[Num5kull]

most server http addresses are found in every trojan easily apart from things like Zeus that encrypts the config. But even then a http proxy or any number of tools can fetch them. Its having hosting and good secure code that makes it work
Great post !