Hacker News Reader

And why would they not then use randomly generated domain names, instead of hardcoding domains that could be registered?

The MalwareTech article that documents this best, https://www.malwaretech.com/2017/05/how-to-accidentally-stop... , uses Necurs as an example of a trojan that uses randomly generated domain names, so probably not at technical reason.

Good point, although randomly generated domain names can exist.