payload:  
  # > PayPal
  # - User-Agent,PayPal*
  - DOMAIN-KEYWORD,paypal
  - DOMAIN-SUFFIX,paypal.com
  - DOMAIN-SUFFIX,paypalobjects.com