Unverified60% confidenceFactExact time
DNS queries can encode arbitrary data in TXT records or subdomains, making them a covert communication channel—a technique that has long been documented in APT attacks.
2
Sources
60%
Confidence
Long-term
Relevance
7/6/2026
First Seen
Sources
Related Claims
UnverifiedDNS在诞生前依赖由SRI-NIC维护的集中式HOSTS.TXT文件进行主机名到地址的映射73% similarUnverified将联系方式直接暴露在公开DNS记录中可能带来垃圾信息和滥用问题，类似于早年公开WHOIS信息成为垃圾邮件和诈骗温床71% similarUnverifiedSecurity vendors perform large-scale correlation analysis using passive DNS data, certificate transparency logs, and threat intelligence sharing platforms (such as MISP) to identify abusive domains.68% similarUnverified子域名发现的技术手段包括DNS字典爆破和证书透明度日志查询，常用工具有subfinder、amass和OneForAll68% similarUnverifiedDNS over HTTPS (DoH) encapsulates DNS queries within encrypted HTTPS traffic, rendering traditional detection methods based on plaintext DNS traffic analysis ineffective.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/113152API
curl https://kongchang.com/api/v1/knowledge/claims/113152MCP
get_claim(id=113152)