{
  "description": "Event contains one or more entries from the top 1000 of the most used websites (Cisco Umbrella).",
  "list": [
    "0.client-channel.google.com",
    "1-courier.push.apple.com",
    "1.nflxso.net",
    "1.oca.nflxvideo.net",
    "1rx.io",
    "2mdn.net",
    "33across.com",
    "360yield.com",
    "3gppnetwork.org",
    "3lift.com",
    "a-msedge.net",
    "a.akamaiedge.net",
    "a.nel.cloudflare.com",
    "a.tribalfusion.com",
    "a1931.dscgi3.akamai.net",
    "aa.agkn.com",
    "aa.google.com",
    "aaplimg.com",
    "aax-us-east.amazon-adsystem.com",
    "aax.amazon-adsystem.com",
    "accounts.google.com",
    "acdc-direct.office.com",
    "acdn.adnxs.com",
    "activity.windows.com",
    "acuityplatform.com",
    "ad.360yield.com",
    "ad.doubleclick.net",
    "ad.smaato.net",
    "ad.turn.com",
    "adaptv.advertising.com",
    "addons-pa.clients6.google.com",
    "addthis.com",
    "ade.googlesyndication.com",
    "adentifi.com",
    "adform.net",
    "adjust.com",
    "adnxs.com",
    "adobe.com",
    "adobe.io",
    "adobedtm.com",
    "ads-twitter.com",
    "ads.linkedin.com",
    "ads.pubmatic.com",
    "ads.stickyadstv.com",
    "ads.yahoo.com",
    "ads.yieldmo.com",
    "adsafeprotected.com",
    "adservice.google.com",
    "adsrvr.org",
    "adsymptotic.com",
    "advertising.com",
    "agave.myanalytics.cdn.office.net",
    "agkn.com",
    "ajax.aspnetcdn.com",
    "ajax.googleapis.com",
    "akadns.net",
    "akamai.net",
    "akamaiedge.net",
    "akamaihd.net",
    "akamaized.net",
    "akstat.io",
    "amazon-adsystem.com",
    "amazon.com",
    "amazonaws.com",
    "amazontrust.com",
    "amer.ng.msg.teams.microsoft.com",
    "amplitude.com",
    "ampproject.org",
    "analytics.twitter.com",
    "analytics.yahoo.com",
    "android.clients.google.com",
    "android.com",
    "android.googleapis.com",
    "ap.lijit.com",
    "api-global.netflix.com",
    "api.amazon.com",
    "api.cdp.microsoft.com",
    "api.facebook.com",
    "api.flightproxy.teams.microsoft.com",
    "api.iris.microsoft.com",
    "api.msn.com",
    "api.rlcdn.com",
    "api.segment.io",
    "api.smoot.apple.com",
    "api.snapchat.com",
    "api.userstore.skype.com",
    "api.weather.com",
    "api2.branch.io",
    "api3.cc.skype.com",
    "apis.google.com",
    "app-analytics-v2.snapchat.com",
    "app-measurement.com",
    "appcenter.ms",
    "apple-dns.net",
    "apple-finance.query.yahoo.com",
    "apple.com",
    "apple.com.akadns.net",
    "apple.com.edgekey.net",
    "apple.news",
    "apps.mzstatic.com",
    "appsflyer.com",
    "appsforoffice.microsoft.com",
    "arc.msn.com",
    "aria.microsoft.com",
    "armmf.adobe.com",
    "asm.skype.com",
    "aspnetcdn.com",
    "assets.adobedtm.com",
    "assets.msn.com",
    "asyncgw.teams.microsoft.com",
    "atdmt.com",
    "atm-fp-direct.office.com",
    "augloop.office.com",
    "autodiscover-s.outlook.com",
    "avast.com",
    "azure.com",
    "azureedge.net",
    "b-api.facebook.com",
    "b-graph.facebook.com",
    "b.akamai.net",
    "b.akamaiedge.net",
    "b1sync.zemanta.com",
    "bag.itunes.apple.com",
    "bam-cell.nr-data.net",
    "bam.nr-data.net",
    "bat.bing.com",
    "bcp.crwdcntrl.net",
    "beacon.krxd.net",
    "beacons.gcp.gvt2.com",
    "beacons.gvt2.com",
    "beacons2.gvt2.com",
