payload:
    - +.internetdownloadmanager.com
    - +.registeridm.com
    - +.tonec.com