false_flag follows these domains