<!--
	CDN buckets:

		- mobypicture.s3.amazonaws.com

		- d1u33j8blhxgzy.cloudfront.net
			- media.mobyhub.com
			- \w+.media.mobyhub.com

		- d2d8v8ddwfpkhk.cloudfront.net
			- img.mobypicture.com
			- a[0-3].img.mobypicture.com

		- d3l076gtvxuom7.cloudfront.net
			- static.mobypicture.com

		- dq8u4hkdxtrwa.cloudfront.net
			- layout.mobypicture.com

		- dxujr96dorra9.cloudfront.net
			- vid.mobypicture.com


	Nonfunctional subdomains:

		- developers ¹
		- i

	¹ Refused


	Problematic subdomains:

		- secure *

	* Mismatched, CN: api.mobypicture.com


	Fully covered subdomains:

		- ^
		- (www.)api
		- img		(→ d2d8v8ddwfpkhk.cloudfront.net)
		- a\d.img	(→ d2d8v8ddwfpkhk.cloudfront.net)
		- secure	(→ www.mobypicture.com)
		- www


	Insecure cookies are set for these domains:

		- .


	Mixed content:

		- css on (www.)mobypicture.com from fonts.googleapis.com *

		- Bug on (www.)mobypicture.com from www.facebook.com *

	* Secured by us

-->
<ruleset name="Mobypicture">

	<target host="media.mobyhub.com" />
	<target host="*.media.mobyhub.com" />
	<target host="mobypicture.com" />
	<target host="*.mobypicture.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.mobypicture\.com$" name="^PHPSESSID$" /-->


	<rule from="^http://(?:\w+\.)?media\.mobyhub\.com/"
		to="https://d1u33j8blhxgzy.cloudfront.net/" />

	<rule from="^http://((?:www\.)?api\.|www\.)?mobypicture\.com/"
		to="https://$1mobypicture.com/" />

	<rule from="^http://secure\.mobypicture\.com/"
		to="https://www.mobypicture.com/" />

	<rule from="^http://(?:a\d\.)?img\.mobypicture\.com/"
		to="https://d2d8v8ddwfpkhk.cloudfront.net/" />

	<rule from="^http://layout\.mobypicture\.com/"
		to="https://dq8u4hkdxtrwa.cloudfront.net/" />

	<rule from="^http://static\.mobypicture\.com/"
		to="https://d3l076gtvxuom7.cloudfront.net/" />

	<rule from="^http://vid\.mobypicture\.com/"
		to="https://dxujr96dorra9.cloudfront.net/" />

</ruleset>
