Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_windshift.txt

flux2key.com
string2me.com