external-controller: 0.0.0.0:9090
external-ui: metacubexd
allow-lan: true
bind-address: "*"
log-level: info
ipv6: false
find-process-mode: off
tcp-concurrent: false
keep-alive-idle: 60
keep-alive-interval: 30
mixed-port: 7890
geodata-mode: true
geodata-loader: memconservative
geox-url:
geoip: "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geoip.dat"
geosite: "https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geosite.dat"
mmdb: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/country.mmdb"
profile:
store-selected: true
store-fake-ip: false
# Cloudflare 1.1.1.1: DoH + DoT primary (prefer-h3 off — fewer stalls on targets/mikrotik/routeros/container)
# TUN hijacks :53; clients use router DNS only — same Cloudflare on /ip dns (targets/mikrotik/routeros/dns-cloudflare.rsc)
dns:
enable: true
listen: 0.0.0.0:53
prefer-h3: false
use-hosts: false
use-system-hosts: false
# Real DNS to clients; domain rules via DNS cache + TLS sniffer (see docs/fake-ip-pitfalls.md)
enhanced-mode: redir-host
# false: stable DNS upstream. true breaks SERVFAIL under AUTO churn (see docs/dns-enforcement.md).
respect-rules: false
default-nameserver:
- 1.1.1.1
- 1.0.0.1
nameserver:
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
fallback:
- tls://8.8.8.8
- https://dns.google/dns-query
fallback-filter:
geoip: true
geoip-code: ru
proxy-server-nameserver:
- 1.1.1.1
- 1.0.0.1
# ISP-poisoned / censored names: explicit DoH (not proxy DNS path). See docs/dns-enforcement.md.
nameserver-policy:
"+.nuget.org":
- 1.1.1.1
- 8.8.8.8
"+.nuget.dev":
- 1.1.1.1
- 8.8.8.8
"rule-set:ru-bundle,refilter-domains,ru-inline-banned,ru-inside,rknasnblock":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"rule-set:category-ai,google-deepmind,speedtest-net":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"geosite:telegram":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.t.me":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.telesco.pe":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"geosite:category-ru":
- tls://77.88.8.8
- tls://1.1.1.1
"rule-set:ru-cdn-domains,category-ru":
- tls://77.88.8.8
- tls://1.1.1.1
# lazymedia-balancers: FlClash-safe (geosite:hdrezka fails decode on phone geodata)
"rule-set:lazymedia-balancers":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.kinopub.me":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.kinopub.net":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.kinopub.cc":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.voidboost.net":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.voidboost.com":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.bazon.cc":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.bazon.site":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.collaps.la":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.alloha.tv":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.videocdn.so":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
- tls://8.8.8.8
"+.kodik.info":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.lazycatsoftware.com":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.zona.mobi":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.vibix.org":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.videocdn.pw":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.kinovibe.ru":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.kinovibe.com":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"+.cvh.to":
- https://cloudflare-dns.com/dns-query
- tls://8.8.8.8
"+.coldcdn.xyz":
- https://cloudflare-dns.com/dns-query
- tls://1.1.1.1
"ae-deb":
- 192.168.88.1
"ae-deb.lan":
- 192.168.88.1
"ae-pc":
- 192.168.88.1
"ae-pc.lan":
- 192.168.88.1
"+.lan":
- 192.168.88.1
"+.sovcombank.ru":
- tls://1.1.1.1
- tls://1.0.0.1
"+.sovcombank.com":
- tls://1.1.1.1
- tls://1.0.0.1
"+.halvacard.ru":
- tls://1.1.1.1
- tls://1.0.0.1
"+.lanbook.com":
- tls://8.8.8.8
- tls://1.1.1.1
"+.cursor.sh":
- tls://1.1.1.1
- tls://8.8.8.8
"+.cursor.com":
- tls://1.1.1.1
- tls://8.8.8.8
"+.cursorapi.com":
- tls://1.1.1.1
- tls://8.8.8.8
"+.anysphere.co":
- tls://1.1.1.1
- tls://8.8.8.8
"+.dns.ru":
- tls://77.88.8.8
- tls://1.1.1.1
"+.dns-shop.ru":
- tls://77.88.8.8
- tls://1.1.1.1
"+.toneperfect.app":
- tls://1.1.1.1
- tls://8.8.8.8
"+.nalog.ru":
- tls://1.1.1.1
- tls://8.8.8.8
"+.tax.gov.ru":
- tls://1.1.1.1
- tls://8.8.8.8
"+.gstatic.com":
- tls://1.1.1.1
- tls://8.8.8.8
cache-max-size: 512
# Container/RouterOS path: allow slow DoH without instant SERVFAIL
timeout: 10
# TLS/HTTP sniffer — legiz-style (override-destination false for redir-host). See docs/sniffer-reenable.md
sniffer:
enable: false
proxy-providers:
SUB1:
type: http
url: https://prism.ashleyvpn.cloud/app/users/c66d88ea-2faa-48ff-9ed2-100e13ffe569/keys/plain
interval: 7200
path: ./sub1.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti|wl\.bootless\.ru|wl\.boot-lee|wld\.boot-lee|\bWL\b)'
SUB1_AUTO:
type: http
url: https://prism.ashleyvpn.cloud/app/users/c66d88ea-2faa-48ff-9ed2-100e13ffe569/keys/plain
interval: 7200
path: ./sub1_auto.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti|wl\.bootless\.ru|wl\.boot-lee|wld\.boot-lee|\bWL\b)'
SUB2:
type: http
url: https://m.creati.win/sub/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxNjgxODE0NjYifQ.M8ndbnCFCS3tZj2g_nKtMPuXzq-Ob8R_SLg2_zqiV3o
interval: 7200
path: ./sub2.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti)'
SUB3:
type: http
url: https://connliberty.com/connection/subs/e859c3a9-9f4d-4c25-8f3b-783c1a37b328
interval: 7200
path: ./sub3.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti|grinoree\.ru|anriqkeqsd\.online)'
SUB3_AUTO:
type: http
url: https://connliberty.com/connection/subs/e859c3a9-9f4d-4c25-8f3b-783c1a37b328
interval: 7200
path: ./sub3_auto.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti|grinoree\.ru|anriqkeqsd\.online)'
SUB4:
type: http
url: https://prism.ashleyvpn.cloud/app/users/830e0d36-78a6-4bc5-b389-4dce706f1f34/keys/plain
interval: 7200
path: ./sub4.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti)'
SUB4_AUTO:
type: http
url: https://prism.ashleyvpn.cloud/app/users/830e0d36-78a6-4bc5-b389-4dce706f1f34/keys/plain
interval: 7200
path: ./sub4_auto.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti)'
SUB5:
type: http
url: https://whiteprism.xyz/sub/dXNlcl8xNjgxODE0NjYsMTc4NTg4NTI1OAr9v8eLMOEt
interval: 7200
path: ./sub5.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti)'
SUB5_AUTO:
type: http
url: https://whiteprism.xyz/sub/dXNlcl8xNjgxODE0NjYsMTc4NTg4NTI1OAr9v8eLMOEt
interval: 7200
path: ./sub5_auto.yaml
health-check:
enable: false
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti)'
proxy-groups:
# keenetic-light: single 01-AUTO (SUB1+SUB3+SUB4 AUTO; no SUB2 auto / 06-SUB2-AUTO)
# lazy interval 3600s tolerance 400ms — probe when selected, not constant spam
# Generated from subscriptions.yaml / .env URI list
# 00-GLOBAL: fallback over 01-AUTO (no sticky dead select)
- name: 00-GLOBAL
type: fallback
proxies: [01-AUTO]
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
tolerance: 400
timeout: 8000
expected-status: 204
max-failed-times: 3
empty-fallback: REJECT
lazy: true
- name: 02-SELECTOR
type: select
proxies: [04-SUB1, 05-SUB2, 09-SUB3, 11-SUB4, 35-SUB5, 01-AUTO, DIRECT, REJECT]
- name: 04-SUB1
type: select
use: [SUB1]
empty-fallback: REJECT
- name: 05-SUB2
type: select
use: [SUB2]
empty-fallback: REJECT
- name: 09-SUB3
type: select
use: [SUB3]
empty-fallback: REJECT
- name: 11-SUB4
type: select
use: [SUB4]
empty-fallback: REJECT
- name: 35-SUB5
type: select
use: [SUB5]
empty-fallback: REJECT
- name: 01-AUTO
type: url-test
use: [SUB1_AUTO, SUB3_AUTO, SUB4_AUTO, SUB5_AUTO]
# lazy: health-check only while selected; tolerance 400ms reduces flapping
url: http://connectivitycheck.gstatic.com/generate_204
interval: 3600
tolerance: 400
timeout: 8000
expected-status: 204
max-failed-times: 3
empty-fallback: REJECT
lazy: true
- name: 20-CURSOR
type: select
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
- name: 22-STEAM
type: select
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
- name: 23-GAME_UDP
type: select
# Legacy panel group; catch-all is NETWORK,udp,DIRECT (voice/video exceptions in rules §6)
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
- name: 28-TELEGRAM
type: select
# 00-GLOBAL first: 03-STATIC is often pinned DIRECT (games) — Telegram needs VPN on RU ISP
proxies: [00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 04-STATIC-RELIABLE, 03-STATIC, DIRECT, REJECT]
- name: 29-DISCORD
type: select
proxies: [03-STATIC, 04-STATIC-RELIABLE, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, DIRECT, REJECT]
- name: 24-JETBRAINS
type: select
proxies: [03-STATIC, 04-STATIC-RELIABLE, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, DIRECT, REJECT]
- name: 32-FIGMA
type: select
proxies: [03-STATIC, 04-STATIC-RELIABLE, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, DIRECT, REJECT]
- name: 25-PACMAN
type: select
# Linux package mirrors (Arch, Debian) — DIRECT only; VPN stalls apt bulk downloads
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
- name: 26-XBOX
type: select
# Default DIRECT (ISP via gateway). xbox-static + pin 03-STATIC leaf for foreign store / non-RU Live.
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
- name: 33-EA
type: select
# EA / Apex: default DIRECT (ISP egress via mihomo gateway — not to_wan). Pin 03-STATIC only if account needs VPN region.
# Game UDP: NETWORK,udp,DIRECT. No local FlClash/Verge full TUN on gaming PC (EAC conflict); router to_vpn stays on.
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
- name: 35-HIREZ
type: select
# Hi-Rez / Paladins / Smite: auth + EAC + launcher DIRECT via gateway (not 00-GLOBAL). Game UDP: NETWORK,udp,DIRECT.
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
- name: 36-DBD
type: select
# DBD: 03-STATIC + Vless UDP leaf (not 00-GLOBAL/xhttp — no game UDP). Pin Poland/Finland in panel.
proxies: [03-STATIC, 04-STATIC-RELIABLE, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, DIRECT, REJECT]
- name: 27-XBOX_DL
type: select
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
# Cloudflare-protected torrent sites — CF blocks many VPN exits; default DIRECT (toggle in panel if ISP blocks)
- name: 31-TORRENT_CF
type: select
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
# NetBird remote GitLab/NuGet (panel: default DIRECT; do NOT pin 03-STATIC — shared with Discord/z13)
- name: 34-NETBIRD-NUGET
type: select
proxies: [DIRECT, 00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 03-STATIC, 04-STATIC-RELIABLE, REJECT]
- name: 37-HOST-TUN
type: select
# Dashboard Global (to_tun): full tunnel via 00-GLOBAL (TCP); 03-STATIC for UDP voice pin.
proxies: [00-GLOBAL, 01-AUTO, 02-AUTO-FALLBACK, 04-STATIC-RELIABLE, 03-STATIC, DIRECT, REJECT]
# Dedicated, ordered leaf pool for long-lived TCP. Do not route 00-GLOBAL
# here: their latency-driven selection can change underneath an open stream.
- name: stable_auto
type: fallback
# Same dynamic provider pool as 01-AUTO. Keep WhitePrism as a
# candidate, but do not strand Cloudflare on it when its Germany leaves
# are dead. `use` remains provider-based so offline validation survives
# subscription node rotation.
use: [SUB1, SUB2, SUB3, SUB4, SUB5]
exclude-filter: '(?i)(🇷🇺|🇹🇷|Россия|Russia|Russian|Турция|Turkey|Moscow|Москва|Petersburg|Петербург|Санкт|\bSPB\b|Beget|Timeweb|Selectel|REG\.RU|FirstVDS|Fornex|UFO\s+Hosting|Yakovlev|rus\.fasti|ru\.fasti|tr\.fasti)'
url: https://www.cloudflare.com/cdn-cgi/trace
interval: 300
tolerance: 500
timeout: 12000
expected-status: 200
max-failed-times: 3
empty-fallback: REJECT
lazy: false
# Cloudflare Tunnel control stream only. Must never inherit 00-GLOBAL: a
# manual/global pin can take all LAN traffic down while recovering :7844.
- name: 40-CF-TUNNEL
type: select
use: [SUB1, SUB2, SUB3, SUB4, SUB5]
proxies: [stable_auto, REJECT]
rule-providers:
local:
type: inline
behavior: classical
payload:
- "IP-CIDR,192.168.0.0/16,no-resolve"
- "IP-CIDR,10.0.0.0/8,no-resolve"
- "IP-CIDR,172.16.0.0/12,no-resolve"
- "IP-CIDR,127.0.0.0/8,no-resolve"
- "IP-CIDR,::1/128,no-resolve"
- "IP-CIDR,fc00::/7,no-resolve"
ru-direct:
type: inline
behavior: domain
payload:
- 24h.tv
- 5post.market
- aviasales.com
- avito.st
- avs.io
- beeline.tv
- boosty.to
- chizhik.club
- dbo-dengi.online
- dns-shop.ru
- dns.ru
- dodois.com
- dodois.io
- dodopizza.com
- dodostatic.net
- donationalerts.com
- emias.info
- evrasia.rest
- fix-price.com
- kinopoisk-ru.clstorage.net
- kinorium.com
- lenta.com
- lenta.tech
- memealerts.com
- moex.com
- mosmetro.tech
- mradx.net
- mvk.com
- mycdn.me
- naydex.net
- netmonet.co
- ngenix.net
- okko.sport
- okko.tv
- okolo.app
- ozonusercontent.com
- paywb.com
- perekrestok.com
- premier.one
- restream-media.net
- rostaxi.org
- ru.com
- ru.net
- sistema-capital.com
