From 5fbec29345cf01112c6d4ef680df7e3410a4ab7b Mon Sep 17 00:00:00 2001
From: Robert Nixon <nixonrobert81@gmail.com>
Date: Mon, 20 Aug 2018 09:13:38 -0400
Subject: [PATCH 1/5] Fixed TLD truncation issue

Fixed TLD truncation issue
---
 tools/generate-cisco-top1m.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/generate-cisco-top1m.py b/tools/generate-cisco-top1m.py
index 8a1cf12..e0af0a2 100644
--- a/tools/generate-cisco-top1m.py
+++ b/tools/generate-cisco-top1m.py
@@ -35,6 +35,6 @@ cisco_warninglist['list'] = []
 
 for site in top1000:
     v = str(site).split(',')[1]
-    cisco_warninglist['list'].append(v[:-6])
+    cisco_warninglist['list'].append(v[:-5])
 cisco_warninglist['list'] = sorted(set(cisco_warninglist['list']))
 print(json.dumps(cisco_warninglist))

From 8f3ca0c94580e4bfb5a2ecddb9ad87bd5de66311 Mon Sep 17 00:00:00 2001
From: Robert Nixon <nixonrobert81@gmail.com>
Date: Mon, 20 Aug 2018 09:18:00 -0400
Subject: [PATCH 2/5] Pulled list again after fixing generation script

---
 lists/cisco_top1000/list.json | 2002 ++++++++++++++++-----------------
 1 file changed, 1001 insertions(+), 1001 deletions(-)

diff --git a/lists/cisco_top1000/list.json b/lists/cisco_top1000/list.json
index 972d76d..ed02192 100644
--- a/lists/cisco_top1000/list.json
+++ b/lists/cisco_top1000/list.json
@@ -1,6 +1,6 @@
 {
   "description": "Event contains one or more entries from the top 1000 of the most used website (Cisco Umbrella).",
-  "version": 20180810,
+  "version": 20180820,
   "name": "Top 1000 website from Cisco Umbrella",
   "type": "hostname",
   "matching_attributes": [
@@ -8,1005 +8,1005 @@
     "domain"
   ],
   "list": [
-    "0.client-channel.google.co",
-    "1-courier.push.apple.co",
-    "1.nflxso.ne",
-    "1.oca.nflxvideo.ne",
-    "1rx.i",
-    "2.android.pool.ntp.or",
-    "2mdn.ne",
-    "360yield.co",
-    "3lift.co",
-    "a.akamaiedge.ne",
-    "a.teads.t",
-    "a.tribalfusion.co",
-    "a1441.g4.akamai.ne",
-    "aa.agkn.co",
-    "aaplimg.co",
-    "aax-us-east.amazon-adsystem.co",
-    "aax.amazon-adsystem.co",
-    "abs.twimg.co",
-    "accounts.google.co",
-    "accuweather.co",
-    "acdn.adnxs.co",
-    "ace.advertising.co",
-    "acuityplatform.co",
-    "acxiomapac.co",
-    "ad.360yield.co",
-    "ad.afy11.ne",
-    "ad.atdmt.co",
-    "ad.crwdcntrl.ne",
-    "ad.doubleclick.ne",
-    "ad.turn.co",
-    "adadvisor.ne",
-    "adaptv.advertising.co",
-    "addthis.co",
-    "addthisedge.co",
-    "ade.googlesyndication.co",
-    "adentifi.co",
-    "adfarm1.adition.co",
-    "adform.ne",
-    "adgrx.co",
-    "adhigh.ne",
-    "adingo.j",
-    "adition.co",
-    "adjust.co",
-    "adnxs.co",
-    "adobe.co",
-    "adobedtm.co",
-    "adroll.co",
-    "adrta.co",
-    "ads-twitter.co",
-    "ads.adaptv.advertising.co",
-    "ads.flurry.co",
-    "ads.linkedin.co",
-    "ads.mopub.co",
-    "ads.pubmatic.co",
-    "ads.stickyadstv.co",
-    "ads.us.criteo.co",
-    "ads.yahoo.co",
-    "ads.yieldmo.co",
-    "adsafeprotected.co",
-    "adserver-us.adtech.advertising.co",
-    "adserver.snapads.co",
-    "adservice.google.co",
-    "adsrvr.or",
-    "adsymptotic.co",
-    "adtech.advertising.co",
-    "adtechus.co",
-    "advertising.co",
-    "afy11.ne",
-    "ag.innovid.co",
-    "agkn.co",
-    "ajax.googleapis.co",
-    "akadns.ne",
-    "akamai.ne",
-    "akamaiedge.ne",
-    "akamaihd.ne",
-    "akamaized.ne",
-    "akstat.i",
-    "aktrack.pubmatic.co",
-    "amazon-adsystem.co",
-    "amazon.co",
-    "amazonaws.co",
-    "amazontrust.co",
-    "ampproject.or",
-    "analytics.twitter.co",
-    "analytics.yahoo.co",
-    "android.clients.google.co",
-    "android.co",
-    "android.pool.ntp.or",
-    "angsrvr.co",
-    "anycast.adnxs.co",
-    "aol.co",
-    "ap.lijit.co",
-    "api-global.netflix.co",
-    "api.accuweather.co",
-    "api.amazon.co",
-    "api.bing.co",
-    "api.branch.i",
-    "api.dropboxapi.co",
-    "api.facebook.co",
-    "api.iris.microsoft.co",
-    "api.mixpanel.co",
-    "api.segment.i",
-    "api.smoot.apple.co",
-    "api.twitter.co",
-    "api.weather.co",
-    "apis.google.co",
-    "app-analytics.snapchat.co",
-    "app-measurement.co",
-    "app.adjust.co",
-    "app.snapchat.co",
-    "appboy.co",
-    "apple-dns.ne",
-    "apple.co",
-    "apple.com.akadns.ne",
-    "apple.new",
-    "appsflyer.co",
-    "arc.msn.co",
-    "aria.microsoft.co",
-    "armmf.adobe.co",
-    "art-s.nflximg.ne",
-    "as-sec.casalemedia.co",
-    "asm.skype.co",
-    "assets.adobedtm.co",
-    "assets.pinterest.co",
-    "atdmt.co",
-    "atwola.co",
-    "autodiscover-s.outlook.co",
-    "avast.co",
-    "azureedge.ne",
-    "b-api.facebook.co",
-    "b-graph.facebook.co",
-    "b.akamaiedge.ne",
-    "b.scorecardresearch.co",
-    "b1sync.zemanta.co",
-    "bag.itunes.apple.co",
-    "baidu.co",
-    "bam.nr-data.ne",
-    "bat.bing.co",
-    "bcp.crwdcntrl.ne",
-    "beacon.krxd.ne",
-    "beacon.walmart.co",
-    "beacons.gcp.gvt2.co",
-    "beacons5.gvt3.co",
-    "beap-bc.yahoo.co",
-    "betrad.co",
-    "bh.contextweb.co",
-    "bid.g.doubleclick.ne",
-    "bidder.criteo.co",
-    "bidr.i",
-    "bidswitch.ne",
-    "bing.co",
-    "bizographics.co",
-    "blob.core.windows.ne",
-    "block-edge-anycast.dropbox.co",
-    "bluekai.co",
-    "bolt.dropbox.co",
-    "bootstrapcdn.co",
-    "branch.i",
-    "brealtime.co",
-    "browser.pipe.aria.microsoft.co",
-    "bs.serving-sys.co",
-    "btrll.co",
-    "bttrack.co",
-    "c.2mdn.ne",
-    "c.amazon-adsystem.co",
-    "c.apple.new",
-    "c.betrad.co",
-    "c.bing.co",
-    "c.evidon.co",
-    "c.go-mpulse.ne",
-    "c.msn.co",
-    "c.urs.microsoft.co",
-    "c1.adform.ne",
-    "c10r.facebook.co",
-    "calendar.google.co",
-    "canonicalizer.ucsuri.tc",
-    "captive.apple.co",
-    "cas.pxl.ace.advertising.co",
-    "casalemedia.co",
-    "cc.adingo.j",
-    "cdn-0.nflximg.co",
-    "cdn.adnxs.co",
-    "cdn.ampproject.or",
-    "cdn.cloudflare.ne",
-    "cdn.content.prod.cms.msn.co",
-    "cdn.doubleverify.co",
-    "cdn.flashtalking.co",
-    "cdn.jsdelivr.ne",
-    "cdn.krxd.ne",
-    "cdn.mozilla.ne",
-    "cdn.onenote.ne",
-    "cdn.optimizely.co",
-    "cdn.syndication.twimg.co",
-    "cdn.taboola.co",
-    "cdn.whatsapp.ne",
-    "cdn3.doubleverify.co",
-    "cdninstagram.co",
-    "cdnjs.cloudflare.co",
-    "ce.lijit.co",
-    "chartbeat.co",
-    "chartbeat.ne",
-    "chat-gateway-prod.chat.snapchat.co",
-    "chat.snapchat.co",
-    "choices.trustarc.co",
-    "choices.truste.co",
-    "ci3.googleusercontent.co",
-    "ci4.googleusercontent.co",
-    "ci5.googleusercontent.co",
-    "ci6.googleusercontent.co",
-    "cl2.apple.co",
-    "cl4.apple.co",
-    "cl5.apple.co",
-    "client-channel.google.co",
-    "client-office365-tas.msedge.ne",
-    "client.dropbox.co",
-    "client.wns.windows.co",
-    "clients.google.co",
-    "clients1.google.co",
-    "clients2.google.co",
-    "clients3.google.co",
-    "clients4.google.co",
-    "clients5.google.co",
-    "clients6.google.co",
-    "clientservices.googleapis.co",
-    "cloudconfig.googleapis.co",
-    "cloudflare.co",
-    "cloudflare.ne",
-    "cm.adgrx.co",
-    "cm.everesttech.ne",
-    "cm.g.doubleclick.ne",
-    "cms.analytics.yahoo.co",
-    "cms.msn.co",
-    "cms.quantserve.co",
-    "code.createjs.co",
-    "code.jquery.co",
-    "codex.nflxext.co",
-    "com.akadns.ne",
-    "com.edgekey.ne",
-    "com.edgesuite.ne",
-    "comodoca.co",
-    "config.edge.skype.co",
-    "config.skype.co",
-    "configuration.apple.co",
-    "configuration.apple.com.akadns.ne",
-    "connect.facebook.ne",
-    "connectivitycheck.android.co",
-    "connexity.ne",
-    "consensu.or",
-    "consumer.krxd.ne",
-    "contacts.google.co",
-    "content.prod.cms.msn.co",
-    "contentstorage.osi.office.ne",
-    "contextual.media.ne",
-    "contextweb.co",
-    "core.windows.ne",
-    "courier-push-apple.com.akadns.ne",
-    "crashlytics.co",
-    "createjs.co",
-    "criteo.co",
-    "criteo.ne",
-    "crl.comodoca.co",
-    "crl.globalsign.ne",
-    "crl.microsoft.co",
-    "crl.pki.goo",
-    "crwdcntrl.ne",
-    "cs9.wac.phicdn.ne",
-    "ct.pinterest.co",
-    "ctldl.windowsupdate.co",
-    "customerevents.netflix.co",
-    "cw.addthis.co",
-    "d.adroll.co",
-    "d.agkn.co",
-    "d.akamaiedge.ne",
-    "d.dropbox.co",
-    "d.turn.co",
-    "dart.l.doubleclick.ne",
-    "data.flurry.co",
-    "data.microsoft.co",
-    "delivery.mp.microsoft.co",
-    "delve.office.co",
-    "demdex.ne",
-    "device-metrics-us.amazon.co",
-    "digicert.co",
-    "digitru.s",
-    "dis.criteo.co",
-    "dl-debug.dropbox.co",
-    "dlx.addthis.co",
-    "dmd.metaservices.microsoft.co",
-    "dns-test1.hola.or",
-    "dns.msftncsi.co",
-    "do.dsp.mp.microsoft.co",
-    "docs.google.co",
-    "domdex.co",
-    "dotomi.co",
-    "doubleclick.ne",
-    "doubleverify.co",
-    "download.windowsupdate.co",
-    "dpm.demdex.ne",
-    "drive.google.co",
-    "dropbox.co",
-    "dropboxapi.co",
-    "dsce9.akamaiedge.ne",
-    "dsp.adfarm1.adition.co",
-    "dsp.mp.microsoft.co",
-    "dsum-sec.casalemedia.co",
-    "dsum.casalemedia.co",
-    "dsx.mp.microsoft.co",
-    "dt.adsafeprotected.co",
-    "dyntrk.co",
-    "e.crashlytics.co",
-    "e.nexac.co",
-    "e12930.ksd.akamaiedge.ne",
-    "e13136.g.akamaiedge.ne",
-    "e1879.e7.akamaiedge.ne",
-    "e4478.a.akamaiedge.ne",
-    "e5153.e9.akamaiedge.ne",
-    "e673.dsce9.akamaiedge.ne",
-    "e6858.dsce9.akamaiedge.ne",
-    "e7.akamaiedge.ne",
-    "e9.akamaiedge.ne",
-    "eas.outlook.co",
-    "eb2.3lift.co",
-    "edge-mqtt.facebook.co",
-    "edge.skype.co",
-    "edgekey.ne",
-    "edgesuite.ne",
-    "entrust.ne",
-    "ess.apple.co",
-    "eu-west-1.elb.amazonaws.co",
-    "eu.angsrvr.co",
-    "eu.criteo.ne",
-    "eus.rubiconproject.co",
-    "events.data.microsoft.co",
-    "everesttech.ne",
-    "evidon.co",
-    "evoke-windowsservices-tas.msedge.ne",
-    "exelator.co",
-    "extend.t",
-    "eyeota.ne",
-    "eyeviewads.co",
-    "facebook.co",
-    "facebook.ne",
-    "fastlane.rubiconproject.co",
-    "fastly.ne",
-    "fb.co",
-    "fbcdn.ne",
-    "fbsbx.co",
-    "fe.apple-dns.ne",
-    "fe2.update.microsoft.co",
-    "fe3.delivery.mp.microsoft.co",
-    "ff.avast.co",
-    "firefox.co",
-    "flashtalking.co",
-    "fls-na.amazon.co",
-    "fls.doubleclick.ne",
-    "flurry.co",
-    "fna.fbcdn.ne",
-    "fonts.googleapis.co",
-    "footprintdns.co",
-    "fpc.msedge.ne",
-    "fpdownload.macromedia.co",
-    "fw.adsafeprotected.co",
-    "fwmrm.ne",
-    "fyber.co",
-    "g.aaplimg.co",
-    "g.akamaiedge.ne",
-    "g.doubleclick.ne",
-    "g.live.co",
-    "g.whatsapp.ne",
-    "g4.akamai.ne",
-    "gateway.fe.apple-dns.ne",
-    "gateway.icloud.co",
-    "gcdn.2mdn.ne",
-    "gcp.gvt2.co",
-    "geo-prod.do.dsp.mp.microsoft.co",
-    "geo.moatads.co",
-    "geo.yahoo.co",
-    "geotrust.co",
-    "ggpht.co",
-    "global.fastly.ne",
-    "global.ib-ibi.co",
-    "globalsign.co",
-    "globalsign.ne",
-    "gmail.co",
-    "go-mpulse.ne",
-    "go.microsoft.co",
-    "go.sonobi.co",
-    "godaddy.co",
-    "google-analytics.co",
-    "google.co",
-    "googleadapis.l.google.co",
-    "googleads.g.doubleclick.ne",
-    "googleads4.g.doubleclick.ne",
-    "googleadservices.co",
-    "googleapis.l.google.co",
-    "googlehosted.l.googleusercontent.co",
-    "googlesyndication.co",
-    "googletagmanager.co",
-    "googletagservices.co",
-    "googleusercontent.co",
-    "googlevideo.co",
-    "graph.facebook.co",
-    "graph.instagram.co",
-    "gravatar.co",
-    "gs-loc-new.ls-apple.com.akadns.ne",
-    "gs-loc.apple.co",
-    "gs-loc.ls-apple.com.akadns.ne",
-    "gsp-ssl.ls.apple.co",
-    "gsp10-ssl.apple.co",
-    "gsp64-ssl.ls-apple.com.akadns.ne",
-    "gsp64-ssl.ls.apple.co",
-    "gspe1-ssl.ls.apple.co",
-    "gspe35-ssl.ls.apple.co",
-    "gum.criteo.co",
-    "gumgum.co",
-    "guzzoni-apple.com.akadns.ne",
-    "guzzoni.apple.co",
-    "gvt1.co",
-    "gvt2.co",
-    "gvt3.co",
-    "gwallet.co",
-    "hangouts.google.co",
-    "hola.or",
-    "hotjar.co",
-    "hwcdn.ne",
-    "hydra.opendns.co",
-    "i.instagram.co",
-    "i.liadm.co",
-    "i.ssix.i",
-    "i.w55c.ne",
-    "i.ytimg.co",
-    "i1.ytimg.co",
-    "i9.ytimg.co",
-    "iadsdk.apple.co",
-    "iasds01.co",
-    "ib-ibi.co",
-    "ib.adnxs.co",
-    "ib.anycast.adnxs.co",
-    "ib.mookie1.co",
-    "ichnaea.netflix.co",
-    "icloud-content.co",
-    "icloud.co",
-    "icloud.com.akadns.ne",
-    "id.google.co",
-    "id.rlcdn.co",
-    "identrust.co",
-    "idpix.media6degrees.co",
-    "idsync.rlcdn.co",
-    "iecvlist.microsoft.co",
-    "ieonline.microsoft.co",
-    "ieonlinews.microsoft.co",
