https://jscrambler.com/blog/stripe-api-skimming-campaign