chore(release): bump version to v4.0.3

feat(core): 优化部署与升级链路，新节点入列及 OTA 捷报底部追加 [一键唤醒控制台] 按钮
feat(agent): 优化实时日志推送链路，底部追加 [一键唤醒控制台] 交互式内联按钮
2026-04-25 06:26:23 +00:00 · 2026-04-25 06:18:22 +00:00 · 2026-04-25 06:09:37 +00:00 · 2026-04-25 06:02:25 +00:00 · 2026-04-25 05:57:10 +00:00 · 2026-04-25 05:48:53 +00:00
59 changed files with 3139 additions and 509 deletions
--- a/.github/workflows/daily_keywords.yml
+++ b/.github/workflows/daily_keywords.yml
@@ -1,16 +1,19 @@
-name: Daily Trends Factory
+name: Daily Data Factory

 on:
  schedule:
-    # 每天 UTC 18:00 运行 (北京时间凌晨 02:00)
+    # 每天 UTC 18:00 (北京时间凌晨 02:00) 执行，赶在节点凌晨3点更新前造好子弹
    - cron: '0 18 * * *'
  workflow_dispatch: 

+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 permissions:
  contents: write

 jobs:
-  update-trends:
+  update-data:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
@@ -23,15 +26,20 @@ jobs:
        with:
          python-version: '3.10'

-      - name: Execute Trends Engine
+      - name: Execute Trends Engine (搜索词库)
        run: python scripts/fetch_trends.py

-      - name: Commit and Push
+      - name: Execute Trust URL Engine (活体新闻流融合)
+        run: python scripts/fetch_trust_urls.py
+
+      - name: Commit and Push All Data
        run: |
          git config --global user.name "github-actions[bot]"
          git config --global user.email "github-actions[bot]@users.noreply.github.com"
          
+          # 一揽子添加搜索词库和地区白名单的变化
          git add data/keywords/
+          git add data/regions/
          
          # 防御机制：如果没有新数据，就静默退出，不产生空提交
          if git diff --staged --quiet; then
@@ -39,6 +47,6 @@ jobs:
            exit 0
          fi
          
-          # 策略：放弃危险的 amend 强制覆盖，采用带日期的标准安全提交
-          git commit -m "chore(data): 🤖 自动机兵：刷新全战区热点词库 [$(date +'%Y-%m-%d')]"
-          git push origin main
+          # 策略：将两路数据的更新合并为一个原子提交
+          git commit -m "chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [$(date +'%Y-%m-%d')]"
+          git push origin main
--- a/README.md
+++ b/README.md
@@ -12,6 +12,9 @@

 ## ✨ 核心极客特性 (Core Architecture)

+- 📊 **深海声呐全维探针 (Deep Sea Sonar v4.0)**：内嵌强效正则清洗的 JSON 提取引擎，异步生成情报级 IP 质量战报。聚合 Scamalytics、AbuseIPDB 等五大权威防欺诈库，精准嗅探代理/VPN特征、25端口封堵情况及原生流媒体（Netflix/Disney+/TikTok等）解锁状态，并自带 Google “送中”高危预警与基于 SQLite 的历史污染趋势追踪图谱。
+- ⚡ **无损高并发引擎 (WAL Concurrency)**：司令部 SQLite 数据库全面激活 `WAL` (Write-Ahead Logging) 模式与毫秒级排队削峰算法。即使您同时对 500 台边缘节点发起全军总攻，也能完美规避 `database is locked` 与 Telegram `429` 频率拦截，实现 100% 战报送达。
+- 🪶 **抽脂级极简部署 (Zero-Bloat Native)**：全栈剔除 `pip`、`flask` 等臃肿第三方依赖，完全基于 Python3 原生标准库运行。安装底层强制注入 `--no-install-recommends` 防捆绑参数。无论是 128MB 内存的极简 NAT 小鸡，还是 Alpine/Arch Linux 特种系统，均可如丝般顺滑运行。
 - 🎛️ **扁平化指挥矩阵 (Flat Command Matrix)**：[v3.6.1 重构] 引入扁平化 L0-L3 四级战区降维视图与双轨身份制。深度定制 Inline Keyboard 逃生舱交互，支持在统一哨兵终端进行原位丝滑重绘 (In-place UI Edit)，实现毫秒级模块热启停与日志抓取，彻底告别刷屏烦恼。
 - 🔄 **全栈零信任 OTA 引擎 (Zero-Trust OTA Upgrade)**：首创双端物理熔断机制。长官可通过私有中枢，一键向全舰队下发静默热重载指令；更支持**「司令部金蝉脱壳」**，中枢大脑可在此面板自我抛出幽灵进程进行免交互直装覆盖，实现真正的全栈去 SSH 化运维。
 - 🛡️ **SSOT 溯源与热更新装甲 (Smooth Upgrade Engine)**：全系脚本彻底消灭硬编码，部署时动态抓取云端版本信标。自带状态机嗅探逻辑与防撞甲探测，即使是手动在终端运行安装，也仅需回车瞬间完成配置继承、数据同步与无损换代。
@@ -32,8 +35,8 @@
 ```text
 📦 IP-Sentinel
 ┣ 📂 .github/workflows/      # 🏭 自动化兵工厂：每月定时触发指纹生成的 CI/CD 流水线
- ┣ 📂 master/                 # 🧠 司令部：SQLite 存储、TG 监听与 Webhook 调度中心
- ┣ 📂 core/                   # 🛡️ 边缘哨兵：Webhook 被动监听、哈希锚定执行引擎
+ ┣ 📂 master/                 # 🧠 司令部：SQLite 存储 (含 ip_trend_log 趋势跟踪表)、TG 监听与 Webhook 调度
+ ┣ 📂 core/                   # 🛡️ 边缘哨兵：Webhook 被动监听、哈希锚定执行引擎 (集成深海声呐探测模块)
 ┣ 📂 scripts/                # 🐍 兵工厂引擎：基于 Python 的多物理分区 UA 生成器
 ┣ 📂 data/                   # 🗂️ 全球数据规则库 (动态拓扑)
 ┃  ┣ 📜 map.json             # 🌍 全球区域大脑 (v3.5.0 大洲战区拓扑)
@@ -45,6 +48,7 @@
 ```

 ## 🚀 极速部署 (Quick Start)
+> 🛡️ **跨平台装甲支持**：Debian / Ubuntu / CentOS / RHEL / Alpine Linux / Arch Linux
 系统现提供两种接入模式，请根据您的战术需求选择：

 ### 🔹 模式 A：私有独立模式 (全自主、强烈推荐)
@@ -54,12 +58,12 @@

 - **部署 Master (中枢大脑)**：找一台 VPS 作为司令部（仅需部署一台），执行：
 ```bash
-bash <(curl -sL https://raw.githubusercontent.com/hotyue/IP-Sentinel/main/master/install_master.sh)
+curl -fsSL https://raw.githubusercontent.com/hotyue/IP-Sentinel/main/master/install_master.sh -o /tmp/ins_master.sh && sudo bash /tmp/ins_master.sh
 ```
 - 部署 Agent (边缘哨兵)：在需要养护的机器上执行 Agent 脚本，安装时选择私有独立中枢，并分别输入您自建机器人的 [Token](https://blog.iot-architect.com/engineering-practice/create-private-telegram-bot-via-botfather) 以及您的个人 [Chat ID](https://blog.iot-architect.com/engineering-practice/get-telegram-personal-id-via-userinfobot) ：

 ```Bash
-bash <(curl -sL https://raw.githubusercontent.com/hotyue/IP-Sentinel/main/core/install.sh)
+curl -fsSL https://raw.githubusercontent.com/hotyue/IP-Sentinel/main/core/install.sh -o /tmp/ins_agent.sh && sudo bash /tmp/ins_agent.sh
 ```
 - 激活节点：安装完成后，您的手机会收到一条 #REGISTER# 注册暗号，将其转发给您自己的机器人即可完成编队入库。

@@ -71,7 +75,7 @@ bash <(curl -sL https://raw.githubusercontent.com/hotyue/IP-Sentinel/main/core/i
 - 部署 Agent：在目标 VPS 上执行以下指令，安装过程中选择官方公共网关，并输入您的 Chat ID：

 ```Bash
-bash <(curl -sL https://raw.githubusercontent.com/hotyue/IP-Sentinel/main/core/install.sh)
+curl -fsSL https://raw.githubusercontent.com/hotyue/IP-Sentinel/main/core/install.sh -o /tmp/ins_agent.sh && sudo bash /tmp/ins_agent.sh
 ```
 - 激活节点：同上，将收到的暗号转发给官方机器人即可。

@@ -124,6 +128,9 @@ bash <(curl -sL https://raw.githubusercontent.com/hotyue/IP-Sentinel/legacy/core

 如果你想为项目增加新的节点区域（例如德国、英国、大洋洲等），或者提供更丰富的本土化搜索词库，非常欢迎提交 Pull Request！

+
+> - 感谢 @xykt 本项目IP质量检测采用[xykt/IPQuality](https://github.com/xykt/IPQuality) 脚本！
+
 **💡 全球节点贡献规范：**
 1. 在 `data/regions/国家代码/省州代码/` 目录下新增对应城市的配置 `.json`。
 2. 在 `data/keywords/` 目录下新增或完善配套国家的词库 `kw_XX.txt`。
--- a/core/agent_daemon.sh
+++ b/core/agent_daemon.sh
@@ -46,8 +46,8 @@ if [ -n "$AGENT_IP" ]; then

    # 只有当这是第一次运行，或者公网 IP 发生变动时，才发送 Telegram 申请
    if [ "$AGENT_IP" != "$LAST_IP" ]; then
-        # [v3.5.2 核心] 携带 6 字段双轨身份发起注册申请 (展示别名，暗号尾部追加 NODE_ALIAS)
-        REG_MSG="👋 **[边缘节点接入申请]**%0A大区: \`${REGION_CODE}\`%0A节点: \`${NODE_ALIAS}\`%0A地址: \`${AGENT_IP}:${AGENT_PORT}\`%0A%0A⚠️ **安全验证**: 为防止非法节点接入，请长按复制下方代码，并**发送给我**以完成最终授权录入：%0A%0A\`#REGISTER#|${REGION_CODE}|${NODE_NAME}|${AGENT_IP}|${AGENT_PORT}|${NODE_ALIAS}\`"
+        # [v3.6.0 核心修复] 携带 7 字段身份发起注册申请 (追加 ENABLE_OTA，防止 IP 变动重新注册时丢失 OTA 权限)
+        REG_MSG="👋 **[边缘节点接入申请]**%0A大区: \`${REGION_CODE}\`%0A节点: \`${NODE_ALIAS}\`%0A地址: \`${AGENT_IP}:${AGENT_PORT}\`%0A%0A⚠️ **安全验证**: 为防止非法节点接入，请长按复制下方代码，并**发送给我**以完成最终授权录入：%0A%0A\`#REGISTER#|${REGION_CODE}|${NODE_NAME}|${AGENT_IP}|${AGENT_PORT}|${NODE_ALIAS}|${ENABLE_OTA:-false}\`"
        
        curl -s -m 5 -X POST "${TG_API_URL}" \
            -d "chat_id=${CHAT_ID}" \
@@ -61,6 +61,18 @@ if [ -n "$AGENT_IP" ]; then
    fi
 fi

+# ================== [v3.6.3 新增: 自动生成自签名 TLS 加密证书] ==================
+# [修复] 彻底废除官方网关免 TLS 的裸奔逻辑，全网强制生成证书装甲
+CERT_FILE="${INSTALL_DIR}/core/cert.pem"
+KEY_FILE="${INSTALL_DIR}/core/key.pem"
+if [ ! -f "$CERT_FILE" ] || [ ! -f "$KEY_FILE" ]; then
+    echo "🔐 [Agent] 正在生成本地自签名 TLS 加密证书 (2048位 RSA)..."
+    openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout "$KEY_FILE" -out "$CERT_FILE" \
+        -subj "/C=US/O=IP-Sentinel/CN=Agent-Sec" >/dev/null 2>&1 || true
+fi
+# ==============================================================================
+
 # 3. 启动轻量级 Python3 Webhook 监听服务 (v3.0.4 动态 HMAC 签名防重放)
 cat > "${INSTALL_DIR}/core/webhook.py" << 'EOF'
 import http.server
@@ -71,7 +83,7 @@ import os
 import html
 # ================== [v3.0.4 新增密码学与解析依赖] ==================
 import urllib.parse
-import urllib.request  # [修复] 提升至全局作用域，防止局部变量遮蔽
+import urllib.request
 import hmac
 import hashlib
 import time
@@ -79,6 +91,15 @@ import time

 PORT = int(sys.argv[1])

+# 🛡️ 防重放攻击 (Nonce 缓存池)
+USED_SIGNS = {}
+def clean_used_signs():
+    now = time.time()
+    # 清理过期签名 (超 60 秒的安全窗口)
+    expired = [s for s, t in USED_SIGNS.items() if now - t > 65]
+    for s in expired:
+        del USED_SIGNS[s]
+
 # 🛡️ 提取全局鉴权 Token (利用 CHAT_ID 作为 PSK 预共享密钥)
 AUTH_TOKEN = ""
 if os.path.exists('/opt/ip_sentinel/config.conf'):
@@ -108,8 +129,9 @@ class AgentHandler(http.server.BaseHTTPRequestHandler):
                return
                
            try:
+                current_time = int(time.time())
                # 校验 2：时间戳防重放 (误差 ±60秒 内有效，拒绝隔夜抓包重放)
-                if abs(int(time.time()) - int(req_t)) > 60:
+                if abs(current_time - int(req_t)) > 60:
                    self.send_response(401)
                    self.end_headers()
                    self.wfile.write(b"401 Unauthorized: Request Expired\n")
@@ -118,6 +140,14 @@ class AgentHandler(http.server.BaseHTTPRequestHandler):
                self.send_response(401)
                self.end_headers()
                return
+            
+            # 校验 2.5：基于 60秒 窗口的精确重放拦截 (拦截 MITM 并发洗劫)
+            clean_used_signs()
+            if req_sign in USED_SIGNS:
+                self.send_response(401)
+                self.end_headers()
+                self.wfile.write(b"401 Unauthorized: Replay Attack Detected\n")
+                return
                
            # 校验 3：HMAC 数据完整性与身份合法性校验
            msg = f"{req_path}:{req_t}".encode('utf-8')
@@ -129,17 +159,20 @@ class AgentHandler(http.server.BaseHTTPRequestHandler):
                self.end_headers()
                self.wfile.write(b"401 Unauthorized: Signature Mismatch\n")
                return
+            
+            # 鉴权通过，记录该签名至防重放内存池
+            USED_SIGNS[req_sign] = current_time

        # ================== 路由分发 (恢复为安全的精确匹配) ==================
        
-        # 路由 0: 全局统筹调度 (处理 /trigger_run 一键全节点维护)
+        # 路由 0: 全局统筹调度
        if req_path == '/trigger_run':
            if os.path.exists('/opt/ip_sentinel/core/runner.sh'):
                self.send_response(200)
                self.send_header("Content-type", "text/plain")
                self.end_headers()
                self.wfile.write(b"Action Accepted: runner\n")
-                subprocess.Popen(['bash', '/opt/ip_sentinel/core/runner.sh'])
+                os.system("nohup bash /opt/ip_sentinel/core/runner.sh >/dev/null 2>&1 &")
            else:
                self.send_response(404)
                self.end_headers()
@@ -151,7 +184,7 @@ class AgentHandler(http.server.BaseHTTPRequestHandler):
                self.send_header("Content-type", "text/plain")
                self.end_headers()
                self.wfile.write(b"Action Accepted: mod_google\n")
-                subprocess.Popen(['bash', '/opt/ip_sentinel/core/mod_google.sh'])
+                os.system("nohup bash /opt/ip_sentinel/core/mod_google.sh >/dev/null 2>&1 &")
            else:
                self.send_response(403)
                self.send_header("Content-type", "text/plain")
@@ -165,7 +198,7 @@ class AgentHandler(http.server.BaseHTTPRequestHandler):
                self.send_header("Content-type", "text/plain")
                self.end_headers()
                self.wfile.write(b"Action Accepted: mod_trust\n")
-                subprocess.Popen(['bash', '/opt/ip_sentinel/core/mod_trust.sh'])
+                os.system("nohup bash /opt/ip_sentinel/core/mod_trust.sh >/dev/null 2>&1 &")
            else:
                self.send_response(403)
                self.send_header("Content-type", "text/plain")
@@ -178,7 +211,7 @@ class AgentHandler(http.server.BaseHTTPRequestHandler):
            self.send_header("Content-type", "text/plain")
            self.end_headers()
            self.wfile.write(b"Action Accepted: tg_report\n")
-            subprocess.Popen(['bash', '/opt/ip_sentinel/core/tg_report.sh'])
+            os.system("nohup bash /opt/ip_sentinel/core/tg_report.sh >/dev/null 2>&1 &")

        # 路由 4: 抓取并回传实时日志
        elif req_path == '/trigger_log':
@@ -211,23 +244,45 @@ class AgentHandler(http.server.BaseHTTPRequestHandler):
                
                text_msg = f"📄 <b>[{node_alias}] 实时日志 (v{local_ver}):</b>\n<pre><code>{log_data}</code></pre>"
                
-                data = urllib.parse.urlencode({
+                # [v4.0.3 体验升级] 引入 json 模块并改用 JSON Payload，挂载返回控制台按钮
+                import json
+                node_name_cb = config.get('NODE_NAME', 'Unknown')
+                payload = {
                    'chat_id': config.get('CHAT_ID', ''),
                    'text': text_msg,
-                    'parse_mode': 'HTML'
-                }).encode('utf-8')
+                    'parse_mode': 'HTML',
+                    'reply_markup': {
+                        'inline_keyboard': [[{'text': '⚙️ 调出该节点控制台', 'callback_data': f'manage:{node_name_cb}'}]]
+                    }
+                }
+                data = json.dumps(payload).encode('utf-8')
                
                req = urllib.request.Request(
                    config.get('TG_API_URL', ''), 
                    data=data,
-                    # [动态化] 彻底消灭硬编码，使用运行态版本号
-                    headers={'User-Agent': f'IP-Sentinel-Agent/{local_ver}'}
+                    # [动态化] 彻底消灭硬编码，使用运行态版本号，并声明 JSON 头
+                    headers={
+                        'User-Agent': f'IP-Sentinel-Agent/{local_ver}',
+                        'Content-Type': 'application/json'
+                    }
                )
                urllib.request.urlopen(req, timeout=10)
                
            except Exception as e:
                print(f"Log transmission failed: {e}")

+        # ================== [v4.0.0 新增: 触发深海声呐] ==================
+        elif req_path == '/trigger_quality':
+            self.send_response(200)
+            self.send_header("Content-type", "text/plain")
+            self.end_headers()
+            self.wfile.write(b"Action Accepted: trigger_quality\n")
+            
+            if os.path.exists('/opt/ip_sentinel/core/mod_quality.sh'):
+                os.system("nohup bash /opt/ip_sentinel/core/mod_quality.sh >/dev/null 2>&1 &")
+        # =================================================================
+
+
        # 路由 5: 节点重命名展示别名同步接口 (Base64 终极防御版)
        elif req_path == '/trigger_rename':
            b64_alias = query.get('b64', [''])[0]
@@ -370,17 +425,48 @@ class AgentHandler(http.server.BaseHTTPRequestHandler):
                self.end_headers()
                self.wfile.write(b"Action Accepted: trigger_ota\n")
                
-                # [修复] 逃逸 Systemd Cgroup，防止 Agent 在升级时被同归于尽机制误杀
+                # [修复] 逃逸 Systemd Cgroup，并引入 bash -n 语法树校验防砖机制
                import shutil
+                import base64
+                # 动态提取部署时的源地址，废除强制写死 main 分支，保障隔离测试环境
                repo_url = "https://raw.githubusercontent.com/hotyue/IP-Sentinel/main"
-                ota_cmd = f"export SILENT_OTA='true'; curl -fsSL {repo_url}/core/install.sh -o /tmp/ota_agent.sh && bash /tmp/ota_agent.sh > /opt/ip_sentinel/logs/ota_upgrade.log 2>&1"
+                if os.path.exists('/opt/ip_sentinel/core/install.sh'):
+                    with open('/opt/ip_sentinel/core/install.sh', 'r') as f:
+                        for line in f:
+                            if line.startswith('REPO_RAW_URL='):
+                                repo_url = line.split('=', 1)[1].strip('"\'')
+                                break
                
+                # 动态构建报错回执文本 (第一层 Base64 隔离换行与特殊字符)
+                err_msg = f"❌ **OTA 熔断告警**\n📍 节点: `{config_mem.get('NODE_ALIAS', '未知')}`\n⚠️ 原因: 脚本语法校验(bash -n)未通过，下载可能不完整。\n🚀 状态: 升级已取消，节点安全。"
+                err_msg_b64 = base64.b64encode(err_msg.encode('utf-8')).decode('utf-8')
+                
+                tg_url = config_mem.get('TG_API_URL', '')
+                chat_id = config_mem.get('CHAT_ID', '')
+                
+                # [v3.6.3 究极防御] 采用 Base64 将整个 OTA 执行脚本封装 (第二层隔离)
+                # 彻底免疫因为 python 变量掺杂引号而导致的 shell 注入或截断
+                ota_script = f"""
+export SILENT_OTA="true"
+curl -fsSL {repo_url}/core/install.sh -o /tmp/ota_agent.sh
+if bash -n /tmp/ota_agent.sh; then
+    bash /tmp/ota_agent.sh > /opt/ip_sentinel/logs/ota_upgrade.log 2>&1
+else
+    MSG=$(echo '{err_msg_b64}' | base64 -d)
+    curl -s -m 10 -X POST "{tg_url}" -d "chat_id={chat_id}" -d "text=$MSG" -d "parse_mode=Markdown" > /dev/null 2>&1
+    echo "OTA Checksum Failed: Script corrupted" > /opt/ip_sentinel/logs/ota_upgrade.log
+fi
+"""
+                ota_script_b64 = base64.b64encode(ota_script.encode('utf-8')).decode('utf-8')
+                
+                # 安全解包并执行
                if shutil.which("systemd-run"):
-                    full_cmd = f"systemd-run --quiet --no-block bash -c \"{ota_cmd}\""
+                    full_cmd = f"systemd-run --quiet --no-block bash -c \"echo '{ota_script_b64}' | base64 -d | bash\""
                else:
-                    full_cmd = f"nohup bash -c \"{ota_cmd}\" &"
+                    full_cmd = f"nohup bash -c \"echo '{ota_script_b64}' | base64 -d | bash\" >/dev/null 2>&1 &"
                    
-                subprocess.Popen(full_cmd, shell=True)
+                # 彻底统一为 os.system，消灭最后一个可能游离的 Popen 僵尸进程
+                os.system(full_cmd)
                
            except Exception as e:
                self.send_response(500)
@@ -398,9 +484,18 @@ import socket
 # ================== [v3.0.3 变更: 引入多线程模型抵抗 Slowloris 攻击] ==================
 class ThreadedServer(socketserver.ThreadingMixIn, socketserver.TCPServer):
    allow_reuse_address = True # 开启端口复用，防止热重启时端口冲突
+    
+    # [核心修复] 显式关闭 V6ONLY 参数，治愈大量云主机纯双栈下的 IPv4 耳聋现象
+    def server_bind(self):
+        if self.address_family == socket.AF_INET6:
+            try:
+                self.socket.setsockopt(socket.IPPROTO_IPV6, socket.IPV6_V6ONLY, 0)
+            except Exception:
+                pass
+        super().server_bind()

 try:
-    # 1. 优先尝试监听双栈/IPv6 (大多数 Linux 默认支持 IPv4 映射接入)
+    # 1. 优先尝试监听双栈/IPv6
    ThreadedServer.address_family = socket.AF_INET6
    httpd = ThreadedServer(("::", PORT), AgentHandler)
 except Exception:
@@ -408,6 +503,21 @@ except Exception:
    ThreadedServer.address_family = socket.AF_INET
    httpd = ThreadedServer(("0.0.0.0", PORT), AgentHandler)

+# ================== [v3.6.3 核心: 挂载 TLS 加密隧道 (强制装甲版)] ==================
+import ssl
+cert_path = '/opt/ip_sentinel/core/cert.pem'
+key_path = '/opt/ip_sentinel/core/key.pem'
+
+# 全网强制启用 TLS 装甲，彻底消灭 HTTP 裸奔漏洞
+if os.path.exists(cert_path) and os.path.exists(key_path):
+    try:
+        context = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)
+        context.load_cert_chain(certfile=cert_path, keyfile=key_path)
+        httpd.socket = context.wrap_socket(httpd.socket, server_side=True)
+    except Exception as e:
+        print(f"SSL 隧道构建失败，退化为 HTTP: {e}")
+# ======================================================================================
+
 try:
    httpd.serve_forever()
 except Exception as e:
--- a/core/install.sh
+++ b/core/install.sh
@@ -22,9 +22,10 @@ INSTALL_DIR="/opt/ip_sentinel"
 CONFIG_FILE="${INSTALL_DIR}/config.conf"

 # [核心: 动态提取 Agent 专属版本锚点 (KV 解析法)]
-TARGET_VERSION=$(curl -s -m 3 "${REPO_RAW_URL}/version.txt" | grep "^AGENT_VERSION=" | cut -d'=' -f2 | tr -d '[:space:]')
+# [修复] 增加 -L 与双栈容灾 (-4)，解决纯 V6 或 V6 优先机器连接 GitHub Raw 易超时的问题
+TARGET_VERSION=$( (curl -sL -m 5 "${REPO_RAW_URL}/version.txt" || curl -4 -sL -m 5 "${REPO_RAW_URL}/version.txt") 2>/dev/null | grep "^AGENT_VERSION=" | cut -d'=' -f2 | tr -d '[:space:]')
 # 🛡️ 兜底防线：如果网络波动拉取失败，启用内置的安全兜底版本
-TARGET_VERSION=${TARGET_VERSION:-"3.5.1"}
+TARGET_VERSION=${TARGET_VERSION:-"4.0.0"}

 # 轻量级版本号比对函数 (例如: version_lt "3.3.1" "3.4.0" 返回 true)
 version_lt() {
@@ -35,7 +36,7 @@ version_lt() {
 echo -e "\n[1/7] 正在探测并安装基础环境依赖 (curl, jq, cron, procps, python3)..."

 # 定义必须检测的核心命令
-REQUIRED_CMDS=("curl" "jq" "crontab" "pgrep" "python3")
+REQUIRED_CMDS=("curl" "jq" "crontab" "pgrep" "python3" "openssl")
 MISSING_CMDS=()

 # 基础探测：预检查缺失的命令
@@ -53,40 +54,45 @@ if [ ${#MISSING_CMDS[@]} -gt 0 ]; then
    if command -v apt-get >/dev/null 2>&1; then
        # Debian / Ubuntu 系列
        apt-get update -y >/dev/null 2>&1
-        apt-get install -y curl jq cron procps python3 >/dev/null 2>&1
+        # [v3.6.3 抽脂级优化] 注入 --no-install-recommends 拒绝捆绑销售，大幅节省磁盘与内存
+        apt-get install -y --no-install-recommends curl jq cron procps python3 openssl >/dev/null 2>&1
        systemctl enable cron >/dev/null 2>&1 && systemctl start cron >/dev/null 2>&1
        
    elif command -v yum >/dev/null 2>&1 || command -v dnf >/dev/null 2>&1; then
        # RHEL / CentOS / AlmaLinux 系列
        PKG_MGR="yum"
-        command -v dnf >/dev/null 2>&1 && PKG_MGR="dnf"
-        $PKG_MGR install -y curl jq cronie procps-ng python3 >/dev/null 2>&1
+        OPT_ARGS=""
+        if command -v dnf >/dev/null 2>&1; then
+            PKG_MGR="dnf"
+            # [v3.6.3 抽脂级优化] 强行关闭 DNF 的弱依赖拉取
+            OPT_ARGS="--setopt=install_weak_deps=False"
+        fi
+        $PKG_MGR install -y $OPT_ARGS curl jq cronie procps-ng python3 openssl >/dev/null 2>&1
        systemctl enable crond >/dev/null 2>&1 && systemctl start crond >/dev/null 2>&1
        
    elif command -v apk >/dev/null 2>&1; then
-        # [核心修复 Issue #21] Alpine Linux 系列
+        # Alpine 本身就是极致精简，无需特殊参数
        echo "Alpine 探测到系统类型为 Alpine Linux，正在执行轻量级安装..."
-        apk add --no-cache curl jq dcron procps python3 bash >/dev/null 2>&1
-        # Alpine 下必须手动创建 cron spool 目录并启动 crond
+        # [修复] 新版 Alpine 已废弃 dcron。优先尝试 cronie，若失败则信任自带 busybox-cron，并移除屏蔽以便暴露报错
+        apk add --no-cache curl jq cronie procps python3 bash openssl || apk add --no-cache curl jq procps python3 bash openssl
        mkdir -p /var/spool/cron/crontabs
        rc-update add crond default >/dev/null 2>&1
        service crond start >/dev/null 2>&1
        
    elif command -v pacman >/dev/null 2>&1; then
-        # [核心修复 Issue #250] Arch Linux 系列
-        pacman -Sy --noconfirm curl jq cronie procps-ng python >/dev/null 2>&1
-        # Arch 下某些 cronie 实现可能缺少 /root/.cache 权限，做个兼容保障
+        # Arch Linux 系列
+        pacman -Sy --noconfirm curl jq cronie procps-ng python openssl >/dev/null 2>&1
        mkdir -p /root/.cache/crontab 2>/dev/null
        systemctl enable cronie >/dev/null 2>&1 && systemctl start cronie >/dev/null 2>&1
        
    else
-        # 无法识别的系统：退出并给出清晰的引导信息
+        # 无法识别的系统：退出并给出清晰的引导信息 (同步更新防捆绑参数)
        echo -e "\033[31m❌ 自动安装失败：系统未知的包管理器。\033[0m"
        echo -e "\033[33m⚠️ 请根据您的操作系统，手动执行以下安装命令后重新运行本脚本：\033[0m"
-        echo -e "  Debian/Ubuntu: \033[36mapt-get update && apt-get install -y curl jq cron procps python3\033[0m"
-        echo -e "  CentOS/RHEL:   \033[36myum install -y curl jq cronie procps-ng python3\033[0m"
-        echo -e "  Alpine Linux:  \033[36mapk add --no-cache curl jq dcron procps python3 bash\033[0m"
-        echo -e "  Arch Linux:    \033[36mpacman -Sy curl jq cronie procps-ng python\033[0m"
+        echo -e "  Debian/Ubuntu: \033[36mapt-get update && apt-get install -y --no-install-recommends curl jq cron procps python3 openssl\033[0m"
+        echo -e "  CentOS/RHEL:   \033[36myum install -y curl jq cronie procps-ng python3 openssl\033[0m"
+        echo -e "  Alpine Linux:  \033[36mapk add --no-cache curl jq cronie procps python3 bash openssl\033[0m"
+        echo -e "  Arch Linux:    \033[36mpacman -Sy curl jq cronie procps-ng python openssl\033[0m"
        exit 1
    fi
    
@@ -181,8 +187,7 @@ rm -f /tmp/cron_clean

 # 3. 抹除旧版核心代码，杜绝代码冲突 (根据模式分流)
 if [ "$UPGRADE_MODE" == "true" ]; then
-    # 升级模式：仅销毁核心引擎，严格保留 config 与 data
-    rm -rf "${INSTALL_DIR}/core" 2>/dev/null
+    # [修复] 升级模式：不再提前销毁核心引擎，改为后续下载成功后的原子化替换，彻底防止断网变砖！
    if [ "$KEEP_LOGS" == "false" ]; then
        rm -rf "${INSTALL_DIR}/logs" 2>/dev/null
        echo -e "🗑️ 历史日志已按指令清空。"
@@ -605,38 +610,46 @@ if [ "$UPGRADE_MODE" == "true" ]; then
 fi
 # ========================================================================

-# 6. 拉取全套组件 (按需下载，绝不浪费空间)
-echo -e "\n[6/7] 正在根据模块开关部署核心引擎与热数据..."
-# 确保目录在升级模式下也能被正确建立
-mkdir -p "${INSTALL_DIR}/core"
+# 6. 拉取全套组件 (原子化升级，防断网变砖)
+echo -e "\n[6/7] 正在部署核心引擎与热数据..."
 mkdir -p "${INSTALL_DIR}/data/keywords"

-# 基础公共组件
-curl -sL "${REPO_RAW_URL}/core/runner.sh" -o "${INSTALL_DIR}/core/runner.sh"
-curl -sL "${REPO_RAW_URL}/core/updater.sh" -o "${INSTALL_DIR}/core/updater.sh"
-curl -sL "${REPO_RAW_URL}/core/tg_report.sh" -o "${INSTALL_DIR}/core/tg_report.sh"
-curl -sL "${REPO_RAW_URL}/core/agent_daemon.sh" -o "${INSTALL_DIR}/core/agent_daemon.sh"
-curl -sL "${REPO_RAW_URL}/core/uninstall.sh" -o "${INSTALL_DIR}/core/uninstall.sh"
-curl -sL "${REPO_RAW_URL}/data/user_agents.txt" -o "${INSTALL_DIR}/data/user_agents.txt"
+# [核心修复] 开辟临时下载区，确保下载 100% 成功后再替换旧核心
+TMP_CORE="/tmp/ip_sentinel_core_$$"
+mkdir -p "$TMP_CORE"

-# 动态按需组件
-if [ "$ENABLE_GOOGLE" == "true" ]; then
-    curl -sL "${REPO_RAW_URL}/core/mod_google.sh" -o "${INSTALL_DIR}/core/mod_google.sh"
-    # [v3.2.2 修复] 动态匹配词库下载逻辑
-    if [ "$UPGRADE_MODE" == "false" ]; then
-        curl -sL "${REPO_RAW_URL}/data/keywords/${KEYWORD_FILE}" -o "${INSTALL_DIR}/data/keywords/${KEYWORD_FILE}"
-    else
-        # 升级模式：利用已有的 REGION_CODE 更新通用词库
-        curl -sL "${REPO_RAW_URL}/data/keywords/kw_${REGION_CODE}.txt" -o "${INSTALL_DIR}/data/keywords/kw_${REGION_CODE}.txt" 2>/dev/null || true
-    fi
-fi
-
-if [ "$ENABLE_TRUST" == "true" ]; then
-    curl -sL "${REPO_RAW_URL}/core/mod_trust.sh" -o "${INSTALL_DIR}/core/mod_trust.sh"
+# 拉取核心代码至临时区
+curl -sL "${REPO_RAW_URL}/core/runner.sh" -o "${TMP_CORE}/runner.sh"
+curl -sL "${REPO_RAW_URL}/core/updater.sh" -o "${TMP_CORE}/updater.sh"
+curl -sL "${REPO_RAW_URL}/core/tg_report.sh" -o "${TMP_CORE}/tg_report.sh"
+curl -sL "${REPO_RAW_URL}/core/agent_daemon.sh" -o "${TMP_CORE}/agent_daemon.sh"
+curl -sL "${REPO_RAW_URL}/core/uninstall.sh" -o "${TMP_CORE}/uninstall.sh"
+curl -sL "${REPO_RAW_URL}/core/mod_google.sh" -o "${TMP_CORE}/mod_google.sh"
+curl -sL "${REPO_RAW_URL}/core/mod_trust.sh" -o "${TMP_CORE}/mod_trust.sh"
+curl -sL "${REPO_RAW_URL}/core/mod_quality.sh" -o "${TMP_CORE}/mod_quality.sh"
+
+# 🛡️ 防砖终极校验：检查关键文件是否真实存在且不为空
+if [ ! -s "${TMP_CORE}/runner.sh" ] || [ ! -s "${TMP_CORE}/agent_daemon.sh" ]; then
+    echo -e "\033[31m❌ 致命错误：核心代码拉取失败！网络阻断或 GitHub Raw 异常。\033[0m"
+    echo "🛡️ 防砖机制触发：已中止覆盖，旧版哨兵引擎仍安全存活中。"
+    rm -rf "$TMP_CORE"
+    exit 1
 fi

+# 校验完美通过，执行原子化交接
+rm -rf "${INSTALL_DIR}/core" 2>/dev/null
+mv "$TMP_CORE" "${INSTALL_DIR}/core"
 chmod +x ${INSTALL_DIR}/core/*.sh

+# 拉取热数据与词库
+curl -sL "${REPO_RAW_URL}/data/user_agents.txt" -o "${INSTALL_DIR}/data/user_agents.txt"
+if [ "$UPGRADE_MODE" == "false" ]; then
+    curl -sL "${REPO_RAW_URL}/data/keywords/${KEYWORD_FILE}" -o "${INSTALL_DIR}/data/keywords/${KEYWORD_FILE}"
+else
+    # 升级模式：利用已有的 REGION_CODE 更新通用词库
+    curl -sL "${REPO_RAW_URL}/data/keywords/kw_${REGION_CODE}.txt" -o "${INSTALL_DIR}/data/keywords/kw_${REGION_CODE}.txt" 2>/dev/null || true
+fi
+
 # 7. 配置系统定时任务 (高频调度与看门狗)
 echo -e "\n[7/7] 正在注入系统守护进程与调度器..."

