Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_xdspy.txt

365downloading.com
boborux.com
cracratutu.com
daftsync.com
documentsklad.com
download-365.com
downloadsprimary.com
dropsklad.com
easytosay.org
ferrariframework.com
filedownload.email
getthatupdate.com
jerseygameengine.com
maiwegwurst.com
minisnowhair.com
nomatterwhat.info
officeupdtcentr.com
seatwowave.com
theslideshare.com
wildboarcontest.com