payload:
    - +.adnexus.net
    - +.msedge.net
    - +.adnxs.com
    - +.bingads.microsoft.com
    - +.ac3.msn.com
    - +.tele.trafficmanager.net
    - +.bn2-ris-ap-prod-atm.trafficmanager.net
    - +.view.atdmt.com
    - +.watson.live.com
    - +.ads.msn.com
    - +.ads1.msads.net
    - +.ads1.msn.com
    - +.aidps.atdmt.com
    - +.aka-cdn-ns.adtech.de
    - +.ssw.live.com
    - +.api.cortana.ai
    - +.spynetalt.microsoft.com
    - +.spynet2.microsoft.com
    - +.bn2-ris-prod-atm.trafficmanager.net
    - +.settingsfd-geo.trafficmanager.net
    - +.secure.flashtalking.com
    - +.bs.serving-sys.com
    - +.c.msn.com
    - +.telemetry.microsoft.com
    - +.azwancan.trafficmanager.net
    - +.rad.msn.com
    - +.rad.live.com
    - +.preview.msn.com
    - +.pre.footprintpredict.com
    - +.msntest.serving-sys.com
    - +.watson.microsoft.com
    - +.insideruser.trafficmanager.net
    - +.ieonlinews.trafficmanager.net
    - +.ieonlinews.microsoft.com
    - +.h2.msn.com
    - +.h1.msn.com
    - +.g.msn.com
    - +.flex.msn.com
    - +.ec.atdmt.com
    - +.db3aqu.atdmt.com
    - +.compatexchange1.trafficmanager.net
    - +.cdn.atdmt.com
    - +.romeccs.microsoft.com
    - +.c.atdmt.com
    - +.hk2sch130021842.wns.windows.com
    - +.hk2sch130020721.wns.windows.com
    - +.bn4sch101121118.wns.windows.com
    - +.bn4sch101121223.wns.windows.com
    - +.bn4sch101121407.wns.windows.com
    - +.bn4sch101121618.wns.windows.com
    - +.bn4sch101121704.wns.windows.com
    - +.bn4sch101121709.wns.windows.com
    - +.bn4sch101121714.wns.windows.com
    - +.bn4sch101121908.wns.windows.com
    - +.bn4sch101122117.wns.windows.com
    - +.bn4sch101122310.wns.windows.com
    - +.bn4sch101122312.wns.windows.com
    - +.bn4sch101122421.wns.windows.com
    - +.bn4sch101123108.wns.windows.com
    - +.bn4sch101123110.wns.windows.com
    - +.bn4sch101123202.wns.windows.com
    - +.bn4sch102110124.wns.windows.com
    - +.ztd.dds.microsoft.com
    - +.bn4sch101121019.wns.windows.com
    - +.bn4sch101120913.wns.windows.com
    - +.bn4sch101120911.wns.windows.com
    - +.cache.datamart.windows.com
    - +.bn4sch101120818.wns.windows.com
    - +.cds1.stn.llnw.net
    - +.cds10.stn.llnw.net
    - +.cds27.ory.llnw.net
    - +.cds1203.lon.llnw.net
    - +.cds1204.lon.llnw.net
    - +.cds1209.lon.llnw.net
    - +.cds1219.lon.llnw.net
    - +.cds1228.lon.llnw.net
    - +.cds1244.lon.llnw.net
    - +.cds1257.lon.llnw.net
    - +.cds1265.lon.llnw.net
    - +.cds1269.lon.llnw.net
    - +.cds1273.lon.llnw.net
    - +.cds1285.lon.llnw.net
    - +.cds1287.lon.llnw.net
    - +.cds1289.lon.llnw.net
    - +.cds1293.lon.llnw.net
    - +.cds1307.lon.llnw.net
    - +.cds1310.lon.llnw.net
    - +.cds1325.lon.llnw.net
    - +.cds1327.lon.llnw.net
    - +.cds177.dus.llnw.net
    - +.cds20005.stn.llnw.net
    - +.cds20404.lcy.llnw.net
    - +.cds20411.lcy.llnw.net