-    "image2.pubmatic.co",
-    "image4.pubmatic.co",
-    "image6.pubmatic.co",
-    "images-na.ssl-images-amazon.co",
-    "images.outbrainimg.co",
-    "images.taboola.co",
-    "imap.gmail.co",
-    "imap.mail.yahoo.co",
-    "imasdk.googleapis.co",
-    "img-prod-cms-rt-microsoft-com.akamaized.ne",
-    "img-s-msn-com.akamaized.ne",
-    "imrworldwide.co",
-    "inbox.google.co",
-    "indexww.co",
-    "infra.lync.co",
-    "init-p01md.apple.co",
-    "init-p01st.push.apple.co",
-    "init.ess.apple.co",
-    "init.itunes.apple.co",
-    "innovid.co",
-    "insight.adsrvr.or",
-    "insightexpressai.co",
-    "instagram.c10r.facebook.co",
-    "instagram.co",
-    "int-x3.letsencrypt.or",
-    "iphone-ld.apple.co",
-    "iphonesubmissions.apple.co",
-    "ipredictive.co",
-    "ipv6.microsoft.co",
-    "ipv6.msftncsi.co",
-    "iris.microsoft.co",
-    "isrg.trustid.ocsp.identrust.co",
-    "itunes-apple.com.akadns.ne",
-    "itunes.apple.co",
-    "jadserve.postrelease.co",
-    "jquery.co",
-    "js-agent.newrelic.co",
-    "js-sec.indexww.co",
-    "jsdelivr.ne",
-    "krxd.ne",
-    "ksd.akamaiedge.ne",
-    "ksmobile.co",
-    "l.betrad.co",
-    "l.doubleclick.ne",
-    "l.google.co",
-    "l.googleusercontent.co",
-    "letsencrypt.or",
-    "lh3.googleusercontent.co",
-    "lh4.googleusercontent.co",
-    "lh5.googleusercontent.co",
-    "lh6.googleusercontent.co",
-    "liadm.co",
-    "licdn.co",
-    "licensing.mp.microsoft.co",
-    "lijit.co",
-    "linkedin.co",
-    "lithium.facebook.co",
-    "live.co",
-    "live.ne",
-    "livetileedge.dsx.mp.microsoft.co",
-    "load77.exelator.co",
-    "loadm.exelator.co",
-    "loadus.exelator.co",
-    "log.outbrain.co",
-    "login.live.co",
-    "login.microsoftonline.co",
-    "login.windows.ne",
-    "logx.optimizely.co",
-    "ls-apple.com.akadns.ne",
-    "ls.apple.co",
-    "lync.co",
-    "m.addthis.co",
-    "m.addthisedge.co",
-    "m.adnxs.co",
-    "m.facebook.co",
-    "m.media-amazon.co",
-    "macromedia.co",
-    "magnetic.t.domdex.co",
-    "mail.google.co",
-    "mail.yahoo.co",
-    "maps.google.co",
-    "maps.googleapis.co",
-    "match.adsrvr.or",
-    "match.prod.bidr.i",
-    "match.rundsp.co",
-    "match.sharethrough.co",
-    "mathtag.co",
-    "maxcdn.bootstrapcdn.co",
-    "mb.moatads.co",
-    "media-amazon.co",
-    "media.ne",
-    "media6degrees.co",
-    "mediawallahscript.co",
-    "messenger.live.co",
-    "mesu.apple.co",
-    "mesu.g.aaplimg.co",
-    "metaservices.microsoft.co",
-    "mgr.consensu.or",
-    "microsoft.co",
-    "microsoftonline.co",
-    "mid.rkdms.co",
-    "mixpanel.co",
-    "ml314.co",
-    "moatads.co",
-    "moatpixel.co",
-    "mobile.pipe.aria.microsoft.co",
-    "mookie1.co",
-    "mopub.co",
-    "mozaws.ne",
-    "mozilla.co",
-    "mozilla.ne",
-    "mozilla.or",
-    "mp.microsoft.co",
-    "mqtt-mini.facebook.co",
-    "mqtt.c10r.facebook.co",
-    "msecnd.ne",
-    "msedge.ne",
-    "msftconnecttest.co",
-    "msftncsi.co",
-    "msn.co",
-    "msocsp.co",
-    "mtalk.google.co",
-    "mvm.snapchat.co",
-    "mxptint.ne",
-    "myvisualiq.ne",
-    "mzstatic.co",
-    "nccp.netflix.co",
-    "netflix.co",
-    "netmng.co",
-    "netmon-control.dropbox.co",
-    "newrelic.co",
-    "nexac.co",
-    "nexus.officeapps.live.co",
-    "nexusrules.officeapps.live.co",
-    "nflxext.co",
-    "nflximg.co",
-    "nflximg.ne",
-    "nflxso.ne",
-    "nflxvideo.ne",
-    "notifications.google.co",
-    "nr-data.ne",
-    "nrb.footprintdns.co",
-    "nrdp.nccp.netflix.co",
-    "nrdp50-appboot.netflix.co",
-    "ntp.or",
-    "nym1-ib.adnxs.co",
-    "oath.co",
-    "oca.nflxvideo.ne",
-    "ocsp.apple.co",
-    "ocsp.comodoca.co",
-    "ocsp.digicert.co",
-    "ocsp.entrust.ne",
-    "ocsp.godaddy.co",
-    "ocsp.identrust.co",
-    "ocsp.int-x3.letsencrypt.or",
-    "ocsp.msocsp.co",
-    "ocsp.pki.goo",
-    "ocsp.sca1b.amazontrust.co",
-    "ocsp.usertrust.co",
-    "ocsp.verisign.co",
-    "ocsp2.globalsign.co",
-    "ocws.officeapps.live.co",
-    "odb.outbrain.co",
-    "odc.officeapps.live.co",
-    "odr.mookie1.co",
-    "office.co",
-    "office.ne",
-    "office365.co",
-    "officeapps.live.co",
-    "officeclient.microsoft.co",
-    "ogs.google.co",
-    "omnitagjs.co",
-    "omtrdc.ne",
-    "oneclient.sfx.m",
-    "onenote.ne",
-    "onmicrosoft.co",
-    "opendns.co",
-    "openx.ne",
-    "optimized-by.rubiconproject.co",
-    "optimizely.co",
-    "origin-apple.com.akadns.ne",
-    "origin.guzzoni-apple.com.akadns.ne",
-    "osi.office.ne",
-    "otf.msn.co",
-    "outbrain.co",
-    "outbrainimg.co",
-    "outlook.co",
-    "outlook.office.co",
-    "outlook.office365.co",
-    "owneriq.ne",
-    "p.adsymptotic.co",
-    "p.rfihub.co",
-    "p.skimresources.co",
-    "p.typekit.ne",
-    "pagead-googlehosted.l.google.co",
-    "pagead.l.doubleclick.ne",
-    "pagead2.googlesyndication.co",
-    "pagead46.l.doubleclick.ne",
-    "partnerad.l.doubleclick.ne",
-    "pbs.twimg.co",
-    "people-pa.clients6.google.co",
-    "phicdn.ne",
-    "photos-ugc.l.googleusercontent.co",
-    "ping.chartbeat.ne",
-    "pinimg.co",
-    "pinterest.co",
-    "pipe.aria.microsoft.co",
-    "pipe.skype.co",
-    "pippio.co",
-    "pixel-sync.sitescout.co",
-    "pixel.adsafeprotected.co",
-    "pixel.advertising.co",
-    "pixel.everesttech.ne",
-    "pixel.facebook.co",
-    "pixel.mathtag.co",
-    "pixel.moatads.co",
-    "pixel.quantserve.co",
-    "pixel.rubiconproject.co",
-    "pixel.s3xified.co",
-    "pixel.sitescout.co",
-    "pixel.tapad.co",
-    "pki.goo",
-    "platform.twitter.co",
-    "play.google.co",
-    "play.googleapis.co",
-    "play.itunes.apple.co",
-    "playatoms-pa.googleapis.co",
-    "plus.google.co",
-    "plus.l.google.co",
-    "pm.w55c.ne",
-    "pool.ntp.or",
-    "portal.fb.co",
-    "postrelease.co",
-    "powerlinks.co",
-    "pr-bh.ybp.yahoo.co",
-    "pr.ybp.yahoo.co",
-    "prod.bidr.i",
-    "prod.cms.msn.co",
-    "prod.mozaws.ne",
-    "prod.netflix.co",
-    "ps.eyeota.ne",
-    "pubads.g.doubleclick.ne",
-    "pubmatic.co",
-    "push-apple.com.akadns.ne",
-    "push.apple.co",
-    "push.prod.netflix.co",
-    "px.adhigh.ne",
-    "px.ads.linkedin.co",
-    "px.moatads.co",
-    "px.owneriq.ne",
-    "px.powerlinks.co",
-    "pxl.ace.advertising.co",
-    "pxl.connexity.ne",
-    "qq.co",
-    "quantcount.co",
-    "quantserve.co",
-    "query.yahoo.co",
-    "r.casalemedia.co",
-    "r.dlx.addthis.co",
-    "r.nexac.co",
-    "r.turn.co",
-    "r1.res.office365.co",
-    "r20swj13mr.microsoft.co",
-    "r4.res.office365.co",
-    "rapidssl.co",
-    "rc.rlcdn.co",
-    "redirector.googlevideo.co",
-    "redirector.gvt1.co",
-    "res.office365.co",
-    "rfihub.co",
-    "ris.api.iris.microsoft.co",
-    "rkdms.co",
-    "rlcdn.co",
-    "roaming.officeapps.live.co",
-    "rp.gwallet.co",
-    "rtb-csync.smartadserver.co",
-    "rtb.adentifi.co",
-    "rtb.gumgum.co",
-    "rtb.openx.ne",
-    "rtb0.doubleverify.co",
-    "rtbcdn.doubleverify.co",
-    "ru4.co",
-    "rubiconproject.co",
-    "rules.quantcount.co",
-    "rundsp.co",
-    "s-microsoft.co",
-    "s.acxiomapac.co",
-    "s.amazon-adsystem.co",
-    "s.moatpixel.co",
-    "s.thebrighttag.co",
-    "s.w.or",
-    "s.yimg.co",
-    "s.youtube.co",
-    "s.ytimg.co",
-    "s0.2mdn.ne",
-    "s2.symcb.co",
-    "s3xified.co",
-    "s7.addthis.co",
-    "safebrowsing.googleapis.co",
-    "sam.msn.co",
-    "samsung.co",
-    "samsungapps.co",
-    "samsungcloud.co",
-    "sb.scorecardresearch.co",
-    "sc-analytics.appspot.co",
-    "sc-cdn.ne",
-    "sc.iasds01.co",
-    "sc.omtrdc.ne",
-    "sca1b.amazontrust.co",
-    "scontent.xx.fbcdn.ne",
-    "scorecardresearch.co",
-    "script.hotjar.co",
-    "search.spotxchange.co",
-    "secure-ds.serving-sys.co",
-    "secure-gl.imrworldwide.co",
-    "secure-us.imrworldwide.co",
-    "secure.adnxs.co",
-    "secure.gravatar.co",
-    "secure.insightexpressai.co",
-    "secure.netflix.co",
-    "secure.quantserve.co",
-    "securepubads.g.doubleclick.ne",
-    "segment.i",
-    "semasio.ne",
-    "servedby.flashtalking.co",
-    "service.weather.microsoft.co",
-    "services.mozilla.co",
-    "serving-sys.co",
-    "settings-win.data.microsoft.co",
-    "settings.crashlytics.co",
-    "settings.data.microsoft.co",
-    "sfx.m",
-    "shared.global.fastly.ne",
-    "sharepoint.co",
-    "sharethis.co",
-    "sharethrough.co",
-    "shavar.prod.mozaws.ne",
-    "shavar.services.mozilla.co",
-    "simage2.pubmatic.co",
-    "simpli.f",
-    "sitescout.co",
-    "skimresources.co",
-    "skype.co",
-    "sls.update.microsoft.co",
-    "smaato.ne",
-    "smartadserver.co",
-    "smoot.apple.co",
-    "snapads.co",
-    "snapchat.co",
-    "socdm.co",
-    "soma.smaato.ne",
-    "sonobi.co",
-    "sp.analytics.yahoo.co",
-    "spclient.wg.spotify.co",
-    "spotify.co",
-    "spotxchange.co",
-    "sqm.microsoft.co",
-    "sqm.telemetry.microsoft.co",
-    "sr.symcd.co",
-    "srv.stackadapt.co",
-    "ssix.i",
-    "ssl-google-analytics.l.google.co",
-    "ssl-images-amazon.co",
-    "ssl.fastly.ne",
-    "ssl.google-analytics.co",
-    "sslwidget.criteo.co",
-    "ssum-sec.casalemedia.co",
-    "stackadapt.co",
-    "stags.bluekai.co",
-    "star-z-mini.c10r.facebook.co",
-    "star.c10r.facebook.co",
-    "static.ads-twitter.co",
-    "static.adsafeprotected.co",
-    "static.chartbeat.co",
-    "static.criteo.ne",
-    "static.doubleclick.ne",
-    "static.hotjar.co",
-    "static.xx.fbcdn.ne",
-    "staticxx.facebook.co",
-    "stats.g.doubleclick.ne",
-    "stats.l.doubleclick.ne",
-    "status.geotrust.co",
-    "status.rapidssl.co",
-    "stickyadstv.co",
-    "storage.googleapis.co",
-    "storage.live.co",
-    "store-images.s-microsoft.co",
-    "su.addthis.co",
-    "substrate.office.co",
-    "suggestqueries.google.co",
-    "sy.eu.angsrvr.co",
-    "symantec.co",
-    "symcb.co",
-    "symcd.co",
-    "sync-tm.everesttech.ne",
-    "sync.1rx.i",
-    "sync.adaptv.advertising.co",
-    "sync.crwdcntrl.ne",
-    "sync.hydra.opendns.co",
-    "sync.ipredictive.co",
-    "sync.mathtag.co",
-    "sync.outbrain.co",
-    "sync.search.spotxchange.co",
-    "sync.srv.stackadapt.co",
-    "sync.teads.t",
-    "sync.tidaltv.co",
-    "syndication.twimg.co",
-    "syndication.twitter.co",
-    "t.appsflyer.co",
-    "t.c",
-    "t.domdex.co",
-    "t.mookie1.co",
-    "t.myvisualiq.ne",
-    "t.wayfair.co",
-    "taboola.co",
-    "tags.bluekai.co",
-    "tags.mathtag.co",
-    "tags.tiqcdn.co",
-    "tapad.co",
-    "tapestry.tapad.co",
-    "tc",
-    "teads.t",
-    "telemetry.microsoft.co",
-    "teredo.ipv6.microsoft.co",
-    "thawte.co",
-    "thebrighttag.co",
-    "thrtle.co",
-    "tidaltv.co",
-    "tile-service.weather.microsoft.co",
-    "time-ios.apple.co",
-    "time-ios.g.aaplimg.co",
-    "tiqcdn.co",
-    "token.rubiconproject.co",
-    "ton.twimg.co",
-    "tpc.googlesyndication.co",
-    "tps.doubleverify.co",
-    "tps30.doubleverify.co",
-    "track.eyeviewads.co",
-    "trafficmanager.ne",
-    "trafficshaping.dsp.mp.microsoft.co",
-    "translate.google.co",
-    "translate.googleapis.co",
-    "trc.taboola.co",
-    "tremorhub.co",
-    "tribalfusion.co",
-    "trustarc.co",
-    "truste.co",
-    "trustid.ocsp.identrust.co",
-    "tsfe.trafficshaping.dsp.mp.microsoft.co",
-    "tt.omtrdc.ne",
-    "tubemogul.co",
-    "turn.co",
-    "twimg.co",
-    "twitter.co",
-    "typekit.ne",
-    "ucsuri.tc",
-    "um.simpli.f",
-    "update.googleapis.co",
-    "update.microsoft.co",
-    "urs.microsoft.co",
-    "us-east-1.elb.amazonaws.co",
-    "us-u.openx.ne",
-    "us-west-2.elb.amazonaws.co",
-    "us.criteo.co",
-    "us.criteo.ne",
-    "use-tor.adsrvr.or",
-    "use.typekit.ne",
-    "usermatch.krxd.ne",
-    "usertrust.co",
-    "usw-lax.adsrvr.or",
-    "v.fwmrm.ne",
-    "v10.events.data.microsoft.co",
-    "v10.vortex-win.data.microsoft.co",
-    "v20.events.data.microsoft.co",
-    "v20.vortex-win.data.microsoft.co",
-    "vars.hotjar.co",
-    "verisign.co",
-    "vidible.t",
-    "vindicosuite.co",
-    "visitor.omnitagjs.co",
-    "vo.msecnd.ne",
-    "voicefive.co",
-    "vortex-win.data.microsoft.co",
-    "vortex.data.microsoft.co",
-    "w.or",
-    "w55c.ne",
-    "wac.phicdn.ne",
-    "walmart.co",
-    "watson.telemetry.microsoft.co",
-    "wayfair.co",
-    "wdcp.microsoft.co",
-    "weather.co",
-    "weather.microsoft.co",
-    "wg.spotify.co",
-    "whatsapp.ne",
-    "widgets.outbrain.co",
-    "windows.co",
-    "windows.ne",
-    "windowsupdate.co",
-    "wns.windows.co",
-    "wordpress.co",
-    "wp.co",
-    "www-cdn.icloud.com.akadns.ne",
-    "www-google-analytics.l.google.co",