@@ -665,7 +678,7 @@ EOF
 [Unit]
 Description=Timer for IP-Sentinel Runner Service
 [Timer]
-OnBootSec=10
+OnActiveSec=10s
 OnUnitActiveSec=30min
 RandomizedDelaySec=180
 Persistent=true
@@ -784,31 +797,34 @@ if [[ -n "$TG_TOKEN" ]] && [[ -n "$CHAT_ID" ]]; then
        [ -z "$OLD_VERSION" ] && OLD_VERSION="3.3.1"
        
        # [路由表 1]: 跨代兼容 (老版本 < v3.3.2)
-        # 必须强制下发带有 #REGISTER# 的警告，引导长官重新同步哈希身份
        if version_lt "$OLD_VERSION" "3.3.2"; then
            echo -e "\n📡 [路由枢纽] 正在执行跨代架构重组 (v${OLD_VERSION} -> v${TARGET_VERSION})..."
-            curl -s -X POST "${TG_API_URL}" \
-                -d "chat_id=${CHAT_ID}" \
-                -d "parse_mode=Markdown" \
-                -d "text=✨ *IP-Sentinel 引擎热更新完成！*
+            TEXT_MSG="✨ *IP-Sentinel 引擎热更新完成！*
 📍 节点：\`${NODE_ALIAS}\`
 🌐 IP：\`${SAFE_PUBLIC_IP}\`
 🚀 状态：v${TARGET_VERSION} OTA 动态活体引擎已部署

 ⚠️ *战区架构已重组，请务必点击下方指令并发送，以同步新的防撞档案：*
-\`${REG_MSG}\`" >/dev/null 2>&1
+\`${REG_MSG}\`"
+            
+            # [v4.0.3 体验升级] 注入交互式控制台按钮
+            JSON_PAYLOAD=$(jq -n --arg cid "$CHAT_ID" --arg txt "$TEXT_MSG" --arg cb "manage:${NODE_NAME}" '{chat_id: $cid, text: $txt, parse_mode: "Markdown", reply_markup: {inline_keyboard: [[{text: "⚙️ 调出该节点控制台", callback_data: $cb}]]}}')
+            curl -s -X POST "${TG_API_URL}" -H "Content-Type: application/json" -d "$JSON_PAYLOAD" >/dev/null 2>&1
+            
            echo -e "\033[32m✅ 升级通知已推送！请前往 TG 点击注册指令完成身份同步！\033[0m"
            
        # [路由表 2]: 现代静默升级 (老版本 >= v3.3.2)
        else
            echo -e "\n📡 [路由枢纽] 正在执行静默平滑升级 (v${OLD_VERSION} -> v${TARGET_VERSION})..."
-            curl -s -X POST "${TG_API_URL}" \
-                -d "chat_id=${CHAT_ID}" \
-                -d "parse_mode=Markdown" \
-                -d "text=✨ *IP-Sentinel 引擎热更新完成！*
+            TEXT_MSG="✨ *IP-Sentinel 引擎热更新完成！*
 📍 节点：\`${NODE_ALIAS}\`
 🌐 IP：\`${SAFE_PUBLIC_IP}\`
-🚀 状态：v${TARGET_VERSION} OTA 动态活体引擎已部署" >/dev/null 2>&1
+🚀 状态：v${TARGET_VERSION} OTA 动态活体引擎已部署"
+
+            # [v4.0.3 体验升级] 注入交互式控制台按钮
+            JSON_PAYLOAD=$(jq -n --arg cid "$CHAT_ID" --arg txt "$TEXT_MSG" --arg cb "manage:${NODE_NAME}" '{chat_id: $cid, text: $txt, parse_mode: "Markdown", reply_markup: {inline_keyboard: [[{text: "⚙️ 调出该节点控制台", callback_data: $cb}]]}}')
+            curl -s -X POST "${TG_API_URL}" -H "Content-Type: application/json" -d "$JSON_PAYLOAD" >/dev/null 2>&1
+
            echo -e "\033[32m✅ 升级成功通知已推送到您的 Telegram！\033[0m"
        fi
        
@@ -823,16 +839,17 @@ if [[ -n "$TG_TOKEN" ]] && [[ -n "$CHAT_ID" ]]; then
    else
        # [全新安装路由]
        echo -e "\n📡 正在向指挥部发送注册暗号..."
-        PUSH_RESULT=$(curl -s -X POST "${TG_API_URL}" \
-            -d "chat_id=${CHAT_ID}" \
-            -d "parse_mode=Markdown" \
-            -d "text=✨ *IP-Sentinel 部署成功！*
+        TEXT_MSG="✨ *IP-Sentinel 部署成功！*
 📍 区域：${REGION_NAME}
 🌐 IP：${SAFE_PUBLIC_IP}
 🔌 端口：${AGENT_PORT}

 🔑 *请点击下方指令复制并回复给机器人：*
-\`${REG_MSG}\`")
+\`${REG_MSG}\`"
+
+        # [v4.0.3 体验升级] 注入交互式控制台按钮
+        JSON_PAYLOAD=$(jq -n --arg cid "$CHAT_ID" --arg txt "$TEXT_MSG" --arg cb "manage:${NODE_NAME}" '{chat_id: $cid, text: $txt, parse_mode: "Markdown", reply_markup: {inline_keyboard: [[{text: "⚙️ 调出该节点控制台", callback_data: $cb}]]}}')
+        PUSH_RESULT=$(curl -s -X POST "${TG_API_URL}" -H "Content-Type: application/json" -d "$JSON_PAYLOAD")

        if echo "$PUSH_RESULT" | grep -q '"ok":true'; then
            echo -e "\033[32m✅ 注册信息已推送到您的 Telegram，请按指令完成最终激活！\033[0m"
@@ -880,12 +897,15 @@ echo "🗑️ 若未来需卸载，可重新运行本脚本选择[2]或执行: b
 echo "========================================================"

 # ================== [v3.1.2 新增: 玻璃房透明装机统计] ==================
-echo -e "\n📡 正在向开源社区汇报装机量 (完全匿名，不收集IP)..."
-AGENT_COUNT=$(curl -s -m 3 "https://ip-sentinel-count.samanthaestime296.workers.dev/ping/agent" || echo "")
+# [修复] 仅在全新部署时触发统计，平滑升级/OTA 时绝对不触发，防止配额耗尽与数据注水
+if [ "$UPGRADE_MODE" == "false" ]; then
+    echo -e "\n📡 正在向开源社区汇报装机量 (完全匿名，不收集IP)..."
+    AGENT_COUNT=$(curl -s -m 3 "https://ip-sentinel-count.samanthaestime296.workers.dev/ping/agent" || echo "")

-if [ -n "$AGENT_COUNT" ] && [[ "$AGENT_COUNT" =~ ^[0-9]+$ ]]; then
-    echo -e "\033[32m✅ 感谢您成为全球第 ${AGENT_COUNT} 名 IP-Sentinel 哨兵！\033[0m"
-else
-    echo -e "\033[32m✅ 感谢您加入 IP-Sentinel 哨兵阵列！\033[0m"
+    if [ -n "$AGENT_COUNT" ] && [[ "$AGENT_COUNT" =~ ^[0-9]+$ ]]; then
+        echo -e "\033[32m✅ 感谢您成为全球第 ${AGENT_COUNT} 名 IP-Sentinel 哨兵！\033[0m"
+    else
+        echo -e "\033[32m✅ 感谢您加入 IP-Sentinel 哨兵阵列！\033[0m"
+    fi
+    echo -e "\n"
 fi
-echo -e "\n"
--- a/core/mod_google.sh
+++ b/core/mod_google.sh
@@ -22,9 +22,20 @@ if ! type log >/dev/null 2>&1; then
        # [v3.4.0 核心] 提取当前配置中的版本锚点
        local local_ver="${AGENT_VERSION:-未知}"
        
+        # 保证日志目录存在
        mkdir -p "${INSTALL_DIR}/logs"
-        # 统一日志格式，注入 [版本号] 追踪标识
-        printf "[$(date '+%Y-%m-%d %H:%M:%S')] [v%-5s] [%-5s] [%-7s] [%s] %s\n" "$local_ver" "$2" "$1" "$REGION_CODE" "$3" >> "${INSTALL_DIR}/logs/sentinel.log"
+    
+        # 日志格式注入 [版本号] 追踪标识
+        local core_msg=$(printf "[v%-5s] [%-5s] [%-7s] [%s] %s" "$local_ver" "$2" "$1" "$REGION_CODE" "$3")
+        echo "[$(date '+%Y-%m-%d %H:%M:%S')] $core_msg" >> "${INSTALL_DIR}/logs/sentinel.log"
+
+        # 强制推送到 Systemd Journal (如果系统支持)
+        if command -v logger >/dev/null 2>&1; then
+            logger -t ip-sentinel "$core_msg"
+        else
+            # 降级输出到 stdout，让 Systemd 捕获
+            echo "$core_msg"
+        fi
    }
 fi

@@ -97,14 +108,21 @@ CURL_BIND_OPT=""
 DYNAMIC_IP_PREF="-${IP_PREF:-4}" # 默认提取用户配置

 if [[ -n "$BIND_IP" && "$BIND_IP" =~ ^[0-9a-fA-F:\.]+$ ]]; then
-    CURL_BIND_OPT="--interface $BIND_IP"
-    # 智能探测：带冒号为 V6，带点号为 V4
-    if [[ "$BIND_IP" == *":"* ]]; then
-        DYNAMIC_IP_PREF="-6"
-        log "$MODULE_NAME" "INFO " "底层路由锁定: 绑定 IPv6 出口及协议 ($BIND_IP)"
-    elif [[ "$BIND_IP" == *"."* ]]; then
-        DYNAMIC_IP_PREF="-4"
-        log "$MODULE_NAME" "INFO " "底层路由锁定: 绑定 IPv4 出口及协议 ($BIND_IP)"
+    # [v3.6.3 容错层补丁] 探测物理网卡/虚拟 IP 存活状态
+    RAW_BIND_IP=$(echo "$BIND_IP" | tr -d '[]')
+    if ! ip addr show 2>/dev/null | grep -qw "$RAW_BIND_IP"; then
+        log "$MODULE_NAME" "WARN " "检测到配置的出口 IP ($RAW_BIND_IP) 已丢失，自动降级为系统默认路由出网！"
+        CURL_BIND_OPT=""
+    else
+        CURL_BIND_OPT="--interface $BIND_IP"
+        # 智能探测：带冒号为 V6，带点号为 V4
+        if [[ "$BIND_IP" == *":"* ]]; then
+            DYNAMIC_IP_PREF="-6"
+            log "$MODULE_NAME" "INFO " "底层路由锁定: 绑定 IPv6 出口及协议 ($BIND_IP)"
+        elif [[ "$BIND_IP" == *"."* ]]; then
+            DYNAMIC_IP_PREF="-4"
+            log "$MODULE_NAME" "INFO " "底层路由锁定: 绑定 IPv4 出口及协议 ($BIND_IP)"
+        fi
    fi
 fi

@@ -152,44 +170,31 @@ for ((i=1; i<=TOTAL_ACTIONS; i++)); do
    fi
 done

-# --- [结果纠偏自检 (V3.2.1 高精度容错版)] ---
-# [V3.2.1 热修复] 探针同样应用 $DYNAMIC_IP_PREF 协议自适应
-PROBE_RESULT=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 15 -s -L -o /dev/null -w "%{http_code}|%{url_effective}" https://www.google.com)
+# --- [结果纠偏自检 (V4.0.3 终极真理版: 穿透 Google 真实 GeoIP 数据库)] ---
+# 彻底抛弃不可靠的前端 URL 重定向判定 (解决 Issue #35 和 #14 的假阳性问题)
+# 战术揭秘：Google 与 YouTube 共享绝对一致的底层 GeoIP 库。
+# 我们直接抓取 YouTube 源码内部的 "GL" (Geo-Location) 环境变量，拿到 Google 视角的 2 位国家代码！

-# 分离状态码与 URL
-PROBE_CODE=$(echo "$PROBE_RESULT" | cut -d'|' -f1)
-FINAL_URL=$(echo "$PROBE_RESULT" | cut -d'|' -f2)
+log "$MODULE_NAME" "INFO " "正在穿透获取 Google 底层真实 GeoIP 锚点..."
+YT_HTML=$(curl $CURL_BIND_OPT $DYNAMIC_IP_PREF -m 15 -s -L https://www.youtube.com)

-# 0. 致命拦截：网络断开、DNS 解析失败或严重超时
-if [ "$PROBE_CODE" == "000" ] || [ -z "$FINAL_URL" ]; then
-    STATUS="🚨 探针失效 (网络阻断或底层路由异常)"
+# 精准正则提取 "GL":"XX" 中的两位字母 (完美兼容所有老旧系统环境)
+REAL_REGION=$(echo "$YT_HTML" | grep -o '"GL":"[A-Za-z]\{2\}"' | head -n 1 | cut -d'"' -f4 | tr 'a-z' 'A-Z')
+
+if [ -z "$REAL_REGION" ]; then
+    STATUS="🚨 探针失效 (网络阻断，或已被 Google 验证码/5秒盾拦截)"
 else
-    # 核心战术：精准提取最终 URL 的域名部分
-    ACTUAL_DOMAIN=$(echo "$FINAL_URL" | awk -F/ '{print $3}')
+    # [基准对齐] 提取配置大区 (兼容州级穿透，如 US-TX -> US)，并修正英国的 ISO 标准代码
+    TARGET_CC="${REGION_CODE%%-*}"
+    [ "$TARGET_CC" == "UK" ] && TARGET_CC="GB"
    
-    # [V3.2.1 优化] 使用通配符 * 剔除任意前缀 (无论是 www.google. 还是 ipv4.google.)
-    ACTUAL_SUFFIX=${ACTUAL_DOMAIN#*google.}
-
-    # 1. 优先验证：绝对匹配目标后缀 (彻底杜绝 com 包含于 com.hk 的陷阱)
-    if [ "$ACTUAL_SUFFIX" == "$VALID_URL_SUFFIX" ]; then
-        STATUS="✅ 目标区域达成 ($ACTUAL_SUFFIX)"
-
-    # 2. 核心拦截：精准捕捉送中特征 (com.hk)
-    elif [ "$ACTUAL_SUFFIX" == "com.hk" ]; then
-        if [ "$REGION_CODE" == "HK" ]; then
-            STATUS="✅ 目标区域达成 (HK 专属 com.hk)"
-        else
-            STATUS="❌ 严重漂移！判定为送中区 (实际跳往 $ACTUAL_SUFFIX)"
-        fi
-
-    # 3. 宽容处理：遵守 Google 无跳转新规 (严格限定必须是纯粹的 com)
-    # [视觉优化] 留在 .com 代表 IP 极度纯净未被区域沙盒锁定，计入成功战绩！
-    elif [ "$ACTUAL_SUFFIX" == "com" ]; then
-        STATUS="✅ 目标区域达成 (免签停留 .com 通用主站)"
-
-    # 4. 跨区漂移：所有预判之外的后缀，全部视为异常
+    # 终极审判逻辑
+    if [ "$REAL_REGION" == "CN" ]; then
+        STATUS="❌ 严重高危！IP 已被 Google 判定为中国大陆 (送中)！"
+    elif [ "$REAL_REGION" == "$TARGET_CC" ]; then
+        STATUS="✅ 目标区域达成 (底层真实锚定: $REAL_REGION)"
    else
-        STATUS="⚠️ 跨区跳板漂移 (当前实际归属: $ACTUAL_SUFFIX)"
+        STATUS="⚠️ 区域发生漂移！目标 $TARGET_CC，实际归属 $REAL_REGION (跨区送医/送美)"
    fi
 fi

--- a/core/mod_quality.sh
+++ b/core/mod_quality.sh
@@ -0,0 +1,206 @@
+#!/bin/bash
+# ==========================================================
+# IP-Sentinel: 深海声呐 (IP 质量全维异步检测模块 v4.0.0)
+# ==========================================================
+
+source /opt/ip_sentinel/config.conf
+
+# ==========================================
+# 1. 动态网络锚定与协议自适应 (专为多 IP / NAT 架构打造)
+# ==========================================
+DYNAMIC_IP_PREF="${IP_PREF:-4}"
+PROBE_ARGS=("-y" "-j" "-f") # 默认注入: 自动确认、JSON格式、明文无掩码IP
+
+# 强壮正则：支持 V4, V6 以及带有 [] 护甲的 V6 (兼容多 IP 站群机)
+if [[ -n "$BIND_IP" && "$BIND_IP" =~ ^[0-9a-fA-F:\[\]\.]+$ ]]; then
+    RAW_BIND_IP=$(echo "$BIND_IP" | tr -d '[]')
+    # 严格探测物理网卡/虚拟 IP 存活状态，防止 IP 漂移导致探针彻底报错
+    if ip addr show 2>/dev/null | grep -qw "$RAW_BIND_IP"; then
+        # 核心：精准锁定多 IP 机器的出口网卡，指哪打哪
+        PROBE_ARGS+=("-i" "$RAW_BIND_IP")
+        
+        # 智能识别 V4 / V6，强制覆盖系统默认的 IP_PREF
+        if [[ "$RAW_BIND_IP" == *":"* ]]; then
+            DYNAMIC_IP_PREF="6"
+        elif [[ "$RAW_BIND_IP" == *"."* ]]; then
+            DYNAMIC_IP_PREF="4"
+        fi
+    fi
+fi
+
+# 补齐协议版本参数 (-4 或 -6)
+PROBE_ARGS+=("-${DYNAMIC_IP_PREF}")
+
+# 2. 静默拉取原始数据 (消除短链接 RCE 劫持风险，收编为本地固化执行)
+PROBE_SCRIPT="/opt/ip_sentinel/core/ip_probe.sh"
+if [ ! -x "$PROBE_SCRIPT" ]; then
+    # 若本地探针尚未就绪，直接从 GitHub 官方主干拉取底层源码，绕过未知域名
+    curl -sL "https://raw.githubusercontent.com/xykt/IPQuality/main/ip.sh" -o "$PROBE_SCRIPT" 2>/dev/null
+    chmod +x "$PROBE_SCRIPT" 2>/dev/null
+fi
+
+# 采用本地执行，将动态参数阵列展开，彻底封死外部投毒与 NAT 死锁陷阱
+RAW_OUTPUT=$(timeout 180 bash "$PROBE_SCRIPT" "${PROBE_ARGS[@]}" 2>/dev/null)
+
+# 2. 极致截取 JSON (无视开头的赞助商广告与不可见字符，精准提取)
+JSON_DATA="{${RAW_OUTPUT#*\{}"
+
+# 2. 提取基础物理定位与身份特征 (兼作合法性校验)
+IP_ADDR=$(echo "$JSON_DATA" | jq -r '.Head.IP // empty' 2>/dev/null)
+
+if [ -z "$IP_ADDR" ]; then
+    curl -s -X POST "${TG_API_URL}" \
+        -d "chat_id=${CHAT_ID}" \
+        -d "parse_mode=Markdown" \
+        -d "text=❌ *深海声呐探测失败*
+📍 节点：\`${NODE_ALIAS}\`
+🌐 锁定IP：\`${PUBLIC_IP}\`
+⚠️ *未收到有效回波。检测源超时或数据解析受阻。*" >/dev/null
+    exit 1
+fi
+
+[ -z "$IP_ADDR" ] && IP_ADDR="$PUBLIC_IP"
+ASN=$(echo "$JSON_DATA" | jq -r '.Info.ASN // "Unknown"' 2>/dev/null)
+ORG=$(echo "$JSON_DATA" | jq -r '.Info.Organization // "Unknown"' 2>/dev/null)
+CITY=$(echo "$JSON_DATA" | jq -r '.Info.City.Name // "Unknown"' 2>/dev/null)
+COUNTRY=$(echo "$JSON_DATA" | jq -r '.Info.Region.Name // "Unknown"' 2>/dev/null)
+IP_TYPE=$(echo "$JSON_DATA" | jq -r '.Info.Type // "未知属性"' 2>/dev/null)
+USAGE_TYPE=$(echo "$JSON_DATA" | jq -r '.Type.Usage.IPinfo // "未知场景"' 2>/dev/null)
+
+# 3. 深度欺诈与信用评估 (各大权威库联查)
+SCAM_SCORE=$(echo "$JSON_DATA" | jq -r '.Score.SCAMALYTICS // "0"' 2>/dev/null)
+ABUSE_SCORE=$(echo "$JSON_DATA" | jq -r '.Score.AbuseIPDB // "0"' 2>/dev/null)
+IPQS_SCORE=$(echo "$JSON_DATA" | jq -r '.Score.IPQS // "0"' 2>/dev/null)
+IP2L_SCORE=$(echo "$JSON_DATA" | jq -r '.Score.IP2LOCATION // "0"' 2>/dev/null)
+FRAUD_RISK=$(echo "$JSON_DATA" | jq -r '.Score.ipapi // "0%"' 2>/dev/null)
+
+# [修复] 清洗 API 阻断返回的 null 值，保障面板整洁
+[ "$SCAM_SCORE" == "null" ] || [ -z "$SCAM_SCORE" ] && SCAM_SCORE="N/A"
+[ "$ABUSE_SCORE" == "null" ] || [ -z "$ABUSE_SCORE" ] && ABUSE_SCORE="N/A"
+[ "$IPQS_SCORE" == "null" ] || [ -z "$IPQS_SCORE" ] && IPQS_SCORE="N/A"
+[ "$IP2L_SCORE" == "null" ] || [ -z "$IP2L_SCORE" ] && IP2L_SCORE="N/A"
+[ "$FRAUD_RISK" == "null" ] || [ -z "$FRAUD_RISK" ] && FRAUD_RISK="N/A"
+
+# 代理/VPN 特征探针 (只要有一家认为是代理，就亮黄灯)
+IS_PROXY="🟢 干净"
+if echo "$JSON_DATA" | jq -e '.Factor.Proxy | to_entries | any(.value == true)' >/dev/null 2>&1 || \
+   echo "$JSON_DATA" | jq -e '.Factor.VPN | to_entries | any(.value == true)' >/dev/null 2>&1; then
+    IS_PROXY="🟡 疑似代理/VPN"
+fi
+
+# 4. 提取流媒体与 AI 解锁指标 (带解锁类型)
+parse_media() {
+    local status=$(echo "$JSON_DATA" | jq -r ".Media.$1.Status // \"未知\"" 2>/dev/null)
+    local reg=$(echo "$JSON_DATA" | jq -r ".Media.$1.Region // \"\"" 2>/dev/null)
+    local type=$(echo "$JSON_DATA" | jq -r ".Media.$1.Type // \"\"" 2>/dev/null)
+    
+    if [[ "$status" == *"解锁"* ]]; then
+        echo "🟢 ${reg} (${type})"
+    elif [[ "$status" == *"仅"* ]] || [[ "$status" == *"机房"* ]] || [[ "$status" == *"待支持"* ]]; then
+        # 捕捉 Netflix "仅自制"、ChatGPT "仅网页"、TikTok "机房" 等半残状态
+        echo "🟡 ${status} ${reg}"
+    elif [[ "$status" == *"屏蔽"* ]] || [[ "$status" == *"失败"* ]] || [[ "$status" == *"中国"* ]] || [[ "$status" == *"禁"* ]]; then
+        # 捕捉 "屏蔽"、"失败"、"禁会员"、"中国"(送中)
+        echo "🔴 ${status}"
+    else
+        echo "⚪ ${status}"
+    fi
+}
+
+NF_STAT=$(parse_media "Netflix")
+YT_STAT=$(parse_media "Youtube")
+DP_STAT=$(parse_media "DisneyPlus")
+TK_STAT=$(parse_media "TikTok")
+GPT_STAT=$(parse_media "ChatGPT")
+APV_STAT=$(parse_media "AmazonPrimeVideo")
+
+# 提取原生 JSON 里的原始状态用于底层隐写回传
+RAW_NF_STAT=$(echo "$JSON_DATA" | jq -r '.Media.Netflix.Status // "Unknown"' 2>/dev/null)
+RAW_YT_REG=$(echo "$JSON_DATA" | jq -r '.Media.Youtube.Region // ""' 2>/dev/null)
+RAW_YT_STAT=$(echo "$JSON_DATA" | jq -r '.Media.Youtube.Status // "Unknown"' 2>/dev/null)
+
+# 5. 邮局连通性与黑名单
+PORT25=$(echo "$JSON_DATA" | jq -r '.Mail.Port25 // "false"' 2>/dev/null)
+[ "$PORT25" == "true" ] && P25_TEXT="✅ 畅通" || P25_TEXT="❌ 封堵"
+DNS_BLACK=$(echo "$JSON_DATA" | jq -r '.Mail.DNSBlacklist.Blacklisted // "0"' 2>/dev/null)
+DNS_MARK=$(echo "$JSON_DATA" | jq -r '.Mail.DNSBlacklist.Marked // "0"' 2>/dev/null)
+
+# 6. “送中” 逻辑判定
+WARNING_MSG=""
+# [修复] 官方 JSON 已经去除了方括号，直接匹配 CN 或者状态包含中国
+if [[ "$RAW_YT_REG" == "CN" ]] || [[ "$RAW_YT_STAT" == *"中国"* ]]; then
+    WARNING_MSG="%0A🚨 **[高危] 该节点已被 Google 判定为中国大陆 (送中)！**%0A"
+fi
+
+# 7. 组装情报级 Markdown 战报
+# 提取本地运行态版本与生成时间戳
+LOCAL_VER="${AGENT_VERSION:-未知}"
+CURRENT_TIME=$(date "+%Y-%m-%d %H:%M:%S")
+# [核心修复] 抛弃本地残缺配置，直接提取探针刚刚实测拿到的真实出口 IP 拼接链接！
+LINK_IP=$(echo "$IP_ADDR" | tr -d '[]')
+
+REPORT="🎯 *IP-Sentinel 深海声呐报告*
+📍 节点：\`${NODE_ALIAS}\`
+🌐 地址：\`${IP_ADDR}\`${WARNING_MSG}
+
+*🏢 物理身份与网络属性*
+\`AS${ASN}\` | \`${ORG}\`
+**定位:** \`${COUNTRY} - ${CITY}\`
+**属性:** \`${IP_TYPE}\` | \`${USAGE_TYPE}\`
+**探针:** ${IS_PROXY}
+
+*🛡️ 欺诈雷达 (0为最优)*
+• **Scamalytics:** \`${SCAM_SCORE}/100\`
+• **AbuseIPDB:** \`${ABUSE_SCORE}/100\`
+• **IPQS:** \`${IPQS_SCORE}/100\`
+• **IP2Location:** \`${IP2L_SCORE}/100\`
+• **IPAPI 风险率:** \`${FRAUD_RISK}\`
+
+*🎬 核心业务解锁*
+• **YouTube:** ${YT_STAT}
+• **Netflix:** ${NF_STAT}
+• **Disney+:** ${DP_STAT}
+• **PrimeVideo:** ${APV_STAT}
+• **TikTok:** ${TK_STAT}
+• **ChatGPT:** ${GPT_STAT}
+
+*✉️ 邮局与污染度*
+• **25 端口出站:** ${P25_TEXT}
+• **DNS 污染库:** 严重 \`${DNS_BLACK}\` | 轻微 \`${DNS_MARK}\`
+
+_👉 [🔍 详细信用图谱直达 (Scamalytics)](https://scamalytics.com/ip/${LINK_IP})_
+
+⏱️ \`${CURRENT_TIME}\` | ⚙️ \`v${LOCAL_VER}\`"
+
+# [修复] 剥离显示层的 N/A，确保传给 Master 趋势数据库的是纯数字 (无效则记为0)
+SAFE_SCAM_SCORE=$(echo "$SCAM_SCORE" | tr -cd '0-9')
+[ -z "$SAFE_SCAM_SCORE" ] && SAFE_SCAM_SCORE="0"
+
+# [v4.0.2 扩容] 提取 Google(基于YouTube) 和 ChatGPT 的原生状态
+RAW_GOOG_STAT="${RAW_YT_REG:-$RAW_YT_STAT}"
+[ -z "$RAW_GOOG_STAT" ] && RAW_GOOG_STAT="未知"
+RAW_GPT_STAT=$(echo "$JSON_DATA" | jq -r '.Media.ChatGPT.Status // "未知"' 2>/dev/null)
+
+# [修复] 废除会导致中文 UTF-8 字节被劈裂（产生乱码 ）的 awk 暴力截断。
+# 原始状态文本极短（如"解锁"、"屏蔽"、"US"），只需洗掉隐形换行符即可安全传输。
+S_GOOG=$(echo "$RAW_GOOG_STAT" | tr -d '\n\r ')
+S_NF=$(echo "$RAW_NF_STAT" | tr -d '\n\r ')
+S_GPT=$(echo "$RAW_GPT_STAT" | tr -d '\n\r ')
+CB_DATA="svq|${NODE_NAME}|${SAFE_SCAM_SCORE}|${S_GOOG}|${S_NF}|${S_GPT}"
+
+# 8. 挂载内联键盘并直送指挥部
+JSON_PAYLOAD=$(jq -n \
+  --arg cid "$CHAT_ID" \
+  --arg txt "$REPORT" \
+  --arg cb "$CB_DATA" \
+  '{
+    chat_id: $cid,
+    text: $txt,
+    parse_mode: "Markdown",
+    disable_web_page_preview: true,
+    reply_markup: {
+      inline_keyboard: [[{text: "📥 将本次体检录入趋势库", callback_data: $cb}]]
+    }
+  }')
+
+curl -s -X POST "${TG_API_URL}" -H "Content-Type: application/json" -d "$JSON_PAYLOAD" >/dev/null
--- a/core/mod_trust.sh
+++ b/core/mod_trust.sh
@@ -99,14 +99,21 @@ CURL_BIND_OPT=""
 DYNAMIC_IP_PREF="-${IP_PREF:-4}" # 默认提取用户配置

 if [[ -n "$BIND_IP" && "$BIND_IP" =~ ^[0-9a-fA-F:\.]+$ ]]; then
-    CURL_BIND_OPT="--interface $BIND_IP"
-    # 智能探测：带冒号为 V6，带点号为 V4
-    if [[ "$BIND_IP" == *":"* ]]; then
-        DYNAMIC_IP_PREF="-6"
-        log_msg "INFO " "底层路由锁定: 绑定 IPv6 出口及协议 ($BIND_IP)"
-    elif [[ "$BIND_IP" == *"."* ]]; then
-        DYNAMIC_IP_PREF="-4"
-        log_msg "INFO " "底层路由锁定: 绑定 IPv4 出口及协议 ($BIND_IP)"
+    # [v3.6.3 容错层补丁] 探测物理网卡/虚拟 IP 存活状态
+    RAW_BIND_IP=$(echo "$BIND_IP" | tr -d '[]')
+    if ! ip addr show 2>/dev/null | grep -qw "$RAW_BIND_IP"; then
+        log_msg "WARN " "检测到配置的出口 IP ($RAW_BIND_IP) 已丢失，自动降级为系统默认路由出网！"
+        CURL_BIND_OPT=""
+    else
+        CURL_BIND_OPT="--interface $BIND_IP"
+        # 智能探测：带冒号为 V6，带点号为 V4
+        if [[ "$BIND_IP" == *":"* ]]; then
+            DYNAMIC_IP_PREF="-6"
+            log_msg "INFO " "底层路由锁定: 绑定 IPv6 出口及协议 ($BIND_IP)"
+        elif [[ "$BIND_IP" == *"."* ]]; then
+            DYNAMIC_IP_PREF="-4"
+            log_msg "INFO " "底层路由锁定: 绑定 IPv4 出口及协议 ($BIND_IP)"
+        fi
    fi
 fi

--- a/core/runner.sh
+++ b/core/runner.sh
@@ -33,8 +33,18 @@ log() {
    
    # 保证日志目录存在
    mkdir -p "${INSTALL_DIR}/logs"
+    
    # 日志格式注入 [版本号] 追踪标识
-    printf "[$(date '+%Y-%m-%d %H:%M:%S')] [v%-5s] [%-5s] [%-7s] [%s] %s\n" "$local_ver" "$level" "$module" "$REGION_CODE" "$msg" >> "$LOG_FILE"
+    local core_msg=$(printf "[v%-5s] [%-5s] [%-7s] [%s] %s" "$local_ver" "$level" "$module" "$REGION_CODE" "$msg")
+    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $core_msg" >> "$LOG_FILE"
+
+    # 强制推送到 Systemd Journal (如果系统支持)
+    if command -v logger >/dev/null 2>&1; then
+        logger -t ip-sentinel "$core_msg"
+    else
+        # 降级输出到 stdout，让 Systemd 捕获
+        echo "$core_msg"
+    fi
 }
 export -f log
 export CONFIG_FILE INSTALL_DIR
@@ -81,7 +91,8 @@ fi
 if [ -n "$TARGET_MOD" ] && [ -x "${INSTALL_DIR}/core/${TARGET_MOD}" ]; then
    log "SYSTEM" "INFO" "命中触发条件，加载并执行子模块: ${MOD_NAME}"
    # 核心降耗逻辑：使用 nice -n 19 赋予进程最低 CPU 优先级，绝不抢占 VPS 正常业务的资源
-    nice -n 19 bash "${INSTALL_DIR}/core/${TARGET_MOD}"
+    # [安全修复] 注入 200>&-，强行关闭子进程对排他锁的继承权！防止子进程假死导致全局死锁
+    nice -n 19 bash "${INSTALL_DIR}/core/${TARGET_MOD}" 200>&-
 else
    log "SYSTEM" "ERROR" "配置了模块 ${MOD_NAME}，但未找到对应的可执行脚本: ${TARGET_MOD}"
 fi
--- a/core/tg_report.sh
+++ b/core/tg_report.sh
@@ -31,11 +31,17 @@ CURL_BIND_OPT=""
 DYNAMIC_IP_PREF="-${IP_PREF:-4}"

 if [[ -n "$BIND_IP" && "$BIND_IP" =~ ^[0-9a-fA-F:\.]+$ ]]; then
-    CURL_BIND_OPT="--interface $BIND_IP"
-    if [[ "$BIND_IP" == *":"* ]]; then
-        DYNAMIC_IP_PREF="-6"
-    elif [[ "$BIND_IP" == *"."* ]]; then
-        DYNAMIC_IP_PREF="-4"
+    # [v3.6.3 容错层补丁] 探测物理网卡/虚拟 IP 存活状态
+    RAW_BIND_IP=$(echo "$BIND_IP" | tr -d '[]')
+    if ! ip addr show 2>/dev/null | grep -qw "$RAW_BIND_IP"; then
+        CURL_BIND_OPT=""
+    else
+        CURL_BIND_OPT="--interface $BIND_IP"
+        if [[ "$BIND_IP" == *":"* ]]; then
+            DYNAMIC_IP_PREF="-6"
+        elif [[ "$BIND_IP" == *"."* ]]; then
+            DYNAMIC_IP_PREF="-4"
+        fi
    fi
 fi

