These domains belong to payment providers which we use. They demand not to proxy request, because this increases fraud risk. All other domains are always proxied when you turn VPN on.