TCH HUM F1 f10r3s The Phantom Domains: How Nation-State Hackers Hide, and How Researches Find Them Anyway A learning journey into the forensics of malicious infrastructure