Domains that where included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/cardinalrat.txt

d2nz6secq3489l.cloudfront.net
lvsys.com
speednet.fun