    - +.cds20415.lcy.llnw.net
    - +.cds20416.lcy.llnw.net
    - +.cds20417.lcy.llnw.net
    - +.cds20424.lcy.llnw.net
    - +.cds20425.lcy.llnw.net
    - +.cds20431.lcy.llnw.net
    - +.cds20435.lcy.llnw.net
    - +.cds20440.lcy.llnw.net
    - +.cds20443.lcy.llnw.net
    - +.cds20445.lcy.llnw.net
    - +.cds20450.lcy.llnw.net
    - +.cds20452.lcy.llnw.net
    - +.cds20457.lcy.llnw.net
    - +.cds20461.lcy.llnw.net
    - +.cds20469.lcy.llnw.net
    - +.cds20475.lcy.llnw.net
    - +.cds20482.lcy.llnw.net
    - +.cds20485.lcy.llnw.net
    - +.cds20495.lcy.llnw.net
    - +.cds21205.lon.llnw.net
    - +.cds21207.lon.llnw.net
    - +.cds21225.lon.llnw.net
    - +.cds21229.lon.llnw.net
    - +.cds21233.lon.llnw.net
    - +.cds21238.lon.llnw.net
    - +.cds21244.lon.llnw.net
    - +.cds21249.lon.llnw.net
    - +.cds21256.lon.llnw.net
    - +.cds21257.lon.llnw.net
    - +.cds21258.lon.llnw.net
    - +.cds21261.lon.llnw.net
    - +.cds21267.lon.llnw.net
    - +.cds21278.lon.llnw.net
    - +.cds21281.lon.llnw.net
    - +.cds21293.lon.llnw.net
    - +.cds21309.lon.llnw.net
    - +.cds21313.lon.llnw.net
    - +.cds21321.lon.llnw.net
    - +.cds299.lcy.llnw.net
    - +.cds308.lcy.llnw.net
    - +.cds30027.stn.llnw.net
    - +.cds310.lcy.llnw.net
    - +.cds38.ory.llnw.net
    - +.cds54.ory.llnw.net
    - +.cds405.lcy.llnw.net
    - +.cds406.lcy.llnw.net
    - +.cds407.fra.llnw.net
    - +.cds416.lcy.llnw.net
    - +.cds421.lcy.llnw.net
    - +.cds422.lcy.llnw.net
    - +.cds425.lcy.llnw.net
    - +.cds426.lcy.llnw.net
    - +.cds447.lcy.llnw.net
    - +.cds458.lcy.llnw.net
    - +.cds459.lcy.llnw.net
    - +.cds46.ory.llnw.net
    - +.cds461.lcy.llnw.net
    - +.cds468.lcy.llnw.net
    - +.cds469.lcy.llnw.net
    - +.cds471.lcy.llnw.net
    - +.cds483.lcy.llnw.net
    - +.cds484.lcy.llnw.net
    - +.cds489.lcy.llnw.net
    - +.cds493.lcy.llnw.net
    - +.cds494.lcy.llnw.net
    - +.cds812.lon.llnw.net
    - +.cds815.lon.llnw.net
    - +.cds818.lon.llnw.net
    - +.cds832.lon.llnw.net
    - +.cds836.lon.llnw.net
    - +.cds840.lon.llnw.net
    - +.cds843.lon.llnw.net
    - +.cds857.lon.llnw.net
    - +.cds868.lon.llnw.net
    - +.cds869.lon.llnw.net
    - +.win8.ipv6.microsoft.com
    - +.win1710.ipv6.microsoft.com
    - +.bn4sch101120814.wns.windows.com
    - +.corp.sts.microsoft.com
    - +.win10.ipv6.microsoft.com
    - +.cs1.wpc.v0cdn.net
    - +.bn3sch020022361.wns.windows.com
    - +.vortex.data.microsoft.com
    - +.vortex-sandbox.data.microsoft.com
    - +.a.ads2.msads.net
    - +.diagnostics.support.microsoft.com
    - +.umwatsonc.telemetry.microsoft.us
    - +.test.activity.windows.com
    - +.bn3sch020022335.wns.windows.com
    - +.bn3sch020022328.wns.windows.com
    - +.bn3sch020020749.wns.windows.com
    - +.teredo.ipv6.microsoft.com
    - +.telemetry.urs.microsoft.com
    - +.telemetry.remoteapp.windowsazure.com