    "beacons3.gvt2.com",
    "beacons4.gvt2.com",
    "beap-bc.yahoo.com",
    "bh.contextweb.com",
    "bid.g.doubleclick.net",
    "bidder.criteo.com",
    "bidr.io",
    "bidswitch.net",
    "bing.com",
    "blob.core.windows.net",
    "bluekai.com",
    "bolt.dropbox.com",
    "bootstrapcdn.com",
    "branch.io",
    "braze.com",
    "browser.events.data.microsoft.com",
    "browser.events.data.msn.com",
    "browser.pipe.aria.microsoft.com",
    "bs.serving-sys.com",
    "bttrack.com",
    "bugsnag.com",
    "business.bing.com",
    "c.2mdn.net",
    "c.amazon-adsystem.com",
    "c.apple.news",
    "c.bing.com",
    "c.evidon.com",
    "c.go-mpulse.net",
    "c.lencr.org",
    "c.msn.com",
    "c.urs.microsoft.com",
    "c1.adform.net",
    "c10r.facebook.com",
    "c2shb.ssp.yahoo.com",
    "calendar.google.com",
    "captive.apple.com",
    "casalemedia.com",
    "cc-api-data.adobe.io",
    "cc.skype.com",
    "cdn-0.nflximg.com",
    "cdn-apple.com",
    "cdn.ampproject.org",
    "cdn.branch.io",
    "cdn.cloudflare.net",
    "cdn.content.prod.cms.msn.com",
    "cdn.cookielaw.org",
    "cdn.doubleverify.com",
    "cdn.flashtalking.com",
    "cdn.jsdelivr.net",
    "cdn.krxd.net",
    "cdn.mozilla.net",
    "cdn.office.net",
    "cdn.onenote.net",
    "cdn.optimizely.com",
    "cdn.taboola.com",
    "cdn.whatsapp.net",
    "cdn3.doubleverify.com",
    "cdninstagram.com",
    "cdnjs.cloudflare.com",
    "cdp.microsoft.com",
    "cds.taboola.com",
    "ce.lijit.com",
    "chartbeat.net",
    "chat-pa.clients6.google.com",
    "chat.cdn.whatsapp.net",
    "chat.google.com",
    "checkappexec.microsoft.com",
    "choices.trustarc.com",
    "choices.truste.com",
    "ci3.googleusercontent.com",
    "ci4.googleusercontent.com",
    "ci5.googleusercontent.com",
    "ci6.googleusercontent.com",
    "cisco.com",
    "citrix.com",
    "cl2.apple.com",
    "cl3.apple.com",
    "cl4.apple.com",
    "cl5.apple.com",
    "client-channel.google.com",
    "client.dropbox.com",
    "clients.config.office.net",
    "clients.google.com",
    "clients1.google.com",
    "clients2.google.com",
    "clients3.google.com",
    "clients4.google.com",
    "clients6.google.com",
    "clientservices.googleapis.com",
    "cloud.netflix.com",
    "cloudapp.azure.com",
    "cloudflare.com",
    "cloudflare.net",
    "cloudsink.net",
    "cm.everesttech.net",
    "cm.g.doubleclick.net",
    "cms.analytics.yahoo.com",
    "cms.msn.com",
    "code.jquery.com",
    "com.akadns.net",
    "com.cdn.cloudflare.net",
    "com.edgekey.net",
    "com.edgekey.net.globalredir.akadns.net",
    "com.edgesuite.net",
    "comodoca.com",
    "config.edge.skype.com",
    "config.office.net",
    "config.teams.microsoft.com",
    "configuration.apple.com",
    "configuration.apple.com.akadns.net",
    "configuration.ls.apple.com",
    "connect.facebook.net",
    "connectivitycheck.platform.hicloud.com",
    "contacts.fe.apple-dns.net",
    "contacts.google.com",
    "content-autofill.googleapis.com",
    "content-signature-2.cdn.mozilla.net",
    "content.office.net",
    "content.prod.cms.msn.com",
    "contextual.media.net",
    "contextweb.com",
    "cookielaw.org",
    "core.windows.net",
    "courier-push-apple.com.akadns.net",
    "cp.wd.microsoft.com",
    "crashlytics.com",
    "creativecdn.com",
