https://www.validin.com/blog/hunting-lazarus-dns-history-host-responses/