The list of suspicious hostnames is not stored in plaintext within the code; instead, it is Base64-encoded and then encrypted using a simple XOR operation with a key of 91. Once decoded, it reveals domains belonging to Chinese companies, keywords related to artificial intelligence laboratories, and
