diff --git a/lists/cisco_top1000/list.json b/lists/cisco_top1000/list.json
index ed02192..1af28b0 100644
--- a/lists/cisco_top1000/list.json
+++ b/lists/cisco_top1000/list.json
@@ -1,6 +1,6 @@
 {
   "description": "Event contains one or more entries from the top 1000 of the most used website (Cisco Umbrella).",
-  "version": 20180820,
+  "version": 20181012,
   "name": "Top 1000 website from Cisco Umbrella",
   "type": "hostname",
   "matching_attributes": [
@@ -27,19 +27,22 @@
     "aax.amazon-adsystem.com",
     "abs.twimg.com",
     "accounts.google.com",
+    "accounts.youtube.com",
     "accuweather.com",
     "acdn.adnxs.com",
     "ace.advertising.com",
+    "acuityplatform.com",
     "ad.360yield.com",
     "ad.afy11.net",
     "ad.atdmt.com",
+    "ad.cpe.dotomi.com",
     "ad.doubleclick.net",
-    "ad.mlnadvertising.com",
     "ad.turn.com",
     "adaptv.advertising.com",
     "addthis.com",
     "addthisedge.com",
     "ade.googlesyndication.com",
+    "adentifi.com",
     "adfarm1.adition.com",
     "adform.net",
     "adgrx.com",
@@ -54,7 +57,6 @@
     "adrta.com",
     "ads-twitter.com",
     "ads.adaptv.advertising.com",
-    "ads.flurry.com",
     "ads.linkedin.com",
     "ads.mopub.com",
     "ads.pubmatic.com",
@@ -85,14 +87,13 @@
     "amazon.com",
     "amazonaws.com",
     "amazontrust.com",
-    "amcs-tachyon.com",
     "ampproject.org",
     "analytics.twitter.com",
     "analytics.yahoo.com",
     "android.clients.google.com",
     "android.com",
     "android.pool.ntp.org",
-    "anycast.adnxs.com",
+    "angsrvr.com",
     "aol.com",
     "ap.lijit.com",
     "api-global.netflix.com",
@@ -104,7 +105,6 @@
     "api.facebook.com",
     "api.iris.microsoft.com",
     "api.mixpanel.com",
-    "api.samsungcloud.com",
     "api.smoot.apple.com",
     "api.twitter.com",
     "api.weather.com",
@@ -139,13 +139,16 @@
     "b.scorecardresearch.com",
     "b1sync.zemanta.com",
     "bag.itunes.apple.com",
-    "baidu.com",
     "bam.nr-data.net",
     "bat.bing.com",
     "bcp.crwdcntrl.net",
     "beacon.krxd.net",
     "beacon.walmart.com",
     "beacons.gcp.gvt2.com",
+    "beacons.gvt2.com",
+    "beacons2.gvt2.com",
+    "beacons3.gvt2.com",
+    "beacons4.gvt2.com",
     "beacons5.gvt3.com",
     "beap-bc.yahoo.com",
     "betrad.com",
@@ -155,7 +158,6 @@
     "bidr.io",
     "bidswitch.net",
     "bing.com",
-    "bitmoji.com",
     "bizographics.com",
     "blob.core.windows.net",
     "block-edge-anycast.dropbox.com",
@@ -177,8 +179,8 @@
     "c.urs.microsoft.com",
     "c1.adform.net",
     "c10r.facebook.com",
+    "caldav.fe.apple-dns.net",
     "calendar.google.com",
-    "canonicalizer.ucsuri.tcs",
     "captive.apple.com",
     "cas.pxl.ace.advertising.com",
     "casalemedia.com",
@@ -187,8 +189,10 @@
     "cdn.adnxs.com",
     "cdn.ampproject.org",
     "cdn.content.prod.cms.msn.com",
+    "cdn.digitru.st",
     "cdn.doubleverify.com",
     "cdn.flashtalking.com",
+    "cdn.jsdelivr.net",
     "cdn.krxd.net",
     "cdn.mozilla.net",
     "cdn.onenote.net",
@@ -207,10 +211,13 @@