-    "www-googletagmanager.l.google.co",
-    "www.amazon.co",
-    "www.apple.co",
-    "www.bing.co",
-    "www.facebook.co",
-    "www.google-analytics.co",
-    "www.google.co",
-    "www.googleadservices.co",
-    "www.googleapis.co",
-    "www.googletagmanager.co",
-    "www.googletagservices.co",
-    "www.icloud.co",
-    "www.instagram.co",
-    "www.linkedin.co",
-    "www.microsoft.co",
-    "www.msftconnecttest.co",
-    "www.msftncsi.co",
-    "www.msn.co",
-    "www.yahoo.co",
-    "www.youtube.co",
-    "www3.l.google.co",
-    "x.akamaiedge.ne",
-    "x.bidswitch.ne",
-    "x.dlx.addthis.co",
-    "x.skimresources.co",
-    "xboxlive.co",
-    "xp.apple.co",
-    "xp.itunes-apple.com.akadns.ne",
-    "xp1.ru4.co",
-    "xx.fbcdn.ne",
-    "yahoo.co",
-    "yahoodns.ne",
-    "yandex.ne",
-    "yandex.r",
-    "ybp.yahoo.co",
-    "yieldmo.co",
-    "yimg.co",
-    "youtube-ui.l.google.co",
-    "youtube.co",
-    "youtubei.googleapis.co",
-    "yt3.ggpht.co",
-    "ytimg-edge-static.l.google.co",
-    "ytimg.co",
-    "z.moatads.co",
-    "zemanta.co"
+    "0.client-channel.google.com",
+    "0.docs.google.com",
+    "1-courier.push.apple.com",
+    "1.nflxso.net",
+    "1.oca.nflxvideo.net",
+    "1rx.io",
+    "2.android.pool.ntp.org",
+    "2mdn.net",
+    "360yield.com",
+    "3lift.com",
+    "a.akamaiedge.net",
+    "a.tribalfusion.com",
+    "a1441.g4.akamai.net",
+    "aa.agkn.com",
+    "aaplimg.com",
+    "aax-us-east.amazon-adsystem.com",
+    "aax.amazon-adsystem.com",
+    "abs.twimg.com",
+    "accounts.google.com",
+    "accuweather.com",
+    "acdn.adnxs.com",
+    "ace.advertising.com",
+    "ad.360yield.com",
+    "ad.afy11.net",
+    "ad.atdmt.com",
+    "ad.doubleclick.net",
+    "ad.mlnadvertising.com",
+    "ad.turn.com",
+    "adaptv.advertising.com",
+    "addthis.com",
+    "addthisedge.com",
+    "ade.googlesyndication.com",
+    "adfarm1.adition.com",
+    "adform.net",
+    "adgrx.com",
+    "adhigh.net",
+    "adingo.jp",
+    "adition.com",
+    "adjust.com",
+    "adnxs.com",
+    "adobe.com",
+    "adobedtm.com",
+    "adroll.com",
+    "adrta.com",
+    "ads-twitter.com",
+    "ads.adaptv.advertising.com",
+    "ads.flurry.com",
+    "ads.linkedin.com",
+    "ads.mopub.com",
+    "ads.pubmatic.com",
+    "ads.stickyadstv.com",
+    "ads.yahoo.com",
+    "ads.yieldmo.com",
+    "adsafeprotected.com",
+    "adserver-us.adtech.advertising.com",
+    "adserver.snapads.com",
+    "adservice.google.com",
+    "adsrvr.org",
+    "adsymptotic.com",
+    "adtech.advertising.com",
+    "adtechus.com",
+    "advertising.com",
+    "afy11.net",
+    "ag.innovid.com",
+    "agkn.com",
+    "ajax.googleapis.com",
+    "akadns.net",
+    "akamai.net",
+    "akamaiedge.net",
+    "akamaihd.net",
+    "akamaized.net",
+    "aktrack.pubmatic.com",
+    "am-prod.sc-jpl.com",
+    "amazon-adsystem.com",
+    "amazon.com",
+    "amazonaws.com",
+    "amazontrust.com",
+    "amcs-tachyon.com",
+    "ampproject.org",
+    "analytics.twitter.com",
+    "analytics.yahoo.com",
+    "android.clients.google.com",
+    "android.com",
+    "android.pool.ntp.org",
+    "anycast.adnxs.com",
+    "aol.com",
+    "ap.lijit.com",
+    "api-global.netflix.com",
+    "api.accuweather.com",
+    "api.amazon.com",
+    "api.bing.com",
+    "api.branch.io",
+    "api.dropboxapi.com",
+    "api.facebook.com",
+    "api.iris.microsoft.com",
+    "api.mixpanel.com",
+    "api.samsungcloud.com",
+    "api.smoot.apple.com",
+    "api.twitter.com",
+    "api.weather.com",
+    "apis.google.com",
+    "app-analytics.snapchat.com",
+    "app-measurement.com",
+    "app.adjust.com",
+    "app.snapchat.com",
+    "appboy.com",
+    "apple-dns.net",
+    "apple.com",
+    "apple.com.akadns.net",
+    "apple.news",
+    "appsflyer.com",
+    "arc.msn.com",
+    "aria.microsoft.com",
+    "armmf.adobe.com",
+    "art-s.nflximg.net",
+    "as-sec.casalemedia.com",
+    "asm.skype.com",
+    "assets.adobedtm.com",
+    "atdmt.com",
+    "atlas.samsung.com",
+    "atwola.com",
+    "auth.snapchat.com",
+    "autodiscover-s.outlook.com",
+    "avast.com",
+    "azureedge.net",
+    "b-api.facebook.com",
+    "b-graph.facebook.com",
+    "b.akamaiedge.net",
+    "b.scorecardresearch.com",
+    "b1sync.zemanta.com",
+    "bag.itunes.apple.com",
+    "baidu.com",
+    "bam.nr-data.net",
+    "bat.bing.com",
+    "bcp.crwdcntrl.net",
+    "beacon.krxd.net",
+    "beacon.walmart.com",
+    "beacons.gcp.gvt2.com",
+    "beacons5.gvt3.com",
+    "beap-bc.yahoo.com",
+    "betrad.com",
+    "bh.contextweb.com",
+    "bid.g.doubleclick.net",
+    "bidder.criteo.com",
+    "bidr.io",
+    "bidswitch.net",
+    "bing.com",
+    "bitmoji.com",
+    "bizographics.com",
+    "blob.core.windows.net",
+    "block-edge-anycast.dropbox.com",
+    "bluekai.com",
+    "bolt.dropbox.com",
+    "bootstrapcdn.com",
+    "branch.io",
+    "browser.pipe.aria.microsoft.com",
+    "bs.serving-sys.com",
+    "bttrack.com",
+    "c.2mdn.net",
+    "c.amazon-adsystem.com",
+    "c.apple.news",
+    "c.betrad.com",
+    "c.bing.com",
+    "c.evidon.com",
+    "c.go-mpulse.net",
+    "c.msn.com",
+    "c.urs.microsoft.com",
+    "c1.adform.net",
+    "c10r.facebook.com",
+    "calendar.google.com",
+    "canonicalizer.ucsuri.tcs",
+    "captive.apple.com",
+    "cas.pxl.ace.advertising.com",
+    "casalemedia.com",
+    "cc.adingo.jp",
+    "cdn-0.nflximg.com",
+    "cdn.adnxs.com",
+    "cdn.ampproject.org",
+    "cdn.content.prod.cms.msn.com",
+    "cdn.doubleverify.com",
+    "cdn.flashtalking.com",
+    "cdn.krxd.net",
+    "cdn.mozilla.net",
+    "cdn.onenote.net",
+    "cdn.optimizely.com",
+    "cdn.syndication.twimg.com",
+    "cdn.taboola.com",
+    "cdn.whatsapp.net",
+    "cdn3.doubleverify.com",
+    "cdninstagram.com",
+    "cdnjs.cloudflare.com",
+    "ce.lijit.com",
+    "cf-st.sc-cdn.net",
+    "chartbeat.com",
+    "chartbeat.net",
+    "chat-gateway-prod.chat.snapchat.com",
+    "chat.snapchat.com",
+    "choices.trustarc.com",
+    "choices.truste.com",
+    "cl2.apple.com",
+    "cl4.apple.com",
+    "cl5.apple.com",
+    "client-api.itunes.apple.com",
+    "client-channel.google.com",
+    "client-office365-tas.msedge.net",
+    "client.dropbox.com",
+    "client.wns.windows.com",
+    "clients.google.com",
+    "clients1.google.com",
+    "clients2.google.com",
+    "clients3.google.com",
+    "clients4.google.com",
+    "clients5.google.com",
+    "clients6.google.com",
+    "clientservices.googleapis.com",
+    "cloudconfig.googleapis.com",
+    "cloudflare.com",
+    "cm.adgrx.com",
+    "cm.everesttech.net",
+    "cm.g.doubleclick.net",
+    "cmcm.com",
+    "cms.analytics.yahoo.com",
+    "cms.msn.com",
+    "cms.quantserve.com",
+    "code.createjs.com",
+    "code.jquery.com",
+    "com.akadns.net",
+    "com.edgekey.net",
+    "com.edgesuite.net",
+    "comodoca.com",
+    "config.edge.skype.com",
+    "config.skype.com",
+    "configuration.apple.com",
+    "configuration.apple.com.akadns.net",
+    "connect.facebook.net",
+    "connectivitycheck.android.com",
+    "connexity.net",
+    "consensu.org",
+    "consumer.krxd.net",
+    "contacts.google.com",
+    "content.prod.cms.msn.com",
+    "contextual.media.net",
+    "contextweb.com",
+    "core.windows.net",
+    "courier-push-apple.com.akadns.net",
+    "crashlytics.com",
+    "createjs.com",
+    "criteo.com",
+    "criteo.net",
+    "crl.comodoca.com",
+    "crl.globalsign.net",
+    "crl.microsoft.com",
+    "crl.pki.goog",
+    "crwdcntrl.net",
+    "cs9.wac.phicdn.net",
+    "ct.pinterest.com",
+    "ctldl.windowsupdate.com",
+    "customerevents.netflix.com",
+    "d.agkn.com",
+    "d.akamaiedge.net",
+    "d.dropbox.com",
+    "d.turn.com",
+    "dart.l.doubleclick.net",
+    "data.flurry.com",
+    "data.microsoft.com",
+    "delivery.mp.microsoft.com",
+    "demdex.net",
+    "device-metrics-us.amazon.com",
+    "di.atlas.samsung.com",
+    "digicert.com",
+    "digitru.st",
+    "dis.criteo.com",
+    "dl-debug.dropbox.com",
+    "dl.delivery.mp.microsoft.com",
+    "dlx.addthis.com",
+    "dmd.metaservices.microsoft.com",
+    "dns-test1.hola.org",
+    "dns.msftncsi.com",
+    "do.dsp.mp.microsoft.com",
+    "docs.google.com",
+    "domdex.com",
+    "dotomi.com",
+    "doubleclick.net",
+    "doubleverify.com",
+    "download.windowsupdate.com",
+    "dpm.demdex.net",
+    "drive.google.com",
+    "dropbox.com",
+    "dropboxapi.com",
+    "dsce9.akamaiedge.net",
+    "dscg.akamaiedge.net",
+    "dsp.adfarm1.adition.com",
+    "dsp.io",
+    "dsp.mp.microsoft.com",
+    "dsum-sec.casalemedia.com",
+    "dsum.casalemedia.com",
+    "dsx.mp.microsoft.com",
+    "dt.adsafeprotected.com",
+    "duapps.com",
+    "dyntrk.com",
+    "e.crashlytics.com",
+    "e.nexac.com",
+    "e12930.ksd.akamaiedge.net",
+    "e13136.g.akamaiedge.net",
+    "e1879.e7.akamaiedge.net",
+    "e2ro.com",
+    "e4478.a.akamaiedge.net",
+    "e5153.dsce9.akamaiedge.net",
+    "e673.dsce9.akamaiedge.net",
+    "e6858.dsce9.akamaiedge.net",
+    "e7.akamaiedge.net",
+    "e8037.g.akamaiedge.net",
+    "eas.outlook.com",
+    "eb2.3lift.com",
+    "edge-chat.facebook.com",
+    "edge-mqtt.facebook.com",
+    "edge.skype.com",
+    "edgekey.net",
+    "edgekey.net.globalredir.akadns.net",
+    "edgesuite.net",
+    "eicm-global.dsp.io",
+    "entrust.net",
+    "ess.apple.com",
+    "eu-west-1.elb.amazonaws.com",
+    "eus.rubiconproject.com",
+    "events.appsflyer.com",
+    "events.data.microsoft.com",
+    "everesttech.net",
+    "evidon.com",
+    "evoke-windowsservices-tas.msedge.net",
+    "example.com",
+    "exelator.com",
+    "extend.tv",
+    "external.xx.fbcdn.net",
+    "eyeota.net",
+    "eyeviewads.com",
+    "facebook.com",
+    "facebook.net",
+    "fastlane.rubiconproject.com",
+    "fastly.net",
+    "fb.com",
+    "fbcdn.net",
+    "fbsbx.com",
+    "fcmatch.google.com",
+    "fcmatch.youtube.com",
+    "fe.apple-dns.net",
+    "fe2.update.microsoft.com",
+    "fe3.delivery.mp.microsoft.com",
+    "ff.avast.com",
+    "firefox.com",
+    "flashtalking.com",
+    "fls-na.amazon.com",
+    "fls.doubleclick.net",
+    "flurry.com",
+    "fna.fbcdn.net",
+    "fonts.googleapis.com",
+    "fpdownload.macromedia.com",
+    "fpdownload2.macromedia.com",
+    "ftl.netflix.com",
+    "fw.adsafeprotected.com",
+    "fwmrm.net",
+    "g.aaplimg.com",
+    "g.akamaiedge.net",
+    "g.doubleclick.net",
+    "g.live.com",
+    "g.whatsapp.net",
+    "g4.akamai.net",
+    "game-mode.net",
+    "gateway.fe.apple-dns.net",
+    "gateway.icloud.com",
+    "gcdn.2mdn.net",
+    "gcp.gvt2.com",
+    "gcs.sc-cdn.net",
+    "gemius.pl",
+    "geo-prod.do.dsp.mp.microsoft.com",
+    "geo.moatads.com",
+    "geo.yahoo.com",
+    "geomobileservices-pa.googleapis.com",
+    "geotrust.com",
+    "getpocket.cdn.mozilla.net",
+    "ggpht.com",
+    "global.fastly.net",
+    "global.ib-ibi.com",
+    "globalredir.akadns.net",
+    "globalsign.com",
+    "globalsign.net",
+    "gmail.com",
+    "go-mpulse.net",
+    "go.microsoft.com",
+    "go.sonobi.com",
+    "godaddy.com",
+    "google-analytics.com",
+    "google.com",
+    "googleadapis.l.google.com",
+    "googleads.g.doubleclick.net",
+    "googleads4.g.doubleclick.net",
+    "googleadservices.com",
+    "googleapis.l.google.com",
+    "googlehosted.l.googleusercontent.com",
+    "googlemail.l.google.com",
+    "googlesyndication.com",
+    "googletagmanager.com",
+    "googletagservices.com",
+    "googleusercontent.com",
+    "googlevideo.com",
+    "graph.facebook.com",
+    "graph.instagram.com",
+    "gravatar.com",
+    "gs-loc-new.ls-apple.com.akadns.net",
+    "gs-loc.apple.com",
+    "gs-loc.ls-apple.com.akadns.net",
+    "gsp-ssl.ls.apple.com",
+    "gsp10-ssl.apple.com",
+    "gsp51-ssl.ls.apple.com",
+    "gsp64-ssl.ls-apple.com.akadns.net",
+    "gsp64-ssl.ls.apple.com",
+    "gspe1-ssl.ls.apple.com",
+    "gspe35-ssl.ls.apple.com",
+    "gtq.sct.sc-prod.net",
+    "gum.criteo.com",
+    "gumgum.com",
+    "guzzoni-apple.com.akadns.net",
+    "guzzoni.apple.com",
+    "gvt1.com",
+    "gvt2.com",
+    "gvt3.com",
+    "gwallet.com",
+    "hangouts.google.com",
+    "hit.gemius.pl",
+    "hockeyapp.net",
+    "hola.org",
+    "hotjar.com",
+    "hwcdn.net",
+    "hydra.opendns.com",
+    "i.instagram.com",
+    "i.liadm.com",
+    "i.w55c.net",
+    "i.ytimg.com",
+    "i1.ytimg.com",
+    "i9.ytimg.com",
+    "iadsdk.apple.com",
+    "iasds01.com",
+    "ib-ibi.com",
+    "ib.adnxs.com",
+    "ib.anycast.adnxs.com",
+    "ib.mookie1.com",
+    "ichnaea.netflix.com",
+    "icloud-content.com",
+    "icloud.com",
+    "icloud.com.akadns.net",
+    "id.google.com",
+    "id.rlcdn.com",
+    "identrust.com",
