Expand reverse-DNS map and PSL overrides from the live PSL

Parses the private-domains section of the live Public Suffix List and
adds 269 brand-owned suffixes as PSL overrides paired with map
entries, so customer subdomains on shared hosting / SaaS / PaaS
platforms fold to the operator's brand. Adds 33 ASN-domain entries
for the subset of these brands whose IP space is registered under a
different corporate domain in the MMDB, so both the PTR-derived
lookup and the ASN-fallback lookup hit the same (name, type). Also
normalizes ``a2hosting.com`` from ``A2Hosting`` to ``A2 Hosting``
for spelling consistency.

PTR-path wins (overrides + map entries)
- Web hosts: A2 Hosting, alwaysdata, Antagonist, Beget, bplaced,
  Bytemark, Combell, cyber_Folks, cyon, DreamHost, EasyWP, Gehirn,
  HelioHost, home.pl, HostyHosting, Hypernode, IONOS (6 suffixes),
  Jotelulu, JouwWeb, KaasHosting, Keyweb, LCube, LiquidNet, McHost,
  Memset, Mittwald, Mythic Beasts, NearlyFreeSpeech, Nimbus Hosting,
  One.com (20 ccTLD variants), OwnProvider, Pantheon, Planet-Work,
  prgmr, Rackmaze, Rad Web Hosting, Raidboxes, Servebolt,
  SpeedPartner, Uberspace, Whatbox, WP Engine, ZAP-Hosting, Zitcom.
- Dynamic DNS: DuckDNS, DynDNS (24), No-IP (22), Now-DNS, dynv6,
  freemyip, nsupdate.info, ddnss.de, GoIP, DrayTek.
- PaaS/SaaS/IaaS: Netlify, Vercel (6), Heroku, fly.io, Render,
  Firebase/GCP (4), Azure (5), AWS (4), DigitalOcean (2), Red Hat
  OpenShift, Hasura, Supabase, Snowflake/Streamlit, Read the Docs,
  PythonAnywhere, GitHub, GitLab, Adobe Magento.
- Hosted sites/stores: Hatena (6), Notion, Figma, Webflow, Wix (4),
  Shopify, Shopware, Sellfy, Spreadshop (19 ccTLDs), Datto.
- Email/Marketing: Fastmail, ActiveTrail, Leadpages, Heyflow, Carrd,
  Typeform.
- CDN/Technology: Akamai (7), Fastly (3), Yandex Cloud.

ASN-path wins (MMDB coverage now attributes 1,184,256 more IPv4
addresses to a named brand, 85.04% -> 85.08%): yandex.com, ya.ru,
hosting.com (A2 Hosting), beget.com, cyberfolks.pl, fly.io,
bytemark.co.uk, cyberfolks.ro, keyweb.de, mittwald.de, memset.com,
zap-hosting.com, datto.com, jotelulu.com, yandex.cloud, github.com,
asavie.com (Akamai), and 16 others.

Entries are curated from the live PSL rather than any bundled copy;
brand / as_name attribution was verified against the CLAUDE.md rule
that the IP-WHOIS signal is only trusted when the domain name itself
matches the host's name (name-collisions in MMDB were skipped —
Hypernode AU, goipgroup.com, liquidnet.com, One.com substring noise,
nimbusitsolutions.com, etc.). Types follow
``base_reverse_dns_types.txt``; ``sortlists.py`` re-sorts + dedupes +
validates after the batch.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

