diff --git a/pymispwarninglists/api.py b/pymispwarninglists/api.py
index 47b45e5..632215f 100644
--- a/pymispwarninglists/api.py
+++ b/pymispwarninglists/api.py
@@ -51,9 +51,9 @@ class WarningList():
 
         if self.slow_search and self.type == 'cidr':
             self._network_objects = self._network_index()
-        # If network objects is empty, reverting to default anyway
-        if not self._network_objects:
-            self.slow_search = False
+            # If network objects is empty, reverting to default anyway
+            if not self._network_objects:
+                self.slow_search = False
 
     def __repr__(self):
         return '<{self.__class__.__name__}(type="{self.name}", version="{self.version}", description="{self.description}")'.format(self=self)
diff --git a/tests/tests.py b/tests/tests.py
index 23122c6..a8e727c 100644
--- a/tests/tests.py
+++ b/tests/tests.py
@@ -44,3 +44,5 @@ class TestPyMISPWarningLists(unittest.TestCase):
         self.assertEqual(results[0].name, 'List of RFC 3849 CIDR blocks')
         results = self.warninglists.search('1e100.net')
         self.assertEqual(results[0].name, 'List of known google domains')
+        results = self.warninglists.search('something.files.1drv.com')
+        self.assertEqual(results[0].name, 'List of known microsoft domains')