@@ -194,11 +200,24 @@ else
 💡 *哨兵正在后台默默守护您的资产。*"
 fi

-# 5. 调用 API 推送 (接入安全网关)
+# 5. 调用 API 推送 (接入安全网关，挂载交互式控制台按钮)
+JSON_PAYLOAD=$(jq -n \
+  --arg cid "$CHAT_ID" \
+  --arg txt "$MSG" \
+  --arg cb "manage:${NODE_NAME}" \
+  '{
+    chat_id: $cid,
+    text: $txt,
+    parse_mode: "Markdown",
+    disable_web_page_preview: true,
+    reply_markup: {
+      inline_keyboard: [[{text: "⚙️ 调出该节点控制台", callback_data: $cb}]]
+    }
+  }')
+
 RESPONSE=$(curl -s -m 10 -X POST "${TG_API_URL}" \
-    -d "chat_id=${CHAT_ID}" \
-    -d "text=${MSG}" \
-    -d "parse_mode=Markdown")
+    -H "Content-Type: application/json" \
+    -d "$JSON_PAYLOAD")

 if [[ "$RESPONSE" != *"\"ok\":true"* ]]; then
    echo "❌ 战报发送失败！API 响应: $RESPONSE" >> "${INSTALL_DIR}/logs/error.log"
--- a/core/updater.sh
+++ b/core/updater.sh
@@ -25,9 +25,20 @@ log() {
    # [v3.4.0 核心] 提取当前配置中的版本锚点
    local local_ver="${AGENT_VERSION:-未知}"
    
+    # 保证日志目录存在
    mkdir -p "${INSTALL_DIR}/logs"
+
    # 日志格式注入 [版本号] 追踪标识
-    printf "[$(date '+%Y-%m-%d %H:%M:%S')] [v%-5s] [%-5s] [%-7s] [%s] %s\n" "$local_ver" "$2" "$1" "$REGION_CODE" "$3" >> "$LOG_FILE"
+    local core_msg=$(printf "[v%-5s] [%-5s] [%-7s] [%s] %s" "$local_ver" "$2" "$1" "$REGION_CODE" "$3")
+    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $core_msg" >> "$LOG_FILE"
+
+    # 强制推送到 Systemd Journal (如果系统支持)
+    if command -v logger >/dev/null 2>&1; then
+        logger -t ip-sentinel "$core_msg"
+    else
+        # 降级输出到 stdout，让 Systemd 捕获
+        echo "$core_msg"
+    fi
 }

 log "Updater" "INFO " "========== 触发后台静默 OTA 热数据更新 =========="
@@ -42,7 +53,12 @@ CURL_CMD="curl -${IP_PREF:-4} -sL"
 if [ -n "$BIND_IP" ]; then
    # curl 的 --interface 参数不支持带方括号的 IPv6 地址，必须强行脱壳
    RAW_BIND_IP=$(echo "$BIND_IP" | tr -d '[]')
-    CURL_CMD="$CURL_CMD --interface $RAW_BIND_IP"
+    # [v3.6.3 容错层补丁] 探测网卡存活状态，防止 IP 漂移导致永久断网
+    if ! ip addr show 2>/dev/null | grep -qw "$RAW_BIND_IP"; then
+        log "Updater" "WARN " "检测到绑定的出口 IP ($RAW_BIND_IP) 已丢失，自动退回默认路由！"
+    else
+        CURL_CMD="$CURL_CMD --interface $RAW_BIND_IP"
+    fi
 fi

 # ==========================================================
@@ -117,6 +133,17 @@ if [ -n "$REGION_JSON_FILE" ] && [ -f "$REGION_JSON_FILE" ]; then
    fi
 fi

