Unverified60% confidenceFactExact time
DNS queries can encode arbitrary data in TXT records or subdomains, making them a covert communication channel—a technique that has long been documented in APT attacks.
2
Sources
60%
Confidence
Long-term
Relevance
7/6/2026
First Seen
Sources
Related Claims
UnverifiedBy traditional design, DNS queries are plaintext and unauthenticated, and intermediary devices can preemptively return forged addresses, achieving DNS pollution and hijacking.74% similarUnverifiedDNS在诞生前依赖由SRI-NIC维护的集中式HOSTS.TXT文件进行主机名到地址的映射73% similarUnverified将联系方式直接暴露在公开DNS记录中可能带来垃圾信息和滥用问题，类似于早年公开WHOIS信息成为垃圾邮件和诈骗温床71% similarUnverifiedSecurity vendors perform large-scale correlation analysis using passive DNS data, certificate transparency logs, and threat intelligence sharing platforms (such as MISP) to identify abusive domains.68% similarUnverified子域名发现的技术手段包括DNS字典爆破和证书透明度日志查询，常用工具有subfinder、amass和OneForAll68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/113152API
curl https://kongchang.com/api/v1/knowledge/claims/113152MCP
get_claim(id=113152)