diff --git a/Build/build-phishing-domainset.js b/Build/build-phishing-domainset.js
index 50604ee3..29c5f411 100644
--- a/Build/build-phishing-domainset.js
+++ b/Build/build-phishing-domainset.js
@@ -7,7 +7,8 @@ const { withBanner } = require('./lib/with-banner.js');
 const WHITELIST_DOMAIN = new Set([
   'w3s.link',
   'dweb.link',
-  'nftstorage.link'
+  'nftstorage.link',
+  'square.site'
 ]);
 const BLACK_TLD = Array.from(new Set([
   '.xyz',
diff --git a/Build/build-reject-domainset.js b/Build/build-reject-domainset.js
index 28f6b19e..59d35766 100644
--- a/Build/build-reject-domainset.js
+++ b/Build/build-reject-domainset.js
@@ -208,6 +208,7 @@ const filterRuleWhitelistDomainSets = new Set(PREDEFINED_WHITELIST);
   console.log(`* Dedupe from covered subdomain - ${(Date.now() - START_TIME) / 1000}s`);
   console.log(`Deduped ${previousSize - domainSets.size} rules!`);
 
+  console.time('* Write reject.conf');
   await Promise.all([
     fsPromises.writeFile(
       pathResolve(__dirname, '../List/domainset/reject.conf'),
@@ -220,12 +221,13 @@ const filterRuleWhitelistDomainSets = new Set(PREDEFINED_WHITELIST);
           ...ADGUARD_FILTERS.map(filter => `- ${Array.isArray(filter) ? filter[0] : filter}`),
         ],
         new Date(),
-        [...domainSets]
+        [...domainSets].sort()
       ),
       { encoding: 'utf-8' }
     ),
     piscina.destroy()
   ]);
+  console.timeEnd('* Write reject.conf');
 
   console.timeEnd('Total Time - build-reject-domain-set');
   if (piscina.queueSize === 0) {
diff --git a/List/domainset/cdn.conf b/List/domainset/cdn.conf
index 2bc76f16..dfdc7af6 100644
--- a/List/domainset/cdn.conf
+++ b/List/domainset/cdn.conf
@@ -248,6 +248,7 @@ embedwistia-a.akamaihd.net
 embed-ssl.wistia.com
 .doppiocdn.com
 .alonestreaming.com
+.thisiscdn.com
 
 # Archive.org
 .archive.org
@@ -869,7 +870,12 @@ static-cdn.mastodon.social
 # Framer
 .framerusercontent.com
 .framerstatic.com
+# Nitropack
+.nitrocdn.com
+# GoDaddy
+.wsimg.com
 # Others
+.yelpcdn.com
 cf-images.us-east-1.prod.boltdns.net
 .v2ex.co
 cdn.v2ex.com
@@ -900,7 +906,6 @@ dl.nssurge.com
 .imgmrplay.xyz
 .pornimg.xyz
 .hits.b3log.org
-hvmarket.xyz
 .safebrowsing.apple
 safebrowsing.googleapis.com
 api.wakatime.com
@@ -917,7 +922,6 @@ static.cracked.io
 static.cracked.to
 .images.androeed.ru
 .netdna-ssl.com
-.wsimg.com
 .cdn.ipinfo.io
 .assets.digitalocean.com
 ui-cdn.digitalocean.com
@@ -1007,3 +1011,8 @@ sig.grumpybumpers.com
 images.chesscomfiles.com
 nightly.link
 useruploads.visualwebsiteoptimizer.com
+seal-newyork.bbb.org
+cms-assets.webediamovies.pro
+.img1.acsta.net
+.img2.acsta.net
+.img3.acsta.net