payload:
  - 'onedrive.com'
  #- 'onedrive.live.com'
  #- 'login.live.com'
  - 'g.live.com'
  - 'spoprod-a.akamaihd.net'
  - 'p.sfx.ms'
  - 'oneclient.sfx.ms'
  - 'fabric.io'
  - 'vortex.data.microsoft.com'
  - 'posarprodcssservice.accesscontrol.windows.net'
  - 'redemptionservices.accesscontrol.windows.net'
  - 'token.cp.microsoft.com/'
  - 'tokensit.cp.microsoft-tst.com/'
  - 'vas.samsungapps.com'
  - 'odc.officeapps.live.com'
  #- 'login.windows.net'
  #- 'login.microsoftonline.com'
  - 'storage.live.com'
  - 'favorites.live.com'
  - 'oauth.live.com'
  - 'photos.live.com'
  - 'skydrive.live.com'
  #- 'api.live.net'
  #- 'apis.live.net'
  - 'docs.live.net'
  - 'policies.live.net'
  - 'settings.live.net'
  - 'skyapi.live.net'
  - 'snapi.live.net'
  - 'storage.msn.com'
  #- '+.onedrive.com'
  - '+.mesh.com'
  - '+.microsoft.com'
  - '+.crashlytics.com'
  - '+.office.com'
  - '+.officeapps.live.com'
  - '+.aria.microsoft.com'
  - '+.mobileengagement.windows.net'
  - '+.branch.io'
  - '+.adjust.com'
  - '+.servicebus.windows.net'
  - '+.files.1drv.com'
  #- '+.onedrive.live.com'
  - '+.storage.live.com'
  - '+.groups.office.live.com'
  - '+.groups.photos.live.com'
  - '+.groups.skydrive.live.com'
  - '+.docs.live.net'
  - '+.policies.live.net'
  - '+.settings.live.net'
  - '+.livefilestore.com'
  - '+.storage.msn.com'