diff --git a/Source/domainset/cdn.conf b/Source/domainset/cdn.conf
index cb010c60..c14adfdc 100644
--- a/Source/domainset/cdn.conf
+++ b/Source/domainset/cdn.conf
@@ -332,6 +332,8 @@ featureflags.netlify.com
 # >> Firebase Hosting
 .web.app
 .firebaseapp.com
+# Reomte Config, can use secondary policy
+firebaseremoteconfig.googleapis.com
 
 # >> Render.com
 .app.render.com
@@ -613,9 +615,6 @@ launchercontent.mojang.com
 cdn.gatherings.franchise.minecraft-services.net
 # Microsoft Network Test
 .msftncsi.com
-# Microsoft NTP
-ntp.msn.com
-time.windows.com
 # NEL Report
 .nel.measure.office.net
 # Microsoft Bot Framework
@@ -1016,6 +1015,7 @@ tracking.inflection.io
 data.web.clickup.com
 events.ld.catamorphic.com
 creative.eizzih.com
+analytics.canarymail.io
 # these domains pop up few months ago, dont block since we dunnno what they are
 # but they can definitely go through secondary policy
 .ogads-pa.googleapis.com
@@ -1729,11 +1729,17 @@ favicons.teams.cloudflare.com
 # Move R2 to download as apkmirror uses this for APK files
 # .r2.dev
 # .cloudflarestorage.com
-# Cloudflare NTP
-time.cloudflare.com
 
-# >> NTP.org
+# >> NTP
+# Google NTP
+time.google.com
+# NTP.org
 .pool.ntp.org
+# Cloudflare
+time.cloudflare.com
+# Microsoft NTP
+ntp.msn.com
+time.windows.com
 
 # >> ByteDance
 sf-flow-web-cdn.ciciai.com
@@ -4360,3 +4366,4 @@ static.observablehq.com
 cdn.thingiverse.com
 img.thingiverse.com
 marketing.thingiverse.com
+status.canarymail.io
diff --git a/Source/domainset/reject.conf b/Source/domainset/reject.conf
index 3c9c3c35..02552aa5 100644
--- a/Source/domainset/reject.conf
+++ b/Source/domainset/reject.conf
@@ -2148,7 +2148,6 @@ sentry.d.mi.com
 
 adv.sec.miui.com
 adv.sec.intl.miui.com
-font.sec.miui.com
 misc.in.duokanbox.com
 ad.hpplay.cn
 adeng.hpplay.cn
diff --git a/Source/non_ip/global.conf b/Source/non_ip/global.conf
index 19f57b0a..bf0e43e5 100644
--- a/Source/non_ip/global.conf
+++ b/Source/non_ip/global.conf
@@ -615,6 +615,7 @@ DOMAIN-SUFFIX,c.mi.com
 DOMAIN-SUFFIX,cableav.tv
 DOMAIN-SUFFIX,cachefly.net
 DOMAIN-SUFFIX,cal.com
+DOMAIN-SUFFIX,canarymail.io
 DOMAIN-SUFFIX,castbox.fm
 DOMAIN,ccmdl.adobe.com
 DOMAIN-SUFFIX,cdpn.io