds.com | |
| - DOMAIN-SUFFIX, m-team.cc | |
| - DOMAIN-SUFFIX, audiences.me | |
| - DOMAIN-SUFFIX, hd4fans.org | |
| - DOMAIN-SUFFIX, btschool.club | |
| - DOMAIN-SUFFIX, filelist.io | |
| - DOMAIN-SUFFIX, soulvoice.club | |
| - DOMAIN-SUFFIX, et8.org | |
| - DOMAIN-SUFFIX, azurewebsites.net | |
| - DOMAIN-SUFFIX, torrentapi.org | |
| - DOMAIN, blutopia.cc | |
| - DOMAIN, blutopia.xyz | |
| - DOMAIN, ourbits.club | |
| - DOMAIN, www.beitai.pt | |
| - DOMAIN, localhost.stackoverflow.tech | |
| - DOMAIN, ssl.empirehost.me | |
| - DOMAIN, routing.bgp.technology | |
| - DOMAIN, reactor.thefl.org | |
| - DOMAIN, tracker.torrentleech.org | |
| # 1337x | |
| - DOMAIN-KEYWORD, 1337x | |
| # RARBG | |
| - DOMAIN-SUFFIX, rarbg.me | |
| - DOMAIN-SUFFIX, rarbg.to | |
| - DOMAIN-SUFFIX, trackerfix.com | |
| - DOMAIN-SUFFIX, tallpenguin.org | |
| - DOMAIN-SUFFIX, slowcheetah.org |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| DOMAIN-SUFFIX, keepfrds.com | |
| DOMAIN-SUFFIX, m-team.cc | |
| DOMAIN-SUFFIX, audiences.me | |
| DOMAIN-SUFFIX, hd4fans.org | |
| DOMAIN-SUFFIX, btschool.club | |
| DOMAIN-SUFFIX, filelist.io | |
| DOMAIN-SUFFIX, psoulvoice.club | |
| DOMAIN-SUFFIX, et8.org | |
| DOMAIN-SUFFIX, azurewebsites.net | |
| DOMAIN-SUFFIX, torrentapi.org | |
| DOMAIN, blutopia.cc | |
| DOMAIN, blutopia.xyz | |
| DOMAIN, ourbits.club | |
| DOMAIN, www.beitai.pt | |
| DOMAIN, localhost.stackoverflow.tech | |
| DOMAIN, ssl.empirehost.me | |
| DOMAIN, routing.bgp.technology | |
| DOMAIN, reactor.thefl.org | |
| DOMAIN, tracker.torrentleech.org | |
| # 1337x | |
| DOMAIN-KEYWORD, 1337x | |
| # RARBG | |
| DOMAIN-SUFFIX, rarbg.me | |
| DOMAIN-SUFFIX, rarbg.to | |
| DOMAIN-SUFFIX, trackerfix.com | |
| DOMAIN-SUFFIX, tallpenguin.org | |
| DOMAIN-SUFFIX, slowcheetah.org |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Place this file below the blocked-domains ruleset | |
| payload: | |
| - DOMAIN-SUFFIX, cn | |
| - DOMAIN-SUFFIX, apple | |
| - DOMAIN-SUFFIX, local | |
| - DOMAIN-SUFFIX, direct | |
| - DOMAIN-KEYWORD, alipay | |
| - DOMAIN-KEYWORD, taobao | |
| - DOMAIN-KEYWORD, qq | |
| - DOMAIN-KEYWORD, windows | |
| - DOMAIN-SUFFIX, cdn-apple.com | |
| - DOMAIN, captive.apple.com | |
| - DOMAIN, osxapps.itunes.apple.com | |
| - DOMAIN, iosapps.itunes.apple.com | |
| - DOMAIN, download.developer.apple.com | |
| # NTP | |
| - DST-PORT, 123 | |
| # Apple push | |
| - DST-PORT, 5223 | |
| - DOMAIN-SUFFIX, push.apple.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Place this file below the blocked-domains ruleset | |
| DOMAIN-SUFFIX, cn | |
| DOMAIN-SUFFIX, apple | |
| DOMAIN-SUFFIX, local | |
| DOMAIN-SUFFIX, direct | |
| DOMAIN-KEYWORD, alipay | |
| DOMAIN-KEYWORD, taobao | |
| DOMAIN-KEYWORD, qq | |
| DOMAIN-KEYWORD, windows | |
| DOMAIN-SUFFIX, cdn-apple.com | |
| DOMAIN, captive.apple.com | |
| DOMAIN, osxapps.itunes.apple.com | |
| DOMAIN, iosapps.itunes.apple.com | |
| DOMAIN, download.developer.apple.com | |
| # NTP | |
| AND, ((PROTOCOL, UDP), (DEST-PORT, 123)) | |
| # Apple push | |
| DEST-PORT, 5223 | |
| PROCESS-NAME, apsd | |
| DOMAIN-SUFFIX, push.apple.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # OCSP requests | |
| PROCESS-NAME, trustd | |
| DOMAIN-KEYWORD, ocsp | |
| USER-AGENT, com.apple.trustd/* |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| - DOMAIN, lf16-effectcdn.byteeffecttos-g.com | |
| - DOMAIN, lf16-pkgcdn.pitaya-clientai.com | |
