Statsig uses the following domain names for its services. If you have a network policy configured in your systems, allowlist all of the domains below, or select domains based on the features you use.

## Statsig Console

* `console.statsig.com`
* `cdn.console.statsig.com`
* `console.statsigcdn.com`

## Statsig API Services

These domains are used by Statsig SDKs to communicate with the backend for feature gates, dynamic configs, and event logging. They are also used for other Statsig APIs, such as console APIs and integrations.

* `api.statsig.com`
* `featuregates.org`
* `statsigapi.net`
* `events.statsigapi.net`
* `api.statsigcdn.com`
* `featureassets.org`
* `assetsconfigcdn.org`
* `prodregistryv2.org`
* `cloudflare-dns.com`
* `beyondwickedmapping.org`

Statsig's SDKs may switch between these domains dynamically as part of DNS resolution logic.

{% callout type="info" %}
**Why such odd names?**

Statsig constantly and dynamically updates these domains to prevent overzealous blocking from browser ad blockers. Statsig updates them whenever ad blockers pick up the existing ones.
{% /callout %}

### Minimizing the number of allowlisted domains

Use the following approach to minimize the number of Statsig domains you need to allowlist. The [networkConfig](/client/javascript-sdk#networkconfig-object) initialization option allows you to specify a single domain for both the initialization server and the log event server.

```js
new Statsig.StatsigClient('client-YOUR_KEY', {/* CONTEXT */}, {
  networkConfig: {
    initializeUrl: 'https://featureassets.org/v1/initialize',
    logEventUrl: 'https://prodregistryv2.org/v1/rgstr'
  }
});
```

### Server-side APIs

For a list of APIs used by backend/server SDKs, allowlist the following:

* `api.statsig.com`
* `statsigapi.net`
* `api.statsigcdn.com`
* `prodregistryv2.org`
* `idliststorage.blob.core.windows.net` (details below)

### Statsig User Segment Storage API

Server SDKs use this domain to download the segment list for your project. If you don't use large ID lists, you don't need to allowlist this domain.

* `idliststorage.blob.core.windows.net`