# Quantumult Configuration made by Nan-nx # Line started with ";" or "#" or "//" shall be comments. # 建议在「其他设置」里「GeoLite2」的「来源」填写使用下面链接，并开启「自动更新」 ; https://raw.githubusercontent.com/Loyalsoldier/geoip/release/Country.mmdb # 图标库，手动添加 ; https://raw.githubusercontent.com/Nan-nx/En/master/IconSet/En.json # > 解锁网易云灰色音乐，获取证书链接 ; https://raw.githubusercontent.com/nondanee/UnblockNeteaseMusic/master/ca.crt # > 具体操作步骤可参考下面这篇《利用QuantumultX解锁网易云付费及非版权音乐》文章 ; https://mp.weixin.qq.com/s/khPF7ti95o7-foiqiooDow [general] # 资源解析器脚本（开 opt-parser=ture） resource_parser_url=https://raw.githubusercontent.com/KOP-XIAO/QuantumultX/master/Scripts/resource-parser.js ;https://raw.githubusercontent.com/Nan-nx/En/master/Script/resource-parser.js ;https://cdn.jsdelivr.net/gh/KOP-XIAO/QuantumultX@master/Scripts/resource-parser.js # 使用 HEAD 方法将 HTTP 请求发送到服务器检查 url 来测试代理的状态，结果应该是两个延迟，第一个是 TCP 与代理服务器的握手，第二个是 Quantumult 成功地从服务器检查 url 接收 HTTP 响应的总时间。 ;server_check_url=http://cp.cloudflare.com/generate_204 ;server_check_url=http://www.gstatic.com/generate_204 server_check_url= http://www.qualcomm.cn/generate_204 # 节点延迟测试超时参数，需小于 5000 毫秒才生效 server_check_timeout=2000 # geo_location_checker用于节点页面的节点信息展示，可展示 api 及获取、展示节点信息 geo_location_checker=http://ip-api.com/json/?lang=en-US, https://raw.githubusercontent.com/KOP-XIAO/QuantumultX/master/Scripts/IP_API.js # zh-CN # DNS 排除列表 # dns_exclusion_list 包含了禁用占位符 IP (240.*) 的域，不在 dns_exclusion_list 中的域都启用了占位符 IP，并打开了 resolve-on-remote 设置。 dns_exclusion_list=*.cmpassport.com, *.icitymobile.mobi, id6.me, *.pingan.com.cn, *.cmbchina.com, *.abchina.com, *.abchina.com.cn # 不会处理到 excluded_routes 的流量。修改后最好重新启动您的设备。 excluded_routes=192.168.0.0/16, 172.16.0.0/12, 100.64.0.0/10, 10.0.0.0/8 # 参数 udp_whitelist 从 IP 层控制 UDP 数据是否需要舍弃；如舍弃，则该 UDP 请求不会进入规则模块以及策略模块，TCP/UDP 请求记录中也不会有相应的条目，但仍可在日志中查询到相关信息（日志等级 debug）。 # 该参数控制的是流入 Quantumult X Tunnel 的请求，并非 Quantumult X Tunnel 发出的请求，即不会作用于节点所使用的 UDP 目标端口。 ;udp_whitelist=53, 123, 1900, 80-443 # 说明：参数 fallback_udp_policy 的值仅支持末端策略（末端策略为经由规则模块和策略模块后所命中的策略，例如：direct、reject 以及节点；不支持内置策略 proxy 以及其它自定义策略）。默认为 reject。 # 当 UDP 请求经过规则模块以及策略模块后所命中的节点为 Quantumult X 所不支持 UDP 转发的节点（如：VMess、trojan），或支持 UDP 转发但未注明 udp-relay=true 的（例如：SS/SSR 且与服务器是否真实开启 UDP 转发无关），则 fallback_udp_policy 会被使用。 # 注意：如果您需要调整该参数的值为 direct，请务必清楚了解同一目标主机名 TCP 请求与 UDP 请求的源地址不同所造成的隐私及安全风险。 # 如果没有节点支持 UDP 转发，可取消下条注释（去除 ;） ;fallback_udp_policy=direct ;icmp_auto_reply=true # 在网络环境切换时出发运行模式变更 # filter - 规则分流，all_proxy - 全部代理，all_direct - 全部直连 # 示例意思：[蜂窝数据],[Wi-Fi],[SSID] # 下列示例的意思为：在蜂窝数据使用规则分流(第一个 filter)，在 Wi-Fi 使用规则分流(第二个 filter)，在 SSID 为 Coffee 的 Wi-Fi 使用全部直连，在 SSID 为 Cola 的 Wi-Fi 使用全部直连 running_mode_trigger=filter,filter,Coffee:all_direct,Cola:all_direct,GXIC-Teacher-Auto:all_direct,广西科学院:all_direct ;LINK_22E171:all_proxy # Rewrite 及 Task 模块始终生效 # 在特定 SSID 网络时(除了 Task 模块)暂停 Quantumult X ;ssid_suspended_list=LINK_22E174, LINK_22E175 [dns] # 查询结果只用于评估过滤器或通过直接策略连接，当通过服务器连接时，查询结果不会被使用，Quantumult 永远不会知道相关域名的目标 IP。 # 如果您想让某个域名(例如：example.com)为 127.0.0.0.1，只需在「filter_local」部分添加「host, example.com, reject」即可。拒绝操作将返回 127.0.0.0.1 的 DNS 响应。 # 禁用系统 DNS # 为了提高性能，会使用从当前网络(系统)中获取的 DNS 服务器(您可以使用「no-system」禁用此功能，但至少要增加一个自定义的 DNS 服务器。 ;no-system # 禁用 IPv6 # 当设置「no-ipv6」时，Quanumult X Tunnel 的 DNS 模块会直接让 AAAA 查询失败。 # > QuantumultX开启IPV6方法，删去下面的「no-ipv6」，在「VPN」栏中，开启「兼容性增强」 no-ipv6 # 自定义 DNS # > OneDNS server=117.50.10.10 # > DNSPod Public DNS server=119.29.29.29 # > Alibaba Public DNS server=223.5.5.5 # > Others server=1.2.4.8 server=8.8.8.8 server=8.8.4.4 server=119.28.28.28 server=202.141.176.93 server=202.141.178.13 server=182.254.116.116 server=114.114.114.114 server=180.184.1.1 address=/mtalk.google.com/108.177.125.188 server=/dl.google.com/119.29.29.29 server=/dl.l.google.com/119.29.29.29 server=/update.googleapis.com/119.29.29.29 server=/*.dl.playstation.net/119.29.29.29 circumvent-ipv4-answer = 127.0.0.1, 0.0.0.0, 61.160.148.90, 182.43.124.6, 124.236.16.201, 39.102.194.95, 36.135.17.248, 36.135.82.110, 39.105.1.17, 39.130.181.72, 39.130.181.73, 39.173.74.185, 47.92.198.202, 111.22.226.1, 111.28.0.32, 111.31.192.110, 111.44.246.131, 111.56.127.216, 111.63.132.170, 112.15.232.43, 112.17.14.211, 112.54.50.50, 117.156.25.11, 117.187.10.42, 120.202.17.103, 120.209.204.204, 120.222.19.204, 121.4.135.105,183.203.36.19, 183.207.72.18, 183.213.92.2, 183.220.145.129, 183.252.183.9, 211.137.133.69, 211.138.218.190, 211.139.25.61, 211.139.145.129, 218.201.25.129, 218.201.25.130, 218.203.122.98, 221.130.39.3 circumvent-ipv6-answer = :: # 在特定的网络环境下忽略自定义 DNS 可在后方加上「excluded_ssids」相关字段。 # 注意：如配置了 no-system，则请务必确保在忽略了部分自定义 DNS 的配置下至少有一个可用的自定义 DNS 配置。 # server=114.114.114.114, excluded_ssids=SSID1, SSID2 # DNS over HTTPS # 当 DoH 服务器被设置时，所有其他普通的（没有与之相关的特定域）服务器将被忽略。 # 当设置了多个 DoH 服务器时，只有第一个会被使用。 # 当使用的 DoH 服务器不是基于 HTTP/2 时，DoH 将被暂时禁用，并使用常规服务器，直到下次启动 VPN 连接。 # 不建议在与防火墙相关的网络环境中使用，不确定 DoH 服务器是否总能被到达。 # 如果 DoH 服务器在您的国家或地区不是流行的 DNS 服务器，则不推荐使用，它可能会丢失 ISP DNS 服务器返回的 CDN 优化结果。 # 如果 DoH 服务器是一个反广告相关的服务器，则不推荐使用（Quantumult X 过滤模块对于被拒绝的域具有更好的性能，它可以避免客户端无休止的请求）。 ;doh-server=https://dns.alidns.com/dns-query ;doh-server=https://223.6.6.6/dns-query # 本地 DNS 映射 # > Apple server=/aaplimg.com/119.29.29.29 server=/apple.com/119.29.29.29 server=/apple.com.cn/119.29.29.29 server=/apple-cloudkit.com/119.29.29.29 server=/apple-livephotoskit.com/119.29.29.29 server=/apple-mapkit.com/119.29.29.29 server=/cdn-apple.com/119.29.29.29 server=/icloud.com/119.29.29.29 server=/icloud.com.cn/119.29.29.29 server=/mzstatic.com/119.29.29.29 server=/*.aaplimg.com/119.29.29.29 server=/*.apple.com/119.29.29.29 server=/*.apple-cloudkit.com/119.29.29.29 server=/*.apple-livephotoskit.com/119.29.29.29 server=/*.apple-mapkit.com/119.29.29.29 server=/*.cdn-apple.com/119.29.29.29 server=/*.icloud.com/119.29.29.29 server=/*.icloud.com.cn/119.29.29.29 server=/*.mzstatic.com/119.29.29.29 server=/*apple.com.akadns.net/119.29.29.29 server=/*.apple.com.edgekey.net/119.29.29.29 server=/*.apple.com.edgekey.net.globalredir.akadns.net/119.29.29.29 server=/*icloud.com.akadns.net/119.29.29.29 # > Firebase Cloud Messaging address=/mtalk.google.com/108.177.125.188 # > Google Dl server=/dl.google.com/119.29.29.29 server=/dl.l.google.com/119.29.29.29 server=/update.googleapis.com/119.29.29.29 [policy] # 需要策略图标的在策略后加上：img-url=http://example.com/icon.png # 类型：静态(static) # 指向您手动选择的候选服务器。 ;static=policy-name-1, Sample-A, Sample-B, Sample-C, img-url=http://example.com/icon.png # 类型：可用(available) # 指向候选服务器的第一个可用服务器(当策略被触发且策略结果不可用时，将立即启动并发 url 延迟测试。 # 如果当时没有网络请求接受策略，这意味着策略处于空闲状态，即使服务器关闭，测试也不会启动。那时，您可以通过手动启动测试来更新服务器状态，但是这没有任何意义)。 ;available=policy-name-2, Sample-A, Sample-B, Sample-C # 类型：负载均衡(round-robin) # 指向在候选服务器中指向下一个服务器以进行下一次连接。 ;round-robin=policy-name-3, Sample-A, Sample-B, Sample-C # 类型：延迟测试(url-latency-benchmark) # 策略指向具有最佳 URL 延迟(公差，单位毫秒)结果的服务器。 # 当用户在 Quantumult X 中手动启动 URL 测试时，策略结果也会被更新。 # 该类型的策略有一个名为 check-interval(秒) 的参数，如果此策略已经被任何请求激活，则将考虑该间隔。 ;url-latency-benchmark=policy-name-8, resource-tag-regex=^sample, server-tag-regex=^example, check-interval=600, tolerance=0 # SSID # 策略根据网络环境的不同指向服务器。 ;ssid=policy-name-4, Sample-A, Sample-B, LINK_22E171:Sample-B, LINK_22E172:Sample-C # resource-tag-regex 及 server-tag-regex 仅适用于 static、available 和 round-robin 类型的策略。 ;static=policy-name-5, resource-tag-regex=^sample, server-tag-regex=^example, img-url=http://example.com/icon.png ;available=policy-name-6, resource-tag-regex=^sample, server-tag-regex=^example ;round-robin=policy-name-7, resource-tag-regex=^sample, server-tag-regex=^example static=Policy, direct, proxy, Either, Taiwan, Singapore, HongKong, img-url=https://raw.githubusercontent.com/Orz-3/face/master/Auto.png ;static=Bilibili, direct, Taiwan, HongKong, img-url=https://raw.githubusercontent.com/Orz-3/face/master/Bili.png static=Spotify, direct, HongKong, Singapore, Japan, img-url=https://raw.githubusercontent.com/Orz-3/face/master/Netease.png static=Apple, direct, Taiwan, America, HongKong, img-url=https://raw.githubusercontent.com/Orz-3/face/master/Apple.png static=Netease, direct, img-url=https://raw.githubusercontent.com/Orz-3/face/master/Music.png #static=Netflix, server-tag-regex=.*可用|奈|网飞, img-url=https://raw.githubusercontent.com/Orz-3/face/master/Netflix.png static=Youtube, proxy, Policy, Taiwan, Either, img-url=https://raw.githubusercontent.com/Orz-3/face/master/YouTube.png # 默认设置30分钟测速一次，当前使用节点延迟和最新测速延迟最低的节点相差200ms以上则切换为最新的最低延迟节点，否则继续延用节点 #将下面的url-latency-benchmark的内容替换成static，并删除[check-interval=900, tolerance=0, ]即可手动选择节点 url-latency-benchmark=Either, server-tag-regex=.*HK|TW|港|台|Hongkong|新|, check-interval=1800, tolerance=100, alive-checking=false, img-url=https://raw.githubusercontent.com/Orz-3/face/master/CN.png url-latency-benchmark=Taiwan, server-tag-regex=.*TW|台, check-interval=200, tolerance=2500, alive-checking=false, img-url=https://raw.githubusercontent.com/Orz-3/face/master/TW.png url-latency-benchmark=HongKong, server-tag-regex=.*HK|港, check-interval=200, tolerance=2500, alive-checking=false, img-url=https://raw.githubusercontent.com/Orz-3/face/master/HK.png url-latency-benchmark=Singapore, server-tag-regex=.*新加坡|Singapore|SG, check-interval=1800, tolerance=200, alive-checking=false, img-url=https://raw.githubusercontent.com/Orz-3/face/master/SG.png url-latency-benchmark=America, server-tag-regex=.*America|美国|纽约|California, check-interval=1800, tolerance=200, alive-checking=false, img-url=https://raw.githubusercontent.com/Orz-3/face/master/US.png url-latency-benchmark=Japan, server-tag-regex=.