Domains that where included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_bahamut.txt

airfitgym.com
ambicluster.com
bulletinalerts.com
capsnit.com
cdn-icloud.co
citrusquad.com
crawloofle.com
devicesupport-rnicrosoft.com
everification-session-load.com
flux2key.com
freepunjab2020.info
gateway-yahoo.com
ghelp.co
healthclubfun.com
i3mode.com
imging.site
ios-certificate-update.com
justsikhthings.com
leelee.dnset.com
login-private.com
logstrick.com
m0-rnaiil-siina-chn-reload.everification-session-load.com
mail-incc.com
mail-king.com
mail-validation.info
mailinfo-bh.com
me-yahoo.com
memoadvicr.com
middleeastleaks.com
mideastleaks.com
mindcraftstore.com
musicbandfiles.com
onlinedomain.link
out-look-mail-bh.com
portal549.com
privacylog.info
prontexim.com
referfile.com
regditogo.com
rhc-jo.com
rnaiill2-rnaill-slna-m0.everification-session-load.com
rnail-appld-oath-varfiction.everification-session-load.com
scrollayer.com
service-authorization.com
sikhforjustice.org
string2me.com
tierradom.com
treemanic.com
user-privacy.com
uyghuri.51vip.biz
uyghuri.51vip.bizuyghurie.51vip.bizuygur.5166.info
uyghurie.51vip.biz
uygur.5166.info
uygur.51vip.biz
uygur.51vip.bizuygur.eicp.netuygur.xicp.netvlprnaiill2-rnaill-slna.m0.everification-session-load.com
uygur.eicp.net
uygur.xicp.net
vlprnaiill2-rnaill-slna.m0.everification-session-load.com
weddnest.com
wpitcher.com
yes2khalistan.org
zhqdgk.com
zovwelle.com