diff --git a/Source/domainset/cdn.conf b/Source/domainset/cdn.conf
index 45092752..2cbc49a5 100644
--- a/Source/domainset/cdn.conf
+++ b/Source/domainset/cdn.conf
@@ -509,6 +509,7 @@ ip-ranges.amazonaws.com
 .widgets.marketplace.aws.dev
 cdn.builderprofile.aws.dev
 sdk.amazonaws.com
+static.captcha.awswaf.com # AWS S3
 
 # >> SB.SB
 ooo.0o0.ooo
@@ -1109,6 +1110,8 @@ telemetry.timescale.com
 lc.nssurge.com
 # claims to be data middle-transformer thta prevents leaking PII, if so, it should be fine to use a secondary policy
 .dataplane.rudderstack.com
+# GitHub Telemetry from gh CLI
+cafe.github.com
 
 # >> Telegram
 .cdn-telegram.org
@@ -5588,3 +5591,4 @@ cdn.evgnet.com
 imgproxy.flathub.org
 .t-assets.net
 assets.transfernow.net
+.img.gmo.jp # cache.img.gmo.jp