    "criteo.com",
    "criteo.net",
    "crl.comodoca.com",
    "crl.globalsign.net",
    "crl.identrust.com",
    "crl.microsoft.com",
    "crl.pki.goog",
    "crwdcntrl.net",
    "cs.dds.microsoft.com",
    "cs.emxdgt.com",
    "ct.pinterest.com",
    "ctldl.windowsupdate.com",
    "customerevents.netflix.com",
    "d.agkn.com",
    "d.dropbox.com",
    "d.turn.com",
    "data.microsoft.com",
    "data.msn.com",
    "data.trafficmanager.net",
    "dataservice.protection.outlook.com",
    "dc.services.visualstudio.com",
    "dds.microsoft.com",
    "deepintent.com",
    "delivery.mp.microsoft.com",
    "delve.office.com",
    "demdex.net",
    "device-metrics-us.amazon.com",
    "digicert.com",
    "dis.criteo.com",
    "dl-debug.dropbox.com",
    "dl.delivery.mp.microsoft.com",
    "dlx.addthis.com",
    "dmd.metaservices.microsoft.com",
    "dns.apple.com",
    "dns.google",
    "dns.msftncsi.com",
    "do.dsp.mp.microsoft.com",
    "docs.google.com",
    "doh.dns.apple.com",
    "doh.opendns.com",
    "dotomi.com",
    "doubleclick.net",
    "doubleverify.com",
    "download.windowsupdate.com",
    "dpm.demdex.net",
    "drive.google.com",
    "dropbox.com",
    "dsca.akamaiedge.net",
    "dscapi6.akamaiedge.net",
    "dscb.akamai.net",
    "dscb.akamaiedge.net",
    "dscd.akamaiedge.net",
    "dsce9.akamaiedge.net",
    "dscg.akamaiedge.net",
    "dscgi3.akamai.net",
    "dscq.akamai.net",
    "dscx.akamaiedge.net",
    "dsp.mp.microsoft.com",
    "dsum-sec.casalemedia.com",
    "dsx.mp.microsoft.com",
    "dt.adsafeprotected.com",
    "e10499.dsce9.akamaiedge.net",
    "e1329.g.akamaiedge.net",
    "e17437.dscb.akamaiedge.net",
    "e2clock.gcp.gvt2.com",
    "e2ro.com",
    "e4478.a.akamaiedge.net",
    "e673.dsce9.akamaiedge.net",
    "e6858.dscx.akamaiedge.net",
    "e69896.dscapi6.akamaiedge.net",
    "eb2.3lift.com",
    "ecs.office.com",
    "edge-mqtt.facebook.com",
    "edge.microsoft.com",
    "edge.skype.com",
    "edgedl.me.gvt1.com",
    "edgekey.net",
    "edgekey.net.globalredir.akadns.net",
    "edgesuite.net",
    "emxdgt.com",
    "endpoint.ingress.rapid7.com",
    "enterprise.activity.windows.com",
    "ess.apple.com",
    "eus.rubiconproject.com",
    "events.data.microsoft.com",
    "events.data.msn.com",
    "events.data.trafficmanager.net",
    "everesttech.net",
    "evidon.com",
    "evoke-windowsservices-tas.msedge.net",
    "exelator.com",
    "exo.nel.measure.office.net",
    "eyeota.net",
    "facebook.com",
    "facebook.net",
    "fastlane.rubiconproject.com",
    "fastly.net",
    "fb.com",
    "fbcdn.net",
    "fbs.smoot.apple.com",
    "fe.apple-dns.net",
    "fe2cr.update.microsoft.com",
    "fe3cr.delivery.mp.microsoft.com",
    "ff.avast.com",
    "firebase-settings.crashlytics.com",
    "firebaseinstallations.googleapis.com",
    "firebaselogging-pa.googleapis.com",
    "firebaseremoteconfig.googleapis.com",
    "firefox.com",
    "firefox.settings.services.mozilla.com",
    "flashtalking.com",
    "flightproxy.teams.microsoft.com",
    "fls.doubleclick.net",
    "fmfmobile.fe.apple-dns.net",
    "fna.fbcdn.net",
    "fontawesome.com",
    "fonts.googleapis.com",
    "fp.measure.office.com",
    "fp.msedge.net",
    "ftl.netflix.com",
    "fw.adsafeprotected.com",
    "g.aaplimg.com",
    "g.akamaiedge.net",