     "chat.snapchat.com",
     "choices.trustarc.com",
     "choices.truste.com",
+    "ci3.googleusercontent.com",
+    "ci4.googleusercontent.com",
+    "ci5.googleusercontent.com",
+    "ci6.googleusercontent.com",
+    "cisco.com",
     "cl2.apple.com",
-    "cl4.apple.com",
     "cl5.apple.com",
-    "client-api.itunes.apple.com",
     "client-channel.google.com",
     "client-office365-tas.msedge.net",
     "client.dropbox.com",
@@ -228,18 +235,18 @@
     "cm.adgrx.com",
     "cm.everesttech.net",
     "cm.g.doubleclick.net",
-    "cmcm.com",
     "cms.analytics.yahoo.com",
     "cms.msn.com",
     "cms.quantserve.com",
     "code.createjs.com",
     "code.jquery.com",
+    "codex.nflxext.com",
     "com.akadns.net",
     "com.edgekey.net",
     "com.edgesuite.net",
     "comodoca.com",
+    "company-target.com",
     "config.edge.skype.com",
-    "config.skype.com",
     "configuration.apple.com",
     "configuration.apple.com.akadns.net",
     "connect.facebook.net",
@@ -247,12 +254,15 @@
     "connexity.net",
     "consensu.org",
     "consumer.krxd.net",
+    "contacts.fe.apple-dns.net",
     "contacts.google.com",
     "content.prod.cms.msn.com",
+    "contentstorage.osi.office.net",
     "contextual.media.net",
     "contextweb.com",
     "core.windows.net",
     "courier-push-apple.com.akadns.net",
+    "cpe.dotomi.com",
     "crashlytics.com",
     "createjs.com",
     "criteo.com",
@@ -266,16 +276,17 @@
     "ct.pinterest.com",
     "ctldl.windowsupdate.com",
     "customerevents.netflix.com",
+    "d.adroll.com",
     "d.agkn.com",
-    "d.akamaiedge.net",
     "d.dropbox.com",
     "d.turn.com",
     "dart.l.doubleclick.net",
     "data.flurry.com",
     "data.microsoft.com",
+    "delivery.h.switchadhub.com",
     "delivery.mp.microsoft.com",
+    "delve.office.com",
     "demdex.net",
-    "device-metrics-us.amazon.com",
     "di.atlas.samsung.com",
     "digicert.com",
     "digitru.st",
@@ -284,6 +295,7 @@
     "dl.delivery.mp.microsoft.com",
     "dlx.addthis.com",
     "dmd.metaservices.microsoft.com",
+    "dmp.truoptik.com",
     "dns-test1.hola.org",
     "dns.msftncsi.com",
     "do.dsp.mp.microsoft.com",
@@ -306,42 +318,36 @@
     "dsum.casalemedia.com",
     "dsx.mp.microsoft.com",
     "dt.adsafeprotected.com",
-    "duapps.com",
     "dyntrk.com",
     "e.crashlytics.com",
+    "e.dlx.addthis.com",
     "e.nexac.com",
+    "e1.emxdgt.com",
     "e12930.ksd.akamaiedge.net",
-    "e13136.g.akamaiedge.net",
     "e1879.e7.akamaiedge.net",
-    "e2ro.com",
     "e4478.a.akamaiedge.net",
-    "e5153.dsce9.akamaiedge.net",
     "e673.dsce9.akamaiedge.net",
     "e6858.dsce9.akamaiedge.net",
     "e7.akamaiedge.net",
-    "e8037.g.akamaiedge.net",
-    "eas.outlook.com",
     "eb2.3lift.com",
     "edge-chat.facebook.com",
     "edge-mqtt.facebook.com",
     "edge.skype.com",
     "edgekey.net",
-    "edgekey.net.globalredir.akadns.net",
     "edgesuite.net",
     "eicm-global.dsp.io",
+    "emxdgt.com",
     "entrust.net",
     "ess.apple.com",
     "eu-west-1.elb.amazonaws.com",
+    "eu.angsrvr.com",
