{
  "description": "Event contains one or more entries from the top 1000 of the most used websites (Cisco Umbrella).",
  "list": [
    "1-courier.push.apple.com",
    "1rx.io",
    "2mdn.net",
    "33across.com",
    "360yield.com",
    "3lift.com",
    "a-mo.net",
    "a.nel.cloudflare.com",
    "a1818.dscw154.akamai.net",
    "a2z.com",
    "aa-rt.sharepoint.com",
    "aa.agkn.com",
    "aad.cs.dds.microsoft.com",
    "aadcdn.msauth.net",
    "aadcdn.msftauth.net",
    "aaplimg.com",
    "aax-eu.amazon-adsystem.com",
    "aax.amazon-adsystem.com",
    "access-point.cloudmessaging.edge.microsoft.com",
    "accountcapabilities-pa.googleapis.com",
    "accounts.google.com",
    "accounts.youtube.com",
    "acdc-direct.office.com",
    "acdn.adnxs.com",
    "activity.windows.com",
    "ad-delivery.net",
    "ad.360yield.com",
    "ad.doubleclick.net",
    "ad.smaato.net",
    "ad.turn.com",
    "addons-pa.clients6.google.com",
    "addthis.com",
    "ade.googlesyndication.com",
    "adform.net",
    "admanmedia.com",
    "adnxs.com",
    "adobe.com",
    "adobe.io",
    "adobedtm.com",
    "ads-twitter.com",
    "ads.linkedin.com",
    "ads.pubmatic.com",
    "ads.stickyadstv.com",
    "ads.yieldmo.com",
    "adsafeprotected.com",
    "adservice.google.com",
    "adsrvr.org",
    "agkn.com",
    "ajax.googleapis.com",
    "amazon-adsystem.com",
    "amazon.com",
    "amazon.dev",
    "amazonaws.com",
    "amazontrust.com",
    "amcdn.msftauth.net",
    "amer.ng.msg.teams.microsoft.com",
    "amp-api-edge.apps.apple.com",
    "amp-api.apps.apple.com",
    "amplitude.com",
    "ampproject.org",
    "analytics.google.com",
    "analytics.tiktok.com",
    "analytics.twitter.com",
    "analytics.yahoo.com",
    "android.apis.google.com",
    "android.clients.google.com",
    "android.com",
    "android.googleapis.com",
    "ap.lijit.com",
    "api-noam.flightproxy.teams.microsoft.com",
    "api.amazon.com",
    "api.apple-cloudkit.com",
    "api.btloader.com",
    "api.cdp.microsoft.com",
    "api.flightproxy.teams.microsoft.com",
    "api.iris.microsoft.com",
    "api.msn.com",
    "api.smoot.apple.com",
    "api.snapchat.com",
    "apis.apple.map.fastly.net",
    "apis.google.com",
    "app-analytics-services.com",
    "app-analytics-v2.snapchat.com",
    "app-measurement.com",
    "app.launchdarkly.com",
    "app.snapchat.com",
    "appcenter.ms",
    "apple-cloudkit.com",
    "apple-dns.net",
    "apple.com",
    "apple.com.akadns.net",
    "apple.map.fastly.net",
    "apple.news",
    "apps.apple.com",
    "apps.mzstatic.com",
    "appsflyer.com",
    "appsflyersdk.com",
    "appsitemsuggest-pa.googleapis.com",
    "apresolve.spotify.com",
    "aps.amazon-adsystem.com",
    "aptrinsic.com",
    "arc.msn.com",
    "aria.microsoft.com",
    "armmf.adobe.com",
    "asm.skype.com",
    "assets.adobedtm.com",
    "assets.msn.com",
    "asyncgw.teams.microsoft.com",
    "atm-fp-direct.office.com",
    "attachments.office.net",
    "augloop.office.com",
    "autodiscover-s.outlook.com",
    "aws-proxy-gcp.api.snapchat.com",
    "aws.api.snapchat.com",
    "aws.duplex.snapchat.com",
    "azure.com",
    "b.akamaiedge.net",
    "b.tlu.dl.delivery.mp.microsoft.com",
    "b1sync.zemanta.com",
    "bag-cdn-lb.itunes-apple.com.akadns.net",
    "bag-cdn.itunes-apple.com.akadns.net",
    "bag.itunes.apple.com",
    "bam.nr-data.net",
    "bat.bing.com",
    "beacons.gcp.gvt2.com",
    "beacons.gvt2.com",
    "beacons2.gvt2.com",
    "beacons3.gvt2.com",