    "g.doubleclick.net",
    "g.live.com",
    "g.whatsapp.net",
    "g03.yahoodns.net",
    "gateway.facebook.com",
    "gateway.fe.apple-dns.net",
    "gateway.icloud.com",
    "gcdn.2mdn.net",
    "gcp.api.snapchat.com",
    "gcp.gvt2.com",
    "geo.moatads.com",
    "geo.prod.do.dsp.mp.microsoft.com",
    "geolocation.onetrust.com",
    "getpocket.cdn.mozilla.net",
    "ggpht.com",
    "giphy.com",
    "global.fastly.net",
    "globalredir.akadns.net",
    "globalsign.com",
    "globalsign.net",
    "gmail.com",
    "go-mpulse.net",
    "go.microsoft.com",
    "go.sonobi.com",
    "godaddy.com",
    "google-analytics.com",
    "google.com",
    "google.internal",
    "googleads.g.doubleclick.net",
    "googleads4.g.doubleclick.net",
    "googleadservices.com",
    "googlehosted.l.googleusercontent.com",
    "googlesyndication.com",
    "googletagmanager.com",
    "googletagservices.com",
    "googleusercontent.com",
    "googlevideo.com",
    "graph.facebook.com",
    "graph.instagram.com",
    "graph.microsoft.com",
    "growth-pa.googleapis.com",
    "gs-loc-new.ls-apple.com.akadns.net",
    "gs-loc.apple.com",
    "gs-loc.ls-apple.com.akadns.net",
    "gsa.apple.com",
    "gsp-ssl.ls-apple.com.akadns.net",
    "gsp-ssl.ls.apple.com",
    "gsp10-ssl.apple.com",
    "gsp64-ssl.ls.apple.com",
    "gsp85-ssl.ls.apple.com",
    "gspe11-ssl.ls.apple.com.edgekey.net",
    "gspe35-ssl.ls.apple.com",
    "gspe79-ssl.ls.apple.com",
    "gum.criteo.com",
    "gumgum.com",
    "guzzoni-apple-com.v.aaplimg.com",
    "guzzoni.apple.com",
    "gvt1.com",
    "gvt2.com",
    "ha.office365.com",
    "hangouts.google.com",
    "hbopenbid.pubmatic.com",
    "hicloud.com",
    "hola.org",
    "hotjar.com",
    "htlb.casalemedia.com",
    "i.instagram.com",
    "i.liadm.com",
    "i.ytimg.com",
    "iad-01.braze.com",
    "iadsdk.apple.com",
    "ib.3lift.com",
    "ib.adnxs.com",
    "ic3.events.data.microsoft.com",
    "ichnaea.netflix.com",
    "icloud-content.com",
    "icloud.com",
    "icloud.com.akadns.net",
    "id.google.com",
    "id.rlcdn.com",
    "id5-sync.com",
    "identrust.com",
    "idsync.analytics.yahoo.com",
    "idsync.rlcdn.com",
    "iecvlist.microsoft.com",
    "ieonlinews.microsoft.com",
    "image2.pubmatic.com",
    "image4.pubmatic.com",
    "image6.pubmatic.com",
    "image8.pubmatic.com",
    "images-na.ssl-images-amazon.com",
    "imap.gmail.com",
    "imasdk.googleapis.com",
    "img-prod-cms-rt-microsoft-com.akamaized.net",
    "img-s-msn-com.akamaized.net",
    "imrworldwide.com",
    "in.appcenter.ms",
    "inappcheck-lb.itunes-apple.com.akadns.net",
    "inappcheck.itunes.apple.com",
    "inbox.google.com",
    "incoming.telemetry.mozilla.org",
    "indexww.com",
    "ingress.rapid7.com",
    "init-p01md.apple.com",
    "init.ess.apple.com",
    "init.itunes.apple.com",
    "init.push.apple.com",
    "insight.adsrvr.org",
    "insightexpressai.com",
    "instagram.c10r.facebook.com",
    "instagram.com",
    "intel.com",
    "internal",
    "iphone-ld.apple.com",
    "iphonesubmissions.apple.com",
    "ipl.opendns.com",
    "ipredictive.com",
    "ipv6.microsoft.com",
    "iris.microsoft.com",
    "itunes-apple.com.akadns.net",
    "itunes.apple.com",
    "jquery.com",
    "js-agent.newrelic.com",
    "js-sec.indexww.com",
    "jsdelivr.net",