*JP|日本|Tokyo, check-interval=1800, tolerance=100, alive-checking=false, img-url=https://raw.githubusercontent.com/Orz-3/face/master/JP.png url-latency-benchmark=Else, server-tag-regex=.*, check-interval=200, tolerance=2000, alive-checking=false, img-url=https://raw.githubusercontent.com/Orz-3/face/master/UN.png static=Other, Policy, proxy, direct, img-url=https://raw.githubusercontent.com/Orz-3/face/master/China.png [server_remote] # 参数「tag」和「enabled」是可选的。 # 各种远程资源的默认同步时间间隔是 172800 秒。 # 你可以设置 update-interval=172800 来自定义你的自动同步时间间隔(秒)，负数表示禁用自动同步。 ;https://gfwairport.icu/api/v1/client/subscribe?token=79c336ca589b72e09672526117f1a6f3, tag=Tag, update-interval=172800, opt-parser=true, enabled=false [filter_remote] # 参数「tag」、「force-policy」和「enabled」是可选的。 # 当有强制策略时，远程资源的过滤器中的策略将被忽略，并使用强制策略。 # Global 全球加速 https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/Global.list, tag=Global, force-policy=Policy, update-interval=172800, opt-parser=true, enabled=true # Spotify https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Spotify/Spotify.list, tag=Spotify, force-policy=Spotify, update-interval=172800, opt-parser=true, enabled=true # B站自动分区规则 ;https://raw.githubusercontent.com/Nan-nx/En/master/Bilibili/Bilibili_Auto_Regions.list, tag=Bilibili, force-policy=Bilibili, update-interval=172800, opt-parser=true, enabled=false # Apple 服务 https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/Apple.list, tag=Apple, force-policy=Apple, update-interval=172800, opt-parser=true, enabled=true # YouTube https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/YouTube.list, tag=Youtube, force-policy=Youtube, update-interval=172800, opt-parser=true, enabled=true # Netflix #https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/Netflix.list, tag=Netflix, force-policy=Netflix, update-interval=-1, opt-parser=true, enabled=true # Netease https://raw.githubusercontent.com/Nan-nx/En/master/Profile/NeteaseMusic.list, tag=Netease, force-policy=Netease, img-url=https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Netease_Music_Unlock.png, update-interval=172800, opt-parser=true, enabled=true # ChinaIP 中国直连 https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/China.list, tag=China, force-policy=direct, update-interval=172800, opt-parser=true, enabled=true # Privacy 隐私 https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/Guard/Privacy.list, tag=Privacy, force-policy=reject, update-interval=172800, opt-parser=true, enabled=true # Hijacking 运营商劫持或恶意网站 https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/Guard/Hijacking.list, tag=Hijacking, force-policy=reject, update-interval=172800, opt-parser=true, enabled=true # Advertising 去广告 https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/Guard/Advertising.list, tag=Lightly AdRule, force-policy=reject, update-interval=-1, opt-parser=true, enabled=true # NobyDa大佬去广告 -默认关闭，自行手动启用！ https://raw.githubusercontent.com/NobyDa/Script/master/QuantumultX/AdRule.list, tag=Severe AdRule, force-policy=reject, update-interval=172800, opt-parser=true, enabled=true # Block OTA Update 屏蔽 iOS 系统更新 # Unbreak 后续规则修正 https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Profile/Quantumult/Filter/Unbreak.list, tag=Unbreak, force-policy=direct, update-interval=172800, opt-parser=true, enabled=true # Wechat https://raw.githubusercontent.com/Nan-nx/En/master/Profile/Wechat.list, tag=WeChat, force-policy=direct, update-interval=172800, opt-parser=true, enabled=true [rewrite_remote] https://github.com/BiliUniverse/Global/releases/latest/download/BiliBili.Global.snippet, tag=BiliBili.Global, update-interval=172800, opt-parser=true, enabled=true https://github.com/BiliUniverse/ADBlock/releases/latest/download/BiliBili.ADBlock.snippet, tag=BiliBili.ADBlock, update-interval=172800, opt-parser=false, enabled=true https://github.com/BiliUniverse/Enhanced/releases/latest/download/BiliBili.Enhanced.snippet, tag=BiliBili.Enhanced, update-interval=172800, opt-parser=false, enabled=true https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Js_lite.conf, tag=En-lite, update-interval=2592000, opt-parser=true, enabled=true https://raw.githubusercontent.com/Nan-nx/En/refs/heads/master/Js.conf, tag=En, update-interval=2592000, opt-parser=true, enabled=false #Nan-nx获取cookies汇总 https://raw.githubusercontent.com/Nan-nx/En/master/Cookie.conf, tag=Cookies, update-interval=186400, opt-parser=true, enabled=false [server_local] #null [filter_local] host, zh.b-ok.cc, Policy host, chat.openai.com, Either host, openai.com, Japan host, login.microsoftonline.com, direct host, cxtwh.com, direct host, upyunso.com, direct host, api.upyunso.com, direct host, gitee.com, Policy host, scriptablejs.gitee.io, Policy host, m.hotmail.com, direct host, filebox.com, direct host, filebox.space, direct host, docs.filebox.space, direct host, api.revenuecat.com, direct host, www.54ske.com, direct host, study.xuexi.cn, direct # > 知乎AD屏蔽,以下规则请放置在filter_local最顶部 DOMAIN,118.89.204.198,REJECT DOMAIN-KEYWORD,118.89.204.198,REJECT IP-CIDR,118.89.204.198/32,REJECT DOMAIN,appcloud2.in.zhihu.com,REJECT HOST,mqtt.zhihu.com,reject HOST,sugar.zhihu.com,reject USER-AGENT,AVOS*,REJECT # 部分网站手动设置 host, www.v2rayfree.eu.org, direct host, v2rayfree-waline.vercel.app, direct host, www.zhenbuka3.com, direct host, raw.fastgit.org, direct host, gitlab.com, proxy host-suffix, local, direct ip-cidr, 100.64.0.0/10, direct ip6-cidr, fe80::/10, direct ip-cidr, 10.0.0.0/8, direct ip-cidr, 127.0.0.0/8, direct ip-cidr, 172.16.0.0/12, direct ip-cidr, 192.168.0.0/16, direct ip-cidr, 224.0.0.0/24, direct ip-cidr, 203.107.1.1/24, reject ip-cidr, 182.254.116.0/24, direct geoip, cn, direct FINAL,Other [rewrite_local] # The scripts should be saved in local "On My iPhone - Quantumult X - Scripts" or "iCloud Drive - Quantumult X - Scripts". Samples can be found at https://github.com/crossutility/Quantumult-X/blob/master/sample-task.js # The default HTTP request timeout is 10 seconds. # # Supports 5 or 6 fields of cron excluding the command field. # [task_local] # 微博配置 # 京东多合一签到 2 0 * * * https://raw.githubusercontent.com/NobyDa/Script/master/JD-DailyBonus/JD_DailyBonus.js, tag=京东签到, img-url=https://raw.githubusercontent.com/NobyDa/mini/master/Color/jd.png, enabled=false # 网易云音乐 #1. 