Use MS own blocklist also make a whitelist using nslookup

https://www.microsoft.com/en-us/download/details.aspx?id=53602