diff --git a/lists/microsoft/list.json b/lists/microsoft/list.json
index 109a3a6..9114726 100644
--- a/lists/microsoft/list.json
+++ b/lists/microsoft/list.json
@@ -1,6 +1,6 @@
 {
   "name": "List of known microsoft domains",
-  "version": 2,
+  "version": 3,
   "description": "Event contains one or more entries of known microsoft domains",
   "matching_attributes": [
     "domain",
@@ -9,8 +9,6 @@
   ],
   "type": "hostname",
   "list": [
-    ".files-df.1drv.com",
-    ".files.1drv.com",
     ".aadrm.com",
     ".afx.ms",
     ".akadns.net",
@@ -18,44 +16,37 @@
     ".azure-int.net",
     ".azure-mobile.net",
     ".azure.com",
-    ".cloudapp.azure.com",
-    "azure.com",
     ".azure.net",
-    ".cloudapp.azure.net",
     ".azureedge.net",
     ".azurewebsites.net",
     ".bing-exp.com",
     ".bing-int.com",
     ".bing.com",
-    "bing.com",
-    "download.cortana.cn.bing.com",
     ".bing.net",
     ".ceipmsn.com",
+    ".cloudapp.azure.com",
+    ".cloudapp.azure.net",
     ".cloudapp.net",
     ".codeplex.com",
     ".discoverbing.com",
+    ".files-df.1drv.com",
+    ".files.1drv.com",
+    ".firstpartyapps.oaspapps.com",
     ".getmicrosoftkey.com",
     ".gfx-int.ms",
-    "gfx-int.ms",
     ".gfx.ms",
     ".healthvault-ppe.co.uk",
     ".healthvault-ppe.com",
-    "healthvault-ppe.com",
     ".healthvault.co.uk",
     ".healthvault.com",
     ".hotmail-int.com",
-    "hotmail.co.uk",
     ".hotmail.com",
-    "hotmail.com",
-    "iespdytst",
-    "ieta-wa-24",
     ".live-int.com",
     ".live-int.net",
     ".live-partner.com",
     ".live-ppe.net",
     ".live.com",
     ".live.fi",
-    "live.fi",
     ".live.net",
     ".livefilestore-int.com",
     ".livefilestore.com",
@@ -65,15 +56,6 @@
     ".mgmt.live",
     ".microsoft-int.com",
     ".microsoft.com",
-    ".redmond.corp.microsoft.com",
-    "download.microsoft.com",
-    "iespdytst.redmond.corp.microsoft.com",
-    "microsoft.com",
-    "powerusers-staging.microsoft.com",
-    "powerusers.microsoft.com",
-    "telecommand.telemetry.microsoft.com",
-    "vortex-sandbox.data.microsoft.com",
-    "watson.telemetry.microsoft.com",
     ".microsoft.com.au",
     ".microsoft.com.tr",
     ".microsoft.fr",
@@ -85,16 +67,13 @@
     ".microsoftonline.net",
     ".microsoftprime.com",
     ".microsoftstore.com",
-    "za.microsoftstore.com",
     ".microsoftstore.com.br",
     ".microsoftstore.com.cn",
     ".microsoftstore.com.hk",
     ".microsofttranslator.com",
     ".microsoftvirtualacademy.com",
     ".modern.ie",
-    "modern.ie",
     ".msads.net",
-    ".vo.msecnd.net",
     ".msgamestudios.com",
     ".msn-int.com",
     ".msn.cn",
@@ -102,29 +81,19 @@
     ".msn.com",
     ".msn.com.cn",
     ".msocdn.com",
-    ".firstpartyapps.oaspapps.com",
     ".office-int.com",
-    "office-int.com",
     ".office-int.net",
     ".office.com",
-    "office.com",
     ".office.net",
     ".office365.com",
     ".officeppe.com",
     ".officeppe.net",
     ".onedrive.com",
-    "onedrive.com",
