Use Maltrieve UA for list sites, user-defined for malware servers