Three have been charged over the attack domains that officials say ‘pose a significant national threat’