    "beacons4.gvt2.com",
    "bh.contextweb.com",
    "bidder.criteo.com",
    "bidr.io",
    "bidswitch.net",
    "bing.com",
    "bluekai.com",
    "bolt-gcdn.sc-cdn.net",
    "bootstrapcdn.com",
    "branch.io",
    "braze.com",
    "browser-intake-datadoghq.com",
    "browser.events.data.microsoft.com",
    "browser.events.data.msn.com",
    "browser.pipe.aria.microsoft.com",
    "btloader.com",
    "bugsnag.com",
    "business.bing.com",
    "bzib.nelreports.net",
    "c.amazon-adsystem.com",
    "c.apple.news",
    "c.bing.com",
    "c.go-mpulse.net",
    "c.lencr.org",
    "c.msn.com",
    "c1.adform.net",
    "c10r.facebook.com",
    "c10r.instagram.com",
    "cagenerator.pki.strln.net",
    "calendar.google.com",
    "capi.connatix.com",
    "captive.apple.com",
    "casalemedia.com",
    "cc-api-data.adobe.io",
    "cc.skype.com",
    "cdn-apple.com",
    "cdn.ampproject.org",
    "cdn.branch.io",
    "cdn.cloudflare.net",
    "cdn.cookielaw.org",
    "cdn.doubleverify.com",
    "cdn.id5-sync.com",
    "cdn.jsdelivr.net",
    "cdn.office.net",
    "cdn.optimizely.com",
    "cdn.pendo.io",
    "cdn.whatsapp.net",
    "cdninstagram.com",
    "cdnjs.cloudflare.com",
    "cdp.microsoft.com",
    "ce.lijit.com",
    "centralus.cloudapp.azure.com",
    "cf-st.sc-cdn.net",
    "chat-e2ee.facebook.com",
    "chat.cdn.whatsapp.net",
    "chat.google.com",
    "checkappexec.microsoft.com",
    "chromereporting-pa.googleapis.com",
    "chromewebstore.googleapis.com",
    "ci3.googleusercontent.com",
    "cisco.com",
    "cl2.apple.com",
    "cl3.apple.com",
    "clarity.ms",
    "classroom.google.com",
    "clever.com",
    "client-api.itunes.apple.com",
    "clients.config.office.net",
    "clients.google.com",
    "clients1.google.com",
    "clients2.google.com",
    "clients2.googleusercontent.com",
    "clients3.google.com",
    "clients4.google.com",
    "clients6.google.com",
    "clientservices.googleapis.com",
    "clientstream.launchdarkly.com",
    "cloud.netflix.com",
    "cloudapp.azure.com",
    "cloudflare.com",
    "cloudflare.net",
    "cloudflareinsights.com",
    "cloudmessaging.edge.microsoft.com",
    "cloudsearch.googleapis.com",
    "cloudsink.net",
    "cm.g.doubleclick.net",
    "cms.quantserve.com",
    "code.jquery.com",
    "com.akadns.net",
    "comm-cohort.ess.apple.com",
    "comm-main.ess.apple.com",
    "common.online.office.com",
    "company-target.com",
    "config.aps.amazon-adsystem.com",
    "config.edge.skype.com",
    "config.extension.grammarly.com",
    "config.fp.measure.office.com",
    "config.office.net",
    "config.teams.microsoft.com",
    "configuration.apple.com",
    "configuration.ls.apple.com",
    "connatix.com",
    "connect.facebook.net",
    "contacts.google.com",
    "content-autofill.googleapis.com",
    "content.office.net",
    "contextual.media.net",
    "contextweb.com",
    "cookielaw.org",
    "copilot.microsoft.com",
    "core.windows.net",
    "countvoncount.goguardian.com",
    "courier-push-apple.com.akadns.net",
    "cp.wd.microsoft.com",
    "crashlytics.com",
    "creativecdn.com",
    "criteo.com",
    "criteo.net",
    "crl.prod.cagenerator.pki.strln.net",
    "crl.verisign.com",
    "crl3.digicert.com",
    "crwdcntrl.net",
    "cs.dds.microsoft.com",
    "csp.microsoft.com",
    "csp.withgoogle.com",
    "csync.loopme.me",
    "ct.pinterest.com",
    "ctldl.windowsupdate.com",
    "d.agkn.com",
    "data.microsoft.com",
    "data.msn.com",
    "data.pendo.io",
