Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_potao.txt

mntexpress.com
truecryptrussia.ru