+    "idpix.media6degrees.com",
+    "idsync.rlcdn.com",
+    "iecvlist.microsoft.com",
+    "ieonlinews.microsoft.com",
+    "image2.pubmatic.com",
+    "image4.pubmatic.com",
+    "image6.pubmatic.com",
+    "images-na.ssl-images-amazon.com",
+    "images.outbrainimg.com",
+    "images.taboola.com",
+    "imap.gmail.com",
+    "imap.mail.yahoo.com",
+    "imasdk.googleapis.com",
+    "img-prod-cms-rt-microsoft-com.akamaized.net",
+    "img-s-msn-com.akamaized.net",
+    "impdesk.com",
+    "imrworldwide.com",
+    "inbox.google.com",
+    "indexww.com",
+    "infra.lync.com",
+    "init-p01md.apple.com",
+    "init-p01st.push.apple.com",
+    "init.ess.apple.com",
+    "init.itunes.apple.com",
+    "innovid.com",
+    "insight.adsrvr.org",
+    "insightexpressai.com",
+    "instagram.c10r.facebook.com",
+    "instagram.com",
+    "int-x3.letsencrypt.org",
+    "iphone-ld.apple.com",
+    "iphonesubmissions.apple.com",
+    "ipredictive.com",
+    "ipv6.microsoft.com",
+    "ipv6.msftncsi.com",
+    "iris.microsoft.com",
+    "itunes-apple.com.akadns.net",
+    "itunes.apple.com",
+    "jadserve.postrelease.com",
+    "jquery.com",
+    "js-agent.newrelic.com",
+    "js-sec.indexww.com",
+    "keyvalueservice.icloud.com",
+    "krxd.net",
+    "ksd.akamaiedge.net",
+    "ksmobile.com",
+    "l.betrad.com",
+    "l.doubleclick.net",
+    "l.google.com",
+    "l.googleusercontent.com",
+    "lcdn-locator.apple.com",
+    "letsencrypt.org",
+    "lh3.googleusercontent.com",
+    "lh4.googleusercontent.com",
+    "lh5.googleusercontent.com",
+    "lh6.googleusercontent.com",
+    "liadm.com",
+    "licdn.com",
+    "licensing.mp.microsoft.com",
+    "lijit.com",
+    "linkedin.com",
+    "lithium.facebook.com",
+    "live.com",
+    "live.net",
+    "livetileedge.dsx.mp.microsoft.com",
+    "load77.exelator.com",
+    "loadm.exelator.com",
+    "loadus.exelator.com",
+    "log.outbrain.com",
+    "login.live.com",
+    "login.microsoftonline.com",
+    "login.windows.net",
+    "logx.optimizely.com",
+    "ls-apple.com.akadns.net",
+    "ls.apple.com",
+    "lync.com",
+    "m.addthis.com",
+    "m.addthisedge.com",
+    "m.adnxs.com",
+    "m.facebook.com",
+    "m.media-amazon.com",
+    "macromedia.com",
+    "magnetic.t.domdex.com",
+    "mail.google.com",
+    "mail.me.com",
+    "mail.yahoo.com",
+    "maps.googleapis.com",
+    "match.adsrvr.org",
+    "match.prod.bidr.io",
+    "match.rundsp.com",
+    "match.sharethrough.com",
+    "mathtag.com",
+    "maxcdn.bootstrapcdn.com",
+    "mb.moatads.com",
+    "me.com",
+    "media-amazon.com",
+    "media.net",
+    "media6degrees.com",
+    "messenger.live.com",
+    "mesu.apple.com",
+    "mesu.g.aaplimg.com",
+    "metaservices.microsoft.com",
+    "microsoft.com",
+    "microsoftonline.com",
+    "mid.rkdms.com",
+    "mixpanel.com",
+    "ml314.com",
+    "mlnadvertising.com",
+    "moatads.com",
+    "moatpixel.com",
+    "mobile-gtalk.l.google.com",
+    "mobile.pipe.aria.microsoft.com",
+    "mookie1.com",
+    "mopub.com",
+    "mozaws.net",
+    "mozilla.com",
+    "mozilla.net",
+    "mozilla.org",
+    "mp.microsoft.com",
+    "mqtt-mini.facebook.com",
+    "mqtt.c10r.facebook.com",
+    "msecnd.net",
+    "msedge.net",
+    "msftconnecttest.com",
+    "msftncsi.com",
+    "msn.com",
+    "msocsp.com",
+    "mtalk.google.com",
+    "mvm.snapchat.com",
+    "mxptint.net",
+    "myvisualiq.net",
+    "mzstatic.com",
+    "ncc.avast.com",
+    "nccp.netflix.com",
+    "net.globalredir.akadns.net",
+    "netflix.com",
+    "netmng.com",
+    "netmon-control.dropbox.com",
+    "netseer.com",
+    "newrelic.com",
+    "nexac.com",
+    "nexus.officeapps.live.com",
+    "nexusrules.officeapps.live.com",
+    "nflximg.com",
+    "nflximg.net",
+    "nflxso.net",
+    "nflxvideo.net",
+    "node.e2ro.com",
+    "notifications.google.com",
+    "nr-data.net",
+    "nrdp.nccp.netflix.com",
+    "nrdp50-appboot.netflix.com",
+    "ntp.org",
+    "nym1-ib.adnxs.com",
+    "oath.com",
+    "oca.nflxvideo.net",
+    "ocsp.apple.com",
+    "ocsp.comodoca.com",
+    "ocsp.digicert.com",
+    "ocsp.entrust.net",
+    "ocsp.godaddy.com",
+    "ocsp.int-x3.letsencrypt.org",
+    "ocsp.msocsp.com",
+    "ocsp.pki.goog",
+    "ocsp.sca1b.amazontrust.com",
+    "ocsp.usertrust.com",
+    "ocsp2.globalsign.com",
+    "odb.outbrain.com",
+    "odc.officeapps.live.com",
+    "odr.mookie1.com",
+    "office.com",
+    "office.net",
+    "office365.com",
+    "officeapps.live.com",
+    "officeclient.microsoft.com",
+    "ogs.google.com",
+    "omnitagjs.com",
+    "omtrdc.net",
+    "oneclient.sfx.ms",
+    "onenote.net",
+    "onesignal.com",
+    "onmicrosoft.com",
+    "opendns.com",
+    "openx.net",
+    "optimized-by.rubiconproject.com",
+    "optimizely.com",
+    "origin.guzzoni-apple.com.akadns.net",
+    "osi.office.net",
+    "otf.msn.com",
+    "outbrain.com",
+    "outbrainimg.com",
+    "outlook.com",
+    "outlook.office.com",
+    "outlook.office365.com",
+    "owneriq.net",
+    "p.adsymptotic.com",
+    "p.rfihub.com",
+    "p.typekit.net",
+    "pagead-googlehosted.l.google.com",
+    "pagead.l.doubleclick.net",
+    "pagead2.googlesyndication.com",
+    "pagead46.l.doubleclick.net",
+    "pancake.apple.com",
+    "partnerad.l.doubleclick.net",
+    "pbs.twimg.com",
+    "people-pa.clients6.google.com",
+    "people-pa.googleapis.com",
+    "phicdn.net",
+    "photos-ugc.l.googleusercontent.com",
+    "ping.chartbeat.net",
+    "pinimg.com",
+    "pinterest.com",
+    "pipe.aria.microsoft.com",
+    "pipe.skype.com",
+    "pippio.com",
+    "pix.impdesk.com",
+    "pixel-sync.sitescout.com",
+    "pixel.ad.mlnadvertising.com",
+    "pixel.adsafeprotected.com",
+    "pixel.advertising.com",
+    "pixel.everesttech.net",
+    "pixel.mathtag.com",
+    "pixel.quantserve.com",
+    "pixel.rubiconproject.com",
+    "pixel.s3xified.com",
+    "pixel.tapad.com",
+    "pki.goog",
+    "platform.twitter.com",
+    "play.google.com",
+    "play.googleapis.com",
+    "play.itunes.apple.com",
+    "playatoms-pa.googleapis.com",
+    "plus.google.com",
+    "plus.l.google.com",
+    "pm.w55c.net",
+    "pool.ntp.org",
+    "portal.fb.com",
+    "postrelease.com",
+    "powerlinks.com",
+    "pr-bh.ybp.yahoo.com",
+    "pr.ybp.yahoo.com",
+    "prod.amcs-tachyon.com",
+    "prod.bidr.io",
+    "prod.cms.msn.com",
+    "prod.ftl.netflix.com",
+    "prod.mozaws.net",
+    "prod.netflix.com",
+    "ps.eyeota.net",
+    "pubads.g.doubleclick.net",
+    "pubmatic.com",
+    "push-apple.com.akadns.net",
+    "push.apple.com",
+    "push.prod.netflix.com",
+    "px.adhigh.net",
+    "px.ads.linkedin.com",
+    "px.moatads.com",
+    "px.owneriq.net",
+    "px.powerlinks.com",
+    "pxl.ace.advertising.com",
+    "pxl.connexity.net",
+    "qq.com",
+    "quantcount.com",
+    "quantserve.com",
+    "query.yahoo.com",
+    "r.nexac.com",
+    "r.turn.com",
+    "r20swj13mr.microsoft.com",
+    "rayjump.com",
+    "rc.rlcdn.com",
+    "redirector.googlevideo.com",
+    "redirector.gvt1.com",
+    "reports.crashlytics.com",
+    "res.office365.com",
+    "rfihub.com",
+    "ris.api.iris.microsoft.com",
+    "rkdms.com",
+    "rlcdn.com",
+    "roaming.officeapps.live.com",
+    "rp.gwallet.com",
+    "rtam-collector.appspot.com",
+    "rtb-csync.smartadserver.com",
+    "rtb.gumgum.com",
+    "rtb.openx.net",
+    "rtb0.doubleverify.com",
+    "rtbcdn.doubleverify.com",
+    "rubiconproject.com",
+    "rules.quantcount.com",
+    "rundsp.com",
+    "s-microsoft.com",
+    "s.amazon-adsystem.com",
+    "s.moatpixel.com",
+    "s.sc-cdn.net",
+    "s.thebrighttag.com",
+    "s.w.org",
+    "s.yimg.com",
+    "s.youtube.com",
+    "s.ytimg.com",
+    "s0.2mdn.net",
+    "s2.symcb.com",
+    "s3xified.com",
+    "s7.addthis.com",
+    "safebrowsing.googleapis.com",
+    "samsung.com",
+    "samsungapps.com",
+    "samsungcloud.com",
+    "sandbox.push.apple.com",
+    "sb.scorecardresearch.com",
+    "sc-analytics.appspot.com",
+    "sc-cdn.net",
+    "sc-jpl.com",
+    "sc-prod.net",
+    "sc.iasds01.com",
+    "sc.omtrdc.net",
+    "sca1b.amazontrust.com",
+    "scontent.xx.fbcdn.net",
+    "scorecardresearch.com",
+    "script.hotjar.com",
+    "sct.sc-prod.net",
+    "search.spotxchange.com",
+    "secure-ds.serving-sys.com",
+    "secure-gl.imrworldwide.com",
+    "secure-us.imrworldwide.com",
+    "secure.adnxs.com",
+    "secure.insightexpressai.com",
+    "secure.netflix.com",
+    "secure.quantserve.com",
+    "securepubads.g.doubleclick.net",
+    "semasio.net",
+    "servedby.flashtalking.com",
+    "service.weather.microsoft.com",
+    "services.mozilla.com",
+    "serving-sys.com",
+    "settings-win.data.microsoft.com",
+    "settings.crashlytics.com",
+    "settings.data.microsoft.com",
+    "setup.icloud.com",
+    "sfx.ms",
+    "shared.global.fastly.net",
+    "sharepoint.com",
+    "sharethis.com",
+    "sharethrough.com",
+    "shavar.services.mozilla.com",
+    "simage2.pubmatic.com",
+    "simpli.fi",
+    "sitescout.com",
+    "skimresources.com",
+    "skype.com",
+    "sls.update.microsoft.com",
+    "smaato.net",
+    "smartadserver.com",
+    "smoot.apple.com",
+    "snapads.com",
+    "snapchat.com",
+    "socdm.com",
+    "soma.smaato.net",
+    "sonobi.com",
+    "sp.analytics.yahoo.com",
+    "spclient.wg.spotify.com",
+    "spotify.com",
+    "spotxchange.com",
+    "sqm.microsoft.com",
+    "sqm.telemetry.microsoft.com",
+    "srv.stackadapt.com",
+    "ssl-google-analytics.l.google.com",
+    "ssl-images-amazon.com",
+    "ssl.fastly.net",
+    "ssl.google-analytics.com",
+    "sslwidget.criteo.com",
+    "ssum-sec.casalemedia.com",
+    "stackadapt.com",
+    "stags.bluekai.com",
+    "star-z-mini.c10r.facebook.com",
+    "star.c10r.facebook.com",
+    "static.ads-twitter.com",
+    "static.adsafeprotected.com",
+    "static.chartbeat.com",
+    "static.criteo.net",
+    "static.doubleclick.net",
+    "static.hotjar.com",
+    "static.xx.fbcdn.net",
+    "staticxx.facebook.com",
+    "stats.g.doubleclick.net",
+    "stats.l.doubleclick.net",
+    "status.geotrust.com",
+    "stickyadstv.com",
+    "storage.googleapis.com",
+    "storage.live.com",
+    "su.addthis.com",
+    "su.itunes.apple.com",
+    "suggestqueries.google.com",
+    "sv.symcd.com",
+    "symantec.com",
+    "symcb.com",
+    "symcd.com",
+    "sync-tm.everesttech.net",
+    "sync.1rx.io",
+    "sync.adaptv.advertising.com",
+    "sync.crwdcntrl.net",
+    "sync.extend.tv",
+    "sync.hydra.opendns.com",
+    "sync.ipredictive.com",
+    "sync.mathtag.com",
+    "sync.outbrain.com",
+    "sync.search.spotxchange.com",
+    "sync.teads.tv",
+    "sync.tidaltv.com",
+    "syndication.twimg.com",
+    "syndication.twitter.com",
+    "t.appsflyer.com",
+    "t.co",
+    "t.domdex.com",
+    "t.mookie1.com",
+    "t.myvisualiq.net",
+    "t.wayfair.com",
+    "taboola.com",
+    "tags.bluekai.com",
+    "tags.tiqcdn.com",
+    "tapad.com",
+    "tapestry.tapad.com",
+    "tcs",
+    "teads.tv",
+    "telemetry.microsoft.com",
+    "teredo.ipv6.microsoft.com",
+    "thebrighttag.com",
+    "thrtle.com",
+    "tidaltv.com",
+    "tile-service.weather.microsoft.com",
+    "time-ios.apple.com",
+    "time-ios.g.aaplimg.com",
+    "tiqcdn.com",
+    "tlu.dl.delivery.mp.microsoft.com",
+    "token.rubiconproject.com",
+    "ton.twimg.com",
+    "tp-s.nflximg.net",
+    "tpc.googlesyndication.com",
+    "tps.doubleverify.com",
+    "tps30.doubleverify.com",
+    "track.eyeviewads.com",
+    "trafficmanager.net",
+    "trafficshaping.dsp.mp.microsoft.com",
+    "translate.google.com",
+    "translate.googleapis.com",
+    "trc.taboola.com",
+    "tremorhub.com",
+    "tribalfusion.com",
+    "trustarc.com",
+    "truste.com",
+    "tsfe.trafficshaping.dsp.mp.microsoft.com",
+    "tt.omtrdc.net",
+    "tubemogul.com",
+    "turn.com",
+    "twimg.com",
+    "twitter.com",
+    "typekit.net",
+    "ucsuri.tcs",
+    "um.simpli.fi",
+    "unity3d.com",
+    "update.googleapis.com",
+    "update.microsoft.com",
+    "urbanairship.com",
+    "urs.microsoft.com",
+    "us-east-1.elb.amazonaws.com",
+    "us-u.openx.net",
+    "us-west-1.elb.amazonaws.com",
+    "us-west-2.elb.amazonaws.com",
+    "us.criteo.com",
+    "us.criteo.net",
+    "usc.adserver.snapads.com",
+    "use-tor.adsrvr.org",
+    "use.typekit.net",
+    "usermatch.krxd.net",
+    "usertrust.com",
+    "v.fwmrm.net",
+    "v10.events.data.microsoft.com",
+    "v10.vortex-win.data.microsoft.com",
+    "v20.events.data.microsoft.com",
+    "v20.vortex-win.data.microsoft.com",
+    "vas.samsungapps.com",
+    "verisign.com",
+    "vindicosuite.com",
+    "vo.msecnd.net",
+    "vortex-win.data.microsoft.com",