     "eus.rubiconproject.com",
-    "events.appsflyer.com",
     "events.data.microsoft.com",
     "everesttech.net",
     "evidon.com",
     "evoke-windowsservices-tas.msedge.net",
-    "example.com",
     "exelator.com",
     "extend.tv",
-    "external.xx.fbcdn.net",
     "eyeota.net",
     "eyeviewads.com",
     "facebook.com",
@@ -365,33 +371,30 @@
     "fna.fbcdn.net",
     "fonts.googleapis.com",
     "fpdownload.macromedia.com",
-    "fpdownload2.macromedia.com",
     "ftl.netflix.com",
     "fw.adsafeprotected.com",
     "fwmrm.net",
+    "fyber.com",
     "g.aaplimg.com",
     "g.akamaiedge.net",
     "g.doubleclick.net",
     "g.live.com",
     "g.whatsapp.net",
     "g4.akamai.net",
-    "game-mode.net",
+    "gateway-carry.icloud.com",
     "gateway.fe.apple-dns.net",
     "gateway.icloud.com",
     "gcdn.2mdn.net",
     "gcp.gvt2.com",
-    "gcs.sc-cdn.net",
     "gemius.pl",
     "geo-prod.do.dsp.mp.microsoft.com",
     "geo.moatads.com",
     "geo.yahoo.com",
-    "geomobileservices-pa.googleapis.com",
     "geotrust.com",
-    "getpocket.cdn.mozilla.net",
+    "geover-prod.do.dsp.mp.microsoft.com",
     "ggpht.com",
     "global.fastly.net",
     "global.ib-ibi.com",
-    "globalredir.akadns.net",
     "globalsign.com",
     "globalsign.net",
     "gmail.com",
@@ -407,7 +410,6 @@
     "googleadservices.com",
     "googleapis.l.google.com",
     "googlehosted.l.googleusercontent.com",
-    "googlemail.l.google.com",
     "googlesyndication.com",
     "googletagmanager.com",
     "googletagservices.com",
@@ -421,7 +423,6 @@
     "gs-loc.ls-apple.com.akadns.net",
     "gsp-ssl.ls.apple.com",
     "gsp10-ssl.apple.com",
-    "gsp51-ssl.ls.apple.com",
     "gsp64-ssl.ls-apple.com.akadns.net",
     "gsp64-ssl.ls.apple.com",
     "gspe1-ssl.ls.apple.com",
@@ -435,12 +436,13 @@
     "gvt2.com",
     "gvt3.com",
     "gwallet.com",
+    "h.switchadhub.com",
     "hangouts.google.com",
+    "hbopenbid.pubmatic.com",
     "hit.gemius.pl",
     "hockeyapp.net",
     "hola.org",
     "hotjar.com",
-    "hwcdn.net",
     "hydra.opendns.com",
     "i.instagram.com",
     "i.liadm.com",
@@ -452,7 +454,6 @@
     "iasds01.com",
     "ib-ibi.com",
     "ib.adnxs.com",
-    "ib.anycast.adnxs.com",
     "ib.mookie1.com",
     "ichnaea.netflix.com",
     "icloud-content.com",
@@ -460,7 +461,6 @@
     "icloud.com.akadns.net",
     "id.google.com",
     "id.rlcdn.com",
-    "identrust.com",
     "idpix.media6degrees.com",
     "idsync.rlcdn.com",
     "iecvlist.microsoft.com",
@@ -472,11 +472,9 @@
     "images.outbrainimg.com",
     "images.taboola.com",
     "imap.gmail.com",
-    "imap.mail.yahoo.com",
     "imasdk.googleapis.com",
     "img-prod-cms-rt-microsoft-com.akamaized.net",
     "img-s-msn-com.akamaized.net",
-    "impdesk.com",
     "imrworldwide.com",
     "inbox.google.com",
     "indexww.com",
@@ -500,13 +498,14 @@
     "itunes-apple.com.akadns.net",
     "itunes.apple.com",
     "jadserve.postrelease.com",
+    "jivox.com",
     "jquery.com",
     "js-agent.newrelic.com",
     "js-sec.indexww.com",
