diff --git a/CHANGELOG.md b/CHANGELOG.md index d7d4f652..91e71bf1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,17 @@ Changelog ========= -8.10.9 +8.19.0 +------ + +- Add multi-tenant support via an index-prefix domain mapping file +- PSL overrides so that services like AWS are correctly identified +- Additional improvements to report type detection +- Fix webhook timeout parsing (PR #623) +- Output to STDOUT when the new general config boolean `silent` is set to `False` (Close #614) +- Additional services added to `base_reverse_dns_map.csv` + +8.18.9 ------ - Complete fix for #687 and more robust report type detection diff --git a/docs/source/usage.md b/docs/source/usage.md index 6b1a8e3b..bd52f50f 100644 --- a/docs/source/usage.md +++ b/docs/source/usage.md @@ -120,8 +120,10 @@ The full set of configuration options are: Elasticsearch, Splunk and/or S3 - `save_smtp_tls` - bool: Save SMTP-STS report data to Elasticsearch, Splunk and/or S3 + - `index_prefix_domain_map` - bool: A path mapping of Opensearch/Elasticsearch index prefixes to domain names - `strip_attachment_payloads` - bool: Remove attachment payloads from results + - `silent` - bool: Set this to `False` to output results to STDOUT - `output` - str: Directory to place JSON and CSV files in. This is required if you set either of the JSON output file options. - `aggregate_json_filename` - str: filename for the aggregate JSON output file @@ -445,6 +447,28 @@ PUT _cluster/settings Increasing this value increases resource usage. ::: +## Multi-tenant support + +Starting in `8.19.0`, ParseDMARC provides multi-tenant support by placing data into separate OpenSearch or Elasticsearch index prefixes. To set this up, create a YAML file that is formatted where each key is a tenant name, and the value is a list of domains related to that tenant, not including subdomains, like this: + +```yaml +example: + - example.com + - example.net + - example.org + +whalensolutions: + - whalensolutions.com +``` + +Save it to disk where the user running ParseDMARC can read it, then set `index_prefix_domain_map` to that filepath in the `[general]` section of the ParseDMARC configuration file and do not set an `index_prefix` option in the `[elasticsearch]` or `[opensearch]` sections. + +When configured correctly, if ParseDMARC finds that a report is related to a domain in the mapping, the report will be saved in an index name that has the tenant name prefixed to it with a trailing underscore. Then, you can use the security features of Opensearch or the ELK stack to only grant users access to the indexes that they need. + + :::{note} + A domain cannot be used in multiple tenant lists. Only the first prefix list that contains the matching domain is used. +::: + ## Running parsedmarc as a systemd service Use systemd to run `parsedmarc` as a service and process reports as diff --git a/parsedmarc/__init__.py b/parsedmarc/__init__.py index 3f9e6600..c760296a 100644 --- a/parsedmarc/__init__.py +++ b/parsedmarc/__init__.py @@ -1200,12 +1200,14 @@ def parse_report_email( if "Subject" in msg_headers: subject = msg_headers["Subject"] for part in msg.walk(): - content_type = part.get_content_type() + content_type = part.get_content_type().lower() payload = part.get_payload() if not isinstance(payload, list): payload = [payload] payload = payload[0].__str__() - if content_type == "message/feedback-report": + if content_type.startswith("multipart/"): + continue + elif content_type == "message/feedback-report": try: if "Feedback-Type" in payload: feedback_report = payload @@ -1216,13 +1218,12 @@ def parse_report_email( feedback_report = feedback_report.replace("\\n", "\n") except (ValueError, TypeError, binascii.Error): feedback_report = payload - elif content_type == "text/rfc822-headers": sample = payload elif content_type == "message/rfc822": sample = payload elif content_type == "application/tlsrpt+json": - if "{" not in payload: + if not payload.strip().startswith("{"): payload = str(b64decode(payload)) smtp_tls_report = parse_smtp_tls_report_json(payload) return OrderedDict( @@ -1234,7 +1235,6 @@ def parse_report_email( return OrderedDict( [("report_type", "smtp_tls"), ("report", smtp_tls_report)] ) - elif content_type == "text/plain": if "A message claiming to be from you has failed" in payload: try: @@ -1263,7 +1263,7 @@ def parse_report_email( payload = extract_report(payload) if isinstance(payload, bytes): payload = payload.decode("utf-8", errors="replace") - if payload.startswith("{"): + if payload.strip().startswith("{"): smtp_tls_report = parse_smtp_tls_report_json(payload) result = OrderedDict( [("report_type", "smtp_tls"), ("report", smtp_tls_report)] diff --git a/parsedmarc/cli.py b/parsedmarc/cli.py index e2ab976a..3f502f11 100644 --- a/parsedmarc/cli.py +++ b/parsedmarc/cli.py @@ -9,6 +9,7 @@ from configparser import ConfigParser from glob import glob import logging import math +import yaml from collections import OrderedDict import json from ssl import CERT_NONE, create_default_context @@ -46,7 +47,7 @@ from parsedmarc.mail import ( from parsedmarc.mail.graph import AuthMethod from parsedmarc.log import logger -from parsedmarc.utils import is_mbox, get_reverse_dns +from parsedmarc.utils import is_mbox, get_reverse_dns, get_base_domain from parsedmarc import SEEN_AGGREGATE_REPORT_IDS http.client._MAXHEADERS = 200 # pylint:disable=protected-access @@ -101,6 +102,30 @@ def cli_parse( def _main(): """Called when the module is executed""" + def get_index_prefix(report): + if index_prefix_domain_map is None: + return None + if "policy_published" in report: + domain = report["policy_published"]["domain"] + elif "reported_domain" in report: + domain = report("reported_domain") + elif "policies" in report: + domain = report["policies"][0]["domain"] + if domain: + domain = get_base_domain(domain) + for prefix in index_prefix_domain_map: + if domain in index_prefix_domain_map[prefix]: + prefix = ( + prefix.lower() + .strip() + .strip("_") + .replace(" ", "_") + .replace("-", "_") + ) + prefix = f"{prefix}_" + return prefix + return None + def process_reports(reports_): indent_value = 2 if opts.prettify_json else None output_str = "{0}\n".format( @@ -129,7 +154,8 @@ def _main(): elastic.save_aggregate_report_to_elasticsearch( report, index_suffix=opts.elasticsearch_index_suffix, - index_prefix=opts.elasticsearch_index_prefix, + index_prefix=opts.elasticsearch_index_prefix + or get_index_prefix(report), monthly_indexes=opts.elasticsearch_monthly_indexes, number_of_shards=shards, number_of_replicas=replicas, @@ -150,7 +176,8 @@ def _main(): opensearch.save_aggregate_report_to_opensearch( report, index_suffix=opts.opensearch_index_suffix, - index_prefix=opts.opensearch_index_prefix, + index_prefix=opts.opensearch_index_prefix + or get_index_prefix(report), monthly_indexes=opts.opensearch_monthly_indexes, number_of_shards=shards, number_of_replicas=replicas, @@ -216,7 +243,8 @@ def _main(): elastic.save_forensic_report_to_elasticsearch( report, index_suffix=opts.elasticsearch_index_suffix, - index_prefix=opts.elasticsearch_index_prefix, + index_prefix=opts.elasticsearch_index_prefix + or get_index_prefix(report), monthly_indexes=opts.elasticsearch_monthly_indexes, number_of_shards=shards, number_of_replicas=replicas, @@ -235,7 +263,8 @@ def _main(): opensearch.save_forensic_report_to_opensearch( report, index_suffix=opts.opensearch_index_suffix, - index_prefix=opts.opensearch_index_prefix, + index_prefix=opts.opensearch_index_prefix + or get_index_prefix(report), monthly_indexes=opts.opensearch_monthly_indexes, number_of_shards=shards, number_of_replicas=replicas, @@ -299,7 +328,8 @@ def _main(): elastic.save_smtp_tls_report_to_elasticsearch( report, index_suffix=opts.elasticsearch_index_suffix, - index_prefix=opts.elasticsearch_index_prefix, + index_prefix=opts.elasticsearch_index_prefix + or get_index_prefix(report), monthly_indexes=opts.elasticsearch_monthly_indexes, number_of_shards=shards, number_of_replicas=replicas, @@ -318,7 +348,8 @@ def _main(): opensearch.save_smtp_tls_report_to_opensearch( report, index_suffix=opts.opensearch_index_suffix, - index_prefix=opts.opensearch_index_prefix, + index_prefix=opts.opensearch_index_prefix + or get_index_prefix(report), monthly_indexes=opts.opensearch_monthly_indexes, number_of_shards=shards, number_of_replicas=replicas, @@ -638,9 +669,16 @@ def _main(): exit(-1) opts.silent = True config = ConfigParser() + index_prefix_domain_map = None config.read(args.config_file) if "general" in config.sections(): general_config = config["general"] + if "silent" in general_config: + if general_config["silent"].lower() == "false": + opts.silent = False + if "index_prefix_domain_map" in general_config: + with open(general_config["index_prefix_domain_map"]) as f: + index_prefix_domain_map = yaml.safe_load(f) if "offline" in general_config: opts.offline = general_config.getboolean("offline") if "strip_attachment_payloads" in general_config: @@ -1182,7 +1220,7 @@ def _main(): if "smtp_tls_url" in webhook_config: opts.webhook_smtp_tls_url = webhook_config["smtp_tls_url"] if "timeout" in webhook_config: - opts.webhook_timeout = webhook_config["timeout"] + opts.webhook_timeout = webhook_config.getint("timeout") logger.setLevel(logging.ERROR) diff --git a/parsedmarc/constants.py b/parsedmarc/constants.py index afb12557..9fc1c56f 100644 --- a/parsedmarc/constants.py +++ b/parsedmarc/constants.py @@ -1,2 +1,2 @@ -__version__ = "8.18.9" +__version__ = "8.19.0" USER_AGENT = f"parsedmarc/{__version__}" diff --git a/parsedmarc/elastic.py b/parsedmarc/elastic.py index 5c7ca91e..d951d883 100644 --- a/parsedmarc/elastic.py +++ b/parsedmarc/elastic.py @@ -427,7 +427,9 @@ def save_aggregate_report_to_elasticsearch( except Exception as error_: raise ElasticsearchError( "Elasticsearch's search for existing report \ - error: {}".format(error_.__str__()) + error: {}".format( + error_.__str__() + ) ) if len(existing) > 0: @@ -740,7 +742,9 @@ def save_smtp_tls_report_to_elasticsearch( except Exception as error_: raise ElasticsearchError( "Elasticsearch's search for existing report \ - error: {}".format(error_.