Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_ta428.txt

aircraft.tsagagaar.com
bloomberg.mefound.com
bloomberg.ns02.biz
coms.documentmeda.com
custom.songuulcomiss.com
documentmeda.com
ecustoms-mn.com
freenow.chickenkiller.com
gazar.ecustoms-mn.com
go.vegispaceshop.org
gogonews.organiccrap.com
govi-altai.ecustoms-mn.com
niigem.olloo-news.com
niiriip.com
nmcustoms.https443.org
nubia.tsagagaar.com
olloo-news.com
oolnewsmongol.ddns.info
songuulcomiss.com
tsagagaar.com
vzglagtime.net