# SecuBox Anti-Track v2 (#633) — CDN / cloud IP allowlist.
# IPs inside these ranges are NEVER nft-dropped even when a pure tracker
# resolves there, to avoid blackholing shared infrastructure.
# One CIDR per line; '#' comments. Manual refresh on release from each
# provider's published ranges (Cloudflare/AWS/Google/Azure publish JSON;
# Fastly/Akamai via their docs). Conservative starter set — extend as needed.

# --- Cloudflare (https://www.cloudflare.com/ips/) ---
173.245.48.0/20
103.21.244.0/22
103.22.200.0/22
103.31.4.0/22
141.101.64.0/18
108.162.192.0/18
190.93.240.0/20
188.114.96.0/20
197.234.240.0/22
198.41.128.0/17
162.158.0.0/15
104.16.0.0/13
104.24.0.0/14
172.64.0.0/13
131.0.72.0/22
2400:cb00::/32
2606:4700::/32
2803:f800::/32
2405:b500::/32
2405:8100::/32
2a06:98c0::/29
2c0f:f248::/32

# --- Fastly (https://api.fastly.com/public-ip-list) ---
151.101.0.0/16
199.232.0.0/16
2a04:4e40::/32
2a04:4e42::/32

# --- Akamai (representative; refresh from Akamai docs) ---
23.32.0.0/11
23.192.0.0/11
104.64.0.0/10
184.24.0.0/13

# --- Google (gstatic/googleusercontent/cloud; refresh from cloud.json) ---
8.8.4.0/24
8.8.8.0/24
34.64.0.0/10
35.190.0.0/17
142.250.0.0/15
172.217.0.0/16
216.58.192.0/19
2607:f8b0::/32
2a00:1450::/32

# --- Amazon (CloudFront/AWS; refresh from ip-ranges.json) ---
13.32.0.0/15
13.224.0.0/14
52.84.0.0/15
54.182.0.0/16
204.246.164.0/22
2600:9000::/28

# --- Microsoft Azure (representative; refresh from ServiceTags JSON) ---
13.64.0.0/11
20.33.0.0/16
40.64.0.0/10
2603:1000::/24