__str__()) + error: {}".format( + error_.__str__() + ) ) if len(existing) > 0: diff --git a/parsedmarc/opensearch.py b/parsedmarc/opensearch.py index d947ea74..e9e805da 100644 --- a/parsedmarc/opensearch.py +++ b/parsedmarc/opensearch.py @@ -427,7 +427,9 @@ def save_aggregate_report_to_opensearch( except Exception as error_: raise OpenSearchError( "OpenSearch's search for existing report \ - error: {}".format(error_.__str__()) + error: {}".format( + error_.__str__() + ) ) if len(existing) > 0: @@ -740,7 +742,9 @@ def save_smtp_tls_report_to_opensearch( except Exception as error_: raise OpenSearchError( "OpenSearch's search for existing report \ - error: {}".format(error_.__str__()) + error: {}".format( + error_.__str__() + ) ) if len(existing) > 0: diff --git a/parsedmarc/resources/maps/base_reverse_dns_map.csv b/parsedmarc/resources/maps/base_reverse_dns_map.csv index 91637b8f..c733c0ff 100644 --- a/parsedmarc/resources/maps/base_reverse_dns_map.csv +++ b/parsedmarc/resources/maps/base_reverse_dns_map.csv @@ -1,9 +1,8 @@ base_reverse_dns,name,type 1000island.net,1000 Island,ISP -101-clientes-izzi.mx,Izzi Telecom,ISP -118-clientes-izzi.mx,Izzi Telecom,ISP +163.com,163,Email Provider 163data.com.cn,China Telecom,ISP -197-clientes-izzi.mx,Izzi Telecom,ISP +180medical.com,180 Medical,Healthcare 1e100.net,Google,Technology 263.net,263,Email Provider 2day.kz,2DAY Telecom LLP,ISP @@ -13,12 +12,12 @@ base_reverse_dns,name,type 3kt.eu,3K Technology,MSP 4gbhost.com,4GBHost,Web Host 82-165-19-207.plesk.page,Digital Health Portal,Healthcare -93-clientes-zap-izzi.mx,Izzi Telecom,ISP -98-clientes-izzi.mx,Izzi Telecom,ISP +United-domains.de,United Domains,Web Host a2hosting.com,A2Hosting,Web Host aaltoscientific.com,Aalto Scientific,Healthcare aams6.jp,"BroadBand Security, Inc",MSSP ab-group.biz,AsiaBell,ISP +aba2net.com,ABA2Net,ISP abchk.net,ABCHK,Web Host abnormal-email.com,Abnormal AI,Email Security academiasupport.org,Academia Support Japan,Education @@ -26,7 +25,10 @@ accessmedlab.com,Access Medical Labs,Healthcare acelerate.net,AXS Bolivia S. A.,ISP acessecomunicacao.com.br,Acesse,ISP acessoline.net.br,Alt Telecom,ISP +ach.or.jp,Ageo Central General Hospital,Healthcare +acropolis.org,New Acropolis,Education activegate-ss.jp,Active! gate SS,Email Security +adabank.com.tr,Dünya Katılım,Finance adairit.com,Adair IT,MSP additionnetworks.net,CherryRoad Technologies,MSP admintek.net,Admintek,Web Host @@ -55,6 +57,7 @@ aircomusa.com,FaxPipe (Formerly AirCom USA),SaaS airgas.com,Airgas,Industrial airtel.co.zm,Airtel,ISP airtel.in,Airtel,ISP +airtel.ne,Airtel,ISP airtelbroadband.in,Airtel,ISP airtelkenya.com,Airtel,ISP ajrmexico.net,AJR,Logistics @@ -66,7 +69,10 @@ alembic.co.in,Alembic Pharmaceuticals,Healthcare alestra.net.mx,Alestra,ISP aliyun.com,Alibaba Cloud,Web Host alliancebroadband.in,Alliance Broadband,ISP +alligacom.com,TrueCommerce,SaaS +alltradebusiness.it,AllTrade Business,Marketing almanet.net,Alma Communications,ISP +almobile.com,AL Mobile,SaaS alpha-mail.net,Otsuka Corporation,MSP alpha-prm.jp,Otsuka Corporation,MSP altel.kz,Atal,ISP @@ -76,7 +82,9 @@ alwaysdata.com,alwaysdata,Web Host amazon.com,Amazon,Technology amazonaws.com,Amazon Web Services (AWS),PaaS amazonses.com,Amazon SES,SaaS +amberit.net,Amber IT,ISP ambisys.net,Ambisys,Healthcare +amdintl.com.tw,Kangjian Biomedical Technology,Healthcare america.net,America.net,Web Host americanam.org,American Advanced Management,Healthcare amethyst.co.jp,Amethyst,Healthcare @@ -89,15 +97,21 @@ antilles-sante.com,AAS Medical,Healthcare antispamcloud.com,N-able,Email Security antispameurope.com,Hornetsecurity,Email Security anylogic.com,AnyLogic,SaaS +aopa.org,AOPA,Travel +apaudit.eu,Transparent,Finance aplusgroup.net,A Plus International,Healthcare apple.com,Apple,Email Provider +applefibernet.com,Apple Fibernet,ISP applicationx.net,Application X,MSP appriver.com,OpenText AppRiver,Email Security aps-inc.co.jp,Arahi Polyslider,Industrial aqmhost.net,AqmHost,Web Host aragon.es,Government of Aragon,Government +arapabruzzo.it,ARAP,Industrial archerirm.us,Archer GRC,SaaS +arcor-ip.net,Vodafone,ISP arena.ne.jp,WebARENA,ISP +arij.org,ARIJ Institute,Nonprofit arizona.edu,University of Arizona,Education arpinet.am,Arpinet,ISP artehosting.com.mx,Artehosting,Web Host @@ -114,6 +128,8 @@ assaytechnology.com,Assay Technology,Industrial assentportal.com,Assent,SaaS assp.org,American Society of Safety Professionals,Healthcare asteria.com,Asteria,SaaS +asu-vei.ru,ASU-VEI,Industrial +atextelecom.com.br,ATEX Telecom,ISP atmailcloud.com,atmail,Email Provider ats.ca,ATS Healthcare,Healthcare atw.ne.jp,ATW,Web Host @@ -136,21 +152,28 @@ azure.com,Microsoft Azure,PaaS backland.net,Backland Communications,MSP balifiber.id,BaliFiber,ISP banchero.org,Bancharo Disability Services,Healthcare +bankofamerica.com,Bank of America,Finance +barak-online.net,Netvision,ISP barracuda.com,Barracuda,Email Security barvanet.kz,Barvanet,MSP basketnews.lt,BasketNews,Sports +basmail.jp,TOKI Communications Corporation,ISP bayada.com,BAYADA Home Health Care,Healthcare bayer.de,Bayer,Healthcare bayoulandcs.com,Bayouland Computer Solutions,MSP bbemaildelivery.com,BombBomb,Marketing bbnetup.com.br,BBNET UP,ISP bbtel.com,BBTEL,ISP +bcdtravelmexico.com.mx,BCD Travel Mexico,Travel bcs.org,BCS,Nonprofit +bdcom.com,BDCOM Online,ISP beaumont.org,Corewell Health (Formerly Beaumont),Healthcare +bedbathandbeyond.com,Bed Bath & Beyond,Retail bell.ca,Bell Canada,ISP bell.net,Bell Canada,ISP benkan.co.jp,Benkan,Industrial berea.edu,Berea College,Education +berkeley.edu,UC Berkley,Education betterhomeowners.com,InTouch Systems,Marketing bezeqint.net,Bezeq International,ISP bigcommerce.net,BigCommerce,SaaS @@ -163,19 +186,24 @@ bisno1.co.jp,"Bis Co., Ltd.",Construction bisv.ru,Bisv.ru,ISP blackfriarsam.com,Blackfriars Asset Management,Finance blacknight.com,Blacknight Solutions,Web Host +blacksun.ca,MSP Corp,Web Host blanksoft.dev,BlankSoft,MSP +blinktelecom.com.br,Blink Telecom,ISP blitzmediahosting.ca,Blitz Media,Web Host bls.gov,U.S. Bureau of Labor Statistics,Government bluehost.com,Bluehost,Web Host bluemission.net,Blue Mission,Web Host bluesea.org,Blue Sea Foundation,Marketing bluetie.com,BlueTie,MSP +bnpparibas.com,BNP Paribas,Finance bnpparibas.fr,Banque BNP Paribas,Finance bohc.co.jp,Benefit One Inc.,Retail +bol-online.com,Bangladesh Online,ISP bookingtimes.com,BookingTimes,SaaS bostrad.com,Bostrad Supply Chain Ltd,Logistics bov.com,Bank of Valletta,Finance bracnet.net,BRACNet Limited,ISP +brandeis.edu,Brandeis University,Education brasildigital.net.br,Brasil Digital Telecom,ISP bravehost.com,Bravenet,Web Host bravenet.com,Bravenet,Web Host @@ -188,6 +216,7 @@ bright.net,CNI,ISP brightspace.com,D2l Brightspace,SaaS brinkster.com,Brinkster,Web Host brisanet.net.br,Brisianet,ISP +broadband.hu,One Hungary,ISP broadridge.com,Broadridge,Finance btc-net.bg,Viacom,ISP btopenworld.com,BT,ISP @@ -197,6 +226,7 @@ bumblebeelinens.com,Bumbletree Linens,Retail bunkaren.or.jp,Japan Culture and Welfare Federation of Agricultural Cooperatives,Agriculture burnhamholdings.com,Burnham Holdings,Industrial buroserv.net.au,Brunoserv,ISP +c3.net.pl,C3 NET,ISP cable.net.co,Cablenet,ISP cablecom.ch,UPC,ISP cableonda.net,Cable Onda,ISP @@ -213,27 +243,34 @@ cardhealth.com,Cardinal Health,Healthcare cardinal.com,Cardinal Health,Healthcare cardinalhealth.com,Cardinal Health,Healthcare carecentrix.com,CareCentrix,Healthcare +carleton.edu,Carlton College,Education carrierzone.com,carrierzone,Email Security carsforkids.org,Cars For Kids,Nonprofit case.edu,Case Western Reserve University,Education castrum.com.br,Castrum Internet,ISP catnet.jp,Honjo Cable,ISP cbe.ae,CBE,Construction +cbssports.com,CBS Sports,Entertainment cbwchc.org,Charles B. Wang Community Health,Healthcare ccc-group.com,Canada Colors and Chemicals Limited (CCC),Industrial cdbhospital.com,CBD Hospital,Healthcare celeste.fr,CELESTE,ISP +celsiainternet.com,Celsia Internet,ISP centerasecurity.com,Centera Email Defence,Email Security centerasecurity.dk,Centera Email Defence,Email Security centralesupelec.fr,CentraleSupélec,Education centralinteractiva.com.mx,Central Interactiva,Marketing centralnetx.com.br,Centralnet,ISP centurylink.com.pe,Cirion,MSP +centurylink.net,CenturyLink,ISP certronic.com.ar,Certronic,SaaS +ceystel.com.ar,CeySTEL,ISP ch-saintcalais.fr,Centre Hospitalier du Mans,Healthcare chaiyohosting.com,Chaiy oHosting,Web Host changethatup.com,Change That Up,Healthcare charter.net,Charter,ISP +chase.com,Chase Bank,Finance +cheetahmail.com,Marigold,SaaS chiba-u.jp,Chiba University,Education chikamori.com,Chikamori Health Care Group,Healthcare childrenscolorado.org,Children's Hospital Colorado,Healthcare @@ -247,6 +284,7 @@ circleamedical.com,Circle A Medical,Healthcare cirrushosting.com,Cirrus Hosting,Web Host cisco.com,Cisco,Technology cityemail.com,CityEmail,Email Provider +cjas.org,Cornell Anime Club,Education ckt.net,Craw-Kan Telephone Cooperative,ISP clarix.com,Clarix,MSP claro.com.do,Claro,ISP @@ -256,20 +294,28 @@ claytonindustries.com,Clayton Industries,Industrial clearwave.com,Clearwave Fiber,ISP clemson.edu,Clemson University,Education clicktelecomunicacoes.com.br,Click Telecomunicações,ISP +clientes-izzi.mx,Izzi Telecom,ISP +clientes-zap-izzi.mx,Izzi Telecom,ISP climaideal.com,Clima Ideal,Retail clinique-saint-george.com,Polyclinique Saint George,Healthcare +cloud-mail.jp,CloudMail,Email Provider cloud-sec-av.com,Check Point Avanan,Email Security +cloudaccess.net,CloudAccess.net,Web Host cloudezapp.io,EmailHeads.NET,Marketing cloudfilter.net,Proofpoint Cloudmark,Email Security cloudflare-email.com,Cloudflare,Email Security cloudflare-email.net,Cloudflare,Email Security cloudflare.net,Cloudflare,SaaS +cloudhost.web.id,PT Cloud Hosting Indonesia,Web Host clouditalia.com,Retelit,Web Host cloudwaysapps.com,Cloudways,Web Host cloudwebhosting.com,NameHero,Web Host clsvrsystems.net,GMO Cloud,IaaS clubexpress.com,ClubExpress,SaaS +cmo.de,CMO,Web Host +cn4e.com,35.com,Web Host cniteam.com,CNI,ISP +coastalhosting.net,coastalhosting.net,Web Host cod.edu,College of DuPage,Education