Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/nsabuff_miner.txt

s.csrss.website
sky.hobuff.info
t.honker.info
x.csrss.website