- smotreshka.tv
- t1.cloud
- tamtam.chat
- taxsee.com
- tips.tips
- trbcdn.net
- turbopages.org
- uni.rest
- unirest.tech
- userapi.com
- vk-apps.com
- vkcache.com
- vk.cc
- vk-cdn.me
- vk-cdn.net
- vk.com
- vk.company
- vk.design
- vkgo.app
- vk.link
- vklive.app
- vk.me
- vkmessenger.app
- vkmessenger.com
- vk-portal.net
- vk.team
- vkuseraudio.com
- vkuseraudio.net
- vkuserlive.net
- vkuser.net
- vkuservideo.com
- vkuservideo.net
- webvisor.com
- webvisor.org
- x5.ai
- x5.com
- x5.digital
- x5.group
- x5.media
- x5static.net
- x5.team
- x5.tech
- xn--80acgfbsl1azdqr.xn--p1ai
- xn--80adxhks
- xn--80ajghhoc2aj1c8b.xn--p1ai
- xn--80asehdb
- xn--80aswg
- xn--c1avg
- xn--d1acj3b
- xn--d1acpjx3f.xn--p1ai
- xn--p1acf
- xn--p1ai
- yads.tech
- yandexadexchange.net
- yandex.aero
- yandex.az
- yandex-bank.net
- yandex.by
- yandex.cloud
- yandexcloud.net
- yandex.co.il
- yandex.com
- yandex.com.am
- yandex.com.ge
- yandexcom.net
- yandex.com.tr
- yandex.com.ua
- yandex.de
- yandex.ee
- yandex.eu
- yandex.fi
- yandex.fr
- yandex-images.clstorage.net
- yandex.jobs
- yandex.kg
- yandex.kz
- yandex.lt
- yandex.lv
- yandex.md
- yandexmetrica.com
- yandex.net
- yandex.org
- yandex.pl
- yandex-pogoda.static-storage.net
- yandex.st
- yandex.sx
- yandex.tj
- yandex.tm
- yandex.tr
- yandex.ua
- yandex.uz
- yandexwebcache.net
- yandexwebcache.org
- yastatic.net
- yastat.net
- yclients.com
- youla.io
jetbrains:
type: inline
behavior: classical
payload:
- "DOMAIN-SUFFIX,jetbrains.com"
- "DOMAIN-SUFFIX,jetbrains.org"
- "DOMAIN-SUFFIX,intellij.net"
- "DOMAIN-SUFFIX,kotlinlang.org"
- "DOMAIN-SUFFIX,youtrack.io"
- "DOMAIN-SUFFIX,youtrack.cloud"
- "DOMAIN-SUFFIX,teamcity.com"
- "DOMAIN-SUFFIX,jb.gg"
- "DOMAIN-SUFFIX,kotlin.link"
- "DOMAIN-SUFFIX,ktor.io"
- "DOMAIN-SUFFIX,kotlinconf.com"
- "DOMAIN-SUFFIX,space.dev"
- "DOMAIN-SUFFIX,jetbrains.space"
pacman-mirrors:
type: inline
behavior: classical
payload:
- "DOMAIN-SUFFIX,1ago.be"
- "DOMAIN-SUFFIX,archlinux.gay"
- "DOMAIN-SUFFIX,archlinux.no"
- "DOMAIN-SUFFIX,archlinux.si"
- "DOMAIN-SUFFIX,aria-on-the-planet.es"
- "DOMAIN-SUFFIX,br.ee"
- "DOMAIN-SUFFIX,cachy-arch.ru"
- "DOMAIN-SUFFIX,cdn-perfprod.com"
- "DOMAIN-SUFFIX,cvut.cz"
- "DOMAIN-SUFFIX,doridian.net"
- "DOMAIN-SUFFIX,dotsrc.org"
- "DOMAIN-SUFFIX,ek-cer.hu"
- "DOMAIN-SUFFIX,flokinet.net"
- "DOMAIN-SUFFIX,frigyes.dev"
- "DOMAIN-SUFFIX,grena.ge"
- "DOMAIN-SUFFIX,group.one"
- "DOMAIN-SUFFIX,hb9hil.org"
- "DOMAIN-SUFFIX,hyron.dev"
- "DOMAIN-SUFFIX,infania.net"
- "DOMAIN-SUFFIX,jlu.edu.cn"
- "DOMAIN-SUFFIX,juniorjpdj.pl"
- "DOMAIN-SUFFIX,jura12.ru"
- "DOMAIN-SUFFIX,keiminem.com"
- "DOMAIN-SUFFIX,kescher.at"
- "DOMAIN-SUFFIX,koyanet.lv"
- "DOMAIN-SUFFIX,lansing2600.org"
- "DOMAIN-SUFFIX,lesviallon.fr"
- "DOMAIN-SUFFIX,limda.net"
- "DOMAIN-SUFFIX,m1k.cloud"
- "DOMAIN-SUFFIX,maeen.sa"
- "DOMAIN-SUFFIX,mailtunnel.eu"
- "DOMAIN-SUFFIX,mergedcloud.de"
- "DOMAIN-SUFFIX,metrosg.ru"
- "DOMAIN-SUFFIX,midov.pl"
- "DOMAIN-SUFFIX,mirror-services.net"
- "DOMAIN-SUFFIX,mirror.cx"
- "DOMAIN-SUFFIX,mirrors.kernel.org"
- "DOMAIN-SUFFIX,mirror.rackspace.com"
- "DOMAIN-SUFFIX,neuf.no"
- "DOMAIN-SUFFIX,next-works.it"
- "DOMAIN-SUFFIX,niranjan.co"
- "DOMAIN-SUFFIX,nju.edu.cn"
- "DOMAIN-SUFFIX,osbeck.com"
- "DOMAIN-SUFFIX,pidginhost.com"
- "DOMAIN-SUFFIX,ps.kz"
- "DOMAIN-SUFFIX,repository.su"
- "DOMAIN-SUFFIX,saswata.cc"
- "DOMAIN-SUFFIX,soulharsh007.dev"
- "DOMAIN-SUFFIX,stratonexus.net"
- "DOMAIN-SUFFIX,telepoint.bg"
- "DOMAIN-SUFFIX,theswissbay.ch"
- "DOMAIN-SUFFIX,timtal.com.tr"
- "DOMAIN-SUFFIX,trap.moe"
- "DOMAIN-SUFFIX,trapmaid.org"
- "DOMAIN-SUFFIX,uni-plovdiv.net"
- "DOMAIN-SUFFIX,ustc.edu.cn"
- "DOMAIN-SUFFIX,wtako.net"
- "DOMAIN-SUFFIX,xeonbd.com"
- "DOMAIN-SUFFIX,xtom.ee"
- "DOMAIN-SUFFIX,yhtez.xyz"
- "DOMAIN-SUFFIX,zyner.org"
debian-mirrors:
type: inline
behavior: classical
payload:
- "DOMAIN,apt.tetaneutral.net
"
- "DOMAIN,archive.debian.org
"
- "DOMAIN,archive.debian.petiak.ir
"
- "DOMAIN,archive.kernel.org
"
- "DOMAIN,atl.mirrors.clouvider.net
"
- "DOMAIN,cdimage.debian.org
"
- "DOMAIN,deb.bbxnet.sk
"
- "DOMAIN,debian.a1.bg
"
- "DOMAIN,debian.anexia.at
"
- "DOMAIN,debian.apt-mirror.de
"
- "DOMAIN,debian-archive.trafficmanager.net
"
- "DOMAIN,debian.as3741.net
"
- "DOMAIN,debian.balt.net
"
- "DOMAIN,debian.c3sl.ufpr.br
"
- "DOMAIN,debian.carnet.hr
"
- "DOMAIN,debian.ccns.ncku.edu.tw
"
- "DOMAIN,debian-cd.mirror.web4u.cz
"
- "DOMAIN,debian-cd.repulsive.eu
"
- "DOMAIN,debian.charite.de
"
- "DOMAIN,debian.connesi.it
"
- "DOMAIN,debian.csail.mit.edu
"
- "DOMAIN,debian.csie.ntu.edu.tw
"
- "DOMAIN,debian.cs.nycu.edu.tw
"
- "DOMAIN,debian.dynamica.it
"
- "DOMAIN,debian.envisagecloud.net.za
"
- "DOMAIN,debian.ethz.ch
"
- "DOMAIN,debian.grn.cat
"
- "DOMAIN,debian.inf.tu-dresden.de
"
- "DOMAIN,debian.interhost.co.il
"
- "DOMAIN,debian.ipacct.com
"
- "DOMAIN,debian.iskon.hr
"
- "DOMAIN,debian-iso.mirror.anlx.net
"
- "DOMAIN,debian.koyanet.lv
"
- "DOMAIN,debian.lagis.at
"
- "DOMAIN,debian.lagoon.nc
"
- "DOMAIN,debian.linux.n0c.ca
"
- "DOMAIN,debian.lth.se
"
- "DOMAIN,debian.ludost.net
"
- "DOMAIN,debian.mirror.ac.ke
"
- "DOMAIN,debian-mirror.behostings.net
"
- "DOMAIN,debian.mirror.digitalpacific.com.au
"
- "DOMAIN,debian.mirror.garr.it
"
- "DOMAIN,debian.mirror.globo.tech
"
- "DOMAIN,debian.mirror.iphh.net
"
- "DOMAIN,debian.mirror.liquidtelecom.com
"
- "DOMAIN,debian.mirror.lrz.de
"
- "DOMAIN,debian-mirror.puq.apoapsis.cl
"
- "DOMAIN,debian.mirror.rafal.ca
"
- "DOMAIN,debian.mirror.serversaustralia.com.au
"
- "DOMAIN,debian.mirrors.ovh.net
"
- "DOMAIN,debian.mirror.su.se
"
- "DOMAIN,debian.mirror.uk.sargasso.net
"
- "DOMAIN,debianmirror.una.ac.cr
"
- "DOMAIN,debian.mirror.vu.lt
"
- "DOMAIN,debian.mirror.web4u.cz
"
- "DOMAIN,debian.mithril.re
"
- "DOMAIN,debian.mnet.bg
"
- "DOMAIN,debian.nautile.nc
"
- "DOMAIN,debian.netcologne.de
"
- "DOMAIN,debian.netforce.hosting
"
- "DOMAIN,debian.nic.cz
"
- "DOMAIN,debian.obspm.fr
"
- "DOMAIN,debian.osuosl.org
"
- "DOMAIN,debian.otenet.gr
"
- "DOMAIN,debian.polytech-lille.fr
"
- "DOMAIN,debian.pop-sc.rnp.br
"
- "DOMAIN,debian.proxad.net
"
- "DOMAIN,debian.redimadrid.es
"
- "DOMAIN,debian.repo.cure.edu.uy
"
- "DOMAIN,debian.saix.net
"
- "DOMAIN,debian.snt.utwente.nl
"
- "DOMAIN,debian.superhosting.cz
"
- "DOMAIN,debian.telecoms.bg
"
- "DOMAIN,debian.tu-bs.de
"
- "DOMAIN,debian.tuxuri.com
"
- "DOMAIN,debian.uevora.pt
"
- "DOMAIN,debian.uni-due.de
"
- "DOMAIN,debian.unnoba.edu.ar
"
- "DOMAIN,debian.volia.net
"
- "DOMAIN,debian.web.trex.fi
"
- "DOMAIN,debian.xfree.com.ar
"
- "DOMAIN,debian.xtdv.net
"
- "DOMAIN,deb-mir1.naitways.net
"
- "DOMAIN,deb.nextgen.ch
"
- "DOMAIN,de.mirrors.clouvider.net
"
- "DOMAIN,distrohub.kyiv.ua
"
- "DOMAIN,elmirror.cl
"
- "DOMAIN,free.hands.com
"
- "DOMAIN,ftp2.de.debian.org
"
- "DOMAIN,ftp.acc.umu.se
"
- "DOMAIN,ftp.agh.edu.pl
"
- "DOMAIN,ftp.at.debian.org
"
- "DOMAIN,ftp.au.debian.org
"
- "DOMAIN,ftp.be.debian.org
"
- "DOMAIN,ftp.bg.debian.org
"
- "DOMAIN,ftp.bme.hu
"
- "DOMAIN,ftp.br.debian.org
"
- "DOMAIN,ftp.by.debian.org
"
- "DOMAIN,ftp.byfly.by
"
- "DOMAIN,ftp.ca.debian.org
"
- "DOMAIN,ftp.ch.debian.org
"
- "DOMAIN,ftp.cica.es
"
- "DOMAIN,ftp.cl.debian.org
"
- "DOMAIN,ftp.cn.debian.org
"
- "DOMAIN,ftp.crifo.org
"
- "DOMAIN,ftp.cvut.cz
"
- "DOMAIN,ftp.cz.debian.org
"
- "DOMAIN,ftp.debianclub.org
"
- "DOMAIN,ftp.debian.cz
"
- "DOMAIN,ftp.debian.sk
"
- "DOMAIN,ftp.de.debian.org
"
- "DOMAIN,ftp.dk.debian.org
"
- "DOMAIN,ftp.ec-m.fr
"
- "DOMAIN,ftp.ee.debian.org
"
- "DOMAIN,ftp.eenet.ee
"
- "DOMAIN,ftp.eq.uc.pt
"
- "DOMAIN,ftp.fau.de
"
- "DOMAIN,ftp.fi.debian.org
"
- "DOMAIN,ftp.fr.debian.org
"
- "DOMAIN,ftp.gwdg.de
"
- "DOMAIN,ftp.halifax.rwth-aachen.de
"
- "DOMAIN,ftp.hk.debian.org
"
- "DOMAIN,ftp.hosteurope.de
"
- "DOMAIN,ftp.hr.debian.org
"
- "DOMAIN,ftp.icm.edu.pl
"
- "DOMAIN,ftp.is.debian.org
"
- "DOMAIN,ftp.it.debian.org
"
- "DOMAIN,ftp.kaist.ac.kr
"
- "DOMAIN,ftp.kr.debian.org
"
- "DOMAIN,ftp.lanet.kr
"
- "DOMAIN,ftp.linux.edu.lv
"
- "DOMAIN,ftp.linux.it
"
- "DOMAIN,ftp.lip6.fr
"
- "DOMAIN,ftp.lt.debian.org
"
- "DOMAIN,ftp.maru.co.jp
"
- "DOMAIN,ftp.md.debian.org
"
- "DOMAIN,ftpmirror1.infania.net
"
- "DOMAIN,ftp.nc.debian.org
"
- "DOMAIN,ftp.ncnu.edu.tw
"
- "DOMAIN,ftp.nl.debian.org
"
- "DOMAIN,ftp.nz.debian.org
"
- "DOMAIN,ftp.pl.debian.org
"
- "DOMAIN,ftp.psnc.pl
"
- "DOMAIN,ftp.psn.ru
"
- "DOMAIN,ftp.pt.debian.org
"
- "DOMAIN,ftp.rezopole.net
"
- "DOMAIN,ftp.riken.jp
"
- "DOMAIN,ftp.rnl.tecnico.ulisboa.pt
"
- "DOMAIN,ftp.ru.debian.org
"
- "DOMAIN,ftp.se.debian.org
"
- "DOMAIN,ftp.sh.cvut.cz
"
- "DOMAIN,ftp.sk.debian.org
"
- "DOMAIN,ftp-stud.hs-esslingen.de
"
- "DOMAIN,ftp.stw-bonn.de
"
- "DOMAIN,ftp.task.gda.pl
"
- "DOMAIN,ftp.tu-chemnitz.de
"
- "DOMAIN,ftp.tugraz.at
"
- "DOMAIN,ftp.tw.debian.org
"
- "DOMAIN,ftp.uk.debian.org
"
- "DOMAIN,ftp.uni-hannover.de
"
- "DOMAIN,ftp.uni-kl.de
"
- "DOMAIN,ftp.uni-mainz.de
"
- "DOMAIN,ftp.uni-sofia.bg
"
- "DOMAIN,ftp.uni-stuttgart.de
"
- "DOMAIN,ftp.univ-pau.fr
"
- "DOMAIN,ftp.u-picardie.fr
"
- "DOMAIN,ftp.us.debian.org
"
- "DOMAIN,ftp.u-strasbg.fr
"
- "DOMAIN,ftp.wrz.de
"
- "DOMAIN,ftp.yz.yamagata-u.ac.jp
"
- "DOMAIN,ftp.zcu.cz
"
- "DOMAIN,giano.com.dist.unige.it
"
- "DOMAIN,kartolo.sby.datautama.net.id
"
- "DOMAIN,la.mirrors.clouvider.net
"
- "DOMAIN,lethe.chinstrap.org
"
- "DOMAIN,linux.purple-cat.net
"
- "DOMAIN,linuxsoft.cern.ch
"
- "DOMAIN,merlin.fit.vutbr.cz
"
- "DOMAIN,miroir.univ-lorraine.fr
"
- "DOMAIN,mirror.0x626b.com
"
- "DOMAIN,mirror1.infomaniak.com
"
- "DOMAIN,mirror.23m.com
"
- "DOMAIN,mirror2.infomaniak.com
"
- "DOMAIN,mirror.5i.fi
"
- "DOMAIN,mirror.aarnet.edu.au
"
- "DOMAIN,mirror.abaclouda.net
"
- "DOMAIN,mirror.alwyzon.net
"
- "DOMAIN,mirror.amaze.com.au
"
- "DOMAIN,mirror.applebred.net
"
- "DOMAIN,mirror.as35701.net
"
- "DOMAIN,mirror.as43289.net
"
- "DOMAIN,mirror.bgp.rodeo
"
- "DOMAIN,mirror.bizflycloud.vn
"
- "DOMAIN,mirror.blue3.com.br
"
- "DOMAIN,mirror.braindrainlan.nu
"
- "DOMAIN,mirror.cedia.org.ec
"
- "DOMAIN,mirror.checkdomain.de
"
- "DOMAIN,mirror.cloudhosting.lv
"
- "DOMAIN,mirror.cogentco.com
"
- "DOMAIN,mirror.corbina.net
"
- "DOMAIN,mirror.cov.ukservers.com
"
- "DOMAIN,mirror.cpsc.ucalgary.ca
"
- "DOMAIN,mirror.creoline.net
"
- "DOMAIN,mirror.csclub.uwaterloo.ca
"
- "DOMAIN,mirror.datacenter.by
"
- "DOMAIN,mirror.debian.ikoula.com
"
- "DOMAIN,mirror.de.leaseweb.net
"
- "DOMAIN,mirror.djvg.sg
"
- "DOMAIN,mirror.dkm.cz
"
- "DOMAIN,mirror.docker.ru
"
- "DOMAIN,mirror.dogado.de
"
- "DOMAIN,mirror.dst.ca
"
- "DOMAIN,mirror.duocast.net
"
- "DOMAIN,mirror.estone.ca
"
- "DOMAIN,mirror.eu.oneandone.net
"
- "DOMAIN,mirror.flo.c-f.ro
"
- "DOMAIN,mirror.fsmg.org.nz
"
- "DOMAIN,mirror.gitoyen.net
"
- "DOMAIN,mirror.gsl.icu
"
- "DOMAIN,mirror.hnd.cl
"
- "DOMAIN,mirror.hoster.kz
"
- "DOMAIN,mirror.init7.net
"
- "DOMAIN,mirror.insacom.cl
"
- "DOMAIN,mirror.ipb.de
"
- "DOMAIN,mirror.it4i.cz
"
- "DOMAIN,mirror.it.ubc.ca
"
- "DOMAIN,mirror.iway.ch
"
- "DOMAIN,mirror.johnnybegood.fr
"
- "DOMAIN,mirror.keystealth.org
"
- "DOMAIN,mirror.kku.ac.th
"
- "DOMAIN,mirror.kpfu.ru
"
- "DOMAIN,mirror.lagoon.nc
"
- "DOMAIN,mirror.lchost.net
"
- "DOMAIN,mirror.linux.org.au
"
- "DOMAIN,mirror.linux.ro
"
- "DOMAIN,mirror.litnet.lt
"
- "DOMAIN,mirror.lzu.edu.cn
"
- "DOMAIN,mirror.maeen.sa
"
- "DOMAIN,mirror.mephi.ru
"
- "DOMAIN,mirror.metanet.ch
"
- "DOMAIN,mirror.mirohost.net
"
- "DOMAIN,mirror.mk.de
"
- "DOMAIN,mirror.mythic-beasts.com
"
- "DOMAIN,mirror.neftm.ru
"
- "DOMAIN,mirror.nforce.com
"
- "DOMAIN,mirror.nitc.ac.in
"
- "DOMAIN,mirror.nju.edu.cn
"
- "DOMAIN,mirror.nl.cdn-perfprod.com
"
- "DOMAIN,mirror.nl.leaseweb.net
"
- "DOMAIN,mirror.nl.mirhosting.net
"
- "DOMAIN,mirror.nyist.edu.cn
"
- "DOMAIN,mirror.ourhost.az
"
- "DOMAIN,mirror.overthewire.com.au
"
- "DOMAIN,mirror.ox.ac.uk
"
- "DOMAIN,mirror.pangkin.com
"
- "DOMAIN,mirror.plusline.net
"
- "DOMAIN,mirror.plusserver.com
"
- "DOMAIN,mirror.pmf.kg.ac.rs
"
- "DOMAIN,mirror-prg.webglobe.com
"
- "DOMAIN,mirror.ps.kz
"
- "DOMAIN,mirror.raiolanetworks.com
"
- "DOMAIN,mirror.realcompute.io
"
- "DOMAIN,mirror.sabay.com.kh
"
- "DOMAIN,mirrors.accretive-networks.net
"
- "DOMAIN,mirrors.bfsu.edu.cn
"
- "DOMAIN,mirrors.cloudforest.co.th
"
- "DOMAIN,mirrors.coreix.net
"
- "DOMAIN,mirrors.datapark.ro
"
- "DOMAIN,mirrors.dotsrc.org
"
- "DOMAIN,mirrorservice.org
"
- "DOMAIN,mirror.sg.gs
"
- "DOMAIN,mirrors.glesys.net
"
- "DOMAIN,mirrors.hit.edu.cn
"
- "DOMAIN,mirrors.hosterion.ro
"
- "DOMAIN,mirrors.hostico.ro
"
- "DOMAIN,mirrors.hostiserver.com
"
- "DOMAIN,mirrors.ic.unicamp.br
"
- "DOMAIN,mirror.siena.edu
"
- "DOMAIN,mirror.sinavps.ch
"
- "DOMAIN,mirror.sitsa.com.ar
"
- "DOMAIN,mirror.siwoo.org
"
- "DOMAIN,mirrors.jlu.edu.cn
"
- "DOMAIN,mirrors.lug.mtu.edu
"
- "DOMAIN,mirrors.nav.ro
"
- "DOMAIN,mirrors.netix.net
"
- "DOMAIN,mirrors.nxthost.com
"
- "DOMAIN,mirrors.pidginhost.com
"
- "DOMAIN,mirrors.ptisp.pt
"
- "DOMAIN,mirrors.qlu.edu.cn
"
- "DOMAIN,mirrors.rackhosting.com
"