codetel.net.do,codetel.net.do,ISP coeficiente.net.mx,Coeficiente,ISP @@ -277,6 +323,7 @@ coex.co.kr,COEX,Marketing cogeco.ca,Cogeco,ISP cogeco.net,Cogoco,ISP cognizant.com,Cognizant,Technology +collascrill.com,Collas Crill,Legal collectivhosting.com,Collectiv,Web Host colocrossing.com,ColoCrossing,ISP colos.kz,IFC COLOS,Logistics @@ -290,13 +337,16 @@ communitymedical.org,Community Medical Centers,Healthcare complemar.com,Complemar,Logistics compliancearchitects.net,Compliance Aarchitects,Healthcare compu-type.net,Compu-Type,MSP +compusystems.com,CompuSystems,SaaS computerguyz.ca,Computer Guyz,MSP +computerstlouis.com,Computer St. Louis,MSP computronics.com,Computronics,Technology comune.livorno.it,Città di Livorno,Government comunitel.net,Vodafone,ISP concurcompleat.com,Concur Compleat,SaaS concursolutions.com,SAP Concur,SaaS condosites.net,CondoSites,SaaS +conecttelecom.com.br,Connect Telecom,ISP conoha.ne.jp,ConoHa,Web Host consolidatedlabel.com,Consolidated Label,Print constantcontact.com,Constant Contact,Marketing @@ -310,6 +360,8 @@ corbina.ru,PJSC VimpelCom,ISP corblock.com,Corblock,Industrial corewellhealth.org,Corewell Health,Healthcare cornell.edu,Cornell University,Education +corp-email.com,Shanghai Qingyu Computer Technology,Email Security +cotas.com.bo,Cotas,ISP cotecal.com.ar,Cotecal,ISP cotton-warehouse.com,Cotton Warehouse Classic Cars,Automotive coucou-networks.fr,Free Mobile,ISP @@ -319,10 +371,12 @@ cpanelhost.cl,cPanelHost,Web Host cpi.ad.jp,CPI,Web Host cpi340b.com,Contract Pharmacy Insight,Healthcare cpsinet.com,TruBridge,Healthcare +creatingpossibilities.co.uk,Creating Possibilities,Marketing creehan.com,Inovalon (Formerly Creehan & Company),Healthcare crossinx.com,Unifiedpost Group,SaaS crowncloud.net,CrownCloud,Web Host crxmgmt.com,The Medicine Shoppe Franchisee,Healthcare +cslox.com,CS LoxInfo,ISP csloxinfo.com,CSL,MSP csod.com,Cornerstone,SaaS ctbcbank.com.ph,CTBC Bank (Philippines) Corp.,Finance @@ -337,13 +391,18 @@ cwru.edu,Case Western Reserve University,Education cyberfuel.com,Cyberfuel.com,Web Host cyberlynk.net,CyberLynk,MSP cybermail.jp,CyberMail,Email Provider +cybermesa.com,Cyber Mesa,ISP cybernextech.co.th,CYBER NEXTECH,Web Host cyfrowypolsat.pl,Polsat Box,ISP +cynet.com.my,Cynet,Web Host +cynethost.com,Cynet,Web Host cyon.net,Cyon,Web Host d2s.cloud,d2s.cloud,Web Host daemonmail.ner,DaemonMail,Email Provider +daemonmail.net,TierraNet,Web Host dailyinvesthub.com,Daily Invest Hub,Finance dailyrazor.com,DailyRazor,Web Host +dal.net.tr,DALNET,Web Host damcogroup.com,Damco Solutions,MSP damel.com,Damel Group,Food daraju.com,Daraju,Healthcare @@ -354,6 +413,7 @@ dattar.com.ar,Dattar,MSP dattaweb.com,HostMar,Web Host daystar.io,Daystar Email Service,Email Provider ddccommunications.com,DDC public affairs,Marketing +ddnsgeek.com,Dynu,Web Host default-host.net,INHOSTED LP,Web Host delhitel.net,Delhi Telephone Company,ISP deliverychain.io,Delivery Chain,SaaS @@ -363,6 +423,7 @@ dfn.nl,DELTA Fiber,ISP dgsys.es,DGsys,Web Host dhl.com,DHL,logistics diakovere.de,DIAKOVERE,Healthcare +dialego.de,Dialego,Marketing digijadoo.net,Jadoo Digital,ISP digikabel.hu,One Hungary (Formerly DIGI),ISP digitalairstrike.com,Digital Air Strike,Marketing @@ -380,6 +441,7 @@ dnchosting.com,Directnic,Web Host dnns.net,No-IP Dynamic DNS,Web Host dnsthai.com,Aptum Technologies,MSP doctors.org.uk,Doctors.net.uk,Healthcare +docusign.com,Docusign,SaaS domaincentral.com.au,Domain Central,Web Host domaineinternet.ca,Rapidenet Canada,Web Host domainit.com,DomainIt,Web Host @@ -393,6 +455,7 @@ draminski.com,Dramiński Technology,Healthcare dreamcompute.com,Dreamhost,Web Host dreamhost.com,Dreamhost,Web Host dreamhostps.com,Dreamhost,Web Host +drew.edu,Drew University,Education drive.ne.jp,Drive Network,Web Host drjapan-jp.com,"Dr. Japan Co., Ltd.",Healthcare dslon.ws,Dslon Wireless,ISP @@ -401,6 +464,8 @@ dsw.com,DSW,Retail dtel.com.br,Dtel Telecom,ISP dts-security.de,DTS,MSP duck.com,DuckDuckGo,Search Engine +duke.edu,Duke University,Education +dunyakatilim.com.tr,Dünya Katılım,Finance dvcotechnology.com,Cision,Marketing dwgreen.com,DW Green Company,Marketing dwit.co.kr,Daewon Information Technology Co.,MSP @@ -416,16 +481,19 @@ eastlink.ca,Eastlink,ISP easy-hebergement.net,Easy-Hébergement,Web Host easydns.com,easyDNS,Web Host easymail.ca,easyMail,Email Provider +easyonnet.io,Easy on Net,Web Host easyseo.com.my,SEO Services Malaysia,Marketing easyweb.com,easyDNS,Web Host eboundhost.com,eBoundhost,Web Host echolabs.net,Echo Labs,MSP echoworx.net,Echoworx,Email Security ecm8.com,Campaign Master (UK),Marketing +ecosoft.com,Ecosoft,Industrial ecritel.net,Ecritel,MSP edgepark.com,Edgepark,Healthcare edu.com,InstructionalAssistant,SaaS eduneering.com,UL EHS training,SaaS +eforw.com,Eforw,Email Provider egov.com,Tyler Technologies,SaaS egress.cloud,Egress Software,Email Security egs-seg.gc.ca,Canada Government Electronic Directory Services (GEDS),Government @@ -457,15 +525,18 @@ empaquesmundiales.com,Empaques Mundiales,Industrial emporiaresearch.com,Emporia,SaaS emsecure.net,Selligent,Marketing emsend2.com,ActiveCampaign,Marketing +enagroup.net,ENA Group,Construction encrypttitan.net,EncryptTitan,Email Security enguard.com,EnGuard,Email Security eninetworks.com,ENI Networks,ISP +enova.com,Enova International,Finance entelchile.net,Entel,ISP entelvias.com.br,Entelvias,ISP enternetprovedor.com.br,Enternet,ISP entrata.com,Entrata,SaaS entrustedmail.net,EntrustedMail,Email Security eonemedia.com,eOneMedia,Photography +epbfi.com,EPB,ISP epicpc.com,Epic Health,Healthcare epicura.be,EpiCURA,Healthcare epsl1.com,Publicis Groupe,Marketing @@ -473,12 +544,15 @@ erie.gov,"Erie County, New York",Government erlabrunn.de,Kliniken Erlabrunn,Healthcare ertelecom.ru,ER-Telecom,ISP eskerondemand.com,Esker,SaaS +esosoft.net,EcoSoft,Web Host etc.uz,East Telecom,ISP etex.net,Etex,ISP +ethunder-hosting.com,Ethunder Hosting,Web Host etik-cloud.com,Infomaniak,IaaS etipres.com,ETIPRES,Print etius.jp,WebArena,Web Host etouches.com,Stova,SaaS +etronsol.com,Etron Solutions,MSP eventsairmail.com,EventsAir,SaaS evernet.net.co,Evernet,ISP evertecinc.com,Evertec,Finance @@ -491,24 +565,30 @@ expedia.net,Expedia,Travel explori.com,Explori,Event Planning expositltd.com,Exposit Ltd.,MSP express.com.ar,Express Telecomunicaciones,ISP +ezhostingserver.com,Hostek,Web Host ezorg.nl,E-Zorg,Healthcare fap.mil.pe,La Fuerza Aérea del Perú (FAP),Government fast.net.id,Linknet-Fastnet,ISP +fast.net.kg,Skynet Telecom,ISP fastnet.kg,FastNet,ISP fastspeed.dk,Fastspeed,ISP +fastvps-server.com,P.A.G.M. OU,Web Host feasa.ie,Feasa,Industrial fedex.com,FedEx,Logistics ferreterialindavista.com,Somos Ferreteria Lindavista,Retail fetnet.net,FETNet,ISP fgl.com.mx,Francisco Garcia Lopez,Healthcare +fiber.net.id,Fiber Networks Indonesia,ISP fiberhub.com,FiberHub,ISP fibertel.com.ar,Personal,ISP fibextelecom.net,Fibex Telecom,ISP fibralink.net.br,Fibralink,ISP fibrenoire.ca,fibrenorie,ISP +finanzaworld.net,FinanzaWorld,Finance fireeyecloud.com,FireEye,Email Security fireeyegov.com,FireEye (Government),Email Security firstcloudsecurity.net,CyberCision,Email Security +firstmarketingservices.in,First Marketing Services,Marketing fisherpaykel.com,Fisher & Paykel,Retail fisquare.com,Infince,SaaS flashmaistelecom.com.br,Flash + Telecom,ISP @@ -521,6 +601,7 @@ fmcna.com,Fresenius Medical Care,Healthcare fmu.ac.jp,Fukushima Medical University,Education fonacit.gob.ve,Fonacit,Government foodtecsolutions.com,FoodTec Solutions,SaaS +fordperformanceracingschool.com,The Ford Performance Racing School,Automotive formassembly.com,FormAssembly,SaaS forpsi.com,Forpsi,Web Host forthnet.gr,Nova,ISP @@ -528,12 +609,14 @@ fortimail.com,Fortinet FortiMail,Email Security fortimailcloud.com,Fortinet FortiMail Cloud,Email Security forwardemail.net,ForwardEmail.net,Email Provider fourseasonspediatrics.com,Four Seasons Pediatrics,Healthcare +fphonline.com,Family Pet Hospital,Healthcare francedns.com,Eurofiber France,ISP franchisemail.net,FranConnect,SaaS franweb.net.br,FRAN WEB,ISP freehostia.com,Freehostia,Web Host freehosting.com,FreeHosting.com,Web Host freemail.hu,Freemail bejelentkezés,Email Provider +freemediainternet.com,freemediainternet.com,Web Host frontiir.com,FRONTiiR,MSP fuertehoteles.com,Fuerte Group Hotels,Travel fujibake.co.jp,Fuji Bakelite,Industrial @@ -557,6 +640,7 @@ generalinformatix.net,General Informatix,Technology genoray.com,GENORAY,Healthcare genstarnetcable.com,Gennstar Network Solutions,ISP gerberlife.com,Gerber Life Insurance,Finance +getkeepsafe.com,Keepsafe Software,SaaS ggsv.jp,Techorus,Web Host ghm-grenoble.fr,Groupe hospitalier mutualiste de Grenoble,healthcare glasgow-ky.com,Glasgow EPB,ISP @@ -572,21 +656,27 @@ godaddy.com,GoDaddy,Web Host goldmedimport.com.br,Goldmed import,Healthcare gom.co.za,Graytown Office Machines,MSP google.com,Google (Including Gmail and Google Workspace),Email Provider +googlefiber.net,Google Fiber,ISP googleusercontent.com,Google Cloud Platform (GCP),PaaS gosecure.net,GoSecure,Email Security goskope.com,Netskope,Email Security gov.in,Indian government,Government +gov.pf,The Government of French Polynesia,Government +govdelivery.com,Goranicus,SaaS gpphosted.com,Proofpoint (Government),Email Security grainger.ca,Grainger Industrial Supply,Industrial grainger.com,Grainger Industrial Supply,Industrial graysmark.net,Graysmark Business Systems,MSP +greatmail.com,Greatmail,Email Provider greenarrowmail.com,GreenArrow,SaaS greenconsulting.it,Green Consulting,MSP +greengeeks.net,GreenGeeks,Web Host grupocybernet.com.br,Grupo Cybernet,ISP gruposalinas.com.mx,Groupo Salinas,Conglomerate gsbridge.com,Golden State Bridge,Industrial gtnexus.com,Infor Nexus (Formerly GT Nexus),SaaS gts.sk,GTS Slovakia,ISP +gtxnet.com.br,GTXNET,ISP guardedhost.com,Omnis Network,Web Host gunma-u.ac.jp,Gunma University,Education gva.es,Generalitat Valenciana,Government @@ -600,6 +690,7 @@ hap.be,CHU Ambroise Paré,Healthcare harrishealth.org,Harris Health System,Healthcare harvard.edu,Harvard University,Education hathway.com,Hatchway,ISP +hcg.gr,Greek Coast Guard,Government hctc.net,Hill County Telephone