Sucuri soon discovered that all these websites had been registered through NameCheap, a domain name registrar, and were using the company's FreeDNS service to redirect their domain name queries to the server IP address on which the site was hosted.Regarding how the malicious DNS entry ended up...