+# ==========================================================
+# 5.5. 容灾更新深海声呐底层探针 (彻底消除第三方 RCE 依赖)
+# ==========================================================
+TMP_PROBE="/tmp/ip_sentinel_probe.sh"
+$CURL_CMD "https://raw.githubusercontent.com/xykt/IPQuality/main/ip.sh" -o "$TMP_PROBE"
+if [ -s "$TMP_PROBE" ]; then
+    mv "$TMP_PROBE" "${INSTALL_DIR}/core/ip_probe.sh"
+    chmod +x "${INSTALL_DIR}/core/ip_probe.sh"
+    log "Updater" "INFO " "✅ 深海声呐底层探针 (ip_probe.sh) 源文件安全对齐"
+fi
+
 # ==========================================================
 # 6. 日志防满瘦身机制 (保留最近 2000 行)
 # ==========================================================
--- a/data/keywords/kw_AU.txt
+++ b/data/keywords/kw_AU.txt
@@ -1,6 +1,70 @@
+alex de minaur
+sunderland vs nottm forest
+real betis vs real madrid
+sai sudharsan
+jannik sinner
+gt vs rcb
+amd stock
+carey mulligan
+jermaine jackson
+hulk hogan
+coles
+elon musk
+ben roberts-smith
+ig
+danish malewar
+assassin's creed black flag resynced
+sarfaraz khan
+kartik sharma
+instagram stories not working
+meningococcal b
+sundaresh menon
+thunder vs suns
+cade cunningham
+real salt lake vs inter miami
+pope francis
+camera
+anzac
+teams
+kids news
+bonds
+hung cao
+classroom
+michael jackson biopic movie
+india women vs south africa women
+nato
+bayern munich
+barcelona vs celta vigo
+bournemouth vs leeds
+leverkusen vs bayern
+psl
+burnley vs man city
+elche vs atlético madrid
+lsg vs rr
+pakistan super league
+kyle sandilands alleged rant jackie o
+carrie bickmore
+adam levine
+alexandra eala
+tubi
+charles melton
+nuclear weapon
+janet jackson
+justin bieber australia tour
+fleche wallonne 2026
+ange postecoglou
+john hattie
+airbus a380
+real madrid vs alavés
+brighton vs chelsea
+woolworth
+nitish rana
+lyrid meteor shower
+世界地球日
+youth gang
+earth day
 crystal palace vs west ham
 d4vd
-danish malewar
 mi vs gt
 perth weather
 elijah hollands carlton football club
@@ -11,7 +75,6 @@ cailee spaeny
 psg vs lyon
 sporting vs benfica
 celtics vs 76ers
-psl
 bundesliga
 pl
 afc cup
@@ -94,7 +157,6 @@ netflix
 gemini
 chatgpt
 margot robbie
-ange postecoglou
 oscar piastri
 formula 1
 supercars championship
@@ -136,34 +198,3 @@ hoyts cinemas
 event cinemas
 big bash league
 the ashes
-socceroos
-bathurst 1000
-booking.com
-airbnb
-webjet
-bali weather
-smartraveller
-lotto results
-powerball results
-oz lotto
-public holidays 2026
-mothers day 2026
-carsales
-redbook
-nrma
-racv
-racq
-petrol spy
-optus login
-vodafone
-kogan
-catch.com.au
-mecca
-sydney fish market
-queen victoria market
-taronga zoo
-dreamworld
-movie world
-wotif
-anytime fitness
-time in london
--- a/data/keywords/kw_CA.txt
+++ b/data/keywords/kw_CA.txt
@@ -1,8 +1,74 @@
+lpga leaderboard
+randy travis
+execution by firing squad
+nelly korda
+leicester city vs millwall
+asteroid
+sunderland vs nottm forest
+real betis vs real madrid
+betis – real madrid
+napoli vs cremonese
+gta 6
+japon
+padres vs rockies
+guide de la révolution de l'iran
+casa pia vs braga
+denaturalization
+ocean
+alberta referendum
+vfb stuttgart vs sc freiburg
+gpt 5.5
+noah cates
+pwhl scores
+hank idsinga
+karoline leavitt
+ottawa charge
+million dollar secret
+white sox vs diamondbacks
+suns vs thunder
+stars vs wild
+jaafar jackson
+airport
+grand theft auto vi
+pentagone
+etats unis
+monette farms news
+jose soriano
+jon cooper
+barcelona vs celta vigo
+764
+david scott
+rodrigo duterte
+u18 world championship
+zara tindall
+graham platner
+lsg vs rr
+nikki glaser
+global news edmonton
+policier
+nuclear weapon
+motorcycle
+msc francesca
+poet stock
+fifa tickets
+7 jours
+alexandra eala
+earth
+zara larsson
+girona vs real betis
+kevyn adams
+ali khamenei
+inter – côme
+leicester city vs hull
+fenerbahçe
+françois bonnardel
+missile
+real madrid vs alavés
+vrabel and russini photos
 will trent
 ibm
 lecce vs fiorentina
 celeste rivas hernandez
-grand theft auto vi
 abhishek bachchan
 national guard of the united states
 triathlon
--- a/data/keywords/kw_DE.txt
+++ b/data/keywords/kw_DE.txt
@@ -1,3 +1,67 @@
+christian lindner
+kevin costner
+samu haber
+gillian anderson
+peggy jerofke
+rafael jódar
+ernie dosio
+bibi heinicke
+denia
+der alte blaue stunde
+matthias ginter
+ralf schmitz
+maximilian eggestein
+hull city
+demirovic
+elton john
+jeff chabot
+lindt schokolade
+manzambi
+angelo stiller
+lamine yamal verletzung
+peer steinbrück
+h&m
+lotto 6aus49
+pistons – magic
+chemnitzer fc erzgebirge aue
+asiago
+23 nisan
+sternschnuppen heute lyriden
+aryna sabalenka
+michael douglas
+herman van veen
+georgina fleur
+tui
+trainer bayern münchen
+katie holmes
+prinz frederic
+bayern vs
+flekken
+бернли – манчестер сити
+ard
+queen camilla
+clankriminalität
+politik
+gladbach-news
+sara gündogan
+krankenversicherung
+jan-lennard struff
+bryan lasme
+republikanische partei
+thailand
+robin gosens
+maremma
+tennis madrid
+osterburg
+برايتون ضد تشيلسي
+sebastian hoeneß
+ncis
+menowin fröhlich
+maren gilzer
+cineplex
+gina schumacher
+alexander räuscher
+riza kayaalp
 heppenheim
 ministerpräsident
 robbie williams
--- a/data/keywords/kw_ES.txt
+++ b/data/keywords/kw_ES.txt
@@ -1,3 +1,68 @@
+rafa jodar
+samantha vallejo-nágera
+ريال بتيس ضد الريال
+nvidia
+rafael jódar
+jodar tenista
+sunderland afc - nottingham forest
+rb leipzig - fc union berlin
+julián alvarez
+stade brestois - lens
+clasificación de primera división
+javier hidalgo
+cayetano martínez de irujo
+llanes
+vfb stuttgart – freiburg
+roca rey
+psv - zwolle
+daredevil
+a que estas esperando
+real oviedo - villarreal
+real salt lake - inter miami
+pistons - magic
+barcelona sc - mushuc runa
+kick
+raphinha
+lluvia estrellas liridas
+frenkie de jong
+santos - coritiba
+del cerro grande
+phillip cocu
+cospedal
+david wilcock
+barcelona - celta de vigo
+barcelone – celta vigo
+macarena gómez
+luis merlo
+bournemouth vs leeds
+racing de estrasburgo - niza
+burnley vs man city
+alaska cantante
+raúl gonzález blanco
+marta sanchez
+roberto bautista
+cifras y letras
+xbox game pass ultimate
+horse powertrain
+las hurdes
+herbicida cancer colon
+lluvia de barro
+ripoll
+manilva
+steve jobs
+berrettini
+prizmic
+laura moure
+lens - toulouse
+girona vs real betis
+yuri berchiche
+clasificacion liga
+posiciones de la liga
+resultados liga
+lfp
+umar sadiq
+реал мадрид – алавес
+jan virgili
 moreirense - estoril
 downton abbey
 koldo garcía izaguirre
@@ -6,7 +71,6 @@ mike james
 carla leite
 eclipse solar del 12 de agosto de 2026
 crystal palace - west ham
-luis merlo
 luz valdenebro
 porto - tondela
 santos - fluminense
--- a/data/keywords/kw_FR.txt
+++ b/data/keywords/kw_FR.txt
@@ -1,3 +1,64 @@
+lena situation
+rafael jódar
+mask singer
+alex de minaur
+oyonnax – agen
+lucie castets
+napoli - cremonese
+ligue1+
+agnes lassalle
+jean luc reichmann
+m6
+caitlyn jenner
+star academy
+bfm marseille provence
+hunter schafer
+unchosen netflix
+john travolta
+valence-romans – brive
+reem kherici
+will smith
+real salt lake – inter miami
+neymar
+les traîtres
+jacob elordi
+pistons – magic
+invincible
+santos – coritiba
+ios 18
+la liga
+royaume uni interdiction tabac
+stephane tapie
+tondelier
+benjamin duhamel
+loto 22 avril 2026
+interdiction tabac royaume uni
+lol qui rit sort
+eva longoria
+alain bauer
+achraf hakimi
+ibrahim mbaye
+mma
+roberto calvet
+budget
+coupe du monde de football 2006
+plus belle la vie en avance
+mateus fernandes
+tour des alpes 2026
+lorenzo finn
+maine-et-loire
+mathieu flamini
+kamel daoud
+vandalisme
+sydney sweeney
+julien odoul
+france2
+xavier dupont de ligonnès
+elisabeth 2
+antibes
+girona – betis
+christine bravo
+الريال ضد ألافيس
 madonna age
 margot haddad
 ana riera
@@ -5,7 +66,6 @@ hinaupoko devèze
 bruce toussaint
 cheque energie
 reid wiseman
-mma
 loto 20 avril 2026
 from serie
 toulouse
@@ -32,7 +92,6 @@ pmu résultat
 laury thilleman et paul mirabel
 quinté du jour
 euromillions 17 avril 2026
-alain bauer
 uson
 guillaume meurice
 pmu
@@ -84,7 +143,6 @@ loto du 13 avril 2026
 juan arbeláez
 hbo
 katy perry justin trudeau
-jacob elordi
 tondela – gil vicente
 le rugbynistère
 epstein
--- a/data/keywords/kw_HK.txt
+++ b/data/keywords/kw_HK.txt
@@ -1,3 +1,60 @@
+米高積遜
+jaafar jackson
+nvda
+吳業坤
+麻疹
+林盛斌
+cuaca besok
+明天的天氣
+weather tomorrow
+rthk
+weather hong kong
+天文台
+hk observatory
+observatory
+csk vs mi
+長沙灣
+魔音女團
+球迷世界
+天星銀行
+game
+林嘉華
+套餐
+賈曉晨
+hk weather
+綠色債券
+barcelona vs celta vigo
+weather
+7-eleven
+天气
+班來 對 曼城
+埃爾切 對 馬德里競技
+rosenior
+艾納斯
+liam rosenior
+巴黎聖日耳曼 對 南特
+chatgpt image 2
+啟德醫院
+李泳漢老婆
+破產
+繼承人
+英皇群星演唱會
+布浩榮
+新聞
+貨幣貶值
+居 屋 2025
+3988
+李泳豪老婆
+皇家馬德里 對 艾拉維斯
+李泳漢
+鄭欣宜
+srh vs dc
+鍾嘉欣
+張柏芝
+江美儀
+全港戲院日 2026
+江旻憓
+陶傑
 水晶宮 對 西漢姆聯
 吉達艾阿里
 山口智子
@@ -30,7 +87,6 @@ epl
 司機
 补贴
 華富邨
-江美儀
 零售
 藍莓
 商湯科技
--- a/data/keywords/kw_JP.txt
+++ b/data/keywords/kw_JP.txt
@@ -1,10 +1,73 @@
+ベティス 対 rマドリード
+dior
+伊藤美来
+フィギュア
+玉置浩二
+生田絵梨花
+日本高野連会長辞任
+anaheim
+sbiグローバルアセットマネジメント
+ストレンジャーシングス
+石油
+ios 26.4 2
+ポケモンカード
+シュトゥットガルト 対 フライブルク
+ドラクエ スマグロ 攻略
+ipl
+kick
+アコム
+鈴木愛理
+sox指数
+村上世彰
+桐山 照史
+マラッカ海峡
+ソニック
+sbi新生銀行 株価
+マイクラ
+川口 春奈
+サンダー 対 サンズ
+インフルエンサー
+サンケイビル
+岡村隆史
+上田竜也
+メタプラネット
+バルセロナ 対 セルタ
+三橋くん
+エルニーニョ
+バーンリー 対 マンc
+ボーンマス 対 リーズ u
+elche vs atlético madrid
+レバークーゼン 対 バイエルン
+ソシエダ 対 ヘタフェ
+サイメモリ
+b リーグ 順位
+日ハム
+ナダル
+失点
+岩瀬洋志
+ファイターズ 試合
+江村美咲
+宝島社
+井ノ原 快彦
+ファイターズ
+西郷隆盛
+ボーダー
+チェルシー
+関税
+ブライトン
+佳子内親王
+rマドリード 対 アラベス
+鳥貴族
+ブライトン 対 チェルシー
+アシエンダ乗馬学校
+ngày trái đất
+加藤小夏
 町田ゼルビア
 モンスターハンターシリーズ
 クリスタル・パレス 対 ウェストハム
 吉田正尚
 旭琉會
 神戸
-kick
 てんちむ
 浜辺美波
 デーブ ロバーツ
@@ -14,7 +77,6 @@ kick
 ちゃんよた
 坂本 花織
 松山 千春
-dior
 リーグアン
 伊勢谷友介
 bayern vs vfb stuttgart
@@ -60,7 +122,6 @@ wowow
 小泉進次郎
 政権
 ミキティ
-ソニック
 今日のドジャースの結果
 新名神高速道路
 わたせせいぞう
@@ -69,7 +130,6 @@ wowow
 アレックス・ベシア
 リバプール
 champions league
-エルニーニョ
 アトレティコ 対 バルセロナ
 オープンワールド
 atlético madrid vs barcelona
--- a/data/keywords/kw_KR.txt
+++ b/data/keywords/kw_KR.txt
@@ -1,3 +1,67 @@
+트와이스
+s
+엔비디아 주가
+이경실
+신발
+하현상
+김수희
+gt vs rcb
+야닉 시너
+amd 주가
+왕다루
+시그널
+모하메드 살라
+공화당
+윤하정
+청남대
+더보이즈
+노민우
+서비스나우
+김민지
+박해미
+국가유산청
+삼성전자 주가
+두산에너빌리티 주가
+김성수
+한국사
+삼성전기 주가
+국립중앙박물관
+대우건설 주가
+지방 선거
+서정대학교
+캔바
+한국항공우주산업
+디트로이트 대 올랜도
+리그 1
+elche vs atlético madrid
+알나스르
+al-nassr vs al ahli
+10
+로세니어
+psg 대 낭트
+테슬라 실적발표
+루카스 모우라
+9950x3d2
+삼천당 제약 간담회
+김재윤
+k리그1 순위
+유영찬
+이호연
+sxmb
+진
+문재인
+생산직
+강훈식
+롤
+cnn
+리그오브레전드
+박환희
+박지현
+카토
+와우넷
+지구의 날
+컴프야
+차지연
 크리스털 팰리스 대 웨스트 햄
 비상계엄
 연기금
@@ -20,7 +84,6 @@ fotmob
 케이뱅크
 날씨
 환율
-삼성전자 주가
 손흥민
 토트넘 경기 일정
 넷플릭스
--- a/data/keywords/kw_MY.txt
+++ b/data/keywords/kw_MY.txt
@@ -0,0 +1,44 @@
+sunderland vs nottm forest
+real betis lwn real madrid cf
+napoli vs cremonese
+real betis vs real madrid
+perfect crown ep 5
+siti mastura mohamad
+jannik sinner
+sai sudharsan
+yaris cross hybrid
+cretaceous kraken
+rayo vallecano vs espanyol
+dji lito x1
+levante vs sevilla
+danish malewar
+mukesh choudhary
+lyrid meteor showers
+jamie overton
+piala uber
+madrid open
+dewald brevis
+counter strike
+pistons vs magic
+real salt lake vs inter miami
+chart gpt
+asiago
+liza hanim
+good morning
+pandikar amin mulia
+勒沃库森 - 拜仁
+santos vs coritiba
+Malaysia
+Kuala Lumpur
+Bursa Malaysia
+Ringgit
+Maybank
+CIMB
+Shopee MY
+Lazada Malaysia
+KWSP i-Akaun
+LHDN MyTax
+Anwar Ibrahim
+Johor Bahru
+Penang
+Nasi Lemak
--- a/data/keywords/kw_NL.txt
+++ b/data/keywords/kw_NL.txt
@@ -1,3 +1,64 @@
+wesley sonck
+arnold schwarzenegger
+devil wears prada
+jagiellonia białystok – górnik zabrze
+unchosen
+max verstappen redbull
+mvv - top oss
+energiecontract
+real betis - real madrid
+fc den bosch
+maarten van rossem
+jake paul
+financiën
+zonnepaneel
+xrp
+cyprus
+verdachte
+112 eerbeek
+golden earring
+sergiño dest
+david wilcock
+asiago
+shownieuws
+nijmegen
+keira knightley
+112 meldingen amsterdam
+dierenmishandeling
+112 amsterdam
+freek rikkerink
+poetin
+atalanta - lazio
+mr nobody against putin
+club brugge - mechelen
+frank hosmar
+barcelona - celta
+kees flodder
+burnley - manchester city
+lodewijk asscher
+vallende sterren
+guus meeuwis
+hoofddorp
+kaja kallas
+politiek
+stroomstoring amersfoort
+solvinity digid
+wout weghorst
+jamie kames
+bitvavo
+box 3
+ronde van de alpen
+matthias uhl
+taken film
+robot
+girona - real betis
+real madryt – deportivo alaves
+tbilisi
+southampton - bristol city
+vittoria guazzini
+oppo find x9 ultra
+real madrid - alavés
+الريال ضد ألافيس
 lecce - fiorentina
 pogoda jutro
 vierhouten
--- a/data/keywords/kw_SG.txt
+++ b/data/keywords/kw_SG.txt
@@ -1,3 +1,63 @@
+sunderland vs nottm forest
+real betis vs real madrid
+anne hathaway
+michael jackson
+sai sudharsan
+madrid open
+amd
+gt vs rcb
+ijooz
+raghav chadha
+darren wang
+mukesh choudhary
+danish malewar
+tamil nadu election results
+allah ghazanfar
+peregrine falcon
+airasia flight
+arrest
+hao mart singapore
+kartik sharma
+real salt lake vs inter miami
+pistons vs magic
+krisflyer
+michael jackson biopic
+新加坡
+atalanta vs lazio
+伯恩利 - 曼城
+porto vs sporting
+cdl directors resign millennium copthorne
+tsla
+leverkusen vs bayern
+burnley vs man city
+elche vs atlético madrid
+psg vs nantes
+al-nassr vs al ahli
+mohsin khan
+changi
+rr vs lsg
+primary school
+alexandra eala
+tan su shan
+sundaresh menon
+moulin rouge musical singapore
+south korea
+step
+gamba osaka vs avispa fukuoka
+honor 600 pro
+china shipyards oil tanker orders
+coe
+lebron james
+real madrid vs alavés
+brighton vs chelsea
+nitish rana
+earth day
+michael movie
+kevin warsh
+srh vs dc
+chinese aircraft carrier liaoning
+andie chen
+jesseca liu wins best actress
 crystal palace vs west ham
 grok
 gemini
@@ -6,7 +66,6 @@ gpt
 ai
 is chatgpt down
 strait of hormuz news
-danish malewar
 mi vs gt
 psg vs lyon
 sporting vs benfica
--- a/data/keywords/kw_TW.txt
+++ b/data/keywords/kw_TW.txt
@@ -1,3 +1,63 @@
+cpo概念股
+anaheim
+iu
+山口智子
+蔡依珊
+林岱安
+michael jackson 電影
+行動電源
+地震
+地震速報
+宋祖兒
+porter
+謝京穎
+德州儀器
+台新綜合證券
+希臘
+費城半導體
+mrvl
+狄鶯
+三星罷工
+00981a
+馬斯克
+辛耘
+宏碁股價
+0056
+2330
+雷霆 對 太陽
+0050股價
+006208
+景碩
+女警陳芊雯
+廢死聯盟
+西甲
+台灣積體電路製造
+高頻寬 記憶 體
+戴奧辛
+3665
+宋晟睿
+黃 甘霖
+劉家翔
+王耿豪
+王勝偉
+009816
+thời tiết ngày mai
+明天的天氣
+總部
+美光科技
+cpbl
+中華職棒
+中職
+黃甘霖
+軍 公教
+6147
+earth day
+陳哲遠
+台鐵
+斯普拉遁 塗擊隊
+麥可傑克森
+神將彩券行
+米可白
 洪敬堯
 華邦電子
 柔美的細胞小將 3
--- a/data/keywords/kw_UK.txt
+++ b/data/keywords/kw_UK.txt
@@ -1,6 +1,67 @@
+napoli
+alex de minaur
+tigers vs hull fc
+edinburgh vs sharks
+mark williams snooker
+criminal record
+alex sinclair israeli police detention
+st. johnstone vs raith rovers
+mo farah
+newcastle vs bristol
+tbilisi
+connor storrie
+georgia
+stephen bunting
+great british menu 2026
+ravi eastenders
+salford city fc
+national grid
+mass effect
+salford city vs bromley
+real salt lake vs inter miami
+provinces of the pantheon
+mls
+russell brand
+john phelan
+hung cao
+pistons vs magic
+jerry bruckheimer
+st. george's day
+asiago
+framework laptop 13 pro
+boro
+interactive investor
+mint
+believe me itv
+amanda bynes
+strasbourg vs nice
+chase bank
+jak jones
+chase
+rodri
+christopher trybus
+lsg vs rr
+pension
+hebden bridge
+sandra bullock practical magic
+rolls-royce share price drop
+invincible season 5
+josé mourinho
+chris wakelin
+jimmy bullard adam thomas
+aer lingus flight cancellations
+sam west
+oxford united
+liam delap
+wba
+реал мадрид – алавес
+coppa italia
+girona vs real betis
+marcus rashford
+الريال ضد ألافيس
+supreme leader of iran
 oscar isaac
 xrp ledger
-believe me itv
 pablo
 is tane leaving home and away
 julie andrews
--- a/data/keywords/kw_US.txt
+++ b/data/keywords/kw_US.txt
@@ -1,3 +1,68 @@
+alex de minaur
+rafael jodar
+adam levine face
+howard frankland bridge
+vibrio vulnificus new york waters
+stade brestois - lens
+moustapha thiam
+us asylum seeker border reopening
+sunderland vs nottm forest
+leicester city vs millwall
+brandon marsh
+psv vs pec zwolle
+daniel merida aguilar
+william byron
+eve plumb
+mall of louisiana
+real oviedo vs villarreal
+real oviedo - villarreal
+call of duty: black ops 7
+tarik skubal
+cubs game today
+mike repole
+okc thunder
+atlanta braves
+mlb scores today
+braves standings
+kevin mckidd
+dan vladar
+mls standings
+dodgers - giants
+jon ossoff
+ozzy survivor
+braves score
+washington nationals
+alex bregman
+peter lambert
+darrell sheets
+ludwig kaiser
+edina shooting
+atalanta - lazio
+barcelona vs celta vigo
+rivian r2
+pick 4
+aoc
+cleveland browns
+nintendo switch gamecube games
+lsg vs rr
+spirit
+atlanta fire
+deshaun watson
+good morning america
+pittsburgh
+strands answers
+scientist
+mark cuban pharmacy
+inter milan
+lens vs toulouse
+david james
+andy weir
+noah kahan tiny desk concert
+jennifer garner 54th birthday photos
+troy baker
+real madrid - alavés
+girona - real betis
+girona vs real betis
 arc raiders
 schd etf dividend yield
 deportación
--- a/data/keywords/kw_VN.txt
+++ b/data/keywords/kw_VN.txt
@@ -1,3 +1,67 @@
+napoli
+sunderland đấu với nottm forest
+betis đấu với real madrid
+napoli đấu với cremonese
+leipzig đấu với union berlin
+sunderland
+mẫu iphone 18
+oppo find x9 ultra
+xem phim
+andoni iraola
+stuttgart đấu với freiburg
+levante – sevilla
+giao dịch tài chính
+sevilla
+rayo đấu với espanyol
+levante đấu với sevilla
+bong ma hanh phuc
+aryna sabalenka
+mason nguyễn
+marcus rashford
+hà nội
+salt lake đấu với inter miami
+hung cao
+neymar
+cầu phú mỹ
+nhac
+wordle
+날씨
+giá cà phê hôm nay
+premier league standings
+mls
+phạm nhật vượng
+cristiano roland
+burnley vs man city
+bayern munich
+atalanta đấu với lazio
+barcelona đấu với celta
+mc vs
+psg – nantes
+leverkusen đấu với bayern
+elche – atlético madrid
+bryan mbeumo
+al nasr
+trực tiếp bóng đá hôm nay
+vtv3
+vtv3 trực tiếp
+tv
+vtv
+vtv6
+360
+lê khánh
+ô tô
+lê phương
+trực tiếp bóng đá u17 hôm nay
+inter milan
+chelsea
+girona đấu với betis
+real madrid đấu với alavés
+brighton vs chelsea
+brighton đấu với chelsea
+ath. bilbao đấu với osasuna
+pep guardiola
+zelvia đấu với shabab al-ahli
+cầu thủ
 lecce vs fiorentina
 fiorentina
 crystal palace đấu với west ham
@@ -13,7 +77,6 @@ psg vs lyon
 ca sĩ
 juventus đấu với bologna
 gladbach đấu với mainz
-bayern munich
 twitch
 psg đấu với lyon
 juventus
@@ -26,7 +89,6 @@ epl
 iem rio 2026
 tot
 tập đoàn gelex
-napoli
 đường ray
 inter
 inter đấu với cagliari
@@ -67,7 +129,6 @@ sun group
 hưng yên
 nvl
 américa đấu với nashville
-neymar
 VnExpress
 Zing News
 Thời tiết Hà Nội
--- a/data/map.json
+++ b/data/map.json
@@ -11,7 +11,16 @@
          "name": "Japan (日本)",
          "keyword_file": "kw_JP.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Tokyo", "name": "Tokyo (东京)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Tokyo",
+                  "name": "Tokyo (东京)"
+                }
+              ]
+            }
          ]
        },
        {
@@ -19,7 +28,16 @@
          "name": "Singapore (新加坡)",
          "keyword_file": "kw_SG.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Singapore", "name": "Singapore (新加坡)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Singapore",
+                  "name": "Singapore (新加坡)"
+                }
+              ]
+            }
          ]
        },
        {
@@ -27,7 +45,16 @@
          "name": "South Korea (韩国)",
          "keyword_file": "kw_KR.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Seoul", "name": "Seoul (首尔)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Seoul",
+                  "name": "Seoul (首尔)"
+                }
+              ]
+            }
          ]
        },
        {
@@ -35,7 +62,16 @@
          "name": "Hong Kong (香港)",
          "keyword_file": "kw_HK.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "HongKong", "name": "Hong Kong (香港)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "HongKong",
+                  "name": "Hong Kong (香港)"
+                }
+              ]
+            }
          ]
        },
        {
@@ -43,7 +79,16 @@
          "name": "Vietnam (越南)",
          "keyword_file": "kw_VN.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Hanoi", "name": "Hanoi (河内)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Hanoi",
+                  "name": "Hanoi (河内)"
+                }
+              ]
+            }
          ]
        },
        {
@@ -51,7 +96,33 @@
          "name": "Taiwan (台湾)",
          "keyword_file": "kw_TW.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Taipei", "name": "Taipei (台北)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Taipei",
+                  "name": "Taipei (台北)"
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "id": "MY",
+          "name": "Malaysia (马来西亚)",
+          "keyword_file": "kw_MY.txt",
+          "states": [
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Kuala_Lumpur",
+                  "name": "Kuala Lumpur (吉隆坡)"
+                }
+              ]
+            }
          ]
        }
      ]
@@ -69,8 +140,14 @@
              "id": "Default",
              "name": "Default State",
              "cities": [
-                { "id": "London", "name": "London (伦敦)" },
-                { "id": "Coventry", "name": "Coventry (考文垂)" }
+                {
+                  "id": "London",
+                  "name": "London (伦敦)"
+                },
+                {
+                  "id": "Coventry",
+                  "name": "Coventry (考文垂)"
+                }
              ]
            }
          ]
@@ -80,7 +157,16 @@
          "name": "Germany (德国)",
          "keyword_file": "kw_DE.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Frankfurt", "name": "Frankfurt (法兰克福)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Frankfurt",
+                  "name": "Frankfurt (法兰克福)"
+                }
+              ]
+            }
          ]
        },
        {
@@ -88,7 +174,16 @@
          "name": "France (法国)",
          "keyword_file": "kw_FR.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Paris", "name": "Paris (巴黎)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Paris",
+                  "name": "Paris (巴黎)"
+                }
+              ]
+            }
          ]
        },
        {
@@ -96,7 +191,16 @@
          "name": "Netherlands (荷兰)",
          "keyword_file": "kw_NL.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Amsterdam", "name": "Amsterdam (阿姆斯特丹)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Amsterdam",
+                  "name": "Amsterdam (阿姆斯特丹)"
+                }
+              ]
+            }
          ]
        },
        {
@@ -104,7 +208,16 @@
          "name": "Spain (西班牙)",
          "keyword_file": "kw_ES.txt",
          "states": [
-            { "id": "Default", "name": "Default State", "cities": [ { "id": "Madrid", "name": "Madrid (马德里)" } ] }
+            {
+              "id": "Default",
+              "name": "Default State",
+              "cities": [
+                {
+                  "id": "Madrid",
+                  "name": "Madrid (马德里)"
+                }
+              ]
+            }
          ]
        }
      ]
@@ -122,50 +235,84 @@
              "id": "CA",
              "name": "California (加州)",
              "cities": [
-                { "id": "Los_Angeles", "name": "Los Angeles (洛杉矶)" },
-                { "id": "San_Jose", "name": "San Jose (圣何塞)" }
+                {
+                  "id": "Los_Angeles",
+                  "name": "Los Angeles (洛杉矶)"
+                },
+                {
+                  "id": "San_Jose",
+                  "name": "San Jose (圣何塞)"
+                }
              ]
            },
            {
              "id": "IL",
              "name": "Illinois (伊利诺伊州)",
              "cities": [
-                { "id": "Warrenville", "name": "Warrenville (沃伦维尔)" }
+                {
+                  "id": "Warrenville",
+                  "name": "Warrenville (沃伦维尔)"
+                }
              ]
            },
            {
              "id": "NC",
              "name": "North Carolina (北卡罗来纳州)",
              "cities": [
-                { "id": "Charlotte", "name": "Charlotte (夏洛特)" }
+                {
+                  "id": "Charlotte",
+                  "name": "Charlotte (夏洛特)"
+                }
              ]
            },
            {
              "id": "NV",
              "name": "Nevada (内华达州)",
              "cities": [
-                { "id": "Las_Vegas", "name": "Las Vegas (拉斯维加斯)" }
+                {
+                  "id": "Las_Vegas",
+                  "name": "Las Vegas (拉斯维加斯)"
+                }
              ]
            },
            {
              "id": "OR",
              "name": "Oregon (俄勒冈州)",
              "cities": [
-                { "id": "Bend", "name": "Bend (本德)" }
+                {
+                  "id": "Bend",
+                  "name": "Bend (本德)"
+                }
              ]
            },
            {
              "id": "UT",
              "name": "Utah (犹他州)",
              "cities": [
-                { "id": "Salt_Lake_City", "name": "Salt Lake City (盐湖城)" }
+                {
+                  "id": "Salt_Lake_City",
+                  "name": "Salt Lake City (盐湖城)"
+                }
              ]
            },
            {
              "id": "WA",
              "name": "Washington (华盛顿州)",
              "cities": [
-                { "id": "Seattle", "name": "Seattle (西雅图)" }
+                {
+                  "id": "Seattle",
+                  "name": "Seattle (西雅图)"
+                }
+              ]
+            },
+            {
+              "id": "TX",
+              "name": "Texas (得克萨斯州)",
+              "cities": [
+                {
+                  "id": "Dallas",
+                  "name": "Dallas (达拉斯)"
+                }
              ]
            }
          ]
@@ -179,8 +326,14 @@
              "id": "Default",
              "name": "Default State",
              "cities": [
-                { "id": "Toronto", "name": "Toronto (多伦多)" },
-                { "id": "Montreal", "name": "Montreal (蒙特利尔)" }
+                {
+                  "id": "Toronto",
+                  "name": "Toronto (多伦多)"
+                },
+                {
+                  "id": "Montreal",
+                  "name": "Montreal (蒙特利尔)"
+                }
              ]
            }
          ]
@@ -200,35 +353,50 @@
              "id": "NSW",
              "name": "New South Wales (新南威尔士州)",
              "cities": [
-                { "id": "Sydney", "name": "Sydney (悉尼)" }
+                {
+                  "id": "Sydney",
+                  "name": "Sydney (悉尼)"
+                }
              ]
            },
            {
              "id": "VIC",
              "name": "Victoria (维多利亚州)",
              "cities": [
-                { "id": "Melbourne", "name": "Melbourne (墨尔本)" }
+                {
+                  "id": "Melbourne",
+                  "name": "Melbourne (墨尔本)"
+                }
              ]
            },
            {
              "id": "QLD",
              "name": "Queensland (昆士兰州)",
              "cities": [
-                { "id": "Brisbane", "name": "Brisbane (布里斯班)" }
+                {
+                  "id": "Brisbane",
+                  "name": "Brisbane (布里斯班)"
+                }
              ]
            },
            {
              "id": "WA",
              "name": "Western Australia (西澳大利亚州)",
              "cities": [
-                { "id": "Perth", "name": "Perth (珀斯)" }
+                {
+                  "id": "Perth",
+                  "name": "Perth (珀斯)"
+                }
              ]
            },
            {
              "id": "SA",
              "name": "South Australia (南澳大利亚州)",
              "cities": [
-                { "id": "Adelaide", "name": "Adelaide (阿德莱德)" }
+                {
+                  "id": "Adelaide",
+                  "name": "Adelaide (阿德莱德)"
+                }
              ]
            }
          ]
@@ -236,4 +404,4 @@
      ]
    }
  ]
-}
+}
--- a/data/regions/AU/NSW/Sydney.json
+++ b/data/regions/AU/NSW/Sydney.json
@@ -8,28 +8,43 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://www.smh.com.au/",
-      "https://www.dailytelegraph.com.au/",
-      "https://www.service.nsw.gov.au/",
-      "https://transportnsw.info/",
-      "https://www.bom.gov.au/",
+      "https://www.abc.net.au/news/2026-04-24/india-delimitation-redraw-electoral-map-southern-states/106591486",
+      "https://www.seek.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/kezie-apps-says-womens-state-of-origin-timing-not-ideal/106604306",
+      "https://www.abc.net.au/news/2026-04-25/outcome-farrer-byelection-one-nation-watershed-moment/106485956",
      "https://www.woolworths.com.au/",
-      "https://www.coles.com.au/",
-      "https://www.bunnings.com.au/",
-      "https://www.abc.net.au/",
-      "https://www.news.com.au/",
-      "https://www.nine.com.au/",
+      "https://www.abc.net.au/news/2026-04-25/how-iran-regime-changed-after-us-israel-middle-east-war/106595956",
      "https://my.gov.au/",
      "https://www.ato.gov.au/",
+      "https://www.abc.net.au/news/2026-04-25/sa-wwii-veterans-meet-after-more-than-80-years/106590394",
+      "https://www.abc.net.au/news/2026-04-25/nato-falklands-spain/106604984",
+      "https://www.abc.net.au/news/2026-04-24/act-government-will-not-cancel-big-splash-operators-lease/106603388",
+      "https://www.abc.net.au/news/2026-04-24/norway-plans-to-introduce-under-16s-social-media-ban/106604296",
+      "https://www.abc.net.au/news/2026-04-24/oyster-growing-closed-again-toxic-phytoplankton-yorke-peninsula/106601670",
+      "https://www.abc.net.au/news/2026-04-24/woman-chooses-to-go-blind-after-delays-at-adelaide-clinic/106602574",
+      "https://www.amazon.com.au/",
      "https://www.commbank.com.au/",
-      "https://www.westpac.com.au/",
+      "https://www.abc.net.au/news/2026-04-25/how-the-cost-of-the-ndis-blew-out/106604488",
+      "https://www.bom.gov.au/",
+      "https://www.bunnings.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/nt-doctor-gross-indecency-rape-trial-court-suppression-order/106603984",
      "https://www.realestate.com.au/",
-      "https://www.domain.com.au/",
+      "https://www.coles.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/nrl-live-updates-cowboys-sharks-broncos-bulldogs/106591508",
+      "https://www.abc.net.au/news/2026-04-25/netanyahu-treated-for-prostate-cancer/106605028",
+      "https://www.abc.net.au/news/2026-04-25/april-25-5050-quiz/106601084"
+    ],
+    "static_urls": [
+      "https://my.gov.au/",
+      "https://www.ato.gov.au/",
+      "https://www.bom.gov.au/",
+      "https://www.commbank.com.au/",
      "https://www.seek.com.au/",
-      "https://www.nrl.com/",
-      "https://premier.ticketek.com.au/",
-      "https://www.amazon.com.au/"
+      "https://www.realestate.com.au/",
+      "https://www.woolworths.com.au/",
+      "https://www.coles.com.au/",
+      "https://www.amazon.com.au/",
+      "https://www.bunnings.com.au/"
    ]
  }
-}
+}
--- a/data/regions/AU/QLD/Brisbane.json
+++ b/data/regions/AU/QLD/Brisbane.json
@@ -8,29 +8,43 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://www.couriermail.com.au/",
-      "https://www.brisbanetimes.com.au/",
-      "https://www.qld.gov.au/",
-      "https://translink.com.au/",
-      "https://www.health.qld.gov.au/",
-      "https://www.bom.gov.au/",
-      "https://www.bunnings.com.au/",
-      "https://www.woolworths.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/act-government-will-not-cancel-big-splash-operators-lease/106603388",
+      "https://www.ato.gov.au/",
+      "https://www.abc.net.au/news/2026-04-25/netanyahu-treated-for-prostate-cancer/106605028",
      "https://www.coles.com.au/",
-      "https://www.abc.net.au/",
-      "https://www.news.com.au/",
+      "https://www.seek.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/india-delimitation-redraw-electoral-map-southern-states/106591486",
+      "https://www.abc.net.au/news/2026-04-25/how-the-cost-of-the-ndis-blew-out/106604488",
+      "https://www.abc.net.au/news/2026-04-24/norway-plans-to-introduce-under-16s-social-media-ban/106604296",
+      "https://www.abc.net.au/news/2026-04-24/oyster-growing-closed-again-toxic-phytoplankton-yorke-peninsula/106601670",
+      "https://www.abc.net.au/news/2026-04-25/sa-wwii-veterans-meet-after-more-than-80-years/106590394",
+      "https://www.abc.net.au/news/2026-04-25/nato-falklands-spain/106604984",
+      "https://www.abc.net.au/news/2026-04-25/april-25-5050-quiz/106601084",
+      "https://www.abc.net.au/news/2026-04-24/nt-doctor-gross-indecency-rape-trial-court-suppression-order/106603984",
+      "https://www.abc.net.au/news/2026-04-24/nrl-live-updates-cowboys-sharks-broncos-bulldogs/106591508",
+      "https://www.woolworths.com.au/",
+      "https://www.commbank.com.au/",
+      "https://www.bom.gov.au/",
+      "https://www.abc.net.au/news/2026-04-24/woman-chooses-to-go-blind-after-delays-at-adelaide-clinic/106602574",
+      "https://www.amazon.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/kezie-apps-says-womens-state-of-origin-timing-not-ideal/106604306",
+      "https://www.realestate.com.au/",
+      "https://my.gov.au/",
+      "https://www.abc.net.au/news/2026-04-25/how-iran-regime-changed-after-us-israel-middle-east-war/106595956",
+      "https://www.abc.net.au/news/2026-04-25/outcome-farrer-byelection-one-nation-watershed-moment/106485956",
+      "https://www.bunnings.com.au/"
+    ],
+    "static_urls": [
      "https://my.gov.au/",
      "https://www.ato.gov.au/",
+      "https://www.bom.gov.au/",
      "https://www.commbank.com.au/",
-      "https://www.suncorp.com.au/",
-      "https://www.boq.com.au/",
-      "https://www.realestate.com.au/",
-      "https://www.domain.com.au/",
      "https://www.seek.com.au/",
-      "https://www.nrl.com/",
-      "https://premier.ticketek.com.au/",
-      "https://www.amazon.com.au/"
+      "https://www.realestate.com.au/",
+      "https://www.woolworths.com.au/",
+      "https://www.coles.com.au/",
+      "https://www.amazon.com.au/",
+      "https://www.bunnings.com.au/"
    ]
  }
-}
+}
--- a/data/regions/AU/SA/Adelaide.json
+++ b/data/regions/AU/SA/Adelaide.json
@@ -8,28 +8,43 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://www.adelaidenow.com.au/",
-      "https://indaily.com.au/",
-      "https://www.sa.gov.au/",
-      "https://www.adelaidemetro.com.au/",
-      "https://www.sapowernetworks.com.au/",
      "https://www.bom.gov.au/",
+      "https://www.amazon.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/norway-plans-to-introduce-under-16s-social-media-ban/106604296",
+      "https://www.abc.net.au/news/2026-04-25/outcome-farrer-byelection-one-nation-watershed-moment/106485956",
+      "https://www.abc.net.au/news/2026-04-25/april-25-5050-quiz/106601084",
+      "https://www.abc.net.au/news/2026-04-24/woman-chooses-to-go-blind-after-delays-at-adelaide-clinic/106602574",
+      "https://www.abc.net.au/news/2026-04-24/nrl-live-updates-cowboys-sharks-broncos-bulldogs/106591508",
      "https://www.bunnings.com.au/",
+      "https://www.realestate.com.au/",
+      "https://www.commbank.com.au/",
+      "https://www.ato.gov.au/",
+      "https://www.abc.net.au/news/2026-04-25/netanyahu-treated-for-prostate-cancer/106605028",
+      "https://www.abc.net.au/news/2026-04-24/kezie-apps-says-womens-state-of-origin-timing-not-ideal/106604306",
      "https://www.coles.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/act-government-will-not-cancel-big-splash-operators-lease/106603388",
+      "https://www.seek.com.au/",
+      "https://www.abc.net.au/news/2026-04-25/how-the-cost-of-the-ndis-blew-out/106604488",
      "https://www.woolworths.com.au/",
-      "https://www.abc.net.au/",
-      "https://www.news.com.au/",
+      "https://www.abc.net.au/news/2026-04-25/sa-wwii-veterans-meet-after-more-than-80-years/106590394",
+      "https://my.gov.au/",
+      "https://www.abc.net.au/news/2026-04-24/india-delimitation-redraw-electoral-map-southern-states/106591486",
+      "https://www.abc.net.au/news/2026-04-24/oyster-growing-closed-again-toxic-phytoplankton-yorke-peninsula/106601670",
+      "https://www.abc.net.au/news/2026-04-24/nt-doctor-gross-indecency-rape-trial-court-suppression-order/106603984",
+      "https://www.abc.net.au/news/2026-04-25/how-iran-regime-changed-after-us-israel-middle-east-war/106595956",
+      "https://www.abc.net.au/news/2026-04-25/nato-falklands-spain/106604984"
+    ],
+    "static_urls": [
      "https://my.gov.au/",
      "https://www.ato.gov.au/",
+      "https://www.bom.gov.au/",
      "https://www.commbank.com.au/",
-      "https://www.bendigobank.com.au/",
-      "https://www.realestate.com.au/",
-      "https://www.domain.com.au/",
      "https://www.seek.com.au/",
-      "https://www.afl.com.au/",
-      "https://premier.ticketek.com.au/",
-      "https://www.amazon.com.au/"
+      "https://www.realestate.com.au/",
+      "https://www.woolworths.com.au/",
+      "https://www.coles.com.au/",
+      "https://www.amazon.com.au/",
+      "https://www.bunnings.com.au/"
    ]
  }
-}
+}
--- a/data/regions/AU/VIC/Melbourne.json
+++ b/data/regions/AU/VIC/Melbourne.json
@@ -8,28 +8,43 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://www.theage.com.au/",
-      "https://www.heraldsun.com.au/",
-      "https://www.vic.gov.au/",
-      "https://www.ptv.vic.gov.au/",
-      "https://www.vicroads.vic.gov.au/",
-      "https://www.bom.gov.au/",
+      "https://www.abc.net.au/news/2026-04-24/nt-doctor-gross-indecency-rape-trial-court-suppression-order/106603984",
+      "https://www.ato.gov.au/",
+      "https://www.abc.net.au/news/2026-04-24/kezie-apps-says-womens-state-of-origin-timing-not-ideal/106604306",
+      "https://www.abc.net.au/news/2026-04-24/woman-chooses-to-go-blind-after-delays-at-adelaide-clinic/106602574",
      "https://www.bunnings.com.au/",
-      "https://www.kmart.com.au/",
-      "https://www.abc.net.au/",
-      "https://www.news.com.au/",
+      "https://www.coles.com.au/",
+      "https://www.abc.net.au/news/2026-04-25/netanyahu-treated-for-prostate-cancer/106605028",
+      "https://www.abc.net.au/news/2026-04-25/sa-wwii-veterans-meet-after-more-than-80-years/106590394",
+      "https://www.realestate.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/oyster-growing-closed-again-toxic-phytoplankton-yorke-peninsula/106601670",
+      "https://www.abc.net.au/news/2026-04-24/india-delimitation-redraw-electoral-map-southern-states/106591486",
+      "https://www.abc.net.au/news/2026-04-24/norway-plans-to-introduce-under-16s-social-media-ban/106604296",
+      "https://www.amazon.com.au/",
+      "https://www.abc.net.au/news/2026-04-25/april-25-5050-quiz/106601084",
+      "https://www.abc.net.au/news/2026-04-25/nato-falklands-spain/106604984",
+      "https://www.abc.net.au/news/2026-04-25/how-the-cost-of-the-ndis-blew-out/106604488",
+      "https://www.seek.com.au/",
+      "https://www.commbank.com.au/",
+      "https://www.bom.gov.au/",
+      "https://www.abc.net.au/news/2026-04-25/how-iran-regime-changed-after-us-israel-middle-east-war/106595956",
+      "https://my.gov.au/",
+      "https://www.woolworths.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/nrl-live-updates-cowboys-sharks-broncos-bulldogs/106591508",
+      "https://www.abc.net.au/news/2026-04-24/act-government-will-not-cancel-big-splash-operators-lease/106603388",
+      "https://www.abc.net.au/news/2026-04-25/outcome-farrer-byelection-one-nation-watershed-moment/106485956"
+    ],
+    "static_urls": [
      "https://my.gov.au/",
      "https://www.ato.gov.au/",
-      "https://www.nab.com.au/",
-      "https://www.anz.com.au/",
+      "https://www.bom.gov.au/",
+      "https://www.commbank.com.au/",
+      "https://www.seek.com.au/",
+      "https://www.realestate.com.au/",
      "https://www.woolworths.com.au/",
      "https://www.coles.com.au/",
-      "https://www.realestate.com.au/",
-      "https://www.seek.com.au/",
-      "https://www.afl.com.au/",
-      "https://www.ticketmaster.com.au/",
-      "https://www.amazon.com.au/"
+      "https://www.amazon.com.au/",
+      "https://www.bunnings.com.au/"
    ]
  }
-}
+}
--- a/data/regions/AU/WA/Perth.json
+++ b/data/regions/AU/WA/Perth.json
@@ -8,28 +8,43 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://thewest.com.au/",
-      "https://www.perthnow.com.au/",
-      "https://www.wa.gov.au/",
-      "https://www.transperth.wa.gov.au/",
-      "https://www.bom.gov.au/",
+      "https://www.abc.net.au/news/2026-04-24/oyster-growing-closed-again-toxic-phytoplankton-yorke-peninsula/106601670",
+      "https://www.abc.net.au/news/2026-04-24/india-delimitation-redraw-electoral-map-southern-states/106591486",
+      "https://www.abc.net.au/news/2026-04-25/outcome-farrer-byelection-one-nation-watershed-moment/106485956",
+      "https://www.abc.net.au/news/2026-04-25/netanyahu-treated-for-prostate-cancer/106605028",
+      "https://my.gov.au/",
+      "https://www.abc.net.au/news/2026-04-25/april-25-5050-quiz/106601084",
+      "https://www.abc.net.au/news/2026-04-24/woman-chooses-to-go-blind-after-delays-at-adelaide-clinic/106602574",
+      "https://www.seek.com.au/",
+      "https://www.ato.gov.au/",
+      "https://www.abc.net.au/news/2026-04-24/nt-doctor-gross-indecency-rape-trial-court-suppression-order/106603984",
+      "https://www.abc.net.au/news/2026-04-24/norway-plans-to-introduce-under-16s-social-media-ban/106604296",
+      "https://www.commbank.com.au/",
+      "https://www.abc.net.au/news/2026-04-25/how-the-cost-of-the-ndis-blew-out/106604488",
      "https://www.bunnings.com.au/",
+      "https://www.abc.net.au/news/2026-04-25/sa-wwii-veterans-meet-after-more-than-80-years/106590394",
+      "https://www.abc.net.au/news/2026-04-24/nrl-live-updates-cowboys-sharks-broncos-bulldogs/106591508",
+      "https://www.amazon.com.au/",
      "https://www.coles.com.au/",
      "https://www.woolworths.com.au/",
-      "https://www.kmart.com.au/",
-      "https://www.abc.net.au/",
-      "https://www.news.com.au/",
+      "https://www.abc.net.au/news/2026-04-24/act-government-will-not-cancel-big-splash-operators-lease/106603388",
+      "https://www.abc.net.au/news/2026-04-25/nato-falklands-spain/106604984",
+      "https://www.abc.net.au/news/2026-04-25/how-iran-regime-changed-after-us-israel-middle-east-war/106595956",
+      "https://www.abc.net.au/news/2026-04-24/kezie-apps-says-womens-state-of-origin-timing-not-ideal/106604306",
+      "https://www.realestate.com.au/",
+      "https://www.bom.gov.au/"
+    ],
+    "static_urls": [
      "https://my.gov.au/",
      "https://www.ato.gov.au/",
+      "https://www.bom.gov.au/",
      "https://www.commbank.com.au/",
-      "https://www.bankwest.com.au/",
-      "https://reiwa.com.au/",
-      "https://www.realestate.com.au/",
      "https://www.seek.com.au/",
-      "https://www.afl.com.au/",
-      "https://premier.ticketek.com.au/",
-      "https://www.amazon.com.au/"
+      "https://www.realestate.com.au/",
+      "https://www.woolworths.com.au/",
+      "https://www.coles.com.au/",
+      "https://www.amazon.com.au/",
+      "https://www.bunnings.com.au/"
    ]
  }
-}
+}
--- a/data/regions/CA/Default/Montreal.json
+++ b/data/regions/CA/Default/Montreal.json
@@ -8,10 +8,39 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://www.cbc.ca/",
+      "https://www.cbc.ca/music/taylor-kirk-timber-timbre-obit-9.7176057?cmp=rss",
+      "https://www.cbc.ca/sports/hockey/pwhl/pwhl-super-saturday-regular-season-finale-april-2026-9.7174583?cmp=rss",
+      "https://www.cbc.ca/news/canada/hamilton/cooney-hamber-trial-decision-date-9.7174773?cmp=rss",
+      "https://www.cbc.ca/news/canada/kitchener-waterloo/livestory/jeffrey-sloka-sexual-assault-trial-ruling-decision-9.7175767?cmp=rss",
+      "https://www.cbc.ca/news/politics/ukraine-war-nato-carignan-trump-9.7175303?cmp=rss",
+      "https://www.cbc.ca/books/canadian-poet-karen-solie-wins-239k-windham-campbell-prize-9.7173005?cmp=rss",
+      "https://www.cbc.ca/news/canada/toronto/ticketmaster-delist-resale-tickets-ontario-9.7175775?cmp=rss",
+      "https://www.cra-arc.gc.ca/",
+      "https://www.amazon.ca/",
+      "https://www.cbc.ca/news/canada/nova-scotia/tiffany-cameron-halifax-tides-northern-super-league-women-s-soccer-anthem-victory-9.7174310?cmp=rss",
+      "https://www.cbc.ca/news/politics/trudeau-china-economic-coercion-9.7175918?cmp=rss",
+      "https://www.td.com/",
+      "https://www.canada.ca/en.html",
+      "https://www.cbc.ca/news/canada/calgary/powerful-winds-calgary-damage-9.7176144?cmp=rss",
+      "https://www.cbc.ca/news/canada/calgary/ottawa-approves-enbridge-s-4b-sunrise-natural-gas-pipeline-expansion-project-9.7175787?cmp=rss",
+      "https://www.rbcroyalbank.com/",
+      "https://www.canadapost-postescanada.ca/",
+      "https://www.cbc.ca/news/investigates/ancestral-remains-wolfe-island-ontario-9.7174129?cmp=rss",
+      "https://www.cbc.ca/news/science/climate-summit-transition-fossil-fuels-9.7175158?cmp=rss",
+      "https://www.cbc.ca/news/canada/calgary/analysis-alberta-electoral-boundary-new-maps-danielle-smith-naheed-nenshi-9.7175296?cmp=rss",
+      "https://www.theweathernetwork.com/ca",
+      "https://www.cbc.ca/news/canada/manitoba/death-threats-genocide-winnipegger-charged-9.7175921?cmp=rss",
+      "https://www.utoronto.ca/"
+    ],
+    "static_urls": [
+      "https://www.canada.ca/en.html",
+      "https://www.cra-arc.gc.ca/",
+      "https://www.canadapost-postescanada.ca/",
+      "https://www.utoronto.ca/",
+      "https://www.td.com/",
+      "https://www.rbcroyalbank.com/",
      "https://www.amazon.ca/",
      "https://www.theweathernetwork.com/ca"
    ]
  }
-}
+}
--- a/data/regions/CA/Default/Toronto.json
+++ b/data/regions/CA/Default/Toronto.json
@@ -8,13 +8,39 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
      "https://www.canada.ca/en.html",
-      "https://www.cbc.ca/",
-      "https://www.thestar.com/",
-      "https://www.ctvnews.ca/",
+      "https://www.cbc.ca/sports/hockey/pwhl/pwhl-super-saturday-regular-season-finale-april-2026-9.7174583?cmp=rss",
+      "https://www.cbc.ca/news/politics/ukraine-war-nato-carignan-trump-9.7175303?cmp=rss",
+      "https://www.cbc.ca/news/canada/calgary/ottawa-approves-enbridge-s-4b-sunrise-natural-gas-pipeline-expansion-project-9.7175787?cmp=rss",
+      "https://www.cbc.ca/news/science/climate-summit-transition-fossil-fuels-9.7175158?cmp=rss",
+      "https://www.cbc.ca/news/canada/manitoba/death-threats-genocide-winnipegger-charged-9.7175921?cmp=rss",
      "https://www.canadapost-postescanada.ca/",
-      "https://www.td.com/"
+      "https://www.cbc.ca/news/investigates/ancestral-remains-wolfe-island-ontario-9.7174129?cmp=rss",
+      "https://www.cbc.ca/news/canada/nova-scotia/tiffany-cameron-halifax-tides-northern-super-league-women-s-soccer-anthem-victory-9.7174310?cmp=rss",
+      "https://www.theweathernetwork.com/ca",
+      "https://www.cbc.ca/news/canada/calgary/analysis-alberta-electoral-boundary-new-maps-danielle-smith-naheed-nenshi-9.7175296?cmp=rss",
+      "https://www.cbc.ca/music/taylor-kirk-timber-timbre-obit-9.7176057?cmp=rss",
+      "https://www.td.com/",
+      "https://www.cbc.ca/news/canada/hamilton/cooney-hamber-trial-decision-date-9.7174773?cmp=rss",
+      "https://www.cbc.ca/news/canada/kitchener-waterloo/livestory/jeffrey-sloka-sexual-assault-trial-ruling-decision-9.7175767?cmp=rss",
+      "https://www.cra-arc.gc.ca/",
+      "https://www.cbc.ca/books/canadian-poet-karen-solie-wins-239k-windham-campbell-prize-9.7173005?cmp=rss",
+      "https://www.amazon.ca/",
+      "https://www.rbcroyalbank.com/",
+      "https://www.cbc.ca/news/canada/calgary/powerful-winds-calgary-damage-9.7176144?cmp=rss",
+      "https://www.utoronto.ca/",
+      "https://www.cbc.ca/news/canada/toronto/ticketmaster-delist-resale-tickets-ontario-9.7175775?cmp=rss",
+      "https://www.cbc.ca/news/politics/trudeau-china-economic-coercion-9.7175918?cmp=rss"
+    ],
+    "static_urls": [
+      "https://www.canada.ca/en.html",
+      "https://www.cra-arc.gc.ca/",
+      "https://www.canadapost-postescanada.ca/",
+      "https://www.utoronto.ca/",
+      "https://www.td.com/",
+      "https://www.rbcroyalbank.com/",
+      "https://www.amazon.ca/",
+      "https://www.theweathernetwork.com/ca"
    ]
  }
-}
+}
--- a/data/regions/DE/Default/Frankfurt.json
+++ b/data/regions/DE/Default/Frankfurt.json
@@ -9,12 +9,38 @@
  "trust_module": {
    "white_urls": [
      "https://www.amazon.de/",
+      "https://www.tagesschau.de/ausland/europa/impfstoffallianz-malaria-who-100.html",
+      "https://www.tagesschau.de/ausland/europa/eu-gipfel-zypern-iran-krieg-ukraine-100.html",
+      "https://www.tagesschau.de/ausland/europa/norwegen-social-media-verbot-100.html",
+      "https://www.tagesschau.de/ausland/europa/eu-gipfel-zypern-106.html",
+      "https://www.tagesschau.de/ausland/europa/eu-gipfel-zypern-102.html",
+      "https://www.tagesschau.de/wirtschaft/konjunktur/ifo-index-stimmung-wirtschaft-100.html",
+      "https://www.arbeitsagentur.de/",
+      "https://www.bahn.de/",
+      "https://www.tum.de/",
+      "https://www.bundesregierung.de/",
+      "https://www.sparkasse.de/",
+      "https://www.tagesschau.de/ausland/amerika/ermittlungen-powell-eingestellt-100.html",
+      "https://www.tagesschau.de/ausland/europa/ukraine-odessa-tote-100.html",
+      "https://www.tagesschau.de/inland/innenpolitik/rente-debatte-100.html",
+      "https://www.tagesschau.de/inland/regional/berlin/berliner-kultursenatorin-ruecktritt-100.html",
+      "https://www.tagesschau.de/wirtschaft/verbraucher/spritpreise-tanken-102.html",
      "https://www.spiegel.de/",
-      "https://www.tagesschau.de/",
-      "https://de.wikipedia.org/wiki/Spezial:Zuf%C3%A4llige_Seite",
+      "https://www.tagesschau.de/ausland/asien/faq-israel-libanon-usa-waffenruhe-100.html",
+      "https://www.tagesschau.de/inland/bundestag-tankrabatt-praemie-100.html",
      "https://www.ebay.de/",
-      "https://www.bild.de/",
-      "https://www.kicker.de/"
+      "https://www.tagesschau.de/wirtschaft/finanzen/marktberichte/marktbericht-130.html",
+      "https://www.tagesschau.de/inland/regional/brandenburg/flughafen-ryanair-rueckzug-berlin-100.html"
+    ],
+    "static_urls": [
+      "https://www.bundesregierung.de/",
+      "https://www.arbeitsagentur.de/",
+      "https://www.tum.de/",
+      "https://www.sparkasse.de/",
+      "https://www.bahn.de/",
+      "https://www.amazon.de/",
+      "https://www.ebay.de/",
+      "https://www.spiegel.de/"
    ]
  }
-}
+}
--- a/data/regions/ES/Default/Madrid.json
+++ b/data/regions/ES/Default/Madrid.json
@@ -8,13 +8,37 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://es.wikipedia.org/wiki/Especial:Aleatoria",
-      "https://www.elmundo.es/",
-      "https://www.elpais.com/",
-      "https://www.marca.com/",
-      "https://www.rtve.es/",
+      "https://elpais.com/internacional/2026-04-24/trump-envia-a-pakistan-a-sus-dos-principales-negociadores-para-retomar-el-dialogo-con-teheran.html",
+      "https://elpais.com/cultura/2026-04-24/xavier-lozano-y-la-historia-detras-de-la-flauta-silla-de-amaia-vinieron-a-verme-y-lo-hizo-bastante-bien.html",
+      "https://elpais.com/economia/negocios/2026-04-19/joseph-stiglitz-premio-nobel-de-economia-la-ideologia-de-los-millonarios-tiene-actualmente-un-grado-de-egoismo-alucinante.html",
+      "https://elpais.com/icon/2026-04-23/una-experiencia-inmersiva-para-redefinir-el-automovil-como-espacio-vital.html",
+      "https://elpais.com/salud-y-bienestar/2026-04-24/el-14-de-los-adultos-espanoles-padece-insomnio.html",
+      "https://www.amazon.es/",
+      "https://elpais.com/espana/catalunya/2026-04-24/illa-reivindica-su-fomento-del-catalan-en-sant-jordi-en-medio-de-las-criticas-de-la-oposicion.html",
+      "https://elpais.com/economia/2026-04-24/bayer-espera-cerrar-pronto-las-demandas-por-el-glifosato-con-un-desembolso-legal-que-ronda-los-24000-millones.html",
+      "https://elpais.com/gente/2026-04-24/donald-trump-responde-a-las-palabras-de-enrique-de-inglaterra-en-ucrania-yo-represento-mas-al-reino-unido-que-el.html",
+      "https://www.zara.com/es/",
+      "https://elpais.com/gente/2026-04-24/al-actor-billy-porter-no-le-importa-que-no-le-inviten-a-la-gala-del-met-desde-2019-ya-no-necesito-la-validacion-de-los-demas.html",
+      "https://www.elcorteingles.es/",
+      "https://elpais.com/videos/2026-04-24/tras-los-noes-de-rajoy-y-cospedal-ahora-que.html",
+      "https://administracion.gob.es/",
+      "https://elpais.com/eps/2026-04-24/lilia-mendez-una-mujer-contra-el-olvido-de-la-artesania-textil-gallega.html",
+      "https://www.santander.es/",
+      "https://elpais.com/economia/2026-04-24/espana-se-suma-a-italia-y-pide-a-bruselas-suspender-las-reglas-fiscales-por-la-crisis-energetica.html",
+      "https://elpais.com/eps/2026-04-21/roberto-paparcone-el-arquitecto-que-dejo-su-trabajo-para-moldear-barro.html",
+      "https://elpais.com/economia/vivienda/2026-04-24/consumo-intensifica-la-presion-y-envia-mas-de-500-cartas-a-grandes-tenedores-para-que-acepten-la-prorroga-de-los-alquileres.html",
+      "https://elpais.com/cultura/2026-04-24/critica-del-nuevo-disco-de-foo-fighters-solo-con-la-rabia-no-es-suficiente.html",
+      "https://www.renfe.com/",
+      "https://www.agenciatributaria.es/"
+    ],
+    "static_urls": [
+      "https://administracion.gob.es/",
+      "https://www.agenciatributaria.es/",
+      "https://www.santander.es/",
+      "https://www.renfe.com/",
+      "https://www.amazon.es/",
      "https://www.zara.com/es/",
      "https://www.elcorteingles.es/"
    ]
  }
-}
+}
--- a/data/regions/FR/Default/Paris.json
+++ b/data/regions/FR/Default/Paris.json
@@ -8,13 +8,37 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://www.lemonde.fr/",
-      "https://www.lefigaro.fr/",
-      "https://www.amazon.fr/",
-      "https://www.service-public.fr/",
-      "https://fr.wikipedia.org/wiki/Sp%C3%A9cial:Page_au_hasard",
+      "https://www.france24.com/fr/sports/20260424-roland-garros-carlos-alcaraz-champion-titre-participera-raison-blessure-poignet-tennis-jannick-sinner-grand-chelem",
      "https://www.cdiscount.com/",
-      "https://www.fnac.com/"
+      "https://www.sorbonne-universite.fr/",
+      "https://www.france24.com/fr/vid%C3%A9o/20260424-%C3%A9tats-unis-tornade-d%C3%A9vastatrice-dans-le-nord-de-l-oklahoma",
+      "https://www.amazon.fr/",
+      "https://www.france24.com/fr/%C3%A9missions/aux-4-coins-de-l-europe/20260424-transports-en-europe-embarquement-imm%C3%A9diat-partie-1",
+      "https://www.france24.com/fr/vid%C3%A9o/20260424-eurovision-plus-d-un-millier-d-artistes-appellent-au-boycott-du-concours",
+      "https://www.france24.com/fr/vid%C3%A9o/20260424-au-pakistan-une-reprise-des-n%C3%A9gociations-entre-les-%C3%A9tats-unis-et-l-iran",
+      "https://www.sncf.com/",
+      "https://www.credit-agricole.fr/",
+      "https://www.france24.com/fr/%C3%A9co-tech/20260424-le-manifeste-de-palantir-pour-une-silicon-valley-en-armes",
