Shadowrocket remote modules refresh in the background. When an author files a login CDN under “ads,” you see “cannot sign in,” not a dead pop. Disable modules and scripts, reproduce once; if it returns, pin the module version or add a host exception. Do not rotate the subscription first.

Checklist: REJECT misfires. All-red groups: policy groups. Decrypt boundary: MITM risk. Install from the store path on the download page.

Shortest path today

  1. Filter Recent Requests to REJECT and copy the hostname.
  2. Disable every module; leave the subscription and base rules; try login once.
  3. If you still want filtering, keep local lines you have read; turn off remote auto-update.

Still check the plan date so you do not treat expiry as a module bug—expired. Rule order: exceptions. Guides: hub. FAQ: FAQ. This site does not host third-party module files.

3.2.1 subscription refresh notes stay in the existing changelog. This item only adds: module updates and subscription updates often land the same week. Disable modules before you blame the provider.