- "DOMAIN,mirror.steadfast.net
"
- "DOMAIN,mirrors.tuna.tsinghua.edu.cn
"
- "DOMAIN,mirrors.ucr.ac.cr
"
- "DOMAIN,mirrors.up.pt
"
- "DOMAIN,mirrors.ustc.edu.cn
"
- "DOMAIN,mirrors.vcea.wsu.edu
"
- "DOMAIN,mirrors.xtom.au
"
- "DOMAIN,mirrors.xtom.com
"
- "DOMAIN,mirrors.xtom.de
"
- "DOMAIN,mirrors.xtom.ee
"
- "DOMAIN,mirrors.xtom.jp
"
- "DOMAIN,mirrors.xtom.nl
"
- "DOMAIN,mirrors.zju.edu.cn
"
- "DOMAIN,mirror.telepoint.bg
"
- "DOMAIN,mirror.tngnet.com
"
- "DOMAIN,mirror.truenetwork.ru
"
- "DOMAIN,mirror.twds.com.tw
"
- "DOMAIN,mirror.tzulo.com
"
- "DOMAIN,mirror.uepg.br
"
- "DOMAIN,mirror.ufscar.br
"
- "DOMAIN,mirror.unair.ac.id
"
- "DOMAIN,mirror.undernet.uy
"
- "DOMAIN,mirror.united-gameserver.de
"
- "DOMAIN,mirror.units.it
"
- "DOMAIN,mirror.unix-solutions.be
"
- "DOMAIN,mirror.us.leaseweb.net
"
- "DOMAIN,mirror.us.mirhosting.net
"
- "DOMAIN,mirror.us.oneandone.net
"
- "DOMAIN,mirror.veesp.com
"
- "DOMAIN,mirror.vpgrp.io
"
- "DOMAIN,mirror.vpsnet.com
"
- "DOMAIN,mirror.wtnet.de
"
- "DOMAIN,mirror.xeonbd.com
"
- "DOMAIN,mirror.xtom.com.hk
"
- "DOMAIN,mirror.yuki.net.uk
"
- "DOMAIN,mr.heru.id
"
- "DOMAIN,nl.mirrors.clouvider.net
"
- "DOMAIN,nyc.mirrors.clouvider.net
"
- "DOMAIN,opensource.nchc.org.tw
"
- "DOMAIN,ossmirror.mycloud.services
"
- "DOMAIN,packages.hs-regensburg.de
"
- "DOMAIN,pkg.adfinis-on-exoscale.ch
"
- "DOMAIN,pubmirror.plutex.de
"
- "DOMAIN,repo.ialab.dsu.edu
"
- "DOMAIN,repo.ifca.es
"
- "DOMAIN,repo.jztkft.hu
"
- "DOMAIN,ro.mirror.flokinet.net
"
- "DOMAIN,rsync.uni-bayreuth.de
"
- "DOMAIN,softlibre.unizar.es
"
- "DOMAIN,tw1.mirror.blendbyte.net
"
- "DOMAIN,ukdebian.mirror.anlx.net
"
- "DOMAIN,uk.mirrors.clouvider.net
"
- "DOMAIN,werog.interkoneksimedia.co.id
"
- "DOMAIN,www.nic.funet.fi
"
cursor:
type: inline
behavior: classical
payload:
- "DOMAIN-SUFFIX,cursor.sh"
- "DOMAIN-SUFFIX,cursor.com"
- "DOMAIN-SUFFIX,cursorapi.com"
- "DOMAIN-SUFFIX,cursor-cdn.com"
- "DOMAIN-SUFFIX,anysphere.co"
- "DOMAIN-SUFFIX,marketplace.cursorapi.com"
my-nalog:
type: inline
behavior: classical
payload:
- "DOMAIN-SUFFIX,nalog.ru"
- "DOMAIN-SUFFIX,tax.gov.ru"
- "DOMAIN,lknpd.nalog.ru"
- "DOMAIN,npd.nalog.ru"
- "DOMAIN,statusnpd.nalog.ru"
- "DOMAIN-SUFFIX,lknpd.nalog.ru"
- "DOMAIN-SUFFIX,npd.nalog.ru"
- "DOMAIN-SUFFIX,statusnpd.nalog.ru"
banks-ru:
type: inline
behavior: classical
payload:
- "DOMAIN-SUFFIX,alfabank.ru"
- "DOMAIN-SUFFIX,alfabank.st"
- "DOMAIN-SUFFIX,alfa.me"
- "DOMAIN-SUFFIX,alfainvest.ru"
- "DOMAIN-SUFFIX,online.alfabank.ru"
- "DOMAIN-SUFFIX,mobile.alfabank.ru"
- "DOMAIN-SUFFIX,web.alfabank.ru"
- "DOMAIN-SUFFIX,click.alfabank.ru"
- "DOMAIN-SUFFIX,sberbank.ru"
- "DOMAIN-SUFFIX,sberbank.com"
- "DOMAIN-SUFFIX,online.sberbank.ru"
- "DOMAIN-SUFFIX,tinkoff.ru"
- "DOMAIN-SUFFIX,tbank.ru"
- "DOMAIN-SUFFIX,vtb.ru"
- "DOMAIN-SUFFIX,open.ru"
- "DOMAIN-SUFFIX,raiffeisen.ru"
- "DOMAIN-SUFFIX,gazprombank.ru"
- "DOMAIN-SUFFIX,rosbank.ru"
- "DOMAIN-SUFFIX,rshb.ru"
- "DOMAIN-SUFFIX,psbank.ru"
- "DOMAIN-SUFFIX,tochka.com"
- "DOMAIN-SUFFIX,nspk.ru"
- "DOMAIN-SUFFIX,mironline.ru"
- "DOMAIN-SUFFIX,jivosite.ru"
- "DOMAIN-SUFFIX,jivochat.ru"
xbox-download:
type: inline
behavior: classical
payload:
- "DOMAIN,dlassets-ssl.xboxlive.com"
- "DOMAIN,images-eds-ssl.xboxlive.com"
- "DOMAIN,assets1.xboxlive.com.delivery.microsoft.com"
- "DOMAIN,assets2.xboxlive.com.delivery.microsoft.com"
- "DOMAIN,dlassets.xboxlive.com.delivery.microsoft.com"
- "DOMAIN-KEYWORD,xboxlive.com.delivery.microsoft"
- "DOMAIN-SUFFIX,assets1.xboxlive.com"
- "DOMAIN-SUFFIX,assets2.xboxlive.com"
- "DOMAIN-SUFFIX,download.xbox.com"
- "DOMAIN-SUFFIX,xboxcontent.com"
- "DOMAIN-SUFFIX,delivery.mp.microsoft.com"
- "DOMAIN-SUFFIX,download.dm.microsoft.com"
- "DOMAIN-SUFFIX,onecdn.static.microsoft"
- "DOMAIN-SUFFIX,assets1.xbox.net"
- "DOMAIN-SUFFIX,assets2.xbox.net"
xbox-cdn-ips:
type: inline
behavior: ipcidr
payload:
- 2.23.88.0/24
- 23.215.2.0/24
- 91.81.128.0/24
- 92.223.40.0/24
- 92.223.55.0/24
- 92.223.118.0/24
- 128.75.231.0/24
- 185.5.160.0/24
dbd-gamelift:
type: inline
behavior: classical
payload:
- "DOMAIN-SUFFIX,bhvr.com"
- "DOMAIN-SUFFIX,bhvrdbd.com"
- "DOMAIN-SUFFIX,deadbydaylight.com"
- "DOMAIN-KEYWORD,gamelift"
- "DOMAIN-SUFFIX,api.aws"
dbd-gamelift-ips:
type: inline
behavior: ipcidr
payload:
- 18.165.140.0/24
- 3.78.205.81/32
- 3.79.18.165/32
- 52.119.188.100/32
- 52.94.204.248/32
- 52.94.205.108/32
host-policy:
type: inline
behavior: classical
payload:
- "SRC-IP-CIDR,192.168.88.11/32,37-HOST-TUN"
- "SRC-IP-CIDR,192.168.88.15/32,37-HOST-TUN"
- "SRC-IP-CIDR,192.168.88.19/32,37-HOST-TUN"
- "SRC-IP-CIDR,192.168.88.39/32,37-HOST-TUN"
- "SRC-IP-CIDR,192.168.88.50/32,37-HOST-TUN"
ru-ecosystem:
type: inline
behavior: ipcidr
payload:
- 79.137.139.0/24
- 79.137.164.0/24
- 79.137.180.0/24
- 79.137.183.0/24
- 84.252.144.0/24
- 84.252.145.0/24
- 84.252.146.0/24
- 84.252.147.0/24
- 84.252.149.0/24
- 84.252.150.0/24
- 84.252.151.0/24
- 84.252.152.0/24
- 87.240.128.0/18
- 87.240.166.0/24
- 87.240.167.0/24
- 87.251.92.0/23
- 87.251.92.0/24
- 87.251.93.0/24
- 91.194.226.0/23
- 91.194.226.0/24
- 91.194.227.0/24
- 91.199.205.0/24
- 91.217.194.0/24
- 91.218.132.0/22
- 91.218.132.0/23
- 91.218.132.0/24
- 91.218.133.0/24
- 91.218.134.0/23
- 91.218.134.0/24
- 91.218.135.0/24
- 91.227.91.0/24
- 91.231.132.0/24
- 91.231.133.0/24
- 91.231.134.0/24
- 92.42.160.0/21
- 92.42.160.0/24
- 92.42.161.0/24
- 92.42.162.0/24
- 92.42.163.0/24
- 92.42.164.0/24
- 92.42.165.0/24
- 92.42.166.0/24
- 92.42.167.0/24
- 93.186.224.0/21
- 93.186.232.0/21
- 93.189.87.0/24
- 95.142.192.0/20
- 95.142.192.0/21
- 95.142.201.0/24
- 95.142.202.0/24
- 95.142.203.0/24
- 95.213.0.0/17
- 95.213.0.0/18
- 95.213.44.0/24
- 95.213.45.0/24
- 109.172.74.0/24
- 128.140.170.0/24
- 178.130.128.0/23
- 178.130.128.0/24
- 178.130.129.0/24
- 178.237.16.0/24
- 178.237.17.0/24
- 178.237.18.0/24
- 178.237.19.0/24
- 178.237.21.0/24
- 178.237.22.0/24
- 178.237.24.0/24
- 178.237.28.0/24
- 185.32.248.0/22
- 185.32.249.0/24
- 185.32.251.0/24
- 185.52.72.0/22
- 185.52.72.0/24
- 185.52.73.0/24
- 185.52.74.0/24
- 185.52.75.0/24
- 185.131.68.0/23
- 185.157.96.0/23
- 185.157.96.0/24
- 185.157.97.0/24
- 185.157.99.0/24
- 185.170.2.0/23
- 185.170.2.0/24
- 185.170.3.0/24
- 185.179.144.0/22
- 185.179.144.0/24
- 185.179.145.0/24
- 185.179.146.0/24
- 185.179.147.0/24
- 193.0.185.0/24
- 193.28.44.0/24
- 193.104.70.0/24
- 193.104.207.0/24
- 193.143.119.0/24
- 193.164.146.0/24
- 193.222.191.0/24
- 194.8.224.0/23
- 194.8.224.0/24
- 194.8.225.0/24
- 194.54.12.0/23
- 194.54.12.0/24
- 194.54.13.0/24
- 194.54.14.0/24
- 194.54.15.0/24
- 194.145.158.0/24
- 195.43.144.0/24
- 195.200.209.0/24
- 195.209.134.0/24
- 195.209.181.0/24
- 195.225.38.0/23
- 195.238.72.0/24
- 195.238.73.0/24
- 195.239.64.0/24
- 195.242.82.0/23
- 195.242.82.0/24
- 195.242.83.0/24
- 195.248.69.0/24
- 212.233.80.0/22
- 212.233.80.0/24
- 212.233.81.0/24
- 212.233.82.0/23
- 212.233.82.0/24
- 212.233.83.0/24
- 213.33.175.0/24
- 217.12.96.0/24
- 217.12.97.0/24
- 217.12.98.0/24
- 217.12.99.0/24
- 217.12.100.0/24
- 217.12.101.0/24
- 217.12.102.0/24
- 217.12.103.0/24
- 217.12.104.0/24
- 217.12.105.0/24
- 217.12.106.0/24
- 217.12.110.0/24
- 217.14.16.0/23
- 217.14.16.0/24
- 217.14.18.0/24
- 217.14.19.0/24
- 217.14.20.0/24
- 217.14.23.0/24
- 217.14.48.0/20
- 217.14.57.0/24
- 217.14.59.0/24
- 217.14.62.0/24
- 217.14.63.0/24
- 217.69.132.0/24
discord-voice-ips:
type: inline
behavior: ipcidr
payload:
- 66.22.192.0/18
- 69.164.192.0/18
- 89.104.168.0/21
- 138.128.0.0/16
- 162.159.128.0/17
- 104.29.0.0/16
- 104.16.0.0/14
- 34.0.0.0/12
- 34.64.0.0/11
- 34.96.0.0/11
- 35.207.192.0/18
- 35.213.0.0/17
- 35.213.128.0/18
- 35.213.192.0/18
- 35.214.128.0/17
- 35.215.128.0/18
- 35.215.192.0/18
- 35.216.0.0/14
- 216.198.192.0/18
cloudflare-ips:
type: http
behavior: ipcidr
format: mrs
url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cloudflare.mrs
interval: 86400
discord-voice-legiz:
type: http
behavior: ipcidr
format: mrs
url: https://raw.githubusercontent.com/legiz-ru/mihomo-rule-sets/main/other/discord-voice-ip-list.mrs
interval: 86400
discord-vc:
type: inline
behavior: classical
payload:
- AND,(NETWORK,udp),(IP-CIDR,138.128.136.0/21),(DST-PORT,50000-50100)
- AND,(NETWORK,udp),(IP-CIDR,162.158.0.0/15),(DST-PORT,50000-50100)
- AND,(NETWORK,udp),(IP-CIDR,172.64.0.0/13),(DST-PORT,50000-50100)
- AND,(NETWORK,udp),(IP-CIDR,34.0.0.0/15),(DST-PORT,50000-50100)
- AND,(NETWORK,udp),(IP-CIDR,34.2.0.0/15),(DST-PORT,50000-50100)
- AND,(NETWORK,udp),(IP-CIDR,35.192.0.0/12),(DST-PORT,50000-50100)
- AND,(NETWORK,udp),(IP-CIDR,35.208.0.0/12),(DST-PORT,50000-50100)
- AND,(NETWORK,udp),(IP-CIDR,5.200.14.128/25),(DST-PORT,50000-50100)
- AND,(NETWORK,udp),(IP-CIDR,66.22.192.0/18),(DST-PORT,50000-50100)
category-ru:
type: http
behavior: domain
format: mrs
url: https://raw.githubusercontent.com/Davoyan/mihomo-rule-sets/main/rules/category-ru.mrs
interval: 86400
geoip-private:
type: http
behavior: ipcidr
format: mrs
url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/private.mrs
interval: 86400
category-ai:
type: http
behavior: domain
format: mrs
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/category-ai-!cn.mrs"
interval: 86400
google-deepmind:
type: http
behavior: domain
format: mrs
url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/google-deepmind.mrs
interval: 86400
speedtest-net:
type: http
behavior: domain
format: mrs
url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/speedtest.mrs
interval: 86400
remote-control:
type: http
behavior: domain
format: mrs
url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/category-remote-control.mrs
interval: 86400
ru-bundle:
type: http
behavior: domain
format: mrs
url: https://raw.githubusercontent.com/legiz-ru/mihomo-rule-sets/main/ru-bundle/rule.mrs
interval: 86400
refilter-domains:
type: http
behavior: domain
format: mrs
url: https://raw.githubusercontent.com/legiz-ru/mihomo-rule-sets/main/re-filter/domain-rule.mrs
interval: 86400
ru-inside:
type: inline
behavior: domain
payload:
- "DOMAIN-SUFFIX,.ua"
- "DOMAIN-SUFFIX,10minutemail.com"
- "DOMAIN-SUFFIX,1337x.to"
- "DOMAIN-SUFFIX,24.kg"
- "DOMAIN-SUFFIX,4freerussia.org"
- "DOMAIN-SUFFIX,4pda.to"
- "DOMAIN-SUFFIX,4pda.ws"
- "DOMAIN-SUFFIX,4pna.com"
- "DOMAIN-SUFFIX,5sim.net"
- "DOMAIN-SUFFIX,7dniv.rv.ua"
- "DOMAIN-SUFFIX,7tv.app"
- "DOMAIN-SUFFIX,7tv.io"
- "DOMAIN-SUFFIX,9tv.co.il"
- "DOMAIN-SUFFIX,a-vrv.akamaized.net"
- "DOMAIN-SUFFIX,abercrombie.com"
- "DOMAIN-SUFFIX,abook-club.ru"
- "DOMAIN-SUFFIX,academy.terrasoft.ua"
- "DOMAIN-SUFFIX,activatica.org"
- "DOMAIN-SUFFIX,adguard-vpn.com"
- "DOMAIN-SUFFIX,adguard.com"
- "DOMAIN-SUFFIX,adidas.com"
- "DOMAIN-SUFFIX,adminforge.de"
- "DOMAIN-SUFFIX,adobe.com"
- "DOMAIN-SUFFIX,adobe.io"
- "DOMAIN-SUFFIX,adobe.net"
- "DOMAIN-SUFFIX,ads-twitter.com"
- "DOMAIN-SUFFIX,adultmult.tv"
- "DOMAIN-SUFFIX,affinity.studio"
- "DOMAIN-SUFFIX,agents.media"
- "DOMAIN-SUFFIX,ahrefs.com"
- "DOMAIN-SUFFIX,ai-chat.bsg.brave.com"
- "DOMAIN-SUFFIX,ai.com"
- "DOMAIN-SUFFIX,aircanada.com"
- "DOMAIN-SUFFIX,akc.org"
- "DOMAIN-SUFFIX,all3dp.com"
- "DOMAIN-SUFFIX,allegro.pl"
- "DOMAIN-SUFFIX,alphacoders.com"
- "DOMAIN-SUFFIX,alza.hu"
- "DOMAIN-SUFFIX,amazfitwatchfaces.com"
- "DOMAIN-SUFFIX,amdm.ru"
- "DOMAIN-SUFFIX,amedia.site"
- "DOMAIN-SUFFIX,amnezia.org"
- "DOMAIN-SUFFIX,amplitude.com"
- "DOMAIN-SUFFIX,amx.com"
- "DOMAIN-SUFFIX,analog.com"
- "DOMAIN-SUFFIX,andrevi.ch"
- "DOMAIN-SUFFIX,anidub.com"
- "DOMAIN-SUFFIX,anilib.me"
- "DOMAIN-SUFFIX,anilibria.org"
- "DOMAIN-SUFFIX,anilibria.tv"
- "DOMAIN-SUFFIX,anilibria.uno"
- "DOMAIN-SUFFIX,anilibria.wtf"
- "DOMAIN-SUFFIX,animaunt.org"
- "DOMAIN-SUFFIX,anime-portal.su"
- "DOMAIN-SUFFIX,animebest.org"
- "DOMAIN-SUFFIX,animedia.tv"
- "DOMAIN-SUFFIX,animego.org"
- "DOMAIN-SUFFIX,animespirit.ru"
- "DOMAIN-SUFFIX,anistar.org"
- "DOMAIN-SUFFIX,anistars.ru"
- "DOMAIN-SUFFIX,annas-archive.org"
- "DOMAIN-SUFFIX,ansys.com"
- "DOMAIN-SUFFIX,anthropic.com"
- "DOMAIN-SUFFIX,anthropic.qualtrics.com"
- "DOMAIN-SUFFIX,any.do"
- "DOMAIN-SUFFIX,aol.com"
- "DOMAIN-SUFFIX,api.jetbrains.ai"
- "DOMAIN-SUFFIX,api.service-kp.com"
- "DOMAIN-SUFFIX,api.theins.info"
- "DOMAIN-SUFFIX,api.themoviedb.org"
- "DOMAIN-SUFFIX,apkmirror.com"
- "DOMAIN-SUFFIX,arbat.media"
- "DOMAIN-SUFFIX,arc.net"
- "DOMAIN-SUFFIX,archive.ph"
- "DOMAIN-SUFFIX,archiveofourown.org"
- "DOMAIN-SUFFIX,arduino.cc"
- "DOMAIN-SUFFIX,as6723.net"
- "DOMAIN-SUFFIX,assets.heroku.com"
- "DOMAIN-SUFFIX,atlassian.com"
- "DOMAIN-SUFFIX,atn.ua"
- "DOMAIN-SUFFIX,att.com"
- "DOMAIN-SUFFIX,attachments.f95zone.to"
- "DOMAIN-SUFFIX,atv4.dnskp.cc"
- "DOMAIN-SUFFIX,audiobookbay.lu"
- "DOMAIN-SUFFIX,augmentcode.com"
- "DOMAIN-SUFFIX,autodesk.com"
- "DOMAIN-SUFFIX,avira.com"
- "DOMAIN-SUFFIX,azathabar.com"
- "DOMAIN-SUFFIX,azattyq.org"
- "DOMAIN-SUFFIX,babepedia.com"
- "DOMAIN-SUFFIX,babook.org"
- "DOMAIN-SUFFIX,backend-v2.crixet.com"
- "DOMAIN-SUFFIX,baginya.org"
- "DOMAIN-SUFFIX,baikal-journal.ru"
- "DOMAIN-SUFFIX,bato.to"