+      "https://www.france24.com/fr/%C3%A9missions/outre-mer/20260424-des-%C3%A9l%C3%A8ves-priv%C3%A9s-d-%C3%A9cole-depuis-deux-semaines-%C3%A0-mayotte",
+      "https://www.france24.com/fr/vid%C3%A9o/20260424-sommet-europ%C3%A9en-%C3%A0-chypre-apr%C3%A8s-l-ukraine-le-moyen-orient-au-menu-des-discussions",
+      "https://www.impots.gouv.fr/",
+      "https://www.france24.com/fr/vid%C3%A9o/20260424-russie-pluie-noire-sur-une-ville-apr%C3%A8s-une-frappe-de-kiev-contre-une-raffinerie",
+      "https://www.france24.com/fr/moyen-orient/20260424-de-retour-dans-le-sud-des-libanais-d%C3%A9vast%C3%A9s-isra%C3%ABl-d%C3%A9truit-des-maisons-des-routes-m%C3%AAme-les-arbres",
+      "https://www.france24.com/fr/vid%C3%A9o/20260424-%C3%A9tats-unis-risque-de-p%C3%A9nurie-de-missiles-tomahawk-apr%C3%A8s-leur-usage-massif-au-moyen-orient",
+      "https://www.france24.com/fr/%C3%A9missions/aux-4-coins-de-l-europe/20260424-transports-en-europe-embarquement-imm%C3%A9diat-partie-2",
+      "https://www.service-public.fr/",
+      "https://www.france24.com/fr/vid%C3%A9o/20260424-liban-sixi%C3%A8me-casque-bleu-tu%C3%A9-depuis-le-d%C3%A9but-de-la-guerre-france-24-re%C3%A7oit-dany-ghafary-finul",
+      "https://www.france24.com/fr/vid%C3%A9o/20260424-pape-l%C3%A9on-xiv-cl%C3%B4ture-de-sa-tourn%C3%A9e-africaine-de-onze-jours-en-guin%C3%A9e-%C3%A9quatoriale",
+      "https://www.france24.com/fr/afrique/20260424-togo-france-affirme-soutenir-initiatives-r%C3%A9gionales-contenir-risque-terroriste-organisation-%C3%A9tat-islamique-al-qa%C3%AFda"
+    ],
+    "static_urls": [
+      "https://www.service-public.fr/",
+      "https://www.impots.gouv.fr/",
+      "https://www.sorbonne-universite.fr/",
+      "https://www.credit-agricole.fr/",
+      "https://www.sncf.com/",
+      "https://www.amazon.fr/",
+      "https://www.cdiscount.com/"
    ]
  }
-}
+}
--- a/data/regions/HK/Default/HongKong.json
+++ b/data/regions/HK/Default/HongKong.json
@@ -8,13 +8,37 @@
  },
  "trust_module": {
    "white_urls": [
+      "https://hk.news.yahoo.com/%E5%8F%88-%E6%9D%91%E8%8A%B1%E5%9C%92%E4%BF%B1%E6%A8%82%E9%83%A8%E6%B4%A99%E5%8D%83%E4%BA%BA%E8%B3%87%E6%96%99-%E7%A7%81%E9%9A%B1%E5%B0%88%E5%93%A1%E8%A3%81%E5%AE%9A%E9%81%95%E7%A7%81%E9%9A%B1%E6%A2%9D%E4%BE%8B-200000176.html",
+      "https://www.hktvmall.com/",
+      "https://hk.news.yahoo.com/%E8%8B%B1%E5%9C%8B%E6%94%BF%E5%BA%9C%E7%B8%AE%E6%B8%9B%E8%B5%A4%E5%AD%97%E6%9C%89%E6%88%90%E6%95%88-%E5%B0%88%E5%AE%B6%E8%AD%A6%E5%91%8A%E4%B8%AD%E6%9D%B1%E6%88%B0%E7%88%AD%E6%81%90%E6%8E%A8%E5%8D%87%E8%88%89%E5%82%B5%E6%88%90%E6%9C%AC-132005020.html",
+      "https://www.gov.hk/",
+      "https://www.hsbc.com.hk/",
+      "https://hk.news.yahoo.com/%E8%87%AA%E5%8B%95%E6%8B%86%E5%8D%B8%E7%B5%84%E8%A3%9D%E5%A4%A7%E6%B8%9B%E4%BA%BA%E6%89%8B%E5%B7%A5%E6%99%82-%E6%B8%AF%E9%90%B5%E9%A6%96%E8%BC%AA%E5%B0%8D%E7%B6%AD%E4%BF%AE%E4%B8%AD%E5%BF%83%E5%B0%87%E9%81%8B%E4%BD%9C-200000982.html",
+      "https://hk.news.yahoo.com/%E7%84%A1%E5%A4%96%E9%81%8A%E5%81%87%E5%8F%97%E5%82%B7-%E9%A8%99%E6%97%85%E9%81%8A%E4%BF%9D%E9%9A%AA%E7%B4%A2%E5%84%9F-9%E4%BA%BA%E8%A2%AB%E6%8D%95%E6%B6%8970%E6%A1%88170%E8%90%AC-200000121.html",
+      "https://hk.news.yahoo.com/%E6%AD%90%E5%85%83%E5%8D%80pmi%E8%B7%8C%E7%A0%B4%E6%A6%AE%E6%9E%AF%E7%B7%9A-%E5%8F%97%E4%B8%AD%E6%9D%B1%E6%88%B0%E4%BA%8B%E6%8B%96%E7%B4%AF-113502050.html",
+      "https://hk.news.yahoo.com/%E5%90%88%E8%B3%87%E5%A5%AA%E4%B8%AD%E7%92%B0%E6%B5%B7%E6%BF%B1%E6%B4%BB%E5%8B%95%E7%A9%BA%E9%96%93%E7%A7%9F%E7%B4%84-%E6%81%92%E5%9F%BA%E8%88%87%E8%80%80%E6%A6%AE-%E5%BC%95%E5%9C%8B%E9%9A%9B%E7%B4%9A%E7%9B%9B%E4%BA%8B-%E5%AE%9A%E6%99%82%E9%96%8B%E6%94%BE%E6%95%B4%E5%80%8B%E7%A9%BA%E9%96%93-200000497.html",
+      "https://www.hko.gov.hk/",
+      "https://www.mtr.com.hk/",
+      "https://hk.news.yahoo.com/%E7%BE%8E%E8%BB%8D%E6%94%94%E6%88%AA%E6%AA%A2%E6%9F%A5%E5%8D%B0%E5%BA%A6%E6%B4%8B-%E8%89%98%E6%B2%B9%E8%BC%AA-%E6%8E%A7%E9%81%8B%E8%BC%89%E4%BC%8A%E6%9C%97%E7%9F%B3%E6%B2%B9-140505715.html",
+      "https://hk.news.yahoo.com/%E7%BE%8E%E4%BC%8A%E8%AB%87%E5%88%A4%E9%80%B2%E5%B1%95%E8%86%A0%E8%91%97-%E4%BB%A5%E9%BB%8E%E5%81%9C%E7%81%AB%E5%BB%B6%E9%95%B73%E5%91%A8-060502014.html",
+      "https://hk.news.yahoo.com/%E7%87%92%E5%82%B77-5-%E5%B1%85%E6%B0%91%E5%81%95%E7%88%B6%E5%9B%9E%E5%AE%B6%E5%9F%B7%E6%8B%BE-%E8%BF%91%E8%B5%B7%E7%81%AB%E9%BB%9E%E4%BD%8F%E6%88%B6%E5%98%86-%E5%AE%9A%E5%94%94%E5%A5%BD%E5%8F%97-200000405.html",
+      "https://hk.news.yahoo.com/%E6%8C%AA%E5%A8%81%E6%93%AC%E7%A6%8116%E6%AD%B2%E4%BB%A5%E4%B8%8B%E5%85%92%E5%B0%91%E4%BD%BF%E7%94%A8%E7%A4%BE%E7%BE%A4%E5%AA%92%E9%AB%94-080501788.html",
+      "https://www.hku.hk/",
+      "https://www.police.gov.hk/",
+      "https://hk.news.yahoo.com/%E5%B7%9D%E6%99%AE%E7%A8%B1%E4%B8%8D%E6%80%A5%E6%96%BC%E7%B5%90%E6%9D%9F%E8%88%87%E4%BC%8A%E6%9C%97%E6%88%B0%E7%88%AD-%E4%B8%8D%E6%9C%83%E5%8B%95%E7%94%A8%E6%A0%B8%E6%AD%A6-222004956.html",
+      "https://hk.news.yahoo.com/%E4%BB%8A%E6%97%A9%E9%99%8D%E6%BA%AB-%E4%BD%8E%E8%A6%8B19%E5%BA%A6-%E4%BB%8A%E6%97%A5%E6%9C%89%E7%8B%82%E9%A2%A8%E9%9B%B7%E6%9A%B4-%E9%9B%A8%E5%8B%A2%E9%A0%97%E5%A4%A7-200000766.html",
+      "https://hk.news.yahoo.com/%E7%BE%8E%E5%9C%8B%E5%8B%99%E9%99%A2%E6%87%B8%E8%B3%9E%E9%80%BE3%E5%84%84-%E7%B7%9D%E6%8D%95%E4%BC%8A%E6%8B%89%E5%85%8B%E6%AD%A6%E8%A3%9D%E7%B5%84%E7%B9%94%E9%A0%98%E8%A2%96-152002118.html",
+      "https://hk.news.yahoo.com/%E7%A0%B4%E5%A4%A9%E8%8D%92-%E7%BE%85%E5%85%B5%E5%92%B8%E9%A0%90%E7%95%9910%E5%84%84%E5%9B%9E%E6%B0%B4%E6%81%92%E5%A4%A7%E8%82%A1%E6%9D%B1-%E6%9C%83%E8%B2%A1%E5%B1%80%E5%8F%A6%E7%BD%B03%E5%84%84-%E8%AD%89%E7%9B%A3-%E5%90%91%E5%AF%A9%E8%A8%88%E7%95%8C%E7%99%BC%E6%98%8E%E7%A2%BA%E8%A8%8A%E6%81%AF-200000502.html",
+      "https://hk.news.yahoo.com/%E6%9C%80%E6%96%B0%E5%A4%B1%E6%A5%AD%E7%8E%873-7-%E5%8B%9D%E9%A0%90%E6%9C%9F-%E6%94%BF%E5%BA%9C-%E8%A7%80%E5%AF%9F%E5%9C%B0%E7%B7%A3%E6%94%BF%E6%B2%BB%E5%B1%80%E5%8B%A2%E5%BD%B1%E9%9F%BF-200000451.html"
+    ],
+    "static_urls": [
      "https://www.gov.hk/",
      "https://www.hko.gov.hk/",
-      "https://www.scmp.com/",
-      "https://www.hk01.com/",
-      "https://zh.wikipedia.org/wiki/Special:Random",
-      "https://www.hktvmall.com/",
-      "https://www.mtr.com.hk/"
+      "https://www.police.gov.hk/",
+      "https://www.hku.hk/",
+      "https://www.hsbc.com.hk/",
+      "https://www.mtr.com.hk/",
+      "https://www.hktvmall.com/"
    ]
  }
-}
+}
--- a/data/regions/JP/Default/Tokyo.json
+++ b/data/regions/JP/Default/Tokyo.json
@@ -4,17 +4,36 @@
    "base_lat": 35.6812,
    "base_lon": 139.7671,
    "lang_params": "hl=ja&gl=JP",
-    "valid_url_suffix": "com" 
+    "valid_url_suffix": "com"
  },
  "trust_module": {
    "white_urls": [
-      "https://ja.wikipedia.org/wiki/Special:Random",
-      "https://www.yahoo.co.jp/",
+      "https://news.yahoo.co.jp/pickup/6577513?source=rss",
+      "https://news.yahoo.co.jp/pickup/6577514?source=rss",
+      "https://www.u-tokyo.ac.jp/",
+      "https://news.yahoo.co.jp/pickup/6577515?source=rss",
+      "https://www.mhlw.go.jp/",
+      "https://news.yahoo.co.jp/pickup/6577495?source=rss",
      "https://www.rakuten.co.jp/",
-      "https://www.nhk.or.jp/",
-      "kakaku.com/",
-      "https://www.goo.ne.jp/",
-      "https://www.amazon.co.jp/"
+      "https://news.yahoo.co.jp/pickup/6577518?source=rss",
+      "https://www.yahoo.co.jp/",
+      "https://www.jreast.co.jp/",
+      "https://www.amazon.co.jp/",
+      "https://www.smbc.co.jp/",
+      "https://news.yahoo.co.jp/pickup/6577511?source=rss",
+      "https://www.japan.go.jp/",
+      "https://news.yahoo.co.jp/pickup/6577506?source=rss",
+      "https://news.yahoo.co.jp/pickup/6577486?source=rss"
+    ],
+    "static_urls": [
+      "https://www.japan.go.jp/",
+      "https://www.mhlw.go.jp/",
+      "https://www.u-tokyo.ac.jp/",
+      "https://www.smbc.co.jp/",
+      "https://www.jreast.co.jp/",
+      "https://www.yahoo.co.jp/",
+      "https://www.amazon.co.jp/",
+      "https://www.rakuten.co.jp/"
    ]
  }
 }
--- a/data/regions/KR/Default/Seoul.json
+++ b/data/regions/KR/Default/Seoul.json
@@ -2,21 +2,35 @@
  "region_name": "South Korea - Seoul",
  "google_module": {
    "base_lat": 37.5665,
-    "base_lon": 126.9780,
+    "base_lon": 126.978,
    "lang_params": "hl=ko&gl=KR",
    "valid_url_suffix": "co.kr"
  },
  "trust_module": {
    "white_urls": [
-      "https://ko.wikipedia.org/wiki/특수:임의문서",
+      "https://www.yonhapnewstv.co.kr/news/MYH202604242115160Bi",
+      "https://www.yonhapnewstv.co.kr/news/MYH20260424232327PlQ",
+      "https://www.naver.com/",
+      "https://www.yonhapnewstv.co.kr/news/AKR20260424211617lP3",
+      "https://www.coupang.com/",
+      "https://www.hometax.go.kr/",
+      "https://www.yonhapnewstv.co.kr/news/MYH20260424224141clh",
+      "https://www.korea.kr/",
+      "https://www.daum.net/",
+      "https://www.kbstar.com/",
+      "https://www.yonhapnewstv.co.kr/news/MYH20260424212713ARq",
+      "https://www.snu.ac.kr/",
+      "https://www.kakao.com/"
+    ],
+    "static_urls": [
+      "https://www.korea.kr/",
+      "https://www.hometax.go.kr/",
+      "https://www.snu.ac.kr/",
+      "https://www.kbstar.com/",
      "https://www.naver.com/",
      "https://www.daum.net/",
-      "https://namu.wiki/",
-      "https://www.tistory.com/",
      "https://www.coupang.com/",
-      "https://www.chosun.com/",
-      "https://www.yna.co.kr/",
-      "https://www.kakaocorp.com/"
+      "https://www.kakao.com/"
    ]
  }
 }
--- a/data/regions/MY/Default/Kuala_Lumpur.json
+++ b/data/regions/MY/Default/Kuala_Lumpur.json
@@ -0,0 +1,50 @@
+{
+  "region_name": "Malaysia - Kuala Lumpur",
+  "google_module": {
+    "base_lat": 3.139,
+    "base_lon": 101.6869,
+    "lang_params": "hl=en-MY&gl=MY",
+    "valid_url_suffix": "com.my"
+  },
+  "trust_module": {
+    "white_urls": [
+      "https://news.google.com/rss/articles/CBMivAFBVV95cUxPZTJSUTBfRXJ5alNuZUlQMlJYTE4tZUdXOW9vWC1TdFlBRC1fc3dHN19iNm5MTHBBVXdMOEZzZkpoR29CN1hibzI4cHVUNkVwWnc1SmtaaTk4YjBVVGJMUjI1X0lxbW1ILVRqTmhpS3Z6RXozZW9tNkYzVHpBbmNBQ29GZHJyOUpSXzAtNExnT0tGRjZWUHBvaDd2ZXNxbWtMMWMxRTNqWGdEdDZnejZlT0JkM1V1Qkhrd2t1UA?oc=5",
+      "https://news.google.com/rss/articles/CBMiUEFVX3lxTFBIRXB0VVVsbUQyNFlKeU4zR3BZMV95M3pPa2pPY3o4eDFiWmIxdWV6TlBHbk8wZTJQVEtxT1I1TktkUFEzZ0k0b1MtQjNfT012?oc=5",
+      "https://www.kwsp.gov.my/",
+      "https://um.edu.my/",
+      "https://news.google.com/rss/articles/CBMisAFBVV95cUxOZWY5eU9nblU5OVNFZVNNa0hBMFAzbmNjZG5Gelk2WjlYM3duelpuZVR0a0xlT2ZRM09jNjFKUzNWU1cwMlFCYnRCbkFuLUFaMkVnaU9GWW1SRmM5V0FwbDZhRWVCdk9aUzRMWEUtd3NlOWJwQnZXOHJTc3VrMHBDWWlYam5rZC1SNG5BX3hCTU4zN3F0U19URmpuNDkyckV0VGh4ZTVveDJIRnB0U0JrVw?oc=5",
+      "https://news.google.com/rss/articles/CBMi8wFBVV95cUxOWDdveGRmZkI2MDFtMjc0cWJJSnJqWHM3cTJRcU9iVVkwd3VJMC1RR0h1cG9BTWVBSzQ4Q2pFb3VmTWpFc2VucVV1c2dNRGZMaWd6TnJ6UnJlRURCYW1jRHgzMzBPUW01elJrSnF5VEVIT1dmcFYxNk5pZ2ZtWHlNV0VCUV9FSnFzdHdERzFFQng4dHJ2c1BtY3NzdkpCTjFVTG0yc0N4VWY2TDdfNzh2THl4MjRNMlF0S1ljYXlRNWlGbFFIRDFRNTc5d3ZsUDd2Yzc2NXMtRS15eHE3TEFrVHRSaF94N2hUbVU2eHd5SjBmX0nSAfgBQVVfeXFMTmJmZ3hLeGh0bDM5VFA5TjNDUjVmclZRZ29ISllyRmQ4VUdTWE9IbHcyV2JzT2Q2enJLZzdLOEEtYWczY2VsRk9pdTIyaV9UZU5IZ0hIb2p0eGpHMHFhMzhmcmc0cFRIWEVTS0g5b0lHRGs5amotc0F6VEloNmhXWGFWLXluemR2amxqSkRQLWhkM3VibjNHNVZHUERUaEFyVW1idUtGRV9nb2FxYkhnVk90OGpzWE5FY2NxSXRwNGFjVm1KeWhNX0t3WkpVVzNScUlldi1xUFNLb2ppZlFxMFpNQVg3ZURUT1hubm9ibkhicmdhOGRudkQ?oc=5",
+      "https://news.google.com/rss/articles/CBMitAFBVV95cUxPbFU5dUFjT2t5LXVxdFhmTlh5YVh2M01qOGNhTUpTdE9PRVg2TG56VklHV2w5T1ZndERyTW16VlFxQlhOTnE4d2p5b3QxNUdWa2hYTHNOcjViLW5jR0NxQkJFdWUyblZhV2EzUlBmcE5aSy1BOGtoR0xFM0hzdzdZX2lEN1NIV01QODJrRTk3MEJIQWg1dVlaaWcwSjZKNEJGb2dwbFY1bklDWVQ0dTV0cG9kYUk?oc=5",
+      "https://www.maybank2u.com.my/",
+      "https://news.google.com/rss/articles/CBMiXkFVX3lxTFAwTl8tYzE3VWx2bjRfS3NrWllQZF9FRWVyMnJPVGxvTVdJenpqd3VEUmVaTnNxTHZqTXBaZWZKMlhNbkI1MnV6dGZISm5fQmREWl8xUHY5c3czSE5SZWc?oc=5",
+      "https://news.google.com/rss/articles/CBMiwAFBVV95cUxPeDNGSlFPYkdjTDBKdWR2MFVIeHV6VHJWdnUwbzdjeHlRSGFVVUhsZlNQQUZicUVaS2pKRG1DRW9TdHpvNENFV1JXLTdPZUc3WEZYQTFqYThXWmZncjZhU3R4dGdab0FRNUlHbUsyQnhBTjhuLTRjWU5ZR1dzbHlmaHpUUzhzTlhwSnJxWi1Bdjd0WEZlZXo1UkY5LXJNb3BUQjUwRnA0ZXF2bUlBdk44LTNLRlF2Wkd2NFRiX0kxQW8?oc=5",
+      "https://www.malaysia.gov.my/",
+      "https://news.google.com/rss/articles/CBMiuwFBVV95cUxNRVk0VVMtNWxDcUluZkV3NnFlcU5RYXVqdmUydjlyaG1KNlpmbUh3UGt2WlhsTVNLNjVMSGh1SnFGZ0ZIZEllNnUxdjNzenloZEJJcXhWWXdDQm5iU3l0azJiWkRxV3RTb29ZLVpjaFBOanB3RzZqTkMwVWJNNS1mVWNGZFYtMW5sYmZkR09sbnhhSmVYUGdtM2prSmtEWXlmX3ZtTVRIOFI0Z1AybVN2d1Vaa19NU19ZSTVn?oc=5",
+      "https://www.cimbclicks.com.my/",
+      "https://news.google.com/rss/articles/CBMirgFBVV95cUxOM1VobXV0X0kyQkxTNTRrMHBJYmIzZ2lZWU1jV2ZTSW1xMXV0TXZvLUUwbGVkUmZhRE1pNlo2THpaeFBlOGRaN293MW1vclhIdndLMjdwZzlfdFY3MDUtX3FQVmRQcHVZUUR1QWxrNTRNZElfVTl5Ti1sUGRwOWttMFRLVWlkOU1vUTJ1QTZqTWFvVl9Qdjh6UzNYcXBFNnRCcWtTQ09tOHl0aEp1NWc?oc=5",
+      "https://www.pos.com.my/",
+      "https://www.thestar.com.my/",
+      "https://news.google.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?oc=5",
+      "https://news.google.com/rss/articles/CBMizwFBVV95cUxPZGJadEJvZHA0MVlsTWVWcmhWN2ttOXJrZjY4SXdXMTNuUVFlWjlXY080SzlyMVh5Tl9hZE85aWhGTTVxQi0tY1JUZDBzSDRRQ3Qxc1BzekJ2Nnk4WEt3dXd2NUdQZ0U4SzdaSFE0ZExIVlpQTmpCS2RpM1JBSUNRaVBtR3phOXJCOFdsUWpsTXllVDNHcUp4Y0pSbWF6SFN0bHFHdWVsdy1FY01idE44eDNqVy1zRENjMXZKS3hwYXZYcTdwdW5hYlpJMVpwZkk?oc=5",
+      "https://shopee.com.my/",
+      "https://news.google.com/rss/articles/CBMiwAFBVV95cUxOTnZYOEYtQ0ZlZEtxZUlucnM1ZnJvYkVkdFVCbTZPdG1MNmlzNjcwMTR4SVBvWWdyMkhHQ3BQOFZ4Ty1XQ3dCUmhIV2RDQjJCV3BSTjZyZ2txWGo4Mmpmb3VTZVdlV0JGYk8xVTNBUUdFc21nU19oYlhETmN0NkdtcmRJR0xEV1lSb3E5ekZsYlFsazZCaGVGMjlneFp5ZXN5S0FIZ0YwUmdVcG1CWWdVYjJSLVBWNjRuVnVqUGVGS2U?oc=5",
+      "https://news.google.com/rss/articles/CBMioAFBVV95cUxNeWMweUVJV3ZFYkxxbGljVW05ZHdENWxENFhRWFlNWWhiQ2VxZGo4OVFkVEV5REtRbnB2eGRpY2wwNjJadGtwdUIwamUyRkZWempoMFF2elppczhGUGRNQ2hkaEtrRHBTTVRkaV9GakQwSnhzUnVNQk5CVEhrNWFRNkd3VllJbTk5czJmUVFKMmZWNU01OUdmQXJONlB6TjZN0gGmAUFVX3lxTFB0MVo3dmRaWG90ZXJ1Z0tJSnJrd1EtZTZEVXJRUjRuMWpiR1pQNmZxTGtyWmkyd0llQzhUZ183Sk8tNFpZRW9nS2Mwb2dEUGlkTWNhc1VOWnFDSmRZUDJaNEdXSUVtQzdJVGxzTnlQUDJJNG81c3F1WjgwT1ZGOW41M29vc1RmemlhQjRPMzJWV3p0WU5qZl9qLUxnNngwaDJRX2hIcWc?oc=5",
+      "https://news.google.com/rss/articles/CBMigAFBVV95cUxQdFZFRHZIN09tV1Zzd19JcUVWNFUzc0xnaFN1VkgwVUFyV3ZPWXlURlk1N21VdkxvQ0NhcERmMFBCcy10NGd2ek56Yy1WYzBZSU5aUnAtNXpHUHAwZlRmUWhTNDFUSjJZaVY5QXEyYlhDLWtyVWdCd2hBcmU3dzc0bA?oc=5",
+      "https://news.google.com/rss/articles/CBMi3wFBVV95cUxQQzk2M1FMSmVTRkcxdHhsdW5jc0RCZi1pOGtqMDFjSGt4MHhPU2luYUNDSGJ0OGxzcXJwUnVaaG9sWDUtZ0FNenNfMGtBZ0xjZlNZNUtMX0w3cmtJU2tOOTVLelpQNFFDN2c3elpSZF9qNFJqQmJpUWhZdUpCNXlxMXRFZVFLal95ajhxam9MYWpwTGwwWS1EanpoWnVFd0NubGg4SWxTdlprSEpjeTRmVmd3dnpVSGZFUlgzV0tHM19waDc2LXhxNlJjOWZUOEV6OHJNSDFJaUpBdDgzS0hR0gHkAUFVX3lxTE5NOFNBVlo5b1ZuT2JwbEstVk1vbEN4NFM0ejdXbkhhSTJfLURHQXZCTDlpdFRMZlRNV1g0LWY0cEdvdjRFa1d2dmMtVWdPN3I2NDZhdExsSkpGSmM2NDZwT3NyR3NjbGdXODlDSWhvYUtGcGZLd0lZVHZ5SUVBSlJCdGxDQkNjNjltVkg3VW5PeXVyeWRWbnZ1ZDJ0cDJhaThPQ3gxZW1RTUN6ZXd3VW9fUFUxMFBZblczMFd5dy1Nd01MZ3JLNVg2S0dFTWVEdzNKUWZwNm5WcG00cnJiZUtuQXRfcg?oc=5",
+      "https://www.hasil.gov.my/",
+      "https://www.lazada.com.my/"
+    ],
+    "static_urls": [
+      "https://www.malaysia.gov.my/",
+      "https://www.hasil.gov.my/",
+      "https://www.kwsp.gov.my/",
+      "https://um.edu.my/",
+      "https://www.maybank2u.com.my/",
+      "https://www.cimbclicks.com.my/",
+      "https://www.thestar.com.my/",
+      "https://shopee.com.my/",
+      "https://www.lazada.com.my/",
+      "https://www.pos.com.my/"
+    ]
+  }
+}
--- a/data/regions/NL/Default/Amsterdam.json
+++ b/data/regions/NL/Default/Amsterdam.json
@@ -8,13 +8,37 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://nl.wikipedia.org/wiki/Speciaal:Willekeurig",
-      "https://www.rijksoverheid.nl/",
-      "https://www.nos.nl/",
+      "https://www.ing.nl/",
+      "https://nos.nl/l/2611855",
+      "https://www.ns.nl/",
+      "https://www.belastingdienst.nl/",
+      "https://nos.nl/l/2611872",
+      "https://nos.nl/l/2611850",
+      "https://nos.nl/l/2611861",
+      "https://nos.nl/l/2611835",
      "https://www.bol.com/",
-      "https://www.nu.nl/",
+      "https://nos.nl/l/2611825",
+      "https://nos.nl/l/2611863",
+      "https://www.marktplaats.nl/",
+      "https://www.rijksoverheid.nl/",
+      "https://nos.nl/l/2611823",
+      "https://nos.nl/l/2611873",
+      "https://nos.nl/l/2611871",
+      "https://nos.nl/l/2611859",
+      "https://nos.nl/l/2611843",
+      "https://nos.nl/l/2611819",
+      "https://nos.nl/l/2611827",
      "https://www.buienradar.nl/",
-      "https://www.telegraaf.nl/"
+      "https://nos.nl/l/2611849"
+    ],
+    "static_urls": [
+      "https://www.rijksoverheid.nl/",
+      "https://www.belastingdienst.nl/",
+      "https://www.ing.nl/",
+      "https://www.ns.nl/",
+      "https://www.bol.com/",
+      "https://www.marktplaats.nl/",
+      "https://www.buienradar.nl/"
    ]
  }
 }
--- a/data/regions/SG/Default/Singapore.json
+++ b/data/regions/SG/Default/Singapore.json
@@ -8,13 +8,39 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://www.straitstimes.com/",
-      "https://www.channelnewsasia.com/",
-      "https://www.gov.sg/",
-      "https://shopee.sg/",
-      "https://en.wikipedia.org/wiki/Special:Random",
+      "https://www.channelnewsasia.com/business/us-chipmakers-hit-record-highs-intel-turbocharges-ai-rally-6079431",
      "https://www.fairprice.com.sg/",
-      "https://www.dbs.com.sg/"
+      "https://www.channelnewsasia.com/world/us-justice-department-closes-investigation-fed-chair-jerome-powell-6079516",
+      "https://www.channelnewsasia.com/sport/nzs-bracewell-handed-two-year-ban-after-testing-positive-cocaine-6079351",
+      "https://www.nus.edu.sg/",
+      "https://www.channelnewsasia.com/world/pentagon-chief-hegseth-says-iran-has-chance-make-good-deal-6079101",
+      "https://www.channelnewsasia.com/sport/alcarazs-french-open-three-peat-dreams-dashed-wrist-injury-forces-withdrawal-6079616",
+      "https://www.singpass.gov.sg/",
+      "https://www.iras.gov.sg/",
+      "https://www.channelnewsasia.com/sport/west-bromwich-albion-deducted-two-points-back-in-relegation-mix-6079696",
+      "https://www.gov.sg/",
+      "https://www.shopee.sg/",
+      "https://www.dbs.com.sg/",
+      "https://www.channelnewsasia.com/sport/sunderlands-brobbey-deserved-red-foul-spurs-romero-premier-league-panel-says-6079656",
+      "https://www.cpf.gov.sg/",
+      "https://www.channelnewsasia.com/sport/kohli-leads-bengaluru-chase-in-ipl-sudharsans-ton-goes-in-vain-6079791",
+      "https://www.channelnewsasia.com/business/google-invest-up-40-billion-in-ai-rival-anthropic-6079611",
+      "https://www.channelnewsasia.com/sport/frances-cosmobilis-in-talks-buy-world-rally-championship-rights-sources-say-6079736",
+      "https://www.channelnewsasia.com/sport/third-third-bottom-tottenhams-survival-fight-takes-them-wolves-6079546",
+      "https://www.channelnewsasia.com/business/german-prosecutors-investigate-phishing-attack-targeting-politicians-6079586",
+      "https://www.channelnewsasia.com/sport/arsenal-welcome-back-saka-final-push-in-premier-league-title-race-6079441",
+      "https://www.channelnewsasia.com/business/us-justice-department-intervenes-in-xai-challenge-colorado-tech-law-6079606",
+      "https://www.channelnewsasia.com/today/up-close/pro-female-basketball-3x3-singapore-national-athlete-sports-pressure-6077861"
+    ],
+    "static_urls": [
+      "https://www.gov.sg/",
+      "https://www.cpf.gov.sg/",
+      "https://www.iras.gov.sg/",
+      "https://www.singpass.gov.sg/",
+      "https://www.nus.edu.sg/",
+      "https://www.dbs.com.sg/",
+      "https://www.shopee.sg/",
+      "https://www.fairprice.com.sg/"
    ]
  }
-}
+}
--- a/data/regions/TW/Default/Taipei.json
+++ b/data/regions/TW/Default/Taipei.json
@@ -1,20 +1,48 @@
 {
  "region_name": "Taiwan - Taipei",
  "google_module": {
-    "base_lat": 25.0330,
+    "base_lat": 25.033,
    "base_lon": 121.5654,
    "lang_params": "hl=zh-TW&gl=TW",
    "valid_url_suffix": "com.tw"
  },
  "trust_module": {
    "white_urls": [
-      "https://zh.wikipedia.org/wiki/Special:Random",
-      "https://tw.yahoo.com/",
-      "https://www.pchome.com.tw/",
+      "https://www.post.gov.tw/",
+      "https://news.google.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?oc=5",
+      "https://news.google.com/rss/articles/CBMiWEFVX3lxTE9ha2FzeEUzQUNTWG5XZm4yakpBb09Qc05seDhXcWFsNXk4ZlA2bUEzaFFXQU40RVpiRHAzYkxOMHFQSTF5a2g4QldWVExDUzV3UEpKMGtTOTM?oc=5",
+      "https://news.google.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?oc=5",
      "https://www.momoshop.com.tw/",
-      "https://www.ruten.com.tw/",
-      "https://www.mobile01.com/",
+      "https://news.google.com/rss/articles/CBMiUEFVX3lxTE1RWVU3RDhPd1pobEs3aDE3QjRkd25pTWdReU83OENZU280aDZvOE1sMkI2Y19ZOGt5eHRTTl92ZGVjX2xtc01tRVc3VDBXRHJx?oc=5",
+      "https://news.google.com/rss/articles/CBMiYEFVX3lxTFBKRmJSck9sZ3ZuLWp6N2kxa0FEd0lmQjNKQkktM2VhejNYQWRscFpGdTRPOU90VTFubThfUVVZdjhZRTRmbTBSMThra3JlalBuUUhSQTFENS1BQnlmUTJZN9IBZkFVX3lxTE0xMUdHNnduQXdqV21yTkZETXdTQjk5MlhhbGxMeEd5Y0daVWdnemI5TDRmWFZUS2I0QW5RcXpxWGVfeC11X3R3NmZCVkljZUUxM2ZtRUtpR1h4ci1rdEUzMjNzRkhxQQ?oc=5",
+      "https://news.google.com/rss/articles/CBMiW0FVX3lxTE1Tc3ptaDJCY0lEQWNrYjNFMnVaS1dBN1FCSTFGR3p4ekItbDUyWEZiLXB1TkpWTkd1WUFMYWNuMEVwZWFKMGhvQ0dyWnVCZmdlUTZwU2NOUW5pYzTSAWBBVV95cUxOWTFIYmpocUQwX012NkRsY0JRemNxbV95NWNZNG9halFYLXdPLS1EbEF3aU42NW5MeUpOZFVjRGs2azRyZ2hUQTlGTHMwREdOYWYySEtGUUJiRjZqYktLcGU?oc=5",
+      "https://tw.yahoo.com/",
+      "https://www.dcard.tw/",
+      "https://news.google.com/rss/articles/CBMiT0FVX3lxTFBpc29SNm5FZTdDampFWVdIakxYc0k3a0ZfUGJMUWlzRWFXa2IxQXlicUZ4eGR1al9tZk1HaFhKOTJydUdlQ0ZmRHFkZ19DSDQ?oc=5",
+      "https://www.thsrc.com.tw/",
+      "https://www.ntu.edu.tw/",
+      "https://www.cathaybk.com.tw/",
+      "https://news.google.com/rss/articles/CBMiX0FVX3lxTE9hYThuYy1SeFVtVmtlRWloazhGcXQ2RThNWFZxVjdpSVFuek9UcUVoMXdpdWI4NWgzOXVaWmRSR2J5X1JCV1hVZXFrOW11V1JXcmlPREMyb1V3MC1sRHBj?oc=5",
+      "https://news.google.com/rss/articles/CBMiUEFVX3lxTE5zLVNDaGlzQnhOM0JoOG9NSWJLSVhMc0xUWjBYUkpyR3hFMXc3bU4zZGdtSlU2Q3ViTlJkVlQ5aVJQNWhvRjlSQVhFeXNxY0tt0gFWQVVfeXFMTUVvWDNUZmpCM1RhdkdFWV83WmpQMjkxUTV6MWJncGJPWS1PSHVyVFVSLTVsZkFna2MxemVnMkJVbHNqZWVMcmtTeXdMQWtJcXUtemJpUkE?oc=5",
+      "https://news.google.com/rss/articles/CBMiUEFVX3lxTE5xcDdhYjQwcVBQSDIxREN1SnlqY2Z6dE4yaGcySjFlc2dBeWNNRGFfTjFzNndYXy1nRHM0X3BSRTVNek5UVWxsVGR0RzZtQkcy0gFWQVVfeXFMTXVBRWxEUzZQQ2xvYlJVd25jTk5kRGRvb2xPRmdwckw2UGtXZXA2a2FvUTVMc2YtZmJhRFNzMUtLYTNqZXlFM1V0YmlrY1JIUkxZU01QREE?oc=5",
+      "https://news.google.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?oc=5",
+      "https://news.google.com/rss/articles/CBMiWkFVX3lxTE9wck9XVUlqa3FCY1I1VmNMeURQc3dRQWpIamhXdlpfUjRNeGtkQmV4VU8xa3JKRzRreDNQRU9IQWtIU05Xa1k3M19WRktrVGJqMUt1Yk9fNXY4UdIBX0FVX3lxTFA0SXZIRTZvS3JwQW96eU0teVk2VGVvd3A2S0dZZFFTWUNhbWZCbGxBdl9Sa1ZxUG1FRkNIajFJSkR0QmNpd0w4MS1KTHBXQ2FuSklnSlFld3dWbWdybVZn?oc=5",
+      "https://news.google.com/rss/articles/CBMiTkFVX3lxTE8wMkF1X2l6QUxUMDU0TTJ5UGliYy1OSDBQdnNXLWdkb1h3WndWSk5McDhvcFFtbGpIWnBRY0xJNjFmX0Z5SGZmVWxvX0ROZ9IBakFVX3lxTE9iMFFLNnNtTGl5T3FNMURvd3pGU2RTcTg5SENmMXFKUWdScXVkaUNVTXdTd1JVbWFkX0pRbzhJWFV1eUxaU0RhdFpFSFUxOWRUVDFuRWFfM2hHTEJ6VFNIdEpBVDlOcXQ5OWc?oc=5",
+      "https://news.google.com/rss/articles/CBMixwJBVV95cUxPeWtRdFpPd3FMT3BSazFyOE1IRy1ERnFPTlV0Q3dfUVJISkRSaUVfdlRCY3FOemEyTkxaaDQ4V09iMF8ySDRNcU91c3BPUzhCNmFRSkZDbi1VZWlJbEpRVnNCd1k3ZFpDZXc2U2tWMHRMUE54eGh1S1MtWXdIM25LUGVpbm5xMVZQRmp2ZHBqOV9fY24xOEsyUExEQVZ0T3VQYzBha20tZm1PdjU3R2hWOUdKWTBBU3VCNWkwVGRhMHZMYnpjSnFSVFNoRFV3ekVMbFczeFJNOVVfLV93aWtOeWZyUG5mUTloRThzYTA2TEN3UElrM1R3SnFyVEFrbjVVYmdWSWx2Rklyb0pBMDhia3pIa2ZtaFRVamxqTjRDeHkteFdOSnVUOXpJLVpxd2xrRVY4RXdIdi13RXhpWGZ1Q1Q1T3M2UWM?oc=5",
+      "https://www.gov.tw/",
+      "https://news.google.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?oc=5",
+      "https://www.pchome.com.tw/"
+    ],
+    "static_urls": [
+      "https://www.gov.tw/",
+      "https://www.post.gov.tw/",
+      "https://www.ntu.edu.tw/",
+      "https://www.cathaybk.com.tw/",
+      "https://www.thsrc.com.tw/",
+      "https://tw.yahoo.com/",
+      "https://www.momoshop.com.tw/",
+      "https://www.pchome.com.tw/",
      "https://www.dcard.tw/"
    ]
  }
-}
+}
--- a/data/regions/UK/Default/Coventry.json
+++ b/data/regions/UK/Default/Coventry.json
@@ -8,10 +8,39 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://www.bbc.co.uk/",
+      "https://www.barclays.co.uk/",
+      "https://www.bbc.com/news/articles/c77m242z2j8o?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.co.uk/sounds/play/p0ng84b4?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cz78x703lrvo?at_medium=RSS&at_campaign=rss",
+      "https://www.nationalrail.co.uk/",
      "https://www.amazon.co.uk/",
-      "https://www.theguardian.com/uk"
+      "https://www.bbc.com/news/articles/cvg30jkvklno?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/videos/c75kpx2w452o?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cdrmvx8m8vgo?at_medium=RSS&at_campaign=rss",
+      "https://www.ebay.co.uk/",
+      "https://www.bbc.com/sport/football/articles/c0rxl475x8jo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/ckgw72lrvn3o?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cz67qjn48eqo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cn08j2g9ze9o?at_medium=RSS&at_campaign=rss",
+      "https://www.nhs.uk/",
+      "https://www.postoffice.co.uk/",
+      "https://www.bbc.com/news/articles/c74v2enw8l7o?at_medium=RSS&at_campaign=rss",
+      "https://www.gov.uk/",
+      "https://www.bbc.co.uk/iplayer/episode/b01p6y1c/puss-in-boots?at_mid=ovYA47yS9y&at_campaign=Film_Puss_in_Boots&at_medium=display_ad&at_campaign_type=owned&at_nation=NET&at_audience_id=SS&at_product=iplayer&at_brand=b01p6y1c&at_ptr_name=bbc&at_ptr_type=media&at_format=image&at_objective=consumption&at_link_title=Film_Puss_in_Boots&at_bbc_team=BBC&at_creation=Film",
+      "https://www.bbc.com/news/articles/cvg09n7gj3lo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cj37d4gzz4xo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cq8wnzly5j5o?at_medium=RSS&at_campaign=rss",
+      "https://www.ox.ac.uk/"
+    ],
+    "static_urls": [
+      "https://www.gov.uk/",
+      "https://www.nhs.uk/",
+      "https://www.ox.ac.uk/",
+      "https://www.barclays.co.uk/",
+      "https://www.postoffice.co.uk/",
+      "https://www.nationalrail.co.uk/",
+      "https://www.amazon.co.uk/",
+      "https://www.ebay.co.uk/"
    ]
  }
-}
+}
--- a/data/regions/UK/Default/London.json
+++ b/data/regions/UK/Default/London.json
@@ -8,13 +8,39 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://www.bbc.co.uk/",
-      "https://www.gov.uk/",
+      "https://www.postoffice.co.uk/",
+      "https://www.bbc.com/news/articles/c77m242z2j8o?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cn08j2g9ze9o?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/videos/c75kpx2w452o?at_medium=RSS&at_campaign=rss",
+      "https://www.ox.ac.uk/",
+      "https://www.bbc.com/news/articles/cvg30jkvklno?at_medium=RSS&at_campaign=rss",
+      "https://www.ebay.co.uk/",
+      "https://www.bbc.com/news/articles/cz78x703lrvo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/ckgw72lrvn3o?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.co.uk/iplayer/episode/b01p6y1c/puss-in-boots?at_mid=ovYA47yS9y&at_campaign=Film_Puss_in_Boots&at_medium=display_ad&at_campaign_type=owned&at_nation=NET&at_audience_id=SS&at_product=iplayer&at_brand=b01p6y1c&at_ptr_name=bbc&at_ptr_type=media&at_format=image&at_objective=consumption&at_link_title=Film_Puss_in_Boots&at_bbc_team=BBC&at_creation=Film",
+      "https://www.bbc.com/news/articles/cj37d4gzz4xo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/sport/football/articles/c0rxl475x8jo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cvg09n7gj3lo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cdrmvx8m8vgo?at_medium=RSS&at_campaign=rss",
      "https://www.amazon.co.uk/",
-      "https://www.theguardian.com/uk",
+      "https://www.gov.uk/",
      "https://www.nhs.uk/",
-      "https://en.wikipedia.org/wiki/Special:Random",
+      "https://www.bbc.com/news/articles/cq8wnzly5j5o?at_medium=RSS&at_campaign=rss",
+      "https://www.nationalrail.co.uk/",
+      "https://www.barclays.co.uk/",
+      "https://www.bbc.co.uk/sounds/play/p0ng84b4?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/cz67qjn48eqo?at_medium=RSS&at_campaign=rss",
+      "https://www.bbc.com/news/articles/c74v2enw8l7o?at_medium=RSS&at_campaign=rss"
+    ],
+    "static_urls": [
+      "https://www.gov.uk/",
+      "https://www.nhs.uk/",
+      "https://www.ox.ac.uk/",
+      "https://www.barclays.co.uk/",
+      "https://www.postoffice.co.uk/",
+      "https://www.nationalrail.co.uk/",
+      "https://www.amazon.co.uk/",
      "https://www.ebay.co.uk/"
    ]
  }
-}
+}
--- a/data/regions/US/CA/Los_Angeles.json
+++ b/data/regions/US/CA/Los_Angeles.json
@@ -8,13 +8,43 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://www.yahoo.com/",
+      "https://www.cnn.com/2023/04/18/politics/white-house-toddler/index.html",
+      "https://www.cdc.gov/",
+      "https://www.cnn.com/style/article/ai-photo-win-sony-scli-intl/index.html",
+      "https://www.cnn.com/videos/politics/2023/04/18/kevin-mccarthy-wall-street-speech-debt-ceiling-biden-economy-vpx.cnn",
+      "https://www.irs.gov/",
+      "https://www.cnn.com/cnn-underscored/reviews/mmmat-silicone-mats?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/2023/04/17/opinions/jim-jordan-clarence-thomas-judiciary-committee-obeidallah/index.html",
+      "https://www.cnn.com/cnn-underscored/money/high-yield-savings-accounts?iid=CNNUnderscoredHPcontainer",
+      "https://www.usa.gov/",
+      "https://www.cnn.com/videos/travel/2023/04/18/century-old-shipwrecks-lake-superior-discovery-contd-orig-zt.cnn",
+      "https://www.cnn.com/2023/04/18/politics/mccarthy-biden-debt-ceiling/index.html",
+      "https://www.chase.com/",
+      "https://www.harvard.edu/",
+      "https://www.cnn.com/cnn-underscored/money/how-to-file-taxes?iid=CNNUnderscoredHPcontainer",
+      "https://www.npr.org/2026/04/24/nx-s1-5794052/nfl-draft-pittsburgh-fans",
+      "https://www.walmart.com/",
      "https://www.target.com/",
-      "https://www.npr.org/",
-      "https://www.weather.com/",
+      "https://www.cnn.com/2023/04/18/us/benadryl-tiktok-challenge-teen-death-wellness/index.html",
+      "https://www.bankofamerica.com/",
+      "https://www.usps.com/",
+      "https://www.npr.org/2026/04/24/nx-s1-5797964/after-2-failed-votes-mike-johnson-unveils-new-plan-to-extend-key-u-s-spy-powers",
+      "https://www.cnn.com/2023/04/18/entertainment/jake-gyllenhaal-jamie-lee-curtis-pandemic-living/index.html",
+      "https://www.cnn.com/2023/04/18/opinions/medication-abortion-mifepristone-miscarriage-jones-ctpr/index.html",
      "https://www.amazon.com/",
-      "https://www.cdc.gov/"
+      "https://www.cnn.com/2023/04/16/opinions/top-secrets-come-spilling-out-opinion-column-galant/index.html"
+    ],
+    "static_urls": [
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.cdc.gov/",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.amazon.com/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usps.com/"
    ]
  }
 }
--- a/data/regions/US/CA/San_Jose.json
+++ b/data/regions/US/CA/San_Jose.json
@@ -8,14 +8,43 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://en.wikipedia.org/wiki/Special:Random",
-      "https://www.yahoo.com/",
-      "https://www.target.com/",
-      "https://www.npr.org/",
-      "https://www.weather.com/",
+      "https://www.cnn.com/2023/04/18/us/benadryl-tiktok-challenge-teen-death-wellness/index.html",
+      "https://www.cnn.com/cnn-underscored/reviews/mmmat-silicone-mats?iid=CNNUnderscoredHPcontainer",
+      "https://www.bankofamerica.com/",
+      "https://www.cnn.com/2023/04/18/entertainment/jake-gyllenhaal-jamie-lee-curtis-pandemic-living/index.html",
+      "https://www.cnn.com/videos/politics/2023/04/18/kevin-mccarthy-wall-street-speech-debt-ceiling-biden-economy-vpx.cnn",
+      "https://www.walmart.com/",
+      "https://www.cnn.com/2023/04/16/opinions/top-secrets-come-spilling-out-opinion-column-galant/index.html",
+      "https://www.chase.com/",
+      "https://www.cnn.com/style/article/ai-photo-win-sony-scli-intl/index.html",
+      "https://www.usps.com/",
+      "https://www.cnn.com/2023/04/18/politics/mccarthy-biden-debt-ceiling/index.html",
+      "https://www.irs.gov/",
      "https://www.amazon.com/",
+      "https://www.usa.gov/",
+      "https://www.harvard.edu/",
+      "https://www.cnn.com/cnn-underscored/money/high-yield-savings-accounts?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/2023/04/17/opinions/jim-jordan-clarence-thomas-judiciary-committee-obeidallah/index.html",
+      "https://www.cnn.com/cnn-underscored/money/how-to-file-taxes?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/videos/travel/2023/04/18/century-old-shipwrecks-lake-superior-discovery-contd-orig-zt.cnn",
+      "https://www.cnn.com/2023/04/18/opinions/medication-abortion-mifepristone-miscarriage-jones-ctpr/index.html",
+      "https://www.npr.org/2026/04/24/nx-s1-5797964/after-2-failed-votes-mike-johnson-unveils-new-plan-to-extend-key-u-s-spy-powers",
+      "https://www.cnn.com/2023/04/18/politics/white-house-toddler/index.html",
+      "https://www.target.com/",
      "https://www.cdc.gov/",
-      "https://www.mercurynews.com/"
+      "https://www.npr.org/2026/04/24/nx-s1-5794052/nfl-draft-pittsburgh-fans"
+    ],
+    "static_urls": [
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.cdc.gov/",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.amazon.com/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usps.com/"
    ]
  }
-}
+}
--- a/data/regions/US/IL/Warrenville.json
+++ b/data/regions/US/IL/Warrenville.json
@@ -1,5 +1,50 @@
 {
  "region_name": "United States - Warrenville",
-  "google_module": { "base_lat": 41.8164, "base_lon": -88.1748, "lang_params": "hl=en&gl=US", "valid_url_suffix": "com" },
-  "trust_module": { "white_urls": [ "https://en.wikipedia.org/wiki/Special:Random", "https://www.yahoo.com/", "https://www.target.com/", "https://www.npr.org/", "https://www.weather.com/", "https://www.amazon.com/", "https://www.cdc.gov/" ] }
-}
+  "google_module": {
+    "base_lat": 41.8164,
+    "base_lon": -88.1748,
+    "lang_params": "hl=en&gl=US",
+    "valid_url_suffix": "com"
+  },
+  "trust_module": {
+    "white_urls": [
+      "https://www.npr.org/2026/04/24/nx-s1-5797964/after-2-failed-votes-mike-johnson-unveils-new-plan-to-extend-key-u-s-spy-powers",
+      "https://www.harvard.edu/",
+      "https://www.npr.org/2026/04/24/nx-s1-5794052/nfl-draft-pittsburgh-fans",
+      "https://www.cnn.com/2023/04/18/politics/white-house-toddler/index.html",
+      "https://www.cnn.com/cnn-underscored/money/high-yield-savings-accounts?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/2023/04/18/entertainment/jake-gyllenhaal-jamie-lee-curtis-pandemic-living/index.html",
+      "https://www.chase.com/",
+      "https://www.cnn.com/2023/04/18/politics/mccarthy-biden-debt-ceiling/index.html",
+      "https://www.bankofamerica.com/",
+      "https://www.cnn.com/videos/travel/2023/04/18/century-old-shipwrecks-lake-superior-discovery-contd-orig-zt.cnn",
+      "https://www.cnn.com/cnn-underscored/reviews/mmmat-silicone-mats?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/2023/04/17/opinions/jim-jordan-clarence-thomas-judiciary-committee-obeidallah/index.html",
+      "https://www.cnn.com/2023/04/16/opinions/top-secrets-come-spilling-out-opinion-column-galant/index.html",
+      "https://www.cnn.com/videos/politics/2023/04/18/kevin-mccarthy-wall-street-speech-debt-ceiling-biden-economy-vpx.cnn",
+      "https://www.cnn.com/2023/04/18/opinions/medication-abortion-mifepristone-miscarriage-jones-ctpr/index.html",
+      "https://www.walmart.com/",
+      "https://www.cdc.gov/",
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.target.com/",
+      "https://www.cnn.com/cnn-underscored/money/how-to-file-taxes?iid=CNNUnderscoredHPcontainer",
+      "https://www.usps.com/",
+      "https://www.cnn.com/style/article/ai-photo-win-sony-scli-intl/index.html",
+      "https://www.amazon.com/",
+      "https://www.cnn.com/2023/04/18/us/benadryl-tiktok-challenge-teen-death-wellness/index.html"
+    ],
+    "static_urls": [
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.cdc.gov/",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.amazon.com/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usps.com/"
+    ]
+  }
+}
--- a/data/regions/US/NC/Charlotte.json
+++ b/data/regions/US/NC/Charlotte.json
@@ -1,5 +1,50 @@
 {
  "region_name": "United States - Charlotte",
-  "google_module": { "base_lat": 35.2271, "base_lon": -80.8431, "lang_params": "hl=en&gl=US", "valid_url_suffix": "com" },
-  "trust_module": { "white_urls": [ "https://en.wikipedia.org/wiki/Special:Random", "https://www.yahoo.com/", "https://www.target.com/", "https://www.npr.org/", "https://www.weather.com/", "https://www.amazon.com/", "https://www.cdc.gov/" ] }
-}
+  "google_module": {
+    "base_lat": 35.2271,
+    "base_lon": -80.8431,
+    "lang_params": "hl=en&gl=US",
+    "valid_url_suffix": "com"
+  },
+  "trust_module": {
+    "white_urls": [
+      "https://www.usps.com/",
+      "https://www.target.com/",
+      "https://www.amazon.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.cnn.com/2023/04/16/opinions/top-secrets-come-spilling-out-opinion-column-galant/index.html",
+      "https://www.cnn.com/videos/travel/2023/04/18/century-old-shipwrecks-lake-superior-discovery-contd-orig-zt.cnn",
+      "https://www.cnn.com/2023/04/18/politics/white-house-toddler/index.html",
+      "https://www.cnn.com/cnn-underscored/reviews/mmmat-silicone-mats?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/videos/politics/2023/04/18/kevin-mccarthy-wall-street-speech-debt-ceiling-biden-economy-vpx.cnn",
+      "https://www.npr.org/2026/04/24/nx-s1-5797964/after-2-failed-votes-mike-johnson-unveils-new-plan-to-extend-key-u-s-spy-powers",
+      "https://www.cnn.com/2023/04/18/entertainment/jake-gyllenhaal-jamie-lee-curtis-pandemic-living/index.html",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.cnn.com/cnn-underscored/money/high-yield-savings-accounts?iid=CNNUnderscoredHPcontainer",
+      "https://www.npr.org/2026/04/24/nx-s1-5794052/nfl-draft-pittsburgh-fans",
+      "https://www.usa.gov/",
+      "https://www.walmart.com/",
+      "https://www.cnn.com/2023/04/18/opinions/medication-abortion-mifepristone-miscarriage-jones-ctpr/index.html",
+      "https://www.cnn.com/2023/04/18/us/benadryl-tiktok-challenge-teen-death-wellness/index.html",
+      "https://www.cnn.com/2023/04/17/opinions/jim-jordan-clarence-thomas-judiciary-committee-obeidallah/index.html",
+      "https://www.cdc.gov/",
+      "https://www.irs.gov/",
+      "https://www.cnn.com/style/article/ai-photo-win-sony-scli-intl/index.html",
+      "https://www.cnn.com/2023/04/18/politics/mccarthy-biden-debt-ceiling/index.html",
+      "https://www.cnn.com/cnn-underscored/money/how-to-file-taxes?iid=CNNUnderscoredHPcontainer"
+    ],
+    "static_urls": [
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.cdc.gov/",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.amazon.com/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usps.com/"
+    ]
+  }
+}
--- a/data/regions/US/NV/Las_Vegas.json
+++ b/data/regions/US/NV/Las_Vegas.json
@@ -1,5 +1,50 @@
 {
  "region_name": "United States - Las Vegas",
-  "google_module": { "base_lat": 36.1699, "base_lon": -115.1398, "lang_params": "hl=en&gl=US", "valid_url_suffix": "com" },
-  "trust_module": { "white_urls": [ "https://en.wikipedia.org/wiki/Special:Random", "https://www.yahoo.com/", "https://www.target.com/", "https://www.npr.org/", "https://www.weather.com/", "https://www.amazon.com/", "https://www.cdc.gov/" ] }
-}
+  "google_module": {
+    "base_lat": 36.1699,
+    "base_lon": -115.1398,
+    "lang_params": "hl=en&gl=US",
+    "valid_url_suffix": "com"
+  },
+  "trust_module": {
+    "white_urls": [
+      "https://www.cnn.com/cnn-underscored/reviews/mmmat-silicone-mats?iid=CNNUnderscoredHPcontainer",
+      "https://www.irs.gov/",
+      "https://www.harvard.edu/",
+      "https://www.npr.org/2026/04/24/nx-s1-5794052/nfl-draft-pittsburgh-fans",
+      "https://www.cnn.com/style/article/ai-photo-win-sony-scli-intl/index.html",
+      "https://www.cnn.com/videos/politics/2023/04/18/kevin-mccarthy-wall-street-speech-debt-ceiling-biden-economy-vpx.cnn",
+      "https://www.cnn.com/2023/04/18/us/benadryl-tiktok-challenge-teen-death-wellness/index.html",
+      "https://www.cdc.gov/",
+      "https://www.target.com/",
+      "https://www.cnn.com/2023/04/18/opinions/medication-abortion-mifepristone-miscarriage-jones-ctpr/index.html",
+      "https://www.walmart.com/",
+      "https://www.amazon.com/",
+      "https://www.cnn.com/cnn-underscored/money/high-yield-savings-accounts?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/2023/04/18/politics/white-house-toddler/index.html",
+      "https://www.cnn.com/2023/04/18/entertainment/jake-gyllenhaal-jamie-lee-curtis-pandemic-living/index.html",
+      "https://www.cnn.com/2023/04/17/opinions/jim-jordan-clarence-thomas-judiciary-committee-obeidallah/index.html",
+      "https://www.cnn.com/2023/04/18/politics/mccarthy-biden-debt-ceiling/index.html",
+      "https://www.cnn.com/videos/travel/2023/04/18/century-old-shipwrecks-lake-superior-discovery-contd-orig-zt.cnn",
+      "https://www.chase.com/",
+      "https://www.cnn.com/cnn-underscored/money/how-to-file-taxes?iid=CNNUnderscoredHPcontainer",
+      "https://www.usa.gov/",
+      "https://www.usps.com/",
+      "https://www.npr.org/2026/04/24/nx-s1-5797964/after-2-failed-votes-mike-johnson-unveils-new-plan-to-extend-key-u-s-spy-powers",
+      "https://www.bankofamerica.com/",
+      "https://www.cnn.com/2023/04/16/opinions/top-secrets-come-spilling-out-opinion-column-galant/index.html"
+    ],
+    "static_urls": [
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.cdc.gov/",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.amazon.com/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usps.com/"
+    ]
+  }
+}
--- a/data/regions/US/OR/Bend.json
+++ b/data/regions/US/OR/Bend.json
@@ -1,5 +1,50 @@
 {
  "region_name": "United States - Bend",
-  "google_module": { "base_lat": 44.0582, "base_lon": -121.3153, "lang_params": "hl=en&gl=US", "valid_url_suffix": "com" },
-  "trust_module": { "white_urls": [ "https://en.wikipedia.org/wiki/Special:Random", "https://www.yahoo.com/", "https://www.target.com/", "https://www.npr.org/", "https://www.weather.com/", "https://www.amazon.com/", "https://www.cdc.gov/" ] }
-}
+  "google_module": {
+    "base_lat": 44.0582,
+    "base_lon": -121.3153,
+    "lang_params": "hl=en&gl=US",
+    "valid_url_suffix": "com"
+  },
+  "trust_module": {
+    "white_urls": [
+      "https://www.bankofamerica.com/",
+      "https://www.chase.com/",
+      "https://www.npr.org/2026/04/24/nx-s1-5794052/nfl-draft-pittsburgh-fans",
+      "https://www.cnn.com/videos/politics/2023/04/18/kevin-mccarthy-wall-street-speech-debt-ceiling-biden-economy-vpx.cnn",
+      "https://www.cnn.com/2023/04/18/politics/white-house-toddler/index.html",
+      "https://www.cnn.com/2023/04/18/us/benadryl-tiktok-challenge-teen-death-wellness/index.html",
+      "https://www.cnn.com/cnn-underscored/money/how-to-file-taxes?iid=CNNUnderscoredHPcontainer",
+      "https://www.irs.gov/",
+      "https://www.amazon.com/",
+      "https://www.npr.org/2026/04/24/nx-s1-5797964/after-2-failed-votes-mike-johnson-unveils-new-plan-to-extend-key-u-s-spy-powers",
+      "https://www.cnn.com/style/article/ai-photo-win-sony-scli-intl/index.html",
+      "https://www.cnn.com/cnn-underscored/money/high-yield-savings-accounts?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/cnn-underscored/reviews/mmmat-silicone-mats?iid=CNNUnderscoredHPcontainer",
+      "https://www.harvard.edu/",
+      "https://www.cnn.com/videos/travel/2023/04/18/century-old-shipwrecks-lake-superior-discovery-contd-orig-zt.cnn",
+      "https://www.usps.com/",
+      "https://www.cnn.com/2023/04/18/opinions/medication-abortion-mifepristone-miscarriage-jones-ctpr/index.html",
+      "https://www.cnn.com/2023/04/18/politics/mccarthy-biden-debt-ceiling/index.html",
+      "https://www.cnn.com/2023/04/17/opinions/jim-jordan-clarence-thomas-judiciary-committee-obeidallah/index.html",
+      "https://www.cnn.com/2023/04/16/opinions/top-secrets-come-spilling-out-opinion-column-galant/index.html",
+      "https://www.cdc.gov/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usa.gov/",
+      "https://www.cnn.com/2023/04/18/entertainment/jake-gyllenhaal-jamie-lee-curtis-pandemic-living/index.html"
+    ],
+    "static_urls": [
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.cdc.gov/",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.amazon.com/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usps.com/"
+    ]
+  }
+}
--- a/data/regions/US/TX/Dallas.json
+++ b/data/regions/US/TX/Dallas.json
@@ -0,0 +1,45 @@
+{
+  "region_name": "United States - Dallas",
+  "google_module": {
+    "base_lat": 32.7767,
+    "base_lon": -96.7970,
+    "lang_params": "hl=en&gl=US",
+    "valid_url_suffix": "com"
+  },
+  "trust_module": {
+    "white_urls": [
+      "https://www.dallasnews.com/",
+      "https://www.texas.gov/",
+      "https://www.wfaa.com/",
+      "https://www.nbcdfw.com/",
+      "https://www.fox4news.com/",
+      "https://www.dallascityhall.com/",
+      "https://www.cnn.com/",
+      "https://www.foxnews.com/",
+      "https://www.nytimes.com/",
+      "https://www.wsj.com/",
+      "https://www.usatoday.com/",
+      "https://www.amazon.com/",
+      "https://www.walmart.com/",
+      "https://www.target.com/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.wellsfargo.com/",
+      "https://www.zillow.com/",
+      "https://www.espn.com/",
+      "https://www.weather.com/"
+    ],
+    "static_urls": [
+      "https://www.texas.gov/",
+      "https://www.dallasnews.com/",
+      "https://www.cnn.com/",
+      "https://www.foxnews.com/",
+      "https://www.nytimes.com/",
+      "https://www.amazon.com/",
+      "https://www.walmart.com/",
+      "https://www.target.com/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/"
+    ]
+  }
+}
--- a/data/regions/US/UT/Salt_Lake_City.json
+++ b/data/regions/US/UT/Salt_Lake_City.json
@@ -1,5 +1,50 @@
 {
  "region_name": "United States - Salt Lake City",
-  "google_module": { "base_lat": 40.7608, "base_lon": -111.8910, "lang_params": "hl=en&gl=US", "valid_url_suffix": "com" },
-  "trust_module": { "white_urls": [ "https://en.wikipedia.org/wiki/Special:Random", "https://www.yahoo.com/", "https://www.target.com/", "https://www.npr.org/", "https://www.weather.com/", "https://www.amazon.com/", "https://www.cdc.gov/" ] }
-}
+  "google_module": {
+    "base_lat": 40.7608,
+    "base_lon": -111.891,
+    "lang_params": "hl=en&gl=US",
+    "valid_url_suffix": "com"
+  },
+  "trust_module": {
+    "white_urls": [
+      "https://www.cnn.com/2023/04/18/entertainment/jake-gyllenhaal-jamie-lee-curtis-pandemic-living/index.html",
+      "https://www.cnn.com/2023/04/16/opinions/top-secrets-come-spilling-out-opinion-column-galant/index.html",
+      "https://www.npr.org/2026/04/24/nx-s1-5794052/nfl-draft-pittsburgh-fans",
+      "https://www.cnn.com/style/article/ai-photo-win-sony-scli-intl/index.html",
+      "https://www.cnn.com/videos/politics/2023/04/18/kevin-mccarthy-wall-street-speech-debt-ceiling-biden-economy-vpx.cnn",
+      "https://www.cnn.com/2023/04/18/politics/mccarthy-biden-debt-ceiling/index.html",
+      "https://www.cnn.com/cnn-underscored/money/high-yield-savings-accounts?iid=CNNUnderscoredHPcontainer",
+      "https://www.chase.com/",
+      "https://www.harvard.edu/",
+      "https://www.cnn.com/2023/04/17/opinions/jim-jordan-clarence-thomas-judiciary-committee-obeidallah/index.html",
+      "https://www.npr.org/2026/04/24/nx-s1-5797964/after-2-failed-votes-mike-johnson-unveils-new-plan-to-extend-key-u-s-spy-powers",
+      "https://www.cnn.com/2023/04/18/politics/white-house-toddler/index.html",
+      "https://www.cnn.com/cnn-underscored/reviews/mmmat-silicone-mats?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/videos/travel/2023/04/18/century-old-shipwrecks-lake-superior-discovery-contd-orig-zt.cnn",
+      "https://www.target.com/",
+      "https://www.cnn.com/2023/04/18/opinions/medication-abortion-mifepristone-miscarriage-jones-ctpr/index.html",
+      "https://www.cdc.gov/",
+      "https://www.bankofamerica.com/",
+      "https://www.cnn.com/2023/04/18/us/benadryl-tiktok-challenge-teen-death-wellness/index.html",
+      "https://www.irs.gov/",
+      "https://www.usa.gov/",
+      "https://www.walmart.com/",
+      "https://www.amazon.com/",
+      "https://www.usps.com/",
+      "https://www.cnn.com/cnn-underscored/money/how-to-file-taxes?iid=CNNUnderscoredHPcontainer"
+    ],
+    "static_urls": [
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.cdc.gov/",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.amazon.com/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usps.com/"
+    ]
+  }
+}
--- a/data/regions/US/WA/Seattle.json
+++ b/data/regions/US/WA/Seattle.json
@@ -1,5 +1,50 @@
 {
  "region_name": "United States - Seattle",
-  "google_module": { "base_lat": 47.6062, "base_lon": -122.3321, "lang_params": "hl=en&gl=US", "valid_url_suffix": "com" },
-  "trust_module": { "white_urls": [ "https://en.wikipedia.org/wiki/Special:Random", "https://www.yahoo.com/", "https://www.target.com/", "https://www.npr.org/", "https://www.weather.com/", "https://www.amazon.com/", "https://www.cdc.gov/" ] }
-}
+  "google_module": {
+    "base_lat": 47.6062,
+    "base_lon": -122.3321,
+    "lang_params": "hl=en&gl=US",
+    "valid_url_suffix": "com"
+  },
+  "trust_module": {
+    "white_urls": [
+      "https://www.cnn.com/2023/04/18/politics/white-house-toddler/index.html",
+      "https://www.cnn.com/cnn-underscored/money/high-yield-savings-accounts?iid=CNNUnderscoredHPcontainer",
+      "https://www.walmart.com/",
+      "https://www.cnn.com/2023/04/18/us/benadryl-tiktok-challenge-teen-death-wellness/index.html",
+      "https://www.npr.org/2026/04/24/nx-s1-5797964/after-2-failed-votes-mike-johnson-unveils-new-plan-to-extend-key-u-s-spy-powers",
+      "https://www.cnn.com/2023/04/18/opinions/medication-abortion-mifepristone-miscarriage-jones-ctpr/index.html",
+      "https://www.cnn.com/style/article/ai-photo-win-sony-scli-intl/index.html",
+      "https://www.cnn.com/cnn-underscored/money/how-to-file-taxes?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/videos/travel/2023/04/18/century-old-shipwrecks-lake-superior-discovery-contd-orig-zt.cnn",
+      "https://www.usa.gov/",
+      "https://www.cnn.com/cnn-underscored/reviews/mmmat-silicone-mats?iid=CNNUnderscoredHPcontainer",
+      "https://www.cnn.com/2023/04/18/politics/mccarthy-biden-debt-ceiling/index.html",
+      "https://www.cnn.com/videos/politics/2023/04/18/kevin-mccarthy-wall-street-speech-debt-ceiling-biden-economy-vpx.cnn",
+      "https://www.harvard.edu/",
+      "https://www.npr.org/2026/04/24/nx-s1-5794052/nfl-draft-pittsburgh-fans",
+      "https://www.cnn.com/2023/04/16/opinions/top-secrets-come-spilling-out-opinion-column-galant/index.html",
+      "https://www.bankofamerica.com/",
+      "https://www.cnn.com/2023/04/18/entertainment/jake-gyllenhaal-jamie-lee-curtis-pandemic-living/index.html",
+      "https://www.cdc.gov/",
+      "https://www.target.com/",
+      "https://www.amazon.com/",
+      "https://www.chase.com/",
+      "https://www.usps.com/",
+      "https://www.irs.gov/",
+      "https://www.cnn.com/2023/04/17/opinions/jim-jordan-clarence-thomas-judiciary-committee-obeidallah/index.html"
+    ],
+    "static_urls": [
+      "https://www.usa.gov/",
+      "https://www.irs.gov/",
+      "https://www.cdc.gov/",
+      "https://www.harvard.edu/",
+      "https://www.chase.com/",
+      "https://www.bankofamerica.com/",
+      "https://www.amazon.com/",
+      "https://www.target.com/",
+      "https://www.walmart.com/",
+      "https://www.usps.com/"
+    ]
+  }
+}
--- a/data/regions/VN/Default/Hanoi.json
+++ b/data/regions/VN/Default/Hanoi.json
@@ -8,13 +8,37 @@
  },
  "trust_module": {
    "white_urls": [
-      "https://vi.wikipedia.org/wiki/Đặc_biệt:Ngẫu_nhiên",
-      "https://chinhphu.vn/",
-      "https://vnexpress.net/",
-      "https://tuoitre.vn/",
-      "https://vtv.vn/",
      "https://shopee.vn/",
-      "https://tiki.vn/"
+      "https://vnexpress.net/nguoi-dan-ong-dam-o-2-be-gai-bi-bat-5066872.html",
+      "https://vnexpress.net/sat-hai-dong-nghiep-roi-khai-gian-la-tai-nan-5066845.html",
+      "https://vnexpress.net/tim-mot-nguoi-de-o-lai-khong-phai-de-di-qua-5066545.html",
+      "https://www.vietcombank.com.vn/",
+      "https://vnexpress.net/de-xuat-doi-dat-ben-xe-mien-dong-lam-du-an-giam-ket-xe-hang-xanh-binh-trieu-5066900.html",
+      "https://vnexpress.net/thoi-trang-sanh-doi-cua-hau-ve-vu-van-thanh-va-ban-gai-5065410.html",
+      "https://vnu.edu.vn/",
+      "https://vnexpress.net/toi-chon-o-do-bua-bon-giong-chong-de-gia-dinh-luon-vui-ve-5066891.html",
+      "https://vnexpress.net/viet-nam-mua-oto-tu-nuoc-nao-nhieu-nhat-5066853.html",
+      "https://vnexpress.net/msb-dat-muc-tieu-lai-8-000-ty-dong-5066868.html",
+      "https://vnexpress.net/",
+      "https://vnexpress.net/tim-nguoi-dong-hanh-chan-thanh-giua-cuoc-song-gian-di-5066547.html",
+      "https://dichvucong.gov.vn/",
+      "https://vnexpress.net/van-may-12-con-giap-con-giap-may-man-hom-nay-4-con-giap-thu-nhap-gap-doi-giau-sang-phu-quy-vao-cuoi-tuan-5066289.html",
+      "https://vnexpress.net/cuu-vien-pho-va-kiem-sat-vien-vu-nu-sinh-tu-vong-o-vinh-long-bi-khoi-to-5066878.html",
+      "https://tiki.vn/",
+      "https://vnexpress.net/petrolimex-du-kien-lo-hon-1-000-ty-dong-kinh-doanh-xang-dau-quy-i-5066857.html",
+      "https://vnexpress.net/khung-hoang-nha-ve-sinh-cong-cong-o-anh-5066244.html",
+      "https://vnexpress.net/trang-phuc-cua-phu-nhan-tong-thong-han-quoc-khi-o-viet-nam-5066803.html",
+      "https://vnexpress.net/bao-malaysia-viet-nam-qua-manh-5066906.html",
+      "https://chinhphu.vn/"
+    ],
+    "static_urls": [
+      "https://chinhphu.vn/",
+      "https://dichvucong.gov.vn/",
+      "https://vnu.edu.vn/",
+      "https://www.vietcombank.com.vn/",
+      "https://shopee.vn/",
+      "https://tiki.vn/",
+      "https://vnexpress.net/"
    ]
  }
-}
+}
--- a/master/install_master.sh
+++ b/master/install_master.sh
@@ -21,10 +21,11 @@ REPO_RAW_URL="https://raw.githubusercontent.com/hotyue/IP-Sentinel/main"

