SynkLoader TrafficRedirector Backconnect Proxy C2 (dondermicapp.net)

Detects network activity (DNS, TLS SNI, and HTTP Host) associated with the SynkLoader malware's command-and-control infrastructure using the domain 'dondermicapp.net'.