C2 domain with multiple subdomains (defs, mails) used for attacker command-and-control infrastructure
