@FlaxSearch @ApacheSolr I think the remote code execution is one scenario, another one is to point it to a subdomain you own where the name is some env (like aws secrets). Not even code executed on your machine, but looking at the dns logs you get all you need.