    "dataservice.protection.outlook.com",
    "dc.services.visualstudio.com",
    "dds.microsoft.com",
    "default.exp-tas.com",
    "delivery.mp.microsoft.com",
    "delve.office.com",
    "demdex.net",
    "dev.virtualearth.net",
    "devicelistenerprod.microsoft.com",
    "devices.a2z.com",
    "dgw.c10r.facebook.com",
    "digicert.com",
    "dis.criteo.com",
    "disc601.prod.do.dsp.mp.microsoft.com",
    "dl.delivery.mp.microsoft.com",
    "dns.apple.com",
    "dns.msftncsi.com",
    "dns.opendns.com",
    "dns.umbrella.com",
    "do.dsp.mp.microsoft.com",
    "docs.google.com",
    "doh.dns.apple.com",
    "doh.opendns.com",
    "doh.umbrella.com",
    "dotomi.com",
    "doubleclick.net",
    "doubleverify.com",
    "download.windowsupdate.com",
    "dpm.demdex.net",
    "drive-thirdparty.googleusercontent.com",
    "drive.google.com",
    "drivefrontend-pa.clients6.google.com",
    "drivefrontend-pa.googleapis.com",
    "dscb.akamaiedge.net",
    "dsce9.akamaiedge.net",
    "dscg.akamaiedge.net",
    "dsct.akamaiedge.net",
    "dscw154.akamai.net",
    "dscx.akamaiedge.net",
    "dsp.mp.microsoft.com",
    "dsum-sec.casalemedia.com",
    "dsx.mp.microsoft.com",
    "dt.adsafeprotected.com",
    "duplex.snapchat.com",
    "e10499.dsce9.akamaiedge.net",
    "e17437.dsct.akamaiedge.net",
    "e2ro.com",
    "e673.dsce9.akamaiedge.net",
    "e6858.dscx.akamaiedge.net",
    "eastus.cloudapp.azure.com",
    "eb2.3lift.com",
    "ecn-us.dev.virtualearth.net",
    "ecn.dev.virtualearth.net",
    "ecs.office.com",
    "edge-consumer-static.azureedge.net",
    "edge-mobile-static.azureedge.net",
    "edge-mqtt.facebook.com",
    "edge.e2ro.com",
    "edge.microsoft.com",
    "edge.skype.com",
    "edgedl.me.gvt1.com",
    "elb.amazonaws.com",
    "endpoint.ingress.rapid7.com",
    "engagement.office.com",
    "enterprise.activity.windows.com",
    "entitlements.itunes.apple.com",
    "entrust.net",
    "espresso-pa.clients6.google.com",
    "ess.apple.com",
    "eu-1-id5-sync.com",
    "eu-mobile.events.data.microsoft.com",
    "eu-office.events.data.microsoft.com",
    "eu.tiktokcdn.com",
    "eus.rubiconproject.com",
    "events.data.microsoft.com",
    "events.data.msn.com",
    "events.launchdarkly.com",
    "everesttech.net",
    "exo.nel.measure.office.net",
    "exp-tas.com",
    "extension.femetrics.grammarly.io",
    "extension.grammarly.com",
    "facebook.com",
    "facebook.net",
    "fallback.c10r.facebook.com",
    "fastlane.rubiconproject.com",
    "fastly.net",
    "fbcdn.net",
    "fbs.smoot.apple.com",
    "fcdn.eu.tiktokcdn.com",
    "fcmconnection.googleapis.com",
    "fd.api.iris.microsoft.com",
    "fe2.apple-dns.net",
    "fe2cr.update.microsoft.com",
    "fe3cr.delivery.mp.microsoft.com",
    "femetrics.grammarly.io",
    "firebase-settings.crashlytics.com",
    "firebaseinstallations.googleapis.com",
    "firebaselogging-pa.googleapis.com",
    "firebaseremoteconfig.googleapis.com",
    "flashtalking.com",
    "flightproxy.teams.microsoft.com",
    "fls.doubleclick.net",
    "fna.fbcdn.net",
    "fontawesome.com",
    "fonts.googleapis.com",
    "fp.measure.office.com",
    "fp.msedge.net",
    "fp2e7a.wpc.phicdn.net",
    "fpinit.itunes.apple.com",
    "fs.microsoft.com",
    "ftl.netflix.com",
    "fundingchoicesmessages.google.com",
    "fw.adsafeprotected.com",
    "g.aaplimg.com",
    "g.akamaiedge.net",
    "g.doubleclick.net",
    "g.live.com",
    "g.whatsapp.net",
    "gateway.facebook.com",
    "gateway.fe2.apple-dns.net",
