function FindProxyForURL(url, host) {
    // Array of domains to bypass proxy (go DIRECT)
    var directDomains = [
        ".1e100.net",
        ".1rx.io",
        ".2mdn.net",
        ".33across.com",
        ".35.52.135",
        ".360cities.net",
        ".360gigapixels.com",
        ".3lift.com",
        ".8notes.com",
        ".a-mo.net",
        ".abcya.com",
        ".act-rapidreview-ondemand.kaptest.com",
        ".acuityplatform.com",
        ".ada.support",
        ".adaptv.advertising.com",
        // ... (all 700+ domains from your list, deduplicated and sorted) ...
        "zoom.com",
        "zoom.us"
    ];

    // Create a regex pattern: matches any domain suffix from the list
    var pattern = new RegExp("(" + directDomains.map(d => d.replace(/\./g, "\\.")).join("|") + ")$", "i");

    // Test if host matches any direct domain
    if (pattern.test(host)) {
        return "DIRECT";
    }

    // Internal network check
    if (isInNet(myIpAddress(), "10.0.0.0", "255.0.0.0")) {
        if (isResolvable("fctc-pdc.fcschools.net")) {
            return "DIRECT";
        }
    }

    // Internal FQDNs that bypass proxy
    if (dnsDomainIs(host, ".fcschools.net")) {
        return "DIRECT";
    }

    // Default: Send all other traffic to proxy with failover
    return "PROXY franklin-sec.zs.ncren.net:9443; PROXY franklin-pri.zs.ncren.net:9443";
}