Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/android_xhelper.txt

cooktracking.com
dc.g1ee.com
facebook1mob.com
koapkmobi.com
ks7br7.3q03on.com
lp.cooktracking.com
okyesmobi.com
ykbh.k818ax.com