    "gateway.icloud.com",
    "gateway.instagram.com",
    "gcp.api.snapchat.com",
    "gcp.gvt2.com",
    "gdmf.apple.com",
    "geller-pa.googleapis.com",
    "geo.prod.do.dsp.mp.microsoft.com",
    "geolocation.onetrust.com",
    "geover.prod.do.dsp.mp.microsoft.com",
    "ggpht.com",
    "giphy.com",
    "global.aa-rt.sharepoint.com",
    "gmail.com",
    "go-mpulse.net",
    "go.microsoft.com",
    "go.sonobi.com",
    "godaddy.com",
    "goguardian.com",
    "google-analytics.com",
    "google-ohttp-relay-safebrowsing.fastly-edge.com",
    "google.com",
    "googleads.g.doubleclick.net",
    "googleads4.g.doubleclick.net",
    "googleadservices.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "googletagservices.com",
    "googleusercontent.com",
    "googlevideo.com",
    "gr.global.aa-rt.sharepoint.com",
    "grammarly.com",
    "grammarly.io",
    "graph.facebook.com",
    "graph.instagram.com",
    "graph.microsoft.com",
    "gs-loc-new.ls-apple.com.akadns.net",
    "gs-loc.apple.com",
    "gs-loc.ls-apple.com.akadns.net",
    "gsa.apple.com",
    "gsas.apple.com",
    "gsp-ssl.ls-apple.com.akadns.net",
    "gsp-ssl.ls.apple.com",
    "gsp10-ssl.apple.com",
    "gsp64-ssl.ls.apple.com",
    "gsp85-ssl.ls.apple.com",
    "gspe1-ssl.ls.apple.com",
    "gspe19-2-ssl.ls.apple.com",
    "gspe19-ssl.ls.apple.com",
    "gspe35-ssl.ls.apple.com",
    "gspe79-ssl.ls.apple.com",
    "gum.criteo.com",
    "gumgum.com",
    "guzzoni-apple-com.v.aaplimg.com",
    "guzzoni.apple.com",
    "gvt1.com",
    "gvt2.com",
    "h3.apis.apple.map.fastly.net",
    "hbopenbid.pubmatic.com",
    "history.google.com",
    "hotjar.com",
    "htlb.casalemedia.com",
    "i.instagram.com",
    "i.liadm.com",
    "i.ytimg.com",
    "iadsdk.apple.com",
    "ib.adnxs.com",
    "ic3.events.data.microsoft.com",
    "icloud-content.com",
    "icloud.com",
    "id.google.com",
    "id.rlcdn.com",
    "id5-sync.com",
    "idsync.rlcdn.com",
    "image2.pubmatic.com",
    "image6.pubmatic.com",
    "image8.pubmatic.com",
    "images-na.ssl-images-amazon.com",
    "imap.gmail.com",
    "imasdk.googleapis.com",
    "img-s-msn-com.akamaized.net",
    "imrworldwide.com",
    "in.appcenter.ms",
    "inappcheck.itunes.apple.com",
    "inbox.google.com",
    "indexww.com",
    "ingest.sentry.io",
    "ingress.rapid7.com",
    "init-p01md.apple.com",
    "init.ess.apple.com",
    "init.itunes.apple.com",
    "init.push.apple.com",
    "inmobi.com",
    "inquisition.goguardian.com",
    "insight.adsrvr.org",
    "instagram.c10r.instagram.com",
    "instagram.com",
    "instructure.com",
    "intentiq.com",
    "ip.goguardian.com",
    "iphone-ld.apple.com",
    "iphone-ld.origin-apple.com.akadns.net",
    "ipredictive.com",
    "ipv4only.arpa",
    "iris.microsoft.com",
    "is1-ssl.mzstatic.com",
    "itunes-apple.com.akadns.net",
    "itunes.apple.com",
    "jnn-pa.googleapis.com",
    "jquery.com",
    "js-agent.newrelic.com",
    "js-sec.indexww.com",
    "js.monitor.azure.com",
    "jsdelivr.net",
    "krxd.net",
    "kt-prod.ess.apple.com",
    "kv501.prod.do.dsp.mp.microsoft.com",
    "kv601.prod.do.dsp.mp.microsoft.com",
    "kv801.prod.do.dsp.mp.microsoft.com",
    "l.google.com",
    "launchdarkly.com",
    "lb-apple.com.akadns.net",
    "lb.eu-1-id5-sync.com",
    "lcdn-locator.apple.com",
    "lencr.org",
    "lens.google.com",
    "lfodown01-b.cloudsink.net",
    "lfodown01-gyr-maverick.cloudsink.net",
    "lh3.google.com",
    "lh3.googleusercontent.com",
