Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/osx_keydnap.txt

g5wcesdfjzne7255.onion.to
r2elajikcosf7zee.onion.to