You followed the DNS trail from team01 all the way to the attacker's command-and-control host. Intel recovered — submit this flag in CTFd to score the Act.
The flag is the same for every team — the hunt is what scores. Now pivot to the next Act and keep the pressure on.