Domains that where included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_mercenaryamanda.txt

2mblk.com
basicservicemy.com
chromeperfection.com
com-website33.biz
corn-en-us.com
corn-fr-fr.com
corn-lang-eng.com
corn-servicelogin.com
corn-ukr.com
economyfeeds.com
hathwaynetwork.com
mailcommute.com
mailserveroutlook.com
mailtickr.com
msrdr.com
msrwr.com
santanaservice.com
serverforhome.com
shortenup.com
tineeurl.com