Researchers identified 45 previously unreported domains linked to Salt Typhoon and UNC4841, revealing shared infrastructure and persistent cyberespionage efforts, with some domains active since 2020 and facilitating long-term, stealthy access to targeted networks. Organizations are urged to check DNS logs for potential compromise, as one domain registered in April 2025 suggests potential renewed UNC4841 activity.