Context:

• whitelist false positive domain mitchellkrogza/phishing#380
• False positive still in effect a long time after whitelisting PR merge mitchellkrogza/phishing#382

These domains (*.idtech.no) host test environments for my employer and are visited by integrators, not end users at large.

Possible reasons we were flagged to begin with:

We (BankID) use CSP policies to enforce secure environments for our end users as breaches could lead to losing their life savings, seeing as BankID is accepted as the login provided for all Norwegian banks.

We strictly adhere to GDPR.

Some of these services are OIDC implementation, which can involve chaining multiple redirects in order to transport authentication codes via URL though multiple layers of OIDC flows. These redirect chains may be interpreted by some as tracking, but we do not track our users other than what's described in our privacy policy in order to protect their digital identity, which all banks and all end users who use our product have explicitly agreed to.

For more info on BankID, see https://bankid.no/en/what-is-bankid

Closes #1758