- "DOMAIN-SUFFIX,bbc.co.uk"
- "DOMAIN-SUFFIX,bbc.com"
- "DOMAIN-SUFFIX,bbci.co.uk"
- "DOMAIN-SUFFIX,bcbits.com"
- "DOMAIN-SUFFIX,bell-sw.com"
- "DOMAIN-SUFFIX,bellingcat.com"
- "DOMAIN-SUFFIX,bestbuy.com"
- "DOMAIN-SUFFIX,bestchange.ru"
- "DOMAIN-SUFFIX,bihus.info"
- "DOMAIN-SUFFIX,bitdefender.com"
- "DOMAIN-SUFFIX,bitnami.com"
- "DOMAIN-SUFFIX,blackseanews.net"
- "DOMAIN-SUFFIX,blinkshot.io"
- "DOMAIN-SUFFIX,bluehost.com"
- "DOMAIN-SUFFIX,booktracker.org"
- "DOMAIN-SUFFIX,boominfo.org"
- "DOMAIN-SUFFIX,booth.pm"
- "DOMAIN-SUFFIX,booth.pximg.net"
- "DOMAIN-SUFFIX,bosch.com"
- "DOMAIN-SUFFIX,boschaftermarket.com"
- "DOMAIN-SUFFIX,boschautoparts.com"
- "DOMAIN-SUFFIX,botnadzor.org"
- "DOMAIN-SUFFIX,brawlstarsgame.com"
- "DOMAIN-SUFFIX,broadcom.com"
- "DOMAIN-SUFFIX,broncosportforum.com"
- "DOMAIN-SUFFIX,bt4gprx.com"
- "DOMAIN-SUFFIX,btdig.com"
- "DOMAIN-SUFFIX,btod.com"
- "DOMAIN-SUFFIX,buanzo.org"
- "DOMAIN-SUFFIX,buf.build"
- "DOMAIN-SUFFIX,bufferbloat.net"
- "DOMAIN-SUFFIX,builds.parsec.app"
- "DOMAIN-SUFFIX,buymeacoffee.com"
- "DOMAIN-SUFFIX,byteoversea.com"
- "DOMAIN-SUFFIX,canva.com"
- "DOMAIN-SUFFIX,canva.dev"
- "DOMAIN-SUFFIX,capacitorjs.com"
- "DOMAIN-SUFFIX,carnegieendowment.org"
- "DOMAIN-SUFFIX,carrefouruae.com"
- "DOMAIN-SUFFIX,cats.com"
- "DOMAIN-SUFFIX,cbilling.eu"
- "DOMAIN-SUFFIX,cbilling.vip"
- "DOMAIN-SUFFIX,cdn.web-platform.io"
- "DOMAIN-SUFFIX,cdnbunny.org"
- "DOMAIN-SUFFIX,cdninstagram.com"
- "DOMAIN-SUFFIX,cdromance.org"
- "DOMAIN-SUFFIX,cdw.com"
- "DOMAIN-SUFFIX,censor.net"
- "DOMAIN-SUFFIX,censortracker.org"
- "DOMAIN-SUFFIX,chainreactioncycles.com"
- "DOMAIN-SUFFIX,chaos.com"
- "DOMAIN-SUFFIX,charhub.io"
- "DOMAIN-SUFFIX,chat.com"
- "DOMAIN-SUFFIX,chat.openai.com.cdn.cloudflare.net"
- "DOMAIN-SUFFIX,chatgpt.com"
- "DOMAIN-SUFFIX,chaturbate.com"
- "DOMAIN-SUFFIX,cherta.media"
- "DOMAIN-SUFFIX,chess.com"
- "DOMAIN-SUFFIX,chesscomfiles.com"
- "DOMAIN-SUFFIX,chub.ai"
- "DOMAIN-SUFFIX,circlecrewpinkcrowd.com"
- "DOMAIN-SUFFIX,cisco.com"
- "DOMAIN-SUFFIX,cisecurity.org"
- "DOMAIN-SUFFIX,citrix.com"
- "DOMAIN-SUFFIX,clamav.net"
- "DOMAIN-SUFFIX,clashofclans.com"
- "DOMAIN-SUFFIX,clashroyaleapp.com"
- "DOMAIN-SUFFIX,claude.ai"
- "DOMAIN-SUFFIX,claude.com"
- "DOMAIN-SUFFIX,clevelandclinic.org"
- "DOMAIN-SUFFIX,clickup.com"
- "DOMAIN-SUFFIX,clip.opus.pro"
- "DOMAIN-SUFFIX,cloudtorrents.com"
- "DOMAIN-SUFFIX,cms-twdigitalassets.com"
- "DOMAIN-SUFFIX,cnd2exp.online"
- "DOMAIN-SUFFIX,cock.li"
- "DOMAIN-SUFFIX,code.gist.build"
- "DOMAIN-SUFFIX,codeium.com"
- "DOMAIN-SUFFIX,codelinaro.org"
- "DOMAIN-SUFFIX,coingate.com"
- "DOMAIN-SUFFIX,coinpayments.net"
- "DOMAIN-SUFFIX,coinsbee.com"
- "DOMAIN-SUFFIX,coldfilm.city"
- "DOMAIN-SUFFIX,coldfilm.ink"
- "DOMAIN-SUFFIX,coldfilm.xyz"
- "DOMAIN-SUFFIX,colta.ru"
- "DOMAIN-SUFFIX,community.sophos.com"
- "DOMAIN-SUFFIX,connect.ngrok-agent.com"
- "DOMAIN-SUFFIX,contabo.com"
- "DOMAIN-SUFFIX,coomer.su"
- "DOMAIN-SUFFIX,copilot.microsoft.com"
- "DOMAIN-SUFFIX,corsair.com"
- "DOMAIN-SUFFIX,coursera.org"
- "DOMAIN-SUFFIX,cpu-monkey.com"
- "DOMAIN-SUFFIX,credly.com"
- "DOMAIN-SUFFIX,croxyproxy.com"
- "DOMAIN-SUFFIX,crunchyroll.com"
- "DOMAIN-SUFFIX,csskor.ill.in.ua"
- "DOMAIN-SUFFIX,cub.red"
- "DOMAIN-SUFFIX,currenttime.tv"
- "DOMAIN-SUFFIX,cursor-cdn.com"
- "DOMAIN-SUFFIX,cursor.sh"
- "DOMAIN-SUFFIX,cursorapi.com"
- "DOMAIN-SUFFIX,cursorinfo.co.il"
- "DOMAIN-SUFFIX,cvedetails.com"
- "DOMAIN-SUFFIX,cyberghostvpn.com"
- "DOMAIN-SUFFIX,cyxymu.info"
- "DOMAIN-SUFFIX,daemon-tools.cc"
- "DOMAIN-SUFFIX,dailylviv.com"
- "DOMAIN-SUFFIX,danbooru.donmai.us"
- "DOMAIN-SUFFIX,dashboard.algolia.com"
- "DOMAIN-SUFFIX,dashboard.gitguardian.com"
- "DOMAIN-SUFFIX,data-cdn.mbamupdates.com"
- "DOMAIN-SUFFIX,data.cline.bot"
- "DOMAIN-SUFFIX,deckbrew.xyz"
- "DOMAIN-SUFFIX,decrypt.day"
- "DOMAIN-SUFFIX,deepl.com"
- "DOMAIN-SUFFIX,deepstatemap.live"
- "DOMAIN-SUFFIX,deezer.com"
- "DOMAIN-SUFFIX,delfi.lt"
- "DOMAIN-SUFFIX,delfi.lv"
- "DOMAIN-SUFFIX,delivery.2d.net.co"
- "DOMAIN-SUFFIX,dell.com"
- "DOMAIN-SUFFIX,dellcdn.com"
- "DOMAIN-SUFFIX,depositphotos.com"
- "DOMAIN-SUFFIX,designer.microsoft.com"
- "DOMAIN-SUFFIX,designify.com"
- "DOMAIN-SUFFIX,developer.nvidia.com"
- "DOMAIN-SUFFIX,devexpress.com"
- "DOMAIN-SUFFIX,deviantart.com"
- "DOMAIN-SUFFIX,diabrowser.com"
- "DOMAIN-SUFFIX,digash.live"
- "DOMAIN-SUFFIX,digikey.com"
- "DOMAIN-SUFFIX,digitalcontent.sky"
- "DOMAIN-SUFFIX,digitalocean.com"
- "DOMAIN-SUFFIX,dis.gd"
- "DOMAIN-SUFFIX,discord-activities.com"
- "DOMAIN-SUFFIX,discord-attachments-uploads-prd.storage.googleapis.com"
- "DOMAIN-SUFFIX,discord.co"
- "DOMAIN-SUFFIX,discord.com"
- "DOMAIN-SUFFIX,discord.design"
- "DOMAIN-SUFFIX,discord.dev"
- "DOMAIN-SUFFIX,discord.gg"
- "DOMAIN-SUFFIX,discord.gift"
- "DOMAIN-SUFFIX,discord.gifts"
- "DOMAIN-SUFFIX,discord.media"
- "DOMAIN-SUFFIX,discord.new"
- "DOMAIN-SUFFIX,discord.store"
- "DOMAIN-SUFFIX,discord.tools"
- "DOMAIN-SUFFIX,discordactivities.com"
- "DOMAIN-SUFFIX,discordapp.com"
- "DOMAIN-SUFFIX,discordapp.net"
- "DOMAIN-SUFFIX,discordmerch.com"
- "DOMAIN-SUFFIX,discordpartygames.com"
- "DOMAIN-SUFFIX,discordsays.com"
- "DOMAIN-SUFFIX,discours.io"
- "DOMAIN-SUFFIX,disctech.com"
- "DOMAIN-SUFFIX,disneyplus.com"
- "DOMAIN-SUFFIX,docs.liquibase.com"
- "DOMAIN-SUFFIX,document360.com"
- "DOMAIN-SUFFIX,document360.io"
- "DOMAIN-SUFFIX,dorama.live"
- "DOMAIN-SUFFIX,doramalive.ru"
- "DOMAIN-SUFFIX,doramy.club"
- "DOMAIN-SUFFIX,dovod.online"
- "DOMAIN-SUFFIX,download3.omnissa.com"
- "DOMAIN-SUFFIX,downloads.intercomcdn.com"
- "DOMAIN-SUFFIX,doxa.team"
- "DOMAIN-SUFFIX,dpidetector.org"
- "DOMAIN-SUFFIX,dreamhost.com"
- "DOMAIN-SUFFIX,dub.sh"
- "DOMAIN-SUFFIX,ducati.com"
- "DOMAIN-SUFFIX,dumka.media"
- "DOMAIN-SUFFIX,dw.com"
- "DOMAIN-SUFFIX,dyson.com"
- "DOMAIN-SUFFIX,e-hentai.org"
- "DOMAIN-SUFFIX,e621.net"
- "DOMAIN-SUFFIX,easydmarc.com"
- "DOMAIN-SUFFIX,echofm.online"
- "DOMAIN-SUFFIX,editorx.com"
- "DOMAIN-SUFFIX,edu-cisco.org"
- "DOMAIN-SUFFIX,ef.com"
- "DOMAIN-SUFFIX,ef.edu"
- "DOMAIN-SUFFIX,eggertspiele.de"
- "DOMAIN-SUFFIX,ej.ru"
- "DOMAIN-SUFFIX,ekhokavkaza.com"
- "DOMAIN-SUFFIX,element14.com"
- "DOMAIN-SUFFIX,elements.envato.com"
- "DOMAIN-SUFFIX,elevenlabs.io"
- "DOMAIN-SUFFIX,eneba.com"
- "DOMAIN-SUFFIX,epidemz.net.co"
- "DOMAIN-SUFFIX,eporner.com"
- "DOMAIN-SUFFIX,espreso.tv"
- "DOMAIN-SUFFIX,etahub.com"
- "DOMAIN-SUFFIX,etsy.com"
- "DOMAIN-SUFFIX,euronews.com"
- "DOMAIN-SUFFIX,europesays.com"
- "DOMAIN-SUFFIX,euroradio.fm"
- "DOMAIN-SUFFIX,eutrp.eu"
- "DOMAIN-SUFFIX,everand.com"
- "DOMAIN-SUFFIX,exchanger.bits.media"
- "DOMAIN-SUFFIX,exler.es"
- "DOMAIN-SUFFIX,expandrive.com"
- "DOMAIN-SUFFIX,expres.online"
- "DOMAIN-SUFFIX,extremetech.com"
- "DOMAIN-SUFFIX,f1.com"
- "DOMAIN-SUFFIX,f95-zone.to"
- "DOMAIN-SUFFIX,facebook.com"
- "DOMAIN-SUFFIX,facebook.net"
- "DOMAIN-SUFFIX,fansly.com"
- "DOMAIN-SUFFIX,fapello.com"
- "DOMAIN-SUFFIX,fast-torrent.club"
- "DOMAIN-SUFFIX,fast.com"
- "DOMAIN-SUFFIX,fastpic.org"
- "DOMAIN-SUFFIX,fb.com"
- "DOMAIN-SUFFIX,fbcdn.net"
- "DOMAIN-SUFFIX,fbsbx.com"
- "DOMAIN-SUFFIX,ficbook.net"
- "DOMAIN-SUFFIX,filebin.net"
- "DOMAIN-SUFFIX,filmitorrent.net"
- "DOMAIN-SUFFIX,filmix.ac"
- "DOMAIN-SUFFIX,filmix.biz"
- "DOMAIN-SUFFIX,filmix.day"
- "DOMAIN-SUFFIX,filmix.fan"
- "DOMAIN-SUFFIX,filmix.fm"
- "DOMAIN-SUFFIX,filmix.la"
- "DOMAIN-SUFFIX,fivetran.com"
- "DOMAIN-SUFFIX,flibusta.is"
- "DOMAIN-SUFFIX,flibusta.net"
- "DOMAIN-SUFFIX,flipboard.com"
- "DOMAIN-SUFFIX,flir.com"
- "DOMAIN-SUFFIX,flir.eu"
- "DOMAIN-SUFFIX,flisland.net"
- "DOMAIN-SUFFIX,flourish.studio"
- "DOMAIN-SUFFIX,fls.guru"
- "DOMAIN-SUFFIX,fluke.com"
- "DOMAIN-SUFFIX,flukenetworks.com"
- "DOMAIN-SUFFIX,flyertalk.com"
- "DOMAIN-SUFFIX,fn-volga.ru"
- "DOMAIN-SUFFIX,fonge.org"
- "DOMAIN-SUFFIX,footballapi.pulselive.com"
- "DOMAIN-SUFFIX,force-user-content.com"
- "DOMAIN-SUFFIX,force.com"
- "DOMAIN-SUFFIX,forklog.com"
- "DOMAIN-SUFFIX,formula1.com"
- "DOMAIN-SUFFIX,fortanga.org"
- "DOMAIN-SUFFIX,forum.netgate.com"
- "DOMAIN-SUFFIX,forum.ru-board.com"
- "DOMAIN-SUFFIX,foxnews.com"
- "DOMAIN-SUFFIX,framer.app"
- "DOMAIN-SUFFIX,framer.com"
- "DOMAIN-SUFFIX,framercanvas.com"
- "DOMAIN-SUFFIX,framercdn.com"
- "DOMAIN-SUFFIX,framerstatic.com"
- "DOMAIN-SUFFIX,framerusercontent.com"
- "DOMAIN-SUFFIX,freedomletters.org"
- "DOMAIN-SUFFIX,freeimages.com"
- "DOMAIN-SUFFIX,freemedia.io"
- "DOMAIN-SUFFIX,freeones.com"
- "DOMAIN-SUFFIX,fxnetworks.com"
- "DOMAIN-SUFFIX,g2a.com"
- "DOMAIN-SUFFIX,gagadget.com"
- "DOMAIN-SUFFIX,gamedistribution.com"
- "DOMAIN-SUFFIX,gamesrepack.com"
- "DOMAIN-SUFFIX,gamestop.com"
- "DOMAIN-SUFFIX,gaming.amazon.com"
- "DOMAIN-SUFFIX,geforcenow.com"
- "DOMAIN-SUFFIX,gelbooru.com"
- "DOMAIN-SUFFIX,genspark.ai"
- "DOMAIN-SUFFIX,geolocation.onetrust.com"
- "DOMAIN-SUFFIX,germania.one"
- "DOMAIN-SUFFIX,getoutline.com"
- "DOMAIN-SUFFIX,getoutline.org"
- "DOMAIN-SUFFIX,gfn.am"
- "DOMAIN-SUFFIX,ggpht.com"
- "DOMAIN-SUFFIX,ghostrc.game.idtech.services"
- "DOMAIN-SUFFIX,gifyu.com"
- "DOMAIN-SUFFIX,git.new"
- "DOMAIN-SUFFIX,glavred.info"
- "DOMAIN-SUFFIX,glavred.net"
- "DOMAIN-SUFFIX,global.fncstatic.com"
- "DOMAIN-SUFFIX,glpals.com"
- "DOMAIN-SUFFIX,godaddy.com"
- "DOMAIN-SUFFIX,gofile.io"
- "DOMAIN-SUFFIX,gofund.me"
- "DOMAIN-SUFFIX,gofundme.com"
- "DOMAIN-SUFFIX,golosameriki.com"
- "DOMAIN-SUFFIX,gonift.com"
- "DOMAIN-SUFFIX,gonitro.com"
- "DOMAIN-SUFFIX,goodreads.com"
- "DOMAIN-SUFFIX,googlevideo.com"
- "DOMAIN-SUFFIX,gpsonextra.net"
- "DOMAIN-SUFFIX,gpu-monkey.com"
- "DOMAIN-SUFFIX,gql.twitch.tv"
- "DOMAIN-SUFFIX,gr-assets.com"
- "DOMAIN-SUFFIX,grafana.com"
- "DOMAIN-SUFFIX,grani.ru"
- "DOMAIN-SUFFIX,graty.me"
- "DOMAIN-SUFFIX,graylog.org"
- "DOMAIN-SUFFIX,grizzlysms.com"
- "DOMAIN-SUFFIX,grok.com"
- "DOMAIN-SUFFIX,grok.x.com"
- "DOMAIN-SUFFIX,groq.com"
- "DOMAIN-SUFFIX,groupon.com"
- "DOMAIN-SUFFIX,guilded.gg"
- "DOMAIN-SUFFIX,gulagu.net"
- "DOMAIN-SUFFIX,habr.com"
- "DOMAIN-SUFFIX,hackernoon.com"
- "DOMAIN-SUFFIX,hackmd.io"
- "DOMAIN-SUFFIX,halooglasi.com"
- "DOMAIN-SUFFIX,hashicorp.com"
- "DOMAIN-SUFFIX,haydaygame.com"
- "DOMAIN-SUFFIX,hbomax.com"
- "DOMAIN-SUFFIX,hc-ping.com"
- "DOMAIN-SUFFIX,hchk.io"
- "DOMAIN-SUFFIX,hd-rezka.tv"
- "DOMAIN-SUFFIX,hdkinoteatr.com"
- "DOMAIN-SUFFIX,hdrezka.ac"
- "DOMAIN-SUFFIX,hdrezka.ag"
- "DOMAIN-SUFFIX,hdrezka.app"
- "DOMAIN-SUFFIX,hdrezka.me"
- "DOMAIN-SUFFIX,hdrezka.tech"
- "DOMAIN-SUFFIX,hdrezka.tv"
- "DOMAIN-SUFFIX,hdrzk.org"
- "DOMAIN-SUFFIX,hdstudio.org"
- "DOMAIN-SUFFIX,healthline.com"
- "DOMAIN-SUFFIX,hentai-foundry.com"
- "DOMAIN-SUFFIX,herokucdn.com"
- "DOMAIN-SUFFIX,hetzner.com"
- "DOMAIN-SUFFIX,hitomi.la"
- "DOMAIN-SUFFIX,hollisterco.com"
- "DOMAIN-SUFFIX,holod.media"
- "DOMAIN-SUFFIX,home-connect.com"
- "DOMAIN-SUFFIX,home.by.me"
- "DOMAIN-SUFFIX,hostgator.com"
- "DOMAIN-SUFFIX,hostinger.com"
- "DOMAIN-SUFFIX,hotels.com"
- "DOMAIN-SUFFIX,housebrand.com"
- "DOMAIN-SUFFIX,hqporner.com"
- "DOMAIN-SUFFIX,hromadske.ua"
- "DOMAIN-SUFFIX,hs.fi"
- "DOMAIN-SUFFIX,htmhell.dev"
- "DOMAIN-SUFFIX,httptoolkit.com"
- "DOMAIN-SUFFIX,hume.ai"
- "DOMAIN-SUFFIX,hybrid-analysis.com"
- "DOMAIN-SUFFIX,i.sakh.com"
- "DOMAIN-SUFFIX,ibm.com"
- "DOMAIN-SUFFIX,ibytedtos.com"
- "DOMAIN-SUFFIX,idelreal.org"
- "DOMAIN-SUFFIX,iditelesombase.org"
- "DOMAIN-SUFFIX,idolcomplex.com"
- "DOMAIN-SUFFIX,iedb.org"
- "DOMAIN-SUFFIX,ig.me"
- "DOMAIN-SUFFIX,ign.com"
- "DOMAIN-SUFFIX,iherb.com"
- "DOMAIN-SUFFIX,iichan.hk"
- "DOMAIN-SUFFIX,ikea.com"
- "DOMAIN-SUFFIX,ilook.tv"
- "DOMAIN-SUFFIX,image.tmdb.org"
- "DOMAIN-SUFFIX,imgur.com"
- "DOMAIN-SUFFIX,important-stories.com"
- "DOMAIN-SUFFIX,incy.cc"
- "DOMAIN-SUFFIX,indeed.com"
- "DOMAIN-SUFFIX,indiehackers.com"
- "DOMAIN-SUFFIX,infineon.com"
- "DOMAIN-SUFFIX,insearch.site"
- "DOMAIN-SUFFIX,instagram.com"
- "DOMAIN-SUFFIX,install.launcher.omniverse.nvidia.com"
- "DOMAIN-SUFFIX,intel.com"
- "DOMAIN-SUFFIX,intel.de"
- "DOMAIN-SUFFIX,intel.nl"
- "DOMAIN-SUFFIX,intelix.sophos.com"
- "DOMAIN-SUFFIX,interactivebrokers.co.uk"
- "DOMAIN-SUFFIX,intercom.io"
- "DOMAIN-SUFFIX,interfax.com.ua"
- "DOMAIN-SUFFIX,internalfb.com"
- "DOMAIN-SUFFIX,intuit.com"
- "DOMAIN-SUFFIX,intuitibits.com"
- "DOMAIN-SUFFIX,ionos.com"
- "DOMAIN-SUFFIX,iptv.online"
- "DOMAIN-SUFFIX,is.fi"
- "DOMAIN-SUFFIX,istories.media"
- "DOMAIN-SUFFIX,itch.io"
- "DOMAIN-SUFFIX,itninja.com"
- "DOMAIN-SUFFIX,itsmycity.ru"
- "DOMAIN-SUFFIX,jamf.com"
- "DOMAIN-SUFFIX,jetbrains.com"
- "DOMAIN-SUFFIX,jetbrains.space"
- "DOMAIN-SUFFIX,jetbrains.team"
- "DOMAIN-SUFFIX,jnn-pa.googleapis.com"
- "DOMAIN-SUFFIX,joesandbox.com"
- "DOMAIN-SUFFIX,jskor.ill.in.ua"
- "DOMAIN-SUFFIX,jut-su.net"
- "DOMAIN-SUFFIX,jut.su"
- "DOMAIN-SUFFIX,kaktus.media"
- "DOMAIN-SUFFIX,kaleido.ai"
- "DOMAIN-SUFFIX,kamatera.com"
- "DOMAIN-SUFFIX,kara.su"
- "DOMAIN-SUFFIX,kasparov.ru"
- "DOMAIN-SUFFIX,kavkaz-uzel.eu"
- "DOMAIN-SUFFIX,kavkazr.com"
- "DOMAIN-SUFFIX,kemono.su"
- "DOMAIN-SUFFIX,keysight.com"
- "DOMAIN-SUFFIX,kilo.ai"
- "DOMAIN-SUFFIX,kilocode.ai"
