payload:
- +.internetdownloadmanager.com
- +.registeridm.com
- +.tonec.com