diff --git a/Source/domainset/cdn.conf b/Source/domainset/cdn.conf
index 6d9e0a97..0b54f4cb 100644
--- a/Source/domainset/cdn.conf
+++ b/Source/domainset/cdn.conf
@@ -10,6 +10,7 @@ hv-monsterdb-data.skk.moe
 # >> OHTTP Relay
 ohttp-relay1.fastly-edge.com
 google-ohttp-relay-safebrowsing.fastly-edge.com
+.privacy-gateway.cloudflare.com
 
 # >> Open Source CDN
 .jsdelivr.net
@@ -361,6 +362,8 @@ safebrowsing.googleapis.com
 # Connectivity Check
 connectivitycheck.android.com
 connectivitycheck.gstatic.com
+# SXG Cache Layer
+.webpkgcache.com
 
 # >> Apple CDN
 # Apple Live
@@ -482,6 +485,8 @@ sandpack-cdn-staging.blazingly.io
 
 # >> Sentry CDN
 .sentry-cdn.com
+# we are not blocking sentry dsn, but I will put it to secondary proxy anyway
+.ingest.sentry.io
 
 # >> Video CDN
 .videodelivery.net
@@ -523,6 +528,8 @@ web-static.archive.org
 archive.mozilla.org
 detectportal.firefox.com
 stubdownloader.services.mozilla.com
+# extension update check
+versioncheck-bg.addons.mozilla.org
 
 # >> Hubspot
 .hubspotusercontent30.com