Cooperative (HXTC),ISP hdems.com,HENNGE Mail Archive,SaaS hdsupply-email.com,HD Supply,Retail @@ -609,6 +700,7 @@ healthproductsforyou.com,Health Products For You,Healthcare helloserver6.com,1st Source Web,Marketing helpforcb.com,InterServer,Web Host helpscout.net,Help Scout,SaaS +henet.com.br,He-Net,ISP herbion.com,Herbion,Healthcare heteml.jp,GMO,Web Host hey.com,HEY,Email Provider @@ -620,16 +712,19 @@ highradiuscorp.com,HighRadius,Finance highspot.com,Highspot,Marketing highwire.org,HighWire,SaaS hinet.net,HiNet,ISP +hitmedios.com,HT Medios,MSP hiwaay.net,HuWAAY,ISP hiworks.co.kr,hiworks,SaaS hmcaguas.com,Puerto Rico Telephone Company,ISP hoaspace.com,HOA Space,SaaS hokudai.ac.jp,Hokkaido University,Education hol.gr,Vodafone,ISP +home.pl,home.pl,Web Host homesteadhealthcareservices.com,Homestead Health Care Services,Healthcare hornetsecurity.com,Hornetsecurity,MSSP hosp.kaizuka.osaka.jp,Kaizuka City Hospital,Healthcare hostatom.com,hostatom,Web Host +hostdent.com,HostNDent,Healthcare hosted-by-robovps.ru,RoboVPS,Web Host hostedemail.com,HostedEmail.com,Email Provider hostek.com,HOSTEK,Web Host @@ -641,6 +736,7 @@ hosting-mexico.net,Hosting-Mexico,Web Host hosting-universal.com,Hosting Universal,Web Host hosting.ie,Irish Domains Limited,Web Host hostinger.io,Hostinger,Web Host +hostingturkiye.com.tr,Hosting Turkiye,Web Host hostlife.net,HOSTLIFE,Web Host hostmonster.com,Hostmonster,Web Host hostnet.nl,Hostnet,Web Host @@ -655,6 +751,7 @@ hostsevenplus.com,HostSevenPlus,Web Host hostspeedy.com,Host Speedy,Web Host hostwindsdns.com,Hostwinds,Web Host hotnet.net.il,Hot Net Internet Services,ISP +hp.com,HP,Technology hringdu.is,Hringdu,ISP hspherefilter.com,"DynamicNet, Inc. (DNI)",Web Host htc.net,HTC,ISP @@ -670,6 +767,7 @@ ice.co.cr,Grupo ICE,Industrial icehosting.nl,IceHosting,Web Host icewarpcloud.in,IceWrap,Email Provider icoremail.net,Coremail,Email Provider +idealinsurancebrokersng.com,Ideal Insurance Brokers,Finance ideaservers.net,Hetzner,Web Host identibitsuisse.ch,identibit suisse,Marketing idig.net,Canadian Web Hosting,Web Host @@ -682,13 +780,17 @@ ik2.com,Spamflare,Email Security ilap.com,ILAP,ISP imanila.ph,iManila,Marketing imcconseil.fr,IMC Conseil,MSP +imnet.com.br,Imnet,ISP improvmx.com,ImprovMX,Email Provider impulsahosting.com,Impulsa IT Solutions,Web Host ims.net.co,IMS,ISP imsbiz.com,Hong Kong Telecommunications (HKT),ISP +in.net.pl,INFO-NET grupa ZICOM,ISP incontact.com,NICE CX,SaaS indemed.com,Cardinal Health at-home (Formerly Independence Medical),Healthcare indiana.edu,Indiana University Bloomington,Education +indosat.com,IM3,ISP +indosatooredoo.com,IM3,ISP indytel.com,Independence Light & Power Telecommunications,ISP ineedbob.com,Computer Solutions,MSP inet.vn,INET,Web Host @@ -705,22 +807,36 @@ inovalon.com,inovalon,Healthcare inspiren.my,Inspiren,Marketing instantprint.com,Instant Print Corp,Print integra.net.au,integra,MSP +integratedlifecare.ca,Integrated Life Care,Healthcare intellisurvey.com,InteliSurvey,SaaS inter.net.th,Internet Thailand Company Limited,ISP interhost.it,Genesys Informatica Srl,MSP +interkam.pl,Interkam,ISP intermetalsa.co.mz,Intermetal,Construction internet-webhosting.com,iWHOST,Web Host internetmailserver.net,Internet Mail Server Networks,Email Provider investinmiddlesex.ca,"Middlesex County, Canada",Government inxserver.de,Inxmail,Marketing +ioflood.net,I/O Flood,Web Host ionblade.com,IonBLADE,Web Host +ip-135-148-195.us,OVH,Web Host +ip-146-59-84.eu,OVH,Web Host +ip-15-235-10.net,OVH,Web Host ip-15-235-216.net,OVH,Web Host +ip-151-80-3.eu,OVH,Web Host +ip-158-69-207.net,OVH,Web Host +ip-158-69-224.net,OVH,Web Host +ip-176-31-125.eu,OVH,Web Host +ip-217-182-172.eu,OVH,Web Host ip-5-196-151.eu,OVH,Web Host +ip-51-161-36.net,OVH,Web Host ip-51-195-53.eu,OVH,Web Host ip-51-254-53.eu,OVH,Web Host ip-51-77-42.eu,OVH,Web Host ip-51-83-140.eu,OVH,Web Host ip-51-89-240.eu,OVH,Web Host +ip-54-36-165.eu,OVH,Web Host +ip-57-128-192.eu,OVH,Web Host ip-87-98-138.eu,OVH,Web Host ip-92-204-129.us,OVH,Web Host ip-92-204-134.us,OVH,Web Host @@ -730,8 +846,10 @@ iphouse.net,Sandwich,Web Host ipost.com,iPost,Marketing iqcomputing.net,IQComputing,Web Host iqhive.com,IQ Hive,MSP +irbr.ru,ИРБР,Web Host ironwoodcrc.com,Ironwood Cancer & Research Centers,Healthcare is74.ru,Intersvyaz,ISP +isite.de,iWelt,MSP ispgateway.de,domainfactory GmbH,Web Host isplevel.pro,ISPLevel,Web Host ispn.net,ISPN,MSP @@ -742,17 +860,22 @@ issr.ru,Mobile TeleSystems,ISP istitutotumori.mi.it,Istituto Nazionale dei Tumori,Healthcare isync.io,iSync.io,SaaS italiaonline.it,Italiaonline,Web Host +itanet.psi.br,ITANET,ISP iti-e.co.jp,ITI,Healthcare itmedia.co.jp,ITmedia,News itscom.net,iTSCOM,ISP iuhw.ac.jp,International University of Health and Welfare,Education iwashiya-nagai.co.jp,Iwashiya Nagai Co,Healthcare +iwelt.de,iWelt,MSP +jaaikosei.or.jp,Aichiken Kosei Agricultural Cooperative Association,Agriculture jabatus.fr,o2switch,Web Host jadecom.or.jp,Japan Association for Development of Community Medicine,Healthcare jamescitycountyva.gov,"James City County, Virginia",Government +japan-wirecable.com,Bell Denki,Industrial javvara.com,javvara,Marketing jccm.es,Junta de Comunidades de Castilla-La Mancha,Government jellyfish.systems,Namecheap,Email Security +jetcan.com.my,jetCan,Industrial jikei.ac.jp,The Jikei University,Education jinr.ru,Joint Institute for Nuclear Research,Science jma-c.jp,Japan Medical Alliance Corporation,Healthcare @@ -761,15 +884,21 @@ joker-forward.com,Joker.com,Email Provider justwebtelecom.com.br,JustWeb,ISP jweiland12.net,domainfactory GmbH,Web Host jwtech.co.th,JW TECH,Industrial +kagoshima-u.ac.jp,Kagoshima University,Education kagoya.net,KAGOYA,Web Host kalittacharters.com,Kalitta Charters,Logistics kanazawa-u.ac.jp,Kanazawa University,Education +kaneka.co.jp,Kaneka,Industrial kansas.net,KansasNwt,MSP kaspr-privacy.io,Kaspr,Marketing +kasserver.com,all-inkl.com,Web Host +kazintercom.kz,Kaz InterCom,ISP kcell.kz,Kcell,ISP +kcflag.com,All Nations Flag Company,Retail kchnet.or.jp,Kurashiki Central Hospital (KCH),Healthcare kcn.ne.jp,KCN,ISP kcom.com,KCOM,ISP +kcweb.net,KC Web,ISP kddi.ne.jp,KIDDI,ISP keio.ac.jp,Keio University,Education keio.jp,Keio University,Education @@ -782,10 +911,13 @@ kforce.com,Kforce,Staffing kilmarnock.ca,Kilmarnock Enterprise,Industrial kindlebio.com,Kindle Bioscinces,Healthcare king-good.com,Jinku Group,Industrial +kinghost.net,KingHost,Web Host kingswoodfacadesthailand.com,Kingswood Facades Thailand,Industrial kirkbrothers.com,Kirk Brothers Supercenter,Automotive kitano-hp.or.jp,Kitano Hospital,Healthcare +kk-takano.co.jp,Takano,Industrial klinik-arlesheim.ch,Klinik Aresheim,Healthcare +kliniken-es.net,Klinikum Esslingen,Healthcare kmtn.ru,Kostrom City Telephone Network,ISP kmu.ac.jp,Kansai Medical University,Education knet.kg,Kyrgyztelecom,ISP @@ -804,11 +936,16 @@ ktis.net,Kingdom Networks,ISP ktk-sol.co.jp,KtK Solutions,Email Security ktnet.kg,Кыргызтелеком,ISP kundenserver.de,domainfactory GmbH,Web Host +kylos.pl,Kylos,Web Host +kyo.tech,KyoTech,Web Host +kyoei-med.co.jp,Kyoei Medical Instruments,Healthcare kyoto-u.ac.jp,Kyoto University,Education l3harris.com,L3Harris,Defense laboratoires-thea.fr,Laboratoires Théa,Healthcare +laca.org,Licking Area Computer Association,Nonprofit larkinhospital.com,Larkin Health System,Healthcare larrycomputerguy.com,Larry The Computer Guy,MSP +latineve.co.jp,LATIN EVE,Retail lauruslabs.com,Lasarus Labs,Healthcare lawtendo.com,Lawtendo,Legal lb.go.gov.br,Government of Goias State Brasil,Government @@ -819,38 +956,48 @@ legenditsolutions.com,Legend IT Solutions,Web Host lestetelecom.com.br,Leste,ISP lghealth.org,Penn Medicine Lancaster General Health,Healthcare liberation.fr,Liberation,News +library.on.ca,Ontario Libraries,Nonprofit ligataxi.com,LiguaTaxi,SaaS ligmais.com.br,Lig+Telecom,ISP liguriadigitale.it,Liguria Digitale,MSP likuid.com,Likuid,Web Host +limco-logistics.net,Limco Logistics,Logistics lindsaymunicipalhospital.com,Lindsay Municipal Hospital,Healthcare linejet.net.br,LineJet,ISP +link.net.pk,Jazz,ISP link3.net,Link3 Technologies,ISP linkedin.com,LinkedIn,Social Media linode.com,Linode,Web Host +linodeusercontent.com,Linode,Web Host linqtelecom.com.br,LinQ Telecom,ISP liquidtelecom.net,Liquid Intelligent Technologies,ISP +liteserverdns.in,The PowerHost,Web Host live-servers.net,Fasthosts Internet Ltd,Web Host livedo.jp,Livedo Corporation,Healthcare livemail.co.uk,Fasthosts Internet Ltd,Web Host livenation.com,Live Nation,Entertainment llumc.edu,Loma Linda University Medical Center,Healthcare lmi.net,LMi.net,ISP +loading.es,Loading,Web Host locaweb.com.br,Locaweb,Web Host lodestonegroup.com,Loadstone Insurance,Insurance loftsinc.com,"Lofts, Inc.",Retail +logika.ro,Logika IT Solutions,MSP logisticintegrators.com,Logistics Integrators,Logistics logix.in,Logix InfoSecurity,MSP lolipop.jp,Lolipop,Web Host loopia.se,Loopia,Web Host +louhi.net,Louhi,Web Host lowesthosting.com,Lowest Hosting,Web Host lpn.co.th,L.P.N. Development PCL,Real Estate lstn.net,Limestone Networks,Web Host lubonet.net.pl,LUBONET,ISP +lumos.net,Lumos,ISP luxsci.com,LuxSci,Email Security lxcluster.at,LXCluster,Web Host lytehosting.com,Lyte Hosting,Web Host m9network.com,Volico Data Centers,Web Host +macrolan.co.za,SEACOM,MSP macrx.com,MAC Rx,Healthcare maersk.com,Maersk,Logistics maestroit.com,Maestro IT Services,MSP @@ -886,6 +1033,7 @@ maletazul.pt,Maletazul,MSP mamacheaps.com,Mama Cheaps,Retail managedns.org,IBM Cloud,IaaS mandrillapp.com,Mailchimp Transactional,SaaS +manh.com,Manhattan,SaaS mappsoluciones.com,MappS Soluciones,Web Host mark-itt.net,Point Internet,ISP mark-net.co.jp,Mark Co,Marketing @@ -905,33 +1053,42 @@ mcdlv.net,Intuit Mailchimp,Marketing mcdougallauction.com,McDougall Auctioneers,Industrial mchsi.com,MediacomCable,ISP mcmaster.com,McMaster-Crr,Manufacturing +mcnbd.com,Millennium Computer's & Networking,MSP mcsv.net,Intuit Mailchimp,Marketing mdcc.gob.pe,Municipalidad Distrital de Cerro Colorado,Government mdlsx.ca,"Middlesex County, Canada",Government me.com,Apple iCloud,Email Provider +medallia.com,Medllia,SaaS medi-take.jp,Medi-Take,Healthcare