diff --git a/Source/domainset/cdn.conf b/Source/domainset/cdn.conf
index 3663ab19..5b41dce1 100644
--- a/Source/domainset/cdn.conf
+++ b/Source/domainset/cdn.conf
@@ -528,8 +528,6 @@ sandpack-cdn-staging.blazingly.io
 
 # >> Sentry CDN
 .sentry-cdn.com
-# we are not blocking sentry dsn, but I will put it to secondary proxy anyway
-.ingest.sentry.io
 
 # >> Video CDN
 .videodelivery.net
@@ -843,15 +841,18 @@ static.agilebits.com
 .cdn-lfs.huggingface.co
 
 # >> Telemetry
-# I dont mind those specifically exempted telemetry, but it definitely could use CDN policy
+# I dont mind those specifically exempted telemetry, but it definitely could use secondary proxy policy
 telemetry.1passwordservices.com
 .in.applicationinsights.azure.com
 events.tableplus.com
 telemetry.nextjs.org
 telemetry.vercel.com
 stats.setapp.com
+stats.setapp.macpaw.dev
 .app-analytics-services.com
 .telemetry.services.yofi.ai
+# Sentry
+.ingest.sentry.io
 # bugsnag
 sessions.bugsnag.com
 # influxdata
@@ -1029,6 +1030,7 @@ cloudfront.barilliance.com
 analytics.welcomesoftware.com
 learn.optimizely.com
 micro.rubiconproject.com
+cdn.consentmanager.net
 
 loader.mantis-intelligence.com
 mantisloader.mantis-awx.com
@@ -1398,6 +1400,7 @@ static.dash.cloudflare.com
 info.cloudflare.com
 cf-assets.www.cloudflare.com
 .nel.cloudflare.com
+.csp-reporting.cloudflare.com
 favicons.teams.cloudflare.com
 # Cloudflare Service
 .pages.dev
@@ -3022,3 +3025,4 @@ cdn.prod.www.spiegel.de
 sp-spiegel-de.spiegel.de
 assets.newrepublic.com
 images.newrepublic.com
+cdn-longterm.mee6.xyz
diff --git a/Source/non_ip/direct.ts b/Source/non_ip/direct.ts
index 81797e85..58676f50 100644
--- a/Source/non_ip/direct.ts
+++ b/Source/non_ip/direct.ts
@@ -18,7 +18,8 @@ export const DIRECTS = {
     dns: 'system',
     hosts: {},
     domains: [
-      'securelogin.com.cn'
+      'securelogin.com.cn',
+      'captive.apple.com'
     ]
   },
   ROUTER: {
@@ -100,7 +101,11 @@ export const DIRECTS = {
       'ts.net',
       // AdGuard
       '$injections.adguard.org',
-      '$local.adguard.org'
+      '$local.adguard.org',
+      // SetApp
+      'setapp.click',
+      // Android ADB
+      '_adb-tls-connect._tcp'
     ]
   }
 } satisfies Record<string, DNSMapping>;
diff --git a/Source/non_ip/domestic.conf b/Source/non_ip/domestic.conf
index fe1d2741..02d77ea4 100644
--- a/Source/non_ip/domestic.conf
+++ b/Source/non_ip/domestic.conf
@@ -359,6 +359,7 @@ DOMAIN-SUFFIX,eatuo.com
 
 # >> Unifi China
 DOMAIN-SUFFIX,ui.com.cn
+DOMAIN-SUFFIX,ubnt.com.cn
 
 # >> Others
 DOMAIN-SUFFIX,gov.cn
diff --git a/Source/non_ip/global.conf b/Source/non_ip/global.conf
index 81c680f0..79e09631 100644
--- a/Source/non_ip/global.conf
+++ b/Source/non_ip/global.conf
@@ -300,6 +300,8 @@ DOMAIN-SUFFIX,firefox.com
 
 # >> Ubiquiti
 DOMAIN-SUFFIX,ui.com
+# unifi china store is hosted on shopify
+DOMAIN,store.ui.com.cn
 
 # >> Shadow Library
 DOMAIN-SUFFIX,singlelogin.se