<commit_before># Copyright (c) 2014-2015 <NAME> (@stamparm)
# See the file 'LICENSE' for copying permission

localhost
127.0.0.1

# triggering suspicious long (sub)domain names (note: this is not whitelist-ing all related (e.g. URL) trails)

gstatic.com
akadns.net
sophosxl.net
sophosxl.com
edgesuite.net
yahoodns.net
microsoft.com
googlevideo.com
mcafee.com
cloudfront.net
akadns.net
google.com
yimg.com
live.com
a-msedge.net
pandasecurity.com
googleapis.com
akamaihd.net
trendmicro.com
amazonaws.com
netdna-cdn.com
googlecode.com
rackcdn.com
mailprotector.net
googleusercontent.com
hotmail.com
nsatc.net
bitdefender.net
fastly.net
cedexis-radar.net
mailshell.net
gexperiments1.com
gexperiments2.com
gexperiments3.com
siteforce.com
fbcdn.net
ipv6test.net
mailshell.net
cloudapp.net
verisign.net
herokuapp.com
outlook.com
elasticbeanstalk.com
googledrive.com
googlegroups.com
senderbase.org<commit_msg>Update of whitelist (focused on the suspicious .exe downloading heuristics)<commit_after># Copyright (c) 2014-2015 <NAME> (@stamparm)
# See the file 'LICENSE' for copying permission

localhost
127.0.0.1

# note: use second level domains in following sections as those are being checked for whitelist-ing in respective heuristic checks

# triggering suspicious long (sub)domain names (note: this is not whitelist-ing all related (e.g. URL) trails)

gstatic.com
akadns.net
sophosxl.net
sophosxl.com
edgesuite.net
yahoodns.net
microsoft.com
googlevideo.com
mcafee.com
cloudfront.net
akadns.net
google.com
yimg.com
live.com
a-msedge.net
pandasecurity.com
googleapis.com
akamaihd.net
trendmicro.com
amazonaws.com
netdna-cdn.com
googlecode.com
rackcdn.com
mailprotector.net
googleusercontent.com
hotmail.com
nsatc.net
bitdefender.net
fastly.net
cedexis-radar.net
mailshell.net
gexperiments1.com
gexperiments2.com
gexperiments3.com
siteforce.com
fbcdn.net
ipv6test.net
mailshell.net
cloudapp.net
verisign.net
herokuapp.com
outlook.com
elasticbeanstalk.com
googledrive.com
googlegroups.com
senderbase.org
e5.sk

# to ignore in direct exe downloads

windowsupdate.com
adobe.com
gvt1.com
microsoft.com
google.com
macromedia.com
real.com
sun.com
avast.com
googleapis.com
hp.com
skype.com
mcafee.com
intel.com
mozilla.net
toshiba.com
oracle.com
{'fraction_non_alphanumeric': 0.0810205908683975, 'fraction_numerical': 0.017009847806624886, 'mean_word_length': 5.385714285714286, 'pattern_counts': {'":': 0, '<': 5, '<?xml version=': 0, '>': 5, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 2, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 2, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7619500', 'n_tokens_mistral': 892, 'n_tokens_neox': 831, 'n_words': 203}