media3.us,Media3,MSP mediaticanet.it,Mediatica,Web Host medimpact.com,MedImpact,Healthcare meditake.jp,Medi-Take,Healthcare +mediweightloss.com,Medi-Wegihtloss,Healthcare +mediweightlossclinics.com,Medi-Wegihtloss,Healthcare medline.com,Medline,Healthcare mega.kg,Maga-Line,ISP megacom.kg,MegaCom,ISP megalink.net.ru,Мегалинк,ISP megamailservers.com,MegaMailServers,MSP +mems-exchange.org,MNX,Industrial menlosecurity.com,Menlo Security,Email Security mercranet.com,Mercranet,Web Host mercurygate.net,MercuryGate,SaaS meric.net.tr,Meriç Hosting,Web Host merula.net,Merula,ISP messagelabs.com,Symantec Email Security,Email Security +messagexchange.com,MessageeXchange,SaaS messagingengine.com,Fastmail,Email Provider mesvr.com,ReadNotify,Email Provider metfone.com.kh,Metfone,ISP metricsthatmatter.com,Metrics That Matter,SaaS metrocomm.com,Metro Communications,ISP metronetinc.net,Metronet,ISP +mfa-inc.com,MFA,Industrial +mgp.net.br,MGP Telecom,ISP mgsm.ru,Aviasales,Travel +mhnet.com.br,Mhnet Telecom,ISP mho.de,Marienhospital Osnabrück,Healthcare mhos.de,Marienhospital Osnabrück,Healthcare mia.net,HostDrive,Web Host @@ -943,7 +1100,9 @@ midi-loisirs.com,Midi Loisirs,Entertainment migadu.com,Migadu,Email Provider milkcratesdirect.com,FARMPLAST,Retail milleni.com.tr,Millenicom,ISP +mimecast-offshore.com,Mimecast,Email Security mimecast.com,Mimecast,Email Security +minebeamitsumi.com,MinebeaMitsumi,Manufacturing minigraphics.net,Mini Graphics,Print mirohost.net,MiroHost,Web Host mistral.co.uk,Nasstar,MSP @@ -960,6 +1119,7 @@ mmm.com,3M,Technology mmrs.jp,Mirai Communication Network Inc.,Web Host mni.net,MNI,Marketing mobilecountypublicworks.net,Mobile County Public Works,Government +mobtelecom.com.br,Mob Telecom,ISP modeldrug.com,Model Health Care,Healthcare modenesegastone.com,Modenese Gastone,Retail mojohost.com,MojoHost,Web Host @@ -970,6 +1130,7 @@ moovik.com.ua,MooVik,Retail morganstanleysmithbarney.com,Morgan Stanley Smith Barney,Finance mostobene.com,Mostobene,Healthcare mounet.com,MouNet,ISP +movistar.cl,Moivestar Chlie,ISP movitel.co.mz,Movitel,ISP mrhost.biz,MrHost,Web Host mserwis.pl,MSERWIS,Web Host @@ -977,13 +1138,16 @@ msgexch.com,Constant Contact,Marketing mtaroutes.com,N-able,Email Security mtasv.net,Postmark,SaaS mtdtraining.co.uk,MTD Training Group,SaaS +mtn.cm,MTNL,ISP mtnl.net.in,MTNL,ISP +mtolivethomes.org,Mount Olivet Careview Home,Healthcare mts.ru,MTS,ISP mtsnet.ru,Mobile TeleSystems PJSC (MTS),ISP mtsvc.net,GoDaddy,Web Host mtu-net.ru,Mobile TeleSystems,ISP mundivox.com,Mundivox Communications,ISP musashi-eng.co.jp,Musashi Engineering,Manufacturing +musc.edu,Medical University of South Carolina,Healthcare mwprem.net,NTT,ISP mx.net,Silversky,Email Security mxncommerce.com,MXN Commerce Group,SaaS @@ -993,6 +1157,7 @@ mxroute.com,MXroute,Email Provider mxs.au,Synergy Wholesale,Web Host my-tss.com,Performive,MSP myaccess.ca,Access Communications,ISP +myaisfibre.com,AIS Fibre,ISP mydsomanager.com,My DSO Manager,SaaS myfairpoint.net,Consolidated Communications,ISP myfleetvehicle.com,ATS Processing Services,Finance @@ -1008,20 +1173,26 @@ mysecurecloudhost.com,World Host Group,Web Host mysecuritas.com,Securitas,Physical Security mywhc.ca,Web Hosting Canada,Web Host myworkday.com,Workday,SaaS +na4u.ru,Netangles,Web Host +nabthat.com,Nabthat,SaaS nagoya-cu.ac.jp,Nagoya City University,Education nagoya-u.ac.jp,Nagoya University,Education nahealth.com,Northern Arizona Healthcare,Healthcare name.com,Name.com,Web Host +namehero.net,NameHero,Web Host nameserver.sk,Webglobe,Web Host namespro.ca,Namespro,Web Host nano.uz,Nano Telecom,ISP +nasa.gov,NASA,Government nascoeducation.com,Nasco EDucation,Education nationalhha.com,National Home Health,Healthcare navayuga.com,Navayuga,Industrial naviexp.jp,NaviExp,MSP +nazwa.pl,NetArt Group,Web Host nbcb.cn,Bank of Ningbo,Finance nctc.com,NCTC,ISP nearlyfreespeech.net,NearlyFreeSpeach.NET,Web Host +need-link-eng.co.jp,Need Link Engineering,Technology needles.co.kr,Tae Chang Industrial,Healthcare neoclan.net.mx,Neoclan Networks,ISP neovision.de,NEOVISION,Marketing @@ -1032,6 +1203,7 @@ netcabo.pt,NOS,ISP netcore.co.in,Netcore,Marketing netdesignhost.com,Netdesign Group,Web Host netfinn.net,netFinn,Web Host +netherlandsservers.org,Netherlands Servers,Web Host nethosting.com,NetHosting,Web Host netmds.com,Net Doctors,MSP netpagedns.net,Netpage Internet Services,ISP @@ -1044,8 +1216,12 @@ nettlinx.com,Nelinx,ISP nettoday.co.th,Net Today,Web Host netventure.pl,Netventure,MSP netvigator.com,HKT,ISP +netvision.net.il,013 Netvision,ISP +network.kz,network.kz,ISP network80.com,Network80,Web Host +neubox.net,Neubox,Web Host neuca.pl,NECUA Group,Healthcare +neunet.com.ar,Neunet,ISP new-life.com,New Life,Retail newpages.com.my,NEWPAGES,Retail newsmanapp.com,NewsMAN,Marketing @@ -1060,7 +1236,11 @@ nhs.net,NHSmail,MSP nicmail.ru,RU-CENTER,Email Provider nifty.com,@nifty,Web Host niigata-u.ac.jp,Niigata University,Education +nineweb.net,Nine Web,Web Host +niosh.com.my,Malaysian National Institute of Occupational Safety and Health,Government nititancommercial.com,Niti Tan Commercial,Industrial +nktele.com,NkTelecom,Web Host +no-ip.com,No-IP Dynamic DNS,Web Host nocdirect.com,JaguarPC,Web Host nolegia.net,Nolegia,Web Host nordnet.fr,Nordnet,ISP @@ -1072,6 +1252,7 @@ noxlink.com.br,NoxLink,ISP npcma.ru,Nizhnekamsk Enterprise,Industrial nrtmexico.mx,Corporativo Núcleo Radio Televisión,News nsmailserv.com,Netcore,Marketing +ntelos.net,Lumos,ISP ntirety.com,Ntirety,MSP ntt.com,NTT Communications,ISP nttdocomo.co.jp,NTT DOCMO,ISP @@ -1092,6 +1273,7 @@ octacom.ca,Octacom,MSP odoo.com,Odoo,SaaS odu.edu,Ohio Dominican University,Education ohio.edu,Ohio University,Education +ojt.kz,ntustik Zharyk Transit,Industrial okanagan.net,Okanagan.net,Web Host okayama-u.ac.jp,Okayama University,Education okta.com,Okta,SaaS @@ -1099,17 +1281,20 @@ oleane.fr,Oleane,ISP omeda.com,Omedia,Marketing omninet.co.nz,OmniNet,ISP omnis.com,Omnis,Web Host +omnistep.com,OmniStep Incorporated,ISP onamae.ne.jp,GMO Internet,Web Host ondal.com,Ondal Medical Systems,Healthcare one-email.co.th,One Email,Email Provider one-mail.on.ca,eHealth Ontario,Healthcare one.com,One.com,Web Host +one.hu,One,ISP one.th,One Platform,Email Provider onec1.com,C1,MSP onecallnow.com,One Call Now,SaaS onedaysign.com,One Day Signs,Retail oneoffice.jp,OneOffice,SaaS onice.io,IceWrap,Email Provider +online.com.kh,COGETEL,ISP online.kz,Kazakhtelecom,ISP online.net,Scaleway,Email Provider online.tj.cn,China Unicom,ISP @@ -1124,6 +1309,7 @@ openwave.ai,Openwave Messaging,Email Provider optimus.si,Optimus IT d.o.o.,MSP optipub.com,OptiPub,Publishing optonline.net,Optimum,ISP +oraclecloud.com,Oracle Cloud,IaaS orange-business.com,Orange Business,ISP orange.es,Orange,ISP orange.fr,Orange,Email Provider @@ -1134,11 +1320,14 @@ oregonstate.edu,Oregon State University,Education ori.net,ORI,ISP orionnet.ru,Orion Telecom,ISP orthodoxws.com,Orthodox Web Solutions,Web Host +osconnect.com.br,OS Connect,ISP oser.com,Oser Comunications Group,Marketing osir.net.br,Osirnet,ISP +osorio.rs.gov.br,Prefeitura Municipal de Osório,Government osu.edu,The Ohio State University,Education otelco.net,GoNetSpeed,ISP otenet.gr,Cosmote,ISP +oticasmarilia.com.br,Óticas Marília,Healthcare ottcmail.com,Ontario & Trumansburg Telephone Companies,ISP outboundrelay.com,ForwardMX,SaaS outlook.cn,Outlook (China),Email Provider @@ -1150,13 +1339,18 @@ ownit.se,Ownit,ISP owt.com,One World Telecommunications,ISP ox.ac.uk,Education of Oxford,Education oxsus-vadesecure.net,Scaleway,Web Host +pacificored.cl,Pacifico Cable,ISP pair.com,Pair Networks,Web Host pairdomains.net,Pair Domains,Web Host pairvps.com,Pair Networks,Web Host paket78.ru,Пакет Пакетов,Industrial palette-up.jp,Palette UP,Web Host +panelserver.biz,panelserver.biz,ISP panelvps.net,PanelBox,Web Host panola.com,Complete Computers,MSP +papaki.com,Papaki,Web Host +papaki.gr,Papaki,Web Host +paperworks.com,Paperworks,Retail paragould.net,Paragould Municipal Utilities,ISP parkerinstitute.org,Parker Jewish Institute for Healthcare & Rehabilitation,Healthcare parsleysage.net,.ParsleySage Guest House,Travel @@ -1166,6 +1360,7 @@ pd25.com,Salesforce Marketing Cloud (Formerly Pardot),Marketing peaknet.net,PeakNet,Industrial pearcebevill.com,"Pearce, Bevill, Leesburg, Moore, P.C.",Finance peopleanswers.com,Infor,SaaS +peopleshostshared.com,PeoplesHost,Web Host pepitrans01.com,Netcore (Formerly Pepipost),SaaS pepitrans02.com,Netcore (Formerly Pepipost),SaaS perception-point.io,Perception Point,Email Security @@ -1177,6 +1372,9 @@ pfmsys.com,Professional Flight Management (PFM),Logistics pgcps.org,Prince George's County Public Schools,Education piedmonteye.com,Piedmont Eye Center,Healthcare pif.co.uk,Pinnacle Freight,Logistics +pink.co.rs,Mink Media Group,Marketing +pinnaclecart.com,PinnacleCart,SaaS +pioneer.co.th,Pioneer Transportation,Logistics pipefy.com,Pipefy Inc,SaaS plala.or.jp,Plala,ISP planety.com.br,Planety Internet,ISP @@ -1186,19 +1384,24 @@ playbackmail.com,PlayBackMail,Email Provider pldi.net,Pioneer Cellular,ISP pldt.net,PLDT,ISP plis.net.br,Plis Telecom,ISP +plus.hr,Plus Hosting,Web Host plus.net,plusnet,ISP plus.pl,Plus,ISP +plusvps.com,Plus Hosting,Web Host pmweb.com.br,pmweb,Marketing pobox.com,Pobox,Email Provider pol-online.com,Bangladesh Online,ISP pol.ir,ParsOnline,ISP +polyesterday.com.mk,Polyesterday,Marketing poneytelecom.eu,Pony Telecom,Web Host porkbun.com,porkbun.com,ISP portative.net,Portative Technologies,ISP postcodesoftware.co.uk,Postcode Software,SaaS +power1.com,PowerOne,MSP ppe-hosted.com,Proofpoint Essentials,Email Security pphosted.com,Proofpoint,Email Security prchost.com,PRC Hosting,Web Host +precisehotels.com,Precise Hotels and Resorts,Travel prempub.com,Premier Publishing,Marketing princeton.edu,Princeton University,Education principal-it.com,Principal IT,MSP @@ -1221,6 +1424,7 @@ prudential.com.sg,Prudential Singapore,Finance prudentpublishing.com,Prudent Publishing,Retail prw.net,Puerto Rico Webmasters,Web Host pserver.space,Profitserver,Web Host +psu.edu,Penn State,Education psychz.net,Psychz Networks,Web Host