You could run into a problem with contains.
How about this.
www.mcafee.com.hackersite.com.ru
It contains mcafee.com
________________________________
Subject: Re: McAfee Updates URLs
Can't really think of a reason why one would be better than the other
(ends or contains).