The destination address to match. Supported formats are as follows:
ip-address: An IPv4 address.
ip-address/prefix: A network address, where 0.0.0.0/0 matches any network.
ip-address–ip-address: A range of contiguous IP addresses; for example, 192.168.1.1–192.168.1.150.
!ip-address: Matches all IP addresses except the one specified.
!ip-address/prefix: Matches all network addresses except the one specified.
!ip-address–ip-address: Matches all IP addresses except those in the specified range.
If both address and port are specified, the packet is considered a match only if both the address and the port match.
So you can’t have a rule with a domain name.