ptd.net,PTD,ISP ptrcloud.net,GMO GlobalSign,IaaS @@ -1259,6 +1463,7 @@ raycdjr.com,Ray Chrysler Dodge Jeep RAM,Automotive rcil.gov.in,RailTel,ISP rcn.com,RCN,ISP rdp.sh,RDP.sh,SaaS +re-activno.ru,Re:activno,Web Host redbird.net,NexGenAccess (Formerly Redbird),ISP redcotel.bo,Cotel Ltda.,ISP redesiminternet.com.br,Sim Fibra,ISP @@ -1270,6 +1475,7 @@ reef-guardian.com,Reef Guardian,Education reg.ru,Reg.ru,Web Host reg365.net,register365,Web Host regentbranding.co.uk,Regent Branding,Marketing +regery.net,Regery,Web Host regiomed-kliniken.de,REGIOMED-KLINIKEN GmbH,Healthcare register.it,Register.it,Web Host registeredsite.com,Web.com,Web Host @@ -1278,10 +1484,12 @@ regusnet.com,Regus,Real estate regxa.com,Regxa Cloud,Web Host relativity.one,RelativityOne,SaaS relod.ru,RELOD,Retail +retarus.com,Retarus GmbH,SaaS rheamedical.org,Rhea Medical Center,ISP rhein-it.de,RHEN IT,MSP riberasaludmail.com,Ribera Salud,Healthcare rightnowtech.com,Oracle Service Cloud,SaaS +rightside.ru,Telecoma,ISP rima-tde.net,"TELEFONICA, S.A.",ISP riskonnectclearsight.com,Riskonnect ClearSight,SaaS rit.edu,Rochester Institute of Technology,Education @@ -1302,24 +1510,30 @@ rzone.de,Strato AG,Web Host sabyrconsulting.com,Sabyr Consulting,MSP safari-productions.com,Safari Productions,Event Planning safaricombusiness.co.ke,Safaricom,ISP +safescreening.co.uk,The Access Group,SaaS safewebservices.com,NMI,SaaS saimanet.kg,Saima Telecom,ISP sakura.ne.jp,SAKURA Internet,ISP salesforce.com,Salesforce,SaaS +salonlofts.com,Salon Lofts,Retail samanage.com,SolarWinds Service Desk,SaaS samil-pharm.com,Samil,Healthcare samtel.ru,Samtelecom,ISP sandrix.com,Sandrix Technologies,MSP santehealth.net,Sante Health System,Healthcare +sanwa.co.jp,Sanwa Supply,Retail saplbd.com,Summit Alliance Port,Logistics sapmed.ac.jp,Sapporo Medical University,Healthcare sarkor.uz,Sarkor,ISP +satnet.net,Xtrim,ISP +sawaisp.sy,Sawa,ISP sbcglobal.net,AT&T,ISP scaledsystems.com,SimpleNet,Web Host scatair.com,Scatair,Manufacturing schmc.ac.kr,Soon Chun Hyang University Medical Center,Healthcare scorm.com,SCORM,SaaS sdldelivery.com,Specialty Delivery & Logistics,Logistics +seacom.co.za,SEACOM,MSP sealbond.co.jp,Nippon Sealbond,Manufacturing seaspraymta1.com,Cox Communications,ISP seaspraymta2.com,Cox Communications,ISP @@ -1330,12 +1544,16 @@ secure-mails.com,Tata Communications,SaaS secure.jp,KIDDI Web Communications (CPI),Web Host secure.ne.jp,KIDDI,ISP securednshost.com,IPS Inc.,Web Host +securehostdns.com,E2E Networks,IaaS +securehostserver.info,securehostserver.info,Web Host securemailserver.ca,securemailserver.ca,Email Provider securemx.jp,IIJ SecureMX,Email Security securence.com,Securence,Email Security secureserver.net,GoDaddy,Web Host +security-mail.net,Secuserve,Email Security seed.net.tw,Seednet,ISP selligent.com,Selligent,Marketing +selulargroup.com,Selular,SaaS sendcloud.io,Sebdcloud,SaaS sendcloud.org,Aurora SendCloud,SaaS sendgrid.net,Twilio SendGrid,Marketing @@ -1344,13 +1562,15 @@ sendnode.com,MAILINGWORK,Marketing sendoso.com,Sendoso,Marketing sensaphone.com,Sensaphone,SaaS sentara.com,Sentara,Healthcare +sentex.ca,Sentexx,ISP seqtek.net,SEQTEK,MSP +seronsl.com,Serón Construcciones,Construction servconfig.com,InMotion Hosting,Web Host serverdata.net,GoDaddy,Web Host serverhost.net,Server Host,Web Host serverhs.org,WebHS,Web Host serverneubox.com.mx,Neubox,Web Host -serveroffer.net,Serveroffer,Webhost +serveroffer.net,Serveroffer,Web Host serverpanel.com,Shock Hosting,Web Host service-now.com,ServiceNow,SaaS servicehoster.ch,Green,Web Host @@ -1361,11 +1581,14 @@ servidoresdns.net,Arsys,Web Host ses-stiftung.de,Schwester Euthymia Stiftung,Healthcare sevtelecom.ru,Servastopol Telecom,ISP sfr.fr,SFR,ISP +sfr.net,SFR,ISP shamrog.com,Shamrog,Web Host shared-server.net,GMO Cloud,Web Host shatel.ir,Shatel,ISP sheffieldpharma.com,Sheffield Pharmaceuticals,Healthcare +sherwin.com,Sherwin-Williams,Retail shield.security,Mailprotector,Email Security +shinpoly.co.jp,Shin-Etsu Polymer,Industrial shizuokaseiki.com,Shizuoka Seiki,Industrial shmc.jp,Sainokuni Higashiomiya Medical Center,Healthcare shoplocalpharmacy.com,Cardinal Health,Healthcare @@ -1375,6 +1598,7 @@ sibyl.com,Sibl Design,MSP signal.no,Signal,ISP signium.co.jp,Signium,Consulting siho.org,Siho Insurance Services,Finance +silicanetworks.com,Silica Networks,ISP simplystamps.com,Simply Stamps,Retail simpro.com.br,Simpro,Healthcare simus.uz,Simus,ISP @@ -1391,9 +1615,12 @@ slgnt.eu,Selligent,Marketing slgnt.us,Selligent,Marketing slic.com,SLIC Network Solutions,ISP smartape.ru,Smart Ape LLC,Web Host +smarthost.pl,Smarthost,Web Host smartone.com,SmarTone,ISP smartservers.com.au,Hostopia Australia,Web Host smartspb.net,Smart Telecom,ISP +smile.com.bd,DBCOM Online,ISP +smsmasivos.com.ar,SMS Masivos,SaaS smtp.com,SMTP.com,SaaS smtp.cz,Active24,Web Host smtp25.com,Zix,Email Security @@ -1409,21 +1636,28 @@ sofreafurnishings.com,Sofrea Furnishings,Retail softbank.jp,SoftBank,ISP softbank.ne.jp,SoftBank,ISP softvideo.ru,СОФТВИДЕО,ISP +solentnewsletters.uk,Solent Newsletters,Marketing +somelec.mr,SOMELEC,Industrial sonichealthcareusa.com,Sonic Healthcare USA,Healthcare sophos.com,Sophos,Email Security sosnc.gov,North Carolina Secretary of State,Government sougo-group.jp,Camcom Group,SaaS +southlandind.com,Southland Industries,Construction spaceship.net,Spaceship,Web Host spaceweb.ru,SpaceWeb,Web Host spamtitan.com,SpamTitan,Email Security sparklight.com,Sparklight,ISP +sparkmail.jp,U-netSURF,ISP sparkpostmail.com,SparkPost,Marketing +spcmail.jp,SPC Mail S.T.,Email Provider +spectranet.in,Spectra,ISP spectrum.com,Spectrum,ISP speedway.hk,Speedway Travels,Travel speedy.com.ar,Movistar (Formerly Speedy),ISP speedy.net.pe,Telefonica del Peru,ISP speicherzentrum.de,Speicherzentrum,Web Host spglobal.com,S&P Global,Finance +sphostserver.com,Server Plan,Web Host spintheweb.com,Spin The Web,Web Host splashtop.com,Splashtop,Technology springernature.com,Springer Nature,Education @@ -1432,17 +1666,22 @@ ssdcloudindia.net,E2E Networks,Web Host ssnettelecom.net.br,SSNET Telecom,ISP sst2u.com,SST2U,Education ssuv.uz,"Samarkand Institute of Veterinary Medicine, Animal Husbandry and Biotechnology",Education +stabletransit.com,Rackspace,Web Host stackmail.com,20i,Web Host stanford.edu,Stanford University,Education +star.ne.jp,Xserver,Web Host starchapter.com,StarChapter,SaaS stargatecommunications.com,X-Link Limited,ISP starhealthagency.com,Star Home Health,Healthcare starkmans.com,Starkmans Health Care Depot,Healthcare starlinx.com,StrLinX,MSP +state.al.us,The State of Alabama,Government state.co.us,The State of Colorado,Government +state.lib.la.us,State Library of Louisiana,Government state.ma.us,The State of Massachusetts,Government state.ms.us,The State of Missouri,Government state.or.us,The State of Oregon,Government +station030.com,123eHost,Web Host stcable.net,ST Cable,ISP stellarllc.net,Gardonville Cooperative Telephone Association,ISP stertec.co.jp,KUNIMORI-STAR Group,MSP @@ -1453,9 +1692,11 @@ stjansdal.nl,Hospital St Jansdal,Healthcare stokes.nc.us,"Stokes County, North Carolina",Government stomabags.com,Stomabags.com,Healthcare stonybrook.edu,Stonybrook University,Education +storesonlinepro.com,StoresOnline,SaaS strategictreasurer.com,Strategic Treasurer,Finance stratoserver.net,STRATO,Web Host succeed.net,Succeed.net,ISP +summithealthcare.net,Summit Healthcare,Healthcare superb.net,CherryRoad (Formerly Superb Internet),Web Host supercp.com,a2 hosting,Web Host supernetes.tv.br,Supernet,ISP @@ -1468,25 +1709,36 @@ swishmail.com,Swishmail,MSP swisscenter.com,SwissCenter,Web Host swisscom.ch,Swisscom,ISP syn-alias.com,Synacor,SaaS +synapse.ne.jp,Synapse,ISP synccentric.com,Synccentric,SaaS synchronoss.net,Synchronoss,SaaS synthite.co.uk,Synthite,Industrial sysaidit.com,SysAid,SaaS sysnet.ie,VikingCloud,MSP +t-com.hr,T-Com,ISP t-ipconnect.de,Deutsche Telekom,ISP tachc.org,Texas Association of Community Health Centers (TACHC),Healthcare takeda.com,Takeda,Healthcare takethemameal.com,Take Them A Meal,SaaS +talktalkplc.com,TalkTalk,ISP tami.pl,TAMI,MSP tanglewoodhealth.com,Tanglewood Medical Supplies,Healthcare tanomail.com,Tanomail,Retail tanzaniaservers.com,Tanzania Servers,Web Host +tataidc.co.in,Tata Tele Business Services (TTBS),ISP +tchile.com,Tchile,Web Host +tcmcorp.com,Southland Industries,Construction +tcs.com,TATA Consultancy Services,SaaS tctwest.net,TCT,ISP tds.net,TDS,ISP teche.net,Uniti,MSP +technozone.com.ph,Technozone Corporation,Construction +tedata.net,Telecom Egypt,ISP teksavvy.com,TekSavvy,ISP telebecinternet.com,Telebec,ISP +telecel.com.py,TELECEL,ISP telecentro-reversos.com.ar,Telecentro,ISP +telecom.com.ar,Telecom Argentin,ISP telecom.kz,Kazakhtelecom,ISP telecom.net.ar,Telecom Argentina,ISP telecomitalia.it,TIM,ISP @@ -1498,6 +1750,8 @@ telenet.be,Telenet,ISP telepac.pt,SAPO,Email Provider telepacific.net,TPx Communications,ISP teleson.net.br,Teleson Telecom,ISP +teletu.it,Vodafone,ISP +teligraph.com.sg,Teligraph,MSP telkomsa.net,Telkom,ISP tellas.gr,Nova Telecommunications,ISP telmex.net.ar,Telmex Argentina,ISP @@ -1512,6 +1766,7 @@ tevapharm.com,Teva Pharmaceuticals,Healthcare texas.gov,The Government of Texas,Government tfn.net.tw,Taiwan Fixed Network,ISP thcservers.com,THCServers,Web Host +thecamels.org,Thecamels,Web Host thechristhospital.com,The Christ Hospital,Healthcare thegameshowcompany.ca,The Game Show Company,Entertainment thehostgroup.com,The Host Group,Web Host @@ -1526,14 +1781,16 @@ tigo.com.co,Tigo Columbia,ISP tim.it,TIM,ISP timeetc.com,Time Etc,SaaS timeweb.ru,Timeweb,Web Host +timminsfht.ca,Timmins Family Health Team,Healthcare tisco.mx,TISCO Networks,MSP titan.email,Titan,Email Provider titanhq.com,TitanHQ,Email Security tix.it,Tuscany Internet eXchange,ISP tkreal.ru,The Real Group,Logistics -tktelekom.pl,TK Telecom,Healthcare +tktelekom.pl,TK Telecom,ISP tm.net,Mercury Telecom,ISP tmc.edu,Truett McConnell University,Education +tmccorp.com,TMC,Industrial tmcz.cz,T-Mobile,ISP tmd.ac.jp,Science Tokyo,Education tmdcloud.com,TMDHosting,Web Host @@ -1541,6 +1798,7 @@ tmddedicated.com,TMDHosting,Web Host tmkultra.net.br,Tmk