 # [核心: 动态提取 Master 专属版本锚点 (KV 解析法)]
 # 通过 grep 定位 MASTER_VERSION 行，再通过 cut 提取等号右侧的值
-TARGET_VERSION=$(curl -s -m 3 "${REPO_RAW_URL}/version.txt" | grep "^MASTER_VERSION=" | cut -d'=' -f2 | tr -d '[:space:]')
+# [修复] 增加 -L 与双栈容灾 (-4)，解决纯 V6 或 V6 优先机器连接 GitHub Raw 易超时的问题
+TARGET_VERSION=$( (curl -sL -m 5 "${REPO_RAW_URL}/version.txt" || curl -4 -sL -m 5 "${REPO_RAW_URL}/version.txt") 2>/dev/null | grep "^MASTER_VERSION=" | cut -d'=' -f2 | tr -d '[:space:]')

-# 🛡️ 兜底防线：如果网络波动拉取失败，启用内置的安全兜底版本
-TARGET_VERSION=${TARGET_VERSION:-"3.5.0"}
+# 🛡️ 兜底防线：如果网络波动拉取失败，启用内置的最新兜底版本
+TARGET_VERSION=${TARGET_VERSION:-"4.0.0"}

 MASTER_DIR="/opt/ip_sentinel_master"
 DB_FILE="${MASTER_DIR}/sentinel.db"
@@ -128,9 +129,9 @@ echo -e "\033[32m✅ 旧进程已肃清！\033[0m"
 # =======================================================================

 # 1. 依赖检查与智能安装 (v3.6.0 兼容性与优雅性升级)
-echo -e "\n[1/4] 正在探测核心依赖 (curl, jq, sqlite3, crontab, pgrep)..."
+echo -e "\n[1/4] 正在探测核心依赖 (curl, jq, sqlite3, crontab, pgrep, openssl)..."