-    "keyvalueservice.icloud.com",
+    "jsdelivr.net",
     "krxd.net",
     "ksd.akamaiedge.net",
-    "ksmobile.com",
+    "kv601-prod.do.dsp.mp.microsoft.com",
     "l.betrad.com",
     "l.doubleclick.net",
     "l.google.com",
@@ -526,10 +525,11 @@
     "live.com",
     "live.net",
     "livetileedge.dsx.mp.microsoft.com",
+    "lkqd.net",
     "load77.exelator.com",
     "loadm.exelator.com",
     "loadus.exelator.com",
-    "log.outbrain.com",
+    "log.outbrainimg.com",
     "login.live.com",
     "login.microsoftonline.com",
     "login.windows.net",
@@ -541,6 +541,7 @@
     "m.addthisedge.com",
     "m.adnxs.com",
     "m.facebook.com",
+    "m.google.com",
     "m.media-amazon.com",
     "macromedia.com",
     "magnetic.t.domdex.com",
@@ -552,6 +553,7 @@
     "match.prod.bidr.io",
     "match.rundsp.com",
     "match.sharethrough.com",
+    "match.taboola.com",
     "mathtag.com",
     "maxcdn.bootstrapcdn.com",
     "mb.moatads.com",
@@ -563,15 +565,15 @@
     "mesu.apple.com",
     "mesu.g.aaplimg.com",
     "metaservices.microsoft.com",
+    "metrics.icloud.com",
+    "mgr.consensu.org",
     "microsoft.com",
     "microsoftonline.com",
     "mid.rkdms.com",
     "mixpanel.com",
     "ml314.com",
-    "mlnadvertising.com",
     "moatads.com",
     "moatpixel.com",
-    "mobile-gtalk.l.google.com",
     "mobile.pipe.aria.microsoft.com",
     "mookie1.com",
     "mopub.com",
@@ -580,6 +582,7 @@
     "mozilla.net",
     "mozilla.org",
     "mp.microsoft.com",
+    "mpp.vindicosuite.com",
     "mqtt-mini.facebook.com",
     "mqtt.c10r.facebook.com",
     "msecnd.net",
@@ -593,9 +596,7 @@
     "mxptint.net",
     "myvisualiq.net",
     "mzstatic.com",
-    "ncc.avast.com",
     "nccp.netflix.com",
-    "net.globalredir.akadns.net",
     "netflix.com",
     "netmng.com",
     "netmon-control.dropbox.com",
@@ -604,11 +605,11 @@
     "nexac.com",
     "nexus.officeapps.live.com",
     "nexusrules.officeapps.live.com",
+    "nflxext.com",
     "nflximg.com",
     "nflximg.net",
     "nflxso.net",
     "nflxvideo.net",
-    "node.e2ro.com",
     "notifications.google.com",
     "nr-data.net",
     "nrdp.nccp.netflix.com",
@@ -628,6 +629,7 @@
     "ocsp.sca1b.amazontrust.com",
     "ocsp.usertrust.com",
     "ocsp2.globalsign.com",
+    "ocws.officeapps.live.com",
     "odb.outbrain.com",
     "odc.officeapps.live.com",
     "odr.mookie1.com",
@@ -647,7 +649,6 @@
     "openx.net",
     "optimized-by.rubiconproject.com",
     "optimizely.com",
-    "origin.guzzoni-apple.com.akadns.net",
     "osi.office.net",
     "otf.msn.com",
     "outbrain.com",
@@ -657,8 +658,10 @@
     "outlook.office365.com",
     "owneriq.net",
     "p.adsymptotic.com",
+    "p.nexac.com",
     "p.rfihub.com",
     "p.typekit.net",
+    "p.veruta.com",
     "pagead-googlehosted.l.google.com",
     "pagead.l.doubleclick.net",
     "pagead2.googlesyndication.com",
@@ -667,7 +670,6 @@
     "partnerad.l.doubleclick.net",
     "pbs.twimg.com",
     "people-pa.clients6.google.com",
-    "people-pa.googleapis.com",
     "phicdn.net",
