🔗 Domains & URLs

URLs extracted from attacker shell commands — malware drop points, C2 endpoints. Trailing shell punctuation is stripped, URLs with non-routable hosts (RFC1918, loopback) are dropped.