-REQUIRED_CMDS=("curl" "jq" "sqlite3" "crontab" "pgrep")
+REQUIRED_CMDS=("curl" "jq" "sqlite3" "crontab" "pgrep" "openssl")
 MISSING_CMDS=()

 # 基础探测：预检查缺失的命令
@@ -146,29 +147,37 @@ if [ ${#MISSING_CMDS[@]} -gt 0 ]; then
    
    if command -v apt-get >/dev/null 2>&1; then
        apt-get update -y >/dev/null 2>&1
-        apt-get install -y curl jq sqlite3 cron procps >/dev/null 2>&1
+        # [v3.6.3 抽脂级优化] 注入 --no-install-recommends 拒绝捆绑销售
+        apt-get install -y --no-install-recommends curl jq sqlite3 cron procps openssl >/dev/null 2>&1
        systemctl enable cron >/dev/null 2>&1 && systemctl start cron >/dev/null 2>&1
    elif command -v yum >/dev/null 2>&1 || command -v dnf >/dev/null 2>&1; then
        PKG_MGR="yum"
-        command -v dnf >/dev/null 2>&1 && PKG_MGR="dnf"
-        $PKG_MGR install -y curl jq sqlite cronie procps-ng >/dev/null 2>&1
+        OPT_ARGS=""
+        if command -v dnf >/dev/null 2>&1; then
+            PKG_MGR="dnf"
+            # [v3.6.3 抽脂级优化] 强行关闭 DNF 的弱依赖拉取
+            OPT_ARGS="--setopt=install_weak_deps=False"
+        fi
+        $PKG_MGR install -y $OPT_ARGS curl jq sqlite cronie procps-ng openssl >/dev/null 2>&1
        systemctl enable crond >/dev/null 2>&1 && systemctl start crond >/dev/null 2>&1
    elif command -v apk >/dev/null 2>&1; then
        echo "Alpine 探测到系统类型为 Alpine Linux，正在执行轻量级安装..."
-        apk add --no-cache curl jq sqlite dcron procps bash >/dev/null 2>&1
+        # [修复] 优先尝试 cronie，若失败则回退至系统内置 cron，彻底避免单点依赖拖垮全局
+        apk add --no-cache curl jq sqlite cronie procps bash openssl || apk add --no-cache curl jq sqlite procps bash openssl
        mkdir -p /var/spool/cron/crontabs
        rc-update add crond default >/dev/null 2>&1
        service crond start >/dev/null 2>&1
    elif command -v pacman >/dev/null 2>&1; then
-        pacman -Sy --noconfirm curl jq sqlite cronie procps-ng >/dev/null 2>&1
+        pacman -Sy --noconfirm curl jq sqlite cronie procps-ng openssl >/dev/null 2>&1
        mkdir -p /root/.cache/crontab 2>/dev/null
        systemctl enable cronie >/dev/null 2>&1 && systemctl start cronie >/dev/null 2>&1
    else
        echo -e "\033[31m❌ 自动安装失败：系统未知的包管理器。\033[0m"
        echo -e "\033[33m⚠️ 请手动执行以下安装命令后重新运行本脚本：\033[0m"
-        echo -e "  Debian/Ubuntu: \033[36mapt-get update && apt-get install -y curl jq sqlite3 cron procps\033[0m"
-        echo -e "  CentOS/RHEL:   \033[36myum install -y curl jq sqlite cronie procps-ng\033[0m"
-        echo -e "  Alpine Linux:  \033[36mapk add --no-cache curl jq sqlite dcron procps bash\033[0m"
+        echo -e "  Debian/Ubuntu: \033[36mapt-get update && apt-get install -y --no-install-recommends curl jq sqlite3 cron procps openssl\033[0m"
+        echo -e "  CentOS/RHEL:   \033[36myum install -y curl jq sqlite cronie procps-ng openssl\033[0m"
+        echo -e "  Alpine Linux:  \033[36mapk add --no-cache curl jq sqlite cronie procps bash openssl\033[0m"
+        echo -e "  Arch Linux:    \033[36mpacman -Sy curl jq sqlite cronie procps-ng openssl\033[0m"
        exit 1
    fi
    
@@ -259,6 +268,17 @@ CREATE TABLE IF NOT EXISTS nodes (
    enable_ota TEXT DEFAULT 'false',
    PRIMARY KEY(chat_id, node_name)
 );
+
+-- [v4.0.0 新增, v4.0.2 扩容] 核心情报表：记录历史 IP 质量数据，用于绘制趋势图
+CREATE TABLE IF NOT EXISTS ip_trend_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_name TEXT,
+    check_time DATETIME DEFAULT CURRENT_TIMESTAMP,
+    scam_score INTEGER,
+    goog_status TEXT,
+    nf_status TEXT,
+    gpt_status TEXT
+);
 EOF
 echo "✅ 数据库创建成功: $DB_FILE"

@@ -339,12 +359,15 @@ echo "========================================================"
 # =================================================================

 # ================== [v3.1.2 新增: 玻璃房透明装机统计] ==================
-echo -e "\n📡 正在向开源社区汇报装机量 (完全匿名，不收集IP)..."
-MASTER_COUNT=$(curl -s -m 3 "https://ip-sentinel-count.samanthaestime296.workers.dev/ping/master" || echo "")
+# [修复] 仅在全新部署时触发统计，司令部热重载时绝对不触发
+if [ "$UPGRADE_MODE" == "false" ]; then
+    echo -e "\n📡 正在向开源社区汇报装机量 (完全匿名，不收集IP)..."
+    MASTER_COUNT=$(curl -s -m 3 "https://ip-sentinel-count.samanthaestime296.workers.dev/ping/master" || echo "")

-if [ -n "$MASTER_COUNT" ] && [[ "$MASTER_COUNT" =~ ^[0-9]+$ ]]; then
-    echo -e "\033[32m✅ 感谢您成为全球第 ${MASTER_COUNT} 名 IP-Sentinel 指挥官！\033[0m"
-else
-    echo -e "\033[32m✅ 感谢您建立 IP-Sentinel 司令部！\033[0m"
+    if [ -n "$MASTER_COUNT" ] && [[ "$MASTER_COUNT" =~ ^[0-9]+$ ]]; then
+        echo -e "\033[32m✅ 感谢您成为全球第 ${MASTER_COUNT} 名 IP-Sentinel 指挥官！\033[0m"
+    else
+        echo -e "\033[32m✅ 感谢您建立 IP-Sentinel 司令部！\033[0m"
+    fi
+    echo -e "\n"
 fi
-echo -e "\n"
--- a/master/tg_master.sh
+++ b/master/tg_master.sh
@@ -11,8 +11,7 @@ source "$CONF"

 # [核心: 运行态版本继承与云通信地址]
 REPO_RAW_URL="https://raw.githubusercontent.com/hotyue/IP-Sentinel/main"
-# 临时改为开发地址用于测试
-# REPO_RAW_URL="https://raw.githubusercontent.com/hotyue/IP-Sentinel/v3.6.2-rc"
+
 # MASTER_VERSION 已经在上方的 source "$CONF" 中被载入
 # 如果本地极度陈旧没有该变量，才给定一个基础兜底值，避免变量为空导致崩溃
 MASTER_VERSION=${MASTER_VERSION:-"3.5.0"}
@@ -21,6 +20,26 @@ OFFSET_FILE="${MASTER_DIR}/.tg_offset"
 [[ -f $OFFSET_FILE ]] || echo "0" > $OFFSET_FILE

 # --- 工具函数 ---
+# ================== [v4.0.3 核心: 全球全能旗帜渲染引擎] ==================
+get_flag() {
+    local region=$(echo "$1" | tr 'a-z' 'A-Z')
+    local base_cc="${region%%-*}" # 提取横杠前的主国家代码 (例如 US-TX 提取为 US)
+    local flag="🌐"
+    case "$base_cc" in
+        US) flag="🇺🇸" ;; JP) flag="🇯🇵" ;; HK) flag="🇭🇰" ;; TW) flag="🇹🇼" ;; SG) flag="🇸🇬" ;;
+        UK|GB) flag="🇬🇧" ;; DE) flag="🇩🇪" ;; FR) flag="🇫🇷" ;; NL) flag="🇳🇱" ;; CA) flag="🇨🇦" ;;
+        AU) flag="🇦🇺" ;; KR) flag="🇰🇷" ;; IN) flag="🇮🇳" ;; BR) flag="🇧🇷" ;; RU) flag="🇷🇺" ;;
+        CH) flag="🇨🇭" ;; SE) flag="🇸🇪" ;; NO) flag="🇳🇴" ;; DK) flag="🇩🇰" ;; FI) flag="🇫🇮" ;;
+        IT) flag="🇮🇹" ;; ES) flag="🇪🇸" ;; PT) flag="🇵🇹" ;; IE) flag="🇮🇪" ;; PL) flag="🇵🇱" ;;
+        AT) flag="🇦🇹" ;; BE) flag="🇧🇪" ;; TR) flag="🇹🇷" ;; ZA) flag="🇿🇦" ;; AE) flag="🇦🇪" ;;
+        MY) flag="🇲🇾" ;; ID) flag="🇮🇩" ;; VN) flag="🇻🇳" ;; TH) flag="🇹🇭" ;; PH) flag="🇵🇭" ;;
+        NZ) flag="🇳🇿" ;; AR) flag="🇦🇷" ;; CL) flag="🇨🇱" ;; MX) flag="🇲🇽" ;; IL) flag="🇮🇱" ;;
+        SA) flag="🇸🇦" ;; EG) flag="🇪🇬" ;; NG) flag="🇳🇬" ;; KE) flag="🇰🇪" ;; RO) flag="🇷🇴" ;;
+        BG) flag="🇧🇬" ;; CZ) flag="🇨🇿" ;; HU) flag="🇭🇺" ;; GR) flag="🇬🇷" ;; UA) flag="🇺🇦" ;;
+    esac
+    echo "$flag"
+}
+
 send_ui() {
    curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/sendMessage" \
        -H "Content-Type: application/json" \
@@ -45,9 +64,9 @@ edit_ui() {
        -d "{\"chat_id\":\"$1\",\"message_id\":\"$2\",\"text\":\"$3\",\"parse_mode\":\"Markdown\",\"reply_markup\":{\"inline_keyboard\":$4}}" > /dev/null
 }

-# 数据库执行函数
+# 数据库执行函数 (v3.6.3 终极静默版: 动用 .timeout 点命令防泄露)
 db_exec() {
-    sqlite3 "$DB_FILE" "$1"
+    printf ".timeout 5000\n%s\n" "$1" | sqlite3 "$DB_FILE"
 }

 # ================== [v3.0.4 核心: 动态 HMAC 签名生成器] ==================
@@ -65,10 +84,15 @@ generate_signed_url() {
    local signature=$(echo -n "$payload" | openssl dgst -sha256 -hmac "$CHAT_ID" | awk '{print $NF}')
    
    # 返回最终带签名的 URL
-    echo "http://${target_ip}:${target_port}${action_path}?t=${current_t}&sign=${signature}"
+    echo "https://${target_ip}:${target_port}${action_path}?t=${current_t}&sign=${signature}"
 }
 # ========================================================================

+# ================== [v3.6.3 核心: 激活 SQLite 高并发 WAL 引擎] ==================
+db_exec "PRAGMA journal_mode=WAL;" > /dev/null 2>&1
+db_exec "PRAGMA synchronous=NORMAL;" > /dev/null 2>&1
+# ==============================================================================
+
 # ================== [v3.1.3-v3.6.0 核心: 数据库结构无损热升级] ==================
 # 自动探测并增加缺失字段，屏蔽已存在的报错，保护老节点数据
 db_exec "ALTER TABLE nodes ADD COLUMN region TEXT DEFAULT 'UNKNOWN';" 2>/dev/null
@@ -78,6 +102,19 @@ db_exec "ALTER TABLE nodes ADD COLUMN enable_trust TEXT DEFAULT 'true';" 2>/dev/
 db_exec "ALTER TABLE nodes ADD COLUMN enable_ota TEXT DEFAULT 'false';" 2>/dev/null
 # ========================================================================

+# ================== [v4.0.0/v4.0.2 核心: 增加 IP 质量趋势追踪表] ==================
+db_exec "CREATE TABLE IF NOT EXISTS ip_trend_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    node_name TEXT,
+    check_time DATETIME DEFAULT CURRENT_TIMESTAMP,
+    scam_score INTEGER,
+    nf_status TEXT
+);" 2>/dev/null
+# [v4.0.2 热更新] 动态扩容 谷歌 与 ChatGPT 状态追踪字段
+db_exec "ALTER TABLE ip_trend_log ADD COLUMN goog_status TEXT DEFAULT 'Unknown';" 2>/dev/null
+db_exec "ALTER TABLE ip_trend_log ADD COLUMN gpt_status TEXT DEFAULT 'Unknown';" 2>/dev/null
+# ========================================================================
+
 # --- 核心轮询循环 ---
 while true; do
    OFFSET=$(cat $OFFSET_FILE)
@@ -92,6 +129,28 @@ while true; do
            
            CHAT_ID=$(echo "$UPDATE" | jq -r '.message.chat.id // .callback_query.message.chat.id')
            TEXT=$(echo "$UPDATE" | jq -r '.message.text // .callback_query.data')
+
+            # ================== [v4.0.2 核心: 态势感知按钮一键入库] ==================
+            if [[ "$TEXT" == "svq|"* ]]; then
+                # 格式: svq|NODE_NAME|SCORE|GOOG|NF|GPT
+                IFS='|' read -r MAGIC NODE_ID SCORE GOOG_ST NF_ST GPT_ST <<< "$TEXT"
+                CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
+                
+                if [ -n "$NODE_ID" ] && [ -n "$SCORE" ]; then
+                    # 1. 写入 SQLite
+                    db_exec "INSERT INTO ip_trend_log (node_name, scam_score, goog_status, nf_status, gpt_status) VALUES ('$NODE_ID', '$SCORE', '$GOOG_ST', '$NF_ST', '$GPT_ST');"
+                    
+                    # 2. 无损修改原消息：移除入库按钮，展示绿勾状态 (不破坏 Markdown 战报原文)
+                    if [ -n "$MSG_ID" ]; then
+                        curl -s --connect-timeout 5 -m 10 -X POST "https://api.telegram.org/bot${TG_TOKEN}/editMessageReplyMarkup" \
+                            -H "Content-Type: application/json" \
+                            -d "{\"chat_id\":\"${CHAT_ID}\",\"message_id\":\"${MSG_ID}\",\"reply_markup\":{\"inline_keyboard\":[[{\"text\":\"✅ 此报告已存档\",\"callback_data\":\"ignore\"}]]}}" > /dev/null
+                    fi
+                fi
+                continue
+            fi
+            # ======================================================================
+            
            REPLY_TO_TEXT=$(echo "$UPDATE" | jq -r '.message.reply_to_message.text // empty')

            # ================== [v3.5.2 新增: 拦截别名修改的对话回复] ==================
@@ -174,13 +233,7 @@ while true; do
                    BTNS="["
                    while IFS='|' read -r REGION_NAME NODE_COUNT; do
                        [ -z "$REGION_NAME" ] && REGION_NAME="UNKNOWN"
-                        FLAG="🌐"
-                        case "$REGION_NAME" in
-                            "US") FLAG="🇺🇸" ;; "JP") FLAG="🇯🇵" ;; "HK") FLAG="🇭🇰" ;;
-                            "SG") FLAG="🇸🇬" ;; "UK"|"GB") FLAG="🇬🇧" ;; "DE") FLAG="🇩🇪" ;; "FR") FLAG="🇫🇷" ;;
-                            "CA") FLAG="🇨🇦" ;; "AU") FLAG="🇦🇺" ;; "KR") FLAG="🇰🇷" ;; "NL") FLAG="🇳🇱" ;;
-                            "BR") FLAG="🇧🇷" ;; "IN") FLAG="🇮🇳" ;; "TW") FLAG="🇹🇼" ;;
-                        esac
+                        FLAG=$(get_flag "$REGION_NAME")
                        BTNS="$BTNS[{\"text\":\"$FLAG $REGION_NAME ($NODE_COUNT 台)\",\"callback_data\":\"region:$REGION_NAME\"}],"
                    done <<< "$REGION_DATA"
                    BTNS="${BTNS%,}]"
@@ -237,7 +290,8 @@ while true; do
                        send_msg "$CHAT_ID" "📢 **司令部指令下达：正在唤醒全舰队执行 OTA 升级...**%0A*(节点升级成功后会主动发回新的入库确认，请注意查收)*"
                        echo "$NODE_DATA" | while IFS='|' read -r NNAME AIP APORT; do
                            TARGET_URL=$(generate_signed_url "$AIP" "$APORT" "/trigger_ota")
-                            curl -s -m 5 "$TARGET_URL" > /dev/null &
+                            # [灾难救援通道] 仅针对 OTA 允许一次明文回退，抢救缺失证书的老节点
+                            { curl -k -s -m 5 "$TARGET_URL" || curl -s -m 5 "${TARGET_URL/https:\/\//http:\/\/}"; } > /dev/null &
                            sleep 0.3  # 严格流量削峰
                        done
                    fi
@@ -262,6 +316,17 @@ while true; do

                    # 下载最新的 master install 脚本作为幽灵进程
                    curl -fsSL "${REPO_RAW_URL}/master/install_master.sh" -o "/tmp/install_master.sh"
+                    
+                    # [v3.6.3 修复] 🚀 OTA 防砖机制：严格校验脚本完整性
+                    if ! bash -n "/tmp/install_master.sh" >/dev/null 2>&1; then
+                        if [ -n "$MSG_ID" ]; then
+                            edit_msg "$CHAT_ID" "$MSG_ID" "❌ OTA 传输受损：脚本下载不完整，已触发防砖熔断，升级取消！"
+                        else
+                            send_msg "$CHAT_ID" "❌ OTA 传输受损：脚本下载不完整，已触发防砖熔断，升级取消！"
+                        fi
+                        continue
+                    fi
+                    
                    chmod +x "/tmp/install_master.sh"
                    
                    # 抛出幽灵进程进行脱壳升级，传递静默变量与回执 ID
@@ -283,11 +348,13 @@ while true; do
                    if [ -z "$NODE_DATA" ]; then
                        send_msg "$CHAT_ID" "⚠️ 您名下暂无在线节点。"
                    else
-                        send_msg "$CHAT_ID" "📢 **司令部指令下达：正在召唤所有哨兵回传简报...**"
+                        # [文案优化] 提前告知指挥官需要排队等待
+                        send_msg "$CHAT_ID" "📢 **司令部指令下达：正在召唤所有哨兵回传简报...**%0A*(为防止触发 TG 官方限流，简报将排队依次送达，请耐心等待)*"
                        echo "$NODE_DATA" | while IFS='|' read -r NNAME AIP APORT; do
                            TARGET_URL=$(generate_signed_url "$AIP" "$APORT" "/trigger_report")
-                            curl -s -m 5 "$TARGET_URL" > /dev/null &
-                            sleep 0.2  # [新增] 流量削峰：每秒最多并发下发 5 个，保护 Master 网络栈
+                            curl -k -s -m 5 "$TARGET_URL" > /dev/null &
+                            # [致命修复] 强行休眠 2 秒！错开 TG 官方 1条/秒 的发信红线
+                            sleep 2  
                        done
                    fi
                    ;;
@@ -301,13 +368,99 @@ while true; do
                        send_msg "$CHAT_ID" "📢 **司令部指令下达：正在唤醒所有哨兵执行系统维护...**"
                        echo "$NODE_DATA" | while IFS='|' read -r NNAME AIP APORT; do
                            TARGET_URL=$(generate_signed_url "$AIP" "$APORT" "/trigger_run")
-                            curl -s -m 5 "$TARGET_URL" > /dev/null &
+                            curl -k -s -m 5 "$TARGET_URL" > /dev/null &
                            sleep 0.2  # [新增] 流量削峰：防止瞬间 fork 导致句柄耗尽
                        done
                    fi
                    ;;
                # ====================================================================

+                # ------------------- 🚨 请将下面这段代码插入在这里 -------------------
+                
+                # ================== [v4.0.0 新增: 文本指令直接控制通道] ==================
+                "/quality"|"/quality@"*)
+                    TARGET_NODE=$(echo "$TEXT" | awk '{print $2}')
+                    if [ -z "$TARGET_NODE" ]; then
+                        send_msg "$CHAT_ID" "⚠️ 请指定目标节点。例如: \`/quality HK-1\`%0A或通过雷达面板进行选择操作。"
+                    else
+                        TARGET_NODE=$(echo "$TARGET_NODE" | tr -cd 'a-zA-Z0-9_.-')
+                        CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
+                        
+                        # [加密通讯逻辑]
+                        AGENT_INFO=$(db_exec "SELECT agent_ip, agent_port FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
+                        AGENT_IP=$(echo "$AGENT_INFO" | cut -d'|' -f1)
+                        AGENT_PORT=$(echo "$AGENT_INFO" | cut -d'|' -f2)
+
+                        if [ -n "$AGENT_IP" ] && [ -n "$AGENT_PORT" ]; then
+                            send_msg "$CHAT_ID" "⏳ 正在向 \`$TARGET_NODE\` ($AGENT_IP) 下发 [quality] 指令，请稍候..."
+                            
+                            # 动态 HMAC 签名防篡改
+                            TARGET_URL=$(generate_signed_url "$AGENT_IP" "$AGENT_PORT" "/trigger_quality")
+                            RESPONSE=$(curl -k -s -m 5 "$TARGET_URL" || echo "FAILED")
+                            if [ "$RESPONSE" == "FAILED" ] || [ -z "$RESPONSE" ]; then
+                                TARGET_URL_HTTP="${TARGET_URL/https:\/\//http:\/\/}"
+                                RESPONSE=$(curl -s -m 5 "$TARGET_URL_HTTP" || echo "FAILED")
+                            fi
+                            
+                            # 结果判定
+                            if [ "$RESPONSE" == "FAILED" ]; then
+                                send_msg "$CHAT_ID" "❌ 指令下发超时或失败！请检查节点公网 IP 或防火墙端口 ($AGENT_PORT) 是否放行。"
+                            elif [[ "$RESPONSE" == *"403"* ]]; then
+                                send_msg "$CHAT_ID" "⚠️ **拒绝执行**：该节点未在本地开启此模块，请检查安装时的配置！"
+                            else
+                                send_msg "$CHAT_ID" "✅ 节点 \`$TARGET_NODE\` 回应: 🔍 深海声呐已投放！请等待异步战报回传。"
+                            fi
+                        else
+                            send_msg "$CHAT_ID" "❌ 数据库中未找到该节点的通讯地址。"
+                        fi
+                    fi
+                    ;;
+
+                "/trend"|"/trend@"*)
+                    TARGET_NODE=$(echo "$TEXT" | awk '{print $2}')
+                    if [ -z "$TARGET_NODE" ]; then
+                        send_msg "$CHAT_ID" "⚠️ 请指定目标节点。例如: \`/trend HK-1\`%0A或通过雷达面板进行选择操作。"
+                    else
+                        TARGET_NODE=$(echo "$TARGET_NODE" | tr -cd 'a-zA-Z0-9_.-')
+                        CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
+                        
+                        TREND_DATA=$(db_exec "SELECT datetime(check_time, 'localtime'), scam_score, goog_status, nf_status, gpt_status FROM ip_trend_log WHERE node_name='$TARGET_NODE' ORDER BY check_time DESC LIMIT 15;")
+                        
+                        if [ -z "$TREND_DATA" ]; then
+                            send_msg "$CHAT_ID" "⚠️ 节点 \`$TARGET_NODE\` 暂无历史体检档案。请先执行 /quality 投放声呐进行探测。"
+                        else
+                            TARGET_ALIAS=$(db_exec "SELECT IFNULL(node_alias, node_name) FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
+                            [ -z "$TARGET_ALIAS" ] && TARGET_ALIAS="$TARGET_NODE"
+
+                            TEXT_RES="📈 *[${TARGET_ALIAS}] 历史态势感知 (近15次)*\n\n"
+                            TEXT_RES+="时间(本地)  | 风险 | 谷歌 | NF | GPT\n"
+                            TEXT_RES+="-----------------------------------------\n"
+                            
+                            while IFS='|' read -r c_time score goog nf gpt; do
+                                [ -z "$score" ] && score="0"
+                                [ -z "$goog" ] && goog="未知"
+                                [ -z "$nf" ] && nf="未知"
+                                [ -z "$gpt" ] && gpt="未知"
+                                
+                                short_time=$(echo "$c_time" | cut -c 6-16)
+                                
+                                if [ "$score" -le 20 ]; then SCORE_EMJ="🟢"
+                                elif [ "$score" -le 60 ]; then SCORE_EMJ="🟡"
+                                else SCORE_EMJ="🔴"
+                                fi
+                                
+                                TEXT_RES+="\`${short_time}\` | ${SCORE_EMJ}\`${score}\` | \`${goog}\` | \`${nf}\` | \`${gpt}\`\n"
+                            done <<< "$TREND_DATA"
+                            TEXT_RES+="\n_💡 提示：🔴风险分 >60 极易触发网页验证码拦截；谷歌显示 CN 即为高危送中。_"
+                            
+                            # [v4.0.3 体验升级] 注入交互式控制台按钮
+                            BTNS="[[{\"text\":\"⚙️ 调出该节点控制台\",\"callback_data\":\"manage:$TARGET_NODE\"}]]"
+                            send_ui "$CHAT_ID" "$TEXT_RES" "$BTNS"
+                        fi
+                    fi
+                    ;;
+                # ------------------- 🚨 插入代码到此结束 -------------------
+
                "list_nodes")
                    # 【V3.1.3】一级菜单：大区聚合并列出数量
                    REGION_DATA=$(db_exec "SELECT region, COUNT(*) FROM nodes WHERE chat_id='$CHAT_ID' GROUP BY region;")
@@ -317,14 +470,8 @@ while true; do
                        BTNS="["
                        while IFS='|' read -r REGION_NAME NODE_COUNT; do
                            [ -z "$REGION_NAME" ] && REGION_NAME="UNKNOWN"
-                            FLAG="🌐"
-                            case "$REGION_NAME" in
-                                "US") FLAG="🇺🇸" ;; "JP") FLAG="🇯🇵" ;; "HK") FLAG="🇭🇰" ;;
-                                "SG") FLAG="🇸🇬" ;; "UK"|"GB") FLAG="🇬🇧" ;; "DE") FLAG="🇩🇪" ;; "FR") FLAG="🇫🇷" ;;
-                                "CA") FLAG="🇨🇦" ;; "AU") FLAG="🇦🇺" ;; "KR") FLAG="🇰🇷" ;; "NL") FLAG="🇳🇱" ;;
-                                "BR") FLAG="🇧🇷" ;; "IN") FLAG="🇮🇳" ;; "TW") FLAG="🇹🇼" ;;
-                            esac
-                            BTNS="$BTNS[{\"text\":\"$FLAG $REGION_NAME ($NODE_COUNT 台)\",\"callback_data\":\"region:$REGION_NAME\"}],"
+                        FLAG=$(get_flag "$REGION_NAME")
+                        BTNS="$BTNS[{\"text\":\"$FLAG $REGION_NAME ($NODE_COUNT 台)\",\"callback_data\":\"region:$REGION_NAME\"}],"
                        done <<< "$REGION_DATA"
                        # L1 追加返回中枢逃生舱
                        BTNS="$BTNS[{\"text\":\"🏠 回到司令部\",\"callback_data\":\"/start\"}]]"
@@ -384,8 +531,8 @@ while true; do
                    [ "$ST_GOOGLE" == "true" ] && BTN_G="🟢 Google巡逻: 已开" && ACT_G="false" || { BTN_G="🔴 Google巡逻: 已停"; ACT_G="true"; }
                    [ "$ST_TRUST" == "true" ] && BTN_T="🟢 信用净化: 已开" && ACT_T="false" || { BTN_T="🔴 信用净化: 已停"; ACT_T="true"; }

-                    # 模块一：即时战术动作
-                    BTN_ACTION="[{\"text\":\"📍 触发 Google 纠偏\",\"callback_data\":\"google:$TARGET_NODE\"}, {\"text\":\"🛡️ 触发信用净化\",\"callback_data\":\"trust:$TARGET_NODE\"}], [{\"text\":\"📜 提取终端实时日志\",\"callback_data\":\"log:$TARGET_NODE\"}, {\"text\":\"📊 生成单机战报\",\"callback_data\":\"report:$TARGET_NODE\"}]"
+                    # 模块一：即时战术动作 (V4.0.0 引入深海声呐与趋势面板)
+                    BTN_ACTION="[{\"text\":\"📍 触发 Google 纠偏\",\"callback_data\":\"google:$TARGET_NODE\"}, {\"text\":\"🛡️ 触发信用净化\",\"callback_data\":\"trust:$TARGET_NODE\"}], [{\"text\":\"🔍 投放深海声呐 (查IP质量)\",\"callback_data\":\"quality:$TARGET_NODE\"}, {\"text\":\"📈 查看 IP 污染趋势图\",\"callback_data\":\"trend:$TARGET_NODE\"}], [{\"text\":\"📜 提取终端实时日志\",\"callback_data\":\"log:$TARGET_NODE\"}, {\"text\":\"📊 生成单机战报\",\"callback_data\":\"report:$TARGET_NODE\"}]"
                    
                    # 模块二：养护状态启停
                    BTN_TOGGLE="[{\"text\":\"$BTN_G\",\"callback_data\":\"toggle:google:$TARGET_NODE:$ACT_G\"}, {\"text\":\"$BTN_T\",\"callback_data\":\"toggle:trust:$TARGET_NODE:$ACT_T\"}]"
@@ -425,7 +572,8 @@ while true; do
                        TARGET_URL=$(generate_signed_url "$AGENT_IP" "$AGENT_PORT" "/trigger_toggle")
                        TARGET_URL="${TARGET_URL}&mod=${MOD_NAME}&state=${TARGET_STATE}"
                        
-                        RESPONSE=$(curl -s -m 5 "$TARGET_URL" || echo "FAILED")
+                        RESPONSE=$(curl -k -s -m 5 "$TARGET_URL" || echo "FAILED")
+                        
                        if [[ "$RESPONSE" == *"Action Accepted"* ]]; then
                            # 下发成功，更新 DB，原位重绘
                            db_exec "UPDATE nodes SET enable_${MOD_NAME}='$TARGET_STATE' WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE';"
@@ -447,7 +595,8 @@ while true; do
                            [ "$ST_GOOGLE" == "true" ] && BTN_G="🟢 Google巡逻: 已开" && ACT_G="false" || { BTN_G="🔴 Google巡逻: 已停"; ACT_G="true"; }
                            [ "$ST_TRUST" == "true" ] && BTN_T="🟢 信用净化: 已开" && ACT_T="false" || { BTN_T="🔴 信用净化: 已停"; ACT_T="true"; }