    "keyvalueservice.fe.apple-dns.net",
    "krxd.net",
    "kv501.prod.do.dsp.mp.microsoft.com",
    "kv601.prod.do.dsp.mp.microsoft.com",
    "l.doubleclick.net",
    "l.google.com",
    "l.googleusercontent.com",
    "launches.appsflyer.com",
    "lcs-cops.adobe.io",
    "lencr.org",
    "lfodown01-b.cloudsink.net",
    "lh3.google.com",
    "lh3.googleusercontent.com",
    "lh4.googleusercontent.com",
    "lh5.googleusercontent.com",
    "lh6.googleusercontent.com",
    "liadm.com",
    "licdn.com",
    "licensing.mp.microsoft.com",
    "lijit.com",
    "linkedin.com",
    "live.com",
    "live.com.akadns.net",
    "live.net",
    "livetileedge.dsx.mp.microsoft.com",
    "loadm.exelator.com",
    "login.live.com",
    "login.microsoftonline.com",
    "login.windows.net",
    "login5.spotify.com",
    "loki.delve.office.com",
    "lookaside.facebook.com",
    "lpcres.delve.office.com",
    "ls-apple.com.akadns.net",
    "ls.apple.com",
    "ls.apple.com.edgekey.net",
    "m.facebook.com",
    "m.media-amazon.com",
    "mail-ads.google.com",
    "mail.google.com",
    "mail.yahoo.com",
    "manage.microsoft.com",
    "maps.googleapis.com",
    "match.adsrvr.org",
    "match.deepintent.com",
    "match.prod.bidr.io",
    "match.sharethrough.com",
    "mathtag.com",
    "maxcdn.bootstrapcdn.com",
    "mb.moatads.com",
    "me.apple-dns.net",
    "me.gvt1.com",
    "measure.office.com",
    "measure.office.net",
    "media-amazon.com",
    "media.net",
    "meraki.com",
    "messaging.office.com",
    "mesu-cdn.origin-apple.com.akadns.net",
    "mesu.apple.com",
    "metadata.google.internal",
    "metaservices.microsoft.com",
    "metrics.icloud.com",
    "mfadsrvr.com",
    "microsoft.com",
    "microsoftonline.com",
    "mixpanel.com",
    "moatads.com",
    "moatpixel.com",
    "mobile.pipe.aria.microsoft.com",
    "mookie1.com",
    "mozgcp.net",
    "mozilla.com",
    "mozilla.net",
    "mozilla.org",
    "mp.microsoft.com",
    "mqtt-mini.facebook.com",
    "mqtt.c10r.facebook.com",
    "mrodevicemgr.officeapps.live.com",
    "ms-acdc.office.com",
    "msauth.net",
    "msecnd.net",
    "msedge.api.cdp.microsoft.com",
    "msedge.net",
    "msftauth.net",
    "msftconnecttest.com",
    "msftncsi.com",
    "msg.teams.microsoft.com",
    "msgr-latest.c10r.facebook.com",
    "msn.com",
    "mtalk.google.com",
    "myanalytics.cdn.office.net",
    "mzstatic.com",
    "nav.smartscreen.microsoft.com",
    "nccp.netflix.com",
    "nel.cloudflare.com",
    "nel.measure.office.net",
    "nelreports.net",
    "net.globalredir.akadns.net",
    "netflix.com",
    "netflix.net",
    "newrelic.com",
    "news-edge.apple.com",
    "nexus.officeapps.live.com",
    "nexusrules.officeapps.live.com",
    "nflximg.com",
    "nflxso.net",
    "nflxvideo.net",
    "ng.msg.teams.microsoft.com",
    "nleditor.osi.office.net",
    "node.e2ro.com",
    "notifications-pa.googleapis.com",
    "notifications.teams.microsoft.com",
    "notify.adobe.io",
    "nr-data.net",
    "nrdp.nccp.netflix.com",
    "nrdp.prod.ftl.netflix.com",
    "nrdp51-appboot.netflix.com",
    "nrdp52-appboot.netflix.com",
    "ntp.msn.com",
    "ntp.org",
    "o.lencr.org",
    "oauthaccountmanager.googleapis.com",
    "oca.nflxvideo.net",
    "ocsp.apple.com",
    "ocsp.digicert.com",
    "ocsp.godaddy.com",