+    "vortex.data.microsoft.com",
+    "w.org",
+    "w55c.net",
+    "wac.phicdn.net",
+    "walmart.com",
+    "watson.telemetry.microsoft.com",
+    "wayfair.com",
+    "wdcp.microsoft.com",
+    "weather.com",
+    "weather.microsoft.com",
+    "wg.spotify.com",
+    "whatsapp.net",
+    "widgets.outbrain.com",
+    "windows.com",
+    "windows.net",
+    "windowsupdate.com",
+    "wns.windows.com",
+    "wordpress.com",
+    "wp.com",
+    "www-cdn.icloud.com.akadns.net",
+    "www-google-analytics.l.google.com",
+    "www-googletagmanager.l.google.com",
+    "www.amazon.com",
+    "www.apple.com",
+    "www.bing.com",
+    "www.facebook.com",
+    "www.google-analytics.com",
+    "www.google.com",
+    "www.googleadservices.com",
+    "www.googleapis.com",
+    "www.googletagmanager.com",
+    "www.googletagservices.com",
+    "www.icloud.com",
+    "www.instagram.com",
+    "www.linkedin.com",
+    "www.microsoft.com",
+    "www.msftconnecttest.com",
+    "www.msftncsi.com",
+    "www.msn.com",
+    "www.yahoo.com",
+    "www.youtube.com",
+    "www3.l.google.com",
+    "x.akamaiedge.net",
+    "x.bidswitch.net",
+    "x.dlx.addthis.com",
+    "x.skimresources.com",
+    "xboxlive.com",
+    "xp.apple.com",
+    "xp.itunes-apple.com.akadns.net",
+    "xx.fbcdn.net",
+    "yahoo.com",
+    "yahoodns.net",
+    "yandex.net",
+    "yandex.ru",
+    "ybp.yahoo.com",
+    "yieldmo.com",
+    "yimg.com",
+    "youtube-ui.l.google.com",
+    "youtube.com",
+    "youtubei.googleapis.com",
+    "yt3.ggpht.com",
+    "ytimg-edge-static.l.google.com",
+    "ytimg.com",
+    "z.moatads.com",
+    "zemanta.com"
   ]
 }

From b542f7de2475668362d0507a33302b6fdf06a87f Mon Sep 17 00:00:00 2001
From: Stefan Kelm <kelm@count.dfn-cert.de>
Date: Fri, 31 Aug 2018 14:17:05 +0200
Subject: [PATCH 3/5] new list: win10 connection endpoints

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 0104f23..9867e0e 100755
--- a/README.md
+++ b/README.md
@@ -23,6 +23,7 @@ are available in one of the list. The list can be globally enabled or disabled i
 - [lists/microsoft-office365](lists/microsoft-office365) - known Office 365 URLs and IP address ranges
 - [lists/microsoft-office365-cn](lists/microsoft-office365-cn) - known Office 365 IP address ranges in China
 - [lists/microsoft-attack-simulator](lists/microsoft-attack-simulator/) - known Office 365 hostnames and IP address used for Microsoft "Attack Simulator"
+- [lists/microsoft-win10-connection-endpoints](lists/microsoft-win10-connection-endpoints/) - known Windows 10 connection endpoints
 - [lists/multicast](lists/multicast) - known IPv4 multicast CIDR blocks
 - [lists/ovh-cluster](lists/ovh-cluster) - List of known OVH Cluster IP
 - [lists/public-dns-v4](lists/public-dns-v4) - IPv4 addresses and reverse of public DNS resolver

From 20332a75772aef726ba15e702841f0aef39b5974 Mon Sep 17 00:00:00 2001
From: Stefan Kelm <kelm@count.dfn-cert.de>
Date: Fri, 31 Aug 2018 14:22:03 +0200
Subject: [PATCH 4/5] win10 connection endpoints

---
 .../list.json                                 | 157 ++++++++++++++++++
 1 file changed, 157 insertions(+)
 create mode 100644 lists/microsoft-win10-connection-endpoints/list.json

diff --git a/lists/microsoft-win10-connection-endpoints/list.json b/lists/microsoft-win10-connection-endpoints/list.json
new file mode 100644
index 0000000..673d205
--- /dev/null
+++ b/lists/microsoft-win10-connection-endpoints/list.json
@@ -0,0 +1,157 @@
+{
+  "name": "List of known Windows 10 connection endpoints",
+  "version": 1,
+  "description": "Event contains one or more entries of known Windows 10 connection endpoints (https://docs.microsoft.com/en-us/windows/privacy/manage-windows-endpoints)",
+  "type": "hostname",
+  "matching_attributes": [
+    "domain",
+    "hostname",
+    "domain|ip"
+  ],
+  "list": [
+    ".1.msftsrvcs.vo.llnwi.net",
+    "2.dl.delivery.mp.microsoft.com",
+    "2.tlu.dl.delivery.mp.microsoft.com",
+    "3.dl.delivery.mp.microsoft.com",
+    "3.dl.delivery.mp.microsoft.com.c.footprint.net",
+    "3.tlu.dl.delivery.mp.microsoft.com",
+    "3.tlu.dl.delivery.mp.microsoft.com.c.footprint.net",
+    "a122.dscd.akamai.net",
+    "a1621.g.akamai.net",
+    ".akamaiedge.net",
+    ".akamai.net",
+    ".a-msedge.net",
+    "arc.msn.com",
+    "arc.msn.com.nsatc.net",
+    "a-ring.msedge.net",
+    "au.download.windowsupdate.com",
+    "auth.gfx.ms",
+    ".b.akamaiedge.net",
+    "bing.com",
+    ".blob.core.windows.net",
+    "blob.weather.microsoft.com",
+    "b-ring.msedge.net",
+    "candycrushsoda.king.com",
+    "cdn.content.prod.cms.msn.com",
+    "cdn.onenote.net",
+    "cds.d2s7q6s2.hwcdn.net",
+    "client-office365-tas.msedge.net",
+    ".c-msedge.net",
+    "co4.telecommand.telemetry.microsoft.com.akadns.net",
+    "config.edge.skype.com",
+    "cs12.wpc.v0cdn.net",
+    "ctldl.windowsupdate.com",
+    "cy2.displaycatalog.md.mp.microsoft.com.akadns.net",
+    "cy2.licensing.md.mp.microsoft.com.akadns.net",
+    "cy2.purchase.md.mp.microsoft.com.akadns.net",
+    "cy2.settings.data.microsoft.com.akadns.net",
+    "cy2.vortex.data.microsoft.com.akadns.net",
+    "definitionupdates.microsoft.com",
+    ".delivery.dsp.mp.microsoft.com.nsatc.net",
+    "displaycatalog.mp.microsoft.com",
+    ".dl.delivery.mp.microsoft.com",
+    "dl.delivery.mp.microsoft.com",
+    "dm3p.wns.notify.windows.com.akadns.net",
+    "dmd.metaservices.microsoft.com",
+    "dmd.metaservices.microsoft.com.akadns.net",
+    "download.windowsupdate.com",
+    ".dscb1.akamaiedge.net",
+    ".dscd.akamai.net",
+    ".dspb.akamaiedge.net",
+    ".dspg.akamaiedge.net",
+    ".dspw65.akamai.net",
+    "dual-a-0001.a-msedge.net",
+    "emdl.ws.microsoft.com",
+    ".e-msedge.net",
+    "evoke-windowsservices-tas.msedge.net",
+    "fe2.update.microsoft.com",
+    "fe2.update.microsoft.com.nsatc.net",
+    "fe3.delivery.dsp.mp.microsoft.com.nsatc.net",
+    "fe3.delivery.mp.microsoft.com",
+    "fg.download.windowsupdate.com.c.footprint.net",
+    "fp.msedge.net",
+    "fs.microsoft.com",
+    ".g.akamaiedge.net",
+    "g.akamaiedge.net",
+    ".g.akamai.net",
+    "geo-prod.do.dsp.mp.microsoft.com",
+    "geo-prod.do.dsp.mp.microsoft.com.nsatc.net",
+    "geo-prod.dodsp.mp.microsoft.com.nsatc.net",
+    "geover-prod.do.dsp.mp.microsoft.com",
+    "g.live.com",
+    "g.msn.com",
+    "g.msn.com.nsatc.net",
+    "go.microsoft.com",
+    "gpla1.wac.v2cdn.net",
+    ".hwcdn.net",
+    "img-prod-cms-rt-microsoft-com.akamaized.net",
+    "ip5.afdorigin-prod-am02.afdogw.com",
+    "ipv4.login.msa.akadns6.net",
+    "licensing.mp.microsoft.com",
+    "location-inference-westus.cloudapp.net",
+    "login.live.com",
+    ".login.msa.akadns6.net",
+    "login.msa.akadns6.net",
+    "l-ring.msedge.net",
+    ".l.windowsupdate.com",
+    ".m1-msedge.net",
+    "maps.windows.com",
+    "mediaredirect.microsoft.com",
+    "modern.watson.data.microsoft.com.akadns.net",
+    "msftconnecttest.com",
+    "msftsrvcs.vo.llnwd.net",
+    "msnbot-65-52-108-198.search.msn.com",
+    "msnbot-.search.msn.com",
+    "ocos-office365-s2s.msedge.net",
+    "ocsp.digicert.com",
+    "oem.twimg.com",
+    "oneclient.sfx.ms",
+    "outlook.office365.com",
+    "peer1-wst.msedge.net",
+    "peer4-wst.msedge.net",
+    ".prod.do.dsp.mp.microsoft.com",
+    "prod.do.dsp.mp.microsoft.com",
+    "prod.do.dsp.mp.microsoft.com.nsatc.net",
+    "pti.store.microsoft.com",
+    "pti.store.microsoft.com.unistore.akadns.net",
+    "purchase.mp.microsoft.com",
+    "query.prod.cms.rt.microsoft.com",
+    "ris.api.iris.microsoft.com",
+    "ris.api.iris.microsoft.com.akadns.net",
+    ".search.msn.com",
+    "settings.data.microsoft.com",
+    "settings-win.data.microsoft.com",
+    "sls.update.microsoft.com",
+    "sls.update.microsoft.com.nsatc.net",
+    ".s-msedge.net",
+    "star-mini.c10r.facebook.com",
+    "storecatalogrevocation.storequality.microsoft.com",
+    "storeedgefd.dsx.mp.microsoft.com",
+    "store-images.microsoft.com",
+    "store-images.s-microsoft.com",
+    "telecommand.telemetry.microsoft.com",
+    ".telecommand.telemetry.microsoft.com.akadns.net",
+    "tile-service.weather.microsoft.com",
+    ".tlu.dl.delivery.mp.microsoft.com",
+    ".tlu.dl.delivery.mp.microsoft.com.c.footprint.net",
+    "tsfe.trafficshaping.dsp.mp.microsoft.com",
+    "v10.vortex-win.data.microsoft.com",
+    "vip5.afdorigin-prod-am02.afdogw.com",
+    "vip5.afdorigin-prod-ch02.afdogw.com",
+    ".wac.edgecastcdn.net",
+    "wac.edgecastcdn.net",
+    ".wac.phicdn.net",
+    "wac.phicdn.net",
+    "wallet-frontend-prod-westus.cloudapp.net",
+    "wallet.microsoft.com",
+    "watson.telemetry.microsoft.com",
+    "wdcp.microsoft.akadns.net",
+    "wdcp.microsoft.com",
+    "wildcard.twimg.com",
+    ".windowsupdate.com",
+    ".wns.windows.com",
+    "www.bing.com",
+    "www.microsoft.com",
+    "www.msftconnecttest.com"
+  ]
+}

From 4544fa2f02f9292ad7f47b6181d293db7a44cb09 Mon Sep 17 00:00:00 2001
From: ater49 <contact@at49.info>
Date: Fri, 7 Sep 2018 16:17:04 +0200
Subject: [PATCH 5/5] New warninglist for bank websites. The list is based on
 university proxylist
 (ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/bank.tar.gz).

---
 lists/bank-website/list.json | 1720 ++++++++++++++++++++++++++++++++++
 1 file changed, 1720 insertions(+)
 create mode 100644 lists/bank-website/list.json

diff --git a/lists/bank-website/list.json b/lists/bank-website/list.json
new file mode 100644
index 0000000..7df89dd
--- /dev/null
+++ b/lists/bank-website/list.json
@@ -0,0 +1,1720 @@
+{
+  "name": "List of known bank domains",
+  "version": 1,
+  "description": "Event contains one or more entries of known banking website",
+  "matching_attributes": [
+    "domain",
+    "hostname",
+    "domain|ip"
+  ],
+  "type": "hostname",
+  "list": [
+    ".02bancorp.com",
+    ".1822direkt.com",
+    ".1stbk.com",
+    ".1stfed.com",
+    ".1stfedvw.com",
+    ".1stnatbank.com",
+    ".1stnationalbank.com",
+    ".1stnb.com",
+    ".1stsecuritybank.com",
+    ".1stsource.com",
+    ".53.com",
+    ".aaadir.com",
+    ".abansa.org.sv",
+    ".abbybank.com",
+    ".abcbancorp.com",
+    ".abcthebank.com",
+    ".abe.org",
+    ".abe.org.ar",
+    ".abi.cab.banche.meglio.it",
+    ".abingtonbank.com",
+    ".abl.org.lb",
+    ".abm.org.mx",
+    ".aboc.com",
+    ".abpr.com",
+    ".abs.org.sg",
+    ".absa.co.za",
+    ".abtbank.com",
+    ".abtexas.com",
+    ".acba.am",
+    ".acbankers.org",
+    ".accesshorizon.com",
+    ".acommunitybank.com",
+    ".activobank7.pt",
+    ".adb.org",
+    ".adrianstatebank.com",
+    ".advanziakonto.com",
+    ".aea-bank.com",
+    ".afb.fr",
+    ".afcmerchantbank.com",
+    ".affinbank.com.my",
+    ".afsbonline.com",
+    ".agb.org.gg",
+    ".agfirst.com",
+    ".agrifinance.ca",
+    ".agrilandfcs.com",
+    ".agtexas.com",
+    ".ahiba.hn",
+    ".ahli.com",
+    ".aikb.ch",
+    ".akbank.com",
+    ".akf.de",
+    ".aktia.fi",
+    ".alabamabankers.org",
+    ".aldenbank.com",
+    ".alexbank.com",
+    ".alfabank.ru",
+    ".alfransi.com",
+    ".allahabadbank.com",
+    ".allegiancebank.com",
+    ".alliance-leicester.co.im",
+    ".alliancebank.com",
+    ".alliancebk.com",
+    ".allianzbanque.fr",
+    ".alpenbank.at",
+    ".alpinebank.com",
+    ".altajirbank.com",
+    ".amagerbanken.dk",
+    ".amanath-bank.com",
+    ".ambfinancial.com",
+    ".amco-bank.com",
+    ".americanbankmontana.com",
+    ".americanbanktulsa.com",
+    ".americanchartered.com",
+    ".americanexpress.com.au",
+    ".americanfederalsavingsbank.com",
+    ".americanfsb.com",
+    ".americanmarinebank.com",
+    ".americanstatebank.com",
+    ".amnat.com",
+    ".ampbanking.com.au",
+    ".amsouth.com",
+    ".amtrust.com",
+    ".anadolufinans.com.tr",
+    ".anb.com",
+    ".anbdc.com",
+    ".anbnet.com",
+    ".anbtx.com",
+    ".andbanc.com",
+    ".andelskassen.dk",
+    ".annabank.com",
+    ".apbsrilanka.org",
+    ".apobank.de",
+    ".arabbankers.bluestep.net",
+    ".arakari.com.jo",
+    ".archerbank.com",
+    ".arkbankers.org",
+    ".artisansbank.com",
+    ".arvest.com",
+    ".asbnow.com",
+    ".aseanbankers.org",
+    ".askaribank.com.pk",
+    ".asoban.bo",
+    ".asobanca.com.ve",
+    ".asociacionbancaria.com",
+    ".assocbank.com",
+    ".athensfederal.com",
+    ".athensfirstbank.com",
+    ".atlanticcentral.com",
+    ".atlasbank.com",
+    ".aurora.es",
+    ".ausbanc.es",
+    ".australiancu.com",
+    ".avbpgh.com",
+    ".avtokrazbank.ua",
+    ".axa.be",
+    ".azaniabank.co.tz",
+    ".baiphil.org",
+    ".baltcosavings.com",
+    ".bancacremasca.it",
+    ".bancacrfirenze.it",
+    ".bancadianghiariestia.it",
+    ".bancadicascina.it",
+    ".bancadipiacenza.it",
