On this page

Statsig Domains

Reference list of Statsig domain names used by SDKs and the console so you can allowlist outbound traffic from your network and firewall.

Statsig uses the following domain names for its services. If you have a network policy configured in your systems, allowlist all of the domains below, or select domains based on the features you use.

Statsig Console

  • console.statsig.com
  • cdn.console.statsig.com
  • console.statsigcdn.com

Statsig API Services

These domains are used by Statsig SDKs to communicate with the backend for feature gates, dynamic configs, and event logging. They are also used for other Statsig APIs, such as console APIs and integrations.

  • api.statsig.com
  • featuregates.org
  • statsigapi.net
  • events.statsigapi.net
  • api.statsigcdn.com
  • featureassets.org
  • assetsconfigcdn.org
  • prodregistryv2.org
  • cloudflare-dns.com
  • beyondwickedmapping.org

Statsig's SDKs may switch between these domains dynamically as part of DNS resolution logic.

Why such odd names?

Statsig constantly and dynamically updates these domains to prevent overzealous blocking from browser ad blockers. Statsig updates them whenever ad blockers pick up the existing ones.

Minimizing the number of allowlisted domains

Use the following approach to minimize the number of Statsig domains you need to allowlist. The networkConfig initialization option allows you to specify a single domain for both the initialization server and the log event server.
js
new Statsig.StatsigClient('client-YOUR_KEY', {/* CONTEXT */}, {
  networkConfig: {
    initializeUrl: 'https://featureassets.org/v1/initialize',
    logEventUrl: 'https://prodregistryv2.org/v1/rgstr'
  }
});

Server-side APIs

For a list of APIs used by backend/server SDKs, allowlist the following:

  • api.statsig.com
  • statsigapi.net
  • api.statsigcdn.com
  • prodregistryv2.org
  • idliststorage.blob.core.windows.net (details below)

Statsig User Segment Storage API

Server SDKs use this domain to download the segment list for your project. If you don't use large ID lists, you don't need to allowlist this domain.

  • idliststorage.blob.core.windows.net

Was this helpful?