    "ocsp.pki.goog",
    "ocsp.sca1b.amazontrust.com",
    "ocsp.sectigo.com",
    "ocsp2-lb.apple.com.akadns.net",
    "ocsp2.apple.com",
    "ocws.officeapps.live.com",
    "odc.officeapps.live.com",
    "odr.mookie1.com",
    "office.com",
    "office.net",
    "office365.com",
    "officeapps.live.com",
    "officeclient.microsoft.com",
    "ogs.google.com",
    "omtrdc.net",
    "oneclient.sfx.ms",
    "onenote.net",
    "onetrust.com",
    "opendns.com",
    "openx.net",
    "optimizationguide-pa.googleapis.com",
    "optimizely.com",
    "origin-apple.com.akadns.net",
    "osi.office.net",
    "outbrain.com",
    "outbrainimg.com",
    "outlook-1.cdn.office.net",
    "outlook.com",
    "outlook.ha.office365.com",
    "outlook.office.com",
    "outlook.office365.com",
    "outlookmobile-office365-tas.msedge.net",
    "ow1.res.office365.com",
    "owneriq.net",
    "p.adsymptotic.com",
    "p.rfihub.com",
    "p.typekit.net",
    "p16-sign-va.tiktokcdn.com",
    "pagead2.googlesyndication.com",
    "pancake.apple.com",
    "partner.googleadservices.com",
    "partner.netflix.net",
    "partnerad.l.doubleclick.net",
    "partners.tremorhub.com",
    "passwordsleakcheck-pa.googleapis.com",
    "pbs.twimg.com",
    "pendo.io",
    "people-pa.clients6.google.com",
    "people-pa.googleapis.com",
    "ping.chartbeat.net",
    "pinimg.com",
    "pinterest.com",
    "pipe.aria.microsoft.com",
    "pippio.com",
    "pixel-sync.sitescout.com",
    "pixel.adsafeprotected.com",
    "pixel.advertising.com",
    "pixel.mathtag.com",
    "pixel.quantserve.com",
    "pixel.rubiconproject.com",
    "pixel.tapad.com",
    "pki.goog",
    "platform.hicloud.com",
    "platform.twitter.com",
    "play-fe.googleapis.com",
    "play-lh.googleusercontent.com",
    "play.google.com",
    "play.googleapis.com",
    "play.itunes.apple.com",
    "pm.w55c.net",
    "polka.typekit.com",
    "pool.ntp.org",
    "portal.fb.com",
    "pr-bh.ybp.yahoo.com",
    "pr.ybp.yahoo.com",
    "preapp.prod.partner.netflix.net",
    "presence.teams.microsoft.com",
    "prod.bidr.io",
    "prod.cloud.netflix.com",
    "prod.cms.msn.com",
    "prod.do.dsp.mp.microsoft.com",
    "prod.ftl.netflix.com",
    "prod.netflix.com",
    "prod.partner.netflix.net",
    "protection.outlook.com",
    "proxy.safebrowsing.apple",
    "ps.eyeota.net",
    "pub.3gppnetwork.org",
    "pubads.g.doubleclick.net",
    "pubmatic.com",
    "push-apple.com.akadns.net",
    "push.apple.com",
    "push.prod.netflix.com",
    "px.ads.linkedin.com",
    "px.moatads.com",
    "px.owneriq.net",
    "qq.com",
    "qualtrics.com",
    "quantcount.com",
    "quantserve.com",
    "query.yahoo.com",
    "r3.o.lencr.org",
    "r4.res.office365.com",
    "rapid7.com",
    "reddit.com",
    "redirector.googlevideo.com",
    "res.office365.com",
    "rfihub.com",
    "ris.api.iris.microsoft.com",
    "rkdms.com",
    "rlcdn.com",
    "roaming.officeapps.live.com",
    "rtb-csync.smartadserver.com",
    "rtb.mfadsrvr.com",
    "rtb0.doubleverify.com",
    "rubiconproject.com",
    "rules.quantcount.com",
    "s.amazon-adsystem.com",
    "s.moatpixel.com",
    "s.pinimg.com",
    "s.w.org",
    "s.yimg.com",
    "s.youtube.com",
    "s0.2mdn.net",
    "safebrowsing-proxy.g.aaplimg.com",
    "safebrowsing.apple",
    "safebrowsing.google.com",
