Discussions

Hello,

I am submitting this request to request the addition of the XiaoHongShu social media app domains to the "Services" in Control-D.

XiaoHongShu has [become one of the top popular apps](https://blog.payxpert.com/chinas-popular-trendy-influential-social-media-xiaohongshu) in China, Taiwan, Hong Kong, and several other East and South Asian countries. As a China-based social media app, it is also very popular among people overseas.

I noticed that WeChat is already added as a "Service" in Control-D, so it makes sense to add XiaoHongShu as well.

Below is a list of domains I collected.

XiaoHongShu service domains:

xhscdn.com  
xhscdn.net  
xhscdn.cn  
xhsdns.com  
xhsdns.net  
xhslink.cn  
xhslink.com  
xhsos.com  
xhssys.cn  
xhssys.com  
xhssys.net  
xhsurl.cn  
xhsurl.com  
xiaohongshu.cn  
xiaohongshu.com  
xiaohongshu.net  
xiaohongshu.net.cn

Rules to be blocked, sourced from the Anti-AD (Chinese regional) filter.

https://github.com/privacy-protection-tools/anti-AD

||s.xiaohongshu.com^  
||crash.xiaohongshu.com^  
||apppush-sh5.xiaohongshu.com^  
||flash.xiaohongshu.com^  
||referee.xiaohongshu.com^  
||vi.xiaohongshu.com^  
||store.xiaohongshu.com^  
||starry.xiaohongshu.com^

Please note that XiaoHongShu (tested on iOS) attempts to use DoH services to bypass DNS filtering, calling doh.pub, dns.alidns.com, and dns.google (as I have detected) possibly to obtain their server's IP addresses for geolocation tracking purposes.

Even when blocking these DoH services with custom filters and with Control-D redirection on all domains and no domains were bypassed, XiaoHongShu is still able to detect the user's IP address, possibly because there are some IP addresses hardcoded in the app to establish direct connections without DNS. Therefore, using Control-D "redirections" might not be fully effective.