diff --git a/lists/alexa/list.json b/lists/alexa/list.json
index 80321b0..7b0951c 100644
--- a/lists/alexa/list.json
+++ b/lists/alexa/list.json
@@ -1001,11 +1001,12 @@
     "voyeurhit.com"
   ],
   "name": "Top 1000 website from Alexa",
-  "version": "20160528",
+  "version": "20170118",
   "description": "Event contains one or more entries from the top 1000 of the most used website (Alexa).",
   "matching_attributes": [
     "hostname",
     "domain",
-    "domain|ip"
+    "domain|ip",
+    "substring"
   ]
 }