    "safebrowsing.googleapis.com",
    "safeframe.googlesyndication.com",
    "samsung.com",
    "sb.scorecardresearch.com",
    "sc-cdn.net",
    "sc.omtrdc.net",
    "sca1b.amazontrust.com",
    "scontent.cdninstagram.com",
    "scontent.xx.fbcdn.net",
    "scorecardresearch.com",
    "script.hotjar.com",
    "sdk.iad-01.braze.com",
    "search.spotxchange.com",
    "sectigo.com",
    "secure.adnxs.com",
    "secure.insightexpressai.com",
    "secure.netflix.com",
    "securepubads.g.doubleclick.net",
    "segment.io",
    "self-events-data.trafficmanager.net",
    "self.events.data.microsoft.com",
    "semasio.net",
    "sentry.io",
    "servedby.flashtalking.com",
    "service.idsync.analytics.yahoo.com",
    "services.mozilla.com",
    "services.visualstudio.com",
    "serving-sys.com",
    "sessions.bugsnag.com",
    "settings-win.data.microsoft.com",
    "settings.crashlytics.com",
    "settings.data.microsoft.com",
    "settings.services.mozilla.com",
    "setup.icloud.com",
    "sfnam.loki.delve.office.com",
    "sfx.ms",
    "shared.global.fastly.net",
    "sharepoint.com",
    "sharethrough.com",
    "signaler-pa.clients6.google.com",
    "simage2.pubmatic.com",
    "simpli.fi",
    "sitescout.com",
    "skype.com",
    "slack.com",
    "slscr.update.microsoft.com",
    "smaato.net",
    "smartadserver.com",
    "smartscreen-prod.microsoft.com",
    "smartscreen.microsoft.com",
    "smoot.apple.com",
    "smp-device-content.apple.com",
    "snapchat.com",
    "sonobi.com",
    "sp.analytics.yahoo.com",
    "spclient.wg.spotify.com",
    "spotify.com",
    "spotxchange.com",
    "srv.stackadapt.com",
    "ssc-cms.33across.com",
    "ssl-images-amazon.com",
    "ssl.google-analytics.com",
    "ssp.yahoo.com",
    "ssum-sec.casalemedia.com",
    "stackadapt.com",
    "stags.bluekai.com",
    "star-mini.c10r.facebook.com",
    "star.c10r.facebook.com",
    "static.ads-twitter.com",
    "static.adsafeprotected.com",
    "static.criteo.net",
    "static.doubleclick.net",
    "static.hotjar.com",
    "static.xx.fbcdn.net",
    "statics.teams.cdn.office.net",
    "stats.g.doubleclick.net",
    "stats.l.doubleclick.net",
    "stickyadstv.com",
    "storage.googleapis.com",
    "storage.live.com",
    "storecatalogrevocation.storequality.microsoft.com",
    "storequality.microsoft.com",
    "substrate.office.com",
    "suite.office.com",
    "support.content.office.net",
    "symantec.com",
    "symcd.com",
    "sync-tm.everesttech.net",
    "sync.1rx.io",
    "sync.crwdcntrl.net",
    "sync.mathtag.com",
    "sync.outbrain.com",
    "sync.search.spotxchange.com",
    "sync.srv.stackadapt.com",
    "sync.taboola.com",
    "sync.targeting.unrulymedia.com",
    "sync.teads.tv",
    "syndication.twitter.com",
    "t.co",
    "t.wayfair.com",
    "taboola.com",
    "tags.bluekai.com",
    "tags.tiqcdn.com",
    "tapad.com",
    "targeting.unrulymedia.com",
    "teads.tv",
    "teams.cdn.office.net",
    "teams.events.data.microsoft.com",
    "teams.microsoft.com",
    "teamviewer.com",
    "technoratimedia.com",
    "telemetry.dropbox.com",
    "telemetry.microsoft.com",
    "telemetry.mozilla.org",
    "templates.cdn.office.net",
    "tiktokcdn.com",
    "tiktokv.com",
    "tile-service.weather.microsoft.com",
    "time-ios.apple.com",
    "time-osx.g.aaplimg.com",
