payload:
    - DOMAIN-SUFFIX,haveibeenpwned.com
    - DOMAIN-SUFFIX,pwnedpasswords.com