+    ".bancadisassano.it",
+    ".bancaja.es",
+    ".bancavaldichiana.it",
+    ".bancfirst.com",
+    ".bancoagricola.com",
+    ".bancoandalucia.es",
+    ".bancobcr.com",
+    ".bancobrasil.com.br",
+    ".bancocastilla.es",
+    ".bancodevalencia.es",
+    ".bancogalicia.es",
+    ".bancogallego.es",
+    ".bancomer.com.mx",
+    ".bancopopular-e.com",
+    ".bancopopular.es",
+    ".bancoreal.com.br",
+    ".bancovasconia.es",
+    ".bancwestcorp.com",
+    ".banhcafe.com",
+    ".bank-banque-canada.ca",
+    ".bank-sparhafen.ch",
+    ".bank1saar.de",
+    ".bankalpinum.com",
+    ".bankatcommerce.com",
+    ".bankatharrington.com",
+    ".bankatlantic.com",
+    ".bankatsecurity.com",
+    ".bankatunited.com",
+    ".bankaudiusa.com",
+    ".bankbac.com",
+    ".bankcalumet.com",
+    ".bankcb.com",
+    ".bankcenterfirst.com",
+    ".bankchampaign.com",
+    ".bankcom.com",
+    ".bankcsb.com",
+    ".bankdirect.com",
+    ".bankdirector.com",
+    ".banken.de",
+    ".bankenverband.li",
+    ".bankers.asn.au",
+    ".bankersalmanac.com",
+    ".bankersbankusa.com",
+    ".bankerscompliancegroup.com",
+    ".bankfirstfederal.com",
+    ".bankgeschichte.de",
+    ".bankgesellschaft.de",
+    ".banki.ru",
+    ".banking.vwfs.de",
+    ".bankinter.es",
+    ".bankleerau.ch",
+    ".banklenz.de",
+    ".bankmensch.de",
+    ".bankmidamerica.com",
+    ".bankmuscat.com",
+    ".banknbsb.com",
+    ".banknewport.com",
+    ".banknorthgeorgia.com",
+    ".banknorthshore.com",
+    ".bankoa.es",
+    ".bankofamerica.com",
+    ".bankofbaroda-usa.com",
+    ".bankofbaroda.com",
+    ".bankofbrodhead.com",
+    ".bankofcd.com",
+    ".bankofclarke.com",
+    ".bankofcleveland.com",
+    ".bankofessex.com",
+    ".bankoffayettecounty.com",
+    ".bankoffrankewing.com",
+    ".bankofgranite.com",
+    ".bankofhazlehurst.com",
+    ".bankofhollysprings.com",
+    ".bankofhwfs.com",
+    ".bankofillinois.com",
+    ".bankofindia.com",
+    ".bankofireland.com",
+    ".bankofireland.ie",
+    ".bankofjordan.com.jo",
+    ".bankoflouisiana.com",
+    ".bankoflouisville.com",
+    ".bankofmapleplain.com",
+    ".bankofmarin.com",
+    ".bankofmonticello.com",
+    ".bankofneworleans.net",
+    ".bankofny.com",
+    ".bankofpensacola.com",
+    ".bankofromney.net",
+    ".bankofthelakes.com",
+    ".bankofthesierra.com",
+    ".bankofwalterboro.com",
+    ".bankofwashington.com",
+    ".bankofwausau.com",
+    ".bankofwinona.com",
+    ".bankofzumbrota.com",
+    ".bankone.com",
+    ".bankone.com.au",
+    ".bankozarks.com",
+    ".bankrate.com",
+    ".bankrepublic.com",
+    ".bankri.com",
+    ".banksa.com.au",
+    ".banksandiego.com",
+    ".banksc.com",
+    ".bankvista.com",
+    ".bankwest-sd.com",
+    ".bankwest.ca",
+    ".bankwi.com",
+    ".bankwithpsb.com",
+    ".banpais.hn",
+    ".banque-accord.fr",
+    ".banque-courtois.fr",
+    ".banque-france.fr",
+    ".banque.com",
+    ".banque.fr",
+    ".banqueagf.fr",
+    ".banquecentrale.gov.sy",
+    ".banquefinama.fr",
+    ".banquepopulaire.fr",
+    ".banqueroyale.ca",
+    ".banqueroyale.com",
+    ".banrisul.com.br",
+    ".barclaycard.de",
+    ".barclays.es",
+    ".barclays.fr",
+    ".barclays.pt",
+    ".barringtonbank.com",
+    ".bartowcountybank.com",
+    ".basisbank.dk",
+    ".bassandequitable.com.au",
+    ".baybank.org",
+    ".baycitiesbank.net",
+    ".bbandt.com",
+    ".bbin.ru",
+    ".bbk.es",
+    ".bbobank.ch",
+    ".bbt.com",
+    ".bbva.es",
+    ".bcb.gov.br",
+    ".bccbuccino.it",
+    ".bcccarate.it",
+    ".bcccascia.it",
+    ".bccroscigno.it",
+    ".bccsanmarzano.it",
+    ".bcctriuggio.it",
+    ".bcp.it",
+    ".bde.es",
+    ".bdg.ch",
+    ".bem.md",
+    ".bemo.fr",
+    ".bes.es",
+    ".betterbanks.com",
+    ".beverlycoop.com",
+    ".bforbank.com",
+    ".bibank.com",
+    ".bicsa.com",
+    ".bigskybank.com",
+    ".binbank.ru",
+    ".biochim.com",
+    ".birdislandbank.com",
+    ".bjd.ch",
+    ".blcnet.com",
+    ".blkb.ch",
+    ".blsk.de",
+    ".bml.com.lb",
+    ".bmoharris.com",
+    ".bnc.ca",
+    ".bnccorp.com",
+    ".bnpparibas.com",
+    ".bnpparibas.com.hk",
+    ".bnpparibas.fr",
+    ".bnpparibas.lu",
+    ".bnpparibas.net",
+    ".bnv.co.cr",
+    ".bnza.com.au",
+    ".boc.ru",
+    ".bofm.com",
+    ".bok.or.kr",
+    ".bonhote.ch",
+    ".boq.com.au",
+    ".borregospringsbank.com",
+    ".botw-ep.com",
+    ".boursorama.com",
+    ".bplc.fr",
+    ".bpp.pt",
+    ".bradesco.com.br",
+    ".bradfordfsb.com",
+    ".bradynationalbank.com",
+    ".brainerdsavings.com",
+    ".brannenbanks.com",
+    ".brcbank.com",
+    ".brickyardbank.net",
+    ".bridgewatersavings.com",
+    ".brooklinebank.com",
+    ".brooklinecoop.com",
+    ".brooklynbank.com",
+    ".brunswickbank.com",
+    ".bsgv.ru",
+    ".bso.com.sy",
+    ".bsvnet.com",
+    ".bundesbank.de",
+    ".burlbank.com",
+    ".bzbank.ch",
+    ".ca-alpesprovence.fr",
+    ".ca-anjou-maine.fr",
+    ".ca-aquitaine.fr",
+    ".ca-atlantique-vendee.fr",
+    ".ca-cb.fr",
+    ".ca-centrefrance.fr",
+    ".ca-centreloire.fr",
+    ".ca-centreouest.fr",
+    ".ca-centrest.fr",
+    ".ca-charente-perigord.fr",
+    ".ca-cib.fr",
+    ".ca-corse.fr",
+    ".ca-cotesdarmor.fr",
+    ".ca-des-savoie.fr",
+    ".ca-finistere.fr",
+    ".ca-gard.fr",
+    ".ca-guadeloupe.fr",
+    ".ca-illeetvilaine.fr",
+    ".ca-languedoc.fr",
+    ".ca-loirehauteloire.fr",
+    ".ca-martinique.fr",
+    ".ca-midi.fr",
+    ".ca-mozaic.com",
+    ".ca-nmp.fr",
+    ".ca-normand.fr",
+    ".ca-normandie-seine.fr",
+    ".ca-pca.fr",
+    ".ca-reunion.fr",
+    ".ca-sudmed.fr",
+    ".ca-sudrhonealpes.fr",
+    ".ca-toulousain.fr",
+    ".ca-tourainepoitou.fr",
+    ".cai.es",
+    ".caisse-epargne.fr",
+    ".caixa-enginyers.com",
+    ".caixacat.com",
+    ".caixacatalunya.es",
+    ".caixagalicia.es",
+    ".caixagirona.es",
+    ".caixajove.com",
+    ".caixalaietana.es",
+    ".caixamanlleu.es",
+    ".caixamanresa.com",
+    ".caixamanresa.es",
+    ".caixaontinyent.es",
+    ".caixasabadell.es",
+    ".caixatarragona.es",
+    ".caixaterrassa.com",
+    ".caja-granada.es",
+    ".caja-ingenieros.es",
+    ".cajabadajoz.es",
+    ".cajacaminos.es",
+    ".cajacampo.es",
+    ".cajacanarias.es",
+    ".cajacirculo.es",
+    ".cajadeavila.es",
+    ".cajadeburgos.es",
+    ".cajaduero.es",
+    ".cajaen.es",
+    ".cajaespana.es",
+    ".cajaextremadura.es",
+    ".cajalaboral.es",
+    ".cajalon.es",
+    ".cajamadrid.es",
+    ".cajamurcia.es",
+    ".cajapamplona.es",
+    ".cajarioja.es",
+    ".cajarural.com",
+    ".cajasegovia.es",
+    ".cajastur.es",
+    ".cajasur.es",
+    ".cajavital.es",
+    ".calbankers.com",
+    ".calbanktrust.com",
+    ".calhounbanks.com",
+    ".calyon.com",
+    ".cam.es",
+    ".cambridgesavings.com",
+    ".can.es",
+    ".canonbank.com",
+    ".cantonfarmersstatebank.com",
+    ".capfed.com",
+    ".capitalbank-nc.com",
+    ".capitalfarmcredit.com",
+    ".capitolbank.com",
+    ".carismi.it",
+    ".carolinabank.net",
+    ".carrolltonbank.com",
+    ".cascadebank.com",
+    ".cattlebank.com",
+    ".cba-ok.org",
+    ".cba.am",
+    ".cba.ca",
+    ".cbaaonline.com",
+    ".cbai.org",
+    ".cbak.com",
+    ".cbankandtrust.com",
+    ".cbao.com",
+    ".cbaofga.com",
+    ".cbbonline.net",
+    ".cbbwi.com",
+    ".cbchaska.com",
+    ".cbclientsfirst.com",
+    ".cbnk.com",
+    ".cbnm.com",
+    ".cbo-oman.org",
+    ".cboktulsa.com",
+    ".cbq.com.qa",
+    ".cbr.ru",
+    ".cbt.net",
+    ".cbtks.com",
+    ".cbtwaco.com",
+    ".cbwc.com",
+    ".ccb.ru",
+    ".ccbank.bg",
+    ".ccblv.com",
+    ".ccm.es",
+    ".ccm.rzb.at",
+    ".ccso.fr",
+    ".cdic.ca",
+    ".ceca.es",
+    ".centerbankjax.com",
+    ".centier.com",
+    ".centralbank.com",
+    ".centralbank.net",
+    ".centralbank.org.bb",
+    ".centralbankbahamas.com",
+    ".centralbanksavannah.com",
+    ".centralbk.com",
+    ".centralbnk.com",
+    ".centralnational.com",
+    ".centralvalleybank.com",
+    ".centreville-nat-bank.com",
+    ".century-bank.com",
+    ".cf.ru",
+    ".cfbk.com",
+    ".cfsb.com",
+    ".champlainbank.com",
+    ".charlottestatebank.com",
+    ".charterbankwa.com",
+    ".charternationalbank.com",
+    ".charterone.com",
+    ".chase.com",
+    ".chemicalbankmi.com",
+    ".chestercountybank.com",
+    ".chevychasebank.com",
+    ".chinabank.com.ph",
+    ".chinabank.ph",
+    ".choiceone.com",
+    ".cib.org",
+    ".cic.fr",
+    ".cimbanque.ch",
+    ".cimoney.com.ky",
+    ".citibank.com",
+    ".citibank.com.au",
+    ".citibank.com.hk",
+    ".citibank.com.ph",
+    ".citibank.com.sg",
+    ".citizensbank.com",
+    ".citizenscommunitybank.com",
+    ".citizensebank.com",
+    ".citizensmn.com",
+    ".citizensnb.com",
+    ".citizensonline.com",
+    ".citizenssb.com",
+    ".citynationalbank.com",
+    ".citystatebank.com",
+    ".citystatesavings.com",
+    ".claremontsavings.com",
+    ".clarendonhillsbank.com",
+    ".clearcreeknationalbank.com",
+    ".cler.ch",
+    ".clevelandstatebank.com",
+    ".clientis.ch",
+    ".clintonnational.com",
+    ".clintonsavings.com",
+    ".clydesavings.com",
+    ".cmba.com",
+    ".cmba.org",
+    ".cnb-brownwood.com",
+    ".cnb1.com",
+    ".cnbankpa.com",
+    ".cnbgreeley.com",
+    ".cnbil.com",
+    ".cnbohio.com",
+    ".cnbs.gov.hn",
+    ".cnbt.com",
+    ".cnbthebank.com",
+    ".cnbtn.com",
+    ".cnbtopeka.com",
+    ".co-opbank.co.ke",
+    ".co-operativebank.co.uk",
+    ".coebank.org",
+    ".cohuttabank.com",
+    ".colobank.com",
+    ".colonialbank.com",
+    ".colonya.es",
+    ".colonybank.com",
+    ".columbiabank.com",
+    ".columbusbankandtrust.com",
+    ".columbusmba.org",
+    ".comafi.com.ar",
+    ".comdirect.de",
+    ".comerica.com",
+    ".commbank.com.au",
+    ".commbanksofco.com",
+    ".commercialbank-stl.com",
+    ".commercialstate.com",
+    ".commerzbank.com",
+    ".commerzbank.de",
+    ".commfed.com",
+    ".communitybankers.org",
+    ".communitybankofsmithcounty.com",
+    ".communitybanks.org",
+    ".communitybanksj.com",
+    ".communitybankws.com",
+    ".communityelmhurst.com",
+    ".communitynationalbank.com",
+    ".compassweb.com",
+    ".consumersbank.com",
+    ".conwaynationalbank.com",
+    ".copiahbank.com",
+    ".cornhuskerbank.com",
+    ".corpbank.com",
+    ".cortalconsors.de",
+    ".cortalconsors.lu",
+    ".corusbank.com",
+    ".cosmosbank.com",
+    ".countrybank.com",
+    ".countryclubbank.com",
+    ".countynationalbank.com",
+    ".cracortina.it",
+    ".credit-agricole.fr",
+    ".credit-cooperatif.coop",
+    ".credit-du-nord.fr",
+    ".credit-municipal-toulouse.fr",
+    ".creditmutuel.com",
+    ".creditmutuel.fr",
+    ".crossplainsbank.com",
+    ".crowriverbank.com",
+    ".crystallakebank.com",
+    ".csb.co.in",
+    ".csb4me.com",
+    ".csbindianola.com",
+    ".csbloyal.com",
+    ".csbnj.com",
+    ".csbonline.com",
+    ".csbt.com",
+    ".cspb.com",
+    ".ctcbonline.com",
+    ".cwbank.com",
+    ".cwt.ca",
+    ".dab-bank.de",
+    ".dacotahbank.com",
+    ".dahsing.com.hk",
+    ".daimlerchrysler-bank.com",
+    ".dairybank.com",
+    ".dallasfed.org",
+    ".damariscottabank.com",
+    ".danskebank.dk",
+    ".db.com",
+    ".dcbl.com",
+    ".deanbank.com",
+    ".debankers.com",
+    ".deforestbank.com",
+    ".dekalbcommunitybank.com",
+    ".delubac.com",
+    ".deutsche-bank.de",
+    ".deutsche-bank.es",
+    ".deutschebank.be",
+    ".devonbank.com",
+    ".diamantbank.ua",
+    ".dime.com",
+    ".direktbank.nl",
+    ".djurslandsbank.dk",
+    ".dollarbank.com",
+    ".dresdner-bank.com",
+    ".dresdner-bank.de",
+    ".drydenbank.com",
+    ".dsbbank.nl",
+    ".dubuquebank.com",
+    ".eagle-bank.com",
+    ".eaglebankmn.com",
+    ".eaglenational.com",
+    ".eastern-savings.com",
+    ".ebank.com",
+    ".ebanka.cz",
+    ".ebrd.com",
+    ".ebsb.com",
+    ".edensbank.com",
+    ".eek.ch",
+    ".efirstbank.com",
+    ".eki.ch",
+    ".elders.com.au",
+    ".eldoradosavings.com",
+    ".elsb.com",
+    ".enorthfield.com",
+    ".enterprisebankpgh.com",
+    ".enterpriseebank.com",
+    ".envirobank.org",
+    ".equitableonline.com",
+    ".esmba.org",
+    ".essexsavings.com",
+    ".etrust.ru",
+    ".eurambank.com",
+    ".eurekabancorp.com",
+    ".eurepo.org",
+    ".everbank.com",
+    ".everettbank.com",
+    ".eximb.com",
+    ".eximbank.gov.tr",
+    ".expobank.ru",
+    ".ezybanking.com.au",
+    ".fac.com",
+    ".fairfieldcountysavings.com",
+    ".fairfieldfederal.com",
+    ".familyofbanks.com",
+    ".fandmstbk.com",
+    ".farmcreditbank.com",
+    ".farmersandmerchants.biz",
+    ".farmersbanknc.com",
+    ".fba.is",
