diff --git a/Build/constants/reject-data-source.ts b/Build/constants/reject-data-source.ts
index ba80a6d1..dbb5e68d 100644
--- a/Build/constants/reject-data-source.ts
+++ b/Build/constants/reject-data-source.ts
@@ -288,6 +288,7 @@ export const CRASHLYTICS_WHITELIST = [
   'sts.online.visualstudio.com',
   // Sentry
   '.ingest.sentry.io',
+  '.ingest.us.sentry.io',
   // bugsnag
   '.sessions.bugsnag.com',
   '.notify.bugsnag.com',
diff --git a/Source/domainset/cdn.conf b/Source/domainset/cdn.conf
index 8c698610..7c1fdc69 100644
--- a/Source/domainset/cdn.conf
+++ b/Source/domainset/cdn.conf
@@ -5,6 +5,8 @@
 pic.skk.moe
 img.skk.moe
 .cdn.skk.moe
+latency-test.skk.moe
+latency-test.lab.skk.moe
 hv-monsterdb-data.skk.moe
 
 # >> OHTTP Relay
@@ -16,6 +18,7 @@ google-ohttp-relay-safebrowsing.fastly-edge.com
 # >> Apple Relay
 apple-relay.fastly-edge.com
 apple-relay.cloudflare.com
+apple-relay.apple.com
 cp2.cloudflare.com
 cp3.cloudflare.com
 cp4.cloudflare.com
@@ -545,6 +548,8 @@ amp.azure.net
 pkgs.dev.azure.com
 # Minecraft
 launchercontent.mojang.com
+# Microsoft Network Test
+.msftncsi.com
 
 # >> Netflix
 # no geo blocking
@@ -890,11 +895,15 @@ api.mixpanel.com
 api-eu.mixpanel.com
 stats.codesandbox.io
 sentry.ainopara.com
+.appsflyersdk.com
 # these domains pop up few months ago, dont block since we dunnno what they are
 # but they can definitely go through secondary policy
 .ogads-pa.googleapis.com
 .ogads-pa.clients6.google.com
 
+# >> Telegram
+.cdn-telegram.org
+
 # >> Embed Tag / Widget
 .2mdn.net
 cdn.embedly.com
@@ -2763,7 +2772,6 @@ widgets-red.media.weather.com
 avatar2.bahamut.com.tw
 p2.bahamut.com.tw
 i2.bahamut.com.tw
-p2.bahamut.com.tw
 truth.bahamut.com.tw
 
 # >> AirDroid
@@ -3287,6 +3295,7 @@ images7.design-editor.com
 images8.design-editor.com
 images.design-editor.com
 assets.st-note.com
+cdn.st-note.com
 filestore.fortinet.com
 .daumcdn.net
 avts.wmlabs.net
diff --git a/Source/non_ip/ai.conf b/Source/non_ip/ai.conf
index 986bf49c..a27475ce 100644
--- a/Source/non_ip/ai.conf
+++ b/Source/non_ip/ai.conf
@@ -1,11 +1,12 @@
 # $ meta_title Sukka's Ruleset - AIGC Domains
 # $ meta_description This file contains domains of OpenAI, Claude.
 
-# OpenAI / ChatGPT
+# >> OpenAI / ChatGPT
+# OpenAI A/B Flag, no geo blocking
 # DOMAIN,api.statsig.com
 DOMAIN-SUFFIX,openai.com
 DOMAIN-SUFFIX,oaistatic.com
-DOMAIN-SUFFIX,oaiusercontent.com
+DOMAIN-SUFFIX,sora.com
 DOMAIN-SUFFIX,chatgpt.com
 DOMAIN-SUFFIX,chat.com
 DOMAIN-SUFFIX,ai.com
@@ -15,45 +16,62 @@ DOMAIN-KEYWORD,openai
 # DOMAIN,openaicom-api-bdcpf8c6d2e9atf6.z01.azurefd.net
 # DOMAIN,openaicomproductionae4b.blob.core.windows.net
 # DOMAIN,production-openaicom-storage.azureedge.net
-# Perplexity
+
+# >> Perplexity
 DOMAIN-SUFFIX,perplexity.ai
-# Claude
+
+# >> Claude
 DOMAIN-SUFFIX,anthropic.com
 DOMAIN-SUFFIX,claude.ai
-# Google Gemini
+
+# >> Google Gemini
 DOMAIN-SUFFIX,bard.google.com
 DOMAIN-SUFFIX,gemini.google.com
-# Google DeepMind
+
+# >> Google DeepMind
 DOMAIN-SUFFIX,deepmind.com
 DOMAIN-SUFFIX,deepmind.google
-# Google Generative Language API
+
+# >> Google Generative Language API
 DOMAIN-SUFFIX,generativelanguage.googleapis.com
 DOMAIN-SUFFIX,geller-pa.googleapis.com
 DOMAIN-SUFFIX,proactivebackend-pa.googleapis.com
-# Google AI Studio
+
+# >> Google AI Studio
 DOMAIN,ai.google.dev
 DOMAIN-SUFFIX,aistudio.google.com
 DOMAIN-SUFFIX,makersuite.google.com
 DOMAIN,alkalicore-pa.clients6.google.com
 DOMAIN,alkalimakersuite-pa.clients6.google.com
 DOMAIN-SUFFIX,generativeai.google
-# Google NotebookLM
+
+# >> Google NotebookLM
 DOMAIN-SUFFIX,notebooklm.google
 DOMAIN-SUFFIX,notebooklm.google.com
-# POE
+
+# >> POE
 DOMAIN-SUFFIX,poe.com
-# Meta AI
+
+# >> Meta AI
 DOMAIN-SUFFIX,meta.ai
-# Cloudflare AI Gateway
+
+# >> Cloudflare AI Gateway
 DOMAIN,gateway.ai.cloudflare.com
-# Dify.AI
+
+# >> Dify.AI
 DOMAIN-SUFFIX,dify.ai
-# Jasper
+
+# >> Jasper
 DOMAIN-SUFFIX,clipdrop.co
 DOMAIN-SUFFIX,jasper.ai
-# OpenArt
+
+# >> OpenArt
 DOMAIN-SUFFIX,openart.ai
-# GitHub Copilot
+
+# >> GitHub Copilot
+# api.*.githubcopilot.com is not required, since the ip & asn information are coming from api.github.com
+# see https://github.com/SukkaW/Surge/pull/46#discussion_r1849641627
 DOMAIN,api.github.com
-# groq
+
+# >> groq
 DOMAIN-SUFFIX,groq.com
diff --git a/Source/non_ip/global.conf b/Source/non_ip/global.conf
index ec1d4616..aa70f5b7 100644
--- a/Source/non_ip/global.conf
+++ b/Source/non_ip/global.conf
@@ -735,6 +735,7 @@ DOMAIN-SUFFIX,nhentai.xxx
 DOMAIN-SUFFIX,njav.tv
 DOMAIN-SUFFIX,noip.com
 DOMAIN-SUFFIX,nordvpn.com
+DOMAIN-SUFFIX,note.com
 DOMAIN-SUFFIX,notion.site
 DOMAIN-SUFFIX,notion.so
 DOMAIN-SUFFIX,npm.im