Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_deathstalker.txt

allmedicalpro.com
audio-azure.com
azure-affiliate.com
footersig.pythonanywhere.com
globalsignature.pythonanywhere.com
mailservice.pythonanywhere.com
mailservices.pythonanywhere.com
mailsignature.pythonanywhere.com
mailsigning.pythonanywhere.com
scan-eset.com
service-azure.com