-                            BTN_ACTION="[{\"text\":\"📍 触发 Google 纠偏\",\"callback_data\":\"google:$TARGET_NODE\"}, {\"text\":\"🛡️ 触发信用净化\",\"callback_data\":\"trust:$TARGET_NODE\"}], [{\"text\":\"📜 提取终端实时日志\",\"callback_data\":\"log:$TARGET_NODE\"}, {\"text\":\"📊 生成单机战报\",\"callback_data\":\"report:$TARGET_NODE\"}]"
+                            # 模块一：即时战术动作 (V4.0.0 引入深海声呐与趋势面板)
+                    BTN_ACTION="[{\"text\":\"📍 触发 Google 纠偏\",\"callback_data\":\"google:$TARGET_NODE\"}, {\"text\":\"🛡️ 触发信用净化\",\"callback_data\":\"trust:$TARGET_NODE\"}], [{\"text\":\"🔍 投放深海声呐 (查IP质量)\",\"callback_data\":\"quality:$TARGET_NODE\"}, {\"text\":\"📈 查看 IP 污染趋势图\",\"callback_data\":\"trend:$TARGET_NODE\"}], [{\"text\":\"📜 提取终端实时日志\",\"callback_data\":\"log:$TARGET_NODE\"}, {\"text\":\"📊 生成单机战报\",\"callback_data\":\"report:$TARGET_NODE\"}]"
                            BTN_TOGGLE="[{\"text\":\"$BTN_G\",\"callback_data\":\"toggle:google:$TARGET_NODE:$ACT_G\"}, {\"text\":\"$BTN_T\",\"callback_data\":\"toggle:trust:$TARGET_NODE:$ACT_T\"}]"
                            
                            if [ "$IS_OFFICIAL_GATEWAY" != "true" ] && [ "$ST_OTA" == "true" ]; then
@@ -463,7 +612,7 @@ while true; do
                            TEXT_MSG="⚙️ **目标锁定**: \`$TARGET_ALIAS\`\n(底层标识: \`$TARGET_NODE\`)\n🌐 IP 坐标: \`$A_IP\`\n🕒 最后通讯: \`$LAST_SEEN\`\n\n✅ **执行成功**: 模块 [$MOD_NAME] 状态已切换为 $TARGET_STATE！"
                            edit_ui "$CHAT_ID" "$MSG_ID" "$TEXT_MSG" "$BTNS"
                        else
-                            send_msg "$CHAT_ID" "❌ 指令下发失败，节点可能离线或未更新至 v3.5.3。"
+                            send_msg "$CHAT_ID" "❌ 指令下发失败，安全策略禁止降级重试。"
                        fi
                    fi
                    ;;
@@ -484,13 +633,7 @@ while true; do
                        BTNS="["
                        while IFS='|' read -r REGION_NAME NODE_COUNT; do
                            [ -z "$REGION_NAME" ] && REGION_NAME="UNKNOWN"
-                            FLAG="🌐"
-                            case "$REGION_NAME" in
-                                "US") FLAG="🇺🇸" ;; "JP") FLAG="🇯🇵" ;; "HK") FLAG="🇭🇰" ;;
-                                "SG") FLAG="🇸🇬" ;; "UK"|"GB") FLAG="🇬🇧" ;; "DE") FLAG="🇩🇪" ;; "FR") FLAG="🇫🇷" ;;
-                                "CA") FLAG="🇨🇦" ;; "AU") FLAG="🇦🇺" ;; "KR") FLAG="🇰🇷" ;; "NL") FLAG="🇳🇱" ;;
-                                "BR") FLAG="🇧🇷" ;; "IN") FLAG="🇮🇳" ;; "TW") FLAG="🇹🇼" ;;
-                            esac
+                            FLAG=$(get_flag "$REGION_NAME")
                            BTNS="$BTNS[{\"text\":\"$FLAG $REGION_NAME ($NODE_COUNT 台)\",\"callback_data\":\"region:$REGION_NAME\"}],"
                        done <<< "$REGION_DATA"
                        BTNS="${BTNS%,}]"
@@ -525,10 +668,10 @@ while true; do
                        ALIAS_B64=$(echo -n "$NEW_ALIAS" | base64 | tr -d '\n' | tr '+/' '-_')
                        TARGET_URL="${TARGET_URL}&b64=${ALIAS_B64}"
                        
-                        RESPONSE=$(curl -s -m 5 "$TARGET_URL" || echo "FAILED")
+                        RESPONSE=$(curl -k -s -m 5 "$TARGET_URL" || echo "FAILED")
                        
                        if [ "$RESPONSE" == "FAILED" ]; then
-                            send_msg "$CHAT_ID" "❌ 指令下发超时！请检查节点连通性。"
+                            send_msg "$CHAT_ID" "❌ 指令下发超时！为防范劫持风险，已终止请求。"
                        elif [[ "$RESPONSE" == *"Action Accepted"* ]]; then
                            # [v3.5.2 极致丝滑] 确认 Agent 修改成功后，Master 立即自动同步本地 SQLite 数据库！
                            db_exec "UPDATE nodes SET node_alias='$NEW_ALIAS' WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE';"
@@ -565,14 +708,22 @@ while true; do
                        fi
                        
                        TARGET_URL=$(generate_signed_url "$AGENT_IP" "$AGENT_PORT" "/trigger_ota")
-                        RESPONSE=$(curl -s -m 5 "$TARGET_URL" || echo "FAILED")
+                        RESPONSE=$(curl -k -s -m 5 "$TARGET_URL" || echo "FAILED")
                        
+                        # [灾难救援通道] 仅针对 OTA 开放一次性明文降级，用于抢救缺失 openssl 证书的老节点
                        if [ "$RESPONSE" == "FAILED" ]; then
-                            TEXT_RES="❌ OTA 指令下发超时！请检查节点公网连通性。"
+                            TARGET_URL_HTTP="${TARGET_URL/https:\/\//http:\/\/}"
+                            RESPONSE=$(curl -s -m 5 "$TARGET_URL_HTTP" || echo "FAILED")
+                            
+                            if [[ "$RESPONSE" == *"Action Accepted"* ]]; then
+                                TEXT_RES="⚠️ **明文救援成功**：该节点因缺失证书处于 HTTP 裸奔状态！已强行下发 OTA 抢救指令，请等待其重构 TLS 装甲。"
+                            else
+                                TEXT_RES="❌ OTA 指令下发彻底失败！节点已失联或网络阻断。"
+                            fi
                        elif [[ "$RESPONSE" == *"403"* ]]; then
                            TEXT_RES="⚠️ **节点拒绝执行**：该节点本地未开启 OTA 权限或运行在官方网关下！"
                        else
-                            TEXT_RES="✅ OTA 触发成功！节点正在后台执行拉取重构，请等待其发送更新完成的回执消息。"
+                            TEXT_RES="✅ OTA (TLS加密) 触发成功！节点正在后台执行拉取重构..."
                        fi
                        
                        if [ -n "$MSG_ID" ]; then
@@ -585,10 +736,10 @@ while true; do
                    fi
                    ;;

-                # 【核心升级】增加拦截规则，支持 google 和 trust 前缀
-                google:*|trust:*|run:*|report:*|log:*)
+                # 【核心升级 v4.0.0】增加拦截规则，支持 quality 前缀
+                google:*|trust:*|run:*|report:*|log:*|quality:*)
                    # 🛡️ 提取并强制过滤动作参数、节点名与 CHAT_ID
-                    ACTION_TYPE=$(echo "$TEXT" | cut -d':' -f1 | tr -cd 'a-z')
+                    ACTION_TYPE=$(echo "$TEXT" | cut -d':' -f1)
                    TARGET_NODE=$(echo "$TEXT" | cut -d':' -f2 | tr -cd 'a-zA-Z0-9_.-')
                    CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
                    
@@ -606,11 +757,11 @@ while true; do
                        
                        # 🛡️ [v3.0.4] 动态签名生成与触发 (防重放与防篡改)
                        TARGET_URL=$(generate_signed_url "$AGENT_IP" "$AGENT_PORT" "/trigger_${ACTION_TYPE}")
-                        RESPONSE=$(curl -s -m 5 "$TARGET_URL" || echo "FAILED")
+                        RESPONSE=$(curl -k -s -m 5 "$TARGET_URL" || echo "FAILED")
                        
                        # 结果判定
                        if [ "$RESPONSE" == "FAILED" ]; then
-                            TEXT_RES="❌ 指令下发超时或失败！请检查节点公网 IP 或防火墙端口 ($AGENT_PORT) 是否放行。"
+                            TEXT_RES="❌ 指令下发超时或失败！为保护链路安全，已终止通信 (严禁降级为 HTTP)。"
                        elif [[ "$RESPONSE" == *"403"* ]]; then
                            TEXT_RES="⚠️ **拒绝执行**：该节点未在本地开启此模块，请检查安装时的配置！"
                        else
@@ -618,6 +769,8 @@ while true; do
                                TEXT_RES="✅ 节点 \`$TARGET_NODE\` 回应: 📍 Google 纠偏程序启动。"
                            elif [ "$ACTION_TYPE" == "trust" ]; then 
                                TEXT_RES="✅ 节点 \`$TARGET_NODE\` 回应: 🛡️ IP 信用净化程序启动。"
+                            elif [ "$ACTION_TYPE" == "quality" ]; then 
+                                TEXT_RES="✅ 节点 \`$TARGET_NODE\` 回应: 🔍 深海声呐已投放！请等待异步战报回传。"
                            elif [ "$ACTION_TYPE" == "log" ]; then 
                                TEXT_RES="✅ 节点 \`$TARGET_NODE\` 正在抓取日志..."
                            else 
@@ -635,6 +788,55 @@ while true; do
                        send_msg "$CHAT_ID" "❌ 数据库中未找到该节点的通讯地址。"
                    fi
                    ;;
+
+
+                trend:*)
+                    # [v4.0.2 优化: 扩容 15 次追踪并引入 GOOG/GPT 状态]
+                    TARGET_NODE=$(echo "${TEXT#*:}" | tr -cd 'a-zA-Z0-9_.-')
+                    CHAT_ID=$(echo "$CHAT_ID" | tr -cd '0-9-')
+                    
+                    TREND_DATA=$(db_exec "SELECT datetime(check_time, 'localtime'), scam_score, goog_status, nf_status, gpt_status FROM ip_trend_log WHERE node_name='$TARGET_NODE' ORDER BY check_time DESC LIMIT 15;")
+                    
+                    if [ -z "$TREND_DATA" ]; then
+                        TEXT_RES="⚠️ 节点 \`$TARGET_NODE\` 暂无历史体检档案。请先执行 [🔍 投放深海声呐] 进行探测。"
+                    else
+                        TARGET_ALIAS=$(db_exec "SELECT IFNULL(node_alias, node_name) FROM nodes WHERE chat_id='$CHAT_ID' AND node_name='$TARGET_NODE' LIMIT 1;")
+                        [ -z "$TARGET_ALIAS" ] && TARGET_ALIAS="$TARGET_NODE"
+
+                        TEXT_RES="📈 *[${TARGET_ALIAS}] 历史态势感知 (近15次)*\n\n"
+                        TEXT_RES+="时间(本地)  | 风险 | 谷歌 | NF | GPT\n"
+                        TEXT_RES+="-----------------------------------------\n"
+                        
+                        while IFS='|' read -r c_time score goog nf gpt; do
+                            [ -z "$score" ] && score="0"
+                            [ -z "$goog" ] && goog="未知"
+                            [ -z "$nf" ] && nf="未知"
+                            [ -z "$gpt" ] && gpt="未知"
+                            
+                            # 时间做极简切割 (截取 04-24 20:52) 节省横向空间
+                            short_time=$(echo "$c_time" | cut -c 6-16)
+                            
+                            if [ "$score" -le 20 ]; then SCORE_EMJ="🟢"
+                            elif [ "$score" -le 60 ]; then SCORE_EMJ="🟡"
+                            else SCORE_EMJ="🔴"
+                            fi
+                            
+                            # 拼接紧凑排版
+                            TEXT_RES+="\`${short_time}\` | ${SCORE_EMJ}\`${score}\` | \`${goog}\` | \`${nf}\` | \`${gpt}\`\n"
+                        done <<< "$TREND_DATA"
+                        TEXT_RES+="\n_💡 提示：🔴风险分 >60 极易触发网页验证码拦截；谷歌显示 CN 即为高危送中。_"
+                    fi
+                    
+                    # [v4.0.3 体验升级] 注入交互式控制台按钮，并调用原生 UI 重绘函数
+                    BTNS="[[{\"text\":\"⚙️ 调出该节点控制台\",\"callback_data\":\"manage:$TARGET_NODE\"}]]"
+                    
+                    if [ -n "$MSG_ID" ]; then
+                        edit_ui "$CHAT_ID" "$MSG_ID" "$TEXT_RES" "$BTNS"
+                    else
+                        send_ui "$CHAT_ID" "$TEXT_RES" "$BTNS"
+                    fi
+                    ;;
+                    
            esac
        done
    fi
--- a/scripts/fetch_trust_urls.py
+++ b/scripts/fetch_trust_urls.py
@@ -0,0 +1,103 @@
+import urllib.request
+import xml.etree.ElementTree as ET
+import os
+import json
+import random
+
+# ================== [路径防弹装甲] ==================
+SCRIPT_DIR = os.path.dirname(os.path.abspath(__file__))
+PROJECT_ROOT = os.path.dirname(SCRIPT_DIR)
+REGIONS_DIR = os.path.join(PROJECT_ROOT, "data", "regions")
+# ====================================================
+
+HEADERS = {
+    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'
+}
+
+# 全球骨干新闻 RSS 监听矩阵
+RSS_FEEDS = {
+    "US": ["http://rss.cnn.com/rss/cnn_topstories.rss", "https://feeds.npr.org/1001/rss.xml"],
+    "UK": ["http://feeds.bbci.co.uk/news/rss.xml"],
+    "AU": ["https://www.abc.net.au/news/feed/51120/rss.xml"],
+    "CA": ["https://www.cbc.ca/cmlink/rss-topstories"],
+    "DE": ["https://www.tagesschau.de/xml/rss2"],
+    "FR": ["https://www.france24.com/fr/rss"],
+    "ES": ["https://feeds.elpais.com/mrss-s/pages/ep/site/elpais.com/portada"],
+    "JP": ["https://news.yahoo.co.jp/rss/topics/top-picks.xml"],
+    "HK": ["https://hk.news.yahoo.com/rss/hong-kong"],
+    "TW": ["https://news.google.com/rss?hl=zh-TW&gl=TW&ceid=TW:zh-Hant"],
+    "KR": ["https://www.yonhapnewstv.co.kr/category/news/headline/feed/"],
+    "SG": ["https://www.channelnewsasia.com/api/v1/rss-outbound-feed?_format=xml"],
+    "NL": ["https://feeds.nos.nl/nosnieuwsalgemeen"],
+    "VN": ["https://vnexpress.net/rss/tin-moi-nhat.rss"],
+    "MY": ["https://news.google.com/rss?hl=en-MY&gl=MY&ceid=MY:en"]
+}
+
+def fetch_rss_links(region_code, max_items=15):
+    """抓取该战区最新的 RSS 新闻链接"""
+    feeds = RSS_FEEDS.get(region_code, [])
+    if not feeds:
+        return []
+    
+    links = []
+    for url in feeds:
+        try:
+            req = urllib.request.Request(url, headers=HEADERS)
+            with urllib.request.urlopen(req, timeout=10) as response:
+                xml_data = response.read()
+                root = ET.fromstring(xml_data)
+                for item in root.findall('.//item'):
+                    link = item.find('link')
+                    if link is not None and link.text:
+                        clean_link = link.text.strip()
+                        if clean_link.startswith('http'):
+                            links.append(clean_link)
+        except Exception as e:
+            print(f"⚠️ [{region_code}] RSS 抓取异常 ({url}): {e}")
+            
+    # 去重并截取最新
+    return list(set(links))[:max_items]
+
+def process_json_file(file_path, region_code):
+    """融合静态基石与动态新闻"""
+    try:
+        with open(file_path, 'r', encoding='utf-8') as f:
+            data = json.load(f)
+            
+        trust_mod = data.get("trust_module", {})
+        if not trust_mod or "static_urls" not in trust_mod:
+            return
+            
+        static_urls = trust_mod.get("static_urls", [])
+        
+        # 抓取今日该战区的活体新闻流
+        daily_news_urls = fetch_rss_links(region_code)
+        
+        # 战术混合：基石(保证高权重) + 新闻(保证活体动态)
+        combined_urls = static_urls + daily_news_urls
+        
+        # 深度洗牌，打破机械顺序特征
+        combined_urls = list(set(combined_urls))
+        random.shuffle(combined_urls)
+        
+        # 覆写回供 Agent 拉取的 white_urls
+        trust_mod["white_urls"] = combined_urls
+        data["trust_module"] = trust_mod
+        
+        with open(file_path, 'w', encoding='utf-8') as f:
+            json.dump(data, f, ensure_ascii=False, indent=2)
+            
+        print(f"✅ [信用融合] {os.path.basename(file_path)}: 骨干 {len(static_urls)} 条 + 活体 {len(daily_news_urls)} 条")
+        
+    except Exception as e:
+        print(f"❌ [处理失败] {file_path}: {e}")
+
+if __name__ == '__main__':
+    print("========== 启动 IP-Sentinel 活体新闻流融合引擎 ==========")
+    for root_dir, _, files in os.walk(REGIONS_DIR):
+        for file in files:
+            if file.endswith(".json"):
+                file_path = os.path.join(root_dir, file)
+                region_code = os.path.relpath(file_path, REGIONS_DIR).split(os.sep)[0]
+                process_json_file(file_path, region_code)
+    print("========== 融合引擎执行完毕 ==========")
--- a/version.txt
+++ b/version.txt
@@ -1,2 +1,2 @@
-MASTER_VERSION=3.6.2
-AGENT_VERSION=3.6.2
+MASTER_VERSION=4.0.3
+AGENT_VERSION=4.0.3
Author	SHA1	Message	Date
hotyue	ccddaf4386	chore(release): bump version to v4.0.3	2026-04-25 06:26:23 +00:00
hotyue	0f0ba46989	feat(core): 优化部署与升级链路，新节点入列及 OTA 捷报底部追加 [一键唤醒控制台] 按钮	2026-04-25 06:18:22 +00:00
hotyue	f83db38a6b	feat(agent): 优化实时日志推送链路，底部追加 [一键唤醒控制台] 交互式内联按钮	2026-04-25 06:09:37 +00:00
hotyue	ba5582ab4c	fix(master): 修复态势感知面板升级 JSON 交互后的换行符乱码 (%0A 转换为 \n)	2026-04-25 06:02:25 +00:00
hotyue	fb4e1d9b31	feat(master): 优化态势感知面板，底部追加 [一键唤醒控制台] 交互式内联按钮	2026-04-25 05:57:10 +00:00
hotyue	2dea6e382b	feat(agent): 优化每日简报推送链路，底部追加 [一键唤醒控制台] 交互式内联按钮	2026-04-25 05:48:53 +00:00
hotyue	fa8eada97b	docs: 更新 README.md,增加对底层 IP 质量检测组件 xykt/IPQuality 的开源鸣谢	2026-04-25 01:34:32 +00:00
hotyue	c102f66234	docs: 更新 README.md,增加对底层 IP 质量检测组件 xykt/IPQuality 的开源鸣谢	2026-04-25 01:33:22 +00:00
hotyue	68a50fdb4a	docs: 更新 README.md,增加对底层 IP 质量检测组件 xykt/IPQuality 的开源鸣谢	2026-04-25 01:32:20 +00:00
hotyue	aac83acb8f	docs: 更新 README.md,增加对底层 IP 质量检测组件 xykt/IPQuality 的开源鸣谢	2026-04-25 01:30:24 +00:00
hotyue	4be4d5e9ef	docs: 更新 README.md，增加对底层 IP 质量检测组件 xykt/IPQuality 的开源鸣谢	2026-04-25 01:29:30 +00:00
hotyue	1f925b307f	docs: 更新 README.md，增加对底层 IP 质量检测组件 xykt/IPQuality 的开源鸣谢	2026-04-25 01:27:08 +00:00
hotyue	49afe032d6	fix(agent): 重构 Google 区域探测逻辑，穿透 YouTube GeoIP 底层彻底解决跨区漂移与假阳性误判 (Resolves #14 , Resolves #35 )	2026-04-25 00:48:00 +00:00
hotyue	f0f054c8cd	feat(data): 扩容美国得克萨斯州 (Texas/Dallas) 部署坐标与地图基建 (Resolves #33 )	2026-04-25 00:36:07 +00:00
hotyue	699e9ca31a	feat(master): 重构全球旗帜渲染引擎，支持 US-* 等州级行政区划自适应 (Resolves #33 )	2026-04-25 00:25:06 +00:00
github-actions[bot]	76cace4ff6	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-24]	2026-04-24 19:03:51 +00:00
hotyue	9f3218ab7f	chore: release v4.0.2 版本号跃升	2026-04-24 15:23:39 +00:00
hotyue	8a61f518f5	fix(agent): 移除 awk 暴力裁剪引发的 UTF-8 中文多字节劈裂乱码 Bug	2026-04-24 15:13:14 +00:00
hotyue	e9d5023263	fix: 紧急重构态势感知入库链路，引入交互式 [存档] 按钮，彻底解决 TG API 消息监听死锁	2026-04-24 15:06:02 +00:00
hotyue	05b1e21bba	fix(master): 紧急修复 tr 命令语法死锁，并彻底解决态势感知面板的 URL-encoded 换行排版问题	2026-04-24 14:53:38 +00:00
hotyue	4a496fdab3	fix(master): 紧急修复 tr 命令中单引号转义引发的 Bash 语法崩溃死锁	2026-04-24 14:46:23 +00:00
hotyue	8ae3a6534d	feat: 🚀 跃升至 v4.0.2，全面重构 IP 质量态势感知矩阵，新增 Google 与 ChatGPT 历史轨迹追踪	2026-04-24 14:36:36 +00:00
hotyue	3269376c94	fix(agent): 彻底重构探针参数装配机制，完美兼容多IP站群并补回尾部直达链接所需IP变量	2026-04-24 14:01:20 +00:00
hotyue	7a92de4d62	fix(agent): 重构探针参数装配机制，完美兼容多IP站群路由绑定与 NAT 容灾，并修复底部 Scamalytics 链接的变量丢失问题	2026-04-24 13:47:10 +00:00
hotyue	5fbc1e3fb3	fix(agent): 修复 NAT 架构下强制绑定出口导致探针崩溃的死锁，注入 -f 标志输出完整明文 IP，并规范化面板术语	2026-04-24 13:36:11 +00:00
hotyue	d73c3154f9	feat(agent): 丰富深海声呐战报，底部追加探针引擎的运行时版本号与情报生成时间戳	2026-04-24 12:29:54 +00:00
hotyue	b3fbed4a94	chore: 🚀 跃升至 v4.0.1，防弹装甲专项重构全面闭环	2026-04-24 10:53:08 +00:00
hotyue	71fe3bde51	fix(master): 补齐 Master 部署脚本缺失的 openssl 核心依赖，杜绝纯净系统下因 HMAC 签名生成失败导致指令被全网拒收的致命隐患	2026-04-24 10:48:18 +00:00
hotyue	c739f58cc5	refactor(agent): 🛡️ 终极安全重构 - 阻断 FD 文件锁继承导致的任务死锁，并将深海声呐探针收编本地化执行，彻底铲除第三方 RCE 投毒风险	2026-04-24 10:29:11 +00:00
hotyue	2c50c72fcb	refactor(agent): 🛡️ 终极安全重构 - 阻断 FD 文件锁继承导致的任务死锁，并将深海声呐探针收编本地化执行，彻底铲除第三方 RCE 投毒风险	2026-04-24 10:28:38 +00:00
hotyue	8d16c549fc	fix(agent): 修复公网 IP 变动重新注册时丢失 OTA 权限的漏洞，并彻底肃清质量检测路由中的僵尸进程残留	2026-04-24 10:09:18 +00:00
hotyue	d74d6d8775	fix(agent): 🚨 彻底废除官方网关模式下的 HTTP 裸奔漏洞，实现全网节点 100% 强制 TLS 加密，配合主控端 Strict-TLS	2026-04-24 10:02:40 +00:00
hotyue	853e6c09e1	fix(install): 修复 Alpine Linux 下 dcron 依赖缺失导致 openssl 链式静默安装失败的漏洞	2026-04-24 09:44:29 +00:00
hotyue	1f21ac9a7e	fix: 🚨 破除 Strict-TLS 死亡锁死，强制全网挂载 openssl 证书，并为 OTA 指令开辟一次性 HTTP 灾难救援通道	2026-04-24 09:36:58 +00:00
hotyue	28fd94eff5	fix(agent): 🚀 全面排雷 - 修复 IPv6 映射监听失败、60秒 HMAC 并发重放漏洞、长效守护引发的僵尸进程泄露，并实现 OTA 源地址动态解耦	2026-04-24 07:30:12 +00:00
hotyue	7460935acc	fix(master): 🚨 彻底废除 HTTP 强制降级漏洞，实现全链路 Strict-TLS 加密，封堵明文劫持入口	2026-04-24 07:16:08 +00:00
hotyue	109ae6f319	Merge PR #32 : 引入双写日志架构，全面打通 Systemd Journal 遥测通道	2026-04-24 06:45:01 +00:00
hotyue	6b3acf5787	docs: 更新项目文档，彰显 V4.0.0 深海声呐全维探针与趋势追踪架构	2026-04-24 03:30:20 +00:00
hotyue	b1ecbd4f9a	chore: 恢复拉取源为 main 并移除 Beta 标识，准备发布 v4.0.0 正式版	2026-04-24 03:25:32 +00:00
hotyue	4d091e4dd9	fix(agent): 增加双栈容灾试探，修复纯V6环境下提取云端版本号超时导致被异常降级的Bug	2026-04-24 03:25:01 +00:00
hotyue	ae6559c850	fix(master): 同步修复 V6 环境下提取云端版本号超时的 Bug，并抬高兜底版本至 v4.0.0	2026-04-24 03:24:24 +00:00
hotyue	5cfaebceab	Merge remote-tracking branch 'origin/main' into dev/v4.0.0-sonar	2026-04-24 03:15:31 +00:00
github-actions[bot]	88f55cbab9	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-23]	2026-04-23 19:22:57 +00:00
IcySteam	1204336612	fix(telemetry): Restore dual-write logging to the Systemd journal Reapply commit `e77b7c0`, which was (inadvertently?) omitted in the recent upstream rollup `34320b2`. Original commit description: ``` This commit refactors the internal logging functions across all core modules to guarantee telemetry reaches the Systemd journal. Sentinels now mirror their physical log outputs directly to the OS `logger`, ensuring flawless `journalctl` visibility even when modules are spawned in detached subshells. ```	2026-04-24 01:47:56 +10:00
hotyue	49a65a5f11	fix(agent): 移除过度严格的 sed 过滤，修复因不可见字符导致的 JSON 截断告警，确立终极情报版战报排版	2026-04-23 14:14:24 +00:00
hotyue	7e5b836a49	feat(agent): 彻底重构声呐战报，解决广告字符干扰，实现全库打分矩阵与流媒体高亮排版	2026-04-23 14:08:07 +00:00
hotyue	18f80400ef	feat(agent): 升级深海声呐为满血版，补充展示 ASN/归属地/原生IP/25端口及 Abuse 投诉分	2026-04-23 13:58:18 +00:00
hotyue	eca4b41da4	feat(agent): 丰富深海声呐战报，增加 YouTube/Disney/TikTok 解锁展示与 Google 送中警告	2026-04-23 13:51:08 +00:00
hotyue	a24a533165	fix(agent): 修复 webhook 路由 Python 严格缩进错误导致的进程崩溃问题	2026-04-23 13:40:12 +00:00
hotyue	d2b575fe85	chore: 临时将全局拉取源切换至 dev/v4.0.0-sonar，准备进行深海声呐实弹测试	2026-04-23 13:33:07 +00:00
hotyue	cb0aa2049e	chore: 移除 beta 标识，准备发布 v4.0.0 正式版	2026-04-23 13:28:49 +00:00
hotyue	981b9e4859	feat(master): 完善部署脚本，新增 ip_trend_log 数据表以支持 IP 污染趋势追踪	2026-04-23 13:26:11 +00:00
hotyue	eeee1b6811	feat(agent): 新增深海声呐核心模块 (mod_quality.sh)，实现异步 IP 质量探测与隐写战报回传	2026-04-23 13:25:54 +00:00
hotyue	e6852d0c9d	feat(agent): 将深海声呐武器 mod_quality.sh 接入 install 部署/OTA 补给线	2026-04-23 13:22:22 +00:00
hotyue	23ea08f981	feat(agent): Webhook 追加 /trigger_quality 路由，支持异步拉起深海声呐	2026-04-23 13:17:36 +00:00
hotyue	580a3d7fd5	feat(master): 完善深海声呐与趋势监测中枢，指令与 UI 面板彻底闭环	2026-04-23 13:13:06 +00:00
hotyue	6eabb60c28	chore: 开启 v4.0.0-sonar 深海声呐模块开发分支，升级版本号至 beta	2026-04-23 12:27:11 +00:00
hotyue	7fd432ffee	fix(install): 修复装机量统计逻辑，仅在全新部署时触发探针，彻底解决平滑升级导致的数据虚高与 Cloudflare KV 写入配额耗尽问题	2026-04-23 11:18:46 +00:00
github-actions[bot]	351143e59d	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-23]	2026-04-23 01:59:32 +00:00
hotyue	725e8ae8c9	ci: 全局挂载 FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true 消除 Node.js 20 弃用警告	2026-04-23 01:58:44 +00:00
github-actions[bot]	1e9de46fc5	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-23]	2026-04-23 01:56:38 +00:00
hotyue	543ab5c8bd	Merge branch 'main' of https://github.com/hotyue/IP-Sentinel	2026-04-23 01:53:47 +00:00
hotyue	972cd02874	fix(scripts): 修复 MY 战区 Yahoo RSS 拒绝 GitHub IP (403) 问题，切换为高可用 Google News 源	2026-04-23 01:53:36 +00:00
github-actions[bot]	9c37cb9df3	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-23]	2026-04-23 01:51:45 +00:00
hotyue	2a8a6b6fa7	feat(region): 拓展亚太战区，新增马来西亚 (MY) 节点及本地骨干网与 RSS 活体流 (Resolves #31 )	2026-04-23 01:50:15 +00:00
hotyue	e4b4c747eb	chore(data): 初始化 MY (马来西亚) 战区热点词库基石，防止边缘节点初次部署时 404	2026-04-23 01:49:39 +00:00
github-actions[bot]	eabd33e6b2	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-22]	2026-04-22 19:24:05 +00:00
hotyue	233af7181f	release: bump AGENT_VERSION to v3.6.4 for Trust module Live News Engine	2026-04-22 14:03:41 +00:00
github-actions[bot]	62fb19f0c5	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-22]	2026-04-22 13:49:03 +00:00
hotyue	54178ddcf1	fix(scripts): 修复 TW 战区 Yahoo RSS 拒绝 GitHub Actions IP 访问 (403) 的问题，切换至高可用 Google News TW 源	2026-04-22 13:48:06 +00:00
github-actions[bot]	92a65d8308	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-22]	2026-04-22 13:45:37 +00:00
hotyue	eaaa7dabf0	Merge branch 'main' of https://github.com/hotyue/IP-Sentinel	2026-04-22 13:43:44 +00:00
hotyue	e797c8203f	fix(scripts): 修复 HK 与 TW 战区 RSS 情报源失效报 404/解析错误的问题，切换至高可用源	2026-04-22 13:43:31 +00:00
github-actions[bot]	9ecf50c153	chore(data): 🤖 自动机兵：同步全战区热点词库与活体新闻流 [2026-04-22]	2026-04-22 13:37:10 +00:00
hotyue	c02b7eecc9	feat(scripts): 引入 v3.6.4 活体新闻融合引擎，重构 Action 流水线实现冷热数据合并原子提交	2026-04-22 13:35:20 +00:00
hotyue	6af8b6b25d	chore(data): 注入全球国家级权威骨干网基石，重构 Trust 模块冷数据结构	2026-04-22 13:31:28 +00:00
hotyue	7081aa77cc	fix(core): 废除 OnBootSec 相对开机时间，改用高兼容性的 OnActiveSec，彻底修复老内核系统下自动巡逻瘫痪的 Bug	2026-04-22 12:42:04 +00:00
hotyue	5e48edb030	fix(core): 废除物理阉割，全量下载模块脚本，彻底修复动态启用模块后提示 403 文件不存在的 Bug	2026-04-22 11:53:20 +00:00
github-actions[bot]	5f0f677f59	chore(data): 🤖 自动机兵：刷新全战区热点词库 [2026-04-21]	2026-04-21 19:22:42 +00:00
hotyue	7f0c3e3e29	release: bump version to v3.6.3 for final release	2026-04-21 09:50:14 +00:00
hotyue	c03f6ca9ba	chore: 准备 v3.6.3 正式发布，将所有云端资源路由切换回 main 主干分支	2026-04-21 09:48:14 +00:00
hotyue	66f3ba7d06	perf(master): 优化包管理器参数，拒绝冗余依赖捆绑，实现 Master 中枢极致轻量化部署	2026-04-21 09:32:54 +00:00
hotyue	511ba90378	perf(core): 优化包管理器安装参数，拒绝冗余依赖捆绑，实现 Agent 节点极致轻量化部署	2026-04-21 09:30:04 +00:00
hotyue	01806d20dd	fix(core): 引入智能网卡生存探测机制，彻底解决多 IP 站群机因 IP 漂移导致的 curl 死锁断网问题	2026-04-21 09:20:55 +00:00
hotyue	049278c458	fix(master): 修复 Telegram 429 频率限制拦截，延长全军简报下发间距至 2 秒，确保并发战报 100% 送达	2026-04-21 07:19:04 +00:00
hotyue	0aaa2d44a0	fix(master): 修复 db_exec 致命的标准输出混叠漏洞，改用静默的 .timeout 指令彻底消除面板 5000 乱码	2026-04-21 07:08:43 +00:00
hotyue	3f139a593e	fix(master): 修复 db_exec 输出泄露导致的节点计数与战区列表乱码问题	2026-04-21 07:01:54 +00:00
hotyue	bee6fef69c	fix(master): 启用 SQLite WAL 高并发引擎与 5000ms 锁排队机制，彻底解决全舰队并发通讯时的 database is locked 报错	2026-04-21 06:51:49 +00:00
hotyue	f283a8a4c6	fix(master): 完善向下兼容机制，对未升级老节点自动降级回退至 HTTP 通讯，确保私有司令部平滑过渡	2026-04-21 06:47:02 +00:00
hotyue	0d2433d850	feat(security): 引入动态 TLS 降级机制与自签名证书，全域 Webhook 通讯升级为强加密 HTTPS，彻底阻断明文嗅探风险并完美兼容官方网关	2026-04-21 06:27:58 +00:00
hotyue	a6b01bd8d5	chore(core): 恢复 install.sh 语法完整性,完成 OTA 防砖机制实弹演习	2026-04-21 06:12:38 +00:00
hotyue	8f2279b7e2	chore(core): 破坏 install.sh 语法完整性,用于 OTA 防砖机制实弹演习	2026-04-21 06:09:48 +00:00
hotyue	d37d26708d	chore(core): 恢复 install.sh 语法完整性，完成 OTA 防砖机制实弹演习	2026-04-21 06:07:50 +00:00
hotyue	6234d7c49a	fix(ota): 重构 Agent 防砖机制，引入双重 Base64 隔离，彻底杜绝 Shell 注入与换行截断，并实现失败主动告警	2026-04-21 06:05:39 +00:00
hotyue	f9a7bba32a	Update install.sh test	2026-04-21 13:52:06 +08:00
hotyue	068734da16	fix(ota): 引入 bash -n 语法树完整性校验，彻底阻断因网络波动下载不全导致的单点死机风险	2026-04-21 05:45:50 +00:00
hotyue	09a4108bcc	docs(readme): 更新 Legacy 分支部署指令，全站统一采用更安全的落地执行法	2026-04-21 02:47:18 +00:00