    "lh4.googleusercontent.com",
    "lh5.googleusercontent.com",
    "lh6.googleusercontent.com",
    "lh7-us.googleusercontent.com",
    "liadm.com",
    "licdn.com",
    "licensing.mp.microsoft.com",
    "lijit.com",
    "linkedin.com",
    "live.com",
    "live.net",
    "login.live.com",
    "login.microsoftonline.com",
    "login.mso.msidentity.com",
    "login5.spotify.com",
    "logs.netflix.com",
    "loki.delve.office.com",
    "loopme.me",
    "ls-apple.com.akadns.net",
    "ls.apple.com",
    "m.google.com",
    "m.media-amazon.com",
    "m365cdn.nel.measure.office.net",
    "mail-ads.google.com",
    "mail.google.com",
    "manage.microsoft.com",
    "maps.googleapis.com",
    "mask-api.icloud.com",
    "mask-h2.icloud.com",
    "mask.apple-dns.net",
    "mask.icloud.com",
    "match.adsrvr.org",
    "match.prod.bidr.io",
    "match.sharethrough.com",
    "mathtag.com",
    "mb.moatads.com",
    "me.gvt1.com",
    "measure.office.com",
    "measure.office.net",
    "media-amazon.com",
    "media.licdn.com",
    "media.net",
    "meetings.googleapis.com",
    "messaging.engagement.office.com",
    "mesu-cdn.origin-apple.com.akadns.net",
    "mesu.apple.com",
    "metrics.icloud.com",
    "microsoft.com",
    "microsoftonline.com",
    "mixpanel.com",
    "moatads.com",
    "mobile.events.data.microsoft.com",
    "mobile.launchdarkly.com",
    "monitor.azure.com",
    "mos.microsoft.com",
    "mozilla.com",
    "mp.microsoft.com",
    "mqtt.c10r.facebook.com",
    "mrodevicemgr.officeapps.live.com",
    "ms-acdc.office.com",
    "msauth.net",
    "msedge.api.cdp.microsoft.com",
    "msedge.b.tlu.dl.delivery.mp.microsoft.com",
    "msedge.net",
    "msftauth.net",
    "msftconnecttest.com",
    "msftncsi.com",
    "msg.teams.microsoft.com",
    "msidentity.com",
    "msn.com",
    "mso.msidentity.com",
    "mtalk.google.com",
    "mzstatic.com",
    "nam.loki.delve.office.com",
    "nav-edge.smartscreen.microsoft.com",
    "nav.smartscreen.microsoft.com",
    "nel.cloudflare.com",
    "nel.measure.office.net",
    "nelreports.net",
    "netflix.com",
    "netflix.net",
    "netseer-ipaddr-assoc.xy.fbcdn.net",
    "netseer-ipaddr-assoc.xz.fbcdn.net",
    "newrelic.com",
    "news-edge.apple.com",
    "nexus.officeapps.live.com",
    "nexusrules.officeapps.live.com",
    "ng.msg.teams.microsoft.com",
    "nleditor.osi.office.net",
    "node.e2ro.com",
    "notifications-pa.googleapis.com",
    "notify.adobe.io",
    "nr-data.net",
    "nrdp-ipv6.prod.ftl.netflix.com",
    "nrdp.prod.cloud.netflix.com",
    "nrdp52-appboot.netflix.com",
    "ntp.msn.com",
    "ntp.org",
    "oauth2.googleapis.com",
    "oauthaccountmanager.googleapis.com",
    "ocsp.digicert.com",
    "ocsp.entrust.net",
    "ocsp.godaddy.com",
    "ocsp.pki.goog",
    "ocsp2-lb.apple.com.akadns.net",
    "ocsp2.apple.com",
    "ocsp2.g.aaplimg.com",
    "ocws.officeapps.live.com",
    "odc.officeapps.live.com",
    "office.com",
    "office.net",
    "office365.com",
    "officeapps.live.com",
    "officeclient.microsoft.com",
    "ogads-pa.clients6.google.com",
    "ogs.google.com",
    "omnitagjs.com",
    "omtrdc.net",
    "oneclient.sfx.ms",
    "oneocsp.microsoft.com",
    "onetag-sys.com",
    "onetrust.com",
    "online.office.com",
    "ooc-g2.tm-4.office.com",
    "opendns.com",
    "openx.net",
    "opera.com",
    "optimizationguide-pa.googleapis.com",
    "optimizely.com",
    "origin-apple.com.akadns.net",
    "osi.office.net",
    "outbrain.com",