| - DOMAIN, api.snapkit.com | |
| - DOMAIN, roovza-launches.appsflyersdk.com | |
| - DOMAIN-SUFFIX, bytedapm.com | |
| - DOMAIN-SUFFIX, bytegecko-i18n.com | |
| - DOMAIN-SUFFIX, bytegecko.com | |
| - DOMAIN-SUFFIX, byteoversea.com | |
| - DOMAIN-SUFFIX, capcut.com | |
| - DOMAIN-SUFFIX, ibytedtos.com | |
| - DOMAIN-SUFFIX, ibyteimg.com | |
| - DOMAIN-SUFFIX, ipstatp.com | |
| - DOMAIN-SUFFIX, isnssdk.com | |
| - DOMAIN-SUFFIX, muscdn.com | |
| - DOMAIN-SUFFIX, sgpstatp.com | |
| - DOMAIN-SUFFIX, snssdk.com | |
| - DOMAIN-SUFFIX, tik-tokapi.com | |
| - DOMAIN-KEYWORD, musical | |
| - DOMAIN-KEYWORD, tiktok | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| DOMAIN, lf16-effectcdn.byteeffecttos-g.com | |
| DOMAIN, lf16-pkgcdn.pitaya-clientai.com | |
| DOMAIN, api.snapkit.com | |
| DOMAIN, roovza-launches.appsflyersdk.com | |
| DOMAIN-SUFFIX, bytedapm.com | |
| DOMAIN-SUFFIX, bytegecko-i18n.com | |
| DOMAIN-SUFFIX, bytegecko.com | |
| DOMAIN-SUFFIX, byteoversea.com | |
| DOMAIN-SUFFIX, capcut.com | |
| DOMAIN-SUFFIX, ibytedtos.com | |
| DOMAIN-SUFFIX, ibyteimg.com | |
| DOMAIN-SUFFIX, ipstatp.com | |
| DOMAIN-SUFFIX, isnssdk.com | |
| DOMAIN-SUFFIX, muscdn.com | |
| DOMAIN-SUFFIX, sgpstatp.com | |
| DOMAIN-SUFFIX, snssdk.com | |
| DOMAIN-SUFFIX, tik-tokapi.com | |
| DOMAIN-KEYWORD, musical | |
| DOMAIN-KEYWORD, tiktok | |
| USER-AGENT, TikTok* |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| - DOMAIN, agi.gpt4.org | |
| - DOMAIN, cdn-images.orbstack.dev | |
| - DOMAIN, dl.fbaipublicfiles.com | |
| - DOMAIN, dl.google.com | |
| - DOMAIN, download-cdn.jetbrains.com | |
| - DOMAIN, ghcr.io | |
| - DOMAIN, hub.docker.com | |
| - DOMAIN, objects.githubusercontent.com | |
| - DOMAIN, officecdn-microsoft-com.akamaized.net | |
| - DOMAIN, photo.googleapis.com | |
| - DOMAIN, pkg-containers.githubusercontent.com | |
| - DOMAIN, production.cloudflare.docker.com | |
| - DOMAIN, swcdn.apple.com | |
| - DOMAIN, www.googleapis.com | |
| - DOMAIN-SUFFIX, cloudfront.net | |
| - DOMAIN-SUFFIX, docker.io | |
| - DOMAIN-SUFFIX, hf.co | |
| - DOMAIN-SUFFIX, huggingface.co | |
| - DOMAIN-SUFFIX, r2.cloudflarestorage.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # fastly | |
| # IP-ASN, 54113 | |
| # Akamai | |
| # IP-ASN, 20940 | |
| # IP-ASN, 16625 | |
| DOMAIN, agi.gpt4.org | |
| DOMAIN, cdn-images.orbstack.dev | |
| DOMAIN, dl.fbaipublicfiles.com | |
| DOMAIN, dl.google.com | |
| DOMAIN, download-cdn.jetbrains.com | |
| DOMAIN, ghcr.io | |
| DOMAIN, hub.docker.com | |
| DOMAIN, objects.githubusercontent.com | |
| DOMAIN, officecdn-microsoft-com.akamaized.net | |
| DOMAIN, photo.googleapis.com | |
| DOMAIN, pkg-containers.githubusercontent.com | |
| DOMAIN, production.cloudflare.docker.com | |
| DOMAIN, swcdn.apple.com | |
| DOMAIN, www.googleapis.com | |
| DOMAIN-SUFFIX, cloudfront.net | |
| DOMAIN-SUFFIX, docker.io | |
| DOMAIN-SUFFIX, hf.co | |
| DOMAIN-SUFFIX, huggingface.co | |
| DOMAIN-SUFFIX, r2.cloudflarestorage.com | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| payload: | |
| - DOMAIN-SUFFIX, twitter.com | |
| - DOMAIN-SUFFIX, twimg.com | |
| - DOMAIN-SUFFIX, x.com | |
| - DOMAIN-SUFFIX, t.co |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| DOMAIN-SUFFIX, twitter.com | |
| DOMAIN-SUFFIX, twimg.com | |
| DOMAIN-SUFFIX, x.com | |
| DOMAIN-SUFFIX, t.co |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment