more refactoring
normalize subdomains to bare domain when checking for third party