diff --git a/config-clash/pontifex/pontifex.yaml b/config-clash/pontifex/pontifex.yaml
index 416925b..19616b6 100644
--- a/config-clash/pontifex/pontifex.yaml
+++ b/config-clash/pontifex/pontifex.yaml
@@ -85,10 +85,17 @@ sniffer:
       ports: [443, 8443]
   # force-domain:
   skip-domain:
+    # ————————————————— self-hosted/local domains ————————————————
     - '+.dts'
     - '+.webway.dts'
     - '+.netbird.selfhosted'
     - '+.shamanlanding.org'
+    # ———————————————————— time services (ntp) ———————————————————
+    - "+.ntp.org"
+    - "+.time.apple.com"
+    - "+.time.nist.gov"
+    - "+.time.windows.com"
+    - "+.time.google.com"
   # skip-src-address:
   # skip-dst-address:
   #  - 192.168.0.0/16
@@ -139,8 +146,26 @@ dns:
   fake-ip-range: 198.18.0.1/16
   fake-ip-filter-mode: blacklist
   fake-ip-filter:
-    # ———————————————————— self-hosted domains ———————————————————
-    - '*.lan'
+    # ———————————————————— time services (ntp) ———————————————————
+    - "+.ntp.org"
+    - "+.time.apple.com"
+    - "+.time.nist.gov"
+    - "+.time.windows.com"
+    - "+.time.google.com"
+    # ———————————————————— connectivity checks ———————————————————
+    - "dns.msftncsi.com"
+    - "msftncsi.com"
+    - "msftconnecttest.com"
+    - "connectivitycheck.gstatic.com"
+    - "connectivitycheck.android.com"
+    - "captive.apple.com"
+    - "+.hotspot.msn.com"
+    # ————————————————————— smart home / iot —————————————————————
+    - "Mijia Cloud"
+    - "+.mi.com"      
+    - "+.mi-img.com"
+    # ————————————————— self-hosted/local domains ————————————————
+    - '+.lan'
     - '+.dts'
     - '+.webway.dts'
     - '+.netbird.selfhosted'