- "DOMAIN-SUFFIX,kino.pub"
- "DOMAIN-SUFFIX,kinogo.ec"
- "DOMAIN-SUFFIX,kinogo.la"
- "DOMAIN-SUFFIX,kinogo.uk"
- "DOMAIN-SUFFIX,kinopub.me"
- "DOMAIN-SUFFIX,kinovod.net"
- "DOMAIN-SUFFIX,kinozal.guru"
- "DOMAIN-SUFFIX,kinozal.me"
- "DOMAIN-SUFFIX,kinozal.tv"
- "DOMAIN-SUFFIX,kinozaltv.life"
- "DOMAIN-SUFFIX,klarna.com"
- "DOMAIN-SUFFIX,kmail-lists.com"
- "DOMAIN-SUFFIX,knews.kg"
- "DOMAIN-SUFFIX,knowyourmeme.com"
- "DOMAIN-SUFFIX,kolsar.org"
- "DOMAIN-SUFFIX,kor.ill.in.ua"
- "DOMAIN-SUFFIX,korrespondent.net"
- "DOMAIN-SUFFIX,kovcheg.live"
- "DOMAIN-SUFFIX,krymr.com"
- "DOMAIN-SUFFIX,kupujemprodajem.com"
- "DOMAIN-SUFFIX,kym-cdn.com"
- "DOMAIN-SUFFIX,lambdalabs.com"
- "DOMAIN-SUFFIX,lamcdn.net"
- "DOMAIN-SUFFIX,langdock.com"
- "DOMAIN-SUFFIX,lantern.io"
- "DOMAIN-SUFFIX,last.fm"
- "DOMAIN-SUFFIX,ldoceonline.com"
- "DOMAIN-SUFFIX,le-production.tv"
- "DOMAIN-SUFFIX,leafletjs.com"
- "DOMAIN-SUFFIX,legalshield.com"
- "DOMAIN-SUFFIX,lgeapi.com"
- "DOMAIN-SUFFIX,lgthinq.com"
- "DOMAIN-SUFFIX,lib.rus.ec"
- "DOMAIN-SUFFIX,libgen.li"
- "DOMAIN-SUFFIX,licdn.com"
- "DOMAIN-SUFFIX,lidarr.audio"
- "DOMAIN-SUFFIX,lifehacker.com"
- "DOMAIN-SUFFIX,liga.net"
- "DOMAIN-SUFFIX,lightning.ai"
- "DOMAIN-SUFFIX,linear.app"
- "DOMAIN-SUFFIX,lingq.com"
- "DOMAIN-SUFFIX,linkedin.com"
- "DOMAIN-SUFFIX,linktr.ee"
- "DOMAIN-SUFFIX,livetv.sx"
- "DOMAIN-SUFFIX,liveuamap.com"
- "DOMAIN-SUFFIX,locals.md"
- "DOMAIN-SUFFIX,lolz.guru"
- "DOMAIN-SUFFIX,lookerstudio.google.com"
- "DOMAIN-SUFFIX,lostfilm.download"
- "DOMAIN-SUFFIX,lostfilm.tv"
- "DOMAIN-SUFFIX,lostfilm.tw"
- "DOMAIN-SUFFIX,lostfilm.uno"
- "DOMAIN-SUFFIX,lostfilmtv2.site"
- "DOMAIN-SUFFIX,lu4.org"
- "DOMAIN-SUFFIX,lucid.app"
- "DOMAIN-SUFFIX,lyst.com"
- "DOMAIN-SUFFIX,magaz.global"
- "DOMAIN-SUFFIX,mail-api.proton.me"
- "DOMAIN-SUFFIX,mailerlite.com"
- "DOMAIN-SUFFIX,mailfence.com"
- "DOMAIN-SUFFIX,mailinator.com"
- "DOMAIN-SUFFIX,mailo.com"
- "DOMAIN-SUFFIX,make.com"
- "DOMAIN-SUFFIX,malwarebytes.com"
- "DOMAIN-SUFFIX,manga-chan.me"
- "DOMAIN-SUFFIX,mangadex.org"
- "DOMAIN-SUFFIX,mangahub.ru"
- "DOMAIN-SUFFIX,mangapark.net"
- "DOMAIN-SUFFIX,manus.im"
- "DOMAIN-SUFFIX,manybooks.net"
- "DOMAIN-SUFFIX,manyvids.com"
- "DOMAIN-SUFFIX,marvelsnap.com"
- "DOMAIN-SUFFIX,mashable.com"
- "DOMAIN-SUFFIX,mattermost.com"
- "DOMAIN-SUFFIX,max.com"
- "DOMAIN-SUFFIX,mbk-news.appspot.com"
- "DOMAIN-SUFFIX,mediazona.ca"
- "DOMAIN-SUFFIX,medicalnewstoday.com"
- "DOMAIN-SUFFIX,medium.com"
- "DOMAIN-SUFFIX,meduza.io"
- "DOMAIN-SUFFIX,meetup.com"
- "DOMAIN-SUFFIX,mega.nz"
- "DOMAIN-SUFFIX,megapeer.ru"
- "DOMAIN-SUFFIX,megapeer.vip"
- "DOMAIN-SUFFIX,merezha.co"
- "DOMAIN-SUFFIX,meta.com"
- "DOMAIN-SUFFIX,metacritic.com"
- "DOMAIN-SUFFIX,metal-archives.com"
- "DOMAIN-SUFFIX,metla.press"
- "DOMAIN-SUFFIX,metopera.org"
- "DOMAIN-SUFFIX,mezha.net"
- "DOMAIN-SUFFIX,middlewareinventory.com"
- "DOMAIN-SUFFIX,mignews.com"
- "DOMAIN-SUFFIX,mintmobile.com"
- "DOMAIN-SUFFIX,miracleptr.wordpress.com"
- "DOMAIN-SUFFIX,mixcloud.com"
- "DOMAIN-SUFFIX,mmcdn.com"
- "DOMAIN-SUFFIX,modrinth.com"
- "DOMAIN-SUFFIX,mongodb.com"
- "DOMAIN-SUFFIX,monolisa.dev"
- "DOMAIN-SUFFIX,monoprice.com"
- "DOMAIN-SUFFIX,more.fm"
- "DOMAIN-SUFFIX,moscowtimes.ru"
- "DOMAIN-SUFFIX,mouser.com"
- "DOMAIN-SUFFIX,mouser.fi"
- "DOMAIN-SUFFIX,mssg.me"
- "DOMAIN-SUFFIX,mullvad.net"
- "DOMAIN-SUFFIX,multisim.com"
- "DOMAIN-SUFFIX,multporn.net"
- "DOMAIN-SUFFIX,muscdn.com"
- "DOMAIN-SUFFIX,musical.ly"
- "DOMAIN-SUFFIX,musicbrainz.org"
- "DOMAIN-SUFFIX,musixmatch.com"
- "DOMAIN-SUFFIX,mw2.wiki"
- "DOMAIN-SUFFIX,myanimelist.net"
- "DOMAIN-SUFFIX,mydoramy.club"
- "DOMAIN-SUFFIX,myheritage.com"
- "DOMAIN-SUFFIX,myjetbrains.com"
- "DOMAIN-SUFFIX,myparallels.com"
- "DOMAIN-SUFFIX,myqrcode.com"
- "DOMAIN-SUFFIX,navalny.com"
- "DOMAIN-SUFFIX,nba.com"
- "DOMAIN-SUFFIX,neformat.com.ua"
- "DOMAIN-SUFFIX,neo4j.com"
- "DOMAIN-SUFFIX,netacad.com"
- "DOMAIN-SUFFIX,netapp.com"
- "DOMAIN-SUFFIX,netflix.ca"
- "DOMAIN-SUFFIX,netflix.com"
- "DOMAIN-SUFFIX,netflix.net"
- "DOMAIN-SUFFIX,netflixinvestor.com"
- "DOMAIN-SUFFIX,netflixtechblog.com"
- "DOMAIN-SUFFIX,netlify.com"
- "DOMAIN-SUFFIX,networksolutions.com"
- "DOMAIN-SUFFIX,new.abb.com"
- "DOMAIN-SUFFIX,newark.com"
- "DOMAIN-SUFFIX,news.google.com"
- "DOMAIN-SUFFIX,newsroom.porsche.com"
- "DOMAIN-SUFFIX,newsru.co.il"
- "DOMAIN-SUFFIX,newsru.com"
- "DOMAIN-SUFFIX,newtimes.ru"
- "DOMAIN-SUFFIX,nfl.com"
- "DOMAIN-SUFFIX,nflxext.com"
- "DOMAIN-SUFFIX,nflximg.com"
- "DOMAIN-SUFFIX,nflximg.net"
- "DOMAIN-SUFFIX,nflxsearch.net"
- "DOMAIN-SUFFIX,nflxso.net"
- "DOMAIN-SUFFIX,nflxvideo.net"
- "DOMAIN-SUFFIX,ngrok.com"
- "DOMAIN-SUFFIX,nhentai.com"
- "DOMAIN-SUFFIX,nhentai.net"
- "DOMAIN-SUFFIX,nhl.com"
- "DOMAIN-SUFFIX,ni.com"
- "DOMAIN-SUFFIX,nih.gov"
- "DOMAIN-SUFFIX,nike.com"
- "DOMAIN-SUFFIX,nippon.com"
- "DOMAIN-SUFFIX,nitropdf.com"
- "DOMAIN-SUFFIX,nnmclub.to"
- "DOMAIN-SUFFIX,nnmstatic.win"
- "DOMAIN-SUFFIX,nordaccount.com"
- "DOMAIN-SUFFIX,nordcdn.com"
- "DOMAIN-SUFFIX,nordvpn.com"
- "DOMAIN-SUFFIX,notepad-plus-plus.org"
- "DOMAIN-SUFFIX,notion-emojis.s3-us-west-2.amazonaws.com"
- "DOMAIN-SUFFIX,notion-static.com"
- "DOMAIN-SUFFIX,notion.com"
- "DOMAIN-SUFFIX,notion.new"
- "DOMAIN-SUFFIX,notion.site"
- "DOMAIN-SUFFIX,notion.so"
- "DOMAIN-SUFFIX,novaline.fm"
- "DOMAIN-SUFFIX,novaya.no"
- "DOMAIN-SUFFIX,novayagazeta.eu"
- "DOMAIN-SUFFIX,novayagazeta.ru"
- "DOMAIN-SUFFIX,novyny.live"
- "DOMAIN-SUFFIX,ntc.party"
- "DOMAIN-SUFFIX,ntp.msn.com"
- "DOMAIN-SUFFIX,nude-moon.org"
- "DOMAIN-SUFFIX,nxp.com"
- "DOMAIN-SUFFIX,oaistatic.com"
- "DOMAIN-SUFFIX,oaiusercontent.com"
- "DOMAIN-SUFFIX,obozrevatel.com"
- "DOMAIN-SUFFIX,ocstore.com"
- "DOMAIN-SUFFIX,octopus.do"
- "DOMAIN-SUFFIX,oculus.com"
- "DOMAIN-SUFFIX,ohmyswift.ru"
- "DOMAIN-SUFFIX,oi.legal"
- "DOMAIN-SUFFIX,okx.com"
- "DOMAIN-SUFFIX,olx.ua"
- "DOMAIN-SUFFIX,omnissa.com"
- "DOMAIN-SUFFIX,omv-extras.org"
- "DOMAIN-SUFFIX,onfastspring.com"
- "DOMAIN-SUFFIX,onlinesim.io"
- "DOMAIN-SUFFIX,onshape.com"
- "DOMAIN-SUFFIX,openai.com"
- "DOMAIN-SUFFIX,openh264.org"
- "DOMAIN-SUFFIX,openmedia.io"
- "DOMAIN-SUFFIX,openrouter.ai"
- "DOMAIN-SUFFIX,opensanctions.org"
- "DOMAIN-SUFFIX,opensea.io"
- "DOMAIN-SUFFIX,opentrackr.org"
- "DOMAIN-SUFFIX,opposition-news.com"
- "DOMAIN-SUFFIX,oracle.com"
- "DOMAIN-SUFFIX,oraclecloud.com"
- "DOMAIN-SUFFIX,ovd.info"
- "DOMAIN-SUFFIX,ovd.legal"
- "DOMAIN-SUFFIX,ovd.news"
- "DOMAIN-SUFFIX,ovdinfo.org"
- "DOMAIN-SUFFIX,ozodi.org"
- "DOMAIN-SUFFIX,paddle.com"
- "DOMAIN-SUFFIX,paddlestatus.com"
- "DOMAIN-SUFFIX,pages.dev"
- "DOMAIN-SUFFIX,pandasecurity.com"
- "DOMAIN-SUFFIX,pap.pl"
- "DOMAIN-SUFFIX,paperpaper.io"
- "DOMAIN-SUFFIX,paperpaper.ru"
- "DOMAIN-SUFFIX,parallels.cn"
- "DOMAIN-SUFFIX,parallels.com"
- "DOMAIN-SUFFIX,parallels.net"
- "DOMAIN-SUFFIX,parallelsaccess.com"
- "DOMAIN-SUFFIX,paritydeals.com"
- "DOMAIN-SUFFIX,patreon.com"
- "DOMAIN-SUFFIX,patreonusercontent.com"
- "DOMAIN-SUFFIX,patriot.dp.ua"
- "DOMAIN-SUFFIX,paywithmoon.com"
- "DOMAIN-SUFFIX,pb.wtf"
- "DOMAIN-SUFFIX,pcgamesn.com"
- "DOMAIN-SUFFIX,pcmag.com"
- "DOMAIN-SUFFIX,penguin.com"
- "DOMAIN-SUFFIX,penguinrandomhouse.com"
- "DOMAIN-SUFFIX,periscope.tv"
- "DOMAIN-SUFFIX,pexels.com"
- "DOMAIN-SUFFIX,philiascans.org"
- "DOMAIN-SUFFIX,phncdn.com"
- "DOMAIN-SUFFIX,phncdn.com.sds.rncdn7.com"
- "DOMAIN-SUFFIX,pimpletv.ru"
- "DOMAIN-SUFFIX,pingdom.com"
- "DOMAIN-SUFFIX,piratbit.top"
- "DOMAIN-SUFFIX,pixabay.com"
- "DOMAIN-SUFFIX,pixiv.net"
- "DOMAIN-SUFFIX,pkgs.tailscale.com"
- "DOMAIN-SUFFIX,platform.activestate.com"
- "DOMAIN-SUFFIX,playboy.com"
- "DOMAIN-SUFFIX,plugshare.com"
- "DOMAIN-SUFFIX,polit.ru"
- "DOMAIN-SUFFIX,politico.eu"
- "DOMAIN-SUFFIX,politiken.dk"
- "DOMAIN-SUFFIX,polymarket.com"
- "DOMAIN-SUFFIX,pornhub.com"
- "DOMAIN-SUFFIX,pornhub.org"
- "DOMAIN-SUFFIX,pornolab.net"
- "DOMAIN-SUFFIX,portal.lviv.ua"
- "DOMAIN-SUFFIX,posle.media"
- "DOMAIN-SUFFIX,posthog.com"
- "DOMAIN-SUFFIX,postimees.ee"
- "DOMAIN-SUFFIX,pravda.com"
- "DOMAIN-SUFFIX,pravda.com.ua"
- "DOMAIN-SUFFIX,premierleague.com"
- "DOMAIN-SUFFIX,primark.com"
- "DOMAIN-SUFFIX,primevideo.com"
- "DOMAIN-SUFFIX,primevue.org"
- "DOMAIN-SUFFIX,privatekeys.pw"
- "DOMAIN-SUFFIX,prnt.sc"
- "DOMAIN-SUFFIX,proactivebackend-pa.googleapis.com"
- "DOMAIN-SUFFIX,production-openaicom-storage.azureedge.net"
- "DOMAIN-SUFFIX,proekt.media"
- "DOMAIN-SUFFIX,profitwell.com"
- "DOMAIN-SUFFIX,pronouns.page"
- "DOMAIN-SUFFIX,prosleduetmedia.com"
- "DOMAIN-SUFFIX,prostovpn.org"
- "DOMAIN-SUFFIX,proton.me"
- "DOMAIN-SUFFIX,protonvpn.com"
- "DOMAIN-SUFFIX,provereno.media"
- "DOMAIN-SUFFIX,prowlarr.com"
- "DOMAIN-SUFFIX,pscp.tv"
- "DOMAIN-SUFFIX,psiphon.ca"
- "DOMAIN-SUFFIX,public.parsec.app"
- "DOMAIN-SUFFIX,pvpessence.com"
- "DOMAIN-SUFFIX,qobuz.com"
- "DOMAIN-SUFFIX,qodana.cloud"
- "DOMAIN-SUFFIX,qoder.com"
- "DOMAIN-SUFFIX,qt.io"
- "DOMAIN-SUFFIX,qualcomm.com"
- "DOMAIN-SUFFIX,quicknode.com"
- "DOMAIN-SUFFIX,quora.com"
- "DOMAIN-SUFFIX,quora.com.cdn.cloudflare.net"
- "DOMAIN-SUFFIX,qwant.com"
- "DOMAIN-SUFFIX,r4.err.ee"
- "DOMAIN-SUFFIX,radiojar.com"
- "DOMAIN-SUFFIX,radiosakharov.org"
- "DOMAIN-SUFFIX,radiosvoboda.org"
- "DOMAIN-SUFFIX,rbc.ua"
- "DOMAIN-SUFFIX,reactflow.dev"
- "DOMAIN-SUFFIX,realbooru.com"
- "DOMAIN-SUFFIX,realist.online"
- "DOMAIN-SUFFIX,recraft.ai"
- "DOMAIN-SUFFIX,reddxxx.com"
- "DOMAIN-SUFFIX,redgifs.com"
- "DOMAIN-SUFFIX,redis.io"
- "DOMAIN-SUFFIX,redislabs.com"
- "DOMAIN-SUFFIX,redshieldvpn.com"
- "DOMAIN-SUFFIX,refactoring.guru"
- "DOMAIN-SUFFIX,remna.st"
- "DOMAIN-SUFFIX,remove.bg"
- "DOMAIN-SUFFIX,render-state.to"
- "DOMAIN-SUFFIX,rentry.co"
- "DOMAIN-SUFFIX,rentry.org"
- "DOMAIN-SUFFIX,republic.ru"
- "DOMAIN-SUFFIX,research.net"
- "DOMAIN-SUFFIX,restream.io"
- "DOMAIN-SUFFIX,returnyoutubedislikeapi.com"
- "DOMAIN-SUFFIX,reve.art"
- "DOMAIN-SUFFIX,rezka-ua.in"
- "DOMAIN-SUFFIX,rezka.ag"
- "DOMAIN-SUFFIX,rezka.cc"
- "DOMAIN-SUFFIX,rezka.fi"
- "DOMAIN-SUFFIX,rezka.land"
- "DOMAIN-SUFFIX,rezka.my"
- "DOMAIN-SUFFIX,rezka.tv"
- "DOMAIN-SUFFIX,rezkify.com"
- "DOMAIN-SUFFIX,rezonans.media"
- "DOMAIN-SUFFIX,rf.dobrochan.net"
- "DOMAIN-SUFFIX,rferl.org"
- "DOMAIN-SUFFIX,rima.media"
- "DOMAIN-SUFFIX,riperam.org"
- "DOMAIN-SUFFIX,riseup.net"
- "DOMAIN-SUFFIX,roar-review.com"
- "DOMAIN-SUFFIX,root-nation.com"
- "DOMAIN-SUFFIX,roskomsvoboda.org"
- "DOMAIN-SUFFIX,rublacklist.net"
- "DOMAIN-SUFFIX,rule34.art"
- "DOMAIN-SUFFIX,rule34.us"
- "DOMAIN-SUFFIX,rule34.xxx"
- "DOMAIN-SUFFIX,rus.delfi.ee"
- "DOMAIN-SUFFIX,rus.jauns.lv"
- "DOMAIN-SUFFIX,ruscryde.net"
- "DOMAIN-SUFFIX,rustorka.com"
- "DOMAIN-SUFFIX,rutor.info"
- "DOMAIN-SUFFIX,rutor.is"
- "DOMAIN-SUFFIX,rutor.org"
- "DOMAIN-SUFFIX,rutracker.cc"
- "DOMAIN-SUFFIX,rutracker.net"
- "DOMAIN-SUFFIX,rutracker.org"
- "DOMAIN-SUFFIX,rutracker.wiki"
- "DOMAIN-SUFFIX,sakhalin.info"
- "DOMAIN-SUFFIX,sakharovfoundation.org"
- "DOMAIN-SUFFIX,salesforce-experience.com"
- "DOMAIN-SUFFIX,salesforce-hub.com"
- "DOMAIN-SUFFIX,salesforce-scrt.com"
- "DOMAIN-SUFFIX,salesforce-setup.com"
- "DOMAIN-SUFFIX,salesforce-sites.com"
- "DOMAIN-SUFFIX,salesforce.com"
- "DOMAIN-SUFFIX,salesforceiq.com"
- "DOMAIN-SUFFIX,salesforceliveagent.com"
- "DOMAIN-SUFFIX,sankakuapi.com"
- "DOMAIN-SUFFIX,sankakucomplex.com"
- "DOMAIN-SUFFIX,sankakustatic.com"
- "DOMAIN-SUFFIX,sap.com"
- "DOMAIN-SUFFIX,saverudata.net"
- "DOMAIN-SUFFIX,schneider-electric.com"
- "DOMAIN-SUFFIX,sci-hub.se"
- "DOMAIN-SUFFIX,sci-hub.st"
- "DOMAIN-SUFFIX,scrollrevealjs.org"
- "DOMAIN-SUFFIX,scryde.io"
- "DOMAIN-SUFFIX,scryde.net"
- "DOMAIN-SUFFIX,scryde.ru"
- "DOMAIN-SUFFIX,scryde.world"
- "DOMAIN-SUFFIX,scryde1.net"
- "DOMAIN-SUFFIX,scryde10.net"
- "DOMAIN-SUFFIX,scryde11.net"
- "DOMAIN-SUFFIX,scryde12.net"
- "DOMAIN-SUFFIX,scryde2.net"
- "DOMAIN-SUFFIX,scryde3.net"
- "DOMAIN-SUFFIX,scryde4.net"
- "DOMAIN-SUFFIX,scryde5.net"
- "DOMAIN-SUFFIX,scryde6.net"
- "DOMAIN-SUFFIX,scryde7.net"
- "DOMAIN-SUFFIX,scryde8.net"
- "DOMAIN-SUFFIX,scryde9.net"
- "DOMAIN-SUFFIX,sdxcentral.com"
- "DOMAIN-SUFFIX,se.com"
- "DOMAIN-SUFFIX,searchfloor.org"
- "DOMAIN-SUFFIX,seasonvar.ru"
- "DOMAIN-SUFFIX,seconddinnertech.com"
- "DOMAIN-SUFFIX,selezen.org"
- "DOMAIN-SUFFIX,semnasem.org"
- "DOMAIN-SUFFIX,semrush.com"
- "DOMAIN-SUFFIX,sentry.dev"
- "DOMAIN-SUFFIX,sentry.io"
- "DOMAIN-SUFFIX,sephora.com"
- "DOMAIN-SUFFIX,servarr.com"
- "DOMAIN-SUFFIX,severreal.org"
- "DOMAIN-SUFFIX,sfdcopens.com"
- "DOMAIN-SUFFIX,sharefile.com"
- "DOMAIN-SUFFIX,sharefile.io"
- "DOMAIN-SUFFIX,shikimori.me"
- "DOMAIN-SUFFIX,shikimori.one"
- "DOMAIN-SUFFIX,shinyhardware.co.uk"
- "DOMAIN-SUFFIX,shiza-project.com"
- "DOMAIN-SUFFIX,shop.gameloft.com"
- "DOMAIN-SUFFIX,showip.net"
- "DOMAIN-SUFFIX,sibreal.org"
- "DOMAIN-SUFFIX,signal.org"
- "DOMAIN-SUFFIX,sigsauer.com"
- "DOMAIN-SUFFIX,simplex.chat"
- "DOMAIN-SUFFIX,simplex.im"
- "DOMAIN-SUFFIX,simplix.info"
- "DOMAIN-SUFFIX,singlekey-id.com"
- "DOMAIN-SUFFIX,site.com"
- "DOMAIN-SUFFIX,siteground.com"
- "DOMAIN-SUFFIX,skat.media"