先登录: #2. 再访问: #3. 提示: `获取会话: 成功!` 5 10 * * * https://raw.githubusercontent.com/chavyleung/scripts/master/neteasemusic/quanx/neteasemusic.js, tag=网易云音乐, img-url=https://raw.githubusercontent.com/NobyDa/mini/master/Color/neteasemusic.png, enabled=false # bilibili #打开浏览器访问: https://www.bilibili.com 或 https://live.bilibili.com 6 0 * * * https://raw.githubusercontent.com/Nan-nx/En/master/Bilibili/bilibili.js, tag=Bilibili签到, img-url=https://raw.githubusercontent.com/NobyDa/mini/master/Color/bilibili.png, enabled=false #中国联通 7 10 * * * https://raw.githubusercontent.com/chavyleung/scripts/master/10010/10010.js, tag=中国联通签到, img-url=https://raw.githubusercontent.com/NobyDa/mini/master/Color/10000.png, enabled=false #爱奇艺 7 10 * * * https://raw.githubusercontent.com/NobyDa/Script/master/iQIYI-DailyBonus/iQIYI.js, tag=爱奇艺, img-url=https://raw.githubusercontent.com/NobyDa/mini/master/Color/iQIYI.png, enabled=false # 流媒体解锁查询 event-interaction https://raw.githubusercontent.com/KOP-XIAO/QuantumultX/master/Scripts/streaming-ui-check.js, tag=Check, img-url=https://raw.githubusercontent.com/Orz-3/face/master/Game.png, enabled=true # 流量查询 ;event-interaction https://raw.githubusercontent.com/KOP-XIAO/QuantumultX/master/Scripts/traffic-check.js, tag=Traffic, img-url=https://raw.githubusercontent.com/Orz-3/mini/master/Color/Paramount.png, enabled=true # Geo IP event-interaction https://raw.githubusercontent.com/KOP-XIAO/QuantumultX/master/Scripts/geo_location.js, tag=Geo IP, img-url=https://raw.githubusercontent.com/Orz-3/mini/master/Color/Speedtest.png, enabled=true #网易云解锁查询 event-interaction https://raw.githubusercontent.com/I-am-R-E/QuantumultX/main/TaskLocal/NeteaseMusicUnlockCheck.js, tag=Netease, img-url=https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Netease_Music_Unlock.png, enabled=true [http_backend] https://raw.githubusercontent.com/crossutility/Quantumult-X/master/backend-icloud-to-http.js, tag=Appletv, path=^/icloud-profile/, enabled=true https://raw.githubusercontent.com/chavyleung/scripts/master/chavy.box.js, tag=Boxjs, path=^/, enabled=false # # Only the TLS SNI or destination address in "hostname" will be handled by MitM. # # By default when MitM enabled for the HTTPS request, Quantumult X fetches the certificate(the certificate will be cached) from the original site, keeps most of the needed original certificate informations and re-signs it using the MitM root CA, this is the recommended(and more compatible) way of creating MitM certificate. # Occasionally some users like to debug the HTTPS request that its domain does not exist, so the original certificate doesn't even exist. This is when the param simple_cert_hostname comes up. The HTTPS request with TLS SNI names that are in the simple_cert_hostname(and hostname) will using the pure local generated MitM certificate. # # Important !!! You should always keep your CA passphrase and p12 private. [mitm] hostname = passphrase = p12 = ;skip_validating_cert = false ;force_sni_domain_name = false ;simple_cert_hostname = non-existed-domain.com, *.non-connected-domain.com