    - +.bn3sch020020322.wns.windows.com
    - +.bn3sch020012850.wns.windows.com
    - +.a.ads2.msn.com
    - +.hk2.wns.windows.com
    - +.bn4sch101121109.wns.windows.com
    - +.hk2sch130020723.wns.windows.com
    - +.hk2sch130020726.wns.windows.com
    - +.hk2sch130020729.wns.windows.com
    - +.hk2sch130020732.wns.windows.com
    - +.hk2sch130020824.wns.windows.com
    - +.hk2sch130020843.wns.windows.com
    - +.hk2sch130020851.wns.windows.com
    - +.hk2sch130020854.wns.windows.com
    - +.hk2sch130020855.wns.windows.com
    - +.hk2sch130020924.wns.windows.com
    - +.hk2sch130020936.wns.windows.com
    - +.hk2sch130020940.wns.windows.com
    - +.hk2sch130020956.wns.windows.com
    - +.hk2sch130020958.wns.windows.com
    - +.hk2sch130020961.wns.windows.com
    - +.hk2sch130021017.wns.windows.com
    - +.hk2sch130021029.wns.windows.com
    - +.hk2sch130021035.wns.windows.com
    - +.hk2sch130021137.wns.windows.com
    - +.hk2sch130021142.wns.windows.com
    - +.hk2sch130021153.wns.windows.com
    - +.hk2sch130021217.wns.windows.com
    - +.hk2sch130021246.wns.windows.com
    - +.hk2sch130021249.wns.windows.com
    - +.hk2sch130021260.wns.windows.com
    - +.hk2sch130021264.wns.windows.com
    - +.hk2sch130021322.wns.windows.com
    - +.hk2sch130021323.wns.windows.com
    - +.hk2sch130021329.wns.windows.com
    - +.hk2sch130021334.wns.windows.com
    - +.hk2sch130021360.wns.windows.com
    - +.hk2sch130021432.wns.windows.com
    - +.hk2sch130021433.wns.windows.com
    - +.hk2sch130021435.wns.windows.com
    - +.hk2sch130021437.wns.windows.com
    - +.hk2sch130021440.wns.windows.com
    - +.hk2sch130021450.wns.windows.com
    - +.hk2sch130021518.wns.windows.com
    - +.hk2sch130021523.wns.windows.com
    - +.hk2sch130021526.wns.windows.com
    - +.hk2sch130021527.wns.windows.com
    - +.hk2sch130021544.wns.windows.com
    - +.hk2sch130021554.wns.windows.com
    - +.hk2sch130021618.wns.windows.com
    - +.hk2sch130021634.wns.windows.com
    - +.hk2sch130021638.wns.windows.com
    - +.hk2sch130021646.wns.windows.com
    - +.hk2sch130021652.wns.windows.com
    - +.hk2sch130021654.wns.windows.com
    - +.hk2sch130021657.wns.windows.com
    - +.hk2sch130021723.wns.windows.com
    - +.hk2sch130021726.wns.windows.com
    - +.hk2sch130021727.wns.windows.com
    - +.hk2sch130021730.wns.windows.com
    - +.hk2sch130021731.wns.windows.com
    - +.hk2sch130021754.wns.windows.com
    - +.hk2sch130021829.wns.windows.com
    - +.hk2sch130021830.wns.windows.com
    - +.hk2sch130021833.wns.windows.com
    - +.hk2sch130021840.wns.windows.com
    - +.telemetry.appex.bing.net
    - +.hk2sch130021851.wns.windows.com
    - +.hk2sch130021852.wns.windows.com
    - +.hk2sch130021927.wns.windows.com
    - +.hk2sch130021928.wns.windows.com
    - +.hk2sch130021929.wns.windows.com
    - +.hk2sch130021958.wns.windows.com
