diff --git a/Source/domainset/cdn.conf b/Source/domainset/cdn.conf
index b355512c..1cfdf053 100644
--- a/Source/domainset/cdn.conf
+++ b/Source/domainset/cdn.conf
@@ -858,6 +858,7 @@ telemetry.split.io
 sdk.split.io
 
 # >> Embed Tag / Widget
+2mdn.net
 cdn.embedly.com
 cdn.tolt.io
 cdn.sellix.io
@@ -1021,6 +1022,7 @@ js.verygoodvault.com
 cloudfront.barilliance.com
 analytics.welcomesoftware.com
 learn.optimizely.com
+micro.rubiconproject.com
 
 loader.mantis-intelligence.com
 mantisloader.mantis-awx.com
@@ -1555,6 +1557,7 @@ static.coinall.ltd
 static.oklink.com
 # crypto.com
 static.crypto.com
+mkt-site-asset.crypto.com
 # Binance
 .bnbstatic.com
 # huobi
@@ -1969,6 +1972,9 @@ production-cmp.isgprivacy.cbsi.com
 .cbsnewsstatic.com
 at.cbsi.com
 cdn.privacy.paramount.com
+# Pluto TV
+images.pluto.tv
+siloh-ns1.plutotv.net
 # utteranc.es
 utteranc.es
 # setapp
@@ -2297,7 +2303,15 @@ static.vinted.com
 static-assets.vinted.com
 marketplace-web-assets.vinted.com
 images1.vinted.net
+# weather.com
+api.weather.com
+mparticle.weather.com
+s.w-x.co
+v.w-x.co
+widgets.media.weather.com
+widgets-red.media.weather.com
 # Others
+.rspcdn.net
 .ziffstatic.com
 .muscache.com
 cdn.dnsimple.com
@@ -2360,7 +2374,6 @@ assets.capterra.com
 i.iwara.tv
 .strpst.com
 yummlystatic.com
-s.w-x.co
 cdn.builder.io
 design-system.yext.com
 .mktgcdn.com
@@ -2984,3 +2997,9 @@ images.blackmagicdesign.com
 jslibs.blackmagicdesign.com
 int.qiniuyun15.xyz
 int.mwbbiz.com
+cdn.decrypt.co
+img.decrypt.co
+explorer-api.walletconnect.com
+wikiless.chaosmos.io
+axiecdn.axieinfinity.com
+prod.addictinggames.com
diff --git a/Source/domainset/reject_sukka.conf b/Source/domainset/reject_sukka.conf
index 405ab03a..1c129c2a 100644
--- a/Source/domainset/reject_sukka.conf
+++ b/Source/domainset/reject_sukka.conf
@@ -307,6 +307,8 @@ inst.360safe.com
 .yourtrap.com
 .24houcryptowatcher.com
 .xsph.ru
+.ipv4dns.com
+.ipxx.pro
 
 .temp.swtest.ru
 .tw1.ru
diff --git a/Source/ip/reject.conf b/Source/ip/reject.conf
index 5f7600bf..67541e88 100644
--- a/Source/ip/reject.conf
+++ b/Source/ip/reject.conf
@@ -4,6 +4,9 @@
 # Should not be used in the local environment
 IP-CIDR,169.254.169.254/32,no-resolve
 
+# DNS resolved to 0.0.0.0 should not leak to the LAN
+IP-CIDR,0.0.0.0/24
+
 # --- AD Block ---
 
 # >> iQiyi
diff --git a/Source/non_ip/global.conf b/Source/non_ip/global.conf
index 66e87059..81c680f0 100644
--- a/Source/non_ip/global.conf
+++ b/Source/non_ip/global.conf
@@ -402,6 +402,8 @@ DOMAIN-SUFFIX,bwh1.net
 DOMAIN-SUFFIX,cachefly.net
 DOMAIN-SUFFIX,castbox.fm
 DOMAIN-SUFFIX,cbc.ca
+DOMAIN-SUFFIX,cbsnews.com
+DOMAIN-SUFFIX,cbslocal.com
 DOMAIN,ccmdl.adobe.com
 DOMAIN-SUFFIX,cdpn.io
 DOMAIN-SUFFIX,change.org
@@ -680,6 +682,7 @@ DOMAIN-SUFFIX,voachinese.com
 DOMAIN-SUFFIX,wakatime.com
 DOMAIN-SUFFIX,w3schools.com
 DOMAIN-SUFFIX,washingtonpost.com
+DOMAIN-SUFFIX,weather.com
 DOMAIN-SUFFIX,whoer.net
 DOMAIN-SUFFIX,whoer.cc
 DOMAIN-SUFFIX,whoer.com
@@ -693,6 +696,7 @@ DOMAIN-SUFFIX,wikiquote.org
 DOMAIN-SUFFIX,wikisource.org
 DOMAIN-SUFFIX,wikiversity.org
 DOMAIN-SUFFIX,wikivoyage.org
+DOMAIN-SUFFIX,wikiwand.com
 DOMAIN-SUFFIX,wiktionary.org
 DOMAIN-SUFFIX,wireguard.com
 DOMAIN-SUFFIX,wordpress.com
diff --git a/Source/non_ip/reject-drop.conf b/Source/non_ip/reject-drop.conf
index 72e96510..6b6c95c4 100644
--- a/Source/non_ip/reject-drop.conf
+++ b/Source/non_ip/reject-drop.conf
@@ -2,3 +2,5 @@
 # $ meta_description This file This file contains rules for domain should be used with REJECT-DROP policy.
 
 DOMAIN-SUFFIX,geo2.adobe.com
+DOMAIN-SUFFIX,undefined
+DOMAIN-SUFFIX,null