domain whitelist - subdomain km