I can only speculate about the countless domains targeted to specific users. I can only assume. Based on company cyber defense position, the domains exist so that if clicked on , your entire systems , all devices will be infected , information is gathered life will be compromised by extensive non stop monitoring. We likely end up in botnets and under control of very organized bot masters. I can say with certainty, not everyone being monitored in is a criminal. | Packed Foundry DGA domains | http://www.hosannachristian.org/ | https://web.archive.org/web/20151223222246/http://www.hosannachristian.org/ | IDS Detections: • Possible Worm W32.Svich or Other Infection • Request for setting.doc Yahlover Checkin Request (setting.doc) • HTTP request for .exe file with no User-Agent • Terse alphanumeric executable downloader high likelihood of being hostile #worm #network_icmp #trojan #virtool #dga #foundry #virtool #packer #palantir_related #microsoft #gmail_malicious #why?