- "DOMAIN-SUFFIX,sketchup.com"
- "DOMAIN-SUFFIX,skiff.com"
- "DOMAIN-SUFFIX,skladchik.com"
- "DOMAIN-SUFFIX,sklatchiki.ru"
- "DOMAIN-SUFFIX,sky.com"
- "DOMAIN-SUFFIX,skycdp.com"
- "DOMAIN-SUFFIX,slashlib.me"
- "DOMAIN-SUFFIX,slavicsac.com"
- "DOMAIN-SUFFIX,slifki.biz"
- "DOMAIN-SUFFIX,smartbear.co"
- "DOMAIN-SUFFIX,smartbear.com"
- "DOMAIN-SUFFIX,smartdeploy.com"
- "DOMAIN-SUFFIX,sms-activate.io"
- "DOMAIN-SUFFIX,snapgametech.com"
- "DOMAIN-SUFFIX,snapgene.com"
- "DOMAIN-SUFFIX,sndcdn.com"
- "DOMAIN-SUFFIX,snort.org"
- "DOMAIN-SUFFIX,snyk.io"
- "DOMAIN-SUFFIX,sobesednik.com"
- "DOMAIN-SUFFIX,solarwinds.com"
- "DOMAIN-SUFFIX,sonara.ai"
- "DOMAIN-SUFFIX,sophos.com"
- "DOMAIN-SUFFIX,sora.com"
- "DOMAIN-SUFFIX,sotaproject.com"
- "DOMAIN-SUFFIX,soundcloud.cloud"
- "DOMAIN-SUFFIX,soundcloud.com"
- "DOMAIN-SUFFIX,sovetromantica.com"
- "DOMAIN-SUFFIX,spacelift.io"
- "DOMAIN-SUFFIX,speedtest.net"
- "DOMAIN-SUFFIX,spektr.press"
- "DOMAIN-SUFFIX,spiceworks.com"
- "DOMAIN-SUFFIX,spiegel.de"
- "DOMAIN-SUFFIX,spitfireaudio.com"
- "DOMAIN-SUFFIX,spotify.com"
- "DOMAIN-SUFFIX,spreadthesign.com"
- "DOMAIN-SUFFIX,sputnikipogrom.com"
- "DOMAIN-SUFFIX,squadbustersgame.com"
- "DOMAIN-SUFFIX,squareup.com"
- "DOMAIN-SUFFIX,squietpc.com"
- "DOMAIN-SUFFIX,startmail.com"
- "DOMAIN-SUFFIX,startpage.com"
- "DOMAIN-SUFFIX,static.lostfilm.top"
- "DOMAIN-SUFFIX,statology.org"
- "DOMAIN-SUFFIX,steamstat.info"
- "DOMAIN-SUFFIX,strana.news"
- "DOMAIN-SUFFIX,strana.today"
- "DOMAIN-SUFFIX,strava.com"
- "DOMAIN-SUFFIX,streamable.com"
- "DOMAIN-SUFFIX,suggestqueries.google.com"
- "DOMAIN-SUFFIX,supercell.com"
- "DOMAIN-SUFFIX,supersliv.biz"
- "DOMAIN-SUFFIX,support.anydesk.com"
- "DOMAIN-SUFFIX,support.xerox.com"
- "DOMAIN-SUFFIX,surfshark.com"
- "DOMAIN-SUFFIX,surveymonkey.com"
- "DOMAIN-SUFFIX,suspilne.media"
- "DOMAIN-SUFFIX,svidomi.in.ua"
- "DOMAIN-SUFFIX,svoboda.org"
- "DOMAIN-SUFFIX,svoi.kr.ua"
- "DOMAIN-SUFFIX,svtv.org"
- "DOMAIN-SUFFIX,swagger.io"
- "DOMAIN-SUFFIX,swapd.co"
- "DOMAIN-SUFFIX,swissinfo.ch"
- "DOMAIN-SUFFIX,synoforum.com"
- "DOMAIN-SUFFIX,syslog-ng.com"
- "DOMAIN-SUFFIX,t-invariant.org"
- "DOMAIN-SUFFIX,t.co"
- "DOMAIN-SUFFIX,tableau.com"
- "DOMAIN-SUFFIX,talosintelligence.com"
- "DOMAIN-SUFFIX,tayga.info"
- "DOMAIN-SUFFIX,te-st.org"
- "DOMAIN-SUFFIX,teamviewer.com"
- "DOMAIN-SUFFIX,techbargains.com"
- "DOMAIN-SUFFIX,telegraf.by"
- "DOMAIN-SUFFIX,telegraf.news"
- "DOMAIN-SUFFIX,telegraph.co.uk"
- "DOMAIN-SUFFIX,telemetr.io"
- "DOMAIN-SUFFIX,tellapart.com"
- "DOMAIN-SUFFIX,tempmail.plus"
- "DOMAIN-SUFFIX,temu.com"
- "DOMAIN-SUFFIX,terraform.io"
- "DOMAIN-SUFFIX,the-village.ru"
- "DOMAIN-SUFFIX,theaudiodb.com"
- "DOMAIN-SUFFIX,thebarentsobserver.com"
- "DOMAIN-SUFFIX,thebell.io"
- "DOMAIN-SUFFIX,theins.press"
- "DOMAIN-SUFFIX,theins.ru"
- "DOMAIN-SUFFIX,themoscowtimes.com"
- "DOMAIN-SUFFIX,themoviedb.org"
- "DOMAIN-SUFFIX,thepiratebay.org"
- "DOMAIN-SUFFIX,theporndude.com"
- "DOMAIN-SUFFIX,thetruestory.news"
- "DOMAIN-SUFFIX,thetvdb.com"
- "DOMAIN-SUFFIX,threads.com"
- "DOMAIN-SUFFIX,threads.net"
- "DOMAIN-SUFFIX,threema.ch"
- "DOMAIN-SUFFIX,ti.com"
- "DOMAIN-SUFFIX,tidal.com"
- "DOMAIN-SUFFIX,tik-tokapi.com"
- "DOMAIN-SUFFIX,tiktok.com"
- "DOMAIN-SUFFIX,tiktokcdn-eu.com"
- "DOMAIN-SUFFIX,tiktokcdn-us.com"
- "DOMAIN-SUFFIX,tiktokcdn.com"
- "DOMAIN-SUFFIX,tiktokd.net"
- "DOMAIN-SUFFIX,tiktokd.org"
- "DOMAIN-SUFFIX,tiktokv.com"
- "DOMAIN-SUFFIX,tiktokv.eu"
- "DOMAIN-SUFFIX,tiktokv.us"
- "DOMAIN-SUFFIX,tiktokw.us"
- "DOMAIN-SUFFIX,timberland.de"
- "DOMAIN-SUFFIX,tiptop-vpn.com"
- "DOMAIN-SUFFIX,tmdb-image-prod.b-cdn.net"
- "DOMAIN-SUFFIX,tmdb.com"
- "DOMAIN-SUFFIX,tmdb.org"
- "DOMAIN-SUFFIX,toolbox.app"
- "DOMAIN-SUFFIX,torproject.org"
- "DOMAIN-SUFFIX,torrenteditor.com"
- "DOMAIN-SUFFIX,torrentgalaxy.to"
- "DOMAIN-SUFFIX,trae.ai"
- "DOMAIN-SUFFIX,trailblazer.me"
- "DOMAIN-SUFFIX,trailhead.com"
- "DOMAIN-SUFFIX,transferwise.com"
- "DOMAIN-SUFFIX,trellix.com"
- "DOMAIN-SUFFIX,tria.ge"
- "DOMAIN-SUFFIX,trueblackmetalradio.com"
- "DOMAIN-SUFFIX,truthsocial.com"
- "DOMAIN-SUFFIX,tsmc.com"
- "DOMAIN-SUFFIX,ttwstatic.com"
- "DOMAIN-SUFFIX,turbobit.net"
- "DOMAIN-SUFFIX,tuta.com"
- "DOMAIN-SUFFIX,tuta.io"
- "DOMAIN-SUFFIX,tutanota.com"
- "DOMAIN-SUFFIX,tvdevinfo.com"
- "DOMAIN-SUFFIX,tvfreedom.io"
- "DOMAIN-SUFFIX,tvrain.ru"
- "DOMAIN-SUFFIX,tvrain.tv"
- "DOMAIN-SUFFIX,tweetdeck.com"
- "DOMAIN-SUFFIX,twimg.com"
- "DOMAIN-SUFFIX,twin.me"
- "DOMAIN-SUFFIX,twinlife-systems.com"
- "DOMAIN-SUFFIX,twinme.com"
- "DOMAIN-SUFFIX,twirpx.com"
- "DOMAIN-SUFFIX,twitpic.com"
- "DOMAIN-SUFFIX,twitter.biz"
- "DOMAIN-SUFFIX,twitter.com"
- "DOMAIN-SUFFIX,twitter.jp"
- "DOMAIN-SUFFIX,twittercommunity.com"
- "DOMAIN-SUFFIX,twitterflightschool.com"
- "DOMAIN-SUFFIX,twitterinc.com"
- "DOMAIN-SUFFIX,twitteroauth.com"
- "DOMAIN-SUFFIX,twitterstat.us"
- "DOMAIN-SUFFIX,twtrdns.net"
- "DOMAIN-SUFFIX,twttr.com"
- "DOMAIN-SUFFIX,twttr.net"
- "DOMAIN-SUFFIX,twvid.com"
- "DOMAIN-SUFFIX,typing.com"
- "DOMAIN-SUFFIX,uaudio.com"
- "DOMAIN-SUFFIX,ui.ill.in.ua"
- "DOMAIN-SUFFIX,uizard.io"
- "DOMAIN-SUFFIX,ukdevilz.com"
- "DOMAIN-SUFFIX,ukr.net"
- "DOMAIN-SUFFIX,ukr.radio"
- "DOMAIN-SUFFIX,ukrainer.net"
- "DOMAIN-SUFFIX,ukrinform.net"
- "DOMAIN-SUFFIX,ukrtelcdn.net"
- "DOMAIN-SUFFIX,unian.ua"
- "DOMAIN-SUFFIX,unscreen.com"
- "DOMAIN-SUFFIX,unsplash.com"
- "DOMAIN-SUFFIX,upwork.com"
- "DOMAIN-SUFFIX,urlr.me"
- "DOMAIN-SUFFIX,usa.one"
- "DOMAIN-SUFFIX,usatoday.com"
- "DOMAIN-SUFFIX,usher.ttvnw.net"
- "DOMAIN-SUFFIX,v.vrv.co"
- "DOMAIN-SUFFIX,vagrantcloud.com"
- "DOMAIN-SUFFIX,veeam.com"
- "DOMAIN-SUFFIX,verificationacademy.com"
- "DOMAIN-SUFFIX,verstka.media"
- "DOMAIN-SUFFIX,vesma.one"
- "DOMAIN-SUFFIX,vesma.today"
- "DOMAIN-SUFFIX,vesty.co.il"
- "DOMAIN-SUFFIX,viber.com"
- "DOMAIN-SUFFIX,vice.com"
- "DOMAIN-SUFFIX,vine.co"
- "DOMAIN-SUFFIX,vipergirls.to"
- "DOMAIN-SUFFIX,visualcapitalist.com"
- "DOMAIN-SUFFIX,vmware.com"
- "DOMAIN-SUFFIX,vndb.org"
- "DOMAIN-SUFFIX,voanews.com"
- "DOMAIN-SUFFIX,vod-fy.crunchyrollcdn.com"
- "DOMAIN-SUFFIX,voidboost.cc"
- "DOMAIN-SUFFIX,volkswagen-classic-parts.com"
- "DOMAIN-SUFFIX,vot-tak.tv"
- "DOMAIN-SUFFIX,vpngate.net"
- "DOMAIN-SUFFIX,vpngen.org"
- "DOMAIN-SUFFIX,vpnlove.me"
- "DOMAIN-SUFFIX,vpnpay.io"
- "DOMAIN-SUFFIX,vyos.io"
- "DOMAIN-SUFFIX,w.atwiki.jp"
- "DOMAIN-SUFFIX,wa.me"
- "DOMAIN-SUFFIX,walmart.com"
- "DOMAIN-SUFFIX,watchguard.com"
- "DOMAIN-SUFFIX,watermarkremover.io"
- "DOMAIN-SUFFIX,wbagora.com"
- "DOMAIN-SUFFIX,wbgames.com"
- "DOMAIN-SUFFIX,wdfiles.com"
- "DOMAIN-SUFFIX,weather.com"
- "DOMAIN-SUFFIX,webmd.com"
- "DOMAIN-SUFFIX,webnames.ca"
- "DOMAIN-SUFFIX,webtoons.com"
- "DOMAIN-SUFFIX,weebly.com"
- "DOMAIN-SUFFIX,welt.de"
- "DOMAIN-SUFFIX,wetransfer.com"
- "DOMAIN-SUFFIX,whatsapp.biz"
- "DOMAIN-SUFFIX,whatsapp.com"
- "DOMAIN-SUFFIX,whatsapp.net"
- "DOMAIN-SUFFIX,wide-youtube.l.google.com"
- "DOMAIN-SUFFIX,widgetapp.stream"
- "DOMAIN-SUFFIX,wiki.fextralife.com"
- "DOMAIN-SUFFIX,wikidot.com"
- "DOMAIN-SUFFIX,wilsoncenter.org"
- "DOMAIN-SUFFIX,windows10spotlight.com"
- "DOMAIN-SUFFIX,windsurf.com"
- "DOMAIN-SUFFIX,wise.com"
- "DOMAIN-SUFFIX,wonderzine.com"
- "DOMAIN-SUFFIX,wpengine.com"
- "DOMAIN-SUFFIX,wunderground.com"
- "DOMAIN-SUFFIX,www3.corsair.com"
- "DOMAIN-SUFFIX,x-minus.pro"
- "DOMAIN-SUFFIX,x.ai"
- "DOMAIN-SUFFIX,x.com"
- "DOMAIN-SUFFIX,xhamster.com"
- "DOMAIN-SUFFIX,xhamsterlive.com"
- "DOMAIN-SUFFIX,xhcdn.com"
- "DOMAIN-SUFFIX,xiaomi.eu"
- "DOMAIN-SUFFIX,xnxx-cdn.com"
- "DOMAIN-SUFFIX,xnxx-ru.com"
- "DOMAIN-SUFFIX,xnxx.com"
- "DOMAIN-SUFFIX,xnxx.net"
- "DOMAIN-SUFFIX,xnxx.tv"
- "DOMAIN-SUFFIX,xnxx3.com"
- "DOMAIN-SUFFIX,xrite.com"
- "DOMAIN-SUFFIX,xsts.auth.xboxlive.com"
- "DOMAIN-SUFFIX,xtracloud.net"
- "DOMAIN-SUFFIX,xv-ru.com"
- "DOMAIN-SUFFIX,xvideos-cdn.com"
- "DOMAIN-SUFFIX,xvideos.com"
- "DOMAIN-SUFFIX,yande.re"
- "DOMAIN-SUFFIX,yeggi.com"
- "DOMAIN-SUFFIX,yle.fi"
- "DOMAIN-SUFFIX,youtrack.cloud"
- "DOMAIN-SUFFIX,youtu.be"
- "DOMAIN-SUFFIX,youtube-nocookie.com"
- "DOMAIN-SUFFIX,youtube-ui.l.google.com"
- "DOMAIN-SUFFIX,youtube.com"
- "DOMAIN-SUFFIX,youtubeembeddedplayer.googleapis.com"
- "DOMAIN-SUFFIX,youtubei.googleapis.com"
- "DOMAIN-SUFFIX,youtubekids.com"
- "DOMAIN-SUFFIX,yt-video-upload.l.google.com"
- "DOMAIN-SUFFIX,yt.be"
- "DOMAIN-SUFFIX,yt3.googleusercontent.com"
- "DOMAIN-SUFFIX,ytimg.com"
- "DOMAIN-SUFFIX,ytimg.l.google.com"
- "DOMAIN-SUFFIX,yting.com"
- "DOMAIN-SUFFIX,yummyani.me"
- "DOMAIN-SUFFIX,zahav.ru"
- "DOMAIN-SUFFIX,zapier.com"
- "DOMAIN-SUFFIX,zaxid.net"
- "DOMAIN-SUFFIX,zbigz.com"
- "DOMAIN-SUFFIX,zedge.net"
- "DOMAIN-SUFFIX,zendesk.com"
- "DOMAIN-SUFFIX,zerkalo.io"
- "DOMAIN-SUFFIX,zerossl.com"
- "DOMAIN-SUFFIX,zona.media"
rknasnblock:
type: http
behavior: classical
format: mrs
url: "https://cdn.jsdelivr.net/gh/legiz-ru/mihomo-rule-sets@main/ru-bundle/rknasnblock.mrs"
interval: 86400
geosite-private:
type: http
behavior: domain
format: mrs
url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/private.mrs
interval: 86400
telegram-geoip:
type: http
behavior: ipcidr
format: mrs
url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/telegram.mrs
interval: 86400
torrent-trackers:
type: http
behavior: domain
format: mrs
url: https://raw.githubusercontent.com/legiz-ru/mihomo-rule-sets/main/other/torrent-trackers.mrs
interval: 86400
geoip-for-ru:
type: http
behavior: ipcidr
format: mrs
url: https://raw.githubusercontent.com/Davoyan/mihomo-rule-sets/main/ip-for-ru/lists/ips-for-ru.mrs
interval: 86400
ru-inline-banned:
type: inline
behavior: classical
payload:
- DOMAIN-SUFFIX,habr.com
- DOMAIN-SUFFIX,seasonvar.ru
- DOMAIN-SUFFIX,lib.social
- DOMAIN-SUFFIX,kemono.su
- DOMAIN-SUFFIX,jut.su
- DOMAIN-SUFFIX,kara.su
- DOMAIN-SUFFIX,theins.ru
- DOMAIN-SUFFIX,tvrain.ru
- DOMAIN-SUFFIX,echo.msk.ru
- DOMAIN-SUFFIX,the-village.ru
- DOMAIN-SUFFIX,snob.ru
- DOMAIN-SUFFIX,novayagazeta.ru
- DOMAIN-SUFFIX,moscowtimes.ru
- DOMAIN-SUFFIX,natribu.org
- DOMAIN-KEYWORD,yummyanime
- DOMAIN-KEYWORD,yummy-anime
- DOMAIN-KEYWORD,animeportal
- DOMAIN-KEYWORD,anime-portal
- DOMAIN-KEYWORD,animedub
- DOMAIN-KEYWORD,anidub
- DOMAIN-KEYWORD,animelib
- DOMAIN-KEYWORD,ikianime
- DOMAIN-KEYWORD,anilibria
ru-cdn-domains:
type: inline
behavior: classical
payload:
- DOMAIN-SUFFIX,mycdn.me
- DOMAIN-SUFFIX,yastatic.net
- DOMAIN-SUFFIX,yandex.net
- DOMAIN-SUFFIX,kinescope.io
- DOMAIN-KEYWORD,kinescopecdn
- DOMAIN-KEYWORD,diginetica
lazymedia-balancers:
type: inline
behavior: domain
payload:
- hdrezka.ag
- hdrezka.ac
- hdrezka.me
- hdrezka.fi
- hdrezka.org
- hdrezka.site
- hdrezka.tv
- rezka.ag
- rezka.ac
- rezka.me
- statichdrezka.ac
- static.hdrezka.ac
- videocdn.so
- videocdn.pw
- videocdn.tv
- videocdn.club
- videocdn.me
- cvh.to
- cvh.li
- cvh.me
- cvh.biz
- kinovibe.ru
- kinovibe.com
- kinovibe.net
- kinovibe.cc
- kinovibe.xyz
- kinovibe.tv
- kinovibe.vip
- kinovibe.fun
- kinovibe.co
- coldcdn.xyz
- apivb.com
- ashdi.vip
- ashdi.cc
- voidboost.net
- voidboost.com
- voidboost.cc
- bazon.cc
- bazon.site
- bazon.live
- kodik.info
- kodik.biz
- kodik.cc
- hdvb.xyz
- hdvb.org
- collaps.la
- collaps.show
- alloha.tv
- alloha.link
- moonwalk.cc
- moonwalk.day
- lfstrm.tv
- cdnvideohub.com
- mzona.net
- seasonvar.ru
- seasonvar.me
- seasonvar.one
- zona.mobi
- vibix.org
- lazycatsoftware.com
rules:
# --- 0 infra DIRECT ---
- GEOSITE,connectivity-check,DIRECT
- DOMAIN,detectportal.firefox.com,DIRECT
- DOMAIN,connectivitycheck.gstatic.com,DIRECT
- DOMAIN,clients3.google.com,DIRECT
- DOMAIN,clients4.google.com,DIRECT
- DOMAIN,www.msftconnecttest.com,DIRECT
- DOMAIN,msftconnecttest.com,DIRECT
- DOMAIN,ipv6.msftconnecttest.com,DIRECT
- DOMAIN,time.xbox.com,DIRECT
- DOMAIN,xds.xboxlive.com,DIRECT
- DOMAIN,dev.virtualearth.net,DIRECT
- DOMAIN,captive.apple.com,DIRECT
- DOMAIN-SUFFIX,netbird.io,DIRECT
- DOMAIN-SUFFIX,auth0.com,DIRECT
# NetBird SOCKS: block all private/LAN pivot (RFC1918 + overlay + link-local)
- AND,(SRC-IP-CIDR,100.64.0.0/10),(IP-CIDR,10.0.0.0/8,no-resolve),REJECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(IP-CIDR,172.16.0.0/12,no-resolve),REJECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(IP-CIDR,192.168.0.0/16,no-resolve),REJECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(IP-CIDR,100.64.0.0/10,no-resolve),REJECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(IP-CIDR,127.0.0.0/8,no-resolve),REJECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(IP-CIDR,169.254.0.0/16,no-resolve),REJECT
# direct-in (:7894): force ISP egress for explicit proxy clients (bypasses rule chain)
- IN-NAME,direct-in,DIRECT
# NetBird GitLab/NuGet -> 34-NETBIRD-NUGET (not MATCH,00-GLOBAL / dead AUTO retry)
- AND,(IN-NAME,netbird-in),(DOMAIN-SUFFIX,nuget.org),34-NETBIRD-NUGET
- AND,(IN-NAME,netbird-in),(DOMAIN-SUFFIX,nuget.dev),34-NETBIRD-NUGET
- AND,(IN-NAME,netbird-in),(DOMAIN-SUFFIX,github.com),34-NETBIRD-NUGET
- AND,(IN-NAME,netbird-in),(DOMAIN-SUFFIX,githubusercontent.com),34-NETBIRD-NUGET
