Update CDN & Global Hosts

Source/domainset/cdn.conf

@@ -355,8 +355,10 @@ connect.facebook.net
 # Instagram Embed, redirect to www.instagram.com
 platform.instagram.com
 
-# >> Bluesky Social
-cdn.bsky.app
+# >> BlueSky
+cdn.bsky.social
+.cdn.bsky.app
+video.bsky.app
 
 # >> AMP
 .ampproject.org
@@ -525,10 +527,12 @@ xpaywalletcdn.azureedge.net
 edge-consumer-static.azureedge.net
 claritystatic.azureedge.net
 .static.microsoft
+.msftstatic.com
 .skypeassets.com
 static.edge.microsoftapp.net
 .msftconnecttest.com
 .smartscreen.microsoft.com
+edgecdn-embza6g8cacagcbn.z01.azurefd.net
 # Appcenter
 mobilecenter.azureedge.net
 # Microsoft Cookie Conscent
@@ -554,6 +558,9 @@ pkgs.dev.azure.com
 launchercontent.mojang.com
 # Microsoft Network Test
 .msftncsi.com
+# Microsoft NTP
+ntp.msn.com
+time.windows.com
 
 # >> Netflix
 # no geo blocking
@@ -922,6 +929,7 @@ sentry.ainopara.com
 .appsflyersdk.com
 telemetry.individual.githubcopilot.com
 telemetry.business.githubcopilot.com
+.scorecardresearch.com
 # these domains pop up few months ago, dont block since we dunnno what they are
 # but they can definitely go through secondary policy
 .ogads-pa.googleapis.com
@@ -1141,6 +1149,7 @@ sdk.listenlive.co
 widgets.listenlive.co
 widgets.turnto.com
 jssdk.opin.media
+us-js.zonka.co
 
 js.chargebee.com
 js1.chargebee.com
@@ -2057,9 +2066,6 @@ thumbs2.sendvid.com
 static.status.io
 image.status.io
 
-# >> BlueSky
-cdn.bsky.social
-
 # >> Framer
 .framerusercontent.com
 .framerstatic.com
@@ -3792,3 +3798,5 @@ sp.nba.com
 tags.nba.com
 cdn.royaleapi.com
 cdn.lemonsqueezy.com
+# AWS S3 + AWS CloudFront
+static.captcha-delivery.com