Net,ISP tmodns.net,T-Mobile USA,ISP tnc-neuro.com,Tallahassee Neurological Clinic,Healthcare +tnsplus.kz,TNS-Plus,ISP tofinosoftware.com,Tofino,SaaS tohoku-mpu.ac.jp,Tohoku Medical and Pharmaceutical University,Education tohoku.ac.jp,Tohoku University,Education @@ -1555,12 +1813,16 @@ tpgi.com.au,TPG,ISP tpnet.pl,Orange,ISP tps.uz,TPS Telecom,ISP tradeindia.com,TradeIndia,SaaS +transparent.eu,Transparent,Finance +transsped.com,Trans Sped,SaaS +transsped.ro,Trans Sped,SaaS transtelco.net,Flō Networks,ISP transtelecom.net,Trans Telecom,ISP trendmicro.com,Trend Micro,Email Security trendmicro.eu,Trend Micro,Email Security trentu.ca,Trent University,Education triadefibra.com.br,Tríade Fibra,ISP +tricom.net,Altice Dominicana,ISP triolan.net,Triolan,ISP trivenet.it,Trivenet Telecomunicazioni,ISP truemail.co.th,True Internet,ISP @@ -1573,6 +1835,7 @@ ttk.ru,Joint Stock Company TransTeleCom,ISP ttn.gob.ar,Tribunal de Tasaciones de la Nación,Government ttnet.com.tr,Türk Telekom,ISP tufts.edu,Tufts University,Education +tukan.hu,Tukan,Web Host tulsaconnect.com,TULSACONNECT,MSP tunasgroup.com,Tunas Group,Automotive tvactelecom.com.br,TVAC Telecom,ISP @@ -1590,6 +1853,7 @@ ucla.edu,UCLA,Education uclouvain.be,UCLouvain,Healthcare ucom.am,Ucom LLC,ISP ucom.ne.jp,Tsunagu Network Communications Inc.,ISP +udag.de,United Domains,Web Host ufanet.ru,Ufanet,ISP ufl.edu,University of Florida,Education uhc.com,United Healthcare,Healthcare @@ -1605,6 +1869,7 @@ umich.edu,University of Michigan,Education umin.ac.jp,University Hospital Medical Information Network (UHIN) of Japan,Healthcare umn.edu,University of Minnesota,Education unifiedlayer.com,UnifiedLayers,Web Host +unimedjp.com.br,Unimed João Pessoa,SaaS unin.hr,Sveučilište Sjever,Education uninet-ide.com.mx,Telmex,ISP unity-health.org,Unity Health,Healthcare @@ -1613,6 +1878,7 @@ universal-shoji.co.jp,Universal Shoji,Industrial untd.com,United Online,ISP uoeh-u.ac.jp,"University of Occupational and Environmental Health, Japan",Education uol.com.br,UOL - UNIVERSO ONLINE S/A,Web Host +up99plus.com,Up99Plus,Web Host uplinkcrm.it,Uplink Web Agency Srl,SaaS ural-net.ru,inetvdom,ISP uscomputers.com,U.S. Computer Corporation,MSP @@ -1621,6 +1887,7 @@ ussignalcom.net,US Signal,MSP usssa.com,USSSA,Sports utah.edu,University of Utah,Education utelesup.edu.pe,Universidad privada Telesup,Education +uvawise.edu,UVA Wise,Education uvm.edu,University of Vermont,Education uw.edu,University of Washington,Education uzpak.uz,uzpak.uz,Industrial @@ -1629,12 +1896,14 @@ va.gov,U.S. Department of Veterans Affairs,Government vadesecure.com,Vade Secure,Email Security valenet.com.br,Valenet,ISP vanwerthospital.org,Van Wert Health,Healthcare +vck-gmbh.de,Vestische Caritas-Klinike,Healthcare vdonsk.ru,Microel,ISP vectranet.pl,Vectra,ISP vedco.com,Vedco,Healthcare veetime.com,VeeTIME,ISP vegans.it,vegan/s,MSP vege.net,vege.net,Web Host +veloxfiber.com.br,Velox,ISP ventech.com,C1,MSP verat.net,BeotelNet,ISP verginia.edu,University of Virginia,Education @@ -1642,17 +1911,24 @@ verizon.net,Verizon,ISP verizonbusiness.com,Verizon Business,ISP verointernet.com.br,Internet de Verdade,ISP versanet.de,1&1 Versatel,ISP +veseli.cz,The city of Veseli nad Luznici,Government vgohosting.com,HostPapa,Web Host +vgonline.com,Video Graphics,Web Host vicc.co,Venco Imtiaz Contracting Co,Industrial victorkaiser.com,Global Transport,Logistics videotron.ca,Videotron,ISP videotron.com,Videotron,ISP viecuri.nl,VieCuri,Healthcare viettel.vn,Viettel,ISP +vinahost.vn,VinaHost,Web Host +vipfibertelecom.com.br,VIP Fiber,ISP virginia.edu,The University of Virginia,Education virginia.gov,The State of Virginia,Government virginm.net,Virgin Media,ISP virginmediabusiness.co.uk,Vergin Media Business,ISP +virginmobile.ca,Virgin Plus,ISP +virginplus.ca,Virgin Plus,ISP +virgohosting.net,Virgo Hosting,Web Host virtrugateway.com,Virtu,Email Security virtua.com.br,Virtua Brizil,Marketing virtualhosting.hk,UDomain,Web Host @@ -1664,6 +1940,8 @@ vivozap.com.br,Vivo Mobile,ISP vnpt.vn,VNPT,ISP vnr.de,VNR Group,SaaS vodacom.co.za,Vodacom,ISP +vodafone-ip.de,Vodafone,ISP +vodafone.hu,Vodafone,ISP vodafonedsl.it,Vodafone Itily,ISP vodien.com,Vodien,Web Host voicehost.co.uk,VoiceHost,PaaS @@ -1683,6 +1961,7 @@ vwhs.org,Wally-Wide Health,Healthcare vyvebroadband.net,Vyve,ISP wadax-sv.jp,WADAX,Web Host wadax.ne.jp,WADAX,Web Host +wal-mart.com,Walmart,Retail waldmann.com,Waldmann,Industrial wanadoo.fr,Orange,ISP washington.edu,University of Washington,Education @@ -1690,12 +1969,15 @@ wasip.com,WASIP Ltd.,Healthcare wavenetuk.net,Wavenet,MSP waypointcentre.ca,Waypoint Centre,Healthcare wbhcp.com,Williams Bros Pharmacy,Healthcare +wconect.com.br,WCONECT,ISP web-dns1.com,Web Hosting Canada,Web Host web-hosting.com,Namecheap,Web Host web.africa,Webafrica,ISP +web.de,Web.de,ISP webbytelecom.com.br,Webby Internet,ISP webetic.net,Webetic,Web Host webglobe.com,Webglobe,Web Host +webhosting.systems,netcup,Web Host webhostingireland.ie,Hosting Ireland,Web Host webland.ch,Webland,Web Host webline-servers.com,Webline Services,Web Host @@ -1711,11 +1993,13 @@ websupport.sk,Websupport,Web Host webzi.mx,Webzi,Web Host webzine1.com,Webzine Online,Web Host webzineonline.com,Webzine Online,Marketing +well.com,The WELL,Email Provider wescor.com,Wescor Inc.,Healthcare westbrook.ms,Westbrook Construction,Construction westdc.net,WestHost,Web Host wfn.ca,Westbank First Nation,Government what-if.com,The Imagination Factory,MSP +whatdev.com,What Development,Healthcare whitelighthost.net,Acklo,MSP wi.gov,The State of Wisconsin,Government wightman.ca,Wrightman Telecom,ISP @@ -1728,10 +2012,12 @@ wizmoworks.com,Wizmo,MSP wlink.com.np,WorldLink Communications,ISP wmaker.net,WMaker,ISP wntellecom.net.br,WN Tellecom,ISP +wntpr.net,WorldNet Telecommunications,ISP wolseleyinc.ca,Wolseley Canada,Industrial wordpress.com,Wordpress.com,Web Host workhorseirons.com,Workhorse Irons,Industrial worksmobile.com,Naver Works,SaaS +worldcall.net.pk,WorldCom Telecom,ISP wp.pl,Wirtualna Polska,Web Host wpx.ne.jp,wpX Speed,Web Host wpxhosting.com,WPX Hosting,Web Host @@ -1739,6 +2025,8 @@ wsh.care,The Woodlands Specialty Hospital,Healthcare wsigenesis.com,Action Hosting,Web Host wustl.edu,Washington University in St. Louis,Education wylance.com,Emma Solutions (Formerly Wylance),MSP +x-com.kz,X-COM,ISP +x-mailer.de,Power-Netz,Web Host xbiz.ne.jp,Xserver,Web Host xceleratorsoftware.com,Key Software Systems Xcelerator,SaaS xcitium.com,Xcitium,SaaS @@ -1758,6 +2046,8 @@ yamaguchi-u.ac.jp,Yamaguchi University,Education yamanashi.ac.jp,Yamanashi University,Education yamaoka.co.jp,Yamaoka,Industrial yandex.net,Yandex,Email Provider +yardi.com,Yardi,SaaS +yellow-inbox.com,Yellow Imbox,Marketing yelpcorp.com,Yelp,Social Media yesfibra.com.br,YES Fibra,ISP yettel.hu,Yettel,ISP @@ -1771,6 +2061,7 @@ yurekpharmacy.com,Yurek Pharmacy,Healthcare yuuai.or.jp,Social Medical Corporation Yuuaikai,Healthcare z.com,Z.com,Web Host zaansmc.nl,Zaans Medical Center,Healthcare +zaq.ne.jp,ZAQ,Email Provider zare.com,Zare,Web Host zbltelecom.net.br,ZBL Telecom,ISP zcmail.net,Zoho Campaigns,Marketing diff --git a/parsedmarc/resources/maps/find_unknown_base_reverse_dns.py b/parsedmarc/resources/maps/find_unknown_base_reverse_dns.py index 1d3b456a..a23d3ea3 100755 --- a/parsedmarc/resources/maps/find_unknown_base_reverse_dns.py +++ b/parsedmarc/resources/maps/find_unknown_base_reverse_dns.py @@ -30,7 +30,7 @@ def _main(): if domain in list_var: print(f"Error: {domain} is in {file_path} multiple times") exit(1) - else: + elif domain != "": list_var.append(domain) load_list(known_unknown_list_file_path, known_unknown_domains) @@ -64,7 +64,7 @@ def _main(): continue for psl_domain in psl_overrides: if domain.endswith(psl_domain): - domain = psl_domain + domain = psl_domain.strip(".").strip("-") break if domain not in known_domains and domain not in known_unknown_domains: print(f"New unknown domain found: {domain}") @@ -75,5 +75,6 @@ def _main(): writer.writeheader() writer.writerows(output_rows) + if __name__ == "__main__": _main() diff --git a/parsedmarc/resources/maps/known_unknown_base_reverse_dns.txt b/parsedmarc/resources/maps/known_unknown_base_reverse_dns.txt index 0b93da42..a7a43dc6 100644 --- a/parsedmarc/resources/maps/known_unknown_base_reverse_dns.txt +++ b/parsedmarc/resources/maps/known_unknown_base_reverse_dns.txt @@ -1,11 +1,14 @@ -185.in-addr.arpa -190.in-addr.arpa -200.in-addr.arpa +1jli.site +26.107 444qcuhilla.com +4xr1.com 9services.com a7e.ru a94434500-blog.com +aams8.jp abv-10.top +acemail.co.in +activaicon.com adcritic.net adlucrumnewsletter.com admin.corpivensa.gob.ve @@ -18,8 +21,10 @@ ai270.net albagroup-eg.com alchemy.net alohabeachcamp.net +alsiscad.com aluminumpipetubing.com americanstorageca.com +amplusserver.info anchorfundhub.com anglishment.com anteldata.net.uy @@ -31,118 +36,186 @@ aosau.net arandomserver.com aransk.ru ardcs.cn +armninl.met as29550.net +asahachimaru.com +aserv.co.za asmecam.it +ateky.net.br aurelienvos.com automatech.lat avistaadvantage.com b8sales.com +bahjs.com +baliaura.com banaras.co bearandbullmarketnews.com bestinvestingtime.com +bhjui.com biocorp.com +biosophy.net bitter-echo.com +bizhostingservices.com blguss.com bluenet.ch bluhosting.com +bnasg.com bodiax.pp.ua bost-law.com brainity.com brazalnde.net +brellatransplc.shop brnonet.cz +broadwaycover.com brushinglegal.de brw.net +btes.tv budgeteasehub.com buoytoys.com +buyjapanese.jp c53dw7m24rj.com +cahtelrandom.org +casadelmarsamara.com cashflowmasterypro.com cavabeen.com cbti.net +centralmalaysia.com chauffeurplan.co.uk checkpox.fun chegouseuvlache.org +chinaxingyu.xyz christus.mx +churchills.market +ci-xyz.fit +cisumrecords.com ckaik.cn +clcktoact.com +cli-eurosignal.cz +cloud-admin.it cloud-edm.com -cloudaccess.net cloudflare-email.org cloudhosting.rs cloudlogin.co +cloudplatformpro.com cnode.io +cntcloud.com code-it.net +codefriend.top colombiaceropapel.org commerceinsurance.com comsharempc.com +conexiona.com coolblaze.com coowo.com corpemail.net cp2-myorderbox.com cps.com.ar +crnagora.net +cross-d-bar-troutranch.com ctla.co.kr cumbalikonakhotel.com