     "photos-ugc.l.googleusercontent.com",
     "ping.chartbeat.net",
@@ -676,9 +678,7 @@
     "pipe.aria.microsoft.com",
     "pipe.skype.com",
     "pippio.com",
-    "pix.impdesk.com",
     "pixel-sync.sitescout.com",
-    "pixel.ad.mlnadvertising.com",
     "pixel.adsafeprotected.com",
     "pixel.advertising.com",
     "pixel.everesttech.net",
@@ -702,7 +702,7 @@
     "powerlinks.com",
     "pr-bh.ybp.yahoo.com",
     "pr.ybp.yahoo.com",
-    "prod.amcs-tachyon.com",
+    "prebid.adnxs.com",
     "prod.bidr.io",
     "prod.cms.msn.com",
     "prod.ftl.netflix.com",
@@ -726,13 +726,10 @@
     "quantserve.com",
     "query.yahoo.com",
     "r.nexac.com",
-    "r.turn.com",
     "r20swj13mr.microsoft.com",
-    "rayjump.com",
-    "rc.rlcdn.com",
+    "rapidssl.com",
     "redirector.googlevideo.com",
     "redirector.gvt1.com",
-    "reports.crashlytics.com",
     "res.office365.com",
     "rfihub.com",
     "ris.api.iris.microsoft.com",
@@ -740,8 +737,8 @@
     "rlcdn.com",
     "roaming.officeapps.live.com",
     "rp.gwallet.com",
-    "rtam-collector.appspot.com",
     "rtb-csync.smartadserver.com",
+    "rtb.adentifi.com",
     "rtb.gumgum.com",
     "rtb.openx.net",
     "rtb0.doubleverify.com",
@@ -749,9 +746,9 @@
     "rubiconproject.com",
     "rules.quantcount.com",
     "rundsp.com",
-    "s-microsoft.com",
     "s.amazon-adsystem.com",
     "s.moatpixel.com",
+    "s.pinimg.com",
     "s.sc-cdn.net",
     "s.thebrighttag.com",
     "s.w.org",
@@ -763,9 +760,9 @@
     "s3xified.com",
     "s7.addthis.com",
     "safebrowsing.googleapis.com",
+    "sam.msn.com",
     "samsung.com",
     "samsungapps.com",
-    "samsungcloud.com",
     "sandbox.push.apple.com",
     "sb.scorecardresearch.com",
     "sc-analytics.appspot.com",
@@ -788,7 +785,7 @@
     "secure.netflix.com",
     "secure.quantserve.com",
     "securepubads.g.doubleclick.net",
-    "semasio.net",
+    "segments.company-target.com",
     "servedby.flashtalking.com",
     "service.weather.microsoft.com",
     "services.mozilla.com",
@@ -809,17 +806,16 @@
     "skimresources.com",
     "skype.com",
     "sls.update.microsoft.com",
-    "smaato.net",
     "smartadserver.com",
     "smoot.apple.com",
     "snapads.com",
     "snapchat.com",
     "socdm.com",
-    "soma.smaato.net",
     "sonobi.com",
     "sp.analytics.yahoo.com",
     "spclient.wg.spotify.com",
     "spotify.com",
+    "spotim.market",
     "spotxchange.com",
     "sqm.microsoft.com",
     "sqm.telemetry.microsoft.com",
@@ -832,7 +828,7 @@
     "ssum-sec.casalemedia.com",
     "stackadapt.com",
     "stags.bluekai.com",
-    "star-z-mini.c10r.facebook.com",
+    "star-mini.c10r.facebook.com",
     "star.c10r.facebook.com",
     "static.ads-twitter.com",
     "static.adsafeprotected.com",
@@ -849,9 +845,10 @@
     "storage.googleapis.com",
     "storage.live.com",
     "su.addthis.com",
-    "su.itunes.apple.com",
-    "suggestqueries.google.com",
-    "sv.symcd.com",
+    "substrate.office.com",
+    "sundaysky.com",
+    "switchadhub.com",
+    "sy.eu.angsrvr.com",
     "symantec.com",