+    ".fbbmilwaukee.com",
+    ".fbtbly.com",
+    ".fbtet.com",
+    ".fcbanktn.com",
+    ".fcbinc.com",
+    ".fcbmilton.com",
+    ".fcbohio.com",
+    ".fcbok.com",
+    ".fcbtn.com",
+    ".fcbweb.net",
+    ".federal-bank.com",
+    ".federaltrust.com",
+    ".ffb-sd.com",
+    ".ffb.com",
+    ".ffbh.com",
+    ".ffbnk.com",
+    ".ffbtn.com",
+    ".ffl.net",
+    ".ffmbank.com",
+    ".ffpa.com",
+    ".ffsb.com",
+    ".fghbank.nl",
+    ".fhb.com",
+    ".fhlb.com",
+    ".fib.com.ua",
+    ".fiba.net",
+    ".fibanc.es",
+    ".fibank.bg",
+    ".fidelitybank.com",
+    ".fih.dk",
+    ".finance.luxweb.com",
+    ".fincombank.com",
+    ".fioniabank.dk",
+    ".first-citizens.com",
+    ".first-state.net",
+    ".firstambank.com",
+    ".firstarkansasbank.com",
+    ".firstbankofdalton.com",
+    ".firstbanks.com",
+    ".firstcentralbank.com",
+    ".firstcitizens.com",
+    ".firstcitybank.com",
+    ".firstcommunbanktifton.com",
+    ".firstcountybank.com",
+    ".firstdakota.com",
+    ".firstfd.com",
+    ".firstfedbankkc.com",
+    ".firstfederalbank.com",
+    ".firstfedlc.com",
+    ".firstfedsavingsbank.com",
+    ".firstib.com",
+    ".firstindiana.com",
+    ".firstinterstatebank.com",
+    ".firstkeystone.com",
+    ".firstmerit.com",
+    ".firstmid.com",
+    ".firstnationalbankjackson.com",
+    ".firstnationalfinancial.com",
+    ".firstnavybank.com",
+    ".firstnebraskabank.com",
+    ".firstpeoplesbank.net",
+    ".firstreliance.com",
+    ".firstrepublic.com",
+    ".firstscotia.com",
+    ".firstsecuritybk.com",
+    ".firstsouthnc.com",
+    ".firststatebnk.com",
+    ".firstunited.net",
+    ".firstusa.com",
+    ".firstvirginia.com",
+    ".fitd.it",
+    ".fjsb.com",
+    ".flatbush.com",
+    ".florencestatebank.com",
+    ".fmb-ebank.com",
+    ".fmbancorp.com",
+    ".fmbanknym.com",
+    ".fmbankokc.com",
+    ".fmnb.com",
+    ".fmpaynesville.com",
+    ".fmsb.com",
+    ".fmsb4me.com",
+    ".fmub.com",
+    ".fnb-columbia.com",
+    ".fnb-trust.com",
+    ".fnb.co.za",
+    ".fnbabilene.com",
+    ".fnbalaska.com",
+    ".fnbames.com",
+    ".fnbanky.com",
+    ".fnbbellville.com",
+    ".fnbberryville.com",
+    ".fnbbh.com",
+    ".fnbchillicothe.net",
+    ".fnbcoweta.com",
+    ".fnbdanville.com",
+    ".fnbdavis.com",
+    ".fnbec.com",
+    ".fnbgrayson.com",
+    ".fnbhico.com",
+    ".fnblebanon.com",
+    ".fnbmontana.com",
+    ".fnbnamibia.com.na",
+    ".fnbnd.com",
+    ".fnbromney.com",
+    ".fnbsc.com",
+    ".fnbscott.com",
+    ".fnbsf.com",
+    ".fnbtrenton.com",
+    ".fnbwadena.com",
+    ".fnbwyo.com",
+    ".fnh.no",
+    ".foothillsbank.com",
+    ".forabank.ru",
+    ".foreningssparbanken.se",
+    ".fortisbank.com",
+    ".fortressbankmn.com",
+    ".fortressbanks.com",
+    ".fortuneo.fr",
+    ".fortworthmba.org",
+    ".framinghamcoop.com",
+    ".franklinbank.com",
+    ".franklinnetbranch.com",
+    ".fransabank.com.lb",
+    ".fraud-net.com",
+    ".freedombankwv.com",
+    ".freeway-bitburg.de",
+    ".fremontbank.com",
+    ".frontierbank.com",
+    ".fsbankmctn.com",
+    ".fsbdent-perham.com",
+    ".fsbme.com",
+    ".fsbmendota.com",
+    ".fsbnh.com",
+    ".fsbperkasie.com",
+    ".fsbshallowater.com",
+    ".fsbtc.com",
+    ".fsbwabasha.com",
+    ".fsbwaupaca.com",
+    ".fsbwc.com",
+    ".fsbweb.com",
+    ".fscb.com",
+    ".fsnbank.com",
+    ".fstbnk.com",
+    ".fuggerbank.de",
+    ".fultonbank.com",
+    ".fundmoremerchantbank.com",
+    ".gabankers.com",
+    ".garanti.com.tr",
+    ".garantibank.com",
+    ".garantiedesdepots.fr",
+    ".gatewaybank.com",
+    ".gbba.net",
+    ".gbtcalhoun.com",
+    ".gcmba.net",
+    ".gcsbank.com",
+    ".gdb-pur.com",
+    ".gdwbank.com",
+    ".gecapitalbank.it",
+    ".gecapitalbank.se",
+    ".gelon.de",
+    ".gemoney.ch",
+    ".geneseeregionalbank.com",
+    ".genovolksbank.de",
+    ".georgetownsb.com",
+    ".giantbank.com",
+    ".gibraltarbank.com",
+    ".gibslandbank.com",
+    ".gilbertbank.com",
+    ".gkb.ch",
+    ".glacierbank.com",
+    ".glkb.ch",
+    ".gls-bank.de",
+    ".gnty.com",
+    ".golfsavingsbank.com",
+    ".gorhamsavingsbank.com",
+    ".gotocsb.com",
+    ".grabillbank.com",
+    ".grandbankflorida.com",
+    ".greatbasinbank.com",
+    ".greaterromebank.com",
+    ".greatsouthernbank.com",
+    ".greenfieldsavings.com",
+    ".greenvillesavings.com",
+    ".greenwoodsstatebank.com",
+    ".griffonbank.com",
+    ".gutzwiller.ch",
+    ".gwk.nl",
+    ".habcorp.com",
+    ".hadstenbank.dk",
+    ".handelsbanken.dk",
+    ".handelsbanken.se",
+    ".hangseng.com",
+    ".hanvitbank.co.kr",
+    ".harrisbank.com",
+    ".haspa.de",
+    ".hawaiinational.com",
+    ".hbl.ch",
+    ".heartland-bank.com",
+    ".heartlandbank.com",
+    ".hebervalleybank.com",
+    ".hendersonbancshares.com",
+    ".hendrickscountybank.com",
+    ".henrycountybank.com",
+    ".heritagebankna.com",
+    ".heritagebk.com",
+    ".heritageiowa.com",
+    ".heritagelandbank.com",
+    ".heritageonline.com.au",
+    ".hersheybank.com",
+    ".hf-wa.com",
+    ".hiawatha-nb.com",
+    ".hiberniabank.com",
+    ".highpointbank.com",
+    ".hinghamsavings.com",
+    ".hinsdalebank.com",
+    ".hkab.org.hk",
+    ".hnbwyo.com",
+    ".hoernerbank.de",
+    ".home-savings.com",
+    ".homecredit.ru",
+    ".homefed.com",
+    ".homefederal.com",
+    ".homefederalbank.com",
+    ".homefedgi.com",
+    ".homestreetbank.com",
+    ".horizonbank.com",
+    ".houston-mba.com",
+    ".hsbc.com",
+    ".hsbc.com.au",
+    ".hsbc.com.br",
+    ".hsbc.com.my",
+    ".hsbc.com.sg",
+    ".hsbc.com.tr",
+    ".hsbc.fr",
+    ".hsbcprivatebankfrance.com",
+    ".hsbofmn.com",
+    ".hsh-nordbank.de",
+    ".hudsonriverbank.com",
+    ".hudsonvalleybank.com",
+    ".hvidbjergbank.dk",
+    ".hyposwiss.ch",
+    ".hypotecnibanka.cz",
+    ".ibc.com",
+    ".ibcbanks.org",
+    ".iberiabank.com",
+    ".ibf.ie",
+    ".ibfed.org",
+    ".icba.nm.org",
+    ".icbanka.cz",
+    ".icicibank.ca",
+    ".icicibank.com",
+    ".idahotrust.com",
+    ".idbibank.com",
+    ".ifbag.com",
+    ".ifibank.com",
+    ".ifigest.it",
+    ".ifsaonline.org",
+    ".ifsb.com",
+    ".ifsl.org.uk",
+    ".iib.org",
+    ".iibonline.org",
+    ".ikanobanken.se",
+    ".illinistatebank.com",
+    ".imb.ru",
+    ".impexbank.ru",
+    ".inbankers.org",
+    ".independent-bank.com",
+    ".indianamba.org",
+    ".indianbanksassociation.org",
+    ".indymacbank.com",
+    ".ing-diba.de",
+    ".ing.ru",
+    ".ingbank.nl",
+    ".ingdirect.com.au",
+    ".ingdirect.es",
+    ".ingdirect.fr",
+    ".ingdirect.it",
+    ".insouth.com",
+    ".insurorsbank.com",
+    ".integrabank.com",
+    ".intercreditbank.com",
+    ".iowastatebanks.com",
+    ".irbbank.ch",
+    ".ironbank.com",
+    ".isb-algona.com",
+    ".isbank.com.tr",
+    ".isbank.is",
+    ".itascabank.com",
+    ".itau.com.br",
+    ".jacksoncountybank.com",
+    ".jacksonvillesavings.com",
+    ".jak.se",
+    ".jba.org.jm",
+    ".jbpb.com",
+    ".jcbank.com",
+    ".jcsbank.com",
+    ".jdbank.com",
+    ".jefferson-bank.com",
+    ".jerseybankersassociation.com",
+    ".jifbank.com",
+    ".jkbank.net",
+    ".jncb.com",
+    ".jordan-kuwait-bank.com",
+    ".jordanislamicbank.com",
+    ".jpmorgan.com",
+    ".justcallhome.com",
+    ".jvbonline.com",
+    ".jyskebank.fr",
+    ".kaba.hr",
+    ".kennebunksavings.com",
+    ".kennettnationalbank.com",
+    ".keysbank.net",
+    ".khbank.ru",
+    ".kib-banka.com.ba",
+    ".kingstonnationalbank.com",
+    ".kishbank.com",
+    ".kitsapbank.com",
+    ".kmb.ru",
+    ".knbt.com",
+    ".koblenzer-volksbank.de",
+    ".kommunalkredit.at",
+    ".koreaexim.go.kr",
+    ".kotakmahindrabank.com",
+    ".krediidipank.ee",
+    ".kreditbanken.dk",
+    ".kreditprombank.com",
+    ".kredytbank.com.ua",
+    ".ksbankers.com",
+    ".ksk-bc.de",
+    ".kskbb.de",
+    ".ksklb.de",
+    ".kutxa.es",
+    ".labanquepostale.fr",
+    ".lacaixa.es",
+    ".lais.is",
+    ".lakeareabank.com",
+    ".lakeelmobank.com",
+    ".lakeforestbank.com",
+    ".lakewoodbank.com",
+    ".lanef.com",
+    ".larural.es",
+    ".lasallebank.com",
+    ".laurentianbank.ca",
+    ".laurentianbank.com",
+    ".lawrencesavings.com",
+    ".lba.org",
+    ".lbb.de",
+    ".lbt.com",
+    ".lbtbank.com",
+    ".lbtc.com",
+    ".lcl.com",
+    ".lcl.fr",
+    ".ledyardbank.com",
+    ".leihkasse-stammheim.ch",
+    ".liberty-bank.com",
+    ".libertybankofutah.com",
+    ".libertysavings.com",
+    ".libertyvillebank.com",
+    ".linolakesstatebank.com",
+    ".littleriverbank.com",
+    ".lloydsbank.es",
+    ".lmla.com",
+    ".lonestarflba.com",
+    ".lowellcoop.com",
+    ".ls-bank.com",
+    ".lsb.dk",
+    ".lsbdirect.com",
+    ".lsbnc.com",
+    ".lutherbsavings.com",
+    ".luzerner-regiobank.ch",
+    ".lvbank.com",
+    ".maconbank.com",
+    ".macquarie.com.au",
+    ".maerkische-bank.de",
+    ".magbank.com",
+    ".mahaskabank.com",
+    ".mainebank.com",
+    ".manasquanbank.com",
+    ".mandmbank.com",
+    ".mandtbank.com",
+    ".mansfieldbank.com",
+    ".manubank.com",
+    ".marinebankers.org",
+    ".marlboroughsavings.com",
+    ".mascomabank.com",
+    ".massbankers.org",
+    ".massmba.com",
+    ".maxblue.de",
+    ".maybank.com.sg",
+    ".mazobank.com",
+    ".mazonstatebank.com",
+    ".mba-pa.org",
+    ".mbaa.org",
+    ".mbaal.org",
+    ".mbaar.org",
+    ".mbac.org",
+    ".mbaf.org",
+    ".mbag.org",
+    ".mbagp.org",
+    ".mbalou.org",
+    ".mbamw.org",
+    ".mbanj.com",
+    ".mbank.com.pl",
+    ".mbanwo.com",
+    ".mbaofjax.org",
+    ".mbaofpr.com",
+    ".mbaot.org",
+    ".mbastl.com",
+    ".mbaswf.org",
+    ".mbba-nh.org",
+    ".mbna.com",
+    ".mbvt.com",
+    ".mcb-bank.com",
+    ".mcb.com.pk",
+    ".mcintoshbancshares.com",
+    ".mcsbnh.com",
+    ".mdbankers.com",
+    ".mdmba.org",
+    ".mdmbank.ru",
+    ".mecb.com",
+    ".mechanicsbank.com",
+    ".mechbank.com",
+    ".medbank.lt",
+    ".mediobanca.it",
+    ".megabank.net",
+    ".meib.com",
+    ".meinlbank.com",
+    ".meliorbanca.it",
+    ".melrosecoop.com",
+    ".mercantilebk.com",
+    ".merckfinck.de",
+    ".merkurbank.dk",
+    ".merrillmerchants.com",
+    ".metbank.com",
+    ".metcalfbank.com",
+    ".metropolitanbank.com",
+    ".metuchensavingsbank.com",
+    ".mfbank.com",
+    ".mfbonline.com",
+    ".miba.net",
+    ".mibank.com",
+    ".mibankers.com",
+    ".mibonline.org",
+    ".midpennbank.com",
+    ".midstatebank.com",
+    ".midwestbank.net",
+    ".midwestbankcentre.com",
+    ".midwesttrust.com",
+    ".midwisc.com",
+    ".milfordbank.com",
+    ".millingtonsb.com",
+    ".milwaukeewesternbank.com",
+    ".mindenexchange.com",
+    ".minnbankers.com",
+    ".missionoaksbank.com",
+    ".mittelstandskreditbank.de",
+    ".mlastan.com",
+    ".mmbank.com",
+    ".mmbank.ru",
+    ".mnb1.com",
+    ".mobankers.com",
+    ".modern-banking.at",
+    ".modern-banking.de",
+    ".monaco-privatebanking.com",
+    ".monbanquierenligne.fr",
+    ".monitorbank.com",
+    ".mononabank.com",
+    ".montecito.com",
+    ".morganbank.net",
+    ".morrisstate.com",
+    ".mortgagemaine.com",
+    ".moundcitybank.com",
+    ".ms-bank.com",
+    ".msbankers.com",
+    ".msbonline.com",
+    ".mslandbank.com",
+    ".mteb.ru",
+    ".mtmckinleybank.com",
+    ".muamalat.com.my",
+    ".mvbankonline.com",
+    ".mvsb.com",
+    ".my-direktbank.de",
+    ".mycgb.com",
+    ".myhomefed.com",
+    ".myprovident.com",
+    ".mysunrisebank.com",
+    ".nab.ch",
+    ".nabard.org",
+    ".nasb.com",
+    ".nasbank.bg",
+    ".natbank.co.mw",
+    ".natbankmal.com",
+    ".national-city.com",
+    ".national.com.au",
+    ".nationalbanken.dk",
+    ".nationalbanksc.com",
+    ".nationalcity.com",
+    ".nationalinterbank.com",
+    ".natlbank.com",
+    ".nba.ai",
+    ".nbank.de",
+    ".nbbank.com",
+    ".nbbonline.com",
+    ".nbc.ca",
+    ".nbcal.com",
+    ".nbcbham.com",
+    ".nbp.pl",
+    ".nbrm.gov.mk",
+    ".nbtdirect.com",
+    ".nbwc.com",
+    ".ncbankers.org",
+    ".ncbcayman.com",
+    ".ndba.com",
+    ".nebankers.org",
+    ".netbank.com",
+    ".netbank.de",
+    ".netdsb.com",
+    ".nevadacommercebank.com",
+    ".newsouthfederal.com",
+    ".nhbankers.com",
+    ".nib.ie",
+    ".nicbonline.com",
+    ".nittanybank.com",
+    ".nkb.ch",
+    ".nmbank.com",
+    ".nmbankers.com",
+    ".noerresundbybank.dk",
+    ".nor.no",
+    ".nordea.lt",
+    ".nordea.se",
+    ".nordfynsbank.dk",
+    ".nordjyskebank.dk",
+    ".norrybank.com",
+    ".northcoastbank.com",
+    ".northcommunitybank.com",
+    ".northeastbank.com",
+    ".northforkbank.com",
+    ".northhoustonbank.com",
