@dalias You should provide http://detectportal.firefox.com (though replacing it with a local version is sensible), and it looks like https://tracking-protection.cdn.mozilla.net is just an S3 bucket full of hashes. The others, though, I could do without.