    - +.hk2sch130022035.wns.windows.com
    - +.hk2sch130022041.wns.windows.com
    - +.hk2sch130022049.wns.windows.com
    - +.hk2sch130022135.wns.windows.com
    - +.hk2wns1.wns.windows.com
    - +.hk2wns1b.wns.windows.com
    - +.bn3sch020011727.wns.windows.com
    - +.bn3sch020010650.wns.windows.com
    - +.bn3sch020010636.wns.windows.com
    - +.live.rads.msn.com
    - +.bn3sch020010635.wns.windows.com
    - +.bn3sch020010631.wns.windows.com
    - +.bn3sch020010629.wns.windows.com
    - +.nexus.officeapps.live.com
    - +.nexusrules.officeapps.live.com
    - +.spyneteurope.microsoft.akadns.net
    - +.oca.telemetry.microsoft.us
    - +.api.edgeoffer.microsoft.com
    - +.par02p.wns.windows.com
    - +.bn3sch020010618.wns.windows.com
    - +.presence.teams.live.com
    - +.bn3sch020010560.wns.windows.com
    - +.bn3sch020010558.wns.windows.com
    - +.bn2wns1.wns.windows.com
    - +.redir.metaservices.microsoft.com
    - +.sg2p.wns.windows.com
    - +.schemas.microsoft.akadns.net
    - +.b.ads2.msads.net
    - +.settings-win-ppe.data.microsoft.com
    - +.settings-sandbox.data.microsoft.com
    - +.umwatsonc.events.data.microsoft.com
    - +.kmwatson.events.data.microsoft.com
    - +.blobcollector.events.data.trafficmanager.net
    - +.umwatson.events.data.microsoft.com
    - +.browser.pipe.aria.microsoft.com
    - +.onecollector.cloudapp.aria.akadns.net
    - +.nw-umwatson.events.data.microsoft.com
    - +.xblgdvrassets3010.blob.core.windows.net
    - +.ceuswatcab01.blob.core.windows.net
    - +.ceuswatcab02.blob.core.windows.net
    - +.lb1.www.ms.akadns.net
    - +.corpext.msitadfs.glbdns2.microsoft.com
    - +.vortex.data.glbdns2.microsoft.com
    - +.1oavsblobprodcus350.blob.core.windows.net
    - +.weus2watcab02.blob.core.windows.net
    - +.weus2watcab01.blob.core.windows.net
    - +.eaus2watcab02.blob.core.windows.net
    - +.mobile.pipe.aria.microsoft.com
    - +.settings.data.glbdns2.microsoft.com
    - +.kmwatsonc.events.data.microsoft.com
    - +.eaus2watcab01.blob.core.windows.net
    - +.v10.vortex-win.data.microsoft.com
    - +.v20.vortex-win.data.microsoft.com
    - +.37bvsblobprodcus311.blob.core.windows.net
    - +.sqm.telemetry.microsoft.com.nsatc.net
    - +.uks.b.prd.ags.trafficmanager.net
    - +.geo.settings.data.microsoft.com.akadns.net
    - +.v10-win.vortex.data.microsoft.com.akadns.net
    - +.cy2.vortex.data.microsoft.com.akadns.net
    - +.db5.vortex.data.microsoft.com.akadns.net
    - +.geo.settings-win.data.microsoft.com.akadns.net
    - +.geo.vortex.data.microsoft.com.akadns.net
    - +.hk2.settings.data.microsoft.com.akadns.net
    - +.db5-eap.settings-win.data.microsoft.com.akadns.net
    - +.db5.settings.data.microsoft.com.akadns.net
    - +.db5.settings-win.data.microsoft.com.akadns.net
    - +.modern.watson.data.microsoft.com.akadns.net
    - +.asimov-win.settings.data.microsoft.com.akadns.net