- AND,(IN-NAME,netbird-in),(DOMAIN-SUFFIX,gitlab.com),34-NETBIRD-NUGET
# tun-in re-inject drops IN-NAME; SRC 100.64 remains. CONNECT :443 needs this or -> MATCH,00-GLOBAL hang.
- AND,(SRC-IP-CIDR,100.64.0.0/10),(DOMAIN-SUFFIX,nuget.org),DIRECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(DOMAIN-SUFFIX,nuget.dev),DIRECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(DOMAIN-SUFFIX,github.com),DIRECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(DOMAIN-SUFFIX,githubusercontent.com),DIRECT
- AND,(SRC-IP-CIDR,100.64.0.0/10),(DOMAIN-SUFFIX,gitlab.com),DIRECT
# Dashboard Global (to_tun): Discord/Telegram before catch-all (voice UDP + chat TCP)
- AND,(RULE-SET,host-policy),(NETWORK,udp),(GEOSITE,discord),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,udp),(DOMAIN-SUFFIX,discord.com),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,udp),(DOMAIN-SUFFIX,discord.gg),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,udp),(DOMAIN-SUFFIX,discord.media),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,udp),(DOMAIN-SUFFIX,discordapp.com),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,udp),(RULE-SET,discord-voice-ips,no-resolve),(DST-PORT,19200-19500),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,udp),(RULE-SET,discord-voice-ips,no-resolve),(DST-PORT,50000-65535),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,tcp),(GEOSITE,discord),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,tcp),(DOMAIN-SUFFIX,discord.com),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,tcp),(DOMAIN-SUFFIX,discord.gg),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,tcp),(DOMAIN-SUFFIX,discord.media),29-DISCORD
- AND,(RULE-SET,host-policy),(NETWORK,tcp),(DOMAIN-SUFFIX,discordapp.com),29-DISCORD
- AND,(RULE-SET,host-policy),(GEOSITE,telegram),28-TELEGRAM
- AND,(RULE-SET,host-policy),(DOMAIN-SUFFIX,telegram.org),28-TELEGRAM
- AND,(RULE-SET,host-policy),(DOMAIN-SUFFIX,google.com),37-HOST-TUN
- AND,(RULE-SET,host-policy),(DOMAIN-SUFFIX,googleapis.com),37-HOST-TUN
- AND,(RULE-SET,host-policy),(DOMAIN-SUFFIX,gstatic.com),37-HOST-TUN
# Dashboard Global (to_tun): explicit RFC/LAN DIRECT (AND+RULE-SET,local was broken — stole DNS :53)
- AND,(RULE-SET,host-policy),(IP-CIDR,192.168.88.0/24,no-resolve),DIRECT
- AND,(RULE-SET,host-policy),(IP-CIDR,192.168.89.0/24,no-resolve),DIRECT
- AND,(RULE-SET,host-policy),(IP-CIDR,192.168.0.0/16,no-resolve),DIRECT
- AND,(RULE-SET,host-policy),(IP-CIDR,10.0.0.0/8,no-resolve),DIRECT
- AND,(RULE-SET,host-policy),(IP-CIDR,172.16.0.0/12,no-resolve),DIRECT
- AND,(RULE-SET,host-policy),(IP-CIDR,127.0.0.0/8,no-resolve),DIRECT
- RULE-SET,host-policy,37-HOST-TUN
- RULE-SET,local,DIRECT
- RULE-SET,remote-control,DIRECT
- DOMAIN-SUFFIX,ads.twitch.tv,DIRECT
- DOMAIN-SUFFIX,playlist.ttvnw.net,DIRECT
# Public DoH — browser bypasses router DNS; VPN path adds multi-second stalls
- DOMAIN-SUFFIX,cloudflare-dns.com,DIRECT
- DOMAIN-SUFFIX,dns.google,DIRECT
- DOMAIN,dns.google,DIRECT
- DOMAIN-SUFFIX,mozilla.cloudflare-dns.com,DIRECT
- DOMAIN,one.one.one.one,DIRECT
- DOMAIN-SUFFIX,dns.quad9.net,DIRECT
# Dev / ads — DIRECT on ISP; must be before GEOIP,private and MATCH,00-GLOBAL (sniffer off)
- DOMAIN-SUFFIX,blockchain-ads.com,DIRECT
- DOMAIN,blockchain-ads.com,DIRECT
# VK / Mail.ru — .com TLD; before SELECTOR/censored and GEOIP,ru
- DOMAIN-SUFFIX,vk.com,DIRECT
- DOMAIN-SUFFIX,vk.ru,DIRECT
- DOMAIN-SUFFIX,vk.me,DIRECT
- DOMAIN-SUFFIX,userapi.com,DIRECT
- DOMAIN-SUFFIX,vkuser.net,DIRECT
- DOMAIN-SUFFIX,vk-portal.net,DIRECT
- DOMAIN-SUFFIX,vkuseraudio.net,DIRECT
- DOMAIN-SUFFIX,vkuservideo.net,DIRECT
- DOMAIN-SUFFIX,vk-cdn.net,DIRECT
- DOMAIN-SUFFIX,vk-cdn.me,DIRECT
- DOMAIN-SUFFIX,mvk.com,DIRECT
# ZONT smart home (my.zont.online — .online TLD, not category-ru)
- DOMAIN-SUFFIX,zont.online,DIRECT
- DOMAIN-SUFFIX,zont.ru,DIRECT
# GitLab — DIRECT on ISP (00-GLOBAL/Finland SUB1 breaks page load)
- DOMAIN-SUFFIX,gitlab.com,DIRECT
- DOMAIN-SUFFIX,gitlab.io,DIRECT
- DOMAIN-SUFFIX,gitlab.net,DIRECT
- DOMAIN-SUFFIX,gitlab-static.net,DIRECT
- DOMAIN-SUFFIX,gitlab-static.io,DIRECT
- DOMAIN-SUFFIX,about.gitlab.com,DIRECT
# YouTube (TV/phone/CDN) — 00-GLOBAL -> 01-AUTO (best node).
# MUST be before GEOIP,private (fake-ip 198.18.x -> DIRECT trap)
- GEOSITE,youtube,00-GLOBAL
- DOMAIN-SUFFIX,youtube.com,00-GLOBAL
- DOMAIN-SUFFIX,youtu.be,00-GLOBAL
- DOMAIN-SUFFIX,googlevideo.com,00-GLOBAL
- DOMAIN-SUFFIX,ytimg.com,00-GLOBAL
- DOMAIN-SUFFIX,youtube-nocookie.com,00-GLOBAL
- DOMAIN-SUFFIX,ggpht.com,00-GLOBAL
- DOMAIN-SUFFIX,gvt1.com,00-GLOBAL
- DOMAIN-SUFFIX,youtubei.googleapis.com,00-GLOBAL
# Google Meet is blocked in Russia; WebRTC UDP already caught by YouTube/Global rules
- DOMAIN-SUFFIX,meet.google.com,00-GLOBAL
# Google search / account / gstatic — DIRECT on Rules (Global: host-policy catch-all above wins)
- DOMAIN,accounts.google.com,DIRECT
- DOMAIN-SUFFIX,google.com,DIRECT
- DOMAIN-SUFFIX,gstatic.com,DIRECT
- DOMAIN-SUFFIX,googleusercontent.com,DIRECT
- DOMAIN-SUFFIX,googleapis.com,DIRECT
- GEOIP,private,DIRECT,no-resolve
- RULE-SET,geoip-private,DIRECT,no-resolve
- RULE-SET,geosite-private,DIRECT
# --- 1 CURSOR (default DIRECT; switch in 20-CURSOR group) ---
- DOMAIN,api2.cursor.sh,20-CURSOR
- DOMAIN,api2geo.cursor.sh,20-CURSOR
- DOMAIN,api2direct.cursor.sh,20-CURSOR
- DOMAIN-SUFFIX,api5.cursor.sh,20-CURSOR
- RULE-SET,cursor,20-CURSOR
- DOMAIN-SUFFIX,cursor.sh,20-CURSOR
- DOMAIN-SUFFIX,cursor.com,20-CURSOR
- DOMAIN-SUFFIX,cursorapi.com,20-CURSOR
- DOMAIN-SUFFIX,anysphere.co,20-CURSOR
- DOMAIN-SUFFIX,toneperfect.app,DIRECT
# --- 2 VPN apps (-> 00-GLOBAL / 01-AUTO) ---
- RULE-SET,category-ai,00-GLOBAL
- RULE-SET,google-deepmind,00-GLOBAL
- RULE-SET,speedtest-net,00-GLOBAL
# Public BitTorrent trackers (legiz torrent-trackers.mrs) — VPN on router; ae-deb uses ISP bypass at mangle
- RULE-SET,torrent-trackers,00-GLOBAL
# RU torrent trackers — ISP blocked; before GEOIP,ru / DOMAIN-SUFFIX,ru,DIRECT
- DOMAIN-SUFFIX,t-ru.org,00-GLOBAL
- DOMAIN-SUFFIX,rutracker.org,00-GLOBAL
- DOMAIN-SUFFIX,rutracker.net,00-GLOBAL
- DOMAIN-SUFFIX,rutracker.nl,00-GLOBAL
- DOMAIN-SUFFIX,rutracker.ru,00-GLOBAL
- DOMAIN-KEYWORD,rutracker,00-GLOBAL
# RU indexers — ISP blocked; VPN like rutracker (not 31-TORRENT_CF/DIRECT)
- DOMAIN-SUFFIX,rutor.org,00-GLOBAL
- DOMAIN-SUFFIX,rutor.info,00-GLOBAL
- DOMAIN-SUFFIX,rutor.is,00-GLOBAL
- DOMAIN-SUFFIX,rutor.net,00-GLOBAL
- DOMAIN-SUFFIX,new-rutor.org,00-GLOBAL
- DOMAIN-SUFFIX,yotor.ru,00-GLOBAL
# Cloudflare front — VPN/datacenter IP often CF 1020/403; default DIRECT in 31-TORRENT_CF
- DOMAIN-SUFFIX,bigfangroup.org,31-TORRENT_CF
- DOMAIN-SUFFIX,bigfangroup.net,31-TORRENT_CF
- DOMAIN-SUFFIX,bigfangroup.name,31-TORRENT_CF
- DOMAIN-SUFFIX,freebfg.org,31-TORRENT_CF
- DOMAIN-KEYWORD,bigfangroup,31-TORRENT_CF
# Magnet/hash shortener (.ru TLD but FI-hosted; DOMAIN-SUFFIX,ru,DIRECT breaks HTTPS on ISP)
- DOMAIN-SUFFIX,hashurl.ru,00-GLOBAL
- GEOSITE,steam,22-STEAM
# Steam downloads / API use many FQDNs not only geosite:steam; without these, GEOIP,ru,DIRECT sends CDN to ISP -> RU region + slow path
