polonus
31
Well the attacker is not gonna tell you or us how it was done, but an attacker could ask for instance where 1v2w3t.google.com is, knowing a caching server is unlikely to resolve such an entry. From that point there are a lot of possibilities…
polonus