    "time.android.com",
    "time.apple.com",
    "time.windows.com",
    "tiqcdn.com",
    "tlu.dl.delivery.mp.microsoft.com",
    "tlx.3lift.com",
    "token.rubiconproject.com",
    "tpc.googlesyndication.com",
    "tps.doubleverify.com",
    "tr.teams.microsoft.com",
    "trafficmanager.net",
    "trafficshaping.dsp.mp.microsoft.com",
    "trc.taboola.com",
    "tremorhub.com",
    "tribalfusion.com",
    "trouter.teams.microsoft.com",
    "trustarc.com",
    "truste.com",
    "tsfe.trafficshaping.dsp.mp.microsoft.com",
    "tt.omtrdc.net",
    "turn.com",
    "twimg.com",
    "twitter.com",
    "typekit.com",
    "typekit.net",
    "u.openx.net",
    "uci.cdn.office.net",
    "uiboot.netflix.com",
    "uipglob.semasio.net",
    "um.simpli.fi",
    "unagi-na.amazon.com",
    "unitedstates.cp.wd.microsoft.com",
    "unrulymedia.com",
    "update.googleapis.com",
    "update.microsoft.com",
    "upload.fp.measure.office.com",
    "ups.analytics.yahoo.com",
    "urs.microsoft.com",
    "us-api.asm.skype.com",
    "us-east-1.elb.amazonaws.com",
    "us-prod.asyncgw.teams.microsoft.com",
    "us-u.openx.net",
    "us-v20.events.data.microsoft.com",
    "us-west-2.amazonaws.com",
    "us-west-2.elb.amazonaws.com",
    "use.fontawesome.com",
    "use.typekit.net",
    "userlocation.googleapis.com",
    "userstore.skype.com",
    "usertrust.com",
    "v.aaplimg.com",
    "v10.events.data.microsoft.com",
    "v10.vortex-win.data.microsoft.com",
    "v10c.events.data.microsoft.com",
    "v20.events.data.microsoft.com",
    "valid.apple.com",
    "vars.hotjar.com",
    "visualstudio.com",
    "vo.msecnd.net",
    "vortex-win.data.microsoft.com",
    "vortex.data.microsoft.com",
    "w.org",
    "w55c.net",
    "waconafd.officeapps.live.com",
    "waconatm.officeapps.live.com",
    "wayfair.com",
    "wbx2.com",
    "wd.microsoft.com",
    "wdcp.microsoft.com",
    "weather-data.apple.com",
    "weather.com",
    "weather.microsoft.com",
    "web.facebook.com",
    "webex.com",
    "webshell.suite.office.com",
    "wg.spotify.com",
    "whatsapp.net",
    "winatp-gw-eus.microsoft.com",
    "windows.com",
    "windows.net",
    "windowsupdate.com",
    "worldaz.tr.teams.microsoft.com",
    "www-cdn.icloud.com.akadns.net",
    "www-google-analytics.l.google.com",
    "www-googletagmanager.l.google.com",
    "www.amazon.com",
    "www.apple.com",
    "www.bing.com",
    "www.facebook.com",
    "www.google-analytics.com",
    "www.google.com",
    "www.googleadservices.com",
    "www.googleapis.com",
    "www.googletagmanager.com",
    "www.googletagservices.com",
    "www.icloud.com",
    "www.instagram.com",
    "www.linkedin.com",
    "www.microsoft.com",
    "www.msftconnecttest.com",
    "www.youtube.com",
    "x.bidswitch.net",
    "x1.c.lencr.org",
    "xboxlive.com",
    "xp.apple.com",
    "xx.fbcdn.net",
    "yahoo.com",
    "yahoodns.net",
    "ybp.yahoo.com",
    "yieldmo.com",
    "yimg.com",
    "youtube-ui.l.google.com",
    "youtube.com",
    "youtubei.googleapis.com",
    "yt3.ggpht.com",
    "ytimg.com",
    "z.moatads.com",
    "zemanta.com",
    "zeotap.com",
    "zoom.us"
  ],
  "matching_attributes": [
    "hostname",
    "domain",
    "url",
    "domain|ip"
  ],
  "name": "Top 1000 websites from Cisco Umbrella",
  "type": "string",
  "version": 20210713
}