+    ".northrim.com",
+    ".northshorebank.com",
+    ".northshoretrust.com",
+    ".northstarccu.com",
+    ".northwestsavingsbank.com",
+    ".northwoodsbank.com",
+    ".novb.com",
+    ".nsbank.com",
+    ".nsbbank.com",
+    ".nsbov.com",
+    ".nsbvt.com",
+    ".nstarbank.com",
+    ".nvbank.com",
+    ".nvebank.com",
+    ".nwb.nl",
+    ".nyba.com",
+    ".nykredit.dk",
+    ".nz.ru",
+    ".o2bancorp.com",
+    ".oba.com",
+    ".obabank.com",
+    ".oberbank.at",
+    ".ocbc.com.my",
+    ".ocbc.com.sg",
+    ".oceansidebank.com",
+    ".oeb.se",
+    ".oenb.at",
+    ".oevag.com",
+    ".ohiomba.org",
+    ".ohiosavings.com",
+    ".old2nd.com",
+    ".omahastate.com",
+    ".online.citibank.co.in",
+    ".onlinebanking-psd-braunschweig.de",
+    ".openbank.es",
+    ".optimumbank.com",
+    ".oregonbankers.com",
+    ".oregontrailbank.com",
+    ".orgresbank.com",
+    ".ossianstatebank.com",
+    ".osuuspankki.fi",
+    ".otto.fi",
+    ".ourbank.com",
+    ".ozarkbank.com",
+    ".ozaukeebank.com",
+    ".ozkmtnbank.com",
+    ".pabanker.com",
+    ".pacifictrustbank.com",
+    ".palmettobank.com",
+    ".paragonbankmn.com",
+    ".parex.ru",
+    ".paritate.lv",
+    ".parkbank.com",
+    ".parknationalbank.com",
+    ".parkviewfederal.com",
+    ".partnersbank.com",
+    ".passbanca.it",
+    ".passumpsicbank.com",
+    ".pastatebank.com",
+    ".pathfinderbank.com",
+    ".paypal.com",
+    ".paypal.de",
+    ".pbb.com.ph",
+    ".pbbanking.com",
+    ".pbsbank.ch",
+    ".pcbanker.com",
+    ".pcfinancial.ca",
+    ".peacehills.com",
+    ".peoples.com",
+    ".peoplesbankbyrdstown.com",
+    ".peoplesbanktrust.com",
+    ".peoplesbk.com",
+    ".peoplesexchangebk.com",
+    ".peoplesgraceville.com",
+    ".peoplesnationalbank.com",
+    ".persiabank.co.uk",
+    ".pfandbrief.org",
+    ".pfsb.com",
+    ".phenix-girard.com",
+    ".phoenixsavings.com",
+    ".picena.bcc.it",
+    ".piedmontfederal.com",
+    ".pineislandbank.com",
+    ".pineriverstatebank.com",
+    ".pinnbank.com",
+    ".pioneerbankandtrust.com",
+    ".piscataqua.com",
+    ".pittsfieldco-op.com",
+    ".planters-bank.com",
+    ".plaqbank.com",
+    ".plazabankillinois.com",
+    ".pnb.com.ph",
+    ".pnbindia.com",
+    ".pnbrci.com",
+    ".pncbank.com",
+    ".pointebank.com",
+    ".popcortona.it",
+    ".porschebank.at",
+    ".portalino.it",
+    ".postalbank.gov.ph",
+    ".postbank.bg",
+    ".postbank.de",
+    ".postbank.nl",
+    ".presidential.com",
+    ".principal.com",
+    ".priorbank.by",
+    ".privatebanking.info",
+    ".privatetrustco.com",
+    ".pro-org.de",
+    ".procreditbank.bg",
+    ".profinium.com",
+    ".prosperitybanktx.com",
+    ".providentnj.com",
+    ".providian.com",
+    ".prudentialsavingsbank.com",
+    ".psbank.ru",
+    ".psbnetbank.com",
+    ".psmla.com",
+    ".ptsbank.com",
+    ".pueblobankandtrust.com",
+    ".pwbank.com",
+    ".qantascu.com.au",
+    ".qatarbank.com",
+    ".qcsb.com",
+    ".qnb.com",
+    ".quaintoak.com",
+    ".r2p.de",
+    ".rabobank.com",
+    ".rabobank.nl",
+    ".raiba-grevenbroich.de",
+    ".raiba-hof.de",
+    ".raibaweb.de",
+    ".raiffeisen-bank.ba",
+    ".raiffeisen.bg",
+    ".raiffeisen.pl",
+    ".raiffeisen.ru",
+    ".rbap.org",
+    ".rbi.org.in",
+    ".rbtl.de",
+    ".realkreditraadet.dk",
+    ".regentsbank.com",
+    ".regiogeld.de",
+    ".regions.com",
+    ".reims.bnp.fr",
+    ".reisebank.de",
+    ".reliabank.com",
+    ".republicbancorp.com",
+    ".republicbank.com",
+    ".reservebank.gov.fj",
+    ".rib.ru",
+    ".richlandbank.com",
+    ".ridgewoodbank.com",
+    ".rietumu.lv",
+    ".rimba.org",
+    ".riverviewbank.com",
+    ".rjbank.com",
+    ".rmbank.com",
+    ".rocklandtrust.com",
+    ".rolfestatebank.com",
+    ".rosedalefederal.com",
+    ".rosemountbank.com",
+    ".royalbank.ca",
+    ".royalbank.com",
+    ".royalguardian.com.au",
+    ".rrsb.com",
+    ".rs.ru",
+    ".ruralvia.com",
+    ".rurbanfinancial.net",
+    ".russbank.ru",
+    ".s-b-a.com",
+    ".s24.is",
+    ".sabadellatlantico.com",
+    ".sachsenlb.de",
+    ".samba.com.sa",
+    ".santander.com.br",
+    ".santander.de",
+    ".sarasin.com",
+    ".sarasin.lu",
+    ".saraswatbank.com",
+    ".savingsloans.com.au",
+    ".sbank.ru",
+    ".sbankonline.com",
+    ".sbbgroup.com.my",
+    ".sbbjbank.com",
+    ".sbbt.com",
+    ".sbdanbury.com",
+    ".sbhyd.com",
+    ".sbi.co.in",
+    ".sbijapan.com",
+    ".sbp.co.in",
+    ".sbp.org.pk",
+    ".sbr.com",
+    ".sbroker.de",
+    ".sbsu.com",
+    ".scbankers.org",
+    ".scnb.com",
+    ".scnbank.com",
+    ".scotiabank.com",
+    ".sda.dk",
+    ".seattlemba.org",
+    ".seattlesavingsbank.com",
+    ".seb.ee",
+    ".sebanking.dk",
+    ".secondfederal.com",
+    ".security-banks.com",
+    ".securitybank-albany.com",
+    ".securitybank.com",
+    ".securityfederal.net",
+    ".securitysbank.com",
+    ".sembank.ru",
+    ".senecafederal.com",
+    ".settlersbank.com",
+    ".seviercobank.com",
+    ".shelllakestatebank.com",
+    ".sherburnestatebank.com",
+    ".shkb.ch",
+    ".shorebank.com",
+    ".shorebankcorp.com",
+    ".shorecommunitybank.com",
+    ".simmonsfirst.com",
+    ".sixrivers.com",
+    ".skjernbank.dk",
+    ".slmuensingen.ch",
+    ".sloveniansavings.com",
+    ".slr.ch",
+    ".smbonline.com",
+    ".smolbank.ru",
+    ".snbenid.com",
+    ".snsbank.nl",
+    ".snvb.fr",
+    ".sobinbank.ru",
+    ".societegenerale.fr",
+    ".solbank.com",
+    ".solonstatebank.com",
+    ".somersetsavings.com",
+    ".sormlandssparbank.se",
+    ".southcoastbank.com",
+    ".southcountybank.com",
+    ".southindianbank.com",
+    ".southpointebank.com",
+    ".southportbank.net",
+    ".southwesttexasflba.com",
+    ".sovbank.ru",
+    ".sovereignbank.com",
+    ".sparhim.dk",
+    ".sparkasse-ac.de",
+    ".sparkasse-blomberg.de",
+    ".sparkasse-bochum.de",
+    ".sparkasse-gelsenkirchen.de",
+    ".sparkasse-gm.de",
+    ".sparkasse-muensterland-ost.de",
+    ".sparkasse-paderborn.de",
+    ".sparkasse-schwerte.de",
+    ".sparkasse-warstein-ruethen.de",
+    ".sparkasse.at",
+    ".sparkasse.de",
+    ".sparkron.dk",
+    ".spencersavingsloans.com",
+    ".spk-kg.de",
+    ".spkef.is",
+    ".ssbia.com",
+    ".ssbnd.com",
+    ".ssbnet.com",
+    ".ssbwa.com",
+    ".sskm.de",
+    ".ssnb.com",
+    ".sssb.com",
+    ".staalbankiers.nl",
+    ".standardbank.co.za",
+    ".standardchartered.com.hk",
+    ".standardchartered.com.sg",
+    ".statbank.com",
+    ".statebank-dillon.com",
+    ".statebankmn.com",
+    ".statebankofashland.com",
+    ".statebankofhildreth.com",
+    ".statebankofkimball.com",
+    ".statebankofli.com",
+    ".statebankoflizton.com",
+    ".statebankofodell.com",
+    ".statebankofrichmond.com",
+    ".statebnk.com",
+    ".statecentralbank.com",
+    ".stateinvestors.com",
+    ".statenationalbank.com",
+    ".statesavingsbank.com",
+    ".stearns-bank.com",
+    ".sterlingbank.com",
+    ".sterlingbank.ws",
+    ".sterlingbankfl.com",
+    ".sterlingmontgomery.com",
+    ".sterlingsavingsbank.net",
+    ".sterlingstatebank.com",
+    ".stmarysbank.com",
+    ".stockmanbank.com",
+    ".stonebridgebank.com",
+    ".stonehambank.com",
+    ".stonesav.com",
+    ".stopmortgagefraud.com",
+    ".strat.ru",
+    ".stripe.com",
+    ".stuttgarter-volksbank.de",
+    ".sumterbank.com",
+    ".suncorpmetway.com.au",
+    ".superiorbank.com",
+    ".suupohjanosuuspankki.fi",
+    ".sv-bank.com",
+    ".svabank.ru",
+    ".svcbank.com",
+    ".swbank.com",
+    ".swbanktx.com",
+    ".swbnv.com",
+    ".sydbank.dk",
+    ".syndicatebank.com",
+    ".system-bank.ru",
+    ".szo.ch",
+    ".tabbank.com",
+    ".taib.com",
+    ".taifungbank.com",
+    ".talstatebank.com",
+    ".tarkhanybank.ru",
+    ".tb.dk",
+    ".tcb.ru",
+    ".tcfbank.com",
+    ".tcmb.gov.tr",
+    ".td.com",
+    ".tdbanknorth.com",
+    ".tdcanadatrust.com",
+    ".teb.com.tr",
+    ".territorialsavings.net",
+    ".tetrapolis.spb.ru",
+    ".texasbankers.com",
+    ".texasfirstbanks.com",
+    ".texasflba.com",
+    ".texaslandbank.com",
+    ".texasmba.org",
+    ".texasstatebank.com",
+    ".tfp.com",
+    ".thanejanata.co.in",
+    ".thatsmybank.com",
+    ".the-bank.com",
+    ".thebancorp.com",
+    ".thebankandtrust.com",
+    ".thecoastalbank.com",
+    ".thecombank.com",
+    ".thecommunitysbank.com",
+    ".thecooperativebank.com",
+    ".thecornerstonebank.com",
+    ".thecountybank.com",
+    ".thefarmbank.com",
+    ".thefoothillsbank.com",
+    ".thefsb.com",
+    ".theguarantybank.com",
+    ".theharborbank.com",
+    ".theidahobank.com",
+    ".thelakebank.com",
+    ".thestatebank.com",
+    ".thisisyourbank.com",
+    ".thsbank.com",
+    ".tibbank.com",
+    ".tkb.lv",
+    ".tkbb.org.tr",
+    ".tmba.org",
+    ".tnb.ru",
+    ".tnbank.com",
+    ".tnbankers.org",
+    ".tnbonline.com",
+    ".tncommercebank.com",
+    ".tnmba.org",
+    ".tnmbonline.com",
+    ".townebank.com",
+    ".tradersbank.com",
+    ".tricountybank.com",
+    ".trinitybank.com",
+    ".triodos.be",
+    ".triodos.com",
+    ".triodos.nl",
+    ".tristarbank.com",
+    ".troybankandtrust.com",
+    ".trust.ru",
+    ".trust1bank.com",
+    ".trustar.com.au",
+    ".trustmark.com",
+    ".tskb.com.tr",
+    ".turkishbankers.org",
+    ".turkishbanks.com",
+    ".turkiyefinans.com.tr",
+    ".twinriverbank.com",
+    ".uabonline.org",
+    ".ub-t.com",
+    ".uba.org",
+    ".ubankal.com",
+    ".ubdp.com.ua",
+    ".ubmich.com",
+    ".uboc.com",
+    ".ubs.com",
+    ".ucbankmn.com",
+    ".ucbnd.com",
+    ".ucnb.com",
+    ".ucobank.com",
+    ".ukrgasbank.com",
+    ".ultimabank.com",
+    ".umbrellabank.com",
+    ".umweltbank.de",
+    ".unbank.com",
+    ".unifinbank.ru",
+    ".unionbankjo.com",
+    ".unionbankofblair.com",
+    ".unionbankofindia.co.in",
+    ".unionbankofindia.com",
+    ".unionbankph.com",
+    ".unionsavings.com",
+    ".unionstate.com",
+    ".unionstatebank.org",
+    ".uniontrust.com",
+    ".unitedbankofindia.com",
+    ".unitedbankofmichigan.com",
+    ".unitedcommunitybanks.com",
+    ".unitedprairiebank.com",
+    ".unitedsecuritybank.com",
+    ".unitedtrust.com",
+    ".unitybank.com",
+    ".universalbank.com",
+    ".university-bank.com",
+    ".uob.com.sg",
+    ".usb.com.ua",
+    ".usbank.com",
+    ".ustrust.com",
+    ".vabankers.org",
+    ".vacb.org",
+    ".vakifbank.at",
+    ".valiant.ch",
+    ".valleynationalbank.com",
+    ".valleystatebank.com",
+    ".valricostate.com",
+    ".vanlanschot.nl",
+    ".vb-hammah.de",
+    ".vbank.ru",
+    ".venturacountybusinessbank.com",
+    ".vestfynsbank.dk",
+    ".vestjyskbank.dk",
+    ".vibank.org",
+    ".vijayabank.com",
+    ".village-bank.com",
+    ".villagebankonline.com",
+    ".vineyardbank.com",
+    ".vintagebank.com",
+    ".virginiamla.com",
+    ".virtualbank.com",
+    ".voba-hn.de",
+    ".vobaeg.de",
+    ".volksbank-brawo.de",
+    ".volksbank-bueren-und-salzkotten.de",
+    ".volksbank-guetersloh.de",
+    ".volksbank-heilbronn.de",
+    ".volksbank-karlsruhe.de",
+    ".volksbank-kirchheim-nuertingen.de",
+    ".volksbank-oberberg.de",
+    ".volksbank-rems.de",
+    ".volksbank-wertheim.de",
+    ".volksbank.at",
+    ".volstatebank.com",
+    ".vorbank.dk",
+    ".vr-networld.de",
+    ".vrbank-suew.de",
+    ".vtb.ru",
+    ".vtbanker.com",
+    ".vw-bankdirect.de",
+    ".vwbankdirect.pl",
+    ".w3e.bim.ir",
+    ".wabankers.com",
+    ".wachovia.com",
+    ".wadenastatebank.com",
+    ".walpolebank.com",
+    ".walworthbank.com",
+    ".warringtonbank.com",
+    ".washingtonfederalbank.com",
+    ".washingtonsavings.net",
+    ".watrust.com",
+    ".waukeshabank.com",
+    ".waypointbank.com",
+    ".websterbank.com",
+    ".wellsfargo.com",
+    ".wellsfederalbank.com",
+    ".wesbanco.com",
+    ".westcoastbancorp.com",
+    ".westernbankwp.com",
+    ".westernsecuritybank.com",
+    ".westlandutrecht.nl",
+    ".westpac.com.au",
+    ".wgz-bank.de",
+    ".wib.org",
+    ".widebaycap.com.au",
+    ".wienerprivatbank.com",
+    ".wilberbank.com",
+    ".wilmingtontrust.com",
+    ".wilshirebank.com",
+    ".wilsonbank.com",
+    ".wimba.org",
+    ".winonanationalbank.com",
+    ".winterhillbank.com",
+    ".wir.ch",
+    ".wisbank.com",
+    ".wivoba.de",
+    ".wolverinebank.com",
+    ".woodforest.com",
+    ".woodlandbank.com",
+    ".wooribank.com",
+    ".wsfsbank.com",
+    ".wvacb.com",
+    ".wvbankers.org",
+    ".wyomingbank.com",
+    ".wyomingbankers.com",
+    ".xcitybank.com.ua",
+    ".yalebankiowa.com",
+    ".yellowstonebank.com",
+    ".ykb.nl",
+    ".zionsbank.com",
+    ".ziraatbank.de",
+    ".zvezabank.at"
+  ]
+}