    "outlook.com",
    "outlook.office.com",
    "outlook.office365.com",
    "ow1.res.office365.com",
    "owl.officeapps.live.com",
    "p.rfihub.com",
    "p.typekit.net",
    "pagead2.googlesyndication.com",
    "pancake.apple.com",
    "partner.netflix.net",
    "passwordsleakcheck-pa.googleapis.com",
    "pendo.io",
    "people-pa.clients6.google.com",
    "people-pa.googleapis.com",
    "peoplestack-pa.clients6.google.com",
    "peoplestack-pa.googleapis.com",
    "peoplestackwebexperiments-pa.clients6.google.com",
    "phicdn.net",
    "pinimg.com",
    "pinterest.com",
    "pipe.aria.microsoft.com",
    "pippio.com",
    "pixel-sync.sitescout.com",
    "pixel.adsafeprotected.com",
    "pixel.rubiconproject.com",
    "pixel.tapad.com",
    "pki.goog",
    "pki.strln.net",
    "play-fe.googleapis.com",
    "play-lh.googleusercontent.com",
    "play.google.com",
    "play.googleapis.com",
    "play.itunes.apple.com",
    "pm.w55c.net",
    "polka.typekit.com",
    "pool.ntp.org",
    "pr-bh.ybp.yahoo.com",
    "preapp.prod.partner.netflix.net",
    "prebid-server.rubiconproject.com",
    "prebid.a-mo.net",
    "presence.teams.microsoft.com",
    "prod-eastus.access-point.cloudmessaging.edge.microsoft.com",
    "prod-lt-playstoregatewayadapter-pa.googleapis.com",
    "prod.bidr.io",
    "prod.cagenerator.pki.strln.net",
    "prod.cloud.netflix.com",
    "prod.do.dsp.mp.microsoft.com",
    "prod.ftl.netflix.com",
    "prod.mos.microsoft.com",
    "prod.netflix.com",
    "prod.partner.netflix.net",
    "protection.outlook.com",
    "proxy.safebrowsing.apple",
    "pubads.g.doubleclick.net",
    "public.cdn.office.net",
    "pubmatic.com",
    "pull-a5-gcp01.tiktokcdn.com",
    "pull-cmaf-f16-gcp01.ttlivecdn.com",
    "pull-cmaf-f16-tt03.fcdn.eu.tiktokcdn.com",
    "pull-cmaf-f16-va01.ttlivecdn.com",
    "pull-cmaf-l10-gcp01.tiktokcdn.com",
    "pull-cmaf-l16-gcp01.tiktokcdn.com",
    "pull-cmaf-l77-gcp01.tiktokcdn.com",
    "pull-f5-sg01.fcdn.eu.tiktokcdn.com",
    "pull-f5-sg01.ttlivecdn.com",
    "pull-f5-tt01.fcdn.eu.tiktokcdn.com",
    "pull-f5-tt02.fcdn.eu.tiktokcdn.com",
    "pull-f5-tt03.fcdn.eu.tiktokcdn.com",
    "pull-f5-va01.fcdn.eu.tiktokcdn.com",
    "pull-f5-vr-gcp01.tiktokcdn.com",
    "pull-f5-vr-va01.tiktokcdn.com",
    "pull-flv-f58-tt03.fcdn.eu.tiktokcdn.com",
    "pull-flv-f77-sg01.fcdn.eu.tiktokcdn.com",
    "pull-flv-f77-tt01-tt03.fcdn.eu.tiktokcdn.com",
    "pull-flv-f77-tt02-tt03.fcdn.eu.tiktokcdn.com",
    "pull-flv-f77-tt03-expt.fcdn.eu.tiktokcdn.com",
    "pull-flv-f77-va01.fcdn.eu.tiktokcdn.com",
    "pull-flv-l10-gcp01.tiktokcdn.com",
    "pull-flv-l77-gcp01.eu.tiktokcdn.com",
    "pull-flv-l77-gcp01.tiktokcdn.com",
    "pull-flv-l77-tt02.eu.tiktokcdn.com",
    "pull-hls-f77-gcp01.tiktokcdn.com",
    "pull-o5-gcp01.tiktokcdn.com",
    "pull-o5-sg01.fcdn.eu.tiktokcdn.com",
    "pull-o5-va01.fcdn.eu.tiktokcdn.com",
    "pull-q5-sg01.fcdn.eu.tiktokcdn.com",
    "pull-q5-va01.ttlivecdn.com",
    "pull-w5-gcp01.tiktokcdn.com",
    "pull-w5-sg01.fcdn.eu.tiktokcdn.com",
    "pull-w5-sg01.ttlivecdn.com",
    "pull-w5-va01.fcdn.eu.tiktokcdn.com",
    "pull-w5-va01.ttlivecdn.com",
    "push-apple.com.akadns.net",
    "push-rtmp-f5-tt03.fcdn.eu.tiktokcdn.com",
    "push.apple.com",
    "push.prod.netflix.com",
    "pusher.com",
    "px.ads.linkedin.com",
    "px.moatads.com",
    "qualtrics.com",
    "quantserve.com",
    "query.ess.apple.com",
    "quiddity.goguardian.com",
    "r.bing.com",
    "r.manage.microsoft.com",