     ".onenote.com",
-    "onenote.com",
     ".onenote.net",
-    "outlook-int.com",
     ".outlook.com",
-    "003-1-d.outlook.com",
-    "003-1-d.prod.outlook.com",
-    "outlook.com",
-    "pod71084-pri.outlook.com",
-    "pod71084.outlook.com",
     ".pfx.ms",
+    ".redmond.corp.microsoft.com",
     ".s-microsoft.com",
     ".s-msft.com",
     ".s-msn.com",
@@ -134,7 +103,6 @@
     ".sharepoint.com",
     ".sharepointonline.com",
     ".skype.com",
-    "community-stage.skype.com",
     ".skype.net",
     ".skypeassets.com",
     ".sqlazurelabs.com",
@@ -143,11 +111,9 @@
     ".trouter.io",
     ".virtualearth.net",
     ".visualstudio.com",
-    "visualstudio.com",
+    ".vo.msecnd.net",
     ".windows-int.net",
     ".windows.com",
-    "insidersurveys.windows.com",
-    "www.insidersurveys.windows.com",
     ".windows.net",
     ".windowsazure.com",
     ".windowsmedia.com",
@@ -160,6 +126,78 @@
     ".wlxrs.com",
     ".xbox.com",
     ".xboxlive.com",
-    ".zune.net"
+    ".zune.net",
+    "003-1-d.outlook.com",
+    "003-1-d.prod.outlook.com",
+    "azdns-migration-ns-validation.cn",
+    "azure-api.net",
+    "azure-apim.net",
+    "azure-devices.net",
+    "azure-mobile.net",
+    "azure.com",
+    "azurebiganalytics.net",
+    "azuredatacatalog.com",
+    "azuredatalake.net",
+    "azuredatalakeanalytics.net",
+    "azuredatalakestore.net",
+    "azureedge.net",
+    "azurehdinsight-stage.net",
+    "azurehdinsight.net",
+    "azurewebsites.net",
+    "bing.com",
+    "cloudapp-int.net",
+    "cloudapp-preview.com",
+    "cloudapp-preview.net",
+    "cloudapp.net",
+    "clouddatahub.net",
+    "cloudwebappproxy.net",
+    "community-stage.skype.com",
+    "download.cortana.cn.bing.com",
+    "download.microsoft.com",
+    "gfx-int.ms",
+    "hdinsightservices.net",
+    "healthvault-ppe.com",
+    "homeserver.com",
+    "hotmail.co.uk",
+    "hotmail.com",
+    "iespdytst",
+    "iespdytst.redmond.corp.microsoft.com",
+    "ieta-wa-24",
+    "insidersurveys.windows.com",
+    "live.fi",
+    "management-azure-devices.net",
+    "mgmt-azure-api.net",
+    "microsoft.com",
+    "microsoftcrmportals.com",
+    "microsoftcrmportalstest.com",
+    "microsoftkonacompute.net",
+    "microsoftprojecttokyo.com",
+    "microsoftstream.com",
+    "modern.ie",
+    "msappproxy.net",
+    "o365apps.net",
+    "office-int.com",
+    "office.com",
+    "onedrive.com",
+    "onenote.com",
+    "outlook-int.com",
+    "outlook.com",
+    "pbiwebcontent.com",
+    "pod71084-pri.outlook.com",
+    "pod71084.outlook.com",
+    "powerbi.com",
+    "powerusers-staging.microsoft.com",
+    "powerusers.microsoft.com",
+    "remotewebaccess.com",
+    "stage-azurewebsites.net",
+    "stage-o365apps.net",
+    "telecommand.telemetry.microsoft.com",
+    "visualstudio.com",
+    "vortex-sandbox.data.microsoft.com",
+    "vsallin.net",
+    "vsassets.io",
+    "watson.telemetry.microsoft.com",
+    "www.insidersurveys.windows.com",
+    "za.microsoftstore.com"
   ]
 }