5axzi7.dnslog.cn

Used for out-of-band callback checks, indicating attacker control.

Checked against every article that reports it before entering the IOC feed.