currencyexconverter.com daakbabu.com +daikinmae.com +dairyvalley.com.my dastans.ru datahost36.de +ddii.network +deep-sek.shop +deetownsounds.com descarca-counter-strike.net detrot.xyz +dettlaffinc.com +dextoolse.net +digestivedaily.com digi.net.my dinofelis.cn diwkyncbi.top dkginternet.com +dnexpress.info dns-oid.com +dnsindia.net domainserver.ne.jp domconfig.com doorsrv.com dreampox.fun dreamtechmedia.com ds.network +dss-group.net dvj.theworkpc.com dwlcka.com +dynamic-wiretel.in dyntcorp.com easternkingspei.com economiceagles.com egosimail.com +eliotporterphotos.us emailgids.net emailperegrine.com +entendercopilot.com entretothom.net +epaycontrol.com +epicinvestmentsreview.co +epicinvestmentsreview.com +epik.com epsilon-group.com erestaff.com +euro-trade-gmbh.com example.com exposervers.com-new +extendcp.co.uk eyecandyhosting.xyz +fastwebnet.it +fd9ing7wfn.com feipnghardware.com fetscorp.shop fewo-usedom.net fin-crime.com financeaimpoint.com financeupward.com +firmflat.com flex-video.bnr.la +flourishfusionlife.com formicidaehunt.net fosterheap.com +fredi.shop frontiernet.net ftifb7tk3c.com +gamersprotectionvpn.online gendns.com getgreencardsfast.com getthatroi.com +gibbshosting.com gigidea.net giize.com ginous.eu.com +gis.net gist-th.com +globalglennpartners.com goldsboroughplace.com gophermedia.com gqlists.us.com gratzl.de greatestworldnews.com greennutritioncare.com +gsbb.com +gumbolimbo.net h-serv.co.uk haedefpartners.com halcyon-aboveboard.com hanzubon.org +healthfuljourneyjoy.com hgnbroken.us.com +highwey-diesel.com +hirofactory.com +hjd.asso.fr +hongchenggco.pro +hongkongtaxi.co hopsinthehanger.com +hosted-by-worldstream.net hostelsucre.com hosting1337.com +hostinghane.com hostinglotus.cloud hostingmichigan.com hostiran.name @@ -150,8 +223,11 @@ hostmnl.com hostname.localhost hostnetwork.com hosts.net.nz +hostserv.eu hostwhitelabel.com hpms1.jp +hunariojmk.net +hunriokinmuim.net hypericine.com i-mecca.net iaasdns.com @@ -159,42 +235,88 @@ iam.net.ma iconmarketingguy.com idcfcloud.net idealconcept.live +igmohji.com igppevents.org.uk +ihglobaldns.com +ilmessicano.com imjtmn.cn immenzaces.com +in-addr-arpa +in-addr.arpa +indsalelimited.com indulgent-holistic.com +industechint.org inshaaegypt.com +intal.uz +interfarma.kz +intocpanel.com ip-147-135-108.us ip-178-33-109.eu ip-ptr.tech iswhatpercent.com itsidc.com itwebs.com +iuon.net ivol.co jalanet.co.id jimishare.com +jlccptt.net.cn jlenterprises.co.uk +jmontalto.com joyomokei.com jumanra.org +justlongshirts.com kahlaa.com +kaw.theworkpc.com kbronet.com.tw kdnursing.org +kielnet.net kihy.theworkpc.com kingschurchwirral.org kitchenaildbd.com +klaomi.shop +knkconsult.net +kohshikai.com +krhfund.org +krillaglass.com +lancorhomes.com +landpedia.org +lanzatuseo.es layerdns.cloud +learninglinked.com legenditds.com +levertechcentre.com +lhost.no +lideri.net.br lighthouse-media.com +lightpath.net +limogesporcelainboxes.com +lindsaywalt.net +linuxsunucum.com listertermoformadoa.com llsend.com +local.net lohkal.com +londionrtim.net lonestarmm.net longmarquis.com longwoodmgmt.com +lse.kz +lunvoy.com +luxarpro.ru lwl-puehringer.at lynx.net.lb +lyse.net +m-sender.com.ua +maggiolicloud.it magnetmail.net +magnumgo.uz +maia11.com mail-fire.com +mailsentinel.net +mailset.cn +malardino.net +managed-vps.net manhattanbulletpoint.com manpowerservices.com marketmysterycode.com @@ -204,11 +326,23 @@ matroguel.cam maximpactipo.com mechanicalwalk.store mediavobis.com +meqlobal.com +mgts.by +migrans.net +miixta.com +milleniumsrv.com mindworksunlimited.com mirth-gale.com misorpresa.com +mitomobile.com +mitsubachi-kibako.net mjinn.com +mkegs.shop +mobius.fr +model-ac.ink moderntradingnews.com +monnaiegroup.com +monopolizeright.com moonjaws.com morningnewscatcher.com motion4ever.net @@ -220,18 +354,27 @@ multifamilydesign.com mxserver.ro mxthunder.net my-ihor.ru +mycloudmailbox.com +myfriendforum.com myrewards.net mysagestore.com mysecurewebserver.com +myshanet.net myvps.jp +mywedsite.net +mywic.eu name.tools nanshenqfurniture.com nask.pl +navertise.net +ncbb.kz ncport.ru ncsdi.ws nebdig.com neovet-base.ru netbri.com +netcentertelecom.net.br +neti.ee netkl.org newinvestingguide.com newwallstreetcode.com @@ -242,119 +385,210 @@ nieuwedagnetwerk.net nlscanme.com nmeuh.cn noisndametal.com +nucleusemail.com +nutriboostlife.com nwo.giize.com nwwhalewatchers.org +ny.adsl +nyt1.com offerslatedeals.com office365.us ogicom.net olivettilexikon.co.uk omegabrasil.inf.br onnet21.com +onumubunumu.com oppt-ac.fit orbitel.net.co +orfsurface.com +orientalspot.com outsidences.com ovaltinalization.co overta.ru ox28vgrurc.com +pamulang.net panaltyspot.space +panolacountysheriffms.com passionatesmiles.com paulinelam.com +pdi-corp.com +peloquinbeck.com perimetercenter.net permanentscreen.com +permasteellisagroup.com +perumkijhyu.net +pesnia.com.ua +ph8ltwdi12o.com +pharmada.com.de phdns3.es pigelixval1.com +pipefittingsindia.com planethoster.net +playamedia.io plesk.page pmnhost.net pokiloandhu.net pokupki5.ru +polandi.net popiup.com ports.net +posolstvostilya.com +potia.net prima.com.ar prima.net.ar profsol.co.uk prohealthmotion.com +promooffermarket.site proudserver.com +proxado.com psnm.ru pvcwindowsprices.live qontenciplc.autos +quakeclick.com +quasarstate.store quatthonggiotico.com qxyxab44njd.com +radianthealthrenaissance.com rapidns.com raxa.host +reberte.com +reethvikintl.com +regruhosting.ru reliablepanel.com rgb365.eu riddlecamera.net riddletrends.com +roccopugliese.com runnin-rebels.com +rupar.puglia.it rwdhosting.ca s500host.com +sageevents.co.ke sahacker-2020.com samsales.site +sante-lorraine.fr saransk.ru satirogluet.com scioncontacts.com +sdcc.my seaspraymta3.net secorp.mx securen.net securerelay.in securev.net +seductiveeyes.com +seizethedayconsulting.com +serroplast.shop +server290.com +server342.com +server3559.cc servershost.biz +sfek.kz +sgnetway.net shopfox.ca silvestrejaguar.sbs silvestreonca.sbs simplediagnostics.org siriuscloud.jp sisglobalresearch.com +sixpacklink.net +sjestyle.com smallvillages.com smartape-vps.com solusoftware.com +sourcedns.com southcoastwebhosting12.com +specialtvvs.com spiritualtechnologies.io sprout.org +srv.cat stableserver.net +statlerfa.co.uk +stock-smtp.top stockepictigers.com stockexchangejournal.com subterranean-concave.com suksangroup.com +swissbluetopaz.com +switer.shop sysop4.com system.eu.com szhongbing.com t-jon.com +tacaindo.net +tacom.tj +tankertelz.co +tataidc.com +teamveiw.com tecnoxia.net tel-xyz.fit tenkids.net terminavalley.com thaicloudsolutions.com +thaikinghost.com thaimonster.com +thegermainetruth.net +thehandmaderose.com thepushcase.com +ticdns.com +tigo.bo +toledofibra.net.br +topdns.com totaal.net +totalplay.net tqh.ro traderlearningcenter.com +tradeukraine.site +traveleza.com +trwww.com +tsuzakij.com tullostrucking.com turbinetrends.com +twincitiesdistinctivehomes.com +tylerfordonline.com +uiyum.com ultragate.com +uneedacollie.com +unified.services unite.services urawasl.com us.servername.us +vagebond.net varvia.de +vbcploo.com +vdc.vn vendimetry.com vibrantwellnesscorp.com +virtualine.org +visit.docotor viviotech.us vlflgl.com volganet.ru +vrns.net +vulterdi.edu +vvondertex.com wallstreetsgossip.com +wamego.net +wanekoohost.com wealthexpertisepro.com web-login.eu weblinkinternational.com webnox.io +websale.net welllivinghive.com +westparkcom.com +wetransfer-eu.com +wheelch.me whoflew.com +whpservers.com wisdomhard.com wisewealthcircle.com +wisvis.com wodeniowa.com +wordpresshosting.xyz wsiph2.com xnt.mx +xodiax.com xpnuf.cn xsfati.us.com xspmail.jp @@ -362,5 +596,6 @@ yourciviccompass.com yourinvestworkbook.com yoursitesecure.net zerowebhosting.net +zmml.uk znlc.jp ztomy.com diff --git a/parsedmarc/resources/maps/psl_overrides.txt b/parsedmarc/resources/maps/psl_overrides.txt index ee4d5998..daa7f66d 100644 --- a/parsedmarc/resources/maps/psl_overrides.txt +++ b/parsedmarc/resources/maps/psl_overrides.txt @@ -1,6 +1,23 @@ -akura.ne.jp -amazonaws.com -cloudaccess.net -h-serv.co.uk -linode.com -plesk.page +-applefibernet.com +-c3.net.pl +-celsiainternet.com +-clientes-izzi.mx +-clientes-zap-izzi.mx +-imnet.com.br +-mcnbd.com +-smile.com.bd +-tataidc.co.in +-veloxfiber.com.br +-wconect.com.br +.amazonaws.com +.cloudaccess.net +.ddnsgeek.com +.fastvps-server.com +.in-addr-arpa +.in-addr.arpa +.kasserver.com +.kinghost.net +.linode.com +.linodeusercontent.com +.na4u.ru +.sakura.ne.jp diff --git a/parsedmarc/utils.py b/parsedmarc/utils.py index ec3a0895..486b37c0 100644 --- a/parsedmarc/utils.py +++ b/parsedmarc/utils.py @@ -44,6 +44,12 @@ parenthesis_regex = re.compile(r"\s*\(.*\)\s*") null_file = open(os.devnull, "w") mailparser_logger = logging.getLogger("mailparser") mailparser_logger.setLevel(logging.CRITICAL) +psl = publicsuffixlist.PublicSuffixList() +psl_overrides_path = str(files(parsedmarc.resources.maps).joinpath("psl_overrides.txt")) +with open(psl_overrides_path) as f: + psl_overrides = [line.rstrip() for line in f.readlines()] + while "" in psl_overrides: + psl_overrides.remove("") class EmailParserError(RuntimeError): @@ -78,7 +84,8 @@ def get_base_domain(domain): .. note:: Results are based on a list of public domain suffixes at - https://publicsuffix.org/list/public_suffix_list.dat. + https://publicsuffix.org/list/public_suffix_list.dat and overrides included in + parsedmarc.resources.maps.psl_overrides.txt Args: domain (str): A domain or subdomain @@ -87,8 +94,12 @@ def get_base_domain(domain): str: The base domain of the given domain """ - psl = publicsuffixlist.PublicSuffixList() - return psl.privatesuffix(domain) + domain = domain.lower() + publicsuffix = psl.privatesuffix(domain) + for override in psl_overrides: + if domain.endswith(override): + return override.strip(".").strip("-") + return publicsuffix def query_dns(domain, record_type, cache=None, nameservers=None, timeout=2.0): diff --git a/pyproject.toml b/pyproject.toml index 43b2f589..f7dd08df 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -55,6 +55,7 @@ dependencies = [ "tqdm>=4.31.1", "urllib3>=1.25.7", "xmltodict>=0.12.0", + "PyYAML>=6.0.3" ] [project.optional-dependencies]