- DOMAIN-SUFFIX,steampowered.com,22-STEAM
- DOMAIN-SUFFIX,steamstatic.com,22-STEAM
- DOMAIN-SUFFIX,steamcontent.com,22-STEAM
- DOMAIN-SUFFIX,steamserver.net,22-STEAM
- DOMAIN-SUFFIX,steamcommunity.com,22-STEAM
- DOMAIN-SUFFIX,steam-api.com,22-STEAM
- DOMAIN-SUFFIX,steamdeck.net,22-STEAM
- DOMAIN-SUFFIX,valvesoftware.com,22-STEAM
# Steam downloads often arrive as IP-only flows with sniffer disabled; keep Valve CDN IPs on STEAM group too.
- IP-CIDR,155.133.224.0/19,22-STEAM,no-resolve
- IP-CIDR,162.254.192.0/21,22-STEAM,no-resolve
- IP-CIDR,208.64.200.0/22,22-STEAM,no-resolve
# EA / Apex — gameplay + EAC + telemetry DIRECT; auth/API via 33-EA (default DIRECT, still through mihomo gateway)
- DOMAIN-SUFFIX,respawn.com,DIRECT
- DOMAIN-SUFFIX,apexlegends.com,DIRECT
- DOMAIN-SUFFIX,projectapex.com,DIRECT
- DOMAIN-SUFFIX,tnt-ea.com,DIRECT
- DOMAIN-SUFFIX,easports.com,DIRECT
- DOMAIN-SUFFIX,easyanticheat.net,DIRECT
- DOMAIN-SUFFIX,eac-cdn.com,DIRECT
- DOMAIN-SUFFIX,origin.com,33-EA
- DOMAIN-SUFFIX,ea.com,33-EA
- GEOSITE,ea,33-EA
# Hi-Rez / Paladins / Smite — auth + patches DIRECT; MATCH→00-GLOBAL breaks EAC + launcher on RU ISP
- DOMAIN-SUFFIX,hirez.com,35-HIREZ
- DOMAIN-SUFFIX,hirezstudios.com,35-HIREZ
- DOMAIN-SUFFIX,hirezcdn.com,35-HIREZ
- DOMAIN-SUFFIX,paladins.com,35-HIREZ
- DOMAIN-SUFFIX,paladinsgame.com,35-HIREZ
- DOMAIN-SUFFIX,api.paladins.com,35-HIREZ
- DOMAIN-SUFFIX,smitegame.com,35-HIREZ
- DOMAIN-SUFFIX,api.smitegame.com,35-HIREZ
- DOMAIN-KEYWORD,hirez,35-HIREZ
# Fall Guys / Epic — oncatapult (Azure) DIRECT; AWS ol/rtcp blocked from RU ISP → 00-GLOBAL
- DOMAIN-SUFFIX,oncatapult.com,DIRECT
- DOMAIN-SUFFIX,fallguys.com,DIRECT
- DOMAIN-SUFFIX,mediatonic.com,DIRECT
- DOMAIN-SUFFIX,rtcp.on.epicgames.com,00-GLOBAL
- DOMAIN-SUFFIX,ol.epicgames.com,00-GLOBAL
- DOMAIN-SUFFIX,eos-gateway.epicgames.dev,00-GLOBAL
- GEOSITE,epicgames,00-GLOBAL
- DOMAIN-SUFFIX,epicgames.com,00-GLOBAL
- DOMAIN-SUFFIX,epicgames.dev,00-GLOBAL
# DBD / Behaviour / GameLift — matchmaking + dedicated servers via VPN (not NETWORK,udp,DIRECT)
- RULE-SET,dbd-gamelift,36-DBD
- DOMAIN-KEYWORD,bhvr,36-DBD
- DOMAIN-SUFFIX,deadbydaylight.com,36-DBD
- DOMAIN-KEYWORD,gamelift,36-DBD
- RULE-SET,dbd-gamelift-ips,36-DBD,no-resolve
# Metin2 / Gameforge — launcher + patch TCP must not use 00-GLOBAL (sniffer off => also in fake-ip-filter)
- DOMAIN-SUFFIX,gameforge.com,DIRECT
- DOMAIN-SUFFIX,metin2.gameforge.com,DIRECT
- DOMAIN-KEYWORD,gameforge,DIRECT
- DOMAIN-KEYWORD,metin2,DIRECT
# Microsoft account login (M365 + MSN/Hotmail/Outlook) — one path DIRECT; split => login loop
- DOMAIN-SUFFIX,login.microsoftonline.com,DIRECT
- DOMAIN-SUFFIX,login.microsoft.com,DIRECT
- DOMAIN-SUFFIX,microsoftonline.com,DIRECT
- DOMAIN,login.live.com,DIRECT
- DOMAIN-SUFFIX,account.live.com,DIRECT
- DOMAIN-SUFFIX,account.microsoft.com,DIRECT
- DOMAIN-SUFFIX,msauth.net,DIRECT
- DOMAIN-SUFFIX,msftauth.net,DIRECT
- DOMAIN-SUFFIX,hotmail.com,DIRECT
- DOMAIN-SUFFIX,outlook.com,DIRECT
- DOMAIN-SUFFIX,outlook.live.com,DIRECT
- DOMAIN-SUFFIX,msn.com,DIRECT
# hsprotect (PerimeterX) captcha on login/signup — VPN exit => "please try again"
- DOMAIN-SUFFIX,hsprotect.net,DIRECT
- DOMAIN-SUFFIX,perimeterx.net,DIRECT
- DOMAIN,fpt.live.com,DIRECT
- DOMAIN-SUFFIX,signup.live.com,DIRECT
# Windows activation / licensing — DIRECT (VPN path → slmgr 0x8004FE92)
- DOMAIN-SUFFIX,sls.microsoft.com,DIRECT
- DOMAIN-SUFFIX,licensing.mp.microsoft.com,DIRECT
- DOMAIN-SUFFIX,purchase.mp.microsoft.com,DIRECT
- DOMAIN,ctldl.windowsupdate.com,DIRECT
- DOMAIN-SUFFIX,windowsupdate.com,DIRECT
# KMS / Azure activation (*.windows.net — not matched by windows.com → 26-XBOX)
- DOMAIN-SUFFIX,core.windows.net,DIRECT
- DOMAIN-SUFFIX,vortex-win.data.microsoft.com,DIRECT
# Azure OAuth IPs (sniffer off — no hostname) → 26-XBOX, not DIRECT (RU account limits)
- IP-CIDR,20.33.0.0/16,26-XBOX,no-resolve
- IP-CIDR,20.32.0.0/16,26-XBOX,no-resolve
- IP-CIDR,40.76.0.0/14,26-XBOX,no-resolve
# Xbox / Microsoft services (panel default 00-GLOBAL → 01-AUTO)
- DOMAIN,user.auth.xboxlive.com,26-XBOX
- DOMAIN,title.auth.xboxlive.com,26-XBOX
- DOMAIN,xsts.auth.xboxlive.com,26-XBOX
- DOMAIN-SUFFIX,live.com,26-XBOX
- DOMAIN-SUFFIX,xbox.com,26-XBOX
- DOMAIN-SUFFIX,microsoft.com,26-XBOX
- DOMAIN-SUFFIX,windows.com,26-XBOX
# Linux mirrors before xbox-cdn-ips (Fastly 151.101.x overlaps Debian CDN)
- GEOSITE,archlinux,25-PACMAN
- GEOSITE,debian,25-PACMAN
- DOMAIN-KEYWORD,debian,25-PACMAN
- DOMAIN-SUFFIX,debian.org,25-PACMAN
- DOMAIN-SUFFIX,debian.net,25-PACMAN
- IP-CIDR,151.101.0.0/16,25-PACMAN,no-resolve
- RULE-SET,debian-mirrors,25-PACMAN
- DOMAIN-SUFFIX,cachyos.org,25-PACMAN
- RULE-SET,pacman-mirrors,25-PACMAN
# SourceForge CDN (CachyOS resources, sf downloads) — VPN/CF stalls a.fsdn.com
- GEOSITE,sourceforge,25-PACMAN
- DOMAIN-SUFFIX,fsdn.com,25-PACMAN
- DOMAIN-SUFFIX,sourceforge.com,25-PACMAN
- DOMAIN-SUFFIX,sourceforge.net,25-PACMAN
- DOMAIN-SUFFIX,sf.net,25-PACMAN
# Xbox: CDN/downloads DIRECT (27); live/auth/social via proxy (26)
# Sniffer off → downloads often arrive as raw CDN IPs; match before DOMAIN-SUFFIX xboxlive.com → 26-XBOX.
- RULE-SET,xbox-cdn-ips,27-XBOX_DL,no-resolve
- DOMAIN,assets1.xboxlive.com,27-XBOX_DL
- DOMAIN,assets2.xboxlive.com,27-XBOX_DL
- DOMAIN,dlassets-ssl.xboxlive.com,27-XBOX_DL
- DOMAIN,images-eds-ssl.xboxlive.com,27-XBOX_DL
- RULE-SET,xbox-download,27-XBOX_DL
- DOMAIN-SUFFIX,xboxservices.com,26-XBOX
- DOMAIN-SUFFIX,xboxlive.com,26-XBOX
- RULE-SET,jetbrains,24-JETBRAINS
# Figma — all TCP + QUIC/WebSocket on one path (sniffer off: UDP was falling into 23-GAME_UDP)
- DOMAIN-SUFFIX,figma.com,32-FIGMA
- DOMAIN-SUFFIX,figma.site,32-FIGMA
- DOMAIN-SUFFIX,figma.app,32-FIGMA
- DOMAIN-SUFFIX,figma-gov.com,32-FIGMA
- DOMAIN-SUFFIX,figma-gov.site,32-FIGMA
- DOMAIN-SUFFIX,jsdelivr.net,32-FIGMA
- DOMAIN-SUFFIX,esm.sh,32-FIGMA
# --- 3 FNS / Мой налог DIRECT (before category-ru; VPN breaks lknpd API) ---
- RULE-SET,my-nalog,DIRECT
# --- 3 RU banks (before GEOIP; VPN breaks apps / 3DS / pinning) ---
- RULE-SET,banks-ru,DIRECT
# GEOSITE,category-bank-ru omitted — not in Loyalsoldier geosite.dat; banks-ru rule-set covers it
# --- 3 RU apps (Firebase RTDB DIRECT; VPN exit breaks Pepper netconn) ---
- DOMAIN-SUFFIX,pepper.ru,DIRECT
- DOMAIN-SUFFIX,firebasedatabase.app,DIRECT
- DOMAIN-SUFFIX,dns.ru,DIRECT
- DOMAIN-SUFFIX,dns-shop.ru,DIRECT
# --- 3 RU / Ozon DIRECT (before category-ru) ---
- IP-ASN,44386,DIRECT,no-resolve
- DOMAIN-SUFFIX,ozon.ru,DIRECT
- DOMAIN-SUFFIX,ozon.com,DIRECT
- DOMAIN-SUFFIX,ozon.by,DIRECT
- DOMAIN-SUFFIX,ozon.kz,DIRECT
- DOMAIN-SUFFIX,ozonusercontent.com,DIRECT
- DOMAIN-SUFFIX,ozone.ru,DIRECT
- DOMAIN-SUFFIX,o3.ru,DIRECT
- DOMAIN-SUFFIX,o3t.ru,DIRECT
# RU banks/NSPK ASN prefixes (router bypass_mihomo primary; safety net if packet hits TUN)
- RULE-SET,ru-ecosystem,DIRECT,no-resolve
# Sovcombank / Halva: Qrator + pinning; must match by domain before GEOIP
- DOMAIN-SUFFIX,sovcombank.ru,DIRECT
- DOMAIN-SUFFIX,sovcombank.com,DIRECT
- DOMAIN-SUFFIX,halvacard.ru,DIRECT
- DOMAIN-SUFFIX,cdndatasource.com,DIRECT
- DOMAIN-KEYWORD,sovcom,DIRECT
- DOMAIN-KEYWORD,halva,DIRECT
# HDRezka / mirrors — keyword catches rotating TLDs (hdrezka.fi, hdrezka9bsbhq.org, etc.)
- DOMAIN-KEYWORD,hdrezka,00-GLOBAL
- DOMAIN-KEYWORD,rezka,00-GLOBAL
# LazyMedia balancers (videocdn/cvh/kinovibe etc.) — dynamic CDNs often missing from ru-bundle.mrs
- DOMAIN-KEYWORD,videocdn,00-GLOBAL
- DOMAIN-KEYWORD,kinovibe,00-GLOBAL
- DOMAIN-KEYWORD,coldcdn,00-GLOBAL
- DOMAIN-KEYWORD,ashdi,00-GLOBAL
- DOMAIN-KEYWORD,voidboost,00-GLOBAL
- DOMAIN-KEYWORD,hdvb,00-GLOBAL
- DOMAIN-SUFFIX,apivb.com,00-GLOBAL
- RULE-SET,lazymedia-balancers,00-GLOBAL
# Telegram + Discord before legiz refilter/ru-inside (those lists include discord.* -> 00-GLOBAL steals voice TCP)
- GEOSITE,telegram,28-TELEGRAM
- DOMAIN-SUFFIX,telesco.pe,28-TELEGRAM
- DOMAIN-SUFFIX,t.me,28-TELEGRAM
- DOMAIN-SUFFIX,telegram.me,28-TELEGRAM
- RULE-SET,telegram-geoip,28-TELEGRAM,no-resolve
- IP-CIDR,149.154.160.0/20,28-TELEGRAM,no-resolve
- IP-CIDR,91.108.4.0/22,28-TELEGRAM,no-resolve
- IP-CIDR,91.108.8.0/22,28-TELEGRAM,no-resolve
- IP-CIDR,91.108.12.0/22,28-TELEGRAM,no-resolve
- IP-CIDR,91.108.16.0/22,28-TELEGRAM,no-resolve
- IP-CIDR,91.108.20.0/22,28-TELEGRAM,no-resolve
- IP-CIDR,91.108.56.0/22,28-TELEGRAM,no-resolve
- IP-CIDR,91.105.192.0/23,28-TELEGRAM,no-resolve
- RULE-SET,discord-vc,29-DISCORD
- AND,(NETWORK,tcp),(GEOSITE,discord),29-DISCORD
- AND,(NETWORK,tcp),(DOMAIN-SUFFIX,discord.com),29-DISCORD
- AND,(NETWORK,tcp),(DOMAIN-SUFFIX,discord.gg),29-DISCORD
- AND,(NETWORK,tcp),(DOMAIN-SUFFIX,discord.media),29-DISCORD
- AND,(NETWORK,tcp),(DOMAIN-SUFFIX,discordapp.com),29-DISCORD
- AND,(NETWORK,tcp),(DOMAIN-SUFFIX,discordapp.net),29-DISCORD
- AND,(NETWORK,tcp),(DOMAIN-SUFFIX,discordcdn.com),29-DISCORD
- AND,(NETWORK,tcp),(RULE-SET,discord-voice-ips,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,162.159.128.0/17,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,34.0.0.0/12,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,34.64.0.0/11,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,34.96.0.0/11,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,35.216.0.0/14,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,104.29.0.0/16,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,104.16.0.0/14,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,66.22.192.0/18,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,138.128.0.0/16,no-resolve),29-DISCORD
- AND,(NETWORK,tcp),(IP-CIDR,216.198.192.0/18,no-resolve),29-DISCORD
# legiz censored stacks — before GEOIP,ru,DIRECT (order: refilter, itdog inside, inline gaps, ASN, bundle)
- RULE-SET,refilter-domains,00-GLOBAL
- RULE-SET,ru-inside,00-GLOBAL
- RULE-SET,ru-inline-banned,00-GLOBAL
- RULE-SET,rknasnblock,00-GLOBAL,no-resolve
- RULE-SET,ru-bundle,00-GLOBAL
# RU CDN domains (legiz ru-inline subset) + foreign CDN IPs (Davoyan geoip-for-ru)
- RULE-SET,ru-cdn-domains,DIRECT
- RULE-SET,geoip-for-ru,DIRECT,no-resolve
- RULE-SET,category-ru,DIRECT
- GEOIP,ru,DIRECT,no-resolve
- GEOSITE,category-ru,DIRECT
- DOMAIN-SUFFIX,ru,DIRECT
- DOMAIN-SUFFIX,su,DIRECT
- DOMAIN-SUFFIX,lanbook.com,DIRECT
- RULE-SET,ru-direct,DIRECT
# X5 / Перекресток / Пятерочка: loyalty/auth/apps break or rate-limit when seen from VPN exits
- DOMAIN-SUFFIX,5ka.ru,DIRECT
- DOMAIN-SUFFIX,5post.ru,DIRECT
- DOMAIN-SUFFIX,perekrestok.ru,DIRECT
- DOMAIN-SUFFIX,perekrestok.com,DIRECT
- DOMAIN-SUFFIX,pyaterochka.ru,DIRECT
- DOMAIN-SUFFIX,vprok.ru,DIRECT
- DOMAIN-SUFFIX,x5.ru,DIRECT
- DOMAIN-SUFFIX,x5.ai,DIRECT
- DOMAIN-SUFFIX,x5.com,DIRECT
- DOMAIN-SUFFIX,x5.digital,DIRECT
- DOMAIN-SUFFIX,x5.group,DIRECT
- DOMAIN-SUFFIX,x5.media,DIRECT
- DOMAIN-SUFFIX,x5.team,DIRECT
- DOMAIN-SUFFIX,x5.tech,DIRECT
- DOMAIN-SUFFIX,x5club.ru,DIRECT
- DOMAIN-SUFFIX,x5id.ru,DIRECT
- DOMAIN-SUFFIX,x5static.net,DIRECT
# --- 4 Sber IoT cloud (control APIs DIRECT; block analytics subdomains only) ---
- DOMAIN-SUFFIX,devices.sberbank.ru,DIRECT
- DOMAIN-SUFFIX,staros-api-md.devices.sberbank.ru,DIRECT
- DOMAIN-SUFFIX,ihub.devices.sberbank.ru,DIRECT
- DOMAIN-SUFFIX,sberdevices.ru,DIRECT
- DOMAIN-SUFFIX,sberdevices.com,DIRECT
- DOMAIN-SUFFIX,salute-content.sberdevices.ru,DIRECT
- DOMAIN-SUFFIX,cdn.sm.sberdevices.ru,DIRECT
- DOMAIN-SUFFIX,clickbeat.sberdevices.ru,DIRECT
- DOMAIN-SUFFIX,sberportal.ru,DIRECT
- DOMAIN-SUFFIX,sberbox.ru,DIRECT
- DOMAIN-SUFFIX,salute.sber,DIRECT
- DOMAIN-SUFFIX,analytics.sberdevices.ru,REJECT
- DOMAIN-SUFFIX,telemetry.sberdevices.ru,REJECT
- DOMAIN-SUFFIX,metrics.sberdevices.ru,REJECT
- DOMAIN-SUFFIX,crash-reporting.sberdevices.ru,REJECT
- DOMAIN-SUFFIX,logs.sberdevices.ru,REJECT
- DOMAIN-SUFFIX,google-analytics.com,REJECT
- DOMAIN-SUFFIX,app-measurement.com,REJECT
- DOMAIN-SUFFIX,crashlytics.com,REJECT
- DOMAIN-SUFFIX,crashlyticsreports-pa.googleapis.com,REJECT
- DOMAIN-SUFFIX,adfox.ru,REJECT
- DOMAIN-SUFFIX,mytarget.ru,REJECT
- DOMAIN-SUFFIX,adriver.ru,REJECT
- DOMAIN-SUFFIX,mediarithmics.com,REJECT
- DOMAIN-SUFFIX,cdninstagram.com,00-GLOBAL
- DOMAIN-SUFFIX,facebook.com,00-GLOBAL
- DOMAIN-SUFFIX,x.com,00-GLOBAL
- DOMAIN-SUFFIX,twitter.com,00-GLOBAL
# IP check sites — show VPN exit (legiz cosmetic)
- DOMAIN,ipwho.is,00-GLOBAL
- DOMAIN,api.myip.com,00-GLOBAL
- DOMAIN,ipapi.co,00-GLOBAL
- DOMAIN,ident.me,00-GLOBAL
- DOMAIN,ip-api.com,00-GLOBAL
- DOMAIN,ipinfo.io,00-GLOBAL
- DOMAIN,api.ip.sb,00-GLOBAL
- DOMAIN,2ip.io,00-GLOBAL
- DOMAIN,2ipcore.com,00-GLOBAL
# --- 5b DOMAIN-KEYWORD (O(N) scan; after SUFFIX/RULE-SET/GEOIP/GEOSITE) ---
- DOMAIN-KEYWORD,toneperfect,DIRECT
- DOMAIN-KEYWORD,lknpd,DIRECT
- DOMAIN-KEYWORD,statusnpd,DIRECT
- DOMAIN-KEYWORD,ozon,DIRECT
- DOMAIN-KEYWORD,perekrestok,DIRECT
- DOMAIN-KEYWORD,pyaterochka,DIRECT
- DOMAIN-KEYWORD,sberbank,DIRECT
- DOMAIN-KEYWORD,tinkoff,DIRECT
- DOMAIN-KEYWORD,tbank,DIRECT
- DOMAIN-KEYWORD,vtb,DIRECT
- DOMAIN-KEYWORD,alfabank,DIRECT
- DOMAIN-KEYWORD,gosuslugi,DIRECT
- DOMAIN-KEYWORD,gazprombank,DIRECT
- DOMAIN-KEYWORD,raiffeisen,DIRECT
- DOMAIN-KEYWORD,rosbank,DIRECT
- DOMAIN-KEYWORD,nspk,DIRECT
- DOMAIN-KEYWORD,mirpay,DIRECT
- DOMAIN-KEYWORD,cbr.,DIRECT
- DOMAIN-KEYWORD,uralsib,DIRECT
- DOMAIN-KEYWORD,rshb,DIRECT
- DOMAIN-KEYWORD,psbank,DIRECT
- DOMAIN-KEYWORD,tochka,DIRECT
- DOMAIN-KEYWORD,openbank,DIRECT
# --- 6 UDP: DIRECT default; VPN for voice / video / streaming QUIC only ---
- AND,(NETWORK,udp),(GEOSITE,telegram),28-TELEGRAM
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,telegram.org),28-TELEGRAM
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,t.me),28-TELEGRAM
- DST-PORT,596-599,28-TELEGRAM
- DST-PORT,1400,28-TELEGRAM
- AND,(NETWORK,udp),(RULE-SET,telegram-geoip,no-resolve),28-TELEGRAM
- AND,(NETWORK,udp),(GEOSITE,discord),29-DISCORD
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,discord.com),29-DISCORD
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,discord.gg),29-DISCORD
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,discord.media),29-DISCORD
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,discordapp.com),29-DISCORD
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,discordapp.net),29-DISCORD
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,discordcdn.com),29-DISCORD
- AND,(NETWORK,udp),(RULE-SET,cloudflare-ips,no-resolve),(DST-PORT,19200-19500),29-DISCORD
- AND,(NETWORK,udp),(RULE-SET,cloudflare-ips,no-resolve),(DST-PORT,50000-65535),29-DISCORD
- AND,(NETWORK,udp),(RULE-SET,discord-voice-legiz,no-resolve),(DST-PORT,50000-65535),29-DISCORD
- AND,(NETWORK,udp),(RULE-SET,discord-voice-ips,no-resolve),(DST-PORT,19200-19500),29-DISCORD
- AND,(NETWORK,udp),(RULE-SET,discord-voice-ips,no-resolve),(DST-PORT,50000-65535),29-DISCORD
# hCaptcha (Discord / login captcha widget) — bare rule pins TCP + QUIC(UDP/443) to a clean exit.
# Without it, hcaptcha QUIC falls to NETWORK,udp,DIRECT -> ISP breaks it -> challenge never renders.
- DOMAIN-SUFFIX,hcaptcha.com,00-GLOBAL
# Cloudflare Turnstile / managed JS challenge — same QUIC trap as hcaptcha.
# Site TCP -> MATCH,00-GLOBAL; challenge QUIC to challenges.cloudflare.com -> NETWORK,udp,DIRECT
# => spinner / "checking your browser" never finishes on MikroTik LAN.
- DOMAIN-SUFFIX,challenges.cloudflare.com,00-GLOBAL
- DOMAIN-SUFFIX,cloudflareinsights.com,00-GLOBAL
# Photon Cloud (PEAK + many Unity co-op games) — Exit Games. RU ISP blocks Photon IPs -> "Failed to connect to Photon".
# Name server is reached by domain; master/game servers are handed back as raw IPs, so also match by Photon UDP ports.
# Ports: legacy 5055-5058, current 27000-27002 (Master/Game/Name). Note: 27000-27002 lightly overlaps Steam client UDP
# (harmless — tunnels a sliver of Steam UDP; Steam works over VPN). Does NOT collide with EA/Apex/Hi-Rez game ports.
- DOMAIN-SUFFIX,photonengine.io,00-GLOBAL
- DOMAIN-SUFFIX,photonengine.com,00-GLOBAL
- DOMAIN-SUFFIX,exitgames.com,00-GLOBAL
- AND,(NETWORK,udp),(DST-PORT,5055-5058),00-GLOBAL
- AND,(NETWORK,udp),(DST-PORT,27000-27002),00-GLOBAL
- AND,(NETWORK,udp),(GEOSITE,whatsapp),00-GLOBAL
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,whatsapp.com),00-GLOBAL
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,whatsapp.net),00-GLOBAL
- AND,(NETWORK,udp),(GEOSITE,youtube),00-GLOBAL
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,youtube.com),00-GLOBAL
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,googlevideo.com),00-GLOBAL
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,ytimg.com),00-GLOBAL
- AND,(NETWORK,udp),(IP-CIDR,74.125.0.0/16,no-resolve),00-GLOBAL
- AND,(NETWORK,udp),(IP-CIDR,64.233.128.0/17,no-resolve),00-GLOBAL
- AND,(NETWORK,udp),(IP-CIDR,142.250.0.0/15,no-resolve),00-GLOBAL
- AND,(NETWORK,udp),(IP-CIDR,172.217.0.0/16,no-resolve),00-GLOBAL
- AND,(NETWORK,udp),(IP-CIDR,216.58.192.0/19,no-resolve),00-GLOBAL
- AND,(NETWORK,udp),(IP-CIDR,173.194.0.0/16,no-resolve),00-GLOBAL
- AND,(NETWORK,udp),(RULE-SET,lazymedia-balancers,no-resolve),00-GLOBAL
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,figma.com),32-FIGMA
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,figma.site),32-FIGMA
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,figma.app),32-FIGMA
- AND,(NETWORK,udp),(RULE-SET,dbd-gamelift),36-DBD
- AND,(NETWORK,udp),(DOMAIN-KEYWORD,gamelift),36-DBD
- AND,(NETWORK,udp),(DOMAIN-KEYWORD,bhvr),36-DBD
- AND,(NETWORK,udp),(DOMAIN-SUFFIX,deadbydaylight.com),36-DBD
- AND,(NETWORK,udp),(RULE-SET,dbd-gamelift-ips,no-resolve),(DST-PORT,7770-65535),36-DBD
- AND,(NETWORK,udp),(DST-PORT,7770),36-DBD
- NETWORK,udp,DIRECT
- AND,(NETWORK,tcp),(RULE-SET,dbd-gamelift),36-DBD
- AND,(NETWORK,tcp),(DOMAIN-KEYWORD,gamelift),36-DBD
- AND,(NETWORK,tcp),(DOMAIN-KEYWORD,bhvr),36-DBD
- AND,(NETWORK,tcp),(DOMAIN-SUFFIX,deadbydaylight.com),36-DBD
- AND,(NETWORK,tcp),(RULE-SET,dbd-gamelift-ips,no-resolve),36-DBD
# Cloudflare Tunnel edge transport. Keep it isolated from 00-GLOBAL: only
# official region1/region2 IPv4 ranges on TCP/7844 use this dedicated group.
# Ref: docs/incident-2026-07-29-cloudflare-tunnel-1033.md
- AND,(NETWORK,tcp),(IP-CIDR,198.41.192.0/24,no-resolve),(DST-PORT,7844),40-CF-TUNNEL
- AND,(NETWORK,tcp),(IP-CIDR,198.41.200.0/24,no-resolve),(DST-PORT,7844),40-CF-TUNNEL
- AND,(NETWORK,tcp),(DST-PORT,444-65535),DIRECT
# --- 7 catch-all ---
- MATCH,00-GLOBAL