For your exclusions you only require the Web Shield exclusions but I don’t know why you would want to exclude those sites anyway, if those sites were to be hacked then then that would be bad luck for you being that you excluded them :o