Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_chafer.txt

0ffice36o.com
adobelicence.com
ctci.ir
defender-update.com
dropboxengine.com
hpserver.online
microsoftcert.xyz
msn-com.dynu.net
mycrossweb.com
offsetweb.com
sabre-airlinesolutions.com
sabre-css.com
saveingone.com
stackwebonline.com
updatenodes.site
updatesecuritypatch.com
websys-corpo.com
win10-update.com
win7-update.com
windows-update.dynu.net
xn--mgbfv9eh74d.com
ytb.services