parsedmarc/resources/maps/psl_overrides.txt

@@ -11,19 +11,288 @@
 -tataidc.co.in
 -veloxfiber.com.br
 -wconect.com.br
+.123hjemmeside.dk
+.123hjemmeside.no
+.123homepage.it
+.123kotisivu.fi
+.123minsida.se
+.123miweb.es
+.123paginaweb.pt
+.123siteweb.fr
+.123webseite.at
+.123webseite.de
+.123website.be
+.123website.ch
+.123website.lu
+.123website.nl
+.3utilities.com
+.a2hosted.com
+.activetrail.biz
+.akadns.net
+.akamai.net
+.akamaiedge.net
+.akamaihd.net
+.akamaized.net
+.alwaysdata.net
 .amazonaws.com
+.amplifyapp.com
+.antagonist.cloud
+.app-ionos.space
+.apps-1and1.com
+.apps-1and1.net
+.appspot.com
+.awsapprunner.com
+.azureedge.net
+.azurestaticapps.net
+.azurewebsites.net
+.basicserver.io
+.beget.app
+.begetcdn.cloud
+.bounceme.net
+.box.ca
+.bplaced.com
+.bplaced.de
+.bplaced.net
+.carrd.co
+.cfolks.pl
 .cloudaccess.net
+.cloudapp.net
+.cloudfront.net
+.cloudfunctions.net
+.cloudsite.builders
 .cprapid.com
+.cpserver.com
+.crd.co
+.customer.speedpartner.de
+.cyon.link
+.cyon.site
+.dattorelay.com
+.dattoweb.com
+.ddns.net
 .ddnsgeek.com
+.ddnsking.com
+.ddnss.de
+.ddnss.org
 .deltahost-ptr
+.dh.bytemark.co.uk
+.digitaloceanspaces.com
+.dnsalias.com
+.dnsalias.net
+.dnsalias.org
+.dnsup.net
+.drayddns.com
+.dreamhosters.com
+.duckdns.org
+.dyn-ip24.de
+.dyndns.biz
+.dyndns.info
+.dyndns.org
+.dyndns.tv
+.dyndns.ws
+.dyndns1.de
+.dynv6.net
+.e4.cz
+.edgecompute.app
+.edgekey.net
+.edgesuite.net
+.editorx.io
+.elasticbeanstalk.com
+.enterprisecloud.nu
+.ewp.live
+.fastlylb.net
 .fastvps-server.com
+.figma.site
+.firebaseapp.com
+.fly.dev
+.freeddns.us
+.freemyip.com
+.freetls.fastly.net
+.gehirn.ne.jp
+.git-repos.de
+.github.io
+.githubusercontent.com
+.gitlab.io
+.goip.de
+.gotdns.com
+.gotdns.org
+.gotpantheon.com
+.hasura-app.io
+.hasura.app
+.hateblo.jp
+.hatenablog.com
+.hatenablog.jp
+.hatenadiary.com
+.hatenadiary.jp
+.hatenadiary.org
+.helioho.st
+.heliohost.us
+.herokuapp.com
+.heyflow.page
+.heyflow.site
+.home-webserver.de
+.homeftp.net
+.homeftp.org
+.homeip.net
+.homelinux.net
+.homelinux.org
+.homesklep.pl
+.homeunix.net
+.homeunix.org
+.hopto.me
+.hopto.org
+.hostedpi.com
+.hosting-cluster.nl
+.hostyhosting.io
+.hypernode.io
 .in-addr-arpa
 .in-addr.arpa
+.jote.cloud
+.jotelulu.cloud
+.jouwweb.site
+.kaas.gg
 .kasserver.com
+.keymachine.de
+.khplay.nl
+.kicks-ass.net
+.kicks-ass.org
 .kinghost.net
+.lcube-server.de
+.leadpages.co
 .linode.com
 .linodeusercontent.com
+.live-website.com
+.lpages.co
+.lpusercontent.com
+.magentosite.cloud
+.mcdir.me
+.mcdir.ru
+.mcpre.ru
+.memset.net
+.miniserver.com
+.mittwald.info
+.mittwaldserver.info
+.mydatto.com
+.mydatto.net
+.mydbserver.com
+.myftp.biz
+.myftp.org
+.myhome-server.de
+.myradweb.net
+.myrdbx.io
+.myshopify.com
+.myspreadshop.at
+.myspreadshop.be
+.myspreadshop.ca
+.myspreadshop.ch
+.myspreadshop.co.uk
+.myspreadshop.com
+.myspreadshop.com.au
+.myspreadshop.de
+.myspreadshop.dk
+.myspreadshop.es
+.myspreadshop.fi
+.myspreadshop.fr
+.myspreadshop.ie
+.myspreadshop.it
+.myspreadshop.net
+.myspreadshop.nl
+.myspreadshop.no
+.myspreadshop.pl
+.myspreadshop.se
 .na4u.ru
+.netlify.app
+.nfshost.com
+.nh-serv.co.uk
+.nimsite.uk
+.no-ip.biz
+.no-ip.ca
+.no-ip.co.uk
+.no-ip.info
+.no-ip.net
+.no-ip.org
+.noip.me
+.noip.us
+.notion.site
+.now-dns.net
+.now-dns.org
+.now.sh
+.nsupdate.info
+.on-web.fr
+.ondigitalocean.app
+.onrender.com
+.own.pm
+.ownip.net
+.ownprovider.com
+.pantheonsite.io
 .plesk.page
+.podzone.net
+.podzone.org
+.pythonanywhere.com
+.rackmaze.com
+.rackmaze.net
+.readthedocs-hosted.com
+.readthedocs.io
+.redirectme.net
+.rhcloud.com
 .sakura.ne.jp
+.selfip.com
+.selfip.net
+.selfip.org
+.sellfy.store
+.serveblog.net
+.servebolt.cloud
+.servehttp.com
+.serveminecraft.net
+.servername.us
+.service.one
+.shopware.shop
+.shopware.store
+.simplesite.com
+.simplesite.com.br
+.simplesite.gr
+.simplesite.pl
+.site.rb-hosting.io
+.snowflake.app
+.square7.ch
+.square7.de
+.square7.net
+.streamlit.app
+.streamlitapp.com
+.supabase.co
+.supabase.in
+.supabase.net
+.svn-repos.de
+.sytes.net
+.trafficmanager.net
+.typeform.com
+.typo3server.info
+.uber.space
+.uk0.bigv.io
+.user.fm
+.usercontent.jp
+.v0.build
+.vercel.app
+.vercel.dev
+.vercel.run
+.virtualserver.io
+.vm.bytemark.co.uk
+.vpndns.net
+.vusercontent.net
+.we.bs
+.web.app
+.webadorsite.com
+.webflow.io
+.webhosting.be
+.website.one
+.websitebuilder.online
+.webspace-host.com
+.webspaceconfig.de
+.wixsite.com
+.wixstudio.com
+.wixstudio.io
+.wpenginepowered.com
+.xen.prgmr.com
+.yandexcloud.net
+.zap.cloud
+.zapto.org
 tigobusiness.com.ni