     "symcb.com",
     "symcd.com",
@@ -859,12 +856,13 @@
     "sync.1rx.io",
     "sync.adaptv.advertising.com",
     "sync.crwdcntrl.net",
-    "sync.extend.tv",
+    "sync.go.sonobi.com",
     "sync.hydra.opendns.com",
     "sync.ipredictive.com",
     "sync.mathtag.com",
     "sync.outbrain.com",
     "sync.search.spotxchange.com",
+    "sync.srv.stackadapt.com",
     "sync.teads.tv",
     "sync.tidaltv.com",
     "syndication.twimg.com",
@@ -878,12 +876,15 @@
     "taboola.com",
     "tags.bluekai.com",
     "tags.tiqcdn.com",
+    "talk.google.com",
     "tapad.com",
     "tapestry.tapad.com",
-    "tcs",
+    "targeting.unrulymedia.com",
     "teads.tv",
     "telemetry.microsoft.com",
     "teredo.ipv6.microsoft.com",
+    "tg.socdm.com",
+    "thawte.com",
     "thebrighttag.com",
     "thrtle.com",
     "tidaltv.com",
@@ -894,18 +895,18 @@
     "tlu.dl.delivery.mp.microsoft.com",
     "token.rubiconproject.com",
     "ton.twimg.com",
-    "tp-s.nflximg.net",
+    "tools.google.com",
     "tpc.googlesyndication.com",
     "tps.doubleverify.com",
     "tps30.doubleverify.com",
     "track.eyeviewads.com",
-    "trafficmanager.net",
     "trafficshaping.dsp.mp.microsoft.com",
     "translate.google.com",
     "translate.googleapis.com",
     "trc.taboola.com",
     "tremorhub.com",
     "tribalfusion.com",
+    "truoptik.com",
     "trustarc.com",
     "truste.com",
     "tsfe.trafficshaping.dsp.mp.microsoft.com",
@@ -915,16 +916,15 @@
     "twimg.com",
     "twitter.com",
     "typekit.net",
-    "ucsuri.tcs",
+    "uiboot.netflix.com",
     "um.simpli.fi",
-    "unity3d.com",
+    "unrulymedia.com",
     "update.googleapis.com",
     "update.microsoft.com",
-    "urbanairship.com",
     "urs.microsoft.com",
     "us-east-1.elb.amazonaws.com",
     "us-u.openx.net",
-    "us-west-1.elb.amazonaws.com",
+    "us-west-2.amazonaws.com",
     "us-west-2.elb.amazonaws.com",
     "us.criteo.com",
     "us.criteo.net",
@@ -932,15 +932,17 @@
     "use-tor.adsrvr.org",
     "use.typekit.net",
     "usermatch.krxd.net",
+    "userreport.com",
     "usertrust.com",
     "v.fwmrm.net",
     "v10.events.data.microsoft.com",
     "v10.vortex-win.data.microsoft.com",
     "v20.events.data.microsoft.com",
-    "v20.vortex-win.data.microsoft.com",
-    "vas.samsungapps.com",
     "verisign.com",
+    "veruta.com",
+    "vidible.tv",
     "vindicosuite.com",
+    "visitor.omnitagjs.com",
     "vo.msecnd.net",
     "vortex-win.data.microsoft.com",
     "vortex.data.microsoft.com",
@@ -961,6 +963,7 @@
     "windowsupdate.com",
     "wns.windows.com",
     "wordpress.com",
+    "world-gen.g.aaplimg.com",
     "wp.com",
     "www-cdn.icloud.com.akadns.net",
     "www-google-analytics.l.google.com",
@@ -988,14 +991,11 @@
     "x.akamaiedge.net",
     "x.bidswitch.net",
     "x.dlx.addthis.com",
-    "x.skimresources.com",
     "xboxlive.com",
     "xp.apple.com",
-    "xp.itunes-apple.com.akadns.net",
     "xx.fbcdn.net",
     "yahoo.com",
     "yahoodns.net",
-    "yandex.net",
     "yandex.ru",
     "ybp.yahoo.com",
     "yieldmo.com",