Domains that where included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_newsbeef.txt

chrome-up.date
msservice.site
service.chrome-up.date
service1.chrome-up.date
webmaster.serveirc.com