Update CDN & Reject & Global Hosts

Source/domainset/cdn.conf

@@ -332,6 +332,8 @@ featureflags.netlify.com
 # >> Firebase Hosting
 .web.app
 .firebaseapp.com
+# Reomte Config, can use secondary policy
+firebaseremoteconfig.googleapis.com
 
 # >> Render.com
 .app.render.com
@@ -613,9 +615,6 @@ launchercontent.mojang.com
 cdn.gatherings.franchise.minecraft-services.net
 # Microsoft Network Test
 .msftncsi.com
-# Microsoft NTP
-ntp.msn.com
-time.windows.com
 # NEL Report
 .nel.measure.office.net
 # Microsoft Bot Framework
@@ -1016,6 +1015,7 @@ tracking.inflection.io
 data.web.clickup.com
 events.ld.catamorphic.com
 creative.eizzih.com
+analytics.canarymail.io
 # these domains pop up few months ago, dont block since we dunnno what they are
 # but they can definitely go through secondary policy
 .ogads-pa.googleapis.com
@@ -1729,11 +1729,17 @@ favicons.teams.cloudflare.com
 # Move R2 to download as apkmirror uses this for APK files
 # .r2.dev
 # .cloudflarestorage.com
-# Cloudflare NTP
-time.cloudflare.com
 
-# >> NTP.org
+# >> NTP
+# Google NTP
+time.google.com
+# NTP.org
 .pool.ntp.org
+# Cloudflare
+time.cloudflare.com
+# Microsoft NTP
+ntp.msn.com
+time.windows.com
 
 # >> ByteDance
 sf-flow-web-cdn.ciciai.com
@@ -4360,3 +4366,4 @@ static.observablehq.com
 cdn.thingiverse.com
 img.thingiverse.com
 marketing.thingiverse.com
+status.canarymail.io