    "r4.res.office365.com",
    "rapid7.com",
    "reddit.com",
    "relay.teams.microsoft.com",
    "res-1.cdn.office.net",
    "res.cdn.office.net",
    "res.office365.com",
    "resources.office.net",
    "rfihub.com",
    "rlcdn.com",
    "roaming.officeapps.live.com",
    "rtb-csync.smartadserver.com",
    "rtb.openx.net",
    "rtb0.doubleverify.com",
    "rubiconproject.com",
    "s.ad.smaato.net",
    "s.amazon-adsystem.com",
    "s.pinimg.com",
    "s.yimg.com",
    "s.youtube.com",
    "s0.2mdn.net",
    "safebrowsing.apple",
    "safebrowsing.google.com",
    "safebrowsing.googleapis.com",
    "safeframe.googlesyndication.com",
    "safelinks.protection.outlook.com",
    "safesearch.googleapis.com",
    "sb.scorecardresearch.com",
    "sc-cdn.net",
    "scontent.xx.fbcdn.net",
    "scorecardresearch.com",
    "searchhighlights.bing.com",
    "secure.adnxs.com",
    "securepubads.g.doubleclick.net",
    "self.events.data.microsoft.com",
    "sentinelone.net",
    "sentry.io",
    "servedby.flashtalking.com",
    "services.mozilla.com",
    "services.visualstudio.com",
    "sessions.bugsnag.com",
    "settings-win.data.microsoft.com",
    "setup.icloud.com",
    "sfx.ms",
    "sharepoint.com",
    "sharethrough.com",
    "shell.cdn.office.net",
    "signaler-pa.clients6.google.com",
    "simage2.pubmatic.com",
    "simpli.fi",
    "siteintercept.qualtrics.com",
    "sitescout.com",
    "skydrive.wns.windows.com",
    "skype.com",
    "slscr.update.microsoft.com",
    "smaato.net",
    "smartadserver.com",
    "smartscreen.microsoft.com",
    "smoot.apple.com",
    "smp-device-content.apple.com",
    "snap.licdn.com",
    "snapchat.com",
    "snat.goguardian.com",
    "sonobi.com",
    "spclient.wg.spotify.com",
    "spo.nel.measure.office.net",
    "spotify.com",
    "srtb.msn.com",
    "srv.stackadapt.com",
    "ssbsync.smartadserver.com",
    "ssc-cms.33across.com",
    "ssl-images-amazon.com",
    "ssl.google-analytics.com",
    "ssum-sec.casalemedia.com",
    "stackadapt.com",
    "star-mini.c10r.facebook.com",
    "star.c10r.facebook.com",
    "star.fallback.c10r.facebook.com",
    "static.ads-twitter.com",
    "static.adsafeprotected.com",
    "static.cloudflareinsights.com",
    "static.criteo.net",
    "static.doubleclick.net",
    "static.hotjar.com",
    "statics.teams.cdn.office.net",
    "stats.g.doubleclick.net",
    "stickyadstv.com",
    "stocks-data-service.apple.com",
    "storage.googleapis.com",
    "storage.live.com",
    "storecatalogrevocation.storequality.microsoft.com",
    "storeedgefd.dsx.mp.microsoft.com",
    "storequality.microsoft.com",
    "stripe.com",
    "strln.net",
    "substrate.office.com",
    "suite.office.com",
    "support.content.office.net",
    "svc.ms",
    "swallow.apple.com",
    "sync-tm.everesttech.net",
    "sync.1rx.io",
    "sync.crwdcntrl.net",
    "sync.ipredictive.com",
    "sync.outbrain.com",
    "sync.srv.stackadapt.com",
    "t.co",
    "taboola.com",
    "tags.bluekai.com",
    "tapad.com",
    "targeting.unrulymedia.com",
    "taskassist-pa.googleapis.com",
    "td.doubleclick.net",
    "teads.tv",
    "teams.cdn.office.net",
    "teams.events.data.microsoft.com",
    "teams.microsoft.com",
    "teams.nel.measure.office.net",
    "th.bing.com",
    "tiktok.com",
    "tiktokcdn-us.com",
    "tiktokcdn.com",
    "tiktokv.com",
    "tiktokv.us",
    "tile-service.weather.microsoft.com",
    "time.android.com",
    "time.apple.com",
    "time.g.aaplimg.com",
