nope, basically, allow first domain levels + the ones that you know of - permanently - , and set as untrusted anything stats or ads related. You can easily tell by the names generally. If you made a mistake and something you expect doesn’t display on a web page, check again what you set as untrusted, you can always reverse what you did.