    "titles.prod.mos.microsoft.com",
    "tlu.dl.delivery.mp.microsoft.com",
    "tlx.3lift.com",
    "tm-4.office.com",
    "token.rubiconproject.com",
    "token.safebrowsing.apple",
    "tools.google.com",
    "tpc.googlesyndication.com",
    "tps.doubleverify.com",
    "tr.snapchat.com",
    "trafficshaping.dsp.mp.microsoft.com",
    "translate.googleapis.com",
    "trc.taboola.com",
    "treatment.grammarly.com",
    "tremorhub.com",
    "tribalfusion.com",
    "trouter.teams.microsoft.com",
    "trustarc.com",
    "truste.com",
    "tsfe.trafficshaping.dsp.mp.microsoft.com",
    "ttlivecdn.com",
    "turn.com",
    "twitter.com",
    "typekit.com",
    "typekit.net",
    "u.openx.net",
    "uci.cdn.office.net",
    "um.simpli.fi",
    "umbrella.com",
    "unitedstates.cp.wd.microsoft.com",
    "unitedstates.smartscreen.microsoft.com",
    "unity3d.com",
    "unpkg.com",
    "unrulymedia.com",
    "update.googleapis.com",
    "update.microsoft.com",
    "upload.fp.measure.office.com",
    "ups.analytics.yahoo.com",
    "us-api.asm.skype.com",
    "us-central1-gcp.api.snapchat.com",
    "us-east1-aws.api.snapchat.com",
    "us-east4-gcp.api.snapchat.com",
    "us-mobile.events.data.microsoft.com",
    "us-prod.asyncgw.teams.microsoft.com",
    "us-teams.events.data.microsoft.com",
    "us-u.openx.net",
    "us-v10c.events.data.microsoft.com",
    "us-v20.events.data.microsoft.com",
    "us-west-2.amazonaws.com",
    "us.criteo.net",
    "usc1-gcp-v62.api.snapchat.com",
    "use.typekit.net",
    "v.aaplimg.com",
    "v10.events.data.microsoft.com",
    "v20.events.data.microsoft.com",
    "valid.apple.com",
    "verisign.com",
    "virtualearth.net",
    "visitor.omnitagjs.com",
    "visualstudio.com",
    "w55c.net",
    "waa-pa.clients6.google.com",
    "waconafd.officeapps.live.com",
    "waconatm.officeapps.live.com",
    "waluigi.goguardian.com",
    "wbx2.com",
    "wd.microsoft.com",
    "weather-data.apple.com",
    "weather.microsoft.com",
    "web.facebook.com",
    "webex.com",
    "webshell.suite.office.com",
    "westus.cloudapp.azure.com",
    "wg.spotify.com",
    "whatsapp.net",
    "winatp-gw-eus.microsoft.com",
    "windows.com",
    "windows.msn.com",
    "windows.net",
    "windowsupdate.com",
    "wise-m.public.cdn.office.net",
    "wns.windows.com",
    "wns2-by3p.wns.windows.com",
    "wpc.phicdn.net",
    "wps.apple.com",
    "www.amazon.com",
    "www.apple.com",
    "www.bing.com",
    "www.cisco.com",
    "www.clarity.ms",
    "www.facebook.com",
    "www.google-analytics.com",
    "www.google.com",
    "www.googleadservices.com",
    "www.googleapis.com",
    "www.googletagmanager.com",
    "www.googletagservices.com",
    "www.linkedin.com",
    "www.microsoft.com",
    "www.msftconnecttest.com",
    "www.msn.com",
    "www.youtube.com",
    "x.bidswitch.net",
    "x1.c.lencr.org",
    "x2.c.lencr.org",
    "xp.apple.com",
    "xp.itunes-apple.com.akadns.net",
    "xpaywalletcdn.azureedge.net",
    "xx.fbcdn.net",
    "xy.fbcdn.net",
    "xz.fbcdn.net",
    "yahoo.com",
    "yahoo.net",
    "ybp.yahoo.com",
    "yellowblue.io",
    "yieldmo.com",
    "yimg.com",
    "youtube.com",
    "youtubei.googleapis.com",
    "yt3.ggpht.com",
    "ytimg.com",
    "z-p42-chat-e2ee-ig.facebook.com",
    "z.moatads.com",
    "zemanta.com",
    "zoom.us"
  ],
  "matching_attributes": [
    "hostname",
    "domain",
    "url",
    "domain|ip"
  ],
  "name": "Top 1000 websites from Cisco Umbrella",
  "type": "string",
  "version": 20240426
}